<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.44016,2.48209,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="83.218.8.109" src_port="80"/>
      <from sec="1144127197" usec="0"/>
      <to sec="1144127423" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="161.223.8.109" src_port="80"/>
      <from sec="1144127199" usec="0"/>
      <to sec="1144127423" usec="0"/>
    </slice>
    <from sec="1144127197" usec="0"/>
    <to sec="1144127423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="139" proto="tcp" src_ip="213.58.213.42" src_port="80"/>
      <from sec="1144127678" usec="0"/>
      <to sec="1144127679" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="139" proto="tcp" src_ip="195.14.245.42" src_port="80"/>
      <from sec="1144127677" usec="0"/>
      <to sec="1144127681" usec="0"/>
    </slice>
    <from sec="1144127677" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="139" proto="tcp" src_ip="208.139.221.177"/>
      <from sec="1144127687" usec="0"/>
      <to sec="1144127690" usec="0"/>
    </slice>
    <from sec="1144127687" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="55.78.96.93" proto="icmp"/>
      <filter dst_ip="55.78.96.93" proto="icmp"/>
      <filter dst_ip="55.78.96.93" proto="icmp"/>
      <filter dst_ip="55.78.96.93" proto="icmp"/>
      <from sec="1144127318" usec="0"/>
      <to sec="1144127321" usec="0"/>
    </slice>
    <from sec="1144127318" usec="0"/>
    <to sec="1144127321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.144.161.84" proto="tcp" src_port="139"/>
      <filter dst_ip="35.144.161.84" proto="tcp" src_port="139"/>
      <filter dst_ip="35.144.161.84" proto="tcp" src_port="139"/>
      <filter dst_ip="35.144.161.84" proto="tcp" src_port="139"/>
      <from sec="1144127250" usec="0"/>
      <to sec="1144127254" usec="0"/>
    </slice>
    <from sec="1144127250" usec="0"/>
    <to sec="1144127254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.194.99.92" proto="icmp"/>
      <filter dst_ip="167.194.99.92" proto="icmp"/>
      <filter dst_ip="167.194.99.92" proto="icmp"/>
      <filter dst_ip="167.194.99.92" proto="icmp"/>
      <from sec="1144127269" usec="0"/>
      <to sec="1144127273" usec="0"/>
    </slice>
    <from sec="1144127269" usec="0"/>
    <to sec="1144127273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.139.221.177" proto="icmp"/>
      <filter dst_ip="208.139.221.177" proto="icmp"/>
      <filter dst_ip="208.139.221.177" proto="icmp"/>
      <filter dst_ip="208.139.221.177" proto="icmp"/>
      <from sec="1144127687" usec="0"/>
      <to sec="1144127690" usec="0"/>
    </slice>
    <from sec="1144127687" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="37.245.88.224" proto="icmp"/>
      <filter dst_ip="37.245.88.224" proto="icmp"/>
      <filter dst_ip="37.245.88.224" proto="icmp"/>
      <filter dst_ip="37.245.88.224" proto="icmp"/>
      <from sec="1144127368" usec="0"/>
      <to sec="1144127372" usec="0"/>
    </slice>
    <from sec="1144127368" usec="0"/>
    <to sec="1144127372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45837,2.397,901,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_24{
style=filled;
color=gray75;
43[label="38.131.163.150s;250pkt 250fpkt", shape=rectangle, color=red];
5099[label="38.131.163.150;249pkt 249fpkt", shape=pentagon, color=darkviolet];
7535[label="38.131.163.150;249pkt 249fpkt", shape=invtriangle, color=brown];
9181[label="38.131.163.150;249pkt 249fpkt", shape=invhouse, color=bisque];
stat24[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.131.163.150:1035, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1035: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
43--128[label="0.916667;99pkt 99fpkt"];
43--5099[label="1;249pkt 249fpkt"];
43--7535[label="1;249pkt 249fpkt"];
43--9181[label="1;249pkt 249fpkt"];
5099--7535[label="1;249pkt 249fpkt"];
5099--9181[label="1;249pkt 249fpkt"];
7535--9181[label="1;249pkt 249fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="38.131.163.150" src_port="1035"/>
    </slice>
    <from sec="1144127521" usec="0"/>
    <to sec="1144127535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
243[label="195.89.117.206;s;113pkt 113fpkt", shape=diamond, color=yellow];
314[label="132.19.51.52;s;317pkt 317fpkt", shape=diamond, color=yellow];
748[label="132.19.90.62;s;63pkt 63fpkt", shape=diamond, color=yellow];
1168[label="208.205.193.83;d;19pkt 19fpkt", shape=diamond, color=yellow];
1183[label="132.19.238.204;s;50pkt 50fpkt", shape=diamond, color=yellow];
1400[label="216.73.212.130;d;270pkt 270fpkt", shape=diamond, color=yellow];
1959[label="132.19.53.210;s;83pkt 83fpkt", shape=diamond, color=yellow];
2498[label="152.95.238.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
5495[label="132.19.43.183;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5775[label="195.89.117.206;123pkt 123fpkt", shape=pentagon, color=darkviolet];
6046[label="128.28.25.229;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7581[label="132.19.192.154;30pkt 30fpkt", shape=invtriangle, color=brown];
8203[label="128.28.25.229;40pkt 40fpkt", shape=invtriangle, color=brown];
8754[label="132.19.137.66;135pkt 135fpkt", shape=invhouse, color=bisque];
9209[label="132.19.192.154;29pkt 29fpkt", shape=invhouse, color=bisque];
9379[label="132.19.219.186;12pkt 12fpkt", shape=invhouse, color=bisque];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.51.52:*, *:80}[26.3852%]&lt;BR/&gt;{*:*, 216.73.212.130:80}[23.7467%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.7698%)&lt;BR/&gt; 443: (4.62491%)&lt;BR/&gt; 49905: (1.748%)&lt;BR/&gt; 1863: (1.01966%)&lt;BR/&gt; 110: (0.254916%)&gt;];
}
243--311[label="0.0442478;5pkt 5fpkt"];
243--511[label="0.0131579;1pkt 1fpkt"];
243--684[label="0.221239;25pkt 25fpkt"];
243--1011[label="0.0442478;5pkt 5fpkt"];
243--1081[label="0.0176991;2pkt 2fpkt"];
243--1184[label="1;1pkt 1fpkt"];
243--1268[label="0.00884956;1pkt 1fpkt"];
243--1361[label="0.0277778;1pkt 1fpkt"];
243--1442[label="0.030303;1pkt 1fpkt"];
243--1555[label="0.00934579;1pkt 1fpkt"];
243--1683[label="0.0357143;2pkt 2fpkt"];
243--1898[label="0.0212766;2pkt 2fpkt"];
243--2210[label="0.0416667;2pkt 2fpkt"];
243--2574[label="0.0121951;1pkt 1fpkt"];
243--2846[label="1;1pkt 1fpkt"];
243--3088[label="0.0181818;1pkt 1fpkt"];
243--3296[label="0.00884956;1pkt 1fpkt"];
243--5775[label="1;113pkt 113fpkt"];
314--684[label="0.0033557;1pkt 1fpkt"];
314--856[label="1;67pkt 67fpkt"];
314--995[label="0.00711744;2pkt 2fpkt"];
314--1066[label="0.0496894;8pkt 8fpkt"];
314--1095[label="0.00552486;1pkt 1fpkt"];
314--1105[label="0.545161;169pkt 169fpkt"];
314--1448[label="0.00746269;1pkt 1fpkt"];
314--1555[label="0.00934579;1pkt 1fpkt"];
314--1903[label="0.0454545;6pkt 6fpkt"];
314--2175[label="0.0540541;2pkt 2fpkt"];
314--2565[label="0.04;1pkt 1fpkt"];
314--2574[label="0.109756;9pkt 9fpkt"];
314--3292[label="0.00630915;2pkt 2fpkt"];
314--3303[label="0.00630915;2pkt 2fpkt"];
314--3975[label="0.996845;316pkt 316fpkt"];
748--869[label="0.126984;8pkt 8fpkt"];
748--1168[label="1;19pkt 19fpkt"];
748--1403[label="0.015873;1pkt 1fpkt"];
748--1513[label="0.0634921;4pkt 4fpkt"];
748--1517[label="0.015873;1pkt 1fpkt"];
748--2324[label="0.031746;2pkt 2fpkt"];
748--2368[label="0.0952381;6pkt 6fpkt"];
1183--1965[label="0.4;20pkt 20fpkt"];
1183--5760[label="1;50pkt 50fpkt"];
1183--8004[label="1;50pkt 50fpkt"];
1400--1669[label="0.00952381;1pkt 1fpkt"];
1400--1705[label="0.110294;15pkt 15fpkt"];
1400--2239[label="0.075;3pkt 3fpkt"];
1400--2258[label="0.227723;23pkt 23fpkt"];
1400--2283[label="0.0806452;5pkt 5fpkt"];
1400--2432[label="0.0175439;1pkt 1fpkt"];
1400--2757[label="0.0245902;3pkt 3fpkt"];
1400--2831[label="0.0037037;1pkt 1fpkt"];
1400--2873[label="0.00990099;1pkt 1fpkt"];
1400--3037[label="0.0277778;2pkt 2fpkt"];
1400--3049[label="0.035503;6pkt 6fpkt"];
1400--3152[label="0.075;3pkt 3fpkt"];
1400--3296[label="0.0777778;21pkt 21fpkt"];
1400--3389[label="0.05;3pkt 3fpkt"];
1400--3461[label="0.015873;1pkt 1fpkt"];
1400--3816[label="0.0793651;5pkt 5fpkt"];
1400--3936[label="0.240741;65pkt 65fpkt"];
1400--4078[label="0.0289855;2pkt 2fpkt"];
1400--4114[label="0.0168776;4pkt 4fpkt"];
1400--4125[label="0.025974;2pkt 2fpkt"];
1400--4155[label="0.111111;15pkt 15fpkt"];
1400--4549[label="0.0615385;4pkt 4fpkt"];
1400--4560[label="0.0357143;1pkt 1fpkt"];
1400--4577[label="0.0175439;2pkt 2fpkt"];
1400--4642[label="0.133333;10pkt 10fpkt"];
1400--4954[label="0.411765;14pkt 14fpkt"];
1400--5162[label="0.366667;11pkt 11fpkt"];
1400--5163[label="0.321429;9pkt 9fpkt"];
1400--5233[label="0.0175439;1pkt 1fpkt"];
1400--5537[label="0.692308;9pkt 9fpkt"];
1400--5578[label="0.1;3pkt 3fpkt"];
1400--5909[label="0.0714286;1pkt 1fpkt"];
1400--6125[label="0.117647;2pkt 2fpkt"];
1400--6398[label="0.015873;1pkt 1fpkt"];
1400--6632[label="0.0806452;5pkt 5fpkt"];
1400--6715[label="0.240741;65pkt 65fpkt"];
1400--6812[label="0.0289855;2pkt 2fpkt"];
1400--6847[label="0.025974;2pkt 2fpkt"];
1400--6869[label="0.110294;15pkt 15fpkt"];
1400--7167[label="0.0175439;2pkt 2fpkt"];
1400--7206[label="0.131579;10pkt 10fpkt"];
1400--7434[label="0.411765;14pkt 14fpkt"];
1400--7581[label="0.366667;11pkt 11fpkt"];
1400--7582[label="0.310345;9pkt 9fpkt"];
1400--7835[label="0.75;9pkt 9fpkt"];
1400--7869[label="0.103448;3pkt 3fpkt"];
1400--8105[label="0.0714286;1pkt 1fpkt"];
1400--8261[label="0.117647;2pkt 2fpkt"];
1400--8452[label="0.015625;1pkt 1fpkt"];
1400--8598[label="0.0793651;5pkt 5fpkt"];
1400--8713[label="0.0294118;2pkt 2fpkt"];
1400--8754[label="0.111111;15pkt 15fpkt"];
1400--8945[label="0.0173913;2pkt 2fpkt"];
1400--9114[label="0.411765;14pkt 14fpkt"];
1400--9209[label="0.37931;11pkt 11fpkt"];
1400--9379[label="0.75;9pkt 9fpkt"];
1400--9397[label="0.1;3pkt 3fpkt"];
1400--9656[label="0.117647;2pkt 2fpkt"];
1959--2139[label="0.0120482;1pkt 1fpkt"];
1959--2350[label="0.0588235;2pkt 2fpkt"];
1959--3296[label="0.0240964;2pkt 2fpkt"];
1959--5825[label="1;83pkt 83fpkt"];
1959--8045[label="0.987952;82pkt 82fpkt"];
2498--3296[label="1;1pkt 1fpkt"];
2498--5922[label="1;1pkt 1fpkt"];
5495--7806[label="1;47pkt 47fpkt"];
5495--9354[label="1;47pkt 47fpkt"];
6046--8203[label="1;40pkt 40fpkt"];
6046--9618[label="1;39pkt 39fpkt"];
7581--9209[label="1;29pkt 29fpkt"];
8203--9618[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.51.52"/>
      <filter dst_ip="216.73.212.130" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
202[label="49.26.191.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
203[label="161.223.194.66;d;21pkt 21fpkt", shape=diamond, color=yellow];
4703[label="38.42.21.115;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4730[label="38.42.51.119;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7253[label="38.42.21.115;14pkt 14fpkt", shape=invtriangle, color=brown];
7274[label="38.42.51.119;9pkt 9fpkt", shape=invtriangle, color=brown];
8999[label="38.42.21.115;13pkt 13fpkt", shape=invhouse, color=bisque];
9011[label="38.42.51.119;10pkt 10fpkt", shape=invhouse, color=bisque];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.42.21.115:80, 161.223.194.66:*}[51.8519%]&lt;BR/&gt;{38.42.51.119:80, 195.89.106.58:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9011%)&lt;BR/&gt; 1436: (2.1978%)&lt;BR/&gt; 1432: (2.1978%)&lt;BR/&gt; 1430: (2.1978%)&lt;BR/&gt; 1429: (2.1978%)&gt;];
}
202--203[label="1;1pkt 1fpkt"];
203--4703[label="1;13pkt 13fpkt"];
203--4730[label="0.4;4pkt 4fpkt"];
203--7253[label="1;14pkt 14fpkt"];
203--7274[label="0.333333;3pkt 3fpkt"];
203--8999[label="1;13pkt 13fpkt"];
203--9011[label="0.4;4pkt 4fpkt"];
4703--7253[label="1;13pkt 13fpkt"];
4703--8999[label="1;13pkt 13fpkt"];
4730--7274[label="1;9pkt 9fpkt"];
4730--9011[label="1;10pkt 10fpkt"];
7253--8999[label="1;13pkt 13fpkt"];
7274--9011[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.194.66" src_ip="38.42.21.115" src_port="80"/>
      <filter dst_ip="195.89.106.58" src_ip="38.42.51.119" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45324,2.36967,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
10[label="208.73.255.110s;4pkt 4fpkt", shape=rectangle, color=red];
233[label="208.73.255.110;s;4pkt 4fpkt", shape=diamond, color=yellow];
4664[label="208.73.255.110;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7222[label="208.73.255.110;4pkt 4fpkt", shape=invtriangle, color=brown];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.73.255.110:7083, 147.13.36.46:3077}[25%]&lt;BR/&gt;{208.73.255.110:25265, 147.13.36.46:3077}[25%]&lt;BR/&gt;{208.73.255.110:29564, 147.13.36.46:3077}[25%]&lt;BR/&gt;{208.73.255.110:33531, 147.13.36.46:3077}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (50%)&lt;BR/&gt; 33531: (12.5%)&lt;BR/&gt; 29564: (12.5%)&lt;BR/&gt; 25265: (12.5%)&lt;BR/&gt; 7083: (12.5%)&gt;];
}
10--233[label="1;4pkt 4fpkt"];
10--1504[label="1;4pkt 4fpkt"];
10--4664[label="1;4pkt 4fpkt"];
10--7222[label="1;4pkt 4fpkt"];
233--1504[label="1;4pkt 4fpkt"];
233--4664[label="1;4pkt 4fpkt"];
233--7222[label="1;4pkt 4fpkt"];
4664--7222[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.73.255.110" src_port="33531"/>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.73.255.110" src_port="29564"/>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.73.255.110" src_port="25265"/>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.73.255.110" src_port="7083"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
23[label="39.204.218.223s;2pkt 2fpkt", shape=rectangle, color=red];
282[label="41.148.32.234;s;175pkt 175fpkt", shape=diamond, color=yellow];
442[label="39.204.218.223;s;17pkt 17fpkt", shape=diamond, color=yellow];
545[label="132.19.98.152;d;63pkt 63fpkt", shape=diamond, color=yellow];
1407[label="132.19.195.48;d;98pkt 98fpkt", shape=diamond, color=yellow];
1902[label="132.19.38.236;d;15pkt 15fpkt", shape=diamond, color=yellow];
2076[label="132.19.225.58;d;6pkt 6fpkt", shape=diamond, color=yellow];
2077[label="128.28.56.122;d;7pkt 7fpkt", shape=diamond, color=yellow];
6093[label="41.148.32.234;206pkt 206fpkt", shape=pentagon, color=darkviolet];
8241[label="41.148.32.234;206pkt 206fpkt", shape=invtriangle, color=brown];
9207[label="106.109.162.154;24pkt 24fpkt", shape=invhouse, color=bisque];
9471[label="106.109.162.203;26pkt 26fpkt", shape=invhouse, color=bisque];
9570[label="37.202.19.220;30pkt 30fpkt", shape=invhouse, color=bisque];
9640[label="41.148.32.234;205pkt 205fpkt", shape=invhouse, color=bisque];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.148.32.234:80, *:*}[46.9248%]&lt;BR/&gt;{*:80, 132.19.195.48:*}[22.0957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1481%)&lt;BR/&gt; 443: (1.71296%)&lt;BR/&gt; 2611: (0.277778%)&lt;BR/&gt; 2165: (0.277778%)&lt;BR/&gt; 33837: (0.231481%)&gt;];
}
23--282[label="0.5;1pkt 1fpkt"];
23--442[label="0.5;1pkt 1fpkt"];
23--1108[label="0.5;1pkt 1fpkt"];
23--3292[label="0.5;1pkt 1fpkt"];
23--3303[label="0.5;1pkt 1fpkt"];
23--6093[label="0.5;1pkt 1fpkt"];
23--8241[label="0.5;1pkt 1fpkt"];
23--9640[label="0.5;1pkt 1fpkt"];
282--333[label="0.02;1pkt 1fpkt"];
282--439[label="0.157895;3pkt 3fpkt"];
282--471[label="0.421053;8pkt 8fpkt"];
282--545[label="0.015873;1pkt 1fpkt"];
282--784[label="0.00571429;1pkt 1fpkt"];
282--821[label="0.037037;1pkt 1fpkt"];
282--865[label="0.153846;2pkt 2fpkt"];
282--907[label="0.28;49pkt 49fpkt"];
282--939[label="0.03;3pkt 3fpkt"];
282--1035[label="0.0454545;3pkt 3fpkt"];
282--1097[label="0.0145985;2pkt 2fpkt"];
282--1108[label="0.285714;4pkt 4fpkt"];
282--1249[label="0.0228571;4pkt 4fpkt"];
282--1407[label="0.0204082;2pkt 2fpkt"];
282--1647[label="0.0196078;1pkt 1fpkt"];
282--1902[label="0.133333;2pkt 2fpkt"];
282--1948[label="0.0714286;1pkt 1fpkt"];
282--2076[label="1;6pkt 6fpkt"];
282--2077[label="1;7pkt 7fpkt"];
282--2853[label="0.0342857;6pkt 6fpkt"];
282--2894[label="0.037037;2pkt 2fpkt"];
282--2925[label="0.0535714;3pkt 3fpkt"];
282--2953[label="0.25;3pkt 3fpkt"];
282--3015[label="0.28;49pkt 49fpkt"];
282--3288[label="0.165714;29pkt 29fpkt"];
282--3292[label="0.114286;20pkt 20fpkt"];
282--3303[label="0.114286;20pkt 20fpkt"];
282--6093[label="1;175pkt 175fpkt"];
282--8241[label="1;175pkt 175fpkt"];
282--9640[label="0.994286;174pkt 174fpkt"];
442--1249[label="0.0588235;1pkt 1fpkt"];
442--1407[label="0.0588235;1pkt 1fpkt"];
442--3292[label="0.352941;6pkt 6fpkt"];
442--3303[label="0.352941;6pkt 6fpkt"];
545--548[label="0.730159;46pkt 46fpkt"];
545--2286[label="0.222222;12pkt 12fpkt"];
545--3288[label="0.0634921;4pkt 4fpkt"];
545--3292[label="0.047619;3pkt 3fpkt"];
545--3303[label="0.047619;3pkt 3fpkt"];
545--5158[label="0.0869565;2pkt 2fpkt"];
545--5650[label="0.190476;12pkt 12fpkt"];
545--5744[label="0.0769231;2pkt 2fpkt"];
545--6093[label="0.015873;1pkt 1fpkt"];
545--6198[label="0.730159;46pkt 46fpkt"];
545--7577[label="0.0869565;2pkt 2fpkt"];
545--7923[label="0.190476;12pkt 12fpkt"];
545--7991[label="0.0769231;2pkt 2fpkt"];
545--8241[label="0.015873;1pkt 1fpkt"];
545--8317[label="0.730159;46pkt 46fpkt"];
545--9207[label="0.0833333;2pkt 2fpkt"];
545--9431[label="0.190476;12pkt 12fpkt"];
545--9471[label="0.0769231;2pkt 2fpkt"];
545--9640[label="0.015873;1pkt 1fpkt"];
545--9696[label="0.730159;46pkt 46fpkt"];
1407--1451[label="0.1;8pkt 8fpkt"];
1407--1633[label="0.181818;8pkt 8fpkt"];
1407--1782[label="0.0714286;1pkt 1fpkt"];
1407--1799[label="0.0357143;1pkt 1fpkt"];
1407--2849[label="0.03125;1pkt 1fpkt"];
1407--3216[label="0.1;8pkt 8fpkt"];
1407--3275[label="0.03125;1pkt 1fpkt"];
1407--3288[label="0.0102041;1pkt 1fpkt"];
1407--3292[label="0.0306122;3pkt 3fpkt"];
1407--3303[label="0.0306122;3pkt 3fpkt"];
1407--3564[label="0.253968;16pkt 16fpkt"];
1407--3726[label="0.0851064;8pkt 8fpkt"];
1407--5108[label="0.03125;1pkt 1fpkt"];
1407--5286[label="0.0816327;8pkt 8fpkt"];
1407--5318[label="0.37037;20pkt 20fpkt"];
1407--5896[label="0.0102041;1pkt 1fpkt"];
1407--5931[label="0.0714286;1pkt 1fpkt"];
1407--5946[label="1;31pkt 31fpkt"];
1407--6049[label="0.0232558;1pkt 1fpkt"];
1407--6093[label="0.0204082;2pkt 2fpkt"];
1407--6130[label="0.015873;1pkt 1fpkt"];
1407--6202[label="0.0232558;1pkt 1fpkt"];
1407--6465[label="0.253968;16pkt 16fpkt"];
1407--6578[label="0.0851064;8pkt 8fpkt"];
1407--7671[label="0.0816327;8pkt 8fpkt"];
1407--7689[label="0.37037;20pkt 20fpkt"];
1407--8130[label="1;31pkt 31fpkt"];
1407--8241[label="0.0204082;2pkt 2fpkt"];
1407--8264[label="0.016129;1pkt 1fpkt"];
1407--9271[label="0.0816327;8pkt 8fpkt"];
1407--9281[label="0.377358;20pkt 20fpkt"];
1407--9570[label="1;30pkt 30fpkt"];
1407--9640[label="0.0204082;2pkt 2fpkt"];
1407--9659[label="0.016129;1pkt 1fpkt"];
1902--2977[label="0.133333;2pkt 2fpkt"];
1902--3051[label="0.0666667;1pkt 1fpkt"];
1902--3288[label="0.133333;2pkt 2fpkt"];
1902--3292[label="0.0666667;1pkt 1fpkt"];
1902--3303[label="0.0666667;1pkt 1fpkt"];
1902--5144[label="0.0666667;1pkt 1fpkt"];
1902--5609[label="0.0666667;1pkt 1fpkt"];
1902--5830[label="0.0666667;1pkt 1fpkt"];
1902--6093[label="0.133333;2pkt 2fpkt"];
1902--6130[label="0.133333;2pkt 2fpkt"];
1902--7564[label="0.0666667;1pkt 1fpkt"];
1902--8048[label="0.0666667;1pkt 1fpkt"];
1902--8241[label="0.133333;2pkt 2fpkt"];
1902--8264[label="0.133333;2pkt 2fpkt"];
1902--9198[label="0.0666667;1pkt 1fpkt"];
1902--9513[label="0.0666667;1pkt 1fpkt"];
1902--9640[label="0.133333;2pkt 2fpkt"];
1902--9659[label="0.133333;2pkt 2fpkt"];
2076--3292[label="0.166667;1pkt 1fpkt"];
2076--3303[label="0.166667;1pkt 1fpkt"];
2076--6093[label="1;6pkt 6fpkt"];
2076--8241[label="1;6pkt 6fpkt"];
2076--9640[label="1;6pkt 6fpkt"];
2077--3292[label="0.142857;1pkt 1fpkt"];
2077--3303[label="0.142857;1pkt 1fpkt"];
2077--6093[label="1;7pkt 7fpkt"];
2077--8241[label="1;7pkt 7fpkt"];
2077--9640[label="1;7pkt 7fpkt"];
6093--8241[label="1;206pkt 206fpkt"];
6093--9640[label="1;205pkt 205fpkt"];
8241--9640[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter src_ip="41.148.32.234" src_port="80"/>
      <filter dst_ip="132.19.195.48" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45324,2.36967,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
17[label="132.19.144.162s;1pkt 1fpkt", shape=rectangle, color=red];
292[label="132.19.144.162;s;2pkt 2fpkt", shape=diamond, color=yellow];
293[label="67.53.192.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
5257[label="132.19.144.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7647[label="132.19.144.162;2pkt 2fpkt", shape=invtriangle, color=brown];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.144.162:1029, 196.206.188.119:1863}[50%]&lt;BR/&gt;{132.19.144.162:1071, 67.53.192.226:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1071: (28.5714%)&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 1863: (21.4286%)&lt;BR/&gt; 1029: (21.4286%)&gt;];
}
17--292[label="1;1pkt 1fpkt"];
17--293[label="1;1pkt 1fpkt"];
17--3296[label="1;1pkt 1fpkt"];
17--7647[label="1;1pkt 1fpkt"];
292--293[label="1;1pkt 1fpkt"];
292--3296[label="0.5;1pkt 1fpkt"];
292--5257[label="1;1pkt 1fpkt"];
292--7647[label="1;2pkt 2fpkt"];
293--3296[label="1;1pkt 1fpkt"];
293--7647[label="1;1pkt 1fpkt"];
5257--7647[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="67.53.192.226" dst_port="80" src_ip="132.19.144.162" src_port="1071"/>
      <filter dst_ip="196.206.188.119" dst_port="1863" src_ip="132.19.144.162" src_port="1029"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
303[label="132.19.69.142;s;10pkt 10fpkt", shape=diamond, color=yellow];
304[label="216.32.82.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
569[label="132.19.18.84;s;1018pkt 1018fpkt", shape=diamond, color=yellow];
736[label="196.206.1.36;d;25pkt 25fpkt", shape=diamond, color=yellow];
1049[label="210.245.255.25;d;31pkt 31fpkt", shape=diamond, color=yellow];
1095[label="38.220.245.215;d;181pkt 181fpkt", shape=diamond, color=yellow];
1198[label="84.114.27.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
1292[label="38.202.248.21;d;34pkt 34fpkt", shape=diamond, color=yellow];
1452[label="218.150.77.213;d;4pkt 4fpkt", shape=diamond, color=yellow];
1654[label="67.34.162.18;d;60pkt 60fpkt", shape=diamond, color=yellow];
1661[label="132.19.44.78;s;61pkt 61fpkt", shape=diamond, color=yellow];
1665[label="128.28.69.46;s;52pkt 52fpkt", shape=diamond, color=yellow];
1823[label="106.109.162.152;d;25pkt 25fpkt", shape=diamond, color=yellow];
2218[label="36.21.75.73;d;114pkt 114fpkt", shape=diamond, color=yellow];
2391[label="132.19.53.237;s;15pkt 15fpkt", shape=diamond, color=yellow];
2482[label="218.150.77.195;d;5pkt 5fpkt", shape=diamond, color=yellow];
2598[label="38.192.129.45;d;31pkt 31fpkt", shape=diamond, color=yellow];
2684[label="218.226.124.168;d;94pkt 94fpkt", shape=diamond, color=yellow];
2800[label="132.19.69.142;s;10pkt 10fpkt", shape=hexagon, color=black];
2938[label="38.202.248.21;d;30pkt 30fpkt", shape=hexagon, color=black];
3137[label="128.28.69.46;s;52pkt 52fpkt", shape=hexagon, color=black];
3180[label="132.19.18.84;s;1018pkt 1018fpkt", shape=hexagon, color=black];
3307[label="128.202.30.0;21pkt 21fpkt", shape=pentagon, color=darkviolet];
3805[label="132.19.51.36;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4001[label="132.19.212.54;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4375[label="132.19.18.84;1084pkt 1084fpkt", shape=pentagon, color=darkviolet];
4871[label="161.223.245.132;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4919[label="132.19.69.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5036[label="128.202.92.145;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5050[label="132.19.69.146;70pkt 70fpkt", shape=pentagon, color=darkviolet];
5388[label="132.19.44.172;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5725[label="161.223.198.201;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6061[label="161.223.198.230;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6128[label="132.19.53.237;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6628[label="132.19.51.36;23pkt 23fpkt", shape=invtriangle, color=brown];
6762[label="132.19.212.54;38pkt 38fpkt", shape=invtriangle, color=brown];
6978[label="132.19.44.78;2pkt 2fpkt", shape=invtriangle, color=brown];
7027[label="132.19.18.84;1083pkt 1083fpkt", shape=invtriangle, color=brown];
7506[label="132.19.69.146;69pkt 69fpkt", shape=invtriangle, color=brown];
7736[label="132.19.44.172;5pkt 5fpkt", shape=invtriangle, color=brown];
8852[label="132.19.18.84;1083pkt 1083fpkt", shape=invhouse, color=bisque];
9099[label="132.19.69.136;1pkt 1fpkt", shape=invhouse, color=bisque];
9160[label="132.19.69.146;69pkt 69fpkt", shape=invhouse, color=bisque];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.18.84:*, *:80}[45.8199%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.3299%)&lt;BR/&gt; 1863: (2.12621%)&lt;BR/&gt; 443: (1.92191%)&lt;BR/&gt; 9575: (1.24849%)&lt;BR/&gt; 143: (0.726392%)&gt;];
}
303--304[label="1;1pkt 1fpkt"];
303--736[label="0.2;2pkt 2fpkt"];
303--1292[label="0.3;3pkt 3fpkt"];
303--1690[label="0.1;1pkt 1fpkt"];
303--1823[label="0.2;2pkt 2fpkt"];
303--2800[label="1;10pkt 10fpkt"];
303--2938[label="0.3;3pkt 3fpkt"];
303--3296[label="0.3;3pkt 3fpkt"];
304--2800[label="1;1pkt 1fpkt"];
569--611[label="0.0147348;15pkt 15fpkt"];
569--736[label="0.04;1pkt 1fpkt"];
569--792[label="0.000982318;1pkt 1fpkt"];
569--957[label="0.0744681;7pkt 7fpkt"];
569--995[label="0.0177936;5pkt 5fpkt"];
569--1049[label="0.354839;11pkt 11fpkt"];
569--1057[label="0.0930233;4pkt 4fpkt"];
569--1066[label="0.00621118;1pkt 1fpkt"];
569--1081[label="0.00350877;1pkt 1fpkt"];
569--1092[label="0.3;6pkt 6fpkt"];
569--1095[label="0.0165746;3pkt 3fpkt"];
569--1170[label="0.0454545;1pkt 1fpkt"];
569--1193[label="0.0625;2pkt 2fpkt"];
569--1198[label="1;1pkt 1fpkt"];
569--1292[label="0.352941;12pkt 12fpkt"];
569--1357[label="0.0140845;1pkt 1fpkt"];
569--1367[label="0.02;2pkt 2fpkt"];
569--1425[label="0.0465116;6pkt 6fpkt"];
569--1448[label="0.0149254;2pkt 2fpkt"];
569--1452[label="0.25;1pkt 1fpkt"];
569--1513[label="0.0060241;2pkt 2fpkt"];
569--1517[label="0.00520833;1pkt 1fpkt"];
569--1531[label="0.0130719;2pkt 2fpkt"];
569--1555[label="0.0186916;2pkt 2fpkt"];
569--1631[label="0.104478;7pkt 7fpkt"];
569--1654[label="0.183333;11pkt 11fpkt"];
569--1679[label="0.0178571;2pkt 2fpkt"];
569--1683[label="0.0178571;1pkt 1fpkt"];
569--1898[label="0.0106383;1pkt 1fpkt"];
569--1925[label="0.0508475;3pkt 3fpkt"];
569--1965[label="0.0214286;3pkt 3fpkt"];
569--2215[label="0.0117647;1pkt 1fpkt"];
569--2217[label="0.102941;7pkt 7fpkt"];
569--2218[label="0.0263158;3pkt 3fpkt"];
569--2324[label="0.00833333;1pkt 1fpkt"];
569--2441[label="0.0357143;1pkt 1fpkt"];
569--2482[label="1;5pkt 5fpkt"];
569--2555[label="0.0492958;7pkt 7fpkt"];
569--2557[label="0.010101;1pkt 1fpkt"];
569--2565[label="0.04;1pkt 1fpkt"];
569--2574[label="0.0121951;1pkt 1fpkt"];
569--2587[label="0.0576923;3pkt 3fpkt"];
569--2598[label="0.0322581;1pkt 1fpkt"];
569--2684[label="1;94pkt 94fpkt"];
569--2938[label="0.333333;10pkt 10fpkt"];
569--2978[label="0.0833333;1pkt 1fpkt"];
569--3180[label="1;1018pkt 1018fpkt"];
569--3296[label="0.115914;118pkt 118fpkt"];
569--4375[label="1;1018pkt 1018fpkt"];
569--7027[label="0.999018;1017pkt 1017fpkt"];
569--8852[label="0.999018;1017pkt 1017fpkt"];
736--1893[label="0.08;2pkt 2fpkt"];
736--1932[label="0.173913;4pkt 4fpkt"];
736--2800[label="0.2;2pkt 2fpkt"];
736--3121[label="0.08;2pkt 2fpkt"];
736--3180[label="0.04;1pkt 1fpkt"];
736--3805[label="0.0869565;2pkt 2fpkt"];
736--4375[label="0.04;1pkt 1fpkt"];
736--4594[label="0.24;6pkt 6fpkt"];
736--4820[label="0.166667;4pkt 4fpkt"];
736--5388[label="0.333333;2pkt 2fpkt"];
736--6628[label="0.0869565;2pkt 2fpkt"];
736--7027[label="0.04;1pkt 1fpkt"];
736--7179[label="0.24;6pkt 6fpkt"];
736--7342[label="0.166667;4pkt 4fpkt"];
736--7736[label="0.2;1pkt 1fpkt"];
736--8852[label="0.04;1pkt 1fpkt"];
736--8953[label="0.24;6pkt 6fpkt"];
736--9061[label="0.173913;4pkt 4fpkt"];
1049--1183[label="0.16129;5pkt 5fpkt"];
1049--3180[label="0.354839;11pkt 11fpkt"];
1049--4331[label="0.483871;15pkt 15fpkt"];
1049--4375[label="0.354839;11pkt 11fpkt"];
1049--5760[label="0.16129;5pkt 5fpkt"];
1049--6996[label="0.483871;15pkt 15fpkt"];
1049--7027[label="0.354839;11pkt 11fpkt"];
1049--8004[label="0.16129;5pkt 5fpkt"];
1049--8852[label="0.354839;11pkt 11fpkt"];
1095--1349[label="0.00990099;1pkt 1fpkt"];
1095--1661[label="0.0327869;2pkt 2fpkt"];
1095--1664[label="0.666667;4pkt 4fpkt"];
1095--1669[label="0.00952381;1pkt 1fpkt"];
1095--1893[label="0.0357143;1pkt 1fpkt"];
1095--1944[label="0.027027;1pkt 1fpkt"];
1095--1972[label="0.0125;1pkt 1fpkt"];
1095--2391[label="0.133333;2pkt 2fpkt"];
1095--2716[label="0.38674;70pkt 70fpkt"];
1095--2761[label="0.111111;1pkt 1fpkt"];
1095--2772[label="0.00552486;1pkt 1fpkt"];
1095--2774[label="0.0263158;1pkt 1fpkt"];
1095--2873[label="0.00990099;1pkt 1fpkt"];
1095--3057[label="0.0125;1pkt 1fpkt"];
1095--3121[label="0.04;1pkt 1fpkt"];
1095--3136[label="0.0322581;1pkt 1fpkt"];
1095--3180[label="0.0165746;3pkt 3fpkt"];
1095--3225[label="0.0165746;3pkt 3fpkt"];
1095--3519[label="0.0333333;1pkt 1fpkt"];
1095--3561[label="0.016129;1pkt 1fpkt"];
1095--3772[label="0.025;1pkt 1fpkt"];
1095--3840[label="0.0212766;2pkt 2fpkt"];
1095--3975[label="0.00552486;1pkt 1fpkt"];
1095--4001[label="0.162162;6pkt 6fpkt"];
1095--4023[label="0.130435;3pkt 3fpkt"];
1095--4029[label="0.38674;70pkt 70fpkt"];
1095--4114[label="0.0110497;2pkt 2fpkt"];
1095--4375[label="0.0165746;3pkt 3fpkt"];
1095--4412[label="0.25;4pkt 4fpkt"];
1095--4919[label="0.5;1pkt 1fpkt"];
1095--5037[label="0.0121951;1pkt 1fpkt"];
1095--5050[label="0.0142857;1pkt 1fpkt"];
1095--5198[label="0.00847458;1pkt 1fpkt"];
1095--5235[label="0.0294118;1pkt 1fpkt"];
1095--5340[label="0.1;1pkt 1fpkt"];
1095--5465[label="0.0434783;1pkt 1fpkt"];
1095--5495[label="0.0208333;1pkt 1fpkt"];
1095--5632[label="0.00552486;1pkt 1fpkt"];
1095--6128[label="0.133333;2pkt 2fpkt"];
1095--6195[label="0.1;1pkt 1fpkt"];
1095--6207[label="0.0434783;1pkt 1fpkt"];
1095--6651[label="0.0315789;3pkt 3fpkt"];
1095--6762[label="0.157895;6pkt 6fpkt"];
1095--6778[label="0.38674;70pkt 70fpkt"];
1095--6978[label="0.5;1pkt 1fpkt"];
1095--7027[label="0.0165746;3pkt 3fpkt"];
1095--7603[label="0.00847458;1pkt 1fpkt"];
1095--7806[label="0.0212766;1pkt 1fpkt"];
1095--7911[label="0.00552486;1pkt 1fpkt"];
1095--8314[label="0.1;1pkt 1fpkt"];
1095--8470[label="0.0666667;1pkt 1fpkt"];
1095--8852[label="0.0165746;3pkt 3fpkt"];
1095--9223[label="0.00847458;1pkt 1fpkt"];
1095--9340[label="0.0434783;1pkt 1fpkt"];
1095--9354[label="0.0212766;1pkt 1fpkt"];
1095--9422[label="0.00552486;1pkt 1fpkt"];
1198--3180[label="1;1pkt 1fpkt"];
1198--4375[label="1;1pkt 1fpkt"];
1198--7027[label="1;1pkt 1fpkt"];
1198--8852[label="1;1pkt 1fpkt"];
1292--2553[label="0.0294118;1pkt 1fpkt"];
1292--2800[label="0.3;3pkt 3fpkt"];
1292--2938[label="1;30pkt 30fpkt"];
1292--3180[label="0.352941;12pkt 12fpkt"];
1292--4375[label="0.352941;12pkt 12fpkt"];
1292--5725[label="0.0769231;1pkt 1fpkt"];
1292--6237[label="0.0294118;1pkt 1fpkt"];
1292--7027[label="0.352941;12pkt 12fpkt"];
1292--8345[label="0.0294118;1pkt 1fpkt"];
1292--8852[label="0.352941;12pkt 12fpkt"];
1292--9716[label="0.0294118;1pkt 1fpkt"];
1452--3180[label="0.25;1pkt 1fpkt"];
1452--4375[label="0.25;1pkt 1fpkt"];
1452--5538[label="0.75;3pkt 3fpkt"];
1452--7027[label="0.25;1pkt 1fpkt"];
1452--7836[label="0.75;3pkt 3fpkt"];
1452--8852[label="0.25;1pkt 1fpkt"];
1654--2366[label="0.0333333;2pkt 2fpkt"];
1654--3180[label="0.183333;11pkt 11fpkt"];
1654--3196[label="0.0333333;2pkt 2fpkt"];
1654--3233[label="0.35;21pkt 21fpkt"];
1654--3323[label="0.0612245;3pkt 3fpkt"];
1654--4344[label="0.0166667;1pkt 1fpkt"];
1654--4349[label="0.727273;8pkt 8fpkt"];
1654--4375[label="0.183333;11pkt 11fpkt"];
1654--5312[label="0.216667;13pkt 13fpkt"];
1654--7011[label="0.7;7pkt 7fpkt"];
1654--7027[label="0.183333;11pkt 11fpkt"];
1654--8852[label="0.183333;11pkt 11fpkt"];
1661--1700[label="0.901639;55pkt 55fpkt"];
1661--3296[label="0.0163934;1pkt 1fpkt"];
1661--6978[label="0.5;1pkt 1fpkt"];
1665--1823[label="0.04;1pkt 1fpkt"];
1665--2051[label="0.837838;31pkt 31fpkt"];
1665--2218[label="0.0384615;2pkt 2fpkt"];
1665--2573[label="0.0208333;1pkt 1fpkt"];
1665--3137[label="1;52pkt 52fpkt"];
1823--2800[label="0.2;2pkt 2fpkt"];
1823--3137[label="0.04;1pkt 1fpkt"];
1823--3296[label="0.24;6pkt 6fpkt"];
1823--3307[label="0.047619;1pkt 1fpkt"];
1823--3574[label="0.08;2pkt 2fpkt"];
1823--3690[label="0.166667;1pkt 1fpkt"];
1823--3951[label="0.04;1pkt 1fpkt"];
1823--6558[label="0.166667;1pkt 1fpkt"];
1823--8554[label="0.166667;1pkt 1fpkt"];
2218--2729[label="0.0263158;3pkt 3fpkt"];
2218--2883[label="0.415094;22pkt 22fpkt"];
2218--3137[label="0.0384615;2pkt 2fpkt"];
2218--3180[label="0.0263158;3pkt 3fpkt"];
2218--3284[label="0.0175439;2pkt 2fpkt"];
2218--4375[label="0.0263158;3pkt 3fpkt"];
2218--4871[label="0.470588;16pkt 16fpkt"];
2218--5036[label="0.515152;17pkt 17fpkt"];
2218--5084[label="0.075;3pkt 3fpkt"];
2218--5718[label="0.00877193;1pkt 1fpkt"];
2218--5876[label="0.184211;21pkt 21fpkt"];
2218--5888[label="0.236842;27pkt 27fpkt"];
2218--7027[label="0.0263158;3pkt 3fpkt"];
2218--7971[label="0.00877193;1pkt 1fpkt"];
2218--8082[label="0.184211;21pkt 21fpkt"];
2218--8091[label="0.236842;27pkt 27fpkt"];
2218--8852[label="0.0263158;3pkt 3fpkt"];
2218--9535[label="0.184211;21pkt 21fpkt"];
2218--9542[label="0.236842;27pkt 27fpkt"];
2391--3296[label="0.133333;2pkt 2fpkt"];
2391--6128[label="1;15pkt 15fpkt"];
2482--3180[label="1;5pkt 5fpkt"];
2482--3296[label="0.8;4pkt 4fpkt"];
2482--4375[label="1;5pkt 5fpkt"];
2482--7027[label="1;5pkt 5fpkt"];
2482--8852[label="1;5pkt 5fpkt"];
2598--3180[label="0.0322581;1pkt 1fpkt"];
2598--4375[label="0.0322581;1pkt 1fpkt"];
2598--6061[label="0.92;23pkt 23fpkt"];
2598--7027[label="0.0322581;1pkt 1fpkt"];
2598--8852[label="0.0322581;1pkt 1fpkt"];
2684--3180[label="1;94pkt 94fpkt"];
2684--3296[label="0.691489;65pkt 65fpkt"];
2684--4375[label="1;94pkt 94fpkt"];
2684--7027[label="1;94pkt 94fpkt"];
2684--8852[label="1;94pkt 94fpkt"];
2800--2938[label="0.3;3pkt 3fpkt"];
2800--3296[label="0.3;3pkt 3fpkt"];
2938--3180[label="0.333333;10pkt 10fpkt"];
2938--4375[label="0.333333;10pkt 10fpkt"];
2938--5725[label="0.0769231;1pkt 1fpkt"];
2938--7027[label="0.333333;10pkt 10fpkt"];
2938--8852[label="0.333333;10pkt 10fpkt"];
3180--3296[label="0.115914;118pkt 118fpkt"];
3180--4375[label="1;1018pkt 1018fpkt"];
3180--7027[label="0.999018;1017pkt 1017fpkt"];
3180--8852[label="0.999018;1017pkt 1017fpkt"];
3805--6628[label="1;23pkt 23fpkt"];
4001--6762[label="1;37pkt 37fpkt"];
4375--7027[label="1;1083pkt 1083fpkt"];
4375--8852[label="1;1083pkt 1083fpkt"];
4919--7412[label="1;1pkt 1fpkt"];
4919--9099[label="1;1pkt 1fpkt"];
5050--7506[label="1;69pkt 69fpkt"];
5050--9160[label="1;69pkt 69fpkt"];
5388--7736[label="1;5pkt 5fpkt"];
7027--8852[label="1;1083pkt 1083fpkt"];
7506--9160[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.18.84"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
466[label="128.202.215.157;s;119pkt 119fpkt", shape=diamond, color=yellow];
511[label="53.174.69.143;d;76pkt 76fpkt", shape=diamond, color=yellow];
856[label="198.192.126.174;d;67pkt 67fpkt", shape=diamond, color=yellow];
2039[label="210.4.247.126;d;62pkt 62fpkt", shape=diamond, color=yellow];
3088[label="53.174.69.143;d;55pkt 55fpkt", shape=hexagon, color=black];
5110[label="195.89.66.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5198[label="128.202.215.157;118pkt 118fpkt", shape=pentagon, color=darkviolet];
7603[label="128.202.215.157;118pkt 118fpkt", shape=invtriangle, color=brown];
9223[label="128.202.215.157;118pkt 118fpkt", shape=invhouse, color=bisque];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.215.157:*, 210.4.247.126:80}[37.4517%]&lt;BR/&gt;{*:*, 53.174.69.143:80}[29.3436%]&lt;BR/&gt;{132.19.51.52:*, 198.192.126.174:80}[25.8687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41720: (0.408719%)&lt;BR/&gt; 41712: (0.408719%)&lt;BR/&gt; 41904: (0.340599%)&lt;BR/&gt; 41903: (0.340599%)&gt;];
}
466--511[label="0.0394737;3pkt 3fpkt"];
466--1095[label="0.00840336;1pkt 1fpkt"];
466--1531[label="0.0672269;8pkt 8fpkt"];
466--2039[label="1;62pkt 62fpkt"];
466--3088[label="0.0545455;3pkt 3fpkt"];
466--5198[label="1;118pkt 118fpkt"];
466--7603[label="1;118pkt 118fpkt"];
466--9223[label="1;118pkt 118fpkt"];
511--1048[label="0.230769;6pkt 6fpkt"];
511--1806[label="0.125;1pkt 1fpkt"];
511--3088[label="1;55pkt 55fpkt"];
511--3296[label="0.171053;13pkt 13fpkt"];
511--3500[label="0.3;3pkt 3fpkt"];
511--3774[label="0.111111;2pkt 2fpkt"];
511--5110[label="1;1pkt 1fpkt"];
511--5198[label="0.0263158;2pkt 2fpkt"];
511--5632[label="0.0526316;4pkt 4fpkt"];
511--5775[label="0.0131579;1pkt 1fpkt"];
511--6426[label="0.3;3pkt 3fpkt"];
511--6605[label="0.111111;2pkt 2fpkt"];
511--7603[label="0.0263158;2pkt 2fpkt"];
511--7911[label="0.0526316;4pkt 4fpkt"];
511--8581[label="0.157895;3pkt 3fpkt"];
511--9223[label="0.0263158;2pkt 2fpkt"];
511--9422[label="0.0526316;4pkt 4fpkt"];
856--3975[label="1;67pkt 67fpkt"];
2039--5198[label="1;62pkt 62fpkt"];
2039--7603[label="1;62pkt 62fpkt"];
2039--9223[label="1;62pkt 62fpkt"];
3088--3500[label="0.3;3pkt 3fpkt"];
3088--3774[label="0.0555556;1pkt 1fpkt"];
3088--5198[label="0.0363636;2pkt 2fpkt"];
3088--5632[label="0.0363636;2pkt 2fpkt"];
3088--5775[label="0.0181818;1pkt 1fpkt"];
3088--6426[label="0.3;3pkt 3fpkt"];
3088--6605[label="0.0555556;1pkt 1fpkt"];
3088--7603[label="0.0363636;2pkt 2fpkt"];
3088--7911[label="0.0363636;2pkt 2fpkt"];
3088--8581[label="0.105263;2pkt 2fpkt"];
3088--9223[label="0.0363636;2pkt 2fpkt"];
3088--9422[label="0.0363636;2pkt 2fpkt"];
5198--7603[label="1;118pkt 118fpkt"];
5198--9223[label="1;118pkt 118fpkt"];
7603--9223[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.143" dst_port="80"/>
      <filter dst_ip="210.4.247.126" dst_port="80" src_ip="128.202.215.157"/>
      <filter dst_ip="198.192.126.174" dst_port="80" src_ip="132.19.51.52"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
384[label="173.32.245.178;d;1429pkt 1429fpkt", shape=diamond, color=yellow];
385[label="132.19.193.50;s;1430pkt 1430fpkt", shape=diamond, color=yellow];
2922[label="132.19.193.50;s;1229pkt 1229fpkt", shape=hexagon, color=black];
3955[label="132.19.193.50;1575pkt 1575fpkt", shape=pentagon, color=darkviolet];
6729[label="132.19.193.50;1576pkt 1576fpkt", shape=invtriangle, color=brown];
8656[label="132.19.193.50;1575pkt 1575fpkt", shape=invhouse, color=bisque];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.193.50:80, 173.32.245.178:*}[99.8098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9943%)&lt;BR/&gt; 57313: (0.0340368%)&lt;BR/&gt; 57294: (0.0340368%)&lt;BR/&gt; 57290: (0.0340368%)&lt;BR/&gt; 57289: (0.0340368%)&gt;];
}
384--385[label="0.9993;1428pkt 1428fpkt"];
384--2922[label="0.998373;1227pkt 1227fpkt"];
384--3288[label="0.0573828;82pkt 82fpkt"];
384--3292[label="0.0601819;86pkt 86fpkt"];
384--3303[label="0.0601819;86pkt 86fpkt"];
384--3955[label="0.9986;1427pkt 1427fpkt"];
384--6729[label="0.9993;1428pkt 1428fpkt"];
384--8656[label="0.9986;1427pkt 1427fpkt"];
385--2922[label="1;1229pkt 1229fpkt"];
385--3288[label="0.0587413;84pkt 84fpkt"];
385--3292[label="0.0601399;86pkt 86fpkt"];
385--3303[label="0.0601399;86pkt 86fpkt"];
385--3955[label="0.999301;1429pkt 1429fpkt"];
385--6729[label="1;1430pkt 1430fpkt"];
385--8656[label="0.999301;1429pkt 1429fpkt"];
2922--3288[label="0.0683483;84pkt 84fpkt"];
2922--3292[label="0.0699756;86pkt 86fpkt"];
2922--3303[label="0.0699756;86pkt 86fpkt"];
2922--3955[label="0.999186;1228pkt 1228fpkt"];
2922--6729[label="1;1229pkt 1229fpkt"];
2922--8656[label="0.999186;1228pkt 1228fpkt"];
3955--6729[label="1;1575pkt 1575fpkt"];
3955--8656[label="1;1575pkt 1575fpkt"];
6729--8656[label="1;1575pkt 1575fpkt"];
</description>
    <slice>
      <filter dst_ip="173.32.245.178" src_ip="132.19.193.50" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
391[label="207.95.120.103;d;2pkt 2fpkt", shape=diamond, color=yellow];
410[label="132.19.216.63;s;235pkt 235fpkt", shape=diamond, color=yellow];
4114[label="132.19.216.63;237pkt 237fpkt", shape=pentagon, color=darkviolet];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.216.63:*, *:80}[20.0837%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (9.91561%)&lt;BR/&gt; 20785: (3.16456%)&lt;BR/&gt; 1863: (2.53165%)&lt;BR/&gt; 7524: (2.32068%)&lt;BR/&gt; 23927: (1.89873%)&gt;];
}
391--410[label="0.5;1pkt 1fpkt"];
391--501[label="0.5;1pkt 1fpkt"];
391--3225[label="0.5;1pkt 1fpkt"];
391--4114[label="0.5;1pkt 1fpkt"];
410--694[label="0.0142857;3pkt 3fpkt"];
410--808[label="0.00851064;2pkt 2fpkt"];
410--1095[label="0.0110497;2pkt 2fpkt"];
410--1155[label="0.00598802;1pkt 1fpkt"];
410--1392[label="0.0769231;2pkt 2fpkt"];
410--1400[label="0.0170213;4pkt 4fpkt"];
410--1403[label="0.0138889;2pkt 2fpkt"];
410--1425[label="0.00775194;1pkt 1fpkt"];
410--1513[label="0.012766;3pkt 3fpkt"];
410--1517[label="0.00520833;1pkt 1fpkt"];
410--2139[label="0.0105263;1pkt 1fpkt"];
410--3148[label="0.00769231;1pkt 1fpkt"];
410--3296[label="0.0170213;4pkt 4fpkt"];
410--4114[label="0.995745;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.216.63"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
1992[label="132.19.205.207;s;35pkt 35fpkt", shape=diamond, color=yellow];
5788[label="132.19.205.207;47pkt 47fpkt", shape=pentagon, color=darkviolet];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.205.207:80, *:*}[46.8085%]&lt;BR/&gt;{132.19.205.207:*, *:25}[29.7872%]&lt;BR/&gt;{132.19.205.207:25, *:*}[23.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (27.439%)&lt;BR/&gt; 80: (22.561%)&lt;BR/&gt; 60834: (1.21951%)&lt;BR/&gt; 59604: (1.21951%)&lt;BR/&gt; 59484: (1.21951%)&gt;];
}
1992--2244[label="0.4;2pkt 2fpkt"];
1992--5788[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.205.207" src_port="80"/>
      <filter src_ip="132.19.205.207" src_port="25"/>
      <filter dst_port="25" src_ip="132.19.205.207"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.18.129.165"/>
      <from sec="1144126804" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
459[label="132.19.133.93;s;107pkt 107fpkt", shape=diamond, color=yellow];
462[label="220.52.118.201;d;71pkt 71fpkt", shape=diamond, color=yellow];
574[label="132.19.152.93;s;778pkt 778fpkt", shape=diamond, color=yellow];
4481[label="132.19.133.93;107pkt 107fpkt", shape=pentagon, color=darkviolet];
7098[label="132.19.133.93;107pkt 107fpkt", shape=invtriangle, color=brown];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.152.93:52663, *:53}[56.9492%]&lt;BR/&gt;{132.19.152.93:53, *:*}[28.1356%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 52663: (21.5812%)&lt;BR/&gt; 80: (16.7094%)&lt;BR/&gt; 0: (2.05128%)&lt;BR/&gt; 32768: (0.470085%)&gt;];
}
459--462[label="0.985915;70pkt 70fpkt"];
459--4481[label="1;107pkt 107fpkt"];
459--7098[label="1;107pkt 107fpkt"];
462--574[label="0.0140845;1pkt 1fpkt"];
462--3102[label="0.0140845;1pkt 1fpkt"];
462--3290[label="0.0140845;1pkt 1fpkt"];
462--4481[label="0.985915;70pkt 70fpkt"];
462--4482[label="0.0140845;1pkt 1fpkt"];
462--7098[label="0.985915;70pkt 70fpkt"];
574--906[label="0.00568182;1pkt 1fpkt"];
574--1388[label="0.125;1pkt 1fpkt"];
574--1396[label="0.142857;1pkt 1fpkt"];
574--1811[label="0.0060241;1pkt 1fpkt"];
574--1864[label="0.00584795;1pkt 1fpkt"];
574--1900[label="0.0147059;1pkt 1fpkt"];
574--1930[label="0.00689655;1pkt 1fpkt"];
574--2178[label="0.00628931;1pkt 1fpkt"];
574--2378[label="0.0131579;1pkt 1fpkt"];
574--2454[label="0.0106383;1pkt 1fpkt"];
574--2515[label="0.00571429;1pkt 1fpkt"];
574--2522[label="0.00641026;1pkt 1fpkt"];
574--2564[label="0.00584795;1pkt 1fpkt"];
574--3102[label="1;644pkt 644fpkt"];
574--3287[label="0.0231362;18pkt 18fpkt"];
574--3290[label="0.114396;89pkt 89fpkt"];
574--3295[label="0.092545;72pkt 72fpkt"];
574--3302[label="0.0269923;21pkt 21fpkt"];
574--4482[label="1;778pkt 778fpkt"];
4481--7098[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.152.93" src_port="53"/>
      <filter dst_port="53" src_ip="132.19.152.93" src_port="52663"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
158[label="132.19.239.19;s;3pkt 3fpkt", shape=diamond, color=yellow];
500[label="218.43.127.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
3170[label="132.19.239.19;s;3pkt 3fpkt", shape=hexagon, color=black];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.239.19:1627, 196.206.184.65:1863}[33.3333%]&lt;BR/&gt;{132.19.239.19:1891, 194.180.7.181:80}[33.3333%]&lt;BR/&gt;{132.19.239.19:1863, 218.43.127.238:1755}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (35.7143%)&lt;BR/&gt; 1755: (21.4286%)&lt;BR/&gt; 1891: (14.2857%)&lt;BR/&gt; 1627: (14.2857%)&lt;BR/&gt; 80: (14.2857%)&gt;];
}
158--500[label="1;1pkt 1fpkt"];
158--3170[label="1;3pkt 3fpkt"];
500--3170[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.43.127.238" dst_port="1755" src_ip="132.19.239.19" src_port="1863"/>
      <filter dst_ip="194.180.7.181" dst_port="80" src_ip="132.19.239.19" src_port="1891"/>
      <filter dst_ip="196.206.184.65" dst_port="1863" src_ip="132.19.239.19" src_port="1627"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
482[label="33.78.135.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.106.58:4184, 33.78.135.71:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4184: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
482--4044[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.78.135.71" dst_port="80" src_ip="195.89.106.58" src_port="4184"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
507[label="49.26.191.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
508[label="161.223.194.66;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.194.66:1346, 49.26.191.18:8180}[25%]&lt;BR/&gt;{161.223.194.66:1399, 218.150.67.215:80}[25%]&lt;BR/&gt;{161.223.194.66:1398, 210.107.147.174:80}[25%]&lt;BR/&gt;{161.223.194.66:1400, 210.107.147.174:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 8180: (20%)&lt;BR/&gt; 1346: (20%)&lt;BR/&gt; 1400: (10%)&lt;BR/&gt; 1399: (10%)&gt;];
}
507--508[label="1;1pkt 1fpkt"];
508--611[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.107.147.174" dst_port="80" src_ip="161.223.194.66" src_port="1400"/>
      <filter dst_ip="210.107.147.174" dst_port="80" src_ip="161.223.194.66" src_port="1398"/>
      <filter dst_ip="218.150.67.215" dst_port="80" src_ip="161.223.194.66" src_port="1399"/>
      <filter dst_ip="49.26.191.18" dst_port="8180" src_ip="161.223.194.66" src_port="1346"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
573[label="209.98.26.235;s;2899pkt 2899fpkt", shape=diamond, color=yellow];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.98.26.235:1939, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1939: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
573--1916[label="0.00129702;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.98.26.235" src_port="1939"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,901,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
199[label="38.51.92.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
200[label="161.223.150.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
580[label="161.223.136.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
3555[label="161.223.136.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6458[label="161.223.136.17;1pkt 1fpkt", shape=invtriangle, color=brown];
8490[label="161.223.136.17;2pkt 2fpkt", shape=invhouse, color=bisque];
8650[label="161.223.150.49;1pkt 1fpkt", shape=invhouse, color=bisque];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.150.49:50555, 38.51.92.108:80}[33.3333%]&lt;BR/&gt;{161.223.136.17:3575, 219.73.82.161:80}[33.3333%]&lt;BR/&gt;{161.223.136.17:3535, 38.51.92.108:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3535: (27.7778%)&lt;BR/&gt; 50555: (16.6667%)&lt;BR/&gt; 3575: (5.55556%)&gt;];
}
199--200[label="1;1pkt 1fpkt"];
199--580[label="1;1pkt 1fpkt"];
199--3296[label="1;2pkt 2fpkt"];
199--3555[label="1;1pkt 1fpkt"];
199--6458[label="1;1pkt 1fpkt"];
199--8490[label="0.5;1pkt 1fpkt"];
199--8650[label="1;1pkt 1fpkt"];
200--3296[label="1;1pkt 1fpkt"];
200--8650[label="1;1pkt 1fpkt"];
580--3296[label="1;1pkt 1fpkt"];
580--3555[label="1;1pkt 1fpkt"];
580--6458[label="1;1pkt 1fpkt"];
580--8490[label="1;1pkt 1fpkt"];
3555--6458[label="1;1pkt 1fpkt"];
3555--8490[label="1;1pkt 1fpkt"];
6458--8490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.51.92.108" dst_port="80" src_ip="161.223.136.17" src_port="3535"/>
      <filter dst_ip="219.73.82.161" dst_port="80" src_ip="161.223.136.17" src_port="3575"/>
      <filter dst_ip="38.51.92.108" dst_port="80" src_ip="161.223.150.49" src_port="50555"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
526[label="214.51.37.73;d;5946pkt 5946fpkt", shape=diamond, color=yellow];
584[label="128.2.80.5;s;362pkt 362fpkt", shape=diamond, color=yellow];
826[label="128.2.80.243;s;189pkt 189fpkt", shape=diamond, color=yellow];
890[label="128.2.80.142;s;261pkt 261fpkt", shape=diamond, color=yellow];
1006[label="128.2.80.67;s;357pkt 357fpkt", shape=diamond, color=yellow];
1736[label="128.2.80.51;s;505pkt 505fpkt", shape=diamond, color=yellow];
2023[label="128.2.81.48;s;432pkt 432fpkt", shape=diamond, color=yellow];
2257[label="128.2.81.121;s;392pkt 392fpkt", shape=diamond, color=yellow];
2264[label="128.2.81.64;s;351pkt 351fpkt", shape=diamond, color=yellow];
2272[label="128.2.81.139;s;328pkt 328fpkt", shape=diamond, color=yellow];
2274[label="128.2.81.231;s;326pkt 326fpkt", shape=diamond, color=yellow];
2282[label="128.2.81.216;s;356pkt 356fpkt", shape=diamond, color=yellow];
2446[label="128.2.81.160;s;341pkt 341fpkt", shape=diamond, color=yellow];
2457[label="128.2.87.42;s;251pkt 251fpkt", shape=diamond, color=yellow];
3876[label="128.2.87.42;335pkt 335fpkt", shape=pentagon, color=darkviolet];
3926[label="128.2.81.48;468pkt 468fpkt", shape=pentagon, color=darkviolet];
4120[label="128.2.81.64;401pkt 401fpkt", shape=pentagon, color=darkviolet];
4162[label="128.2.80.67;357pkt 357fpkt", shape=pentagon, color=darkviolet];
4745[label="128.2.81.121;461pkt 461fpkt", shape=pentagon, color=darkviolet];
4963[label="128.2.81.139;371pkt 371fpkt", shape=pentagon, color=darkviolet];
5002[label="128.2.80.142;260pkt 260fpkt", shape=pentagon, color=darkviolet];
5518[label="128.2.82.185;193pkt 193fpkt", shape=pentagon, color=darkviolet];
6066[label="128.2.81.231;373pkt 373fpkt", shape=pentagon, color=darkviolet];
6186[label="128.2.80.243;188pkt 188fpkt", shape=pentagon, color=darkviolet];
6674[label="128.2.87.42;335pkt 335fpkt", shape=invtriangle, color=brown];
6707[label="128.2.81.48;469pkt 469fpkt", shape=invtriangle, color=brown];
7283[label="128.2.81.121;462pkt 462fpkt", shape=invtriangle, color=brown];
7470[label="128.2.80.142;260pkt 260fpkt", shape=invtriangle, color=brown];
7824[label="128.2.82.185;192pkt 192fpkt", shape=invtriangle, color=brown];
8305[label="128.2.80.243;188pkt 188fpkt", shape=invtriangle, color=brown];
8642[label="128.2.81.48;469pkt 469fpkt", shape=invhouse, color=bisque];
9017[label="128.2.81.121;461pkt 461fpkt", shape=invhouse, color=bisque];
9135[label="128.2.80.142;260pkt 260fpkt", shape=invhouse, color=bisque];
9368[label="128.2.82.185;193pkt 193fpkt", shape=invhouse, color=bisque];
9689[label="128.2.80.243;188pkt 188fpkt", shape=invhouse, color=bisque];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1433, 214.51.37.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 3956: (0.0665471%)&lt;BR/&gt; 3934: (0.0636537%)&lt;BR/&gt; 3906: (0.0636537%)&lt;BR/&gt; 4277: (0.0607604%)&gt;];
}
526--531[label="1;386pkt 386fpkt"];
526--584[label="1;362pkt 362fpkt"];
526--826[label="1;189pkt 189fpkt"];
526--890[label="1;261pkt 261fpkt"];
526--931[label="1;335pkt 335fpkt"];
526--1006[label="1;357pkt 357fpkt"];
526--1736[label="1;505pkt 505fpkt"];
526--1746[label="1;485pkt 485fpkt"];
526--2023[label="1;432pkt 432fpkt"];
526--2257[label="1;392pkt 392fpkt"];
526--2264[label="1;351pkt 351fpkt"];
526--2272[label="1;328pkt 328fpkt"];
526--2274[label="1;326pkt 326fpkt"];
526--2282[label="1;356pkt 356fpkt"];
526--2446[label="1;341pkt 341fpkt"];
526--2457[label="1;251pkt 251fpkt"];
526--2796[label="1;386pkt 386fpkt"];
526--3155[label="1;368pkt 368fpkt"];
526--3857[label="1;386pkt 386fpkt"];
526--3876[label="0.746269;250pkt 250fpkt"];
526--3926[label="0.92094;431pkt 431fpkt"];
526--4120[label="0.875312;351pkt 351fpkt"];
526--4162[label="1;357pkt 357fpkt"];
526--4745[label="0.848156;391pkt 391fpkt"];
526--4963[label="0.884097;328pkt 328fpkt"];
526--5002[label="1;260pkt 260fpkt"];
526--5329[label="1;334pkt 334fpkt"];
526--5518[label="1;193pkt 193fpkt"];
526--6066[label="0.873995;326pkt 326fpkt"];
526--6186[label="1;188pkt 188fpkt"];
526--6659[label="1;386pkt 386fpkt"];
526--6674[label="0.746269;250pkt 250fpkt"];
526--6707[label="0.921109;432pkt 432fpkt"];
526--7283[label="0.848485;392pkt 392fpkt"];
526--7470[label="1;260pkt 260fpkt"];
526--7824[label="1;192pkt 192fpkt"];
526--8305[label="1;188pkt 188fpkt"];
526--8642[label="0.921109;432pkt 432fpkt"];
526--9017[label="0.848156;391pkt 391fpkt"];
526--9135[label="1;260pkt 260fpkt"];
526--9368[label="1;193pkt 193fpkt"];
526--9689[label="1;188pkt 188fpkt"];
826--6186[label="1;188pkt 188fpkt"];
826--8305[label="1;188pkt 188fpkt"];
826--9689[label="1;188pkt 188fpkt"];
890--5002[label="1;260pkt 260fpkt"];
890--7470[label="1;260pkt 260fpkt"];
890--9135[label="1;260pkt 260fpkt"];
1006--4162[label="1;357pkt 357fpkt"];
2023--3926[label="0.997685;431pkt 431fpkt"];
2023--6707[label="1;432pkt 432fpkt"];
2023--8642[label="1;432pkt 432fpkt"];
2257--4745[label="0.997449;391pkt 391fpkt"];
2257--7283[label="1;392pkt 392fpkt"];
2257--9017[label="0.997449;391pkt 391fpkt"];
2264--4120[label="1;351pkt 351fpkt"];
2272--4963[label="1;328pkt 328fpkt"];
2274--6066[label="1;326pkt 326fpkt"];
2457--3876[label="0.996016;250pkt 250fpkt"];
2457--6674[label="0.996016;250pkt 250fpkt"];
3876--6674[label="1;335pkt 335fpkt"];
3926--6707[label="1;468pkt 468fpkt"];
3926--8642[label="1;468pkt 468fpkt"];
4745--7283[label="1;461pkt 461fpkt"];
4745--9017[label="1;461pkt 461fpkt"];
5002--7470[label="1;260pkt 260fpkt"];
5002--9135[label="1;260pkt 260fpkt"];
5518--7824[label="1;192pkt 192fpkt"];
5518--9368[label="1;193pkt 193fpkt"];
6186--8305[label="1;188pkt 188fpkt"];
6186--9689[label="1;188pkt 188fpkt"];
6707--8642[label="1;469pkt 469fpkt"];
7283--9017[label="1;461pkt 461fpkt"];
7470--9135[label="1;260pkt 260fpkt"];
7824--9368[label="1;192pkt 192fpkt"];
8305--9689[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter dst_ip="214.51.37.73" src_port="1433"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.51.82.100"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127539" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
441[label="132.19.106.26;s;115pkt 115fpkt", shape=diamond, color=yellow];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.106.26:*, 131.71.18.56:80}[78.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34433: (0.434783%)&lt;BR/&gt; 34432: (0.434783%)&lt;BR/&gt; 34431: (0.434783%)&lt;BR/&gt; 34430: (0.434783%)&gt;];
}
441--2151[label="0.782609;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="131.71.18.56" dst_port="80" src_ip="132.19.106.26"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
160[label="161.223.8.62;s;4037pkt 4037fpkt", shape=diamond, color=yellow];
242[label="161.223.8.51;s;3184pkt 3184fpkt", shape=diamond, color=yellow];
353[label="221.108.205.104;d;3pkt 3fpkt", shape=diamond, color=yellow];
512[label="161.223.8.63;s;3192pkt 3192fpkt", shape=diamond, color=yellow];
555[label="33.237.150.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
622[label="199.151.176.28;d;20pkt 20fpkt", shape=diamond, color=yellow];
711[label="33.170.4.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
816[label="35.180.27.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
927[label="206.74.25.62;d;2pkt 2fpkt", shape=diamond, color=yellow];
933[label="214.202.182.150;d;2037pkt 2037fpkt", shape=diamond, color=yellow];
988[label="48.169.139.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
1056[label="135.96.53.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
1242[label="83.162.18.42;d;329pkt 329fpkt", shape=diamond, color=yellow];
1352[label="215.117.172.25;d;245pkt 245fpkt", shape=diamond, color=yellow];
1443[label="149.221.166.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
1449[label="41.45.53.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
1526[label="194.146.39.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
1557[label="85.83.131.176;d;272pkt 272fpkt", shape=diamond, color=yellow];
1656[label="49.74.236.62;d;167pkt 167fpkt", shape=diamond, color=yellow];
1682[label="203.212.6.70;d;90pkt 90fpkt", shape=diamond, color=yellow];
1853[label="141.176.177.110;d;38pkt 38fpkt", shape=diamond, color=yellow];
1890[label="215.117.172.140;d;109pkt 109fpkt", shape=diamond, color=yellow];
1977[label="203.212.6.73;d;85pkt 85fpkt", shape=diamond, color=yellow];
2001[label="209.104.171.161;d;152pkt 152fpkt", shape=diamond, color=yellow];
2024[label="36.58.34.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
2132[label="83.188.156.155;d;141pkt 141fpkt", shape=diamond, color=yellow];
2141[label="204.245.194.214;d;66pkt 66fpkt", shape=diamond, color=yellow];
2164[label="215.117.172.151;d;124pkt 124fpkt", shape=diamond, color=yellow];
2176[label="41.26.235.87;d;2pkt 2fpkt", shape=diamond, color=yellow];
2249[label="33.182.246.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
2361[label="203.212.6.75;d;95pkt 95fpkt", shape=diamond, color=yellow];
2466[label="49.240.176.49;d;48pkt 48fpkt", shape=diamond, color=yellow];
2568[label="204.245.194.170;d;54pkt 54fpkt", shape=diamond, color=yellow];
2616[label="32.32.84.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
2620[label="55.121.156.30;d;170pkt 170fpkt", shape=diamond, color=yellow];
2695[label="161.223.8.62;s;570pkt 570fpkt", shape=hexagon, color=black];
2913[label="83.162.18.42;d;242pkt 242fpkt", shape=hexagon, color=black];
2965[label="215.117.172.25;d;245pkt 245fpkt", shape=hexagon, color=black];
3130[label="41.26.235.87;d;2pkt 2fpkt", shape=hexagon, color=black];
3959[label="161.223.8.51;3511pkt 3511fpkt", shape=pentagon, color=darkviolet];
4092[label="161.223.8.62;4511pkt 4511fpkt", shape=pentagon, color=darkviolet];
4104[label="161.223.8.63;3769pkt 3769fpkt", shape=pentagon, color=darkviolet];
4637[label="219.239.49.108;53pkt 53fpkt", shape=pentagon, color=darkviolet];
5737[label="194.212.154.202;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6733[label="161.223.8.51;3511pkt 3511fpkt", shape=invtriangle, color=brown];
6824[label="161.223.8.62;4511pkt 4511fpkt", shape=invtriangle, color=brown];
7986[label="194.212.154.202;15pkt 15fpkt", shape=invtriangle, color=brown];
8657[label="161.223.8.51;3511pkt 3511fpkt", shape=invhouse, color=bisque];
8720[label="161.223.8.62;4510pkt 4510fpkt", shape=invhouse, color=bisque];
9468[label="194.212.154.202;16pkt 16fpkt", shape=invhouse, color=bisque];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.8.62:*, *:*}[37.9938%]&lt;BR/&gt;{161.223.8.63:*, *:*}[31.7527%]&lt;BR/&gt;{161.223.8.51:*, *:*}[29.5713%]&lt;BR/&gt;{*:3128, *:*}[29.1839%]&lt;BR/&gt;{*:3124, *:*}[24.7115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (14.6624%)&lt;BR/&gt; 3124: (13.1647%)&lt;BR/&gt; 3127: (8.82609%)&lt;BR/&gt; 2121: (1.96148%)&lt;BR/&gt; 4121: (1.9111%)&gt;];
}
160--622[label="0.3;6pkt 6fpkt"];
160--694[label="0.0047619;1pkt 1fpkt"];
160--927[label="0.5;1pkt 1fpkt"];
160--933[label="0.328424;669pkt 669fpkt"];
160--1155[label="0.00598802;1pkt 1fpkt"];
160--1242[label="0.744681;245pkt 245fpkt"];
160--1557[label="0.5;136pkt 136fpkt"];
160--1656[label="1;167pkt 167fpkt"];
160--1682[label="0.222222;20pkt 20fpkt"];
160--1853[label="0.263158;10pkt 10fpkt"];
160--1890[label="0.348624;38pkt 38fpkt"];
160--1977[label="0.235294;20pkt 20fpkt"];
160--2001[label="0.901316;137pkt 137fpkt"];
160--2132[label="0.382979;54pkt 54fpkt"];
160--2141[label="0.666667;44pkt 44fpkt"];
160--2164[label="0.322581;40pkt 40fpkt"];
160--2361[label="0.263158;25pkt 25fpkt"];
160--2568[label="0.388889;21pkt 21fpkt"];
160--2620[label="0.935294;159pkt 159fpkt"];
160--2695[label="1;570pkt 570fpkt"];
160--2913[label="0.747934;181pkt 181fpkt"];
160--3148[label="0.00769231;1pkt 1fpkt"];
160--3296[label="0.000495417;2pkt 2fpkt"];
160--4092[label="1;4037pkt 4037fpkt"];
160--6824[label="1;4037pkt 4037fpkt"];
160--8720[label="0.999752;4036pkt 4036fpkt"];
242--353[label="1;3pkt 3fpkt"];
242--555[label="1;1pkt 1fpkt"];
242--622[label="0.35;7pkt 7fpkt"];
242--694[label="0.0333333;7pkt 7fpkt"];
242--711[label="1;1pkt 1fpkt"];
242--816[label="1;1pkt 1fpkt"];
242--927[label="0.5;1pkt 1fpkt"];
242--933[label="0.329897;672pkt 672fpkt"];
242--988[label="1;1pkt 1fpkt"];
242--1056[label="1;1pkt 1fpkt"];
242--1155[label="0.00598802;1pkt 1fpkt"];
242--1352[label="0.4;98pkt 98fpkt"];
242--1443[label="1;1pkt 1fpkt"];
242--1449[label="1;1pkt 1fpkt"];
242--1526[label="1;1pkt 1fpkt"];
242--1682[label="0.355556;32pkt 32fpkt"];
242--1853[label="0.263158;10pkt 10fpkt"];
242--1890[label="0.311927;34pkt 34fpkt"];
242--1977[label="0.423529;36pkt 36fpkt"];
242--2024[label="1;1pkt 1fpkt"];
242--2132[label="0.404255;57pkt 57fpkt"];
242--2141[label="0.166667;11pkt 11fpkt"];
242--2164[label="0.33871;42pkt 42fpkt"];
242--2249[label="1;1pkt 1fpkt"];
242--2361[label="0.557895;53pkt 53fpkt"];
242--2466[label="1;48pkt 48fpkt"];
242--2568[label="0.388889;21pkt 21fpkt"];
242--2616[label="1;1pkt 1fpkt"];
242--2620[label="0.0294118;5pkt 5fpkt"];
242--2965[label="0.4;98pkt 98fpkt"];
242--3148[label="0.00769231;1pkt 1fpkt"];
242--3296[label="0.00031407;1pkt 1fpkt"];
242--3959[label="1;3184pkt 3184fpkt"];
242--6733[label="1;3184pkt 3184fpkt"];
242--8657[label="1;3184pkt 3184fpkt"];
353--3959[label="1;3pkt 3fpkt"];
353--6733[label="1;3pkt 3fpkt"];
353--8657[label="1;3pkt 3fpkt"];
512--622[label="0.35;7pkt 7fpkt"];
512--694[label="0.0047619;1pkt 1fpkt"];
512--933[label="0.325479;663pkt 663fpkt"];
512--1242[label="0.255319;84pkt 84fpkt"];
512--1352[label="0.538776;132pkt 132fpkt"];
512--1557[label="0.441176;120pkt 120fpkt"];
512--1682[label="0.322222;29pkt 29fpkt"];
512--1853[label="0.368421;14pkt 14fpkt"];
512--1890[label="0.33945;37pkt 37fpkt"];
512--1977[label="0.305882;26pkt 26fpkt"];
512--2001[label="0.0986842;15pkt 15fpkt"];
512--2132[label="0.191489;27pkt 27fpkt"];
512--2141[label="0.166667;11pkt 11fpkt"];
512--2164[label="0.306452;38pkt 38fpkt"];
512--2176[label="1;2pkt 2fpkt"];
512--2361[label="0.147368;14pkt 14fpkt"];
512--2568[label="0.222222;12pkt 12fpkt"];
512--2620[label="0.0117647;2pkt 2fpkt"];
512--2913[label="0.252066;61pkt 61fpkt"];
512--2965[label="0.538776;132pkt 132fpkt"];
512--3130[label="1;2pkt 2fpkt"];
512--3296[label="0.000626566;2pkt 2fpkt"];
512--4104[label="0.999687;3191pkt 3191fpkt"];
555--3959[label="1;1pkt 1fpkt"];
555--6733[label="1;1pkt 1fpkt"];
555--8657[label="1;1pkt 1fpkt"];
622--2695[label="0.05;1pkt 1fpkt"];
622--3959[label="0.35;7pkt 7fpkt"];
622--4092[label="0.3;6pkt 6fpkt"];
622--4104[label="0.35;7pkt 7fpkt"];
622--6733[label="0.35;7pkt 7fpkt"];
622--6824[label="0.3;6pkt 6fpkt"];
622--8657[label="0.35;7pkt 7fpkt"];
622--8720[label="0.3;6pkt 6fpkt"];
711--3959[label="1;1pkt 1fpkt"];
711--6733[label="1;1pkt 1fpkt"];
711--8657[label="1;1pkt 1fpkt"];
816--3959[label="1;1pkt 1fpkt"];
816--6733[label="1;1pkt 1fpkt"];
816--8657[label="1;1pkt 1fpkt"];
927--2695[label="0.5;1pkt 1fpkt"];
927--3959[label="0.5;1pkt 1fpkt"];
927--4092[label="0.5;1pkt 1fpkt"];
927--6733[label="0.5;1pkt 1fpkt"];
927--6824[label="0.5;1pkt 1fpkt"];
927--8657[label="0.5;1pkt 1fpkt"];
927--8720[label="0.5;1pkt 1fpkt"];
933--2695[label="0.164912;94pkt 94fpkt"];
933--3959[label="0.329897;672pkt 672fpkt"];
933--4092[label="0.328424;669pkt 669fpkt"];
933--4104[label="0.341679;696pkt 696fpkt"];
933--6733[label="0.329897;672pkt 672fpkt"];
933--6824[label="0.328424;669pkt 669fpkt"];
933--8657[label="0.329897;672pkt 672fpkt"];
933--8720[label="0.328424;669pkt 669fpkt"];
988--3959[label="1;1pkt 1fpkt"];
988--6733[label="1;1pkt 1fpkt"];
988--8657[label="1;1pkt 1fpkt"];
1056--3959[label="1;1pkt 1fpkt"];
1056--6733[label="1;1pkt 1fpkt"];
1056--8657[label="1;1pkt 1fpkt"];
1242--2695[label="0.139818;46pkt 46fpkt"];
1242--2913[label="1;242pkt 242fpkt"];
1242--4092[label="0.744681;245pkt 245fpkt"];
1242--4104[label="0.255319;84pkt 84fpkt"];
1242--6824[label="0.744681;245pkt 245fpkt"];
1242--8720[label="0.744681;245pkt 245fpkt"];
1352--2965[label="1;245pkt 245fpkt"];
1352--3959[label="0.4;98pkt 98fpkt"];
1352--4104[label="0.6;147pkt 147fpkt"];
1352--6733[label="0.4;98pkt 98fpkt"];
1352--8657[label="0.4;98pkt 98fpkt"];
1443--3959[label="1;1pkt 1fpkt"];
1443--6733[label="1;1pkt 1fpkt"];
1443--8657[label="1;1pkt 1fpkt"];
1449--3959[label="1;1pkt 1fpkt"];
1449--6733[label="1;1pkt 1fpkt"];
1449--8657[label="1;1pkt 1fpkt"];
1526--3959[label="1;1pkt 1fpkt"];
1526--6733[label="1;1pkt 1fpkt"];
1526--8657[label="1;1pkt 1fpkt"];
1557--2695[label="0.0588235;16pkt 16fpkt"];
1557--4092[label="0.5;136pkt 136fpkt"];
1557--4104[label="0.5;136pkt 136fpkt"];
1557--6824[label="0.5;136pkt 136fpkt"];
1557--8720[label="0.5;136pkt 136fpkt"];
1656--2695[label="0.143713;24pkt 24fpkt"];
1656--4092[label="1;167pkt 167fpkt"];
1656--6824[label="1;167pkt 167fpkt"];
1656--8720[label="1;167pkt 167fpkt"];
1682--2193[label="0.0111111;1pkt 1fpkt"];
1682--2695[label="0.0555556;5pkt 5fpkt"];
1682--3959[label="0.355556;32pkt 32fpkt"];
1682--4092[label="0.222222;20pkt 20fpkt"];
1682--4104[label="0.355556;32pkt 32fpkt"];
1682--4264[label="0.0188679;1pkt 1fpkt"];
1682--4274[label="0.0111111;1pkt 1fpkt"];
1682--5737[label="0.0625;1pkt 1fpkt"];
1682--6733[label="0.355556;32pkt 32fpkt"];
1682--6824[label="0.222222;20pkt 20fpkt"];
1682--6948[label="0.0188679;1pkt 1fpkt"];
1682--6956[label="0.0111111;1pkt 1fpkt"];
1682--7986[label="0.0666667;1pkt 1fpkt"];
1682--8657[label="0.355556;32pkt 32fpkt"];
1682--8720[label="0.222222;20pkt 20fpkt"];
1682--8804[label="0.0185185;1pkt 1fpkt"];
1682--9468[label="0.0625;1pkt 1fpkt"];
1853--2695[label="0.0526316;2pkt 2fpkt"];
1853--3959[label="0.263158;10pkt 10fpkt"];
1853--4092[label="0.263158;10pkt 10fpkt"];
1853--4104[label="0.368421;14pkt 14fpkt"];
1853--4202[label="0.0263158;1pkt 1fpkt"];
1853--4637[label="0.0263158;1pkt 1fpkt"];
1853--5632[label="0.0263158;1pkt 1fpkt"];
1853--6733[label="0.263158;10pkt 10fpkt"];
1853--6824[label="0.263158;10pkt 10fpkt"];
1853--6901[label="0.0263158;1pkt 1fpkt"];
1853--7911[label="0.0263158;1pkt 1fpkt"];
1853--8657[label="0.263158;10pkt 10fpkt"];
1853--8720[label="0.263158;10pkt 10fpkt"];
1853--8772[label="0.0263158;1pkt 1fpkt"];
1853--9422[label="0.0263158;1pkt 1fpkt"];
1890--2695[label="0.0825688;9pkt 9fpkt"];
1890--3959[label="0.311927;34pkt 34fpkt"];
1890--4092[label="0.348624;38pkt 38fpkt"];
1890--4104[label="0.33945;37pkt 37fpkt"];
1890--6733[label="0.311927;34pkt 34fpkt"];
1890--6824[label="0.348624;38pkt 38fpkt"];
1890--8657[label="0.311927;34pkt 34fpkt"];
1890--8720[label="0.348624;38pkt 38fpkt"];
1977--2695[label="0.0470588;4pkt 4fpkt"];
1977--3959[label="0.423529;36pkt 36fpkt"];
1977--4092[label="0.235294;20pkt 20fpkt"];
1977--4104[label="0.341176;29pkt 29fpkt"];
1977--6733[label="0.423529;36pkt 36fpkt"];
1977--6824[label="0.235294;20pkt 20fpkt"];
1977--8657[label="0.423529;36pkt 36fpkt"];
1977--8720[label="0.235294;20pkt 20fpkt"];
2001--2695[label="0.0394737;6pkt 6fpkt"];
2001--4092[label="0.901316;137pkt 137fpkt"];
2001--4104[label="0.0986842;15pkt 15fpkt"];
2001--6824[label="0.901316;137pkt 137fpkt"];
2001--8720[label="0.901316;137pkt 137fpkt"];
2024--3959[label="1;1pkt 1fpkt"];
2024--6733[label="1;1pkt 1fpkt"];
2024--8657[label="1;1pkt 1fpkt"];
2132--2695[label="0.0638298;9pkt 9fpkt"];
2132--3959[label="0.404255;57pkt 57fpkt"];
2132--4092[label="0.382979;54pkt 54fpkt"];
2132--4104[label="0.212766;30pkt 30fpkt"];
2132--6733[label="0.404255;57pkt 57fpkt"];
2132--6824[label="0.382979;54pkt 54fpkt"];
2132--8657[label="0.404255;57pkt 57fpkt"];
2132--8720[label="0.382979;54pkt 54fpkt"];
2141--2695[label="0.0454545;3pkt 3fpkt"];
2141--3959[label="0.166667;11pkt 11fpkt"];
2141--4092[label="0.666667;44pkt 44fpkt"];
2141--4104[label="0.166667;11pkt 11fpkt"];
2141--6733[label="0.166667;11pkt 11fpkt"];
2141--6824[label="0.666667;44pkt 44fpkt"];
2141--8657[label="0.166667;11pkt 11fpkt"];
2141--8720[label="0.666667;44pkt 44fpkt"];
2164--2695[label="0.0403226;5pkt 5fpkt"];
2164--3959[label="0.33871;42pkt 42fpkt"];
2164--4092[label="0.322581;40pkt 40fpkt"];
2164--4104[label="0.33871;42pkt 42fpkt"];
2164--6733[label="0.33871;42pkt 42fpkt"];
2164--6824[label="0.322581;40pkt 40fpkt"];
2164--8657[label="0.33871;42pkt 42fpkt"];
2164--8720[label="0.322581;40pkt 40fpkt"];
2176--3130[label="1;2pkt 2fpkt"];
2176--3296[label="1;2pkt 2fpkt"];
2176--4104[label="1;2pkt 2fpkt"];
2249--3959[label="1;1pkt 1fpkt"];
2249--6733[label="1;1pkt 1fpkt"];
2249--8657[label="1;1pkt 1fpkt"];
2361--2695[label="0.0736842;7pkt 7fpkt"];
2361--3959[label="0.557895;53pkt 53fpkt"];
2361--4092[label="0.263158;25pkt 25fpkt"];
2361--4104[label="0.178947;17pkt 17fpkt"];
2361--6733[label="0.557895;53pkt 53fpkt"];
2361--6824[label="0.263158;25pkt 25fpkt"];
2361--8657[label="0.557895;53pkt 53fpkt"];
2361--8720[label="0.263158;25pkt 25fpkt"];
2466--3959[label="1;48pkt 48fpkt"];
2466--6733[label="1;48pkt 48fpkt"];
2466--8657[label="1;48pkt 48fpkt"];
2568--2695[label="0.0740741;4pkt 4fpkt"];
2568--3959[label="0.388889;21pkt 21fpkt"];
2568--4092[label="0.388889;21pkt 21fpkt"];
2568--4104[label="0.222222;12pkt 12fpkt"];
2568--6733[label="0.388889;21pkt 21fpkt"];
2568--6824[label="0.388889;21pkt 21fpkt"];
2568--8657[label="0.388889;21pkt 21fpkt"];
2568--8720[label="0.388889;21pkt 21fpkt"];
2616--3959[label="1;1pkt 1fpkt"];
2616--6733[label="1;1pkt 1fpkt"];
2616--8657[label="1;1pkt 1fpkt"];
2620--3959[label="0.0294118;5pkt 5fpkt"];
2620--4092[label="0.935294;159pkt 159fpkt"];
2620--4104[label="0.0117647;2pkt 2fpkt"];
2620--6733[label="0.0294118;5pkt 5fpkt"];
2620--6824[label="0.935294;159pkt 159fpkt"];
2620--8657[label="0.0294118;5pkt 5fpkt"];
2620--8720[label="0.935294;159pkt 159fpkt"];
2695--2913[label="0.190083;46pkt 46fpkt"];
2695--4092[label="1;570pkt 570fpkt"];
2695--6824[label="1;570pkt 570fpkt"];
2695--8720[label="0.998246;569pkt 569fpkt"];
2913--4092[label="0.747934;181pkt 181fpkt"];
2913--4104[label="0.252066;61pkt 61fpkt"];
2913--6824[label="0.747934;181pkt 181fpkt"];
2913--8720[label="0.747934;181pkt 181fpkt"];
2965--3959[label="0.4;98pkt 98fpkt"];
2965--4104[label="0.6;147pkt 147fpkt"];
2965--6733[label="0.4;98pkt 98fpkt"];
2965--8657[label="0.4;98pkt 98fpkt"];
3130--3296[label="1;2pkt 2fpkt"];
3130--4104[label="1;2pkt 2fpkt"];
3959--6733[label="1;3511pkt 3511fpkt"];
3959--8657[label="1;3511pkt 3511fpkt"];
4092--6824[label="1;4511pkt 4511fpkt"];
4092--8720[label="1;4510pkt 4510fpkt"];
5737--7986[label="1;15pkt 15fpkt"];
5737--9468[label="1;16pkt 16fpkt"];
6733--8657[label="1;3511pkt 3511fpkt"];
6824--8720[label="1;4510pkt 4510fpkt"];
7986--9468[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.8.62"/>
      <filter src_ip="161.223.8.63"/>
      <filter src_ip="161.223.8.51"/>
      <filter src_port="3128"/>
      <filter src_port="3124"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,901,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
635[label="196.6.221.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
636[label="195.80.130.218;s;3pkt 3fpkt", shape=diamond, color=yellow];
5921[label="195.80.130.218;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.130.218:2226, 196.206.188.74:1863}[33.3333%]&lt;BR/&gt;{195.80.130.218:3037, 196.6.221.165:80}[33.3333%]&lt;BR/&gt;{195.80.130.218:3645, 32.136.147.198:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 3037: (21.4286%)&lt;BR/&gt; 3645: (14.2857%)&lt;BR/&gt; 2226: (14.2857%)&lt;BR/&gt; 1863: (14.2857%)&gt;];
}
635--636[label="1;1pkt 1fpkt"];
635--3296[label="1;1pkt 1fpkt"];
635--5921[label="1;1pkt 1fpkt"];
636--3296[label="0.333333;1pkt 1fpkt"];
636--5921[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="32.136.147.198" dst_port="80" src_ip="195.80.130.218" src_port="3645"/>
      <filter dst_ip="196.6.221.165" dst_port="80" src_ip="195.80.130.218" src_port="3037"/>
      <filter dst_ip="196.206.188.74" dst_port="1863" src_ip="195.80.130.218" src_port="2226"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
429[label="132.19.55.80;s;107pkt 107fpkt", shape=diamond, color=yellow];
668[label="199.10.76.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
2767[label="132.19.55.80;s;34pkt 34fpkt", shape=hexagon, color=black];
4327[label="132.19.55.80;108pkt 108fpkt", shape=pentagon, color=darkviolet];
6992[label="132.19.55.80;108pkt 108fpkt", shape=invtriangle, color=brown];
8831[label="132.19.55.80;109pkt 109fpkt", shape=invhouse, color=bisque];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.55.80:*, *:80}[63.3028%]&lt;BR/&gt;{132.19.55.80:63575, *:*}[26.6055%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.7281%)&lt;BR/&gt; 63575: (13.8116%)&lt;BR/&gt; 45407: (1.606%)&lt;BR/&gt; 443: (1.606%)&lt;BR/&gt; 3213: (0.856531%)&gt;];
}
429--668[label="1;1pkt 1fpkt"];
429--808[label="0.0186916;2pkt 2fpkt"];
429--840[label="0.0103093;1pkt 1fpkt"];
429--1011[label="0.0934579;10pkt 10fpkt"];
429--1513[label="0.0186916;2pkt 2fpkt"];
429--2217[label="0.0147059;1pkt 1fpkt"];
429--2255[label="0.555556;10pkt 10fpkt"];
429--2324[label="0.00934579;1pkt 1fpkt"];
429--2767[label="1;34pkt 34fpkt"];
429--3296[label="0.0560748;6pkt 6fpkt"];
429--4327[label="0.990654;106pkt 106fpkt"];
429--6992[label="0.990654;106pkt 106fpkt"];
429--8831[label="1;107pkt 107fpkt"];
668--2767[label="1;1pkt 1fpkt"];
668--3296[label="1;1pkt 1fpkt"];
668--4327[label="1;1pkt 1fpkt"];
668--6992[label="1;1pkt 1fpkt"];
668--8831[label="1;1pkt 1fpkt"];
2767--3296[label="0.0294118;1pkt 1fpkt"];
2767--4327[label="0.970588;33pkt 33fpkt"];
2767--6992[label="0.970588;33pkt 33fpkt"];
2767--8831[label="1;34pkt 34fpkt"];
4327--6992[label="1;108pkt 108fpkt"];
4327--8831[label="1;108pkt 108fpkt"];
6992--8831[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.55.80" src_port="63575"/>
      <filter dst_port="80" src_ip="132.19.55.80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
669[label="82.96.9.158;s;2873pkt 2873fpkt", shape=diamond, color=yellow];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.96.9.158:3453, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3453: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
669--2323[label="0.00564972;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="82.96.9.158" src_port="3453"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
398[label="128.202.74.63;s;361pkt 361fpkt", shape=diamond, color=yellow];
737[label="41.148.12.192;d;33pkt 33fpkt", shape=diamond, color=yellow];
934[label="198.212.37.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
1155[label="32.136.134.221;d;167pkt 167fpkt", shape=diamond, color=yellow];
1683[label="196.111.142.208;d;56pkt 56fpkt", shape=diamond, color=yellow];
1925[label="219.72.103.46;d;59pkt 59fpkt", shape=diamond, color=yellow];
2533[label="128.202.100.136;s;344pkt 344fpkt", shape=diamond, color=yellow];
3906[label="128.202.172.45;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4108[label="128.202.74.63;400pkt 400fpkt", shape=pentagon, color=darkviolet];
4923[label="128.202.100.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6835[label="128.202.74.63;399pkt 399fpkt", shape=invtriangle, color=brown];
7413[label="128.202.100.136;2pkt 2fpkt", shape=invtriangle, color=brown];
8728[label="128.202.74.63;399pkt 399fpkt", shape=invhouse, color=bisque];
8801[label="132.19.152.74;12pkt 12fpkt", shape=invhouse, color=bisque];
9100[label="128.202.100.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.74.63:*, *:80}[38.2066%]&lt;BR/&gt;{128.202.100.136:0, *:0}[29.6296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3102%)&lt;BR/&gt; 0: (13.8146%)&lt;BR/&gt; 53: (0.913547%)&lt;BR/&gt; 443: (0.735294%)&lt;BR/&gt; 1024: (0.155971%)&gt;];
}
398--602[label="0.0113636;1pkt 1fpkt"];
398--694[label="0.138095;29pkt 29fpkt"];
398--737[label="0.030303;1pkt 1fpkt"];
398--840[label="0.0206186;2pkt 2fpkt"];
398--934[label="1;1pkt 1fpkt"];
398--1011[label="0.0561798;10pkt 10fpkt"];
398--1155[label="0.263473;44pkt 44fpkt"];
398--1268[label="0.0672646;15pkt 15fpkt"];
398--1531[label="0.0130719;2pkt 2fpkt"];
398--1555[label="0.0280374;3pkt 3fpkt"];
398--1631[label="0.134328;9pkt 9fpkt"];
398--1683[label="0.0714286;4pkt 4fpkt"];
398--1925[label="0.0169492;1pkt 1fpkt"];
398--2255[label="0.0555556;1pkt 1fpkt"];
398--2574[label="0.0243902;2pkt 2fpkt"];
398--2587[label="0.0192308;1pkt 1fpkt"];
398--3148[label="0.338462;44pkt 44fpkt"];
398--3296[label="0.00554017;2pkt 2fpkt"];
398--4108[label="1;361pkt 361fpkt"];
398--6835[label="0.99723;360pkt 360fpkt"];
398--8728[label="0.99723;360pkt 360fpkt"];
737--1732[label="0.222222;2pkt 2fpkt"];
737--2533[label="0.030303;1pkt 1fpkt"];
737--3500[label="0.5;5pkt 5fpkt"];
737--3906[label="0.125;1pkt 1fpkt"];
737--4108[label="0.030303;1pkt 1fpkt"];
737--5632[label="0.030303;1pkt 1fpkt"];
737--6426[label="0.5;5pkt 5fpkt"];
737--6835[label="0.030303;1pkt 1fpkt"];
737--7911[label="0.030303;1pkt 1fpkt"];
737--8728[label="0.030303;1pkt 1fpkt"];
737--9422[label="0.030303;1pkt 1fpkt"];
934--4108[label="1;1pkt 1fpkt"];
934--6835[label="1;1pkt 1fpkt"];
934--8728[label="1;1pkt 1fpkt"];
1155--1166[label="0.640719;107pkt 107fpkt"];
1155--2533[label="0.00598802;1pkt 1fpkt"];
1155--2838[label="0.00943396;1pkt 1fpkt"];
1155--3148[label="1;130pkt 130fpkt"];
1155--3296[label="0.00598802;1pkt 1fpkt"];
1155--3336[label="0.00598802;1pkt 1fpkt"];
1155--3959[label="0.00598802;1pkt 1fpkt"];
1155--4092[label="0.00598802;1pkt 1fpkt"];
1155--4108[label="0.263473;44pkt 44fpkt"];
1155--4114[label="0.00598802;1pkt 1fpkt"];
1155--4338[label="0.037037;1pkt 1fpkt"];
1155--4510[label="0.640719;107pkt 107fpkt"];
1155--6104[label="0.0172414;1pkt 1fpkt"];
1155--6306[label="0.00598802;1pkt 1fpkt"];
1155--6733[label="0.00598802;1pkt 1fpkt"];
1155--6824[label="0.00598802;1pkt 1fpkt"];
1155--6835[label="0.263473;44pkt 44fpkt"];
1155--7003[label="0.037037;1pkt 1fpkt"];
1155--8657[label="0.00598802;1pkt 1fpkt"];
1155--8720[label="0.00598802;1pkt 1fpkt"];
1155--8728[label="0.263473;44pkt 44fpkt"];
1155--8837[label="0.037037;1pkt 1fpkt"];
1683--3005[label="0.625;5pkt 5fpkt"];
1683--3180[label="0.0178571;1pkt 1fpkt"];
1683--3233[label="0.0178571;1pkt 1fpkt"];
1683--3296[label="0.0892857;5pkt 5fpkt"];
1683--3930[label="0.625;5pkt 5fpkt"];
1683--4108[label="0.0714286;4pkt 4fpkt"];
1683--4261[label="0.0833333;1pkt 1fpkt"];
1683--4361[label="0.222222;6pkt 6fpkt"];
1683--4364[label="0.103448;3pkt 3fpkt"];
1683--4375[label="0.0178571;1pkt 1fpkt"];
1683--4416[label="0.0357143;2pkt 2fpkt"];
1683--4950[label="0.333333;6pkt 6fpkt"];
1683--5465[label="0.0434783;1pkt 1fpkt"];
1683--5632[label="0.107143;6pkt 6fpkt"];
1683--5704[label="0.0357143;2pkt 2fpkt"];
1683--5775[label="0.0357143;2pkt 2fpkt"];
1683--6709[label="0.625;5pkt 5fpkt"];
1683--6835[label="0.0714286;4pkt 4fpkt"];
1683--6945[label="0.0769231;1pkt 1fpkt"];
1683--7020[label="0.230769;6pkt 6fpkt"];
1683--7027[label="0.0178571;1pkt 1fpkt"];
1683--7783[label="0.0454545;1pkt 1fpkt"];
1683--7911[label="0.107143;6pkt 6fpkt"];
1683--8644[label="0.571429;4pkt 4fpkt"];
1683--8728[label="0.0714286;4pkt 4fpkt"];
1683--8801[label="0.0833333;1pkt 1fpkt"];
1683--8852[label="0.0178571;1pkt 1fpkt"];
1683--9340[label="0.0434783;1pkt 1fpkt"];
1683--9422[label="0.107143;6pkt 6fpkt"];
1925--2831[label="0.0169492;1pkt 1fpkt"];
1925--3180[label="0.0508475;3pkt 3fpkt"];
1925--4090[label="0.5;13pkt 13fpkt"];
1925--4108[label="0.0169492;1pkt 1fpkt"];
1925--4375[label="0.0508475;3pkt 3fpkt"];
1925--4577[label="0.0169492;1pkt 1fpkt"];
1925--4949[label="0.0508475;3pkt 3fpkt"];
1925--5380[label="0.0666667;2pkt 2fpkt"];
1925--5537[label="0.0769231;1pkt 1fpkt"];
1925--5601[label="0.0588235;3pkt 3fpkt"];
1925--5632[label="0.101695;6pkt 6fpkt"];
1925--6822[label="0.5;13pkt 13fpkt"];
1925--6835[label="0.0169492;1pkt 1fpkt"];
1925--7027[label="0.0508475;3pkt 3fpkt"];
1925--7167[label="0.0169492;1pkt 1fpkt"];
1925--7431[label="0.0508475;3pkt 3fpkt"];
1925--7885[label="0.0588235;3pkt 3fpkt"];
1925--7911[label="0.101695;6pkt 6fpkt"];
1925--8718[label="0.52;13pkt 13fpkt"];
1925--8728[label="0.0169492;1pkt 1fpkt"];
1925--8852[label="0.0508475;3pkt 3fpkt"];
1925--8945[label="0.0169492;1pkt 1fpkt"];
1925--9111[label="0.0338983;2pkt 2fpkt"];
1925--9407[label="0.06;3pkt 3fpkt"];
1925--9422[label="0.101695;6pkt 6fpkt"];
2533--2555[label="0.00704225;1pkt 1fpkt"];
2533--2587[label="0.0192308;1pkt 1fpkt"];
2533--2604[label="0.0294118;1pkt 1fpkt"];
2533--2673[label="0.04;1pkt 1fpkt"];
2533--3148[label="0.00769231;1pkt 1fpkt"];
2533--3161[label="0.2;1pkt 1fpkt"];
2533--3287[label="0.00290698;1pkt 1fpkt"];
2533--3302[label="0.0116279;4pkt 4fpkt"];
2533--4923[label="0.5;1pkt 1fpkt"];
2533--7413[label="0.5;1pkt 1fpkt"];
4108--6835[label="1;399pkt 399fpkt"];
4108--8728[label="1;399pkt 399fpkt"];
4923--7413[label="1;2pkt 2fpkt"];
4923--9100[label="1;1pkt 1fpkt"];
6835--8728[label="1;399pkt 399fpkt"];
7413--9100[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.202.74.63"/>
      <filter src_ip="128.202.100.136"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
1[label="136.184.80.30s;2pkt 2fpkt", shape=rectangle, color=red];
733[label="136.184.80.30;s;23pkt 23fpkt", shape=diamond, color=yellow];
1097[label="132.19.43.146;d;137pkt 137fpkt", shape=diamond, color=yellow];
3429[label="139.81.205.8;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3737[label="136.184.80.30;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5660[label="33.0.41.197;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6075[label="36.133.108.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6583[label="136.184.80.30;24pkt 24fpkt", shape=invtriangle, color=brown];
7931[label="33.0.41.197;7pkt 7fpkt", shape=invtriangle, color=brown];
7961[label="210.226.98.200;17pkt 17fpkt", shape=invtriangle, color=brown];
9452[label="210.226.98.200;17pkt 17fpkt", shape=invhouse, color=bisque];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.43.146:24793}[24.2604%]&lt;BR/&gt;{*:80, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.0375%)&lt;BR/&gt; 24793: (7.86517%)&lt;BR/&gt; 5050: (6.17978%)&lt;BR/&gt; 47169: (4.49438%)&lt;BR/&gt; 48055: (3.74532%)&gt;];
}
1--733[label="1;2pkt 2fpkt"];
1--1097[label="1;2pkt 2fpkt"];
1--3292[label="1;2pkt 2fpkt"];
1--3303[label="1;2pkt 2fpkt"];
1--3737[label="1;2pkt 2fpkt"];
1--6583[label="1;2pkt 2fpkt"];
733--787[label="0.0434783;1pkt 1fpkt"];
733--788[label="0.0869565;2pkt 2fpkt"];
733--1067[label="0.173913;4pkt 4fpkt"];
733--1097[label="0.521739;12pkt 12fpkt"];
733--3292[label="0.0869565;2pkt 2fpkt"];
733--3303[label="0.0869565;2pkt 2fpkt"];
733--3737[label="1;23pkt 23fpkt"];
733--6583[label="0.956522;22pkt 22fpkt"];
1097--1247[label="0.00729927;1pkt 1fpkt"];
1097--1276[label="0.0149254;1pkt 1fpkt"];
1097--2098[label="0.0145985;2pkt 2fpkt"];
1097--2125[label="0.0555556;1pkt 1fpkt"];
1097--3181[label="0.0145985;2pkt 2fpkt"];
1097--3292[label="0.0145985;2pkt 2fpkt"];
1097--3303[label="0.0145985;2pkt 2fpkt"];
1097--3351[label="0.00729927;1pkt 1fpkt"];
1097--3429[label="0.857143;6pkt 6fpkt"];
1097--3737[label="0.48;12pkt 12fpkt"];
1097--4967[label="0.0294118;1pkt 1fpkt"];
1097--5609[label="0.0149254;1pkt 1fpkt"];
1097--5660[label="0.714286;5pkt 5fpkt"];
1097--5703[label="0.0555556;1pkt 1fpkt"];
1097--5896[label="0.0145985;2pkt 2fpkt"];
1097--6006[label="0.0217391;1pkt 1fpkt"];
1097--6075[label="1;1pkt 1fpkt"];
1097--6093[label="0.0145985;2pkt 2fpkt"];
1097--6130[label="0.015873;1pkt 1fpkt"];
1097--6320[label="0.00729927;1pkt 1fpkt"];
1097--6583[label="0.5;12pkt 12fpkt"];
1097--7931[label="0.714286;5pkt 5fpkt"];
1097--7961[label="0.0588235;1pkt 1fpkt"];
1097--8174[label="0.0222222;1pkt 1fpkt"];
1097--8241[label="0.0145985;2pkt 2fpkt"];
1097--8264[label="0.016129;1pkt 1fpkt"];
1097--8404[label="0.00729927;1pkt 1fpkt"];
1097--9452[label="0.0588235;1pkt 1fpkt"];
1097--9597[label="0.0222222;1pkt 1fpkt"];
1097--9640[label="0.0145985;2pkt 2fpkt"];
1097--9659[label="0.016129;1pkt 1fpkt"];
3737--6583[label="1;24pkt 24fpkt"];
5660--7931[label="1;7pkt 7fpkt"];
7961--9452[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="132.19.43.146" dst_port="24793"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
829[label="132.19.241.18;d;100pkt 100fpkt", shape=diamond, color=yellow];
1165[label="128.28.231.96;d;295pkt 295fpkt", shape=diamond, color=yellow];
1451[label="217.32.96.29;s;80pkt 80fpkt", shape=diamond, color=yellow];
1633[label="67.53.196.164;s;44pkt 44fpkt", shape=diamond, color=yellow];
1783[label="132.19.202.200;d;40pkt 40fpkt", shape=diamond, color=yellow];
2221[label="39.170.90.69;s;79pkt 79fpkt", shape=diamond, color=yellow];
3212[label="39.170.90.69;s;79pkt 79fpkt", shape=hexagon, color=black];
4182[label="39.170.90.69;82pkt 82fpkt", shape=pentagon, color=darkviolet];
5156[label="32.136.134.154;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5615[label="37.213.69.194;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6547[label="36.133.107.25;21pkt 21fpkt", shape=invtriangle, color=brown];
6557[label="217.32.96.26;143pkt 143fpkt", shape=invtriangle, color=brown];
6887[label="39.170.90.69;82pkt 82fpkt", shape=invtriangle, color=brown];
7897[label="37.213.69.194;12pkt 12fpkt", shape=invtriangle, color=brown];
8553[label="217.32.96.26;142pkt 142fpkt", shape=invhouse, color=bisque];
8765[label="39.170.90.69;81pkt 81fpkt", shape=invhouse, color=bisque];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 128.28.231.96:*}[37.4365%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.0226%)&lt;BR/&gt; 25: (19.4507%)&lt;BR/&gt; 443: (0.300978%)&lt;BR/&gt; 59463: (0.263356%)&lt;BR/&gt; 53: (0.263356%)&gt;];
}
829--2221[label="0.189873;15pkt 15fpkt"];
829--3212[label="0.189873;15pkt 15fpkt"];
829--3290[label="0.01;1pkt 1fpkt"];
829--3675[label="0.05;1pkt 1fpkt"];
829--4182[label="0.182927;15pkt 15fpkt"];
829--4256[label="0.166667;5pkt 5fpkt"];
829--6547[label="0.047619;1pkt 1fpkt"];
829--6887[label="0.182927;15pkt 15fpkt"];
829--8548[label="0.047619;1pkt 1fpkt"];
829--8765[label="0.185185;15pkt 15fpkt"];
1165--1440[label="0.701493;141pkt 141fpkt"];
1165--3062[label="0.436893;45pkt 45fpkt"];
1165--3292[label="0.149153;44pkt 44fpkt"];
1165--3303[label="0.149153;44pkt 44fpkt"];
1165--3367[label="0.545455;120pkt 120fpkt"];
1165--5156[label="0.918919;34pkt 34fpkt"];
1165--5961[label="0.69802;141pkt 141fpkt"];
1165--6331[label="0.547945;120pkt 120fpkt"];
1165--7575[label="0.894737;34pkt 34fpkt"];
1165--8412[label="0.545455;120pkt 120fpkt"];
1165--9205[label="0.894737;34pkt 34fpkt"];
1451--1615[label="0.125;2pkt 2fpkt"];
1451--2247[label="0.6625;53pkt 53fpkt"];
1451--3216[label="1;80pkt 80fpkt"];
1451--3292[label="0.05;4pkt 4fpkt"];
1451--3303[label="0.05;4pkt 4fpkt"];
1451--3726[label="0.9875;79pkt 79fpkt"];
1451--6578[label="0.9875;79pkt 79fpkt"];
1633--1783[label="0.275;11pkt 11fpkt"];
1633--3026[label="0.386364;17pkt 17fpkt"];
1633--3288[label="0.181818;8pkt 8fpkt"];
1633--5286[label="1;44pkt 44fpkt"];
1633--7671[label="1;44pkt 44fpkt"];
1633--9271[label="1;44pkt 44fpkt"];
1783--1793[label="1;7pkt 7fpkt"];
1783--1808[label="1;5pkt 5fpkt"];
1783--2134[label="0.125;5pkt 5fpkt"];
1783--2652[label="1;7pkt 7fpkt"];
1783--3221[label="1;5pkt 5fpkt"];
1783--3292[label="0.225;9pkt 9fpkt"];
1783--3303[label="0.225;9pkt 9fpkt"];
1783--3689[label="0.125;5pkt 5fpkt"];
1783--4997[label="1;5pkt 5fpkt"];
1783--5286[label="0.275;11pkt 11fpkt"];
1783--5318[label="0.125;5pkt 5fpkt"];
1783--5610[label="1;6pkt 6fpkt"];
1783--6557[label="0.125;5pkt 5fpkt"];
1783--7465[label="1;4pkt 4fpkt"];
1783--7671[label="0.275;11pkt 11fpkt"];
1783--7689[label="0.125;5pkt 5fpkt"];
1783--7892[label="1;6pkt 6fpkt"];
1783--8553[label="0.125;5pkt 5fpkt"];
1783--9132[label="1;4pkt 4fpkt"];
1783--9271[label="0.275;11pkt 11fpkt"];
1783--9281[label="0.125;5pkt 5fpkt"];
1783--9412[label="1;6pkt 6fpkt"];
2221--3212[label="1;79pkt 79fpkt"];
2221--4182[label="1;79pkt 79fpkt"];
2221--6887[label="1;79pkt 79fpkt"];
2221--8765[label="0.987342;78pkt 78fpkt"];
3212--4182[label="1;79pkt 79fpkt"];
3212--6887[label="1;79pkt 79fpkt"];
3212--8765[label="0.987342;78pkt 78fpkt"];
4182--6887[label="1;82pkt 82fpkt"];
4182--8765[label="1;81pkt 81fpkt"];
5156--7575[label="1;37pkt 37fpkt"];
5156--9205[label="1;37pkt 37fpkt"];
5615--7897[label="1;12pkt 12fpkt"];
5615--9414[label="1;12pkt 12fpkt"];
6547--8548[label="1;21pkt 21fpkt"];
6557--8553[label="1;142pkt 142fpkt"];
6887--8765[label="1;81pkt 81fpkt"];
7897--9414[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.231.96" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.51.38.49"/>
      <from sec="1144126911" usec="0"/>
      <to sec="1144126978" usec="0"/>
    </slice>
    <from sec="1144126911" usec="0"/>
    <to sec="1144126978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
216[label="128.202.81.235;s;10pkt 10fpkt", shape=diamond, color=yellow];
806[label="39.74.173.98;d;3pkt 3fpkt", shape=diamond, color=yellow];
6110[label="128.202.81.235;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8251[label="128.202.81.235;11pkt 11fpkt", shape=invtriangle, color=brown];
9649[label="128.202.81.235;10pkt 10fpkt", shape=invhouse, color=bisque];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.81.235:*, 39.74.173.98:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1382: (5.55556%)&lt;BR/&gt; 1381: (5.55556%)&lt;BR/&gt; 1404: (4.44444%)&lt;BR/&gt; 1403: (4.44444%)&gt;];
}
216--806[label="1;3pkt 3fpkt"];
216--3296[label="1;10pkt 10fpkt"];
216--6110[label="1;10pkt 10fpkt"];
216--8251[label="1;10pkt 10fpkt"];
216--9649[label="0.9;9pkt 9fpkt"];
806--3296[label="1;3pkt 3fpkt"];
806--6110[label="1;3pkt 3fpkt"];
806--8251[label="1;3pkt 3fpkt"];
806--9649[label="0.666667;2pkt 2fpkt"];
6110--8251[label="1;11pkt 11fpkt"];
6110--9649[label="1;10pkt 10fpkt"];
8251--9649[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="39.74.173.98" dst_port="80" src_ip="128.202.81.235"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
479[label="213.190.151.57;s;10pkt 10fpkt", shape=diamond, color=yellow];
1916[label="128.28.83.73;d;771pkt 771fpkt", shape=diamond, color=yellow];
2256[label="85.206.212.126;s;15pkt 15fpkt", shape=diamond, color=yellow];
2423[label="82.141.93.185;s;9pkt 9fpkt", shape=diamond, color=yellow];
3410[label="82.117.131.7;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4032[label="213.190.151.57;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5420[label="194.192.193.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5433[label="195.194.255.175;132pkt 132fpkt", shape=pentagon, color=darkviolet];
5519[label="82.141.93.185;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6250[label="213.188.150.250;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7753[label="194.192.193.174;2pkt 2fpkt", shape=invtriangle, color=brown];
7825[label="82.141.93.185;12pkt 12fpkt", shape=invtriangle, color=brown];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 128.28.83.73:*}[78.8108%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.713%)&lt;BR/&gt; 25: (4.83384%)&lt;BR/&gt; 0: (0.503525%)&lt;BR/&gt; 80: (0.20141%)&lt;BR/&gt; 4535: (0.151057%)&gt;];
}
479--828[label="0.8;8pkt 8fpkt"];
479--2907[label="0.4;4pkt 4fpkt"];
479--4032[label="1;10pkt 10fpkt"];
1916--3287[label="0.0259403;20pkt 20fpkt"];
1916--3290[label="0.00389105;3pkt 3fpkt"];
1916--3295[label="0.00518807;4pkt 4fpkt"];
1916--3302[label="0.123217;95pkt 95fpkt"];
1916--3390[label="0.484163;107pkt 107fpkt"];
1916--3604[label="0.0133333;1pkt 1fpkt"];
1916--3919[label="0.0188679;1pkt 1fpkt"];
1916--3950[label="0.0116279;1pkt 1fpkt"];
1916--4837[label="0.00819672;1pkt 1fpkt"];
1916--4928[label="0.394958;47pkt 47fpkt"];
1916--4941[label="0.442105;126pkt 126fpkt"];
1916--5433[label="0.265152;35pkt 35fpkt"];
1916--5668[label="0.351852;19pkt 19fpkt"];
1916--5750[label="0.0138889;1pkt 1fpkt"];
1916--5950[label="0.0454545;3pkt 3fpkt"];
1916--6076[label="0.379747;30pkt 30fpkt"];
1916--6078[label="0.0727273;4pkt 4fpkt"];
1916--6099[label="0.690141;49pkt 49fpkt"];
1916--6278[label="0.09375;12pkt 12fpkt"];
1916--6348[label="0.484163;107pkt 107fpkt"];
1916--6725[label="0.0114943;1pkt 1fpkt"];
1916--7354[label="0.00819672;1pkt 1fpkt"];
1916--7417[label="0.398305;47pkt 47fpkt"];
1916--7762[label="0.265152;35pkt 35fpkt"];
1916--7936[label="0.351852;19pkt 19fpkt"];
1916--7997[label="0.0138889;1pkt 1fpkt"];
1916--8132[label="0.0461538;3pkt 3fpkt"];
1916--8229[label="0.0740741;4pkt 4fpkt"];
1916--8653[label="0.0116279;1pkt 1fpkt"];
1916--9067[label="0.00826446;1pkt 1fpkt"];
1916--9328[label="0.265152;35pkt 35fpkt"];
1916--9476[label="0.0140845;1pkt 1fpkt"];
1916--9571[label="0.0454545;3pkt 3fpkt"];
2256--2907[label="0.333333;5pkt 5fpkt"];
2256--4789[label="1;15pkt 15fpkt"];
2423--2907[label="0.444444;4pkt 4fpkt"];
2423--5519[label="1;9pkt 9fpkt"];
2423--7825[label="1;9pkt 9fpkt"];
2423--9369[label="1;9pkt 9fpkt"];
3410--6363[label="1;4pkt 4fpkt"];
3410--8433[label="1;4pkt 4fpkt"];
5420--7753[label="1;2pkt 2fpkt"];
5420--9323[label="1;2pkt 2fpkt"];
5433--7762[label="1;132pkt 132fpkt"];
5433--9328[label="1;132pkt 132fpkt"];
5519--7825[label="1;12pkt 12fpkt"];
5519--9369[label="1;11pkt 11fpkt"];
6250--8353[label="1;8pkt 8fpkt"];
6250--9722[label="1;8pkt 8fpkt"];
7753--9323[label="1;2pkt 2fpkt"];
7825--9369[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.73" src_port="53"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
173[label="164.23.213.217;s;299pkt 299fpkt", shape=diamond, color=yellow];
1000[label="192.195.244.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2502[label="38.78.98.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
2815[label="192.195.244.2;d;1pkt 1fpkt", shape=hexagon, color=black];
3226[label="164.23.213.217;s;299pkt 299fpkt", shape=hexagon, color=black];
5911[label="164.23.213.217;315pkt 315fpkt", shape=pentagon, color=darkviolet];
8107[label="164.23.213.217;315pkt 315fpkt", shape=invtriangle, color=brown];
9553[label="164.23.213.217;315pkt 315fpkt", shape=invhouse, color=bisque];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.213.217:80, *:*}[98.7302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3532%)&lt;BR/&gt; 443: (0.485123%)&lt;BR/&gt; 4659: (0.323415%)&lt;BR/&gt; 4176: (0.323415%)&lt;BR/&gt; 62388: (0.226391%)&gt;];
}
173--847[label="0.25;1pkt 1fpkt"];
173--1000[label="1;1pkt 1fpkt"];
173--2502[label="1;1pkt 1fpkt"];
173--2815[label="1;1pkt 1fpkt"];
173--3226[label="1;299pkt 299fpkt"];
173--3288[label="0.307692;92pkt 92fpkt"];
173--3292[label="0.391304;117pkt 117fpkt"];
173--3303[label="0.391304;117pkt 117fpkt"];
173--5911[label="1;299pkt 299fpkt"];
173--8107[label="1;299pkt 299fpkt"];
173--9553[label="1;299pkt 299fpkt"];
1000--2815[label="1;1pkt 1fpkt"];
1000--3226[label="1;1pkt 1fpkt"];
1000--3288[label="1;1pkt 1fpkt"];
1000--3292[label="1;1pkt 1fpkt"];
1000--3303[label="1;1pkt 1fpkt"];
1000--5911[label="1;1pkt 1fpkt"];
1000--8107[label="1;1pkt 1fpkt"];
1000--9553[label="1;1pkt 1fpkt"];
2502--3226[label="1;1pkt 1fpkt"];
2502--3288[label="1;1pkt 1fpkt"];
2502--3292[label="1;1pkt 1fpkt"];
2502--3303[label="1;1pkt 1fpkt"];
2502--5911[label="1;1pkt 1fpkt"];
2502--8107[label="1;1pkt 1fpkt"];
2502--9553[label="1;1pkt 1fpkt"];
2815--3226[label="1;1pkt 1fpkt"];
2815--3288[label="1;1pkt 1fpkt"];
2815--3292[label="1;1pkt 1fpkt"];
2815--3303[label="1;1pkt 1fpkt"];
2815--5911[label="1;1pkt 1fpkt"];
2815--8107[label="1;1pkt 1fpkt"];
2815--9553[label="1;1pkt 1fpkt"];
3226--3288[label="0.307692;92pkt 92fpkt"];
3226--3292[label="0.391304;117pkt 117fpkt"];
3226--3303[label="0.391304;117pkt 117fpkt"];
3226--5911[label="1;299pkt 299fpkt"];
3226--8107[label="1;299pkt 299fpkt"];
3226--9553[label="1;299pkt 299fpkt"];
5911--8107[label="1;315pkt 315fpkt"];
5911--9553[label="1;315pkt 315fpkt"];
8107--9553[label="1;315pkt 315fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.213.217" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
898[label="196.6.221.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
899[label="128.28.68.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
3580[label="128.28.68.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6477[label="128.28.68.19;1pkt 1fpkt", shape=invtriangle, color=brown];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.68.19:49168, 196.6.221.164:8002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49168: (50%)&lt;BR/&gt; 8002: (50%)&gt;];
}
898--899[label="1;1pkt 1fpkt"];
898--3580[label="1;1pkt 1fpkt"];
898--6477[label="1;1pkt 1fpkt"];
899--3580[label="1;1pkt 1fpkt"];
899--6477[label="1;1pkt 1fpkt"];
3580--6477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.6.221.164" dst_port="8002" src_ip="128.28.68.19" src_port="49168"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
373[label="128.202.6.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
903[label="210.169.222.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
5639[label="128.202.6.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7916[label="128.202.6.196;1pkt 1fpkt", shape=invtriangle, color=brown];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.6.196:1181, 210.169.222.215:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1181: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
373--903[label="1;1pkt 1fpkt"];
373--5639[label="1;1pkt 1fpkt"];
373--7916[label="1;1pkt 1fpkt"];
903--5639[label="1;1pkt 1fpkt"];
903--7916[label="1;1pkt 1fpkt"];
5639--7916[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.169.222.215" dst_port="80" src_ip="128.202.6.196" src_port="1181"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.169.220.71"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127539" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,502,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
319[label="164.23.192.152;s;31pkt 31fpkt", shape=diamond, color=yellow];
905[label="32.50.52.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
1544[label="210.226.98.245;d;44pkt 44fpkt", shape=diamond, color=yellow];
2140[label="48.208.96.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
3504[label="164.23.205.13;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5132[label="164.23.192.152;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6188[label="164.23.224.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6429[label="164.23.205.13;39pkt 39fpkt", shape=invtriangle, color=brown];
7556[label="164.23.192.152;32pkt 32fpkt", shape=invtriangle, color=brown];
8307[label="164.23.224.243;1pkt 1fpkt", shape=invtriangle, color=brown];
8474[label="164.23.205.13;40pkt 40fpkt", shape=invhouse, color=bisque];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.226.98.245:5050}[34.2105%]&lt;BR/&gt;{164.23.205.13:80, *:*}[28.0702%]&lt;BR/&gt;{164.23.192.152:22, *:*}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.0769%)&lt;BR/&gt; 22: (15%)&lt;BR/&gt; 5050: (9.61538%)&lt;BR/&gt; 443: (6.34615%)&lt;BR/&gt; 50408: (1.15385%)&gt;];
}
319--905[label="1;1pkt 1fpkt"];
319--1544[label="0.0322581;1pkt 1fpkt"];
319--1693[label="0.75;3pkt 3fpkt"];
319--2140[label="1;1pkt 1fpkt"];
319--5132[label="0.967742;30pkt 30fpkt"];
319--7556[label="1;31pkt 31fpkt"];
905--5132[label="1;1pkt 1fpkt"];
905--7556[label="1;1pkt 1fpkt"];
1544--1586[label="0.0227273;1pkt 1fpkt"];
1544--3031[label="0.0227273;1pkt 1fpkt"];
1544--3504[label="0.025641;1pkt 1fpkt"];
1544--3791[label="0.0625;1pkt 1fpkt"];
1544--4122[label="0.0227273;1pkt 1fpkt"];
1544--4797[label="0.0227273;1pkt 1fpkt"];
1544--5132[label="0.0322581;1pkt 1fpkt"];
1544--6188[label="1;1pkt 1fpkt"];
1544--6429[label="0.025641;1pkt 1fpkt"];
1544--6616[label="0.0625;1pkt 1fpkt"];
1544--6845[label="0.0227273;1pkt 1fpkt"];
1544--7324[label="0.0227273;1pkt 1fpkt"];
1544--7556[label="0.03125;1pkt 1fpkt"];
1544--8307[label="1;1pkt 1fpkt"];
1544--8474[label="0.025;1pkt 1fpkt"];
1544--8590[label="0.0588235;1pkt 1fpkt"];
1544--8736[label="0.0227273;1pkt 1fpkt"];
1544--9046[label="0.0227273;1pkt 1fpkt"];
2140--5132[label="1;1pkt 1fpkt"];
2140--7556[label="1;1pkt 1fpkt"];
3504--6429[label="1;39pkt 39fpkt"];
3504--8474[label="1;39pkt 39fpkt"];
5132--7556[label="1;31pkt 31fpkt"];
6188--8307[label="1;1pkt 1fpkt"];
6429--8474[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.205.13" src_port="80"/>
      <filter src_ip="164.23.192.152" src_port="22"/>
      <filter dst_ip="210.226.98.245" dst_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
588[label="132.18.183.219;s;18pkt 18fpkt", shape=diamond, color=yellow];
2559[label="195.181.20.75;d;6pkt 6fpkt", shape=diamond, color=yellow];
3715[label="132.18.236.28;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5941[label="132.18.183.219;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8126[label="132.18.183.219;17pkt 17fpkt", shape=invtriangle, color=brown];
9566[label="132.18.183.219;18pkt 18fpkt", shape=invhouse, color=bisque];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.236.28:*, *:*}[61.4035%]&lt;BR/&gt;{*:*, *:53}[42.1053%]&lt;BR/&gt;{132.18.183.219:53, *:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (58.9286%)&lt;BR/&gt; 25: (5.35714%)&lt;BR/&gt; 49152: (4.91071%)&lt;BR/&gt; 113: (4.01786%)&lt;BR/&gt; 63088: (1.78571%)&gt;];
}
588--906[label="0.0555556;1pkt 1fpkt"];
588--1811[label="0.0555556;1pkt 1fpkt"];
588--1864[label="0.0555556;1pkt 1fpkt"];
588--1930[label="0.0555556;1pkt 1fpkt"];
588--2178[label="0.0555556;1pkt 1fpkt"];
588--2515[label="0.0555556;1pkt 1fpkt"];
588--2522[label="0.0555556;1pkt 1fpkt"];
588--2559[label="0.166667;1pkt 1fpkt"];
588--3287[label="0.5;9pkt 9fpkt"];
588--3290[label="0.5;9pkt 9fpkt"];
588--3295[label="0.555556;10pkt 10fpkt"];
588--3302[label="0.555556;10pkt 10fpkt"];
588--5941[label="1;18pkt 18fpkt"];
588--8126[label="1;17pkt 17fpkt"];
588--9566[label="1;18pkt 18fpkt"];
2559--3287[label="0.166667;1pkt 1fpkt"];
2559--3290[label="0.166667;1pkt 1fpkt"];
2559--3295[label="0.5;3pkt 3fpkt"];
2559--3302[label="0.166667;1pkt 1fpkt"];
2559--3715[label="0.166667;1pkt 1fpkt"];
2559--5941[label="0.166667;1pkt 1fpkt"];
2559--8126[label="0.166667;1pkt 1fpkt"];
2559--9566[label="0.166667;1pkt 1fpkt"];
5941--8126[label="1;17pkt 17fpkt"];
5941--9566[label="1;18pkt 18fpkt"];
8126--9566[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.236.28"/>
      <filter dst_port="53"/>
      <filter src_ip="132.18.183.219" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
381[label="194.212.152.231;s;20pkt 20fpkt", shape=diamond, color=yellow];
913[label="49.73.178.124;d;2pkt 2fpkt", shape=diamond, color=yellow];
2531[label="210.226.98.250;d;22pkt 22fpkt", shape=diamond, color=yellow];
6070[label="194.212.152.231;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8223[label="194.212.152.231;22pkt 22fpkt", shape=invtriangle, color=brown];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.152.231:*, *:*}[51.1628%]&lt;BR/&gt;{*:*, 210.226.98.250:5050}[39.5349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (13.6364%)&lt;BR/&gt; 23007: (11.9318%)&lt;BR/&gt; 5050: (11.3636%)&lt;BR/&gt; 5146: (4.54545%)&lt;BR/&gt; 7402: (3.40909%)&gt;];
}
381--913[label="1;2pkt 2fpkt"];
381--2089[label="0.1;2pkt 2fpkt"];
381--2531[label="0.05;1pkt 1fpkt"];
381--3296[label="0.05;1pkt 1fpkt"];
381--6070[label="1;20pkt 20fpkt"];
381--8223[label="1;20pkt 20fpkt"];
913--6070[label="1;2pkt 2fpkt"];
913--8223[label="1;2pkt 2fpkt"];
2531--4122[label="0.0454545;1pkt 1fpkt"];
2531--4797[label="0.0454545;1pkt 1fpkt"];
2531--6070[label="0.0454545;1pkt 1fpkt"];
2531--6845[label="0.0454545;1pkt 1fpkt"];
2531--7324[label="0.0454545;1pkt 1fpkt"];
2531--8223[label="0.0454545;1pkt 1fpkt"];
2531--8736[label="0.0454545;1pkt 1fpkt"];
2531--9046[label="0.0454545;1pkt 1fpkt"];
6070--8223[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.152.231"/>
      <filter dst_ip="210.226.98.250" dst_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
750[label="132.19.132.80;s;122pkt 122fpkt", shape=diamond, color=yellow];
4331[label="132.19.132.80;122pkt 122fpkt", shape=pentagon, color=darkviolet];
6996[label="132.19.132.80;123pkt 123fpkt", shape=invtriangle, color=brown];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.132.80:*, 132.4.148.214:80}[56.9106%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.0954%)&lt;BR/&gt; 443: (4.90463%)&lt;BR/&gt; 1288: (0.408719%)&lt;BR/&gt; 1287: (0.408719%)&lt;BR/&gt; 1286: (0.408719%)&gt;];
}
750--919[label="0.0901639;11pkt 11fpkt"];
750--1049[label="0.483871;15pkt 15fpkt"];
750--1299[label="0.57377;70pkt 70fpkt"];
750--1965[label="0.0983607;12pkt 12fpkt"];
750--2159[label="0.0869565;2pkt 2fpkt"];
750--4331[label="0.991803;121pkt 121fpkt"];
750--6996[label="1;122pkt 122fpkt"];
4331--6996[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="132.4.148.214" dst_port="80" src_ip="132.19.132.80"/>
    </slice>
    <from sec="1144126881" usec="0"/>
    <to sec="1144127463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
921[label="161.223.157.13;s;2pkt 2fpkt", shape=diamond, color=yellow];
922[label="210.163.164.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
3503[label="161.223.157.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6428[label="161.223.157.13;1pkt 1fpkt", shape=invtriangle, color=brown];
8473[label="161.223.157.13;2pkt 2fpkt", shape=invhouse, color=bisque];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.157.13:1130, 210.163.164.132:21964}[50%]&lt;BR/&gt;{161.223.157.13:1131, 210.163.164.132:21964}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21964: (50%)&lt;BR/&gt; 1130: (31.25%)&lt;BR/&gt; 1131: (18.75%)&gt;];
}
921--922[label="1;2pkt 2fpkt"];
921--3503[label="1;1pkt 1fpkt"];
921--6428[label="1;1pkt 1fpkt"];
921--8473[label="1;2pkt 2fpkt"];
922--3503[label="1;1pkt 1fpkt"];
922--6428[label="1;1pkt 1fpkt"];
922--8473[label="1;2pkt 2fpkt"];
3503--6428[label="1;1pkt 1fpkt"];
3503--8473[label="1;1pkt 1fpkt"];
6428--8473[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.163.164.132" dst_port="21964" src_ip="161.223.157.13" src_port="1131"/>
      <filter dst_ip="210.163.164.132" dst_port="21964" src_ip="161.223.157.13" src_port="1130"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
386[label="132.18.64.48;s;3pkt 3fpkt", shape=diamond, color=yellow];
923[label="192.96.18.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.64.48:2107, 33.94.210.2:80}[33.3333%]&lt;BR/&gt;{132.18.64.48:1344, 192.96.18.51:8181}[33.3333%]&lt;BR/&gt;{132.18.64.48:1047, 113.235.104.182:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8181: (25%)&lt;BR/&gt; 1344: (25%)&lt;BR/&gt; 2107: (12.5%)&lt;BR/&gt; 1047: (12.5%)&lt;BR/&gt; 80: (12.5%)&gt;];
}
386--923[label="1;1pkt 1fpkt"];
386--3290[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="113.235.104.182" dst_port="53" src_ip="132.18.64.48" src_port="1047"/>
      <filter dst_ip="192.96.18.51" dst_port="8181" src_ip="132.18.64.48" src_port="1344"/>
      <filter dst_ip="33.94.210.2" dst_port="80" src_ip="132.18.64.48" src_port="2107"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44016,2.48209,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
3[label="132.19.90.62s;5pkt 5fpkt", shape=rectangle, color=red];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.106.53:1334, 216.69.182.51:80}[20%]&lt;BR/&gt;{132.19.90.62:2185, 210.42.63.60:80}[20%]&lt;BR/&gt;{132.19.90.62:2179, 39.64.59.55:80}[20%]&lt;BR/&gt;{132.19.90.62:2180, 39.64.59.55:80}[20%]&lt;BR/&gt;{132.19.90.62:2184, 39.64.59.55:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2185: (10%)&lt;BR/&gt; 2184: (10%)&lt;BR/&gt; 2180: (10%)&lt;BR/&gt; 2179: (10%)&gt;];
}
3--972[label="0.2;1pkt 1fpkt"];
3--3296[label="0.2;1pkt 1fpkt"];
3--3985[label="0.2;1pkt 1fpkt"];
3--6752[label="0.2;1pkt 1fpkt"];
3--8672[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.64.59.55" dst_port="80" src_ip="132.19.90.62" src_port="2184"/>
      <filter dst_ip="39.64.59.55" dst_port="80" src_ip="132.19.90.62" src_port="2180"/>
      <filter dst_ip="39.64.59.55" dst_port="80" src_ip="132.19.90.62" src_port="2179"/>
      <filter dst_ip="210.42.63.60" dst_port="80" src_ip="132.19.90.62" src_port="2185"/>
      <filter dst_ip="216.69.182.51" dst_port="80" src_ip="195.89.106.53" src_port="1334"/>
    </slice>
    <from sec="1144127643" usec="0"/>
    <to sec="1144127646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
380[label="161.223.196.18;s;192pkt 192fpkt", shape=diamond, color=yellow];
3570[label="161.223.196.18;214pkt 214fpkt", shape=pentagon, color=darkviolet];
6470[label="161.223.196.18;215pkt 215fpkt", shape=invtriangle, color=brown];
8495[label="161.223.196.18;215pkt 215fpkt", shape=invhouse, color=bisque];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.196.18:*, 136.66.9.161:80}[95.3488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5813%)&lt;BR/&gt; 1704: (0.239234%)&lt;BR/&gt; 1703: (0.239234%)&lt;BR/&gt; 1702: (0.239234%)&lt;BR/&gt; 1701: (0.239234%)&gt;];
}
380--981[label="0.923077;168pkt 168fpkt"];
380--3570[label="0.994792;191pkt 191fpkt"];
380--6470[label="1;192pkt 192fpkt"];
380--8495[label="1;192pkt 192fpkt"];
3570--6470[label="1;214pkt 214fpkt"];
3570--8495[label="1;214pkt 214fpkt"];
6470--8495[label="1;215pkt 215fpkt"];
</description>
    <slice>
      <filter dst_ip="136.66.9.161" dst_port="80" src_ip="161.223.196.18"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
368[label="194.212.158.50;s;299pkt 299fpkt", shape=diamond, color=yellow];
703[label="207.178.168.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
716[label="194.212.154.1;s;6pkt 6fpkt", shape=diamond, color=yellow];
993[label="221.85.217.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
1624[label="194.101.159.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1979[label="195.80.133.175;s;126pkt 126fpkt", shape=diamond, color=yellow];
2435[label="41.25.163.0;d;5pkt 5fpkt", shape=diamond, color=yellow];
3951[label="194.212.158.50;324pkt 324fpkt", shape=pentagon, color=darkviolet];
5429[label="195.80.133.175;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.158.50:80, *:*}[34.188%]&lt;BR/&gt;{195.80.133.175:80, *:*}[29.0598%]&lt;BR/&gt;{194.212.158.50:3344, *:53}[20.0855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.5929%)&lt;BR/&gt; 53: (13.4594%)&lt;BR/&gt; 3344: (9.89989%)&lt;BR/&gt; 0: (4.67186%)&lt;BR/&gt; 20: (0.444939%)&gt;];
}
368--703[label="1;1pkt 1fpkt"];
368--993[label="1;1pkt 1fpkt"];
368--1467[label="0.666667;2pkt 2fpkt"];
368--1624[label="1;1pkt 1fpkt"];
368--1811[label="0.0060241;1pkt 1fpkt"];
368--1823[label="0.04;1pkt 1fpkt"];
368--1930[label="0.00689655;1pkt 1fpkt"];
368--2178[label="0.00628931;1pkt 1fpkt"];
368--2378[label="0.0131579;1pkt 1fpkt"];
368--2435[label="0.2;1pkt 1fpkt"];
368--2515[label="0.00571429;1pkt 1fpkt"];
368--3287[label="0.0200669;6pkt 6fpkt"];
368--3288[label="0.0334448;10pkt 10fpkt"];
368--3292[label="0.0200669;6pkt 6fpkt"];
368--3295[label="0.0501672;15pkt 15fpkt"];
368--3296[label="0.0267559;8pkt 8fpkt"];
368--3302[label="0.0167224;5pkt 5fpkt"];
368--3303[label="0.0200669;6pkt 6fpkt"];
368--3951[label="0.996656;298pkt 298fpkt"];
703--3951[label="1;1pkt 1fpkt"];
716--2435[label="0.2;1pkt 1fpkt"];
993--3951[label="1;1pkt 1fpkt"];
1624--3951[label="1;1pkt 1fpkt"];
1979--2435[label="0.4;2pkt 2fpkt"];
1979--3288[label="0.0396825;5pkt 5fpkt"];
1979--3292[label="0.0634921;8pkt 8fpkt"];
1979--3303[label="0.0634921;8pkt 8fpkt"];
1979--5429[label="1;126pkt 126fpkt"];
2435--3292[label="0.4;2pkt 2fpkt"];
2435--3303[label="0.4;2pkt 2fpkt"];
2435--3951[label="0.2;1pkt 1fpkt"];
2435--4934[label="0.2;1pkt 1fpkt"];
2435--5429[label="0.4;2pkt 2fpkt"];
2435--7421[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.158.50" src_port="80"/>
      <filter src_ip="195.80.133.175" src_port="80"/>
      <filter dst_port="53" src_ip="194.212.158.50" src_port="3344"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
256[label="214.51.37.73;s;5985pkt 5985fpkt", shape=diamond, color=yellow];
267[label="128.2.80.41;d;390pkt 390fpkt", shape=diamond, color=yellow];
357[label="128.2.80.142;d;266pkt 266fpkt", shape=diamond, color=yellow];
609[label="128.2.80.167;d;341pkt 341fpkt", shape=diamond, color=yellow];
825[label="128.2.80.243;d;194pkt 194fpkt", shape=diamond, color=yellow];
891[label="128.2.80.5;d;366pkt 366fpkt", shape=diamond, color=yellow];
893[label="128.2.82.185;d;197pkt 197fpkt", shape=diamond, color=yellow];
1005[label="128.2.80.67;d;356pkt 356fpkt", shape=diamond, color=yellow];
1204[label="128.2.80.51;d;547pkt 547fpkt", shape=diamond, color=yellow];
1476[label="128.2.80.4;d;485pkt 485fpkt", shape=diamond, color=yellow];
1764[label="128.2.81.48;d;225pkt 225fpkt", shape=diamond, color=yellow];
1778[label="128.2.81.121;d;334pkt 334fpkt", shape=diamond, color=yellow];
2044[label="128.2.81.64;d;351pkt 351fpkt", shape=diamond, color=yellow];
2052[label="128.2.81.160;d;344pkt 344fpkt", shape=diamond, color=yellow];
2059[label="128.2.81.231;d;327pkt 327fpkt", shape=diamond, color=yellow];
2072[label="128.2.81.216;d;357pkt 357fpkt", shape=diamond, color=yellow];
2271[label="128.2.81.139;d;203pkt 203fpkt", shape=diamond, color=yellow];
2290[label="128.2.87.42;d;110pkt 110fpkt", shape=diamond, color=yellow];
2906[label="128.2.80.243;d;194pkt 194fpkt", shape=hexagon, color=black];
3007[label="128.2.80.41;d;390pkt 390fpkt", shape=hexagon, color=black];
3080[label="128.2.81.64;d;126pkt 126fpkt", shape=hexagon, color=black];
3162[label="128.2.81.216;d;201pkt 201fpkt", shape=hexagon, color=black];
4238[label="214.51.37.73;6525pkt 6525fpkt", shape=pentagon, color=darkviolet];
6928[label="214.51.37.73;6525pkt 6525fpkt", shape=invtriangle, color=brown];
8790[label="214.51.37.73;6525pkt 6525fpkt", shape=invhouse, color=bisque];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.51.37.73:*, *:1433}[99.9387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.9937%)&lt;BR/&gt; 3992: (0.0470751%)&lt;BR/&gt; 3918: (0.0470751%)&lt;BR/&gt; 3912: (0.0470751%)&lt;BR/&gt; 4025: (0.0455059%)&gt;];
}
256--267[label="1;390pkt 390fpkt"];
256--357[label="1;266pkt 266fpkt"];
256--609[label="1;341pkt 341fpkt"];
256--825[label="1;194pkt 194fpkt"];
256--891[label="1;366pkt 366fpkt"];
256--893[label="1;197pkt 197fpkt"];
256--1005[label="1;356pkt 356fpkt"];
256--1204[label="0.996344;545pkt 545fpkt"];
256--1476[label="1;485pkt 485fpkt"];
256--1764[label="0.995556;224pkt 224fpkt"];
256--1778[label="1;334pkt 334fpkt"];
256--2044[label="1;351pkt 351fpkt"];
256--2052[label="1;344pkt 344fpkt"];
256--2059[label="1;327pkt 327fpkt"];
256--2072[label="1;357pkt 357fpkt"];
256--2271[label="1;203pkt 203fpkt"];
256--2290[label="0.990909;109pkt 109fpkt"];
256--2906[label="1;194pkt 194fpkt"];
256--3007[label="1;390pkt 390fpkt"];
256--3080[label="1;126pkt 126fpkt"];
256--3162[label="1;201pkt 201fpkt"];
256--4238[label="1;5985pkt 5985fpkt"];
256--6928[label="1;5985pkt 5985fpkt"];
256--8790[label="1;5985pkt 5985fpkt"];
267--3007[label="1;390pkt 390fpkt"];
267--4238[label="1;390pkt 390fpkt"];
267--6928[label="1;390pkt 390fpkt"];
267--8790[label="1;390pkt 390fpkt"];
357--4238[label="1;266pkt 266fpkt"];
357--6928[label="1;266pkt 266fpkt"];
357--8790[label="1;266pkt 266fpkt"];
609--4238[label="1;341pkt 341fpkt"];
609--6928[label="1;341pkt 341fpkt"];
609--8790[label="1;341pkt 341fpkt"];
825--2906[label="1;194pkt 194fpkt"];
825--4238[label="1;194pkt 194fpkt"];
825--6928[label="1;194pkt 194fpkt"];
825--8790[label="1;194pkt 194fpkt"];
891--4238[label="1;366pkt 366fpkt"];
891--6928[label="1;366pkt 366fpkt"];
891--8790[label="1;366pkt 366fpkt"];
893--4238[label="1;197pkt 197fpkt"];
893--6928[label="1;197pkt 197fpkt"];
893--8790[label="1;197pkt 197fpkt"];
1005--4238[label="1;356pkt 356fpkt"];
1005--6928[label="1;356pkt 356fpkt"];
1005--8790[label="1;356pkt 356fpkt"];
1204--2916[label="0.00182815;1pkt 1fpkt"];
1204--4238[label="0.996344;545pkt 545fpkt"];
1204--5508[label="0.00182815;1pkt 1fpkt"];
1204--6928[label="0.996344;545pkt 545fpkt"];
1204--7815[label="0.00182815;1pkt 1fpkt"];
1204--8790[label="0.996344;545pkt 545fpkt"];
1476--4238[label="1;485pkt 485fpkt"];
1476--6928[label="1;485pkt 485fpkt"];
1476--8790[label="1;485pkt 485fpkt"];
1764--4238[label="0.995556;224pkt 224fpkt"];
1764--6057[label="0.00444444;1pkt 1fpkt"];
1764--6928[label="0.995556;224pkt 224fpkt"];
1764--8212[label="0.00444444;1pkt 1fpkt"];
1764--8790[label="0.995556;224pkt 224fpkt"];
1764--9623[label="0.00444444;1pkt 1fpkt"];
1778--4238[label="1;334pkt 334fpkt"];
1778--6928[label="1;334pkt 334fpkt"];
1778--8790[label="1;334pkt 334fpkt"];
2044--3080[label="1;126pkt 126fpkt"];
2044--4238[label="1;351pkt 351fpkt"];
2044--6928[label="1;351pkt 351fpkt"];
2044--8790[label="1;351pkt 351fpkt"];
2052--4238[label="1;344pkt 344fpkt"];
2052--6928[label="1;344pkt 344fpkt"];
2052--8790[label="1;344pkt 344fpkt"];
2059--4238[label="1;327pkt 327fpkt"];
2059--6928[label="1;327pkt 327fpkt"];
2059--8790[label="1;327pkt 327fpkt"];
2072--3162[label="1;201pkt 201fpkt"];
2072--4238[label="1;357pkt 357fpkt"];
2072--6928[label="1;357pkt 357fpkt"];
2072--8790[label="1;357pkt 357fpkt"];
2271--4238[label="1;203pkt 203fpkt"];
2271--6928[label="1;203pkt 203fpkt"];
2271--8790[label="1;203pkt 203fpkt"];
2290--3963[label="0.00909091;1pkt 1fpkt"];
2290--4238[label="0.990909;109pkt 109fpkt"];
2290--6928[label="0.990909;109pkt 109fpkt"];
2290--8790[label="0.990909;109pkt 109fpkt"];
2906--4238[label="1;194pkt 194fpkt"];
2906--6928[label="1;194pkt 194fpkt"];
2906--8790[label="1;194pkt 194fpkt"];
3007--4238[label="1;390pkt 390fpkt"];
3007--6928[label="1;390pkt 390fpkt"];
3007--8790[label="1;390pkt 390fpkt"];
3080--4238[label="1;126pkt 126fpkt"];
3080--6928[label="1;126pkt 126fpkt"];
3080--8790[label="1;126pkt 126fpkt"];
3162--4238[label="1;201pkt 201fpkt"];
3162--6928[label="1;201pkt 201fpkt"];
3162--8790[label="1;201pkt 201fpkt"];
4238--6928[label="1;6525pkt 6525fpkt"];
4238--8790[label="1;6525pkt 6525fpkt"];
6928--8790[label="1;6525pkt 6525fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="214.51.37.73"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
312[label="194.212.157.34;d;31pkt 31fpkt", shape=diamond, color=yellow];
956[label="55.170.112.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
3629[label="82.140.84.22;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4230[label="213.114.93.72;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6515[label="82.140.84.22;6pkt 6fpkt", shape=invtriangle, color=brown];
8527[label="82.140.84.22;6pkt 6fpkt", shape=invhouse, color=bisque];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.114.93.72:*, 194.212.157.34:21}[37.5%]&lt;BR/&gt;{*:*, 194.212.157.34:80}[21.875%]&lt;BR/&gt;{82.140.84.22:*, 194.212.157.34:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (18.8679%)&lt;BR/&gt; 21: (17.9245%)&lt;BR/&gt; 80: (7.54717%)&lt;BR/&gt; 5003: (3.77358%)&lt;BR/&gt; 5002: (3.77358%)&gt;];
}
312--956[label="1;1pkt 1fpkt"];
312--1022[label="1;1pkt 1fpkt"];
312--3296[label="0.0322581;1pkt 1fpkt"];
312--3629[label="1;6pkt 6fpkt"];
312--4230[label="0.666667;2pkt 2fpkt"];
312--6515[label="1;6pkt 6fpkt"];
312--8527[label="1;6pkt 6fpkt"];
3629--6515[label="1;6pkt 6fpkt"];
3629--8527[label="1;6pkt 6fpkt"];
6515--8527[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.157.34" src_ip="82.140.84.22"/>
      <filter dst_ip="194.212.157.34" dst_port="80"/>
      <filter dst_ip="194.212.157.34" dst_port="21" src_ip="213.114.93.72"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1036[label="132.19.194.28;s;512pkt 512fpkt", shape=diamond, color=yellow];
3713[label="132.19.194.28;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4478[label="132.19.64.93;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5070[label="132.19.69.148;30pkt 30fpkt", shape=pentagon, color=darkviolet];
6572[label="132.19.194.28;2pkt 2fpkt", shape=invtriangle, color=brown];
7096[label="132.19.64.93;26pkt 26fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.194.28:*, *:25}[84.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.4047%)&lt;BR/&gt; 53: (1.67224%)&lt;BR/&gt; 32768: (1.58863%)&lt;BR/&gt; 113: (1.58863%)&lt;BR/&gt; 0: (0.334448%)&gt;];
}
1036--1095[label="0.00552486;1pkt 1fpkt"];
1036--1334[label="0.516556;78pkt 78fpkt"];
1036--1514[label="0.00543478;1pkt 1fpkt"];
1036--1970[label="0.0277778;1pkt 1fpkt"];
1036--3713[label="0.333333;1pkt 1fpkt"];
3713--6572[label="1;2pkt 2fpkt"];
4478--7096[label="1;25pkt 25fpkt"];
4478--8898[label="1;25pkt 25fpkt"];
5070--7517[label="1;30pkt 30fpkt"];
5070--9167[label="1;30pkt 30fpkt"];
7096--8898[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="132.19.194.28"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
443[label="128.202.215.155;d;131pkt 131fpkt", shape=diamond, color=yellow];
448[label="161.223.82.57;d;6pkt 6fpkt", shape=diamond, color=yellow];
1016[label="195.80.108.171;d;22pkt 22fpkt", shape=diamond, color=yellow];
1026[label="53.174.69.136;s;114pkt 114fpkt", shape=diamond, color=yellow];
1060[label="195.80.106.184;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.174.69.136:80, *:*}[45.0593%]&lt;BR/&gt;{*:53, 128.202.215.155:53}[36.7589%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (36.25%)&lt;BR/&gt; 80: (25.1786%)&lt;BR/&gt; 0: (4.28571%)&lt;BR/&gt; 25: (2.85714%)&lt;BR/&gt; 56580: (0.357143%)&gt;];
}
443--1026[label="0.0789474;9pkt 9fpkt"];
443--1511[label="0.0125;1pkt 1fpkt"];
443--1607[label="0.0140845;1pkt 1fpkt"];
443--2526[label="0.0142857;1pkt 1fpkt"];
443--3237[label="0.0142857;1pkt 1fpkt"];
443--3287[label="0.167939;22pkt 22fpkt"];
443--3288[label="0.0381679;5pkt 5fpkt"];
443--3290[label="0.183206;24pkt 24fpkt"];
443--3295[label="0.0839695;11pkt 11fpkt"];
443--3302[label="0.10687;14pkt 14fpkt"];
443--3849[label="0.0116279;1pkt 1fpkt"];
443--3919[label="0.0188679;1pkt 1fpkt"];
443--3950[label="0.0116279;1pkt 1fpkt"];
443--3999[label="0.0238095;1pkt 1fpkt"];
443--4673[label="0.0243902;1pkt 1fpkt"];
443--5353[label="0.0135135;1pkt 1fpkt"];
443--5625[label="0.0185185;1pkt 1fpkt"];
443--6078[label="0.0181818;1pkt 1fpkt"];
443--6109[label="0.025641;1pkt 1fpkt"];
443--6725[label="0.0114943;1pkt 1fpkt"];
443--6761[label="0.0243902;1pkt 1fpkt"];
443--7229[label="0.025;1pkt 1fpkt"];
443--7714[label="0.0135135;1pkt 1fpkt"];
443--7906[label="0.0185185;1pkt 1fpkt"];
443--8229[label="0.0185185;1pkt 1fpkt"];
443--8653[label="0.0116279;1pkt 1fpkt"];
443--8679[label="0.0238095;1pkt 1fpkt"];
443--9298[label="0.0135135;1pkt 1fpkt"];
443--9419[label="0.0188679;1pkt 1fpkt"];
448--1026[label="1;6pkt 6fpkt"];
448--3288[label="0.833333;5pkt 5fpkt"];
1016--1026[label="0.272727;6pkt 6fpkt"];
1016--1104[label="0.0909091;2pkt 2fpkt"];
1016--2833[label="0.0909091;2pkt 2fpkt"];
1016--3288[label="0.227273;5pkt 5fpkt"];
1016--4980[label="0.117647;2pkt 2fpkt"];
1016--5712[label="0.0909091;2pkt 2fpkt"];
1016--7452[label="0.117647;2pkt 2fpkt"];
1016--7967[label="0.0909091;2pkt 2fpkt"];
1016--9455[label="0.0909091;2pkt 2fpkt"];
1026--1060[label="0.857143;6pkt 6fpkt"];
1026--1076[label="1;8pkt 8fpkt"];
1026--1123[label="0.842105;16pkt 16fpkt"];
1026--1458[label="0.333333;3pkt 3fpkt"];
1026--2042[label="0.25;1pkt 1fpkt"];
1026--2953[label="0.0833333;1pkt 1fpkt"];
1026--3288[label="0.254386;29pkt 29fpkt"];
1026--3292[label="0.0701754;8pkt 8fpkt"];
1026--3303[label="0.0701754;8pkt 8fpkt"];
1060--3288[label="0.714286;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="53.174.69.136" src_port="80"/>
      <filter dst_ip="128.202.215.155" dst_port="53" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
1093[label="195.192.153.195;s;18pkt 18fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.192.153.195:80, 132.19.18.84:*}[33.3333%]&lt;BR/&gt;{195.192.153.195:80, 132.19.87.254:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60415: (2.77778%)&lt;BR/&gt; 60412: (2.77778%)&lt;BR/&gt; 60411: (2.77778%)&lt;BR/&gt; 60409: (2.77778%)&gt;];
}
1093--1249[label="0.333333;6pkt 6fpkt"];
1093--3292[label="0.111111;2pkt 2fpkt"];
1093--3303[label="0.111111;2pkt 2fpkt"];
1093--5636[label="1;18pkt 18fpkt"];
1093--7914[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.18.84" src_ip="195.192.153.195" src_port="80"/>
      <filter dst_ip="132.19.87.254" src_ip="195.192.153.195" src_port="80"/>
    </slice>
    <from sec="1144127320" usec="0"/>
    <to sec="1144127561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45324,2.36967,999,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
58[label="193.16.197.60s;68pkt 68fpkt", shape=rectangle, color=red];
364[label="164.23.209.60;s;306pkt 306fpkt", shape=diamond, color=yellow];
614[label="132.19.225.91;s;214pkt 214fpkt", shape=diamond, color=yellow];
894[label="204.135.68.172;d;3pkt 3fpkt", shape=diamond, color=yellow];
1030[label="38.192.129.133;d;12pkt 12fpkt", shape=diamond, color=yellow];
1031[label="132.18.167.63;s;5pkt 5fpkt", shape=diamond, color=yellow];
1356[label="132.19.217.4;s;201pkt 201fpkt", shape=diamond, color=yellow];
1453[label="36.72.164.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
2246[label="39.64.19.164;d;18pkt 18fpkt", shape=diamond, color=yellow];
2254[label="211.154.89.40;d;2pkt 2fpkt", shape=diamond, color=yellow];
2607[label="39.64.18.141;d;24pkt 24fpkt", shape=diamond, color=yellow];
4079[label="164.23.209.60;371pkt 371fpkt", shape=pentagon, color=darkviolet];
4113[label="132.18.167.63;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4240[label="132.19.46.73;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6839[label="132.18.167.63;5pkt 5fpkt", shape=invtriangle, color=brown];
6930[label="132.19.46.73;44pkt 44fpkt", shape=invtriangle, color=brown];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[40.2793%]&lt;BR/&gt;{164.23.209.60:*, *:25}[29.1085%]&lt;BR/&gt;{132.19.225.91:*, *:*}[22.986%]&lt;BR/&gt;{132.19.217.4:*, *:*}[21.5897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.0038%)&lt;BR/&gt; 113: (2.46026%)&lt;BR/&gt; 139: (2.11961%)&lt;BR/&gt; 80: (0.264951%)&lt;BR/&gt; 63324: (0.1514%)&gt;];
}
58--364[label="0.176471;12pkt 12fpkt"];
58--894[label="0.333333;1pkt 1fpkt"];
58--1453[label="1;1pkt 1fpkt"];
58--4079[label="0.176471;12pkt 12fpkt"];
364--894[label="1;3pkt 3fpkt"];
364--1030[label="0.0833333;1pkt 1fpkt"];
364--1334[label="0.013245;2pkt 2fpkt"];
364--1453[label="1;1pkt 1fpkt"];
364--1611[label="0.0588235;1pkt 1fpkt"];
364--1967[label="0.0526316;1pkt 1fpkt"];
364--2246[label="0.0555556;1pkt 1fpkt"];
364--2254[label="0.5;1pkt 1fpkt"];
364--2607[label="0.0416667;1pkt 1fpkt"];
364--4079[label="1;306pkt 306fpkt"];
614--684[label="0.0046729;1pkt 1fpkt"];
614--1030[label="0.0833333;1pkt 1fpkt"];
614--1095[label="0.00552486;1pkt 1fpkt"];
614--1970[label="0.0277778;1pkt 1fpkt"];
894--4079[label="1;3pkt 3fpkt"];
1030--1031[label="0.2;1pkt 1fpkt"];
1030--1118[label="0.0833333;1pkt 1fpkt"];
1030--1356[label="0.166667;2pkt 2fpkt"];
1030--1990[label="0.0833333;1pkt 1fpkt"];
1030--2111[label="0.0833333;1pkt 1fpkt"];
1030--3248[label="0.0833333;1pkt 1fpkt"];
1030--4079[label="0.0833333;1pkt 1fpkt"];
1030--4113[label="0.25;1pkt 1fpkt"];
1030--5125[label="0.0833333;1pkt 1fpkt"];
1030--6241[label="0.0833333;1pkt 1fpkt"];
1030--6839[label="0.2;1pkt 1fpkt"];
1031--4113[label="1;4pkt 4fpkt"];
1031--6839[label="1;5pkt 5fpkt"];
1356--1967[label="0.210526;4pkt 4fpkt"];
1356--1970[label="0.0555556;2pkt 2fpkt"];
1356--2246[label="0.111111;2pkt 2fpkt"];
1356--2607[label="0.166667;4pkt 4fpkt"];
1356--2623[label="0.0833333;1pkt 1fpkt"];
1453--4079[label="1;1pkt 1fpkt"];
2246--2733[label="0.0555556;1pkt 1fpkt"];
2246--2871[label="0.166667;3pkt 3fpkt"];
2246--2975[label="0.0555556;1pkt 1fpkt"];
2246--3272[label="0.0555556;1pkt 1fpkt"];
2246--3336[label="0.111111;2pkt 2fpkt"];
2246--3378[label="0.0555556;1pkt 1fpkt"];
2246--3404[label="0.0555556;1pkt 1fpkt"];
2246--3994[label="0.166667;3pkt 3fpkt"];
2246--4079[label="0.0555556;1pkt 1fpkt"];
2246--5021[label="0.388889;7pkt 7fpkt"];
2246--6306[label="0.111111;2pkt 2fpkt"];
2246--6340[label="0.0555556;1pkt 1fpkt"];
2246--6359[label="0.0555556;1pkt 1fpkt"];
2246--8418[label="0.0555556;1pkt 1fpkt"];
2246--8430[label="0.0555556;1pkt 1fpkt"];
2254--4079[label="1;2pkt 2fpkt"];
2607--2871[label="0.166667;4pkt 4fpkt"];
2607--3994[label="0.0416667;1pkt 1fpkt"];
2607--4079[label="0.0416667;1pkt 1fpkt"];
2607--4240[label="0.0416667;1pkt 1fpkt"];
2607--5021[label="0.458333;11pkt 11fpkt"];
2607--5070[label="0.0416667;1pkt 1fpkt"];
2607--5155[label="0.0416667;1pkt 1fpkt"];
2607--5739[label="0.0416667;1pkt 1fpkt"];
2607--6237[label="0.0416667;1pkt 1fpkt"];
2607--6930[label="0.0416667;1pkt 1fpkt"];
2607--7517[label="0.0416667;1pkt 1fpkt"];
2607--7574[label="0.0416667;1pkt 1fpkt"];
2607--8345[label="0.0416667;1pkt 1fpkt"];
2607--9167[label="0.0416667;1pkt 1fpkt"];
2607--9716[label="0.0416667;1pkt 1fpkt"];
4113--6839[label="1;4pkt 4fpkt"];
4240--6930[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.225.91"/>
      <filter src_ip="132.19.217.4"/>
      <filter src_port="25"/>
      <filter dst_port="25" src_ip="164.23.209.60"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
618[label="132.18.80.7;s;92pkt 92fpkt", shape=diamond, color=yellow];
1037[label="52.95.69.148;d;2pkt 2fpkt", shape=diamond, color=yellow];
2759[label="132.18.80.7;s;92pkt 92fpkt", shape=hexagon, color=black];
3406[label="132.18.80.7;98pkt 98fpkt", shape=pentagon, color=darkviolet];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.80.7:54418, *:*}[40.8163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54418: (20.9507%)&lt;BR/&gt; 7157: (6.8662%)&lt;BR/&gt; 17067: (5.80986%)&lt;BR/&gt; 80: (4.22535%)&lt;BR/&gt; 57998: (2.8169%)&gt;];
}
618--1037[label="1;2pkt 2fpkt"];
618--2759[label="1;92pkt 92fpkt"];
618--3406[label="1;92pkt 92fpkt"];
1037--2759[label="1;2pkt 2fpkt"];
1037--3406[label="1;2pkt 2fpkt"];
2759--3406[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.80.7" src_port="54418"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="215.104.55.31"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
1004[label="164.23.209.56;s;289pkt 289fpkt", shape=diamond, color=yellow];
1040[label="210.226.98.247;d;45pkt 45fpkt", shape=diamond, color=yellow];
1098[label="195.89.107.64;s;252pkt 252fpkt", shape=diamond, color=yellow];
1532[label="210.226.98.242;d;42pkt 42fpkt", shape=diamond, color=yellow];
1847[label="210.226.98.246;d;31pkt 31fpkt", shape=diamond, color=yellow];
1906[label="164.23.218.92;s;442pkt 442fpkt", shape=diamond, color=yellow];
1945[label="39.65.65.3;d;65pkt 65fpkt", shape=diamond, color=yellow];
2094[label="210.226.98.232;d;37pkt 37fpkt", shape=diamond, color=yellow];
2131[label="210.226.98.243;d;21pkt 21fpkt", shape=diamond, color=yellow];
2168[label="210.226.98.241;d;31pkt 31fpkt", shape=diamond, color=yellow];
2335[label="210.226.98.240;d;26pkt 26fpkt", shape=diamond, color=yellow];
2565[label="210.226.98.211;d;25pkt 25fpkt", shape=diamond, color=yellow];
2570[label="210.226.98.221;d;25pkt 25fpkt", shape=diamond, color=yellow];
3019[label="210.226.98.246;d;30pkt 30fpkt", shape=hexagon, color=black];
3710[label="164.23.168.28;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3791[label="164.23.217.34;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4122[label="195.89.107.64;282pkt 282fpkt", shape=pentagon, color=darkviolet];
4475[label="164.23.218.92;442pkt 442fpkt", shape=pentagon, color=darkviolet];
4936[label="164.23.225.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4987[label="164.23.208.140;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5093[label="164.23.206.149;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5246[label="164.23.221.161;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6616[label="164.23.217.34;16pkt 16fpkt", shape=invtriangle, color=brown];
6845[label="195.89.107.64;282pkt 282fpkt", shape=invtriangle, color=brown];
7458[label="164.23.208.140;6pkt 6fpkt", shape=invtriangle, color=brown];
7638[label="164.23.221.161;27pkt 27fpkt", shape=invtriangle, color=brown];
8590[label="164.23.217.34;17pkt 17fpkt", shape=invhouse, color=bisque];
8736[label="195.89.107.64;282pkt 282fpkt", shape=invhouse, color=bisque];
9126[label="164.23.208.140;6pkt 6fpkt", shape=invhouse, color=bisque];
9249[label="164.23.221.161;27pkt 27fpkt", shape=invhouse, color=bisque];
9650[label="164.23.131.235;2pkt 2fpkt", shape=invhouse, color=bisque];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.218.92:*, *:*}[31.4815%]&lt;BR/&gt;{*:*, *:5050}[24.8575%]&lt;BR/&gt;{164.23.209.56:0, *:0}[20.584%]&lt;BR/&gt;{195.89.107.64:0, *:0}[20.0855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (49.8587%)&lt;BR/&gt; 5050: (9.13428%)&lt;BR/&gt; 21: (6.32509%)&lt;BR/&gt; 23: (3.5159%)&lt;BR/&gt; 20: (3.10954%)&gt;];
}
1004--1040[label="0.0222222;1pkt 1fpkt"];
1004--1525[label="0.0121951;1pkt 1fpkt"];
1004--1532[label="0.0238095;1pkt 1fpkt"];
1004--1544[label="0.0227273;1pkt 1fpkt"];
1004--1587[label="0.00591716;1pkt 1fpkt"];
1004--1628[label="0.00346021;1pkt 1fpkt"];
1004--1658[label="0.00970874;1pkt 1fpkt"];
1004--1694[label="0.0060241;1pkt 1fpkt"];
1004--1811[label="0.0060241;1pkt 1fpkt"];
1004--1818[label="0.0126582;1pkt 1fpkt"];
1004--1824[label="0.015625;1pkt 1fpkt"];
1004--1847[label="0.0322581;1pkt 1fpkt"];
1004--1879[label="0.00934579;1pkt 1fpkt"];
1004--1894[label="0.037037;1pkt 1fpkt"];
1004--1900[label="0.0147059;1pkt 1fpkt"];
1004--1913[label="0.00980392;1pkt 1fpkt"];
1004--1934[label="0.00925926;1pkt 1fpkt"];
1004--2089[label="0.00497512;1pkt 1fpkt"];
1004--2094[label="0.027027;1pkt 1fpkt"];
1004--2131[label="0.047619;1pkt 1fpkt"];
1004--2168[label="0.0322581;1pkt 1fpkt"];
1004--2178[label="0.00628931;1pkt 1fpkt"];
1004--2335[label="0.0384615;1pkt 1fpkt"];
1004--2515[label="0.00571429;1pkt 1fpkt"];
1004--2531[label="0.0454545;1pkt 1fpkt"];
1004--2565[label="0.04;1pkt 1fpkt"];
1004--2570[label="0.04;1pkt 1fpkt"];
1004--3019[label="0.0333333;1pkt 1fpkt"];
1004--3117[label="0.00990099;1pkt 1fpkt"];
1040--1098[label="0.0222222;1pkt 1fpkt"];
1040--1586[label="0.0222222;1pkt 1fpkt"];
1040--1906[label="0.0222222;1pkt 1fpkt"];
1040--3031[label="0.0222222;1pkt 1fpkt"];
1040--3791[label="0.0625;1pkt 1fpkt"];
1040--4122[label="0.0222222;1pkt 1fpkt"];
1040--4475[label="0.0222222;1pkt 1fpkt"];
1040--4797[label="0.0222222;1pkt 1fpkt"];
1040--5262[label="0.0222222;1pkt 1fpkt"];
1040--6616[label="0.0625;1pkt 1fpkt"];
1040--6845[label="0.0222222;1pkt 1fpkt"];
1040--7324[label="0.0222222;1pkt 1fpkt"];
1040--7651[label="0.0222222;1pkt 1fpkt"];
1040--8590[label="0.0588235;1pkt 1fpkt"];
1040--8736[label="0.0222222;1pkt 1fpkt"];
1040--9046[label="0.0222222;1pkt 1fpkt"];
1040--9257[label="0.0222222;1pkt 1fpkt"];
1098--1525[label="0.0121951;1pkt 1fpkt"];
1098--1532[label="0.0238095;1pkt 1fpkt"];
1098--1544[label="0.0227273;1pkt 1fpkt"];
1098--1587[label="0.00591716;1pkt 1fpkt"];
1098--1628[label="0.00396825;1pkt 1fpkt"];
1098--1658[label="0.00970874;1pkt 1fpkt"];
1098--1694[label="0.0060241;1pkt 1fpkt"];
1098--1847[label="0.0322581;1pkt 1fpkt"];
1098--1879[label="0.00934579;1pkt 1fpkt"];
1098--1913[label="0.00980392;1pkt 1fpkt"];
1098--1934[label="0.00925926;1pkt 1fpkt"];
1098--1945[label="0.0153846;1pkt 1fpkt"];
1098--2090[label="0.0217391;1pkt 1fpkt"];
1098--2094[label="0.027027;1pkt 1fpkt"];
1098--2168[label="0.0322581;1pkt 1fpkt"];
1098--2335[label="0.0384615;1pkt 1fpkt"];
1098--2378[label="0.0131579;1pkt 1fpkt"];
1098--2514[label="0.0833333;1pkt 1fpkt"];
1098--2531[label="0.0454545;1pkt 1fpkt"];
1098--2565[label="0.04;1pkt 1fpkt"];
1098--2570[label="0.04;1pkt 1fpkt"];
1098--3019[label="0.0333333;1pkt 1fpkt"];
1098--3117[label="0.00990099;1pkt 1fpkt"];
1098--4122[label="1;252pkt 252fpkt"];
1098--6845[label="1;252pkt 252fpkt"];
1098--8736[label="1;252pkt 252fpkt"];
1532--1586[label="0.0238095;1pkt 1fpkt"];
1532--3791[label="0.0625;1pkt 1fpkt"];
1532--4122[label="0.0238095;1pkt 1fpkt"];
1532--4797[label="0.0238095;1pkt 1fpkt"];
1532--4936[label="1;1pkt 1fpkt"];
1532--6616[label="0.0625;1pkt 1fpkt"];
1532--6845[label="0.0238095;1pkt 1fpkt"];
1532--7324[label="0.0238095;1pkt 1fpkt"];
1532--8590[label="0.0588235;1pkt 1fpkt"];
1532--8736[label="0.0238095;1pkt 1fpkt"];
1532--9046[label="0.0238095;1pkt 1fpkt"];
1847--3019[label="1;30pkt 30fpkt"];
1847--3791[label="0.0625;1pkt 1fpkt"];
1847--4122[label="0.0322581;1pkt 1fpkt"];
1847--4987[label="0.4;2pkt 2fpkt"];
1847--5246[label="0.0714286;2pkt 2fpkt"];
1847--6616[label="0.0625;1pkt 1fpkt"];
1847--6845[label="0.0322581;1pkt 1fpkt"];
1847--7458[label="0.333333;2pkt 2fpkt"];
1847--7638[label="0.0740741;2pkt 2fpkt"];
1847--8590[label="0.0588235;1pkt 1fpkt"];
1847--8736[label="0.0322581;1pkt 1fpkt"];
1847--9126[label="0.333333;2pkt 2fpkt"];
1847--9249[label="0.0740741;2pkt 2fpkt"];
1906--4475[label="1;442pkt 442fpkt"];
1945--3288[label="0.0615385;4pkt 4fpkt"];
1945--3292[label="0.0153846;1pkt 1fpkt"];
1945--3303[label="0.0153846;1pkt 1fpkt"];
1945--3710[label="0.3;3pkt 3fpkt"];
1945--4122[label="0.0153846;1pkt 1fpkt"];
1945--5093[label="0.45;9pkt 9fpkt"];
1945--5319[label="0.0625;1pkt 1fpkt"];
1945--5803[label="0.222222;6pkt 6fpkt"];
1945--6845[label="0.0153846;1pkt 1fpkt"];
1945--7690[label="0.0625;1pkt 1fpkt"];
1945--8736[label="0.0153846;1pkt 1fpkt"];
1945--9282[label="0.0666667;1pkt 1fpkt"];
2094--3178[label="0.027027;1pkt 1fpkt"];
2094--4122[label="0.027027;1pkt 1fpkt"];
2094--4581[label="0.027027;1pkt 1fpkt"];
2094--6845[label="0.027027;1pkt 1fpkt"];
2094--8736[label="0.027027;1pkt 1fpkt"];
2131--3031[label="0.047619;1pkt 1fpkt"];
2131--3178[label="0.047619;1pkt 1fpkt"];
2131--4525[label="0.125;1pkt 1fpkt"];
2131--4581[label="0.047619;1pkt 1fpkt"];
2131--4797[label="0.047619;1pkt 1fpkt"];
2131--7129[label="0.142857;1pkt 1fpkt"];
2131--7324[label="0.047619;1pkt 1fpkt"];
2131--8920[label="0.125;1pkt 1fpkt"];
2131--9046[label="0.047619;1pkt 1fpkt"];
2168--2868[label="0.0322581;1pkt 1fpkt"];
2168--4122[label="0.0322581;1pkt 1fpkt"];
2168--4381[label="0.0322581;1pkt 1fpkt"];
2168--5570[label="0.0322581;1pkt 1fpkt"];
2168--6845[label="0.0322581;1pkt 1fpkt"];
2168--7033[label="0.0322581;1pkt 1fpkt"];
2168--8736[label="0.0322581;1pkt 1fpkt"];
2168--8855[label="0.0322581;1pkt 1fpkt"];
2168--9393[label="0.0322581;1pkt 1fpkt"];
2335--4122[label="0.0384615;1pkt 1fpkt"];
2335--4987[label="0.2;1pkt 1fpkt"];
2335--6845[label="0.0384615;1pkt 1fpkt"];
2335--7458[label="0.166667;1pkt 1fpkt"];
2335--8736[label="0.0384615;1pkt 1fpkt"];
2335--9126[label="0.166667;1pkt 1fpkt"];
2565--3180[label="0.04;1pkt 1fpkt"];
2565--3975[label="0.04;1pkt 1fpkt"];
2565--4122[label="0.04;1pkt 1fpkt"];
2565--4375[label="0.04;1pkt 1fpkt"];
2565--6845[label="0.04;1pkt 1fpkt"];
2565--7027[label="0.04;1pkt 1fpkt"];
2565--8736[label="0.04;1pkt 1fpkt"];
2565--8852[label="0.04;1pkt 1fpkt"];
2570--3031[label="0.04;1pkt 1fpkt"];
2570--4122[label="0.04;1pkt 1fpkt"];
2570--4797[label="0.04;1pkt 1fpkt"];
2570--6111[label="0.333333;1pkt 1fpkt"];
2570--6845[label="0.04;1pkt 1fpkt"];
2570--7324[label="0.04;1pkt 1fpkt"];
2570--8252[label="0.333333;1pkt 1fpkt"];
2570--8736[label="0.04;1pkt 1fpkt"];
2570--9046[label="0.04;1pkt 1fpkt"];
2570--9650[label="0.5;1pkt 1fpkt"];
3019--3791[label="0.0625;1pkt 1fpkt"];
3019--4122[label="0.0333333;1pkt 1fpkt"];
3019--4987[label="0.4;2pkt 2fpkt"];
3019--5246[label="0.0714286;2pkt 2fpkt"];
3019--6616[label="0.0625;1pkt 1fpkt"];
3019--6845[label="0.0333333;1pkt 1fpkt"];
3019--7458[label="0.333333;2pkt 2fpkt"];
3019--7638[label="0.0740741;2pkt 2fpkt"];
3019--8590[label="0.0588235;1pkt 1fpkt"];
3019--8736[label="0.0333333;1pkt 1fpkt"];
3019--9126[label="0.333333;2pkt 2fpkt"];
3019--9249[label="0.0740741;2pkt 2fpkt"];
3791--6616[label="1;16pkt 16fpkt"];
3791--8590[label="1;16pkt 16fpkt"];
4122--6845[label="1;282pkt 282fpkt"];
4122--8736[label="1;282pkt 282fpkt"];
4987--7458[label="1;5pkt 5fpkt"];
4987--9126[label="1;5pkt 5fpkt"];
5246--7638[label="1;27pkt 27fpkt"];
5246--9249[label="1;27pkt 27fpkt"];
6616--8590[label="1;16pkt 16fpkt"];
6845--8736[label="1;282pkt 282fpkt"];
7458--9126[label="1;6pkt 6fpkt"];
7638--9249[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.218.92"/>
      <filter dst_port="5050"/>
      <filter src_ip="164.23.209.56"/>
      <filter src_ip="195.89.107.64"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
1052[label="39.131.81.58;d;60pkt 60fpkt", shape=diamond, color=yellow];
1528[label="194.212.159.70;s;150pkt 150fpkt", shape=diamond, color=yellow];
3241[label="39.131.81.58;d;60pkt 60fpkt", shape=hexagon, color=black];
4202[label="194.212.159.70;188pkt 188fpkt", shape=pentagon, color=darkviolet];
4309[label="128.28.83.78;69pkt 69fpkt", shape=pentagon, color=darkviolet];
6901[label="194.212.159.70;188pkt 188fpkt", shape=invtriangle, color=brown];
6979[label="128.28.83.78;70pkt 70fpkt", shape=invtriangle, color=brown];
8772[label="194.212.159.70;188pkt 188fpkt", shape=invhouse, color=bisque];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.159.70:0, *:0}[72.8682%]&lt;BR/&gt;{128.28.83.78:80, 39.131.81.58:*}[25.5814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (73.5868%)&lt;BR/&gt; 80: (13.1038%)&lt;BR/&gt; 60445: (0.20555%)&lt;BR/&gt; 60219: (0.20555%)&lt;BR/&gt; 60083: (0.20555%)&gt;];
}
1052--1053[label="0.983333;59pkt 59fpkt"];
1052--1528[label="0.0166667;1pkt 1fpkt"];
1052--3241[label="1;60pkt 60fpkt"];
1052--3288[label="0.0666667;4pkt 4fpkt"];
1052--3292[label="0.05;3pkt 3fpkt"];
1052--3303[label="0.05;3pkt 3fpkt"];
1052--4202[label="0.0166667;1pkt 1fpkt"];
1052--4309[label="0.966667;58pkt 58fpkt"];
1052--6901[label="0.0166667;1pkt 1fpkt"];
1052--6979[label="0.983333;59pkt 59fpkt"];
1052--8772[label="0.0166667;1pkt 1fpkt"];
1528--1853[label="0.0263158;1pkt 1fpkt"];
1528--2331[label="0.00666667;1pkt 1fpkt"];
1528--3241[label="0.0166667;1pkt 1fpkt"];
1528--4202[label="1;150pkt 150fpkt"];
1528--6901[label="1;150pkt 150fpkt"];
1528--8772[label="1;150pkt 150fpkt"];
3241--3288[label="0.0666667;4pkt 4fpkt"];
3241--3292[label="0.05;3pkt 3fpkt"];
3241--3303[label="0.05;3pkt 3fpkt"];
3241--4202[label="0.0166667;1pkt 1fpkt"];
3241--4309[label="0.966667;58pkt 58fpkt"];
3241--6901[label="0.0166667;1pkt 1fpkt"];
3241--6979[label="0.983333;59pkt 59fpkt"];
3241--8772[label="0.0166667;1pkt 1fpkt"];
4202--6901[label="1;188pkt 188fpkt"];
4202--8772[label="1;188pkt 188fpkt"];
4309--6979[label="1;69pkt 69fpkt"];
6901--8772[label="1;188pkt 188fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.159.70"/>
      <filter dst_ip="39.131.81.58" src_ip="128.28.83.78" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
1024[label="164.23.141.28;d;109pkt 109fpkt", shape=diamond, color=yellow];
1603[label="164.23.196.164;d;44pkt 44fpkt", shape=diamond, color=yellow];
2208[label="36.172.50.0;s;16pkt 16fpkt", shape=diamond, color=yellow];
2451[label="36.172.50.25;s;8pkt 8fpkt", shape=diamond, color=yellow];
3039[label="164.23.196.164;d;33pkt 33fpkt", shape=hexagon, color=black];
3309[label="36.172.50.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3330[label="32.208.22.2;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3335[label="36.172.50.2;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3436[label="36.172.50.9;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3547[label="36.172.50.17;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3671[label="36.172.50.25;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3694[label="36.172.50.27;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4246[label="216.69.162.73;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4302[label="216.69.162.77;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4395[label="216.69.162.85;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4648[label="36.106.136.109;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4751[label="196.206.212.121;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6291[label="36.172.50.0;1pkt 1fpkt", shape=invtriangle, color=brown];
6377[label="36.172.50.9;7pkt 7fpkt", shape=invtriangle, color=brown];
6544[label="36.172.50.25;12pkt 12fpkt", shape=invtriangle, color=brown];
6933[label="216.69.162.73;21pkt 21fpkt", shape=invtriangle, color=brown];
7044[label="216.69.162.85;8pkt 8fpkt", shape=invtriangle, color=brown];
7288[label="196.206.212.121;27pkt 27fpkt", shape=invtriangle, color=brown];
8385[label="36.172.50.0;1pkt 1fpkt", shape=invhouse, color=bisque];
8865[label="216.69.162.85;8pkt 8fpkt", shape=invhouse, color=bisque];
9021[label="196.206.212.121;27pkt 27fpkt", shape=invhouse, color=bisque];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.23.141.28:25}[38.5455%]&lt;BR/&gt;{*:*, *:80}[20.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.3418%)&lt;BR/&gt; 80: (12.6582%)&lt;BR/&gt; 44596: (0.421941%)&lt;BR/&gt; 41362: (0.421941%)&lt;BR/&gt; 33359: (0.421941%)&gt;];
}
1024--1059[label="0.25;2pkt 2fpkt"];
1024--1444[label="0.555556;5pkt 5fpkt"];
1024--2208[label="0.3125;5pkt 5fpkt"];
1024--2615[label="0.142857;3pkt 3fpkt"];
1024--3318[label="0.222222;4pkt 4fpkt"];
1024--3330[label="0.227273;5pkt 5fpkt"];
1024--3335[label="0.307692;4pkt 4fpkt"];
1024--3345[label="0.266667;4pkt 4fpkt"];
1024--3436[label="0.25;2pkt 2fpkt"];
1024--3547[label="0.2;2pkt 2fpkt"];
1024--3578[label="0.142857;3pkt 3fpkt"];
1024--3653[label="0.3;6pkt 6fpkt"];
1024--3671[label="0.0909091;1pkt 1fpkt"];
1024--3694[label="0.227273;5pkt 5fpkt"];
1024--3719[label="0.333333;2pkt 2fpkt"];
1024--4246[label="0.333333;7pkt 7fpkt"];
1024--4302[label="1;3pkt 3fpkt"];
1024--4395[label="0.444444;4pkt 4fpkt"];
1024--4455[label="0.166667;4pkt 4fpkt"];
1024--4648[label="0.333333;1pkt 1fpkt"];
1024--4751[label="0.0714286;2pkt 2fpkt"];
1024--5182[label="0.0238095;1pkt 1fpkt"];
1024--6297[label="0.222222;4pkt 4fpkt"];
1024--6314[label="0.266667;4pkt 4fpkt"];
1024--6377[label="0.285714;2pkt 2fpkt"];
1024--6475[label="0.142857;3pkt 3fpkt"];
1024--6529[label="0.3;6pkt 6fpkt"];
1024--6544[label="0.0833333;1pkt 1fpkt"];
1024--6574[label="0.333333;2pkt 2fpkt"];
1024--6933[label="0.333333;7pkt 7fpkt"];
1024--7044[label="0.5;4pkt 4fpkt"];
1024--7081[label="0.173913;4pkt 4fpkt"];
1024--7288[label="0.0740741;2pkt 2fpkt"];
1024--7594[label="0.0238095;1pkt 1fpkt"];
1024--8400[label="0.285714;4pkt 4fpkt"];
1024--8498[label="0.15;3pkt 3fpkt"];
1024--8533[label="0.3;6pkt 6fpkt"];
1024--8865[label="0.5;4pkt 4fpkt"];
1024--8889[label="0.173913;4pkt 4fpkt"];
1024--9021[label="0.0740741;2pkt 2fpkt"];
1024--9216[label="0.0232558;1pkt 1fpkt"];
1603--2208[label="0.125;2pkt 2fpkt"];
1603--3039[label="1;33pkt 33fpkt"];
1603--3335[label="0.0769231;1pkt 1fpkt"];
1603--3392[label="0.125;1pkt 1fpkt"];
1603--3436[label="0.125;1pkt 1fpkt"];
1603--3694[label="0.0454545;1pkt 1fpkt"];
1603--3719[label="0.166667;1pkt 1fpkt"];
1603--4877[label="0.0833333;1pkt 1fpkt"];
1603--5026[label="0.222222;2pkt 2fpkt"];
1603--6157[label="0.142857;1pkt 1fpkt"];
1603--6350[label="0.125;1pkt 1fpkt"];
1603--6377[label="0.142857;1pkt 1fpkt"];
1603--6574[label="0.166667;1pkt 1fpkt"];
1603--7381[label="0.0833333;1pkt 1fpkt"];
1603--7489[label="0.2;2pkt 2fpkt"];
1603--8424[label="0.125;1pkt 1fpkt"];
1603--9080[label="0.0909091;1pkt 1fpkt"];
1603--9150[label="0.2;2pkt 2fpkt"];
2208--3039[label="0.125;2pkt 2fpkt"];
2208--3309[label="0.5;1pkt 1fpkt"];
2451--3671[label="1;8pkt 8fpkt"];
2451--6544[label="1;8pkt 8fpkt"];
3039--3335[label="0.0769231;1pkt 1fpkt"];
3039--3392[label="0.125;1pkt 1fpkt"];
3039--3436[label="0.125;1pkt 1fpkt"];
3039--3719[label="0.166667;1pkt 1fpkt"];
3039--4877[label="0.0833333;1pkt 1fpkt"];
3039--5026[label="0.222222;2pkt 2fpkt"];
3039--6157[label="0.142857;1pkt 1fpkt"];
3039--6350[label="0.125;1pkt 1fpkt"];
3039--6377[label="0.142857;1pkt 1fpkt"];
3039--6574[label="0.166667;1pkt 1fpkt"];
3039--7381[label="0.0833333;1pkt 1fpkt"];
3039--7489[label="0.2;2pkt 2fpkt"];
3039--8424[label="0.125;1pkt 1fpkt"];
3039--9080[label="0.0909091;1pkt 1fpkt"];
3039--9150[label="0.2;2pkt 2fpkt"];
3309--6291[label="1;1pkt 1fpkt"];
3309--8385[label="1;1pkt 1fpkt"];
3436--6377[label="1;7pkt 7fpkt"];
3671--6544[label="1;11pkt 11fpkt"];
4246--6933[label="1;21pkt 21fpkt"];
4395--7044[label="1;8pkt 8fpkt"];
4395--8865[label="1;8pkt 8fpkt"];
4751--7288[label="1;27pkt 27fpkt"];
4751--9021[label="1;27pkt 27fpkt"];
6291--8385[label="1;1pkt 1fpkt"];
7044--8865[label="1;8pkt 8fpkt"];
7288--9021[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="164.23.141.28" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
224[label="38.202.242.5;d;128pkt 128fpkt", shape=diamond, color=yellow];
225[label="132.19.192.112;s;61pkt 61fpkt", shape=diamond, color=yellow];
3778[label="132.19.65.33;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3975[label="132.19.51.52;326pkt 326fpkt", shape=pentagon, color=darkviolet];
5912[label="132.19.221.217;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6609[label="132.19.65.33;17pkt 17fpkt", shape=invtriangle, color=brown];
8108[label="132.19.221.217;12pkt 12fpkt", shape=invtriangle, color=brown];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.51.52:*, 67.34.162.24:80}[35.4298%]&lt;BR/&gt;{*:*, 38.202.242.5:80}[26.6247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5166%)&lt;BR/&gt; 1863: (0.69808%)&lt;BR/&gt; 110: (0.26178%)&lt;BR/&gt; 60749: (0.17452%)&lt;BR/&gt; 60747: (0.17452%)&gt;];
}
224--225[label="1;61pkt 61fpkt"];
224--314[label="0.046875;6pkt 6fpkt"];
224--466[label="0.0252101;3pkt 3fpkt"];
224--704[label="0.445312;57pkt 57fpkt"];
224--2533[label="0.0078125;1pkt 1fpkt"];
224--2831[label="0.179688;23pkt 23fpkt"];
224--3296[label="0.03125;4pkt 4fpkt"];
224--3975[label="0.046875;6pkt 6fpkt"];
224--5198[label="0.0254237;3pkt 3fpkt"];
224--7603[label="0.0254237;3pkt 3fpkt"];
224--9223[label="0.0254237;3pkt 3fpkt"];
3778--6609[label="1;17pkt 17fpkt"];
3778--8584[label="1;17pkt 17fpkt"];
5912--8108[label="1;12pkt 12fpkt"];
5912--9554[label="1;11pkt 11fpkt"];
6609--8584[label="1;17pkt 17fpkt"];
8108--9554[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="38.202.242.5" dst_port="80"/>
      <filter dst_ip="67.34.162.24" dst_port="80" src_ip="132.19.51.52"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.203.98.178"/>
      <from sec="1144126802" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
377[label="132.19.98.57;s;1376pkt 1376fpkt", shape=diamond, color=yellow];
645[label="33.91.66.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
1256[label="38.202.240.86;d;1134pkt 1134fpkt", shape=diamond, color=yellow];
1392[label="38.202.250.152;d;26pkt 26fpkt", shape=diamond, color=yellow];
2036[label="38.220.245.218;d;14pkt 14fpkt", shape=diamond, color=yellow];
2716[label="132.19.98.57;s;1376pkt 1376fpkt", shape=hexagon, color=black];
4029[label="132.19.98.57;1485pkt 1485fpkt", shape=pentagon, color=darkviolet];
6778[label="132.19.98.57;1484pkt 1484fpkt", shape=invtriangle, color=brown];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.98.57:*, 38.202.240.86:3544}[81.1927%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3544: (42.5754%)&lt;BR/&gt; 80: (7.12732%)&lt;BR/&gt; 1863: (0.116009%)&lt;BR/&gt; 443: (0.116009%)&lt;BR/&gt; 61395: (0.0580046%)&gt;];
}
377--645[label="1;1pkt 1fpkt"];
377--808[label="0.00877193;3pkt 3fpkt"];
377--1072[label="0.0821918;6pkt 6fpkt"];
377--1095[label="0.38674;70pkt 70fpkt"];
377--1193[label="0.21875;7pkt 7fpkt"];
377--1256[label="0.996473;1130pkt 1130fpkt"];
377--1392[label="0.0769231;2pkt 2fpkt"];
377--1448[label="0.537313;72pkt 72fpkt"];
377--1513[label="0.00301205;1pkt 1fpkt"];
377--1555[label="0.00934579;1pkt 1fpkt"];
377--2036[label="0.0714286;1pkt 1fpkt"];
377--2573[label="0.0208333;1pkt 1fpkt"];
377--2716[label="1;1376pkt 1376fpkt"];
377--4029[label="1;1376pkt 1376fpkt"];
377--6778[label="0.999273;1375pkt 1375fpkt"];
645--2716[label="1;1pkt 1fpkt"];
645--4029[label="1;1pkt 1fpkt"];
645--6778[label="1;1pkt 1fpkt"];
1256--2182[label="0.00877193;1pkt 1fpkt"];
1256--2220[label="0.02;1pkt 1fpkt"];
1256--2386[label="0.0163934;1pkt 1fpkt"];
1256--2716[label="0.996473;1130pkt 1130fpkt"];
1256--3131[label="0.0227273;1pkt 1fpkt"];
1256--3143[label="0.0204082;1pkt 1fpkt"];
1256--3246[label="0.0163934;1pkt 1fpkt"];
1256--4029[label="0.996473;1130pkt 1130fpkt"];
1256--4043[label="0.0163934;1pkt 1fpkt"];
1256--4566[label="0.00847458;1pkt 1fpkt"];
1256--6778[label="0.996473;1130pkt 1130fpkt"];
1392--1408[label="0.0769231;2pkt 2fpkt"];
1392--1662[label="0.0384615;1pkt 1fpkt"];
1392--1959[label="0.0769231;2pkt 2fpkt"];
1392--2182[label="0.269231;7pkt 7fpkt"];
1392--2716[label="0.0769231;2pkt 2fpkt"];
1392--2878[label="0.0769231;2pkt 2fpkt"];
1392--3131[label="0.192308;5pkt 5fpkt"];
1392--3296[label="0.192308;5pkt 5fpkt"];
1392--4029[label="0.0769231;2pkt 2fpkt"];
1392--4114[label="0.0769231;2pkt 2fpkt"];
1392--4492[label="0.0384615;1pkt 1fpkt"];
1392--4566[label="0.269231;7pkt 7fpkt"];
1392--5611[label="0.111111;2pkt 2fpkt"];
1392--5825[label="0.0769231;2pkt 2fpkt"];
1392--6778[label="0.0384615;1pkt 1fpkt"];
1392--7107[label="0.0384615;1pkt 1fpkt"];
1392--7893[label="0.0588235;1pkt 1fpkt"];
1392--8045[label="0.0384615;1pkt 1fpkt"];
2036--2716[label="0.0714286;1pkt 1fpkt"];
2036--3474[label="0.333333;1pkt 1fpkt"];
2036--4023[label="0.214286;3pkt 3fpkt"];
2036--4029[label="0.0714286;1pkt 1fpkt"];
2036--6406[label="0.5;2pkt 2fpkt"];
2036--6778[label="0.0714286;1pkt 1fpkt"];
2716--4029[label="1;1376pkt 1376fpkt"];
2716--6778[label="0.999273;1375pkt 1375fpkt"];
4029--6778[label="1;1484pkt 1484fpkt"];
</description>
    <slice>
      <filter dst_ip="38.202.240.86" dst_port="3544" src_ip="132.19.98.57"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
4137[label="83.181.96.65;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.96.65:80, 147.13.162.139:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44043: (3.84615%)&lt;BR/&gt; 36011: (3.84615%)&lt;BR/&gt; 3694: (3.84615%)&lt;BR/&gt; 3681: (3.84615%)&gt;];
}
4137--6857[label="1;13pkt 13fpkt"];
4137--8743[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.162.139" src_ip="83.181.96.65" src_port="80"/>
    </slice>
    <from sec="1144127190" usec="0"/>
    <to sec="1144127688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
786[label="164.23.136.233;d;2pkt 2fpkt", shape=diamond, color=yellow];
1110[label="32.136.156.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.152.46.181:49930, 164.23.136.233:25}[50%]&lt;BR/&gt;{32.136.156.217:38071, 164.23.136.233:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 38071: (33.3333%)&lt;BR/&gt; 49930: (16.6667%)&gt;];
}
786--1110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.136.233" dst_port="25" src_ip="32.136.156.217" src_port="38071"/>
      <filter dst_ip="164.23.136.233" dst_port="25" src_ip="37.152.46.181" src_port="49930"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
3962[label="161.223.44.51;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6736[label="161.223.44.51;12pkt 12fpkt", shape=invtriangle, color=brown];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.44.51:*, *:80}[50%]&lt;BR/&gt;{161.223.44.51:1192, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.913%)&lt;BR/&gt; 1192: (17.3913%)&lt;BR/&gt; 49479: (4.34783%)&lt;BR/&gt; 39505: (4.34783%)&lt;BR/&gt; 34414: (4.34783%)&gt;];
}
3962--6736[label="1;11pkt 11fpkt"];
3962--8659[label="1;11pkt 11fpkt"];
6736--8659[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.44.51" src_port="1192"/>
      <filter dst_port="80" src_ip="161.223.44.51"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="132.19.202.166"/>
      <from sec="1144126881" usec="0"/>
      <to sec="1144126987" usec="0"/>
    </slice>
    <from sec="1144126881" usec="0"/>
    <to sec="1144126987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
712[label="132.18.189.155;s;36pkt 36fpkt", shape=diamond, color=yellow];
1190[label="215.117.137.103;d;8pkt 8fpkt", shape=diamond, color=yellow];
2835[label="132.18.189.155;s;36pkt 36fpkt", shape=hexagon, color=black];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.189.155:*, 208.46.202.18:80}[38.8889%]&lt;BR/&gt;{132.18.189.155:*, 215.117.137.103:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5%)&lt;BR/&gt; 62029: (2.5%)&lt;BR/&gt; 53: (2.5%)&lt;BR/&gt; 63037: (1.875%)&lt;BR/&gt; 62755: (1.875%)&gt;];
}
712--1190[label="1;8pkt 8fpkt"];
712--2835[label="1;36pkt 36fpkt"];
712--3290[label="0.0277778;1pkt 1fpkt"];
712--3296[label="0.138889;5pkt 5fpkt"];
1190--2835[label="1;8pkt 8fpkt"];
2835--3290[label="0.0277778;1pkt 1fpkt"];
2835--3296[label="0.138889;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.46.202.18" dst_port="80" src_ip="132.18.189.155"/>
      <filter dst_ip="215.117.137.103" dst_port="80" src_ip="132.18.189.155"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="84.19.12.173"/>
      <from sec="1144126947" usec="0"/>
      <to sec="1144127008" usec="0"/>
    </slice>
    <from sec="1144126947" usec="0"/>
    <to sec="1144127008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
778[label="128.28.224.186;s;530pkt 530fpkt", shape=diamond, color=yellow];
1195[label="213.132.129.139;d;7pkt 7fpkt", shape=diamond, color=yellow];
2631[label="218.226.106.0;d;31pkt 31fpkt", shape=diamond, color=yellow];
5538[label="128.28.224.186;530pkt 530fpkt", shape=pentagon, color=darkviolet];
7836[label="128.28.224.186;529pkt 529fpkt", shape=invtriangle, color=brown];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.224.186:*, 218.43.24.72:80}[30.566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7234%)&lt;BR/&gt; 6200: (0.276583%)&lt;BR/&gt; 2212: (0.122926%)&lt;BR/&gt; 2211: (0.122926%)&lt;BR/&gt; 2203: (0.122926%)&gt;];
}
778--1195[label="1;7pkt 7fpkt"];
778--1452[label="0.75;3pkt 3fpkt"];
778--2631[label="1;31pkt 31fpkt"];
778--3296[label="0.0358491;19pkt 19fpkt"];
778--5538[label="1;530pkt 530fpkt"];
778--7836[label="1;529pkt 529fpkt"];
1195--5538[label="1;7pkt 7fpkt"];
1195--7836[label="1;7pkt 7fpkt"];
2631--3296[label="0.129032;4pkt 4fpkt"];
2631--5538[label="1;31pkt 31fpkt"];
2631--7836[label="1;31pkt 31fpkt"];
5538--7836[label="1;529pkt 529fpkt"];
</description>
    <slice>
      <filter dst_ip="218.43.24.72" dst_port="80" src_ip="128.28.224.186"/>
    </slice>
    <from sec="1144126965" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="38.192.108.174"/>
      <from sec="1144126970" usec="0"/>
      <to sec="1144127127" usec="0"/>
    </slice>
    <from sec="1144126970" usec="0"/>
    <to sec="1144127127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.53.164.32"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
378[label="132.19.213.41;s;2pkt 2fpkt", shape=diamond, color=yellow];
952[label="217.4.182.206;d;1pkt 1fpkt", shape=diamond, color=yellow];
1259[label="198.136.26.225;d;1pkt 1fpkt", shape=diamond, color=yellow];
2755[label="132.19.213.41;s;2pkt 2fpkt", shape=hexagon, color=black];
3869[label="132.19.213.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6669[label="132.19.213.41;2pkt 2fpkt", shape=invtriangle, color=brown];
8621[label="132.19.213.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.213.41:8195, 217.4.182.206:8195}[50%]&lt;BR/&gt;{132.19.213.41:8277, 198.136.26.225:8292}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8195: (54.5455%)&lt;BR/&gt; 8292: (22.7273%)&lt;BR/&gt; 8277: (22.7273%)&gt;];
}
378--952[label="1;1pkt 1fpkt"];
378--1259[label="1;1pkt 1fpkt"];
378--2755[label="1;2pkt 2fpkt"];
378--3869[label="1;2pkt 2fpkt"];
378--6669[label="1;2pkt 2fpkt"];
378--8621[label="1;1pkt 1fpkt"];
952--2755[label="1;1pkt 1fpkt"];
952--3869[label="1;1pkt 1fpkt"];
952--6669[label="1;1pkt 1fpkt"];
952--8621[label="1;1pkt 1fpkt"];
1259--2755[label="1;1pkt 1fpkt"];
1259--3869[label="1;1pkt 1fpkt"];
1259--6669[label="1;1pkt 1fpkt"];
2755--3869[label="1;2pkt 2fpkt"];
2755--6669[label="1;2pkt 2fpkt"];
2755--8621[label="1;1pkt 1fpkt"];
3869--6669[label="1;2pkt 2fpkt"];
3869--8621[label="1;1pkt 1fpkt"];
6669--8621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.136.26.225" dst_port="8292" src_ip="132.19.213.41" src_port="8277"/>
      <filter dst_ip="217.4.182.206" dst_port="8195" src_ip="132.19.213.41" src_port="8195"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
181[label="195.89.106.147;d;71pkt 71fpkt", shape=diamond, color=yellow];
1276[label="38.53.161.193;s;67pkt 67fpkt", shape=diamond, color=yellow];
1511[label="36.72.160.40;s;80pkt 80fpkt", shape=diamond, color=yellow];
1851[label="210.107.147.168;s;5pkt 5fpkt", shape=diamond, color=yellow];
3575[label="36.138.7.19;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3849[label="36.72.160.40;86pkt 86fpkt", shape=pentagon, color=darkviolet];
3950[label="210.164.129.50;86pkt 86fpkt", shape=pentagon, color=darkviolet];
4171[label="210.107.147.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4199[label="210.107.147.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4527[label="32.136.146.98;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4605[label="32.136.146.105;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4670[label="32.136.146.111;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4757[label="32.136.146.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4867[label="32.136.179.132;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5341[label="210.107.147.168;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5354[label="210.107.147.169;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5609[label="38.53.161.193;67pkt 67fpkt", shape=pentagon, color=darkviolet];
5667[label="210.107.144.197;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5950[label="210.164.134.220;66pkt 66fpkt", shape=pentagon, color=darkviolet];
6473[label="36.138.7.19;17pkt 17fpkt", shape=invtriangle, color=brown];
6725[label="210.164.129.50;87pkt 87fpkt", shape=invtriangle, color=brown];
6899[label="210.107.147.70;2pkt 2fpkt", shape=invtriangle, color=brown];
7131[label="32.136.146.98;6pkt 6fpkt", shape=invtriangle, color=brown];
7183[label="32.136.146.105;5pkt 5fpkt", shape=invtriangle, color=brown];
7226[label="32.136.146.111;1pkt 1fpkt", shape=invtriangle, color=brown];
7375[label="32.136.179.132;33pkt 33fpkt", shape=invtriangle, color=brown];
8132[label="210.164.134.220;65pkt 65fpkt", shape=invtriangle, color=brown];
8497[label="36.138.7.19;16pkt 16fpkt", shape=invhouse, color=bisque];
8653[label="210.164.129.50;86pkt 86fpkt", shape=invhouse, color=bisque];
8957[label="32.136.146.105;5pkt 5fpkt", shape=invhouse, color=bisque];
8982[label="32.136.146.111;1pkt 1fpkt", shape=invhouse, color=bisque];
9571[label="210.164.134.220;66pkt 66fpkt", shape=invhouse, color=bisque];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.164.129.50:53, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.2497%)&lt;BR/&gt; 443: (5.31595%)&lt;BR/&gt; 0: (5.01505%)&lt;BR/&gt; 80: (4.96489%)&lt;BR/&gt; 5222: (4.41324%)&gt;];
}
181--1276[label="0.0298507;2pkt 2fpkt"];
181--1511[label="0.0140845;1pkt 1fpkt"];
181--1851[label="0.2;1pkt 1fpkt"];
181--2314[label="1;3pkt 3fpkt"];
181--3287[label="0.028169;2pkt 2fpkt"];
181--3288[label="0.028169;2pkt 2fpkt"];
181--3292[label="0.0140845;1pkt 1fpkt"];
181--3302[label="0.056338;4pkt 4fpkt"];
181--3303[label="0.0140845;1pkt 1fpkt"];
181--3575[label="0.4375;7pkt 7fpkt"];
181--3849[label="0.0140845;1pkt 1fpkt"];
181--3950[label="0.0140845;1pkt 1fpkt"];
181--4064[label="1;1pkt 1fpkt"];
181--4171[label="1;1pkt 1fpkt"];
181--4199[label="0.5;1pkt 1fpkt"];
181--4527[label="0.166667;1pkt 1fpkt"];
181--4605[label="0.2;1pkt 1fpkt"];
181--4670[label="0.5;1pkt 1fpkt"];
181--4757[label="0.5;1pkt 1fpkt"];
181--4867[label="0.0294118;1pkt 1fpkt"];
181--5341[label="0.166667;1pkt 1fpkt"];
181--5354[label="0.333333;1pkt 1fpkt"];
181--5609[label="0.0298507;2pkt 2fpkt"];
181--5667[label="0.5;1pkt 1fpkt"];
181--5950[label="0.0151515;1pkt 1fpkt"];
181--6473[label="0.411765;7pkt 7fpkt"];
181--6725[label="0.0140845;1pkt 1fpkt"];
181--6800[label="1;1pkt 1fpkt"];
181--6899[label="0.5;1pkt 1fpkt"];
181--7131[label="0.166667;1pkt 1fpkt"];
181--7183[label="0.2;1pkt 1fpkt"];
181--7226[label="1;1pkt 1fpkt"];
181--7375[label="0.030303;1pkt 1fpkt"];
181--8132[label="0.0153846;1pkt 1fpkt"];
181--8497[label="0.4375;7pkt 7fpkt"];
181--8653[label="0.0140845;1pkt 1fpkt"];
181--8706[label="1;1pkt 1fpkt"];
181--8957[label="0.2;1pkt 1fpkt"];
181--8982[label="1;1pkt 1fpkt"];
181--9571[label="0.0151515;1pkt 1fpkt"];
1276--1331[label="0.0149254;1pkt 1fpkt"];
1276--1829[label="0.0192308;1pkt 1fpkt"];
1276--1858[label="0.0149254;1pkt 1fpkt"];
1276--1902[label="0.0666667;1pkt 1fpkt"];
1276--1920[label="0.0149254;1pkt 1fpkt"];
1276--5609[label="1;67pkt 67fpkt"];
1511--1512[label="0.0125;1pkt 1fpkt"];
1511--1529[label="0.0125;1pkt 1fpkt"];
1511--1568[label="0.0125;1pkt 1fpkt"];
1511--1721[label="0.0196078;1pkt 1fpkt"];
1511--1825[label="0.0125;1pkt 1fpkt"];
1511--1840[label="0.0125;1pkt 1fpkt"];
1511--2099[label="0.0125;1pkt 1fpkt"];
1511--2155[label="0.0125;1pkt 1fpkt"];
1511--2203[label="0.0125;1pkt 1fpkt"];
1511--2323[label="0.0125;1pkt 1fpkt"];
1511--2907[label="0.0375;3pkt 3fpkt"];
1511--3067[label="0.0208333;1pkt 1fpkt"];
1511--3099[label="0.0125;1pkt 1fpkt"];
1511--3287[label="0.2625;21pkt 21fpkt"];
1511--3290[label="0.0125;1pkt 1fpkt"];
1511--3295[label="0.025;2pkt 2fpkt"];
1511--3302[label="0.4;32pkt 32fpkt"];
1511--3849[label="1;80pkt 80fpkt"];
1851--5341[label="1;5pkt 5fpkt"];
3575--6473[label="1;16pkt 16fpkt"];
3575--8497[label="1;16pkt 16fpkt"];
3950--6725[label="1;86pkt 86fpkt"];
3950--8653[label="1;86pkt 86fpkt"];
4199--6899[label="1;2pkt 2fpkt"];
4527--7131[label="1;6pkt 6fpkt"];
4605--7183[label="1;5pkt 5fpkt"];
4605--8957[label="1;5pkt 5fpkt"];
4670--7226[label="1;1pkt 1fpkt"];
4670--8982[label="1;1pkt 1fpkt"];
4867--7375[label="1;33pkt 33fpkt"];
5950--8132[label="1;65pkt 65fpkt"];
5950--9571[label="1;66pkt 66fpkt"];
6473--8497[label="1;16pkt 16fpkt"];
6725--8653[label="1;86pkt 86fpkt"];
7183--8957[label="1;5pkt 5fpkt"];
7226--8982[label="1;1pkt 1fpkt"];
8132--9571[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter src_ip="210.164.129.50" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.212.153.69"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
1216[label="164.23.213.217;d;117pkt 117fpkt", shape=diamond, color=yellow];
1332[label="130.164.158.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
2117[label="50.84.11.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
2503[label="38.78.98.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
3358[label="193.160.28.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4130[label="80.4.227.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4501[label="50.6.28.96;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4628[label="32.70.140.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4822[label="32.136.179.129;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4968[label="33.140.190.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5213[label="49.156.57.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5370[label="82.140.40.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5484[label="33.34.220.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5510[label="55.13.116.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5583[label="50.84.11.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6004[label="55.28.135.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6326[label="193.160.28.4;4pkt 4fpkt", shape=invtriangle, color=brown];
7343[label="32.136.179.129;34pkt 34fpkt", shape=invtriangle, color=brown];
7557[label="49.167.195.152;1pkt 1fpkt", shape=invtriangle, color=brown];
7798[label="33.34.220.181;2pkt 2fpkt", shape=invtriangle, color=brown];
7868[label="99.11.22.191;1pkt 1fpkt", shape=invtriangle, color=brown];
7874[label="50.84.11.192;1pkt 1fpkt", shape=invtriangle, color=brown];
8172[label="55.28.135.225;1pkt 1fpkt", shape=invtriangle, color=brown];
8908[label="50.6.28.96;1pkt 1fpkt", shape=invhouse, color=bisque];
9350[label="33.34.220.181;1pkt 1fpkt", shape=invhouse, color=bisque];
9400[label="50.84.11.192;1pkt 1fpkt", shape=invhouse, color=bisque];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.23.213.217:80}[74%]&lt;BR/&gt;{32.136.179.129:443, *:*}[21.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.4766%)&lt;BR/&gt; 443: (15.4206%)&lt;BR/&gt; 0: (1.86916%)&lt;BR/&gt; 36063: (1.16822%)&lt;BR/&gt; 33353: (0.934579%)&gt;];
}
1216--1332[label="1;1pkt 1fpkt"];
1216--1563[label="1;1pkt 1fpkt"];
1216--1569[label="1;1pkt 1fpkt"];
1216--2117[label="1;1pkt 1fpkt"];
1216--2503[label="1;1pkt 1fpkt"];
1216--2931[label="1;1pkt 1fpkt"];
1216--3027[label="1;1pkt 1fpkt"];
1216--3296[label="0.401709;47pkt 47fpkt"];
1216--3358[label="1;4pkt 4fpkt"];
1216--4102[label="1;1pkt 1fpkt"];
1216--4130[label="1;1pkt 1fpkt"];
1216--4501[label="1;1pkt 1fpkt"];
1216--4628[label="1;1pkt 1fpkt"];
1216--4822[label="0.030303;1pkt 1fpkt"];
1216--4968[label="1;1pkt 1fpkt"];
1216--5034[label="0.0131579;1pkt 1fpkt"];
1216--5213[label="1;1pkt 1fpkt"];
1216--5370[label="1;1pkt 1fpkt"];
1216--5484[label="1;1pkt 1fpkt"];
1216--5510[label="1;1pkt 1fpkt"];
1216--5583[label="1;1pkt 1fpkt"];
1216--6004[label="1;1pkt 1fpkt"];
1216--6134[label="1;1pkt 1fpkt"];
1216--6326[label="1;4pkt 4fpkt"];
1216--7343[label="0.0294118;1pkt 1fpkt"];
1216--7495[label="0.0131579;1pkt 1fpkt"];
1216--7557[label="1;1pkt 1fpkt"];
1216--7798[label="1;2pkt 2fpkt"];
1216--7868[label="1;1pkt 1fpkt"];
1216--7874[label="1;1pkt 1fpkt"];
1216--8172[label="1;1pkt 1fpkt"];
1216--8908[label="1;1pkt 1fpkt"];
1216--9153[label="0.0131579;1pkt 1fpkt"];
1216--9350[label="1;1pkt 1fpkt"];
1216--9400[label="1;1pkt 1fpkt"];
1332--3296[label="1;1pkt 1fpkt"];
2117--3296[label="1;1pkt 1fpkt"];
2117--5583[label="1;1pkt 1fpkt"];
2117--7874[label="1;1pkt 1fpkt"];
2117--9400[label="1;1pkt 1fpkt"];
2503--3296[label="1;1pkt 1fpkt"];
3358--6326[label="1;4pkt 4fpkt"];
4501--8908[label="1;1pkt 1fpkt"];
4822--7343[label="1;33pkt 33fpkt"];
5484--7798[label="1;1pkt 1fpkt"];
5484--9350[label="1;1pkt 1fpkt"];
5583--7874[label="1;1pkt 1fpkt"];
5583--9400[label="1;1pkt 1fpkt"];
6004--8172[label="1;1pkt 1fpkt"];
7798--9350[label="1;1pkt 1fpkt"];
7874--9400[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="32.136.179.129" src_port="443"/>
      <filter dst_ip="164.23.213.217" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
332[label="128.28.217.137;s;764pkt 764fpkt", shape=diamond, color=yellow];
1334[label="205.199.70.146;d;151pkt 151fpkt", shape=diamond, color=yellow];
1434[label="132.19.74.34;s;147pkt 147fpkt", shape=diamond, color=yellow];
1547[label="128.28.217.4;s;300pkt 300fpkt", shape=diamond, color=yellow];
1645[label="164.23.196.173;s;48pkt 48fpkt", shape=diamond, color=yellow];
1663[label="195.89.66.151;s;177pkt 177fpkt", shape=diamond, color=yellow];
1699[label="194.212.156.209;s;78pkt 78fpkt", shape=diamond, color=yellow];
1810[label="132.19.197.233;s;137pkt 137fpkt", shape=diamond, color=yellow];
1967[label="39.64.18.171;d;19pkt 19fpkt", shape=diamond, color=yellow];
2170[label="194.212.156.196;s;61pkt 61fpkt", shape=diamond, color=yellow];
2384[label="220.108.220.118;d;35pkt 35fpkt", shape=diamond, color=yellow];
2566[label="220.108.220.117;d;27pkt 27fpkt", shape=diamond, color=yellow];
2608[label="195.89.107.4;s;71pkt 71fpkt", shape=diamond, color=yellow];
2712[label="128.28.217.137;s;764pkt 764fpkt", shape=hexagon, color=black];
2975[label="132.19.74.34;s;128pkt 128fpkt", shape=hexagon, color=black];
3366[label="195.89.107.4;75pkt 75fpkt", shape=pentagon, color=darkviolet];
3375[label="128.28.217.4;331pkt 331fpkt", shape=pentagon, color=darkviolet];
3994[label="161.223.82.54;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4698[label="132.19.108.114;45pkt 45fpkt", shape=pentagon, color=darkviolet];
4944[label="128.28.217.137;855pkt 855fpkt", shape=pentagon, color=darkviolet];
5675[label="147.100.5.198;139pkt 139fpkt", shape=pentagon, color=darkviolet];
5812[label="194.212.156.209;84pkt 84fpkt", shape=pentagon, color=darkviolet];
6089[label="132.19.197.233;152pkt 152fpkt", shape=pentagon, color=darkviolet];
6135[label="132.19.197.237;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6338[label="128.28.217.4;332pkt 332fpkt", shape=invtriangle, color=brown];
7250[label="132.19.108.114;46pkt 46fpkt", shape=invtriangle, color=brown];
7428[label="128.28.217.137;855pkt 855fpkt", shape=invtriangle, color=brown];
7942[label="147.100.5.198;139pkt 139fpkt", shape=invtriangle, color=brown];
8237[label="132.19.197.233;152pkt 152fpkt", shape=invtriangle, color=brown];
8268[label="132.19.197.237;18pkt 18fpkt", shape=invtriangle, color=brown];
8416[label="128.28.217.4;332pkt 332fpkt", shape=invhouse, color=bisque];
8998[label="132.19.108.114;45pkt 45fpkt", shape=invhouse, color=bisque];
9109[label="128.28.217.137;855pkt 855fpkt", shape=invhouse, color=bisque];
9638[label="132.19.197.233;151pkt 151fpkt", shape=invhouse, color=bisque];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[30.2792%]&lt;BR/&gt;{128.28.217.137:*, *:25}[21.9023%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.3686%)&lt;BR/&gt; 53: (1.25495%)&lt;BR/&gt; 5519: (0.673712%)&lt;BR/&gt; 113: (0.422721%)&lt;BR/&gt; 38033: (0.0660502%)&gt;];
}
332--1334[label="0.0662252;10pkt 10fpkt"];
332--1967[label="0.0526316;1pkt 1fpkt"];
332--2384[label="0.485714;17pkt 17fpkt"];
332--2566[label="0.740741;20pkt 20fpkt"];
332--2623[label="0.0833333;1pkt 1fpkt"];
332--2712[label="1;764pkt 764fpkt"];
332--4944[label="1;764pkt 764fpkt"];
332--7428[label="1;764pkt 764fpkt"];
332--9109[label="1;764pkt 764fpkt"];
1334--1434[label="0.00680272;1pkt 1fpkt"];
1334--1537[label="0.00662252;1pkt 1fpkt"];
1334--1547[label="0.0927152;14pkt 14fpkt"];
1334--1645[label="0.0625;3pkt 3fpkt"];
1334--1663[label="0.0264901;4pkt 4fpkt"];
1334--1699[label="0.0128205;1pkt 1fpkt"];
1334--1810[label="0.0291971;4pkt 4fpkt"];
1334--1924[label="0.0397351;6pkt 6fpkt"];
1334--2170[label="0.0163934;1pkt 1fpkt"];
1334--2403[label="0.0215054;2pkt 2fpkt"];
1334--2608[label="0.0140845;1pkt 1fpkt"];
1334--2712[label="0.0662252;10pkt 10fpkt"];
1334--2975[label="0.0078125;1pkt 1fpkt"];
1334--3093[label="0.0264901;4pkt 4fpkt"];
1334--3366[label="0.0133333;1pkt 1fpkt"];
1334--3375[label="0.0927152;14pkt 14fpkt"];
1334--3994[label="0.105263;4pkt 4fpkt"];
1334--4079[label="0.013245;2pkt 2fpkt"];
1334--4698[label="0.0222222;1pkt 1fpkt"];
1334--4944[label="0.0662252;10pkt 10fpkt"];
1334--5155[label="0.0264901;4pkt 4fpkt"];
1334--5381[label="0.00662252;1pkt 1fpkt"];
1334--5416[label="0.0397351;6pkt 6fpkt"];
1334--5675[label="0.0143885;2pkt 2fpkt"];
1334--5812[label="0.0119048;1pkt 1fpkt"];
1334--6089[label="0.0264901;4pkt 4fpkt"];
1334--6135[label="0.0526316;1pkt 1fpkt"];
1334--6207[label="0.0434783;1pkt 1fpkt"];
1334--6338[label="0.0927152;14pkt 14fpkt"];
1334--7250[label="0.0217391;1pkt 1fpkt"];
1334--7428[label="0.0662252;10pkt 10fpkt"];
1334--7574[label="0.0264901;4pkt 4fpkt"];
1334--7942[label="0.0143885;2pkt 2fpkt"];
1334--8237[label="0.0264901;4pkt 4fpkt"];
1334--8268[label="0.0555556;1pkt 1fpkt"];
1334--8322[label="0.0454545;1pkt 1fpkt"];
1334--8416[label="0.0927152;14pkt 14fpkt"];
1334--8998[label="0.0222222;1pkt 1fpkt"];
1334--9109[label="0.0662252;10pkt 10fpkt"];
1334--9638[label="0.0264901;4pkt 4fpkt"];
1434--1514[label="0.00680272;1pkt 1fpkt"];
1434--1967[label="0.105263;2pkt 2fpkt"];
1434--2246[label="0.0555556;1pkt 1fpkt"];
1434--2623[label="0.166667;2pkt 2fpkt"];
1434--2975[label="1;128pkt 128fpkt"];
1547--1967[label="0.0526316;1pkt 1fpkt"];
1547--2384[label="0.4;14pkt 14fpkt"];
1547--2566[label="0.222222;6pkt 6fpkt"];
1547--3375[label="0.996667;299pkt 299fpkt"];
1547--6338[label="1;300pkt 300fpkt"];
1547--8416[label="1;300pkt 300fpkt"];
1663--1970[label="0.0555556;2pkt 2fpkt"];
1663--2510[label="0.0769231;2pkt 2fpkt"];
1699--2384[label="0.0571429;2pkt 2fpkt"];
1699--5812[label="1;78pkt 78fpkt"];
1810--6089[label="1;137pkt 137fpkt"];
1810--8237[label="1;137pkt 137fpkt"];
1810--9638[label="0.992701;136pkt 136fpkt"];
1967--2712[label="0.0526316;1pkt 1fpkt"];
1967--2838[label="0.0526316;1pkt 1fpkt"];
1967--2871[label="0.105263;2pkt 2fpkt"];
1967--2975[label="0.105263;2pkt 2fpkt"];
1967--3336[label="0.105263;2pkt 2fpkt"];
1967--3375[label="0.0526316;1pkt 1fpkt"];
1967--3378[label="0.0526316;1pkt 1fpkt"];
1967--3613[label="0.0555556;1pkt 1fpkt"];
1967--4079[label="0.0526316;1pkt 1fpkt"];
1967--4944[label="0.0526316;1pkt 1fpkt"];
1967--5021[label="0.105263;2pkt 2fpkt"];
1967--5739[label="0.0526316;1pkt 1fpkt"];
1967--6135[label="0.0526316;1pkt 1fpkt"];
1967--6306[label="0.105263;2pkt 2fpkt"];
1967--6338[label="0.0526316;1pkt 1fpkt"];
1967--6340[label="0.0526316;1pkt 1fpkt"];
1967--7428[label="0.0526316;1pkt 1fpkt"];
1967--8268[label="0.0555556;1pkt 1fpkt"];
1967--8416[label="0.0526316;1pkt 1fpkt"];
1967--8418[label="0.0526316;1pkt 1fpkt"];
1967--9109[label="0.0526316;1pkt 1fpkt"];
2170--2384[label="0.0571429;2pkt 2fpkt"];
2384--2712[label="0.485714;17pkt 17fpkt"];
2384--3375[label="0.4;14pkt 14fpkt"];
2384--4944[label="0.485714;17pkt 17fpkt"];
2384--5812[label="0.0571429;2pkt 2fpkt"];
2384--6338[label="0.4;14pkt 14fpkt"];
2384--7428[label="0.485714;17pkt 17fpkt"];
2384--8416[label="0.4;14pkt 14fpkt"];
2384--9109[label="0.485714;17pkt 17fpkt"];
2566--2712[label="0.740741;20pkt 20fpkt"];
2566--3375[label="0.222222;6pkt 6fpkt"];
2566--4944[label="0.740741;20pkt 20fpkt"];
2566--6338[label="0.222222;6pkt 6fpkt"];
2566--7428[label="0.740741;20pkt 20fpkt"];
2566--8416[label="0.222222;6pkt 6fpkt"];
2566--9109[label="0.740741;20pkt 20fpkt"];
2608--3366[label="1;71pkt 71fpkt"];
2712--4944[label="1;764pkt 764fpkt"];
2712--7428[label="1;764pkt 764fpkt"];
2712--9109[label="1;764pkt 764fpkt"];
3375--6338[label="1;331pkt 331fpkt"];
3375--8416[label="1;331pkt 331fpkt"];
4698--7250[label="1;45pkt 45fpkt"];
4698--8998[label="1;45pkt 45fpkt"];
4944--7428[label="1;855pkt 855fpkt"];
4944--9109[label="1;855pkt 855fpkt"];
5675--7942[label="1;139pkt 139fpkt"];
6089--8237[label="1;152pkt 152fpkt"];
6089--9638[label="1;151pkt 151fpkt"];
6135--8268[label="1;18pkt 18fpkt"];
6338--8416[label="1;332pkt 332fpkt"];
7250--8998[label="1;45pkt 45fpkt"];
7428--9109[label="1;855pkt 855fpkt"];
8237--9638[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_port="25" src_ip="128.28.217.137"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="83.141.11.181"/>
      <from sec="1144126802" usec="0"/>
      <to sec="1144127257" usec="0"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
5000[label="128.202.7.142;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7468[label="128.202.7.142;17pkt 17fpkt", shape=invtriangle, color=brown];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.7.142:*, 218.150.67.24:80}[64.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38631: (2.94118%)&lt;BR/&gt; 38630: (2.94118%)&lt;BR/&gt; 38615: (2.94118%)&lt;BR/&gt; 38614: (2.94118%)&gt;];
}
5000--7468[label="1;17pkt 17fpkt"];
5000--9134[label="1;17pkt 17fpkt"];
7468--9134[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="218.150.67.24" dst_port="80" src_ip="128.202.7.142"/>
    </slice>
    <from sec="1144126995" usec="0"/>
    <to sec="1144127450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
885[label="53.201.131.152;d;764pkt 764fpkt", shape=diamond, color=yellow];
1383[label="164.23.203.70;s;462pkt 462fpkt", shape=diamond, color=yellow];
3823[label="164.23.207.37;72pkt 72fpkt", shape=pentagon, color=darkviolet];
4207[label="164.23.203.70;466pkt 466fpkt", shape=pentagon, color=darkviolet];
5045[label="164.23.249.145;64pkt 64fpkt", shape=pentagon, color=darkviolet];
5262[label="164.23.225.162;69pkt 69fpkt", shape=pentagon, color=darkviolet];
5410[label="164.23.225.173;71pkt 71fpkt", shape=pentagon, color=darkviolet];
5570[label="164.23.234.189;43pkt 43fpkt", shape=pentagon, color=darkviolet];
5927[label="164.23.202.218;63pkt 63fpkt", shape=pentagon, color=darkviolet];
6200[label="164.23.224.244;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6636[label="164.23.207.37;72pkt 72fpkt", shape=invtriangle, color=brown];
6906[label="164.23.203.70;465pkt 465fpkt", shape=invtriangle, color=brown];
7502[label="164.23.249.145;64pkt 64fpkt", shape=invtriangle, color=brown];
7651[label="164.23.225.162;69pkt 69fpkt", shape=invtriangle, color=brown];
7749[label="164.23.225.173;70pkt 70fpkt", shape=invtriangle, color=brown];
7863[label="164.23.234.189;42pkt 42fpkt", shape=invtriangle, color=brown];
8116[label="164.23.202.218;63pkt 63fpkt", shape=invtriangle, color=brown];
8319[label="164.23.224.244;62pkt 62fpkt", shape=invtriangle, color=brown];
8602[label="164.23.207.37;72pkt 72fpkt", shape=invhouse, color=bisque];
8776[label="164.23.203.70;465pkt 465fpkt", shape=invhouse, color=bisque];
9157[label="164.23.249.145;64pkt 64fpkt", shape=invhouse, color=bisque];
9257[label="164.23.225.162;69pkt 69fpkt", shape=invhouse, color=bisque];
9321[label="164.23.225.173;70pkt 70fpkt", shape=invhouse, color=bisque];
9393[label="164.23.234.189;43pkt 43fpkt", shape=invhouse, color=bisque];
9559[label="164.23.202.218;63pkt 63fpkt", shape=invhouse, color=bisque];
9698[label="164.23.224.244;61pkt 61fpkt", shape=invhouse, color=bisque];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 53.201.131.152:6667}[66.3088%]&lt;BR/&gt;{164.23.203.70:*, *:443}[32.948%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (29.6151%)&lt;BR/&gt; 443: (20.1823%)&lt;BR/&gt; 3090: (0.164599%)&lt;BR/&gt; 1553: (0.164599%)&lt;BR/&gt; 1536: (0.164599%)&gt;];
}
885--1004[label="0.00346021;1pkt 1fpkt"];
885--1383[label="0.134199;62pkt 62fpkt"];
885--3823[label="0.902778;65pkt 65fpkt"];
885--4207[label="0.133047;62pkt 62fpkt"];
885--5045[label="0.890625;57pkt 57fpkt"];
885--5262[label="0.898551;62pkt 62fpkt"];
885--5410[label="0.915493;65pkt 65fpkt"];
885--5570[label="0.883721;38pkt 38fpkt"];
885--5927[label="0.904762;57pkt 57fpkt"];
885--6200[label="0.918033;56pkt 56fpkt"];
885--6636[label="0.902778;65pkt 65fpkt"];
885--6906[label="0.133333;62pkt 62fpkt"];
885--7502[label="0.890625;57pkt 57fpkt"];
885--7651[label="0.898551;62pkt 62fpkt"];
885--7749[label="0.928571;65pkt 65fpkt"];
885--7863[label="0.904762;38pkt 38fpkt"];
885--8116[label="0.904762;57pkt 57fpkt"];
885--8319[label="0.919355;57pkt 57fpkt"];
885--8602[label="0.902778;65pkt 65fpkt"];
885--8776[label="0.133333;62pkt 62fpkt"];
885--9157[label="0.890625;57pkt 57fpkt"];
885--9257[label="0.898551;62pkt 62fpkt"];
885--9321[label="0.928571;65pkt 65fpkt"];
885--9393[label="0.883721;38pkt 38fpkt"];
885--9559[label="0.904762;57pkt 57fpkt"];
885--9698[label="0.918033;56pkt 56fpkt"];
1383--4207[label="1;462pkt 462fpkt"];
1383--6906[label="0.997835;461pkt 461fpkt"];
1383--8776[label="0.997835;461pkt 461fpkt"];
3823--6636[label="1;72pkt 72fpkt"];
3823--8602[label="1;72pkt 72fpkt"];
4207--6906[label="1;465pkt 465fpkt"];
4207--8776[label="1;465pkt 465fpkt"];
5045--7502[label="1;64pkt 64fpkt"];
5045--9157[label="1;64pkt 64fpkt"];
5262--7651[label="1;69pkt 69fpkt"];
5262--9257[label="1;69pkt 69fpkt"];
5410--7749[label="1;70pkt 70fpkt"];
5410--9321[label="1;70pkt 70fpkt"];
5570--7863[label="1;42pkt 42fpkt"];
5570--9393[label="1;43pkt 43fpkt"];
5927--8116[label="1;63pkt 63fpkt"];
5927--9559[label="1;63pkt 63fpkt"];
6200--8319[label="1;61pkt 61fpkt"];
6200--9698[label="1;61pkt 61fpkt"];
6636--8602[label="1;72pkt 72fpkt"];
6906--8776[label="1;465pkt 465fpkt"];
7502--9157[label="1;64pkt 64fpkt"];
7651--9257[label="1;69pkt 69fpkt"];
7749--9321[label="1;70pkt 70fpkt"];
7863--9393[label="1;42pkt 42fpkt"];
8116--9559[label="1;63pkt 63fpkt"];
8319--9698[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="164.23.203.70"/>
      <filter dst_ip="53.201.131.152" dst_port="6667"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1229[label="83.163.160.4;s;1303pkt 1303fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.163.160.4:1203, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1203: (50%)&gt;];
}
1229--1404[label="0.166667;1pkt 1fpkt"];
1229--2155[label="0.003003;1pkt 1fpkt"];
1229--2903[label="1;720pkt 720fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.163.160.4" src_port="1203"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
1112[label="161.223.54.170;s;70pkt 70fpkt", shape=diamond, color=yellow];
1406[label="173.32.251.252;d;70pkt 70fpkt", shape=diamond, color=yellow];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.54.170:*, 173.32.251.252:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4996: (0.714286%)&lt;BR/&gt; 4995: (0.714286%)&lt;BR/&gt; 4994: (0.714286%)&lt;BR/&gt; 4991: (0.714286%)&gt;];
}
1112--1406[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="173.32.251.252" dst_port="80" src_ip="161.223.54.170"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
1296[label="38.51.89.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.146.166:47670, 38.51.89.193:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47670: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1296--2765[label="1;1pkt 1fpkt"];
1296--3296[label="1;1pkt 1fpkt"];
1296--5312[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.51.89.193" dst_port="80" src_ip="132.19.146.166" src_port="47670"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
1119[label="132.19.54.2;s;186pkt 186fpkt", shape=diamond, color=yellow];
2838[label="132.19.54.2;s;106pkt 106fpkt", shape=hexagon, color=black];
3148[label="32.136.134.221;d;130pkt 130fpkt", shape=hexagon, color=black];
4338[label="128.28.226.80;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7003[label="128.28.226.80;27pkt 27fpkt", shape=invtriangle, color=brown];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.54.2:*, *:80}[39.5894%]&lt;BR/&gt;{128.28.231.96:*, 32.136.134.221:80}[20.8211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.6975%)&lt;BR/&gt; 25: (3.67647%)&lt;BR/&gt; 443: (1.57563%)&lt;BR/&gt; 1863: (1.05042%)&lt;BR/&gt; 1779: (0.52521%)&gt;];
}
1119--1155[label="0.00598802;1pkt 1fpkt"];
1119--1403[label="0.00694444;1pkt 1fpkt"];
1119--1448[label="0.00746269;1pkt 1fpkt"];
1119--1517[label="0.00537634;1pkt 1fpkt"];
1119--1689[label="0.101852;11pkt 11fpkt"];
1119--1765[label="0.0107527;2pkt 2fpkt"];
1119--1898[label="0.0106383;1pkt 1fpkt"];
1119--1967[label="0.105263;2pkt 2fpkt"];
1119--1970[label="0.194444;7pkt 7fpkt"];
1119--2233[label="0.235294;4pkt 4fpkt"];
1119--2246[label="0.111111;2pkt 2fpkt"];
1119--2255[label="0.0555556;1pkt 1fpkt"];
1119--2324[label="0.0583333;7pkt 7fpkt"];
1119--2623[label="0.25;3pkt 3fpkt"];
1119--2838[label="1;106pkt 106fpkt"];
1119--3148[label="0.00769231;1pkt 1fpkt"];
1119--3292[label="0.00537634;1pkt 1fpkt"];
1119--3296[label="0.0107527;2pkt 2fpkt"];
1119--3303[label="0.00537634;1pkt 1fpkt"];
1119--3336[label="1;186pkt 186fpkt"];
1119--6306[label="1;186pkt 186fpkt"];
2838--3148[label="0.00943396;1pkt 1fpkt"];
2838--3336[label="1;106pkt 106fpkt"];
2838--6306[label="1;106pkt 106fpkt"];
3148--3336[label="0.00769231;1pkt 1fpkt"];
3148--3959[label="0.00769231;1pkt 1fpkt"];
3148--4092[label="0.00769231;1pkt 1fpkt"];
3148--4108[label="0.338462;44pkt 44fpkt"];
3148--4114[label="0.00769231;1pkt 1fpkt"];
3148--4338[label="0.037037;1pkt 1fpkt"];
3148--4510[label="0.546154;71pkt 71fpkt"];
3148--6104[label="0.0172414;1pkt 1fpkt"];
3148--6306[label="0.00769231;1pkt 1fpkt"];
3148--6733[label="0.00769231;1pkt 1fpkt"];
3148--6824[label="0.00769231;1pkt 1fpkt"];
3148--6835[label="0.338462;44pkt 44fpkt"];
3148--7003[label="0.037037;1pkt 1fpkt"];
3148--8657[label="0.00769231;1pkt 1fpkt"];
3148--8720[label="0.00769231;1pkt 1fpkt"];
3148--8728[label="0.338462;44pkt 44fpkt"];
3148--8837[label="0.037037;1pkt 1fpkt"];
4338--7003[label="1;27pkt 27fpkt"];
4338--8837[label="1;27pkt 27fpkt"];
7003--8837[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.54.2"/>
      <filter dst_ip="32.136.134.221" dst_port="80" src_ip="128.28.231.96"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
1188[label="67.37.49.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
1450[label="161.223.117.26;s;6pkt 6fpkt", shape=diamond, color=yellow];
2982[label="67.37.49.44;d;1pkt 1fpkt", shape=hexagon, color=black];
3690[label="161.223.117.26;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6558[label="161.223.117.26;6pkt 6fpkt", shape=invtriangle, color=brown];
8554[label="161.223.117.26;6pkt 6fpkt", shape=invhouse, color=bisque];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.117.26:*, *:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2308%)&lt;BR/&gt; 49226: (11.5385%)&lt;BR/&gt; 0: (11.5385%)&lt;BR/&gt; 49225: (7.69231%)&lt;BR/&gt; 49224: (7.69231%)&gt;];
}
1188--1450[label="1;1pkt 1fpkt"];
1188--2982[label="1;1pkt 1fpkt"];
1188--3296[label="1;1pkt 1fpkt"];
1188--3690[label="1;1pkt 1fpkt"];
1188--6558[label="1;1pkt 1fpkt"];
1188--8554[label="1;1pkt 1fpkt"];
1450--1823[label="0.166667;1pkt 1fpkt"];
1450--2982[label="1;1pkt 1fpkt"];
1450--3296[label="0.166667;1pkt 1fpkt"];
1450--3690[label="0.833333;5pkt 5fpkt"];
1450--6558[label="0.833333;5pkt 5fpkt"];
1450--8554[label="0.833333;5pkt 5fpkt"];
2982--3296[label="1;1pkt 1fpkt"];
2982--3690[label="1;1pkt 1fpkt"];
2982--6558[label="1;1pkt 1fpkt"];
2982--8554[label="1;1pkt 1fpkt"];
3690--6558[label="1;6pkt 6fpkt"];
3690--8554[label="1;6pkt 6fpkt"];
6558--8554[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.223.117.26"/>
    </slice>
    <from sec="1144126932" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
714[label="132.19.217.28;s;207pkt 207fpkt", shape=diamond, color=yellow];
1492[label="214.200.229.50;d;121pkt 121fpkt", shape=diamond, color=yellow];
3714[label="132.19.217.28;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.217.28:80, 214.200.229.50:*}[60.2804%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50271: (0.446429%)&lt;BR/&gt; 51023: (0.297619%)&lt;BR/&gt; 51022: (0.297619%)&lt;BR/&gt; 51021: (0.297619%)&gt;];
}
714--1492[label="1;121pkt 121fpkt"];
714--2265[label="0.010101;2pkt 2fpkt"];
714--2300[label="0.130435;3pkt 3fpkt"];
714--3288[label="0.0144928;3pkt 3fpkt"];
714--3292[label="0.183575;38pkt 38fpkt"];
714--3303[label="0.183575;38pkt 38fpkt"];
714--3714[label="0.125;1pkt 1fpkt"];
1492--3292[label="0.239669;29pkt 29fpkt"];
1492--3303[label="0.239669;29pkt 29fpkt"];
1492--3714[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.200.229.50" src_ip="132.19.217.28" src_port="80"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
3349[label="41.25.103.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.103.3:56734, 162.57.173.37:80}[50%]&lt;BR/&gt;{41.25.103.3:60465, 128.28.217.250:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60465: (25%)&lt;BR/&gt; 56734: (25%)&gt;];
}
3349--6318[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="41.25.103.3" src_port="60465"/>
      <filter dst_ip="162.57.173.37" dst_port="80" src_ip="41.25.103.3" src_port="56734"/>
    </slice>
    <from sec="1144126900" usec="0"/>
    <to sec="1144127436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
201[label="208.112.235.165;s;3pkt 3fpkt", shape=diamond, color=yellow];
960[label="82.28.20.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.28.20.86:19309, 147.13.36.46:3077}[25%]&lt;BR/&gt;{208.112.235.165:24569, 147.13.36.46:3077}[25%]&lt;BR/&gt;{208.112.235.165:24619, 147.13.36.46:3077}[25%]&lt;BR/&gt;{208.112.235.165:24814, 147.13.36.46:3077}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (50%)&lt;BR/&gt; 24814: (12.5%)&lt;BR/&gt; 24619: (12.5%)&lt;BR/&gt; 24569: (12.5%)&lt;BR/&gt; 19309: (12.5%)&gt;];
}
201--1504[label="0.333333;1pkt 1fpkt"];
201--2703[label="1;1pkt 1fpkt"];
960--1504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.112.235.165" src_port="24814"/>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.112.235.165" src_port="24619"/>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="208.112.235.165" src_port="24569"/>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="82.28.20.86" src_port="19309"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
305[label="216.32.82.205;s;1pkt 1fpkt", shape=diamond, color=yellow];
5764[label="216.32.82.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.32.82.205:80, 132.19.69.142:1336}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1336: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
305--558[label="1;1pkt 1fpkt"];
305--3288[label="1;1pkt 1fpkt"];
305--5764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.69.142" dst_port="1336" src_ip="216.32.82.205" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
1530[label="132.19.12.126;s;231pkt 231fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.12.126:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1530--2153[label="0.004329;1pkt 1fpkt"];
1530--2331[label="0.004329;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.12.126"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
1540[label="164.23.165.180;d;24pkt 24fpkt", shape=diamond, color=yellow];
1542[label="194.5.81.253;s;24pkt 24fpkt", shape=diamond, color=yellow];
2921[label="194.5.81.253;s;24pkt 24fpkt", shape=hexagon, color=black];
6274[label="194.5.81.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8373[label="194.5.81.253;1pkt 1fpkt", shape=invtriangle, color=brown];
9734[label="194.5.81.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.5.81.253:*, 164.23.165.180:80}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1205: (4%)&lt;BR/&gt; 1211: (2%)&lt;BR/&gt; 1210: (2%)&lt;BR/&gt; 1209: (2%)&gt;];
}
1540--1542[label="0.875;21pkt 21fpkt"];
1540--2921[label="0.875;21pkt 21fpkt"];
1540--3296[label="0.333333;8pkt 8fpkt"];
1540--6274[label="1;1pkt 1fpkt"];
1540--8373[label="1;1pkt 1fpkt"];
1540--9734[label="1;1pkt 1fpkt"];
1542--2921[label="1;24pkt 24fpkt"];
1542--3296[label="0.375;9pkt 9fpkt"];
1542--6274[label="1;1pkt 1fpkt"];
1542--8373[label="1;1pkt 1fpkt"];
1542--9734[label="1;1pkt 1fpkt"];
2921--3296[label="0.375;9pkt 9fpkt"];
2921--6274[label="1;1pkt 1fpkt"];
2921--8373[label="1;1pkt 1fpkt"];
2921--9734[label="1;1pkt 1fpkt"];
6274--8373[label="1;1pkt 1fpkt"];
6274--9734[label="1;1pkt 1fpkt"];
8373--9734[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.165.180" dst_port="80" src_ip="194.5.81.253"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,502,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
860[label="164.23.192.152;d;10pkt 10fpkt", shape=diamond, color=yellow];
1545[label="210.226.98.245;s;41pkt 41fpkt", shape=diamond, color=yellow];
1701[label="41.21.47.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
5383[label="82.142.209.171;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6208[label="210.226.98.245;41pkt 41fpkt", shape=pentagon, color=darkviolet];
7731[label="82.142.209.171;5pkt 5fpkt", shape=invtriangle, color=brown];
8323[label="210.226.98.245;41pkt 41fpkt", shape=invtriangle, color=brown];
9310[label="82.142.209.171;5pkt 5fpkt", shape=invhouse, color=bisque];
9701[label="210.226.98.245;41pkt 41fpkt", shape=invhouse, color=bisque];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.245:5050, 164.23.234.201:*}[24%]&lt;BR/&gt;{*:*, 164.23.192.152:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.3158%)&lt;BR/&gt; 22: (6.57895%)&lt;BR/&gt; 20: (2.10526%)&lt;BR/&gt; 1286: (1.31579%)&lt;BR/&gt; 61729: (1.05263%)&gt;];
}
860--1545[label="0.1;1pkt 1fpkt"];
860--1701[label="1;1pkt 1fpkt"];
860--5383[label="1;5pkt 5fpkt"];
860--6208[label="0.1;1pkt 1fpkt"];
860--7731[label="1;5pkt 5fpkt"];
860--8323[label="0.1;1pkt 1fpkt"];
860--9310[label="1;5pkt 5fpkt"];
860--9701[label="0.1;1pkt 1fpkt"];
1545--2351[label="0.0243902;1pkt 1fpkt"];
1545--6208[label="1;41pkt 41fpkt"];
1545--8323[label="1;41pkt 41fpkt"];
1545--9701[label="1;41pkt 41fpkt"];
5383--7731[label="1;5pkt 5fpkt"];
5383--9310[label="1;5pkt 5fpkt"];
6208--8323[label="1;41pkt 41fpkt"];
6208--9701[label="1;41pkt 41fpkt"];
7731--9310[label="1;5pkt 5fpkt"];
8323--9701[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.192.152"/>
      <filter dst_ip="164.23.234.201" src_ip="210.226.98.245" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.226.98.246"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127538" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.212.153.69"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1598[label="83.181.78.72;s;481pkt 481fpkt", shape=diamond, color=yellow];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.78.72:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (8.21206%)&lt;BR/&gt; 80: (7.90021%)&lt;BR/&gt; 8088: (7.58836%)&lt;BR/&gt; 88: (6.96466%)&lt;BR/&gt; 8888: (6.54886%)&gt;];
}
1598--3296[label="0.00623701;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="83.181.78.72"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1524[label="164.23.174.103;d;53pkt 53fpkt", shape=diamond, color=yellow];
1622[label="210.226.98.197;s;115pkt 115fpkt", shape=diamond, color=yellow];
1695[label="210.226.98.193;s;133pkt 133fpkt", shape=diamond, color=yellow];
2554[label="210.226.98.203;s;32pkt 32fpkt", shape=diamond, color=yellow];
4893[label="32.136.179.133;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5029[label="32.136.179.144;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5034[label="195.177.19.145;76pkt 76fpkt", shape=pentagon, color=darkviolet];
5604[label="210.226.98.193;157pkt 157fpkt", shape=pentagon, color=darkviolet];
5663[label="210.226.98.197;121pkt 121fpkt", shape=pentagon, color=darkviolet];
5741[label="210.226.98.203;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5784[label="210.226.98.207;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6120[label="210.226.98.236;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7394[label="32.136.179.133;24pkt 24fpkt", shape=invtriangle, color=brown];
7492[label="32.136.179.144;27pkt 27fpkt", shape=invtriangle, color=brown];
7495[label="195.177.19.145;76pkt 76fpkt", shape=invtriangle, color=brown];
7888[label="210.226.98.193;157pkt 157fpkt", shape=invtriangle, color=brown];
7933[label="210.226.98.197;120pkt 120fpkt", shape=invtriangle, color=brown];
7988[label="210.226.98.203;32pkt 32fpkt", shape=invtriangle, color=brown];
8018[label="210.226.98.207;13pkt 13fpkt", shape=invtriangle, color=brown];
9151[label="32.136.179.144;26pkt 26fpkt", shape=invhouse, color=bisque];
9153[label="195.177.19.145;76pkt 76fpkt", shape=invhouse, color=bisque];
9409[label="210.226.98.193;156pkt 156fpkt", shape=invhouse, color=bisque];
9436[label="210.226.98.197;120pkt 120fpkt", shape=invhouse, color=bisque];
9469[label="210.226.98.203;31pkt 31fpkt", shape=invhouse, color=bisque];
9491[label="210.226.98.207;12pkt 12fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5050, *:*}[46.8504%]&lt;BR/&gt;{210.226.98.193:*, *:*}[30.9055%]&lt;BR/&gt;{*:443, *:*}[26.1811%]&lt;BR/&gt;{210.226.98.197:*, *:*}[23.8189%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (26.152%)&lt;BR/&gt; 443: (10.772%)&lt;BR/&gt; 23: (6.49312%)&lt;BR/&gt; 20: (4.87732%)&lt;BR/&gt; 80: (0.628366%)&gt;];
}
1524--1622[label="0.0566038;3pkt 3fpkt"];
1524--1695[label="0.0188679;1pkt 1fpkt"];
1524--1880[label="0.0434783;1pkt 1fpkt"];
1524--2095[label="0.025;1pkt 1fpkt"];
1524--2554[label="0.09375;3pkt 3fpkt"];
1524--3288[label="0.0754717;4pkt 4fpkt"];
1524--3292[label="0.0943396;5pkt 5fpkt"];
1524--3303[label="0.0943396;5pkt 5fpkt"];
1524--4853[label="0.0285714;1pkt 1fpkt"];
1524--4867[label="0.0588235;2pkt 2fpkt"];
1524--4893[label="0.0434783;1pkt 1fpkt"];
1524--5029[label="0.0384615;1pkt 1fpkt"];
1524--5034[label="0.0188679;1pkt 1fpkt"];
1524--5102[label="0.037037;1pkt 1fpkt"];
1524--5168[label="0.111111;2pkt 2fpkt"];
1524--5604[label="0.0188679;1pkt 1fpkt"];
1524--5663[label="0.0566038;3pkt 3fpkt"];
1524--5741[label="0.09375;3pkt 3fpkt"];
1524--5784[label="0.0769231;1pkt 1fpkt"];
1524--6074[label="0.0232558;1pkt 1fpkt"];
1524--6120[label="0.2;4pkt 4fpkt"];
1524--7375[label="0.0606061;2pkt 2fpkt"];
1524--7394[label="0.0416667;1pkt 1fpkt"];
1524--7492[label="0.037037;1pkt 1fpkt"];
1524--7495[label="0.0188679;1pkt 1fpkt"];
1524--7537[label="0.037037;1pkt 1fpkt"];
1524--7888[label="0.0188679;1pkt 1fpkt"];
1524--7933[label="0.0566038;3pkt 3fpkt"];
1524--7988[label="0.09375;3pkt 3fpkt"];
1524--8018[label="0.0769231;1pkt 1fpkt"];
1524--8227[label="0.0232558;1pkt 1fpkt"];
1524--9151[label="0.0384615;1pkt 1fpkt"];
1524--9153[label="0.0188679;1pkt 1fpkt"];
1524--9182[label="0.037037;1pkt 1fpkt"];
1524--9409[label="0.0188679;1pkt 1fpkt"];
1524--9436[label="0.0566038;3pkt 3fpkt"];
1524--9469[label="0.0967742;3pkt 3fpkt"];
1524--9491[label="0.0833333;1pkt 1fpkt"];
1622--3288[label="0.00869565;1pkt 1fpkt"];
1622--3292[label="0.00869565;1pkt 1fpkt"];
1622--3303[label="0.00869565;1pkt 1fpkt"];
1622--5663[label="1;115pkt 115fpkt"];
1622--7933[label="0.991304;114pkt 114fpkt"];
1622--9436[label="0.991304;114pkt 114fpkt"];
1695--5604[label="1;133pkt 133fpkt"];
1695--7888[label="1;133pkt 133fpkt"];
1695--9409[label="0.992481;132pkt 132fpkt"];
2554--3288[label="0.03125;1pkt 1fpkt"];
2554--3292[label="0.03125;1pkt 1fpkt"];
2554--3303[label="0.03125;1pkt 1fpkt"];
2554--5741[label="1;32pkt 32fpkt"];
2554--7988[label="1;32pkt 32fpkt"];
2554--9469[label="1;31pkt 31fpkt"];
4893--7394[label="1;23pkt 23fpkt"];
5029--7492[label="1;26pkt 26fpkt"];
5029--9151[label="1;26pkt 26fpkt"];
5034--7495[label="1;76pkt 76fpkt"];
5034--9153[label="1;76pkt 76fpkt"];
5604--7888[label="1;157pkt 157fpkt"];
5604--9409[label="1;156pkt 156fpkt"];
5663--7933[label="1;120pkt 120fpkt"];
5663--9436[label="1;120pkt 120fpkt"];
5741--7988[label="1;32pkt 32fpkt"];
5741--9469[label="1;31pkt 31fpkt"];
5784--8018[label="1;13pkt 13fpkt"];
5784--9491[label="1;12pkt 12fpkt"];
7492--9151[label="1;26pkt 26fpkt"];
7495--9153[label="1;76pkt 76fpkt"];
7888--9409[label="1;156pkt 156fpkt"];
7933--9436[label="1;120pkt 120fpkt"];
7988--9469[label="1;31pkt 31fpkt"];
8018--9491[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.193"/>
      <filter src_ip="210.226.98.197"/>
      <filter src_port="5050"/>
      <filter src_port="443"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1071[label="132.19.192.20;s;103pkt 103fpkt", shape=diamond, color=yellow];
3041[label="132.19.192.20;s;86pkt 86fpkt", shape=hexagon, color=black];
3605[label="132.19.192.20;112pkt 112fpkt", shape=pentagon, color=darkviolet];
6496[label="132.19.192.20;112pkt 112fpkt", shape=invtriangle, color=brown];
8514[label="132.19.192.20;113pkt 113fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.20:*, 83.190.229.115:80}[40.708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5741%)&lt;BR/&gt; 443: (1.42586%)&lt;BR/&gt; 4530: (0.95057%)&lt;BR/&gt; 4623: (0.475285%)&lt;BR/&gt; 4622: (0.475285%)&gt;];
}
1071--1631[label="0.0597015;4pkt 4fpkt"];
1071--3041[label="1;86pkt 86fpkt"];
1071--3296[label="0.0485437;5pkt 5fpkt"];
1071--3605[label="0.990291;102pkt 102fpkt"];
1071--6496[label="0.990291;102pkt 102fpkt"];
1071--8514[label="1;103pkt 103fpkt"];
3041--3296[label="0.0348837;3pkt 3fpkt"];
3041--3605[label="1;86pkt 86fpkt"];
3041--6496[label="1;86pkt 86fpkt"];
3041--8514[label="1;86pkt 86fpkt"];
3605--6496[label="1;112pkt 112fpkt"];
3605--8514[label="1;112pkt 112fpkt"];
6496--8514[label="1;112pkt 112fpkt"];
</description>
    <slice>
      <filter dst_ip="83.190.229.115" dst_port="80" src_ip="132.19.192.20"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
294[label="194.212.159.82;s;506pkt 506fpkt", shape=diamond, color=yellow];
1634[label="219.72.191.111;d;7pkt 7fpkt", shape=diamond, color=yellow];
1635[label="194.212.153.138;s;2pkt 2fpkt", shape=diamond, color=yellow];
3045[label="219.72.191.111;d;7pkt 7fpkt", shape=hexagon, color=black];
4264[label="194.212.159.74;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4274[label="194.212.153.75;120pkt 120fpkt", shape=pentagon, color=darkviolet];
4393[label="194.212.153.85;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4952[label="194.212.153.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6948[label="194.212.159.74;53pkt 53fpkt", shape=invtriangle, color=brown];
6956[label="194.212.153.75;120pkt 120fpkt", shape=invtriangle, color=brown];
7043[label="194.212.153.85;45pkt 45fpkt", shape=invtriangle, color=brown];
7432[label="194.212.153.138;1pkt 1fpkt", shape=invtriangle, color=brown];
8804[label="194.212.159.74;54pkt 54fpkt", shape=invhouse, color=bisque];
8864[label="194.212.153.85;44pkt 44fpkt", shape=invhouse, color=bisque];
9112[label="194.212.153.138;1pkt 1fpkt", shape=invhouse, color=bisque];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.159.82:0, *:0}[69.4102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.4329%)&lt;BR/&gt; 80: (0.283554%)&lt;BR/&gt; 59268: (0.141777%)&lt;BR/&gt; 54978: (0.141777%)&gt;];
}
294--1634[label="0.142857;1pkt 1fpkt"];
294--1682[label="0.0111111;1pkt 1fpkt"];
294--3045[label="0.142857;1pkt 1fpkt"];
1634--1635[label="0.5;1pkt 1fpkt"];
1634--3045[label="1;7pkt 7fpkt"];
1634--4264[label="0.142857;1pkt 1fpkt"];
1634--4274[label="0.142857;1pkt 1fpkt"];
1634--4393[label="0.142857;1pkt 1fpkt"];
1634--4952[label="1;1pkt 1fpkt"];
1634--6948[label="0.142857;1pkt 1fpkt"];
1634--6956[label="0.142857;1pkt 1fpkt"];
1634--7043[label="0.142857;1pkt 1fpkt"];
1634--7432[label="1;1pkt 1fpkt"];
1634--8804[label="0.142857;1pkt 1fpkt"];
1634--8864[label="0.142857;1pkt 1fpkt"];
1634--9112[label="1;1pkt 1fpkt"];
1635--3045[label="0.5;1pkt 1fpkt"];
1635--4952[label="1;1pkt 1fpkt"];
1635--7432[label="1;1pkt 1fpkt"];
1635--9112[label="1;1pkt 1fpkt"];
3045--4264[label="0.142857;1pkt 1fpkt"];
3045--4274[label="0.142857;1pkt 1fpkt"];
3045--4393[label="0.142857;1pkt 1fpkt"];
3045--4952[label="1;1pkt 1fpkt"];
3045--6948[label="0.142857;1pkt 1fpkt"];
3045--6956[label="0.142857;1pkt 1fpkt"];
3045--7043[label="0.142857;1pkt 1fpkt"];
3045--7432[label="1;1pkt 1fpkt"];
3045--8804[label="0.142857;1pkt 1fpkt"];
3045--8864[label="0.142857;1pkt 1fpkt"];
3045--9112[label="1;1pkt 1fpkt"];
4264--6948[label="1;53pkt 53fpkt"];
4264--8804[label="1;53pkt 53fpkt"];
4274--6956[label="1;120pkt 120fpkt"];
4393--7043[label="1;44pkt 44fpkt"];
4393--8864[label="1;44pkt 44fpkt"];
4952--7432[label="1;1pkt 1fpkt"];
4952--9112[label="1;1pkt 1fpkt"];
6948--8804[label="1;53pkt 53fpkt"];
7043--8864[label="1;44pkt 44fpkt"];
7432--9112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.159.82"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.226.98.195"/>
      <from sec="1144126807" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
1441[label="132.19.192.99;s;59pkt 59fpkt", shape=diamond, color=yellow];
4540[label="132.19.192.99;60pkt 60fpkt", shape=pentagon, color=darkviolet];
7142[label="132.19.192.99;59pkt 59fpkt", shape=invtriangle, color=brown];
8929[label="132.19.192.99;60pkt 60fpkt", shape=invhouse, color=bisque];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.99:*, 38.192.181.247:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.5966%)&lt;BR/&gt; 443: (7.56303%)&lt;BR/&gt; 14129: (0.840336%)&lt;BR/&gt; 7000: (0.840336%)&lt;BR/&gt; 3210: (0.840336%)&gt;];
}
1441--1667[label="0.517241;15pkt 15fpkt"];
1441--2090[label="0.0217391;1pkt 1fpkt"];
1441--2972[label="0.517241;15pkt 15fpkt"];
1441--3296[label="0.101695;6pkt 6fpkt"];
1441--4540[label="1;59pkt 59fpkt"];
1441--7142[label="0.983051;58pkt 58fpkt"];
1441--8929[label="1;59pkt 59fpkt"];
4540--7142[label="1;59pkt 59fpkt"];
4540--8929[label="1;60pkt 60fpkt"];
7142--8929[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="38.192.181.247" dst_port="80" src_ip="132.19.192.99"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
30[label="132.19.152.103s;3pkt 3fpkt", shape=rectangle, color=red];
699[label="132.19.152.103;s;106pkt 106fpkt", shape=diamond, color=yellow];
1700[label="196.80.25.255;d;70pkt 70fpkt", shape=diamond, color=yellow];
2255[label="196.206.171.124;d;18pkt 18fpkt", shape=diamond, color=yellow];
4577[label="132.19.152.103;114pkt 114fpkt", shape=pentagon, color=darkviolet];
7167[label="132.19.152.103;114pkt 114fpkt", shape=invtriangle, color=brown];
8945[label="132.19.152.103;115pkt 115fpkt", shape=invhouse, color=bisque];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.152.103:*, *:80}[49.7382%]&lt;BR/&gt;{132.19.44.78:*, 196.80.25.255:80}[25.6545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.037%)&lt;BR/&gt; 443: (7.5%)&lt;BR/&gt; 56467: (0.555556%)&lt;BR/&gt; 56466: (0.555556%)&lt;BR/&gt; 56464: (0.555556%)&gt;];
}
30--699[label="1;3pkt 3fpkt"];
30--1700[label="1;3pkt 3fpkt"];
30--4577[label="1;3pkt 3fpkt"];
30--7167[label="1;3pkt 3fpkt"];
30--8945[label="1;3pkt 3fpkt"];
699--808[label="0.0188679;2pkt 2fpkt"];
699--869[label="0.0471698;5pkt 5fpkt"];
699--995[label="0.0471698;5pkt 5fpkt"];
699--1066[label="0.0188679;2pkt 2fpkt"];
699--1268[label="0.113208;12pkt 12fpkt"];
699--1386[label="0.0471698;5pkt 5fpkt"];
699--1400[label="0.0188679;2pkt 2fpkt"];
699--1403[label="0.0188679;2pkt 2fpkt"];
699--1425[label="0.0471698;5pkt 5fpkt"];
699--1448[label="0.00943396;1pkt 1fpkt"];
699--1517[label="0.00943396;1pkt 1fpkt"];
699--1531[label="0.0188679;2pkt 2fpkt"];
699--1555[label="0.00943396;1pkt 1fpkt"];
699--1700[label="0.157143;11pkt 11fpkt"];
699--1917[label="0.0108696;1pkt 1fpkt"];
699--1921[label="0.00943396;1pkt 1fpkt"];
699--1925[label="0.0169492;1pkt 1fpkt"];
699--1965[label="0.0754717;8pkt 8fpkt"];
699--2215[label="0.0235294;2pkt 2fpkt"];
699--2255[label="0.0555556;1pkt 1fpkt"];
699--2368[label="0.0188679;2pkt 2fpkt"];
699--3296[label="0.0471698;5pkt 5fpkt"];
699--4577[label="0.990566;105pkt 105fpkt"];
699--7167[label="0.990566;105pkt 105fpkt"];
699--8945[label="1;106pkt 106fpkt"];
1700--3296[label="0.0571429;4pkt 4fpkt"];
1700--4577[label="0.157143;11pkt 11fpkt"];
1700--7167[label="0.157143;11pkt 11fpkt"];
1700--8945[label="0.157143;11pkt 11fpkt"];
2255--2533[label="0.0555556;1pkt 1fpkt"];
2255--3049[label="0.0555556;1pkt 1fpkt"];
2255--3336[label="0.0555556;1pkt 1fpkt"];
2255--3461[label="0.0555556;1pkt 1fpkt"];
2255--3954[label="0.0555556;1pkt 1fpkt"];
2255--4108[label="0.0555556;1pkt 1fpkt"];
2255--4327[label="0.555556;10pkt 10fpkt"];
2255--4577[label="0.0555556;1pkt 1fpkt"];
2255--6306[label="0.0555556;1pkt 1fpkt"];
2255--6398[label="0.0555556;1pkt 1fpkt"];
2255--6728[label="0.0555556;1pkt 1fpkt"];
2255--6835[label="0.0555556;1pkt 1fpkt"];
2255--6992[label="0.555556;10pkt 10fpkt"];
2255--7167[label="0.0555556;1pkt 1fpkt"];
2255--8452[label="0.0555556;1pkt 1fpkt"];
2255--8655[label="0.0555556;1pkt 1fpkt"];
2255--8728[label="0.0555556;1pkt 1fpkt"];
2255--8831[label="0.555556;10pkt 10fpkt"];
2255--8945[label="0.0555556;1pkt 1fpkt"];
4577--7167[label="1;114pkt 114fpkt"];
4577--8945[label="1;114pkt 114fpkt"];
7167--8945[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.152.103"/>
      <filter dst_ip="196.80.25.255" dst_port="80" src_ip="132.19.44.78"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
363[label="147.13.222.121;d;1346pkt 1346fpkt", shape=diamond, color=yellow];
659[label="128.28.217.136;d;421pkt 421fpkt", shape=diamond, color=yellow];
680[label="194.212.153.164;d;329pkt 329fpkt", shape=diamond, color=yellow];
727[label="41.25.162.130;s;3pkt 3fpkt", shape=diamond, color=yellow];
785[label="128.28.217.250;d;885pkt 885fpkt", shape=diamond, color=yellow];
790[label="194.212.156.207;d;142pkt 142fpkt", shape=diamond, color=yellow];
966[label="161.223.8.108;d;270pkt 270fpkt", shape=diamond, color=yellow];
1722[label="32.136.166.34;s;4pkt 4fpkt", shape=diamond, color=yellow];
2027[label="36.168.121.24;s;211pkt 211fpkt", shape=diamond, color=yellow];
2046[label="33.200.185.249;s;12pkt 12fpkt", shape=diamond, color=yellow];
2253[label="41.25.173.218;s;6pkt 6fpkt", shape=diamond, color=yellow];
2436[label="41.25.163.0;s;6pkt 6fpkt", shape=diamond, color=yellow];
2445[label="39.64.71.191;s;23pkt 23fpkt", shape=diamond, color=yellow];
2592[label="195.80.133.175;d;112pkt 112fpkt", shape=diamond, color=yellow];
2603[label="132.19.225.97;d;45pkt 45fpkt", shape=diamond, color=yellow];
2672[label="32.136.167.52;s;4pkt 4fpkt", shape=diamond, color=yellow];
3014[label="147.13.222.121;d;1075pkt 1075fpkt", shape=hexagon, color=black];
3322[label="204.16.106.1;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3371[label="41.25.163.4;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3386[label="32.136.164.5;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3388[label="32.136.167.5;4pkt 4fpkt", shape=pentagon, color=darkviolet];
3401[label="32.136.164.6;16pkt 16fpkt", shape=pentagon, color=darkviolet];
3488[label="32.136.167.12;47pkt 47fpkt", shape=pentagon, color=darkviolet];
3646[label="41.25.166.23;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3766[label="41.25.100.32;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3771[label="82.117.199.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3789[label="32.136.167.34;8pkt 8fpkt", shape=pentagon, color=darkviolet];
3808[label="41.25.100.36;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3837[label="32.136.164.39;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3841[label="215.8.9.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3881[label="32.136.167.42;11pkt 11fpkt", shape=pentagon, color=darkviolet];
3904[label="32.136.164.45;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3912[label="41.25.169.46;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3934[label="41.25.169.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3949[label="195.197.122.50;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3970[label="32.136.166.51;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4021[label="32.136.167.56;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4037[label="175.56.250.57;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4048[label="32.136.166.58;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4084[label="208.47.48.61;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4127[label="32.136.166.64;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4135[label="82.105.81.65;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4241[label="48.213.47.73;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4314[label="32.136.166.78;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4384[label="41.25.169.84;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4423[label="41.25.164.87;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4424[label="32.136.164.87;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4442[label="32.136.164.89;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4443[label="32.136.167.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4529[label="32.136.167.98;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4559[label="32.136.167.101;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4613[label="41.25.103.106;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4684[label="32.136.164.112;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4711[label="41.25.103.116;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4775[label="32.136.164.124;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4801[label="82.142.134.128;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4807[label="32.136.167.128;94pkt 94fpkt", shape=pentagon, color=darkviolet];
4830[label="216.196.85.130;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4836[label="41.25.162.130;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4838[label="32.136.166.130;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4847[label="41.25.103.131;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4882[label="41.25.96.133;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4920[label="216.196.85.136;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4977[label="219.75.39.140;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5075[label="32.136.166.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5076[label="32.136.167.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5098[label="41.25.162.150;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5100[label="32.136.166.150;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5113[label="32.136.167.151;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5128[label="32.136.166.152;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5161[label="41.25.170.154;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5194[label="41.25.96.157;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5196[label="32.136.167.157;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5313[label="209.158.149.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5316[label="41.25.173.166;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5331[label="41.25.164.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5404[label="41.25.103.173;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5418[label="32.136.164.174;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5520[label="32.136.166.185;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5542[label="216.196.85.187;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5548[label="39.64.71.188;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5567[label="32.136.166.189;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5579[label="39.64.71.191;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5676[label="213.180.10.198;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5682[label="41.25.163.198;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5683[label="32.136.166.198;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5758[label="32.136.166.204;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5766[label="32.136.167.205;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5816[label="32.136.164.209;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5831[label="41.25.164.210;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5923[label="32.136.164.218;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5924[label="41.25.173.218;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5990[label="41.25.102.224;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5996[label="41.25.163.224;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6024[label="41.25.174.226;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6133[label="41.25.174.237;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6203[label="48.213.44.245;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6215[label="48.213.44.246;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6299[label="204.16.106.1;11pkt 11fpkt", shape=invtriangle, color=brown];
6347[label="32.136.167.5;4pkt 4fpkt", shape=invtriangle, color=brown];
6525[label="41.25.166.23;4pkt 4fpkt", shape=invtriangle, color=brown];
6571[label="208.115.193.28;1pkt 1fpkt", shape=invtriangle, color=brown];
6600[label="41.25.100.32;11pkt 11fpkt", shape=invtriangle, color=brown];
6615[label="32.136.167.34;8pkt 8fpkt", shape=invtriangle, color=brown];
6648[label="32.136.164.39;11pkt 11fpkt", shape=invtriangle, color=brown];
6652[label="215.8.9.40;2pkt 2fpkt", shape=invtriangle, color=brown];
6676[label="32.136.167.42;10pkt 10fpkt", shape=invtriangle, color=brown];
6693[label="32.136.164.45;3pkt 3fpkt", shape=invtriangle, color=brown];
6699[label="41.25.169.46;4pkt 4fpkt", shape=invtriangle, color=brown];
6713[label="41.25.169.48;2pkt 2fpkt", shape=invtriangle, color=brown];
6724[label="195.197.122.50;1pkt 1fpkt", shape=invtriangle, color=brown];
6741[label="32.136.166.51;16pkt 16fpkt", shape=invtriangle, color=brown];
6746[label="32.136.167.52;1pkt 1fpkt", shape=invtriangle, color=brown];
6783[label="175.56.250.57;11pkt 11fpkt", shape=invtriangle, color=brown];
6791[label="32.136.166.58;8pkt 8fpkt", shape=invtriangle, color=brown];
6817[label="208.47.48.61;6pkt 6fpkt", shape=invtriangle, color=brown];
6849[label="32.136.166.64;13pkt 13fpkt", shape=invtriangle, color=brown];
6855[label="82.105.81.65;17pkt 17fpkt", shape=invtriangle, color=brown];
6968[label="41.25.162.76;3pkt 3fpkt", shape=invtriangle, color=brown];
6983[label="32.136.166.78;10pkt 10fpkt", shape=invtriangle, color=brown];
7064[label="32.136.164.87;10pkt 10fpkt", shape=invtriangle, color=brown];
7154[label="32.136.167.101;7pkt 7fpkt", shape=invtriangle, color=brown];
7240[label="32.136.164.112;6pkt 6fpkt", shape=invtriangle, color=brown];
7257[label="41.25.103.116;7pkt 7fpkt", shape=invtriangle, color=brown];
7263[label="32.239.28.117;1pkt 1fpkt", shape=invtriangle, color=brown];
7307[label="32.136.164.124;7pkt 7fpkt", shape=invtriangle, color=brown];
7332[label="32.136.167.128;95pkt 95fpkt", shape=invtriangle, color=brown];
7353[label="41.25.162.130;5pkt 5fpkt", shape=invtriangle, color=brown];
7355[label="32.136.166.130;3pkt 3fpkt", shape=invtriangle, color=brown];
7360[label="41.25.103.131;4pkt 4fpkt", shape=invtriangle, color=brown];
7449[label="219.75.39.140;39pkt 39fpkt", shape=invtriangle, color=brown];
7522[label="32.136.166.148;7pkt 7fpkt", shape=invtriangle, color=brown];
7523[label="32.136.167.148;7pkt 7fpkt", shape=invtriangle, color=brown];
7536[label="32.136.166.150;6pkt 6fpkt", shape=invtriangle, color=brown];
7542[label="32.136.167.151;9pkt 9fpkt", shape=invtriangle, color=brown];
7553[label="32.136.166.152;13pkt 13fpkt", shape=invtriangle, color=brown];
7580[label="41.25.170.154;4pkt 4fpkt", shape=invtriangle, color=brown];
7602[label="32.136.167.157;18pkt 18fpkt", shape=invtriangle, color=brown];
7635[label="32.136.167.161;3pkt 3fpkt", shape=invtriangle, color=brown];
7700[label="41.25.164.167;2pkt 2fpkt", shape=invtriangle, color=brown];
7747[label="41.25.103.173;2pkt 2fpkt", shape=invtriangle, color=brown];
7751[label="32.136.164.174;12pkt 12fpkt", shape=invtriangle, color=brown];
7800[label="34.28.37.182;3pkt 3fpkt", shape=invtriangle, color=brown];
7839[label="216.196.85.187;36pkt 36fpkt", shape=invtriangle, color=brown];
7860[label="32.136.166.189;9pkt 9fpkt", shape=invtriangle, color=brown];
7870[label="39.64.71.191;27pkt 27fpkt", shape=invtriangle, color=brown];
7939[label="32.29.213.197;3pkt 3fpkt", shape=invtriangle, color=brown];
7943[label="213.180.10.198;9pkt 9fpkt", shape=invtriangle, color=brown];
8002[label="32.136.166.204;6pkt 6fpkt", shape=invtriangle, color=brown];
8039[label="32.136.164.209;11pkt 11fpkt", shape=invtriangle, color=brown];
8049[label="41.25.164.210;4pkt 4fpkt", shape=invtriangle, color=brown];
8113[label="32.136.164.218;8pkt 8fpkt", shape=invtriangle, color=brown];
8114[label="41.25.173.218;9pkt 9fpkt", shape=invtriangle, color=brown];
8163[label="41.25.102.224;4pkt 4fpkt", shape=invtriangle, color=brown];
8167[label="41.25.163.224;6pkt 6fpkt", shape=invtriangle, color=brown];
8267[label="41.25.174.237;8pkt 8fpkt", shape=invtriangle, color=brown];
8330[label="48.213.44.246;13pkt 13fpkt", shape=invtriangle, color=brown];
8391[label="204.16.106.1;11pkt 11fpkt", shape=invhouse, color=bisque];
8415[label="32.136.167.4;9pkt 9fpkt", shape=invhouse, color=bisque];
8563[label="208.115.193.28;1pkt 1fpkt", shape=invhouse, color=bisque];
8589[label="32.136.167.34;9pkt 9fpkt", shape=invhouse, color=bisque];
8609[label="32.136.164.39;12pkt 12fpkt", shape=invhouse, color=bisque];
8611[label="215.8.9.40;3pkt 3fpkt", shape=invhouse, color=bisque];
8624[label="32.136.167.42;10pkt 10fpkt", shape=invhouse, color=bisque];
8637[label="41.25.169.46;5pkt 5fpkt", shape=invhouse, color=bisque];
8663[label="32.136.166.51;16pkt 16fpkt", shape=invhouse, color=bisque];
8671[label="41.25.102.53;6pkt 6fpkt", shape=invhouse, color=bisque];
8695[label="175.56.250.57;10pkt 10fpkt", shape=invhouse, color=bisque];
8739[label="32.136.166.64;13pkt 13fpkt", shape=invhouse, color=bisque];
8816[label="41.25.162.76;3pkt 3fpkt", shape=invhouse, color=bisque];
8827[label="32.136.166.78;9pkt 9fpkt", shape=invhouse, color=bisque];
8939[label="32.136.167.101;8pkt 8fpkt", shape=invhouse, color=bisque];
8991[label="32.136.164.112;6pkt 6fpkt", shape=invhouse, color=bisque];
9034[label="32.136.164.124;7pkt 7fpkt", shape=invhouse, color=bisque];
9066[label="41.25.162.130;4pkt 4fpkt", shape=invhouse, color=bisque];
9131[label="216.196.85.141;38pkt 38fpkt", shape=invhouse, color=bisque];
9138[label="41.25.168.142;3pkt 3fpkt", shape=invhouse, color=bisque];
9172[label="32.136.166.148;7pkt 7fpkt", shape=invhouse, color=bisque];
9184[label="32.136.167.151;10pkt 10fpkt", shape=invhouse, color=bisque];
9190[label="32.136.166.152;13pkt 13fpkt", shape=invhouse, color=bisque];
9222[label="32.136.167.157;18pkt 18fpkt", shape=invhouse, color=bisque];
9246[label="32.136.167.161;2pkt 2fpkt", shape=invhouse, color=bisque];
9280[label="209.158.149.166;1pkt 1fpkt", shape=invhouse, color=bisque];
9319[label="41.25.103.173;2pkt 2fpkt", shape=invhouse, color=bisque];
9363[label="32.136.164.184;3pkt 3fpkt", shape=invhouse, color=bisque];
9381[label="216.196.85.187;35pkt 35fpkt", shape=invhouse, color=bisque];
9398[label="39.64.71.191;26pkt 26fpkt", shape=invhouse, color=bisque];
9432[label="32.136.164.196;12pkt 12fpkt", shape=invhouse, color=bisque];
9514[label="41.25.164.210;4pkt 4fpkt", shape=invhouse, color=bisque];
9557[label="41.25.173.218;8pkt 8fpkt", shape=invhouse, color=bisque];
9581[label="32.136.164.222;2pkt 2fpkt", shape=invhouse, color=bisque];
9593[label="41.25.163.224;5pkt 5fpkt", shape=invhouse, color=bisque];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.13.222.121:80}[33.1244%]&lt;BR/&gt;{*:*, 128.28.217.250:80}[27.001%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7436%)&lt;BR/&gt; 53: (0.882441%)&lt;BR/&gt; 443: (0.13461%)&lt;BR/&gt; 8000: (0.104696%)&lt;BR/&gt; 44622: (0.0598265%)&gt;];
}
363--593[label="1;1pkt 1fpkt"];
363--741[label="0.333333;1pkt 1fpkt"];
363--1496[label="1;1pkt 1fpkt"];
363--1722[label="0.25;1pkt 1fpkt"];
363--2253[label="0.166667;1pkt 1fpkt"];
363--2436[label="0.333333;2pkt 2fpkt"];
363--2445[label="0.782609;18pkt 18fpkt"];
363--2661[label="0.222222;2pkt 2fpkt"];
363--3014[label="1;1075pkt 1075fpkt"];
363--3018[label="1;1pkt 1fpkt"];
363--3296[label="0.000742942;1pkt 1fpkt"];
363--3322[label="0.0909091;1pkt 1fpkt"];
363--3401[label="0.0625;1pkt 1fpkt"];
363--3646[label="0.333333;1pkt 1fpkt"];
363--3731[label="0.0123457;1pkt 1fpkt"];
363--3766[label="0.181818;2pkt 2fpkt"];
363--3771[label="1;3pkt 3fpkt"];
363--3789[label="0.125;1pkt 1fpkt"];
363--3808[label="0.2;1pkt 1fpkt"];
363--3837[label="0.363636;4pkt 4fpkt"];
363--3841[label="1;2pkt 2fpkt"];
363--3881[label="0.181818;2pkt 2fpkt"];
363--3904[label="0.333333;1pkt 1fpkt"];
363--3912[label="0.2;1pkt 1fpkt"];
363--3940[label="0.875;7pkt 7fpkt"];
363--3949[label="1;1pkt 1fpkt"];
363--3970[label="0.666667;10pkt 10fpkt"];
363--4021[label="0.230769;3pkt 3fpkt"];
363--4047[label="0.545455;6pkt 6fpkt"];
363--4048[label="0.5;4pkt 4fpkt"];
363--4127[label="0.0769231;1pkt 1fpkt"];
363--4135[label="1;16pkt 16fpkt"];
363--4265[label="0.1;1pkt 1fpkt"];
363--4314[label="0.111111;1pkt 1fpkt"];
363--4384[label="0.5;1pkt 1fpkt"];
363--4424[label="0.111111;1pkt 1fpkt"];
363--4442[label="0.428571;3pkt 3fpkt"];
363--4443[label="1;2pkt 2fpkt"];
363--4559[label="0.142857;1pkt 1fpkt"];
363--4613[label="0.736842;14pkt 14fpkt"];
363--4775[label="0.285714;2pkt 2fpkt"];
363--4807[label="0.521277;49pkt 49fpkt"];
363--4836[label="0.5;2pkt 2fpkt"];
363--4847[label="0.2;1pkt 1fpkt"];
363--4852[label="0.25;2pkt 2fpkt"];
363--4882[label="0.25;1pkt 1fpkt"];
363--4892[label="0.444444;4pkt 4fpkt"];
363--4920[label="0.848485;28pkt 28fpkt"];
363--4977[label="1;39pkt 39fpkt"];
363--5061[label="0.75;6pkt 6fpkt"];
363--5075[label="0.285714;2pkt 2fpkt"];
363--5076[label="0.142857;1pkt 1fpkt"];
363--5098[label="0.166667;1pkt 1fpkt"];
363--5113[label="0.2;2pkt 2fpkt"];
363--5128[label="0.307692;4pkt 4fpkt"];
363--5161[label="0.333333;1pkt 1fpkt"];
363--5194[label="0.5;1pkt 1fpkt"];
363--5196[label="0.277778;5pkt 5fpkt"];
363--5271[label="0.0625;3pkt 3fpkt"];
363--5316[label="0.0555556;1pkt 1fpkt"];
363--5331[label="0.5;1pkt 1fpkt"];
363--5404[label="1;2pkt 2fpkt"];
363--5418[label="0.666667;8pkt 8fpkt"];
363--5464[label="0.0769231;3pkt 3fpkt"];
363--5520[label="0.333333;2pkt 2fpkt"];
363--5548[label="0.52381;11pkt 11fpkt"];
363--5579[label="0.769231;20pkt 20fpkt"];
363--5676[label="1;9pkt 9fpkt"];
363--5682[label="0.8;8pkt 8fpkt"];
363--5683[label="0.294118;5pkt 5fpkt"];
363--5757[label="0.111111;1pkt 1fpkt"];
363--5758[label="0.142857;1pkt 1fpkt"];
363--5766[label="0.833333;5pkt 5fpkt"];
363--5816[label="0.0909091;1pkt 1fpkt"];
363--5831[label="0.4;2pkt 2fpkt"];
363--5923[label="0.111111;1pkt 1fpkt"];
363--5924[label="0.222222;2pkt 2fpkt"];
363--5990[label="0.8;4pkt 4fpkt"];
363--5996[label="0.333333;2pkt 2fpkt"];
363--6024[label="0.333333;1pkt 1fpkt"];
363--6133[label="0.25;2pkt 2fpkt"];
363--6299[label="0.0909091;1pkt 1fpkt"];
363--6525[label="0.25;1pkt 1fpkt"];
363--6600[label="0.181818;2pkt 2fpkt"];
363--6615[label="0.125;1pkt 1fpkt"];
363--6648[label="0.363636;4pkt 4fpkt"];
363--6652[label="1;2pkt 2fpkt"];
363--6676[label="0.2;2pkt 2fpkt"];
363--6693[label="0.333333;1pkt 1fpkt"];
363--6699[label="0.25;1pkt 1fpkt"];
363--6718[label="0.875;7pkt 7fpkt"];
363--6724[label="1;1pkt 1fpkt"];
363--6741[label="0.6875;11pkt 11fpkt"];
363--6790[label="0.5;6pkt 6fpkt"];
363--6791[label="0.5;4pkt 4fpkt"];
363--6849[label="0.0769231;1pkt 1fpkt"];
363--6855[label="1;17pkt 17fpkt"];
363--6949[label="0.1;1pkt 1fpkt"];
363--6983[label="0.1;1pkt 1fpkt"];
363--7064[label="0.1;1pkt 1fpkt"];
363--7154[label="0.142857;1pkt 1fpkt"];
363--7307[label="0.285714;2pkt 2fpkt"];
363--7332[label="0.515789;49pkt 49fpkt"];
363--7353[label="0.4;2pkt 2fpkt"];
363--7360[label="0.25;1pkt 1fpkt"];
363--7364[label="0.25;2pkt 2fpkt"];
363--7393[label="0.5;4pkt 4fpkt"];
363--7449[label="1;39pkt 39fpkt"];
363--7522[label="0.285714;2pkt 2fpkt"];
363--7523[label="0.142857;1pkt 1fpkt"];
363--7542[label="0.222222;2pkt 2fpkt"];
363--7553[label="0.307692;4pkt 4fpkt"];
363--7580[label="0.25;1pkt 1fpkt"];
363--7602[label="0.277778;5pkt 5fpkt"];
363--7658[label="0.0638298;3pkt 3fpkt"];
363--7700[label="0.5;1pkt 1fpkt"];
363--7747[label="1;2pkt 2fpkt"];
363--7751[label="0.666667;8pkt 8fpkt"];
363--7782[label="0.0769231;3pkt 3fpkt"];
363--7870[label="0.740741;20pkt 20fpkt"];
363--7943[label="1;9pkt 9fpkt"];
363--8002[label="0.166667;1pkt 1fpkt"];
363--8039[label="0.0909091;1pkt 1fpkt"];
363--8049[label="0.5;2pkt 2fpkt"];
363--8113[label="0.125;1pkt 1fpkt"];
363--8114[label="0.222222;2pkt 2fpkt"];
363--8163[label="1;4pkt 4fpkt"];
363--8167[label="0.333333;2pkt 2fpkt"];
363--8267[label="0.25;2pkt 2fpkt"];
363--8391[label="0.0909091;1pkt 1fpkt"];
363--8589[label="0.111111;1pkt 1fpkt"];
363--8609[label="0.333333;4pkt 4fpkt"];
363--8611[label="1;3pkt 3fpkt"];
363--8624[label="0.2;2pkt 2fpkt"];
363--8637[label="0.2;1pkt 1fpkt"];
363--8649[label="0.777778;7pkt 7fpkt"];
363--8663[label="0.6875;11pkt 11fpkt"];
363--8700[label="0.545455;6pkt 6fpkt"];
363--8739[label="0.0769231;1pkt 1fpkt"];
363--8805[label="0.1;1pkt 1fpkt"];
363--8827[label="0.111111;1pkt 1fpkt"];
363--8939[label="0.125;1pkt 1fpkt"];
363--9034[label="0.285714;2pkt 2fpkt"];
363--9066[label="0.5;2pkt 2fpkt"];
363--9172[label="0.285714;2pkt 2fpkt"];
363--9184[label="0.2;2pkt 2fpkt"];
363--9190[label="0.307692;4pkt 4fpkt"];
363--9222[label="0.277778;5pkt 5fpkt"];
363--9262[label="0.0625;3pkt 3fpkt"];
363--9319[label="1;2pkt 2fpkt"];
363--9398[label="0.769231;20pkt 20fpkt"];
363--9514[label="0.5;2pkt 2fpkt"];
363--9557[label="0.25;2pkt 2fpkt"];
363--9593[label="0.4;2pkt 2fpkt"];
659--2019[label="0.5;1pkt 1fpkt"];
659--2436[label="0.166667;1pkt 1fpkt"];
659--2672[label="0.25;1pkt 1fpkt"];
659--3296[label="0.0688836;29pkt 29fpkt"];
659--3371[label="0.25;1pkt 1fpkt"];
659--3372[label="0.0769231;1pkt 1fpkt"];
659--3388[label="0.25;1pkt 1fpkt"];
659--3488[label="0.0638298;3pkt 3fpkt"];
659--3692[label="0.5;1pkt 1fpkt"];
659--3731[label="0.0123457;1pkt 1fpkt"];
659--3789[label="0.125;1pkt 1fpkt"];
659--3808[label="0.2;1pkt 1fpkt"];
659--3837[label="0.0909091;1pkt 1fpkt"];
659--3934[label="0.5;1pkt 1fpkt"];
659--4021[label="0.153846;2pkt 2fpkt"];
659--4047[label="0.0909091;1pkt 1fpkt"];
659--4048[label="0.125;1pkt 1fpkt"];
659--4127[label="0.230769;3pkt 3fpkt"];
659--4314[label="0.222222;2pkt 2fpkt"];
659--4368[label="0.166667;1pkt 1fpkt"];
659--4423[label="0.2;1pkt 1fpkt"];
659--4459[label="0.04;1pkt 1fpkt"];
659--4529[label="0.266667;4pkt 4fpkt"];
659--4684[label="0.166667;1pkt 1fpkt"];
659--4711[label="0.428571;3pkt 3fpkt"];
659--4775[label="0.142857;1pkt 1fpkt"];
659--4807[label="0.0106383;1pkt 1fpkt"];
659--4852[label="0.125;1pkt 1fpkt"];
659--5076[label="0.142857;1pkt 1fpkt"];
659--5100[label="0.2;1pkt 1fpkt"];
659--5129[label="0.015873;1pkt 1fpkt"];
659--5196[label="0.0555556;1pkt 1fpkt"];
659--5683[label="0.117647;2pkt 2fpkt"];
659--5923[label="0.111111;1pkt 1fpkt"];
659--6335[label="0.0769231;1pkt 1fpkt"];
659--6347[label="0.25;1pkt 1fpkt"];
659--6615[label="0.125;1pkt 1fpkt"];
659--6648[label="0.0909091;1pkt 1fpkt"];
659--6713[label="0.5;1pkt 1fpkt"];
659--6790[label="0.0833333;1pkt 1fpkt"];
659--6791[label="0.125;1pkt 1fpkt"];
659--6849[label="0.230769;3pkt 3fpkt"];
659--6983[label="0.2;2pkt 2fpkt"];
659--7085[label="0.0384615;1pkt 1fpkt"];
659--7240[label="0.166667;1pkt 1fpkt"];
659--7257[label="0.428571;3pkt 3fpkt"];
659--7307[label="0.142857;1pkt 1fpkt"];
659--7332[label="0.0105263;1pkt 1fpkt"];
659--7364[label="0.125;1pkt 1fpkt"];
659--7523[label="0.142857;1pkt 1fpkt"];
659--7536[label="0.166667;1pkt 1fpkt"];
659--7554[label="0.016129;1pkt 1fpkt"];
659--7602[label="0.0555556;1pkt 1fpkt"];
659--7635[label="0.333333;1pkt 1fpkt"];
659--8414[label="0.0769231;1pkt 1fpkt"];
659--8589[label="0.111111;1pkt 1fpkt"];
659--8609[label="0.0833333;1pkt 1fpkt"];
659--8700[label="0.0909091;1pkt 1fpkt"];
659--8739[label="0.230769;3pkt 3fpkt"];
659--8827[label="0.222222;2pkt 2fpkt"];
659--8893[label="0.0384615;1pkt 1fpkt"];
659--8991[label="0.166667;1pkt 1fpkt"];
659--9034[label="0.142857;1pkt 1fpkt"];
659--9191[label="0.015873;1pkt 1fpkt"];
659--9222[label="0.0555556;1pkt 1fpkt"];
659--9581[label="0.5;1pkt 1fpkt"];
680--1722[label="0.25;1pkt 1fpkt"];
680--1788[label="0.333333;1pkt 1fpkt"];
680--2672[label="0.25;1pkt 1fpkt"];
680--3078[label="1;1pkt 1fpkt"];
680--3296[label="0.0699088;23pkt 23fpkt"];
680--3372[label="0.230769;3pkt 3fpkt"];
680--3401[label="0.25;4pkt 4fpkt"];
680--3488[label="0.0212766;1pkt 1fpkt"];
680--3837[label="0.0909091;1pkt 1fpkt"];
680--3984[label="0.166667;1pkt 1fpkt"];
680--4127[label="0.307692;4pkt 4fpkt"];
680--4265[label="0.3;3pkt 3fpkt"];
680--4801[label="1;4pkt 4fpkt"];
680--4996[label="0.923077;36pkt 36fpkt"];
680--5113[label="0.3;3pkt 3fpkt"];
680--5208[label="0.166667;1pkt 1fpkt"];
680--5486[label="1;4pkt 4fpkt"];
680--5568[label="0.25;1pkt 1fpkt"];
680--5682[label="0.1;1pkt 1fpkt"];
680--5996[label="0.5;3pkt 3fpkt"];
680--6335[label="0.230769;3pkt 3fpkt"];
680--6648[label="0.0909091;1pkt 1fpkt"];
680--6746[label="1;1pkt 1fpkt"];
680--6751[label="0.166667;1pkt 1fpkt"];
680--6849[label="0.307692;4pkt 4fpkt"];
680--6949[label="0.3;3pkt 3fpkt"];
680--7464[label="0.923077;36pkt 36fpkt"];
680--7542[label="0.222222;2pkt 2fpkt"];
680--7608[label="0.166667;1pkt 1fpkt"];
680--7800[label="1;3pkt 3fpkt"];
680--7861[label="0.25;1pkt 1fpkt"];
680--8167[label="0.5;3pkt 3fpkt"];
680--8414[label="0.230769;3pkt 3fpkt"];
680--8609[label="0.0833333;1pkt 1fpkt"];
680--8671[label="0.166667;1pkt 1fpkt"];
680--8739[label="0.307692;4pkt 4fpkt"];
680--8805[label="0.3;3pkt 3fpkt"];
680--9131[label="0.921053;35pkt 35fpkt"];
680--9184[label="0.3;3pkt 3fpkt"];
680--9593[label="0.4;2pkt 2fpkt"];
727--785[label="0.333333;1pkt 1fpkt"];
727--4836[label="0.666667;2pkt 2fpkt"];
727--7353[label="1;3pkt 3fpkt"];
727--9066[label="0.666667;2pkt 2fpkt"];
785--2027[label="0.236967;50pkt 50fpkt"];
785--2046[label="0.0833333;1pkt 1fpkt"];
785--3296[label="0.00225989;2pkt 2fpkt"];
785--3322[label="0.363636;4pkt 4fpkt"];
785--3371[label="0.25;1pkt 1fpkt"];
785--3372[label="0.0769231;1pkt 1fpkt"];
785--3373[label="0.111111;1pkt 1fpkt"];
785--3386[label="0.25;1pkt 1fpkt"];
785--3401[label="0.25;4pkt 4fpkt"];
785--3488[label="0.0425532;2pkt 2fpkt"];
785--3731[label="0.0123457;1pkt 1fpkt"];
785--3789[label="0.125;1pkt 1fpkt"];
785--3881[label="0.0909091;1pkt 1fpkt"];
785--3934[label="0.5;1pkt 1fpkt"];
785--4021[label="0.153846;2pkt 2fpkt"];
785--4127[label="0.0769231;1pkt 1fpkt"];
785--4175[label="0.0666667;1pkt 1fpkt"];
785--4241[label="0.285714;2pkt 2fpkt"];
785--4265[label="0.1;1pkt 1fpkt"];
785--4291[label="0.333333;1pkt 1fpkt"];
785--4368[label="0.166667;1pkt 1fpkt"];
785--4423[label="0.4;2pkt 2fpkt"];
785--4424[label="0.111111;1pkt 1fpkt"];
785--4442[label="0.285714;2pkt 2fpkt"];
785--4529[label="0.333333;5pkt 5fpkt"];
785--4559[label="0.142857;1pkt 1fpkt"];
785--4684[label="0.166667;1pkt 1fpkt"];
785--4711[label="0.428571;3pkt 3fpkt"];
785--4724[label="0.25;2pkt 2fpkt"];
785--4775[label="0.142857;1pkt 1fpkt"];
785--4807[label="0.0106383;1pkt 1fpkt"];
785--4836[label="0.25;1pkt 1fpkt"];
785--4838[label="0.333333;1pkt 1fpkt"];
785--4852[label="0.125;1pkt 1fpkt"];
785--4882[label="0.25;1pkt 1fpkt"];
785--4892[label="0.111111;1pkt 1fpkt"];
785--5005[label="0.5;1pkt 1fpkt"];
785--5076[label="0.142857;1pkt 1fpkt"];
785--5100[label="0.8;4pkt 4fpkt"];
785--5128[label="0.153846;2pkt 2fpkt"];
785--5129[label="0.015873;1pkt 1fpkt"];
785--5196[label="0.166667;3pkt 3fpkt"];
785--5242[label="1;2pkt 2fpkt"];
785--5512[label="0.666667;2pkt 2fpkt"];
785--5520[label="0.166667;1pkt 1fpkt"];
785--5542[label="0.583333;21pkt 21fpkt"];
785--5567[label="0.333333;3pkt 3fpkt"];
785--5595[label="0.0833333;1pkt 1fpkt"];
785--5651[label="0.307692;4pkt 4fpkt"];
785--5671[label="1;3pkt 3fpkt"];
785--5683[label="0.0588235;1pkt 1fpkt"];
785--5758[label="0.285714;2pkt 2fpkt"];
785--5816[label="0.0909091;1pkt 1fpkt"];
785--5919[label="0.2;1pkt 1fpkt"];
785--5923[label="0.111111;1pkt 1fpkt"];
785--6024[label="0.333333;1pkt 1fpkt"];
785--6133[label="0.125;1pkt 1fpkt"];
785--6203[label="0.25;2pkt 2fpkt"];
785--6215[label="0.142857;2pkt 2fpkt"];
785--6299[label="0.363636;4pkt 4fpkt"];
785--6335[label="0.0769231;1pkt 1fpkt"];
785--6336[label="0.111111;1pkt 1fpkt"];
785--6615[label="0.125;1pkt 1fpkt"];
785--6676[label="0.1;1pkt 1fpkt"];
785--6713[label="0.5;1pkt 1fpkt"];
785--6849[label="0.0769231;1pkt 1fpkt"];
785--6949[label="0.1;1pkt 1fpkt"];
785--6968[label="0.333333;1pkt 1fpkt"];
785--7064[label="0.1;1pkt 1fpkt"];
785--7154[label="0.142857;1pkt 1fpkt"];
785--7240[label="0.166667;1pkt 1fpkt"];
785--7257[label="0.428571;3pkt 3fpkt"];
785--7263[label="1;1pkt 1fpkt"];
785--7268[label="0.25;2pkt 2fpkt"];
785--7307[label="0.142857;1pkt 1fpkt"];
785--7332[label="0.0105263;1pkt 1fpkt"];
785--7353[label="0.2;1pkt 1fpkt"];
785--7355[label="0.333333;1pkt 1fpkt"];
785--7364[label="0.125;1pkt 1fpkt"];
785--7393[label="0.125;1pkt 1fpkt"];
785--7473[label="0.333333;1pkt 1fpkt"];
785--7523[label="0.142857;1pkt 1fpkt"];
785--7536[label="0.666667;4pkt 4fpkt"];
785--7553[label="0.153846;2pkt 2fpkt"];
785--7554[label="0.016129;1pkt 1fpkt"];
785--7602[label="0.166667;3pkt 3fpkt"];
785--7635[label="0.666667;2pkt 2fpkt"];
785--7818[label="0.666667;2pkt 2fpkt"];
785--7839[label="0.583333;21pkt 21fpkt"];
785--7860[label="0.333333;3pkt 3fpkt"];
785--7881[label="0.0909091;1pkt 1fpkt"];
785--7924[label="0.307692;4pkt 4fpkt"];
785--7939[label="1;3pkt 3fpkt"];
785--8002[label="0.166667;1pkt 1fpkt"];
785--8039[label="0.0909091;1pkt 1fpkt"];
785--8113[label="0.125;1pkt 1fpkt"];
785--8267[label="0.125;1pkt 1fpkt"];
785--8330[label="0.153846;2pkt 2fpkt"];
785--8391[label="0.363636;4pkt 4fpkt"];
785--8414[label="0.0769231;1pkt 1fpkt"];
785--8415[label="0.111111;1pkt 1fpkt"];
785--8589[label="0.111111;1pkt 1fpkt"];
785--8624[label="0.1;1pkt 1fpkt"];
785--8739[label="0.0769231;1pkt 1fpkt"];
785--8805[label="0.1;1pkt 1fpkt"];
785--8816[label="0.333333;1pkt 1fpkt"];
785--8939[label="0.125;1pkt 1fpkt"];
785--8991[label="0.166667;1pkt 1fpkt"];
785--9034[label="0.142857;1pkt 1fpkt"];
785--9066[label="0.25;1pkt 1fpkt"];
785--9138[label="0.333333;1pkt 1fpkt"];
785--9190[label="0.153846;2pkt 2fpkt"];
785--9191[label="0.015873;1pkt 1fpkt"];
785--9222[label="0.166667;3pkt 3fpkt"];
785--9246[label="1;2pkt 2fpkt"];
785--9363[label="0.666667;2pkt 2fpkt"];
785--9381[label="0.571429;20pkt 20fpkt"];
785--9404[label="0.0833333;1pkt 1fpkt"];
785--9432[label="0.333333;4pkt 4fpkt"];
790--3296[label="0.0492958;7pkt 7fpkt"];
790--3373[label="0.111111;1pkt 1fpkt"];
790--3401[label="0.0625;1pkt 1fpkt"];
790--3789[label="0.25;2pkt 2fpkt"];
790--3837[label="0.0909091;1pkt 1fpkt"];
790--3881[label="0.0909091;1pkt 1fpkt"];
790--3984[label="0.166667;1pkt 1fpkt"];
790--4424[label="0.111111;1pkt 1fpkt"];
790--4559[label="0.285714;2pkt 2fpkt"];
790--4830[label="0.966667;29pkt 29fpkt"];
790--4921[label="0.00990099;1pkt 1fpkt"];
790--5271[label="0.0208333;1pkt 1fpkt"];
790--5316[label="0.111111;2pkt 2fpkt"];
790--5464[label="0.025641;1pkt 1fpkt"];
790--5623[label="0.0163934;1pkt 1fpkt"];
790--5923[label="0.111111;1pkt 1fpkt"];
790--6336[label="0.111111;1pkt 1fpkt"];
790--6615[label="0.25;2pkt 2fpkt"];
790--6648[label="0.0909091;1pkt 1fpkt"];
790--6676[label="0.1;1pkt 1fpkt"];
790--6751[label="0.166667;1pkt 1fpkt"];
790--7064[label="0.1;1pkt 1fpkt"];
790--7154[label="0.285714;2pkt 2fpkt"];
790--7658[label="0.0212766;1pkt 1fpkt"];
790--7782[label="0.025641;1pkt 1fpkt"];
790--7904[label="0.0163934;1pkt 1fpkt"];
790--8113[label="0.125;1pkt 1fpkt"];
790--8415[label="0.111111;1pkt 1fpkt"];
790--8589[label="0.222222;2pkt 2fpkt"];
790--8609[label="0.0833333;1pkt 1fpkt"];
790--8624[label="0.1;1pkt 1fpkt"];
790--8671[label="0.166667;1pkt 1fpkt"];
790--8939[label="0.25;2pkt 2fpkt"];
790--9262[label="0.0208333;1pkt 1fpkt"];
966--1791[label="0.333333;1pkt 1fpkt"];
966--1796[label="0.5;1pkt 1fpkt"];
966--2465[label="0.5;1pkt 1fpkt"];
966--3160[label="0.333333;1pkt 1fpkt"];
966--3296[label="0.0814815;22pkt 22fpkt"];
966--3643[label="1;3pkt 3fpkt"];
966--3646[label="0.333333;1pkt 1fpkt"];
966--3712[label="0.5;1pkt 1fpkt"];
966--3766[label="0.0909091;1pkt 1fpkt"];
966--4037[label="0.7;7pkt 7fpkt"];
966--4084[label="0.166667;1pkt 1fpkt"];
966--4164[label="0.25;1pkt 1fpkt"];
966--4186[label="0.222222;2pkt 2fpkt"];
966--4335[label="0.333333;2pkt 2fpkt"];
966--4635[label="0.166667;1pkt 1fpkt"];
966--6523[label="1;4pkt 4fpkt"];
966--6525[label="0.25;1pkt 1fpkt"];
966--6571[label="1;1pkt 1fpkt"];
966--6600[label="0.0909091;1pkt 1fpkt"];
966--6783[label="0.636364;7pkt 7fpkt"];
966--6817[label="0.166667;1pkt 1fpkt"];
966--7000[label="0.4;2pkt 2fpkt"];
966--7203[label="0.2;1pkt 1fpkt"];
966--8563[label="1;1pkt 1fpkt"];
966--8695[label="0.7;7pkt 7fpkt"];
966--8757[label="0.333333;1pkt 1fpkt"];
966--8835[label="0.4;2pkt 2fpkt"];
1722--3014[label="0.25;1pkt 1fpkt"];
2046--2381[label="0.166667;2pkt 2fpkt"];
2046--2595[label="0.166667;2pkt 2fpkt"];
2046--2814[label="0.583333;7pkt 7fpkt"];
2046--3296[label="0.166667;2pkt 2fpkt"];
2253--3014[label="0.166667;1pkt 1fpkt"];
2253--3296[label="0.333333;2pkt 2fpkt"];
2253--5924[label="1;6pkt 6fpkt"];
2253--8114[label="1;6pkt 6fpkt"];
2253--9557[label="0.833333;5pkt 5fpkt"];
2436--2592[label="0.333333;2pkt 2fpkt"];
2436--3014[label="0.333333;2pkt 2fpkt"];
2436--3296[label="0.166667;1pkt 1fpkt"];
2445--3014[label="0.73913;17pkt 17fpkt"];
2445--5579[label="1;23pkt 23fpkt"];
2445--7870[label="1;23pkt 23fpkt"];
2445--9398[label="1;23pkt 23fpkt"];
2592--3296[label="0.0714286;8pkt 8fpkt"];
2592--3789[label="0.125;1pkt 1fpkt"];
2592--3921[label="0.222222;2pkt 2fpkt"];
2592--4310[label="0.444444;4pkt 4fpkt"];
2592--4852[label="0.125;1pkt 1fpkt"];
2592--4930[label="0.2;1pkt 1fpkt"];
2592--4999[label="0.00892857;1pkt 1fpkt"];
2592--5076[label="0.142857;1pkt 1fpkt"];
2592--6615[label="0.125;1pkt 1fpkt"];
2592--7364[label="0.125;1pkt 1fpkt"];
2592--7467[label="0.00892857;1pkt 1fpkt"];
2592--7523[label="0.142857;1pkt 1fpkt"];
2592--8589[label="0.111111;1pkt 1fpkt"];
2592--9133[label="0.00892857;1pkt 1fpkt"];
2603--3296[label="0.0666667;3pkt 3fpkt"];
2603--5113[label="0.1;1pkt 1fpkt"];
2603--5313[label="1;1pkt 1fpkt"];
2603--7542[label="0.111111;1pkt 1fpkt"];
2603--9184[label="0.1;1pkt 1fpkt"];
2603--9280[label="1;1pkt 1fpkt"];
2672--3296[label="0.25;1pkt 1fpkt"];
2672--6746[label="1;1pkt 1fpkt"];
3014--3018[label="1;1pkt 1fpkt"];
3014--3296[label="0.000930233;1pkt 1fpkt"];
3014--3401[label="0.0625;1pkt 1fpkt"];
3014--3646[label="0.333333;1pkt 1fpkt"];
3014--3766[label="0.181818;2pkt 2fpkt"];
3014--3771[label="1;3pkt 3fpkt"];
3014--3789[label="0.125;1pkt 1fpkt"];
3014--3808[label="0.2;1pkt 1fpkt"];
3014--3837[label="0.272727;3pkt 3fpkt"];
3014--3841[label="1;2pkt 2fpkt"];
3014--3881[label="0.181818;2pkt 2fpkt"];
3014--3912[label="0.2;1pkt 1fpkt"];
3014--3949[label="1;1pkt 1fpkt"];
3014--3970[label="0.4;6pkt 6fpkt"];
3014--4047[label="0.454545;5pkt 5fpkt"];
3014--4048[label="0.5;4pkt 4fpkt"];
3014--4127[label="0.0769231;1pkt 1fpkt"];
3014--4135[label="1;16pkt 16fpkt"];
3014--4265[label="0.1;1pkt 1fpkt"];
3014--4314[label="0.111111;1pkt 1fpkt"];
3014--4384[label="0.5;1pkt 1fpkt"];
3014--4424[label="0.111111;1pkt 1fpkt"];
3014--4442[label="0.285714;2pkt 2fpkt"];
3014--4443[label="1;2pkt 2fpkt"];
3014--4559[label="0.142857;1pkt 1fpkt"];
3014--4613[label="0.736842;14pkt 14fpkt"];
3014--4775[label="0.285714;2pkt 2fpkt"];
3014--4807[label="0.37234;35pkt 35fpkt"];
3014--4836[label="0.5;2pkt 2fpkt"];
3014--4852[label="0.25;2pkt 2fpkt"];
3014--4892[label="0.222222;2pkt 2fpkt"];
3014--4920[label="0.636364;21pkt 21fpkt"];
3014--4977[label="1;39pkt 39fpkt"];
3014--5061[label="0.75;6pkt 6fpkt"];
3014--5075[label="0.285714;2pkt 2fpkt"];
3014--5076[label="0.142857;1pkt 1fpkt"];
3014--5098[label="0.166667;1pkt 1fpkt"];
3014--5113[label="0.1;1pkt 1fpkt"];
3014--5128[label="0.230769;3pkt 3fpkt"];
3014--5161[label="0.333333;1pkt 1fpkt"];
3014--5194[label="0.5;1pkt 1fpkt"];
3014--5196[label="0.166667;3pkt 3fpkt"];
3014--5271[label="0.0416667;2pkt 2fpkt"];
3014--5316[label="0.0555556;1pkt 1fpkt"];
3014--5331[label="0.5;1pkt 1fpkt"];
3014--5418[label="0.583333;7pkt 7fpkt"];
3014--5464[label="0.0512821;2pkt 2fpkt"];
3014--5520[label="0.333333;2pkt 2fpkt"];
3014--5548[label="0.52381;11pkt 11fpkt"];
3014--5579[label="0.730769;19pkt 19fpkt"];
3014--5676[label="1;9pkt 9fpkt"];
3014--5682[label="0.8;8pkt 8fpkt"];
3014--5683[label="0.176471;3pkt 3fpkt"];
3014--5757[label="0.111111;1pkt 1fpkt"];
3014--5758[label="0.142857;1pkt 1fpkt"];
3014--5766[label="0.833333;5pkt 5fpkt"];
3014--5816[label="0.0909091;1pkt 1fpkt"];
3014--5831[label="0.2;1pkt 1fpkt"];
3014--5923[label="0.111111;1pkt 1fpkt"];
3014--5924[label="0.222222;2pkt 2fpkt"];
3014--5990[label="0.6;3pkt 3fpkt"];
3014--5996[label="0.333333;2pkt 2fpkt"];
3014--6024[label="0.333333;1pkt 1fpkt"];
3014--6133[label="0.25;2pkt 2fpkt"];
3014--6525[label="0.25;1pkt 1fpkt"];
3014--6600[label="0.181818;2pkt 2fpkt"];
3014--6615[label="0.125;1pkt 1fpkt"];
3014--6648[label="0.272727;3pkt 3fpkt"];
3014--6652[label="1;2pkt 2fpkt"];
3014--6676[label="0.2;2pkt 2fpkt"];
3014--6699[label="0.25;1pkt 1fpkt"];
3014--6724[label="1;1pkt 1fpkt"];
3014--6741[label="0.4375;7pkt 7fpkt"];
3014--6790[label="0.416667;5pkt 5fpkt"];
3014--6791[label="0.5;4pkt 4fpkt"];
3014--6849[label="0.0769231;1pkt 1fpkt"];
3014--6855[label="1;17pkt 17fpkt"];
3014--6949[label="0.1;1pkt 1fpkt"];
3014--6983[label="0.1;1pkt 1fpkt"];
3014--7064[label="0.1;1pkt 1fpkt"];
3014--7154[label="0.142857;1pkt 1fpkt"];
3014--7307[label="0.285714;2pkt 2fpkt"];
3014--7332[label="0.368421;35pkt 35fpkt"];
3014--7353[label="0.4;2pkt 2fpkt"];
3014--7364[label="0.25;2pkt 2fpkt"];
3014--7393[label="0.25;2pkt 2fpkt"];
3014--7449[label="1;39pkt 39fpkt"];
3014--7522[label="0.285714;2pkt 2fpkt"];
3014--7523[label="0.142857;1pkt 1fpkt"];
3014--7542[label="0.111111;1pkt 1fpkt"];
3014--7553[label="0.230769;3pkt 3fpkt"];
3014--7580[label="0.25;1pkt 1fpkt"];
3014--7602[label="0.166667;3pkt 3fpkt"];
3014--7658[label="0.0425532;2pkt 2fpkt"];
3014--7700[label="0.5;1pkt 1fpkt"];
3014--7751[label="0.583333;7pkt 7fpkt"];
3014--7782[label="0.0512821;2pkt 2fpkt"];
3014--7870[label="0.703704;19pkt 19fpkt"];
3014--7943[label="1;9pkt 9fpkt"];
3014--8002[label="0.166667;1pkt 1fpkt"];
3014--8039[label="0.0909091;1pkt 1fpkt"];
3014--8049[label="0.25;1pkt 1fpkt"];
3014--8113[label="0.125;1pkt 1fpkt"];
3014--8114[label="0.222222;2pkt 2fpkt"];
3014--8163[label="0.75;3pkt 3fpkt"];
3014--8167[label="0.333333;2pkt 2fpkt"];
3014--8267[label="0.25;2pkt 2fpkt"];
3014--8589[label="0.111111;1pkt 1fpkt"];
3014--8609[label="0.25;3pkt 3fpkt"];
3014--8611[label="1;3pkt 3fpkt"];
3014--8624[label="0.2;2pkt 2fpkt"];
3014--8637[label="0.2;1pkt 1fpkt"];
3014--8663[label="0.4375;7pkt 7fpkt"];
3014--8700[label="0.454545;5pkt 5fpkt"];
3014--8739[label="0.0769231;1pkt 1fpkt"];
3014--8805[label="0.1;1pkt 1fpkt"];
3014--8827[label="0.111111;1pkt 1fpkt"];
3014--8939[label="0.125;1pkt 1fpkt"];
3014--9034[label="0.285714;2pkt 2fpkt"];
3014--9066[label="0.5;2pkt 2fpkt"];
3014--9172[label="0.285714;2pkt 2fpkt"];
3014--9184[label="0.1;1pkt 1fpkt"];
3014--9190[label="0.230769;3pkt 3fpkt"];
3014--9222[label="0.166667;3pkt 3fpkt"];
3014--9262[label="0.0416667;2pkt 2fpkt"];
3014--9398[label="0.730769;19pkt 19fpkt"];
3014--9514[label="0.25;1pkt 1fpkt"];
3014--9557[label="0.25;2pkt 2fpkt"];
3014--9593[label="0.4;2pkt 2fpkt"];
3322--6299[label="1;11pkt 11fpkt"];
3322--8391[label="1;11pkt 11fpkt"];
3388--6347[label="1;4pkt 4fpkt"];
3646--6525[label="1;3pkt 3fpkt"];
3766--6600[label="1;11pkt 11fpkt"];
3789--6615[label="1;8pkt 8fpkt"];
3789--8589[label="1;8pkt 8fpkt"];
3837--6648[label="1;11pkt 11fpkt"];
3837--8609[label="1;11pkt 11fpkt"];
3841--6652[label="1;2pkt 2fpkt"];
3841--8611[label="1;2pkt 2fpkt"];
3881--6676[label="1;10pkt 10fpkt"];
3881--8624[label="1;10pkt 10fpkt"];
3904--6693[label="1;3pkt 3fpkt"];
3912--6699[label="1;4pkt 4fpkt"];
3912--8637[label="1;5pkt 5fpkt"];
3934--6713[label="1;2pkt 2fpkt"];
3949--6724[label="1;1pkt 1fpkt"];
3970--6741[label="1;15pkt 15fpkt"];
3970--8663[label="1;15pkt 15fpkt"];
4037--6783[label="1;10pkt 10fpkt"];
4037--8695[label="1;10pkt 10fpkt"];
4048--6791[label="1;8pkt 8fpkt"];
4084--6817[label="1;6pkt 6fpkt"];
4127--6849[label="1;13pkt 13fpkt"];
4127--8739[label="1;13pkt 13fpkt"];
4135--6855[label="1;16pkt 16fpkt"];
4314--6983[label="1;9pkt 9fpkt"];
4314--8827[label="1;9pkt 9fpkt"];
4424--7064[label="1;9pkt 9fpkt"];
4559--7154[label="1;7pkt 7fpkt"];
4559--8939[label="1;7pkt 7fpkt"];
4684--7240[label="1;6pkt 6fpkt"];
4684--8991[label="1;6pkt 6fpkt"];
4711--7257[label="1;7pkt 7fpkt"];
4775--7307[label="1;7pkt 7fpkt"];
4775--9034[label="1;7pkt 7fpkt"];
4807--7332[label="1;94pkt 94fpkt"];
4836--7353[label="1;4pkt 4fpkt"];
4836--9066[label="1;4pkt 4fpkt"];
4838--7355[label="1;3pkt 3fpkt"];
4847--7360[label="1;4pkt 4fpkt"];
4977--7449[label="1;39pkt 39fpkt"];
5075--7522[label="1;7pkt 7fpkt"];
5075--9172[label="1;7pkt 7fpkt"];
5076--7523[label="1;7pkt 7fpkt"];
5100--7536[label="1;5pkt 5fpkt"];
5113--7542[label="1;9pkt 9fpkt"];
5113--9184[label="1;10pkt 10fpkt"];
5128--7553[label="1;13pkt 13fpkt"];
5128--9190[label="1;13pkt 13fpkt"];
5161--7580[label="1;3pkt 3fpkt"];
5196--7602[label="1;18pkt 18fpkt"];
5196--9222[label="1;18pkt 18fpkt"];
5313--9280[label="1;1pkt 1fpkt"];
5331--7700[label="1;2pkt 2fpkt"];
5404--7747[label="1;2pkt 2fpkt"];
5404--9319[label="1;2pkt 2fpkt"];
5418--7751[label="1;12pkt 12fpkt"];
5542--7839[label="1;36pkt 36fpkt"];
5542--9381[label="1;35pkt 35fpkt"];
5567--7860[label="1;9pkt 9fpkt"];
5579--7870[label="1;26pkt 26fpkt"];
5579--9398[label="1;26pkt 26fpkt"];
5676--7943[label="1;9pkt 9fpkt"];
5758--8002[label="1;6pkt 6fpkt"];
5816--8039[label="1;11pkt 11fpkt"];
5831--8049[label="1;4pkt 4fpkt"];
5831--9514[label="1;4pkt 4fpkt"];
5923--8113[label="1;8pkt 8fpkt"];
5924--8114[label="1;9pkt 9fpkt"];
5924--9557[label="1;8pkt 8fpkt"];
5990--8163[label="1;4pkt 4fpkt"];
5996--8167[label="1;6pkt 6fpkt"];
5996--9593[label="1;5pkt 5fpkt"];
6133--8267[label="1;8pkt 8fpkt"];
6215--8330[label="1;13pkt 13fpkt"];
6299--8391[label="1;11pkt 11fpkt"];
6571--8563[label="1;1pkt 1fpkt"];
6615--8589[label="1;8pkt 8fpkt"];
6648--8609[label="1;11pkt 11fpkt"];
6652--8611[label="1;2pkt 2fpkt"];
6676--8624[label="1;10pkt 10fpkt"];
6699--8637[label="1;4pkt 4fpkt"];
6741--8663[label="1;16pkt 16fpkt"];
6783--8695[label="1;10pkt 10fpkt"];
6849--8739[label="1;13pkt 13fpkt"];
6968--8816[label="1;3pkt 3fpkt"];
6983--8827[label="1;9pkt 9fpkt"];
7154--8939[label="1;7pkt 7fpkt"];
7240--8991[label="1;6pkt 6fpkt"];
7307--9034[label="1;7pkt 7fpkt"];
7353--9066[label="1;4pkt 4fpkt"];
7522--9172[label="1;7pkt 7fpkt"];
7542--9184[label="1;9pkt 9fpkt"];
7553--9190[label="1;13pkt 13fpkt"];
7602--9222[label="1;18pkt 18fpkt"];
7635--9246[label="1;2pkt 2fpkt"];
7747--9319[label="1;2pkt 2fpkt"];
7839--9381[label="1;35pkt 35fpkt"];
7870--9398[label="1;26pkt 26fpkt"];
8049--9514[label="1;4pkt 4fpkt"];
8114--9557[label="1;8pkt 8fpkt"];
8167--9593[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.222.121" dst_port="80"/>
      <filter dst_ip="128.28.217.250" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="219.162.46.141"/>
      <from sec="1144127004" usec="0"/>
      <to sec="1144127539" usec="0"/>
    </slice>
    <from sec="1144127004" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1447[label="128.28.193.23;s;83pkt 83fpkt", shape=diamond, color=yellow];
1754[label="38.59.11.234;d;36pkt 36fpkt", shape=diamond, color=yellow];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.193.23:*, 38.59.11.234:80}[43.3735%]&lt;BR/&gt;{128.28.193.23:*, 36.118.120.83:80}[27.7108%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3478: (0.840336%)&lt;BR/&gt; 3477: (0.840336%)&lt;BR/&gt; 3476: (0.840336%)&lt;BR/&gt; 3475: (0.840336%)&gt;];
}
1447--1754[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="38.59.11.234" dst_port="80" src_ip="128.28.193.23"/>
      <filter dst_ip="36.118.120.83" dst_port="80" src_ip="128.28.193.23"/>
    </slice>
    <from sec="1144126870" usec="0"/>
    <to sec="1144127285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1776[label="216.240.71.189;d;6pkt 6fpkt", shape=diamond, color=yellow];
1777[label="161.223.219.29;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.219.29:*, 216.240.71.189:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1461: (11.1111%)&lt;BR/&gt; 1457: (11.1111%)&lt;BR/&gt; 1456: (11.1111%)&lt;BR/&gt; 1509: (5.55556%)&gt;];
}
1776--1777[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.240.71.189" dst_port="80" src_ip="161.223.219.29"/>
    </slice>
    <from sec="1144127162" usec="0"/>
    <to sec="1144127334" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48578,2.44313,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
53[label="82.100.2.15s;62pkt 62fpkt", shape=rectangle, color=red];
1786[label="82.100.2.15;s;252pkt 252fpkt", shape=diamond, color=yellow];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.100.2.15:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 56600: (0.318471%)&lt;BR/&gt; 56597: (0.318471%)&lt;BR/&gt; 56594: (0.318471%)&lt;BR/&gt; 56590: (0.318471%)&gt;];
}
53--1786[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="82.100.2.15"/>
    </slice>
    <from sec="1144127192" usec="0"/>
    <to sec="1144127264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
1021[label="36.20.14.215;d;363pkt 363fpkt", shape=diamond, color=yellow];
1329[label="164.23.196.164;s;92pkt 92fpkt", shape=diamond, color=yellow];
1387[label="132.19.176.84;s;129pkt 129fpkt", shape=diamond, color=yellow];
3430[label="128.28.217.8;24pkt 24fpkt", shape=pentagon, color=darkviolet];
3444[label="128.28.217.9;31pkt 31fpkt", shape=pentagon, color=darkviolet];
3639[label="132.19.59.23;148pkt 148fpkt", shape=pentagon, color=darkviolet];
5069[label="132.19.37.148;58pkt 58fpkt", shape=pentagon, color=darkviolet];
5866[label="194.212.156.213;81pkt 81fpkt", shape=pentagon, color=darkviolet];
6131[label="194.212.156.237;65pkt 65fpkt", shape=pentagon, color=darkviolet];
6373[label="128.28.217.8;24pkt 24fpkt", shape=invtriangle, color=brown];
6521[label="132.19.59.23;148pkt 148fpkt", shape=invtriangle, color=brown];
7516[label="132.19.37.148;58pkt 58fpkt", shape=invtriangle, color=brown];
8072[label="194.212.156.213;80pkt 80fpkt", shape=invtriangle, color=brown];
8265[label="194.212.156.237;65pkt 65fpkt", shape=invtriangle, color=brown];
8529[label="132.19.59.23;149pkt 149fpkt", shape=invhouse, color=bisque];
9528[label="194.212.156.213;81pkt 81fpkt", shape=invhouse, color=bisque];
9660[label="194.212.156.237;65pkt 65fpkt", shape=invhouse, color=bisque];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 36.20.14.215:2703}[44.7219%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (28.3564%)&lt;BR/&gt; 53: (12.5828%)&lt;BR/&gt; 60838: (8.24804%)&lt;BR/&gt; 25: (6.53221%)&lt;BR/&gt; 52541: (2.25768%)&gt;];
}
1021--1329[label="0.141304;13pkt 13fpkt"];
1021--1387[label="0.24031;31pkt 31fpkt"];
1021--3430[label="0.333333;8pkt 8fpkt"];
1021--3444[label="0.387097;12pkt 12fpkt"];
1021--3639[label="0.0135135;2pkt 2fpkt"];
1021--4174[label="0.588235;90pkt 90fpkt"];
1021--4704[label="0.426997;155pkt 155fpkt"];
1021--5069[label="0.172414;10pkt 10fpkt"];
1021--5866[label="0.296296;24pkt 24fpkt"];
1021--6131[label="0.169231;11pkt 11fpkt"];
1021--6373[label="0.333333;8pkt 8fpkt"];
1021--6521[label="0.0135135;2pkt 2fpkt"];
1021--6881[label="0.592105;90pkt 90fpkt"];
1021--7254[label="0.426997;155pkt 155fpkt"];
1021--7516[label="0.172414;10pkt 10fpkt"];
1021--8072[label="0.3;24pkt 24fpkt"];
1021--8265[label="0.169231;11pkt 11fpkt"];
1021--8529[label="0.0134228;2pkt 2fpkt"];
1021--9000[label="0.426997;155pkt 155fpkt"];
1021--9528[label="0.296296;24pkt 24fpkt"];
1021--9660[label="0.169231;11pkt 11fpkt"];
1329--3288[label="0.0108696;1pkt 1fpkt"];
3430--6373[label="1;24pkt 24fpkt"];
3639--6521[label="1;148pkt 148fpkt"];
3639--8529[label="1;148pkt 148fpkt"];
5069--7516[label="1;58pkt 58fpkt"];
5866--8072[label="1;80pkt 80fpkt"];
5866--9528[label="1;81pkt 81fpkt"];
6131--8265[label="1;65pkt 65fpkt"];
6131--9660[label="1;65pkt 65fpkt"];
6521--8529[label="1;148pkt 148fpkt"];
8072--9528[label="1;80pkt 80fpkt"];
8265--9660[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="36.20.14.215" dst_port="2703"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
523[label="132.18.154.110;s;7pkt 7fpkt", shape=diamond, color=yellow];
1815[label="193.163.154.209;d;2pkt 2fpkt", shape=diamond, color=yellow];
4657[label="132.18.154.110;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.154.110:1787, 193.163.154.209:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1787: (50%)&lt;BR/&gt; 50135: (9.375%)&lt;BR/&gt; 50132: (9.375%)&lt;BR/&gt; 34149: (6.25%)&lt;BR/&gt; 28654: (6.25%)&gt;];
}
523--1815[label="1;2pkt 2fpkt"];
523--4657[label="0.857143;6pkt 6fpkt"];
1815--4657[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.163.154.209" src_ip="132.18.154.110" src_port="1787"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
240[label="128.231.111.67;s;514pkt 514fpkt", shape=diamond, color=yellow];
393[label="128.231.111.64;s;542pkt 542fpkt", shape=diamond, color=yellow];
1244[label="161.146.18.193;s;302pkt 302fpkt", shape=diamond, color=yellow];
1824[label="213.53.164.32;d;64pkt 64fpkt", shape=diamond, color=yellow];
2090[label="213.96.30.126;d;46pkt 46fpkt", shape=diamond, color=yellow];
2136[label="128.202.102.70;s;31pkt 31fpkt", shape=diamond, color=yellow];
2153[label="208.239.136.13;d;338pkt 338fpkt", shape=diamond, color=yellow];
2331[label="209.98.173.83;d;253pkt 253fpkt", shape=diamond, color=yellow];
2485[label="83.216.233.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
2668[label="208.99.193.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
2687[label="83.235.16.116;d;1pkt 1fpkt", shape=diamond, color=yellow];
4076[label="132.19.102.60;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4123[label="128.231.111.64;623pkt 623fpkt", shape=pentagon, color=darkviolet];
4145[label="132.19.198.65;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4857[label="132.19.246.131;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5600[label="161.146.18.193;325pkt 325fpkt", shape=pentagon, color=darkviolet];
5954[label="194.212.155.220;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6810[label="132.19.102.60;24pkt 24fpkt", shape=invtriangle, color=brown];
6846[label="128.231.111.64;622pkt 622fpkt", shape=invtriangle, color=brown];
7884[label="161.146.18.193;324pkt 324fpkt", shape=invtriangle, color=brown];
8711[label="132.19.102.60;23pkt 23fpkt", shape=invhouse, color=bisque];
8737[label="128.231.111.64;623pkt 623fpkt", shape=invhouse, color=bisque];
9406[label="161.146.18.193;325pkt 325fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.231.111.64:0, *:0}[26.7612%]&lt;BR/&gt;{128.231.111.67:0, *:0}[22.079%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.4094%)&lt;BR/&gt; 25: (0.477211%)&lt;BR/&gt; 7200: (0.418777%)&lt;BR/&gt; 80: (0.223997%)&lt;BR/&gt; 53: (0.204519%)&gt;];
}
240--1824[label="0.015625;1pkt 1fpkt"];
240--2090[label="0.0217391;1pkt 1fpkt"];
240--2331[label="0.00395257;1pkt 1fpkt"];
240--2523[label="0.00471698;1pkt 1fpkt"];
240--2668[label="0.5;1pkt 1fpkt"];
393--2090[label="0.0217391;1pkt 1fpkt"];
393--2153[label="0.00295858;1pkt 1fpkt"];
393--2331[label="0.00395257;1pkt 1fpkt"];
393--2485[label="1;1pkt 1fpkt"];
393--2523[label="0.00471698;1pkt 1fpkt"];
393--2539[label="0.00515464;1pkt 1fpkt"];
393--2668[label="0.5;1pkt 1fpkt"];
393--4123[label="1;542pkt 542fpkt"];
393--6846[label="0.998155;541pkt 541fpkt"];
393--8737[label="1;542pkt 542fpkt"];
1244--1824[label="0.015625;1pkt 1fpkt"];
1244--2090[label="0.0217391;1pkt 1fpkt"];
1244--2153[label="0.00331126;1pkt 1fpkt"];
1244--2331[label="0.00395257;1pkt 1fpkt"];
1244--5600[label="1;302pkt 302fpkt"];
1244--7884[label="0.996689;301pkt 301fpkt"];
1244--9406[label="1;302pkt 302fpkt"];
1824--2136[label="0.0322581;1pkt 1fpkt"];
1824--2193[label="0.015625;1pkt 1fpkt"];
1824--4076[label="0.0434783;1pkt 1fpkt"];
1824--5073[label="0.0333333;1pkt 1fpkt"];
1824--5600[label="0.015625;1pkt 1fpkt"];
1824--6810[label="0.0416667;1pkt 1fpkt"];
1824--7520[label="0.0344828;1pkt 1fpkt"];
1824--7884[label="0.015625;1pkt 1fpkt"];
1824--8711[label="0.0434783;1pkt 1fpkt"];
1824--9170[label="0.0344828;1pkt 1fpkt"];
1824--9406[label="0.015625;1pkt 1fpkt"];
2090--2136[label="0.0322581;1pkt 1fpkt"];
2090--2193[label="0.0217391;1pkt 1fpkt"];
2090--2856[label="0.0217391;1pkt 1fpkt"];
2090--3296[label="0.0217391;1pkt 1fpkt"];
2090--4122[label="0.0217391;1pkt 1fpkt"];
2090--4123[label="0.0217391;1pkt 1fpkt"];
2090--4145[label="0.030303;1pkt 1fpkt"];
2090--4393[label="0.0227273;1pkt 1fpkt"];
2090--4540[label="0.0217391;1pkt 1fpkt"];
2090--4857[label="0.0294118;1pkt 1fpkt"];
2090--5269[label="0.0217391;1pkt 1fpkt"];
2090--5600[label="0.0217391;1pkt 1fpkt"];
2090--6010[label="0.0217391;1pkt 1fpkt"];
2090--6845[label="0.0217391;1pkt 1fpkt"];
2090--6846[label="0.0217391;1pkt 1fpkt"];
2090--7043[label="0.0222222;1pkt 1fpkt"];
2090--7142[label="0.0217391;1pkt 1fpkt"];
2090--7656[label="0.0217391;1pkt 1fpkt"];
2090--7884[label="0.0217391;1pkt 1fpkt"];
2090--8178[label="0.0217391;1pkt 1fpkt"];
2090--8736[label="0.0217391;1pkt 1fpkt"];
2090--8737[label="0.0217391;1pkt 1fpkt"];
2090--8864[label="0.0227273;1pkt 1fpkt"];
2090--8929[label="0.0217391;1pkt 1fpkt"];
2090--9260[label="0.0217391;1pkt 1fpkt"];
2090--9406[label="0.0217391;1pkt 1fpkt"];
2090--9600[label="0.0217391;1pkt 1fpkt"];
2136--2153[label="0.0322581;1pkt 1fpkt"];
2136--2331[label="0.0322581;1pkt 1fpkt"];
2153--2193[label="0.00485437;1pkt 1fpkt"];
2153--2195[label="0.0046729;1pkt 1fpkt"];
2153--2856[label="0.00295858;1pkt 1fpkt"];
2153--3133[label="0.00537634;1pkt 1fpkt"];
2153--4123[label="0.00295858;1pkt 1fpkt"];
2153--4393[label="0.0227273;1pkt 1fpkt"];
2153--4624[label="0.00446429;1pkt 1fpkt"];
2153--5255[label="0.00657895;1pkt 1fpkt"];
2153--5269[label="0.00295858;1pkt 1fpkt"];
2153--5600[label="0.00307692;1pkt 1fpkt"];
2153--5954[label="0.0163934;1pkt 1fpkt"];
2153--6003[label="0.00763359;1pkt 1fpkt"];
2153--6846[label="0.00295858;1pkt 1fpkt"];
2153--7043[label="0.0222222;1pkt 1fpkt"];
2153--7197[label="0.00446429;1pkt 1fpkt"];
2153--7656[label="0.00295858;1pkt 1fpkt"];
2153--7884[label="0.00308642;1pkt 1fpkt"];
2153--8171[label="0.00763359;1pkt 1fpkt"];
2153--8737[label="0.00295858;1pkt 1fpkt"];
2153--8864[label="0.0227273;1pkt 1fpkt"];
2153--8964[label="0.00444444;1pkt 1fpkt"];
2153--9260[label="0.00295858;1pkt 1fpkt"];
2153--9406[label="0.00307692;1pkt 1fpkt"];
2331--2856[label="0.00395257;1pkt 1fpkt"];
2331--3133[label="0.00537634;1pkt 1fpkt"];
2331--4123[label="0.00395257;1pkt 1fpkt"];
2331--4202[label="0.00531915;1pkt 1fpkt"];
2331--4567[label="0.0138889;1pkt 1fpkt"];
2331--4624[label="0.00446429;1pkt 1fpkt"];
2331--5255[label="0.00657895;1pkt 1fpkt"];
2331--5269[label="0.00395257;1pkt 1fpkt"];
2331--5600[label="0.00395257;1pkt 1fpkt"];
2331--6003[label="0.00763359;1pkt 1fpkt"];
2331--6227[label="0.0125;1pkt 1fpkt"];
2331--6846[label="0.00395257;1pkt 1fpkt"];
2331--6901[label="0.00531915;1pkt 1fpkt"];
2331--7159[label="0.0138889;1pkt 1fpkt"];
2331--7197[label="0.00446429;1pkt 1fpkt"];
2331--7656[label="0.00395257;1pkt 1fpkt"];
2331--7884[label="0.00395257;1pkt 1fpkt"];
2331--8171[label="0.00763359;1pkt 1fpkt"];
2331--8737[label="0.00395257;1pkt 1fpkt"];
2331--8772[label="0.00531915;1pkt 1fpkt"];
2331--8964[label="0.00444444;1pkt 1fpkt"];
2331--9260[label="0.00395257;1pkt 1fpkt"];
2331--9406[label="0.00395257;1pkt 1fpkt"];
2485--4123[label="1;1pkt 1fpkt"];
2485--6846[label="1;1pkt 1fpkt"];
2485--8737[label="1;1pkt 1fpkt"];
2668--4123[label="0.5;1pkt 1fpkt"];
2668--6846[label="0.5;1pkt 1fpkt"];
2668--8737[label="0.5;1pkt 1fpkt"];
2687--4123[label="1;1pkt 1fpkt"];
2687--6846[label="1;1pkt 1fpkt"];
2687--8737[label="1;1pkt 1fpkt"];
4076--6810[label="1;23pkt 23fpkt"];
4076--8711[label="1;23pkt 23fpkt"];
4123--6846[label="1;622pkt 622fpkt"];
4123--8737[label="1;623pkt 623fpkt"];
5600--7884[label="1;324pkt 324fpkt"];
5600--9406[label="1;325pkt 325fpkt"];
6810--8711[label="1;23pkt 23fpkt"];
6846--8737[label="1;622pkt 622fpkt"];
7884--9406[label="1;324pkt 324fpkt"];
</description>
    <slice>
      <filter src_ip="128.231.111.64"/>
      <filter src_ip="128.231.111.67"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1144[label="82.174.49.117;s;6pkt 6fpkt", shape=diamond, color=yellow];
4719[label="82.174.49.117;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7264[label="82.174.49.117;5pkt 5fpkt", shape=invtriangle, color=brown];
9008[label="82.174.49.117;5pkt 5fpkt", shape=invhouse, color=bisque];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.174.49.117:7188, 147.13.230.148:*}[66.6667%]&lt;BR/&gt;{82.174.49.117:*, 147.13.230.148:7617}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7188: (30.9524%)&lt;BR/&gt; 7617: (19.0476%)&lt;BR/&gt; 2294: (9.52381%)&lt;BR/&gt; 2277: (9.52381%)&lt;BR/&gt; 1752: (9.52381%)&gt;];
}
1144--1826[label="1;6pkt 6fpkt"];
1144--4719[label="1;5pkt 5fpkt"];
1144--7264[label="1;5pkt 5fpkt"];
1144--9008[label="1;5pkt 5fpkt"];
4719--7264[label="1;5pkt 5fpkt"];
4719--9008[label="1;5pkt 5fpkt"];
7264--9008[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.148" src_ip="82.174.49.117" src_port="7188"/>
      <filter dst_ip="147.13.230.148" dst_port="7617" src_ip="82.174.49.117"/>
    </slice>
    <from sec="1144126833" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
182[label="195.89.106.147;s;100pkt 100fpkt", shape=diamond, color=yellow];
1217[label="33.70.27.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
1841[label="221.50.32.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
1850[label="210.107.147.168;d;5pkt 5fpkt", shape=diamond, color=yellow];
1897[label="192.18.122.76;d;3pkt 3fpkt", shape=diamond, color=yellow];
2702[label="195.89.106.147;s;36pkt 36fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.106.147:0, *:0}[35.5769%]&lt;BR/&gt;{195.89.106.147:*, *:80}[24.0385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (34.9315%)&lt;BR/&gt; 80: (13.6986%)&lt;BR/&gt; 32768: (7.53425%)&lt;BR/&gt; 53: (7.53425%)&lt;BR/&gt; 17996: (6.50685%)&gt;];
}
182--1217[label="1;1pkt 1fpkt"];
182--1818[label="0.0126582;1pkt 1fpkt"];
182--1841[label="1;1pkt 1fpkt"];
182--1850[label="0.2;1pkt 1fpkt"];
182--1897[label="1;3pkt 3fpkt"];
182--2573[label="0.208333;10pkt 10fpkt"];
182--2702[label="1;36pkt 36fpkt"];
182--3290[label="0.02;2pkt 2fpkt"];
182--3295[label="0.03;3pkt 3fpkt"];
182--3296[label="0.03;3pkt 3fpkt"];
1217--2702[label="1;1pkt 1fpkt"];
1841--2702[label="1;1pkt 1fpkt"];
1850--2702[label="0.2;1pkt 1fpkt"];
1850--3936[label="0.8;4pkt 4fpkt"];
1850--6715[label="0.8;4pkt 4fpkt"];
1897--2702[label="0.333333;1pkt 1fpkt"];
1897--3296[label="0.333333;1pkt 1fpkt"];
2702--3290[label="0.0555556;2pkt 2fpkt"];
2702--3295[label="0.0555556;2pkt 2fpkt"];
2702--3296[label="0.0277778;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="195.89.106.147"/>
      <filter src_ip="195.89.106.147"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1767[label="38.53.165.153;s;25pkt 25fpkt", shape=diamond, color=yellow];
5145[label="38.53.165.153;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7565[label="38.53.165.153;1pkt 1fpkt", shape=invtriangle, color=brown];
9199[label="38.53.165.153;1pkt 1fpkt", shape=invhouse, color=bisque];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.165.153:995, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 1330: (6.89655%)&lt;BR/&gt; 60089: (1.72414%)&lt;BR/&gt; 59532: (1.72414%)&lt;BR/&gt; 55956: (1.72414%)&gt;];
}
1767--1858[label="0.08;2pkt 2fpkt"];
1767--2174[label="0.125;1pkt 1fpkt"];
1767--2505[label="0.04;1pkt 1fpkt"];
1767--5145[label="0.5;1pkt 1fpkt"];
1767--7565[label="1;1pkt 1fpkt"];
1767--9199[label="1;1pkt 1fpkt"];
5145--7565[label="1;1pkt 1fpkt"];
5145--9199[label="1;1pkt 1fpkt"];
7565--9199[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="38.53.165.153" src_port="995"/>
    </slice>
    <from sec="1144127132" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1331[label="147.13.71.56;d;192pkt 192fpkt", shape=diamond, color=yellow];
1456[label="83.129.27.93;s;2pkt 2fpkt", shape=diamond, color=yellow];
4819[label="213.162.167.129;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4853[label="32.136.179.131;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7341[label="213.162.167.129;3pkt 3fpkt", shape=invtriangle, color=brown];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.13.71.56:49753}[78.3186%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49753: (38.7712%)&lt;BR/&gt; 443: (8.68644%)&lt;BR/&gt; 80: (1.90678%)&lt;BR/&gt; 16886: (0.635593%)&lt;BR/&gt; 14782: (0.635593%)&gt;];
}
1331--1456[label="1;2pkt 2fpkt"];
1331--1880[label="0.0434783;1pkt 1fpkt"];
1331--3292[label="0.00520833;1pkt 1fpkt"];
1331--3303[label="0.00520833;1pkt 1fpkt"];
1331--4138[label="1;4pkt 4fpkt"];
1331--4819[label="1;4pkt 4fpkt"];
1331--4853[label="0.0285714;1pkt 1fpkt"];
1331--5609[label="0.0149254;1pkt 1fpkt"];
1331--6858[label="1;3pkt 3fpkt"];
1331--7341[label="1;3pkt 3fpkt"];
1331--8744[label="1;3pkt 3fpkt"];
4819--7341[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.71.56" dst_port="49753"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
874[label="83.146.148.74;s;2100pkt 2100fpkt", shape=diamond, color=yellow];
2492[label="132.19.205.88;d;3pkt 3fpkt", shape=diamond, color=yellow];
4260[label="83.146.148.74;2593pkt 2593fpkt", shape=pentagon, color=darkviolet];
6944[label="83.146.148.74;2593pkt 2593fpkt", shape=invtriangle, color=brown];
8800[label="83.146.148.74;2592pkt 2592fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.146.148.74:2868, *:1434}[99.9229%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2868: (49.9899%)&lt;BR/&gt; 1434: (49.9899%)&lt;BR/&gt; 80: (0.0101204%)&lt;BR/&gt; 1269: (0.00506022%)&lt;BR/&gt; 1266: (0.00506022%)&gt;];
}
874--1892[label="0.0227273;1pkt 1fpkt"];
874--2174[label="0.125;1pkt 1fpkt"];
874--2492[label="0.333333;1pkt 1fpkt"];
874--4260[label="1;2100pkt 2100fpkt"];
874--6944[label="1;2100pkt 2100fpkt"];
874--8800[label="0.999524;2099pkt 2099fpkt"];
2492--4260[label="0.333333;1pkt 1fpkt"];
2492--6944[label="0.333333;1pkt 1fpkt"];
2492--8800[label="0.333333;1pkt 1fpkt"];
4260--6944[label="1;2593pkt 2593fpkt"];
4260--8800[label="1;2592pkt 2592fpkt"];
6944--8800[label="1;2592pkt 2592fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.146.148.74" src_port="2868"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
565[label="132.19.138.86;s;11pkt 11fpkt", shape=diamond, color=yellow];
4308[label="132.19.44.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4412[label="132.19.138.86;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7412[label="132.19.69.136;1pkt 1fpkt", shape=invtriangle, color=brown];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.138.86:80, *:*}[63.1579%]&lt;BR/&gt;{132.19.138.86:*, 38.220.245.215:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2759%)&lt;BR/&gt; 59408: (3.44828%)&lt;BR/&gt; 57762: (3.44828%)&lt;BR/&gt; 55323: (3.44828%)&lt;BR/&gt; 41349: (3.44828%)&gt;];
}
565--1095[label="0.363636;4pkt 4fpkt"];
565--1193[label="0.0909091;1pkt 1fpkt"];
565--4412[label="0.909091;10pkt 10fpkt"];
4308--6978[label="1;1pkt 1fpkt"];
7412--9099[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.138.86" src_port="80"/>
      <filter dst_ip="38.220.245.215" dst_port="80" src_ip="132.19.138.86"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
1839[label="53.130.196.239;d;9pkt 9fpkt", shape=diamond, color=yellow];
1907[label="128.28.116.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.194.215:22, 53.130.196.239:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (40%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 38620: (5%)&lt;BR/&gt; 37807: (5%)&lt;BR/&gt; 36954: (5%)&gt;];
}
1839--1907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="53.130.196.239" src_ip="128.28.194.215" src_port="22"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
1213[label="221.196.153.165;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.225.10:34060, 221.196.153.165:80}[33.3333%]&lt;BR/&gt;{132.19.225.10:34061, 221.196.153.165:80}[33.3333%]&lt;BR/&gt;{132.19.225.10:34062, 221.196.153.165:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34062: (16.6667%)&lt;BR/&gt; 34061: (16.6667%)&lt;BR/&gt; 34060: (16.6667%)&gt;];
}
1213--1666[label="1;3pkt 3fpkt"];
1213--3138[label="1;3pkt 3fpkt"];
1213--3462[label="1;3pkt 3fpkt"];
1213--6399[label="1;3pkt 3fpkt"];
1213--8453[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="221.196.153.165" dst_port="80" src_ip="132.19.225.10" src_port="34062"/>
      <filter dst_ip="221.196.153.165" dst_port="80" src_ip="132.19.225.10" src_port="34061"/>
      <filter dst_ip="221.196.153.165" dst_port="80" src_ip="132.19.225.10" src_port="34060"/>
    </slice>
    <from sec="1144127070" usec="0"/>
    <to sec="1144127111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1809[label="164.23.136.233;s;4pkt 4fpkt", shape=diamond, color=yellow];
6084[label="164.23.136.233;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8233[label="164.23.136.233;3pkt 3fpkt", shape=invtriangle, color=brown];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.136.233:25, 213.49.122.158:4347}[25%]&lt;BR/&gt;{164.23.136.233:25, 37.152.46.181:49930}[25%]&lt;BR/&gt;{164.23.136.233:25, 32.136.156.217:38071}[25%]&lt;BR/&gt;{164.23.136.233:25, 193.65.189.229:4296}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 49930: (13.6364%)&lt;BR/&gt; 4347: (13.6364%)&lt;BR/&gt; 4296: (13.6364%)&lt;BR/&gt; 38071: (9.09091%)&gt;];
}
1809--1956[label="0.5;1pkt 1fpkt"];
1809--6084[label="1;4pkt 4fpkt"];
1809--8233[label="1;3pkt 3fpkt"];
6084--8233[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.65.189.229" dst_port="4296" src_ip="164.23.136.233" src_port="25"/>
      <filter dst_ip="32.136.156.217" dst_port="38071" src_ip="164.23.136.233" src_port="25"/>
      <filter dst_ip="37.152.46.181" dst_port="49930" src_ip="164.23.136.233" src_port="25"/>
      <filter dst_ip="213.49.122.158" dst_port="4347" src_ip="164.23.136.233" src_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1320[label="128.28.217.143;s;113pkt 113fpkt", shape=diamond, color=yellow];
2871[label="128.28.217.143;s;49pkt 49fpkt", shape=hexagon, color=black];
5021[label="128.28.217.143;135pkt 135fpkt", shape=pentagon, color=darkviolet];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.217.143:*, *:25}[97.7941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9899%)&lt;BR/&gt; 113: (1.0101%)&lt;BR/&gt; 52077: (0.505051%)&lt;BR/&gt; 52069: (0.505051%)&lt;BR/&gt; 52041: (0.505051%)&gt;];
}
1320--1967[label="0.105263;2pkt 2fpkt"];
1320--1970[label="0.111111;4pkt 4fpkt"];
1320--2246[label="0.388889;7pkt 7fpkt"];
1320--2607[label="0.416667;10pkt 10fpkt"];
1320--2871[label="1;49pkt 49fpkt"];
1320--5021[label="0.99115;112pkt 112fpkt"];
2871--5021[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="128.28.217.143"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
870[label="132.19.217.20;d;234pkt 234fpkt", shape=diamond, color=yellow];
1480[label="194.133.176.0;s;132pkt 132fpkt", shape=diamond, color=yellow];
3338[label="194.236.97.2;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3593[label="214.201.237.19;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4607[label="218.182.161.105;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4635[label="39.78.16.108;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5551[label="201.114.136.188;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5664[label="41.25.103.197;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6308[label="194.236.97.2;5pkt 5fpkt", shape=invtriangle, color=brown];
7184[label="218.182.161.105;13pkt 13fpkt", shape=invtriangle, color=brown];
7203[label="39.78.16.108;5pkt 5fpkt", shape=invtriangle, color=brown];
7846[label="201.114.136.188;8pkt 8fpkt", shape=invtriangle, color=brown];
8396[label="194.236.97.2;5pkt 5fpkt", shape=invhouse, color=bisque];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.133.176.0:*, 132.19.217.20:80}[49.6241%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51054: (0.434783%)&lt;BR/&gt; 33962: (0.326087%)&lt;BR/&gt; 33961: (0.326087%)&lt;BR/&gt; 33840: (0.326087%)&gt;];
}
870--1480[label="1;132pkt 132fpkt"];
870--2021[label="0.533333;8pkt 8fpkt"];
870--3296[label="0.0042735;1pkt 1fpkt"];
870--3338[label="0.2;1pkt 1fpkt"];
870--3593[label="1;17pkt 17fpkt"];
870--3766[label="0.0909091;1pkt 1fpkt"];
870--4127[label="0.0769231;1pkt 1fpkt"];
870--4607[label="0.0769231;1pkt 1fpkt"];
870--4635[label="0.833333;5pkt 5fpkt"];
870--5067[label="0.823529;14pkt 14fpkt"];
870--5551[label="0.111111;1pkt 1fpkt"];
870--5595[label="0.0833333;1pkt 1fpkt"];
870--5664[label="0.125;1pkt 1fpkt"];
870--6308[label="0.2;1pkt 1fpkt"];
870--6600[label="0.0909091;1pkt 1fpkt"];
870--6849[label="0.0769231;1pkt 1fpkt"];
870--7184[label="0.0769231;1pkt 1fpkt"];
870--7203[label="0.8;4pkt 4fpkt"];
870--7846[label="0.125;1pkt 1fpkt"];
870--7881[label="0.0909091;1pkt 1fpkt"];
870--8396[label="0.2;1pkt 1fpkt"];
870--8739[label="0.0769231;1pkt 1fpkt"];
870--9404[label="0.0833333;1pkt 1fpkt"];
3338--6308[label="1;5pkt 5fpkt"];
3338--8396[label="1;5pkt 5fpkt"];
4607--7184[label="1;13pkt 13fpkt"];
4635--7203[label="1;5pkt 5fpkt"];
5551--7846[label="1;8pkt 8fpkt"];
6308--8396[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.217.20" dst_port="80" src_ip="194.133.176.0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1316[label="161.223.8.109;s;393pkt 393fpkt", shape=diamond, color=yellow];
4644[label="161.223.8.109;429pkt 429fpkt", shape=pentagon, color=darkviolet];
7208[label="161.223.8.109;430pkt 430fpkt", shape=invtriangle, color=brown];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.8.109:80, *:*}[99.7674%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8802%)&lt;BR/&gt; 60891: (0.239617%)&lt;BR/&gt; 54582: (0.239617%)&lt;BR/&gt; 1902: (0.239617%)&lt;BR/&gt; 1762: (0.239617%)&gt;];
}
1316--2043[label="0.0153846;1pkt 1fpkt"];
1316--3288[label="0.0610687;24pkt 24fpkt"];
1316--3292[label="0.0814249;32pkt 32fpkt"];
1316--3303[label="0.0814249;32pkt 32fpkt"];
1316--4644[label="0.997455;392pkt 392fpkt"];
1316--7208[label="1;393pkt 393fpkt"];
4644--7208[label="1;429pkt 429fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.8.109" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="83.141.172.190"/>
      <from sec="1144127232" usec="0"/>
      <to sec="1144127450" usec="0"/>
    </slice>
    <from sec="1144127232" usec="0"/>
    <to sec="1144127450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
64[label="83.216.233.150s;1pkt 1fpkt", shape=rectangle, color=red];
2056[label="33.84.187.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
5095[label="195.89.105.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7534[label="195.89.105.150;5pkt 5fpkt", shape=invtriangle, color=brown];
9180[label="195.89.105.150;4pkt 4fpkt", shape=invhouse, color=bisque];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.105.150:32768, 195.14.208.18:53}[20%]&lt;BR/&gt;{195.89.105.150:42175, 210.55.131.67:80}[20%]&lt;BR/&gt;{195.89.105.150:42179, 199.10.30.128:80}[20%]&lt;BR/&gt;{195.89.105.150:41706, 33.84.187.219:80}[20%]&lt;BR/&gt;{195.89.105.150:42176, 199.10.30.236:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 41706: (16.6667%)&lt;BR/&gt; 42179: (10%)&lt;BR/&gt; 42176: (10%)&lt;BR/&gt; 42175: (10%)&gt;];
}
64--418[label="1;1pkt 1fpkt"];
64--2056[label="1;1pkt 1fpkt"];
64--3296[label="1;1pkt 1fpkt"];
64--5095[label="1;1pkt 1fpkt"];
64--7534[label="1;1pkt 1fpkt"];
64--9180[label="1;1pkt 1fpkt"];
2056--3296[label="1;1pkt 1fpkt"];
2056--5095[label="1;1pkt 1fpkt"];
2056--7534[label="1;1pkt 1fpkt"];
2056--9180[label="1;1pkt 1fpkt"];
5095--7534[label="1;4pkt 4fpkt"];
5095--9180[label="1;4pkt 4fpkt"];
7534--9180[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.10.30.236" dst_port="80" src_ip="195.89.105.150" src_port="42176"/>
      <filter dst_ip="33.84.187.219" dst_port="80" src_ip="195.89.105.150" src_port="41706"/>
      <filter dst_ip="199.10.30.128" dst_port="80" src_ip="195.89.105.150" src_port="42179"/>
      <filter dst_ip="210.55.131.67" dst_port="80" src_ip="195.89.105.150" src_port="42175"/>
      <filter dst_ip="195.14.208.18" dst_port="53" src_ip="195.89.105.150" src_port="32768"/>
    </slice>
    <from sec="1144127233" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
2061[label="39.34.9.68;s;28pkt 28fpkt", shape=diamond, color=yellow];
2062[label="132.19.205.42;d;28pkt 28fpkt", shape=diamond, color=yellow];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.34.9.68:80, 132.19.205.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49305: (1.78571%)&lt;BR/&gt; 49304: (1.78571%)&lt;BR/&gt; 49303: (1.78571%)&lt;BR/&gt; 49302: (1.78571%)&gt;];
}
2061--2062[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.205.42" src_ip="39.34.9.68" src_port="80"/>
    </slice>
    <from sec="1144127252" usec="0"/>
    <to sec="1144127373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
1942[label="194.212.151.159;d;29pkt 29fpkt", shape=diamond, color=yellow];
2066[label="83.150.6.174;s;54pkt 54fpkt", shape=diamond, color=yellow];
2281[label="194.212.151.158;d;14pkt 14fpkt", shape=diamond, color=yellow];
5412[label="83.150.6.174;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.150.6.174:*, 194.212.151.159:1755}[50%]&lt;BR/&gt;{83.150.6.174:*, 194.212.151.158:1755}[46.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 3375: (0.993377%)&lt;BR/&gt; 3373: (0.993377%)&lt;BR/&gt; 3358: (0.993377%)&lt;BR/&gt; 3357: (0.993377%)&gt;];
}
1942--2066[label="0.931034;27pkt 27fpkt"];
1942--5412[label="0.931034;27pkt 27fpkt"];
2066--2281[label="1;14pkt 14fpkt"];
2066--5412[label="1;54pkt 54fpkt"];
2281--5412[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.151.159" dst_port="1755" src_ip="83.150.6.174"/>
      <filter dst_ip="194.212.151.158" dst_port="1755" src_ip="83.150.6.174"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="41.25.169.62"/>
      <from sec="1144127260" usec="0"/>
      <to sec="1144127349" usec="0"/>
    </slice>
    <from sec="1144127260" usec="0"/>
    <to sec="1144127349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="41.25.169.62"/>
      <from sec="1144127260" usec="0"/>
      <to sec="1144127349" usec="0"/>
    </slice>
    <from sec="1144127260" usec="0"/>
    <to sec="1144127349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
5158[label="106.109.162.154;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5744[label="106.109.162.203;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7577[label="106.109.162.154;23pkt 23fpkt", shape=invtriangle, color=brown];
7991[label="106.109.162.203;26pkt 26fpkt", shape=invtriangle, color=brown];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.109.162.203:80, *:*}[53.0612%]&lt;BR/&gt;{106.109.162.154:443, *:*}[40.8163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.5918%)&lt;BR/&gt; 443: (20.4082%)&lt;BR/&gt; 60054: (1.02041%)&lt;BR/&gt; 57589: (1.02041%)&lt;BR/&gt; 57588: (1.02041%)&gt;];
}
5158--7577[label="1;23pkt 23fpkt"];
5158--9207[label="1;23pkt 23fpkt"];
5744--7991[label="1;26pkt 26fpkt"];
5744--9471[label="1;26pkt 26fpkt"];
7577--9207[label="1;23pkt 23fpkt"];
7991--9471[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="106.109.162.203" src_port="80"/>
      <filter src_ip="106.109.162.154" src_port="443"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
2033[label="36.219.130.165;s;3pkt 3fpkt", shape=diamond, color=yellow];
2079[label="161.223.210.101;d;7pkt 7fpkt", shape=diamond, color=yellow];
5294[label="36.219.130.165;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.219.130.164:80, 161.223.210.101:*}[62.5%]&lt;BR/&gt;{36.219.130.165:80, 161.223.210.101:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50187: (11.5385%)&lt;BR/&gt; 50186: (11.5385%)&lt;BR/&gt; 63656: (7.69231%)&lt;BR/&gt; 50189: (3.84615%)&gt;];
}
2033--2079[label="0.666667;2pkt 2fpkt"];
2033--5294[label="1;3pkt 3fpkt"];
2079--3292[label="0.142857;1pkt 1fpkt"];
2079--3303[label="0.142857;1pkt 1fpkt"];
2079--5294[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.210.101" src_ip="36.219.130.164" src_port="80"/>
      <filter dst_ip="161.223.210.101" src_ip="36.219.130.165" src_port="80"/>
    </slice>
    <from sec="1144127171" usec="0"/>
    <to sec="1144127478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
1828[label="132.19.249.31;s;2pkt 2fpkt", shape=diamond, color=yellow];
2093[label="221.235.177.131;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.249.31:6970, 221.235.177.131:26166}[50%]&lt;BR/&gt;{132.19.249.31:32770, 221.235.177.131:554}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32770: (25%)&lt;BR/&gt; 26166: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1828--2093[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="221.235.177.131" dst_port="554" src_ip="132.19.249.31" src_port="32770"/>
      <filter dst_ip="221.235.177.131" dst_port="26166" src_ip="132.19.249.31" src_port="6970"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1554[label="83.144.26.116;s;4pkt 4fpkt", shape=diamond, color=yellow];
2112[label="147.13.230.0;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.144.26.116:2002, 147.13.230.0:*}[33.3333%]&lt;BR/&gt;{83.144.26.116:3400, 147.13.230.0:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3400: (20%)&lt;BR/&gt; 2002: (20%)&lt;BR/&gt; 2042: (10%)&lt;BR/&gt; 2041: (10%)&lt;BR/&gt; 2036: (10%)&gt;];
}
1554--2112[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.0" src_ip="83.144.26.116" src_port="3400"/>
      <filter dst_ip="147.13.230.0" src_ip="83.144.26.116" src_port="2002"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
660[label="205.137.225.232;s;79pkt 79fpkt", shape=diamond, color=yellow];
2130[label="164.23.131.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
3238[label="205.137.225.232;s;79pkt 79fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.137.225.232:6667, 164.23.142.25:*}[71.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (42.8125%)&lt;BR/&gt; 6665: (1.875%)&lt;BR/&gt; 113: (1.875%)&lt;BR/&gt; 6666: (1.25%)&lt;BR/&gt; 1712: (0.9375%)&gt;];
}
660--1636[label="0.721519;57pkt 57fpkt"];
660--2130[label="0.5;1pkt 1fpkt"];
660--3238[label="1;79pkt 79fpkt"];
2130--2327[label="0.5;1pkt 1fpkt"];
2130--3182[label="0.5;1pkt 1fpkt"];
2130--3238[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.142.25" src_ip="205.137.225.232" src_port="6667"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.226.98.221"/>
      <from sec="1144126806" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
1174[label="210.169.154.116;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.54.129:2135, 210.169.154.116:80}[50%]&lt;BR/&gt;{161.223.54.129:2136, 210.169.154.116:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2136: (25%)&lt;BR/&gt; 2135: (25%)&gt;];
}
1174--1177[label="1;2pkt 2fpkt"];
1174--2883[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.169.154.116" dst_port="80" src_ip="161.223.54.129" src_port="2136"/>
      <filter dst_ip="210.169.154.116" dst_port="80" src_ip="161.223.54.129" src_port="2135"/>
    </slice>
    <from sec="1144126891" usec="0"/>
    <to sec="1144127426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2640[label="210.107.147.177;s;20pkt 20fpkt", shape=diamond, color=yellow];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.107.147.177:80, 195.89.105.214:*}[55%]&lt;BR/&gt;{210.107.147.177:80, 195.89.105.215:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60943: (2.5%)&lt;BR/&gt; 60623: (2.5%)&lt;BR/&gt; 57628: (2.5%)&lt;BR/&gt; 57412: (2.5%)&gt;];
}
2640--3292[label="0.35;7pkt 7fpkt"];
2640--3303[label="0.35;7pkt 7fpkt"];
2640--5446[label="0.95;19pkt 19fpkt"];
2640--7769[label="0.95;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" src_ip="210.107.147.177" src_port="80"/>
      <filter dst_ip="195.89.105.215" src_ip="210.107.147.177" src_port="80"/>
    </slice>
    <from sec="1144127359" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1649[label="38.53.165.154;s;33pkt 33fpkt", shape=diamond, color=yellow];
5160[label="38.53.165.154;33pkt 33fpkt", shape=pentagon, color=darkviolet];
7579[label="38.53.165.154;33pkt 33fpkt", shape=invtriangle, color=brown];
9208[label="38.53.165.154;33pkt 33fpkt", shape=invhouse, color=bisque];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.165.154:995, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 64972: (1.51515%)&lt;BR/&gt; 64952: (1.51515%)&lt;BR/&gt; 59957: (1.51515%)&lt;BR/&gt; 53313: (1.51515%)&gt;];
}
1649--2241[label="0.111111;2pkt 2fpkt"];
1649--5160[label="1;33pkt 33fpkt"];
1649--7579[label="1;33pkt 33fpkt"];
1649--9208[label="1;33pkt 33fpkt"];
5160--7579[label="1;33pkt 33fpkt"];
5160--9208[label="1;33pkt 33fpkt"];
7579--9208[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter src_ip="38.53.165.154" src_port="995"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1719[label="128.202.100.225;s;119pkt 119fpkt", shape=diamond, color=yellow];
2252[label="41.25.173.218;d;2pkt 2fpkt", shape=diamond, color=yellow];
3149[label="128.202.100.225;s;93pkt 93fpkt", shape=hexagon, color=black];
4189[label="132.19.218.69;72pkt 72fpkt", shape=pentagon, color=darkviolet];
6002[label="128.202.100.225;128pkt 128fpkt", shape=pentagon, color=darkviolet];
8170[label="128.202.100.225;127pkt 127fpkt", shape=invtriangle, color=brown];
9595[label="128.202.100.225;127pkt 127fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.100.225:80, *:*}[64%]&lt;BR/&gt;{132.19.218.69:80, *:*}[26.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5778%)&lt;BR/&gt; 53: (1.64671%)&lt;BR/&gt; 54561: (0.449102%)&lt;BR/&gt; 62039: (0.374251%)&lt;BR/&gt; 60873: (0.374251%)&gt;];
}
1719--2252[label="0.5;1pkt 1fpkt"];
1719--3149[label="1;93pkt 93fpkt"];
1719--3292[label="0.0672269;8pkt 8fpkt"];
1719--3303[label="0.0672269;8pkt 8fpkt"];
1719--6002[label="1;119pkt 119fpkt"];
1719--8170[label="0.991597;118pkt 118fpkt"];
1719--9595[label="0.991597;118pkt 118fpkt"];
2252--3149[label="0.5;1pkt 1fpkt"];
2252--3292[label="0.5;1pkt 1fpkt"];
2252--3303[label="0.5;1pkt 1fpkt"];
2252--4189[label="0.5;1pkt 1fpkt"];
2252--6002[label="0.5;1pkt 1fpkt"];
2252--8170[label="0.5;1pkt 1fpkt"];
2252--9595[label="0.5;1pkt 1fpkt"];
3149--3292[label="0.0752688;7pkt 7fpkt"];
3149--3303[label="0.0752688;7pkt 7fpkt"];
3149--6002[label="1;93pkt 93fpkt"];
3149--8170[label="1;93pkt 93fpkt"];
3149--9595[label="1;93pkt 93fpkt"];
6002--8170[label="1;127pkt 127fpkt"];
6002--9595[label="1;127pkt 127fpkt"];
8170--9595[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter src_ip="128.202.100.225" src_port="80"/>
      <filter src_ip="132.19.218.69" src_port="80"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1558[label="161.223.213.157;s;37pkt 37fpkt", shape=diamond, color=yellow];
2009[label="132.19.32.90;s;6pkt 6fpkt", shape=diamond, color=yellow];
2260[label="41.25.173.67;d;3pkt 3fpkt", shape=diamond, color=yellow];
3218[label="132.19.32.90;s;5pkt 5fpkt", shape=hexagon, color=black];
5197[label="161.223.213.157;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.213.157:80, 216.196.85.181:*}[23.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58134: (1.66667%)&lt;BR/&gt; 52699: (1.66667%)&lt;BR/&gt; 60265: (1.11111%)&lt;BR/&gt; 60256: (1.11111%)&gt;];
}
1558--2260[label="0.333333;1pkt 1fpkt"];
1558--3288[label="0.162162;6pkt 6fpkt"];
1558--3292[label="0.0810811;3pkt 3fpkt"];
1558--3303[label="0.0810811;3pkt 3fpkt"];
1558--5197[label="0.972973;36pkt 36fpkt"];
2009--2260[label="0.333333;1pkt 1fpkt"];
2009--3218[label="1;5pkt 5fpkt"];
2009--3288[label="0.166667;1pkt 1fpkt"];
2009--3292[label="0.166667;1pkt 1fpkt"];
2009--3303[label="0.166667;1pkt 1fpkt"];
2260--3218[label="0.333333;1pkt 1fpkt"];
2260--5197[label="0.333333;1pkt 1fpkt"];
3218--3288[label="0.2;1pkt 1fpkt"];
3218--3292[label="0.2;1pkt 1fpkt"];
3218--3303[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.196.85.181" src_ip="161.223.213.157" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
2088[label="128.28.217.54;s;125pkt 125fpkt", shape=diamond, color=yellow];
4002[label="128.28.217.54;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6763[label="128.28.217.54;164pkt 164fpkt", shape=invtriangle, color=brown];
8680[label="128.28.217.54;165pkt 165fpkt", shape=invhouse, color=bisque];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.217.54:80, 196.206.212.16:*}[36.1446%]&lt;BR/&gt;{128.28.217.54:80, 216.196.85.182:*}[22.8916%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6769%)&lt;BR/&gt; 61042: (0.323102%)&lt;BR/&gt; 60861: (0.323102%)&lt;BR/&gt; 60642: (0.323102%)&lt;BR/&gt; 60538: (0.323102%)&gt;];
}
2088--2265[label="0.296;37pkt 37fpkt"];
2088--3288[label="0.032;4pkt 4fpkt"];
2088--3292[label="0.112;14pkt 14fpkt"];
2088--3303[label="0.112;14pkt 14fpkt"];
2088--4002[label="0.992;124pkt 124fpkt"];
2088--6763[label="0.984;123pkt 123fpkt"];
2088--8680[label="0.992;124pkt 124fpkt"];
4002--6763[label="1;164pkt 164fpkt"];
4002--8680[label="1;165pkt 165fpkt"];
6763--8680[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.212.16" src_ip="128.28.217.54" src_port="80"/>
      <filter dst_ip="216.196.85.182" src_ip="128.28.217.54" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
460[label="132.19.158.183;s;103pkt 103fpkt", shape=diamond, color=yellow];
491[label="39.64.81.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
2085[label="164.23.161.253;s;52pkt 52fpkt", shape=diamond, color=yellow];
2277[label="36.172.50.25;d;9pkt 9fpkt", shape=diamond, color=yellow];
2450[label="164.23.225.148;s;10pkt 10fpkt", shape=diamond, color=yellow];
2876[label="132.19.158.183;s;78pkt 78fpkt", shape=hexagon, color=black];
5079[label="164.23.225.148;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5498[label="132.19.158.183;110pkt 110fpkt", shape=pentagon, color=darkviolet];
7808[label="132.19.158.183;109pkt 109fpkt", shape=invtriangle, color=brown];
9356[label="132.19.158.183;109pkt 109fpkt", shape=invhouse, color=bisque];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.158.183:25, *:*}[58.2888%]&lt;BR/&gt;{164.23.161.253:25, *:*}[27.8075%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.9168%)&lt;BR/&gt; 18003: (0.499168%)&lt;BR/&gt; 63538: (0.415973%)&lt;BR/&gt; 62751: (0.415973%)&lt;BR/&gt; 61264: (0.415973%)&gt;];
}
460--491[label="1;1pkt 1fpkt"];
460--2277[label="0.111111;1pkt 1fpkt"];
460--2876[label="1;78pkt 78fpkt"];
460--5498[label="1;103pkt 103fpkt"];
460--7808[label="0.990291;102pkt 102fpkt"];
460--9356[label="0.990291;102pkt 102fpkt"];
491--2876[label="1;1pkt 1fpkt"];
491--5498[label="1;1pkt 1fpkt"];
491--7808[label="1;1pkt 1fpkt"];
491--9356[label="1;1pkt 1fpkt"];
2085--2277[label="0.111111;1pkt 1fpkt"];
2277--2450[label="0.222222;2pkt 2fpkt"];
2277--3031[label="0.111111;1pkt 1fpkt"];
2277--4797[label="0.111111;1pkt 1fpkt"];
2277--5079[label="0.222222;2pkt 2fpkt"];
2277--5498[label="0.111111;1pkt 1fpkt"];
2277--7324[label="0.111111;1pkt 1fpkt"];
2277--7808[label="0.111111;1pkt 1fpkt"];
2277--9046[label="0.111111;1pkt 1fpkt"];
2277--9356[label="0.111111;1pkt 1fpkt"];
2450--5079[label="1;10pkt 10fpkt"];
2876--5498[label="1;78pkt 78fpkt"];
2876--7808[label="0.987179;77pkt 77fpkt"];
2876--9356[label="0.987179;77pkt 77fpkt"];
5498--7808[label="1;109pkt 109fpkt"];
5498--9356[label="1;109pkt 109fpkt"];
7808--9356[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.158.183" src_port="25"/>
      <filter src_ip="164.23.161.253" src_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
2016[label="161.223.232.76;d;8pkt 8fpkt", shape=diamond, color=yellow];
2289[label="32.136.164.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.173.48:*, 161.223.232.76:80}[22.2222%]&lt;BR/&gt;{32.136.164.21:*, *:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59670: (10%)&lt;BR/&gt; 56340: (5%)&lt;BR/&gt; 51252: (5%)&lt;BR/&gt; 49700: (5%)&gt;];
}
2016--2289[label="0.5;1pkt 1fpkt"];
2016--3731[label="0.125;1pkt 1fpkt"];
2016--4775[label="0.142857;1pkt 1fpkt"];
2016--7307[label="0.142857;1pkt 1fpkt"];
2016--9034[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="32.136.164.21"/>
      <filter dst_ip="161.223.232.76" dst_port="80" src_ip="41.25.173.48"/>
    </slice>
    <from sec="1144127104" usec="0"/>
    <to sec="1144127428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
2293[label="221.110.112.152;d;151pkt 151fpkt", shape=diamond, color=yellow];
2294[label="132.19.99.18;s;186pkt 186fpkt", shape=diamond, color=yellow];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.99.18:*, 221.110.112.152:80}[81.1828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4177: (0.296736%)&lt;BR/&gt; 4176: (0.296736%)&lt;BR/&gt; 4169: (0.296736%)&lt;BR/&gt; 4168: (0.296736%)&gt;];
}
2293--2294[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_ip="221.110.112.152" dst_port="80" src_ip="132.19.99.18"/>
    </slice>
    <from sec="1144127309" usec="0"/>
    <to sec="1144127556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
2303[label="36.81.134.32;d;36pkt 36fpkt", shape=diamond, color=yellow];
3687[label="132.18.65.26;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.65.26:*, 36.81.134.32:80}[61.0169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1600: (1.05263%)&lt;BR/&gt; 1599: (1.05263%)&lt;BR/&gt; 1598: (1.05263%)&lt;BR/&gt; 1597: (1.05263%)&gt;];
}
2303--3687[label="1;36pkt 36fpkt"];
2303--6555[label="1;36pkt 36fpkt"];
2303--8552[label="1;36pkt 36fpkt"];
3687--6555[label="1;59pkt 59fpkt"];
3687--8552[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="36.81.134.32" dst_port="80" src_ip="132.18.65.26"/>
    </slice>
    <from sec="1144127255" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
630[label="132.18.212.143;s;230pkt 230fpkt", shape=diamond, color=yellow];
1685[label="209.9.10.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
2306[label="204.128.82.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.212.143:23486, *:4672}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23486: (15.9483%)&lt;BR/&gt; 4672: (9.91379%)&lt;BR/&gt; 80: (9.69828%)&lt;BR/&gt; 19646: (1.93966%)&lt;BR/&gt; 19124: (1.72414%)&gt;];
}
630--1685[label="1;1pkt 1fpkt"];
630--2306[label="1;1pkt 1fpkt"];
630--3296[label="0.0391304;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="4672" src_ip="132.18.212.143" src_port="23486"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1752[label="36.189.174.10;s;20pkt 20fpkt", shape=diamond, color=yellow];
2311[label="132.19.192.6;d;9pkt 9fpkt", shape=diamond, color=yellow];
2428[label="161.223.135.51;d;13pkt 13fpkt", shape=diamond, color=yellow];
2988[label="36.189.174.10;s;20pkt 20fpkt", shape=hexagon, color=black];
3459[label="36.189.174.10;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6396[label="36.189.174.10;19pkt 19fpkt", shape=invtriangle, color=brown];
8450[label="36.189.174.10;20pkt 20fpkt", shape=invhouse, color=bisque];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.189.174.10:80, 161.223.135.51:*}[48%]&lt;BR/&gt;{36.189.174.10:80, 132.19.192.6:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1667%)&lt;BR/&gt; 4635: (2.5%)&lt;BR/&gt; 4634: (2.5%)&lt;BR/&gt; 4628: (2.5%)&lt;BR/&gt; 4625: (2.5%)&gt;];
}
1752--2311[label="0.555556;5pkt 5fpkt"];
1752--2428[label="0.923077;12pkt 12fpkt"];
1752--2988[label="1;20pkt 20fpkt"];
1752--3292[label="0.2;4pkt 4fpkt"];
1752--3303[label="0.2;4pkt 4fpkt"];
1752--3459[label="1;19pkt 19fpkt"];
1752--6396[label="1;19pkt 19fpkt"];
1752--8450[label="1;20pkt 20fpkt"];
2311--2988[label="0.555556;5pkt 5fpkt"];
2311--3292[label="0.444444;4pkt 4fpkt"];
2311--3303[label="0.444444;4pkt 4fpkt"];
2311--3459[label="0.555556;5pkt 5fpkt"];
2311--6396[label="0.555556;5pkt 5fpkt"];
2311--8450[label="0.555556;5pkt 5fpkt"];
2428--2988[label="0.923077;12pkt 12fpkt"];
2428--3459[label="0.923077;12pkt 12fpkt"];
2428--6396[label="0.923077;12pkt 12fpkt"];
2428--8450[label="0.923077;12pkt 12fpkt"];
2988--3292[label="0.2;4pkt 4fpkt"];
2988--3303[label="0.2;4pkt 4fpkt"];
2988--3459[label="1;19pkt 19fpkt"];
2988--6396[label="1;19pkt 19fpkt"];
2988--8450[label="1;20pkt 20fpkt"];
3459--6396[label="1;19pkt 19fpkt"];
3459--8450[label="1;19pkt 19fpkt"];
6396--8450[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.135.51" src_ip="36.189.174.10" src_port="80"/>
      <filter dst_ip="132.19.192.6" src_ip="36.189.174.10" src_port="80"/>
    </slice>
    <from sec="1144127075" usec="0"/>
    <to sec="1144127583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.226.98.240"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127538" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
2328[label="164.23.194.150;s;136pkt 136fpkt", shape=diamond, color=yellow];
2343[label="33.121.177.15;d;40pkt 40fpkt", shape=diamond, color=yellow];
4869[label="164.23.192.132;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5104[label="164.23.194.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7538[label="164.23.194.150;2pkt 2fpkt", shape=invtriangle, color=brown];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.192.132:*, *:*}[21.7143%]&lt;BR/&gt;{*:53, *:*}[21.1429%]&lt;BR/&gt;{164.23.194.150:80, 33.121.177.15:*}[20.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.2581%)&lt;BR/&gt; 53: (15.4378%)&lt;BR/&gt; 49152: (6.45161%)&lt;BR/&gt; 25: (2.76498%)&lt;BR/&gt; 44450: (0.691244%)&gt;];
}
2328--2343[label="0.9;36pkt 36fpkt"];
2328--3287[label="0.0147059;2pkt 2fpkt"];
2328--3288[label="0.0514706;7pkt 7fpkt"];
2328--3290[label="0.00735294;1pkt 1fpkt"];
2328--3292[label="0.0955882;13pkt 13fpkt"];
2328--3295[label="0.0147059;2pkt 2fpkt"];
2328--3302[label="0.00735294;1pkt 1fpkt"];
2328--3303[label="0.0955882;13pkt 13fpkt"];
2328--5104[label="1;1pkt 1fpkt"];
2328--7538[label="1;2pkt 2fpkt"];
2343--3288[label="0.075;3pkt 3fpkt"];
2343--3292[label="0.2;8pkt 8fpkt"];
2343--3303[label="0.2;8pkt 8fpkt"];
2343--4869[label="0.0789474;3pkt 3fpkt"];
2343--7376[label="0.0769231;3pkt 3fpkt"];
2343--9077[label="0.0769231;3pkt 3fpkt"];
4869--7376[label="1;38pkt 38fpkt"];
4869--9077[label="1;38pkt 38fpkt"];
5104--7538[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.192.132"/>
      <filter src_port="53"/>
      <filter dst_ip="33.121.177.15" src_ip="164.23.194.150" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0611,2.33757,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
1311[label="210.226.98.192;s;106pkt 106fpkt", shape=diamond, color=yellow];
3035[label="210.226.98.192;s;90pkt 90fpkt", shape=hexagon, color=black];
9401[label="210.226.98.192;2pkt 2fpkt", shape=invhouse, color=bisque];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.192:5050, *:*}[85.0467%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.9192%)&lt;BR/&gt; 20: (4.54545%)&lt;BR/&gt; 23: (3.53535%)&lt;BR/&gt; 1229: (1.0101%)&lt;BR/&gt; 1571: (0.757576%)&gt;];
}
1311--2351[label="0.0222222;1pkt 1fpkt"];
1311--3035[label="1;90pkt 90fpkt"];
1311--9401[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.192" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="195.201.51.246"/>
      <from sec="1144126803" usec="0"/>
      <to sec="1144127626" usec="0"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
2011[label="132.18.99.92;s;92pkt 92fpkt", shape=diamond, color=yellow];
2427[label="36.82.147.213;d;89pkt 89fpkt", shape=diamond, color=yellow];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.99.92:*, 36.82.147.213:80}[96.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3272: (0.552486%)&lt;BR/&gt; 3271: (0.552486%)&lt;BR/&gt; 3269: (0.552486%)&lt;BR/&gt; 3262: (0.552486%)&gt;];
}
2011--2427[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="36.82.147.213" dst_port="80" src_ip="132.18.99.92"/>
    </slice>
    <from sec="1144127064" usec="0"/>
    <to sec="1144127460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
2430[label="128.28.216.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
2431[label="36.106.139.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.139.210:33508, 128.28.216.65:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33508: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
2430--2431[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.216.65" dst_port="8080" src_ip="36.106.139.210" src_port="33508"/>
    </slice>
    <from sec="1144127076" usec="0"/>
    <to sec="1144127542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
2084[label="164.23.161.253;d;39pkt 39fpkt", shape=diamond, color=yellow];
2276[label="164.23.225.148;d;9pkt 9fpkt", shape=diamond, color=yellow];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.72.201.28:*, 164.23.161.253:25}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.875%)&lt;BR/&gt; 80: (2.08333%)&lt;BR/&gt; 0: (2.08333%)&lt;BR/&gt; 64075: (1.04167%)&lt;BR/&gt; 63987: (1.04167%)&gt;];
}
2084--2451[label="0.125;1pkt 1fpkt"];
2084--3296[label="0.0512821;2pkt 2fpkt"];
2084--3318[label="0.0555556;1pkt 1fpkt"];
2084--3345[label="0.0666667;1pkt 1fpkt"];
2084--3671[label="0.0909091;1pkt 1fpkt"];
2084--4455[label="0.0416667;1pkt 1fpkt"];
2084--6297[label="0.0555556;1pkt 1fpkt"];
2084--6314[label="0.0666667;1pkt 1fpkt"];
2084--6544[label="0.0833333;1pkt 1fpkt"];
2084--7081[label="0.0434783;1pkt 1fpkt"];
2084--8400[label="0.0714286;1pkt 1fpkt"];
2084--8889[label="0.0434783;1pkt 1fpkt"];
2276--2451[label="0.25;2pkt 2fpkt"];
2276--2615[label="0.222222;2pkt 2fpkt"];
2276--3578[label="0.222222;2pkt 2fpkt"];
2276--3653[label="0.111111;1pkt 1fpkt"];
2276--3671[label="0.222222;2pkt 2fpkt"];
2276--4395[label="0.111111;1pkt 1fpkt"];
2276--4455[label="0.111111;1pkt 1fpkt"];
2276--6475[label="0.222222;2pkt 2fpkt"];
2276--6529[label="0.111111;1pkt 1fpkt"];
2276--6544[label="0.222222;2pkt 2fpkt"];
2276--7044[label="0.125;1pkt 1fpkt"];
2276--7081[label="0.111111;1pkt 1fpkt"];
2276--8498[label="0.222222;2pkt 2fpkt"];
2276--8533[label="0.111111;1pkt 1fpkt"];
2276--8865[label="0.125;1pkt 1fpkt"];
2276--8889[label="0.111111;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.161.253" dst_port="25" src_ip="210.72.201.28"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1221[label="164.23.174.121;s;63pkt 63fpkt", shape=diamond, color=yellow];
2017[label="161.223.232.76;s;8pkt 8fpkt", shape=diamond, color=yellow];
2456[label="32.136.164.21;d;2pkt 2fpkt", shape=diamond, color=yellow];
3090[label="164.23.174.121;s;50pkt 50fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.174.121:80, *:*}[88.7324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33556: (1.21951%)&lt;BR/&gt; 60050: (0.813008%)&lt;BR/&gt; 59670: (0.813008%)&lt;BR/&gt; 59431: (0.813008%)&gt;];
}
1221--2456[label="0.5;1pkt 1fpkt"];
1221--3090[label="1;50pkt 50fpkt"];
1221--3288[label="0.15873;10pkt 10fpkt"];
1221--3292[label="0.126984;8pkt 8fpkt"];
1221--3303[label="0.126984;8pkt 8fpkt"];
2017--2456[label="0.5;1pkt 1fpkt"];
2456--3090[label="0.5;1pkt 1fpkt"];
3090--3288[label="0.2;10pkt 10fpkt"];
3090--3292[label="0.04;2pkt 2fpkt"];
3090--3303[label="0.04;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.174.121" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1327[label="82.97.151.255;s;1309pkt 1309fpkt", shape=diamond, color=yellow];
2460[label="132.19.147.213;d;13pkt 13fpkt", shape=diamond, color=yellow];
2462[label="120.176.127.108;s;12pkt 12fpkt", shape=diamond, color=yellow];
4640[label="120.176.127.108;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6287[label="82.97.151.255;1581pkt 1581fpkt", shape=pentagon, color=darkviolet];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.97.151.255:2260, *:1434}[99.2472%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2260: (49.4019%)&lt;BR/&gt; 1434: (49.4019%)&lt;BR/&gt; 80: (0.598086%)&lt;BR/&gt; 2261: (0.0512645%)&lt;BR/&gt; 2258: (0.0512645%)&gt;];
}
1327--2460[label="0.0769231;1pkt 1fpkt"];
1327--6287[label="0.999236;1308pkt 1308fpkt"];
2460--2462[label="1;12pkt 12fpkt"];
2460--3292[label="0.307692;4pkt 4fpkt"];
2460--3303[label="0.307692;4pkt 4fpkt"];
2460--4640[label="1;11pkt 11fpkt"];
2460--6287[label="0.0769231;1pkt 1fpkt"];
2462--3292[label="0.333333;4pkt 4fpkt"];
2462--3303[label="0.333333;4pkt 4fpkt"];
2462--4640[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="82.97.151.255" src_port="2260"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44859,2.39713,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
8[label="132.19.106.104s;1pkt 1fpkt", shape=rectangle, color=red];
2464[label="132.19.106.104;s;3pkt 3fpkt", shape=diamond, color=yellow];
2467[label="210.150.231.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
4589[label="132.19.106.104;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.106.104:*, 198.185.152.12:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.5%)&lt;BR/&gt; 443: (17.5%)&lt;BR/&gt; 50382: (10%)&lt;BR/&gt; 50379: (7.5%)&lt;BR/&gt; 50375: (5%)&gt;];
}
8--2464[label="1;1pkt 1fpkt"];
8--2467[label="1;1pkt 1fpkt"];
8--4589[label="1;1pkt 1fpkt"];
2464--2467[label="1;2pkt 2fpkt"];
2464--4589[label="1;3pkt 3fpkt"];
2467--4589[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.185.152.12" dst_port="80" src_ip="132.19.106.104"/>
    </slice>
    <from sec="1144126978" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="82.26.118.60"/>
      <from sec="1144127382" usec="0"/>
      <to sec="1144127627" usec="0"/>
    </slice>
    <from sec="1144127382" usec="0"/>
    <to sec="1144127627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48578,2.44313,020,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
85[label="55.184.138.204d;254pkt 254fpkt", shape=rectangle, color=red];
2472[label="55.184.138.204;d;254pkt 254fpkt", shape=diamond, color=yellow];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 55.184.138.204:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
85--2472[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_ip="55.184.138.204"/>
    </slice>
    <from sec="1144127404" usec="0"/>
    <to sec="1144127551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,010,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
67[label="208.135.242.161s;38pkt 38fpkt", shape=rectangle, color=red];
2481[label="208.135.242.161;s;470pkt 470fpkt", shape=diamond, color=yellow];
5248[label="208.135.242.161;469pkt 469fpkt", shape=pentagon, color=darkviolet];
7640[label="208.135.242.161;469pkt 469fpkt", shape=invtriangle, color=brown];
9251[label="208.135.242.161;469pkt 469fpkt", shape=invhouse, color=bisque];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.135.242.161:*, *:139}[51.2766%]&lt;BR/&gt;{208.135.242.161:*, *:445}[48.7234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (26.0836%)&lt;BR/&gt; 445: (23.9164%)&lt;BR/&gt; 2747: (0.339426%)&lt;BR/&gt; 1453: (0.313316%)&lt;BR/&gt; 1412: (0.313316%)&gt;];
}
67--2481[label="1;38pkt 38fpkt"];
67--5248[label="1;38pkt 38fpkt"];
67--7640[label="1;38pkt 38fpkt"];
67--9251[label="1;38pkt 38fpkt"];
2481--3298[label="0.131915;62pkt 62fpkt"];
2481--5248[label="1;469pkt 469fpkt"];
2481--7640[label="1;469pkt 469fpkt"];
2481--9251[label="1;469pkt 469fpkt"];
5248--7640[label="1;469pkt 469fpkt"];
5248--9251[label="1;469pkt 469fpkt"];
7640--9251[label="1;469pkt 469fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.135.242.161"/>
      <filter dst_port="445" src_ip="208.135.242.161"/>
    </slice>
    <from sec="1144127429" usec="0"/>
    <to sec="1144127583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
2075[label="132.19.192.238;s;254pkt 254fpkt", shape=diamond, color=yellow];
2496[label="218.150.86.24;d;119pkt 119fpkt", shape=diamond, color=yellow];
2634[label="215.130.200.219;d;40pkt 40fpkt", shape=diamond, color=yellow];
2662[label="161.223.219.137;s;80pkt 80fpkt", shape=diamond, color=yellow];
4945[label="161.223.219.137;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6149[label="132.19.192.238;313pkt 313fpkt", shape=pentagon, color=darkviolet];
7429[label="161.223.219.137;110pkt 110fpkt", shape=invtriangle, color=brown];
8278[label="132.19.192.238;313pkt 313fpkt", shape=invtriangle, color=brown];
9110[label="161.223.219.137;111pkt 111fpkt", shape=invhouse, color=bisque];
9668[label="132.19.192.238;313pkt 313fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.238:*, 218.150.86.24:80}[28.066%]&lt;BR/&gt;{161.223.219.137:*, *:80}[26.1792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5748%)&lt;BR/&gt; 443: (0.340136%)&lt;BR/&gt; 33455: (0.141723%)&lt;BR/&gt; 33454: (0.141723%)&lt;BR/&gt; 33452: (0.141723%)&gt;];
}
2075--2496[label="0.966387;115pkt 115fpkt"];
2075--2634[label="0.25;10pkt 10fpkt"];
2075--3296[label="0.00787402;2pkt 2fpkt"];
2075--6149[label="1;254pkt 254fpkt"];
2075--8278[label="1;254pkt 254fpkt"];
2075--9668[label="1;254pkt 254fpkt"];
2496--6149[label="1;119pkt 119fpkt"];
2496--8278[label="1;119pkt 119fpkt"];
2496--9668[label="1;119pkt 119fpkt"];
2634--2662[label="0.75;30pkt 30fpkt"];
2634--3296[label="0.275;11pkt 11fpkt"];
2634--4945[label="0.75;30pkt 30fpkt"];
2634--6149[label="0.25;10pkt 10fpkt"];
2634--7429[label="0.75;30pkt 30fpkt"];
2634--8278[label="0.25;10pkt 10fpkt"];
2634--9110[label="0.75;30pkt 30fpkt"];
2634--9668[label="0.25;10pkt 10fpkt"];
2662--3296[label="0.3125;25pkt 25fpkt"];
2662--4945[label="1;80pkt 80fpkt"];
2662--7429[label="1;80pkt 80fpkt"];
2662--9110[label="1;80pkt 80fpkt"];
4945--7429[label="1;110pkt 110fpkt"];
4945--9110[label="1;111pkt 111fpkt"];
6149--8278[label="1;313pkt 313fpkt"];
6149--9668[label="1;313pkt 313fpkt"];
7429--9110[label="1;110pkt 110fpkt"];
8278--9668[label="1;313pkt 313fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.223.219.137"/>
      <filter dst_ip="218.150.86.24" dst_port="80" src_ip="132.19.192.238"/>
    </slice>
    <from sec="1144126885" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
2169[label="210.226.98.241;s;29pkt 29fpkt", shape=diamond, color=yellow];
6169[label="210.226.98.241;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.241:5050, *:*}[89.6552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.8276%)&lt;BR/&gt; 1039: (3.44828%)&lt;BR/&gt; 20: (3.44828%)&lt;BR/&gt; 4323: (1.72414%)&lt;BR/&gt; 4089: (1.72414%)&gt;];
}
2169--2519[label="0.0344828;1pkt 1fpkt"];
2169--6169[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.241" src_port="5050"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
2523[label="36.3.48.53;d;212pkt 212fpkt", shape=diamond, color=yellow];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 36.3.48.53:*}[99.0566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.5283%)&lt;BR/&gt; 0: (0.943396%)&lt;BR/&gt; 65323: (0.471698%)&lt;BR/&gt; 64581: (0.471698%)&lt;BR/&gt; 64133: (0.471698%)&gt;];
}
2523--4123[label="0.00471698;1pkt 1fpkt"];
2523--6846[label="0.00471698;1pkt 1fpkt"];
2523--8737[label="0.00471698;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.3.48.53" src_port="139"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.226.98.249"/>
      <from sec="1144126801" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
263[label="195.89.107.164;s;4427pkt 4427fpkt", shape=diamond, color=yellow];
528[label="34.208.113.16;d;2pkt 2fpkt", shape=diamond, color=yellow];
849[label="83.99.176.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
911[label="52.91.137.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
1306[label="49.96.223.159;d;2pkt 2fpkt", shape=diamond, color=yellow];
1941[label="192.4.110.139;d;2pkt 2fpkt", shape=diamond, color=yellow];
2530[label="35.68.189.106;d;2pkt 2fpkt", shape=diamond, color=yellow];
2536[label="53.71.102.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
2537[label="80.195.160.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
2944[label="49.96.223.159;d;2pkt 2fpkt", shape=hexagon, color=black];
3048[label="34.238.159.235;d;2pkt 2fpkt", shape=hexagon, color=black];
4797[label="195.89.106.128;319pkt 319fpkt", shape=pentagon, color=darkviolet];
5282[label="195.89.107.164;5244pkt 5244fpkt", shape=pentagon, color=darkviolet];
7324[label="195.89.106.128;320pkt 320fpkt", shape=invtriangle, color=brown];
7668[label="195.89.107.164;5243pkt 5243fpkt", shape=invtriangle, color=brown];
9046[label="195.89.106.128;320pkt 320fpkt", shape=invhouse, color=bisque];
9269[label="195.89.107.164;5243pkt 5243fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.107.164:55081, *:*}[67.5234%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55081: (34.2182%)&lt;BR/&gt; 6346: (8.79235%)&lt;BR/&gt; 55082: (6.31507%)&lt;BR/&gt; 0: (4.55707%)&lt;BR/&gt; 6348: (1.50246%)&gt;];
}
263--528[label="0.5;1pkt 1fpkt"];
263--849[label="1;1pkt 1fpkt"];
263--911[label="1;1pkt 1fpkt"];
263--1096[label="0.5;1pkt 1fpkt"];
263--1306[label="0.5;1pkt 1fpkt"];
263--1941[label="1;2pkt 2fpkt"];
263--2530[label="1;2pkt 2fpkt"];
263--2536[label="1;1pkt 1fpkt"];
263--2537[label="1;1pkt 1fpkt"];
263--2944[label="0.5;1pkt 1fpkt"];
263--3048[label="0.5;1pkt 1fpkt"];
263--5282[label="1;4427pkt 4427fpkt"];
263--7668[label="0.999774;4426pkt 4426fpkt"];
263--9269[label="0.999774;4426pkt 4426fpkt"];
528--1586[label="0.5;1pkt 1fpkt"];
528--3031[label="0.5;1pkt 1fpkt"];
528--4797[label="0.5;1pkt 1fpkt"];
528--5282[label="0.5;1pkt 1fpkt"];
528--7324[label="0.5;1pkt 1fpkt"];
528--7668[label="0.5;1pkt 1fpkt"];
528--9046[label="0.5;1pkt 1fpkt"];
528--9269[label="0.5;1pkt 1fpkt"];
849--5282[label="1;1pkt 1fpkt"];
849--7668[label="1;1pkt 1fpkt"];
849--9269[label="1;1pkt 1fpkt"];
911--5282[label="1;1pkt 1fpkt"];
911--7668[label="1;1pkt 1fpkt"];
911--9269[label="1;1pkt 1fpkt"];
1306--1586[label="0.5;1pkt 1fpkt"];
1306--2944[label="1;2pkt 2fpkt"];
1306--3031[label="0.5;1pkt 1fpkt"];
1306--4797[label="0.5;1pkt 1fpkt"];
1306--5282[label="0.5;1pkt 1fpkt"];
1306--7324[label="0.5;1pkt 1fpkt"];
1306--7668[label="0.5;1pkt 1fpkt"];
1306--9046[label="0.5;1pkt 1fpkt"];
1306--9269[label="0.5;1pkt 1fpkt"];
1941--5282[label="1;2pkt 2fpkt"];
1941--7668[label="1;2pkt 2fpkt"];
1941--9269[label="1;2pkt 2fpkt"];
2530--5282[label="1;2pkt 2fpkt"];
2530--7668[label="1;2pkt 2fpkt"];
2530--9269[label="1;2pkt 2fpkt"];
2536--5282[label="1;1pkt 1fpkt"];
2536--7668[label="1;1pkt 1fpkt"];
2536--9269[label="1;1pkt 1fpkt"];
2537--5282[label="1;1pkt 1fpkt"];
2537--7668[label="1;1pkt 1fpkt"];
2537--9269[label="1;1pkt 1fpkt"];
2944--3031[label="0.5;1pkt 1fpkt"];
2944--4797[label="0.5;1pkt 1fpkt"];
2944--5282[label="0.5;1pkt 1fpkt"];
2944--7324[label="0.5;1pkt 1fpkt"];
2944--7668[label="0.5;1pkt 1fpkt"];
2944--9046[label="0.5;1pkt 1fpkt"];
2944--9269[label="0.5;1pkt 1fpkt"];
3048--4797[label="0.5;1pkt 1fpkt"];
3048--5282[label="0.5;1pkt 1fpkt"];
3048--7324[label="0.5;1pkt 1fpkt"];
3048--7668[label="0.5;1pkt 1fpkt"];
3048--9046[label="0.5;1pkt 1fpkt"];
3048--9269[label="0.5;1pkt 1fpkt"];
4797--7324[label="1;319pkt 319fpkt"];
4797--9046[label="1;319pkt 319fpkt"];
5282--7668[label="1;5243pkt 5243fpkt"];
5282--9269[label="1;5243pkt 5243fpkt"];
7324--9046[label="1;320pkt 320fpkt"];
7668--9269[label="1;5243pkt 5243fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.107.164" src_port="55081"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
2108[label="128.202.97.189;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.97.189:123, *:123}[25%]&lt;BR/&gt;{128.202.97.189:123, 219.72.227.110:*}[25%]&lt;BR/&gt;{128.202.97.189:80, 2.213.245.214:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (37.5%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 54997: (6.25%)&lt;BR/&gt; 54460: (6.25%)&lt;BR/&gt; 53140: (6.25%)&gt;];
}
2108--2333[label="0.5;2pkt 2fpkt"];
2108--3109[label="1;8pkt 8fpkt"];
2108--3288[label="0.375;3pkt 3fpkt"];
2108--3292[label="0.125;1pkt 1fpkt"];
2108--3303[label="0.125;1pkt 1fpkt"];
2108--5563[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="2.213.245.214" src_ip="128.202.97.189" src_port="80"/>
      <filter dst_ip="219.72.227.110" src_ip="128.202.97.189" src_port="123"/>
      <filter dst_port="123" src_ip="128.202.97.189" src_port="123"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
2539[label="35.99.138.29;d;194pkt 194fpkt", shape=diamond, color=yellow];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:139, 35.99.138.29:*}[99.4845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (49.7423%)&lt;BR/&gt; 2893: (0.515464%)&lt;BR/&gt; 1533: (0.515464%)&lt;BR/&gt; 1225: (0.515464%)&lt;BR/&gt; 0: (0.515464%)&gt;];
}
2539--4123[label="0.00515464;1pkt 1fpkt"];
2539--6846[label="0.00515464;1pkt 1fpkt"];
2539--8737[label="0.00515464;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="35.99.138.29" src_port="139"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.80.141.217"/>
      <from sec="1144126803" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
824[label="83.188.159.41;s;1504pkt 1504fpkt", shape=diamond, color=yellow];
2561[label="195.80.109.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
3864[label="83.188.159.41;1639pkt 1639fpkt", shape=pentagon, color=darkviolet];
6665[label="83.188.159.41;1638pkt 1638fpkt", shape=invtriangle, color=brown];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.188.159.41:2433, *:1434}[99.939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2433: (49.9895%)&lt;BR/&gt; 1434: (49.9895%)&lt;BR/&gt; 1283: (0.0104537%)&lt;BR/&gt; 80: (0.0104537%)&gt;];
}
824--1348[label="0.012987;1pkt 1fpkt"];
824--2561[label="0.5;1pkt 1fpkt"];
824--3864[label="1;1504pkt 1504fpkt"];
824--6665[label="0.999335;1503pkt 1503fpkt"];
2561--2562[label="1;1pkt 1fpkt"];
2561--3288[label="0.5;1pkt 1fpkt"];
2561--3292[label="0.5;1pkt 1fpkt"];
2561--3303[label="0.5;1pkt 1fpkt"];
2561--3864[label="0.5;1pkt 1fpkt"];
2561--6665[label="0.5;1pkt 1fpkt"];
3864--6665[label="1;1638pkt 1638fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.188.159.41" src_port="2433"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1636[label="164.23.142.25;d;147pkt 147fpkt", shape=diamond, color=yellow];
2567[label="164.23.249.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
5525[label="210.224.28.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8242[label="205.193.63.234;137pkt 137fpkt", shape=invtriangle, color=brown];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.193.63.234:6667, 164.23.142.25:*}[50%]&lt;BR/&gt;{205.137.225.232:6667, 164.23.142.25:*}[29.0816%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (45.2797%)&lt;BR/&gt; 6665: (0.874126%)&lt;BR/&gt; 113: (0.699301%)&lt;BR/&gt; 6666: (0.524476%)&lt;BR/&gt; 6664: (0.524476%)&gt;];
}
1636--3238[label="0.721519;57pkt 57fpkt"];
1636--5525[label="1;1pkt 1fpkt"];
1636--6095[label="0.637681;88pkt 88fpkt"];
1636--8242[label="0.642336;88pkt 88fpkt"];
1636--9641[label="0.637681;88pkt 88fpkt"];
2567--6095[label="1;1pkt 1fpkt"];
2567--8242[label="1;1pkt 1fpkt"];
2567--9641[label="1;1pkt 1fpkt"];
8242--9641[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.142.25" src_ip="205.193.63.234" src_port="6667"/>
      <filter dst_ip="164.23.142.25" src_ip="205.137.225.232" src_port="6667"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
474[label="128.202.16.222;s;9pkt 9fpkt", shape=diamond, color=yellow];
5966[label="128.202.16.222;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8142[label="128.202.16.222;8pkt 8fpkt", shape=invtriangle, color=brown];
9576[label="128.202.16.222;8pkt 8fpkt", shape=invhouse, color=bisque];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.16.222:*, 196.6.243.103:80}[66.6667%]&lt;BR/&gt;{128.202.16.222:*, 36.172.63.83:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1271: (5.88235%)&lt;BR/&gt; 1270: (5.88235%)&lt;BR/&gt; 1269: (5.88235%)&lt;BR/&gt; 1268: (5.88235%)&gt;];
}
474--2604[label="0.666667;6pkt 6fpkt"];
474--5966[label="1;9pkt 9fpkt"];
474--8142[label="1;8pkt 8fpkt"];
474--9576[label="1;8pkt 8fpkt"];
5966--8142[label="1;8pkt 8fpkt"];
5966--9576[label="1;8pkt 8fpkt"];
8142--9576[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="196.6.243.103" dst_port="80" src_ip="128.202.16.222"/>
      <filter dst_ip="36.172.63.83" dst_port="80" src_ip="128.202.16.222"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="53.71.3.98"/>
      <from sec="1144127002" usec="0"/>
      <to sec="1144127626" usec="0"/>
    </slice>
    <from sec="1144127002" usec="0"/>
    <to sec="1144127626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.220.207.221"/>
      <from sec="1144127096" usec="0"/>
      <to sec="1144127598" usec="0"/>
    </slice>
    <from sec="1144127096" usec="0"/>
    <to sec="1144127598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="55.68.190.200"/>
      <from sec="1144127191" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144127191" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="2.23.186.32"/>
      <from sec="1144127413" usec="0"/>
      <to sec="1144127543" usec="0"/>
    </slice>
    <from sec="1144127413" usec="0"/>
    <to sec="1144127543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
2437[label="132.19.148.82;s;11pkt 11fpkt", shape=diamond, color=yellow];
4155[label="132.19.137.66;135pkt 135fpkt", shape=pentagon, color=darkviolet];
5162[label="132.19.192.154;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5537[label="132.19.219.186;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6869[label="132.19.137.66;136pkt 136fpkt", shape=invtriangle, color=brown];
7835[label="132.19.219.186;12pkt 12fpkt", shape=invtriangle, color=brown];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.137.66:*, *:80}[70.5263%]&lt;BR/&gt;{*:*, 36.172.54.150:80}[21.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9614%)&lt;BR/&gt; 143: (0.593472%)&lt;BR/&gt; 1802: (0.445104%)&lt;BR/&gt; 1800: (0.445104%)&lt;BR/&gt; 1799: (0.445104%)&gt;];
}
2437--2574[label="0.181818;2pkt 2fpkt"];
2437--2598[label="0.363636;4pkt 4fpkt"];
2437--3153[label="0.111111;1pkt 1fpkt"];
2437--3296[label="0.181818;2pkt 2fpkt"];
4155--6869[label="1;135pkt 135fpkt"];
4155--8754[label="1;135pkt 135fpkt"];
5162--7581[label="1;30pkt 30fpkt"];
5162--9209[label="1;29pkt 29fpkt"];
5537--7835[label="1;12pkt 12fpkt"];
5537--9379[label="1;12pkt 12fpkt"];
6869--8754[label="1;135pkt 135fpkt"];
7835--9379[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.137.66"/>
      <filter dst_ip="36.172.54.150" dst_port="80"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.682868,2.33824,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
673[label="132.19.152.102;s;418pkt 418fpkt", shape=diamond, color=yellow];
1461[label="216.100.0.150;d;21pkt 21fpkt", shape=diamond, color=yellow];
2626[label="67.34.162.16;d;83pkt 83fpkt", shape=diamond, color=yellow];
6804[label="132.19.192.59;7pkt 7fpkt", shape=invtriangle, color=brown];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.152.102:*, *:80}[78.4431%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6371%)&lt;BR/&gt; 443: (2.36295%)&lt;BR/&gt; 58075: (0.189036%)&lt;BR/&gt; 58070: (0.189036%)&lt;BR/&gt; 58035: (0.189036%)&gt;];
}
673--792[label="0.00239234;1pkt 1fpkt"];
673--808[label="0.00877193;3pkt 3fpkt"];
673--995[label="0.00355872;1pkt 1fpkt"];
673--1081[label="0.0140351;4pkt 4fpkt"];
673--1156[label="0.0588235;1pkt 1fpkt"];
673--1400[label="0.0444444;12pkt 12fpkt"];
673--1461[label="1;21pkt 21fpkt"];
673--1531[label="0.0326797;5pkt 5fpkt"];
673--1654[label="0.0333333;2pkt 2fpkt"];
673--1921[label="0.00239234;1pkt 1fpkt"];
673--2215[label="0.0235294;2pkt 2fpkt"];
673--2574[label="0.0365854;3pkt 3fpkt"];
673--3065[label="0.0769231;1pkt 1fpkt"];
673--3296[label="0.00717703;3pkt 3fpkt"];
2626--3296[label="0.0240964;2pkt 2fpkt"];
2626--4070[label="1;6pkt 6fpkt"];
2626--5351[label="0.108434;9pkt 9fpkt"];
2626--5813[label="0.214286;3pkt 3fpkt"];
2626--5993[label="0.180723;15pkt 15fpkt"];
2626--6804[label="1;7pkt 7fpkt"];
2626--8036[label="0.214286;3pkt 3fpkt"];
2626--9505[label="0.214286;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.152.102"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="83.186.39.84"/>
      <from sec="1144127502" usec="0"/>
      <to sec="1144127591" usec="0"/>
    </slice>
    <from sec="1144127502" usec="0"/>
    <to sec="1144127591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.89.72.5"/>
      <from sec="1144127559" usec="0"/>
      <to sec="1144127629" usec="0"/>
    </slice>
    <from sec="1144127559" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48578,2.44313,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
63[label="83.235.16.116s;446pkt 446fpkt", shape=rectangle, color=red];
2688[label="83.235.16.116;s;254pkt 254fpkt", shape=diamond, color=yellow];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.235.16.116:*, *:139}[56.9507%]&lt;BR/&gt;{83.235.16.116:*, *:445}[43.0493%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (36.2857%)&lt;BR/&gt; 445: (13.7143%)&lt;BR/&gt; 4717: (0.142857%)&lt;BR/&gt; 4707: (0.142857%)&lt;BR/&gt; 4705: (0.142857%)&gt;];
}
63--2688[label="1;254pkt 254fpkt"];
63--3297[label="0.430493;192pkt 192fpkt"];
2688--3297[label="0.755906;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="83.235.16.116"/>
      <filter dst_port="445" src_ip="83.235.16.116"/>
    </slice>
    <from sec="1144127565" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
1993[label="147.13.230.162;d;179pkt 179fpkt", shape=diamond, color=yellow];
2298[label="83.178.230.100;s;9pkt 9fpkt", shape=diamond, color=yellow];
2676[label="36.116.13.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
4292[label="196.28.200.76;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4552[label="83.178.230.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4844[label="36.116.13.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6969[label="196.28.200.76;14pkt 14fpkt", shape=invtriangle, color=brown];
7149[label="83.178.230.100;1pkt 1fpkt", shape=invtriangle, color=brown];
8817[label="196.28.200.76;15pkt 15fpkt", shape=invhouse, color=bisque];
8935[label="83.178.230.100;1pkt 1fpkt", shape=invhouse, color=bisque];
9068[label="36.116.13.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.81.56.177:80, 147.13.230.162:*}[22.3464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5781%)&lt;BR/&gt; 4224: (1.05485%)&lt;BR/&gt; 4428: (0.843882%)&lt;BR/&gt; 4427: (0.843882%)&lt;BR/&gt; 4400: (0.843882%)&gt;];
}
1993--2298[label="1;9pkt 9fpkt"];
1993--2490[label="1;1pkt 1fpkt"];
1993--2676[label="1;1pkt 1fpkt"];
1993--2691[label="1;1pkt 1fpkt"];
1993--3292[label="0.156425;28pkt 28fpkt"];
1993--3303[label="0.156425;28pkt 28fpkt"];
1993--3403[label="1;1pkt 1fpkt"];
1993--4153[label="1;10pkt 10fpkt"];
1993--4292[label="1;14pkt 14fpkt"];
1993--4552[label="1;1pkt 1fpkt"];
1993--4844[label="1;1pkt 1fpkt"];
1993--6867[label="1;9pkt 9fpkt"];
1993--6969[label="1;14pkt 14fpkt"];
1993--7149[label="1;1pkt 1fpkt"];
1993--8817[label="1;15pkt 15fpkt"];
1993--8935[label="1;1pkt 1fpkt"];
1993--9068[label="1;1pkt 1fpkt"];
2298--3292[label="0.555556;5pkt 5fpkt"];
2298--3303[label="0.555556;5pkt 5fpkt"];
2298--4552[label="1;1pkt 1fpkt"];
2298--7149[label="1;1pkt 1fpkt"];
2298--8935[label="1;1pkt 1fpkt"];
2676--4844[label="1;1pkt 1fpkt"];
2676--9068[label="1;1pkt 1fpkt"];
4292--6969[label="1;14pkt 14fpkt"];
4292--8817[label="1;14pkt 14fpkt"];
4552--7149[label="1;1pkt 1fpkt"];
4552--8935[label="1;1pkt 1fpkt"];
4844--9068[label="1;1pkt 1fpkt"];
6969--8817[label="1;14pkt 14fpkt"];
7149--8935[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.162" src_ip="218.81.56.177" src_port="80"/>
    </slice>
    <from sec="1144126855" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
275[label="161.223.32.232;s;9pkt 9fpkt", shape=diamond, color=yellow];
837[label="214.214.94.31;d;4pkt 4fpkt", shape=diamond, color=yellow];
2708[label="161.223.32.232;s;3pkt 3fpkt", shape=hexagon, color=black];
6073[label="161.223.32.232;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8226[label="161.223.32.232;11pkt 11fpkt", shape=invtriangle, color=brown];
9632[label="161.223.32.232;10pkt 10fpkt", shape=invhouse, color=bisque];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.32.232:*, *:110}[36.3636%]&lt;BR/&gt;{161.223.32.232:*, 214.214.94.31:21}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (15.625%)&lt;BR/&gt; 21: (14.5833%)&lt;BR/&gt; 4982: (6.25%)&lt;BR/&gt; 4963: (6.25%)&lt;BR/&gt; 3042: (6.25%)&gt;];
}
275--837[label="1;4pkt 4fpkt"];
275--2708[label="1;3pkt 3fpkt"];
275--6073[label="1;9pkt 9fpkt"];
275--8226[label="1;9pkt 9fpkt"];
275--9632[label="0.888889;8pkt 8fpkt"];
837--2708[label="0.666667;2pkt 2fpkt"];
837--6073[label="1;4pkt 4fpkt"];
837--8226[label="1;4pkt 4fpkt"];
837--9632[label="1;4pkt 4fpkt"];
2708--6073[label="1;3pkt 3fpkt"];
2708--8226[label="1;3pkt 3fpkt"];
2708--9632[label="1;3pkt 3fpkt"];
6073--8226[label="1;11pkt 11fpkt"];
6073--9632[label="1;10pkt 10fpkt"];
8226--9632[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="110" src_ip="161.223.32.232"/>
      <filter dst_ip="214.214.94.31" dst_port="21" src_ip="161.223.32.232"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
321[label="209.108.152.60;s;6pkt 6fpkt", shape=diamond, color=yellow];
862[label="147.13.230.25;d;8pkt 8fpkt", shape=diamond, color=yellow];
2711[label="209.108.152.60;s;2pkt 2fpkt", shape=hexagon, color=black];
4077[label="209.108.152.60;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6811[label="209.108.152.60;6pkt 6fpkt", shape=invtriangle, color=brown];
8712[label="209.108.152.60;5pkt 5fpkt", shape=invhouse, color=bisque];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.108.152.60:21, 147.13.230.25:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (15.625%)&lt;BR/&gt; 2904: (9.375%)&lt;BR/&gt; 2146: (9.375%)&lt;BR/&gt; 3501: (7.8125%)&lt;BR/&gt; 3500: (7.8125%)&gt;];
}
321--862[label="1;6pkt 6fpkt"];
321--2711[label="1;2pkt 2fpkt"];
321--4077[label="1;5pkt 5fpkt"];
321--6811[label="1;6pkt 6fpkt"];
321--8712[label="1;5pkt 5fpkt"];
862--2711[label="1;2pkt 2fpkt"];
862--4077[label="1;5pkt 5fpkt"];
862--6811[label="1;6pkt 6fpkt"];
862--8712[label="1;5pkt 5fpkt"];
2711--4077[label="0.5;1pkt 1fpkt"];
2711--6811[label="1;2pkt 2fpkt"];
2711--8712[label="0.5;1pkt 1fpkt"];
4077--6811[label="1;5pkt 5fpkt"];
4077--8712[label="1;5pkt 5fpkt"];
6811--8712[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.25" src_ip="209.108.152.60" src_port="21"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995481,2.32271,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
483[label="33.78.135.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
2720[label="33.78.135.71;s;1pkt 1fpkt", shape=hexagon, color=black];
6912[label="33.78.135.71;1pkt 1fpkt", shape=invtriangle, color=brown];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.78.135.71:80, 195.89.106.58:4184}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4184: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
483--1085[label="1;1pkt 1fpkt"];
483--2720[label="1;1pkt 1fpkt"];
483--3288[label="1;1pkt 1fpkt"];
483--6912[label="1;1pkt 1fpkt"];
2720--3288[label="1;1pkt 1fpkt"];
2720--6912[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.106.58" dst_port="4184" src_ip="33.78.135.71" src_port="80"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
502[label="196.204.191.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
2726[label="196.204.191.129;s;1pkt 1fpkt", shape=hexagon, color=black];
4823[label="196.204.191.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.204.191.129:8080, 132.19.239.72:52217}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52217: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
502--2726[label="1;1pkt 1fpkt"];
502--2894[label="1;1pkt 1fpkt"];
502--4823[label="1;1pkt 1fpkt"];
2726--2894[label="1;1pkt 1fpkt"];
2726--4823[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.239.72" dst_port="52217" src_ip="196.204.191.129" src_port="8080"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
5055[label="161.223.154.146;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7508[label="161.223.154.146;5pkt 5fpkt", shape=invtriangle, color=brown];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.154.146:*, 150.91.64.23:80}[66.6667%]&lt;BR/&gt;{161.223.154.146:*, 150.91.64.145:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1685: (9.09091%)&lt;BR/&gt; 1683: (9.09091%)&lt;BR/&gt; 1682: (9.09091%)&lt;BR/&gt; 1681: (9.09091%)&gt;];
}
5055--7508[label="1;5pkt 5fpkt"];
5055--9162[label="1;6pkt 6fpkt"];
7508--9162[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="150.91.64.23" dst_port="80" src_ip="161.223.154.146"/>
      <filter dst_ip="150.91.64.145" dst_port="80" src_ip="161.223.154.146"/>
    </slice>
    <from sec="1144126952" usec="0"/>
    <to sec="1144127032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
504[label="32.18.236.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
2731[label="32.18.236.49;s;1pkt 1fpkt", shape=hexagon, color=black];
3944[label="32.18.236.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.18.236.49:49863, 147.13.224.216:60085}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60085: (50%)&lt;BR/&gt; 49863: (50%)&gt;];
}
504--795[label="1;1pkt 1fpkt"];
504--2731[label="1;1pkt 1fpkt"];
504--3944[label="1;1pkt 1fpkt"];
2731--3944[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_ip="32.18.236.49" src_port="49863"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
562[label="55.64.240.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
909[label="54.67.13.102;s;3pkt 3fpkt", shape=diamond, color=yellow];
1297[label="148.146.205.61;s;5pkt 5fpkt", shape=diamond, color=yellow];
1837[label="54.223.216.207;s;2pkt 2fpkt", shape=diamond, color=yellow];
2411[label="54.72.194.103;s;2pkt 2fpkt", shape=diamond, color=yellow];
2805[label="54.67.13.102;s;3pkt 3fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.146.205.61:*, 128.231.110.208:6881}[35.7143%]&lt;BR/&gt;{54.67.13.102:*, 128.231.110.208:6881}[21.4286%]&lt;BR/&gt;{*:6881, 128.231.110.208:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 63682: (5.88235%)&lt;BR/&gt; 63539: (5.88235%)&lt;BR/&gt; 61122: (5.88235%)&lt;BR/&gt; 60936: (2.94118%)&gt;];
}
562--782[label="1;2pkt 2fpkt"];
562--2747[label="1;2pkt 2fpkt"];
562--2893[label="1;2pkt 2fpkt"];
562--3277[label="1;2pkt 2fpkt"];
562--6082[label="1;1pkt 1fpkt"];
909--2805[label="1;3pkt 3fpkt"];
909--2893[label="1;3pkt 3fpkt"];
909--3277[label="1;3pkt 3fpkt"];
909--4564[label="1;2pkt 2fpkt"];
909--7157[label="1;2pkt 2fpkt"];
909--8941[label="1;2pkt 2fpkt"];
1297--2893[label="1;5pkt 5fpkt"];
1297--3277[label="1;5pkt 5fpkt"];
1297--4089[label="1;5pkt 5fpkt"];
1297--6821[label="1;4pkt 4fpkt"];
1297--8717[label="1;4pkt 4fpkt"];
1837--2893[label="1;2pkt 2fpkt"];
1837--3277[label="1;2pkt 2fpkt"];
1837--5789[label="1;1pkt 1fpkt"];
1837--8021[label="1;1pkt 1fpkt"];
1837--9493[label="1;1pkt 1fpkt"];
2411--2893[label="1;2pkt 2fpkt"];
2411--3277[label="1;2pkt 2fpkt"];
2411--4582[label="1;1pkt 1fpkt"];
2411--7171[label="1;2pkt 2fpkt"];
2411--8948[label="1;1pkt 1fpkt"];
2805--2893[label="1;3pkt 3fpkt"];
2805--3277[label="1;3pkt 3fpkt"];
2805--4564[label="1;2pkt 2fpkt"];
2805--7157[label="1;2pkt 2fpkt"];
2805--8941[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.208" src_port="6881"/>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="148.146.205.61"/>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="54.67.13.102"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
606[label="83.134.45.183;s;2484pkt 2484fpkt", shape=diamond, color=yellow];
2758[label="83.134.45.183;s;574pkt 574fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.134.45.183:3219, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3219: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
606--2758[label="1;574pkt 574fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.134.45.183" src_port="3219"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
644[label="132.19.116.7;s;2pkt 2fpkt", shape=diamond, color=yellow];
984[label="38.23.115.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
2762[label="132.19.116.7;s;2pkt 2fpkt", shape=hexagon, color=black];
3409[label="132.19.116.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6362[label="132.19.116.7;2pkt 2fpkt", shape=invtriangle, color=brown];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.116.7:1106, 38.23.115.167:80}[50%]&lt;BR/&gt;{132.19.116.7:1131, 198.220.79.247:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1106: (31.25%)&lt;BR/&gt; 1131: (18.75%)&gt;];
}
644--984[label="1;1pkt 1fpkt"];
644--2573[label="0.5;1pkt 1fpkt"];
644--2762[label="1;2pkt 2fpkt"];
644--3296[label="0.5;1pkt 1fpkt"];
644--3409[label="1;1pkt 1fpkt"];
644--6362[label="1;2pkt 2fpkt"];
984--2762[label="1;1pkt 1fpkt"];
984--3296[label="1;1pkt 1fpkt"];
984--3409[label="1;1pkt 1fpkt"];
984--6362[label="1;1pkt 1fpkt"];
2762--3296[label="0.5;1pkt 1fpkt"];
2762--3409[label="1;1pkt 1fpkt"];
2762--6362[label="1;2pkt 2fpkt"];
3409--6362[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.220.79.247" dst_port="80" src_ip="132.19.116.7" src_port="1131"/>
      <filter dst_ip="38.23.115.167" dst_port="80" src_ip="132.19.116.7" src_port="1106"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
647[label="85.142.114.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
802[label="147.13.228.63;d;450pkt 450fpkt", shape=diamond, color=yellow];
1009[label="84.84.154.208;s;2pkt 2fpkt", shape=diamond, color=yellow];
1240[label="215.76.207.120;s;2pkt 2fpkt", shape=diamond, color=yellow];
2763[label="85.142.114.156;s;2pkt 2fpkt", shape=hexagon, color=black];
3001[label="147.13.228.63;d;415pkt 415fpkt", shape=hexagon, color=black];
3020[label="215.48.79.2;s;250pkt 250fpkt", shape=hexagon, color=black];
3417[label="208.114.3.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4009[label="83.181.119.55;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4266[label="209.122.200.74;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4396[label="82.190.170.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4738[label="215.76.207.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5797[label="194.153.131.208;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5801[label="84.84.154.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5818[label="83.142.167.209;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6950[label="209.122.200.74;3pkt 3fpkt", shape=invtriangle, color=brown];
7045[label="82.190.170.85;1pkt 1fpkt", shape=invtriangle, color=brown];
7278[label="215.76.207.120;1pkt 1fpkt", shape=invtriangle, color=brown];
8028[label="84.84.154.208;1pkt 1fpkt", shape=invtriangle, color=brown];
8040[label="83.142.167.209;2pkt 2fpkt", shape=invtriangle, color=brown];
8682[label="214.197.9.55;2pkt 2fpkt", shape=invhouse, color=bisque];
8730[label="214.52.119.63;1pkt 1fpkt", shape=invhouse, color=bisque];
8806[label="209.122.200.74;3pkt 3fpkt", shape=invhouse, color=bisque];
9106[label="195.199.88.137;1pkt 1fpkt", shape=invhouse, color=bisque];
9498[label="84.84.154.208;1pkt 1fpkt", shape=invhouse, color=bisque];
9507[label="83.142.167.209;2pkt 2fpkt", shape=invhouse, color=bisque];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.48.79.2:*, 147.13.228.63:*}[60.9756%]&lt;BR/&gt;{*:80, 147.13.228.63:*}[35.6984%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.1884%)&lt;BR/&gt; 6669: (5.31547%)&lt;BR/&gt; 6666: (3.45722%)&lt;BR/&gt; 53: (2.42005%)&lt;BR/&gt; 6881: (1.85825%)&gt;];
}
647--802[label="1;2pkt 2fpkt"];
647--2763[label="1;2pkt 2fpkt"];
647--3001[label="1;2pkt 2fpkt"];
802--833[label="1;2pkt 2fpkt"];
802--917[label="1;2pkt 2fpkt"];
802--1009[label="1;2pkt 2fpkt"];
802--1028[label="1;3pkt 3fpkt"];
802--1079[label="0.162162;6pkt 6fpkt"];
802--1240[label="1;2pkt 2fpkt"];
802--1269[label="1;275pkt 275fpkt"];
802--1362[label="1;3pkt 3fpkt"];
802--1459[label="1;2pkt 2fpkt"];
802--1590[label="1;2pkt 2fpkt"];
802--1849[label="1;2pkt 2fpkt"];
802--2010[label="1;3pkt 3fpkt"];
802--2127[label="1;2pkt 2fpkt"];
802--2207[label="1;2pkt 2fpkt"];
802--2373[label="1;2pkt 2fpkt"];
802--2763[label="1;2pkt 2fpkt"];
802--2828[label="0.1;2pkt 2fpkt"];
802--2939[label="1;2pkt 2fpkt"];
802--3001[label="1;415pkt 415fpkt"];
802--3020[label="1;250pkt 250fpkt"];
802--3288[label="0.0222222;10pkt 10fpkt"];
802--3417[label="1;1pkt 1fpkt"];
802--3618[label="0.115385;6pkt 6fpkt"];
802--3776[label="1;1pkt 1fpkt"];
802--4004[label="1;3pkt 3fpkt"];
802--4009[label="1;2pkt 2fpkt"];
802--4110[label="1;1pkt 1fpkt"];
802--4266[label="0.75;3pkt 3fpkt"];
802--4290[label="0.705882;12pkt 12fpkt"];
802--4396[label="1;1pkt 1fpkt"];
802--4738[label="1;1pkt 1fpkt"];
802--4938[label="1;1pkt 1fpkt"];
802--5027[label="0.269231;7pkt 7fpkt"];
802--5782[label="1;2pkt 2fpkt"];
802--5797[label="1;4pkt 4fpkt"];
802--5801[label="1;1pkt 1fpkt"];
802--5818[label="1;2pkt 2fpkt"];
802--6507[label="0.117647;6pkt 6fpkt"];
802--6607[label="1;1pkt 1fpkt"];
802--6765[label="1;3pkt 3fpkt"];
802--6837[label="1;1pkt 1fpkt"];
802--6950[label="0.666667;2pkt 2fpkt"];
802--6967[label="0.6875;11pkt 11fpkt"];
802--7045[label="1;1pkt 1fpkt"];
802--7278[label="1;1pkt 1fpkt"];
802--7424[label="1;1pkt 1fpkt"];
802--7490[label="0.269231;7pkt 7fpkt"];
802--8016[label="1;1pkt 1fpkt"];
802--8028[label="1;1pkt 1fpkt"];
802--8040[label="1;2pkt 2fpkt"];
802--8682[label="1;2pkt 2fpkt"];
802--8730[label="1;1pkt 1fpkt"];
802--8806[label="0.666667;2pkt 2fpkt"];
802--9106[label="1;1pkt 1fpkt"];
802--9498[label="1;1pkt 1fpkt"];
802--9507[label="1;2pkt 2fpkt"];
1009--3001[label="1;2pkt 2fpkt"];
1009--5801[label="1;1pkt 1fpkt"];
1009--8028[label="1;1pkt 1fpkt"];
1009--9498[label="1;1pkt 1fpkt"];
1240--3001[label="1;2pkt 2fpkt"];
1240--4738[label="1;1pkt 1fpkt"];
1240--7278[label="1;1pkt 1fpkt"];
2763--3001[label="1;2pkt 2fpkt"];
3001--3020[label="1;250pkt 250fpkt"];
3001--3288[label="0.0240964;10pkt 10fpkt"];
3001--3417[label="1;1pkt 1fpkt"];
3001--3618[label="0.115385;6pkt 6fpkt"];
3001--3776[label="1;1pkt 1fpkt"];
3001--4004[label="1;3pkt 3fpkt"];
3001--4009[label="1;2pkt 2fpkt"];
3001--4110[label="1;1pkt 1fpkt"];
3001--4266[label="0.75;3pkt 3fpkt"];
3001--4290[label="0.705882;12pkt 12fpkt"];
3001--4396[label="1;1pkt 1fpkt"];
3001--4738[label="1;1pkt 1fpkt"];
3001--4938[label="1;1pkt 1fpkt"];
3001--5027[label="0.230769;6pkt 6fpkt"];
3001--5782[label="1;2pkt 2fpkt"];
3001--5797[label="1;4pkt 4fpkt"];
3001--5801[label="1;1pkt 1fpkt"];
3001--5818[label="0.5;1pkt 1fpkt"];
3001--6507[label="0.117647;6pkt 6fpkt"];
3001--6607[label="1;1pkt 1fpkt"];
3001--6765[label="1;3pkt 3fpkt"];
3001--6837[label="1;1pkt 1fpkt"];
3001--6950[label="0.666667;2pkt 2fpkt"];
3001--6967[label="0.6875;11pkt 11fpkt"];
3001--7045[label="1;1pkt 1fpkt"];
3001--7278[label="1;1pkt 1fpkt"];
3001--7424[label="1;1pkt 1fpkt"];
3001--7490[label="0.230769;6pkt 6fpkt"];
3001--8016[label="1;1pkt 1fpkt"];
3001--8028[label="1;1pkt 1fpkt"];
3001--8040[label="0.5;1pkt 1fpkt"];
3001--8682[label="1;2pkt 2fpkt"];
3001--8730[label="1;1pkt 1fpkt"];
3001--8806[label="0.666667;2pkt 2fpkt"];
3001--9106[label="1;1pkt 1fpkt"];
3001--9498[label="1;1pkt 1fpkt"];
3001--9507[label="0.5;1pkt 1fpkt"];
4266--6950[label="1;3pkt 3fpkt"];
4266--8806[label="1;3pkt 3fpkt"];
4396--7045[label="1;1pkt 1fpkt"];
4738--7278[label="1;1pkt 1fpkt"];
5801--8028[label="1;1pkt 1fpkt"];
5801--9498[label="1;1pkt 1fpkt"];
5818--8040[label="1;2pkt 2fpkt"];
5818--9507[label="1;2pkt 2fpkt"];
6950--8806[label="1;3pkt 3fpkt"];
8028--9498[label="1;1pkt 1fpkt"];
8040--9507[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" src_ip="215.48.79.2"/>
      <filter dst_ip="147.13.228.63" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
648[label="36.3.48.53;s;517pkt 517fpkt", shape=diamond, color=yellow];
2764[label="36.3.48.53;s;250pkt 250fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.3.48.53:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 65015: (0.260756%)&lt;BR/&gt; 64397: (0.260756%)&lt;BR/&gt; 64209: (0.260756%)&lt;BR/&gt; 63665: (0.260756%)&gt;];
}
648--2764[label="1;250pkt 250fpkt"];
648--3297[label="0.0870406;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="36.3.48.53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
679[label="99.247.157.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.247.157.155:6882, 128.231.110.208:39313}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39313: (50%)&lt;BR/&gt; 6882: (50%)&gt;];
}
679--782[label="1;1pkt 1fpkt"];
679--2769[label="1;1pkt 1fpkt"];
679--2893[label="1;1pkt 1fpkt"];
679--3277[label="1;1pkt 1fpkt"];
679--5174[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.208" dst_port="39313" src_ip="99.247.157.155" src_port="6882"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.946977,2.30274,503,0 0 0 0 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
2771[label="195.80.106.184;s;5pkt 5fpkt", shape=hexagon, color=black];
5509[label="195.80.106.184;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7816[label="195.80.106.184;5pkt 5fpkt", shape=invtriangle, color=brown];
9361[label="195.80.106.184;5pkt 5fpkt", shape=invhouse, color=bisque];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.106.184:*, 53.174.69.136:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55726: (9.52381%)&lt;BR/&gt; 55725: (9.52381%)&lt;BR/&gt; 55724: (9.52381%)&lt;BR/&gt; 55723: (9.52381%)&gt;];
}
2771--5509[label="1;5pkt 5fpkt"];
2771--7816[label="0.8;4pkt 4fpkt"];
2771--9361[label="0.8;4pkt 4fpkt"];
5509--7816[label="1;5pkt 5fpkt"];
5509--9361[label="1;5pkt 5fpkt"];
7816--9361[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="195.80.106.184"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
724[label="36.133.101.248;s;8pkt 8fpkt", shape=diamond, color=yellow];
2778[label="36.133.101.248;s;5pkt 5fpkt", shape=hexagon, color=black];
6232[label="36.133.101.248;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.133.101.248:80, 161.223.54.169:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1482: (7.14286%)&lt;BR/&gt; 1481: (7.14286%)&lt;BR/&gt; 1478: (7.14286%)&lt;BR/&gt; 1476: (7.14286%)&gt;];
}
724--1424[label="1;8pkt 8fpkt"];
724--2778[label="1;5pkt 5fpkt"];
724--3288[label="0.25;2pkt 2fpkt"];
724--6232[label="1;8pkt 8fpkt"];
2778--3288[label="0.4;2pkt 2fpkt"];
2778--6232[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.54.169" src_ip="36.133.101.248" src_port="80"/>
    </slice>
    <from sec="1144126823" usec="0"/>
    <to sec="1144127324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1154[label="41.25.164.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.80.174:80, 41.25.164.210:33956}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33956: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1154--2780[label="1;1pkt 1fpkt"];
1154--5415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.25.164.210" dst_port="33956" src_ip="161.223.80.174" src_port="80"/>
    </slice>
    <from sec="1144126850" usec="0"/>
    <to sec="1144126987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
218[label="202.206.228.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
219[label="194.212.152.241;s;59pkt 59fpkt", shape=diamond, color=yellow];
1738[label="36.172.62.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
2070[label="53.110.225.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
2790[label="202.206.228.190;d;1pkt 1fpkt", shape=hexagon, color=black];
6170[label="194.212.152.241;67pkt 67fpkt", shape=pentagon, color=darkviolet];
8291[label="194.212.152.241;66pkt 66fpkt", shape=invtriangle, color=brown];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.152.241:*, *:80}[52.2388%]&lt;BR/&gt;{194.212.152.241:0, *:0}[32.8358%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.5025%)&lt;BR/&gt; 80: (25.3807%)&lt;BR/&gt; 23932: (4.06091%)&lt;BR/&gt; 6901: (3.04569%)&lt;BR/&gt; 1217: (1.26904%)&gt;];
}
218--219[label="1;2pkt 2fpkt"];
218--2790[label="1;1pkt 1fpkt"];
218--3296[label="0.5;1pkt 1fpkt"];
218--6170[label="1;2pkt 2fpkt"];
218--8291[label="1;2pkt 2fpkt"];
219--1738[label="1;1pkt 1fpkt"];
219--2070[label="1;1pkt 1fpkt"];
219--2573[label="0.104167;5pkt 5fpkt"];
219--2790[label="1;1pkt 1fpkt"];
219--3296[label="0.0508475;3pkt 3fpkt"];
219--6170[label="1;59pkt 59fpkt"];
219--8291[label="0.983051;58pkt 58fpkt"];
1738--6170[label="1;1pkt 1fpkt"];
1738--8291[label="1;1pkt 1fpkt"];
2070--6170[label="1;1pkt 1fpkt"];
2070--8291[label="1;1pkt 1fpkt"];
2790--6170[label="1;1pkt 1fpkt"];
2790--8291[label="1;1pkt 1fpkt"];
6170--8291[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="194.212.152.241"/>
      <filter src_ip="194.212.152.241"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
302[label="83.99.176.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
529[label="34.208.113.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
831[label="195.89.107.164;d;1241pkt 1241fpkt", shape=diamond, color=yellow];
1543[label="52.91.137.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
2273[label="209.157.198.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
2390[label="192.4.110.139;s;2pkt 2fpkt", shape=diamond, color=yellow];
2508[label="193.171.55.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
2795[label="34.208.113.16;s;1pkt 1fpkt", shape=hexagon, color=black];
3231[label="193.171.55.129;s;1pkt 1fpkt", shape=hexagon, color=black];
3496[label="33.131.36.13;10pkt 10fpkt", shape=pentagon, color=darkviolet];
3534[label="34.208.113.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3741[label="32.220.115.30;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4025[label="193.171.37.57;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4069[label="38.63.185.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4909[label="33.130.100.135;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5150[label="50.217.62.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5473[label="211.16.120.180;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6142[label="55.146.108.238;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6423[label="33.131.36.13;10pkt 10fpkt", shape=invtriangle, color=brown];
6585[label="32.220.115.30;8pkt 8fpkt", shape=invtriangle, color=brown];
6803[label="38.63.185.59;2pkt 2fpkt", shape=invtriangle, color=brown];
7407[label="33.130.100.135;9pkt 9fpkt", shape=invtriangle, color=brown];
8273[label="55.146.108.238;4pkt 4fpkt", shape=invtriangle, color=brown];
8454[label="192.37.51.11;1pkt 1fpkt", shape=invhouse, color=bisque];
8481[label="34.208.113.16;1pkt 1fpkt", shape=invhouse, color=bisque];
8570[label="32.220.115.30;8pkt 8fpkt", shape=invhouse, color=bisque];
9055[label="193.171.55.129;1pkt 1fpkt", shape=invhouse, color=bisque];
9344[label="211.16.120.180;1pkt 1fpkt", shape=invhouse, color=bisque];
9663[label="55.146.108.238;3pkt 3fpkt", shape=invhouse, color=bisque];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.89.107.164:55081}[58.6043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55081: (27.5541%)&lt;BR/&gt; 55082: (10.179%)&lt;BR/&gt; 6346: (5.40641%)&lt;BR/&gt; 0: (4.25056%)&lt;BR/&gt; 55085: (1.37957%)&gt;];
}
302--831[label="1;1pkt 1fpkt"];
529--831[label="1;1pkt 1fpkt"];
529--2795[label="1;1pkt 1fpkt"];
529--3534[label="1;1pkt 1fpkt"];
529--8481[label="1;1pkt 1fpkt"];
831--1543[label="1;1pkt 1fpkt"];
831--2273[label="1;1pkt 1fpkt"];
831--2390[label="1;2pkt 2fpkt"];
831--2508[label="1;1pkt 1fpkt"];
831--2795[label="1;1pkt 1fpkt"];
831--3231[label="1;1pkt 1fpkt"];
831--3496[label="0.5;5pkt 5fpkt"];
831--3534[label="1;1pkt 1fpkt"];
831--3741[label="0.25;2pkt 2fpkt"];
831--4025[label="0.555556;5pkt 5fpkt"];
831--4069[label="0.5;1pkt 1fpkt"];
831--4909[label="0.625;5pkt 5fpkt"];
831--5150[label="1;1pkt 1fpkt"];
831--5473[label="1;1pkt 1fpkt"];
831--6142[label="0.666667;2pkt 2fpkt"];
831--6423[label="0.5;5pkt 5fpkt"];
831--6585[label="0.25;2pkt 2fpkt"];
831--6803[label="0.5;1pkt 1fpkt"];
831--7407[label="0.666667;6pkt 6fpkt"];
831--8273[label="0.75;3pkt 3fpkt"];
831--8454[label="1;1pkt 1fpkt"];
831--8481[label="1;1pkt 1fpkt"];
831--8570[label="0.25;2pkt 2fpkt"];
831--9055[label="1;1pkt 1fpkt"];
831--9344[label="1;1pkt 1fpkt"];
831--9663[label="0.666667;2pkt 2fpkt"];
2508--3231[label="1;1pkt 1fpkt"];
2508--9055[label="1;1pkt 1fpkt"];
2795--3534[label="1;1pkt 1fpkt"];
2795--8481[label="1;1pkt 1fpkt"];
3231--9055[label="1;1pkt 1fpkt"];
3496--6423[label="1;10pkt 10fpkt"];
3534--8481[label="1;1pkt 1fpkt"];
3741--6585[label="1;8pkt 8fpkt"];
3741--8570[label="1;8pkt 8fpkt"];
4069--6803[label="1;2pkt 2fpkt"];
4909--7407[label="1;8pkt 8fpkt"];
5473--9344[label="1;1pkt 1fpkt"];
6142--8273[label="1;3pkt 3fpkt"];
6142--9663[label="1;3pkt 3fpkt"];
6585--8570[label="1;8pkt 8fpkt"];
8273--9663[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.107.164" dst_port="55081"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
531[label="128.2.80.41;s;386pkt 386fpkt", shape=diamond, color=yellow];
2796[label="128.2.80.41;s;386pkt 386fpkt", shape=hexagon, color=black];
3857[label="128.2.80.41;386pkt 386fpkt", shape=pentagon, color=darkviolet];
6659[label="128.2.80.41;386pkt 386fpkt", shape=invtriangle, color=brown];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.80.41:1433, 214.51.37.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4984: (0.129534%)&lt;BR/&gt; 4974: (0.129534%)&lt;BR/&gt; 4966: (0.129534%)&lt;BR/&gt; 4959: (0.129534%)&gt;];
}
531--2796[label="1;386pkt 386fpkt"];
531--3857[label="1;386pkt 386fpkt"];
531--6659[label="1;386pkt 386fpkt"];
2796--3857[label="1;386pkt 386fpkt"];
2796--6659[label="1;386pkt 386fpkt"];
3857--6659[label="1;386pkt 386fpkt"];
</description>
    <slice>
      <filter dst_ip="214.51.37.73" src_ip="128.2.80.41" src_port="1433"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
337[label="161.223.100.25;s;2pkt 2fpkt", shape=diamond, color=yellow];
338[label="39.204.218.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
2802[label="161.223.100.25;s;2pkt 2fpkt", shape=hexagon, color=black];
3674[label="161.223.100.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.100.25:1383, 39.204.218.210:80}[50%]&lt;BR/&gt;{161.223.100.25:1636, 196.206.186.224:1863}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1383: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 1863: (16.6667%)&lt;BR/&gt; 1636: (16.6667%)&gt;];
}
337--338[label="1;1pkt 1fpkt"];
337--2802[label="1;2pkt 2fpkt"];
337--3296[label="0.5;1pkt 1fpkt"];
337--3674[label="1;1pkt 1fpkt"];
338--2802[label="1;1pkt 1fpkt"];
338--3296[label="1;1pkt 1fpkt"];
338--3674[label="1;1pkt 1fpkt"];
2802--3296[label="0.5;1pkt 1fpkt"];
2802--3674[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.186.224" dst_port="1863" src_ip="161.223.100.25" src_port="1636"/>
      <filter dst_ip="39.204.218.210" dst_port="80" src_ip="161.223.100.25" src_port="1383"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
936[label="54.69.46.110;s;2pkt 2fpkt", shape=diamond, color=yellow];
2807[label="54.69.46.110;s;2pkt 2fpkt", shape=hexagon, color=black];
4651[label="54.69.46.110;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.69.46.110:10961, 128.231.110.208:6881}[50%]&lt;BR/&gt;{54.69.46.110:11206, 128.231.110.208:6881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 11206: (25%)&lt;BR/&gt; 10961: (25%)&gt;];
}
936--2807[label="1;2pkt 2fpkt"];
936--2893[label="1;2pkt 2fpkt"];
936--3277[label="1;2pkt 2fpkt"];
936--4651[label="1;2pkt 2fpkt"];
936--7213[label="1;2pkt 2fpkt"];
936--8973[label="1;1pkt 1fpkt"];
2807--2893[label="1;2pkt 2fpkt"];
2807--3277[label="1;2pkt 2fpkt"];
2807--4651[label="1;2pkt 2fpkt"];
2807--7213[label="1;2pkt 2fpkt"];
2807--8973[label="1;1pkt 1fpkt"];
4651--7213[label="1;2pkt 2fpkt"];
4651--8973[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="54.69.46.110" src_port="11206"/>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="54.69.46.110" src_port="10961"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
615[label="214.229.16.219;s;2778pkt 2778fpkt", shape=diamond, color=yellow];
2808[label="214.229.16.219;s;946pkt 946fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.229.16.219:1488, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1488: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
615--2808[label="1;946pkt 946fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="214.229.16.219" src_port="1488"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
945[label="147.13.164.159;d;5pkt 5fpkt", shape=diamond, color=yellow];
946[label="149.20.219.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
2810[label="149.20.219.8;s;2pkt 2fpkt", shape=hexagon, color=black];
2928[label="147.13.164.159;d;5pkt 5fpkt", shape=hexagon, color=black];
3431[label="149.20.219.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.6.247.84:4123, 147.13.164.159:57145}[20%]&lt;BR/&gt;{149.20.219.8:1535, 147.13.164.159:57145}[20%]&lt;BR/&gt;{149.20.219.8:5173, 147.13.164.159:57145}[20%]&lt;BR/&gt;{84.29.183.200:1093, 147.13.164.159:57145}[20%]&lt;BR/&gt;{84.29.183.200:29225, 147.13.164.159:57145}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57145: (50%)&lt;BR/&gt; 5173: (15.625%)&lt;BR/&gt; 1535: (15.625%)&lt;BR/&gt; 29225: (6.25%)&lt;BR/&gt; 4123: (6.25%)&gt;];
}
945--946[label="1;2pkt 2fpkt"];
945--2810[label="1;2pkt 2fpkt"];
945--2928[label="1;5pkt 5fpkt"];
945--3431[label="1;2pkt 2fpkt"];
946--2810[label="1;2pkt 2fpkt"];
946--2928[label="1;2pkt 2fpkt"];
946--3431[label="1;2pkt 2fpkt"];
2810--2928[label="1;2pkt 2fpkt"];
2810--3431[label="1;2pkt 2fpkt"];
2928--3431[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.164.159" dst_port="57145" src_ip="84.29.183.200" src_port="29225"/>
      <filter dst_ip="147.13.164.159" dst_port="57145" src_ip="84.29.183.200" src_port="1093"/>
      <filter dst_ip="147.13.164.159" dst_port="57145" src_ip="149.20.219.8" src_port="5173"/>
      <filter dst_ip="147.13.164.159" dst_port="57145" src_ip="149.20.219.8" src_port="1535"/>
      <filter dst_ip="147.13.164.159" dst_port="57145" src_ip="216.6.247.84" src_port="4123"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
409[label="32.210.151.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
2812[label="32.210.151.201;s;1pkt 1fpkt", shape=hexagon, color=black];
5722[label="32.210.151.201;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7974[label="32.210.151.201;1pkt 1fpkt", shape=invtriangle, color=brown];
9460[label="32.210.151.201;1pkt 1fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.210.151.201:14647, 147.13.224.216:3880}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14647: (50%)&lt;BR/&gt; 3880: (50%)&gt;];
}
409--795[label="1;1pkt 1fpkt"];
409--2812[label="1;1pkt 1fpkt"];
409--5722[label="1;1pkt 1fpkt"];
409--7974[label="1;1pkt 1fpkt"];
409--9460[label="1;1pkt 1fpkt"];
2812--5722[label="1;1pkt 1fpkt"];
2812--7974[label="1;1pkt 1fpkt"];
2812--9460[label="1;1pkt 1fpkt"];
5722--7974[label="1;1pkt 1fpkt"];
5722--9460[label="1;1pkt 1fpkt"];
7974--9460[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.224.216" dst_port="3880" src_ip="32.210.151.201" src_port="14647"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1003[label="132.19.54.75;s;825pkt 825fpkt", shape=diamond, color=yellow];
1765[label="215.51.133.246;d;287pkt 287fpkt", shape=diamond, color=yellow];
2816[label="132.19.54.75;s;825pkt 825fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.54.75:80, 215.51.133.246:*}[38.5732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25068: (0.129066%)&lt;BR/&gt; 24712: (0.103252%)&lt;BR/&gt; 24601: (0.103252%)&lt;BR/&gt; 4734: (0.103252%)&gt;];
}
1003--1765[label="0.993031;285pkt 285fpkt"];
1003--2816[label="1;825pkt 825fpkt"];
1003--3288[label="0.049697;41pkt 41fpkt"];
1003--3292[label="0.162424;134pkt 134fpkt"];
1003--3303[label="0.162424;134pkt 134fpkt"];
1765--2816[label="0.993031;285pkt 285fpkt"];
1765--3336[label="0.0106383;2pkt 2fpkt"];
1765--6306[label="0.0106383;2pkt 2fpkt"];
2816--3288[label="0.049697;41pkt 41fpkt"];
2816--3292[label="0.162424;134pkt 134fpkt"];
2816--3303[label="0.162424;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="215.51.133.246" src_ip="132.19.54.75" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
1023[label="161.223.82.53;s;170pkt 170fpkt", shape=diamond, color=yellow];
2819[label="161.223.82.53;s;155pkt 155fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.82.53:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64541: (0.307692%)&lt;BR/&gt; 64478: (0.307692%)&lt;BR/&gt; 63609: (0.307692%)&lt;BR/&gt; 62982: (0.307692%)&gt;];
}
1023--2819[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.82.53" src_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
671[label="134.181.234.193;d;6pkt 6fpkt", shape=diamond, color=yellow];
672[label="132.19.217.22;s;19pkt 19fpkt", shape=diamond, color=yellow];
2820[label="134.181.234.193;d;6pkt 6fpkt", shape=hexagon, color=black];
2821[label="132.19.217.22;s;13pkt 13fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.217.22:80, 134.181.234.193:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7273%)&lt;BR/&gt; 3203: (4.54545%)&lt;BR/&gt; 3202: (4.54545%)&lt;BR/&gt; 3201: (4.54545%)&lt;BR/&gt; 3200: (4.54545%)&gt;];
}
671--672[label="1;6pkt 6fpkt"];
671--2820[label="1;6pkt 6fpkt"];
671--2821[label="1;6pkt 6fpkt"];
671--3288[label="0.166667;1pkt 1fpkt"];
672--1469[label="0.105263;2pkt 2fpkt"];
672--2265[label="0.105263;2pkt 2fpkt"];
672--2820[label="1;6pkt 6fpkt"];
672--2821[label="1;13pkt 13fpkt"];
672--2984[label="0.105263;2pkt 2fpkt"];
672--3288[label="0.0526316;1pkt 1fpkt"];
672--3292[label="0.105263;2pkt 2fpkt"];
672--3303[label="0.105263;2pkt 2fpkt"];
2820--2821[label="1;6pkt 6fpkt"];
2820--3288[label="0.166667;1pkt 1fpkt"];
2821--2984[label="0.153846;2pkt 2fpkt"];
2821--3288[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.181.234.193" src_ip="132.19.217.22" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
211[label="128.28.217.142;s;3286pkt 3286fpkt", shape=diamond, color=yellow];
440[label="132.19.38.236;s;32pkt 32fpkt", shape=diamond, color=yellow];
1760[label="33.33.48.52;d;15pkt 15fpkt", shape=diamond, color=yellow];
1928[label="146.34.32.127;d;2pkt 2fpkt", shape=diamond, color=yellow];
1971[label="132.19.10.104;s;49pkt 49fpkt", shape=diamond, color=yellow];
2172[label="132.19.208.146;s;19pkt 19fpkt", shape=diamond, color=yellow];
2474[label="209.122.150.117;d;3pkt 3fpkt", shape=diamond, color=yellow];
2647[label="83.181.120.107;d;3pkt 3fpkt", shape=diamond, color=yellow];
2704[label="128.28.217.142;s;996pkt 996fpkt", shape=hexagon, color=black];
4584[label="132.19.10.104;55pkt 55fpkt", shape=pentagon, color=darkviolet];
5007[label="128.28.217.142;3469pkt 3469fpkt", shape=pentagon, color=darkviolet];
7172[label="132.19.10.104;54pkt 54fpkt", shape=invtriangle, color=brown];
7475[label="128.28.217.142;3469pkt 3469fpkt", shape=invtriangle, color=brown];
9139[label="128.28.217.142;3469pkt 3469fpkt", shape=invhouse, color=bisque];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.217.142:53, *:*}[60.1282%]&lt;BR/&gt;{128.28.217.142:43348, *:53}[35.163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.8411%)&lt;BR/&gt; 43348: (18.3064%)&lt;BR/&gt; 0: (1.3806%)&lt;BR/&gt; 32768: (1.08572%)&lt;BR/&gt; 80: (0.690302%)&gt;];
}
211--675[label="0.0263158;1pkt 1fpkt"];
211--722[label="0.0358306;11pkt 11fpkt"];
211--906[label="0.00568182;1pkt 1fpkt"];
211--968[label="0.333333;1pkt 1fpkt"];
211--1304[label="0.2;1pkt 1fpkt"];
211--1323[label="0.142857;1pkt 1fpkt"];
211--1342[label="0.0030581;1pkt 1fpkt"];
211--1388[label="0.125;1pkt 1fpkt"];
211--1429[label="0.2;1pkt 1fpkt"];
211--1503[label="0.00274725;1pkt 1fpkt"];
211--1564[label="0.125;1pkt 1fpkt"];
211--1595[label="0.142857;1pkt 1fpkt"];
211--1601[label="0.5;1pkt 1fpkt"];
211--1650[label="0.0909091;1pkt 1fpkt"];
211--1651[label="0.166667;1pkt 1fpkt"];
211--1671[label="0.142857;1pkt 1fpkt"];
211--1760[label="0.0666667;1pkt 1fpkt"];
211--1811[label="0.0060241;1pkt 1fpkt"];
211--1818[label="0.0126582;1pkt 1fpkt"];
211--1864[label="0.00584795;1pkt 1fpkt"];
211--1900[label="0.0147059;1pkt 1fpkt"];
211--1928[label="0.5;1pkt 1fpkt"];
211--1930[label="0.00689655;1pkt 1fpkt"];
211--2178[label="0.00628931;1pkt 1fpkt"];
211--2179[label="0.142857;1pkt 1fpkt"];
211--2378[label="0.0131579;1pkt 1fpkt"];
211--2454[label="0.0106383;1pkt 1fpkt"];
211--2474[label="0.333333;1pkt 1fpkt"];
211--2515[label="0.00571429;1pkt 1fpkt"];
211--2522[label="0.00641026;1pkt 1fpkt"];
211--2564[label="0.00584795;1pkt 1fpkt"];
211--2647[label="0.333333;1pkt 1fpkt"];
211--2704[label="1;996pkt 996fpkt"];
211--2822[label="0.0434783;1pkt 1fpkt"];
211--2961[label="0.00653595;1pkt 1fpkt"];
211--3287[label="0.0392575;129pkt 129fpkt"];
211--3290[label="0.0550822;181pkt 181fpkt"];
211--3295[label="0.0733414;241pkt 241fpkt"];
211--3302[label="0.0693853;228pkt 228fpkt"];
211--5007[label="1;3286pkt 3286fpkt"];
211--7475[label="1;3286pkt 3286fpkt"];
211--9139[label="1;3286pkt 3286fpkt"];
440--1448[label="0.0625;2pkt 2fpkt"];
440--3296[label="0.0625;2pkt 2fpkt"];
440--6118[label="1;32pkt 32fpkt"];
1760--1971[label="0.333333;5pkt 5fpkt"];
1760--2753[label="0.533333;8pkt 8fpkt"];
1760--2896[label="0.0666667;1pkt 1fpkt"];
1760--3607[label="0.466667;7pkt 7fpkt"];
1760--4584[label="0.333333;5pkt 5fpkt"];
1760--5007[label="0.0666667;1pkt 1fpkt"];
1760--6092[label="0.0666667;1pkt 1fpkt"];
1760--6498[label="0.466667;7pkt 7fpkt"];
1760--7172[label="0.266667;4pkt 4fpkt"];
1760--7475[label="0.0666667;1pkt 1fpkt"];
1760--8240[label="0.0666667;1pkt 1fpkt"];
1760--8516[label="0.533333;8pkt 8fpkt"];
1760--9139[label="0.0666667;1pkt 1fpkt"];
1928--2704[label="0.5;1pkt 1fpkt"];
1928--2896[label="0.5;1pkt 1fpkt"];
1928--3287[label="1;2pkt 2fpkt"];
1928--3302[label="1;2pkt 2fpkt"];
1928--5007[label="0.5;1pkt 1fpkt"];
1928--6092[label="0.5;1pkt 1fpkt"];
1928--7475[label="0.5;1pkt 1fpkt"];
1928--8240[label="0.5;1pkt 1fpkt"];
1928--9139[label="0.5;1pkt 1fpkt"];
1971--2300[label="0.0434783;1pkt 1fpkt"];
1971--3288[label="0.0408163;2pkt 2fpkt"];
1971--3292[label="0.367347;18pkt 18fpkt"];
1971--3303[label="0.367347;18pkt 18fpkt"];
1971--4584[label="1;49pkt 49fpkt"];
1971--7172[label="0.979592;48pkt 48fpkt"];
2172--2175[label="0.263158;5pkt 5fpkt"];
2172--2441[label="0.210526;4pkt 4fpkt"];
2172--3295[label="0.105263;2pkt 2fpkt"];
2172--3296[label="0.105263;2pkt 2fpkt"];
2172--5058[label="1;19pkt 19fpkt"];
2172--7511[label="0.947368;18pkt 18fpkt"];
2474--3295[label="1;3pkt 3fpkt"];
2474--5007[label="0.333333;1pkt 1fpkt"];
2474--6092[label="0.333333;1pkt 1fpkt"];
2474--7475[label="0.333333;1pkt 1fpkt"];
2474--8240[label="0.333333;1pkt 1fpkt"];
2474--9139[label="0.333333;1pkt 1fpkt"];
2647--3295[label="1;3pkt 3fpkt"];
2647--5007[label="0.333333;1pkt 1fpkt"];
2647--6092[label="0.333333;1pkt 1fpkt"];
2647--7475[label="0.333333;1pkt 1fpkt"];
2647--8240[label="0.333333;1pkt 1fpkt"];
2647--9139[label="0.333333;1pkt 1fpkt"];
2704--2822[label="0.0434783;1pkt 1fpkt"];
2704--2961[label="0.00653595;1pkt 1fpkt"];
2704--3287[label="0.129518;129pkt 129fpkt"];
2704--3290[label="0.181727;181pkt 181fpkt"];
2704--3295[label="0.138554;138pkt 138fpkt"];
2704--3302[label="0.0371486;37pkt 37fpkt"];
2704--5007[label="1;996pkt 996fpkt"];
2704--7475[label="1;996pkt 996fpkt"];
2704--9139[label="1;996pkt 996fpkt"];
4584--7172[label="1;54pkt 54fpkt"];
5007--7475[label="1;3469pkt 3469fpkt"];
5007--9139[label="1;3469pkt 3469fpkt"];
7475--9139[label="1;3469pkt 3469fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.217.142" src_port="53"/>
      <filter dst_port="53" src_ip="128.28.217.142" src_port="43348"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
1061[label="128.28.224.4;d;47pkt 47fpkt", shape=diamond, color=yellow];
1062[label="37.202.4.214;s;28pkt 28fpkt", shape=diamond, color=yellow];
2826[label="37.202.4.214;s;28pkt 28fpkt", shape=hexagon, color=black];
5852[label="36.129.101.212;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5870[label="37.202.4.214;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8061[label="36.129.101.212;17pkt 17fpkt", shape=invtriangle, color=brown];
8076[label="37.202.4.214;35pkt 35fpkt", shape=invtriangle, color=brown];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.4.214:80, 128.28.224.4:*}[62.5%]&lt;BR/&gt;{36.129.101.212:80, 128.28.224.4:*}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2236: (1.20192%)&lt;BR/&gt; 2235: (1.20192%)&lt;BR/&gt; 2234: (1.20192%)&lt;BR/&gt; 2233: (1.20192%)&gt;];
}
1061--1062[label="1;28pkt 28fpkt"];
1061--2826[label="1;28pkt 28fpkt"];
1061--3288[label="0.170213;8pkt 8fpkt"];
1061--5852[label="0.888889;16pkt 16fpkt"];
1061--5870[label="0.8;28pkt 28fpkt"];
1061--8061[label="0.882353;15pkt 15fpkt"];
1061--8076[label="0.8;28pkt 28fpkt"];
1062--2826[label="1;28pkt 28fpkt"];
1062--3288[label="0.142857;4pkt 4fpkt"];
1062--5870[label="1;28pkt 28fpkt"];
1062--8076[label="1;28pkt 28fpkt"];
2826--3288[label="0.142857;4pkt 4fpkt"];
2826--5870[label="1;28pkt 28fpkt"];
2826--8076[label="1;28pkt 28fpkt"];
5852--8061[label="1;17pkt 17fpkt"];
5870--8076[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.224.4" src_ip="37.202.4.214" src_port="80"/>
      <filter dst_ip="128.28.224.4" src_ip="36.129.101.212" src_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
425[label="195.80.108.171;s;57pkt 57fpkt", shape=diamond, color=yellow];
453[label="128.202.16.33;s;8pkt 8fpkt", shape=diamond, color=yellow];
1025[label="53.174.69.136;d;114pkt 114fpkt", shape=diamond, color=yellow];
1970[label="39.64.17.112;d;36pkt 36fpkt", shape=diamond, color=yellow];
2183[label="128.202.215.154;s;168pkt 168fpkt", shape=diamond, color=yellow];
2827[label="128.202.16.33;s;8pkt 8fpkt", shape=hexagon, color=black];
3775[label="128.202.16.33;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5032[label="161.223.254.144;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5096[label="161.223.157.150;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5164[label="128.202.215.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6606[label="128.202.16.33;7pkt 7fpkt", shape=invtriangle, color=brown];
7517[label="132.19.69.148;30pkt 30fpkt", shape=invtriangle, color=brown];
7583[label="128.202.215.154;2pkt 2fpkt", shape=invtriangle, color=brown];
8582[label="128.202.16.33;8pkt 8fpkt", shape=invhouse, color=bisque];
8898[label="132.19.64.93;26pkt 26fpkt", shape=invhouse, color=bisque];
9167[label="132.19.69.148;30pkt 30fpkt", shape=invhouse, color=bisque];
9210[label="128.202.215.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.215.154:53, *:53}[35.6828%]&lt;BR/&gt;{*:*, 53.174.69.136:80}[25.3304%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.8208%)&lt;BR/&gt; 80: (18.83%)&lt;BR/&gt; 25: (10.7861%)&lt;BR/&gt; 32768: (3.47349%)&lt;BR/&gt; 113: (1.00548%)&gt;];
}
425--1025[label="0.105263;6pkt 6fpkt"];
425--1967[label="0.0526316;1pkt 1fpkt"];
425--1970[label="0.0277778;1pkt 1fpkt"];
453--1025[label="1;8pkt 8fpkt"];
453--2827[label="1;8pkt 8fpkt"];
453--3775[label="1;8pkt 8fpkt"];
453--6606[label="1;7pkt 7fpkt"];
453--8582[label="1;8pkt 8fpkt"];
1025--1048[label="0.307692;8pkt 8fpkt"];
1025--1732[label="0.333333;3pkt 3fpkt"];
1025--2183[label="0.0526316;6pkt 6fpkt"];
1025--2771[label="1;5pkt 5fpkt"];
1025--2827[label="1;8pkt 8fpkt"];
1025--3296[label="0.0877193;10pkt 10fpkt"];
1025--3774[label="0.888889;16pkt 16fpkt"];
1025--3775[label="1;8pkt 8fpkt"];
1025--3906[label="0.375;3pkt 3fpkt"];
1025--4028[label="1;6pkt 6fpkt"];
1025--4982[label="0.0714286;1pkt 1fpkt"];
1025--5032[label="0.0769231;1pkt 1fpkt"];
1025--5096[label="0.0357143;1pkt 1fpkt"];
1025--5178[label="0.0789474;9pkt 9fpkt"];
1025--5509[label="1;6pkt 6fpkt"];
1025--5632[label="0.0350877;4pkt 4fpkt"];
1025--6605[label="0.888889;16pkt 16fpkt"];
1025--6606[label="1;7pkt 7fpkt"];
1025--6777[label="1;5pkt 5fpkt"];
1025--7454[label="0.0666667;1pkt 1fpkt"];
1025--7816[label="1;5pkt 5fpkt"];
1025--7911[label="0.0350877;4pkt 4fpkt"];
1025--8581[label="0.842105;16pkt 16fpkt"];
1025--8582[label="1;8pkt 8fpkt"];
1025--8692[label="1;5pkt 5fpkt"];
1025--9124[label="0.0666667;1pkt 1fpkt"];
1025--9361[label="1;5pkt 5fpkt"];
1025--9422[label="0.0350877;4pkt 4fpkt"];
1970--2111[label="0.181818;6pkt 6fpkt"];
1970--2553[label="0.0277778;1pkt 1fpkt"];
1970--2838[label="0.0833333;3pkt 3fpkt"];
1970--2871[label="0.0277778;1pkt 1fpkt"];
1970--3093[label="0.0277778;1pkt 1fpkt"];
1970--3336[label="0.194444;7pkt 7fpkt"];
1970--3613[label="0.166667;3pkt 3fpkt"];
1970--3994[label="0.0277778;1pkt 1fpkt"];
1970--4478[label="0.08;2pkt 2fpkt"];
1970--5021[label="0.111111;4pkt 4fpkt"];
1970--5070[label="0.0666667;2pkt 2fpkt"];
1970--5155[label="0.0277778;1pkt 1fpkt"];
1970--5675[label="0.0277778;1pkt 1fpkt"];
1970--6237[label="0.0277778;1pkt 1fpkt"];
1970--6241[label="0.166667;6pkt 6fpkt"];
1970--6306[label="0.194444;7pkt 7fpkt"];
1970--7096[label="0.0769231;2pkt 2fpkt"];
1970--7517[label="0.0666667;2pkt 2fpkt"];
1970--7574[label="0.0277778;1pkt 1fpkt"];
1970--7942[label="0.0277778;1pkt 1fpkt"];
1970--8345[label="0.0277778;1pkt 1fpkt"];
1970--8898[label="0.0769231;2pkt 2fpkt"];
1970--9167[label="0.0666667;2pkt 2fpkt"];
1970--9716[label="0.0277778;1pkt 1fpkt"];
2183--2515[label="0.00595238;1pkt 1fpkt"];
2183--2522[label="0.00641026;1pkt 1fpkt"];
2183--3287[label="0.125;21pkt 21fpkt"];
2183--3290[label="0.125;21pkt 21fpkt"];
2183--3295[label="0.0952381;16pkt 16fpkt"];
2183--3296[label="0.00595238;1pkt 1fpkt"];
2183--3302[label="0.10119;17pkt 17fpkt"];
2183--5164[label="0.5;1pkt 1fpkt"];
2183--7583[label="0.5;1pkt 1fpkt"];
2183--9210[label="0.5;1pkt 1fpkt"];
2827--3775[label="1;8pkt 8fpkt"];
2827--6606[label="1;7pkt 7fpkt"];
2827--8582[label="1;8pkt 8fpkt"];
3775--6606[label="1;7pkt 7fpkt"];
3775--8582[label="1;8pkt 8fpkt"];
5164--7583[label="1;2pkt 2fpkt"];
5164--9210[label="1;2pkt 2fpkt"];
6606--8582[label="1;7pkt 7fpkt"];
7517--9167[label="1;30pkt 30fpkt"];
7583--9210[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.136" dst_port="80"/>
      <filter dst_port="53" src_ip="128.202.215.154" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
631[label="147.13.40.97;d;93pkt 93fpkt", shape=diamond, color=yellow];
698[label="37.202.59.220;s;47pkt 47fpkt", shape=diamond, color=yellow];
2829[label="37.202.59.220;s;47pkt 47fpkt", shape=hexagon, color=black];
3026[label="147.13.40.97;d;93pkt 93fpkt", shape=hexagon, color=black];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.59.220:80, 147.13.40.97:*}[50.5376%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5%)&lt;BR/&gt; 1863: (1.78571%)&lt;BR/&gt; 59570: (0.714286%)&lt;BR/&gt; 59569: (0.714286%)&lt;BR/&gt; 59568: (0.714286%)&gt;];
}
631--698[label="1;47pkt 47fpkt"];
631--1633[label="0.386364;17pkt 17fpkt"];
631--2829[label="1;47pkt 47fpkt"];
631--3026[label="1;93pkt 93fpkt"];
631--3287[label="0.0215054;2pkt 2fpkt"];
631--3288[label="0.365591;34pkt 34fpkt"];
631--3564[label="0.253968;16pkt 16fpkt"];
631--5286[label="0.182796;17pkt 17fpkt"];
631--6465[label="0.253968;16pkt 16fpkt"];
631--7671[label="0.182796;17pkt 17fpkt"];
631--9271[label="0.182796;17pkt 17fpkt"];
698--2829[label="1;47pkt 47fpkt"];
698--3026[label="1;47pkt 47fpkt"];
698--3288[label="0.340426;16pkt 16fpkt"];
2829--3026[label="1;47pkt 47fpkt"];
2829--3288[label="0.340426;16pkt 16fpkt"];
3026--3287[label="0.0215054;2pkt 2fpkt"];
3026--3288[label="0.365591;34pkt 34fpkt"];
3026--3564[label="0.253968;16pkt 16fpkt"];
3026--5286[label="0.182796;17pkt 17fpkt"];
3026--6465[label="0.253968;16pkt 16fpkt"];
3026--7671[label="0.182796;17pkt 17fpkt"];
3026--9271[label="0.182796;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.40.97" src_ip="37.202.59.220" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
473[label="132.19.202.32;s;40pkt 40fpkt", shape=diamond, color=yellow];
1667[label="38.192.181.247;d;29pkt 29fpkt", shape=diamond, color=yellow];
2774[label="132.19.202.32;s;38pkt 38fpkt", shape=hexagon, color=black];
2839[label="219.72.137.176;d;94pkt 94fpkt", shape=hexagon, color=black];
2972[label="38.192.181.247;d;29pkt 29fpkt", shape=hexagon, color=black];
3723[label="132.18.85.29;39pkt 39fpkt", shape=pentagon, color=darkviolet];
3772[label="132.19.202.32;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 38.192.213.207:80}[23.4973%]&lt;BR/&gt;{132.19.44.99:*, 219.72.137.176:80}[21.8579%]&lt;BR/&gt;{132.19.202.32:*, *:80}[21.8579%]&lt;BR/&gt;{132.18.85.29:*, *:80}[21.3115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1776: (0.809061%)&lt;BR/&gt; 1762: (0.809061%)&lt;BR/&gt; 1761: (0.809061%)&lt;BR/&gt; 1758: (0.809061%)&gt;];
}
473--1057[label="0.125;5pkt 5fpkt"];
473--1095[label="0.025;1pkt 1fpkt"];
473--1120[label="0.125;5pkt 5fpkt"];
473--1667[label="0.310345;9pkt 9fpkt"];
473--2774[label="1;38pkt 38fpkt"];
473--2839[label="0.125;5pkt 5fpkt"];
473--2972[label="0.310345;9pkt 9fpkt"];
473--3772[label="1;40pkt 40fpkt"];
1667--2774[label="0.275862;8pkt 8fpkt"];
1667--2972[label="1;29pkt 29fpkt"];
1667--3723[label="0.172414;5pkt 5fpkt"];
1667--3772[label="0.310345;9pkt 9fpkt"];
1667--4540[label="0.517241;15pkt 15fpkt"];
1667--7142[label="0.517241;15pkt 15fpkt"];
1667--8929[label="0.517241;15pkt 15fpkt"];
2774--2839[label="0.131579;5pkt 5fpkt"];
2774--2972[label="0.275862;8pkt 8fpkt"];
2774--3772[label="1;38pkt 38fpkt"];
2839--3296[label="0.0319149;3pkt 3fpkt"];
2839--3772[label="0.125;5pkt 5fpkt"];
2839--3796[label="0.102041;5pkt 5fpkt"];
2839--4421[label="0.0735294;5pkt 5fpkt"];
2839--5096[label="0.178571;5pkt 5fpkt"];
2839--5380[label="0.166667;5pkt 5fpkt"];
2839--5670[label="0.0568182;5pkt 5fpkt"];
2839--6621[label="0.1;5pkt 5fpkt"];
2839--7062[label="0.0724638;5pkt 5fpkt"];
2839--7938[label="0.0574713;5pkt 5fpkt"];
2839--8592[label="0.1;5pkt 5fpkt"];
2839--8876[label="0.0735294;5pkt 5fpkt"];
2972--3723[label="0.172414;5pkt 5fpkt"];
2972--3772[label="0.310345;9pkt 9fpkt"];
2972--4540[label="0.517241;15pkt 15fpkt"];
2972--7142[label="0.517241;15pkt 15fpkt"];
2972--8929[label="0.517241;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.202.32"/>
      <filter dst_port="80" src_ip="132.18.85.29"/>
      <filter dst_ip="38.192.213.207" dst_port="80"/>
      <filter dst_ip="219.72.137.176" dst_port="80" src_ip="132.19.44.99"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
735[label="83.215.128.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
2842[label="83.215.128.193;s;1pkt 1fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.215.128.193:80, 147.13.230.171:1241}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1241: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
735--901[label="1;1pkt 1fpkt"];
735--2842[label="1;1pkt 1fpkt"];
735--3288[label="1;1pkt 1fpkt"];
2842--3288[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.171" dst_port="1241" src_ip="83.215.128.193" src_port="80"/>
    </slice>
    <from sec="1144126841" usec="0"/>
    <to sec="1144126944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
1164[label="36.164.120.220;s;6pkt 6fpkt", shape=diamond, color=yellow];
2844[label="36.164.120.220;s;6pkt 6fpkt", shape=hexagon, color=black];
5949[label="36.164.120.220;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.164.120.220:80, 132.19.219.189:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2634: (8.33333%)&lt;BR/&gt; 2633: (8.33333%)&lt;BR/&gt; 2626: (8.33333%)&lt;BR/&gt; 2625: (8.33333%)&gt;];
}
1164--2844[label="1;6pkt 6fpkt"];
1164--5949[label="1;6pkt 6fpkt"];
2844--5949[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.219.189" src_ip="36.164.120.220" src_port="80"/>
    </slice>
    <from sec="1144126871" usec="0"/>
    <to sec="1144127102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1184[label="36.225.227.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2846[label="36.225.227.17;d;1pkt 1fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.117.206:64202, 36.225.227.17:2401}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64202: (50%)&lt;BR/&gt; 2401: (50%)&gt;];
}
1184--2846[label="1;1pkt 1fpkt"];
1184--5775[label="1;1pkt 1fpkt"];
2846--5775[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.225.227.17" dst_port="2401" src_ip="195.89.117.206" src_port="64202"/>
    </slice>
    <from sec="1144126927" usec="0"/>
    <to sec="1144127012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
506[label="194.212.154.27;s;1341pkt 1341fpkt", shape=diamond, color=yellow];
539[label="194.212.156.200;s;829pkt 829fpkt", shape=diamond, color=yellow];
667[label="132.19.233.178;s;899pkt 899fpkt", shape=diamond, color=yellow];
1231[label="128.231.110.227;s;357pkt 357fpkt", shape=diamond, color=yellow];
2857[label="128.231.110.227;s;357pkt 357fpkt", shape=hexagon, color=black];
5709[label="194.212.156.200;872pkt 872fpkt", shape=pentagon, color=darkviolet];
5809[label="195.89.66.209;40pkt 40fpkt", shape=pentagon, color=darkviolet];
8033[label="195.89.66.209;40pkt 40fpkt", shape=invtriangle, color=brown];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:53}[53.1775%]&lt;BR/&gt;{194.212.154.27:53, *:*}[28.5551%]&lt;BR/&gt;{132.19.233.178:*, *:*}[25.6198%]&lt;BR/&gt;{194.212.156.200:*, *:*}[24.8504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.0919%)&lt;BR/&gt; 2581: (12.4287%)&lt;BR/&gt; 52663: (6.73706%)&lt;BR/&gt; 1774: (3.97043%)&lt;BR/&gt; 65534: (3.34741%)&gt;];
}
506--675[label="0.0263158;1pkt 1fpkt"];
506--722[label="0.00325733;1pkt 1fpkt"];
506--906[label="0.00568182;1pkt 1fpkt"];
506--1372[label="0.1;1pkt 1fpkt"];
506--1503[label="0.00274725;1pkt 1fpkt"];
506--1564[label="0.125;1pkt 1fpkt"];
506--1650[label="0.0909091;1pkt 1fpkt"];
506--1670[label="0.25;1pkt 1fpkt"];
506--1811[label="0.0060241;1pkt 1fpkt"];
506--1818[label="0.0126582;1pkt 1fpkt"];
506--1864[label="0.00584795;1pkt 1fpkt"];
506--1900[label="0.0147059;1pkt 1fpkt"];
506--1930[label="0.00689655;1pkt 1fpkt"];
506--2378[label="0.0131579;1pkt 1fpkt"];
506--2515[label="0.00571429;1pkt 1fpkt"];
506--2522[label="0.00641026;1pkt 1fpkt"];
506--2545[label="0.0625;1pkt 1fpkt"];
506--2564[label="0.00584795;1pkt 1fpkt"];
506--2822[label="0.0434783;1pkt 1fpkt"];
506--3287[label="0.0589113;79pkt 79fpkt"];
506--3290[label="0.0231171;31pkt 31fpkt"];
506--3295[label="0.0410142;55pkt 55fpkt"];
506--3302[label="0.0760626;102pkt 102fpkt"];
506--3699[label="0.999254;1340pkt 1340fpkt"];
539--675[label="0.0263158;1pkt 1fpkt"];
539--722[label="0.0130293;4pkt 4fpkt"];
539--906[label="0.00568182;1pkt 1fpkt"];
539--1342[label="0.0030581;1pkt 1fpkt"];
539--1503[label="0.00274725;1pkt 1fpkt"];
539--1811[label="0.0060241;1pkt 1fpkt"];
539--1818[label="0.0126582;1pkt 1fpkt"];
539--1864[label="0.00584795;1pkt 1fpkt"];
539--1900[label="0.0147059;1pkt 1fpkt"];
539--1930[label="0.00689655;1pkt 1fpkt"];
539--2178[label="0.00628931;1pkt 1fpkt"];
539--2378[label="0.0131579;1pkt 1fpkt"];
539--2515[label="0.00571429;1pkt 1fpkt"];
539--2522[label="0.00641026;1pkt 1fpkt"];
539--2564[label="0.00584795;1pkt 1fpkt"];
539--2822[label="0.0434783;1pkt 1fpkt"];
539--2961[label="0.00653595;1pkt 1fpkt"];
539--3287[label="0.0144753;12pkt 12fpkt"];
539--3290[label="0.149578;124pkt 124fpkt"];
539--3295[label="0.0820265;68pkt 68fpkt"];
539--3302[label="0.0301568;25pkt 25fpkt"];
539--5709[label="1;829pkt 829fpkt"];
667--675[label="0.0263158;1pkt 1fpkt"];
667--906[label="0.00568182;1pkt 1fpkt"];
667--1304[label="0.2;1pkt 1fpkt"];
667--1342[label="0.0030581;1pkt 1fpkt"];
667--1503[label="0.00274725;1pkt 1fpkt"];
667--1671[label="0.142857;1pkt 1fpkt"];
667--1811[label="0.0060241;1pkt 1fpkt"];
667--1818[label="0.0126582;1pkt 1fpkt"];
667--1864[label="0.00584795;1pkt 1fpkt"];
667--1930[label="0.00689655;1pkt 1fpkt"];
667--2178[label="0.00628931;1pkt 1fpkt"];
667--2378[label="0.0131579;1pkt 1fpkt"];
667--2515[label="0.00571429;1pkt 1fpkt"];
667--2522[label="0.00641026;1pkt 1fpkt"];
667--2564[label="0.00584795;1pkt 1fpkt"];
667--2822[label="0.0434783;1pkt 1fpkt"];
667--3287[label="0.0266963;24pkt 24fpkt"];
667--3290[label="0.0700779;63pkt 63fpkt"];
667--3295[label="0.131257;118pkt 118fpkt"];
667--3302[label="0.025584;23pkt 23fpkt"];
1231--1342[label="0.0030581;1pkt 1fpkt"];
1231--1818[label="0.0126582;1pkt 1fpkt"];
1231--1864[label="0.00584795;1pkt 1fpkt"];
1231--1930[label="0.00689655;1pkt 1fpkt"];
1231--2178[label="0.00628931;1pkt 1fpkt"];
1231--2378[label="0.0131579;1pkt 1fpkt"];
1231--2515[label="0.00571429;1pkt 1fpkt"];
1231--2564[label="0.00584795;1pkt 1fpkt"];
1231--2857[label="1;357pkt 357fpkt"];
1231--2961[label="0.00653595;1pkt 1fpkt"];
1231--3287[label="0.0112045;4pkt 4fpkt"];
1231--3290[label="0.0308123;11pkt 11fpkt"];
1231--3295[label="0.0504202;18pkt 18fpkt"];
1231--3302[label="0.0252101;9pkt 9fpkt"];
1231--6033[label="1;357pkt 357fpkt"];
1231--8192[label="0.997199;356pkt 356fpkt"];
2857--2961[label="0.00653595;1pkt 1fpkt"];
2857--3287[label="0.0112045;4pkt 4fpkt"];
2857--3290[label="0.0308123;11pkt 11fpkt"];
2857--3295[label="0.0504202;18pkt 18fpkt"];
2857--3302[label="0.0252101;9pkt 9fpkt"];
2857--6033[label="1;357pkt 357fpkt"];
2857--8192[label="0.997199;356pkt 356fpkt"];
5809--8033[label="1;40pkt 40fpkt"];
5809--9502[label="1;40pkt 40fpkt"];
8033--9502[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.233.178"/>
      <filter src_ip="194.212.156.200"/>
      <filter dst_port="53"/>
      <filter src_ip="194.212.154.27" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
577[label="132.19.148.208;s;66pkt 66fpkt", shape=diamond, color=yellow];
578[label="216.54.112.0;d;3pkt 3fpkt", shape=diamond, color=yellow];
2861[label="132.19.148.208;s;34pkt 34fpkt", shape=hexagon, color=black];
2918[label="216.54.112.0;d;3pkt 3fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.148.208:*, 196.206.47.21:80}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 2229: (1.88679%)&lt;BR/&gt; 1713: (1.88679%)&lt;BR/&gt; 2235: (1.41509%)&lt;BR/&gt; 56597: (0.943396%)&gt;];
}
577--578[label="1;3pkt 3fpkt"];
577--792[label="0.181818;12pkt 12fpkt"];
577--808[label="0.0151515;1pkt 1fpkt"];
577--995[label="0.0454545;3pkt 3fpkt"];
577--1158[label="0.3125;15pkt 15fpkt"];
577--1367[label="0.0151515;1pkt 1fpkt"];
577--1517[label="0.0151515;1pkt 1fpkt"];
577--1921[label="0.166667;11pkt 11fpkt"];
577--2139[label="0.0909091;6pkt 6fpkt"];
577--2861[label="1;34pkt 34fpkt"];
577--2918[label="1;3pkt 3fpkt"];
577--3296[label="0.0151515;1pkt 1fpkt"];
578--2861[label="0.666667;2pkt 2fpkt"];
578--2918[label="1;3pkt 3fpkt"];
578--3296[label="0.333333;1pkt 1fpkt"];
2861--2918[label="0.666667;2pkt 2fpkt"];
2861--3296[label="0.0294118;1pkt 1fpkt"];
2918--3296[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.47.21" dst_port="80" src_ip="132.19.148.208"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
405[label="53.19.78.225;s;11pkt 11fpkt", shape=diamond, color=yellow];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.19.78.225:80, 132.19.18.24:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33626: (4.54545%)&lt;BR/&gt; 33619: (4.54545%)&lt;BR/&gt; 33605: (4.54545%)&lt;BR/&gt; 33604: (4.54545%)&gt;];
}
405--947[label="1;11pkt 11fpkt"];
405--2866[label="1;5pkt 5fpkt"];
405--3288[label="0.0909091;1pkt 1fpkt"];
405--3292[label="0.0909091;1pkt 1fpkt"];
405--3303[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.18.24" src_ip="53.19.78.225" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
997[label="48.147.209.132;s;2pkt 2fpkt", shape=diamond, color=yellow];
2870[label="48.147.209.132;s;2pkt 2fpkt", shape=hexagon, color=black];
4870[label="48.147.209.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7377[label="48.147.209.132;1pkt 1fpkt", shape=invtriangle, color=brown];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.147.209.132:59644, 128.231.110.208:6881}[50%]&lt;BR/&gt;{48.147.209.132:59839, 128.231.110.208:6881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 59839: (28.5714%)&lt;BR/&gt; 59644: (21.4286%)&gt;];
}
997--2870[label="1;2pkt 2fpkt"];
997--2893[label="1;2pkt 2fpkt"];
997--3277[label="1;2pkt 2fpkt"];
997--4870[label="1;2pkt 2fpkt"];
997--7377[label="1;1pkt 1fpkt"];
2870--2893[label="1;2pkt 2fpkt"];
2870--3277[label="1;2pkt 2fpkt"];
2870--4870[label="1;2pkt 2fpkt"];
2870--7377[label="1;1pkt 1fpkt"];
4870--7377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="48.147.209.132" src_port="59839"/>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="48.147.209.132" src_port="59644"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1077[label="83.4.90.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="132.19.64.98;s;21pkt 21fpkt", shape=diamond, color=yellow];
2874[label="132.19.64.98;s;18pkt 18fpkt", shape=hexagon, color=black];
4524[label="132.19.64.98;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.64.98:*, *:80}[47.619%]&lt;BR/&gt;{132.19.64.98:0, *:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.3333%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1041: (7.5%)&lt;BR/&gt; 53: (7.5%)&lt;BR/&gt; 3843: (3.33333%)&gt;];
}
1077--1078[label="1;1pkt 1fpkt"];
1077--2874[label="1;1pkt 1fpkt"];
1077--4524[label="1;1pkt 1fpkt"];
1078--1367[label="0.142857;3pkt 3fpkt"];
1078--1513[label="0.0952381;2pkt 2fpkt"];
1078--1555[label="0.0952381;2pkt 2fpkt"];
1078--2324[label="0.047619;1pkt 1fpkt"];
1078--2874[label="1;18pkt 18fpkt"];
1078--3295[label="0.047619;1pkt 1fpkt"];
1078--4524[label="1;20pkt 20fpkt"];
2874--3295[label="0.0555556;1pkt 1fpkt"];
2874--4524[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.64.98"/>
      <filter src_ip="132.19.64.98"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
1473[label="208.48.46.64;s;2pkt 2fpkt", shape=diamond, color=yellow];
2887[label="208.48.46.64;s;2pkt 2fpkt", shape=hexagon, color=black];
4117[label="208.48.46.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6842[label="208.48.46.64;1pkt 1fpkt", shape=invtriangle, color=brown];
8733[label="208.48.46.64;1pkt 1fpkt", shape=invhouse, color=bisque];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.48.46.64:20349, 147.13.220.153:80}[50%]&lt;BR/&gt;{208.48.46.64:20358, 147.13.220.153:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20358: (35.7143%)&lt;BR/&gt; 20349: (14.2857%)&gt;];
}
1473--2696[label="1;2pkt 2fpkt"];
1473--2887[label="1;2pkt 2fpkt"];
1473--3259[label="1;2pkt 2fpkt"];
1473--3296[label="0.5;1pkt 1fpkt"];
1473--4117[label="1;1pkt 1fpkt"];
1473--6842[label="1;1pkt 1fpkt"];
1473--8733[label="1;1pkt 1fpkt"];
2887--3259[label="1;2pkt 2fpkt"];
2887--3296[label="0.5;1pkt 1fpkt"];
2887--4117[label="1;1pkt 1fpkt"];
2887--6842[label="1;1pkt 1fpkt"];
2887--8733[label="1;1pkt 1fpkt"];
4117--6842[label="1;1pkt 1fpkt"];
4117--8733[label="1;1pkt 1fpkt"];
6842--8733[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="208.48.46.64" src_port="20358"/>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="208.48.46.64" src_port="20349"/>
    </slice>
    <from sec="1144127020" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
1211[label="99.240.16.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
2888[label="99.240.16.189;s;1pkt 1fpkt", shape=hexagon, color=black];
5556[label="99.240.16.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.240.16.189:3316, 147.13.220.153:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3316: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1211--2696[label="1;1pkt 1fpkt"];
1211--2888[label="1;1pkt 1fpkt"];
1211--3259[label="1;1pkt 1fpkt"];
1211--5556[label="1;1pkt 1fpkt"];
1211--7851[label="1;1pkt 1fpkt"];
2888--3259[label="1;1pkt 1fpkt"];
2888--5556[label="1;1pkt 1fpkt"];
2888--7851[label="1;1pkt 1fpkt"];
5556--7851[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="99.240.16.189" src_port="3316"/>
    </slice>
    <from sec="1144127056" usec="0"/>
    <to sec="1144127091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1499[label="67.37.6.103;s;5pkt 5fpkt", shape=diamond, color=yellow];
1958[label="132.19.109.152;d;30pkt 30fpkt", shape=diamond, color=yellow];
2049[label="36.120.64.38;s;7pkt 7fpkt", shape=diamond, color=yellow];
2459[label="36.120.113.41;s;12pkt 12fpkt", shape=diamond, color=yellow];
2892[label="67.37.6.103;s;5pkt 5fpkt", shape=hexagon, color=black];
3862[label="36.120.113.41;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6664[label="36.120.113.41;12pkt 12fpkt", shape=invtriangle, color=brown];
8618[label="36.120.113.41;11pkt 11fpkt", shape=invhouse, color=bisque];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.120.113.41:80, 132.19.109.152:*}[40%]&lt;BR/&gt;{36.120.64.38:80, 132.19.109.152:*}[23.3333%]&lt;BR/&gt;{36.120.100.146:80, 132.19.109.152:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2829: (2.68817%)&lt;BR/&gt; 2827: (2.68817%)&lt;BR/&gt; 2826: (2.68817%)&lt;BR/&gt; 2825: (2.68817%)&gt;];
}
1499--1958[label="1;5pkt 5fpkt"];
1499--2892[label="1;5pkt 5fpkt"];
1958--2049[label="1;7pkt 7fpkt"];
1958--2459[label="1;12pkt 12fpkt"];
1958--2892[label="1;5pkt 5fpkt"];
1958--3292[label="0.0333333;1pkt 1fpkt"];
1958--3303[label="0.0333333;1pkt 1fpkt"];
1958--3862[label="1;11pkt 11fpkt"];
1958--6664[label="1;12pkt 12fpkt"];
1958--8618[label="1;11pkt 11fpkt"];
2459--3292[label="0.0833333;1pkt 1fpkt"];
2459--3303[label="0.0833333;1pkt 1fpkt"];
2459--3862[label="1;11pkt 11fpkt"];
2459--6664[label="1;12pkt 12fpkt"];
2459--8618[label="1;11pkt 11fpkt"];
3862--6664[label="1;11pkt 11fpkt"];
3862--8618[label="1;11pkt 11fpkt"];
6664--8618[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.109.152" src_ip="36.120.113.41" src_port="80"/>
      <filter dst_ip="132.19.109.152" src_ip="36.120.64.38" src_port="80"/>
      <filter dst_ip="132.19.109.152" src_ip="36.120.100.146" src_port="80"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1220[label="130.209.99.86;s;1081pkt 1081fpkt", shape=diamond, color=yellow];
2897[label="130.209.99.86;s;623pkt 623fpkt", shape=hexagon, color=black];
4409[label="130.209.99.86;1182pkt 1182fpkt", shape=pentagon, color=darkviolet];
7054[label="130.209.99.86;1182pkt 1182fpkt", shape=invtriangle, color=brown];
8871[label="130.209.99.86;1181pkt 1181fpkt", shape=invhouse, color=bisque];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.209.99.86:3832, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3832: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1220--2897[label="1;623pkt 623fpkt"];
1220--4409[label="1;1081pkt 1081fpkt"];
1220--7054[label="1;1081pkt 1081fpkt"];
1220--8871[label="0.999075;1080pkt 1080fpkt"];
2897--4409[label="1;623pkt 623fpkt"];
2897--7054[label="1;623pkt 623fpkt"];
2897--8871[label="0.998395;622pkt 622fpkt"];
4409--7054[label="1;1182pkt 1182fpkt"];
4409--8871[label="1;1181pkt 1181fpkt"];
7054--8871[label="1;1181pkt 1181fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="130.209.99.86" src_port="3832"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,002,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1230[label="132.19.200.102;d;41pkt 41fpkt", shape=diamond, color=yellow];
2904[label="132.19.200.102;d;25pkt 25fpkt", shape=hexagon, color=black];
4027[label="55.168.82.57;384pkt 384fpkt", shape=pentagon, color=darkviolet];
6776[label="55.168.82.57;385pkt 385fpkt", shape=invtriangle, color=brown];
8691[label="55.168.82.57;384pkt 384fpkt", shape=invhouse, color=bisque];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.168.82.57:10007, *:137}[90.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10007: (47.3749%)&lt;BR/&gt; 137: (47.3749%)&lt;BR/&gt; 80: (2.17391%)&lt;BR/&gt; 25: (0.451189%)&lt;BR/&gt; 59313: (0.0820345%)&gt;];
}
1230--2904[label="1;25pkt 25fpkt"];
1230--3296[label="0.121951;5pkt 5fpkt"];
1230--4027[label="0.0243902;1pkt 1fpkt"];
1230--4291[label="0.333333;1pkt 1fpkt"];
1230--4459[label="0.08;2pkt 2fpkt"];
1230--4805[label="0.0243902;1pkt 1fpkt"];
1230--4930[label="0.2;1pkt 1fpkt"];
1230--5816[label="0.181818;2pkt 2fpkt"];
1230--6776[label="0.0243902;1pkt 1fpkt"];
1230--6968[label="0.333333;1pkt 1fpkt"];
1230--7085[label="0.0769231;2pkt 2fpkt"];
1230--7330[label="0.0243902;1pkt 1fpkt"];
1230--8039[label="0.181818;2pkt 2fpkt"];
1230--8691[label="0.0243902;1pkt 1fpkt"];
1230--8816[label="0.333333;1pkt 1fpkt"];
1230--8893[label="0.0769231;2pkt 2fpkt"];
1230--9052[label="0.0243902;1pkt 1fpkt"];
2904--4027[label="0.04;1pkt 1fpkt"];
2904--4291[label="0.333333;1pkt 1fpkt"];
2904--4459[label="0.04;1pkt 1fpkt"];
2904--4805[label="0.04;1pkt 1fpkt"];
2904--4930[label="0.2;1pkt 1fpkt"];
2904--6776[label="0.04;1pkt 1fpkt"];
2904--6968[label="0.333333;1pkt 1fpkt"];
2904--7085[label="0.04;1pkt 1fpkt"];
2904--7330[label="0.04;1pkt 1fpkt"];
2904--8691[label="0.04;1pkt 1fpkt"];
2904--8816[label="0.333333;1pkt 1fpkt"];
2904--8893[label="0.04;1pkt 1fpkt"];
2904--9052[label="0.04;1pkt 1fpkt"];
4027--6776[label="1;384pkt 384fpkt"];
4027--8691[label="1;384pkt 384fpkt"];
6776--8691[label="1;384pkt 384fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="55.168.82.57" src_port="10007"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
704[label="132.19.198.45;s;928pkt 928fpkt", shape=diamond, color=yellow];
769[label="132.18.85.165;s;163pkt 163fpkt", shape=diamond, color=yellow];
1378[label="220.237.9.27;d;68pkt 68fpkt", shape=diamond, color=yellow];
3908[label="132.19.198.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5292[label="132.18.85.165;163pkt 163fpkt", shape=pentagon, color=darkviolet];
6695[label="132.19.198.45;2pkt 2fpkt", shape=invtriangle, color=brown];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.198.45:*, *:80}[80.6777%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0769%)&lt;BR/&gt; 443: (1.546%)&lt;BR/&gt; 0: (0.452489%)&lt;BR/&gt; 123: (0.226244%)&lt;BR/&gt; 51909: (0.15083%)&gt;];
}
704--792[label="0.00646552;6pkt 6fpkt"];
704--808[label="0.00877193;3pkt 3fpkt"];
704--869[label="0.0319489;10pkt 10fpkt"];
704--919[label="0.0037037;1pkt 1fpkt"];
704--995[label="0.0177936;5pkt 5fpkt"];
704--1066[label="0.0496894;8pkt 8fpkt"];
704--1227[label="0.302564;59pkt 59fpkt"];
704--1354[label="0.0136986;1pkt 1fpkt"];
704--1378[label="0.0735294;5pkt 5fpkt"];
704--1386[label="0.0498084;13pkt 13fpkt"];
704--1400[label="0.0037037;1pkt 1fpkt"];
704--1403[label="0.111111;16pkt 16fpkt"];
704--1517[label="0.0208333;4pkt 4fpkt"];
704--1640[label="0.123077;8pkt 8fpkt"];
704--1689[label="0.0462963;5pkt 5fpkt"];
704--1898[label="0.0212766;2pkt 2fpkt"];
704--1903[label="0.0227273;3pkt 3fpkt"];
704--1917[label="0.0108696;1pkt 1fpkt"];
704--1921[label="0.00538793;5pkt 5fpkt"];
704--1925[label="0.0169492;1pkt 1fpkt"];
704--1955[label="0.330709;42pkt 42fpkt"];
704--1965[label="0.0571429;8pkt 8fpkt"];
704--2139[label="0.0210526;2pkt 2fpkt"];
704--2150[label="0.469388;46pkt 46fpkt"];
704--2324[label="0.0166667;2pkt 2fpkt"];
704--2350[label="0.0294118;1pkt 1fpkt"];
704--2368[label="0.0359712;5pkt 5fpkt"];
704--2385[label="0.760638;143pkt 143fpkt"];
704--2555[label="0.00704225;1pkt 1fpkt"];
704--2587[label="0.0192308;1pkt 1fpkt"];
704--2831[label="1;455pkt 455fpkt"];
704--2908[label="0.2;9pkt 9fpkt"];
704--3054[label="0.322222;29pkt 29fpkt"];
704--3296[label="0.107759;100pkt 100fpkt"];
704--3908[label="0.5;1pkt 1fpkt"];
704--6695[label="0.5;1pkt 1fpkt"];
769--1378[label="0.926471;63pkt 63fpkt"];
769--5292[label="1;163pkt 163fpkt"];
1378--2831[label="0.0735294;5pkt 5fpkt"];
1378--5292[label="0.926471;63pkt 63fpkt"];
3908--6695[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.198.45"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00835,2.28945,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
621[label="85.206.254.169;s;2pkt 2fpkt", shape=diamond, color=yellow];
795[label="147.13.224.216;d;361pkt 361fpkt", shape=diamond, color=yellow];
925[label="32.19.123.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
1439[label="48.11.148.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1548[label="213.125.60.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
2226[label="52.219.243.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
2230[label="34.217.0.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
2632[label="34.95.99.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
2929[label="85.206.254.169;s;2pkt 2fpkt", shape=hexagon, color=black];
3250[label="34.95.99.74;s;1pkt 1fpkt", shape=hexagon, color=black];
4247[label="99.9.187.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4257[label="34.95.99.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8799[label="34.95.99.74;1pkt 1fpkt", shape=invhouse, color=bisque];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:6881, 147.13.224.216:60085}[25.7618%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60085: (46.1436%)&lt;BR/&gt; 6881: (12.8989%)&lt;BR/&gt; 0: (4.25532%)&lt;BR/&gt; 49152: (0.797872%)&lt;BR/&gt; 50000: (0.664894%)&gt;];
}
621--795[label="1;2pkt 2fpkt"];
621--2929[label="1;2pkt 2fpkt"];
795--925[label="1;1pkt 1fpkt"];
795--1417[label="1;1pkt 1fpkt"];
795--1439[label="1;1pkt 1fpkt"];
795--1548[label="1;1pkt 1fpkt"];
795--2226[label="1;1pkt 1fpkt"];
795--2230[label="1;1pkt 1fpkt"];
795--2632[label="1;1pkt 1fpkt"];
795--2731[label="1;1pkt 1fpkt"];
795--2812[label="1;1pkt 1fpkt"];
795--2929[label="1;2pkt 2fpkt"];
795--3059[label="1;1pkt 1fpkt"];
795--3089[label="1;1pkt 1fpkt"];
795--3250[label="1;1pkt 1fpkt"];
795--3944[label="1;1pkt 1fpkt"];
795--4247[label="1;2pkt 2fpkt"];
795--4257[label="1;1pkt 1fpkt"];
795--4474[label="1;1pkt 1fpkt"];
795--5722[label="1;1pkt 1fpkt"];
795--7093[label="1;1pkt 1fpkt"];
795--7974[label="1;1pkt 1fpkt"];
795--8799[label="1;1pkt 1fpkt"];
795--9460[label="1;1pkt 1fpkt"];
2632--3250[label="1;1pkt 1fpkt"];
2632--4257[label="1;1pkt 1fpkt"];
2632--8799[label="1;1pkt 1fpkt"];
3250--4257[label="1;1pkt 1fpkt"];
3250--8799[label="1;1pkt 1fpkt"];
4257--8799[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_port="6881"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1563[label="135.134.189.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
2931[label="135.134.189.237;s;1pkt 1fpkt", shape=hexagon, color=black];
6134[label="135.134.189.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{135.134.189.237:4249, 164.23.213.217:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4249: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1563--2931[label="1;1pkt 1fpkt"];
1563--3296[label="1;1pkt 1fpkt"];
1563--6134[label="1;1pkt 1fpkt"];
2931--3296[label="1;1pkt 1fpkt"];
2931--6134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.213.217" dst_port="80" src_ip="135.134.189.237" src_port="4249"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
745[label="49.4.159.7;s;318pkt 318fpkt", shape=diamond, color=yellow];
2782[label="49.4.159.7;s;318pkt 318fpkt", shape=hexagon, color=black];
3414[label="49.4.159.7;317pkt 317fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.4.159.7:*, *:445}[66.3522%]&lt;BR/&gt;{49.4.159.7:*, *:139}[33.6478%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.1584%)&lt;BR/&gt; 139: (16.8416%)&lt;BR/&gt; 2191: (0.314795%)&lt;BR/&gt; 2116: (0.314795%)&lt;BR/&gt; 2111: (0.314795%)&gt;];
}
745--983[label="0.5;1pkt 1fpkt"];
745--2782[label="1;318pkt 318fpkt"];
745--3414[label="1;317pkt 317fpkt"];
2782--3414[label="1;317pkt 317fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="49.4.159.7"/>
      <filter dst_port="139" src_ip="49.4.159.7"/>
    </slice>
    <from sec="1144126861" usec="0"/>
    <to sec="1144126944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1033[label="134.181.234.193;s;6pkt 6fpkt", shape=diamond, color=yellow];
2949[label="134.181.234.193;s;6pkt 6fpkt", shape=hexagon, color=black];
5613[label="134.181.234.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7895[label="134.181.234.193;6pkt 6fpkt", shape=invtriangle, color=brown];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.181.234.193:*, 132.19.217.22:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3203: (8.33333%)&lt;BR/&gt; 3202: (8.33333%)&lt;BR/&gt; 3201: (8.33333%)&lt;BR/&gt; 3200: (8.33333%)&gt;];
}
1033--1034[label="1;6pkt 6fpkt"];
1033--2949[label="1;6pkt 6fpkt"];
1033--5613[label="1;6pkt 6fpkt"];
1033--7895[label="1;6pkt 6fpkt"];
2949--5613[label="1;6pkt 6fpkt"];
2949--7895[label="1;6pkt 6fpkt"];
5613--7895[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.217.22" dst_port="80" src_ip="134.181.234.193"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1073[label="194.101.159.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
2963[label="194.101.159.103;s;1pkt 1fpkt", shape=hexagon, color=black];
4578[label="194.101.159.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.101.159.103:37875, 194.212.158.50:56701}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56701: (50%)&lt;BR/&gt; 37875: (50%)&gt;];
}
1073--2963[label="1;1pkt 1fpkt"];
1073--4578[label="1;1pkt 1fpkt"];
2963--4578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.158.50" dst_port="56701" src_ip="194.101.159.103" src_port="37875"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1463[label="128.28.217.60;d;4pkt 4fpkt", shape=diamond, color=yellow];
1464[label="36.106.130.177;s;3pkt 3fpkt", shape=diamond, color=yellow];
2983[label="128.28.217.60;d;3pkt 3fpkt", shape=hexagon, color=black];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.158.35.234:49243, 128.28.217.60:445}[25%]&lt;BR/&gt;{36.106.130.177:50260, 128.28.217.60:80}[25%]&lt;BR/&gt;{36.106.130.177:53022, 128.28.217.60:80}[25%]&lt;BR/&gt;{36.106.130.177:53336, 128.28.217.60:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 53336: (15%)&lt;BR/&gt; 53022: (15%)&lt;BR/&gt; 50260: (15%)&lt;BR/&gt; 49243: (5%)&gt;];
}
1463--1464[label="1;3pkt 3fpkt"];
1463--2983[label="1;3pkt 3fpkt"];
1464--2983[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.60" dst_port="80" src_ip="36.106.130.177" src_port="53336"/>
      <filter dst_ip="128.28.217.60" dst_port="80" src_ip="36.106.130.177" src_port="53022"/>
      <filter dst_ip="128.28.217.60" dst_port="80" src_ip="36.106.130.177" src_port="50260"/>
      <filter dst_ip="128.28.217.60" dst_port="445" src_ip="83.158.35.234" src_port="49243"/>
    </slice>
    <from sec="1144126992" usec="0"/>
    <to sec="1144127380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1742[label="132.19.150.179;d;16pkt 16fpkt", shape=diamond, color=yellow];
1756[label="38.79.238.226;s;16pkt 16fpkt", shape=diamond, color=yellow];
2985[label="132.19.150.179;d;16pkt 16fpkt", shape=hexagon, color=black];
2990[label="38.79.238.226;s;16pkt 16fpkt", shape=hexagon, color=black];
6027[label="38.79.238.226;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8188[label="38.79.238.226;16pkt 16fpkt", shape=invtriangle, color=brown];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.79.238.226:80, 132.19.150.179:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3889: (3.125%)&lt;BR/&gt; 3888: (3.125%)&lt;BR/&gt; 3881: (3.125%)&lt;BR/&gt; 3880: (3.125%)&gt;];
}
1742--1756[label="1;16pkt 16fpkt"];
1742--2985[label="1;16pkt 16fpkt"];
1742--2990[label="1;16pkt 16fpkt"];
1742--6027[label="1;16pkt 16fpkt"];
1742--8188[label="1;16pkt 16fpkt"];
1756--2985[label="1;16pkt 16fpkt"];
1756--2990[label="1;16pkt 16fpkt"];
1756--6027[label="1;16pkt 16fpkt"];
1756--8188[label="1;16pkt 16fpkt"];
2985--2990[label="1;16pkt 16fpkt"];
2985--6027[label="1;16pkt 16fpkt"];
2985--8188[label="1;16pkt 16fpkt"];
2990--6027[label="1;16pkt 16fpkt"];
2990--8188[label="1;16pkt 16fpkt"];
6027--8188[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.150.179" src_ip="38.79.238.226" src_port="80"/>
    </slice>
    <from sec="1144127015" usec="0"/>
    <to sec="1144127391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1743[label="132.19.150.179;s;97pkt 97fpkt", shape=diamond, color=yellow];
1755[label="38.79.238.226;d;16pkt 16fpkt", shape=diamond, color=yellow];
2989[label="38.79.238.226;d;16pkt 16fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.150.179:*, 203.31.91.203:443}[35.0515%]&lt;BR/&gt;{132.19.150.179:*, 203.31.91.145:443}[23.7113%]&lt;BR/&gt;{132.19.150.179:*, *:80}[21.6495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (29.0698%)&lt;BR/&gt; 80: (20.5426%)&lt;BR/&gt; 3889: (1.16279%)&lt;BR/&gt; 3888: (1.16279%)&lt;BR/&gt; 3881: (1.16279%)&gt;];
}
1743--1755[label="1;16pkt 16fpkt"];
1743--2989[label="1;16pkt 16fpkt"];
1755--2989[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.150.179"/>
      <filter dst_ip="203.31.91.203" dst_port="443" src_ip="132.19.150.179"/>
      <filter dst_ip="203.31.91.145" dst_port="443" src_ip="132.19.150.179"/>
    </slice>
    <from sec="1144127015" usec="0"/>
    <to sec="1144127391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1668[label="132.19.109.152;s;81pkt 81fpkt", shape=diamond, color=yellow];
1769[label="67.37.6.103;d;5pkt 5fpkt", shape=diamond, color=yellow];
2635[label="36.120.113.41;d;12pkt 12fpkt", shape=diamond, color=yellow];
2993[label="67.37.6.103;d;3pkt 3fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.109.152:*, 33.38.213.237:80}[25.9259%]&lt;BR/&gt;{132.19.109.152:*, 38.202.204.179:80}[24.6914%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2752: (1.48515%)&lt;BR/&gt; 2750: (1.48515%)&lt;BR/&gt; 2749: (1.48515%)&lt;BR/&gt; 2829: (0.990099%)&gt;];
}
1668--1769[label="1;5pkt 5fpkt"];
1668--2635[label="1;12pkt 12fpkt"];
1668--2993[label="1;3pkt 3fpkt"];
1769--2993[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="33.38.213.237" dst_port="80" src_ip="132.19.109.152"/>
      <filter dst_ip="38.202.204.179" dst_port="80" src_ip="132.19.109.152"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
681[label="194.212.153.164;s;430pkt 430fpkt", shape=diamond, color=yellow];
2995[label="36.90.196.151;d;1pkt 1fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.153.164:80, *:*}[96.7442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3759%)&lt;BR/&gt; 443: (1.04408%)&lt;BR/&gt; 8888: (0.348028%)&lt;BR/&gt; 52435: (0.232019%)&lt;BR/&gt; 39809: (0.232019%)&gt;];
}
681--1787[label="0.333333;1pkt 1fpkt"];
681--2671[label="0.25;1pkt 1fpkt"];
681--2770[label="1;129pkt 129fpkt"];
681--2995[label="1;1pkt 1fpkt"];
681--3288[label="0.027907;12pkt 12fpkt"];
681--3292[label="0.0906977;39pkt 39fpkt"];
681--3303[label="0.0906977;39pkt 39fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.153.164" src_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
652[label="213.210.25.87;s;2pkt 2fpkt", shape=diamond, color=yellow];
833[label="213.168.80.5;s;2pkt 2fpkt", shape=diamond, color=yellow];
1269[label="215.48.79.2;s;275pkt 275fpkt", shape=diamond, color=yellow];
1362[label="215.34.58.95;s;3pkt 3fpkt", shape=diamond, color=yellow];
1590[label="208.97.71.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
2373[label="85.189.61.20;s;2pkt 2fpkt", shape=diamond, color=yellow];
2939[label="213.210.25.87;s;2pkt 2fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.48.79.2:*, 147.13.228.63:80}[31.4685%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.9167%)&lt;BR/&gt; 53: (3.47222%)&lt;BR/&gt; 6881: (2.60417%)&lt;BR/&gt; 6669: (2.08333%)&lt;BR/&gt; 6666: (2.08333%)&gt;];
}
652--802[label="1;2pkt 2fpkt"];
652--2939[label="1;2pkt 2fpkt"];
652--3001[label="1;2pkt 2fpkt"];
833--3001[label="1;2pkt 2fpkt"];
1269--3001[label="0.909091;250pkt 250fpkt"];
1269--3020[label="1;250pkt 250fpkt"];
1362--3001[label="1;3pkt 3fpkt"];
1590--3001[label="1;2pkt 2fpkt"];
2373--3001[label="1;2pkt 2fpkt"];
2939--3001[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="80" src_ip="215.48.79.2"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
231[label="162.57.175.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
232[label="210.163.164.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
3004[label="162.57.175.230;d;1pkt 1fpkt", shape=hexagon, color=black];
4890[label="210.163.164.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.163.164.133:20832, 162.57.175.230:1029}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20832: (50%)&lt;BR/&gt; 1029: (50%)&gt;];
}
231--232[label="1;1pkt 1fpkt"];
231--3004[label="1;1pkt 1fpkt"];
231--4890[label="1;1pkt 1fpkt"];
232--3004[label="1;1pkt 1fpkt"];
232--4890[label="1;1pkt 1fpkt"];
3004--4890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.57.175.230" dst_port="1029" src_ip="210.163.164.133" src_port="20832"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
248[label="220.52.117.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
249[label="132.19.98.48;s;8pkt 8fpkt", shape=diamond, color=yellow];
3005[label="132.19.98.48;s;8pkt 8fpkt", shape=hexagon, color=black];
3930[label="132.19.98.48;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6709[label="132.19.98.48;8pkt 8fpkt", shape=invtriangle, color=brown];
8644[label="132.19.98.48;7pkt 7fpkt", shape=invhouse, color=bisque];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.98.48:*, 196.111.142.208:443}[62.5%]&lt;BR/&gt;{132.19.98.48:*, 196.111.132.115:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (30%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 49237: (7.5%)&lt;BR/&gt; 8000: (7.5%)&lt;BR/&gt; 49409: (6.25%)&gt;];
}
248--249[label="1;1pkt 1fpkt"];
248--3005[label="1;1pkt 1fpkt"];
248--3930[label="1;1pkt 1fpkt"];
248--6709[label="1;1pkt 1fpkt"];
248--8644[label="1;1pkt 1fpkt"];
249--1631[label="0.25;2pkt 2fpkt"];
249--1683[label="0.625;5pkt 5fpkt"];
249--3005[label="1;8pkt 8fpkt"];
249--3930[label="1;8pkt 8fpkt"];
249--6709[label="1;8pkt 8fpkt"];
249--8644[label="1;7pkt 7fpkt"];
3005--3930[label="1;8pkt 8fpkt"];
3005--6709[label="1;8pkt 8fpkt"];
3005--8644[label="1;7pkt 7fpkt"];
3930--6709[label="1;8pkt 8fpkt"];
3930--8644[label="1;7pkt 7fpkt"];
6709--8644[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="196.111.142.208" dst_port="443" src_ip="132.19.98.48"/>
      <filter dst_ip="196.111.132.115" dst_port="80" src_ip="132.19.98.48"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
857[label="132.18.129.128;s;82pkt 82fpkt", shape=diamond, color=yellow];
1068[label="194.249.199.238;d;51pkt 51fpkt", shape=diamond, color=yellow];
3009[label="132.18.129.128;s;47pkt 47fpkt", shape=hexagon, color=black];
4799[label="132.18.129.128;86pkt 86fpkt", shape=pentagon, color=darkviolet];
7326[label="132.18.129.128;87pkt 87fpkt", shape=invtriangle, color=brown];
9048[label="132.18.129.128;86pkt 86fpkt", shape=invhouse, color=bisque];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.128:80, 194.249.199.238:*}[64.3678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54666: (0.683371%)&lt;BR/&gt; 54393: (0.683371%)&lt;BR/&gt; 48080: (0.683371%)&lt;BR/&gt; 48002: (0.683371%)&gt;];
}
857--1068[label="1;51pkt 51fpkt"];
857--3009[label="1;47pkt 47fpkt"];
857--3288[label="0.134146;11pkt 11fpkt"];
857--3292[label="0.097561;8pkt 8fpkt"];
857--3303[label="0.097561;8pkt 8fpkt"];
857--4799[label="0.987805;81pkt 81fpkt"];
857--7326[label="1;82pkt 82fpkt"];
857--9048[label="0.987805;81pkt 81fpkt"];
1068--3009[label="0.659574;31pkt 31fpkt"];
1068--3288[label="0.156863;8pkt 8fpkt"];
1068--3292[label="0.117647;6pkt 6fpkt"];
1068--3303[label="0.117647;6pkt 6fpkt"];
1068--4799[label="1;51pkt 51fpkt"];
1068--7326[label="1;51pkt 51fpkt"];
1068--9048[label="1;51pkt 51fpkt"];
3009--3288[label="0.234043;11pkt 11fpkt"];
3009--3292[label="0.0212766;1pkt 1fpkt"];
3009--3303[label="0.0212766;1pkt 1fpkt"];
3009--4799[label="0.978723;46pkt 46fpkt"];
3009--7326[label="1;47pkt 47fpkt"];
3009--9048[label="0.978723;46pkt 46fpkt"];
4799--7326[label="1;86pkt 86fpkt"];
4799--9048[label="1;86pkt 86fpkt"];
7326--9048[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="194.249.199.238" src_ip="132.18.129.128" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
1258[label="164.23.165.180;s;39pkt 39fpkt", shape=diamond, color=yellow];
1541[label="194.5.81.253;d;24pkt 24fpkt", shape=diamond, color=yellow];
3016[label="194.5.81.253;d;18pkt 18fpkt", shape=hexagon, color=black];
3105[label="164.23.165.180;s;39pkt 39fpkt", shape=hexagon, color=black];
5475[label="164.23.165.180;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.165.180:80, 194.5.81.253:*}[61.5385%]&lt;BR/&gt;{164.23.165.180:80, 33.37.96.60:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1207: (1.57233%)&lt;BR/&gt; 1206: (1.57233%)&lt;BR/&gt; 1205: (1.57233%)&lt;BR/&gt; 1204: (1.57233%)&gt;];
}
1258--1541[label="1;24pkt 24fpkt"];
1258--3016[label="1;18pkt 18fpkt"];
1258--3105[label="1;39pkt 39fpkt"];
1258--3288[label="0.230769;9pkt 9fpkt"];
1258--3292[label="0.307692;12pkt 12fpkt"];
1258--3303[label="0.307692;12pkt 12fpkt"];
1258--5475[label="1;39pkt 39fpkt"];
1541--3016[label="1;18pkt 18fpkt"];
1541--3105[label="1;24pkt 24fpkt"];
1541--3288[label="0.25;6pkt 6fpkt"];
1541--3292[label="0.416667;10pkt 10fpkt"];
1541--3303[label="0.416667;10pkt 10fpkt"];
1541--5475[label="1;24pkt 24fpkt"];
3016--3105[label="1;18pkt 18fpkt"];
3016--3288[label="0.333333;6pkt 6fpkt"];
3016--3292[label="0.388889;7pkt 7fpkt"];
3016--3303[label="0.388889;7pkt 7fpkt"];
3016--5475[label="1;18pkt 18fpkt"];
3105--3288[label="0.230769;9pkt 9fpkt"];
3105--3292[label="0.307692;12pkt 12fpkt"];
3105--3303[label="0.307692;12pkt 12fpkt"];
3105--5475[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="194.5.81.253" src_ip="164.23.165.180" src_port="80"/>
      <filter dst_ip="33.37.96.60" src_ip="164.23.165.180" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
593[label="195.197.122.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
1496[label="41.25.102.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
3018[label="195.197.122.50;s;1pkt 1fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.197.122.50:1965, 147.13.222.121:80}[50%]&lt;BR/&gt;{41.25.102.224:50121, 147.13.222.121:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1965: (33.3333%)&lt;BR/&gt; 50121: (16.6667%)&gt;];
}
593--3014[label="1;1pkt 1fpkt"];
593--3018[label="1;1pkt 1fpkt"];
593--3296[label="1;1pkt 1fpkt"];
593--3949[label="1;1pkt 1fpkt"];
593--6724[label="1;1pkt 1fpkt"];
1496--3014[label="1;1pkt 1fpkt"];
1496--5990[label="1;1pkt 1fpkt"];
1496--8163[label="1;1pkt 1fpkt"];
3018--3296[label="1;1pkt 1fpkt"];
3018--3949[label="1;1pkt 1fpkt"];
3018--6724[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.222.121" dst_port="80" src_ip="41.25.102.224" src_port="50121"/>
      <filter dst_ip="147.13.222.121" dst_port="80" src_ip="195.197.122.50" src_port="1965"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
1569[label="99.169.237.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
3027[label="99.169.237.62;s;1pkt 1fpkt", shape=hexagon, color=black];
4102[label="99.169.237.62;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.169.237.62:1947, 164.23.213.217:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1947: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1569--3027[label="1;1pkt 1fpkt"];
1569--3296[label="1;1pkt 1fpkt"];
1569--4102[label="1;1pkt 1fpkt"];
3027--3296[label="1;1pkt 1fpkt"];
3027--4102[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.213.217" dst_port="80" src_ip="99.169.237.62" src_port="1947"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
654[label="83.174.160.147;s;2559pkt 2559fpkt", shape=diamond, color=yellow];
3032[label="83.174.160.147;s;1745pkt 1745fpkt", shape=hexagon, color=black];
5065[label="83.174.160.147;2774pkt 2774fpkt", shape=pentagon, color=darkviolet];
7515[label="83.174.160.147;2775pkt 2775fpkt", shape=invtriangle, color=brown];
9166[label="83.174.160.147;2775pkt 2775fpkt", shape=invhouse, color=bisque];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.174.160.147:5121, *:*}[92.2523%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5121: (46.0881%)&lt;BR/&gt; 0: (7.85556%)&lt;BR/&gt; 9635: (0.0554324%)&lt;BR/&gt; 10601: (0.0514729%)&lt;BR/&gt; 2733: (0.0514729%)&gt;];
}
654--788[label="0.000781555;2pkt 2fpkt"];
654--2099[label="0.00851064;2pkt 2fpkt"];
654--3032[label="1;1745pkt 1745fpkt"];
654--5065[label="0.999609;2558pkt 2558fpkt"];
654--7515[label="1;2559pkt 2559fpkt"];
654--9166[label="1;2559pkt 2559fpkt"];
3032--5065[label="1;1745pkt 1745fpkt"];
3032--7515[label="1;1745pkt 1745fpkt"];
3032--9166[label="1;1745pkt 1745fpkt"];
5065--7515[label="1;2774pkt 2774fpkt"];
5065--9166[label="1;2774pkt 2774fpkt"];
7515--9166[label="1;2775pkt 2775fpkt"];
</description>
    <slice>
      <filter src_ip="83.174.160.147" src_port="5121"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
547[label="106.109.162.244;d;206pkt 206fpkt", shape=diamond, color=yellow];
1156[label="150.1.127.210;d;17pkt 17fpkt", shape=diamond, color=yellow];
2285[label="106.109.162.196;d;54pkt 54fpkt", shape=diamond, color=yellow];
2406[label="132.19.78.115;s;31pkt 31fpkt", shape=diamond, color=yellow];
2859[label="132.19.98.152;s;35pkt 35fpkt", shape=hexagon, color=black];
3037[label="132.19.150.64;s;72pkt 72fpkt", shape=hexagon, color=black];
3840[label="128.28.201.39;94pkt 94fpkt", shape=pentagon, color=darkviolet];
3850[label="128.202.172.40;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3960[label="128.202.21.51;47pkt 47fpkt", shape=pentagon, color=darkviolet];
4125[label="132.19.150.64;77pkt 77fpkt", shape=pentagon, color=darkviolet];
4615[label="132.19.149.106;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4636[label="128.202.19.108;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4825[label="161.223.195.129;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4950[label="195.80.131.138;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5441[label="161.223.249.176;56pkt 56fpkt", shape=pentagon, color=darkviolet];
5763[label="132.19.69.205;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5915[label="132.19.53.218;27pkt 27fpkt", shape=pentagon, color=darkviolet];
6651[label="128.28.201.39;95pkt 95fpkt", shape=invtriangle, color=brown];
6734[label="128.202.21.51;48pkt 48fpkt", shape=invtriangle, color=brown];
6847[label="132.19.150.64;77pkt 77fpkt", shape=invtriangle, color=brown];
7190[label="132.19.149.106;16pkt 16fpkt", shape=invtriangle, color=brown];
7204[label="128.202.19.108;26pkt 26fpkt", shape=invtriangle, color=brown];
7345[label="161.223.195.129;53pkt 53fpkt", shape=invtriangle, color=brown];
8960[label="132.19.149.106;15pkt 15fpkt", shape=invhouse, color=bisque];
8969[label="128.202.19.108;27pkt 27fpkt", shape=invhouse, color=bisque];
9062[label="161.223.195.129;53pkt 53fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 106.109.162.244:80}[26.283%]&lt;BR/&gt;{*:*, *:443}[21.9285%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.6105%)&lt;BR/&gt; 443: (10.5701%)&lt;BR/&gt; 123: (1.93983%)&lt;BR/&gt; 6202: (0.870942%)&lt;BR/&gt; 143: (0.791766%)&gt;];
}
547--569[label="0.106796;22pkt 22fpkt"];
547--666[label="0.0526316;4pkt 4fpkt"];
547--1094[label="0.00568182;1pkt 1fpkt"];
547--2406[label="0.193548;6pkt 6fpkt"];
547--2859[label="0.914286;32pkt 32fpkt"];
547--3037[label="0.0416667;3pkt 3fpkt"];
547--3180[label="0.106796;22pkt 22fpkt"];
547--3225[label="0.0339806;7pkt 7fpkt"];
547--3296[label="0.0533981;11pkt 11fpkt"];
547--3840[label="0.12766;12pkt 12fpkt"];
547--3850[label="0.285714;2pkt 2fpkt"];
547--3960[label="0.0638298;3pkt 3fpkt"];
547--4125[label="0.0519481;4pkt 4fpkt"];
547--4375[label="0.106796;22pkt 22fpkt"];
547--4615[label="0.2;3pkt 3fpkt"];
547--4636[label="0.192308;5pkt 5fpkt"];
547--4825[label="0.188679;10pkt 10fpkt"];
547--4950[label="0.222222;4pkt 4fpkt"];
547--5441[label="0.107143;6pkt 6fpkt"];
547--5632[label="0.0533981;11pkt 11fpkt"];
547--5763[label="0.277778;5pkt 5fpkt"];
547--5915[label="0.333333;9pkt 9fpkt"];
547--6651[label="0.126316;12pkt 12fpkt"];
547--6734[label="0.0625;3pkt 3fpkt"];
547--6847[label="0.0519481;4pkt 4fpkt"];
547--7027[label="0.106796;22pkt 22fpkt"];
547--7190[label="0.1875;3pkt 3fpkt"];
547--7204[label="0.192308;5pkt 5fpkt"];
547--7345[label="0.188679;10pkt 10fpkt"];
547--7911[label="0.0533981;11pkt 11fpkt"];
547--8852[label="0.106796;22pkt 22fpkt"];
547--8960[label="0.2;3pkt 3fpkt"];
547--8969[label="0.185185;5pkt 5fpkt"];
547--9062[label="0.188679;10pkt 10fpkt"];
547--9422[label="0.0533981;11pkt 11fpkt"];
1156--3037[label="0.294118;5pkt 5fpkt"];
1156--3065[label="1;13pkt 13fpkt"];
1156--4125[label="0.294118;5pkt 5fpkt"];
1156--4978[label="0.176471;3pkt 3fpkt"];
1156--5632[label="0.294118;5pkt 5fpkt"];
1156--6847[label="0.294118;5pkt 5fpkt"];
1156--7450[label="0.235294;4pkt 4fpkt"];
1156--7911[label="0.294118;5pkt 5fpkt"];
1156--9422[label="0.294118;5pkt 5fpkt"];
2285--2406[label="0.580645;18pkt 18fpkt"];
2285--3225[label="0.0185185;1pkt 1fpkt"];
2285--4825[label="0.113208;6pkt 6fpkt"];
2285--5763[label="0.666667;12pkt 12fpkt"];
2285--7345[label="0.113208;6pkt 6fpkt"];
2285--7549[label="0.5;1pkt 1fpkt"];
2285--9062[label="0.113208;6pkt 6fpkt"];
3037--3065[label="0.384615;5pkt 5fpkt"];
3037--4125[label="1;72pkt 72fpkt"];
3037--6847[label="1;72pkt 72fpkt"];
3840--6651[label="1;94pkt 94fpkt"];
3960--6734[label="1;47pkt 47fpkt"];
4125--6847[label="1;77pkt 77fpkt"];
4615--7190[label="1;15pkt 15fpkt"];
4615--8960[label="1;15pkt 15fpkt"];
4636--7204[label="1;26pkt 26fpkt"];
4636--8969[label="1;26pkt 26fpkt"];
4825--7345[label="1;53pkt 53fpkt"];
4825--9062[label="1;53pkt 53fpkt"];
7190--8960[label="1;15pkt 15fpkt"];
7204--8969[label="1;26pkt 26fpkt"];
7345--9062[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="443"/>
      <filter dst_ip="106.109.162.244" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1348[label="132.19.192.20;d;77pkt 77fpkt", shape=diamond, color=yellow];
1627[label="83.175.127.146;s;14pkt 14fpkt", shape=diamond, color=yellow];
3043[label="83.175.127.146;s;12pkt 12fpkt", shape=hexagon, color=black];
3445[label="83.190.229.9;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4706[label="83.190.229.115;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5052[label="83.175.127.146;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7255[label="83.190.229.115;34pkt 34fpkt", shape=invtriangle, color=brown];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.190.229.115:80, 132.19.192.20:*}[40.9639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4819%)&lt;BR/&gt; 4604: (1.03627%)&lt;BR/&gt; 4603: (1.03627%)&lt;BR/&gt; 4599: (1.03627%)&lt;BR/&gt; 4589: (1.03627%)&gt;];
}
1348--1627[label="1;14pkt 14fpkt"];
1348--3043[label="1;12pkt 12fpkt"];
1348--3288[label="0.116883;9pkt 9fpkt"];
1348--3292[label="0.246753;19pkt 19fpkt"];
1348--3303[label="0.246753;19pkt 19fpkt"];
1348--3445[label="0.777778;7pkt 7fpkt"];
1348--3618[label="0.0192308;1pkt 1fpkt"];
1348--3864[label="0.012987;1pkt 1fpkt"];
1348--4706[label="0.882353;30pkt 30fpkt"];
1348--5052[label="1;13pkt 13fpkt"];
1348--6665[label="0.012987;1pkt 1fpkt"];
1348--7255[label="0.882353;30pkt 30fpkt"];
1627--3043[label="1;12pkt 12fpkt"];
1627--3288[label="0.142857;2pkt 2fpkt"];
1627--3292[label="0.142857;2pkt 2fpkt"];
1627--3303[label="0.142857;2pkt 2fpkt"];
1627--5052[label="1;13pkt 13fpkt"];
3043--3288[label="0.166667;2pkt 2fpkt"];
3043--5052[label="0.916667;11pkt 11fpkt"];
4706--7255[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.192.20" src_ip="83.190.229.115" src_port="80"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1936[label="161.223.103.28;s;99pkt 99fpkt", shape=diamond, color=yellow];
3047[label="161.223.103.28;s;76pkt 76fpkt", shape=hexagon, color=black];
3707[label="161.223.103.28;104pkt 104fpkt", shape=pentagon, color=darkviolet];
6568[label="161.223.103.28;103pkt 103fpkt", shape=invtriangle, color=brown];
8562[label="161.223.103.28;103pkt 103fpkt", shape=invhouse, color=bisque];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.103.28:25559, *:*}[83.6538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25559: (41.2371%)&lt;BR/&gt; 80: (5.6701%)&lt;BR/&gt; 48338: (1.03093%)&lt;BR/&gt; 33442: (1.03093%)&lt;BR/&gt; 30883: (1.03093%)&gt;];
}
1936--3047[label="1;76pkt 76fpkt"];
1936--3707[label="1;99pkt 99fpkt"];
1936--6568[label="0.989899;98pkt 98fpkt"];
1936--8562[label="0.989899;98pkt 98fpkt"];
3047--3707[label="1;76pkt 76fpkt"];
3047--6568[label="0.986842;75pkt 75fpkt"];
3047--8562[label="0.986842;75pkt 75fpkt"];
3707--6568[label="1;103pkt 103fpkt"];
3707--8562[label="1;103pkt 103fpkt"];
6568--8562[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.103.28" src_port="25559"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1096[label="34.238.159.235;d;2pkt 2fpkt", shape=diamond, color=yellow];
1586[label="195.89.106.128;s;271pkt 271fpkt", shape=diamond, color=yellow];
1693[label="220.118.232.118;d;4pkt 4fpkt", shape=diamond, color=yellow];
1956[label="32.136.156.217;d;2pkt 2fpkt", shape=diamond, color=yellow];
1996[label="36.172.50.27;d;10pkt 10fpkt", shape=diamond, color=yellow];
3031[label="195.89.106.128;s;216pkt 216fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.106.128:0, *:0}[95.0877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.2277%)&lt;BR/&gt; 25: (0.990099%)&lt;BR/&gt; 22: (0.29703%)&lt;BR/&gt; 55083: (0.0990099%)&lt;BR/&gt; 48427: (0.0990099%)&gt;];
}
1096--1586[label="0.5;1pkt 1fpkt"];
1096--3048[label="1;2pkt 2fpkt"];
1096--4797[label="0.5;1pkt 1fpkt"];
1096--5282[label="0.5;1pkt 1fpkt"];
1096--7324[label="0.5;1pkt 1fpkt"];
1096--7668[label="0.5;1pkt 1fpkt"];
1096--9046[label="0.5;1pkt 1fpkt"];
1096--9269[label="0.5;1pkt 1fpkt"];
1586--1587[label="0.00591716;1pkt 1fpkt"];
1586--1611[label="0.0588235;1pkt 1fpkt"];
1586--1628[label="0.00369004;1pkt 1fpkt"];
1586--1658[label="0.00970874;1pkt 1fpkt"];
1586--1693[label="0.25;1pkt 1fpkt"];
1586--1694[label="0.0060241;1pkt 1fpkt"];
1586--1879[label="0.00934579;1pkt 1fpkt"];
1586--1894[label="0.037037;1pkt 1fpkt"];
1586--1913[label="0.00980392;1pkt 1fpkt"];
1586--1934[label="0.00925926;1pkt 1fpkt"];
1586--1954[label="0.25;1pkt 1fpkt"];
1586--1956[label="0.5;1pkt 1fpkt"];
1586--1996[label="0.1;1pkt 1fpkt"];
1586--2089[label="0.00497512;1pkt 1fpkt"];
1586--2131[label="0.047619;1pkt 1fpkt"];
1586--2277[label="0.111111;1pkt 1fpkt"];
1586--2350[label="0.0294118;1pkt 1fpkt"];
1586--2441[label="0.0357143;1pkt 1fpkt"];
1586--2514[label="0.0833333;1pkt 1fpkt"];
1586--2531[label="0.0454545;1pkt 1fpkt"];
1586--2570[label="0.04;1pkt 1fpkt"];
1586--2944[label="0.5;1pkt 1fpkt"];
1586--3031[label="1;216pkt 216fpkt"];
1586--3048[label="0.5;1pkt 1fpkt"];
1586--3117[label="0.00990099;1pkt 1fpkt"];
1586--4797[label="0.99631;270pkt 270fpkt"];
1586--7324[label="1;271pkt 271fpkt"];
1586--9046[label="1;271pkt 271fpkt"];
1693--3031[label="0.25;1pkt 1fpkt"];
1693--4797[label="0.25;1pkt 1fpkt"];
1693--5132[label="0.75;3pkt 3fpkt"];
1693--7324[label="0.25;1pkt 1fpkt"];
1693--7556[label="0.75;3pkt 3fpkt"];
1693--9046[label="0.25;1pkt 1fpkt"];
1956--3031[label="0.5;1pkt 1fpkt"];
1956--4797[label="0.5;1pkt 1fpkt"];
1956--6084[label="0.5;1pkt 1fpkt"];
1956--7324[label="0.5;1pkt 1fpkt"];
1956--9046[label="0.5;1pkt 1fpkt"];
1996--2957[label="0.333333;1pkt 1fpkt"];
1996--3031[label="0.1;1pkt 1fpkt"];
1996--3239[label="0.5;5pkt 5fpkt"];
1996--4797[label="0.1;1pkt 1fpkt"];
1996--5746[label="0.1;1pkt 1fpkt"];
1996--7324[label="0.1;1pkt 1fpkt"];
1996--7993[label="0.1;1pkt 1fpkt"];
1996--9046[label="0.1;1pkt 1fpkt"];
1996--9473[label="0.1;1pkt 1fpkt"];
3031--3117[label="0.00990099;1pkt 1fpkt"];
3031--4797[label="1;216pkt 216fpkt"];
3031--7324[label="1;216pkt 216fpkt"];
3031--9046[label="1;216pkt 216fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.106.128"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
193[label="128.28.209.176;s;627pkt 627fpkt", shape=diamond, color=yellow];
274[label="132.19.87.254;s;406pkt 406fpkt", shape=diamond, color=yellow];
423[label="132.19.213.171;s;889pkt 889fpkt", shape=diamond, color=yellow];
438[label="220.228.175.42;d;7pkt 7fpkt", shape=diamond, color=yellow];
697[label="132.19.193.68;s;149pkt 149fpkt", shape=diamond, color=yellow];
1227[label="196.206.185.12;d;195pkt 195fpkt", shape=diamond, color=yellow];
1955[label="196.206.185.11;d;127pkt 127fpkt", shape=diamond, color=yellow];
1982[label="39.170.90.69;d;79pkt 79fpkt", shape=diamond, color=yellow];
2150[label="196.206.185.2;d;98pkt 98fpkt", shape=diamond, color=yellow];
2167[label="196.206.189.75;d;83pkt 83fpkt", shape=diamond, color=yellow];
2244[label="38.192.129.107;d;5pkt 5fpkt", shape=diamond, color=yellow];
2385[label="196.206.185.0;d;188pkt 188fpkt", shape=diamond, color=yellow];
2581[label="196.206.185.5;d;110pkt 110fpkt", shape=diamond, color=yellow];
2730[label="128.28.209.176;s;166pkt 166fpkt", shape=hexagon, color=black];
3054[label="196.206.185.11;d;90pkt 90fpkt", shape=hexagon, color=black];
4174[label="132.19.193.68;153pkt 153fpkt", shape=pentagon, color=darkviolet];
4782[label="161.223.158.125;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5440[label="128.28.209.176;667pkt 667fpkt", shape=pentagon, color=darkviolet];
6280[label="132.19.87.254;420pkt 420fpkt", shape=pentagon, color=darkviolet];
6881[label="132.19.193.68;152pkt 152fpkt", shape=invtriangle, color=brown];
7313[label="161.223.158.125;16pkt 16fpkt", shape=invtriangle, color=brown];
8377[label="132.19.87.254;420pkt 420fpkt", shape=invtriangle, color=brown];
9038[label="161.223.158.125;16pkt 16fpkt", shape=invhouse, color=bisque];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[47.0098%]&lt;BR/&gt;{132.19.213.171:*, *:*}[32.2581%]&lt;BR/&gt;{*:25, *:*}[27.8362%]&lt;BR/&gt;{128.28.209.176:*, *:*}[24.1754%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (22.1993%)&lt;BR/&gt; 80: (20.378%)&lt;BR/&gt; 53: (4.11498%)&lt;BR/&gt; 2703: (2.97303%)&lt;BR/&gt; 3827: (0.413467%)&gt;];
}
193--311[label="0.0015949;1pkt 1fpkt"];
193--438[label="0.142857;1pkt 1fpkt"];
193--792[label="0.0382775;24pkt 24fpkt"];
193--808[label="0.00292398;1pkt 1fpkt"];
193--1227[label="0.446154;87pkt 87fpkt"];
193--1921[label="0.00956938;6pkt 6fpkt"];
193--1955[label="0.141732;18pkt 18fpkt"];
193--1982[label="0.240506;19pkt 19fpkt"];
193--2150[label="0.102041;10pkt 10fpkt"];
193--2167[label="0.204819;17pkt 17fpkt"];
193--2385[label="0.239362;45pkt 45fpkt"];
193--2581[label="0.418182;46pkt 46fpkt"];
193--2730[label="1;166pkt 166fpkt"];
193--3054[label="0.133333;12pkt 12fpkt"];
193--3296[label="0.0239234;15pkt 15fpkt"];
193--3302[label="0.00318979;2pkt 2fpkt"];
193--5440[label="1;627pkt 627fpkt"];
274--311[label="0.00246305;1pkt 1fpkt"];
274--438[label="0.142857;1pkt 1fpkt"];
274--792[label="0.0197044;8pkt 8fpkt"];
274--1092[label="0.25;5pkt 5fpkt"];
274--1376[label="0.0566038;3pkt 3fpkt"];
274--1595[label="0.142857;1pkt 1fpkt"];
274--1921[label="0.00738916;3pkt 3fpkt"];
274--1982[label="0.139241;11pkt 11fpkt"];
274--2000[label="0.025641;1pkt 1fpkt"];
274--2555[label="0.00704225;1pkt 1fpkt"];
274--3287[label="0.00738916;3pkt 3fpkt"];
274--3290[label="0.00246305;1pkt 1fpkt"];
274--3302[label="0.00246305;1pkt 1fpkt"];
274--6280[label="1;406pkt 406fpkt"];
274--8377[label="1;406pkt 406fpkt"];
423--438[label="0.142857;1pkt 1fpkt"];
423--579[label="0.0035524;2pkt 2fpkt"];
423--694[label="0.0761905;16pkt 16fpkt"];
423--792[label="0.0179978;16pkt 16fpkt"];
423--869[label="0.0191693;6pkt 6fpkt"];
423--955[label="0.00225734;1pkt 1fpkt"];
423--1030[label="0.0833333;1pkt 1fpkt"];
423--1066[label="0.0124224;2pkt 2fpkt"];
423--1155[label="0.0359281;6pkt 6fpkt"];
423--1157[label="0.25;1pkt 1fpkt"];
423--1376[label="0.0754717;4pkt 4fpkt"];
423--1386[label="0.0229885;6pkt 6fpkt"];
423--1403[label="0.0138889;2pkt 2fpkt"];
423--1425[label="0.0155039;2pkt 2fpkt"];
423--1448[label="0.00746269;1pkt 1fpkt"];
423--1513[label="0.00903614;3pkt 3fpkt"];
423--1517[label="0.0208333;4pkt 4fpkt"];
423--1555[label="0.00934579;1pkt 1fpkt"];
423--1631[label="0.0746269;5pkt 5fpkt"];
423--1640[label="0.0153846;1pkt 1fpkt"];
423--1679[label="0.0535714;6pkt 6fpkt"];
423--1689[label="0.0925926;10pkt 10fpkt"];
423--1731[label="0.0384615;3pkt 3fpkt"];
423--1823[label="0.04;1pkt 1fpkt"];
423--1898[label="0.0212766;2pkt 2fpkt"];
423--1917[label="0.0543478;5pkt 5fpkt"];
423--1921[label="0.0146232;13pkt 13fpkt"];
423--1925[label="0.0338983;2pkt 2fpkt"];
423--1982[label="0.240506;19pkt 19fpkt"];
423--2215[label="0.0470588;4pkt 4fpkt"];
423--2233[label="0.176471;3pkt 3fpkt"];
423--2244[label="0.2;1pkt 1fpkt"];
423--2324[label="0.00833333;1pkt 1fpkt"];
423--2555[label="0.0211268;3pkt 3fpkt"];
423--2587[label="0.0384615;2pkt 2fpkt"];
423--3148[label="0.0461538;6pkt 6fpkt"];
423--3287[label="0.00112486;1pkt 1fpkt"];
423--3290[label="0.0168729;15pkt 15fpkt"];
423--3296[label="0.00112486;1pkt 1fpkt"];
423--3302[label="0.00112486;1pkt 1fpkt"];
438--591[label="0.142857;1pkt 1fpkt"];
438--697[label="0.142857;1pkt 1fpkt"];
438--2730[label="0.142857;1pkt 1fpkt"];
438--3573[label="0.142857;1pkt 1fpkt"];
438--4174[label="0.142857;1pkt 1fpkt"];
438--5440[label="0.142857;1pkt 1fpkt"];
438--6280[label="0.142857;1pkt 1fpkt"];
438--6472[label="0.142857;1pkt 1fpkt"];
438--6881[label="0.142857;1pkt 1fpkt"];
438--8377[label="0.142857;1pkt 1fpkt"];
697--1021[label="0.604027;90pkt 90fpkt"];
697--4174[label="1;149pkt 149fpkt"];
697--6881[label="0.993289;148pkt 148fpkt"];
1227--1509[label="0.432432;48pkt 48fpkt"];
1227--2730[label="0.0361446;6pkt 6fpkt"];
1227--2831[label="0.102564;20pkt 20fpkt"];
1227--3006[label="0.361702;34pkt 34fpkt"];
1227--3296[label="0.0666667;13pkt 13fpkt"];
1227--5440[label="0.446154;87pkt 87fpkt"];
1955--2730[label="0.0393701;5pkt 5fpkt"];
1955--2831[label="0.149606;19pkt 19fpkt"];
1955--3054[label="1;90pkt 90fpkt"];
1955--3296[label="0.0629921;8pkt 8fpkt"];
1955--3561[label="0.258065;16pkt 16fpkt"];
1955--5440[label="0.141732;18pkt 18fpkt"];
1982--2730[label="0.0632911;5pkt 5fpkt"];
1982--3573[label="0.240506;19pkt 19fpkt"];
1982--5440[label="0.240506;19pkt 19fpkt"];
1982--6280[label="0.139241;11pkt 11fpkt"];
1982--6472[label="0.240506;19pkt 19fpkt"];
1982--8377[label="0.139241;11pkt 11fpkt"];
2150--2730[label="0.102041;10pkt 10fpkt"];
2150--2831[label="0.214286;21pkt 21fpkt"];
2150--3296[label="0.0306122;3pkt 3fpkt"];
2150--5440[label="0.102041;10pkt 10fpkt"];
2167--2730[label="0.204819;17pkt 17fpkt"];
2167--3296[label="0.0120482;1pkt 1fpkt"];
2167--4594[label="0.783133;65pkt 65fpkt"];
2167--4782[label="0.0625;1pkt 1fpkt"];
2167--5440[label="0.204819;17pkt 17fpkt"];
2167--7179[label="0.783133;65pkt 65fpkt"];
2167--7313[label="0.0625;1pkt 1fpkt"];
2167--8953[label="0.783133;65pkt 65fpkt"];
2167--9038[label="0.0625;1pkt 1fpkt"];
2244--5788[label="0.4;2pkt 2fpkt"];
2385--2730[label="0.0662651;11pkt 11fpkt"];
2385--2831[label="0.260638;49pkt 49fpkt"];
2385--3296[label="0.106383;20pkt 20fpkt"];
2385--5440[label="0.239362;45pkt 45fpkt"];
2581--2730[label="0.127273;14pkt 14fpkt"];
2581--3138[label="0.680851;32pkt 32fpkt"];
2581--3296[label="0.0727273;8pkt 8fpkt"];
2581--3462[label="0.585714;41pkt 41fpkt"];
2581--5440[label="0.418182;46pkt 46fpkt"];
2581--6399[label="0.585714;41pkt 41fpkt"];
2581--8453[label="0.585714;41pkt 41fpkt"];
2730--3054[label="0.0555556;5pkt 5fpkt"];
2730--5440[label="1;166pkt 166fpkt"];
3054--3561[label="0.177419;11pkt 11fpkt"];
3054--5440[label="0.133333;12pkt 12fpkt"];
4174--6881[label="1;152pkt 152fpkt"];
4782--7313[label="1;16pkt 16fpkt"];
4782--9038[label="1;16pkt 16fpkt"];
6280--8377[label="1;420pkt 420fpkt"];
7313--9038[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.213.171"/>
      <filter src_ip="128.28.209.176"/>
      <filter src_port="25"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
1417[label="213.23.141.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
3059[label="213.23.141.223;s;1pkt 1fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.23.141.223:1212, 147.13.224.216:60085}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60085: (50%)&lt;BR/&gt; 1212: (50%)&gt;];
}
1417--3059[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_ip="213.23.141.223" src_port="1212"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
664[label="38.53.177.70;s;322pkt 322fpkt", shape=diamond, color=yellow];
726[label="197.116.231.64;s;13pkt 13fpkt", shape=diamond, color=yellow];
1717[label="161.223.54.165;d;17pkt 17fpkt", shape=diamond, color=yellow];
1920[label="161.223.117.39;d;97pkt 97fpkt", shape=diamond, color=yellow];
2227[label="194.212.152.252;d;38pkt 38fpkt", shape=diamond, color=yellow];
2818[label="38.53.177.70;s;212pkt 212fpkt", shape=hexagon, color=black];
3063[label="161.223.54.165;d;15pkt 15fpkt", shape=hexagon, color=black];
4205[label="38.53.177.70;340pkt 340fpkt", shape=pentagon, color=darkviolet];
5033[label="196.42.8.145;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6904[label="38.53.177.70;340pkt 340fpkt", shape=invtriangle, color=brown];
7494[label="196.42.8.145;25pkt 25fpkt", shape=invtriangle, color=brown];
8774[label="38.53.177.70;341pkt 341fpkt", shape=invhouse, color=bisque];
9152[label="196.42.8.145;26pkt 26fpkt", shape=invhouse, color=bisque];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.177.70:80, *:*}[54.7297%]&lt;BR/&gt;{38.53.177.70:443, *:*}[22.0721%]&lt;BR/&gt;{*:443, 161.223.117.39:*}[20.045%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.9437%)&lt;BR/&gt; 443: (17.8631%)&lt;BR/&gt; 1475: (0.331309%)&lt;BR/&gt; 3736: (0.248482%)&lt;BR/&gt; 1509: (0.193263%)&gt;];
}
664--787[label="0.161491;52pkt 52fpkt"];
664--788[label="0.251553;81pkt 81fpkt"];
664--1176[label="0.166667;7pkt 7fpkt"];
664--1717[label="0.470588;8pkt 8fpkt"];
664--1920[label="0.463918;45pkt 45fpkt"];
664--2162[label="0.172043;16pkt 16fpkt"];
664--2818[label="1;212pkt 212fpkt"];
664--3063[label="0.4;6pkt 6fpkt"];
664--3288[label="0.10559;34pkt 34fpkt"];
664--3292[label="0.0838509;27pkt 27fpkt"];
664--3303[label="0.0838509;27pkt 27fpkt"];
664--4205[label="0.996894;321pkt 321fpkt"];
664--6904[label="0.996894;321pkt 321fpkt"];
664--8774[label="1;322pkt 322fpkt"];
726--1717[label="0.615385;8pkt 8fpkt"];
726--2227[label="0.153846;2pkt 2fpkt"];
726--3063[label="0.615385;8pkt 8fpkt"];
726--3147[label="0.153846;2pkt 2fpkt"];
726--3288[label="0.153846;2pkt 2fpkt"];
1717--2818[label="0.294118;5pkt 5fpkt"];
1717--3063[label="1;15pkt 15fpkt"];
1717--4205[label="0.470588;8pkt 8fpkt"];
1717--6904[label="0.470588;8pkt 8fpkt"];
1717--8774[label="0.470588;8pkt 8fpkt"];
1920--2818[label="0.257732;25pkt 25fpkt"];
1920--3232[label="0.42268;41pkt 41fpkt"];
1920--3292[label="0.0721649;7pkt 7fpkt"];
1920--3303[label="0.0721649;7pkt 7fpkt"];
1920--3865[label="0.42268;41pkt 41fpkt"];
1920--4205[label="0.463918;45pkt 45fpkt"];
1920--4502[label="0.144928;10pkt 10fpkt"];
1920--5609[label="0.0149254;1pkt 1fpkt"];
1920--6666[label="0.42268;41pkt 41fpkt"];
1920--6904[label="0.463918;45pkt 45fpkt"];
1920--7112[label="0.144928;10pkt 10fpkt"];
1920--8619[label="0.42268;41pkt 41fpkt"];
1920--8774[label="0.463918;45pkt 45fpkt"];
2227--3147[label="1;36pkt 36fpkt"];
2227--5033[label="0.96;24pkt 24fpkt"];
2227--5957[label="0.0769231;2pkt 2fpkt"];
2227--6130[label="0.0526316;2pkt 2fpkt"];
2227--7494[label="0.96;24pkt 24fpkt"];
2227--8136[label="0.0769231;2pkt 2fpkt"];
2227--8264[label="0.0526316;2pkt 2fpkt"];
2227--9152[label="0.961538;25pkt 25fpkt"];
2227--9575[label="0.0769231;2pkt 2fpkt"];
2227--9659[label="0.0526316;2pkt 2fpkt"];
2818--3063[label="0.333333;5pkt 5fpkt"];
2818--3288[label="0.160377;34pkt 34fpkt"];
2818--3292[label="0.0377358;8pkt 8fpkt"];
2818--3303[label="0.0377358;8pkt 8fpkt"];
2818--4205[label="0.995283;211pkt 211fpkt"];
2818--6904[label="0.995283;211pkt 211fpkt"];
2818--8774[label="1;212pkt 212fpkt"];
3063--4205[label="0.4;6pkt 6fpkt"];
3063--6904[label="0.4;6pkt 6fpkt"];
3063--8774[label="0.4;6pkt 6fpkt"];
4205--6904[label="1;340pkt 340fpkt"];
4205--8774[label="1;340pkt 340fpkt"];
5033--7494[label="1;25pkt 25fpkt"];
5033--9152[label="1;25pkt 25fpkt"];
6904--8774[label="1;340pkt 340fpkt"];
7494--9152[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="38.53.177.70" src_port="80"/>
      <filter src_ip="38.53.177.70" src_port="443"/>
      <filter dst_ip="161.223.117.39" src_port="443"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
2444[label="33.68.9.16;s;26pkt 26fpkt", shape=diamond, color=yellow];
4541[label="36.52.244.99;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5693[label="210.107.144.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6231[label="210.226.98.248;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7143[label="36.52.244.99;5pkt 5fpkt", shape=invtriangle, color=brown];
7954[label="210.107.144.199;2pkt 2fpkt", shape=invtriangle, color=brown];
8342[label="210.226.98.248;13pkt 13fpkt", shape=invtriangle, color=brown];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.68.9.16:443, 164.23.209.48:*}[55.3191%]&lt;BR/&gt;{210.226.98.248:5050, *:*}[27.6596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (19.403%)&lt;BR/&gt; 443: (19.403%)&lt;BR/&gt; 80: (11.194%)&lt;BR/&gt; 65512: (1.49254%)&lt;BR/&gt; 62307: (1.49254%)&gt;];
}
2444--3524[label="1;26pkt 26fpkt"];
2444--6438[label="1;25pkt 25fpkt"];
4541--7143[label="1;5pkt 5fpkt"];
4541--8930[label="1;5pkt 5fpkt"];
5693--7954[label="1;2pkt 2fpkt"];
5693--9447[label="1;2pkt 2fpkt"];
6231--8342[label="1;13pkt 13fpkt"];
6231--9713[label="1;13pkt 13fpkt"];
7143--8930[label="1;5pkt 5fpkt"];
7954--9447[label="1;2pkt 2fpkt"];
8342--9713[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.248" src_port="5050"/>
      <filter dst_ip="164.23.209.48" src_ip="33.68.9.16" src_port="443"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
336[label="203.204.4.50;d;362pkt 362fpkt", shape=diamond, color=yellow];
415[label="161.223.155.26;s;29pkt 29fpkt", shape=diamond, color=yellow];
1681[label="132.19.53.140;s;48pkt 48fpkt", shape=diamond, color=yellow];
2003[label="132.19.134.224;s;118pkt 118fpkt", shape=diamond, color=yellow];
2434[label="132.19.132.192;s;29pkt 29fpkt", shape=diamond, color=yellow];
2718[label="161.223.155.26;s;17pkt 17fpkt", shape=hexagon, color=black];
3070[label="132.19.134.224;s;62pkt 62fpkt", shape=hexagon, color=black];
3209[label="132.19.150.109;s;44pkt 44fpkt", shape=hexagon, color=black];
3843[label="132.19.26.40;122pkt 122fpkt", shape=pentagon, color=darkviolet];
4978[label="132.19.53.140;58pkt 58fpkt", shape=pentagon, color=darkviolet];
5188[label="132.19.205.156;87pkt 87fpkt", shape=pentagon, color=darkviolet];
5458[label="128.28.226.178;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5589[label="132.19.132.192;47pkt 47fpkt", shape=pentagon, color=darkviolet];
5993[label="132.19.134.224;119pkt 119fpkt", shape=pentagon, color=darkviolet];
7450[label="132.19.53.140;59pkt 59fpkt", shape=invtriangle, color=brown];
7777[label="128.28.226.178;28pkt 28fpkt", shape=invtriangle, color=brown];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 203.204.4.50:80}[54.8485%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.42%)&lt;BR/&gt; 443: (1.3922%)&lt;BR/&gt; 52283: (0.914877%)&lt;BR/&gt; 1863: (0.795545%)&lt;BR/&gt; 1065: (0.43755%)&gt;];
}
336--415[label="0.551724;16pkt 16fpkt"];
336--649[label="0.317757;34pkt 34fpkt"];
336--673[label="0.0248619;9pkt 9fpkt"];
336--1182[label="0.981481;53pkt 53fpkt"];
336--1358[label="0.444444;24pkt 24fpkt"];
336--1681[label="0.5625;27pkt 27fpkt"];
336--2003[label="0.711864;84pkt 84fpkt"];
336--2212[label="0.440476;37pkt 37fpkt"];
336--2402[label="0.0408163;2pkt 2fpkt"];
336--2434[label="0.827586;24pkt 24fpkt"];
336--2718[label="0.882353;15pkt 15fpkt"];
336--2729[label="0.00552486;2pkt 2fpkt"];
336--2845[label="1;52pkt 52fpkt"];
336--3070[label="0.790323;49pkt 49fpkt"];
336--3209[label="0.0454545;2pkt 2fpkt"];
336--3296[label="0.0773481;28pkt 28fpkt"];
336--3843[label="0.278689;34pkt 34fpkt"];
336--4756[label="0.981132;52pkt 52fpkt"];
336--4978[label="0.465517;27pkt 27fpkt"];
336--5188[label="0.425287;37pkt 37fpkt"];
336--5458[label="0.464286;13pkt 13fpkt"];
336--5589[label="0.510638;24pkt 24fpkt"];
336--5632[label="0.0497238;18pkt 18fpkt"];
336--5742[label="0.444444;24pkt 24fpkt"];
336--5876[label="0.0138122;5pkt 5fpkt"];
336--5888[label="0.0359116;13pkt 13fpkt"];
336--5993[label="0.705882;84pkt 84fpkt"];
336--7292[label="0.981132;52pkt 52fpkt"];
336--7450[label="0.457627;27pkt 27fpkt"];
336--7598[label="0.430233;37pkt 37fpkt"];
336--7777[label="0.464286;13pkt 13fpkt"];
336--7911[label="0.0497238;18pkt 18fpkt"];
336--7989[label="0.444444;24pkt 24fpkt"];
336--8082[label="0.0138122;5pkt 5fpkt"];
336--8091[label="0.0359116;13pkt 13fpkt"];
336--9422[label="0.0497238;18pkt 18fpkt"];
336--9535[label="0.0138122;5pkt 5fpkt"];
336--9542[label="0.0359116;13pkt 13fpkt"];
415--579[label="0.448276;13pkt 13fpkt"];
415--2718[label="1;17pkt 17fpkt"];
415--3296[label="0.0344828;1pkt 1fpkt"];
1681--4978[label="1;48pkt 48fpkt"];
1681--7450[label="1;48pkt 48fpkt"];
2003--2626[label="0.180723;15pkt 15fpkt"];
2003--3070[label="1;62pkt 62fpkt"];
2003--3296[label="0.194915;23pkt 23fpkt"];
2003--5993[label="1;118pkt 118fpkt"];
2434--3296[label="0.0689655;2pkt 2fpkt"];
2434--5589[label="1;29pkt 29fpkt"];
3070--5993[label="1;62pkt 62fpkt"];
3209--3296[label="0.0681818;3pkt 3fpkt"];
4978--7450[label="1;58pkt 58fpkt"];
5188--7598[label="1;86pkt 86fpkt"];
5458--7777[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="203.204.4.50" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1075[label="195.89.107.109;s;89pkt 89fpkt", shape=diamond, color=yellow];
2964[label="195.89.107.109;s;37pkt 37fpkt", shape=hexagon, color=black];
3072[label="36.84.173.59;d;2pkt 2fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.107.109:*, 41.50.161.117:80}[21.1111%]&lt;BR/&gt;{195.89.107.109:*, 195.19.89.74:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1840: (1.17188%)&lt;BR/&gt; 1861: (0.78125%)&lt;BR/&gt; 1860: (0.78125%)&lt;BR/&gt; 1859: (0.78125%)&gt;];
}
1075--1470[label="0.5;1pkt 1fpkt"];
1075--1514[label="0.202247;18pkt 18fpkt"];
1075--2089[label="0.0337079;3pkt 3fpkt"];
1075--2964[label="1;37pkt 37fpkt"];
1075--3072[label="0.5;1pkt 1fpkt"];
1075--3296[label="0.134831;12pkt 12fpkt"];
2964--3072[label="0.5;1pkt 1fpkt"];
2964--3296[label="0.027027;1pkt 1fpkt"];
3072--3296[label="0.5;1pkt 1fpkt"];
3072--5384[label="0.5;1pkt 1fpkt"];
3072--7732[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.50.161.117" dst_port="80" src_ip="195.89.107.109"/>
      <filter dst_ip="195.19.89.74" dst_port="80" src_ip="195.89.107.109"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
2030[label="211.100.146.132;s;4pkt 4fpkt", shape=diamond, color=yellow];
3075[label="211.100.146.132;s;4pkt 4fpkt", shape=hexagon, color=black];
4865[label="211.100.146.132;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7373[label="211.100.146.132;3pkt 3fpkt", shape=invtriangle, color=brown];
9075[label="211.100.146.132;4pkt 4fpkt", shape=invhouse, color=bisque];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.100.146.132:0, 147.13.220.153:0}[25%]&lt;BR/&gt;{211.100.146.132:18827, 147.13.220.153:80}[25%]&lt;BR/&gt;{211.100.146.132:18879, 147.13.220.153:80}[25%]&lt;BR/&gt;{211.100.146.132:20346, 147.13.220.153:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.8421%)&lt;BR/&gt; 0: (26.3158%)&lt;BR/&gt; 20346: (13.1579%)&lt;BR/&gt; 18879: (13.1579%)&lt;BR/&gt; 18827: (10.5263%)&gt;];
}
2030--2696[label="1;4pkt 4fpkt"];
2030--3075[label="1;4pkt 4fpkt"];
2030--3259[label="1;4pkt 4fpkt"];
2030--4865[label="1;4pkt 4fpkt"];
2030--7373[label="1;3pkt 3fpkt"];
2030--9075[label="1;4pkt 4fpkt"];
3075--3259[label="1;4pkt 4fpkt"];
3075--4865[label="1;4pkt 4fpkt"];
3075--7373[label="1;3pkt 3fpkt"];
3075--9075[label="1;4pkt 4fpkt"];
4865--7373[label="1;3pkt 3fpkt"];
4865--9075[label="1;4pkt 4fpkt"];
7373--9075[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="211.100.146.132" src_port="20346"/>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="211.100.146.132" src_port="18879"/>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="211.100.146.132" src_port="18827"/>
      <filter dst_ip="147.13.220.153" src_ip="211.100.146.132"/>
    </slice>
    <from sec="1144127149" usec="0"/>
    <to sec="1144127513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
2055[label="83.141.172.190;s;372pkt 372fpkt", shape=diamond, color=yellow];
3082[label="83.141.172.190;s;287pkt 287fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.141.172.190:*, *:139}[68.2796%]&lt;BR/&gt;{83.141.172.190:*, *:445}[31.7204%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (38.5432%)&lt;BR/&gt; 445: (11.4568%)&lt;BR/&gt; 65071: (0.227618%)&lt;BR/&gt; 29433: (0.227618%)&lt;BR/&gt; 27310: (0.227618%)&gt;];
}
2055--3082[label="1;287pkt 287fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="83.141.172.190"/>
      <filter dst_port="445" src_ip="83.141.172.190"/>
    </slice>
    <from sec="1144127232" usec="0"/>
    <to sec="1144127450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
2067[label="194.212.151.158;s;24pkt 24fpkt", shape=diamond, color=yellow];
3085[label="194.212.151.158;s;6pkt 6fpkt", shape=hexagon, color=black];
5207[label="194.212.151.158;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.151.158:1755, 83.150.6.174:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (50%)&lt;BR/&gt; 3214: (2.72727%)&lt;BR/&gt; 3021: (2.72727%)&lt;BR/&gt; 3020: (2.72727%)&lt;BR/&gt; 3019: (2.72727%)&gt;];
}
2067--2453[label="1;24pkt 24fpkt"];
2067--3085[label="1;6pkt 6fpkt"];
2067--5207[label="0.958333;23pkt 23fpkt"];
3085--5207[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="83.150.6.174" src_ip="194.212.151.158" src_port="1755"/>
    </slice>
    <from sec="1144127259" usec="0"/>
    <to sec="1144127598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
450[label="128.202.215.156;s;4pkt 4fpkt", shape=diamond, color=yellow];
1048[label="195.89.66.197;s;26pkt 26fpkt", shape=diamond, color=yellow];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.66.197:80, *:*}[40%]&lt;BR/&gt;{195.89.66.197:*, 53.174.69.136:80}[26.6667%]&lt;BR/&gt;{195.89.66.197:*, 53.174.69.143:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60471: (1.66667%)&lt;BR/&gt; 59374: (1.66667%)&lt;BR/&gt; 52813: (1.66667%)&lt;BR/&gt; 52460: (1.66667%)&gt;];
}
450--511[label="1;4pkt 4fpkt"];
450--3088[label="1;4pkt 4fpkt"];
1048--3088[label="0.153846;4pkt 4fpkt"];
1048--3288[label="0.115385;3pkt 3fpkt"];
1048--3296[label="0.0769231;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.66.197" src_port="80"/>
      <filter dst_ip="53.174.69.143" dst_port="80" src_ip="195.89.66.197"/>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="195.89.66.197"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
513[label="82.142.192.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
3089[label="82.142.192.92;s;1pkt 1fpkt", shape=hexagon, color=black];
4474[label="82.142.192.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7093[label="82.142.192.92;1pkt 1fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.142.192.92:4897, 147.13.224.216:60085}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60085: (50%)&lt;BR/&gt; 4897: (50%)&gt;];
}
513--795[label="1;1pkt 1fpkt"];
513--3089[label="1;1pkt 1fpkt"];
513--4474[label="1;1pkt 1fpkt"];
513--7093[label="1;1pkt 1fpkt"];
3089--4474[label="1;1pkt 1fpkt"];
3089--7093[label="1;1pkt 1fpkt"];
4474--7093[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_ip="82.142.192.92" src_port="4897"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
942[label="36.101.0.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
943[label="164.23.198.166;s;10pkt 10fpkt", shape=diamond, color=yellow];
3111[label="36.101.0.161;d;2pkt 2fpkt", shape=hexagon, color=black];
5319[label="164.23.198.166;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7690[label="164.23.198.166;16pkt 16fpkt", shape=invtriangle, color=brown];
9282[label="164.23.198.166;15pkt 15fpkt", shape=invhouse, color=bisque];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.198.166:80, *:*}[68.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3279%)&lt;BR/&gt; 443: (9.83607%)&lt;BR/&gt; 25: (9.83607%)&lt;BR/&gt; 57800: (4.91803%)&lt;BR/&gt; 53194: (4.91803%)&gt;];
}
942--943[label="1;2pkt 2fpkt"];
942--3111[label="1;2pkt 2fpkt"];
942--5319[label="1;2pkt 2fpkt"];
942--7690[label="1;2pkt 2fpkt"];
942--9282[label="1;2pkt 2fpkt"];
943--1945[label="0.1;1pkt 1fpkt"];
943--3111[label="1;2pkt 2fpkt"];
943--5319[label="1;10pkt 10fpkt"];
943--7690[label="1;10pkt 10fpkt"];
943--9282[label="1;10pkt 10fpkt"];
3111--5319[label="1;2pkt 2fpkt"];
3111--7690[label="1;2pkt 2fpkt"];
3111--9282[label="1;2pkt 2fpkt"];
5319--7690[label="1;16pkt 16fpkt"];
5319--9282[label="1;15pkt 15fpkt"];
7690--9282[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.198.166" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
518[label="194.212.154.4;d;1643pkt 1643fpkt", shape=diamond, color=yellow];
1142[label="132.19.194.8;d;23pkt 23fpkt", shape=diamond, color=yellow];
1279[label="166.138.86.16;s;7pkt 7fpkt", shape=diamond, color=yellow];
1430[label="166.138.86.27;s;5pkt 5fpkt", shape=diamond, color=yellow];
1589[label="194.160.9.66;s;5pkt 5fpkt", shape=diamond, color=yellow];
2325[label="194.160.9.65;s;4pkt 4fpkt", shape=diamond, color=yellow];
2580[label="195.203.146.192;s;14pkt 14fpkt", shape=diamond, color=yellow];
3114[label="166.138.86.16;s;5pkt 5fpkt", shape=hexagon, color=black];
3531[label="166.138.86.16;7pkt 7fpkt", shape=pentagon, color=darkviolet];
3695[label="166.138.86.27;5pkt 5fpkt", shape=pentagon, color=darkviolet];
3731[label="32.136.166.29;81pkt 81fpkt", shape=pentagon, color=darkviolet];
4132[label="194.160.9.65;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4147[label="194.160.9.66;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4175[label="36.90.196.68;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4195[label="194.192.78.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
4272[label="208.149.135.75;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4462[label="195.192.81.91;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4583[label="208.116.238.103;86pkt 86fpkt", shape=pentagon, color=darkviolet];
4999[label="41.25.163.141;113pkt 113fpkt", shape=pentagon, color=darkviolet];
5023[label="194.205.1.144;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5187[label="192.246.189.156;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5212[label="195.192.43.159;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5592[label="195.203.146.192;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5688[label="85.206.40.199;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5748[label="195.203.31.204;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5756[label="195.203.146.204;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5859[label="199.177.55.213;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6048[label="195.203.31.229;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6167[label="195.192.71.241;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6441[label="166.138.86.16;6pkt 6fpkt", shape=invtriangle, color=brown];
6561[label="166.138.86.27;5pkt 5fpkt", shape=invtriangle, color=brown];
6854[label="194.160.9.65;5pkt 5fpkt", shape=invtriangle, color=brown];
6863[label="194.160.9.66;4pkt 4fpkt", shape=invtriangle, color=brown];
6955[label="208.149.135.75;8pkt 8fpkt", shape=invtriangle, color=brown];
7467[label="41.25.163.141;113pkt 113fpkt", shape=invtriangle, color=brown];
7487[label="194.205.1.144;14pkt 14fpkt", shape=invtriangle, color=brown];
7611[label="195.192.43.159;11pkt 11fpkt", shape=invtriangle, color=brown];
7878[label="195.203.146.192;14pkt 14fpkt", shape=invtriangle, color=brown];
7995[label="195.203.31.204;6pkt 6fpkt", shape=invtriangle, color=brown];
8001[label="195.203.146.204;11pkt 11fpkt", shape=invtriangle, color=brown];
8067[label="199.177.55.213;8pkt 8fpkt", shape=invtriangle, color=brown];
8205[label="195.203.31.229;9pkt 9fpkt", shape=invtriangle, color=brown];
8290[label="195.192.71.241;7pkt 7fpkt", shape=invtriangle, color=brown];
8557[label="166.138.86.27;5pkt 5fpkt", shape=invhouse, color=bisque];
8742[label="194.160.9.65;5pkt 5fpkt", shape=invhouse, color=bisque];
8749[label="194.160.9.66;5pkt 5fpkt", shape=invhouse, color=bisque];
9133[label="41.25.163.141;114pkt 114fpkt", shape=invhouse, color=bisque];
9148[label="194.205.1.144;13pkt 13fpkt", shape=invhouse, color=bisque];
9229[label="195.192.43.159;10pkt 10fpkt", shape=invhouse, color=bisque];
9619[label="195.203.31.229;10pkt 10fpkt", shape=invhouse, color=bisque];
9678[label="195.192.71.241;7pkt 7fpkt", shape=invhouse, color=bisque];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.212.154.4:53}[78.9168%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.4463%)&lt;BR/&gt; 32768: (1.6298%)&lt;BR/&gt; 80: (1.39697%)&lt;BR/&gt; 32771: (1.00893%)&lt;BR/&gt; 32769: (0.659682%)&gt;];
}
518--962[label="0.25;1pkt 1fpkt"];
518--1088[label="0.125;1pkt 1fpkt"];
518--1279[label="0.142857;1pkt 1fpkt"];
518--1324[label="0.142857;1pkt 1fpkt"];
518--1375[label="0.0909091;1pkt 1fpkt"];
518--1380[label="0.166667;1pkt 1fpkt"];
518--1389[label="0.111111;1pkt 1fpkt"];
518--1430[label="0.2;1pkt 1fpkt"];
518--1589[label="0.2;1pkt 1fpkt"];
518--1672[label="0.142857;1pkt 1fpkt"];
518--1895[label="0.0714286;1pkt 1fpkt"];
518--2325[label="0.25;1pkt 1fpkt"];
518--2397[label="0.0588235;1pkt 1fpkt"];
518--2580[label="0.0714286;1pkt 1fpkt"];
518--2867[label="0.25;1pkt 1fpkt"];
518--2899[label="1;910pkt 910fpkt"];
518--3114[label="0.2;1pkt 1fpkt"];
518--3134[label="0.111111;1pkt 1fpkt"];
518--3201[label="0.2;1pkt 1fpkt"];
518--3287[label="0.0042605;7pkt 7fpkt"];
518--3290[label="0.059647;98pkt 98fpkt"];
518--3295[label="0.0797322;131pkt 131fpkt"];
518--3302[label="0.00912964;15pkt 15fpkt"];
518--3311[label="0.1;1pkt 1fpkt"];
518--3363[label="0.111111;1pkt 1fpkt"];
518--3383[label="0.111111;1pkt 1fpkt"];
518--3402[label="0.1;1pkt 1fpkt"];
518--3531[label="0.142857;1pkt 1fpkt"];
518--3667[label="0.0333333;1pkt 1fpkt"];
518--3695[label="0.2;1pkt 1fpkt"];
518--3731[label="0.037037;3pkt 3fpkt"];
518--3777[label="0.0769231;1pkt 1fpkt"];
518--3822[label="0.0555556;1pkt 1fpkt"];
518--3830[label="0.0555556;1pkt 1fpkt"];
518--4103[label="0.0555556;1pkt 1fpkt"];
518--4132[label="0.2;1pkt 1fpkt"];
518--4147[label="0.2;1pkt 1fpkt"];
518--4175[label="0.0666667;1pkt 1fpkt"];
518--4195[label="0.0833333;1pkt 1fpkt"];
518--4272[label="0.125;1pkt 1fpkt"];
518--4459[label="0.08;2pkt 2fpkt"];
518--4462[label="0.142857;1pkt 1fpkt"];
518--4512[label="0.00921659;2pkt 2fpkt"];
518--4583[label="0.581395;50pkt 50fpkt"];
518--4671[label="0.0427807;8pkt 8fpkt"];
518--4743[label="0.0434783;1pkt 1fpkt"];
518--4769[label="0.047619;1pkt 1fpkt"];
518--4837[label="0.0163934;2pkt 2fpkt"];
518--4851[label="0.00826446;1pkt 1fpkt"];
518--4921[label="0.049505;5pkt 5fpkt"];
518--4939[label="0.00961538;1pkt 1fpkt"];
518--4958[label="0.00571429;1pkt 1fpkt"];
518--4991[label="0.0052356;1pkt 1fpkt"];
518--4999[label="0.0442478;5pkt 5fpkt"];
518--5023[label="0.0714286;1pkt 1fpkt"];
518--5129[label="0.031746;2pkt 2fpkt"];
518--5182[label="0.0238095;1pkt 1fpkt"];
518--5187[label="0.104167;5pkt 5fpkt"];
518--5205[label="0.0555556;1pkt 1fpkt"];
518--5212[label="0.1;1pkt 1fpkt"];
518--5271[label="0.0208333;1pkt 1fpkt"];
518--5379[label="0.0333333;1pkt 1fpkt"];
518--5461[label="0.0571429;2pkt 2fpkt"];
518--5592[label="0.0714286;1pkt 1fpkt"];
518--5623[label="0.0491803;3pkt 3fpkt"];
518--5688[label="0.142857;1pkt 1fpkt"];
518--5706[label="0.0714286;1pkt 1fpkt"];
518--5748[label="0.142857;1pkt 1fpkt"];
518--5756[label="0.0909091;1pkt 1fpkt"];
518--5762[label="0.0833333;1pkt 1fpkt"];
518--5778[label="0.0555556;1pkt 1fpkt"];
518--5859[label="0.125;1pkt 1fpkt"];
518--5973[label="0.0851064;4pkt 4fpkt"];
518--5983[label="0.0909091;1pkt 1fpkt"];
518--6000[label="0.0294118;1pkt 1fpkt"];
518--6013[label="0.0035461;1pkt 1fpkt"];
518--6048[label="0.1;1pkt 1fpkt"];
518--6056[label="0.0769231;1pkt 1fpkt"];
518--6167[label="0.125;1pkt 1fpkt"];
518--6216[label="0.0625;1pkt 1fpkt"];
518--6292[label="0.0909091;1pkt 1fpkt"];
518--6344[label="0.111111;1pkt 1fpkt"];
518--6358[label="0.1;1pkt 1fpkt"];
518--6441[label="0.166667;1pkt 1fpkt"];
518--6561[label="0.2;1pkt 1fpkt"];
518--6608[label="0.0833333;1pkt 1fpkt"];
518--6635[label="0.0555556;1pkt 1fpkt"];
518--6831[label="0.0588235;1pkt 1fpkt"];
518--6854[label="0.2;1pkt 1fpkt"];
518--6863[label="0.25;1pkt 1fpkt"];
518--6955[label="0.125;1pkt 1fpkt"];
518--7085[label="0.0769231;2pkt 2fpkt"];
518--7118[label="0.00917431;2pkt 2fpkt"];
518--7227[label="0.0427807;8pkt 8fpkt"];
518--7303[label="0.047619;1pkt 1fpkt"];
518--7354[label="0.0163934;2pkt 2fpkt"];
518--7425[label="0.00952381;1pkt 1fpkt"];
518--7436[label="0.00571429;1pkt 1fpkt"];
518--7467[label="0.0442478;5pkt 5fpkt"];
518--7487[label="0.0714286;1pkt 1fpkt"];
518--7554[label="0.0322581;2pkt 2fpkt"];
518--7594[label="0.0238095;1pkt 1fpkt"];
518--7607[label="0.0555556;1pkt 1fpkt"];
518--7611[label="0.0909091;1pkt 1fpkt"];
518--7658[label="0.0212766;1pkt 1fpkt"];
518--7878[label="0.0714286;1pkt 1fpkt"];
518--7904[label="0.0491803;3pkt 3fpkt"];
518--7963[label="0.0714286;1pkt 1fpkt"];
518--7995[label="0.166667;1pkt 1fpkt"];
518--8001[label="0.0909091;1pkt 1fpkt"];
518--8005[label="0.0833333;1pkt 1fpkt"];
518--8013[label="0.0555556;1pkt 1fpkt"];
518--8067[label="0.125;1pkt 1fpkt"];
518--8149[label="0.0851064;4pkt 4fpkt"];
518--8157[label="0.0909091;1pkt 1fpkt"];
518--8168[label="0.030303;1pkt 1fpkt"];
518--8205[label="0.111111;1pkt 1fpkt"];
518--8211[label="0.0769231;1pkt 1fpkt"];
518--8290[label="0.142857;1pkt 1fpkt"];
518--8386[label="0.0909091;1pkt 1fpkt"];
518--8421[label="0.125;1pkt 1fpkt"];
518--8557[label="0.2;1pkt 1fpkt"];
518--8583[label="0.0769231;1pkt 1fpkt"];
518--8601[label="0.0555556;1pkt 1fpkt"];
518--8724[label="0.0588235;1pkt 1fpkt"];
518--8742[label="0.2;1pkt 1fpkt"];
518--8749[label="0.2;1pkt 1fpkt"];
518--8893[label="0.0769231;2pkt 2fpkt"];
518--8911[label="0.00921659;2pkt 2fpkt"];
518--9030[label="0.05;1pkt 1fpkt"];
518--9067[label="0.0165289;2pkt 2fpkt"];
518--9107[label="0.00961538;1pkt 1fpkt"];
518--9133[label="0.0438596;5pkt 5fpkt"];
518--9148[label="0.0769231;1pkt 1fpkt"];
518--9191[label="0.031746;2pkt 2fpkt"];
518--9216[label="0.0232558;1pkt 1fpkt"];
518--9229[label="0.1;1pkt 1fpkt"];
518--9262[label="0.0208333;1pkt 1fpkt"];
518--9480[label="0.0833333;1pkt 1fpkt"];
518--9487[label="0.0588235;1pkt 1fpkt"];
518--9582[label="0.0851064;4pkt 4fpkt"];
518--9585[label="0.1;1pkt 1fpkt"];
518--9594[label="0.0294118;1pkt 1fpkt"];
518--9619[label="0.1;1pkt 1fpkt"];
518--9678[label="0.142857;1pkt 1fpkt"];
1142--1722[label="0.25;1pkt 1fpkt"];
1142--3731[label="0.0434783;1pkt 1fpkt"];
1142--5623[label="0.0434783;1pkt 1fpkt"];
1142--7904[label="0.0434783;1pkt 1fpkt"];
1279--1812[label="0.142857;1pkt 1fpkt"];
1279--3114[label="1;5pkt 5fpkt"];
1279--3290[label="0.142857;1pkt 1fpkt"];
1279--3295[label="0.142857;1pkt 1fpkt"];
1279--3531[label="1;7pkt 7fpkt"];
1279--6441[label="1;6pkt 6fpkt"];
1430--1812[label="0.2;1pkt 1fpkt"];
1430--2899[label="0.2;1pkt 1fpkt"];
1430--3290[label="0.2;1pkt 1fpkt"];
1430--3295[label="0.4;2pkt 2fpkt"];
1430--3695[label="1;5pkt 5fpkt"];
1430--6561[label="1;5pkt 5fpkt"];
1430--8557[label="1;5pkt 5fpkt"];
1589--1812[label="0.2;1pkt 1fpkt"];
1589--3290[label="0.2;1pkt 1fpkt"];
1589--3295[label="0.6;3pkt 3fpkt"];
1589--4147[label="1;5pkt 5fpkt"];
1589--6863[label="1;4pkt 4fpkt"];
1589--8749[label="1;5pkt 5fpkt"];
2325--3290[label="0.25;1pkt 1fpkt"];
2325--3295[label="0.25;1pkt 1fpkt"];
2325--4132[label="1;4pkt 4fpkt"];
2325--6854[label="1;4pkt 4fpkt"];
2325--8742[label="1;4pkt 4fpkt"];
2580--2899[label="0.0714286;1pkt 1fpkt"];
2580--3290[label="0.285714;4pkt 4fpkt"];
2580--3295[label="0.571429;8pkt 8fpkt"];
2580--5592[label="1;14pkt 14fpkt"];
2580--7878[label="1;14pkt 14fpkt"];
3114--3290[label="0.2;1pkt 1fpkt"];
3114--3295[label="0.2;1pkt 1fpkt"];
3114--3531[label="1;5pkt 5fpkt"];
3114--6441[label="1;5pkt 5fpkt"];
3531--6441[label="1;6pkt 6fpkt"];
3695--6561[label="1;5pkt 5fpkt"];
3695--8557[label="1;5pkt 5fpkt"];
4132--6854[label="1;5pkt 5fpkt"];
4132--8742[label="1;5pkt 5fpkt"];
4147--6863[label="1;4pkt 4fpkt"];
4147--8749[label="1;5pkt 5fpkt"];
4272--6955[label="1;8pkt 8fpkt"];
4999--7467[label="1;113pkt 113fpkt"];
4999--9133[label="1;113pkt 113fpkt"];
5023--7487[label="1;14pkt 14fpkt"];
5023--9148[label="1;13pkt 13fpkt"];
5212--7611[label="1;10pkt 10fpkt"];
5212--9229[label="1;10pkt 10fpkt"];
5592--7878[label="1;14pkt 14fpkt"];
5748--7995[label="1;6pkt 6fpkt"];
5756--8001[label="1;11pkt 11fpkt"];
5859--8067[label="1;8pkt 8fpkt"];
6048--8205[label="1;9pkt 9fpkt"];
6048--9619[label="1;10pkt 10fpkt"];
6167--8290[label="1;7pkt 7fpkt"];
6167--9678[label="1;7pkt 7fpkt"];
6561--8557[label="1;5pkt 5fpkt"];
6854--8742[label="1;5pkt 5fpkt"];
6863--8749[label="1;4pkt 4fpkt"];
7467--9133[label="1;113pkt 113fpkt"];
7487--9148[label="1;13pkt 13fpkt"];
7611--9229[label="1;10pkt 10fpkt"];
8205--9619[label="1;9pkt 9fpkt"];
8290--9678[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.154.4" dst_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1063[label="128.231.110.70;s;85pkt 85fpkt", shape=diamond, color=yellow];
3127[label="128.231.110.70;s;85pkt 85fpkt", shape=hexagon, color=black];
4196[label="128.231.110.70;89pkt 89fpkt", shape=pentagon, color=darkviolet];
6897[label="128.231.110.70;89pkt 89fpkt", shape=invtriangle, color=brown];
8770[label="128.231.110.70;89pkt 89fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.231.110.70:80, 85.23.175.77:*}[27.4725%]&lt;BR/&gt;{128.231.110.70:53, *:*}[24.1758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.9863%)&lt;BR/&gt; 53: (12.0137%)&lt;BR/&gt; 58492: (0.572082%)&lt;BR/&gt; 58104: (0.572082%)&lt;BR/&gt; 57407: (0.572082%)&gt;];
}
1063--3127[label="1;85pkt 85fpkt"];
1063--3287[label="0.0117647;1pkt 1fpkt"];
1063--3288[label="0.270588;23pkt 23fpkt"];
1063--3292[label="0.0705882;6pkt 6fpkt"];
1063--3302[label="0.0117647;1pkt 1fpkt"];
1063--3303[label="0.0705882;6pkt 6fpkt"];
1063--4196[label="0.976471;83pkt 83fpkt"];
1063--6897[label="0.976471;83pkt 83fpkt"];
1063--8770[label="0.976471;83pkt 83fpkt"];
3127--3287[label="0.0117647;1pkt 1fpkt"];
3127--3288[label="0.270588;23pkt 23fpkt"];
3127--3292[label="0.0705882;6pkt 6fpkt"];
3127--3302[label="0.0117647;1pkt 1fpkt"];
3127--3303[label="0.0705882;6pkt 6fpkt"];
3127--4196[label="0.976471;83pkt 83fpkt"];
3127--6897[label="0.976471;83pkt 83fpkt"];
3127--8770[label="0.976471;83pkt 83fpkt"];
4196--6897[label="1;89pkt 89fpkt"];
4196--8770[label="1;89pkt 89fpkt"];
6897--8770[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="128.231.110.70" src_port="53"/>
      <filter dst_ip="85.23.175.77" src_ip="128.231.110.70" src_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
2182[label="132.19.69.102;s;114pkt 114fpkt", shape=diamond, color=yellow];
2641[label="217.141.7.54;d;18pkt 18fpkt", shape=diamond, color=yellow];
3131[label="132.19.69.102;s;44pkt 44fpkt", shape=hexagon, color=black];
4566[label="132.19.69.102;118pkt 118fpkt", shape=pentagon, color=darkviolet];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.69.102:*, 199.11.37.107:80}[26.8908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.4558%)&lt;BR/&gt; 32854: (4.93197%)&lt;BR/&gt; 3544: (1.53061%)&lt;BR/&gt; 1863: (1.53061%)&lt;BR/&gt; 443: (1.53061%)&gt;];
}
2182--2641[label="1;18pkt 18fpkt"];
2182--3131[label="1;44pkt 44fpkt"];
2182--3296[label="0.122807;14pkt 14fpkt"];
2182--4566[label="0.991228;113pkt 113fpkt"];
2641--3131[label="0.444444;8pkt 8fpkt"];
2641--3296[label="0.111111;2pkt 2fpkt"];
2641--4566[label="1;18pkt 18fpkt"];
3131--3296[label="0.0681818;3pkt 3fpkt"];
3131--4566[label="0.977273;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="199.11.37.107" dst_port="80" src_ip="132.19.69.102"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
4554[label="36.52.244.100;13pkt 13fpkt", shape=pentagon, color=darkviolet];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.52.244.100:80, 147.13.10.235:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39080: (3.84615%)&lt;BR/&gt; 3597: (3.84615%)&lt;BR/&gt; 3596: (3.84615%)&lt;BR/&gt; 3595: (3.84615%)&gt;];
}
4554--7151[label="1;13pkt 13fpkt"];
4554--8936[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.10.235" src_ip="36.52.244.100" src_port="80"/>
    </slice>
    <from sec="1144126829" usec="0"/>
    <to sec="1144127554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
527[label="48.153.169.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
1478[label="33.81.54.162;d;77pkt 77fpkt", shape=diamond, color=yellow];
2738[label="132.18.129.197;s;287pkt 287fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.197:*, *:80}[85.6305%]&lt;BR/&gt;{*:*, 33.81.54.162:80}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7671%)&lt;BR/&gt; 443: (0.958904%)&lt;BR/&gt; 65362: (0.273973%)&lt;BR/&gt; 65361: (0.273973%)&lt;BR/&gt; 62128: (0.273973%)&gt;];
}
527--2738[label="1;1pkt 1fpkt"];
527--3296[label="1;1pkt 1fpkt"];
527--5665[label="1;1pkt 1fpkt"];
527--7934[label="1;1pkt 1fpkt"];
527--9437[label="1;1pkt 1fpkt"];
1478--2738[label="0.298701;23pkt 23fpkt"];
1478--2869[label="0.415584;32pkt 32fpkt"];
1478--5645[label="0.519481;40pkt 40fpkt"];
1478--5665[label="0.480519;37pkt 37fpkt"];
1478--7934[label="0.480519;37pkt 37fpkt"];
1478--9437[label="0.480519;37pkt 37fpkt"];
2738--3296[label="0.00696864;2pkt 2fpkt"];
2738--5665[label="1;287pkt 287fpkt"];
2738--7934[label="1;287pkt 287fpkt"];
2738--9437[label="1;287pkt 287fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.18.129.197"/>
      <filter dst_ip="33.81.54.162" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
1475[label="132.19.196.171;s;502pkt 502fpkt", shape=diamond, color=yellow];
2034[label="38.50.77.58;d;5pkt 5fpkt", shape=diamond, color=yellow];
2133[label="217.32.96.26;d;114pkt 114fpkt", shape=diamond, color=yellow];
2680[label="38.50.90.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
2980[label="217.32.96.29;d;68pkt 68fpkt", shape=hexagon, color=black];
3154[label="132.19.196.171;s;222pkt 222fpkt", shape=hexagon, color=black];
4187[label="161.223.195.69;128pkt 128fpkt", shape=pentagon, color=darkviolet];
5382[label="132.19.196.171;503pkt 503fpkt", shape=pentagon, color=darkviolet];
6891[label="161.223.195.69;127pkt 127fpkt", shape=invtriangle, color=brown];
7730[label="132.19.196.171;503pkt 503fpkt", shape=invtriangle, color=brown];
9309[label="132.19.196.171;503pkt 503fpkt", shape=invhouse, color=bisque];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.196.171:*, 210.14.8.117:80}[41.1945%]&lt;BR/&gt;{*:*, 217.32.96.26:80}[20.9801%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4124%)&lt;BR/&gt; 443: (1.56892%)&lt;BR/&gt; 3193: (0.112066%)&lt;BR/&gt; 3192: (0.112066%)&lt;BR/&gt; 3186: (0.112066%)&gt;];
}
1475--1731[label="0.679487;53pkt 53fpkt"];
1475--2034[label="1;5pkt 5fpkt"];
1475--2133[label="0.0350877;4pkt 4fpkt"];
1475--2680[label="1;2pkt 2fpkt"];
1475--2980[label="0.779412;53pkt 53fpkt"];
1475--3154[label="1;222pkt 222fpkt"];
1475--3296[label="0.185259;93pkt 93fpkt"];
1475--5382[label="0.998008;501pkt 501fpkt"];
1475--7730[label="0.998008;501pkt 501fpkt"];
1475--9309[label="0.998008;501pkt 501fpkt"];
2034--3154[label="1;5pkt 5fpkt"];
2034--5382[label="1;5pkt 5fpkt"];
2034--7730[label="1;5pkt 5fpkt"];
2034--9309[label="1;5pkt 5fpkt"];
2133--2353[label="0.912281;104pkt 104fpkt"];
2133--3154[label="0.0175439;2pkt 2fpkt"];
2133--4187[label="0.912281;104pkt 104fpkt"];
2133--5382[label="0.0350877;4pkt 4fpkt"];
2133--5704[label="0.00877193;1pkt 1fpkt"];
2133--6891[label="0.912281;104pkt 104fpkt"];
2133--7730[label="0.0350877;4pkt 4fpkt"];
2133--9309[label="0.0350877;4pkt 4fpkt"];
2680--3296[label="1;2pkt 2fpkt"];
2680--5382[label="1;2pkt 2fpkt"];
2680--7730[label="1;2pkt 2fpkt"];
2680--9309[label="1;2pkt 2fpkt"];
2980--3154[label="0.779412;53pkt 53fpkt"];
2980--3561[label="0.0322581;2pkt 2fpkt"];
2980--5382[label="0.779412;53pkt 53fpkt"];
2980--5392[label="0.025641;1pkt 1fpkt"];
2980--7730[label="0.779412;53pkt 53fpkt"];
2980--9309[label="0.779412;53pkt 53fpkt"];
3154--5382[label="0.995495;221pkt 221fpkt"];
3154--7730[label="0.995495;221pkt 221fpkt"];
3154--9309[label="0.995495;221pkt 221fpkt"];
4187--6891[label="1;127pkt 127fpkt"];
5382--7730[label="1;503pkt 503fpkt"];
5382--9309[label="1;503pkt 503fpkt"];
7730--9309[label="1;503pkt 503fpkt"];
</description>
    <slice>
      <filter dst_ip="217.32.96.26" dst_port="80"/>
      <filter dst_ip="210.14.8.117" dst_port="80" src_ip="132.19.196.171"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1746[label="128.2.80.4;s;485pkt 485fpkt", shape=diamond, color=yellow];
3155[label="128.2.80.4;s;368pkt 368fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.80.4:1433, 214.51.37.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4999: (0.117233%)&lt;BR/&gt; 4985: (0.117233%)&lt;BR/&gt; 4982: (0.117233%)&lt;BR/&gt; 4969: (0.117233%)&gt;];
}
1746--3155[label="1;368pkt 368fpkt"];
</description>
    <slice>
      <filter dst_ip="214.51.37.73" src_ip="128.2.80.4" src_port="1433"/>
    </slice>
    <from sec="1144127032" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
476[label="194.212.150.227;s;13pkt 13fpkt", shape=diamond, color=yellow];
1223[label="210.203.18.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
2295[label="38.248.49.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
2775[label="194.212.150.227;s;3pkt 3fpkt", shape=hexagon, color=black];
3164[label="38.248.49.136;d;1pkt 1fpkt", shape=hexagon, color=black];
6036[label="194.212.150.227;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8195[label="194.212.150.227;17pkt 17fpkt", shape=invtriangle, color=brown];
9611[label="194.212.150.227;16pkt 16fpkt", shape=invhouse, color=bisque];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.150.227:*, 133.49.133.225:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 1863: (4.34783%)&lt;BR/&gt; 1080: (4.34783%)&lt;BR/&gt; 1448: (3.62319%)&lt;BR/&gt; 1440: (2.89855%)&gt;];
}
476--2295[label="1;1pkt 1fpkt"];
476--3164[label="1;1pkt 1fpkt"];
476--3296[label="0.0769231;1pkt 1fpkt"];
476--6036[label="1;13pkt 13fpkt"];
476--8195[label="1;13pkt 13fpkt"];
476--9611[label="1;13pkt 13fpkt"];
1223--2775[label="1;1pkt 1fpkt"];
1223--6036[label="1;1pkt 1fpkt"];
1223--8195[label="1;1pkt 1fpkt"];
1223--9611[label="1;1pkt 1fpkt"];
2295--3164[label="1;1pkt 1fpkt"];
2295--3296[label="1;1pkt 1fpkt"];
2295--6036[label="1;1pkt 1fpkt"];
2295--8195[label="1;1pkt 1fpkt"];
2295--9611[label="1;1pkt 1fpkt"];
2775--2976[label="0.5;1pkt 1fpkt"];
2775--6036[label="1;3pkt 3fpkt"];
2775--8195[label="1;3pkt 3fpkt"];
2775--9611[label="0.666667;2pkt 2fpkt"];
3164--3296[label="1;1pkt 1fpkt"];
3164--6036[label="1;1pkt 1fpkt"];
3164--8195[label="1;1pkt 1fpkt"];
3164--9611[label="1;1pkt 1fpkt"];
6036--8195[label="1;17pkt 17fpkt"];
6036--9611[label="1;16pkt 16fpkt"];
8195--9611[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="133.49.133.225" dst_port="80" src_ip="194.212.150.227"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
2313[label="213.84.59.213;s;28pkt 28fpkt", shape=diamond, color=yellow];
3167[label="213.84.59.213;s;28pkt 28fpkt", shape=hexagon, color=black];
5860[label="213.84.59.213;28pkt 28fpkt", shape=pentagon, color=darkviolet];
8068[label="213.84.59.213;27pkt 27fpkt", shape=invtriangle, color=brown];
9524[label="213.84.59.213;27pkt 27fpkt", shape=invhouse, color=bisque];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.84.59.213:*, 147.13.220.153:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52922: (1.81159%)&lt;BR/&gt; 1383: (1.81159%)&lt;BR/&gt; 1382: (1.81159%)&lt;BR/&gt; 1380: (1.81159%)&gt;];
}
2313--2696[label="1;28pkt 28fpkt"];
2313--3167[label="1;28pkt 28fpkt"];
2313--3259[label="1;28pkt 28fpkt"];
2313--5860[label="1;28pkt 28fpkt"];
2313--8068[label="1;27pkt 27fpkt"];
2313--9524[label="1;27pkt 27fpkt"];
3167--3259[label="1;28pkt 28fpkt"];
3167--5860[label="1;28pkt 28fpkt"];
3167--8068[label="1;27pkt 27fpkt"];
3167--9524[label="1;27pkt 27fpkt"];
5860--8068[label="1;27pkt 27fpkt"];
5860--9524[label="1;27pkt 27fpkt"];
8068--9524[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="213.84.59.213"/>
    </slice>
    <from sec="1144127394" usec="0"/>
    <to sec="1144127439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
284[label="83.181.118.116;s;268pkt 268fpkt", shape=diamond, color=yellow];
285[label="132.19.228.130;d;357pkt 357fpkt", shape=diamond, color=yellow];
3177[label="83.181.118.116;s;237pkt 237fpkt", shape=hexagon, color=black];
4265[label="32.136.167.74;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4310[label="41.25.96.78;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4892[label="32.136.166.133;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5089[label="32.136.166.149;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5757[label="41.25.164.204;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6949[label="32.136.167.74;10pkt 10fpkt", shape=invtriangle, color=brown];
7393[label="32.136.166.133;8pkt 8fpkt", shape=invtriangle, color=brown];
7531[label="32.136.166.149;5pkt 5fpkt", shape=invtriangle, color=brown];
8805[label="32.136.167.74;10pkt 10fpkt", shape=invhouse, color=bisque];
9178[label="32.136.166.149;5pkt 5fpkt", shape=invhouse, color=bisque];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.118.116:*, 132.19.228.130:80}[68.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8937%)&lt;BR/&gt; 44705: (0.42508%)&lt;BR/&gt; 44464: (0.21254%)&lt;BR/&gt; 60911: (0.159405%)&lt;BR/&gt; 60882: (0.159405%)&gt;];
}
284--285[label="0.996269;267pkt 267fpkt"];
284--1812[label="0.00373134;1pkt 1fpkt"];
284--3177[label="1;237pkt 237fpkt"];
284--3295[label="0.00373134;1pkt 1fpkt"];
284--3296[label="0.0820896;22pkt 22fpkt"];
285--3177[label="0.995781;236pkt 236fpkt"];
285--3296[label="0.0728291;26pkt 26fpkt"];
285--3532[label="0.00819672;1pkt 1fpkt"];
285--4265[label="0.1;1pkt 1fpkt"];
285--4310[label="0.111111;1pkt 1fpkt"];
285--4892[label="0.111111;1pkt 1fpkt"];
285--5089[label="0.5;2pkt 2fpkt"];
285--5757[label="0.555556;5pkt 5fpkt"];
285--6949[label="0.1;1pkt 1fpkt"];
285--7393[label="0.125;1pkt 1fpkt"];
285--7531[label="0.4;2pkt 2fpkt"];
285--8805[label="0.1;1pkt 1fpkt"];
285--9178[label="0.4;2pkt 2fpkt"];
3177--3295[label="0.00421941;1pkt 1fpkt"];
4265--6949[label="1;10pkt 10fpkt"];
4265--8805[label="1;10pkt 10fpkt"];
4892--7393[label="1;8pkt 8fpkt"];
5089--7531[label="1;4pkt 4fpkt"];
5089--9178[label="1;4pkt 4fpkt"];
6949--8805[label="1;10pkt 10fpkt"];
7531--9178[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.228.130" dst_port="80" src_ip="83.181.118.116"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
1832[label="215.41.5.155;s;904pkt 904fpkt", shape=diamond, color=yellow];
3179[label="215.41.5.155;s;769pkt 769fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.41.5.155:1071, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1071: (50%)&gt;];
}
1832--3179[label="1;769pkt 769fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.41.5.155" src_port="1071"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
2156[label="132.19.238.86;d;21pkt 21fpkt", shape=diamond, color=yellow];
3126[label="132.19.238.86;d;20pkt 20fpkt", shape=hexagon, color=black];
5240[label="99.23.47.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7633[label="99.23.47.161;1pkt 1fpkt", shape=invtriangle, color=brown];
9244[label="99.23.47.161;1pkt 1fpkt", shape=invhouse, color=bisque];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:443, 132.19.238.86:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.8636%)&lt;BR/&gt; 3125: (5.68182%)&lt;BR/&gt; 4154: (2.27273%)&lt;BR/&gt; 4134: (2.27273%)&lt;BR/&gt; 4126: (2.27273%)&gt;];
}
2156--3126[label="1;20pkt 20fpkt"];
2156--3181[label="0.047619;1pkt 1fpkt"];
2156--5240[label="1;1pkt 1fpkt"];
2156--7633[label="1;1pkt 1fpkt"];
2156--9244[label="1;1pkt 1fpkt"];
3126--5240[label="1;1pkt 1fpkt"];
3126--7633[label="1;1pkt 1fpkt"];
3126--9244[label="1;1pkt 1fpkt"];
5240--7633[label="1;1pkt 1fpkt"];
5240--9244[label="1;1pkt 1fpkt"];
7633--9244[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.238.86" src_port="443"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
2357[label="51.13.69.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
3190[label="51.13.69.153;s;1pkt 1fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.13.69.153:3693, 195.89.80.143:4662}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3693: (50%)&gt;];
}
2357--3190[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.80.143" dst_port="4662" src_ip="51.13.69.153" src_port="3693"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
1333[label="195.158.186.23;s;63pkt 63fpkt", shape=diamond, color=yellow];
3191[label="195.158.186.23;s;61pkt 61fpkt", shape=hexagon, color=black];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.158.186.23:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1333--3191[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter src_ip="195.158.186.23"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
313[label="194.212.157.34;s;107pkt 107fpkt", shape=diamond, color=yellow];
626[label="55.170.112.253;d;1pkt 1fpkt", shape=diamond, color=yellow];
1090[label="83.74.113.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
1468[label="37.41.17.137;d;4pkt 4fpkt", shape=diamond, color=yellow];
2468[label="138.166.230.39;d;45pkt 45fpkt", shape=diamond, color=yellow];
2801[label="194.212.157.34;s;17pkt 17fpkt", shape=hexagon, color=black];
3198[label="83.74.113.102;d;1pkt 1fpkt", shape=hexagon, color=black];
3788[label="194.212.157.34;135pkt 135fpkt", shape=pentagon, color=darkviolet];
6614[label="194.212.157.34;135pkt 135fpkt", shape=invtriangle, color=brown];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.157.34:21, 138.166.230.39:*}[50.3597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (35.9865%)&lt;BR/&gt; 20: (5.38117%)&lt;BR/&gt; 80: (4.82063%)&lt;BR/&gt; 8346: (0.672646%)&lt;BR/&gt; 35581: (0.560538%)&gt;];
}
313--626[label="1;1pkt 1fpkt"];
313--1090[label="1;1pkt 1fpkt"];
313--1468[label="0.25;1pkt 1fpkt"];
313--2468[label="1;45pkt 45fpkt"];
313--2801[label="1;17pkt 17fpkt"];
313--3198[label="1;1pkt 1fpkt"];
313--3288[label="0.0186916;2pkt 2fpkt"];
313--3292[label="0.0186916;2pkt 2fpkt"];
313--3303[label="0.0186916;2pkt 2fpkt"];
313--3788[label="0.990654;106pkt 106fpkt"];
313--6614[label="0.990654;106pkt 106fpkt"];
626--2801[label="1;1pkt 1fpkt"];
626--3288[label="1;1pkt 1fpkt"];
626--3292[label="1;1pkt 1fpkt"];
626--3303[label="1;1pkt 1fpkt"];
626--3788[label="1;1pkt 1fpkt"];
626--6614[label="1;1pkt 1fpkt"];
1090--2801[label="1;1pkt 1fpkt"];
1090--3198[label="1;1pkt 1fpkt"];
1090--3288[label="1;1pkt 1fpkt"];
1090--3788[label="1;1pkt 1fpkt"];
1090--6614[label="1;1pkt 1fpkt"];
1468--2693[label="0.75;3pkt 3fpkt"];
1468--2801[label="0.25;1pkt 1fpkt"];
1468--3257[label="0.75;3pkt 3fpkt"];
1468--3788[label="0.25;1pkt 1fpkt"];
1468--5232[label="0.75;3pkt 3fpkt"];
1468--6614[label="0.25;1pkt 1fpkt"];
1468--7629[label="0.75;3pkt 3fpkt"];
1468--9242[label="0.75;3pkt 3fpkt"];
2468--3788[label="0.977778;44pkt 44fpkt"];
2468--6614[label="0.977778;44pkt 44fpkt"];
2801--3198[label="1;1pkt 1fpkt"];
2801--3288[label="0.117647;2pkt 2fpkt"];
2801--3292[label="0.0588235;1pkt 1fpkt"];
2801--3303[label="0.0588235;1pkt 1fpkt"];
2801--3788[label="1;17pkt 17fpkt"];
2801--6614[label="1;17pkt 17fpkt"];
3198--3288[label="1;1pkt 1fpkt"];
3198--3788[label="1;1pkt 1fpkt"];
3198--6614[label="1;1pkt 1fpkt"];
3788--6614[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_ip="138.166.230.39" src_ip="194.212.157.34" src_port="21"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.995481,2.32271,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1648[label="84.17.18.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
3199[label="84.17.18.25;s;1pkt 1fpkt", shape=hexagon, color=black];
6542[label="84.17.18.25;1pkt 1fpkt", shape=invtriangle, color=brown];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.17.18.25:4662, 195.89.80.143:4324}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4324: (50%)&gt;];
}
1648--3199[label="1;1pkt 1fpkt"];
1648--6542[label="1;1pkt 1fpkt"];
3199--6542[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.80.143" dst_port="4324" src_ip="84.17.18.25" src_port="4662"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1384[label="215.41.5.156;s;1208pkt 1208fpkt", shape=diamond, color=yellow];
3204[label="215.41.5.156;s;1116pkt 1116fpkt", shape=hexagon, color=black];
5179[label="215.41.5.156;1374pkt 1374fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.41.5.156:1071, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1071: (50%)&gt;];
}
1384--3204[label="1;1116pkt 1116fpkt"];
1384--5179[label="1;1208pkt 1208fpkt"];
3204--5179[label="1;1116pkt 1116fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.41.5.156" src_port="1071"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
2266[label="215.43.155.30;s;20pkt 20fpkt", shape=diamond, color=yellow];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.43.155.30:*, 147.13.220.153:21}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (35%)&lt;BR/&gt; 64926: (2.5%)&lt;BR/&gt; 64810: (2.5%)&lt;BR/&gt; 64404: (2.5%)&lt;BR/&gt; 64304: (2.5%)&gt;];
}
2266--2696[label="1;20pkt 20fpkt"];
2266--3220[label="1;20pkt 20fpkt"];
2266--3259[label="1;20pkt 20fpkt"];
2266--3743[label="1;6pkt 6fpkt"];
2266--6586[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="21" src_ip="215.43.155.30"/>
    </slice>
    <from sec="1144127215" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1808[label="217.32.96.141;s;5pkt 5fpkt", shape=diamond, color=yellow];
3221[label="217.32.96.141;s;5pkt 5fpkt", shape=hexagon, color=black];
4997[label="217.32.96.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7465[label="217.32.96.141;4pkt 4fpkt", shape=invtriangle, color=brown];
9132[label="217.32.96.141;4pkt 4fpkt", shape=invhouse, color=bisque];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.32.96.141:80, 132.19.202.200:1351}[20%]&lt;BR/&gt;{217.32.96.141:80, 132.19.202.200:1353}[20%]&lt;BR/&gt;{217.32.96.141:80, 132.19.202.200:1361}[20%]&lt;BR/&gt;{217.32.96.141:80, 132.19.202.200:1381}[20%]&lt;BR/&gt;{217.32.96.141:80, 132.19.202.200:1387}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1387: (10.8696%)&lt;BR/&gt; 1381: (10.8696%)&lt;BR/&gt; 1361: (10.8696%)&lt;BR/&gt; 1353: (10.8696%)&gt;];
}
1808--3221[label="1;5pkt 5fpkt"];
1808--3292[label="0.4;2pkt 2fpkt"];
1808--3303[label="0.4;2pkt 2fpkt"];
1808--4997[label="1;5pkt 5fpkt"];
1808--7465[label="1;4pkt 4fpkt"];
1808--9132[label="1;4pkt 4fpkt"];
3221--3292[label="0.4;2pkt 2fpkt"];
3221--3303[label="0.4;2pkt 2fpkt"];
3221--4997[label="1;5pkt 5fpkt"];
3221--7465[label="1;4pkt 4fpkt"];
3221--9132[label="1;4pkt 4fpkt"];
4997--7465[label="1;4pkt 4fpkt"];
4997--9132[label="1;4pkt 4fpkt"];
7465--9132[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.202.200" dst_port="1387" src_ip="217.32.96.141" src_port="80"/>
      <filter dst_ip="132.19.202.200" dst_port="1381" src_ip="217.32.96.141" src_port="80"/>
      <filter dst_ip="132.19.202.200" dst_port="1361" src_ip="217.32.96.141" src_port="80"/>
      <filter dst_ip="132.19.202.200" dst_port="1353" src_ip="217.32.96.141" src_port="80"/>
      <filter dst_ip="132.19.202.200" dst_port="1351" src_ip="217.32.96.141" src_port="80"/>
    </slice>
    <from sec="1144127242" usec="0"/>
    <to sec="1144127614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
2486[label="83.216.233.150;s;398pkt 398fpkt", shape=diamond, color=yellow];
3223[label="83.216.233.150;s;398pkt 398fpkt", shape=hexagon, color=black];
5107[label="83.216.233.150;398pkt 398fpkt", shape=pentagon, color=darkviolet];
7539[label="83.216.233.150;398pkt 398fpkt", shape=invtriangle, color=brown];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.216.233.150:*, *:445}[55.7789%]&lt;BR/&gt;{83.216.233.150:*, *:139}[44.2211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.8894%)&lt;BR/&gt; 139: (22.1106%)&lt;BR/&gt; 65207: (0.753769%)&lt;BR/&gt; 63575: (0.628141%)&lt;BR/&gt; 62069: (0.628141%)&gt;];
}
2486--3223[label="1;398pkt 398fpkt"];
2486--5107[label="1;398pkt 398fpkt"];
2486--7539[label="1;398pkt 398fpkt"];
3223--5107[label="1;398pkt 398fpkt"];
3223--7539[label="1;398pkt 398fpkt"];
5107--7539[label="1;398pkt 398fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="83.216.233.150"/>
      <filter dst_port="139" src_ip="83.216.233.150"/>
    </slice>
    <from sec="1144127443" usec="0"/>
    <to sec="1144127484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
982[label="213.104.190.10;s;2151pkt 2151fpkt", shape=diamond, color=yellow];
3236[label="213.104.190.10;s;2151pkt 2151fpkt", shape=hexagon, color=black];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.104.190.10:1037, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
982--3236[label="1;2151pkt 2151fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="213.104.190.10" src_port="1037"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
700[label="132.19.193.8;d;21pkt 21fpkt", shape=diamond, color=yellow];
701[label="120.168.85.111;s;21pkt 21fpkt", shape=diamond, color=yellow];
2967[label="132.19.193.8;d;15pkt 15fpkt", shape=hexagon, color=black];
3242[label="120.168.85.111;s;21pkt 21fpkt", shape=hexagon, color=black];
4669[label="120.168.85.111;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7225[label="120.168.85.111;21pkt 21fpkt", shape=invtriangle, color=brown];
8981[label="120.168.85.111;20pkt 20fpkt", shape=invhouse, color=bisque];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.168.85.111:80, 132.19.193.8:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1050: (2.5%)&lt;BR/&gt; 1047: (2.5%)&lt;BR/&gt; 1042: (2.5%)&lt;BR/&gt; 1041: (2.5%)&gt;];
}
700--701[label="1;21pkt 21fpkt"];
700--2967[label="1;15pkt 15fpkt"];
700--3242[label="1;21pkt 21fpkt"];
700--3288[label="0.142857;3pkt 3fpkt"];
700--3292[label="0.428571;9pkt 9fpkt"];
700--3303[label="0.428571;9pkt 9fpkt"];
700--4669[label="1;21pkt 21fpkt"];
700--7225[label="1;21pkt 21fpkt"];
700--8981[label="1;20pkt 20fpkt"];
701--2967[label="1;15pkt 15fpkt"];
701--3242[label="1;21pkt 21fpkt"];
701--3288[label="0.142857;3pkt 3fpkt"];
701--3292[label="0.428571;9pkt 9fpkt"];
701--3303[label="0.428571;9pkt 9fpkt"];
701--4669[label="1;21pkt 21fpkt"];
701--7225[label="1;21pkt 21fpkt"];
701--8981[label="1;20pkt 20fpkt"];
2967--3242[label="1;15pkt 15fpkt"];
2967--3288[label="0.2;3pkt 3fpkt"];
2967--3292[label="0.533333;8pkt 8fpkt"];
2967--3303[label="0.533333;8pkt 8fpkt"];
2967--4669[label="1;15pkt 15fpkt"];
2967--7225[label="1;15pkt 15fpkt"];
2967--8981[label="0.933333;14pkt 14fpkt"];
3242--3288[label="0.142857;3pkt 3fpkt"];
3242--3292[label="0.428571;9pkt 9fpkt"];
3242--3303[label="0.428571;9pkt 9fpkt"];
3242--4669[label="1;21pkt 21fpkt"];
3242--7225[label="1;21pkt 21fpkt"];
3242--8981[label="1;20pkt 20fpkt"];
4669--7225[label="1;21pkt 21fpkt"];
4669--8981[label="1;20pkt 20fpkt"];
7225--8981[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.193.8" src_ip="120.168.85.111" src_port="80"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
1990[label="132.18.129.152;s;40pkt 40fpkt", shape=diamond, color=yellow];
2041[label="162.235.191.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
3248[label="132.18.129.152;s;40pkt 40fpkt", shape=hexagon, color=black];
5125[label="132.18.129.152;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.152:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 51224: (1.65289%)&lt;BR/&gt; 52024: (1.23967%)&lt;BR/&gt; 51995: (1.23967%)&lt;BR/&gt; 51989: (1.23967%)&gt;];
}
1990--2041[label="1;1pkt 1fpkt"];
1990--3248[label="1;40pkt 40fpkt"];
1990--5125[label="0.975;39pkt 39fpkt"];
2041--3248[label="1;1pkt 1fpkt"];
2041--5125[label="1;1pkt 1fpkt"];
3248--5125[label="0.975;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="132.18.129.152"/>
    </slice>
    <from sec="1144126844" usec="0"/>
    <to sec="1144127670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
1989[label="161.223.174.39;s;89pkt 89fpkt", shape=diamond, color=yellow];
2636[label="221.235.177.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
3251[label="221.235.177.153;d;1pkt 1fpkt", shape=hexagon, color=black];
3839[label="161.223.174.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6650[label="161.223.174.39;1pkt 1fpkt", shape=invtriangle, color=brown];
8610[label="161.223.174.39;1pkt 1fpkt", shape=invhouse, color=bisque];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.174.39:*, 221.235.177.245:80}[25.8427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.1489%)&lt;BR/&gt; 61820: (3.19149%)&lt;BR/&gt; 554: (3.19149%)&lt;BR/&gt; 1863: (2.12766%)&lt;BR/&gt; 62554: (0.531915%)&gt;];
}
1989--2255[label="0.0555556;1pkt 1fpkt"];
1989--2555[label="0.0224719;2pkt 2fpkt"];
1989--2636[label="1;1pkt 1fpkt"];
1989--3251[label="1;1pkt 1fpkt"];
1989--3296[label="0.0674157;6pkt 6fpkt"];
1989--3839[label="1;1pkt 1fpkt"];
1989--6650[label="1;1pkt 1fpkt"];
1989--8610[label="1;1pkt 1fpkt"];
2636--3251[label="1;1pkt 1fpkt"];
2636--3839[label="1;1pkt 1fpkt"];
2636--6650[label="1;1pkt 1fpkt"];
2636--8610[label="1;1pkt 1fpkt"];
3251--3839[label="1;1pkt 1fpkt"];
3251--6650[label="1;1pkt 1fpkt"];
3251--8610[label="1;1pkt 1fpkt"];
3839--6650[label="1;1pkt 1fpkt"];
3839--8610[label="1;1pkt 1fpkt"];
6650--8610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.235.177.245" dst_port="80" src_ip="161.223.174.39"/>
    </slice>
    <from sec="1144126837" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
2643[label="128.202.0.136;s;24pkt 24fpkt", shape=diamond, color=yellow];
2673[label="199.252.49.88;d;25pkt 25fpkt", shape=diamond, color=yellow];
3252[label="128.202.0.136;s;24pkt 24fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.0.136:*, 199.252.49.88:80}[96%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3151%)&lt;BR/&gt; 49695: (2.05479%)&lt;BR/&gt; 49694: (2.05479%)&lt;BR/&gt; 49693: (2.05479%)&lt;BR/&gt; 49692: (2.05479%)&gt;];
}
2643--2673[label="1;24pkt 24fpkt"];
2643--3252[label="1;24pkt 24fpkt"];
2643--3296[label="0.333333;8pkt 8fpkt"];
2673--3252[label="1;24pkt 24fpkt"];
2673--3296[label="0.32;8pkt 8fpkt"];
3252--3296[label="0.333333;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="199.252.49.88" dst_port="80" src_ip="128.202.0.136"/>
    </slice>
    <from sec="1144127361" usec="0"/>
    <to sec="1144127590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
1310[label="166.138.86.29;s;4pkt 4fpkt", shape=diamond, color=yellow];
2149[label="194.160.9.94;s;3pkt 3fpkt", shape=diamond, color=yellow];
2364[label="194.160.9.70;s;2pkt 2fpkt", shape=diamond, color=yellow];
3193[label="194.160.9.70;s;2pkt 2fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.29:32825, *:53}[44.4444%]&lt;BR/&gt;{194.160.9.94:32814, *:53}[33.3333%]&lt;BR/&gt;{*:*, 206.172.31.41:53}[33.3333%]&lt;BR/&gt;{*:*, 128.28.83.79:53}[33.3333%]&lt;BR/&gt;{194.160.9.70:38842, *:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 38842: (18.1818%)&lt;BR/&gt; 32825: (18.1818%)&lt;BR/&gt; 32814: (13.6364%)&gt;];
}
1310--1512[label="0.25;1pkt 1fpkt"];
1310--1812[label="0.25;1pkt 1fpkt"];
1310--3290[label="0.25;1pkt 1fpkt"];
1310--3295[label="0.25;1pkt 1fpkt"];
1310--3724[label="1;4pkt 4fpkt"];
1310--6577[label="1;3pkt 3fpkt"];
2149--3290[label="0.333333;1pkt 1fpkt"];
2149--3295[label="0.333333;1pkt 1fpkt"];
2149--4488[label="1;2pkt 2fpkt"];
2149--7103[label="1;3pkt 3fpkt"];
2149--8901[label="1;3pkt 3fpkt"];
2364--3193[label="1;2pkt 2fpkt"];
2364--3290[label="0.5;1pkt 1fpkt"];
2364--3295[label="0.5;1pkt 1fpkt"];
2364--4190[label="1;2pkt 2fpkt"];
2364--6893[label="1;2pkt 2fpkt"];
2364--8768[label="1;2pkt 2fpkt"];
3193--3290[label="0.5;1pkt 1fpkt"];
3193--3295[label="0.5;1pkt 1fpkt"];
3193--4190[label="1;2pkt 2fpkt"];
3193--6893[label="1;2pkt 2fpkt"];
3193--8768[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.79" dst_port="53"/>
      <filter dst_ip="206.172.31.41" dst_port="53"/>
      <filter dst_port="53" src_ip="166.138.86.29" src_port="32825"/>
      <filter dst_port="53" src_ip="194.160.9.94" src_port="32814"/>
      <filter dst_port="53" src_ip="194.160.9.70" src_port="38842"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
273[label="206.211.95.184;s;1446pkt 1446fpkt", shape=diamond, color=yellow];
1639[label="132.18.129.168;s;424pkt 424fpkt", shape=diamond, color=yellow];
3197[label="132.18.129.168;s;382pkt 382fpkt", shape=hexagon, color=black];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.211.95.184:53, *:*}[77.3262%]&lt;BR/&gt;{132.18.129.168:*, *:*}[22.6738%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.3099%)&lt;BR/&gt; 2992: (2.17584%)&lt;BR/&gt; 32768: (0.843694%)&lt;BR/&gt; 32769: (0.510657%)&lt;BR/&gt; 9253: (0.310835%)&gt;];
}
273--2739[label="1;1171pkt 1171fpkt"];
273--3287[label="0.0643154;93pkt 93fpkt"];
273--3302[label="0.0698479;101pkt 101fpkt"];
273--5507[label="1;1446pkt 1446fpkt"];
1639--1811[label="0.0060241;1pkt 1fpkt"];
1639--1864[label="0.00584795;1pkt 1fpkt"];
1639--1930[label="0.00689655;1pkt 1fpkt"];
1639--2178[label="0.00628931;1pkt 1fpkt"];
1639--2515[label="0.00571429;1pkt 1fpkt"];
1639--2522[label="0.00641026;1pkt 1fpkt"];
1639--2564[label="0.00584795;1pkt 1fpkt"];
1639--3197[label="1;382pkt 382fpkt"];
1639--3287[label="0.0613208;26pkt 26fpkt"];
1639--3290[label="0.0165094;7pkt 7fpkt"];
1639--3295[label="0.0306604;13pkt 13fpkt"];
1639--3302[label="0.0542453;23pkt 23fpkt"];
3197--3287[label="0.0680628;26pkt 26fpkt"];
3197--3290[label="0.0183246;7pkt 7fpkt"];
3197--3295[label="0.013089;5pkt 5fpkt"];
3197--3302[label="0.0602094;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.129.168"/>
      <filter src_ip="206.211.95.184" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
1899[label="194.212.156.164;s;233pkt 233fpkt", shape=diamond, color=yellow];
3123[label="194.212.156.164;s;233pkt 233fpkt", shape=hexagon, color=black];
5283[label="194.212.156.164;244pkt 244fpkt", shape=pentagon, color=darkviolet];
7669[label="194.212.156.164;244pkt 244fpkt", shape=invtriangle, color=brown];
9270[label="194.212.156.164;244pkt 244fpkt", shape=invhouse, color=bisque];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.156.164:32770, *:53}[39.1837%]&lt;BR/&gt;{194.212.156.164:*, *:25}[31.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24.7078%)&lt;BR/&gt; 25: (20.409%)&lt;BR/&gt; 32770: (19.8247%)&lt;BR/&gt; 113: (4.59098%)&lt;BR/&gt; 0: (1.00167%)&gt;];
}
1899--2178[label="0.00628931;1pkt 1fpkt"];
1899--2378[label="0.0131579;1pkt 1fpkt"];
1899--2515[label="0.00571429;1pkt 1fpkt"];
1899--2522[label="0.00641026;1pkt 1fpkt"];
1899--3123[label="1;233pkt 233fpkt"];
1899--3287[label="0.00858369;2pkt 2fpkt"];
1899--3290[label="0.0171674;4pkt 4fpkt"];
1899--3295[label="0.0214592;5pkt 5fpkt"];
1899--3302[label="0.00858369;2pkt 2fpkt"];
1899--5283[label="0.995708;232pkt 232fpkt"];
1899--7669[label="0.995708;232pkt 232fpkt"];
1899--9270[label="0.995708;232pkt 232fpkt"];
3123--3287[label="0.00858369;2pkt 2fpkt"];
3123--3290[label="0.0171674;4pkt 4fpkt"];
3123--3295[label="0.0214592;5pkt 5fpkt"];
3123--3302[label="0.00858369;2pkt 2fpkt"];
3123--5283[label="0.995708;232pkt 232fpkt"];
3123--7669[label="0.995708;232pkt 232fpkt"];
3123--9270[label="0.995708;232pkt 232fpkt"];
5283--7669[label="1;244pkt 244fpkt"];
5283--9270[label="1;244pkt 244fpkt"];
7669--9270[label="1;244pkt 244fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="194.212.156.164"/>
      <filter dst_port="53" src_ip="194.212.156.164" src_port="32770"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
2006[label="132.19.138.94;s;90pkt 90fpkt", shape=diamond, color=yellow];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.138.94:80, 195.188.136.125:*}[71.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60821: (0.555556%)&lt;BR/&gt; 58477: (0.555556%)&lt;BR/&gt; 56795: (0.555556%)&lt;BR/&gt; 54827: (0.555556%)&gt;];
}
2006--2043[label="0.984615;64pkt 64fpkt"];
2006--3292[label="0.0555556;5pkt 5fpkt"];
2006--3303[label="0.0555556;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="195.188.136.125" src_ip="132.19.138.94" src_port="80"/>
    </slice>
    <from sec="1144127036" usec="0"/>
    <to sec="1144127617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
258[label="132.18.129.197;s;546pkt 546fpkt", shape=diamond, color=yellow];
416[label="132.18.129.196;s;454pkt 454fpkt", shape=diamond, color=yellow];
534[label="38.51.92.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
535[label="132.19.212.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
546[label="132.19.98.152;s;65pkt 65fpkt", shape=diamond, color=yellow];
710[label="132.19.43.146;s;323pkt 323fpkt", shape=diamond, color=yellow];
718[label="132.19.44.99;s;580pkt 580fpkt", shape=diamond, color=yellow];
732[label="136.184.80.30;d;51pkt 51fpkt", shape=diamond, color=yellow];
1022[label="195.164.144.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
1042[label="161.223.52.81;s;182pkt 182fpkt", shape=diamond, color=yellow];
1111[label="132.19.217.28;d;101pkt 101fpkt", shape=diamond, color=yellow];
1151[label="41.148.12.245;d;35pkt 35fpkt", shape=diamond, color=yellow];
1252[label="195.80.108.165;d;108pkt 108fpkt", shape=diamond, color=yellow];
1266[label="195.203.67.176;d;4pkt 4fpkt", shape=diamond, color=yellow];
1346[label="132.19.106.42;s;26pkt 26fpkt", shape=diamond, color=yellow];
1414[label="32.136.147.145;d;253pkt 253fpkt", shape=diamond, color=yellow];
1481[label="207.226.179.177;d;72pkt 72fpkt", shape=diamond, color=yellow];
1493[label="214.200.229.50;s;176pkt 176fpkt", shape=diamond, color=yellow];
1600[label="161.223.8.109;d;265pkt 265fpkt", shape=diamond, color=yellow];
1696[label="132.18.212.199;s;42pkt 42fpkt", shape=diamond, color=yellow];
1813[label="164.23.237.193;d;82pkt 82fpkt", shape=diamond, color=yellow];
1830[label="164.23.174.103;s;87pkt 87fpkt", shape=diamond, color=yellow];
1913[label="210.226.98.197;d;102pkt 102fpkt", shape=diamond, color=yellow];
1926[label="195.80.109.43;s;4pkt 4fpkt", shape=diamond, color=yellow];
1946[label="39.65.65.3;s;72pkt 72fpkt", shape=diamond, color=yellow];
1974[label="132.19.197.232;d;53pkt 53fpkt", shape=diamond, color=yellow];
1997[label="161.223.54.81;d;47pkt 47fpkt", shape=diamond, color=yellow];
2019[label="41.25.162.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
2022[label="161.223.251.71;s;4pkt 4fpkt", shape=diamond, color=yellow];
2349[label="196.206.212.120;s;48pkt 48fpkt", shape=diamond, color=yellow];
2429[label="161.223.135.51;s;31pkt 31fpkt", shape=diamond, color=yellow];
2477[label="195.89.72.29;s;24pkt 24fpkt", shape=diamond, color=yellow];
2588[label="211.154.81.59;d;115pkt 115fpkt", shape=diamond, color=yellow];
2772[label="132.19.43.146;s;323pkt 323fpkt", shape=hexagon, color=black];
2869[label="132.18.129.196;s;271pkt 271fpkt", shape=hexagon, color=black];
3000[label="164.23.237.193;d;49pkt 49fpkt", shape=hexagon, color=black];
3146[label="136.184.80.30;d;41pkt 41fpkt", shape=hexagon, color=black];
3178[label="164.23.174.103;s;87pkt 87fpkt", shape=hexagon, color=black];
3312[label="41.25.100.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3420[label="132.18.65.8;28pkt 28fpkt", shape=pentagon, color=darkviolet];
3692[label="41.25.162.26;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3877[label="132.19.106.42;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3957[label="214.200.229.50;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4191[label="80.154.35.70;144pkt 144fpkt", shape=pentagon, color=darkviolet];
4221[label="161.223.251.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4536[label="128.28.226.98;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4581[label="164.23.174.103;91pkt 91fpkt", shape=pentagon, color=darkviolet];
5010[label="161.223.54.143;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5024[label="196.134.6.144;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5122[label="132.19.98.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5272[label="132.18.176.163;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5471[label="132.19.69.180;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5550[label="132.19.108.188;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5622[label="194.212.152.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5645[label="132.18.129.196;504pkt 504fpkt", shape=pentagon, color=darkviolet];
5665[label="132.18.129.197;587pkt 587fpkt", shape=pentagon, color=darkviolet];
5698[label="132.18.210.199;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5699[label="132.18.212.199;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5724[label="132.18.189.201;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5934[label="132.19.21.219;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5970[label="194.212.155.222;60pkt 60fpkt", shape=pentagon, color=darkviolet];
6220[label="36.106.136.246;31pkt 31fpkt", shape=pentagon, color=darkviolet];
6240[label="161.223.198.249;54pkt 54fpkt", shape=pentagon, color=darkviolet];
6293[label="41.25.100.0;2pkt 2fpkt", shape=invtriangle, color=brown];
6318[label="41.25.103.3;3pkt 3fpkt", shape=invtriangle, color=brown];
6369[label="132.18.65.8;28pkt 28fpkt", shape=invtriangle, color=brown];
6731[label="214.200.229.50;6pkt 6fpkt", shape=invtriangle, color=brown];
6894[label="80.154.35.70;143pkt 143fpkt", shape=invtriangle, color=brown];
6917[label="161.223.251.71;1pkt 1fpkt", shape=invtriangle, color=brown];
7139[label="128.28.226.98;18pkt 18fpkt", shape=invtriangle, color=brown];
7478[label="161.223.54.143;14pkt 14fpkt", shape=invtriangle, color=brown];
7488[label="196.134.6.144;19pkt 19fpkt", shape=invtriangle, color=brown];
7549[label="132.19.98.152;2pkt 2fpkt", shape=invtriangle, color=brown];
7659[label="132.18.176.163;9pkt 9fpkt", shape=invtriangle, color=brown];
7934[label="132.18.129.197;586pkt 586fpkt", shape=invtriangle, color=brown];
7976[label="132.18.189.201;23pkt 23fpkt", shape=invtriangle, color=brown];
8146[label="194.212.155.222;60pkt 60fpkt", shape=invtriangle, color=brown];
8333[label="36.106.136.246;31pkt 31fpkt", shape=invtriangle, color=brown];
8347[label="161.223.198.249;54pkt 54fpkt", shape=invtriangle, color=brown];
9437[label="132.18.129.197;587pkt 587fpkt", shape=invhouse, color=bisque];
9462[label="132.18.189.201;23pkt 23fpkt", shape=invhouse, color=bisque];
9579[label="194.212.155.222;59pkt 59fpkt", shape=invhouse, color=bisque];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[84.2665%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.237%)&lt;BR/&gt; 0: (4.8218%)&lt;BR/&gt; 24793: (1.09755%)&lt;BR/&gt; 443: (0.801578%)&lt;BR/&gt; 47169: (0.554939%)&gt;];
}
258--527[label="1;1pkt 1fpkt"];
258--732[label="0.176471;9pkt 9fpkt"];
258--1478[label="0.480519;37pkt 37fpkt"];
258--1481[label="0.5;36pkt 36fpkt"];
258--2000[label="0.025641;1pkt 1fpkt"];
258--2151[label="0.0258065;4pkt 4fpkt"];
258--2346[label="0.0172414;1pkt 1fpkt"];
258--2604[label="0.0882353;3pkt 3fpkt"];
258--2738[label="1;287pkt 287fpkt"];
258--3146[label="0.121951;5pkt 5fpkt"];
258--3296[label="0.0494505;27pkt 27fpkt"];
258--5665[label="1;546pkt 546fpkt"];
258--7934[label="0.998168;545pkt 545fpkt"];
258--9437[label="1;546pkt 546fpkt"];
416--732[label="0.176471;9pkt 9fpkt"];
416--1478[label="0.519481;40pkt 40fpkt"];
416--1481[label="0.5;36pkt 36fpkt"];
416--2000[label="0.102564;4pkt 4fpkt"];
416--2151[label="0.0387097;6pkt 6fpkt"];
416--2604[label="0.0294118;1pkt 1fpkt"];
416--2869[label="1;271pkt 271fpkt"];
416--3146[label="0.170732;7pkt 7fpkt"];
416--3296[label="0.0594714;27pkt 27fpkt"];
416--5645[label="1;454pkt 454fpkt"];
534--535[label="1;1pkt 1fpkt"];
534--3296[label="1;1pkt 1fpkt"];
535--3296[label="1;1pkt 1fpkt"];
546--547[label="0.707692;46pkt 46fpkt"];
546--995[label="0.0307692;2pkt 2fpkt"];
546--1386[label="0.0153846;1pkt 1fpkt"];
546--2285[label="0.222222;12pkt 12fpkt"];
546--2859[label="1;35pkt 35fpkt"];
546--3296[label="0.107692;7pkt 7fpkt"];
546--7549[label="0.5;1pkt 1fpkt"];
710--732[label="0.235294;12pkt 12fpkt"];
710--792[label="0.0340557;11pkt 11fpkt"];
710--995[label="0.00355872;1pkt 1fpkt"];
710--1066[label="0.00621118;1pkt 1fpkt"];
710--1095[label="0.00552486;1pkt 1fpkt"];
710--1376[label="0.0188679;1pkt 1fpkt"];
710--1425[label="0.0155039;2pkt 2fpkt"];
710--1517[label="0.00520833;1pkt 1fpkt"];
710--1679[label="0.0178571;2pkt 2fpkt"];
710--2139[label="0.0105263;1pkt 1fpkt"];
710--2199[label="0.0217391;1pkt 1fpkt"];
710--2265[label="0.020202;4pkt 4fpkt"];
710--2772[label="1;323pkt 323fpkt"];
710--3146[label="0.243902;10pkt 10fpkt"];
710--3296[label="0.0216718;7pkt 7fpkt"];
718--792[label="0.00689655;4pkt 4fpkt"];
718--1120[label="0.399306;115pkt 115fpkt"];
718--1414[label="1;253pkt 253fpkt"];
718--2588[label="1;115pkt 115fpkt"];
718--2839[label="0.425532;40pkt 40fpkt"];
718--3296[label="0.0965517;56pkt 56fpkt"];
732--1346[label="0.153846;4pkt 4fpkt"];
732--2729[label="0.0392157;2pkt 2fpkt"];
732--2772[label="0.235294;12pkt 12fpkt"];
732--3146[label="1;41pkt 41fpkt"];
732--3296[label="0.0392157;2pkt 2fpkt"];
732--3877[label="0.153846;4pkt 4fpkt"];
732--5272[label="0.888889;8pkt 8fpkt"];
732--5645[label="0.176471;9pkt 9fpkt"];
732--5665[label="0.176471;9pkt 9fpkt"];
732--5724[label="0.0833333;2pkt 2fpkt"];
732--5876[label="0.0392157;2pkt 2fpkt"];
732--5888[label="0.0196078;1pkt 1fpkt"];
732--7659[label="0.888889;8pkt 8fpkt"];
732--7934[label="0.176471;9pkt 9fpkt"];
732--7976[label="0.0869565;2pkt 2fpkt"];
732--8082[label="0.0392157;2pkt 2fpkt"];
732--8091[label="0.0196078;1pkt 1fpkt"];
732--9437[label="0.176471;9pkt 9fpkt"];
732--9462[label="0.0869565;2pkt 2fpkt"];
732--9535[label="0.0392157;2pkt 2fpkt"];
732--9542[label="0.0196078;1pkt 1fpkt"];
1022--3296[label="1;1pkt 1fpkt"];
1042--3296[label="0.0494505;9pkt 9fpkt"];
1111--1493[label="0.623762;63pkt 63fpkt"];
1111--3957[label="0.142857;1pkt 1fpkt"];
1111--4921[label="0.00990099;1pkt 1fpkt"];
1111--5551[label="0.111111;1pkt 1fpkt"];
1111--6318[label="0.333333;1pkt 1fpkt"];
1151--1732[label="0.444444;4pkt 4fpkt"];
1151--2022[label="1;4pkt 4fpkt"];
1151--3296[label="0.0285714;1pkt 1fpkt"];
1151--3500[label="0.2;2pkt 2fpkt"];
1151--3906[label="0.5;4pkt 4fpkt"];
1151--4221[label="0.5;1pkt 1fpkt"];
1151--5632[label="0.0285714;1pkt 1fpkt"];
1151--6426[label="0.2;2pkt 2fpkt"];
1151--7911[label="0.0285714;1pkt 1fpkt"];
1151--9422[label="0.0285714;1pkt 1fpkt"];
1252--3296[label="0.0462963;5pkt 5fpkt"];
1252--4021[label="0.0769231;1pkt 1fpkt"];
1252--4939[label="0.00961538;1pkt 1fpkt"];
1252--4999[label="0.00925926;1pkt 1fpkt"];
1252--5208[label="0.166667;1pkt 1fpkt"];
1252--5919[label="0.2;1pkt 1fpkt"];
1252--6133[label="0.125;1pkt 1fpkt"];
1252--7425[label="0.00952381;1pkt 1fpkt"];
1252--7467[label="0.00925926;1pkt 1fpkt"];
1252--7608[label="0.166667;1pkt 1fpkt"];
1252--8267[label="0.125;1pkt 1fpkt"];
1252--9107[label="0.00961538;1pkt 1fpkt"];
1252--9133[label="0.00925926;1pkt 1fpkt"];
1266--3296[label="0.5;2pkt 2fpkt"];
1266--5970[label="0.25;1pkt 1fpkt"];
1266--8146[label="0.25;1pkt 1fpkt"];
1266--9579[label="0.25;1pkt 1fpkt"];
1346--1359[label="0.423077;11pkt 11fpkt"];
1346--3146[label="0.153846;4pkt 4fpkt"];
1346--3877[label="1;26pkt 26fpkt"];
1414--3296[label="0.0988142;25pkt 25fpkt"];
1481--2738[label="0.25;18pkt 18fpkt"];
1481--2869[label="0.333333;24pkt 24fpkt"];
1481--5645[label="0.5;36pkt 36fpkt"];
1481--5665[label="0.5;36pkt 36fpkt"];
1481--7934[label="0.5;36pkt 36fpkt"];
1481--9437[label="0.5;36pkt 36fpkt"];
1493--3296[label="0.142045;25pkt 25fpkt"];
1493--3957[label="0.285714;2pkt 2fpkt"];
1493--6731[label="0.333333;2pkt 2fpkt"];
1600--3296[label="0.0754717;20pkt 20fpkt"];
1600--4037[label="0.3;3pkt 3fpkt"];
1600--4186[label="0.111111;1pkt 1fpkt"];
1600--4335[label="0.166667;1pkt 1fpkt"];
1600--5683[label="0.0588235;1pkt 1fpkt"];
1600--6783[label="0.363636;4pkt 4fpkt"];
1600--8695[label="0.3;3pkt 3fpkt"];
1696--3296[label="0.0238095;1pkt 1fpkt"];
1696--5699[label="1;42pkt 42fpkt"];
1813--2349[label="0.145833;7pkt 7fpkt"];
1813--3000[label="1;49pkt 49fpkt"];
1813--3296[label="0.109756;9pkt 9fpkt"];
1813--3330[label="0.727273;16pkt 16fpkt"];
1813--3837[label="0.0909091;1pkt 1fpkt"];
1813--4553[label="0.142857;1pkt 1fpkt"];
1813--4751[label="0.285714;8pkt 8fpkt"];
1813--6648[label="0.0909091;1pkt 1fpkt"];
1813--7150[label="0.125;1pkt 1fpkt"];
1813--7288[label="0.296296;8pkt 8fpkt"];
1813--8609[label="0.0833333;1pkt 1fpkt"];
1813--9021[label="0.296296;8pkt 8fpkt"];
1830--1913[label="0.0344828;3pkt 3fpkt"];
1830--2094[label="0.027027;1pkt 1fpkt"];
1830--2131[label="0.047619;1pkt 1fpkt"];
1830--3178[label="1;87pkt 87fpkt"];
1830--3296[label="0.045977;4pkt 4fpkt"];
1830--4581[label="1;87pkt 87fpkt"];
1913--3031[label="0.00980392;1pkt 1fpkt"];
1913--3178[label="0.0344828;3pkt 3fpkt"];
1913--3296[label="0.00980392;1pkt 1fpkt"];
1913--3791[label="0.0625;1pkt 1fpkt"];
1913--4122[label="0.00980392;1pkt 1fpkt"];
1913--4581[label="0.032967;3pkt 3fpkt"];
1913--4797[label="0.00980392;1pkt 1fpkt"];
1913--5215[label="0.294118;30pkt 30fpkt"];
1913--6616[label="0.0625;1pkt 1fpkt"];
1913--6845[label="0.00980392;1pkt 1fpkt"];
1913--7324[label="0.00980392;1pkt 1fpkt"];
1913--7614[label="0.294118;30pkt 30fpkt"];
1913--8590[label="0.0588235;1pkt 1fpkt"];
1913--8736[label="0.00980392;1pkt 1fpkt"];
1913--9046[label="0.00980392;1pkt 1fpkt"];
1913--9230[label="0.294118;30pkt 30fpkt"];
1926--3296[label="0.25;1pkt 1fpkt"];
1946--3296[label="0.236111;17pkt 17fpkt"];
1974--3296[label="0.113208;6pkt 6fpkt"];
1974--5113[label="0.1;1pkt 1fpkt"];
1974--5605[label="0.125;1pkt 1fpkt"];
1974--7542[label="0.111111;1pkt 1fpkt"];
1974--7889[label="0.142857;1pkt 1fpkt"];
1974--9184[label="0.1;1pkt 1fpkt"];
1974--9410[label="0.125;1pkt 1fpkt"];
1997--2019[label="0.5;1pkt 1fpkt"];
1997--2625[label="0.2;1pkt 1fpkt"];
1997--3066[label="1;33pkt 33fpkt"];
1997--3296[label="0.0425532;2pkt 2fpkt"];
1997--3312[label="0.5;1pkt 1fpkt"];
1997--3427[label="0.2;1pkt 1fpkt"];
1997--3692[label="0.5;1pkt 1fpkt"];
1997--4021[label="0.0769231;1pkt 1fpkt"];
1997--6293[label="0.5;1pkt 1fpkt"];
2019--3296[label="1;2pkt 2fpkt"];
2019--3692[label="1;2pkt 2fpkt"];
2022--3296[label="0.25;1pkt 1fpkt"];
2022--4221[label="0.5;1pkt 1fpkt"];
2349--3000[label="0.104167;5pkt 5fpkt"];
2349--3296[label="0.125;6pkt 6fpkt"];
2429--3296[label="0.0967742;3pkt 3fpkt"];
2477--3296[label="0.791667;19pkt 19fpkt"];
2588--3296[label="0.0869565;10pkt 10fpkt"];
2772--3146[label="0.243902;10pkt 10fpkt"];
2772--3296[label="0.0216718;7pkt 7fpkt"];
2869--5645[label="1;271pkt 271fpkt"];
3000--3330[label="0.318182;7pkt 7fpkt"];
3000--3837[label="0.0909091;1pkt 1fpkt"];
3000--4751[label="0.214286;6pkt 6fpkt"];
3000--6648[label="0.0909091;1pkt 1fpkt"];
3000--7288[label="0.222222;6pkt 6fpkt"];
3000--8609[label="0.0833333;1pkt 1fpkt"];
3000--9021[label="0.222222;6pkt 6fpkt"];
3146--3877[label="0.153846;4pkt 4fpkt"];
3146--5272[label="0.888889;8pkt 8fpkt"];
3146--5645[label="0.170732;7pkt 7fpkt"];
3146--5665[label="0.121951;5pkt 5fpkt"];
3146--5876[label="0.0487805;2pkt 2fpkt"];
3146--5888[label="0.0243902;1pkt 1fpkt"];
3146--7659[label="0.888889;8pkt 8fpkt"];
3146--7934[label="0.121951;5pkt 5fpkt"];
3146--8082[label="0.0487805;2pkt 2fpkt"];
3146--8091[label="0.0243902;1pkt 1fpkt"];
3146--9437[label="0.121951;5pkt 5fpkt"];
3146--9535[label="0.0487805;2pkt 2fpkt"];
3146--9542[label="0.0243902;1pkt 1fpkt"];
3178--3296[label="0.045977;4pkt 4fpkt"];
3178--4581[label="1;87pkt 87fpkt"];
3312--6293[label="1;2pkt 2fpkt"];
3420--6369[label="1;28pkt 28fpkt"];
3420--8437[label="1;27pkt 27fpkt"];
3957--6731[label="1;6pkt 6fpkt"];
4191--6894[label="1;143pkt 143fpkt"];
4191--8769[label="1;143pkt 143fpkt"];
4221--6917[label="1;1pkt 1fpkt"];
4536--7139[label="1;18pkt 18fpkt"];
4536--8926[label="1;19pkt 19fpkt"];
5010--7478[label="1;14pkt 14fpkt"];
5010--9142[label="1;14pkt 14fpkt"];
5024--7488[label="1;18pkt 18fpkt"];
5024--9149[label="1;18pkt 18fpkt"];
5122--7549[label="1;1pkt 1fpkt"];
5272--7659[label="1;9pkt 9fpkt"];
5471--7787[label="1;5pkt 5fpkt"];
5471--9342[label="1;5pkt 5fpkt"];
5550--7845[label="1;4pkt 4fpkt"];
5622--7903[label="1;2pkt 2fpkt"];
5622--9417[label="1;2pkt 2fpkt"];
5665--7934[label="1;586pkt 586fpkt"];
5665--9437[label="1;587pkt 587fpkt"];
5698--7957[label="1;15pkt 15fpkt"];
5698--9449[label="1;14pkt 14fpkt"];
5724--7976[label="1;23pkt 23fpkt"];
5724--9462[label="1;23pkt 23fpkt"];
5934--8121[label="1;17pkt 17fpkt"];
5934--9561[label="1;17pkt 17fpkt"];
5970--8146[label="1;60pkt 60fpkt"];
5970--9579[label="1;59pkt 59fpkt"];
6220--8333[label="1;31pkt 31fpkt"];
6220--9709[label="1;30pkt 30fpkt"];
6240--8347[label="1;54pkt 54fpkt"];
6240--9718[label="1;53pkt 53fpkt"];
6369--8437[label="1;27pkt 27fpkt"];
6894--8769[label="1;143pkt 143fpkt"];
7139--8926[label="1;18pkt 18fpkt"];
7478--9142[label="1;14pkt 14fpkt"];
7488--9149[label="1;18pkt 18fpkt"];
7934--9437[label="1;586pkt 586fpkt"];
7976--9462[label="1;23pkt 23fpkt"];
8146--9579[label="1;59pkt 59fpkt"];
8333--9709[label="1;30pkt 30fpkt"];
8347--9718[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,012,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
1610[label="35.99.138.29;s;196pkt 196fpkt", shape=diamond, color=yellow];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.99.138.29:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2893: (0.510204%)&lt;BR/&gt; 1533: (0.510204%)&lt;BR/&gt; 1225: (0.510204%)&lt;BR/&gt; 4885: (0.255102%)&gt;];
}
1610--3124[label="1;144pkt 144fpkt"];
1610--3297[label="0.163265;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="35.99.138.29"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,012,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
1981[label="83.218.35.151;s;189pkt 189fpkt", shape=diamond, color=yellow];
5109[label="83.218.35.151;191pkt 191fpkt", shape=pentagon, color=darkviolet];
7540[label="83.218.35.151;191pkt 191fpkt", shape=invtriangle, color=brown];
9183[label="83.218.35.151;192pkt 192fpkt", shape=invhouse, color=bisque];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.218.35.151:*, *:139}[79.6875%]&lt;BR/&gt;{83.218.35.151:*, *:445}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (39.9083%)&lt;BR/&gt; 445: (10.0917%)&lt;BR/&gt; 36232: (0.524246%)&lt;BR/&gt; 37143: (0.262123%)&lt;BR/&gt; 37142: (0.262123%)&gt;];
}
1981--3297[label="0.00529101;1pkt 1fpkt"];
1981--3298[label="0.015873;3pkt 3fpkt"];
1981--5109[label="0.994709;188pkt 188fpkt"];
1981--7540[label="0.994709;188pkt 188fpkt"];
1981--9183[label="1;189pkt 189fpkt"];
5109--7540[label="1;191pkt 191fpkt"];
5109--9183[label="1;191pkt 191fpkt"];
7540--9183[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="83.218.35.151"/>
      <filter dst_port="445" src_ip="83.218.35.151"/>
    </slice>
    <from sec="1144126822" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.46.0"/>
    </slice>
    <from sec="1144126909" usec="0"/>
    <to sec="1144127567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.34.178.0"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
852[label="164.23.214.162;d;13pkt 13fpkt", shape=diamond, color=yellow];
1431[label="36.172.50.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
3008[label="164.23.214.162;d;13pkt 13fpkt", shape=hexagon, color=black];
3318[label="36.172.50.1;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6297[label="36.172.50.1;18pkt 18fpkt", shape=invtriangle, color=brown];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.172.50.1:*, *:25}[60%]&lt;BR/&gt;{*:*, 164.23.214.162:25}[43.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 47433: (3.1746%)&lt;BR/&gt; 48164: (2.38095%)&lt;BR/&gt; 60488: (1.5873%)&lt;BR/&gt; 48714: (1.5873%)&gt;];
}
852--1431[label="1;1pkt 1fpkt"];
852--3008[label="1;13pkt 13fpkt"];
852--3318[label="0.0769231;1pkt 1fpkt"];
852--6297[label="0.0769231;1pkt 1fpkt"];
1431--3008[label="1;1pkt 1fpkt"];
3008--3318[label="0.0769231;1pkt 1fpkt"];
3008--6297[label="0.0769231;1pkt 1fpkt"];
3318--6297[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="36.172.50.1"/>
      <filter dst_ip="164.23.214.162" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.91.64.1"/>
    </slice>
    <from sec="1144127628" usec="0"/>
    <to sec="1144127654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.201.1"/>
    </slice>
    <from sec="1144126865" usec="0"/>
    <to sec="1144127220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.3.25.2"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
1058[label="164.23.141.162;d;3pkt 3fpkt", shape=diamond, color=yellow];
1444[label="36.172.50.27;s;9pkt 9fpkt", shape=diamond, color=yellow];
2956[label="164.23.141.162;d;2pkt 2fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.172.50.27:*, 164.23.141.28:25}[45.4545%]&lt;BR/&gt;{*:*, 164.23.141.162:25}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 48427: (10.7143%)&lt;BR/&gt; 37422: (7.14286%)&lt;BR/&gt; 47140: (3.57143%)&lt;BR/&gt; 45879: (3.57143%)&gt;];
}
1058--1059[label="0.333333;1pkt 1fpkt"];
1058--1444[label="0.333333;1pkt 1fpkt"];
1058--2956[label="1;2pkt 2fpkt"];
1058--3694[label="0.333333;1pkt 1fpkt"];
1444--2956[label="0.5;1pkt 1fpkt"];
1444--3694[label="1;9pkt 9fpkt"];
2956--3694[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.141.162" dst_port="25"/>
      <filter dst_ip="164.23.141.28" dst_port="25" src_ip="36.172.50.27"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.199.142.2"/>
    </slice>
    <from sec="1144126917" usec="0"/>
    <to sec="1144127553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.180.115.3"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.194.3"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.188.195.3"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
900[label="132.19.13.224;s;654pkt 654fpkt", shape=diamond, color=yellow];
2822[label="215.130.185.184;d;23pkt 23fpkt", shape=hexagon, color=black];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.13.224:1024, *:53}[48.9645%]&lt;BR/&gt;{132.19.13.224:53, *:*}[44.0828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.6307%)&lt;BR/&gt; 1024: (24.8154%)&lt;BR/&gt; 0: (3.69276%)&lt;BR/&gt; 32768: (1.25554%)&lt;BR/&gt; 32770: (0.443131%)&gt;];
}
900--906[label="0.00568182;1pkt 1fpkt"];
900--1323[label="0.142857;1pkt 1fpkt"];
900--1342[label="0.0030581;1pkt 1fpkt"];
900--1366[label="0.333333;1pkt 1fpkt"];
900--1396[label="0.142857;1pkt 1fpkt"];
900--1503[label="0.00274725;1pkt 1fpkt"];
900--1595[label="0.142857;1pkt 1fpkt"];
900--1651[label="0.166667;1pkt 1fpkt"];
900--1671[label="0.142857;1pkt 1fpkt"];
900--1811[label="0.0060241;1pkt 1fpkt"];
900--1818[label="0.0126582;1pkt 1fpkt"];
900--1864[label="0.00584795;1pkt 1fpkt"];
900--1900[label="0.0147059;1pkt 1fpkt"];
900--1930[label="0.00689655;1pkt 1fpkt"];
900--2178[label="0.00628931;1pkt 1fpkt"];
900--2378[label="0.0131579;1pkt 1fpkt"];
900--2454[label="0.0106383;1pkt 1fpkt"];
900--2515[label="0.00571429;1pkt 1fpkt"];
900--2522[label="0.00641026;1pkt 1fpkt"];
900--2564[label="0.00584795;1pkt 1fpkt"];
900--2822[label="0.0434783;1pkt 1fpkt"];
900--2961[label="0.00653595;1pkt 1fpkt"];
900--3287[label="0.0519878;34pkt 34fpkt"];
900--3290[label="0.0428135;28pkt 28fpkt"];
900--3295[label="0.0611621;40pkt 40fpkt"];
900--3302[label="0.030581;20pkt 20fpkt"];
900--5982[label="0.998471;653pkt 653fpkt"];
900--8156[label="0.996942;652pkt 652fpkt"];
2822--2896[label="0.0434783;1pkt 1fpkt"];
2822--3290[label="0.478261;11pkt 11fpkt"];
2822--3295[label="0.304348;7pkt 7fpkt"];
2822--3325[label="0.0434783;1pkt 1fpkt"];
2822--3699[label="0.0434783;1pkt 1fpkt"];
2822--4451[label="0.0434783;1pkt 1fpkt"];
2822--5007[label="0.0434783;1pkt 1fpkt"];
2822--5416[label="0.130435;3pkt 3fpkt"];
2822--5709[label="0.0434783;1pkt 1fpkt"];
2822--5720[label="0.0434783;1pkt 1fpkt"];
2822--5982[label="0.0434783;1pkt 1fpkt"];
2822--6092[label="0.0434783;1pkt 1fpkt"];
2822--6154[label="0.0434783;1pkt 1fpkt"];
2822--6301[label="0.0434783;1pkt 1fpkt"];
2822--7475[label="0.0434783;1pkt 1fpkt"];
2822--7972[label="0.0434783;1pkt 1fpkt"];
2822--8156[label="0.0434783;1pkt 1fpkt"];
2822--8240[label="0.0434783;1pkt 1fpkt"];
2822--8392[label="0.0434783;1pkt 1fpkt"];
2822--9139[label="0.0434783;1pkt 1fpkt"];
2822--9458[label="0.0434783;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.13.224" src_port="53"/>
      <filter dst_port="53" src_ip="132.19.13.224" src_port="1024"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.172.50.5"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144126887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
713[label="38.112.33.6;s;4pkt 4fpkt", shape=diamond, color=yellow];
1086[label="164.23.92.97;d;10pkt 10fpkt", shape=diamond, color=yellow];
1546[label="128.28.217.4;d;83pkt 83fpkt", shape=diamond, color=yellow];
2836[label="38.112.33.6;s;4pkt 4fpkt", shape=hexagon, color=black];
3392[label="38.112.33.6;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6350[label="38.112.33.6;8pkt 8fpkt", shape=invtriangle, color=brown];
8424[label="38.112.33.6;8pkt 8fpkt", shape=invhouse, color=bisque];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.28.217.4:25}[49.4949%]&lt;BR/&gt;{*:25, 128.28.217.4:*}[31.3131%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4%)&lt;BR/&gt; 4692: (2.4%)&lt;BR/&gt; 0: (2.4%)&lt;BR/&gt; 59109: (2%)&lt;BR/&gt; 51202: (2%)&gt;];
}
713--895[label="0.5;2pkt 2fpkt"];
713--1086[label="0.25;1pkt 1fpkt"];
713--2836[label="1;4pkt 4fpkt"];
713--3392[label="1;4pkt 4fpkt"];
713--6350[label="1;4pkt 4fpkt"];
713--8424[label="1;4pkt 4fpkt"];
1086--2615[label="0.1;1pkt 1fpkt"];
1086--2836[label="0.25;1pkt 1fpkt"];
1086--3392[label="0.125;1pkt 1fpkt"];
1086--3547[label="0.1;1pkt 1fpkt"];
1086--3578[label="0.1;1pkt 1fpkt"];
1086--4395[label="0.111111;1pkt 1fpkt"];
1086--6350[label="0.125;1pkt 1fpkt"];
1086--6475[label="0.1;1pkt 1fpkt"];
1086--6544[label="0.1;1pkt 1fpkt"];
1086--8424[label="0.125;1pkt 1fpkt"];
1086--8498[label="0.1;1pkt 1fpkt"];
1546--3392[label="0.125;1pkt 1fpkt"];
1546--3952[label="0.25;3pkt 3fpkt"];
1546--4877[label="0.0833333;1pkt 1fpkt"];
1546--5359[label="0.0625;2pkt 2fpkt"];
1546--5379[label="0.0333333;1pkt 1fpkt"];
1546--5612[label="0.0666667;1pkt 1fpkt"];
1546--5615[label="0.0833333;1pkt 1fpkt"];
1546--5633[label="0.0666667;1pkt 1fpkt"];
1546--6350[label="0.125;1pkt 1fpkt"];
1546--6726[label="0.25;3pkt 3fpkt"];
1546--7381[label="0.0833333;1pkt 1fpkt"];
1546--7716[label="0.0645161;2pkt 2fpkt"];
1546--7894[label="0.0666667;1pkt 1fpkt"];
1546--7897[label="0.0833333;1pkt 1fpkt"];
1546--7912[label="0.0666667;1pkt 1fpkt"];
1546--8424[label="0.125;1pkt 1fpkt"];
1546--9080[label="0.0909091;1pkt 1fpkt"];
1546--9299[label="0.0625;2pkt 2fpkt"];
1546--9414[label="0.0833333;1pkt 1fpkt"];
1546--9423[label="0.0714286;1pkt 1fpkt"];
2836--3392[label="1;4pkt 4fpkt"];
2836--6350[label="1;4pkt 4fpkt"];
2836--8424[label="1;4pkt 4fpkt"];
3392--6350[label="1;8pkt 8fpkt"];
3392--8424[label="1;8pkt 8fpkt"];
6350--8424[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.4" src_port="25"/>
      <filter dst_ip="128.28.217.4" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
3334[label="219.75.49.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.75.49.2:53, 147.13.216.68:32804}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32804: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
3334--6305[label="1;1pkt 1fpkt"];
3334--8394[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.216.68" dst_port="32804" src_ip="219.75.49.2" src_port="53"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
2691[label="194.29.21.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
3403[label="194.29.21.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.29.21.7:80, 147.13.230.162:4431}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4431: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2691--3403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.162" dst_port="4431" src_ip="194.29.21.7" src_port="80"/>
    </slice>
    <from sec="1144127592" usec="0"/>
    <to sec="1144127674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.158.7"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
684[label="216.241.220.210;d;298pkt 298fpkt", shape=diamond, color=yellow];
1146[label="132.18.137.81;s;59pkt 59fpkt", shape=diamond, color=yellow];
1856[label="132.18.78.189;s;315pkt 315fpkt", shape=diamond, color=yellow];
2342[label="132.19.219.119;s;31pkt 31fpkt", shape=diamond, color=yellow];
2393[label="152.12.139.87;s;50pkt 50fpkt", shape=diamond, color=yellow];
2401[label="132.18.88.89;s;52pkt 52fpkt", shape=diamond, color=yellow];
2499[label="128.202.81.208;s;5pkt 5fpkt", shape=diamond, color=yellow];
3416[label="128.28.202.7;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3507[label="132.19.51.14;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4420[label="152.12.139.87;53pkt 53fpkt", shape=pentagon, color=darkviolet];
4438[label="132.18.88.89;55pkt 55fpkt", shape=pentagon, color=darkviolet];
4732[label="132.19.219.119;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5375[label="128.202.65.171;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5561[label="132.18.78.189;344pkt 344fpkt", shape=pentagon, color=darkviolet];
6367[label="128.28.202.7;26pkt 26fpkt", shape=invtriangle, color=brown];
6430[label="132.19.51.14;8pkt 8fpkt", shape=invtriangle, color=brown];
7061[label="152.12.139.87;53pkt 53fpkt", shape=invtriangle, color=brown];
7073[label="132.18.88.89;56pkt 56fpkt", shape=invtriangle, color=brown];
7276[label="132.19.219.119;33pkt 33fpkt", shape=invtriangle, color=brown];
7856[label="132.18.78.189;343pkt 343fpkt", shape=invtriangle, color=brown];
8475[label="132.19.51.14;9pkt 9fpkt", shape=invhouse, color=bisque];
9012[label="132.19.219.119;32pkt 32fpkt", shape=invhouse, color=bisque];
9389[label="132.18.78.189;344pkt 344fpkt", shape=invhouse, color=bisque];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.241.220.210:443}[42.8375%]&lt;BR/&gt;{132.18.78.189:*, *:53}[41.4601%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.55%)&lt;BR/&gt; 443: (19.0655%)&lt;BR/&gt; 80: (3.76439%)&lt;BR/&gt; 1025: (0.310009%)&lt;BR/&gt; 35277: (0.177148%)&gt;];
}
684--1036[label="0.0033557;1pkt 1fpkt"];
684--1146[label="0.0169492;1pkt 1fpkt"];
684--1856[label="0.0738255;22pkt 22fpkt"];
684--2342[label="0.774194;24pkt 24fpkt"];
684--2393[label="1;50pkt 50fpkt"];
684--2401[label="1;52pkt 52fpkt"];
684--2499[label="1;5pkt 5fpkt"];
684--2533[label="0.0033557;1pkt 1fpkt"];
684--3416[label="0.04;1pkt 1fpkt"];
684--3507[label="0.125;1pkt 1fpkt"];
684--3975[label="0.0033557;1pkt 1fpkt"];
684--4420[label="0.924528;49pkt 49fpkt"];
684--4438[label="0.927273;51pkt 51fpkt"];
684--4732[label="0.727273;24pkt 24fpkt"];
684--5375[label="0.923077;24pkt 24fpkt"];
684--5561[label="0.0872483;26pkt 26fpkt"];
684--5775[label="0.203252;25pkt 25fpkt"];
684--6367[label="0.0384615;1pkt 1fpkt"];
684--6430[label="0.125;1pkt 1fpkt"];
684--7061[label="0.924528;49pkt 49fpkt"];
684--7073[label="0.928571;52pkt 52fpkt"];
684--7276[label="0.727273;24pkt 24fpkt"];
684--7856[label="0.0872483;26pkt 26fpkt"];
684--8475[label="0.111111;1pkt 1fpkt"];
684--9012[label="0.75;24pkt 24fpkt"];
684--9389[label="0.0872483;26pkt 26fpkt"];
1146--3296[label="0.338983;20pkt 20fpkt"];
1856--1864[label="0.0526316;9pkt 9fpkt"];
1856--1930[label="0.0482759;7pkt 7fpkt"];
1856--2178[label="0.0566038;9pkt 9fpkt"];
1856--2515[label="0.08;14pkt 14fpkt"];
1856--2522[label="0.0833333;13pkt 13fpkt"];
1856--2564[label="0.0818713;14pkt 14fpkt"];
1856--3290[label="0.0698413;22pkt 22fpkt"];
1856--5561[label="1;315pkt 315fpkt"];
1856--7856[label="0.996825;314pkt 314fpkt"];
1856--9389[label="1;315pkt 315fpkt"];
2342--4732[label="1;31pkt 31fpkt"];
2342--7276[label="1;31pkt 31fpkt"];
2342--9012[label="0.967742;30pkt 30fpkt"];
2393--4420[label="0.98;49pkt 49fpkt"];
2393--7061[label="0.98;49pkt 49fpkt"];
2401--4438[label="0.980769;51pkt 51fpkt"];
2401--7073[label="1;52pkt 52fpkt"];
3416--6367[label="1;25pkt 25fpkt"];
3507--6430[label="1;8pkt 8fpkt"];
3507--8475[label="1;8pkt 8fpkt"];
4420--7061[label="1;53pkt 53fpkt"];
4438--7073[label="1;55pkt 55fpkt"];
4732--7276[label="1;33pkt 33fpkt"];
4732--9012[label="1;32pkt 32fpkt"];
5561--7856[label="1;343pkt 343fpkt"];
5561--9389[label="1;344pkt 344fpkt"];
6430--8475[label="1;8pkt 8fpkt"];
7276--9012[label="1;32pkt 32fpkt"];
7856--9389[label="1;343pkt 343fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="132.18.78.189"/>
      <filter dst_ip="216.241.220.210" dst_port="443"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
1849[label="208.114.3.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.114.3.8:6666, 147.13.228.63:6666}[50%]&lt;BR/&gt;{208.114.3.8:6669, 147.13.228.63:6669}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6669: (50%)&lt;BR/&gt; 6666: (50%)&gt;];
}
1849--3001[label="1;2pkt 2fpkt"];
1849--3417[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="208.114.3.8" src_port="6669"/>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="208.114.3.8" src_port="6666"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.252.85.8"/>
    </slice>
    <from sec="1144127071" usec="0"/>
    <to sec="1144127097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
2160[label="194.212.154.8;s;130pkt 130fpkt", shape=diamond, color=yellow];
3425[label="194.212.154.8;136pkt 136fpkt", shape=pentagon, color=darkviolet];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.154.8:25, *:*}[53.6765%]&lt;BR/&gt;{194.212.154.8:*, *:113}[46.3235%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.8797%)&lt;BR/&gt; 113: (23.1203%)&lt;BR/&gt; 1293: (0.75188%)&lt;BR/&gt; 64668: (0.37594%)&lt;BR/&gt; 64112: (0.37594%)&gt;];
}
2160--3425[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.154.8" src_port="25"/>
      <filter dst_port="113" src_ip="194.212.154.8"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.26.196.9"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.34.36.10"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
1747[label="99.183.47.10;s;20pkt 20fpkt", shape=diamond, color=yellow];
3450[label="99.183.47.10;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6387[label="99.183.47.10;19pkt 19fpkt", shape=invtriangle, color=brown];
8445[label="99.183.47.10;20pkt 20fpkt", shape=invhouse, color=bisque];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.183.47.10:*, *:33435}[25%]&lt;BR/&gt;{99.183.47.10:*, *:33436}[25%]&lt;BR/&gt;{99.183.47.10:*, *:33437}[25%]&lt;BR/&gt;{99.183.47.10:*, *:33438}[25%]&lt;BR/&gt;{99.183.47.10:52915, 195.89.106.130:*}[20%]&lt;BR/&gt;{99.183.47.10:37113, 195.89.107.192:*}[20%]&lt;BR/&gt;{99.183.47.10:61373, 195.89.107.205:*}[20%]&lt;BR/&gt;{99.183.47.10:61634, 195.89.107.210:*}[20%]&lt;BR/&gt;{99.183.47.10:60103, 195.89.107.214:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33438: (12.6582%)&lt;BR/&gt; 33437: (12.6582%)&lt;BR/&gt; 33436: (12.6582%)&lt;BR/&gt; 33435: (12.0253%)&lt;BR/&gt; 61634: (10.1266%)&gt;];
}
1747--3450[label="1;20pkt 20fpkt"];
1747--6387[label="1;19pkt 19fpkt"];
1747--8445[label="1;20pkt 20fpkt"];
3450--6387[label="1;19pkt 19fpkt"];
3450--8445[label="1;20pkt 20fpkt"];
6387--8445[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_port="33438" src_ip="99.183.47.10"/>
      <filter dst_port="33437" src_ip="99.183.47.10"/>
      <filter dst_port="33436" src_ip="99.183.47.10"/>
      <filter dst_port="33435" src_ip="99.183.47.10"/>
      <filter dst_ip="195.89.107.214" src_ip="99.183.47.10" src_port="60103"/>
      <filter dst_ip="195.89.107.210" src_ip="99.183.47.10" src_port="61634"/>
      <filter dst_ip="195.89.107.205" src_ip="99.183.47.10" src_port="61373"/>
      <filter dst_ip="195.89.107.192" src_ip="99.183.47.10" src_port="37113"/>
      <filter dst_ip="195.89.106.130" src_ip="99.183.47.10" src_port="52915"/>
    </slice>
    <from sec="1144127037" usec="0"/>
    <to sec="1144127109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.77.53.10"/>
    </slice>
    <from sec="1144126830" usec="0"/>
    <to sec="1144127671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
1779[label="132.19.135.10;s;55pkt 55fpkt", shape=diamond, color=yellow];
3455[label="132.19.135.10;54pkt 54fpkt", shape=pentagon, color=darkviolet];
6392[label="132.19.135.10;54pkt 54fpkt", shape=invtriangle, color=brown];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.135.10:*, 202.201.58.0:80}[76.3636%]&lt;BR/&gt;{132.19.135.10:*, 202.201.58.109:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1244: (0.920245%)&lt;BR/&gt; 1243: (0.920245%)&lt;BR/&gt; 1242: (0.920245%)&lt;BR/&gt; 1241: (0.920245%)&gt;];
}
1779--3455[label="1;54pkt 54fpkt"];
1779--6392[label="1;54pkt 54fpkt"];
3455--6392[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="202.201.58.0" dst_port="80" src_ip="132.19.135.10"/>
      <filter dst_ip="202.201.58.109" dst_port="80" src_ip="132.19.135.10"/>
    </slice>
    <from sec="1144127167" usec="0"/>
    <to sec="1144127262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.37.51.11"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.161.175.11"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144127685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
879[label="216.54.112.0;s;3pkt 3fpkt", shape=diamond, color=yellow];
3313[label="216.54.112.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6294[label="216.54.112.0;2pkt 2fpkt", shape=invtriangle, color=brown];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.54.112.0:80, 132.19.148.208:1713}[33.3333%]&lt;BR/&gt;{216.54.112.0:80, 132.19.148.208:2229}[33.3333%]&lt;BR/&gt;{216.54.112.0:80, 132.19.148.208:2235}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2235: (21.4286%)&lt;BR/&gt; 2229: (21.4286%)&lt;BR/&gt; 1713: (7.14286%)&gt;];
}
879--3288[label="0.333333;1pkt 1fpkt"];
879--3292[label="0.333333;1pkt 1fpkt"];
879--3303[label="0.333333;1pkt 1fpkt"];
879--3313[label="1;2pkt 2fpkt"];
879--6294[label="1;2pkt 2fpkt"];
879--8387[label="1;3pkt 3fpkt"];
3313--6294[label="1;2pkt 2fpkt"];
3313--8387[label="1;2pkt 2fpkt"];
6294--8387[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.148.208" dst_port="2235" src_ip="216.54.112.0" src_port="80"/>
      <filter dst_ip="132.19.148.208" dst_port="2229" src_ip="216.54.112.0" src_port="80"/>
      <filter dst_ip="132.19.148.208" dst_port="1713" src_ip="216.54.112.0" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.142.74.12"/>
    </slice>
    <from sec="1144127285" usec="0"/>
    <to sec="1144127362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.90.12"/>
    </slice>
    <from sec="1144127651" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
2681[label="38.50.90.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
3480[label="38.50.90.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6411[label="38.50.90.12;2pkt 2fpkt", shape=invtriangle, color=brown];
8460[label="38.50.90.12;2pkt 2fpkt", shape=invhouse, color=bisque];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.50.90.12:80, 132.19.196.171:3340}[50%]&lt;BR/&gt;{38.50.90.12:80, 132.19.196.171:3349}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3340: (28.5714%)&lt;BR/&gt; 3349: (21.4286%)&gt;];
}
2681--3480[label="1;1pkt 1fpkt"];
2681--6411[label="1;2pkt 2fpkt"];
2681--8460[label="1;2pkt 2fpkt"];
3480--6411[label="1;1pkt 1fpkt"];
3480--8460[label="1;1pkt 1fpkt"];
6411--8460[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.196.171" dst_port="3349" src_ip="38.50.90.12" src_port="80"/>
      <filter dst_ip="132.19.196.171" dst_port="3340" src_ip="38.50.90.12" src_port="80"/>
    </slice>
    <from sec="1144127545" usec="0"/>
    <to sec="1144127621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.113.152.12"/>
    </slice>
    <from sec="1144127649" usec="0"/>
    <to sec="1144127674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
1255[label="209.97.165.12;s;1172pkt 1172fpkt", shape=diamond, color=yellow];
3487[label="209.97.165.12;1421pkt 1421fpkt", shape=pentagon, color=darkviolet];
6417[label="209.97.165.12;1422pkt 1422fpkt", shape=invtriangle, color=brown];
8465[label="209.97.165.12;1422pkt 1422fpkt", shape=invhouse, color=bisque];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.165.12:1367, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1367: (50%)&gt;];
}
1255--3487[label="1;1172pkt 1172fpkt"];
1255--6417[label="1;1172pkt 1172fpkt"];
1255--8465[label="1;1172pkt 1172fpkt"];
3487--6417[label="1;1421pkt 1421fpkt"];
3487--8465[label="1;1421pkt 1421fpkt"];
6417--8465[label="1;1422pkt 1422fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.97.165.12" src_port="1367"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.164.197.12"/>
    </slice>
    <from sec="1144126843" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.74.19.13"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
638[label="132.19.51.13;s;11pkt 11fpkt", shape=diamond, color=yellow];
1448[label="38.220.245.142;d;134pkt 134fpkt", shape=diamond, color=yellow];
1660[label="132.19.193.11;s;4pkt 4fpkt", shape=diamond, color=yellow];
1664[label="132.19.252.16;s;6pkt 6fpkt", shape=diamond, color=yellow];
2761[label="132.19.51.13;s;9pkt 9fpkt", shape=hexagon, color=black];
3474[label="132.19.193.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
3497[label="132.19.51.13;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6118[label="132.19.38.236;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6406[label="132.19.193.11;4pkt 4fpkt", shape=invtriangle, color=brown];
6424[label="132.19.51.13;14pkt 14fpkt", shape=invtriangle, color=brown];
8470[label="132.19.51.13;15pkt 15fpkt", shape=invhouse, color=bisque];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.98.57:*, 38.220.245.142:80}[38.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5403%)&lt;BR/&gt; 1863: (7.05645%)&lt;BR/&gt; 33527: (1.00806%)&lt;BR/&gt; 33495: (1.00806%)&lt;BR/&gt; 33281: (1.00806%)&gt;];
}
638--1095[label="0.0909091;1pkt 1fpkt"];
638--1448[label="0.0909091;1pkt 1fpkt"];
638--1513[label="0.0909091;1pkt 1fpkt"];
638--2761[label="1;9pkt 9fpkt"];
638--3497[label="0.909091;10pkt 10fpkt"];
638--6424[label="0.909091;10pkt 10fpkt"];
638--8470[label="1;11pkt 11fpkt"];
1448--1660[label="0.5;2pkt 2fpkt"];
1448--1664[label="0.333333;2pkt 2fpkt"];
1448--1893[label="0.0357143;1pkt 1fpkt"];
1448--1951[label="0.0119048;1pkt 1fpkt"];
1448--1972[label="0.0125;1pkt 1fpkt"];
1448--2202[label="0.0114943;1pkt 1fpkt"];
1448--2716[label="0.537313;72pkt 72fpkt"];
1448--2838[label="0.00943396;1pkt 1fpkt"];
1448--2879[label="0.111111;1pkt 1fpkt"];
1448--3052[label="0.0178571;1pkt 1fpkt"];
1448--3057[label="0.0125;1pkt 1fpkt"];
1448--3121[label="0.04;1pkt 1fpkt"];
1448--3180[label="0.0149254;2pkt 2fpkt"];
1448--3225[label="0.00746269;1pkt 1fpkt"];
1448--3233[label="0.00746269;1pkt 1fpkt"];
1448--3336[label="0.00746269;1pkt 1fpkt"];
1448--3346[label="0.0555556;1pkt 1fpkt"];
1448--3474[label="0.666667;2pkt 2fpkt"];
1448--3497[label="0.0714286;1pkt 1fpkt"];
1448--3528[label="0.0333333;1pkt 1fpkt"];
1448--3561[label="0.016129;1pkt 1fpkt"];
1448--3805[label="0.0434783;1pkt 1fpkt"];
1448--3840[label="0.0212766;2pkt 2fpkt"];
1448--3975[label="0.00746269;1pkt 1fpkt"];
1448--4001[label="0.027027;1pkt 1fpkt"];
1448--4023[label="0.217391;5pkt 5fpkt"];
1448--4029[label="0.537313;72pkt 72fpkt"];
1448--4208[label="0.2;1pkt 1fpkt"];
1448--4224[label="0.011236;1pkt 1fpkt"];
1448--4375[label="0.0149254;2pkt 2fpkt"];
1448--4577[label="0.00877193;1pkt 1fpkt"];
1448--4961[label="0.0217391;1pkt 1fpkt"];
1448--5037[label="0.0121951;1pkt 1fpkt"];
1448--5235[label="0.0294118;1pkt 1fpkt"];
1448--5388[label="0.166667;1pkt 1fpkt"];
1448--5402[label="0.047619;1pkt 1fpkt"];
1448--5611[label="0.0555556;1pkt 1fpkt"];
1448--5805[label="0.0181818;1pkt 1fpkt"];
1448--6116[label="0.111111;1pkt 1fpkt"];
1448--6118[label="0.0588235;2pkt 2fpkt"];
1448--6238[label="0.0114943;1pkt 1fpkt"];
1448--6306[label="0.00746269;1pkt 1fpkt"];
1448--6315[label="0.0555556;1pkt 1fpkt"];
1448--6406[label="0.5;2pkt 2fpkt"];
1448--6424[label="0.0714286;1pkt 1fpkt"];
1448--6628[label="0.0434783;1pkt 1fpkt"];
1448--6651[label="0.0210526;2pkt 2fpkt"];
1448--6762[label="0.0263158;1pkt 1fpkt"];
1448--6778[label="0.537313;72pkt 72fpkt"];
1448--6907[label="0.166667;1pkt 1fpkt"];
1448--6920[label="0.011236;1pkt 1fpkt"];
1448--7027[label="0.0149254;2pkt 2fpkt"];
1448--7167[label="0.00877193;1pkt 1fpkt"];
1448--7630[label="0.030303;1pkt 1fpkt"];
1448--7736[label="0.2;1pkt 1fpkt"];
1448--7745[label="0.05;1pkt 1fpkt"];
1448--7893[label="0.0588235;1pkt 1fpkt"];
1448--8030[label="0.0185185;1pkt 1fpkt"];
1448--8255[label="0.125;1pkt 1fpkt"];
1448--8401[label="0.0555556;1pkt 1fpkt"];
1448--8470[label="0.0666667;1pkt 1fpkt"];
1448--8777[label="0.2;1pkt 1fpkt"];
1448--8786[label="0.0111111;1pkt 1fpkt"];
1448--8852[label="0.0149254;2pkt 2fpkt"];
1448--8945[label="0.00869565;1pkt 1fpkt"];
1448--9318[label="0.047619;1pkt 1fpkt"];
1448--9499[label="0.0181818;1pkt 1fpkt"];
1660--2036[label="0.5;2pkt 2fpkt"];
1660--3474[label="1;3pkt 3fpkt"];
1660--6406[label="1;4pkt 4fpkt"];
2761--3497[label="0.888889;8pkt 8fpkt"];
2761--6424[label="0.888889;8pkt 8fpkt"];
2761--8470[label="1;9pkt 9fpkt"];
3474--6406[label="1;3pkt 3fpkt"];
3497--6424[label="1;14pkt 14fpkt"];
3497--8470[label="1;14pkt 14fpkt"];
6424--8470[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="38.220.245.142" dst_port="80" src_ip="132.19.98.57"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.130.13"/>
    </slice>
    <from sec="1144126828" usec="0"/>
    <to sec="1144127601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.25.30.14"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,012,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.125.65.14"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
1436[label="132.19.158.166;d;51pkt 51fpkt", shape=diamond, color=yellow];
3510[label="195.38.138.14;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5652[label="34.15.171.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.158.166:80}[92.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58739: (1.75439%)&lt;BR/&gt; 49313: (1.75439%)&lt;BR/&gt; 58285: (0.877193%)&lt;BR/&gt; 58242: (0.877193%)&gt;];
}
1436--3510[label="0.2;1pkt 1fpkt"];
1436--5208[label="0.166667;1pkt 1fpkt"];
1436--5605[label="0.125;1pkt 1fpkt"];
1436--5652[label="1;1pkt 1fpkt"];
1436--5924[label="0.111111;1pkt 1fpkt"];
1436--7608[label="0.166667;1pkt 1fpkt"];
1436--7889[label="0.142857;1pkt 1fpkt"];
1436--8114[label="0.111111;1pkt 1fpkt"];
1436--9410[label="0.125;1pkt 1fpkt"];
1436--9557[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.158.166" dst_port="80"/>
    </slice>
    <from sec="1144126840" usec="0"/>
    <to sec="1144127515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.28.176.14"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.192.14"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.28.198.14"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.198.76.15"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
850[label="216.155.157.127;d;86pkt 86fpkt", shape=diamond, color=yellow];
3519[label="132.19.146.15;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4019[label="132.19.137.56;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4392[label="132.19.137.85;45pkt 45fpkt", shape=pentagon, color=darkviolet];
7042[label="132.19.137.85;44pkt 44fpkt", shape=invtriangle, color=brown];
8863[label="132.19.137.85;44pkt 44fpkt", shape=invhouse, color=bisque];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.137.85:*, 216.155.157.127:80}[37.8378%]&lt;BR/&gt;{132.19.146.15:*, *:*}[27.027%]&lt;BR/&gt;{132.19.133.52:*, 216.155.157.127:80}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6111%)&lt;BR/&gt; 49429: (0.793651%)&lt;BR/&gt; 49428: (0.793651%)&lt;BR/&gt; 49427: (0.793651%)&lt;BR/&gt; 49426: (0.793651%)&gt;];
}
850--3519[label="0.266667;8pkt 8fpkt"];
850--4019[label="1;3pkt 3fpkt"];
850--4392[label="0.933333;42pkt 42fpkt"];
850--7042[label="0.954545;42pkt 42fpkt"];
850--8863[label="0.954545;42pkt 42fpkt"];
4392--7042[label="1;44pkt 44fpkt"];
4392--8863[label="1;44pkt 44fpkt"];
7042--8863[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.146.15"/>
      <filter dst_ip="216.155.157.127" dst_port="80" src_ip="132.19.137.85"/>
      <filter dst_ip="216.155.157.127" dst_port="80" src_ip="132.19.133.52"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
1136[label="132.19.201.15;s;36pkt 36fpkt", shape=diamond, color=yellow];
3213[label="132.19.201.15;s;36pkt 36fpkt", shape=hexagon, color=black];
3522[label="132.19.201.15;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.201.15:*, 36.228.229.170:80}[97.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0654%)&lt;BR/&gt; 3057: (1.40187%)&lt;BR/&gt; 3055: (1.40187%)&lt;BR/&gt; 3054: (1.40187%)&lt;BR/&gt; 3053: (1.40187%)&gt;];
}
1136--1438[label="0.972222;35pkt 35fpkt"];
1136--3213[label="1;36pkt 36fpkt"];
1136--3522[label="1;35pkt 35fpkt"];
3213--3522[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="36.228.229.170" dst_port="80" src_ip="132.19.201.15"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_400{
style=filled;
color=gray75;
2489[label="99.9.216.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
3523[label="99.9.216.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat400[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.9.216.15:2400, 161.223.8.51:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2400: (50%)&gt;];
}
2489--3523[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.8.51" dst_port="8080" src_ip="99.9.216.15" src_port="2400"/>
    </slice>
    <from sec="1144127448" usec="0"/>
    <to sec="1144127492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.202.18.16"/>
    </slice>
    <from sec="1144126922" usec="0"/>
    <to sec="1144127220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.159.43.16"/>
    </slice>
    <from sec="1144127557" usec="0"/>
    <to sec="1144127605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.117.16"/>
    </slice>
    <from sec="1144126927" usec="0"/>
    <to sec="1144126952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.193.131.16"/>
    </slice>
    <from sec="1144126872" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.26.191.18"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
1438[label="36.228.229.170;d;61pkt 61fpkt", shape=diamond, color=yellow];
3572[label="132.19.201.18;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6471[label="132.19.201.18;4pkt 4fpkt", shape=invtriangle, color=brown];
8496[label="132.19.201.18;3pkt 3fpkt", shape=invhouse, color=bisque];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.201.15:*, 36.228.229.170:80}[54.6875%]&lt;BR/&gt;{132.19.53.165:*, 36.228.229.170:80}[39.0625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 65294: (0.694444%)&lt;BR/&gt; 65293: (0.694444%)&lt;BR/&gt; 65285: (0.694444%)&gt;];
}
1438--1632[label="0.327869;20pkt 20fpkt"];
1438--3213[label="0.972222;35pkt 35fpkt"];
1438--3296[label="0.0819672;5pkt 5fpkt"];
1438--3522[label="1;35pkt 35fpkt"];
1438--3572[label="0.25;1pkt 1fpkt"];
1438--6471[label="0.25;1pkt 1fpkt"];
1438--8496[label="0.333333;1pkt 1fpkt"];
3572--6471[label="1;4pkt 4fpkt"];
3572--8496[label="1;3pkt 3fpkt"];
6471--8496[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="36.228.229.170" dst_port="80" src_ip="132.19.201.15"/>
      <filter dst_ip="36.228.229.170" dst_port="80" src_ip="132.19.53.165"/>
    </slice>
    <from sec="1144126841" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
981[label="136.66.9.161;d;182pkt 182fpkt", shape=diamond, color=yellow];
3586[label="132.19.135.19;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6483[label="132.19.135.19;13pkt 13fpkt", shape=invtriangle, color=brown];
8503[label="132.19.135.19;12pkt 12fpkt", shape=invhouse, color=bisque];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.196.18:*, 136.66.9.161:80}[88.4211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3264: (0.909091%)&lt;BR/&gt; 3262: (0.909091%)&lt;BR/&gt; 3260: (0.909091%)&lt;BR/&gt; 3258: (0.909091%)&gt;];
}
981--3296[label="0.010989;2pkt 2fpkt"];
981--3570[label="0.923077;168pkt 168fpkt"];
981--3586[label="0.384615;5pkt 5fpkt"];
981--5632[label="0.00549451;1pkt 1fpkt"];
981--5876[label="0.021978;4pkt 4fpkt"];
981--5888[label="0.010989;2pkt 2fpkt"];
981--6470[label="0.923077;168pkt 168fpkt"];
981--6483[label="0.384615;5pkt 5fpkt"];
981--7911[label="0.00549451;1pkt 1fpkt"];
981--8082[label="0.021978;4pkt 4fpkt"];
981--8091[label="0.010989;2pkt 2fpkt"];
981--8495[label="0.923077;168pkt 168fpkt"];
981--8503[label="0.416667;5pkt 5fpkt"];
981--9422[label="0.00549451;1pkt 1fpkt"];
981--9535[label="0.021978;4pkt 4fpkt"];
981--9542[label="0.010989;2pkt 2fpkt"];
3586--6483[label="1;13pkt 13fpkt"];
3586--8503[label="1;12pkt 12fpkt"];
6483--8503[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="136.66.9.161" dst_port="80" src_ip="161.223.196.18"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.142.19"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.90.143.19"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.25.162.19"/>
    </slice>
    <from sec="1144126980" usec="0"/>
    <to sec="1144127374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.133.213.19"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45837,2.397,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
32[label="213.215.22.20s;108pkt 108fpkt", shape=rectangle, color=red];
3597[label="213.215.22.20;253pkt 253fpkt", shape=pentagon, color=darkviolet];
6490[label="213.215.22.20;254pkt 254fpkt", shape=invtriangle, color=brown];
8510[label="213.215.22.20;254pkt 254fpkt", shape=invhouse, color=bisque];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.215.22.20:1090, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1090: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
32--3597[label="1;108pkt 108fpkt"];
32--6490[label="1;108pkt 108fpkt"];
32--8510[label="1;108pkt 108fpkt"];
3597--6490[label="1;253pkt 253fpkt"];
3597--8510[label="1;253pkt 253fpkt"];
6490--8510[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.215.22.20" src_port="1090"/>
    </slice>
    <from sec="1144127510" usec="0"/>
    <to sec="1144127532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.52.249.20"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.24.5.21"/>
    </slice>
    <from sec="1144126848" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.206.163.21"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
756[label="218.180.192.21;s;215pkt 215fpkt", shape=diamond, color=yellow];
3623[label="218.180.192.21;215pkt 215fpkt", shape=pentagon, color=darkviolet];
6511[label="218.180.192.21;214pkt 214fpkt", shape=invtriangle, color=brown];
8523[label="218.180.192.21;214pkt 214fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.180.192.21:*, *:445}[59.0698%]&lt;BR/&gt;{218.180.192.21:*, *:139}[40.9302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (29.6037%)&lt;BR/&gt; 139: (20.3963%)&lt;BR/&gt; 3573: (0.4662%)&lt;BR/&gt; 3524: (0.4662%)&lt;BR/&gt; 4999: (0.2331%)&gt;];
}
756--3623[label="1;215pkt 215fpkt"];
756--6511[label="1;214pkt 214fpkt"];
756--8523[label="1;214pkt 214fpkt"];
3623--6511[label="1;214pkt 214fpkt"];
3623--8523[label="1;214pkt 214fpkt"];
6511--8523[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="218.180.192.21"/>
      <filter dst_port="139" src_ip="218.180.192.21"/>
    </slice>
    <from sec="1144126886" usec="0"/>
    <to sec="1144126995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.164.235.21"/>
    </slice>
    <from sec="1144127600" usec="0"/>
    <to sec="1144127637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
1676[label="195.89.107.105;s;162pkt 162fpkt", shape=diamond, color=yellow];
4602[label="195.89.107.105;162pkt 162fpkt", shape=pentagon, color=darkviolet];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.107.105:*, 124.30.163.63:80}[71.1656%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9938%)&lt;BR/&gt; 3478: (0.617284%)&lt;BR/&gt; 1055: (0.617284%)&lt;BR/&gt; 0: (0.617284%)&lt;BR/&gt; 6667: (0.308642%)&gt;];
}
1676--2514[label="0.0833333;1pkt 1fpkt"];
1676--4602[label="0.993827;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_ip="124.30.163.63" dst_port="80" src_ip="195.89.107.105"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
2229[label="38.170.165.22;s;266pkt 266fpkt", shape=diamond, color=yellow];
3634[label="38.170.165.22;284pkt 284fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.170.165.22:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2229--3634[label="0.996241;265pkt 265fpkt"];
</description>
    <slice>
      <filter src_ip="38.170.165.22"/>
    </slice>
    <from sec="1144126840" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.132.171.22"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.216.165.23"/>
    </slice>
    <from sec="1144127250" usec="0"/>
    <to sec="1144127387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
1516[label="194.212.159.82;d;215pkt 215fpkt", shape=diamond, color=yellow];
3654[label="199.8.85.24;15pkt 15fpkt", shape=pentagon, color=darkviolet];
4374[label="199.8.16.84;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6530[label="199.8.85.24;15pkt 15fpkt", shape=invtriangle, color=brown];
7026[label="199.8.16.84;14pkt 14fpkt", shape=invtriangle, color=brown];
8534[label="199.8.85.24;16pkt 16fpkt", shape=invhouse, color=bisque];
8851[label="199.8.16.84;13pkt 13fpkt", shape=invhouse, color=bisque];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 194.212.159.82:0}[88.4774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1516--3654[label="0.0666667;1pkt 1fpkt"];
1516--4374[label="0.0714286;1pkt 1fpkt"];
1516--6530[label="0.0666667;1pkt 1fpkt"];
1516--7026[label="0.0714286;1pkt 1fpkt"];
1516--8534[label="0.0625;1pkt 1fpkt"];
1516--8851[label="0.0769231;1pkt 1fpkt"];
3654--6530[label="1;15pkt 15fpkt"];
3654--8534[label="1;15pkt 15fpkt"];
4374--7026[label="1;14pkt 14fpkt"];
4374--8851[label="1;13pkt 13fpkt"];
6530--8534[label="1;15pkt 15fpkt"];
7026--8851[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.159.82"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.16.98.24"/>
    </slice>
    <from sec="1144127195" usec="0"/>
    <to sec="1144127244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.17.18.25"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.168.77.25"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.24.124.25"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.18.26"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.784055,2.32502,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
2279[label="132.18.65.26;s;60pkt 60fpkt", shape=diamond, color=yellow];
6555[label="132.18.65.26;60pkt 60fpkt", shape=invtriangle, color=brown];
8552[label="132.18.65.26;59pkt 59fpkt", shape=invhouse, color=bisque];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.65.26:*, 36.81.134.32:80}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1601: (0.837989%)&lt;BR/&gt; 1600: (0.837989%)&lt;BR/&gt; 1599: (0.837989%)&lt;BR/&gt; 1598: (0.837989%)&gt;];
}
2279--2303[label="1;36pkt 36fpkt"];
2279--3296[label="0.0166667;1pkt 1fpkt"];
2279--3687[label="1;59pkt 59fpkt"];
2279--6555[label="1;60pkt 60fpkt"];
2279--8552[label="1;59pkt 59fpkt"];
6555--8552[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="36.81.134.32" dst_port="80" src_ip="132.18.65.26"/>
    </slice>
    <from sec="1144127255" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.8.185.27"/>
    </slice>
    <from sec="1144126901" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
792[label="219.73.80.150;d;1901pkt 1901fpkt", shape=diamond, color=yellow];
1124[label="132.19.98.227;s;67pkt 67fpkt", shape=diamond, color=yellow];
1466[label="132.19.196.168;s;137pkt 137fpkt", shape=diamond, color=yellow];
1944[label="132.19.53.195;s;37pkt 37fpkt", shape=diamond, color=yellow];
2283[label="132.19.153.37;s;62pkt 62fpkt", shape=diamond, color=yellow];
2291[label="132.19.196.161;s;71pkt 71fpkt", shape=diamond, color=yellow];
2639[label="132.19.192.21;s;103pkt 103fpkt", shape=diamond, color=yellow];
3136[label="132.19.53.195;s;31pkt 31fpkt", shape=hexagon, color=black];
3568[label="161.223.148.18;65pkt 65fpkt", shape=pentagon, color=darkviolet];
3622[label="132.19.192.21;102pkt 102fpkt", shape=pentagon, color=darkviolet];
3664[label="132.19.196.24;25pkt 25fpkt", shape=pentagon, color=darkviolet];
3796[label="132.19.90.35;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3816[label="132.19.153.37;63pkt 63fpkt", shape=pentagon, color=darkviolet];
3820[label="132.19.196.37;95pkt 95fpkt", shape=pentagon, color=darkviolet];
4033[label="132.19.192.57;91pkt 91fpkt", shape=pentagon, color=darkviolet];
4140[label="161.223.134.65;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4361[label="132.19.137.82;27pkt 27fpkt", shape=pentagon, color=darkviolet];
4712[label="128.231.108.116;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4795[label="132.19.90.128;178pkt 178fpkt", shape=pentagon, color=darkviolet];
5039[label="161.223.130.145;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5175[label="132.19.192.155;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5244[label="132.19.196.161;75pkt 75fpkt", shape=pentagon, color=darkviolet];
5289[label="132.19.241.164;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5340[label="132.19.144.168;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5343[label="132.19.196.168;140pkt 140fpkt", shape=pentagon, color=darkviolet];
5395[label="161.223.157.172;79pkt 79fpkt", shape=pentagon, color=darkviolet];
5926[label="132.19.192.218;37pkt 37fpkt", shape=pentagon, color=darkviolet];
6011[label="132.19.245.225;63pkt 63fpkt", shape=pentagon, color=darkviolet];
6030[label="132.19.98.227;90pkt 90fpkt", shape=pentagon, color=darkviolet];
6052[label="132.19.192.229;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6054[label="132.19.245.229;61pkt 61fpkt", shape=pentagon, color=darkviolet];
6469[label="161.223.148.18;65pkt 65fpkt", shape=invtriangle, color=brown];
6510[label="132.19.192.21;103pkt 103fpkt", shape=invtriangle, color=brown];
6621[label="132.19.90.35;50pkt 50fpkt", shape=invtriangle, color=brown];
6632[label="132.19.153.37;62pkt 62fpkt", shape=invtriangle, color=brown];
6780[label="132.19.192.57;91pkt 91fpkt", shape=invtriangle, color=brown];
6860[label="161.223.134.65;21pkt 21fpkt", shape=invtriangle, color=brown];
7020[label="132.19.137.82;26pkt 26fpkt", shape=invtriangle, color=brown];
7322[label="132.19.90.128;178pkt 178fpkt", shape=invtriangle, color=brown];
7498[label="161.223.130.145;15pkt 15fpkt", shape=invtriangle, color=brown];
7636[label="132.19.196.161;76pkt 76fpkt", shape=invtriangle, color=brown];
7673[label="132.19.241.164;37pkt 37fpkt", shape=invtriangle, color=brown];
7707[label="132.19.144.168;9pkt 9fpkt", shape=invtriangle, color=brown];
7709[label="132.19.196.168;140pkt 140fpkt", shape=invtriangle, color=brown];
7740[label="161.223.157.172;79pkt 79fpkt", shape=invtriangle, color=brown];
8115[label="132.19.192.218;36pkt 36fpkt", shape=invtriangle, color=brown];
8190[label="132.19.98.227;89pkt 89fpkt", shape=invtriangle, color=brown];
8207[label="132.19.192.229;18pkt 18fpkt", shape=invtriangle, color=brown];
8209[label="132.19.245.229;61pkt 61fpkt", shape=invtriangle, color=brown];
8592[label="132.19.90.35;50pkt 50fpkt", shape=invhouse, color=bisque];
8598[label="132.19.153.37;63pkt 63fpkt", shape=invhouse, color=bisque];
8693[label="132.19.192.57;90pkt 90fpkt", shape=invhouse, color=bisque];
8746[label="161.223.134.65;22pkt 22fpkt", shape=invhouse, color=bisque];
9044[label="132.19.90.128;178pkt 178fpkt", shape=invhouse, color=bisque];
9247[label="132.19.196.161;75pkt 75fpkt", shape=invhouse, color=bisque];
9273[label="132.19.241.164;38pkt 38fpkt", shape=invhouse, color=bisque];
9296[label="132.19.196.168;140pkt 140fpkt", shape=invhouse, color=bisque];
9315[label="161.223.157.172;78pkt 78fpkt", shape=invhouse, color=bisque];
9558[label="132.19.192.218;37pkt 37fpkt", shape=invhouse, color=bisque];
9608[label="132.19.98.227;90pkt 90fpkt", shape=invhouse, color=bisque];
9620[label="132.19.192.229;18pkt 18fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 219.73.80.150:80}[73.6121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3157%)&lt;BR/&gt; 123: (0.239521%)&lt;BR/&gt; 1863: (0.205304%)&lt;BR/&gt; 443: (0.171086%)&lt;BR/&gt; 1237: (0.102652%)&gt;];
}
792--864[label="0.046729;10pkt 10fpkt"];
792--1099[label="0.142105;27pkt 27fpkt"];
792--1115[label="0.26506;44pkt 44fpkt"];
792--1124[label="0.149254;10pkt 10fpkt"];
792--1178[label="0.693878;68pkt 68fpkt"];
792--1210[label="0.380192;119pkt 119fpkt"];
792--1358[label="0.185185;10pkt 10fpkt"];
792--1466[label="0.364964;50pkt 50fpkt"];
792--1509[label="0.00900901;1pkt 1fpkt"];
792--1758[label="0.0365854;3pkt 3fpkt"];
792--1944[label="0.0810811;3pkt 3fpkt"];
792--1973[label="0.037037;1pkt 1fpkt"];
792--2143[label="0.205128;32pkt 32fpkt"];
792--2182[label="0.0175439;2pkt 2fpkt"];
792--2283[label="0.0806452;5pkt 5fpkt"];
792--2291[label="0.746479;53pkt 53fpkt"];
792--2434[label="0.0344828;1pkt 1fpkt"];
792--2439[label="0.858586;85pkt 85fpkt"];
792--2475[label="0.698529;95pkt 95fpkt"];
792--2639[label="0.582524;60pkt 60fpkt"];
792--2730[label="0.0301205;5pkt 5fpkt"];
792--2772[label="0.0340557;11pkt 11fpkt"];
792--2831[label="0.010989;5pkt 5fpkt"];
792--2861[label="0.323529;11pkt 11fpkt"];
792--2991[label="0.0365854;3pkt 3fpkt"];
792--3006[label="0.0106383;1pkt 1fpkt"];
792--3037[label="0.138889;10pkt 10fpkt"];
792--3049[label="0.159763;27pkt 27fpkt"];
792--3058[label="0.037037;1pkt 1fpkt"];
792--3136[label="0.0967742;3pkt 3fpkt"];
792--3180[label="0.000982318;1pkt 1fpkt"];
792--3207[label="0.27044;43pkt 43fpkt"];
792--3296[label="0.0699632;133pkt 133fpkt"];
792--3568[label="0.923077;60pkt 60fpkt"];
792--3573[label="0.0660592;29pkt 29fpkt"];
792--3622[label="0.588235;60pkt 60fpkt"];
792--3664[label="0.96;24pkt 24fpkt"];
792--3702[label="0.597826;55pkt 55fpkt"];
792--3796[label="0.285714;14pkt 14fpkt"];
792--3816[label="0.0793651;5pkt 5fpkt"];
792--3820[label="0.326316;31pkt 31fpkt"];
792--3961[label="0.538462;7pkt 7fpkt"];
792--4033[label="0.428571;39pkt 39fpkt"];
792--4050[label="0.867347;85pkt 85fpkt"];
792--4125[label="0.12987;10pkt 10fpkt"];
792--4140[label="0.363636;8pkt 8fpkt"];
792--4172[label="0.09375;3pkt 3fpkt"];
792--4361[label="0.148148;4pkt 4fpkt"];
792--4373[label="0.0144404;8pkt 8fpkt"];
792--4375[label="0.000922509;1pkt 1fpkt"];
792--4416[label="0.00675676;1pkt 1fpkt"];
792--4519[label="0.261194;35pkt 35fpkt"];
792--4566[label="0.0169492;2pkt 2fpkt"];
792--4588[label="0.470588;24pkt 24fpkt"];
792--4594[label="0.0373134;5pkt 5fpkt"];
792--4598[label="0.05;1pkt 1fpkt"];
792--4614[label="0.173913;8pkt 8fpkt"];
792--4712[label="0.521739;12pkt 12fpkt"];
792--4795[label="0.533708;95pkt 95fpkt"];
792--4949[label="0.408377;156pkt 156fpkt"];
792--4988[label="0.0176991;2pkt 2fpkt"];
792--5039[label="0.733333;11pkt 11fpkt"];
792--5149[label="0.153846;8pkt 8fpkt"];
792--5175[label="0.5;17pkt 17fpkt"];
792--5244[label="0.706667;53pkt 53fpkt"];
792--5289[label="0.526316;20pkt 20fpkt"];
792--5340[label="0.1;1pkt 1fpkt"];
792--5343[label="0.371429;52pkt 52fpkt"];
792--5384[label="0.037037;1pkt 1fpkt"];
792--5395[label="0.468354;37pkt 37fpkt"];
792--5440[label="0.035982;24pkt 24fpkt"];
792--5533[label="0.588235;30pkt 30fpkt"];
792--5589[label="0.0212766;1pkt 1fpkt"];
792--5601[label="0.156863;8pkt 8fpkt"];
792--5632[label="0.0189374;36pkt 36fpkt"];
792--5670[label="0.0340909;3pkt 3fpkt"];
792--5704[label="0.012848;6pkt 6fpkt"];
792--5718[label="0.0042735;1pkt 1fpkt"];
792--5742[label="0.185185;10pkt 10fpkt"];
792--5745[label="0.25731;44pkt 44fpkt"];
792--5926[label="0.486486;18pkt 18fpkt"];
792--6011[label="0.301587;19pkt 19fpkt"];
792--6030[label="0.111111;10pkt 10fpkt"];
792--6052[label="0.526316;10pkt 10fpkt"];
792--6054[label="0.606557;37pkt 37fpkt"];
792--6280[label="0.0190476;8pkt 8fpkt"];
792--6469[label="0.923077;60pkt 60fpkt"];
792--6472[label="0.0660592;29pkt 29fpkt"];
792--6510[label="0.582524;60pkt 60fpkt"];
792--6566[label="0.604396;55pkt 55fpkt"];
792--6621[label="0.28;14pkt 14fpkt"];
792--6632[label="0.0806452;5pkt 5fpkt"];
792--6735[label="0.5;7pkt 7fpkt"];
792--6780[label="0.428571;39pkt 39fpkt"];
792--6847[label="0.12987;10pkt 10fpkt"];
792--6860[label="0.380952;8pkt 8fpkt"];
792--6879[label="0.0967742;3pkt 3fpkt"];
792--7020[label="0.153846;4pkt 4fpkt"];
792--7025[label="0.0144665;8pkt 8fpkt"];
792--7027[label="0.000923361;1pkt 1fpkt"];
792--7125[label="0.261194;35pkt 35fpkt"];
792--7175[label="0.470588;24pkt 24fpkt"];
792--7179[label="0.0373134;5pkt 5fpkt"];
792--7189[label="0.173913;8pkt 8fpkt"];
792--7322[label="0.533708;95pkt 95fpkt"];
792--7431[label="0.408377;156pkt 156fpkt"];
792--7459[label="0.0181818;2pkt 2fpkt"];
792--7498[label="0.733333;11pkt 11fpkt"];
792--7569[label="0.153846;8pkt 8fpkt"];
792--7636[label="0.697368;53pkt 53fpkt"];
792--7673[label="0.513514;19pkt 19fpkt"];
792--7707[label="0.111111;1pkt 1fpkt"];
792--7709[label="0.371429;52pkt 52fpkt"];
792--7732[label="0.0384615;1pkt 1fpkt"];
792--7740[label="0.468354;37pkt 37fpkt"];
792--7832[label="0.6;30pkt 30fpkt"];
792--7885[label="0.156863;8pkt 8fpkt"];
792--7911[label="0.0189374;36pkt 36fpkt"];
792--7938[label="0.0344828;3pkt 3fpkt"];
792--7971[label="0.00429185;1pkt 1fpkt"];
792--7989[label="0.185185;10pkt 10fpkt"];
792--7992[label="0.258824;44pkt 44fpkt"];
792--8115[label="0.5;18pkt 18fpkt"];
792--8190[label="0.11236;10pkt 10fpkt"];
792--8207[label="0.555556;10pkt 10fpkt"];
792--8209[label="0.606557;37pkt 37fpkt"];
792--8377[label="0.0190476;8pkt 8fpkt"];
792--8561[label="0.604396;55pkt 55fpkt"];
792--8592[label="0.28;14pkt 14fpkt"];
792--8598[label="0.0793651;5pkt 5fpkt"];
792--8658[label="0.538462;7pkt 7fpkt"];
792--8693[label="0.433333;39pkt 39fpkt"];
792--8746[label="0.363636;8pkt 8fpkt"];
792--8850[label="0.0144404;8pkt 8fpkt"];
792--8852[label="0.000923361;1pkt 1fpkt"];
792--8917[label="0.261194;35pkt 35fpkt"];
792--8953[label="0.0373134;5pkt 5fpkt"];
792--8959[label="0.177778;8pkt 8fpkt"];
792--9044[label="0.533708;95pkt 95fpkt"];
792--9111[label="0.409449;156pkt 156fpkt"];
792--9247[label="0.706667;53pkt 53fpkt"];
792--9273[label="0.526316;20pkt 20fpkt"];
792--9296[label="0.371429;52pkt 52fpkt"];
792--9315[label="0.474359;37pkt 37fpkt"];
792--9376[label="0.588235;30pkt 30fpkt"];
792--9407[label="0.16;8pkt 8fpkt"];
792--9422[label="0.0189374;36pkt 36fpkt"];
792--9472[label="0.258824;44pkt 44fpkt"];
792--9558[label="0.486486;18pkt 18fpkt"];
792--9608[label="0.111111;10pkt 10fpkt"];
792--9620[label="0.555556;10pkt 10fpkt"];
1124--1158[label="0.333333;16pkt 16fpkt"];
1124--1513[label="0.19403;13pkt 13fpkt"];
1124--1517[label="0.119403;8pkt 8fpkt"];
1124--1555[label="0.0149254;1pkt 1fpkt"];
1124--3296[label="0.164179;11pkt 11fpkt"];
1124--6030[label="1;67pkt 67fpkt"];
1124--8190[label="0.985075;66pkt 66fpkt"];
1124--9608[label="1;67pkt 67fpkt"];
1466--1921[label="0.635036;87pkt 87fpkt"];
1466--5343[label="1;137pkt 137fpkt"];
1466--7709[label="1;137pkt 137fpkt"];
1466--9296[label="1;137pkt 137fpkt"];
1944--2210[label="0.108108;4pkt 4fpkt"];
1944--2555[label="0.027027;1pkt 1fpkt"];
1944--3136[label="1;31pkt 31fpkt"];
1944--3296[label="0.027027;1pkt 1fpkt"];
2283--2324[label="0.016129;1pkt 1fpkt"];
2283--2368[label="0.0806452;5pkt 5fpkt"];
2283--3816[label="1;62pkt 62fpkt"];
2283--6632[label="0.983871;61pkt 61fpkt"];
2283--8598[label="1;62pkt 62fpkt"];
2291--2309[label="0.947368;18pkt 18fpkt"];
2291--5244[label="0.985915;70pkt 70fpkt"];
2291--7636[label="1;71pkt 71fpkt"];
2291--9247[label="0.985915;70pkt 70fpkt"];
2639--3296[label="0.165049;17pkt 17fpkt"];
2639--3622[label="1;102pkt 102fpkt"];
2639--6510[label="1;103pkt 103fpkt"];
3136--3296[label="0.0322581;1pkt 1fpkt"];
3568--6469[label="1;65pkt 65fpkt"];
3622--6510[label="1;102pkt 102fpkt"];
3796--6621[label="1;49pkt 49fpkt"];
3796--8592[label="1;49pkt 49fpkt"];
3816--6632[label="1;62pkt 62fpkt"];
3816--8598[label="1;63pkt 63fpkt"];
4033--6780[label="1;91pkt 91fpkt"];
4033--8693[label="1;90pkt 90fpkt"];
4140--6860[label="1;21pkt 21fpkt"];
4140--8746[label="1;22pkt 22fpkt"];
4361--7020[label="1;26pkt 26fpkt"];
4795--7322[label="1;178pkt 178fpkt"];
4795--9044[label="1;178pkt 178fpkt"];
5039--7498[label="1;15pkt 15fpkt"];
5244--7636[label="1;75pkt 75fpkt"];
5244--9247[label="1;75pkt 75fpkt"];
5289--7673[label="1;37pkt 37fpkt"];
5289--9273[label="1;38pkt 38fpkt"];
5340--7707[label="1;9pkt 9fpkt"];
5343--7709[label="1;140pkt 140fpkt"];
5343--9296[label="1;140pkt 140fpkt"];
5395--7740[label="1;79pkt 79fpkt"];
5395--9315[label="1;78pkt 78fpkt"];
5926--8115[label="1;36pkt 36fpkt"];
5926--9558[label="1;37pkt 37fpkt"];
6030--8190[label="1;89pkt 89fpkt"];
6030--9608[label="1;90pkt 90fpkt"];
6052--8207[label="1;18pkt 18fpkt"];
6052--9620[label="1;18pkt 18fpkt"];
6054--8209[label="1;61pkt 61fpkt"];
6621--8592[label="1;50pkt 50fpkt"];
6632--8598[label="1;62pkt 62fpkt"];
6780--8693[label="1;90pkt 90fpkt"];
6860--8746[label="1;21pkt 21fpkt"];
7322--9044[label="1;178pkt 178fpkt"];
7636--9247[label="1;75pkt 75fpkt"];
7673--9273[label="1;37pkt 37fpkt"];
7709--9296[label="1;140pkt 140fpkt"];
7740--9315[label="1;78pkt 78fpkt"];
8115--9558[label="1;36pkt 36fpkt"];
8190--9608[label="1;89pkt 89fpkt"];
8207--9620[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.80.150" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.173.161.28"/>
    </slice>
    <from sec="1144127631" usec="0"/>
    <to sec="1144127674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.34.29"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.238.69.29"/>
    </slice>
    <from sec="1144127092" usec="0"/>
    <to sec="1144127136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.116.142.29"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.17.77.30"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.39.176.30"/>
    </slice>
    <from sec="1144127495" usec="0"/>
    <to sec="1144127515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.162.181.30"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144126930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
1658[label="210.226.98.195;d;103pkt 103fpkt", shape=diamond, color=yellow];
3748[label="164.23.207.30;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.226.98.195:5050}[76.1468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (38.6364%)&lt;BR/&gt; 20: (3.63636%)&lt;BR/&gt; 23: (2.72727%)&lt;BR/&gt; 0: (2.72727%)&lt;BR/&gt; 21: (2.27273%)&gt;];
}
1658--3031[label="0.00970874;1pkt 1fpkt"];
1658--3748[label="0.142857;1pkt 1fpkt"];
1658--4066[label="0.126214;13pkt 13fpkt"];
1658--4122[label="0.00970874;1pkt 1fpkt"];
1658--4797[label="0.00970874;1pkt 1fpkt"];
1658--6801[label="0.126214;13pkt 13fpkt"];
1658--6845[label="0.00970874;1pkt 1fpkt"];
1658--7324[label="0.00970874;1pkt 1fpkt"];
1658--8736[label="0.00970874;1pkt 1fpkt"];
1658--9046[label="0.00970874;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.226.98.195" dst_port="5050"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
2644[label="210.150.231.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
3750[label="210.150.231.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.150.231.30:443, 132.19.106.104:50382}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50382: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
2644--3750[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.106.104" dst_port="50382" src_ip="210.150.231.30" src_port="443"/>
    </slice>
    <from sec="1144127371" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.154.0.31"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1148[label="161.223.52.31;s;190pkt 190fpkt", shape=diamond, color=yellow];
3752[label="161.223.52.31;211pkt 211fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.52.31:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4309: (0.249377%)&lt;BR/&gt; 4308: (0.249377%)&lt;BR/&gt; 4305: (0.249377%)&lt;BR/&gt; 4281: (0.249377%)&gt;];
}
1148--3296[label="0.00526316;1pkt 1fpkt"];
1148--3752[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="161.223.52.31"/>
    </slice>
    <from sec="1144126840" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.249.31"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.107.253.31"/>
    </slice>
    <from sec="1144126991" usec="0"/>
    <to sec="1144127069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.50.65.32"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
1263[label="82.182.85.32;s;1705pkt 1705fpkt", shape=diamond, color=yellow];
3764[label="82.182.85.32;1896pkt 1896fpkt", shape=pentagon, color=darkviolet];
6599[label="82.182.85.32;1896pkt 1896fpkt", shape=invtriangle, color=brown];
8578[label="82.182.85.32;1896pkt 1896fpkt", shape=invhouse, color=bisque];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.182.85.32:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 21112: (0.0811579%)&lt;BR/&gt; 64807: (0.0541052%)&lt;BR/&gt; 64525: (0.0541052%)&lt;BR/&gt; 61506: (0.0541052%)&gt;];
}
1263--3764[label="0.999413;1704pkt 1704fpkt"];
1263--6599[label="0.999413;1704pkt 1704fpkt"];
1263--8578[label="0.999413;1704pkt 1704fpkt"];
3764--6599[label="1;1896pkt 1896fpkt"];
3764--8578[label="1;1896pkt 1896fpkt"];
6599--8578[label="1;1896pkt 1896fpkt"];
</description>
    <slice>
      <filter src_ip="82.182.85.32" src_port="7000"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
2127[label="214.53.51.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
3776[label="214.53.51.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6607[label="214.53.51.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.53.51.33:3881, 147.13.228.63:6666}[50%]&lt;BR/&gt;{214.53.51.33:53032, 147.13.228.63:6669}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53032: (37.5%)&lt;BR/&gt; 6669: (37.5%)&lt;BR/&gt; 6666: (12.5%)&lt;BR/&gt; 3881: (12.5%)&gt;];
}
2127--3001[label="1;2pkt 2fpkt"];
2127--3776[label="1;1pkt 1fpkt"];
2127--6607[label="1;1pkt 1fpkt"];
3776--6607[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="214.53.51.33" src_port="53032"/>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="214.53.51.33" src_port="3881"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.156.105.33"/>
    </slice>
    <from sec="1144126828" usec="0"/>
    <to sec="1144127611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.198.86.34"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.248.27.35"/>
    </slice>
    <from sec="1144127038" usec="0"/>
    <to sec="1144127061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.112.30.35"/>
    </slice>
    <from sec="1144126848" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.82.70.36"/>
    </slice>
    <from sec="1144127574" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.106.202.36"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.106.136.37"/>
    </slice>
    <from sec="1144126894" usec="0"/>
    <to sec="1144126909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.80.154.37"/>
    </slice>
    <from sec="1144126842" usec="0"/>
    <to sec="1144127657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.226.195.37"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,502,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_456{
style=filled;
color=gray75;
2633[label="210.111.42.86;d;50pkt 50fpkt", shape=diamond, color=yellow];
3832[label="194.251.10.39;50pkt 50fpkt", shape=pentagon, color=darkviolet];
stat456[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.251.10.39:22, 210.111.42.86:*}[85.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (46%)&lt;BR/&gt; 0: (4%)&lt;BR/&gt; 64786: (1%)&lt;BR/&gt; 63776: (1%)&lt;BR/&gt; 62800: (1%)&gt;];
}
2633--3832[label="0.92;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="210.111.42.86" src_ip="194.251.10.39" src_port="22"/>
    </slice>
    <from sec="1144126865" usec="0"/>
    <to sec="1144127598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.202.18.40"/>
    </slice>
    <from sec="1144127126" usec="0"/>
    <to sec="1144127634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.92.80.40"/>
    </slice>
    <from sec="1144126952" usec="0"/>
    <to sec="1144127067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
1888[label="218.141.152.40;s;516pkt 516fpkt", shape=diamond, color=yellow];
3848[label="218.141.152.40;551pkt 551fpkt", shape=pentagon, color=darkviolet];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.141.152.40:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (7.82568%)&lt;BR/&gt; 88: (7.82568%)&lt;BR/&gt; 8888: (7.26336%)&lt;BR/&gt; 8000: (7.26336%)&lt;BR/&gt; 3128: (6.74789%)&gt;];
}
1888--3296[label="0.00581395;3pkt 3fpkt"];
1888--3848[label="1;516pkt 516fpkt"];
</description>
    <slice>
      <filter src_ip="218.141.152.40"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.73.207.41"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.106.66.42"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.72.74.42"/>
    </slice>
    <from sec="1144127219" usec="0"/>
    <to sec="1144127362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
419[label="128.28.217.251;d;121pkt 121fpkt", shape=diamond, color=yellow];
734[label="41.25.162.150;s;4pkt 4fpkt", shape=diamond, color=yellow];
1762[label="41.25.96.157;s;2pkt 2fpkt", shape=diamond, color=yellow];
1842[label="164.23.194.150;d;82pkt 82fpkt", shape=diamond, color=yellow];
1886[label="36.106.130.81;s;20pkt 20fpkt", shape=diamond, color=yellow];
2591[label="128.28.1.9;d;31pkt 31fpkt", shape=diamond, color=yellow];
2814[label="128.28.217.251;d;113pkt 113fpkt", shape=hexagon, color=black];
3880[label="41.25.163.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4325[label="33.1.22.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4445[label="37.161.28.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4553[label="34.12.242.100;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5347[label="32.16.39.169;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5623[label="32.136.167.194;61pkt 61fpkt", shape=pentagon, color=darkviolet];
5759[label="41.25.170.204;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5919[label="41.25.98.218;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6461[label="198.180.239.17;6pkt 6fpkt", shape=invtriangle, color=brown];
6675[label="41.25.163.42;2pkt 2fpkt", shape=invtriangle, color=brown];
6990[label="33.1.22.80;2pkt 2fpkt", shape=invtriangle, color=brown];
7077[label="37.161.28.90;2pkt 2fpkt", shape=invtriangle, color=brown];
7150[label="34.12.242.100;8pkt 8fpkt", shape=invtriangle, color=brown];
7904[label="32.136.167.194;61pkt 61fpkt", shape=invtriangle, color=brown];
8003[label="41.25.170.204;1pkt 1fpkt", shape=invtriangle, color=brown];
8492[label="198.180.239.17;6pkt 6fpkt", shape=invhouse, color=bisque];
9479[label="41.25.170.204;1pkt 1fpkt", shape=invhouse, color=bisque];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.28.217.251:80}[38.0503%]&lt;BR/&gt;{*:*, 164.23.194.150:*}[25.7862%]&lt;BR/&gt;{*:*, *:53}[20.1258%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4826%)&lt;BR/&gt; 53: (11.3346%)&lt;BR/&gt; 49152: (0.914077%)&lt;BR/&gt; 55467: (0.365631%)&lt;BR/&gt; 51998: (0.365631%)&gt;];
}
419--734[label="0.5;2pkt 2fpkt"];
419--1762[label="0.5;1pkt 1fpkt"];
419--1886[label="0.25;5pkt 5fpkt"];
419--2046[label="0.583333;7pkt 7fpkt"];
419--2814[label="1;113pkt 113fpkt"];
419--3296[label="0.00826446;1pkt 1fpkt"];
419--3880[label="0.5;1pkt 1fpkt"];
419--3881[label="0.0909091;1pkt 1fpkt"];
419--3904[label="0.333333;1pkt 1fpkt"];
419--4048[label="0.125;1pkt 1fpkt"];
419--4325[label="0.5;1pkt 1fpkt"];
419--4368[label="0.166667;1pkt 1fpkt"];
419--4445[label="0.5;1pkt 1fpkt"];
419--4553[label="0.142857;1pkt 1fpkt"];
419--4775[label="0.142857;1pkt 1fpkt"];
419--4847[label="0.2;1pkt 1fpkt"];
419--5098[label="0.166667;1pkt 1fpkt"];
419--5347[label="0.5;2pkt 2fpkt"];
419--5464[label="0.025641;1pkt 1fpkt"];
419--5595[label="0.0833333;1pkt 1fpkt"];
419--5623[label="0.0163934;1pkt 1fpkt"];
419--5651[label="0.0769231;1pkt 1fpkt"];
419--5682[label="0.1;1pkt 1fpkt"];
419--5759[label="0.5;1pkt 1fpkt"];
419--5919[label="0.2;1pkt 1fpkt"];
419--6461[label="0.166667;1pkt 1fpkt"];
419--6675[label="0.5;1pkt 1fpkt"];
419--6693[label="0.333333;1pkt 1fpkt"];
419--6791[label="0.125;1pkt 1fpkt"];
419--6990[label="0.5;1pkt 1fpkt"];
419--7077[label="0.5;1pkt 1fpkt"];
419--7150[label="0.25;2pkt 2fpkt"];
419--7307[label="0.142857;1pkt 1fpkt"];
419--7531[label="0.2;1pkt 1fpkt"];
419--7782[label="0.025641;1pkt 1fpkt"];
419--7904[label="0.0163934;1pkt 1fpkt"];
419--7924[label="0.0769231;1pkt 1fpkt"];
419--8492[label="0.166667;1pkt 1fpkt"];
419--9034[label="0.142857;1pkt 1fpkt"];
419--9178[label="0.2;1pkt 1fpkt"];
419--9404[label="0.0833333;1pkt 1fpkt"];
734--2814[label="0.5;2pkt 2fpkt"];
734--5098[label="0.75;3pkt 3fpkt"];
1762--2814[label="0.5;1pkt 1fpkt"];
1762--3296[label="0.5;1pkt 1fpkt"];
1762--5194[label="0.5;1pkt 1fpkt"];
1842--1886[label="0.75;15pkt 15fpkt"];
1842--2349[label="0.125;6pkt 6fpkt"];
1842--3287[label="0.0121951;1pkt 1fpkt"];
1842--3290[label="0.0365854;3pkt 3fpkt"];
1842--3295[label="0.0243902;2pkt 2fpkt"];
1842--3296[label="0.0853659;7pkt 7fpkt"];
1842--3302[label="0.0365854;3pkt 3fpkt"];
1842--3604[label="0.0133333;1pkt 1fpkt"];
1842--4751[label="0.142857;4pkt 4fpkt"];
1842--5950[label="0.0151515;1pkt 1fpkt"];
1842--6109[label="0.025641;1pkt 1fpkt"];
1842--7288[label="0.148148;4pkt 4fpkt"];
1842--8132[label="0.0153846;1pkt 1fpkt"];
1842--9021[label="0.148148;4pkt 4fpkt"];
1842--9571[label="0.0151515;1pkt 1fpkt"];
1886--2814[label="0.25;5pkt 5fpkt"];
1886--3296[label="0.1;2pkt 2fpkt"];
2591--3296[label="0.0322581;1pkt 1fpkt"];
2591--3766[label="0.0909091;1pkt 1fpkt"];
2591--5075[label="0.285714;2pkt 2fpkt"];
2591--5651[label="0.0769231;1pkt 1fpkt"];
2591--6600[label="0.0909091;1pkt 1fpkt"];
2591--7522[label="0.285714;2pkt 2fpkt"];
2591--7924[label="0.0769231;1pkt 1fpkt"];
2591--9172[label="0.285714;2pkt 2fpkt"];
2591--9432[label="0.0833333;1pkt 1fpkt"];
2814--3880[label="0.5;1pkt 1fpkt"];
2814--3881[label="0.0909091;1pkt 1fpkt"];
2814--3904[label="0.333333;1pkt 1fpkt"];
2814--4048[label="0.125;1pkt 1fpkt"];
2814--4325[label="0.5;1pkt 1fpkt"];
2814--4368[label="0.166667;1pkt 1fpkt"];
2814--4445[label="0.5;1pkt 1fpkt"];
2814--4553[label="0.142857;1pkt 1fpkt"];
2814--4775[label="0.142857;1pkt 1fpkt"];
2814--4847[label="0.2;1pkt 1fpkt"];
2814--5098[label="0.166667;1pkt 1fpkt"];
2814--5347[label="0.5;2pkt 2fpkt"];
2814--5464[label="0.025641;1pkt 1fpkt"];
2814--5595[label="0.0833333;1pkt 1fpkt"];
2814--5623[label="0.0163934;1pkt 1fpkt"];
2814--5651[label="0.0769231;1pkt 1fpkt"];
2814--5759[label="0.5;1pkt 1fpkt"];
2814--5919[label="0.2;1pkt 1fpkt"];
2814--6461[label="0.166667;1pkt 1fpkt"];
2814--6675[label="0.5;1pkt 1fpkt"];
2814--6693[label="0.333333;1pkt 1fpkt"];
2814--6791[label="0.125;1pkt 1fpkt"];
2814--6990[label="0.5;1pkt 1fpkt"];
2814--7077[label="0.5;1pkt 1fpkt"];
2814--7150[label="0.25;2pkt 2fpkt"];
2814--7307[label="0.142857;1pkt 1fpkt"];
2814--7782[label="0.025641;1pkt 1fpkt"];
2814--7904[label="0.0163934;1pkt 1fpkt"];
2814--7924[label="0.0769231;1pkt 1fpkt"];
2814--8492[label="0.166667;1pkt 1fpkt"];
2814--9034[label="0.142857;1pkt 1fpkt"];
2814--9404[label="0.0833333;1pkt 1fpkt"];
3880--6675[label="1;2pkt 2fpkt"];
4325--6990[label="1;2pkt 2fpkt"];
4445--7077[label="1;2pkt 2fpkt"];
4445--8887[label="1;1pkt 1fpkt"];
4553--7150[label="1;7pkt 7fpkt"];
5623--7904[label="1;61pkt 61fpkt"];
5759--8003[label="1;1pkt 1fpkt"];
5759--9479[label="1;1pkt 1fpkt"];
6461--8492[label="1;6pkt 6fpkt"];
7077--8887[label="1;1pkt 1fpkt"];
8003--9479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.194.150"/>
      <filter dst_port="53"/>
      <filter dst_ip="128.28.217.251" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
2060[label="39.34.9.68;d;28pkt 28fpkt", shape=diamond, color=yellow];
2063[label="132.19.205.42;s;28pkt 28fpkt", shape=diamond, color=yellow];
3083[label="132.19.205.42;s;28pkt 28fpkt", shape=hexagon, color=black];
3882[label="132.19.205.42;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6677[label="132.19.205.42;29pkt 29fpkt", shape=invtriangle, color=brown];
8625[label="132.19.205.42;28pkt 28fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.205.42:*, 39.34.9.68:80}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7041%)&lt;BR/&gt; 49305: (1.77515%)&lt;BR/&gt; 49304: (1.77515%)&lt;BR/&gt; 49303: (1.77515%)&lt;BR/&gt; 49302: (1.77515%)&gt;];
}
2060--2063[label="1;28pkt 28fpkt"];
2060--3083[label="1;28pkt 28fpkt"];
2060--3882[label="1;28pkt 28fpkt"];
2060--6677[label="1;28pkt 28fpkt"];
2060--8625[label="1;28pkt 28fpkt"];
2063--3083[label="1;28pkt 28fpkt"];
2063--3882[label="1;28pkt 28fpkt"];
2063--6677[label="1;28pkt 28fpkt"];
2063--8625[label="1;28pkt 28fpkt"];
3083--3882[label="1;28pkt 28fpkt"];
3083--6677[label="1;28pkt 28fpkt"];
3083--8625[label="1;28pkt 28fpkt"];
3882--6677[label="1;28pkt 28fpkt"];
3882--8625[label="1;28pkt 28fpkt"];
6677--8625[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="39.34.9.68" dst_port="80" src_ip="132.19.205.42"/>
    </slice>
    <from sec="1144127252" usec="0"/>
    <to sec="1144127617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.14.245.42"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.154.32.44"/>
    </slice>
    <from sec="1144126921" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.37.49.44"/>
    </slice>
    <from sec="1144126947" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
175[label="147.13.139.234;d;5pkt 5fpkt", shape=diamond, color=yellow];
176[label="67.50.227.44;s;4pkt 4fpkt", shape=diamond, color=yellow];
3900[label="67.50.227.44;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6691[label="67.50.227.44;3pkt 3fpkt", shape=invtriangle, color=brown];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.229.32.159:80, 147.13.139.234:4727}[20%]&lt;BR/&gt;{67.50.227.44:20, 147.13.139.234:39462}[20%]&lt;BR/&gt;{67.50.227.44:20, 147.13.139.234:48227}[20%]&lt;BR/&gt;{67.50.227.44:21, 147.13.139.234:4723}[20%]&lt;BR/&gt;{67.50.227.44:21, 147.13.139.234:4728}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (26.6667%)&lt;BR/&gt; 20: (20%)&lt;BR/&gt; 39462: (13.3333%)&lt;BR/&gt; 4728: (13.3333%)&lt;BR/&gt; 4723: (13.3333%)&gt;];
}
175--176[label="1;4pkt 4fpkt"];
175--3900[label="1;3pkt 3fpkt"];
175--6691[label="1;3pkt 3fpkt"];
176--3900[label="1;3pkt 3fpkt"];
176--6691[label="1;3pkt 3fpkt"];
3900--6691[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.139.234" dst_port="4728" src_ip="67.50.227.44" src_port="21"/>
      <filter dst_ip="147.13.139.234" dst_port="4723" src_ip="67.50.227.44" src_port="21"/>
      <filter dst_ip="147.13.139.234" dst_port="48227" src_ip="67.50.227.44" src_port="20"/>
      <filter dst_ip="147.13.139.234" dst_port="39462" src_ip="67.50.227.44" src_port="20"/>
      <filter dst_ip="147.13.139.234" dst_port="4727" src_ip="195.229.32.159" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
1732[label="128.202.172.45;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.172.45:*, 41.148.12.245:80}[44.4444%]&lt;BR/&gt;{128.202.172.45:*, 53.174.69.136:80}[33.3333%]&lt;BR/&gt;{128.202.172.45:*, 41.148.12.192:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34269: (5.55556%)&lt;BR/&gt; 34265: (5.55556%)&lt;BR/&gt; 34261: (5.55556%)&lt;BR/&gt; 34260: (5.55556%)&gt;];
}
1732--3906[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="41.148.12.245" dst_port="80" src_ip="128.202.172.45"/>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="128.202.172.45"/>
      <filter dst_ip="41.148.12.192" dst_port="80" src_ip="128.202.172.45"/>
    </slice>
    <from sec="1144126957" usec="0"/>
    <to sec="1144127446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
541[label="195.196.231.46;s;2280pkt 2280fpkt", shape=diamond, color=yellow];
3914[label="195.196.231.46;2804pkt 2804fpkt", shape=pentagon, color=darkviolet];
6701[label="195.196.231.46;2805pkt 2805fpkt", shape=invtriangle, color=brown];
8639[label="195.196.231.46;2804pkt 2804fpkt", shape=invhouse, color=bisque];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.196.231.46:1037, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
541--3914[label="0.999561;2279pkt 2279fpkt"];
541--6701[label="1;2280pkt 2280fpkt"];
541--8639[label="0.999561;2279pkt 2279fpkt"];
3914--6701[label="1;2804pkt 2804fpkt"];
3914--8639[label="1;2804pkt 2804fpkt"];
6701--8639[label="1;2804pkt 2804fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="195.196.231.46" src_port="1037"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.172.62.48"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
1370[label="195.89.117.163;d;1187pkt 1187fpkt", shape=diamond, color=yellow];
3935[label="208.202.185.48;202pkt 202fpkt", shape=pentagon, color=darkviolet];
4298[label="214.219.138.77;139pkt 139fpkt", shape=pentagon, color=darkviolet];
5466[label="208.202.185.179;141pkt 141fpkt", shape=pentagon, color=darkviolet];
5855[label="209.13.204.212;145pkt 145fpkt", shape=pentagon, color=darkviolet];
6714[label="208.202.185.48;202pkt 202fpkt", shape=invtriangle, color=brown];
7784[label="208.202.185.179;140pkt 140fpkt", shape=invtriangle, color=brown];
8063[label="209.13.204.212;144pkt 144fpkt", shape=invtriangle, color=brown];
8647[label="208.202.185.48;203pkt 203fpkt", shape=invhouse, color=bisque];
9341[label="208.202.185.179;140pkt 140fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.89.117.163:1111}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1111: (50.0189%)&lt;BR/&gt; 1209: (0.0945895%)&lt;BR/&gt; 1207: (0.0945895%)&lt;BR/&gt; 1125: (0.0945895%)&lt;BR/&gt; 1123: (0.0945895%)&gt;];
}
1370--3935[label="0.930693;188pkt 188fpkt"];
1370--4298[label="0.899281;125pkt 125fpkt"];
1370--5466[label="0.893617;126pkt 126fpkt"];
1370--5855[label="0.903448;131pkt 131fpkt"];
1370--6714[label="0.930693;188pkt 188fpkt"];
1370--7784[label="0.892857;125pkt 125fpkt"];
1370--8063[label="0.902778;130pkt 130fpkt"];
1370--8647[label="0.931034;189pkt 189fpkt"];
1370--9341[label="0.892857;125pkt 125fpkt"];
3935--6714[label="1;202pkt 202fpkt"];
3935--8647[label="1;202pkt 202fpkt"];
5466--7784[label="1;140pkt 140fpkt"];
5466--9341[label="1;140pkt 140fpkt"];
5855--8063[label="1;144pkt 144fpkt"];
6714--8647[label="1;202pkt 202fpkt"];
7784--9341[label="1;140pkt 140fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.117.163" dst_port="1111"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.150.49"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.101.44.50"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
1315[label="214.51.52.51;s;632pkt 632fpkt", shape=diamond, color=yellow];
3963[label="214.51.52.51;659pkt 659fpkt", shape=pentagon, color=darkviolet];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.51.52.51:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 59927: (0.154919%)&lt;BR/&gt; 52257: (0.154919%)&lt;BR/&gt; 44574: (0.154919%)&lt;BR/&gt; 43614: (0.154919%)&gt;];
}
1315--2290[label="0.00909091;1pkt 1fpkt"];
1315--3963[label="1;632pkt 632fpkt"];
</description>
    <slice>
      <filter src_ip="214.51.52.51" src_port="7000"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.69.182.51"/>
    </slice>
    <from sec="1144127445" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.136.167.52"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.3.48.53"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.241.180.53"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.75.72.54"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.104.54"/>
    </slice>
    <from sec="1144126828" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.189.172.54"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
1028[label="214.197.9.55;s;3pkt 3fpkt", shape=diamond, color=yellow];
4004[label="214.197.9.55;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6765[label="214.197.9.55;3pkt 3fpkt", shape=invtriangle, color=brown];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.197.9.55:1572, 147.13.228.63:6669}[33.3333%]&lt;BR/&gt;{214.197.9.55:1677, 147.13.228.63:6666}[33.3333%]&lt;BR/&gt;{214.197.9.55:1777, 147.13.228.63:6669}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6669: (33.3333%)&lt;BR/&gt; 6666: (16.6667%)&lt;BR/&gt; 1777: (16.6667%)&lt;BR/&gt; 1677: (16.6667%)&lt;BR/&gt; 1572: (16.6667%)&gt;];
}
1028--3001[label="1;3pkt 3fpkt"];
1028--4004[label="1;3pkt 3fpkt"];
1028--6765[label="1;3pkt 3fpkt"];
1028--8682[label="1;2pkt 2fpkt"];
4004--6765[label="1;3pkt 3fpkt"];
4004--8682[label="1;2pkt 2fpkt"];
6765--8682[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="214.197.9.55" src_port="1777"/>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="214.197.9.55" src_port="1677"/>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="214.197.9.55" src_port="1572"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.201.12.55"/>
    </slice>
    <from sec="1144127061" usec="0"/>
    <to sec="1144127121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
212[label="83.181.119.55;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.119.55:554, 147.13.228.63:1080}[50%]&lt;BR/&gt;{83.181.119.55:6666, 147.13.228.63:6666}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6666: (50%)&lt;BR/&gt; 1080: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
212--802[label="1;2pkt 2fpkt"];
212--3001[label="1;2pkt 2fpkt"];
212--4009[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="83.181.119.55" src_port="6666"/>
      <filter dst_ip="147.13.228.63" dst_port="1080" src_ip="83.181.119.55" src_port="554"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.203.172.55"/>
    </slice>
    <from sec="1144127587" usec="0"/>
    <to sec="1144127627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.198.232.55"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.68.50.56"/>
    </slice>
    <from sec="1144126845" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.169.72.56"/>
    </slice>
    <from sec="1144127118" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.156.144.56"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
449[label="161.223.82.57;s;6pkt 6fpkt", shape=diamond, color=yellow];
4028[label="161.223.82.57;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6777[label="161.223.82.57;5pkt 5fpkt", shape=invtriangle, color=brown];
8692[label="161.223.82.57;5pkt 5fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.82.57:*, 53.174.69.136:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37803: (9.09091%)&lt;BR/&gt; 37419: (9.09091%)&lt;BR/&gt; 37418: (9.09091%)&lt;BR/&gt; 37416: (9.09091%)&gt;];
}
449--1025[label="1;6pkt 6fpkt"];
449--4028[label="1;6pkt 6fpkt"];
449--6777[label="1;5pkt 5fpkt"];
449--8692[label="1;5pkt 5fpkt"];
4028--6777[label="1;5pkt 5fpkt"];
4028--8692[label="1;5pkt 5fpkt"];
6777--8692[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="161.223.82.57"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.92.233.57"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
1780[label="38.50.77.58;s;5pkt 5fpkt", shape=diamond, color=yellow];
4041[label="38.50.77.58;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6787[label="38.50.77.58;7pkt 7fpkt", shape=invtriangle, color=brown];
8698[label="38.50.77.58;6pkt 6fpkt", shape=invhouse, color=bisque];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.50.77.58:80, 132.19.196.171:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3193: (8%)&lt;BR/&gt; 3192: (8%)&lt;BR/&gt; 3186: (8%)&lt;BR/&gt; 3052: (8%)&gt;];
}
1780--2247[label="1;5pkt 5fpkt"];
1780--4041[label="1;5pkt 5fpkt"];
1780--6787[label="1;5pkt 5fpkt"];
1780--8698[label="0.8;4pkt 4fpkt"];
4041--6787[label="1;7pkt 7fpkt"];
4041--8698[label="1;6pkt 6fpkt"];
6787--8698[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.196.171" src_ip="38.50.77.58" src_port="80"/>
    </slice>
    <from sec="1144127173" usec="0"/>
    <to sec="1144127585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.171.216.58"/>
    </slice>
    <from sec="1144126942" usec="0"/>
    <to sec="1144126961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
888[label="128.28.83.18;d;979pkt 979fpkt", shape=diamond, color=yellow];
2484[label="196.204.172.30;s;2pkt 2fpkt", shape=diamond, color=yellow];
3592[label="33.128.218.19;12pkt 12fpkt", shape=pentagon, color=darkviolet];
3616[label="152.144.107.21;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3744[label="196.204.172.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3835[label="49.158.153.39;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4054[label="36.101.235.58;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4083[label="49.159.15.61;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4304[label="99.14.235.77;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4543[label="221.125.36.100;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5252[label="50.223.85.162;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5590[label="37.223.132.192;53pkt 53fpkt", shape=pentagon, color=darkviolet];
5717[label="39.22.67.201;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5968[label="210.129.62.222;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6190[label="55.168.8.244;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6486[label="33.128.218.19;13pkt 13fpkt", shape=invtriangle, color=brown];
6505[label="152.144.107.21;16pkt 16fpkt", shape=invtriangle, color=brown];
6587[label="196.204.172.30;1pkt 1fpkt", shape=invtriangle, color=brown];
6646[label="49.158.153.39;8pkt 8fpkt", shape=invtriangle, color=brown];
6816[label="49.159.15.61;3pkt 3fpkt", shape=invtriangle, color=brown];
6974[label="99.14.235.77;6pkt 6fpkt", shape=invtriangle, color=brown];
7643[label="50.223.85.162;28pkt 28fpkt", shape=invtriangle, color=brown];
7877[label="37.223.132.192;52pkt 52fpkt", shape=invtriangle, color=brown];
8144[label="210.129.62.222;8pkt 8fpkt", shape=invtriangle, color=brown];
8309[label="55.168.8.244;12pkt 12fpkt", shape=invtriangle, color=brown];
8506[label="33.128.218.19;12pkt 12fpkt", shape=invhouse, color=bisque];
8522[label="152.144.107.21;16pkt 16fpkt", shape=invhouse, color=bisque];
8571[label="196.204.172.30;2pkt 2fpkt", shape=invhouse, color=bisque];
8608[label="49.158.153.39;8pkt 8fpkt", shape=invhouse, color=bisque];
8821[label="99.14.235.77;5pkt 5fpkt", shape=invhouse, color=bisque];
9402[label="37.223.132.192;53pkt 53fpkt", shape=invhouse, color=bisque];
9577[label="210.129.62.222;8pkt 8fpkt", shape=invhouse, color=bisque];
9692[label="55.168.8.244;12pkt 12fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.28.83.18:80}[85.2395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4792%)&lt;BR/&gt; 0: (0.277778%)&lt;BR/&gt; 1747: (0.243056%)&lt;BR/&gt; 1745: (0.208333%)&lt;BR/&gt; 56337: (0.173611%)&gt;];
}
888--989[label="0.0465116;4pkt 4fpkt"];
888--1046[label="1;48pkt 48fpkt"];
888--1520[label="0.0645161;2pkt 2fpkt"];
888--2370[label="0.025641;1pkt 1fpkt"];
888--2484[label="1;2pkt 2fpkt"];
888--3098[label="0.0740741;2pkt 2fpkt"];
888--3288[label="0.0122574;12pkt 12fpkt"];
888--3292[label="0.0214505;21pkt 21fpkt"];
888--3296[label="0.00306435;3pkt 3fpkt"];
888--3303[label="0.0214505;21pkt 21fpkt"];
888--3322[label="0.454545;5pkt 5fpkt"];
888--3372[label="0.0769231;1pkt 1fpkt"];
888--3592[label="0.833333;10pkt 10fpkt"];
888--3616[label="0.941176;16pkt 16fpkt"];
888--3744[label="1;1pkt 1fpkt"];
888--3835[label="1;8pkt 8fpkt"];
888--4054[label="0.638889;23pkt 23fpkt"];
888--4083[label="1;3pkt 3fpkt"];
888--4186[label="0.111111;1pkt 1fpkt"];
888--4304[label="0.6;3pkt 3fpkt"];
888--4376[label="1;10pkt 10fpkt"];
888--4543[label="1;3pkt 3fpkt"];
888--4607[label="0.0769231;1pkt 1fpkt"];
888--4646[label="0.0430108;4pkt 4fpkt"];
888--4939[label="0.00961538;1pkt 1fpkt"];
888--5252[label="0.724138;21pkt 21fpkt"];
888--5464[label="0.025641;1pkt 1fpkt"];
888--5590[label="0.830189;44pkt 44fpkt"];
888--5717[label="1;9pkt 9fpkt"];
888--5968[label="1;8pkt 8fpkt"];
888--6190[label="0.25;3pkt 3fpkt"];
888--6299[label="0.454545;5pkt 5fpkt"];
888--6335[label="0.0769231;1pkt 1fpkt"];
888--6486[label="0.846154;11pkt 11fpkt"];
888--6505[label="0.9375;15pkt 15fpkt"];
888--6587[label="1;1pkt 1fpkt"];
888--6646[label="1;8pkt 8fpkt"];
888--6816[label="1;3pkt 3fpkt"];
888--6974[label="0.666667;4pkt 4fpkt"];
888--7028[label="1;10pkt 10fpkt"];
888--7184[label="0.0769231;1pkt 1fpkt"];
888--7210[label="0.0434783;4pkt 4fpkt"];
888--7425[label="0.00952381;1pkt 1fpkt"];
888--7643[label="0.714286;20pkt 20fpkt"];
888--7782[label="0.025641;1pkt 1fpkt"];
888--7877[label="0.826923;43pkt 43fpkt"];
888--8144[label="1;8pkt 8fpkt"];
888--8309[label="0.25;3pkt 3fpkt"];
888--8391[label="0.454545;5pkt 5fpkt"];
888--8414[label="0.0769231;1pkt 1fpkt"];
888--8506[label="0.833333;10pkt 10fpkt"];
888--8522[label="0.9375;15pkt 15fpkt"];
888--8571[label="1;2pkt 2fpkt"];
888--8608[label="1;8pkt 8fpkt"];
888--8821[label="0.6;3pkt 3fpkt"];
888--8971[label="0.0430108;4pkt 4fpkt"];
888--9107[label="0.00961538;1pkt 1fpkt"];
888--9402[label="0.830189;44pkt 44fpkt"];
888--9577[label="1;8pkt 8fpkt"];
888--9692[label="0.25;3pkt 3fpkt"];
2484--3744[label="1;1pkt 1fpkt"];
2484--6587[label="1;1pkt 1fpkt"];
2484--8571[label="1;2pkt 2fpkt"];
3592--6486[label="1;12pkt 12fpkt"];
3592--8506[label="1;12pkt 12fpkt"];
3616--6505[label="1;16pkt 16fpkt"];
3616--8522[label="1;16pkt 16fpkt"];
3744--6587[label="1;1pkt 1fpkt"];
3744--8571[label="1;1pkt 1fpkt"];
3835--6646[label="1;8pkt 8fpkt"];
3835--8608[label="1;8pkt 8fpkt"];
4083--6816[label="1;3pkt 3fpkt"];
4304--6974[label="1;5pkt 5fpkt"];
4304--8821[label="1;5pkt 5fpkt"];
5252--7643[label="1;28pkt 28fpkt"];
5590--7877[label="1;52pkt 52fpkt"];
5590--9402[label="1;53pkt 53fpkt"];
5968--8144[label="1;8pkt 8fpkt"];
5968--9577[label="1;8pkt 8fpkt"];
6190--8309[label="1;12pkt 12fpkt"];
6190--9692[label="1;12pkt 12fpkt"];
6486--8506[label="1;12pkt 12fpkt"];
6505--8522[label="1;16pkt 16fpkt"];
6587--8571[label="1;1pkt 1fpkt"];
6646--8608[label="1;8pkt 8fpkt"];
6974--8821[label="1;5pkt 5fpkt"];
7877--9402[label="1;52pkt 52fpkt"];
8144--9577[label="1;8pkt 8fpkt"];
8309--9692[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.18" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
592[label="147.13.10.23;d;18pkt 18fpkt", shape=diamond, color=yellow];
728[label="36.172.62.53;s;2pkt 2fpkt", shape=diamond, color=yellow];
809[label="194.212.152.241;d;53pkt 53fpkt", shape=diamond, color=yellow];
1739[label="36.172.62.50;s;2pkt 2fpkt", shape=diamond, color=yellow];
2278[label="36.172.62.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
2817[label="36.106.151.194;s;119pkt 119fpkt", shape=hexagon, color=black];
2841[label="36.172.62.53;s;2pkt 2fpkt", shape=hexagon, color=black];
3947[label="36.172.62.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3965[label="36.172.62.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3976[label="36.172.62.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
3992[label="36.172.62.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4007[label="36.172.62.55;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4058[label="36.172.62.59;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4085[label="36.172.62.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4095[label="36.172.62.62;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6031[label="210.226.98.227;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6723[label="36.172.62.50;1pkt 1fpkt", shape=invtriangle, color=brown];
6738[label="36.172.62.51;2pkt 2fpkt", shape=invtriangle, color=brown];
6744[label="36.172.62.52;2pkt 2fpkt", shape=invtriangle, color=brown];
6757[label="36.172.62.54;2pkt 2fpkt", shape=invtriangle, color=brown];
6767[label="36.172.62.55;1pkt 1fpkt", shape=invtriangle, color=brown];
6826[label="36.172.62.62;4pkt 4fpkt", shape=invtriangle, color=brown];
8191[label="210.226.98.227;19pkt 19fpkt", shape=invtriangle, color=brown];
8652[label="36.172.62.50;1pkt 1fpkt", shape=invhouse, color=bisque];
8661[label="36.172.62.51;2pkt 2fpkt", shape=invhouse, color=bisque];
8665[label="36.172.62.52;2pkt 2fpkt", shape=invhouse, color=bisque];
8676[label="36.172.62.54;2pkt 2fpkt", shape=invhouse, color=bisque];
8684[label="36.172.62.55;2pkt 2fpkt", shape=invhouse, color=bisque];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.151.194:80, *:*}[45.3271%]&lt;BR/&gt;{*:*, 194.212.152.241:*}[24.7664%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.2754%)&lt;BR/&gt; 0: (23.913%)&lt;BR/&gt; 5050: (7.42754%)&lt;BR/&gt; 443: (4.34783%)&lt;BR/&gt; 23932: (1.08696%)&gt;];
}
592--728[label="0.5;1pkt 1fpkt"];
592--1739[label="0.5;1pkt 1fpkt"];
592--2278[label="1;1pkt 1fpkt"];
592--2613[label="0.25;1pkt 1fpkt"];
592--2841[label="0.5;1pkt 1fpkt"];
592--3947[label="0.5;1pkt 1fpkt"];
592--3965[label="0.5;1pkt 1fpkt"];
592--3976[label="0.5;1pkt 1fpkt"];
592--3992[label="0.5;1pkt 1fpkt"];
592--4007[label="1;1pkt 1fpkt"];
592--4058[label="0.25;1pkt 1fpkt"];
592--4085[label="1;1pkt 1fpkt"];
592--4095[label="0.2;1pkt 1fpkt"];
592--6031[label="0.0555556;1pkt 1fpkt"];
592--6723[label="1;1pkt 1fpkt"];
592--6738[label="0.5;1pkt 1fpkt"];
592--6744[label="0.5;1pkt 1fpkt"];
592--6757[label="0.5;1pkt 1fpkt"];
592--6767[label="1;1pkt 1fpkt"];
592--6826[label="0.25;1pkt 1fpkt"];
592--8191[label="0.0555556;1pkt 1fpkt"];
592--8652[label="1;1pkt 1fpkt"];
592--8661[label="0.5;1pkt 1fpkt"];
592--8665[label="0.5;1pkt 1fpkt"];
592--8676[label="0.5;1pkt 1fpkt"];
592--8684[label="0.5;1pkt 1fpkt"];
728--809[label="0.5;1pkt 1fpkt"];
728--2841[label="1;2pkt 2fpkt"];
809--1276[label="0.0188679;1pkt 1fpkt"];
809--1391[label="0.0188679;1pkt 1fpkt"];
809--1739[label="0.5;1pkt 1fpkt"];
809--2071[label="1;1pkt 1fpkt"];
809--2613[label="0.25;1pkt 1fpkt"];
809--2817[label="0.0566038;3pkt 3fpkt"];
809--2841[label="0.5;1pkt 1fpkt"];
809--3051[label="0.0188679;1pkt 1fpkt"];
809--3288[label="0.0566038;3pkt 3fpkt"];
809--3292[label="0.0566038;3pkt 3fpkt"];
809--3303[label="0.0566038;3pkt 3fpkt"];
809--3575[label="0.375;6pkt 6fpkt"];
809--3947[label="0.5;1pkt 1fpkt"];
809--3976[label="0.5;1pkt 1fpkt"];
809--4095[label="0.2;1pkt 1fpkt"];
809--5144[label="0.0188679;1pkt 1fpkt"];
809--5609[label="0.0188679;1pkt 1fpkt"];
809--5868[label="1;1pkt 1fpkt"];
809--6473[label="0.411765;7pkt 7fpkt"];
809--6744[label="0.5;1pkt 1fpkt"];
809--7564[label="0.0188679;1pkt 1fpkt"];
809--8074[label="1;1pkt 1fpkt"];
809--8497[label="0.375;6pkt 6fpkt"];
809--8665[label="0.5;1pkt 1fpkt"];
809--8684[label="0.5;1pkt 1fpkt"];
809--9198[label="0.0188679;1pkt 1fpkt"];
809--9530[label="1;1pkt 1fpkt"];
1739--3947[label="1;2pkt 2fpkt"];
1739--6723[label="1;1pkt 1fpkt"];
1739--8652[label="1;1pkt 1fpkt"];
2817--2853[label="0.142857;17pkt 17fpkt"];
2817--3288[label="0.109244;13pkt 13fpkt"];
2817--3292[label="0.109244;13pkt 13fpkt"];
2817--3303[label="0.109244;13pkt 13fpkt"];
3947--6723[label="1;1pkt 1fpkt"];
3947--8652[label="1;1pkt 1fpkt"];
3965--6738[label="1;2pkt 2fpkt"];
3965--8661[label="1;2pkt 2fpkt"];
3976--6744[label="1;2pkt 2fpkt"];
3976--8665[label="1;2pkt 2fpkt"];
3992--6757[label="1;2pkt 2fpkt"];
3992--8676[label="1;2pkt 2fpkt"];
4007--6767[label="1;1pkt 1fpkt"];
4007--8684[label="1;1pkt 1fpkt"];
4095--6826[label="1;4pkt 4fpkt"];
6031--8191[label="1;19pkt 19fpkt"];
6723--8652[label="1;1pkt 1fpkt"];
6738--8661[label="1;2pkt 2fpkt"];
6744--8665[label="1;2pkt 2fpkt"];
6757--8676[label="1;2pkt 2fpkt"];
6767--8684[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.152.241"/>
      <filter src_ip="36.106.151.194" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.78.98.59"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.14.133.59"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
2314[label="196.16.150.59;s;3pkt 3fpkt", shape=diamond, color=yellow];
4064[label="196.16.150.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6800[label="196.16.150.59;1pkt 1fpkt", shape=invtriangle, color=brown];
8706[label="196.16.150.59;1pkt 1fpkt", shape=invhouse, color=bisque];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.16.150.59:7470, 195.89.106.147:1142}[33.3333%]&lt;BR/&gt;{196.16.150.59:7470, 195.89.106.147:1144}[33.3333%]&lt;BR/&gt;{196.16.150.59:7470, 195.89.106.147:1145}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7470: (50%)&lt;BR/&gt; 1145: (33.3333%)&lt;BR/&gt; 1144: (8.33333%)&lt;BR/&gt; 1142: (8.33333%)&gt;];
}
2314--4064[label="1;1pkt 1fpkt"];
2314--6800[label="1;1pkt 1fpkt"];
2314--8706[label="1;1pkt 1fpkt"];
4064--6800[label="1;1pkt 1fpkt"];
4064--8706[label="1;1pkt 1fpkt"];
6800--8706[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.106.147" dst_port="1145" src_ip="196.16.150.59" src_port="7470"/>
      <filter dst_ip="195.89.106.147" dst_port="1144" src_ip="196.16.150.59" src_port="7470"/>
      <filter dst_ip="195.89.106.147" dst_port="1142" src_ip="196.16.150.59" src_port="7470"/>
    </slice>
    <from sec="1144127404" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.84.173.59"/>
    </slice>
    <from sec="1144127014" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.86.51.60"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.197.60.60"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.87.212.60"/>
    </slice>
    <from sec="1144127437" usec="0"/>
    <to sec="1144127495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.21.97.61"/>
    </slice>
    <from sec="1144127452" usec="0"/>
    <to sec="1144127522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.101.44.62"/>
    </slice>
    <from sec="1144126870" usec="0"/>
    <to sec="1144127047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.232.69.62"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.175.116.62"/>
    </slice>
    <from sec="1144127092" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.136.57.63"/>
    </slice>
    <from sec="1144126823" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
1459[label="214.52.119.63;s;2pkt 2fpkt", shape=diamond, color=yellow];
4110[label="214.52.119.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6837[label="214.52.119.63;1pkt 1fpkt", shape=invtriangle, color=brown];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.52.119.63:6669, 147.13.228.63:6669}[50%]&lt;BR/&gt;{214.52.119.63:6670, 147.13.228.63:6666}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6670: (37.5%)&lt;BR/&gt; 6666: (37.5%)&lt;BR/&gt; 6669: (25%)&gt;];
}
1459--3001[label="1;2pkt 2fpkt"];
1459--4110[label="1;1pkt 1fpkt"];
1459--6837[label="1;1pkt 1fpkt"];
1459--8730[label="1;1pkt 1fpkt"];
4110--6837[label="1;1pkt 1fpkt"];
4110--8730[label="1;1pkt 1fpkt"];
6837--8730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="214.52.119.63" src_port="6670"/>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="214.52.119.63" src_port="6669"/>
    </slice>
    <from sec="1144126960" usec="0"/>
    <to sec="1144127555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
1186[label="206.60.97.65;s;4pkt 4fpkt", shape=diamond, color=yellow];
4138[label="206.60.97.65;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6858[label="206.60.97.65;3pkt 3fpkt", shape=invtriangle, color=brown];
8744[label="206.60.97.65;3pkt 3fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.60.97.65:80, 147.13.71.56:1731}[25%]&lt;BR/&gt;{206.60.97.65:80, 147.13.71.56:1733}[25%]&lt;BR/&gt;{206.60.97.65:80, 147.13.71.56:1735}[25%]&lt;BR/&gt;{206.60.97.65:80, 147.13.71.56:1737}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1737: (14.2857%)&lt;BR/&gt; 1735: (14.2857%)&lt;BR/&gt; 1733: (14.2857%)&lt;BR/&gt; 1731: (7.14286%)&gt;];
}
1186--1331[label="1;4pkt 4fpkt"];
1186--4138[label="1;4pkt 4fpkt"];
1186--6858[label="1;3pkt 3fpkt"];
1186--8744[label="1;3pkt 3fpkt"];
4138--6858[label="1;3pkt 3fpkt"];
4138--8744[label="1;3pkt 3fpkt"];
6858--8744[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.71.56" dst_port="1737" src_ip="206.60.97.65" src_port="80"/>
      <filter dst_ip="147.13.71.56" dst_port="1735" src_ip="206.60.97.65" src_port="80"/>
      <filter dst_ip="147.13.71.56" dst_port="1733" src_ip="206.60.97.65" src_port="80"/>
      <filter dst_ip="147.13.71.56" dst_port="1731" src_ip="206.60.97.65" src_port="80"/>
    </slice>
    <from sec="1144126939" usec="0"/>
    <to sec="1144127117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.36.179.65"/>
    </slice>
    <from sec="1144126870" usec="0"/>
    <to sec="1144127244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.114.184.66"/>
    </slice>
    <from sec="1144127274" usec="0"/>
    <to sec="1144127299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
590[label="132.19.157.241;d;156pkt 156fpkt", shape=diamond, color=yellow];
2613[label="36.172.62.105;s;4pkt 4fpkt", shape=diamond, color=yellow];
5390[label="33.65.51.172;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.157.241:25}[44.9735%]&lt;BR/&gt;{*:80, *:*}[26.9841%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.1518%)&lt;BR/&gt; 80: (13.8743%)&lt;BR/&gt; 53: (5.2356%)&lt;BR/&gt; 0: (1.04712%)&lt;BR/&gt; 53354: (0.52356%)&gt;];
}
590--2221[label="0.126582;10pkt 10fpkt"];
590--2613[label="0.25;1pkt 1fpkt"];
590--2640[label="0.1;2pkt 2fpkt"];
590--3212[label="0.126582;10pkt 10fpkt"];
590--3288[label="0.025641;4pkt 4fpkt"];
590--3290[label="0.0128205;2pkt 2fpkt"];
590--4182[label="0.121951;10pkt 10fpkt"];
590--4256[label="0.3;9pkt 9fpkt"];
590--4428[label="0.037037;2pkt 2fpkt"];
590--5390[label="0.0322581;1pkt 1fpkt"];
590--5446[label="0.047619;1pkt 1fpkt"];
590--6887[label="0.121951;10pkt 10fpkt"];
590--7066[label="0.037037;2pkt 2fpkt"];
590--7769[label="0.047619;1pkt 1fpkt"];
590--8765[label="0.123457;10pkt 10fpkt"];
590--8879[label="0.037037;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="132.19.157.241" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.34.197.69"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.188.120.70"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.158.70"/>
    </slice>
    <from sec="1144126967" usec="0"/>
    <to sec="1144127666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
289[label="85.90.38.71;s;676pkt 676fpkt", shape=diamond, color=yellow];
1034[label="132.19.217.22;d;12pkt 12fpkt", shape=diamond, color=yellow];
2858[label="85.90.38.71;s;676pkt 676fpkt", shape=hexagon, color=black];
4211[label="85.90.38.71;676pkt 676fpkt", shape=pentagon, color=darkviolet];
6909[label="85.90.38.71;676pkt 676fpkt", shape=invtriangle, color=brown];
8779[label="85.90.38.71;675pkt 675fpkt", shape=invhouse, color=bisque];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.90.38.71:7000, *:*}[98.3988%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (49.8378%)&lt;BR/&gt; 80: (0.162194%)&lt;BR/&gt; 53041: (0.147449%)&lt;BR/&gt; 52773: (0.147449%)&lt;BR/&gt; 41779: (0.147449%)&gt;];
}
289--1034[label="0.0833333;1pkt 1fpkt"];
289--2858[label="1;676pkt 676fpkt"];
289--4211[label="1;676pkt 676fpkt"];
289--6909[label="1;676pkt 676fpkt"];
289--8779[label="1;675pkt 675fpkt"];
1034--2858[label="0.0833333;1pkt 1fpkt"];
1034--2949[label="1;6pkt 6fpkt"];
1034--3789[label="0.125;1pkt 1fpkt"];
1034--4211[label="0.0833333;1pkt 1fpkt"];
1034--5613[label="1;6pkt 6fpkt"];
1034--6615[label="0.125;1pkt 1fpkt"];
1034--6909[label="0.0833333;1pkt 1fpkt"];
1034--7895[label="1;6pkt 6fpkt"];
1034--8589[label="0.111111;1pkt 1fpkt"];
1034--8779[label="0.0833333;1pkt 1fpkt"];
2858--4211[label="1;676pkt 676fpkt"];
2858--6909[label="1;676pkt 676fpkt"];
2858--8779[label="1;675pkt 675fpkt"];
4211--6909[label="1;676pkt 676fpkt"];
4211--8779[label="1;675pkt 675fpkt"];
6909--8779[label="1;675pkt 675fpkt"];
</description>
    <slice>
      <filter src_ip="85.90.38.71" src_port="7000"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.216.84.71"/>
    </slice>
    <from sec="1144127486" usec="0"/>
    <to sec="1144127518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.78.135.71"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
2337[label="128.28.29.72;s;91pkt 91fpkt", shape=diamond, color=yellow];
4225[label="128.28.29.72;93pkt 93fpkt", shape=pentagon, color=darkviolet];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.29.72:51098, *:*}[83.871%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51098: (41.8478%)&lt;BR/&gt; 30559: (1.63043%)&lt;BR/&gt; 27866: (1.63043%)&lt;BR/&gt; 12330: (1.63043%)&lt;BR/&gt; 53785: (1.08696%)&gt;];
}
2337--4225[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.29.72" src_port="51098"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.60.37.72"/>
    </slice>
    <from sec="1144127090" usec="0"/>
    <to sec="1144127114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.159.158.72"/>
    </slice>
    <from sec="1144127312" usec="0"/>
    <to sec="1144127365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.48.161.72"/>
    </slice>
    <from sec="1144126954" usec="0"/>
    <to sec="1144127682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.28.83.73"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.186.219.73"/>
    </slice>
    <from sec="1144127611" usec="0"/>
    <to sec="1144127641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.116.60.74"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
2299[label="41.6.80.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
4254[label="41.6.80.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6940[label="41.6.80.74;2pkt 2fpkt", shape=invtriangle, color=brown];
8798[label="41.6.80.74;1pkt 1fpkt", shape=invhouse, color=bisque];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.6.80.74:80, 147.13.172.74:3595}[50%]&lt;BR/&gt;{41.6.80.74:80, 147.13.172.74:3599}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3599: (33.3333%)&lt;BR/&gt; 3595: (16.6667%)&gt;];
}
2299--4254[label="1;1pkt 1fpkt"];
2299--6940[label="1;2pkt 2fpkt"];
2299--8798[label="1;1pkt 1fpkt"];
4254--6940[label="1;1pkt 1fpkt"];
4254--8798[label="1;1pkt 1fpkt"];
6940--8798[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.172.74" dst_port="3599" src_ip="41.6.80.74" src_port="80"/>
      <filter dst_ip="147.13.172.74" dst_port="3595" src_ip="41.6.80.74" src_port="80"/>
    </slice>
    <from sec="1144127325" usec="0"/>
    <to sec="1144127389" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.210.75"/>
    </slice>
    <from sec="1144126889" usec="0"/>
    <to sec="1144127036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.194.220.75"/>
    </slice>
    <from sec="1144127596" usec="0"/>
    <to sec="1144127627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.221.75"/>
    </slice>
    <from sec="1144126910" usec="0"/>
    <to sec="1144127667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.116.21.76"/>
    </slice>
    <from sec="1144127185" usec="0"/>
    <to sec="1144127202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.100.40.76"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.88.156.76"/>
    </slice>
    <from sec="1144126836" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.232.76"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.195.179.78"/>
    </slice>
    <from sec="1144126945" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.58.164.79"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.110.237.79"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.164.5.80"/>
    </slice>
    <from sec="1144127550" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
883[label="147.13.220.20;d;127pkt 127fpkt", shape=diamond, color=yellow];
1914[label="194.212.154.8;d;71pkt 71fpkt", shape=diamond, color=yellow];
2177[label="164.23.204.199;d;24pkt 24fpkt", shape=diamond, color=yellow];
2615[label="36.172.50.19;s;21pkt 21fpkt", shape=diamond, color=yellow];
3520[label="32.136.167.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3578[label="36.172.50.19;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4042[label="218.108.80.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4326[label="214.206.30.80;30pkt 30fpkt", shape=pentagon, color=darkviolet];
4947[label="214.206.30.138;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6436[label="32.136.167.15;1pkt 1fpkt", shape=invtriangle, color=brown];
6475[label="36.172.50.19;21pkt 21fpkt", shape=invtriangle, color=brown];
6638[label="208.10.233.37;1pkt 1fpkt", shape=invtriangle, color=brown];
6991[label="214.206.30.80;30pkt 30fpkt", shape=invtriangle, color=brown];
7430[label="214.206.30.138;14pkt 14fpkt", shape=invtriangle, color=brown];
8498[label="36.172.50.19;20pkt 20fpkt", shape=invhouse, color=bisque];
8604[label="208.10.233.37;1pkt 1fpkt", shape=invhouse, color=bisque];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.13.220.20:25}[42.0863%]&lt;BR/&gt;{*:*, 194.212.154.8:*}[25.5396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.201%)&lt;BR/&gt; 113: (7.1608%)&lt;BR/&gt; 80: (2.38693%)&lt;BR/&gt; 47320: (0.628141%)&lt;BR/&gt; 46376: (0.628141%)&gt;];
}
883--2615[label="0.0952381;2pkt 2fpkt"];
883--3578[label="0.0952381;2pkt 2fpkt"];
883--4042[label="1;1pkt 1fpkt"];
883--4204[label="0.00787402;1pkt 1fpkt"];
883--4326[label="0.0333333;1pkt 1fpkt"];
883--4947[label="0.142857;2pkt 2fpkt"];
883--5182[label="0.0238095;1pkt 1fpkt"];
883--6285[label="0.0909091;1pkt 1fpkt"];
883--6475[label="0.0952381;2pkt 2fpkt"];
883--6903[label="0.00787402;1pkt 1fpkt"];
883--6991[label="0.0333333;1pkt 1fpkt"];
883--7430[label="0.142857;2pkt 2fpkt"];
883--7594[label="0.0238095;1pkt 1fpkt"];
883--8381[label="0.0909091;1pkt 1fpkt"];
883--8498[label="0.1;2pkt 2fpkt"];
883--8773[label="0.00787402;1pkt 1fpkt"];
883--9216[label="0.0232558;1pkt 1fpkt"];
883--9740[label="0.0909091;1pkt 1fpkt"];
1914--3825[label="1;1pkt 1fpkt"];
1914--4947[label="0.142857;2pkt 2fpkt"];
1914--5030[label="0.133333;2pkt 2fpkt"];
1914--5182[label="0.047619;2pkt 2fpkt"];
1914--5234[label="0.333333;1pkt 1fpkt"];
1914--5612[label="0.133333;2pkt 2fpkt"];
1914--6285[label="0.181818;2pkt 2fpkt"];
1914--6638[label="1;1pkt 1fpkt"];
1914--7430[label="0.142857;2pkt 2fpkt"];
1914--7594[label="0.047619;2pkt 2fpkt"];
1914--7894[label="0.133333;2pkt 2fpkt"];
1914--8381[label="0.181818;2pkt 2fpkt"];
1914--8604[label="1;1pkt 1fpkt"];
1914--9216[label="0.0465116;2pkt 2fpkt"];
1914--9740[label="0.181818;2pkt 2fpkt"];
2177--2615[label="0.0952381;2pkt 2fpkt"];
2177--3296[label="0.208333;5pkt 5fpkt"];
2177--3520[label="1;1pkt 1fpkt"];
2177--3578[label="0.0952381;2pkt 2fpkt"];
2177--3653[label="0.05;1pkt 1fpkt"];
2177--3970[label="0.0666667;1pkt 1fpkt"];
2177--3984[label="0.166667;1pkt 1fpkt"];
2177--4455[label="0.0416667;1pkt 1fpkt"];
2177--6436[label="1;1pkt 1fpkt"];
2177--6475[label="0.0952381;2pkt 2fpkt"];
2177--6529[label="0.05;1pkt 1fpkt"];
2177--6741[label="0.0625;1pkt 1fpkt"];
2177--6751[label="0.166667;1pkt 1fpkt"];
2177--7081[label="0.0434783;1pkt 1fpkt"];
2177--8498[label="0.1;2pkt 2fpkt"];
2177--8533[label="0.05;1pkt 1fpkt"];
2177--8663[label="0.0625;1pkt 1fpkt"];
2177--8671[label="0.166667;1pkt 1fpkt"];
2177--8889[label="0.0434783;1pkt 1fpkt"];
2615--3578[label="1;21pkt 21fpkt"];
2615--6475[label="1;21pkt 21fpkt"];
2615--8498[label="1;20pkt 20fpkt"];
3520--6436[label="1;1pkt 1fpkt"];
3578--6475[label="1;21pkt 21fpkt"];
3578--8498[label="1;20pkt 20fpkt"];
4326--6991[label="1;30pkt 30fpkt"];
4947--7430[label="1;14pkt 14fpkt"];
6475--8498[label="1;20pkt 20fpkt"];
6638--8604[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.154.8"/>
      <filter dst_ip="147.13.220.20" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.117.80"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.13.168.80"/>
    </slice>
    <from sec="1144126825" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.139.180.81"/>
    </slice>
    <from sec="1144126867" usec="0"/>
    <to sec="1144127673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.235.193.81"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.209.232.81"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.208.19.83"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.99.23.83"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.233.123.83"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
594[label="209.98.173.83;s;3451pkt 3451fpkt", shape=diamond, color=yellow];
4371[label="209.98.173.83;3751pkt 3751fpkt", shape=pentagon, color=darkviolet];
7024[label="209.98.173.83;3750pkt 3750fpkt", shape=invtriangle, color=brown];
8849[label="209.98.173.83;3750pkt 3750fpkt", shape=invhouse, color=bisque];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.98.173.83:20150, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20150: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
594--4371[label="1;3451pkt 3451fpkt"];
594--7024[label="0.99971;3450pkt 3450fpkt"];
594--8849[label="0.99971;3450pkt 3450fpkt"];
4371--7024[label="1;3750pkt 3750fpkt"];
4371--8849[label="1;3750pkt 3750fpkt"];
7024--8849[label="1;3750pkt 3750fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.98.173.83" src_port="20150"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
747[label="132.19.90.62;d;25pkt 25fpkt", shape=diamond, color=yellow];
749[label="208.205.193.83;s;19pkt 19fpkt", shape=diamond, color=yellow];
4372[label="208.205.193.83;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.205.193.83:80, 132.19.90.62:*}[76%]&lt;BR/&gt;{219.56.180.87:80, 132.19.90.62:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1948: (2.38095%)&lt;BR/&gt; 1947: (2.38095%)&lt;BR/&gt; 1946: (2.38095%)&lt;BR/&gt; 1945: (2.38095%)&gt;];
}
747--749[label="1;19pkt 19fpkt"];
747--1922[label="0.2;5pkt 5fpkt"];
747--4372[label="1;19pkt 19fpkt"];
749--4372[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.90.62" src_ip="208.205.193.83" src_port="80"/>
      <filter dst_ip="132.19.90.62" src_ip="219.56.180.87" src_port="80"/>
    </slice>
    <from sec="1144126873" usec="0"/>
    <to sec="1144127483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1283[label="164.23.92.84;s;53pkt 53fpkt", shape=diamond, color=yellow];
2868[label="164.23.92.84;s;46pkt 46fpkt", shape=hexagon, color=black];
4381[label="164.23.92.84;55pkt 55fpkt", shape=pentagon, color=darkviolet];
7033[label="164.23.92.84;54pkt 54fpkt", shape=invtriangle, color=brown];
8855[label="164.23.92.84;54pkt 54fpkt", shape=invhouse, color=bisque];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.92.84:*, *:443}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (29.9618%)&lt;BR/&gt; 5050: (9.54198%)&lt;BR/&gt; 21: (6.10687%)&lt;BR/&gt; 1049: (1.9084%)&lt;BR/&gt; 23: (1.9084%)&gt;];
}
1283--2168[label="0.0322581;1pkt 1fpkt"];
1283--2868[label="1;46pkt 46fpkt"];
1283--4381[label="1;53pkt 53fpkt"];
1283--7033[label="0.981132;52pkt 52fpkt"];
1283--8855[label="0.981132;52pkt 52fpkt"];
2868--4381[label="1;46pkt 46fpkt"];
2868--7033[label="1;46pkt 46fpkt"];
2868--8855[label="1;46pkt 46fpkt"];
4381--7033[label="1;54pkt 54fpkt"];
4381--8855[label="1;54pkt 54fpkt"];
7033--8855[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="164.23.92.84"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.105.224.84"/>
    </slice>
    <from sec="1144127372" usec="0"/>
    <to sec="1144127456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.94.16.85"/>
    </slice>
    <from sec="1144126847" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.216.123.85"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.154.85"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.211.55.86"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.165.139.86"/>
    </slice>
    <from sec="1144127029" usec="0"/>
    <to sec="1144127622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.18.84.87"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.114.206.88"/>
    </slice>
    <from sec="1144127048" usec="0"/>
    <to sec="1144127155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.174.17.89"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
550[label="208.36.108.89;s;2864pkt 2864fpkt", shape=diamond, color=yellow];
2743[label="208.36.108.89;s;1937pkt 1937fpkt", shape=hexagon, color=black];
4440[label="208.36.108.89;3087pkt 3087fpkt", shape=pentagon, color=darkviolet];
7075[label="208.36.108.89;3088pkt 3088fpkt", shape=invtriangle, color=brown];
8885[label="208.36.108.89;3087pkt 3087fpkt", shape=invhouse, color=bisque];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.36.108.89:1052, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1052: (50%)&gt;];
}
550--2743[label="1;1937pkt 1937fpkt"];
550--4440[label="0.999651;2863pkt 2863fpkt"];
550--7075[label="1;2864pkt 2864fpkt"];
550--8885[label="0.999651;2863pkt 2863fpkt"];
2743--4440[label="0.999484;1936pkt 1936fpkt"];
2743--7075[label="1;1937pkt 1937fpkt"];
2743--8885[label="0.999484;1936pkt 1936fpkt"];
4440--7075[label="1;3087pkt 3087fpkt"];
4440--8885[label="1;3087pkt 3087fpkt"];
7075--8885[label="1;3087pkt 3087fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.36.108.89" src_port="1052"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.14.36.90"/>
    </slice>
    <from sec="1144126835" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.14.69.90"/>
    </slice>
    <from sec="1144126902" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.127.95.90"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.209.132.90"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.217.0.91"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.225.0.91"/>
    </slice>
    <from sec="1144126846" usec="0"/>
    <to sec="1144127216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.106.91"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.50.76.92"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144126911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
1477[label="213.61.86.92;s;354pkt 354fpkt", shape=diamond, color=yellow];
4470[label="213.61.86.92;354pkt 354fpkt", shape=pentagon, color=darkviolet];
7092[label="213.61.86.92;353pkt 353fpkt", shape=invtriangle, color=brown];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.86.92:*, *:139}[64.1243%]&lt;BR/&gt;{213.61.86.92:*, *:445}[35.8757%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (32.0452%)&lt;BR/&gt; 445: (17.9548%)&lt;BR/&gt; 4943: (0.282752%)&lt;BR/&gt; 3920: (0.282752%)&lt;BR/&gt; 3877: (0.282752%)&gt;];
}
1477--4470[label="1;354pkt 354fpkt"];
1477--7092[label="1;353pkt 353fpkt"];
4470--7092[label="1;353pkt 353fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.61.86.92"/>
      <filter dst_port="445" src_ip="213.61.86.92"/>
    </slice>
    <from sec="1144127032" usec="0"/>
    <to sec="1144127286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.18.99.92"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.2.162.92"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_573{
style=filled;
color=gray75;
1587[label="210.226.98.196;d;169pkt 169fpkt", shape=diamond, color=yellow];
1628[label="210.226.98.199;d;345pkt 345fpkt", shape=diamond, color=yellow];
4066[label="164.23.169.59;221pkt 221fpkt", shape=pentagon, color=darkviolet];
6801[label="164.23.169.59;220pkt 220fpkt", shape=invtriangle, color=brown];
7117[label="164.23.238.96;9pkt 9fpkt", shape=invtriangle, color=brown];
stat573[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.218.92:*, 210.226.98.199:*}[38.8732%]&lt;BR/&gt;{*:*, *:5050}[35.6338%]&lt;BR/&gt;{164.23.169.59:*, *:*}[31.1268%]&lt;BR/&gt;{*:*, *:21}[30%]&lt;BR/&gt;{*:*, 210.226.98.196:*}[27.4648%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (16.805%)&lt;BR/&gt; 21: (15.8714%)&lt;BR/&gt; 23: (8.71369%)&lt;BR/&gt; 20: (7.31328%)&lt;BR/&gt; 443: (0.829876%)&gt;];
}
1587--1906[label="0.218935;37pkt 37fpkt"];
1587--3031[label="0.00591716;1pkt 1fpkt"];
1587--4066[label="0.195266;33pkt 33fpkt"];
1587--4122[label="0.00591716;1pkt 1fpkt"];
1587--4259[label="0.283582;19pkt 19fpkt"];
1587--4475[label="0.218935;37pkt 37fpkt"];
1587--4511[label="0.1;1pkt 1fpkt"];
1587--4797[label="0.00591716;1pkt 1fpkt"];
1587--6801[label="0.195266;33pkt 33fpkt"];
1587--6845[label="0.00591716;1pkt 1fpkt"];
1587--7117[label="0.111111;1pkt 1fpkt"];
1587--7324[label="0.00591716;1pkt 1fpkt"];
1587--8736[label="0.00591716;1pkt 1fpkt"];
1587--9046[label="0.00591716;1pkt 1fpkt"];
1628--1906[label="0.8;276pkt 276fpkt"];
1628--3031[label="0.00462963;1pkt 1fpkt"];
1628--4122[label="0.0035461;1pkt 1fpkt"];
1628--4475[label="0.8;276pkt 276fpkt"];
1628--4797[label="0.0031348;1pkt 1fpkt"];
1628--6845[label="0.0035461;1pkt 1fpkt"];
1628--7324[label="0.003125;1pkt 1fpkt"];
1628--8736[label="0.0035461;1pkt 1fpkt"];
1628--9046[label="0.003125;1pkt 1fpkt"];
4066--6801[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.169.59"/>
      <filter dst_ip="210.226.98.196"/>
      <filter dst_port="5050"/>
      <filter dst_port="21"/>
      <filter dst_ip="210.226.98.199" src_ip="164.23.218.92"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
876[label="128.82.74.65;d;9pkt 9fpkt", shape=diamond, color=yellow];
3945[label="132.18.14.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4477[label="132.18.13.93;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7095[label="132.18.13.93;2pkt 2fpkt", shape=invtriangle, color=brown];
8897[label="132.18.13.93;2pkt 2fpkt", shape=invhouse, color=bisque];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:1024, 128.82.74.65:123}[33.3333%]&lt;BR/&gt;{*:1025, 128.82.74.65:514}[33.3333%]&lt;BR/&gt;{*:8211, 128.82.74.65:8211}[33.3333%]&lt;BR/&gt;{132.18.12.31:*, 128.82.74.65:*}[33.3333%]&lt;BR/&gt;{132.18.14.50:*, 128.82.74.65:*}[33.3333%]&lt;BR/&gt;{132.18.13.93:*, 128.82.74.65:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8211: (41.1765%)&lt;BR/&gt; 1025: (20.5882%)&lt;BR/&gt; 514: (20.5882%)&lt;BR/&gt; 1024: (8.82353%)&lt;BR/&gt; 123: (8.82353%)&gt;];
}
876--3945[label="1;2pkt 2fpkt"];
876--4477[label="1;2pkt 2fpkt"];
876--7095[label="1;2pkt 2fpkt"];
876--8897[label="1;2pkt 2fpkt"];
4477--7095[label="1;2pkt 2fpkt"];
4477--8897[label="1;2pkt 2fpkt"];
7095--8897[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.82.74.65" src_ip="132.18.13.93"/>
      <filter dst_ip="128.82.74.65" src_ip="132.18.14.50"/>
      <filter dst_ip="128.82.74.65" src_ip="132.18.12.31"/>
      <filter dst_ip="128.82.74.65" dst_port="8211" src_port="8211"/>
      <filter dst_ip="128.82.74.65" dst_port="514" src_port="1025"/>
      <filter dst_ip="128.82.74.65" dst_port="123" src_port="1024"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.216.75.93"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.214.152.93"/>
    </slice>
    <from sec="1144127376" usec="0"/>
    <to sec="1144127435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
454[label="195.80.106.200;d;173pkt 173fpkt", shape=diamond, color=yellow];
739[label="33.38.100.143;s;24pkt 24fpkt", shape=diamond, color=yellow];
744[label="33.38.100.205;s;23pkt 23fpkt", shape=diamond, color=yellow];
3691[label="37.218.139.26;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4485[label="197.81.180.93;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4821[label="197.81.176.129;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4868[label="197.81.180.132;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4940[label="33.38.100.137;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5015[label="33.38.100.143;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5317[label="197.81.186.166;38pkt 38fpkt", shape=pentagon, color=darkviolet];
5318[label="67.53.196.166;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5851[label="33.38.100.212;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6559[label="37.218.139.26;24pkt 24fpkt", shape=invtriangle, color=brown];
7100[label="197.81.180.93;5pkt 5fpkt", shape=invtriangle, color=brown];
7426[label="33.38.100.137;4pkt 4fpkt", shape=invtriangle, color=brown];
7482[label="33.38.100.143;33pkt 33fpkt", shape=invtriangle, color=brown];
7689[label="67.53.196.166;54pkt 54fpkt", shape=invtriangle, color=brown];
8060[label="33.38.100.212;14pkt 14fpkt", shape=invtriangle, color=brown];
8555[label="37.218.139.26;24pkt 24fpkt", shape=invhouse, color=bisque];
9108[label="33.38.100.137;4pkt 4fpkt", shape=invhouse, color=bisque];
9145[label="33.38.100.143;32pkt 32fpkt", shape=invhouse, color=bisque];
9281[label="67.53.196.166;53pkt 53fpkt", shape=invhouse, color=bisque];
9521[label="33.38.100.212;14pkt 14fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 195.80.106.200:*}[59.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7797%)&lt;BR/&gt; 39348: (0.367107%)&lt;BR/&gt; 39242: (0.367107%)&lt;BR/&gt; 39205: (0.367107%)&lt;BR/&gt; 39203: (0.367107%)&gt;];
}
454--739[label="1;24pkt 24fpkt"];
454--744[label="1;23pkt 23fpkt"];
454--1276[label="0.0149254;1pkt 1fpkt"];
454--1633[label="0.0227273;1pkt 1fpkt"];
454--2098[label="0.00578035;1pkt 1fpkt"];
454--2134[label="0.00787402;1pkt 1fpkt"];
454--2575[label="0.011236;1pkt 1fpkt"];
454--3181[label="0.00578035;1pkt 1fpkt"];
454--3288[label="0.0462428;8pkt 8fpkt"];
454--3310[label="0.0105263;1pkt 1fpkt"];
454--3564[label="0.047619;3pkt 3fpkt"];
454--3689[label="0.00704225;1pkt 1fpkt"];
454--3691[label="1;24pkt 24fpkt"];
454--4485[label="0.2;1pkt 1fpkt"];
454--4821[label="1;9pkt 9fpkt"];
454--4868[label="0.0526316;1pkt 1fpkt"];
454--4908[label="0.0103093;1pkt 1fpkt"];
454--4940[label="1;5pkt 5fpkt"];
454--5015[label="1;32pkt 32fpkt"];
454--5286[label="0.00862069;1pkt 1fpkt"];
454--5317[label="0.0263158;1pkt 1fpkt"];
454--5318[label="0.0185185;1pkt 1fpkt"];
454--5609[label="0.0149254;1pkt 1fpkt"];
454--5851[label="0.785714;11pkt 11fpkt"];
454--6465[label="0.047619;3pkt 3fpkt"];
454--6557[label="0.00699301;1pkt 1fpkt"];
454--6559[label="1;24pkt 24fpkt"];
454--7100[label="0.2;1pkt 1fpkt"];
454--7426[label="1;4pkt 4fpkt"];
454--7482[label="1;33pkt 33fpkt"];
454--7671[label="0.00862069;1pkt 1fpkt"];
454--7689[label="0.0185185;1pkt 1fpkt"];
454--8060[label="0.785714;11pkt 11fpkt"];
454--8553[label="0.00704225;1pkt 1fpkt"];
454--8555[label="1;24pkt 24fpkt"];
454--9108[label="1;4pkt 4fpkt"];
454--9145[label="1;32pkt 32fpkt"];
454--9271[label="0.00854701;1pkt 1fpkt"];
454--9281[label="0.0188679;1pkt 1fpkt"];
454--9521[label="0.785714;11pkt 11fpkt"];
739--3288[label="0.0416667;1pkt 1fpkt"];
739--5015[label="0.958333;23pkt 23fpkt"];
739--7482[label="1;24pkt 24fpkt"];
739--9145[label="0.958333;23pkt 23fpkt"];
3691--6559[label="1;24pkt 24fpkt"];
3691--8555[label="1;24pkt 24fpkt"];
4485--7100[label="1;5pkt 5fpkt"];
4940--7426[label="1;4pkt 4fpkt"];
4940--9108[label="1;4pkt 4fpkt"];
5015--7482[label="1;32pkt 32fpkt"];
5015--9145[label="1;32pkt 32fpkt"];
5318--7689[label="1;54pkt 54fpkt"];
5318--9281[label="1;53pkt 53fpkt"];
5851--8060[label="1;14pkt 14fpkt"];
5851--9521[label="1;14pkt 14fpkt"];
6559--8555[label="1;24pkt 24fpkt"];
7426--9108[label="1;4pkt 4fpkt"];
7482--9145[label="1;32pkt 32fpkt"];
7689--9281[label="1;53pkt 53fpkt"];
8060--9521[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="195.80.106.200" src_port="80"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.238.93"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.14.203.95"/>
    </slice>
    <from sec="1144127105" usec="0"/>
    <to sec="1144127348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.224.21.96"/>
    </slice>
    <from sec="1144126828" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.202.118.96"/>
    </slice>
    <from sec="1144127069" usec="0"/>
    <to sec="1144127101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,002,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
1749[label="218.133.148.96;s;197pkt 197fpkt", shape=diamond, color=yellow];
3074[label="218.133.148.96;s;197pkt 197fpkt", shape=hexagon, color=black];
4507[label="218.133.148.96;196pkt 196fpkt", shape=pentagon, color=darkviolet];
7115[label="218.133.148.96;196pkt 196fpkt", shape=invtriangle, color=brown];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.133.148.96:*, *:139}[77.665%]&lt;BR/&gt;{218.133.148.96:*, *:80}[22.335%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (38.8041%)&lt;BR/&gt; 80: (11.1959%)&lt;BR/&gt; 64617: (0.508906%)&lt;BR/&gt; 64265: (0.508906%)&lt;BR/&gt; 63509: (0.508906%)&gt;];
}
1749--3074[label="1;197pkt 197fpkt"];
1749--4507[label="1;196pkt 196fpkt"];
1749--7115[label="1;196pkt 196fpkt"];
3074--4507[label="1;196pkt 196fpkt"];
3074--7115[label="1;196pkt 196fpkt"];
4507--7115[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="218.133.148.96"/>
      <filter dst_port="80" src_ip="218.133.148.96"/>
    </slice>
    <from sec="1144127061" usec="0"/>
    <to sec="1144127209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
803[label="194.212.147.208;d;4015pkt 4015fpkt", shape=diamond, color=yellow];
3439[label="218.208.108.9;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4526[label="201.144.97.98;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4778[label="84.84.216.124;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5423[label="84.46.18.175;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5925[label="82.140.180.218;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6145[label="208.110.132.238;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6247[label="208.110.87.250;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6379[label="218.208.108.9;5pkt 5fpkt", shape=invtriangle, color=brown];
7130[label="201.144.97.98;20pkt 20fpkt", shape=invtriangle, color=brown];
7310[label="84.84.216.124;9pkt 9fpkt", shape=invtriangle, color=brown];
8274[label="208.110.132.238;10pkt 10fpkt", shape=invtriangle, color=brown];
8440[label="218.208.108.9;5pkt 5fpkt", shape=invhouse, color=bisque];
9036[label="84.84.216.124;10pkt 10fpkt", shape=invhouse, color=bisque];
9664[label="208.110.132.238;10pkt 10fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.212.147.208:37602}[99.1054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37602: (49.5691%)&lt;BR/&gt; 0: (0.287288%)&lt;BR/&gt; 443: (0.191525%)&lt;BR/&gt; 54045: (0.0957625%)&lt;BR/&gt; 1044: (0.0837922%)&gt;];
}
803--3439[label="1;5pkt 5fpkt"];
803--4526[label="0.947368;18pkt 18fpkt"];
803--4778[label="1;9pkt 9fpkt"];
803--5423[label="1;17pkt 17fpkt"];
803--5925[label="1;6pkt 6fpkt"];
803--6145[label="0.909091;10pkt 10fpkt"];
803--6247[label="0.730769;19pkt 19fpkt"];
803--6379[label="1;5pkt 5fpkt"];
803--7130[label="0.95;19pkt 19fpkt"];
803--7310[label="1;9pkt 9fpkt"];
803--8274[label="0.9;9pkt 9fpkt"];
803--8440[label="1;5pkt 5fpkt"];
803--9036[label="1;10pkt 10fpkt"];
803--9664[label="0.9;9pkt 9fpkt"];
3439--6379[label="1;5pkt 5fpkt"];
3439--8440[label="1;5pkt 5fpkt"];
4526--7130[label="1;19pkt 19fpkt"];
4778--7310[label="1;9pkt 9fpkt"];
4778--9036[label="1;9pkt 9fpkt"];
6145--8274[label="1;10pkt 10fpkt"];
6145--9664[label="1;10pkt 10fpkt"];
6379--8440[label="1;5pkt 5fpkt"];
7310--9036[label="1;9pkt 9fpkt"];
8274--9664[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.147.208" dst_port="37602"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
241[label="161.223.8.51;d;1283pkt 1283fpkt", shape=diamond, color=yellow];
783[label="161.223.8.62;d;2259pkt 2259fpkt", shape=diamond, color=yellow];
854[label="83.162.18.42;s;415pkt 415fpkt", shape=diamond, color=yellow];
1070[label="32.136.132.4;s;210pkt 210fpkt", shape=diamond, color=yellow];
1219[label="161.223.8.63;d;1333pkt 1333fpkt", shape=diamond, color=yellow];
1353[label="215.117.172.25;s;218pkt 218fpkt", shape=diamond, color=yellow];
1720[label="149.221.166.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
1845[label="147.13.233.207;d;132pkt 132fpkt", shape=diamond, color=yellow];
1854[label="141.176.177.110;s;48pkt 48fpkt", shape=diamond, color=yellow];
1882[label="83.188.156.155;s;141pkt 141fpkt", shape=diamond, color=yellow];
1891[label="215.117.172.140;s;160pkt 160fpkt", shape=diamond, color=yellow];
2002[label="209.104.171.180;s;151pkt 151fpkt", shape=diamond, color=yellow];
2007[label="33.182.246.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
2105[label="210.107.147.17;s;19pkt 19fpkt", shape=diamond, color=yellow];
2197[label="194.149.137.238;s;64pkt 64fpkt", shape=diamond, color=yellow];
2367[label="215.117.172.151;s;125pkt 125fpkt", shape=diamond, color=yellow];
2380[label="205.194.207.116;s;71pkt 71fpkt", shape=diamond, color=yellow];
2420[label="209.104.171.161;s;153pkt 153fpkt", shape=diamond, color=yellow];
2901[label="161.223.8.51;d;1284pkt 1284fpkt", shape=hexagon, color=black];
2924[label="214.202.182.150;s;2038pkt 2038fpkt", shape=hexagon, color=black];
3044[label="215.117.172.25;s;173pkt 173fpkt", shape=hexagon, color=black];
3107[label="210.107.147.17;s;19pkt 19fpkt", shape=hexagon, color=black];
3112[label="141.176.177.110;s;46pkt 46fpkt", shape=hexagon, color=black];
3120[label="215.117.172.140;s;127pkt 127fpkt", shape=hexagon, color=black];
3214[label="149.221.166.46;s;1pkt 1fpkt", shape=hexagon, color=black];
3215[label="209.104.171.161;s;124pkt 124fpkt", shape=hexagon, color=black];
3217[label="33.182.246.187;s;1pkt 1fpkt", shape=hexagon, color=black];
3244[label="205.194.207.116;s;71pkt 71fpkt", shape=hexagon, color=black];
3355[label="209.124.231.3;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3367[label="32.136.132.4;220pkt 220fpkt", shape=pentagon, color=darkviolet];
3556[label="210.107.147.17;18pkt 18fpkt", shape=pentagon, color=darkviolet];
3577[label="194.142.39.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3579[label="55.214.55.19;78pkt 78fpkt", shape=pentagon, color=darkviolet];
3681[label="215.117.172.25;261pkt 261fpkt", shape=pentagon, color=darkviolet];
3792[label="83.178.219.34;182pkt 182fpkt", shape=pentagon, color=darkviolet];
3833[label="209.118.28.39;42pkt 42fpkt", shape=pentagon, color=darkviolet];
3852[label="215.49.182.40;27pkt 27fpkt", shape=pentagon, color=darkviolet];
3920[label="83.208.146.47;73pkt 73fpkt", shape=pentagon, color=darkviolet];
3923[label="55.213.19.48;35pkt 35fpkt", shape=pentagon, color=darkviolet];
3966[label="82.181.69.51;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3990[label="83.160.41.54;26pkt 26fpkt", shape=pentagon, color=darkviolet];
3997[label="217.204.132.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4034[label="213.162.229.57;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4065[label="216.222.154.59;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4097[label="213.195.92.62;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4192[label="33.137.64.70;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4288[label="195.227.112.76;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4312[label="195.227.112.78;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4405[label="32.212.50.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4463[label="33.20.90.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4531[label="141.176.177.98;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4633[label="208.116.216.107;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4660[label="141.176.177.110;50pkt 50fpkt", shape=pentagon, color=darkviolet];
4667[label="219.239.49.111;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4716[label="205.194.207.116;73pkt 73fpkt", shape=pentagon, color=darkviolet];
4735[label="209.126.30.120;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4742[label="32.20.7.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4748[label="81.77.156.121;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4846[label="213.101.64.131;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4903[label="209.97.90.134;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4931[label="215.117.172.136;36pkt 36fpkt", shape=pentagon, color=darkviolet];
4943[label="215.117.172.137;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5011[label="213.63.62.143;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5103[label="214.202.182.150;2202pkt 2202fpkt", shape=pentagon, color=darkviolet];
5114[label="215.117.172.151;136pkt 136fpkt", shape=pentagon, color=darkviolet];
5173[label="83.188.156.155;147pkt 147fpkt", shape=pentagon, color=darkviolet];
5214[label="143.41.94.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5310[label="209.120.80.166;44pkt 44fpkt", shape=pentagon, color=darkviolet];
5334[label="34.186.220.167;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5437[label="85.83.131.176;296pkt 296fpkt", shape=pentagon, color=darkviolet];
5482[label="204.245.194.181;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5574[label="215.117.172.190;58pkt 58fpkt", shape=pentagon, color=darkviolet];
5627[label="81.122.17.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5685[label="204.245.194.198;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5696[label="204.245.194.199;26pkt 26fpkt", shape=pentagon, color=darkviolet];
5701[label="32.199.23.200;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5732[label="35.213.90.202;45pkt 45fpkt", shape=pentagon, color=darkviolet];
5774[label="37.220.83.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5843[label="33.109.183.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5877[label="204.245.194.214;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5887[label="203.50.102.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6101[label="99.0.142.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6126[label="134.192.224.236;29pkt 29fpkt", shape=pentagon, color=darkviolet];
6136[label="134.192.224.237;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6146[label="194.149.137.238;68pkt 68fpkt", shape=pentagon, color=darkviolet];
6217[label="216.133.88.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6254[label="208.116.220.250;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6323[label="209.124.231.3;29pkt 29fpkt", shape=invtriangle, color=brown];
6331[label="32.136.132.4;219pkt 219fpkt", shape=invtriangle, color=brown];
6459[label="210.107.147.17;18pkt 18fpkt", shape=invtriangle, color=brown];
6466[label="99.13.131.18;1pkt 1fpkt", shape=invtriangle, color=brown];
6476[label="55.214.55.19;79pkt 79fpkt", shape=invtriangle, color=brown];
6552[label="215.117.172.25;261pkt 261fpkt", shape=invtriangle, color=brown];
6617[label="83.178.219.34;181pkt 181fpkt", shape=invtriangle, color=brown];
6644[label="209.118.28.39;43pkt 43fpkt", shape=invtriangle, color=brown];
6656[label="215.49.182.40;28pkt 28fpkt", shape=invtriangle, color=brown];
6739[label="82.181.69.51;37pkt 37fpkt", shape=invtriangle, color=brown];
6781[label="213.162.229.57;45pkt 45fpkt", shape=invtriangle, color=brown];
6966[label="195.227.112.76;29pkt 29fpkt", shape=invtriangle, color=brown];
6981[label="195.227.112.78;29pkt 29fpkt", shape=invtriangle, color=brown];
7134[label="141.176.177.98;60pkt 60fpkt", shape=invtriangle, color=brown];
7218[label="141.176.177.110;50pkt 50fpkt", shape=invtriangle, color=brown];
7261[label="205.194.207.116;73pkt 73fpkt", shape=invtriangle, color=brown];
7285[label="81.77.156.121;36pkt 36fpkt", shape=invtriangle, color=brown];
7419[label="215.117.172.136;35pkt 35fpkt", shape=invtriangle, color=brown];
7543[label="215.117.172.151;137pkt 137fpkt", shape=invtriangle, color=brown];
7766[label="85.83.131.176;295pkt 295fpkt", shape=invtriangle, color=brown];
7796[label="204.245.194.181;27pkt 27fpkt", shape=invtriangle, color=brown];
7949[label="204.245.194.198;26pkt 26fpkt", shape=invtriangle, color=brown];
7959[label="32.199.23.200;27pkt 27fpkt", shape=invtriangle, color=brown];
7981[label="35.213.90.202;45pkt 45fpkt", shape=invtriangle, color=brown];
8083[label="204.245.194.214;2pkt 2fpkt", shape=invtriangle, color=brown];
8090[label="203.50.102.215;1pkt 1fpkt", shape=invtriangle, color=brown];
8245[label="99.0.142.234;1pkt 1fpkt", shape=invtriangle, color=brown];
8275[label="194.149.137.238;67pkt 67fpkt", shape=invtriangle, color=brown];
8356[label="208.116.220.250;32pkt 32fpkt", shape=invtriangle, color=brown];
8407[label="209.124.231.3;29pkt 29fpkt", shape=invhouse, color=bisque];
8412[label="32.136.132.4;220pkt 220fpkt", shape=invhouse, color=bisque];
8491[label="210.107.147.17;19pkt 19fpkt", shape=invhouse, color=bisque];
8499[label="55.214.55.19;78pkt 78fpkt", shape=invhouse, color=bisque];
8550[label="215.117.172.25;262pkt 262fpkt", shape=invhouse, color=bisque];
8613[label="215.49.182.40;27pkt 27fpkt", shape=invhouse, color=bisque];
8662[label="82.181.69.51;36pkt 36fpkt", shape=invhouse, color=bisque];
8685[label="208.56.83.55;86pkt 86fpkt", shape=invhouse, color=bisque];
8796[label="211.214.57.74;23pkt 23fpkt", shape=invhouse, color=bisque];
8825[label="195.227.112.78;30pkt 30fpkt", shape=invhouse, color=bisque];
8921[label="141.176.177.98;60pkt 60fpkt", shape=invhouse, color=bisque];
8976[label="141.176.177.110;49pkt 49fpkt", shape=invhouse, color=bisque];
9005[label="205.194.207.116;73pkt 73fpkt", shape=invhouse, color=bisque];
9019[label="81.77.156.121;35pkt 35fpkt", shape=invhouse, color=bisque];
9215[label="81.8.102.155;1pkt 1fpkt", shape=invhouse, color=bisque];
9330[label="85.83.131.176;295pkt 295fpkt", shape=invhouse, color=bisque];
9349[label="204.245.194.181;27pkt 27fpkt", shape=invhouse, color=bisque];
9445[label="204.245.194.198;27pkt 27fpkt", shape=invhouse, color=bisque];
9451[label="32.199.23.200;27pkt 27fpkt", shape=invhouse, color=bisque];
9536[label="204.245.194.214;2pkt 2fpkt", shape=invhouse, color=bisque];
9589[label="208.56.82.224;89pkt 89fpkt", shape=invhouse, color=bisque];
9665[label="194.149.137.238;67pkt 67fpkt", shape=invhouse, color=bisque];
9707[label="216.133.88.246;1pkt 1fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.223.8.62:*}[38.7855%]&lt;BR/&gt;{*:*, 161.223.8.63:*}[31.6947%]&lt;BR/&gt;{*:*, *:3128}[31.2673%]&lt;BR/&gt;{*:*, *:3124}[28.7403%]&lt;BR/&gt;{214.202.182.150:*, *:*}[27.6968%]&lt;BR/&gt;{*:*, 161.223.8.51:*}[23.9125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (15.5766%)&lt;BR/&gt; 3124: (15.0553%)&lt;BR/&gt; 3127: (9.05213%)&lt;BR/&gt; 80: (3.18589%)&lt;BR/&gt; 0: (2.89626%)&gt;];
}
241--397[label="0.251754;323pkt 323fpkt"];
241--1070[label="0.0285714;6pkt 6fpkt"];
241--1353[label="0.252294;55pkt 55fpkt"];
241--1440[label="0.00497512;1pkt 1fpkt"];
241--1720[label="1;1pkt 1fpkt"];
241--1854[label="0.166667;8pkt 8fpkt"];
241--1882[label="0.241135;34pkt 34fpkt"];
241--1891[label="0.19375;31pkt 31fpkt"];
241--2007[label="1;1pkt 1fpkt"];
241--2105[label="0.105263;2pkt 2fpkt"];
241--2197[label="0.125;8pkt 8fpkt"];
241--2367[label="0.192;24pkt 24fpkt"];
241--2380[label="0.140845;10pkt 10fpkt"];
241--2901[label="1;1283pkt 1283fpkt"];
241--2924[label="0.251754;323pkt 323fpkt"];
241--3044[label="0.317919;55pkt 55fpkt"];
241--3062[label="0.00970874;1pkt 1fpkt"];
241--3107[label="0.105263;2pkt 2fpkt"];
241--3112[label="0.173913;8pkt 8fpkt"];
241--3120[label="0.244094;31pkt 31fpkt"];
241--3214[label="1;1pkt 1fpkt"];
241--3217[label="1;1pkt 1fpkt"];
241--3244[label="0.140845;10pkt 10fpkt"];
241--3288[label="0.00389712;5pkt 5fpkt"];
241--3355[label="0.0666667;2pkt 2fpkt"];
241--3367[label="0.0272727;6pkt 6fpkt"];
241--3556[label="0.111111;2pkt 2fpkt"];
241--3681[label="0.210728;55pkt 55fpkt"];
241--3792[label="0.197802;36pkt 36fpkt"];
241--3833[label="0.214286;9pkt 9fpkt"];
241--3920[label="0.0958904;7pkt 7fpkt"];
241--3923[label="0.2;7pkt 7fpkt"];
241--3966[label="0.166667;6pkt 6fpkt"];
241--3990[label="0.115385;3pkt 3fpkt"];
241--4034[label="0.0869565;4pkt 4fpkt"];
241--4065[label="0.173913;4pkt 4fpkt"];
241--4097[label="0.52381;11pkt 11fpkt"];
241--4288[label="0.241379;7pkt 7fpkt"];
241--4312[label="0.241379;7pkt 7fpkt"];
241--4405[label="1;1pkt 1fpkt"];
241--4531[label="0.180328;11pkt 11fpkt"];
241--4660[label="0.16;8pkt 8fpkt"];
241--4667[label="0.0384615;1pkt 1fpkt"];
241--4716[label="0.136986;10pkt 10fpkt"];
241--4735[label="0.285714;6pkt 6fpkt"];
241--4748[label="0.111111;4pkt 4fpkt"];
241--4846[label="0.318182;7pkt 7fpkt"];
241--4931[label="0.166667;6pkt 6fpkt"];
241--4943[label="0.125;4pkt 4fpkt"];
241--5011[label="0.151515;5pkt 5fpkt"];
241--5103[label="0.251754;323pkt 323fpkt"];
241--5114[label="0.176471;24pkt 24fpkt"];
241--5173[label="0.231293;34pkt 34fpkt"];
241--5310[label="0.136364;6pkt 6fpkt"];
241--5461[label="0.0857143;3pkt 3fpkt"];
241--5482[label="0.25;7pkt 7fpkt"];
241--5574[label="0.155172;9pkt 9fpkt"];
241--5685[label="0.259259;7pkt 7fpkt"];
241--5696[label="0.346154;9pkt 9fpkt"];
241--5701[label="0.148148;4pkt 4fpkt"];
241--5732[label="0.177778;8pkt 8fpkt"];
241--5877[label="0.5;1pkt 1fpkt"];
241--5961[label="0.0049505;1pkt 1fpkt"];
241--6126[label="0.172414;5pkt 5fpkt"];
241--6136[label="0.2;5pkt 5fpkt"];
241--6146[label="0.117647;8pkt 8fpkt"];
241--6254[label="0.03125;1pkt 1fpkt"];
241--6323[label="0.0689655;2pkt 2fpkt"];
241--6331[label="0.0273973;6pkt 6fpkt"];
241--6459[label="0.111111;2pkt 2fpkt"];
241--6552[label="0.210728;55pkt 55fpkt"];
241--6617[label="0.198895;36pkt 36fpkt"];
241--6644[label="0.209302;9pkt 9fpkt"];
241--6739[label="0.162162;6pkt 6fpkt"];
241--6781[label="0.0888889;4pkt 4fpkt"];
241--6966[label="0.241379;7pkt 7fpkt"];
241--6981[label="0.241379;7pkt 7fpkt"];
241--7134[label="0.183333;11pkt 11fpkt"];
241--7218[label="0.16;8pkt 8fpkt"];
241--7261[label="0.136986;10pkt 10fpkt"];
241--7285[label="0.111111;4pkt 4fpkt"];
241--7419[label="0.171429;6pkt 6fpkt"];
241--7543[label="0.175182;24pkt 24fpkt"];
241--7796[label="0.259259;7pkt 7fpkt"];
241--7949[label="0.269231;7pkt 7fpkt"];
241--7959[label="0.148148;4pkt 4fpkt"];
241--7981[label="0.177778;8pkt 8fpkt"];
241--8083[label="0.5;1pkt 1fpkt"];
241--8275[label="0.119403;8pkt 8fpkt"];
241--8356[label="0.03125;1pkt 1fpkt"];
241--8407[label="0.0689655;2pkt 2fpkt"];
241--8412[label="0.0272727;6pkt 6fpkt"];
241--8491[label="0.105263;2pkt 2fpkt"];
241--8550[label="0.209924;55pkt 55fpkt"];
241--8662[label="0.166667;6pkt 6fpkt"];
241--8825[label="0.233333;7pkt 7fpkt"];
241--8921[label="0.183333;11pkt 11fpkt"];
241--8976[label="0.163265;8pkt 8fpkt"];
241--9005[label="0.136986;10pkt 10fpkt"];
241--9019[label="0.114286;4pkt 4fpkt"];
241--9349[label="0.259259;7pkt 7fpkt"];
241--9445[label="0.259259;7pkt 7fpkt"];
241--9451[label="0.148148;4pkt 4fpkt"];
241--9536[label="0.5;1pkt 1fpkt"];
241--9665[label="0.119403;8pkt 8fpkt"];
783--854[label="0.518072;215pkt 215fpkt"];
783--953[label="0.334559;91pkt 91fpkt"];
783--1070[label="0.0047619;1pkt 1fpkt"];
783--1440[label="0.00497512;1pkt 1fpkt"];
783--1657[label="0.763314;129pkt 129fpkt"];
783--1854[label="0.208333;10pkt 10fpkt"];
783--1882[label="0.241135;34pkt 34fpkt"];
783--1891[label="0.24375;39pkt 39fpkt"];
783--2002[label="0.238411;36pkt 36fpkt"];
783--2105[label="0.105263;2pkt 2fpkt"];
783--2197[label="0.171875;11pkt 11fpkt"];
783--2367[label="0.224;28pkt 28fpkt"];
783--2380[label="0.323944;23pkt 23fpkt"];
783--2420[label="0.398693;61pkt 61fpkt"];
783--2924[label="0.245829;501pkt 501fpkt"];
783--3062[label="0.00970874;1pkt 1fpkt"];
783--3107[label="0.105263;2pkt 2fpkt"];
783--3112[label="0.217391;10pkt 10fpkt"];
783--3120[label="0.307087;39pkt 39fpkt"];
783--3215[label="0.491935;61pkt 61fpkt"];
783--3244[label="0.323944;23pkt 23fpkt"];
783--3288[label="0.00177069;4pkt 4fpkt"];
783--3292[label="0.000442674;1pkt 1fpkt"];
783--3303[label="0.000442674;1pkt 1fpkt"];
783--3355[label="0.366667;11pkt 11fpkt"];
783--3367[label="0.00454545;1pkt 1fpkt"];
783--3556[label="0.111111;2pkt 2fpkt"];
783--3579[label="0.474359;37pkt 37fpkt"];
783--3792[label="0.214286;39pkt 39fpkt"];
783--3833[label="0.261905;11pkt 11fpkt"];
783--3852[label="0.222222;6pkt 6fpkt"];
783--3920[label="0.123288;9pkt 9fpkt"];
783--3923[label="0.114286;4pkt 4fpkt"];
783--3966[label="0.166667;6pkt 6fpkt"];
783--3990[label="0.115385;3pkt 3fpkt"];
783--4008[label="0.229885;20pkt 20fpkt"];
783--4034[label="0.173913;8pkt 8fpkt"];
783--4065[label="0.173913;4pkt 4fpkt"];
783--4101[label="0.64;128pkt 128fpkt"];
783--4192[label="0.361111;13pkt 13fpkt"];
783--4252[label="0.913043;21pkt 21fpkt"];
783--4288[label="0.137931;4pkt 4fpkt"];
783--4312[label="0.172414;5pkt 5fpkt"];
783--4531[label="0.163934;10pkt 10fpkt"];
783--4633[label="1;2pkt 2fpkt"];
783--4660[label="0.2;10pkt 10fpkt"];
783--4667[label="0.0384615;1pkt 1fpkt"];
783--4716[label="0.315068;23pkt 23fpkt"];
783--4735[label="0.142857;3pkt 3fpkt"];
783--4748[label="0.166667;6pkt 6fpkt"];
783--4846[label="0.318182;7pkt 7fpkt"];
783--4903[label="0.970588;33pkt 33fpkt"];
783--4931[label="0.222222;8pkt 8fpkt"];
783--4943[label="0.125;4pkt 4fpkt"];
783--5011[label="0.242424;8pkt 8fpkt"];
783--5103[label="0.227066;500pkt 500fpkt"];
783--5114[label="0.198529;27pkt 27fpkt"];
783--5173[label="0.22449;33pkt 33fpkt"];
783--5310[label="0.181818;8pkt 8fpkt"];
783--5334[label="1;4pkt 4fpkt"];
783--5437[label="0.307432;91pkt 91fpkt"];
783--5461[label="0.0857143;3pkt 3fpkt"];
783--5482[label="0.321429;9pkt 9fpkt"];
783--5574[label="0.206897;12pkt 12fpkt"];
783--5685[label="0.259259;7pkt 7fpkt"];
783--5696[label="0.307692;8pkt 8fpkt"];
783--5701[label="0.148148;4pkt 4fpkt"];
783--5732[label="0.2;9pkt 9fpkt"];
783--5843[label="1;1pkt 1fpkt"];
783--5877[label="0.5;1pkt 1fpkt"];
783--5961[label="0.0049505;1pkt 1fpkt"];
783--5988[label="0.224719;20pkt 20fpkt"];
783--6126[label="0.241379;7pkt 7fpkt"];
783--6136[label="0.24;6pkt 6fpkt"];
783--6146[label="0.161765;11pkt 11fpkt"];
783--6323[label="0.344828;10pkt 10fpkt"];
783--6331[label="0.00456621;1pkt 1fpkt"];
783--6459[label="0.111111;2pkt 2fpkt"];
783--6476[label="0.481013;38pkt 38fpkt"];
783--6617[label="0.209945;38pkt 38fpkt"];
783--6644[label="0.27907;12pkt 12fpkt"];
783--6656[label="0.25;7pkt 7fpkt"];
783--6739[label="0.189189;7pkt 7fpkt"];
783--6768[label="0.22093;19pkt 19fpkt"];
783--6781[label="0.155556;7pkt 7fpkt"];
783--6830[label="0.64;128pkt 128fpkt"];
783--6938[label="0.916667;22pkt 22fpkt"];
783--6966[label="0.137931;4pkt 4fpkt"];
783--6981[label="0.172414;5pkt 5fpkt"];
783--7134[label="0.15;9pkt 9fpkt"];
783--7218[label="0.2;10pkt 10fpkt"];
783--7261[label="0.315068;23pkt 23fpkt"];
783--7285[label="0.166667;6pkt 6fpkt"];
783--7419[label="0.2;7pkt 7fpkt"];
783--7543[label="0.20438;28pkt 28fpkt"];
783--7766[label="0.305085;90pkt 90fpkt"];
783--7796[label="0.296296;8pkt 8fpkt"];
783--7949[label="0.230769;6pkt 6fpkt"];
783--7959[label="0.148148;4pkt 4fpkt"];
783--7981[label="0.2;9pkt 9fpkt"];
783--8083[label="0.5;1pkt 1fpkt"];
783--8161[label="0.224719;20pkt 20fpkt"];
783--8275[label="0.149254;10pkt 10fpkt"];
783--8407[label="0.344828;10pkt 10fpkt"];
783--8412[label="0.00454545;1pkt 1fpkt"];
783--8491[label="0.105263;2pkt 2fpkt"];
783--8499[label="0.474359;37pkt 37fpkt"];
783--8613[label="0.222222;6pkt 6fpkt"];
783--8662[label="0.166667;6pkt 6fpkt"];
783--8685[label="0.22093;19pkt 19fpkt"];
783--8796[label="0.913043;21pkt 21fpkt"];
783--8825[label="0.2;6pkt 6fpkt"];
783--8921[label="0.15;9pkt 9fpkt"];
783--8976[label="0.183673;9pkt 9fpkt"];
783--9005[label="0.315068;23pkt 23fpkt"];
783--9019[label="0.142857;5pkt 5fpkt"];
783--9330[label="0.305085;90pkt 90fpkt"];
783--9349[label="0.296296;8pkt 8fpkt"];
783--9445[label="0.259259;7pkt 7fpkt"];
783--9451[label="0.148148;4pkt 4fpkt"];
783--9536[label="0.5;1pkt 1fpkt"];
783--9589[label="0.224719;20pkt 20fpkt"];
783--9665[label="0.149254;10pkt 10fpkt"];
854--1219[label="0.120482;50pkt 50fpkt"];
1070--1114[label="0.242424;8pkt 8fpkt"];
1070--1165[label="0.571429;120pkt 120fpkt"];
1070--1415[label="0.0588235;5pkt 5fpkt"];
1070--1858[label="0.03;3pkt 3fpkt"];
1070--2901[label="0.0285714;6pkt 6fpkt"];
1070--3205[label="0.266667;8pkt 8fpkt"];
1070--3288[label="0.0142857;3pkt 3fpkt"];
1070--3292[label="0.0761905;16pkt 16fpkt"];
1070--3303[label="0.0761905;16pkt 16fpkt"];
1070--3367[label="1;210pkt 210fpkt"];
1070--6331[label="0.995238;209pkt 209fpkt"];
1070--8412[label="1;210pkt 210fpkt"];
1219--1353[label="0.325688;71pkt 71fpkt"];
1219--1854[label="0.208333;10pkt 10fpkt"];
1219--1882[label="0.0567376;8pkt 8fpkt"];
1219--1891[label="0.15;24pkt 24fpkt"];
1219--2002[label="0.178808;27pkt 27fpkt"];
1219--2105[label="0.105263;2pkt 2fpkt"];
1219--2197[label="0.140625;9pkt 9fpkt"];
1219--2367[label="0.16;20pkt 20fpkt"];
1219--2380[label="0.0985915;7pkt 7fpkt"];
1219--2420[label="0.0718954;11pkt 11fpkt"];
1219--2924[label="0.191298;255pkt 255fpkt"];
1219--3044[label="0.410405;71pkt 71fpkt"];
1219--3107[label="0.105263;2pkt 2fpkt"];
1219--3112[label="0.217391;10pkt 10fpkt"];
1219--3120[label="0.188976;24pkt 24fpkt"];
1219--3215[label="0.0887097;11pkt 11fpkt"];
1219--3244[label="0.0985915;7pkt 7fpkt"];
1219--3288[label="0.00150038;2pkt 2fpkt"];
1219--3355[label="0.233333;7pkt 7fpkt"];
1219--3556[label="0.111111;2pkt 2fpkt"];
1219--3565[label="1;1pkt 1fpkt"];
1219--3577[label="1;1pkt 1fpkt"];
1219--3579[label="0.115385;9pkt 9fpkt"];
1219--3681[label="0.268199;70pkt 70fpkt"];
1219--3792[label="0.21978;40pkt 40fpkt"];
1219--3833[label="0.0952381;4pkt 4fpkt"];
1219--3852[label="0.111111;3pkt 3fpkt"];
1219--3920[label="0.178082;13pkt 13fpkt"];
1219--3923[label="0.114286;4pkt 4fpkt"];
1219--3966[label="0.138889;5pkt 5fpkt"];
1219--3990[label="0.153846;4pkt 4fpkt"];
1219--3997[label="1;1pkt 1fpkt"];
1219--4008[label="0.229885;20pkt 20fpkt"];
1219--4034[label="0.130435;6pkt 6fpkt"];
1219--4065[label="0.130435;3pkt 3fpkt"];
1219--4097[label="0.333333;7pkt 7fpkt"];
1219--4192[label="0.111111;4pkt 4fpkt"];
1219--4288[label="0.275862;8pkt 8fpkt"];
1219--4312[label="0.413793;12pkt 12fpkt"];
1219--4463[label="1;1pkt 1fpkt"];
1219--4531[label="0.114754;7pkt 7fpkt"];
1219--4660[label="0.2;10pkt 10fpkt"];
1219--4667[label="0.0384615;1pkt 1fpkt"];
1219--4716[label="0.0958904;7pkt 7fpkt"];
1219--4742[label="1;1pkt 1fpkt"];
1219--4846[label="0.318182;7pkt 7fpkt"];
1219--4931[label="0.111111;4pkt 4fpkt"];
1219--4943[label="0.125;4pkt 4fpkt"];
1219--5011[label="0.0606061;2pkt 2fpkt"];
1219--5103[label="0.191298;255pkt 255fpkt"];
1219--5114[label="0.147059;20pkt 20fpkt"];
1219--5172[label="1;1pkt 1fpkt"];
1219--5173[label="0.0544218;8pkt 8fpkt"];
1219--5214[label="1;1pkt 1fpkt"];
1219--5437[label="0.195946;58pkt 58fpkt"];
1219--5461[label="0.114286;4pkt 4fpkt"];
1219--5482[label="0.178571;5pkt 5fpkt"];
1219--5574[label="0.137931;8pkt 8fpkt"];
1219--5627[label="1;1pkt 1fpkt"];
1219--5685[label="0.185185;5pkt 5fpkt"];
1219--5696[label="0.153846;4pkt 4fpkt"];
1219--5701[label="0.0740741;2pkt 2fpkt"];
1219--5732[label="0.133333;6pkt 6fpkt"];
1219--5774[label="1;1pkt 1fpkt"];
1219--5887[label="1;1pkt 1fpkt"];
1219--5988[label="0.247191;22pkt 22fpkt"];
1219--6101[label="1;1pkt 1fpkt"];
1219--6126[label="0.241379;7pkt 7fpkt"];
1219--6136[label="0.16;4pkt 4fpkt"];
1219--6146[label="0.132353;9pkt 9fpkt"];
1219--6217[label="1;1pkt 1fpkt"];
1219--6323[label="0.241379;7pkt 7fpkt"];
1219--6459[label="0.111111;2pkt 2fpkt"];
1219--6466[label="1;1pkt 1fpkt"];
1219--6476[label="0.113924;9pkt 9fpkt"];
1219--6552[label="0.268199;70pkt 70fpkt"];
1219--6617[label="0.220994;40pkt 40fpkt"];
1219--6644[label="0.0930233;4pkt 4fpkt"];
1219--6656[label="0.107143;3pkt 3fpkt"];
1219--6739[label="0.135135;5pkt 5fpkt"];
1219--6768[label="0.232558;20pkt 20fpkt"];
1219--6781[label="0.133333;6pkt 6fpkt"];
1219--6966[label="0.275862;8pkt 8fpkt"];
1219--6981[label="0.413793;12pkt 12fpkt"];
1219--7134[label="0.116667;7pkt 7fpkt"];
1219--7218[label="0.2;10pkt 10fpkt"];
1219--7261[label="0.0958904;7pkt 7fpkt"];
1219--7419[label="0.114286;4pkt 4fpkt"];
1219--7543[label="0.145985;20pkt 20fpkt"];
1219--7590[label="1;1pkt 1fpkt"];
1219--7766[label="0.19661;58pkt 58fpkt"];
1219--7796[label="0.185185;5pkt 5fpkt"];
1219--7949[label="0.192308;5pkt 5fpkt"];
1219--7959[label="0.0740741;2pkt 2fpkt"];
1219--7981[label="0.133333;6pkt 6fpkt"];
1219--8090[label="1;1pkt 1fpkt"];
1219--8161[label="0.247191;22pkt 22fpkt"];
1219--8245[label="1;1pkt 1fpkt"];
1219--8275[label="0.134328;9pkt 9fpkt"];
1219--8407[label="0.241379;7pkt 7fpkt"];
1219--8491[label="0.105263;2pkt 2fpkt"];
1219--8499[label="0.115385;9pkt 9fpkt"];
1219--8550[label="0.270992;71pkt 71fpkt"];
1219--8613[label="0.111111;3pkt 3fpkt"];
1219--8662[label="0.138889;5pkt 5fpkt"];
1219--8685[label="0.232558;20pkt 20fpkt"];
1219--8825[label="0.4;12pkt 12fpkt"];
1219--8921[label="0.116667;7pkt 7fpkt"];
1219--8976[label="0.204082;10pkt 10fpkt"];
1219--9005[label="0.0958904;7pkt 7fpkt"];
1219--9215[label="1;1pkt 1fpkt"];
1219--9330[label="0.19661;58pkt 58fpkt"];
1219--9349[label="0.185185;5pkt 5fpkt"];
1219--9445[label="0.185185;5pkt 5fpkt"];
1219--9451[label="0.0740741;2pkt 2fpkt"];
1219--9589[label="0.247191;22pkt 22fpkt"];
1219--9665[label="0.134328;9pkt 9fpkt"];
1219--9707[label="1;1pkt 1fpkt"];
1353--2901[label="0.252294;55pkt 55fpkt"];
1353--3044[label="1;173pkt 173fpkt"];
1353--3681[label="0.995413;217pkt 217fpkt"];
1353--6552[label="0.995413;217pkt 217fpkt"];
1353--8550[label="1;218pkt 218fpkt"];
1720--2901[label="1;1pkt 1fpkt"];
1720--3214[label="1;1pkt 1fpkt"];
1845--1854[label="0.166667;8pkt 8fpkt"];
1845--2197[label="0.125;8pkt 8fpkt"];
1845--2380[label="0.0704225;5pkt 5fpkt"];
1845--3112[label="0.173913;8pkt 8fpkt"];
1845--3244[label="0.0704225;5pkt 5fpkt"];
1845--3288[label="0.00757576;1pkt 1fpkt"];
1845--3292[label="0.030303;4pkt 4fpkt"];
1845--3303[label="0.030303;4pkt 4fpkt"];
1845--4531[label="0.114754;7pkt 7fpkt"];
1845--4660[label="0.16;8pkt 8fpkt"];
1845--4716[label="0.0684932;5pkt 5fpkt"];
1845--6126[label="0.275862;8pkt 8fpkt"];
1845--6136[label="0.24;6pkt 6fpkt"];
1845--6146[label="0.117647;8pkt 8fpkt"];
1845--7134[label="0.116667;7pkt 7fpkt"];
1845--7218[label="0.16;8pkt 8fpkt"];
1845--7261[label="0.0684932;5pkt 5fpkt"];
1845--8275[label="0.119403;8pkt 8fpkt"];
1845--8921[label="0.116667;7pkt 7fpkt"];
1845--8976[label="0.163265;8pkt 8fpkt"];
1845--9005[label="0.0684932;5pkt 5fpkt"];
1845--9665[label="0.119403;8pkt 8fpkt"];
1854--2901[label="0.166667;8pkt 8fpkt"];
1854--3112[label="1;46pkt 46fpkt"];
1854--4660[label="1;48pkt 48fpkt"];
1854--7218[label="1;48pkt 48fpkt"];
1854--8976[label="0.979167;47pkt 47fpkt"];
1882--2901[label="0.241135;34pkt 34fpkt"];
1882--5173[label="0.992908;140pkt 140fpkt"];
1891--2901[label="0.19375;31pkt 31fpkt"];
1891--3120[label="1;127pkt 127fpkt"];
2007--2901[label="1;1pkt 1fpkt"];
2007--3217[label="1;1pkt 1fpkt"];
2105--2901[label="0.105263;2pkt 2fpkt"];
2105--3107[label="1;19pkt 19fpkt"];
2105--3288[label="0.105263;2pkt 2fpkt"];
2105--3292[label="0.0526316;1pkt 1fpkt"];
2105--3303[label="0.0526316;1pkt 1fpkt"];
2105--3556[label="1;18pkt 18fpkt"];
2105--6459[label="1;18pkt 18fpkt"];
2105--8491[label="1;19pkt 19fpkt"];
2197--2901[label="0.125;8pkt 8fpkt"];
2197--6146[label="1;64pkt 64fpkt"];
2197--8275[label="0.984375;63pkt 63fpkt"];
2197--9665[label="0.984375;63pkt 63fpkt"];
2367--2901[label="0.192;24pkt 24fpkt"];
2367--5114[label="0.992;124pkt 124fpkt"];
2367--7543[label="1;125pkt 125fpkt"];
2380--2901[label="0.140845;10pkt 10fpkt"];
2380--3244[label="1;71pkt 71fpkt"];
2380--4716[label="1;71pkt 71fpkt"];
2380--7261[label="1;71pkt 71fpkt"];
2380--9005[label="1;71pkt 71fpkt"];
2420--3215[label="1;124pkt 124fpkt"];
2901--2924[label="0.251558;323pkt 323fpkt"];
2901--3044[label="0.317919;55pkt 55fpkt"];
2901--3062[label="0.00970874;1pkt 1fpkt"];
2901--3107[label="0.105263;2pkt 2fpkt"];
2901--3112[label="0.173913;8pkt 8fpkt"];
2901--3120[label="0.244094;31pkt 31fpkt"];
2901--3214[label="1;1pkt 1fpkt"];
2901--3217[label="1;1pkt 1fpkt"];
2901--3244[label="0.140845;10pkt 10fpkt"];
2901--3288[label="0.00389408;5pkt 5fpkt"];
2901--3355[label="0.0666667;2pkt 2fpkt"];
2901--3367[label="0.0272727;6pkt 6fpkt"];
2901--3556[label="0.111111;2pkt 2fpkt"];
2901--3681[label="0.210728;55pkt 55fpkt"];
2901--3792[label="0.197802;36pkt 36fpkt"];
2901--3833[label="0.214286;9pkt 9fpkt"];
2901--3920[label="0.0958904;7pkt 7fpkt"];
2901--3923[label="0.2;7pkt 7fpkt"];
2901--3966[label="0.166667;6pkt 6fpkt"];
2901--3990[label="0.115385;3pkt 3fpkt"];
2901--4034[label="0.0869565;4pkt 4fpkt"];
2901--4065[label="0.173913;4pkt 4fpkt"];
2901--4097[label="0.52381;11pkt 11fpkt"];
2901--4288[label="0.241379;7pkt 7fpkt"];
2901--4312[label="0.241379;7pkt 7fpkt"];
2901--4405[label="1;1pkt 1fpkt"];
2901--4531[label="0.180328;11pkt 11fpkt"];
2901--4660[label="0.16;8pkt 8fpkt"];
2901--4667[label="0.0384615;1pkt 1fpkt"];
2901--4716[label="0.136986;10pkt 10fpkt"];
2901--4735[label="0.285714;6pkt 6fpkt"];
2901--4748[label="0.111111;4pkt 4fpkt"];
2901--4846[label="0.318182;7pkt 7fpkt"];
2901--4931[label="0.166667;6pkt 6fpkt"];
2901--4943[label="0.125;4pkt 4fpkt"];
2901--5011[label="0.151515;5pkt 5fpkt"];
2901--5103[label="0.251558;323pkt 323fpkt"];
2901--5114[label="0.176471;24pkt 24fpkt"];
2901--5173[label="0.231293;34pkt 34fpkt"];
2901--5310[label="0.136364;6pkt 6fpkt"];
2901--5461[label="0.0857143;3pkt 3fpkt"];
2901--5482[label="0.25;7pkt 7fpkt"];
2901--5574[label="0.155172;9pkt 9fpkt"];
2901--5685[label="0.259259;7pkt 7fpkt"];
2901--5696[label="0.346154;9pkt 9fpkt"];
2901--5701[label="0.148148;4pkt 4fpkt"];
2901--5732[label="0.177778;8pkt 8fpkt"];
2901--5877[label="0.5;1pkt 1fpkt"];
2901--5961[label="0.0049505;1pkt 1fpkt"];
2901--6126[label="0.172414;5pkt 5fpkt"];
2901--6136[label="0.2;5pkt 5fpkt"];
2901--6146[label="0.117647;8pkt 8fpkt"];
2901--6254[label="0.03125;1pkt 1fpkt"];
2901--6323[label="0.0689655;2pkt 2fpkt"];
2901--6331[label="0.0273973;6pkt 6fpkt"];
2901--6459[label="0.111111;2pkt 2fpkt"];
2901--6552[label="0.210728;55pkt 55fpkt"];
2901--6617[label="0.198895;36pkt 36fpkt"];
2901--6644[label="0.209302;9pkt 9fpkt"];
2901--6739[label="0.162162;6pkt 6fpkt"];
2901--6781[label="0.0888889;4pkt 4fpkt"];
2901--6966[label="0.241379;7pkt 7fpkt"];
2901--6981[label="0.241379;7pkt 7fpkt"];
2901--7134[label="0.183333;11pkt 11fpkt"];
2901--7218[label="0.16;8pkt 8fpkt"];
2901--7261[label="0.136986;10pkt 10fpkt"];
2901--7285[label="0.111111;4pkt 4fpkt"];
2901--7419[label="0.171429;6pkt 6fpkt"];
2901--7543[label="0.175182;24pkt 24fpkt"];
2901--7796[label="0.259259;7pkt 7fpkt"];
2901--7949[label="0.269231;7pkt 7fpkt"];
2901--7959[label="0.148148;4pkt 4fpkt"];
2901--7981[label="0.177778;8pkt 8fpkt"];
2901--8083[label="0.5;1pkt 1fpkt"];
2901--8275[label="0.119403;8pkt 8fpkt"];
2901--8356[label="0.03125;1pkt 1fpkt"];
2901--8407[label="0.0689655;2pkt 2fpkt"];
2901--8412[label="0.0272727;6pkt 6fpkt"];
2901--8491[label="0.105263;2pkt 2fpkt"];
2901--8550[label="0.209924;55pkt 55fpkt"];
2901--8662[label="0.166667;6pkt 6fpkt"];
2901--8825[label="0.233333;7pkt 7fpkt"];
2901--8921[label="0.183333;11pkt 11fpkt"];
2901--8976[label="0.163265;8pkt 8fpkt"];
2901--9005[label="0.136986;10pkt 10fpkt"];
2901--9019[label="0.114286;4pkt 4fpkt"];
2901--9349[label="0.259259;7pkt 7fpkt"];
2901--9445[label="0.259259;7pkt 7fpkt"];
2901--9451[label="0.148148;4pkt 4fpkt"];
2901--9536[label="0.5;1pkt 1fpkt"];
2901--9665[label="0.119403;8pkt 8fpkt"];
2924--5103[label="0.999509;2037pkt 2037fpkt"];
3044--3681[label="0.99422;172pkt 172fpkt"];
3044--6552[label="0.99422;172pkt 172fpkt"];
3044--8550[label="1;173pkt 173fpkt"];
3107--3288[label="0.105263;2pkt 2fpkt"];
3107--3292[label="0.0526316;1pkt 1fpkt"];
3107--3303[label="0.0526316;1pkt 1fpkt"];
3107--3556[label="1;18pkt 18fpkt"];
3107--6459[label="1;18pkt 18fpkt"];
3107--8491[label="1;19pkt 19fpkt"];
3112--4660[label="1;46pkt 46fpkt"];
3112--7218[label="1;46pkt 46fpkt"];
3112--8976[label="0.978261;45pkt 45fpkt"];
3244--4716[label="1;71pkt 71fpkt"];
3244--7261[label="1;71pkt 71fpkt"];
3244--9005[label="1;71pkt 71fpkt"];
3355--6323[label="1;29pkt 29fpkt"];
3355--8407[label="1;29pkt 29fpkt"];
3367--6331[label="1;219pkt 219fpkt"];
3367--8412[label="1;220pkt 220fpkt"];
3556--6459[label="1;18pkt 18fpkt"];
3556--8491[label="1;18pkt 18fpkt"];
3579--6476[label="1;78pkt 78fpkt"];
3579--8499[label="1;78pkt 78fpkt"];
3681--6552[label="1;261pkt 261fpkt"];
3681--8550[label="1;261pkt 261fpkt"];
3792--6617[label="1;181pkt 181fpkt"];
3833--6644[label="1;42pkt 42fpkt"];
3852--6656[label="1;27pkt 27fpkt"];
3852--8613[label="1;27pkt 27fpkt"];
3966--6739[label="1;36pkt 36fpkt"];
3966--8662[label="1;36pkt 36fpkt"];
4034--6781[label="1;45pkt 45fpkt"];
4288--6966[label="1;29pkt 29fpkt"];
4312--6981[label="1;29pkt 29fpkt"];
4312--8825[label="1;29pkt 29fpkt"];
4531--7134[label="1;60pkt 60fpkt"];
4531--8921[label="1;60pkt 60fpkt"];
4660--7218[label="1;50pkt 50fpkt"];
4660--8976[label="1;49pkt 49fpkt"];
4716--7261[label="1;73pkt 73fpkt"];
4716--9005[label="1;73pkt 73fpkt"];
4748--7285[label="1;36pkt 36fpkt"];
4748--9019[label="1;35pkt 35fpkt"];
4931--7419[label="1;35pkt 35fpkt"];
5114--7543[label="1;136pkt 136fpkt"];
5437--7766[label="1;295pkt 295fpkt"];
5437--9330[label="1;295pkt 295fpkt"];
5482--7796[label="1;27pkt 27fpkt"];
5482--9349[label="1;27pkt 27fpkt"];
5685--7949[label="1;26pkt 26fpkt"];
5685--9445[label="1;27pkt 27fpkt"];
5701--7959[label="1;27pkt 27fpkt"];
5701--9451[label="1;27pkt 27fpkt"];
5732--7981[label="1;45pkt 45fpkt"];
5877--8083[label="1;2pkt 2fpkt"];
5877--9536[label="1;2pkt 2fpkt"];
5887--8090[label="1;1pkt 1fpkt"];
6101--8245[label="1;1pkt 1fpkt"];
6146--8275[label="1;67pkt 67fpkt"];
6146--9665[label="1;67pkt 67fpkt"];
6217--9707[label="1;1pkt 1fpkt"];
6254--8356[label="1;32pkt 32fpkt"];
6323--8407[label="1;29pkt 29fpkt"];
6331--8412[label="1;219pkt 219fpkt"];
6459--8491[label="1;18pkt 18fpkt"];
6476--8499[label="1;78pkt 78fpkt"];
6552--8550[label="1;261pkt 261fpkt"];
6656--8613[label="1;27pkt 27fpkt"];
6739--8662[label="1;36pkt 36fpkt"];
6981--8825[label="1;29pkt 29fpkt"];
7134--8921[label="1;60pkt 60fpkt"];
7218--8976[label="1;49pkt 49fpkt"];
7261--9005[label="1;73pkt 73fpkt"];
7285--9019[label="1;35pkt 35fpkt"];
7766--9330[label="1;295pkt 295fpkt"];
7796--9349[label="1;27pkt 27fpkt"];
7949--9445[label="1;26pkt 26fpkt"];
7959--9451[label="1;27pkt 27fpkt"];
8083--9536[label="1;2pkt 2fpkt"];
8275--9665[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="214.202.182.150"/>
      <filter dst_ip="161.223.8.62"/>
      <filter dst_ip="161.223.8.63"/>
      <filter dst_ip="161.223.8.51"/>
      <filter dst_port="3128"/>
      <filter dst_port="3124"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.78.135.99"/>
    </slice>
    <from sec="1144126949" usec="0"/>
    <to sec="1144126989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.158.13.100"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
601[label="217.51.82.100;s;256pkt 256fpkt", shape=diamond, color=yellow];
2806[label="217.51.82.100;s;256pkt 256fpkt", shape=hexagon, color=black];
4546[label="217.51.82.100;256pkt 256fpkt", shape=pentagon, color=darkviolet];
7146[label="217.51.82.100;256pkt 256fpkt", shape=invtriangle, color=brown];
8933[label="217.51.82.100;255pkt 255fpkt", shape=invhouse, color=bisque];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.51.82.100:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
601--2806[label="1;256pkt 256fpkt"];
601--4546[label="1;256pkt 256fpkt"];
601--7146[label="1;256pkt 256fpkt"];
601--8933[label="1;255pkt 255fpkt"];
2806--4546[label="1;256pkt 256fpkt"];
2806--7146[label="1;256pkt 256fpkt"];
2806--8933[label="1;255pkt 255fpkt"];
4546--7146[label="1;256pkt 256fpkt"];
4546--8933[label="1;255pkt 255fpkt"];
7146--8933[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter src_ip="217.51.82.100"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
2425[label="211.234.161.100;s;66pkt 66fpkt", shape=diamond, color=yellow];
3219[label="211.234.161.100;s;66pkt 66fpkt", shape=hexagon, color=black];
4548[label="211.234.161.100;66pkt 66fpkt", shape=pentagon, color=darkviolet];
7148[label="211.234.161.100;65pkt 65fpkt", shape=invtriangle, color=brown];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.234.161.100:80, 195.89.105.215:*}[54.5455%]&lt;BR/&gt;{211.234.161.100:80, 195.89.105.214:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65484: (0.760456%)&lt;BR/&gt; 65452: (0.760456%)&lt;BR/&gt; 65416: (0.760456%)&lt;BR/&gt; 65376: (0.760456%)&gt;];
}
2425--3219[label="1;66pkt 66fpkt"];
2425--4548[label="1;66pkt 66fpkt"];
2425--7148[label="1;65pkt 65fpkt"];
3219--4548[label="1;66pkt 66fpkt"];
3219--7148[label="1;65pkt 65fpkt"];
4548--7148[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" src_ip="211.234.161.100" src_port="80"/>
      <filter dst_ip="195.89.105.214" src_ip="211.234.161.100" src_port="80"/>
    </slice>
    <from sec="1144127056" usec="0"/>
    <to sec="1144127407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.160.204.100"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
2032[label="36.219.130.165;d;3pkt 3fpkt", shape=diamond, color=yellow];
2292[label="161.223.210.101;s;8pkt 8fpkt", shape=diamond, color=yellow];
3158[label="36.219.130.165;d;3pkt 3fpkt", shape=hexagon, color=black];
3163[label="161.223.210.101;s;8pkt 8fpkt", shape=hexagon, color=black];
3859[label="128.202.84.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4562[label="161.223.210.101;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6661[label="128.202.84.41;1pkt 1fpkt", shape=invtriangle, color=brown];
7156[label="161.223.210.101;8pkt 8fpkt", shape=invtriangle, color=brown];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.210.101:*, 36.219.130.164:80}[50%]&lt;BR/&gt;{161.223.210.101:*, 36.219.130.165:80}[20%]&lt;BR/&gt;{128.202.84.41:*, *:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.122%)&lt;BR/&gt; 123: (9.7561%)&lt;BR/&gt; 50187: (7.31707%)&lt;BR/&gt; 50186: (7.31707%)&lt;BR/&gt; 50189: (4.87805%)&gt;];
}
2032--2292[label="0.666667;2pkt 2fpkt"];
2032--3158[label="1;3pkt 3fpkt"];
2032--3163[label="0.666667;2pkt 2fpkt"];
2032--3859[label="0.5;1pkt 1fpkt"];
2032--4562[label="0.666667;2pkt 2fpkt"];
2032--7156[label="0.666667;2pkt 2fpkt"];
2292--3158[label="0.666667;2pkt 2fpkt"];
2292--3163[label="1;8pkt 8fpkt"];
2292--4562[label="1;8pkt 8fpkt"];
2292--7156[label="1;8pkt 8fpkt"];
3158--3163[label="0.666667;2pkt 2fpkt"];
3158--3859[label="0.5;1pkt 1fpkt"];
3158--4562[label="0.666667;2pkt 2fpkt"];
3158--7156[label="0.666667;2pkt 2fpkt"];
3163--4562[label="1;8pkt 8fpkt"];
3163--7156[label="1;8pkt 8fpkt"];
3859--6661[label="1;1pkt 1fpkt"];
4562--7156[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.202.84.41"/>
      <filter dst_ip="36.219.130.164" dst_port="80" src_ip="161.223.210.101"/>
      <filter dst_ip="36.219.130.165" dst_port="80" src_ip="161.223.210.101"/>
    </slice>
    <from sec="1144127168" usec="0"/>
    <to sec="1144127478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,502,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_591{
style=filled;
color=gray75;
617[label="195.153.72.102;s;71pkt 71fpkt", shape=diamond, color=yellow];
941[label="219.108.11.148;d;71pkt 71fpkt", shape=diamond, color=yellow];
4567[label="195.153.72.102;72pkt 72fpkt", shape=pentagon, color=darkviolet];
7159[label="195.153.72.102;72pkt 72fpkt", shape=invtriangle, color=brown];
stat591[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.153.72.102:22, 219.108.11.148:*}[98.6111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.6503%)&lt;BR/&gt; 48778: (0.699301%)&lt;BR/&gt; 48677: (0.699301%)&lt;BR/&gt; 48606: (0.699301%)&lt;BR/&gt; 48526: (0.699301%)&gt;];
}
617--941[label="1;71pkt 71fpkt"];
617--4567[label="1;71pkt 71fpkt"];
617--7159[label="1;71pkt 71fpkt"];
941--4567[label="1;71pkt 71fpkt"];
941--7159[label="1;71pkt 71fpkt"];
4567--7159[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="219.108.11.148" src_ip="195.153.72.102" src_port="22"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.32.79.102"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.174.77.103"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
919[label="210.49.55.84;d;270pkt 270fpkt", shape=diamond, color=yellow];
1965[label="210.49.55.88;d;140pkt 140fpkt", shape=diamond, color=yellow];
3571[label="128.28.198.18;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3657[label="161.223.117.24;32pkt 32fpkt", shape=pentagon, color=darkviolet];
3658[label="132.19.133.24;20pkt 20fpkt", shape=pentagon, color=darkviolet];
3740[label="132.19.106.30;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4547[label="132.19.135.100;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4576[label="195.80.138.103;33pkt 33fpkt", shape=pentagon, color=darkviolet];
5760[label="132.19.238.204;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5875[label="161.223.104.214;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6533[label="161.223.117.24;32pkt 32fpkt", shape=invtriangle, color=brown];
6534[label="132.19.133.24;20pkt 20fpkt", shape=invtriangle, color=brown];
7147[label="132.19.135.100;17pkt 17fpkt", shape=invtriangle, color=brown];
7166[label="195.80.138.103;33pkt 33fpkt", shape=invtriangle, color=brown];
8004[label="132.19.238.204;50pkt 50fpkt", shape=invtriangle, color=brown];
8081[label="161.223.104.214;33pkt 33fpkt", shape=invtriangle, color=brown];
8537[label="132.19.133.24;21pkt 21fpkt", shape=invhouse, color=bisque];
8934[label="132.19.135.100;18pkt 18fpkt", shape=invhouse, color=bisque];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.49.55.84:80}[56.8282%]&lt;BR/&gt;{*:*, 210.49.55.88:443}[32.8194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.3666%)&lt;BR/&gt; 443: (17.3434%)&lt;BR/&gt; 1282: (0.290023%)&lt;BR/&gt; 1275: (0.290023%)&lt;BR/&gt; 1132: (0.290023%)&gt;];
}
919--1183[label="0.4;20pkt 20fpkt"];
919--1349[label="0.039604;4pkt 4fpkt"];
919--2533[label="0.0037037;1pkt 1fpkt"];
919--2757[label="0.0327869;4pkt 4fpkt"];
919--2831[label="0.0037037;1pkt 1fpkt"];
919--2873[label="0.039604;4pkt 4fpkt"];
919--3225[label="0.0185185;5pkt 5fpkt"];
919--3296[label="0.0333333;9pkt 9fpkt"];
919--3571[label="0.6;18pkt 18fpkt"];
919--3657[label="0.59375;19pkt 19fpkt"];
919--3658[label="0.6;12pkt 12fpkt"];
919--3740[label="0.538462;7pkt 7fpkt"];
919--3805[label="0.304348;7pkt 7fpkt"];
919--3936[label="0.0148148;4pkt 4fpkt"];
919--4331[label="0.0901639;11pkt 11fpkt"];
919--4547[label="1;17pkt 17fpkt"];
919--4576[label="0.606061;20pkt 20fpkt"];
919--5632[label="0.0777778;21pkt 21fpkt"];
919--5760[label="0.4;20pkt 20fpkt"];
919--5875[label="0.575758;19pkt 19fpkt"];
919--6533[label="0.59375;19pkt 19fpkt"];
919--6534[label="0.6;12pkt 12fpkt"];
919--6628[label="0.304348;7pkt 7fpkt"];
919--6715[label="0.0148148;4pkt 4fpkt"];
919--6996[label="0.0894309;11pkt 11fpkt"];
919--7147[label="1;17pkt 17fpkt"];
919--7166[label="0.606061;20pkt 20fpkt"];
919--7911[label="0.0777778;21pkt 21fpkt"];
919--8004[label="0.4;20pkt 20fpkt"];
919--8081[label="0.575758;19pkt 19fpkt"];
919--8537[label="0.571429;12pkt 12fpkt"];
919--8934[label="1;18pkt 18fpkt"];
919--9422[label="0.0777778;21pkt 21fpkt"];
1965--2831[label="0.0571429;8pkt 8fpkt"];
1965--2873[label="0.029703;3pkt 3fpkt"];
1965--2878[label="0.121212;8pkt 8fpkt"];
1965--3180[label="0.0214286;3pkt 3fpkt"];
1965--3561[label="0.129032;8pkt 8fpkt"];
1965--3571[label="0.266667;8pkt 8fpkt"];
1965--3657[label="0.21875;7pkt 7fpkt"];
1965--3740[label="0.153846;2pkt 2fpkt"];
1965--3805[label="0.173913;4pkt 4fpkt"];
1965--4331[label="0.0983607;12pkt 12fpkt"];
1965--4375[label="0.0214286;3pkt 3fpkt"];
1965--4576[label="0.242424;8pkt 8fpkt"];
1965--4577[label="0.0701754;8pkt 8fpkt"];
1965--5632[label="0.0428571;6pkt 6fpkt"];
1965--5760[label="0.4;20pkt 20fpkt"];
1965--5875[label="0.242424;8pkt 8fpkt"];
1965--6533[label="0.21875;7pkt 7fpkt"];
1965--6628[label="0.173913;4pkt 4fpkt"];
1965--6996[label="0.097561;12pkt 12fpkt"];
1965--7027[label="0.0214286;3pkt 3fpkt"];
1965--7166[label="0.242424;8pkt 8fpkt"];
1965--7167[label="0.0701754;8pkt 8fpkt"];
1965--7911[label="0.0428571;6pkt 6fpkt"];
1965--8004[label="0.4;20pkt 20fpkt"];
1965--8081[label="0.242424;8pkt 8fpkt"];
1965--8852[label="0.0214286;3pkt 3fpkt"];
1965--8945[label="0.0695652;8pkt 8fpkt"];
1965--9422[label="0.0428571;6pkt 6fpkt"];
3657--6533[label="1;32pkt 32fpkt"];
3658--6534[label="1;20pkt 20fpkt"];
3658--8537[label="1;20pkt 20fpkt"];
4547--7147[label="1;17pkt 17fpkt"];
4547--8934[label="1;17pkt 17fpkt"];
4576--7166[label="1;33pkt 33fpkt"];
5760--8004[label="1;50pkt 50fpkt"];
5875--8081[label="1;33pkt 33fpkt"];
6534--8537[label="1;20pkt 20fpkt"];
7147--8934[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="210.49.55.84" dst_port="80"/>
      <filter dst_ip="210.49.55.88" dst_port="443"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
725[label="209.124.172.103;s;254pkt 254fpkt", shape=diamond, color=yellow];
4579[label="209.124.172.103;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7169[label="209.124.172.103;253pkt 253fpkt", shape=invtriangle, color=brown];
8946[label="209.124.172.103;253pkt 253fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.124.172.103:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 1358: (0.197239%)&lt;BR/&gt; 1357: (0.197239%)&lt;BR/&gt; 1356: (0.197239%)&lt;BR/&gt; 1355: (0.197239%)&gt;];
}
725--4579[label="1;254pkt 254fpkt"];
725--7169[label="1;253pkt 253fpkt"];
725--8946[label="1;253pkt 253fpkt"];
4579--7169[label="1;253pkt 253fpkt"];
4579--8946[label="1;253pkt 253fpkt"];
7169--8946[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.124.172.103"/>
    </slice>
    <from sec="1144126824" usec="0"/>
    <to sec="1144126984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.157.93.104"/>
    </slice>
    <from sec="1144127392" usec="0"/>
    <to sec="1144127454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.82.210.104"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
1750[label="217.237.95.15;d;24pkt 24fpkt", shape=diamond, color=yellow];
4604[label="132.19.135.105;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.135.105:*, 217.237.95.15:80}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49840: (2.22222%)&lt;BR/&gt; 49787: (2.22222%)&lt;BR/&gt; 49786: (2.22222%)&lt;BR/&gt; 49785: (2.22222%)&gt;];
}
1750--4604[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="217.237.95.15" dst_port="80" src_ip="132.19.135.105"/>
    </slice>
    <from sec="1144127074" usec="0"/>
    <to sec="1144127239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.202.210.105"/>
    </slice>
    <from sec="1144127033" usec="0"/>
    <to sec="1144127525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.128.32.106"/>
    </slice>
    <from sec="1144127294" usec="0"/>
    <to sec="1144127656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.18.192.106"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.238.106"/>
    </slice>
    <from sec="1144127130" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
2195[label="161.223.27.107;s;214pkt 214fpkt", shape=diamond, color=yellow];
3133[label="161.223.27.107;s;186pkt 186fpkt", shape=hexagon, color=black];
4624[label="161.223.27.107;224pkt 224fpkt", shape=pentagon, color=darkviolet];
7197[label="161.223.27.107;224pkt 224fpkt", shape=invtriangle, color=brown];
8964[label="161.223.27.107;225pkt 225fpkt", shape=invhouse, color=bisque];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.27.107:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2195--2331[label="0.0046729;1pkt 1fpkt"];
2195--3133[label="1;186pkt 186fpkt"];
2195--4624[label="0.995327;213pkt 213fpkt"];
2195--7197[label="0.995327;213pkt 213fpkt"];
2195--8964[label="1;214pkt 214fpkt"];
3133--4624[label="0.994624;185pkt 185fpkt"];
3133--7197[label="0.994624;185pkt 185fpkt"];
3133--8964[label="1;186pkt 186fpkt"];
4624--7197[label="1;224pkt 224fpkt"];
4624--8964[label="1;224pkt 224fpkt"];
7197--8964[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.27.107"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.25.183.107"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.194.203.107"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
1790[label="83.218.8.109;s;508pkt 508fpkt", shape=diamond, color=yellow];
4643[label="83.218.8.109;507pkt 507fpkt", shape=pentagon, color=darkviolet];
7207[label="83.218.8.109;508pkt 508fpkt", shape=invtriangle, color=brown];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.218.8.109:*, *:139}[50%]&lt;BR/&gt;{83.218.8.109:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0164%)&lt;BR/&gt; 139: (24.9836%)&lt;BR/&gt; 3526: (0.19698%)&lt;BR/&gt; 3514: (0.19698%)&lt;BR/&gt; 3502: (0.19698%)&gt;];
}
1790--4643[label="1;507pkt 507fpkt"];
1790--7207[label="1;508pkt 508fpkt"];
4643--7207[label="1;507pkt 507fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="83.218.8.109"/>
      <filter dst_port="139" src_ip="83.218.8.109"/>
    </slice>
    <from sec="1144127195" usec="0"/>
    <to sec="1144127430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.130.109"/>
    </slice>
    <from sec="1144127044" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.142.202.110"/>
    </slice>
    <from sec="1144126981" usec="0"/>
    <to sec="1144127024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.34.111"/>
    </slice>
    <from sec="1144126976" usec="0"/>
    <to sec="1144127014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.77.74.111"/>
    </slice>
    <from sec="1144126903" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
976[label="147.13.230.130;d;72pkt 72fpkt", shape=diamond, color=yellow];
977[label="214.197.41.112;s;21pkt 21fpkt", shape=diamond, color=yellow];
2933[label="214.197.41.112;s;11pkt 11fpkt", shape=hexagon, color=black];
3438[label="34.211.101.9;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4678[label="214.197.41.112;38pkt 38fpkt", shape=pentagon, color=darkviolet];
7234[label="214.197.41.112;38pkt 38fpkt", shape=invtriangle, color=brown];
8986[label="214.197.41.112;37pkt 37fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.197.41.112:3077, 147.13.230.130:*}[45.7831%]&lt;BR/&gt;{34.211.101.9:3077, 147.13.230.130:*}[40.9639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (49%)&lt;BR/&gt; 3646: (1.2%)&lt;BR/&gt; 3645: (1.2%)&lt;BR/&gt; 3642: (1.2%)&lt;BR/&gt; 3641: (1.2%)&gt;];
}
976--977[label="1;21pkt 21fpkt"];
976--2933[label="1;11pkt 11fpkt"];
976--3438[label="0.818182;27pkt 27fpkt"];
976--4678[label="0.868421;33pkt 33fpkt"];
976--7234[label="0.868421;33pkt 33fpkt"];
976--8986[label="0.864865;32pkt 32fpkt"];
977--2933[label="1;11pkt 11fpkt"];
977--4678[label="1;21pkt 21fpkt"];
977--7234[label="1;21pkt 21fpkt"];
977--8986[label="0.952381;20pkt 20fpkt"];
2933--4678[label="1;11pkt 11fpkt"];
2933--7234[label="1;11pkt 11fpkt"];
2933--8986[label="0.909091;10pkt 10fpkt"];
4678--7234[label="1;38pkt 38fpkt"];
4678--8986[label="1;37pkt 37fpkt"];
7234--8986[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.130" src_ip="214.197.41.112" src_port="3077"/>
      <filter dst_ip="147.13.230.130" src_ip="34.211.101.9" src_port="3077"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.141.67.112"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
715[label="194.212.154.1;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.164.176:*, 194.212.154.1:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60912: (8.33333%)&lt;BR/&gt; 53296: (8.33333%)&lt;BR/&gt; 50455: (8.33333%)&lt;BR/&gt; 50440: (8.33333%)&gt;];
}
715--3296[label="0.5;3pkt 3fpkt"];
715--5208[label="0.166667;1pkt 1fpkt"];
715--7608[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.154.1" dst_port="80" src_ip="32.136.164.176"/>
    </slice>
    <from sec="1144127545" usec="0"/>
    <to sec="1144127627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.193.112"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.183.198.112"/>
    </slice>
    <from sec="1144126903" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.163.19.114"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.169.184.114"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.120.239.115"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.144.26.116"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_620{
style=filled;
color=gray75;
1175[label="210.169.154.116;s;2pkt 2fpkt", shape=diamond, color=yellow];
4714[label="210.169.154.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7259[label="210.169.154.116;2pkt 2fpkt", shape=invtriangle, color=brown];
9003[label="210.169.154.116;2pkt 2fpkt", shape=invhouse, color=bisque];
stat620[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.169.154.116:80, 161.223.54.129:2135}[50%]&lt;BR/&gt;{210.169.154.116:80, 161.223.54.129:2136}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2136: (28.5714%)&lt;BR/&gt; 2135: (21.4286%)&gt;];
}
1175--1176[label="1;2pkt 2fpkt"];
1175--4714[label="1;1pkt 1fpkt"];
1175--7259[label="1;2pkt 2fpkt"];
1175--9003[label="1;2pkt 2fpkt"];
4714--7259[label="1;1pkt 1fpkt"];
4714--9003[label="1;1pkt 1fpkt"];
7259--9003[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.54.129" dst_port="2136" src_ip="210.169.154.116" src_port="80"/>
      <filter dst_ip="161.223.54.129" dst_port="2135" src_ip="210.169.154.116" src_port="80"/>
    </slice>
    <from sec="1144126891" usec="0"/>
    <to sec="1144127426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.239.28.117"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144126890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.90.44.120"/>
    </slice>
    <from sec="1144126824" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.180.77.121"/>
    </slice>
    <from sec="1144127454" usec="0"/>
    <to sec="1144127504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.135.121"/>
    </slice>
    <from sec="1144126829" usec="0"/>
    <to sec="1144127268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.40.198.121"/>
    </slice>
    <from sec="1144127505" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.236.225.121"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.180.23.122"/>
    </slice>
    <from sec="1144127212" usec="0"/>
    <to sec="1144127245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
1182[label="132.19.106.122;s;54pkt 54fpkt", shape=diamond, color=yellow];
2845[label="132.19.106.122;s;52pkt 52fpkt", shape=hexagon, color=black];
4756[label="132.19.106.122;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7292[label="132.19.106.122;53pkt 53fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.106.122:*, 203.204.4.50:80}[98.1481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1302: (0.943396%)&lt;BR/&gt; 1301: (0.943396%)&lt;BR/&gt; 1300: (0.943396%)&lt;BR/&gt; 1299: (0.943396%)&gt;];
}
1182--2845[label="1;52pkt 52fpkt"];
1182--4756[label="1;53pkt 53fpkt"];
1182--7292[label="1;53pkt 53fpkt"];
2845--4756[label="0.980769;51pkt 51fpkt"];
2845--7292[label="0.980769;51pkt 51fpkt"];
4756--7292[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="203.204.4.50" dst_port="80" src_ip="132.19.106.122"/>
    </slice>
    <from sec="1144126925" usec="0"/>
    <to sec="1144127151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
269[label="128.28.244.123;s;10pkt 10fpkt", shape=diamond, color=yellow];
1187[label="35.195.179.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
1521[label="35.193.70.252;d;3pkt 3fpkt", shape=diamond, color=yellow];
2981[label="35.195.179.78;d;1pkt 1fpkt", shape=hexagon, color=black];
3175[label="128.28.244.123;s;10pkt 10fpkt", shape=hexagon, color=black];
4766[label="128.28.244.123;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7301[label="128.28.244.123;11pkt 11fpkt", shape=invtriangle, color=brown];
9029[label="128.28.244.123;10pkt 10fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.244.123:*, 196.6.222.56:80}[27.2727%]&lt;BR/&gt;{128.28.244.123:80, 35.193.70.252:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1387: (6.14035%)&lt;BR/&gt; 65481: (5.26316%)&lt;BR/&gt; 57033: (5.26316%)&lt;BR/&gt; 54217: (5.26316%)&gt;];
}
269--1187[label="1;1pkt 1fpkt"];
269--1521[label="1;3pkt 3fpkt"];
269--2981[label="1;1pkt 1fpkt"];
269--3175[label="1;10pkt 10fpkt"];
269--3288[label="0.2;2pkt 2fpkt"];
269--3292[label="0.1;1pkt 1fpkt"];
269--3303[label="0.1;1pkt 1fpkt"];
269--4766[label="1;10pkt 10fpkt"];
269--7301[label="1;10pkt 10fpkt"];
269--9029[label="0.9;9pkt 9fpkt"];
1187--2981[label="1;1pkt 1fpkt"];
1187--3175[label="1;1pkt 1fpkt"];
1187--3292[label="1;1pkt 1fpkt"];
1187--3303[label="1;1pkt 1fpkt"];
1187--4766[label="1;1pkt 1fpkt"];
1187--7301[label="1;1pkt 1fpkt"];
1187--9029[label="1;1pkt 1fpkt"];
1521--3175[label="1;3pkt 3fpkt"];
1521--3288[label="0.333333;1pkt 1fpkt"];
1521--4766[label="1;3pkt 3fpkt"];
1521--7301[label="1;3pkt 3fpkt"];
1521--9029[label="1;3pkt 3fpkt"];
2981--3175[label="1;1pkt 1fpkt"];
2981--3292[label="1;1pkt 1fpkt"];
2981--3303[label="1;1pkt 1fpkt"];
2981--4766[label="1;1pkt 1fpkt"];
2981--7301[label="1;1pkt 1fpkt"];
2981--9029[label="1;1pkt 1fpkt"];
3175--3288[label="0.2;2pkt 2fpkt"];
3175--3292[label="0.1;1pkt 1fpkt"];
3175--3303[label="0.1;1pkt 1fpkt"];
3175--4766[label="1;10pkt 10fpkt"];
3175--7301[label="1;10pkt 10fpkt"];
3175--9029[label="0.9;9pkt 9fpkt"];
4766--7301[label="1;11pkt 11fpkt"];
4766--9029[label="1;10pkt 10fpkt"];
7301--9029[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="35.193.70.252" src_ip="128.28.244.123" src_port="80"/>
      <filter dst_ip="196.6.222.56" dst_port="80" src_ip="128.28.244.123"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.59.66.125"/>
    </slice>
    <from sec="1144126916" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.203.163.127"/>
    </slice>
    <from sec="1144127347" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.162.3.128"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.171.55.129"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.86.193.129"/>
    </slice>
    <from sec="1144127621" usec="0"/>
    <to sec="1144127644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.77.67.130"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.91.92.130"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00835,2.28945,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
839[label="128.202.100.242;d;47pkt 47fpkt", shape=diamond, color=yellow];
924[label="209.113.200.23;s;1959pkt 1959fpkt", shape=diamond, color=yellow];
2923[label="209.113.200.23;s;1512pkt 1512fpkt", shape=hexagon, color=black];
3648[label="209.113.200.23;2124pkt 2124fpkt", shape=pentagon, color=darkviolet];
3811[label="32.136.166.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8597[label="32.136.166.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.113.200.23:3457, *:1434}[97.8812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3457: (49.5748%)&lt;BR/&gt; 1434: (49.5748%)&lt;BR/&gt; 80: (0.42523%)&lt;BR/&gt; 50022: (0.0265769%)&lt;BR/&gt; 59596: (0.00885897%)&gt;];
}
839--924[label="0.0212766;1pkt 1fpkt"];
839--3296[label="0.0212766;1pkt 1fpkt"];
839--3648[label="0.0212766;1pkt 1fpkt"];
839--3811[label="1;1pkt 1fpkt"];
839--4851[label="0.0425532;2pkt 2fpkt"];
839--5196[label="0.0555556;1pkt 1fpkt"];
839--7602[label="0.0555556;1pkt 1fpkt"];
839--8597[label="1;1pkt 1fpkt"];
839--9222[label="0.0555556;1pkt 1fpkt"];
924--2923[label="1;1512pkt 1512fpkt"];
924--3648[label="0.99949;1958pkt 1958fpkt"];
2923--3648[label="0.999339;1511pkt 1511fpkt"];
3811--8597[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.113.200.23" src_port="3457"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
651[label="83.178.183.131;s;5pkt 5fpkt", shape=diamond, color=yellow];
999[label="147.13.37.115;d;4pkt 4fpkt", shape=diamond, color=yellow];
4854[label="83.178.183.131;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7365[label="83.178.183.131;4pkt 4fpkt", shape=invtriangle, color=brown];
9071[label="83.178.183.131;4pkt 4fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.178.183.131:0, 147.13.37.115:0}[40%]&lt;BR/&gt;{83.178.183.131:1030, 147.13.42.193:161}[20%]&lt;BR/&gt;{83.178.183.131:1723, 147.13.37.115:2226}[20%]&lt;BR/&gt;{83.178.183.131:1723, 147.13.37.115:2977}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (47.619%)&lt;BR/&gt; 1723: (23.8095%)&lt;BR/&gt; 2977: (11.9048%)&lt;BR/&gt; 2226: (11.9048%)&lt;BR/&gt; 1030: (2.38095%)&gt;];
}
651--999[label="1;4pkt 4fpkt"];
651--4854[label="1;4pkt 4fpkt"];
651--7365[label="1;4pkt 4fpkt"];
651--9071[label="1;4pkt 4fpkt"];
999--4854[label="1;4pkt 4fpkt"];
999--7365[label="1;4pkt 4fpkt"];
999--9071[label="1;4pkt 4fpkt"];
4854--7365[label="1;4pkt 4fpkt"];
4854--9071[label="1;4pkt 4fpkt"];
7365--9071[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.37.115" dst_port="2977" src_ip="83.178.183.131" src_port="1723"/>
      <filter dst_ip="147.13.37.115" dst_port="2226" src_ip="83.178.183.131" src_port="1723"/>
      <filter dst_ip="147.13.37.115" src_ip="83.178.183.131"/>
      <filter dst_ip="147.13.42.193" dst_port="161" src_ip="83.178.183.131" src_port="1030"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_640{
style=filled;
color=gray75;
796[label="194.212.147.221;d;2795pkt 2795fpkt", shape=diamond, color=yellow];
1741[label="38.63.203.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
4855[label="38.63.203.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat640[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.212.147.221:12808}[91.3059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12808: (45.6592%)&lt;BR/&gt; 0: (4.32297%)&lt;BR/&gt; 32459: (1.64344%)&lt;BR/&gt; 11038: (1.16113%)&lt;BR/&gt; 6881: (0.392997%)&gt;];
}
796--1741[label="1;2pkt 2fpkt"];
796--4779[label="0.0833333;1pkt 1fpkt"];
796--4855[label="1;2pkt 2fpkt"];
796--5393[label="0.037037;1pkt 1fpkt"];
796--5830[label="0.075;3pkt 3fpkt"];
796--7311[label="0.0833333;1pkt 1fpkt"];
796--7738[label="0.037037;1pkt 1fpkt"];
796--8048[label="0.0769231;3pkt 3fpkt"];
796--9037[label="0.0833333;1pkt 1fpkt"];
796--9314[label="0.037037;1pkt 1fpkt"];
796--9513[label="0.0769231;3pkt 3fpkt"];
1741--4855[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.147.221" dst_port="12808"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
1294[label="132.19.98.132;s;582pkt 582fpkt", shape=diamond, color=yellow];
4862[label="132.19.98.132;635pkt 635fpkt", shape=pentagon, color=darkviolet];
7370[label="132.19.98.132;635pkt 635fpkt", shape=invtriangle, color=brown];
9074[label="132.19.98.132;635pkt 635fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.98.132:42102, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42102: (50%)&lt;BR/&gt; 1205: (0.241255%)&lt;BR/&gt; 61997: (0.160836%)&lt;BR/&gt; 4452: (0.160836%)&lt;BR/&gt; 4384: (0.160836%)&gt;];
}
1294--4862[label="0.998282;581pkt 581fpkt"];
1294--7370[label="0.998282;581pkt 581fpkt"];
1294--9074[label="0.998282;581pkt 581fpkt"];
4862--7370[label="1;635pkt 635fpkt"];
4862--9074[label="1;635pkt 635fpkt"];
7370--9074[label="1;635pkt 635fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.98.132" src_port="42102"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
598[label="210.163.164.132;s;2pkt 2fpkt", shape=diamond, color=yellow];
920[label="161.223.157.13;d;2pkt 2fpkt", shape=diamond, color=yellow];
4866[label="210.163.164.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7374[label="210.163.164.132;1pkt 1fpkt", shape=invtriangle, color=brown];
9076[label="210.163.164.132;2pkt 2fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.163.164.132:21964, 161.223.157.13:1131}[50%]&lt;BR/&gt;{210.163.164.132:59377, 161.223.157.13:1130}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59377: (31.25%)&lt;BR/&gt; 1130: (31.25%)&lt;BR/&gt; 21964: (18.75%)&lt;BR/&gt; 1131: (18.75%)&gt;];
}
598--920[label="1;2pkt 2fpkt"];
598--4866[label="1;1pkt 1fpkt"];
598--7374[label="1;1pkt 1fpkt"];
598--9076[label="1;2pkt 2fpkt"];
920--4866[label="1;1pkt 1fpkt"];
920--7374[label="1;1pkt 1fpkt"];
920--9076[label="1;2pkt 2fpkt"];
4866--7374[label="1;1pkt 1fpkt"];
4866--9076[label="1;1pkt 1fpkt"];
7374--9076[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.157.13" dst_port="1130" src_ip="210.163.164.132" src_port="59377"/>
      <filter dst_ip="161.223.157.13" dst_port="1131" src_ip="210.163.164.132" src_port="21964"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.28.250.132"/>
    </slice>
    <from sec="1144126920" usec="0"/>
    <to sec="1144127027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.54.150.133"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.127.210.133"/>
    </slice>
    <from sec="1144126868" usec="0"/>
    <to sec="1144127420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.93.59.134"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.155.83.134"/>
    </slice>
    <from sec="1144127451" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.28.115.135"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.100.38.136"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.248.49.136"/>
    </slice>
    <from sec="1144127317" usec="0"/>
    <to sec="1144127644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.98.136"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
650[label="147.13.231.15;d;178pkt 178fpkt", shape=diamond, color=yellow];
4571[label="213.116.200.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4927[label="82.16.151.136;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6290[label="208.62.220.255;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7162[label="213.116.200.102;1pkt 1fpkt", shape=invtriangle, color=brown];
7416[label="82.16.151.136;3pkt 3fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 147.13.231.15:*}[25.6983%]&lt;BR/&gt;{*:4672, 147.13.231.15:23255}[24.581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23255: (13.1016%)&lt;BR/&gt; 4662: (12.2995%)&lt;BR/&gt; 4672: (11.7647%)&lt;BR/&gt; 1059: (6.95187%)&lt;BR/&gt; 80: (4.81283%)&gt;];
}
650--4435[label="1;1pkt 1fpkt"];
650--4571[label="1;1pkt 1fpkt"];
650--4927[label="0.666667;2pkt 2fpkt"];
650--6290[label="1;1pkt 1fpkt"];
650--7071[label="1;1pkt 1fpkt"];
650--7162[label="1;1pkt 1fpkt"];
650--7416[label="0.666667;2pkt 2fpkt"];
4571--7162[label="1;1pkt 1fpkt"];
4927--7416[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.231.15" src_port="4662"/>
      <filter dst_ip="147.13.231.15" dst_port="23255" src_port="4672"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.136.179.136"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.226.223.136"/>
    </slice>
    <from sec="1144126818" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
2207[label="195.199.88.137;s;2pkt 2fpkt", shape=diamond, color=yellow];
4938[label="195.199.88.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7424[label="195.199.88.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.199.88.137:22819, 147.13.228.63:6669}[50%]&lt;BR/&gt;{195.199.88.137:22830, 147.13.228.63:6666}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22830: (37.5%)&lt;BR/&gt; 6666: (37.5%)&lt;BR/&gt; 22819: (12.5%)&lt;BR/&gt; 6669: (12.5%)&gt;];
}
2207--3001[label="1;2pkt 2fpkt"];
2207--4938[label="1;1pkt 1fpkt"];
2207--7424[label="1;1pkt 1fpkt"];
2207--9106[label="1;1pkt 1fpkt"];
4938--7424[label="1;1pkt 1fpkt"];
4938--9106[label="1;1pkt 1fpkt"];
7424--9106[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="195.199.88.137" src_port="22830"/>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="195.199.88.137" src_port="22819"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.137.138"/>
    </slice>
    <from sec="1144126822" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.170.224.138"/>
    </slice>
    <from sec="1144126835" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
575[label="128.202.65.139;s;3pkt 3fpkt", shape=diamond, color=yellow];
4962[label="128.202.65.139;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7439[label="128.202.65.139;3pkt 3fpkt", shape=invtriangle, color=brown];
9117[label="128.202.65.139;3pkt 3fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.65.139:1596, 220.118.48.164:110}[25%]&lt;BR/&gt;{128.202.65.139:1613, 220.118.48.164:110}[25%]&lt;BR/&gt;{128.202.65.139:1591, 197.16.115.211:80}[25%]&lt;BR/&gt;{128.202.65.139:1594, 197.16.115.211:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 1594: (16.6667%)&lt;BR/&gt; 1591: (16.6667%)&lt;BR/&gt; 110: (16.6667%)&lt;BR/&gt; 1613: (12.5%)&gt;];
}
575--4962[label="0.666667;2pkt 2fpkt"];
575--7439[label="0.666667;2pkt 2fpkt"];
575--9117[label="0.666667;2pkt 2fpkt"];
4962--7439[label="1;3pkt 3fpkt"];
4962--9117[label="1;3pkt 3fpkt"];
7439--9117[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="197.16.115.211" dst_port="80" src_ip="128.202.65.139" src_port="1594"/>
      <filter dst_ip="197.16.115.211" dst_port="80" src_ip="128.202.65.139" src_port="1591"/>
      <filter dst_ip="220.118.48.164" dst_port="110" src_ip="128.202.65.139" src_port="1613"/>
      <filter dst_ip="220.118.48.164" dst_port="110" src_ip="128.202.65.139" src_port="1596"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.158.216.139"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
1836[label="147.13.228.88;d;569pkt 569fpkt", shape=diamond, color=yellow];
2413[label="34.92.43.239;s;2pkt 2fpkt", shape=diamond, color=yellow];
4417[label="208.74.27.87;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4971[label="83.112.203.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4979[label="213.97.99.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5199[label="214.208.216.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5463[label="82.13.167.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6152[label="34.92.43.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7058[label="208.74.27.87;5pkt 5fpkt", shape=invtriangle, color=brown];
7445[label="83.112.203.139;1pkt 1fpkt", shape=invtriangle, color=brown];
7451[label="213.97.99.140;1pkt 1fpkt", shape=invtriangle, color=brown];
8280[label="34.92.43.239;1pkt 1fpkt", shape=invtriangle, color=brown];
8875[label="208.74.27.87;5pkt 5fpkt", shape=invhouse, color=bisque];
9121[label="83.112.203.139;2pkt 2fpkt", shape=invhouse, color=bisque];
9339[label="82.13.167.179;1pkt 1fpkt", shape=invhouse, color=bisque];
9670[label="34.92.43.239;1pkt 1fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.13.228.88:11080}[34.5009%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11080: (16.5552%)&lt;BR/&gt; 80: (5.10033%)&lt;BR/&gt; 0: (2.17391%)&lt;BR/&gt; 28425: (1.58863%)&lt;BR/&gt; 16881: (1.50502%)&gt;];
}
1836--2413[label="1;2pkt 2fpkt"];
1836--3288[label="0.00175747;1pkt 1fpkt"];
1836--3292[label="0.00175747;1pkt 1fpkt"];
1836--3303[label="0.00175747;1pkt 1fpkt"];
1836--4417[label="0.6;3pkt 3fpkt"];
1836--4971[label="1;1pkt 1fpkt"];
1836--4979[label="1;1pkt 1fpkt"];
1836--5199[label="1;1pkt 1fpkt"];
1836--5463[label="1;1pkt 1fpkt"];
1836--6152[label="1;1pkt 1fpkt"];
1836--6254[label="0.75;24pkt 24fpkt"];
1836--7058[label="0.6;3pkt 3fpkt"];
1836--7445[label="1;1pkt 1fpkt"];
1836--7451[label="1;1pkt 1fpkt"];
1836--8280[label="1;1pkt 1fpkt"];
1836--8356[label="0.75;24pkt 24fpkt"];
1836--8875[label="0.6;3pkt 3fpkt"];
1836--9121[label="1;2pkt 2fpkt"];
1836--9339[label="1;1pkt 1fpkt"];
1836--9670[label="1;1pkt 1fpkt"];
2413--6152[label="1;1pkt 1fpkt"];
2413--8280[label="1;1pkt 1fpkt"];
2413--9670[label="1;1pkt 1fpkt"];
4417--7058[label="1;5pkt 5fpkt"];
4417--8875[label="1;5pkt 5fpkt"];
4971--7445[label="1;1pkt 1fpkt"];
4971--9121[label="1;1pkt 1fpkt"];
4979--7451[label="1;1pkt 1fpkt"];
5463--9339[label="1;1pkt 1fpkt"];
6152--8280[label="1;1pkt 1fpkt"];
6152--9670[label="1;1pkt 1fpkt"];
7058--8875[label="1;5pkt 5fpkt"];
7445--9121[label="1;1pkt 1fpkt"];
8280--9670[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.88" dst_port="11080"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.157.195.140"/>
    </slice>
    <from sec="1144127108" usec="0"/>
    <to sec="1144127126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.28.217.140"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.162.46.141"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
1698[label="128.28.64.141;s;22pkt 22fpkt", shape=diamond, color=yellow];
4995[label="128.28.64.141;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7463[label="128.28.64.141;23pkt 23fpkt", shape=invtriangle, color=brown];
9130[label="128.28.64.141;23pkt 23fpkt", shape=invhouse, color=bisque];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.64.141:*, 218.139.89.33:80}[66.6667%]&lt;BR/&gt;{128.28.64.141:*, 214.59.112.238:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1294: (2.1978%)&lt;BR/&gt; 1293: (2.1978%)&lt;BR/&gt; 1288: (2.1978%)&lt;BR/&gt; 1287: (2.1978%)&gt;];
}
1698--4995[label="0.954545;21pkt 21fpkt"];
1698--7463[label="0.954545;21pkt 21fpkt"];
1698--9130[label="0.954545;21pkt 21fpkt"];
4995--7463[label="1;23pkt 23fpkt"];
4995--9130[label="1;23pkt 23fpkt"];
7463--9130[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="218.139.89.33" dst_port="80" src_ip="128.28.64.141"/>
      <filter dst_ip="214.59.112.238" dst_port="80" src_ip="128.28.64.141"/>
    </slice>
    <from sec="1144126822" usec="0"/>
    <to sec="1144127385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.88.18.142"/>
    </slice>
    <from sec="1144126913" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
252[label="194.212.147.142;s;30pkt 30fpkt", shape=diamond, color=yellow];
820[label="219.45.76.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
5003[label="194.212.147.142;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7471[label="194.212.147.142;30pkt 30fpkt", shape=invtriangle, color=brown];
9136[label="194.212.147.142;30pkt 30fpkt", shape=invhouse, color=bisque];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.147.142:2411, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2411: (50%)&lt;BR/&gt; 43252: (2.04918%)&lt;BR/&gt; 4676: (2.04918%)&lt;BR/&gt; 65167: (1.63934%)&lt;BR/&gt; 64999: (1.63934%)&gt;];
}
252--820[label="1;2pkt 2fpkt"];
252--5003[label="0.966667;29pkt 29fpkt"];
252--7471[label="0.966667;29pkt 29fpkt"];
252--9136[label="0.966667;29pkt 29fpkt"];
820--5003[label="1;2pkt 2fpkt"];
820--7471[label="1;2pkt 2fpkt"];
820--9136[label="1;2pkt 2fpkt"];
5003--7471[label="1;30pkt 30fpkt"];
5003--9136[label="1;30pkt 30fpkt"];
7471--9136[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.147.142" src_port="2411"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
2363[label="132.19.69.154;s;50pkt 50fpkt", shape=diamond, color=yellow];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.69.154:53, *:*}[66%]&lt;BR/&gt;{132.19.69.154:*, *:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43%)&lt;BR/&gt; 1253: (8%)&lt;BR/&gt; 25: (8%)&lt;BR/&gt; 32772: (2%)&lt;BR/&gt; 57600: (1%)&gt;];
}
2363--2474[label="0.333333;1pkt 1fpkt"];
2363--2564[label="0.02;1pkt 1fpkt"];
2363--2647[label="0.333333;1pkt 1fpkt"];
2363--3287[label="0.02;1pkt 1fpkt"];
2363--3288[label="0.02;1pkt 1fpkt"];
2363--3290[label="0.06;3pkt 3fpkt"];
2363--3295[label="0.04;2pkt 2fpkt"];
2363--3302[label="0.08;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.69.154" src_port="53"/>
      <filter dst_port="53" src_ip="132.19.69.154"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_668{
style=filled;
color=gray75;
848[label="216.69.171.209;s;171pkt 171fpkt", shape=diamond, color=yellow];
1983[label="132.19.137.66;d;118pkt 118fpkt", shape=diamond, color=yellow];
3145[label="132.19.137.66;d;93pkt 93fpkt", shape=hexagon, color=black];
4641[label="210.107.158.108;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5338[label="39.155.51.168;51pkt 51fpkt", shape=pentagon, color=darkviolet];
7705[label="39.155.51.168;50pkt 50fpkt", shape=invtriangle, color=brown];
9293[label="39.155.51.168;51pkt 51fpkt", shape=invhouse, color=bisque];
stat668[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.69.171.209:443, *:*}[36.6071%]&lt;BR/&gt;{*:80, 132.19.137.66:*}[34.8214%]&lt;BR/&gt;{216.69.171.209:*, 195.89.105.215:*}[22.3214%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.5949%)&lt;BR/&gt; 443: (11.4051%)&lt;BR/&gt; 1806: (0.456204%)&lt;BR/&gt; 1805: (0.456204%)&lt;BR/&gt; 58127: (0.364964%)&gt;];
}
848--858[label="0.0233918;4pkt 4fpkt"];
848--1074[label="0.05;3pkt 3fpkt"];
848--1844[label="0.0645161;2pkt 2fpkt"];
848--1983[label="0.0169492;2pkt 2fpkt"];
848--2512[label="0.105263;2pkt 2fpkt"];
848--3096[label="1;145pkt 145fpkt"];
848--3145[label="0.0215054;2pkt 2fpkt"];
848--3288[label="0.0292398;5pkt 5fpkt"];
848--3292[label="0.0175439;3pkt 3fpkt"];
848--3303[label="0.0175439;3pkt 3fpkt"];
848--5819[label="1;171pkt 171fpkt"];
1983--3096[label="0.0169492;2pkt 2fpkt"];
1983--3145[label="1;93pkt 93fpkt"];
1983--3288[label="0.0169492;2pkt 2fpkt"];
1983--3292[label="0.0508475;6pkt 6fpkt"];
1983--3303[label="0.0508475;6pkt 6fpkt"];
1983--3855[label="0.037037;1pkt 1fpkt"];
1983--4641[label="1;14pkt 14fpkt"];
1983--5008[label="0.4;2pkt 2fpkt"];
1983--5338[label="0.0392157;2pkt 2fpkt"];
1983--5819[label="0.0169492;2pkt 2fpkt"];
1983--7476[label="0.4;2pkt 2fpkt"];
1983--7705[label="0.04;2pkt 2fpkt"];
1983--9140[label="0.333333;2pkt 2fpkt"];
1983--9293[label="0.0392157;2pkt 2fpkt"];
3145--3288[label="0.0215054;2pkt 2fpkt"];
3145--3292[label="0.0322581;3pkt 3fpkt"];
3145--3303[label="0.0322581;3pkt 3fpkt"];
3145--3855[label="0.037037;1pkt 1fpkt"];
3145--4641[label="1;14pkt 14fpkt"];
3145--5008[label="0.4;2pkt 2fpkt"];
3145--5338[label="0.0392157;2pkt 2fpkt"];
3145--5819[label="0.0215054;2pkt 2fpkt"];
3145--7476[label="0.4;2pkt 2fpkt"];
3145--7705[label="0.04;2pkt 2fpkt"];
3145--9140[label="0.333333;2pkt 2fpkt"];
3145--9293[label="0.0392157;2pkt 2fpkt"];
5338--7705[label="1;50pkt 50fpkt"];
5338--9293[label="1;51pkt 51fpkt"];
7705--9293[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" src_ip="216.69.171.209"/>
      <filter src_ip="216.69.171.209" src_port="443"/>
      <filter dst_ip="132.19.137.66" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.164.80.143"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.121.143"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144126870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.72.165.143"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.202.143"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.113.235.143"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
463[label="195.89.116.144;s;2pkt 2fpkt", shape=diamond, color=yellow];
705[label="216.242.174.28;d;2pkt 2fpkt", shape=diamond, color=yellow];
5028[label="195.89.116.144;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7491[label="195.89.116.144;2pkt 2fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.116.144:3568, 216.242.174.28:443}[50%]&lt;BR/&gt;{195.89.116.144:4825, 216.242.174.28:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4825: (25%)&lt;BR/&gt; 3568: (25%)&gt;];
}
463--705[label="1;2pkt 2fpkt"];
463--5028[label="1;2pkt 2fpkt"];
463--7491[label="1;2pkt 2fpkt"];
705--5028[label="1;2pkt 2fpkt"];
705--7491[label="1;2pkt 2fpkt"];
5028--7491[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.242.174.28" dst_port="443" src_ip="195.89.116.144" src_port="4825"/>
      <filter dst_ip="216.242.174.28" dst_port="443" src_ip="195.89.116.144" src_port="3568"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144126886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.178.168.145"/>
    </slice>
    <from sec="1144127277" usec="0"/>
    <to sec="1144127296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.206.145"/>
    </slice>
    <from sec="1144126978" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.232.42.146"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.157.198.146"/>
    </slice>
    <from sec="1144127236" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.222.146"/>
    </slice>
    <from sec="1144127184" usec="0"/>
    <to sec="1144127385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.169.27.147"/>
    </slice>
    <from sec="1144126823" usec="0"/>
    <to sec="1144127689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.143.2.148"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
5018[label="132.19.144.143;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.144.143:*, 138.166.39.1:80}[81.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49226: (1.85185%)&lt;BR/&gt; 49215: (1.85185%)&lt;BR/&gt; 49214: (1.85185%)&lt;BR/&gt; 49213: (1.85185%)&gt;];
}
5018--7484[label="1;27pkt 27fpkt"];
5018--9146[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="138.166.39.1" dst_port="80" src_ip="132.19.144.143"/>
    </slice>
    <from sec="1144126900" usec="0"/>
    <to sec="1144127338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.74.135.148"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
2605[label="132.19.69.1;d;89pkt 89fpkt", shape=diamond, color=yellow];
4271[label="219.41.128.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5078[label="208.116.224.148;36pkt 36fpkt", shape=pentagon, color=darkviolet];
7525[label="208.116.224.148;35pkt 35fpkt", shape=invtriangle, color=brown];
9173[label="208.116.224.148;36pkt 36fpkt", shape=invhouse, color=bisque];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.116.224.148:80, 132.19.69.1:*}[40.4494%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64012: (0.995025%)&lt;BR/&gt; 63116: (0.995025%)&lt;BR/&gt; 63107: (0.995025%)&lt;BR/&gt; 63095: (0.995025%)&gt;];
}
2605--3292[label="0.0337079;3pkt 3fpkt"];
2605--3303[label="0.0337079;3pkt 3fpkt"];
2605--4271[label="1;5pkt 5fpkt"];
2605--5078[label="1;36pkt 36fpkt"];
2605--7525[label="1;35pkt 35fpkt"];
2605--9173[label="1;36pkt 36fpkt"];
5078--7525[label="1;35pkt 35fpkt"];
5078--9173[label="1;36pkt 36fpkt"];
7525--9173[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.69.1" src_ip="208.116.224.148" src_port="80"/>
    </slice>
    <from sec="1144126831" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
1177[label="161.223.54.129;s;53pkt 53fpkt", shape=diamond, color=yellow];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.54.129:*, 36.21.75.73:80}[41.5094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2235: (0.943396%)&lt;BR/&gt; 2234: (0.943396%)&lt;BR/&gt; 2233: (0.943396%)&lt;BR/&gt; 2232: (0.943396%)&gt;];
}
1177--2218[label="0.415094;22pkt 22fpkt"];
1177--2387[label="0.0566038;3pkt 3fpkt"];
1177--2883[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="36.21.75.73" dst_port="80" src_ip="161.223.54.129"/>
    </slice>
    <from sec="1144126891" usec="0"/>
    <to sec="1144127426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.122.97.149"/>
    </slice>
    <from sec="1144127061" usec="0"/>
    <to sec="1144127260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.162.110.149"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.136.179.149"/>
    </slice>
    <from sec="1144126839" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.30.188.149"/>
    </slice>
    <from sec="1144127040" usec="0"/>
    <to sec="1144127077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.72.3.150"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.158.150"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
397[label="214.202.182.150;s;2038pkt 2038fpkt", shape=diamond, color=yellow];
953[label="85.83.131.176;s;272pkt 272fpkt", shape=diamond, color=yellow];
1657[label="49.74.236.62;s;169pkt 169fpkt", shape=diamond, color=yellow];
3565[label="99.13.131.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4008[label="208.56.83.55;87pkt 87fpkt", shape=pentagon, color=darkviolet];
4101[label="49.74.236.62;200pkt 200fpkt", shape=pentagon, color=darkviolet];
4252[label="211.214.57.74;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5988[label="208.56.82.224;89pkt 89fpkt", shape=pentagon, color=darkviolet];
6768[label="208.56.83.55;86pkt 86fpkt", shape=invtriangle, color=brown];
6830[label="49.74.236.62;200pkt 200fpkt", shape=invtriangle, color=brown];
6938[label="211.214.57.74;24pkt 24fpkt", shape=invtriangle, color=brown];
8161[label="208.56.82.224;89pkt 89fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.202.182.150:*, *:3128}[28.7611%]&lt;BR/&gt;{214.202.182.150:*, 161.223.8.63:*}[25.7006%]&lt;BR/&gt;{214.202.182.150:*, 161.223.8.51:*}[24.7788%]&lt;BR/&gt;{214.202.182.150:*, 161.223.8.62:*}[24.6681%]&lt;BR/&gt;{214.202.182.150:*, *:3127}[24.0413%]&lt;BR/&gt;{*:*, 161.223.8.62:3127}[23.4882%]&lt;BR/&gt;{214.202.182.150:*, *:3124}[22.3451%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (18.6547%)&lt;BR/&gt; 3128: (17.5564%)&lt;BR/&gt; 3124: (13.8194%)&lt;BR/&gt; 62407: (0.076266%)&lt;BR/&gt; 61887: (0.0610128%)&gt;];
}
397--783[label="0.245829;501pkt 501fpkt"];
397--1219[label="0.191298;255pkt 255fpkt"];
397--2901[label="0.251558;323pkt 323fpkt"];
397--2924[label="1;2038pkt 2038fpkt"];
397--5103[label="0.999509;2037pkt 2037fpkt"];
953--1219[label="0.213235;58pkt 58fpkt"];
953--5437[label="1;272pkt 272fpkt"];
953--7766[label="0.996324;271pkt 271fpkt"];
953--9330[label="0.996324;271pkt 271fpkt"];
1657--4101[label="0.994083;168pkt 168fpkt"];
1657--6830[label="0.994083;168pkt 168fpkt"];
3565--6466[label="1;1pkt 1fpkt"];
4008--6768[label="1;86pkt 86fpkt"];
4008--8685[label="1;86pkt 86fpkt"];
4101--6830[label="1;200pkt 200fpkt"];
4252--6938[label="1;23pkt 23fpkt"];
4252--8796[label="1;23pkt 23fpkt"];
5988--8161[label="1;89pkt 89fpkt"];
5988--9589[label="1;89pkt 89fpkt"];
6768--8685[label="1;86pkt 86fpkt"];
6938--8796[label="1;23pkt 23fpkt"];
8161--9589[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.8.62" src_ip="214.202.182.150"/>
      <filter dst_ip="161.223.8.63" src_ip="214.202.182.150"/>
      <filter dst_ip="161.223.8.51" src_ip="214.202.182.150"/>
      <filter dst_port="3128" src_ip="214.202.182.150"/>
      <filter dst_port="3127" src_ip="214.202.182.150"/>
      <filter dst_port="3124" src_ip="214.202.182.150"/>
      <filter dst_ip="161.223.8.62" dst_port="3127"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
938[label="132.19.195.150;s;226pkt 226fpkt", shape=diamond, color=yellow];
5105[label="132.19.195.150;270pkt 270fpkt", shape=pentagon, color=darkviolet];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.195.150:25, *:*}[38.7454%]&lt;BR/&gt;{132.19.195.150:*, *:113}[36.9004%]&lt;BR/&gt;{132.19.195.150:*, *:25}[23.6162%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.4516%)&lt;BR/&gt; 113: (18.5484%)&lt;BR/&gt; 2434: (0.604839%)&lt;BR/&gt; 3074: (0.504032%)&lt;BR/&gt; 4362: (0.403226%)&gt;];
}
938--5105[label="0.995575;225pkt 225fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.195.150" src_port="25"/>
      <filter dst_port="113" src_ip="132.19.195.150"/>
      <filter dst_port="25" src_ip="132.19.195.150"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.96.148.151"/>
    </slice>
    <from sec="1144127685" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.26.191.151"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
1788[label="36.90.196.151;s;3pkt 3fpkt", shape=diamond, color=yellow];
2595[label="128.28.201.48;d;42pkt 42fpkt", shape=diamond, color=yellow];
3078[label="36.90.196.151;s;1pkt 1fpkt", shape=hexagon, color=black];
5117[label="36.90.196.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.28.201.48:80}[88.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7917%)&lt;BR/&gt; 49453: (3.125%)&lt;BR/&gt; 16080: (3.125%)&lt;BR/&gt; 52203: (2.08333%)&lt;BR/&gt; 38536: (2.08333%)&gt;];
}
1788--2595[label="0.333333;1pkt 1fpkt"];
1788--3078[label="1;1pkt 1fpkt"];
1788--5117[label="1;2pkt 2fpkt"];
2595--3296[label="0.0952381;4pkt 4fpkt"];
2595--3371[label="0.25;1pkt 1fpkt"];
2595--3372[label="0.0769231;1pkt 1fpkt"];
2595--3984[label="0.166667;1pkt 1fpkt"];
2595--4921[label="0.0238095;1pkt 1fpkt"];
2595--5117[label="0.5;1pkt 1fpkt"];
2595--6335[label="0.0769231;1pkt 1fpkt"];
2595--6751[label="0.166667;1pkt 1fpkt"];
2595--8414[label="0.0769231;1pkt 1fpkt"];
2595--8671[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.201.48" dst_port="80"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
1789[label="208.37.226.151;s;447pkt 447fpkt", shape=diamond, color=yellow];
5118[label="208.37.226.151;446pkt 446fpkt", shape=pentagon, color=darkviolet];
7545[label="208.37.226.151;447pkt 447fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.37.226.151:*, *:139}[54.3624%]&lt;BR/&gt;{208.37.226.151:*, *:445}[45.6376%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (27.1642%)&lt;BR/&gt; 445: (22.8358%)&lt;BR/&gt; 4441: (0.223881%)&lt;BR/&gt; 4434: (0.223881%)&lt;BR/&gt; 4427: (0.223881%)&gt;];
}
1789--5118[label="1;446pkt 446fpkt"];
1789--7545[label="1;447pkt 447fpkt"];
5118--7545[label="1;446pkt 446fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.37.226.151"/>
      <filter dst_port="445" src_ip="208.37.226.151"/>
    </slice>
    <from sec="1144127195" usec="0"/>
    <to sec="1144127252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45837,2.397,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
65[label="209.114.55.152s;57pkt 57fpkt", shape=rectangle, color=red];
5120[label="209.114.55.152;246pkt 246fpkt", shape=pentagon, color=darkviolet];
7547[label="209.114.55.152;247pkt 247fpkt", shape=invtriangle, color=brown];
9185[label="209.114.55.152;246pkt 246fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.114.55.152:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3772: (0.376884%)&lt;BR/&gt; 3770: (0.376884%)&lt;BR/&gt; 4997: (0.251256%)&lt;BR/&gt; 4996: (0.251256%)&gt;];
}
65--5120[label="1;57pkt 57fpkt"];
65--7547[label="1;57pkt 57fpkt"];
65--9185[label="1;57pkt 57fpkt"];
5120--7547[label="1;246pkt 246fpkt"];
5120--9185[label="1;246pkt 246fpkt"];
7547--9185[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.114.55.152"/>
    </slice>
    <from sec="1144127656" usec="0"/>
    <to sec="1144127683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
1871[label="132.19.98.132;d;381pkt 381fpkt", shape=diamond, color=yellow];
5131[label="213.125.175.152;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5963[label="213.125.181.221;46pkt 46fpkt", shape=pentagon, color=darkviolet];
8139[label="213.125.181.221;46pkt 46fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.98.132:42102}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42102: (50%)&lt;BR/&gt; 2781: (0.486381%)&lt;BR/&gt; 1959: (0.389105%)&lt;BR/&gt; 4971: (0.291829%)&lt;BR/&gt; 4790: (0.291829%)&gt;];
}
1871--5131[label="0.902439;37pkt 37fpkt"];
1871--5963[label="0.913043;42pkt 42fpkt"];
1871--8139[label="0.913043;42pkt 42fpkt"];
5963--8139[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.98.132" dst_port="42102"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.167.195.152"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.13.213.152"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.142.2.153"/>
    </slice>
    <from sec="1144127538" usec="0"/>
    <to sec="1144127649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.13.69.153"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.145.153"/>
    </slice>
    <from sec="1144126943" usec="0"/>
    <to sec="1144126981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.83.19.155"/>
    </slice>
    <from sec="1144127588" usec="0"/>
    <to sec="1144127611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
1312[label="161.223.82.53;d;123pkt 123fpkt", shape=diamond, color=yellow];
3187[label="161.223.82.53;d;112pkt 112fpkt", shape=hexagon, color=black];
3653[label="36.172.50.24;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4877[label="37.213.69.133;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7381[label="37.213.69.133;12pkt 12fpkt", shape=invtriangle, color=brown];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.223.82.53:25}[78.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6416%)&lt;BR/&gt; 65159: (0.358423%)&lt;BR/&gt; 64541: (0.358423%)&lt;BR/&gt; 63609: (0.358423%)&lt;BR/&gt; 62799: (0.358423%)&gt;];
}
1312--3187[label="1;112pkt 112fpkt"];
1312--4980[label="0.0588235;1pkt 1fpkt"];
1312--5182[label="0.0238095;1pkt 1fpkt"];
1312--6285[label="0.0909091;1pkt 1fpkt"];
1312--7452[label="0.0588235;1pkt 1fpkt"];
1312--7594[label="0.0238095;1pkt 1fpkt"];
1312--8381[label="0.0909091;1pkt 1fpkt"];
1312--9216[label="0.0232558;1pkt 1fpkt"];
1312--9740[label="0.0909091;1pkt 1fpkt"];
3187--4980[label="0.0588235;1pkt 1fpkt"];
3187--5182[label="0.0238095;1pkt 1fpkt"];
3187--6285[label="0.0909091;1pkt 1fpkt"];
3187--7452[label="0.0588235;1pkt 1fpkt"];
3187--7594[label="0.0238095;1pkt 1fpkt"];
3187--8381[label="0.0909091;1pkt 1fpkt"];
3187--9216[label="0.0232558;1pkt 1fpkt"];
3187--9740[label="0.0909091;1pkt 1fpkt"];
3653--6529[label="1;20pkt 20fpkt"];
3653--8533[label="1;20pkt 20fpkt"];
4877--7381[label="1;12pkt 12fpkt"];
4877--9080[label="1;11pkt 11fpkt"];
7381--9080[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.82.53" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.211.164.156"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.137.16.157"/>
    </slice>
    <from sec="1144127673" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.18.221.157"/>
    </slice>
    <from sec="1144127101" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.96.9.158"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.21.47.158"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.214.92.158"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
1694[label="210.226.98.193;d;166pkt 166fpkt", shape=diamond, color=yellow];
1934[label="210.226.98.194;d;108pkt 108fpkt", shape=diamond, color=yellow];
3492[label="164.23.206.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5215[label="164.23.144.159;157pkt 157fpkt", shape=pentagon, color=darkviolet];
6420[label="164.23.206.12;2pkt 2fpkt", shape=invtriangle, color=brown];
7614[label="164.23.144.159;157pkt 157fpkt", shape=invtriangle, color=brown];
9230[label="164.23.144.159;156pkt 156fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.144.159:*, *:*}[42.663%]&lt;BR/&gt;{*:*, 210.226.98.194:*}[29.3478%]&lt;BR/&gt;{*:*, 210.226.98.193:5050}[24.1848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (20.8835%)&lt;BR/&gt; 20: (9.63855%)&lt;BR/&gt; 23: (9.43775%)&lt;BR/&gt; 21: (8.96921%)&lt;BR/&gt; 0: (0.937082%)&gt;];
}
1694--1830[label="0.0114943;1pkt 1fpkt"];
1694--3031[label="0.0060241;1pkt 1fpkt"];
1694--3178[label="0.0114943;1pkt 1fpkt"];
1694--3748[label="0.142857;1pkt 1fpkt"];
1694--4066[label="0.289157;48pkt 48fpkt"];
1694--4122[label="0.0060241;1pkt 1fpkt"];
1694--4581[label="0.010989;1pkt 1fpkt"];
1694--4797[label="0.0060241;1pkt 1fpkt"];
1694--5215[label="0.121019;19pkt 19fpkt"];
1694--6801[label="0.289157;48pkt 48fpkt"];
1694--6845[label="0.0060241;1pkt 1fpkt"];
1694--7324[label="0.0060241;1pkt 1fpkt"];
1694--7614[label="0.121019;19pkt 19fpkt"];
1694--8736[label="0.0060241;1pkt 1fpkt"];
1694--9046[label="0.0060241;1pkt 1fpkt"];
1694--9230[label="0.121795;19pkt 19fpkt"];
1934--2192[label="0.00925926;1pkt 1fpkt"];
1934--3333[label="0.00925926;1pkt 1fpkt"];
1934--3492[label="1;1pkt 1fpkt"];
1934--4122[label="0.00925926;1pkt 1fpkt"];
1934--4797[label="0.00925926;1pkt 1fpkt"];
1934--5215[label="0.416667;45pkt 45fpkt"];
1934--6304[label="0.00925926;1pkt 1fpkt"];
1934--6420[label="0.5;1pkt 1fpkt"];
1934--6845[label="0.00925926;1pkt 1fpkt"];
1934--7324[label="0.00925926;1pkt 1fpkt"];
1934--7614[label="0.416667;45pkt 45fpkt"];
1934--8736[label="0.00925926;1pkt 1fpkt"];
1934--9046[label="0.00925926;1pkt 1fpkt"];
1934--9230[label="0.416667;45pkt 45fpkt"];
3492--6420[label="1;1pkt 1fpkt"];
5215--7614[label="1;157pkt 157fpkt"];
5215--9230[label="1;156pkt 156fpkt"];
7614--9230[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.144.159"/>
      <filter dst_ip="210.226.98.194"/>
      <filter dst_ip="210.226.98.193" dst_port="5050"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
1943[label="194.212.151.159;s;35pkt 35fpkt", shape=diamond, color=yellow];
2453[label="83.150.6.174;d;51pkt 51fpkt", shape=diamond, color=yellow];
3135[label="194.212.151.159;s;34pkt 34fpkt", shape=hexagon, color=black];
5217[label="194.212.151.159;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7616[label="194.212.151.159;40pkt 40fpkt", shape=invtriangle, color=brown];
9231[label="194.212.151.159;40pkt 40fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.151.159:1755, 83.150.6.174:*}[43.75%]&lt;BR/&gt;{194.212.151.158:1755, 83.150.6.174:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1755: (47.0833%)&lt;BR/&gt; 3375: (1.25%)&lt;BR/&gt; 3373: (1.25%)&lt;BR/&gt; 3358: (1.25%)&lt;BR/&gt; 3357: (1.25%)&gt;];
}
1943--2453[label="0.771429;27pkt 27fpkt"];
1943--3135[label="1;34pkt 34fpkt"];
1943--5217[label="1;35pkt 35fpkt"];
1943--7616[label="1;35pkt 35fpkt"];
1943--9231[label="1;35pkt 35fpkt"];
2453--3085[label="1;6pkt 6fpkt"];
2453--3135[label="0.794118;27pkt 27fpkt"];
2453--5207[label="0.92;23pkt 23fpkt"];
2453--5217[label="0.675;27pkt 27fpkt"];
2453--7616[label="0.675;27pkt 27fpkt"];
2453--9231[label="0.675;27pkt 27fpkt"];
3135--5217[label="1;34pkt 34fpkt"];
3135--7616[label="1;34pkt 34fpkt"];
3135--9231[label="1;34pkt 34fpkt"];
5217--7616[label="1;40pkt 40fpkt"];
5217--9231[label="1;40pkt 40fpkt"];
7616--9231[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="83.150.6.174" src_ip="194.212.151.159" src_port="1755"/>
      <filter dst_ip="83.150.6.174" src_ip="194.212.151.158" src_port="1755"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
1180[label="35.200.193.159;s;9pkt 9fpkt", shape=diamond, color=yellow];
2979[label="35.200.193.159;s;9pkt 9fpkt", shape=hexagon, color=black];
5219[label="35.200.193.159;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7618[label="35.200.193.159;8pkt 8fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.200.193.159:80, 195.89.106.58:*}[66.6667%]&lt;BR/&gt;{35.200.193.159:80, 195.89.105.150:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41277: (5.88235%)&lt;BR/&gt; 41265: (5.88235%)&lt;BR/&gt; 4333: (5.88235%)&lt;BR/&gt; 4133: (5.88235%)&gt;];
}
1180--2979[label="1;9pkt 9fpkt"];
1180--5219[label="1;8pkt 8fpkt"];
1180--7618[label="1;8pkt 8fpkt"];
2979--5219[label="1;8pkt 8fpkt"];
2979--7618[label="1;8pkt 8fpkt"];
5219--7618[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.106.58" src_ip="35.200.193.159" src_port="80"/>
      <filter dst_ip="195.89.105.150" src_ip="35.200.193.159" src_port="80"/>
    </slice>
    <from sec="1144126900" usec="0"/>
    <to sec="1144127162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
5255[label="195.89.120.162;152pkt 152fpkt", shape=pentagon, color=darkviolet];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.120.162:0, *:0}[99.3421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3421%)&lt;BR/&gt; 3924: (0.328947%)&lt;BR/&gt; 80: (0.328947%)&gt;];
}
</description>
    <slice>
      <filter src_ip="195.89.120.162"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
347[label="132.18.129.163;s;251pkt 251fpkt", shape=diamond, color=yellow];
2713[label="132.18.129.163;s;40pkt 40fpkt", shape=hexagon, color=black];
5268[label="132.18.129.163;285pkt 285fpkt", shape=pentagon, color=darkviolet];
7655[label="132.18.129.163;285pkt 285fpkt", shape=invtriangle, color=brown];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.163:25, *:*}[86.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6516%)&lt;BR/&gt; 0: (0.464576%)&lt;BR/&gt; 2711: (0.348432%)&lt;BR/&gt; 4727: (0.29036%)&lt;BR/&gt; 4116: (0.29036%)&gt;];
}
347--2713[label="1;40pkt 40fpkt"];
347--5268[label="0.996016;250pkt 250fpkt"];
347--7655[label="0.996016;250pkt 250fpkt"];
2713--5268[label="1;40pkt 40fpkt"];
2713--7655[label="1;40pkt 40fpkt"];
5268--7655[label="1;285pkt 285fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.129.163" src_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
822[label="194.212.154.163;s;648pkt 648fpkt", shape=diamond, color=yellow];
2856[label="194.212.154.163;s;345pkt 345fpkt", shape=hexagon, color=black];
5269[label="194.212.154.163;683pkt 683fpkt", shape=pentagon, color=darkviolet];
7656[label="194.212.154.163;683pkt 683fpkt", shape=invtriangle, color=brown];
9260[label="194.212.154.163;683pkt 683fpkt", shape=invhouse, color=bisque];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.154.163:0, *:0}[99.8536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8356%)&lt;BR/&gt; 2808: (0.0821828%)&lt;BR/&gt; 80: (0.0821828%)&gt;];
}
822--2090[label="0.0217391;1pkt 1fpkt"];
822--2153[label="0.00295858;1pkt 1fpkt"];
822--2331[label="0.00395257;1pkt 1fpkt"];
822--2856[label="1;345pkt 345fpkt"];
822--5269[label="1;648pkt 648fpkt"];
822--7656[label="1;648pkt 648fpkt"];
822--9260[label="1;648pkt 648fpkt"];
2856--5269[label="1;345pkt 345fpkt"];
2856--7656[label="1;345pkt 345fpkt"];
2856--9260[label="1;345pkt 345fpkt"];
5269--7656[label="1;683pkt 683fpkt"];
5269--9260[label="1;683pkt 683fpkt"];
7656--9260[label="1;683pkt 683fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.154.163"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.28.29.164"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.25.170.164"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.54.165"/>
    </slice>
    <from sec="1144126976" usec="0"/>
    <to sec="1144127452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.131.165"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.80.131.165"/>
    </slice>
    <from sec="1144126818" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.165.165"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.44.166"/>
    </slice>
    <from sec="1144126834" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
2622[label="147.13.36.42;d;76pkt 76fpkt", shape=diamond, color=yellow];
4626[label="83.181.78.107;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5306[label="39.64.74.166;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7198[label="83.181.78.107;16pkt 16fpkt", shape=invtriangle, color=brown];
8965[label="83.181.78.107;17pkt 17fpkt", shape=invhouse, color=bisque];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 147.13.36.42:*}[66.2921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6429%)&lt;BR/&gt; 443: (4.64286%)&lt;BR/&gt; 27670: (2.5%)&lt;BR/&gt; 1152: (1.42857%)&lt;BR/&gt; 1140: (1.42857%)&gt;];
}
2622--2840[label="0.0192308;1pkt 1fpkt"];
2622--3281[label="0.0285714;1pkt 1fpkt"];
2622--3292[label="0.0657895;5pkt 5fpkt"];
2622--3302[label="0.0131579;1pkt 1fpkt"];
2622--3303[label="0.0657895;5pkt 5fpkt"];
2622--3464[label="0.015625;1pkt 1fpkt"];
2622--4005[label="0.0384615;1pkt 1fpkt"];
2622--4626[label="1;17pkt 17fpkt"];
2622--5306[label="0.0714286;1pkt 1fpkt"];
2622--7198[label="1;16pkt 16fpkt"];
2622--8965[label="1;17pkt 17fpkt"];
4626--7198[label="1;16pkt 16fpkt"];
4626--8965[label="1;17pkt 17fpkt"];
7198--8965[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.36.42" src_port="80"/>
    </slice>
    <from sec="1144126967" usec="0"/>
    <to sec="1144127652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.174.79.166"/>
    </slice>
    <from sec="1144126849" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
931[label="128.2.80.167;s;335pkt 335fpkt", shape=diamond, color=yellow];
5329[label="128.2.80.167;334pkt 334fpkt", shape=pentagon, color=darkviolet];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.80.167:1433, 214.51.37.73:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4991: (0.149477%)&lt;BR/&gt; 4963: (0.149477%)&lt;BR/&gt; 4962: (0.149477%)&lt;BR/&gt; 4953: (0.149477%)&gt;];
}
931--5329[label="1;334pkt 334fpkt"];
</description>
    <slice>
      <filter dst_ip="214.51.37.73" src_ip="128.2.80.167" src_port="1433"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.23.115.167"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.222.167"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.125.140.168"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.105.74.169"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.18.212.169"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.36.74.170"/>
    </slice>
    <from sec="1144127198" usec="0"/>
    <to sec="1144127233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
1784[label="132.19.202.200;s;58pkt 58fpkt", shape=diamond, color=yellow];
2058[label="217.32.96.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
2353[label="161.223.195.69;s;118pkt 118fpkt", shape=diamond, color=yellow];
2651[label="67.53.196.193;d;7pkt 7fpkt", shape=diamond, color=yellow];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.195.69:*, 217.32.96.26:80}[66.4773%]&lt;BR/&gt;{132.19.202.200:*, *:80}[32.9545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7297%)&lt;BR/&gt; 1385: (0.540541%)&lt;BR/&gt; 1379: (0.540541%)&lt;BR/&gt; 1377: (0.540541%)&lt;BR/&gt; 1375: (0.540541%)&gt;];
}
1784--2058[label="1;2pkt 2fpkt"];
1784--2133[label="0.0862069;5pkt 5fpkt"];
1784--2651[label="1;7pkt 7fpkt"];
1784--3296[label="0.12069;7pkt 7fpkt"];
2353--3296[label="0.0677966;8pkt 8fpkt"];
2353--4187[label="1;118pkt 118fpkt"];
2353--6891[label="0.991525;117pkt 117fpkt"];
2651--3296[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.202.200"/>
      <filter dst_ip="217.32.96.26" dst_port="80" src_ip="161.223.195.69"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.118.203.172"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144127643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.107.147.173"/>
    </slice>
    <from sec="1144126950" usec="0"/>
    <to sec="1144127070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.149.221.173"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.185.7.174"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_740{
style=filled;
color=gray75;
1759[label="216.69.182.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
3157[label="216.69.182.174;s;1pkt 1fpkt", shape=hexagon, color=black];
5419[label="216.69.182.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7752[label="216.69.182.174;1pkt 1fpkt", shape=invtriangle, color=brown];
9322[label="216.69.182.174;2pkt 2fpkt", shape=invhouse, color=bisque];
stat740[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.69.182.174:80, 147.13.91.67:1273}[50%]&lt;BR/&gt;{216.69.182.174:80, 147.13.91.67:1320}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1320: (35.7143%)&lt;BR/&gt; 1273: (14.2857%)&gt;];
}
1759--3157[label="1;1pkt 1fpkt"];
1759--5419[label="1;1pkt 1fpkt"];
1759--7752[label="1;1pkt 1fpkt"];
1759--9322[label="1;1pkt 1fpkt"];
3157--5419[label="1;1pkt 1fpkt"];
3157--7752[label="1;1pkt 1fpkt"];
3157--9322[label="1;1pkt 1fpkt"];
5419--7752[label="1;1pkt 1fpkt"];
5419--9322[label="1;2pkt 2fpkt"];
7752--9322[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.91.67" dst_port="1320" src_ip="216.69.182.174" src_port="80"/>
      <filter dst_ip="147.13.91.67" dst_port="1273" src_ip="216.69.182.174" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.34.175"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.247.36.175"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.34.170.175"/>
    </slice>
    <from sec="1144127572" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.81.181.177"/>
    </slice>
    <from sec="1144127167" usec="0"/>
    <to sec="1144127640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.106.130.178"/>
    </slice>
    <from sec="1144127101" usec="0"/>
    <to sec="1144127138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.234.198.179"/>
    </slice>
    <from sec="1144127641" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.203.179"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.233.202.180"/>
    </slice>
    <from sec="1144126888" usec="0"/>
    <to sec="1144127458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.204.180"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
2355[label="132.18.226.181;s;297pkt 297fpkt", shape=diamond, color=yellow];
5485[label="132.18.226.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7799[label="132.18.226.181;3pkt 3fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.226.181:10635, *:*}[92.6421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10635: (45.7096%)&lt;BR/&gt; 8639: (1.65017%)&lt;BR/&gt; 32459: (1.48515%)&lt;BR/&gt; 15525: (1.32013%)&lt;BR/&gt; 80: (0.660066%)&gt;];
}
2355--3296[label="0.003367;1pkt 1fpkt"];
2355--5485[label="0.333333;1pkt 1fpkt"];
2355--7799[label="0.333333;1pkt 1fpkt"];
5485--7799[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.226.181" src_port="10635"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.231.86.182"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.19.107.182"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.72.47.183"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
445[label="195.80.106.184;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.106.184:*, 53.174.69.136:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55741: (8.33333%)&lt;BR/&gt; 55726: (8.33333%)&lt;BR/&gt; 55725: (8.33333%)&lt;BR/&gt; 55724: (8.33333%)&gt;];
}
445--1025[label="1;6pkt 6fpkt"];
445--2771[label="1;5pkt 5fpkt"];
445--5509[label="1;6pkt 6fpkt"];
445--7816[label="1;5pkt 5fpkt"];
445--9361[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="195.80.106.184"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
1303[label="132.19.225.100;d;187pkt 187fpkt", shape=diamond, color=yellow];
2507[label="128.28.7.224;d;42pkt 42fpkt", shape=diamond, color=yellow];
2625[label="41.25.166.8;s;5pkt 5fpkt", shape=diamond, color=yellow];
3066[label="161.223.54.81;d;33pkt 33fpkt", shape=hexagon, color=black];
3373[label="32.136.167.4;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3427[label="41.25.166.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4291[label="41.25.162.76;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5005[label="41.25.168.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5512[label="32.136.164.184;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5651[label="32.136.164.196;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5671[label="32.29.213.197;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6336[label="32.136.167.4;9pkt 9fpkt", shape=invtriangle, color=brown];
7473[label="41.25.168.142;3pkt 3fpkt", shape=invtriangle, color=brown];
7818[label="32.136.164.184;3pkt 3fpkt", shape=invtriangle, color=brown];
7924[label="32.136.164.196;13pkt 13fpkt", shape=invtriangle, color=brown];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.225.100:80}[63.2997%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6997%)&lt;BR/&gt; 59766: (0.45045%)&lt;BR/&gt; 52132: (0.45045%)&lt;BR/&gt; 40332: (0.45045%)&lt;BR/&gt; 35732: (0.45045%)&gt;];
}
1303--2625[label="0.2;1pkt 1fpkt"];
1303--3373[label="0.111111;1pkt 1fpkt"];
1303--3427[label="0.2;1pkt 1fpkt"];
1303--4241[label="0.285714;2pkt 2fpkt"];
1303--4711[label="0.142857;1pkt 1fpkt"];
1303--4892[label="0.111111;1pkt 1fpkt"];
1303--4930[label="0.4;2pkt 2fpkt"];
1303--5075[label="0.142857;1pkt 1fpkt"];
1303--5089[label="0.25;1pkt 1fpkt"];
1303--5567[label="0.111111;1pkt 1fpkt"];
1303--5651[label="0.0769231;1pkt 1fpkt"];
1303--6203[label="0.625;5pkt 5fpkt"];
1303--6215[label="0.357143;5pkt 5fpkt"];
1303--6336[label="0.111111;1pkt 1fpkt"];
1303--7064[label="0.1;1pkt 1fpkt"];
1303--7257[label="0.142857;1pkt 1fpkt"];
1303--7522[label="0.142857;1pkt 1fpkt"];
1303--7531[label="0.2;1pkt 1fpkt"];
1303--7860[label="0.111111;1pkt 1fpkt"];
1303--7924[label="0.0769231;1pkt 1fpkt"];
1303--8330[label="0.307692;4pkt 4fpkt"];
1303--8415[label="0.111111;1pkt 1fpkt"];
1303--9172[label="0.142857;1pkt 1fpkt"];
1303--9178[label="0.2;1pkt 1fpkt"];
1303--9432[label="0.0833333;1pkt 1fpkt"];
2507--3296[label="0.190476;8pkt 8fpkt"];
2507--3921[label="0.111111;1pkt 1fpkt"];
2625--3066[label="0.2;1pkt 1fpkt"];
2625--3296[label="0.2;1pkt 1fpkt"];
2625--3427[label="1;5pkt 5fpkt"];
3066--3312[label="0.5;1pkt 1fpkt"];
3066--3427[label="0.2;1pkt 1fpkt"];
3066--4021[label="0.0769231;1pkt 1fpkt"];
3066--6293[label="0.5;1pkt 1fpkt"];
3373--6336[label="1;9pkt 9fpkt"];
3373--8415[label="1;9pkt 9fpkt"];
4291--6968[label="1;3pkt 3fpkt"];
4291--8816[label="1;3pkt 3fpkt"];
5005--7473[label="1;2pkt 2fpkt"];
5005--9138[label="1;2pkt 2fpkt"];
5512--7818[label="1;3pkt 3fpkt"];
5512--9363[label="1;3pkt 3fpkt"];
5651--7924[label="1;13pkt 13fpkt"];
5651--9432[label="1;12pkt 12fpkt"];
5671--7939[label="1;3pkt 3fpkt"];
6336--8415[label="1;9pkt 9fpkt"];
7473--9138[label="1;3pkt 3fpkt"];
7818--9363[label="1;3pkt 3fpkt"];
7924--9432[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.225.100" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
2012[label="213.82.21.185;s;23pkt 23fpkt", shape=diamond, color=yellow];
5517[label="213.82.21.185;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7823[label="213.82.21.185;2pkt 2fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.82.21.185:*, 147.13.36.46:3077}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (50%)&lt;BR/&gt; 50612: (5.55556%)&lt;BR/&gt; 50238: (5.55556%)&lt;BR/&gt; 50970: (1.85185%)&lt;BR/&gt; 50909: (1.85185%)&gt;];
}
2012--5517[label="1;2pkt 2fpkt"];
2012--7823[label="1;2pkt 2fpkt"];
5517--7823[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="213.82.21.185"/>
    </slice>
    <from sec="1144127067" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.196.177.185"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.14.230.185"/>
    </slice>
    <from sec="1144127338" usec="0"/>
    <to sec="1144127468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40175,2.43683,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
47[label="49.246.76.186s;251pkt 251fpkt", shape=rectangle, color=red];
5528[label="49.246.76.186;251pkt 251fpkt", shape=pentagon, color=darkviolet];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.246.76.186:1093, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1093: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
47--5528[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="49.246.76.186" src_port="1093"/>
    </slice>
    <from sec="1144126920" usec="0"/>
    <to sec="1144126935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.162.140.186"/>
    </slice>
    <from sec="1144127562" usec="0"/>
    <to sec="1144127661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.91.161.186"/>
    </slice>
    <from sec="1144127373" usec="0"/>
    <to sec="1144127403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
770[label="194.178.51.188;s;9pkt 9fpkt", shape=diamond, color=yellow];
5547[label="194.178.51.188;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7843[label="194.178.51.188;8pkt 8fpkt", shape=invtriangle, color=brown];
9384[label="194.178.51.188;9pkt 9fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.178.51.188:80, 132.19.18.84:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4191: (5.88235%)&lt;BR/&gt; 4189: (5.88235%)&lt;BR/&gt; 4186: (5.88235%)&lt;BR/&gt; 4184: (5.88235%)&gt;];
}
770--1249[label="1;9pkt 9fpkt"];
770--5547[label="1;8pkt 8fpkt"];
770--7843[label="1;8pkt 8fpkt"];
770--9384[label="1;9pkt 9fpkt"];
5547--7843[label="1;8pkt 8fpkt"];
5547--9384[label="1;8pkt 8fpkt"];
7843--9384[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.18.84" src_ip="194.178.51.188" src_port="80"/>
    </slice>
    <from sec="1144126942" usec="0"/>
    <to sec="1144127023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.164.144.189"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.48.129.190"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.11.22.191"/>
    </slice>
    <from sec="1144126952" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.240.128.192"/>
    </slice>
    <from sec="1144127524" usec="0"/>
    <to sec="1144127566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
351[label="194.212.156.192;s;2pkt 2fpkt", shape=diamond, color=yellow];
884[label="133.49.216.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
5594[label="194.212.156.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7880[label="194.212.156.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.156.192:50203, 133.49.216.187:4734}[50%]&lt;BR/&gt;{194.212.156.192:54945, 133.49.216.187:5999}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54945: (28.5714%)&lt;BR/&gt; 5999: (28.5714%)&lt;BR/&gt; 50203: (21.4286%)&lt;BR/&gt; 4734: (21.4286%)&gt;];
}
351--884[label="1;2pkt 2fpkt"];
351--5594[label="1;2pkt 2fpkt"];
351--7880[label="1;1pkt 1fpkt"];
884--5594[label="1;2pkt 2fpkt"];
884--7880[label="1;1pkt 1fpkt"];
5594--7880[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.49.216.187" dst_port="5999" src_ip="194.212.156.192" src_port="54945"/>
      <filter dst_ip="133.49.216.187" dst_port="4734" src_ip="194.212.156.192" src_port="50203"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.18.189.192"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144127620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_769{
style=filled;
color=gray75;
579[label="219.73.82.164;d;563pkt 563fpkt", shape=diamond, color=yellow];
864[label="132.19.18.25;s;214pkt 214fpkt", shape=diamond, color=yellow];
1135[label="138.166.249.158;d;109pkt 109fpkt", shape=diamond, color=yellow];
1509[label="132.19.225.9;s;111pkt 111fpkt", shape=diamond, color=yellow];
2222[label="132.19.202.36;s;103pkt 103fpkt", shape=diamond, color=yellow];
2366[label="132.19.69.81;s;112pkt 112fpkt", shape=diamond, color=yellow];
2439[label="132.19.192.58;s;99pkt 99fpkt", shape=diamond, color=yellow];
3428[label="132.19.192.8;68pkt 68fpkt", shape=pentagon, color=darkviolet];
3533[label="132.19.98.16;57pkt 57fpkt", shape=pentagon, color=darkviolet];
3813[label="132.19.202.36;103pkt 103fpkt", shape=pentagon, color=darkviolet];
3939[label="132.19.106.49;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3961[label="128.28.29.51;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4050[label="132.19.192.58;98pkt 98fpkt", shape=pentagon, color=darkviolet];
4112[label="161.223.154.63;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4344[label="132.19.69.81;112pkt 112fpkt", shape=pentagon, color=darkviolet];
5073[label="132.19.121.148;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5149[label="132.19.245.153;52pkt 52fpkt", shape=pentagon, color=darkviolet];
5266[label="132.19.90.163;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5311[label="132.19.98.166;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5380[label="132.19.106.171;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5599[label="132.19.192.192;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5601[label="132.19.72.193;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5825[label="132.19.53.210;111pkt 111fpkt", shape=pentagon, color=darkviolet];
6372[label="132.19.192.8;69pkt 69fpkt", shape=invtriangle, color=brown];
6735[label="128.28.29.51;14pkt 14fpkt", shape=invtriangle, color=brown];
7520[label="132.19.121.148;29pkt 29fpkt", shape=invtriangle, color=brown];
7569[label="132.19.245.153;52pkt 52fpkt", shape=invtriangle, color=brown];
7885[label="132.19.72.193;51pkt 51fpkt", shape=invtriangle, color=brown];
8045[label="132.19.53.210;110pkt 110fpkt", shape=invtriangle, color=brown];
8658[label="128.28.29.51;13pkt 13fpkt", shape=invhouse, color=bisque];
9170[label="132.19.121.148;29pkt 29fpkt", shape=invhouse, color=bisque];
9407[label="132.19.72.193;50pkt 50fpkt", shape=invhouse, color=bisque];
stat769[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 219.73.82.164:80}[39.0177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8382%)&lt;BR/&gt; 443: (0.746269%)&lt;BR/&gt; 1863: (0.648075%)&lt;BR/&gt; 32769: (0.569521%)&lt;BR/&gt; 53: (0.569521%)&gt;];
}
579--591[label="0.00613497;2pkt 2fpkt"];
579--673[label="0.00956938;4pkt 4fpkt"];
579--704[label="0.0159858;9pkt 9fpkt"];
579--864[label="0.0560748;12pkt 12fpkt"];
579--1210[label="0.00319489;1pkt 1fpkt"];
579--1509[label="0.045045;5pkt 5fpkt"];
579--1893[label="0.0357143;1pkt 1fpkt"];
579--1959[label="0.228916;19pkt 19fpkt"];
579--2192[label="0.108;27pkt 27fpkt"];
579--2366[label="0.0446429;5pkt 5fpkt"];
579--2439[label="0.111111;11pkt 11fpkt"];
579--2718[label="0.117647;2pkt 2fpkt"];
579--2831[label="0.0131868;6pkt 6fpkt"];
579--3006[label="0.0531915;5pkt 5fpkt"];
579--3121[label="0.04;1pkt 1fpkt"];
579--3225[label="0.0683544;27pkt 27fpkt"];
579--3296[label="0.0994671;56pkt 56fpkt"];
579--3333[label="0.0778098;27pkt 27fpkt"];
579--3428[label="0.176471;12pkt 12fpkt"];
579--3533[label="0.245614;14pkt 14fpkt"];
579--3631[label="0.222222;8pkt 8fpkt"];
579--3840[label="0.138298;13pkt 13fpkt"];
579--3939[label="0.631579;12pkt 12fpkt"];
579--3961[label="0.230769;3pkt 3fpkt"];
579--4050[label="0.102041;10pkt 10fpkt"];
579--4112[label="0.8;8pkt 8fpkt"];
579--4344[label="0.0446429;5pkt 5fpkt"];
579--4373[label="0.0415162;23pkt 23fpkt"];
579--4588[label="0.372549;19pkt 19fpkt"];
579--4800[label="0.236842;9pkt 9fpkt"];
579--4949[label="0.0026178;1pkt 1fpkt"];
579--5073[label="0.666667;20pkt 20fpkt"];
579--5149[label="0.653846;34pkt 34fpkt"];
579--5266[label="0.444444;8pkt 8fpkt"];
579--5311[label="0.5;14pkt 14fpkt"];
579--5351[label="0.00699301;1pkt 1fpkt"];
579--5380[label="0.7;21pkt 21fpkt"];
579--5599[label="1;18pkt 18fpkt"];
579--5601[label="0.705882;36pkt 36fpkt"];
579--5632[label="0.0870337;49pkt 49fpkt"];
579--5825[label="0.171171;19pkt 19fpkt"];
579--6304[label="0.0780347;27pkt 27fpkt"];
579--6372[label="0.173913;12pkt 12fpkt"];
579--6517[label="0.222222;8pkt 8fpkt"];
579--6651[label="0.136842;13pkt 13fpkt"];
579--6735[label="0.214286;3pkt 3fpkt"];
579--7025[label="0.0415913;23pkt 23fpkt"];
579--7175[label="0.372549;19pkt 19fpkt"];
579--7431[label="0.0026178;1pkt 1fpkt"];
579--7520[label="0.689655;20pkt 20fpkt"];
579--7569[label="0.653846;34pkt 34fpkt"];
579--7885[label="0.705882;36pkt 36fpkt"];
579--7911[label="0.0870337;49pkt 49fpkt"];
579--8045[label="0.172727;19pkt 19fpkt"];
579--8528[label="0.216216;8pkt 8fpkt"];
579--8658[label="0.230769;3pkt 3fpkt"];
579--8850[label="0.0415162;23pkt 23fpkt"];
579--9111[label="0.00262467;1pkt 1fpkt"];
579--9170[label="0.689655;20pkt 20fpkt"];
579--9407[label="0.72;36pkt 36fpkt"];
579--9422[label="0.0870337;49pkt 49fpkt"];
864--906[label="0.00568182;1pkt 1fpkt"];
864--1081[label="0.0046729;1pkt 1fpkt"];
864--1092[label="0.15;3pkt 3fpkt"];
864--1120[label="0.00934579;2pkt 2fpkt"];
864--1135[label="0.0642202;7pkt 7fpkt"];
864--1359[label="0.0943396;5pkt 5fpkt"];
864--1376[label="0.0943396;5pkt 5fpkt"];
864--1513[label="0.0140187;3pkt 3fpkt"];
864--1517[label="0.00520833;1pkt 1fpkt"];
864--1864[label="0.00584795;1pkt 1fpkt"];
864--1921[label="0.0280374;6pkt 6fpkt"];
864--2178[label="0.00628931;1pkt 1fpkt"];
864--2199[label="0.0217391;1pkt 1fpkt"];
864--2245[label="0.210526;4pkt 4fpkt"];
864--2350[label="0.0588235;2pkt 2fpkt"];
864--2555[label="0.485915;69pkt 69fpkt"];
864--3290[label="0.0140187;3pkt 3fpkt"];
864--3295[label="0.0233645;5pkt 5fpkt"];
864--3296[label="0.0186916;4pkt 4fpkt"];
1135--1349[label="0.019802;2pkt 2fpkt"];
1135--2222[label="0.92233;95pkt 95fpkt"];
1135--2873[label="0.019802;2pkt 2fpkt"];
1135--3296[label="0.00917431;1pkt 1fpkt"];
1135--3813[label="0.92233;95pkt 95fpkt"];
1509--1513[label="0.045045;5pkt 5fpkt"];
1509--1921[label="0.00900901;1pkt 1fpkt"];
1509--2139[label="0.0105263;1pkt 1fpkt"];
1509--2324[label="0.00900901;1pkt 1fpkt"];
1509--2555[label="0.00900901;1pkt 1fpkt"];
1509--3006[label="1;94pkt 94fpkt"];
1509--3296[label="0.0630631;7pkt 7fpkt"];
2222--3296[label="0.0291262;3pkt 3fpkt"];
2222--3813[label="0.990291;102pkt 102fpkt"];
2366--2442[label="0.544643;61pkt 61fpkt"];
2366--2587[label="0.0384615;2pkt 2fpkt"];
2366--3196[label="1;105pkt 105fpkt"];
2366--3296[label="0.0803571;9pkt 9fpkt"];
2366--4344[label="0.991071;111pkt 111fpkt"];
2439--4050[label="1;98pkt 98fpkt"];
3428--6372[label="1;68pkt 68fpkt"];
3961--6735[label="1;13pkt 13fpkt"];
3961--8658[label="1;13pkt 13fpkt"];
5073--7520[label="1;29pkt 29fpkt"];
5073--9170[label="1;29pkt 29fpkt"];
5149--7569[label="1;52pkt 52fpkt"];
5601--7885[label="1;51pkt 51fpkt"];
5601--9407[label="1;50pkt 50fpkt"];
5825--8045[label="1;110pkt 110fpkt"];
6735--8658[label="1;13pkt 13fpkt"];
7520--9170[label="1;29pkt 29fpkt"];
7885--9407[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.82.164" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.44.89.193"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.173.125.193"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.215.128.193"/>
    </slice>
    <from sec="1144126845" usec="0"/>
    <to sec="1144126944" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.177.95.195"/>
    </slice>
    <from sec="1144126825" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_774{
style=filled;
color=gray75;
605[label="34.74.8.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
3183[label="34.74.8.196;s;2pkt 2fpkt", shape=hexagon, color=black];
5640[label="34.74.8.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7917[label="34.74.8.196;2pkt 2fpkt", shape=invtriangle, color=brown];
9426[label="34.74.8.196;1pkt 1fpkt", shape=invhouse, color=bisque];
stat774[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.74.8.196:1572, 128.231.110.208:6881}[50%]&lt;BR/&gt;{34.74.8.196:1825, 128.231.110.208:6881}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 1572: (27.7778%)&lt;BR/&gt; 1825: (22.2222%)&gt;];
}
605--782[label="1;2pkt 2fpkt"];
605--2893[label="1;2pkt 2fpkt"];
605--3183[label="1;2pkt 2fpkt"];
605--3277[label="1;2pkt 2fpkt"];
605--5640[label="1;2pkt 2fpkt"];
605--7917[label="1;2pkt 2fpkt"];
605--9426[label="1;1pkt 1fpkt"];
3183--3277[label="1;2pkt 2fpkt"];
3183--5640[label="1;2pkt 2fpkt"];
3183--7917[label="1;2pkt 2fpkt"];
3183--9426[label="1;1pkt 1fpkt"];
5640--7917[label="1;2pkt 2fpkt"];
5640--9426[label="1;1pkt 1fpkt"];
7917--9426[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="34.74.8.196" src_port="1825"/>
      <filter dst_ip="128.231.110.208" dst_port="6881" src_ip="34.74.8.196" src_port="1572"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
1588[label="210.226.98.196;s;146pkt 146fpkt", shape=diamond, color=yellow];
3033[label="210.226.98.196;s;111pkt 111fpkt", shape=hexagon, color=black];
5644[label="210.226.98.196;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.196:5050, 164.23.218.92:*}[22.2892%]&lt;BR/&gt;{210.226.98.196:*, 164.23.169.59:*}[21.6867%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (39.7163%)&lt;BR/&gt; 23: (6.38298%)&lt;BR/&gt; 20: (3.90071%)&lt;BR/&gt; 1846: (0.827423%)&lt;BR/&gt; 1520: (0.70922%)&gt;];
}
1588--1905[label="0.253425;37pkt 37fpkt"];
1588--3033[label="1;111pkt 111fpkt"];
1588--5644[label="1;146pkt 146fpkt"];
3033--5644[label="1;111pkt 111fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.169.59" src_ip="210.226.98.196"/>
      <filter dst_ip="164.23.218.92" src_ip="210.226.98.196" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.147.196"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.124.153.196"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.107.144.198"/>
    </slice>
    <from sec="1144126919" usec="0"/>
    <to sec="1144127358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.240.147.198"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
1969[label="164.23.204.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
5686[label="164.23.204.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.204.198:64872, 210.234.233.84:5999}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64872: (50%)&lt;BR/&gt; 5999: (50%)&gt;];
}
1969--5686[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.234.233.84" dst_port="5999" src_ip="164.23.204.198" src_port="64872"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40655,2.40982,011,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
72[label="214.226.45.199s;58pkt 58fpkt", shape=rectangle, color=red];
5690[label="214.226.45.199;88pkt 88fpkt", shape=pentagon, color=darkviolet];
7952[label="214.226.45.199;88pkt 88fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.226.45.199:*, *:139}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (40.5983%)&lt;BR/&gt; 445: (7.26496%)&lt;BR/&gt; 137: (2.13675%)&lt;BR/&gt; 63074: (1.92308%)&lt;BR/&gt; 63282: (1.06838%)&gt;];
}
72--5690[label="1;58pkt 58fpkt"];
72--7952[label="1;58pkt 58fpkt"];
5690--7952[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="214.226.45.199"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.132.79.199"/>
    </slice>
    <from sec="1144127180" usec="0"/>
    <to sec="1144127417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.201.156.199"/>
    </slice>
    <from sec="1144126847" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
311[label="219.73.81.46;d;889pkt 889fpkt", shape=diamond, color=yellow];
455[label="195.80.106.200;s;361pkt 361fpkt", shape=diamond, color=yellow];
501[label="132.19.239.72;s;395pkt 395fpkt", shape=diamond, color=yellow];
505[label="221.235.177.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
691[label="132.19.238.86;s;147pkt 147fpkt", shape=diamond, color=yellow];
740[label="132.19.196.97;s;124pkt 124fpkt", shape=diamond, color=yellow];
1099[label="132.19.193.10;s;190pkt 190fpkt", shape=diamond, color=yellow];
1120[label="219.72.137.176;d;288pkt 288fpkt", shape=diamond, color=yellow];
1141[label="132.19.51.21;s;113pkt 113fpkt", shape=diamond, color=yellow];
1178[label="132.19.245.235;s;98pkt 98fpkt", shape=diamond, color=yellow];
1210[label="132.19.90.138;s;313pkt 313fpkt", shape=diamond, color=yellow];
1358[label="161.223.132.203;s;54pkt 54fpkt", shape=diamond, color=yellow];
1666[label="132.19.225.10;s;66pkt 66fpkt", shape=diamond, color=yellow];
1669[label="132.19.195.48;s;105pkt 105fpkt", shape=diamond, color=yellow];
1690[label="196.206.171.14;d;49pkt 49fpkt", shape=diamond, color=yellow];
1731[label="217.32.96.29;d;78pkt 78fpkt", shape=diamond, color=yellow];
1893[label="132.19.51.185;s;28pkt 28fpkt", shape=diamond, color=yellow];
1917[label="219.73.82.128;d;92pkt 92fpkt", shape=diamond, color=yellow];
1921[label="219.73.82.151;d;1118pkt 1118fpkt", shape=diamond, color=yellow];
2143[label="132.19.51.141;s;156pkt 156fpkt", shape=diamond, color=yellow];
2192[label="132.19.44.2;s;250pkt 250fpkt", shape=diamond, color=yellow];
2386[label="132.19.98.58;s;61pkt 61fpkt", shape=diamond, color=yellow];
2402[label="132.19.150.109;s;49pkt 49fpkt", shape=diamond, color=yellow];
3121[label="132.19.51.185;s;25pkt 25fpkt", shape=hexagon, color=black];
3138[label="132.19.225.10;s;47pkt 47fpkt", shape=hexagon, color=black];
3207[label="132.19.196.203;s;159pkt 159fpkt", shape=hexagon, color=black];
3225[label="132.19.239.72;s;395pkt 395fpkt", shape=hexagon, color=black];
3246[label="132.19.98.58;s;61pkt 61fpkt", shape=hexagon, color=black];
3384[label="161.223.128.5;9pkt 9fpkt", shape=pentagon, color=darkviolet];
3462[label="132.19.225.10;70pkt 70fpkt", shape=pentagon, color=darkviolet];
3528[label="132.19.44.16;30pkt 30fpkt", shape=pentagon, color=darkviolet];
3631[label="132.19.121.22;36pkt 36fpkt", shape=pentagon, color=darkviolet];
3702[label="132.19.192.27;92pkt 92fpkt", shape=pentagon, color=darkviolet];
3801[label="128.202.0.36;29pkt 29fpkt", shape=pentagon, color=darkviolet];
3867[label="132.19.192.41;22pkt 22fpkt", shape=pentagon, color=darkviolet];
3928[label="132.19.90.48;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3933[label="161.223.129.48;74pkt 74fpkt", shape=pentagon, color=darkviolet];
4043[label="132.19.98.58;61pkt 61fpkt", shape=pentagon, color=darkviolet];
4172[label="161.223.150.68;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4231[label="161.223.137.72;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4296[label="132.19.43.77;37pkt 37fpkt", shape=pentagon, color=darkviolet];
4416[label="132.19.238.86;148pkt 148fpkt", shape=pentagon, color=darkviolet];
4421[label="132.19.140.87;68pkt 68fpkt", shape=pentagon, color=darkviolet];
4516[label="195.80.155.97;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4519[label="132.19.196.97;134pkt 134fpkt", shape=pentagon, color=darkviolet];
4588[label="132.19.105.104;51pkt 51fpkt", shape=pentagon, color=darkviolet];
4598[label="132.19.51.105;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4614[label="195.80.105.106;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4650[label="132.19.46.110;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4723[label="161.223.52.118;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4800[label="132.19.132.128;38pkt 38fpkt", shape=pentagon, color=darkviolet];
4840[label="132.19.241.130;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4856[label="132.19.245.131;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4949[label="132.19.90.138;382pkt 382fpkt", shape=pentagon, color=darkviolet];
4954[label="132.19.192.138;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4975[label="161.223.34.140;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5191[label="132.19.44.157;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5201[label="128.28.228.157;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5322[label="128.28.228.166;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5345[label="132.19.241.168;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5351[label="195.80.106.169;143pkt 143fpkt", shape=pentagon, color=darkviolet];
5360[label="161.223.76.170;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5362[label="132.19.90.170;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5385[label="132.19.245.171;68pkt 68fpkt", shape=pentagon, color=darkviolet];
5414[label="161.223.48.174;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5533[label="132.19.118.186;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5653[label="161.223.198.196;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5670[label="132.19.192.197;88pkt 88fpkt", shape=pentagon, color=darkviolet];
5704[label="195.80.106.200;467pkt 467fpkt", shape=pentagon, color=darkviolet];
5742[label="161.223.132.203;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5745[label="132.19.196.203;171pkt 171fpkt", shape=pentagon, color=darkviolet];
5800[label="132.19.154.208;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5805[label="132.19.233.208;55pkt 55fpkt", shape=pentagon, color=darkviolet];
6077[label="161.223.132.232;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6087[label="195.80.150.233;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6113[label="132.19.151.235;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6304[label="132.19.44.2;346pkt 346fpkt", shape=invtriangle, color=brown];
6399[label="132.19.225.10;70pkt 70fpkt", shape=invtriangle, color=brown];
6517[label="132.19.121.22;36pkt 36fpkt", shape=invtriangle, color=brown];
6566[label="132.19.192.27;91pkt 91fpkt", shape=invtriangle, color=brown];
6668[label="132.19.192.41;23pkt 23fpkt", shape=invtriangle, color=brown];
6712[label="161.223.129.48;73pkt 73fpkt", shape=invtriangle, color=brown];
6879[label="161.223.150.68;31pkt 31fpkt", shape=invtriangle, color=brown];
6925[label="161.223.137.72;17pkt 17fpkt", shape=invtriangle, color=brown];
6971[label="132.19.43.77;38pkt 38fpkt", shape=invtriangle, color=brown];
7062[label="132.19.140.87;69pkt 69fpkt", shape=invtriangle, color=brown];
7122[label="195.80.155.97;19pkt 19fpkt", shape=invtriangle, color=brown];
7125[label="132.19.196.97;134pkt 134fpkt", shape=invtriangle, color=brown];
7175[label="132.19.105.104;51pkt 51fpkt", shape=invtriangle, color=brown];
7189[label="195.80.105.106;46pkt 46fpkt", shape=invtriangle, color=brown];
7212[label="132.19.46.110;21pkt 21fpkt", shape=invtriangle, color=brown];
7366[label="132.19.245.131;47pkt 47fpkt", shape=invtriangle, color=brown];
7431[label="132.19.90.138;382pkt 382fpkt", shape=invtriangle, color=brown];
7434[label="132.19.192.138;34pkt 34fpkt", shape=invtriangle, color=brown];
7447[label="161.223.34.140;9pkt 9fpkt", shape=invtriangle, color=brown];
7604[label="128.28.228.157;21pkt 21fpkt", shape=invtriangle, color=brown];
7693[label="128.28.228.166;4pkt 4fpkt", shape=invtriangle, color=brown];
7710[label="132.19.241.168;14pkt 14fpkt", shape=invtriangle, color=brown];
7718[label="132.19.90.170;40pkt 40fpkt", shape=invtriangle, color=brown];
7733[label="132.19.245.171;68pkt 68fpkt", shape=invtriangle, color=brown];
7832[label="132.19.118.186;50pkt 50fpkt", shape=invtriangle, color=brown];
7938[label="132.19.192.197;87pkt 87fpkt", shape=invtriangle, color=brown];
7989[label="161.223.132.203;54pkt 54fpkt", shape=invtriangle, color=brown];
7992[label="132.19.196.203;170pkt 170fpkt", shape=invtriangle, color=brown];
8027[label="132.19.154.208;8pkt 8fpkt", shape=invtriangle, color=brown];
8030[label="132.19.233.208;54pkt 54fpkt", shape=invtriangle, color=brown];
8228[label="161.223.132.232;40pkt 40fpkt", shape=invtriangle, color=brown];
8235[label="195.80.150.233;10pkt 10fpkt", shape=invtriangle, color=brown];
8453[label="132.19.225.10;70pkt 70fpkt", shape=invhouse, color=bisque];
8528[label="132.19.121.22;37pkt 37fpkt", shape=invhouse, color=bisque];
8561[label="132.19.192.27;91pkt 91fpkt", shape=invhouse, color=bisque];
8620[label="132.19.192.41;22pkt 22fpkt", shape=invhouse, color=bisque];
8646[label="161.223.129.48;73pkt 73fpkt", shape=invhouse, color=bisque];
8789[label="161.223.137.72;17pkt 17fpkt", shape=invhouse, color=bisque];
8818[label="132.19.43.77;38pkt 38fpkt", shape=invhouse, color=bisque];
8876[label="132.19.140.87;68pkt 68fpkt", shape=invhouse, color=bisque];
8914[label="195.80.155.97;20pkt 20fpkt", shape=invhouse, color=bisque];
8917[label="132.19.196.97;134pkt 134fpkt", shape=invhouse, color=bisque];
8959[label="195.80.105.106;45pkt 45fpkt", shape=invhouse, color=bisque];
9063[label="132.19.201.129;18pkt 18fpkt", shape=invhouse, color=bisque];
9111[label="132.19.90.138;381pkt 381fpkt", shape=invhouse, color=bisque];
9114[label="132.19.192.138;34pkt 34fpkt", shape=invhouse, color=bisque];
9123[label="161.223.34.140;9pkt 9fpkt", shape=invhouse, color=bisque];
9224[label="128.28.228.157;22pkt 22fpkt", shape=invhouse, color=bisque];
9285[label="128.28.228.166;5pkt 5fpkt", shape=invhouse, color=bisque];
9301[label="132.19.90.170;41pkt 41fpkt", shape=invhouse, color=bisque];
9311[label="132.19.245.171;68pkt 68fpkt", shape=invhouse, color=bisque];
9376[label="132.19.118.186;51pkt 51fpkt", shape=invhouse, color=bisque];
9472[label="132.19.196.203;170pkt 170fpkt", shape=invhouse, color=bisque];
9499[label="132.19.233.208;55pkt 55fpkt", shape=invhouse, color=bisque];
9633[label="161.223.132.232;40pkt 40fpkt", shape=invhouse, color=bisque];
9636[label="195.80.150.233;11pkt 11fpkt", shape=invhouse, color=bisque];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 219.73.82.151:80}[20.2807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8489%)&lt;BR/&gt; 443: (1.36886%)&lt;BR/&gt; 20480: (1.06512%)&lt;BR/&gt; 0: (0.558885%)&lt;BR/&gt; 1863: (0.259193%)&gt;];
}
311--392[label="0.00769231;1pkt 1fpkt"];
311--398[label="0.00277008;1pkt 1fpkt"];
311--421[label="0.00564972;1pkt 1fpkt"];
311--423[label="0.0112486;10pkt 10fpkt"];
311--455[label="0.0277008;10pkt 10fpkt"];
311--501[label="0.0227848;9pkt 9fpkt"];
311--569[label="0.0494938;44pkt 44fpkt"];
311--577[label="0.0151515;1pkt 1fpkt"];
311--591[label="0.0245399;8pkt 8fpkt"];
311--673[label="0.00478469;2pkt 2fpkt"];
311--691[label="0.0136054;2pkt 2fpkt"];
311--699[label="0.0283019;3pkt 3fpkt"];
311--704[label="0.00337458;3pkt 3fpkt"];
311--710[label="0.00309598;1pkt 1fpkt"];
311--740[label="0.193548;24pkt 24fpkt"];
311--864[label="0.00934579;2pkt 2fpkt"];
311--1099[label="0.0263158;5pkt 5fpkt"];
311--1115[label="0.596386;99pkt 99fpkt"];
311--1141[label="0.0530973;6pkt 6fpkt"];
311--1178[label="0.255102;25pkt 25fpkt"];
311--1210[label="0.194888;61pkt 61fpkt"];
311--1218[label="0.0214286;3pkt 3fpkt"];
311--1349[label="0.029703;3pkt 3fpkt"];
311--1358[label="0.0555556;3pkt 3fpkt"];
311--1662[label="0.00892857;1pkt 1fpkt"];
311--1666[label="0.0151515;1pkt 1fpkt"];
311--1669[label="0.0190476;2pkt 2fpkt"];
311--1893[label="0.107143;3pkt 3fpkt"];
311--1989[label="0.0786517;7pkt 7fpkt"];
311--2143[label="0.0576923;9pkt 9fpkt"];
311--2192[label="0.084;21pkt 21fpkt"];
311--2386[label="0.0491803;3pkt 3fpkt"];
311--2402[label="0.0408163;2pkt 2fpkt"];
311--2533[label="0.00290698;1pkt 1fpkt"];
311--2730[label="0.0060241;1pkt 1fpkt"];
311--2772[label="0.00309598;1pkt 1fpkt"];
311--2831[label="0.0021978;1pkt 1fpkt"];
311--2861[label="0.0294118;1pkt 1fpkt"];
311--2873[label="0.029703;3pkt 3fpkt"];
311--3049[label="0.0177515;3pkt 3fpkt"];
311--3121[label="0.12;3pkt 3fpkt"];
311--3180[label="0.0494938;44pkt 44fpkt"];
311--3207[label="0.584906;93pkt 93fpkt"];
311--3225[label="0.0227848;9pkt 9fpkt"];
311--3246[label="0.0491803;3pkt 3fpkt"];
311--3296[label="0.0776153;69pkt 69fpkt"];
311--3333[label="0.0605187;21pkt 21fpkt"];
311--3384[label="1;9pkt 9fpkt"];
311--3462[label="0.0142857;1pkt 1fpkt"];
311--3528[label="0.0666667;2pkt 2fpkt"];
311--3573[label="0.0569476;25pkt 25fpkt"];
311--3631[label="0.0833333;3pkt 3fpkt"];
311--3702[label="0.228261;21pkt 21fpkt"];
311--3836[label="1;13pkt 13fpkt"];
311--3840[label="0.0106383;1pkt 1fpkt"];
311--3928[label="0.352941;6pkt 6fpkt"];
311--3933[label="0.0405405;3pkt 3fpkt"];
311--4043[label="0.0491803;3pkt 3fpkt"];
311--4108[label="0.0025;1pkt 1fpkt"];
311--4172[label="0.625;20pkt 20fpkt"];
311--4296[label="0.0810811;3pkt 3fpkt"];
311--4375[label="0.0494938;44pkt 44fpkt"];
311--4416[label="0.0135135;2pkt 2fpkt"];
311--4421[label="0.0147059;1pkt 1fpkt"];
311--4492[label="0.00847458;1pkt 1fpkt"];
311--4519[label="0.253731;34pkt 34fpkt"];
311--4577[label="0.0263158;3pkt 3fpkt"];
311--4588[label="0.137255;7pkt 7fpkt"];
311--4594[label="0.00746269;1pkt 1fpkt"];
311--4598[label="0.95;19pkt 19fpkt"];
311--4614[label="0.0434783;2pkt 2fpkt"];
311--4800[label="0.710526;27pkt 27fpkt"];
311--4840[label="0.375;9pkt 9fpkt"];
311--4949[label="0.185864;71pkt 71fpkt"];
311--4954[label="0.176471;6pkt 6fpkt"];
311--5312[label="0.00537634;1pkt 1fpkt"];
311--5322[label="0.8;4pkt 4fpkt"];
311--5351[label="0.013986;2pkt 2fpkt"];
311--5360[label="0.0689655;2pkt 2fpkt"];
311--5362[label="0.195122;8pkt 8fpkt"];
311--5385[label="0.235294;16pkt 16fpkt"];
311--5414[label="0.25;6pkt 6fpkt"];
311--5440[label="0.00149925;1pkt 1fpkt"];
311--5533[label="0.196078;10pkt 10fpkt"];
311--5632[label="0.0056243;5pkt 5fpkt"];
311--5658[label="1;23pkt 23fpkt"];
311--5704[label="0.0214133;10pkt 10fpkt"];
311--5742[label="0.0555556;3pkt 3fpkt"];
311--5745[label="0.578947;99pkt 99fpkt"];
311--5775[label="0.0406504;5pkt 5fpkt"];
311--5800[label="1;8pkt 8fpkt"];
311--5805[label="0.0181818;1pkt 1fpkt"];
311--6064[label="0.0180723;3pkt 3fpkt"];
311--6077[label="0.731707;30pkt 30fpkt"];
311--6087[label="1;11pkt 11fpkt"];
311--6113[label="0.666667;6pkt 6fpkt"];
311--6280[label="0.00238095;1pkt 1fpkt"];
311--6304[label="0.0606936;21pkt 21fpkt"];
311--6399[label="0.0142857;1pkt 1fpkt"];
311--6472[label="0.0569476;25pkt 25fpkt"];
311--6517[label="0.0833333;3pkt 3fpkt"];
311--6566[label="0.21978;20pkt 20fpkt"];
311--6647[label="1;14pkt 14fpkt"];
311--6651[label="0.0105263;1pkt 1fpkt"];
311--6712[label="0.0410959;3pkt 3fpkt"];
311--6835[label="0.00250627;1pkt 1fpkt"];
311--6879[label="0.645161;20pkt 20fpkt"];
311--6971[label="0.0789474;3pkt 3fpkt"];
311--7027[label="0.0494938;44pkt 44fpkt"];
311--7062[label="0.0144928;1pkt 1fpkt"];
311--7107[label="0.00847458;1pkt 1fpkt"];
311--7125[label="0.253731;34pkt 34fpkt"];
311--7167[label="0.0263158;3pkt 3fpkt"];
311--7175[label="0.137255;7pkt 7fpkt"];
311--7179[label="0.00746269;1pkt 1fpkt"];
311--7189[label="0.0434783;2pkt 2fpkt"];
311--7431[label="0.185864;71pkt 71fpkt"];
311--7434[label="0.176471;6pkt 6fpkt"];
311--7693[label="0.75;3pkt 3fpkt"];
311--7718[label="0.2;8pkt 8fpkt"];
311--7733[label="0.235294;16pkt 16fpkt"];
311--7832[label="0.18;9pkt 9fpkt"];
311--7911[label="0.0056243;5pkt 5fpkt"];
311--7929[label="1;22pkt 22fpkt"];
311--7989[label="0.0555556;3pkt 3fpkt"];
311--7992[label="0.582353;99pkt 99fpkt"];
311--8027[label="1;8pkt 8fpkt"];
311--8030[label="0.0185185;1pkt 1fpkt"];
311--8218[label="0.0180723;3pkt 3fpkt"];
311--8228[label="0.75;30pkt 30fpkt"];
311--8235[label="1;10pkt 10fpkt"];
311--8377[label="0.00238095;1pkt 1fpkt"];
311--8453[label="0.0142857;1pkt 1fpkt"];
311--8528[label="0.0810811;3pkt 3fpkt"];
311--8561[label="0.21978;20pkt 20fpkt"];
311--8646[label="0.0410959;3pkt 3fpkt"];
311--8728[label="0.00250627;1pkt 1fpkt"];
311--8818[label="0.0789474;3pkt 3fpkt"];
311--8852[label="0.0494938;44pkt 44fpkt"];
311--8876[label="0.0147059;1pkt 1fpkt"];
311--8904[label="0.00854701;1pkt 1fpkt"];
311--8917[label="0.253731;34pkt 34fpkt"];
311--8945[label="0.026087;3pkt 3fpkt"];
311--8953[label="0.00746269;1pkt 1fpkt"];
311--8959[label="0.0444444;2pkt 2fpkt"];
311--9111[label="0.186352;71pkt 71fpkt"];
311--9114[label="0.176471;6pkt 6fpkt"];
311--9285[label="0.8;4pkt 4fpkt"];
311--9301[label="0.195122;8pkt 8fpkt"];
311--9311[label="0.235294;16pkt 16fpkt"];
311--9376[label="0.196078;10pkt 10fpkt"];
311--9422[label="0.0056243;5pkt 5fpkt"];
311--9472[label="0.582353;99pkt 99fpkt"];
311--9499[label="0.0181818;1pkt 1fpkt"];
311--9633[label="0.75;30pkt 30fpkt"];
311--9636[label="1;11pkt 11fpkt"];
455--792[label="0.0166205;6pkt 6fpkt"];
455--808[label="0.00292398;1pkt 1fpkt"];
455--1066[label="0.00621118;1pkt 1fpkt"];
455--1081[label="0.136842;39pkt 39fpkt"];
455--1120[label="0.0173611;5pkt 5fpkt"];
455--1376[label="0.0754717;4pkt 4fpkt"];
455--1403[label="0.00694444;1pkt 1fpkt"];
455--1425[label="0.0542636;7pkt 7fpkt"];
455--1513[label="0.0060241;2pkt 2fpkt"];
455--1517[label="0.0364583;7pkt 7fpkt"];
455--1531[label="0.00653595;1pkt 1fpkt"];
455--1631[label="0.0895522;6pkt 6fpkt"];
455--1683[label="0.0357143;2pkt 2fpkt"];
455--1898[label="0.0319149;3pkt 3fpkt"];
455--1917[label="0.0217391;2pkt 2fpkt"];
455--1921[label="0.0138504;5pkt 5fpkt"];
455--2133[label="0.00877193;1pkt 1fpkt"];
455--2188[label="0.285714;4pkt 4fpkt"];
455--2215[label="0.0117647;1pkt 1fpkt"];
455--2245[label="0.0526316;1pkt 1fpkt"];
455--2324[label="0.05;6pkt 6fpkt"];
455--2555[label="0.028169;4pkt 4fpkt"];
455--2574[label="0.0121951;1pkt 1fpkt"];
455--3153[label="0.111111;1pkt 1fpkt"];
455--3296[label="0.0941828;34pkt 34fpkt"];
455--5704[label="1;361pkt 361fpkt"];
501--505[label="1;1pkt 1fpkt"];
501--547[label="0.0339806;7pkt 7fpkt"];
501--579[label="0.0683544;27pkt 27fpkt"];
501--602[label="0.0227273;2pkt 2fpkt"];
501--840[label="0.0515464;5pkt 5fpkt"];
501--869[label="0.0894569;28pkt 28fpkt"];
501--919[label="0.0185185;5pkt 5fpkt"];
501--957[label="0.0425532;4pkt 4fpkt"];
501--995[label="0.0177936;5pkt 5fpkt"];
501--1011[label="0.0449438;8pkt 8fpkt"];
501--1057[label="0.0930233;4pkt 4fpkt"];
501--1081[label="0.0280702;8pkt 8fpkt"];
501--1095[label="0.0165746;3pkt 3fpkt"];
501--1193[label="0.03125;1pkt 1fpkt"];
501--1403[label="0.00694444;1pkt 1fpkt"];
501--1448[label="0.00746269;1pkt 1fpkt"];
501--1513[label="0.0481928;16pkt 16fpkt"];
501--1517[label="0.00520833;1pkt 1fpkt"];
501--1555[label="0.00934579;1pkt 1fpkt"];
501--1690[label="0.0408163;2pkt 2fpkt"];
501--1917[label="0.0217391;2pkt 2fpkt"];
501--2285[label="0.0185185;1pkt 1fpkt"];
501--2368[label="0.00719424;1pkt 1fpkt"];
501--3225[label="1;395pkt 395fpkt"];
501--3296[label="0.0303797;12pkt 12fpkt"];
505--3225[label="1;1pkt 1fpkt"];
691--792[label="0.00680272;1pkt 1fpkt"];
691--1299[label="0.328671;47pkt 47fpkt"];
691--1361[label="0.0833333;3pkt 3fpkt"];
691--1683[label="0.0357143;2pkt 2fpkt"];
691--1690[label="0.142857;7pkt 7fpkt"];
691--1898[label="0.0106383;1pkt 1fpkt"];
691--1921[label="0.0136054;2pkt 2fpkt"];
691--2159[label="0.0869565;2pkt 2fpkt"];
691--2555[label="0.00704225;1pkt 1fpkt"];
691--4416[label="0.993197;146pkt 146fpkt"];
740--792[label="0.282258;35pkt 35fpkt"];
740--1917[label="0.0108696;1pkt 1fpkt"];
740--1921[label="0.516129;64pkt 64fpkt"];
740--4519[label="1;124pkt 124fpkt"];
740--7125[label="1;124pkt 124fpkt"];
740--8917[label="1;124pkt 124fpkt"];
1099--1105[label="0.173684;33pkt 33fpkt"];
1099--1120[label="0.0263158;5pkt 5fpkt"];
1099--1376[label="0.0377358;2pkt 2fpkt"];
1099--1400[label="0.0368421;7pkt 7fpkt"];
1099--1425[label="0.00775194;1pkt 1fpkt"];
1099--1513[label="0.0105263;2pkt 2fpkt"];
1099--1531[label="0.0196078;3pkt 3fpkt"];
1099--1631[label="0.0298507;2pkt 2fpkt"];
1099--1921[label="0.0578947;11pkt 11fpkt"];
1099--2255[label="0.0555556;1pkt 1fpkt"];
1099--2587[label="0.0961538;5pkt 5fpkt"];
1099--3049[label="1;169pkt 169fpkt"];
1099--3296[label="0.0473684;9pkt 9fpkt"];
1120--1616[label="0.25;5pkt 5fpkt"];
1120--2774[label="0.131579;5pkt 5fpkt"];
1120--2839[label="1;94pkt 94fpkt"];
1120--2959[label="0.25;5pkt 5fpkt"];
1120--3049[label="0.0295858;5pkt 5fpkt"];
1120--3296[label="0.0590278;17pkt 17fpkt"];
1120--3772[label="0.125;5pkt 5fpkt"];
1120--3796[label="0.285714;14pkt 14fpkt"];
1120--4078[label="0.434783;30pkt 30fpkt"];
1120--4421[label="0.0735294;5pkt 5fpkt"];
1120--4516[label="0.25;5pkt 5fpkt"];
1120--4840[label="0.25;6pkt 6fpkt"];
1120--5096[label="0.178571;5pkt 5fpkt"];
1120--5191[label="0.116667;7pkt 7fpkt"];
1120--5345[label="0.0666667;1pkt 1fpkt"];
1120--5380[label="0.166667;5pkt 5fpkt"];
1120--5465[label="0.217391;5pkt 5fpkt"];
1120--5533[label="0.0980392;5pkt 5fpkt"];
1120--5670[label="0.0568182;5pkt 5fpkt"];
1120--5704[label="0.0173611;5pkt 5fpkt"];
1120--6621[label="0.28;14pkt 14fpkt"];
1120--6812[label="0.434783;30pkt 30fpkt"];
1120--7062[label="0.0724638;5pkt 5fpkt"];
1120--7122[label="0.263158;5pkt 5fpkt"];
1120--7710[label="0.0714286;1pkt 1fpkt"];
1120--7783[label="0.227273;5pkt 5fpkt"];
1120--7832[label="0.1;5pkt 5fpkt"];
1120--7938[label="0.0574713;5pkt 5fpkt"];
1120--8592[label="0.28;14pkt 14fpkt"];
1120--8713[label="0.441176;30pkt 30fpkt"];
1120--8876[label="0.0735294;5pkt 5fpkt"];
1120--8914[label="0.25;5pkt 5fpkt"];
1120--9340[label="0.217391;5pkt 5fpkt"];
1120--9376[label="0.0980392;5pkt 5fpkt"];
1141--1386[label="0.132743;15pkt 15fpkt"];
1141--1425[label="0.00884956;1pkt 1fpkt"];
1141--1517[label="0.0176991;2pkt 2fpkt"];
1141--1555[label="0.00934579;1pkt 1fpkt"];
1141--1640[label="0.0307692;2pkt 2fpkt"];
1141--1679[label="0.116071;13pkt 13fpkt"];
1141--1689[label="0.0555556;6pkt 6fpkt"];
1141--2324[label="0.0176991;2pkt 2fpkt"];
1141--3296[label="0.176991;20pkt 20fpkt"];
1210--1917[label="0.0978261;9pkt 9fpkt"];
1210--1921[label="0.383387;120pkt 120fpkt"];
1210--1925[label="0.0508475;3pkt 3fpkt"];
1210--4949[label="1;313pkt 313fpkt"];
1210--7431[label="1;313pkt 313fpkt"];
1210--9111[label="0.996805;312pkt 312fpkt"];
1358--1555[label="0.0185185;1pkt 1fpkt"];
1358--5742[label="1;54pkt 54fpkt"];
1358--7989[label="1;54pkt 54fpkt"];
1666--1921[label="0.0151515;1pkt 1fpkt"];
1666--2555[label="0.0151515;1pkt 1fpkt"];
1666--2581[label="0.621212;41pkt 41fpkt"];
1666--3138[label="1;47pkt 47fpkt"];
1666--3296[label="0.181818;12pkt 12fpkt"];
1666--3462[label="0.984848;65pkt 65fpkt"];
1666--6399[label="0.984848;65pkt 65fpkt"];
1666--8453[label="0.984848;65pkt 65fpkt"];
1669--1679[label="0.00952381;1pkt 1fpkt"];
1669--1731[label="0.102564;8pkt 8fpkt"];
1669--1917[label="0.0217391;2pkt 2fpkt"];
1669--2036[label="0.0714286;1pkt 1fpkt"];
1669--2199[label="0.0217391;1pkt 1fpkt"];
1669--2324[label="0.00952381;1pkt 1fpkt"];
1669--2980[label="0.117647;8pkt 8fpkt"];
1690--2220[label="0.0408163;2pkt 2fpkt"];
1690--2800[label="0.1;1pkt 1fpkt"];
1690--3143[label="0.0408163;2pkt 2fpkt"];
1690--3225[label="0.0408163;2pkt 2fpkt"];
1690--3408[label="0.117647;2pkt 2fpkt"];
1690--4373[label="0.428571;21pkt 21fpkt"];
1690--4416[label="0.142857;7pkt 7fpkt"];
1690--4723[label="0.222222;2pkt 2fpkt"];
1690--6361[label="0.111111;2pkt 2fpkt"];
1690--7025[label="0.428571;21pkt 21fpkt"];
1690--8432[label="0.111111;2pkt 2fpkt"];
1690--8850[label="0.428571;21pkt 21fpkt"];
1731--2959[label="0.1;2pkt 2fpkt"];
1731--2980[label="1;68pkt 68fpkt"];
1731--3154[label="0.679487;53pkt 53fpkt"];
1731--3561[label="0.0322581;2pkt 2fpkt"];
1731--4516[label="0.1;2pkt 2fpkt"];
1731--5382[label="0.679487;53pkt 53fpkt"];
1731--5392[label="0.025641;1pkt 1fpkt"];
1731--5805[label="0.0181818;1pkt 1fpkt"];
1731--7122[label="0.105263;2pkt 2fpkt"];
1731--7730[label="0.679487;53pkt 53fpkt"];
1731--8030[label="0.0185185;1pkt 1fpkt"];
1731--8914[label="0.1;2pkt 2fpkt"];
1731--9309[label="0.679487;53pkt 53fpkt"];
1731--9499[label="0.0181818;1pkt 1fpkt"];
1893--3121[label="1;25pkt 25fpkt"];
1917--1924[label="0.0108696;1pkt 1fpkt"];
1917--1972[label="0.0875;7pkt 7fpkt"];
1917--2220[label="0.14;7pkt 7fpkt"];
1917--2749[label="0.0108696;1pkt 1fpkt"];
1917--2831[label="0.0108696;1pkt 1fpkt"];
1917--3037[label="0.0138889;1pkt 1fpkt"];
1917--3057[label="0.0875;7pkt 7fpkt"];
1917--3143[label="0.142857;7pkt 7fpkt"];
1917--3225[label="0.0217391;2pkt 2fpkt"];
1917--3233[label="0.0108696;1pkt 1fpkt"];
1917--3528[label="0.0333333;1pkt 1fpkt"];
1917--3702[label="0.0434783;4pkt 4fpkt"];
1917--3867[label="0.0909091;2pkt 2fpkt"];
1917--4125[label="0.012987;1pkt 1fpkt"];
1917--4373[label="0.0434783;4pkt 4fpkt"];
1917--4519[label="0.0108696;1pkt 1fpkt"];
1917--4577[label="0.0108696;1pkt 1fpkt"];
1917--4614[label="0.0217391;1pkt 1fpkt"];
1917--4642[label="0.08;6pkt 6fpkt"];
1917--4650[label="0.047619;1pkt 1fpkt"];
1917--4949[label="0.184783;17pkt 17fpkt"];
1917--4975[label="0.111111;1pkt 1fpkt"];
1917--5037[label="0.0853659;7pkt 7fpkt"];
1917--5351[label="0.0217391;2pkt 2fpkt"];
1917--5416[label="0.0108696;1pkt 1fpkt"];
1917--5632[label="0.0869565;8pkt 8fpkt"];
1917--5704[label="0.0217391;2pkt 2fpkt"];
1917--6566[label="0.043956;4pkt 4fpkt"];
1917--6668[label="0.0869565;2pkt 2fpkt"];
1917--6847[label="0.012987;1pkt 1fpkt"];
1917--7025[label="0.0434783;4pkt 4fpkt"];
1917--7125[label="0.0108696;1pkt 1fpkt"];
1917--7167[label="0.0108696;1pkt 1fpkt"];
1917--7189[label="0.0217391;1pkt 1fpkt"];
1917--7206[label="0.0789474;6pkt 6fpkt"];
1917--7212[label="0.047619;1pkt 1fpkt"];
1917--7431[label="0.184783;17pkt 17fpkt"];
1917--7447[label="0.111111;1pkt 1fpkt"];
1917--7911[label="0.0869565;8pkt 8fpkt"];
1917--8561[label="0.043956;4pkt 4fpkt"];
1917--8620[label="0.0909091;2pkt 2fpkt"];
1917--8850[label="0.0434783;4pkt 4fpkt"];
1917--8917[label="0.0108696;1pkt 1fpkt"];
1917--8945[label="0.0108696;1pkt 1fpkt"];
1917--8959[label="0.0222222;1pkt 1fpkt"];
1917--9111[label="0.184783;17pkt 17fpkt"];
1917--9123[label="0.111111;1pkt 1fpkt"];
1917--9422[label="0.0869565;8pkt 8fpkt"];
1921--1973[label="0.185185;5pkt 5fpkt"];
1921--2143[label="0.0576923;9pkt 9fpkt"];
1921--2283[label="0.145161;9pkt 9fpkt"];
1921--2533[label="0.00290698;1pkt 1fpkt"];
1921--2639[label="0.0776699;8pkt 8fpkt"];
1921--2730[label="0.0120482;2pkt 2fpkt"];
1921--2831[label="0.010989;5pkt 5fpkt"];
1921--2861[label="0.323529;11pkt 11fpkt"];
1921--2991[label="0.170732;14pkt 14fpkt"];
1921--3006[label="0.0106383;1pkt 1fpkt"];
1921--3049[label="0.0650888;11pkt 11fpkt"];
1921--3058[label="0.185185;5pkt 5fpkt"];
1921--3138[label="0.0212766;1pkt 1fpkt"];
1921--3207[label="0.144654;23pkt 23fpkt"];
1921--3462[label="0.0142857;1pkt 1fpkt"];
1921--3528[label="0.2;6pkt 6fpkt"];
1921--3573[label="0.0660592;29pkt 29fpkt"];
1921--3622[label="0.0686275;7pkt 7fpkt"];
1921--3796[label="0.306122;15pkt 15fpkt"];
1921--3801[label="0.793103;23pkt 23fpkt"];
1921--3816[label="0.142857;9pkt 9fpkt"];
1921--3820[label="0.652632;62pkt 62fpkt"];
1921--3843[label="0.0245902;3pkt 3fpkt"];
1921--3867[label="0.909091;20pkt 20fpkt"];
1921--4075[label="0.4375;14pkt 14fpkt"];
1921--4090[label="0.346154;9pkt 9fpkt"];
1921--4111[label="0.272727;6pkt 6fpkt"];
1921--4231[label="1;18pkt 18fpkt"];
1921--4360[label="0.0833333;1pkt 1fpkt"];
1921--4361[label="0.592593;16pkt 16fpkt"];
1921--4416[label="0.0135135;2pkt 2fpkt"];
1921--4510[label="0.0355987;11pkt 11fpkt"];
1921--4519[label="0.477612;64pkt 64fpkt"];
1921--4577[label="0.00877193;1pkt 1fpkt"];
1921--4594[label="0.0223881;3pkt 3fpkt"];
1921--4614[label="0.26087;12pkt 12fpkt"];
1921--4650[label="0.52381;11pkt 11fpkt"];
1921--4712[label="0.478261;11pkt 11fpkt"];
1921--4826[label="1;18pkt 18fpkt"];
1921--4856[label="1;48pkt 48fpkt"];
1921--4949[label="0.350785;134pkt 134fpkt"];
1921--4975[label="0.666667;6pkt 6fpkt"];
1921--4982[label="0.142857;2pkt 2fpkt"];
1921--4988[label="0.0176991;2pkt 2fpkt"];
1921--5175[label="0.441176;15pkt 15fpkt"];
1921--5201[label="0.52381;11pkt 11fpkt"];
1921--5340[label="0.1;1pkt 1fpkt"];
1921--5343[label="0.621429;87pkt 87fpkt"];
1921--5362[label="0.609756;25pkt 25fpkt"];
1921--5384[label="0.185185;5pkt 5fpkt"];
1921--5395[label="0.278481;22pkt 22fpkt"];
1921--5440[label="0.0089955;6pkt 6fpkt"];
1921--5565[label="0.025641;1pkt 1fpkt"];
1921--5632[label="0.0116279;13pkt 13fpkt"];
1921--5653[label="0.588235;10pkt 10fpkt"];
1921--5670[label="0.159091;14pkt 14fpkt"];
1921--5673[label="0.04;2pkt 2fpkt"];
1921--5704[label="0.0107066;5pkt 5fpkt"];
1921--5745[label="0.134503;23pkt 23fpkt"];
1921--6054[label="0.245902;15pkt 15fpkt"];
1921--6077[label="0.268293;11pkt 11fpkt"];
1921--6280[label="0.00714286;3pkt 3fpkt"];
1921--6399[label="0.0142857;1pkt 1fpkt"];
1921--6472[label="0.0660592;29pkt 29fpkt"];
1921--6510[label="0.0776699;8pkt 8fpkt"];
1921--6621[label="0.3;15pkt 15fpkt"];
1921--6632[label="0.145161;9pkt 9fpkt"];
1921--6668[label="0.913043;21pkt 21fpkt"];
1921--6809[label="0.4375;14pkt 14fpkt"];
1921--6822[label="0.346154;9pkt 9fpkt"];
1921--6838[label="0.272727;6pkt 6fpkt"];
1921--6925[label="1;17pkt 17fpkt"];
1921--7019[label="0.0833333;1pkt 1fpkt"];
1921--7020[label="0.576923;15pkt 15fpkt"];
1921--7125[label="0.477612;64pkt 64fpkt"];
1921--7167[label="0.00877193;1pkt 1fpkt"];
1921--7179[label="0.0223881;3pkt 3fpkt"];
1921--7189[label="0.26087;12pkt 12fpkt"];
1921--7212[label="0.52381;11pkt 11fpkt"];
1921--7346[label="1;18pkt 18fpkt"];
1921--7366[label="1;47pkt 47fpkt"];
1921--7431[label="0.350785;134pkt 134fpkt"];
1921--7447[label="0.666667;6pkt 6fpkt"];
1921--7454[label="0.133333;2pkt 2fpkt"];
1921--7459[label="0.0181818;2pkt 2fpkt"];
1921--7604[label="0.52381;11pkt 11fpkt"];
1921--7707[label="0.111111;1pkt 1fpkt"];
1921--7709[label="0.621429;87pkt 87fpkt"];
1921--7718[label="0.625;25pkt 25fpkt"];
1921--7732[label="0.192308;5pkt 5fpkt"];
1921--7740[label="0.278481;22pkt 22fpkt"];
1921--7911[label="0.0116279;13pkt 13fpkt"];
1921--7938[label="0.16092;14pkt 14fpkt"];
1921--7992[label="0.129412;22pkt 22fpkt"];
1921--8209[label="0.245902;15pkt 15fpkt"];
1921--8228[label="0.25;10pkt 10fpkt"];
1921--8377[label="0.00714286;3pkt 3fpkt"];
1921--8453[label="0.0142857;1pkt 1fpkt"];
1921--8592[label="0.3;15pkt 15fpkt"];
1921--8598[label="0.142857;9pkt 9fpkt"];
1921--8620[label="0.909091;20pkt 20fpkt"];
1921--8710[label="0.451613;14pkt 14fpkt"];
1921--8718[label="0.36;9pkt 9fpkt"];
1921--8789[label="1;17pkt 17fpkt"];
1921--8846[label="0.0909091;1pkt 1fpkt"];
1921--8917[label="0.477612;64pkt 64fpkt"];
1921--8945[label="0.00869565;1pkt 1fpkt"];
1921--8953[label="0.0223881;3pkt 3fpkt"];
1921--8959[label="0.266667;12pkt 12fpkt"];
1921--9063[label="1;18pkt 18fpkt"];
1921--9111[label="0.351706;134pkt 134fpkt"];
1921--9123[label="0.666667;6pkt 6fpkt"];
1921--9124[label="0.133333;2pkt 2fpkt"];
1921--9224[label="0.545455;12pkt 12fpkt"];
1921--9296[label="0.621429;87pkt 87fpkt"];
1921--9301[label="0.609756;25pkt 25fpkt"];
1921--9315[label="0.282051;22pkt 22fpkt"];
1921--9422[label="0.0116279;13pkt 13fpkt"];
1921--9472[label="0.129412;22pkt 22fpkt"];
1921--9633[label="0.25;10pkt 10fpkt"];
2143--2217[label="0.0294118;2pkt 2fpkt"];
2143--3296[label="0.025641;4pkt 4fpkt"];
2192--2346[label="0.0172414;1pkt 1fpkt"];
2192--2441[label="0.0357143;1pkt 1fpkt"];
2192--2516[label="0.0188679;1pkt 1fpkt"];
2192--2569[label="0.025974;2pkt 2fpkt"];
2192--3296[label="0.236;59pkt 59fpkt"];
2192--3333[label="1;250pkt 250fpkt"];
2192--6304[label="1;250pkt 250fpkt"];
2386--3246[label="1;61pkt 61fpkt"];
2386--4043[label="1;61pkt 61fpkt"];
2402--3209[label="1;44pkt 44fpkt"];
2402--3296[label="0.122449;6pkt 6fpkt"];
3138--3462[label="0.978723;46pkt 46fpkt"];
3138--6399[label="0.978723;46pkt 46fpkt"];
3138--8453[label="0.978723;46pkt 46fpkt"];
3207--5745[label="1;159pkt 159fpkt"];
3207--7992[label="0.993711;158pkt 158fpkt"];
3207--9472[label="0.993711;158pkt 158fpkt"];
3225--3296[label="0.0303797;12pkt 12fpkt"];
3246--4043[label="1;61pkt 61fpkt"];
3462--6399[label="1;70pkt 70fpkt"];
3462--8453[label="1;70pkt 70fpkt"];
3631--6517[label="1;36pkt 36fpkt"];
3631--8528[label="1;36pkt 36fpkt"];
3702--6566[label="1;91pkt 91fpkt"];
3702--8561[label="1;91pkt 91fpkt"];
3867--6668[label="1;22pkt 22fpkt"];
3867--8620[label="1;22pkt 22fpkt"];
3933--6712[label="1;73pkt 73fpkt"];
3933--8646[label="1;73pkt 73fpkt"];
4172--6879[label="1;31pkt 31fpkt"];
4231--6925[label="1;17pkt 17fpkt"];
4231--8789[label="1;17pkt 17fpkt"];
4296--6971[label="1;37pkt 37fpkt"];
4296--8818[label="1;37pkt 37fpkt"];
4421--7062[label="1;68pkt 68fpkt"];
4421--8876[label="1;68pkt 68fpkt"];
4516--7122[label="1;19pkt 19fpkt"];
4516--8914[label="1;20pkt 20fpkt"];
4519--7125[label="1;134pkt 134fpkt"];
4519--8917[label="1;134pkt 134fpkt"];
4588--7175[label="1;51pkt 51fpkt"];
4614--7189[label="1;46pkt 46fpkt"];
4614--8959[label="1;45pkt 45fpkt"];
4650--7212[label="1;21pkt 21fpkt"];
4856--7366[label="1;47pkt 47fpkt"];
4949--7431[label="1;382pkt 382fpkt"];
4949--9111[label="1;381pkt 381fpkt"];
4954--7434[label="1;34pkt 34fpkt"];
4954--9114[label="1;34pkt 34fpkt"];
4975--7447[label="1;9pkt 9fpkt"];
4975--9123[label="1;9pkt 9fpkt"];
5201--7604[label="1;21pkt 21fpkt"];
5201--9224[label="1;21pkt 21fpkt"];
5322--7693[label="1;4pkt 4fpkt"];
5322--9285[label="1;5pkt 5fpkt"];
5345--7710[label="1;14pkt 14fpkt"];
5362--7718[label="1;40pkt 40fpkt"];
5362--9301[label="1;41pkt 41fpkt"];
5385--7733[label="1;68pkt 68fpkt"];
5385--9311[label="1;68pkt 68fpkt"];
5533--7832[label="1;50pkt 50fpkt"];
5533--9376[label="1;51pkt 51fpkt"];
5670--7938[label="1;87pkt 87fpkt"];
5742--7989[label="1;54pkt 54fpkt"];
5745--7992[label="1;170pkt 170fpkt"];
5745--9472[label="1;170pkt 170fpkt"];
5800--8027[label="1;8pkt 8fpkt"];
5805--8030[label="1;54pkt 54fpkt"];
5805--9499[label="1;55pkt 55fpkt"];
6077--8228[label="1;40pkt 40fpkt"];
6077--9633[label="1;40pkt 40fpkt"];
6087--8235[label="1;10pkt 10fpkt"];
6087--9636[label="1;11pkt 11fpkt"];
6399--8453[label="1;70pkt 70fpkt"];
6517--8528[label="1;36pkt 36fpkt"];
6566--8561[label="1;91pkt 91fpkt"];
6668--8620[label="1;22pkt 22fpkt"];
6712--8646[label="1;73pkt 73fpkt"];
6925--8789[label="1;17pkt 17fpkt"];
6971--8818[label="1;38pkt 38fpkt"];
7062--8876[label="1;68pkt 68fpkt"];
7122--8914[label="1;19pkt 19fpkt"];
7125--8917[label="1;134pkt 134fpkt"];
7189--8959[label="1;45pkt 45fpkt"];
7431--9111[label="1;381pkt 381fpkt"];
7434--9114[label="1;34pkt 34fpkt"];
7447--9123[label="1;9pkt 9fpkt"];
7604--9224[label="1;21pkt 21fpkt"];
7693--9285[label="1;4pkt 4fpkt"];
7718--9301[label="1;40pkt 40fpkt"];
7733--9311[label="1;68pkt 68fpkt"];
7832--9376[label="1;50pkt 50fpkt"];
7992--9472[label="1;170pkt 170fpkt"];
8030--9499[label="1;54pkt 54fpkt"];
8228--9633[label="1;40pkt 40fpkt"];
8235--9636[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.82.151" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.141.52.201"/>
    </slice>
    <from sec="1144127455" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
2116[label="210.226.98.202;s;20pkt 20fpkt", shape=diamond, color=yellow];
5733[label="210.226.98.202;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7982[label="210.226.98.202;19pkt 19fpkt", shape=invtriangle, color=brown];
9464[label="210.226.98.202;19pkt 19fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.202:5050, *:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.8718%)&lt;BR/&gt; 23: (5.12821%)&lt;BR/&gt; 36643: (2.5641%)&lt;BR/&gt; 4174: (2.5641%)&lt;BR/&gt; 3152: (2.5641%)&gt;];
}
2116--5733[label="1;20pkt 20fpkt"];
2116--7982[label="1;19pkt 19fpkt"];
2116--9464[label="1;19pkt 19fpkt"];
5733--7982[label="1;19pkt 19fpkt"];
5733--9464[label="1;19pkt 19fpkt"];
7982--9464[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.202" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
859[label="161.223.51.203;s;546pkt 546fpkt", shape=diamond, color=yellow];
5740[label="161.223.51.203;559pkt 559fpkt", shape=pentagon, color=darkviolet];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.51.203:32794, *:53}[96.2433%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32794: (48.1448%)&lt;BR/&gt; 53: (48.1448%)&lt;BR/&gt; 0: (3.71041%)&gt;];
}
859--906[label="0.00568182;1pkt 1fpkt"];
859--1503[label="0.00274725;1pkt 1fpkt"];
859--1811[label="0.0060241;1pkt 1fpkt"];
859--1818[label="0.0126582;1pkt 1fpkt"];
859--1864[label="0.00584795;1pkt 1fpkt"];
859--1900[label="0.0147059;1pkt 1fpkt"];
859--1930[label="0.00689655;1pkt 1fpkt"];
859--2178[label="0.00628931;1pkt 1fpkt"];
859--2378[label="0.0131579;1pkt 1fpkt"];
859--2515[label="0.00571429;1pkt 1fpkt"];
859--2522[label="0.00641026;1pkt 1fpkt"];
859--2564[label="0.00584795;1pkt 1fpkt"];
859--3290[label="0.10989;60pkt 60fpkt"];
859--3295[label="0.135531;74pkt 74fpkt"];
859--5740[label="1;546pkt 546fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="161.223.51.203" src_port="32794"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.188.113.204"/>
    </slice>
    <from sec="1144126858" usec="0"/>
    <to sec="1144126870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.141.204"/>
    </slice>
    <from sec="1144126841" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.10.76.206"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.100.181.206"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
917[label="214.60.235.206;s;2pkt 2fpkt", shape=diamond, color=yellow];
5782[label="214.60.235.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8016[label="214.60.235.206;1pkt 1fpkt", shape=invtriangle, color=brown];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.60.235.206:18810, 147.13.228.63:6669}[50%]&lt;BR/&gt;{214.60.235.206:22138, 147.13.228.63:6666}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18810: (30%)&lt;BR/&gt; 6669: (30%)&lt;BR/&gt; 22138: (20%)&lt;BR/&gt; 6666: (20%)&gt;];
}
917--3001[label="1;2pkt 2fpkt"];
917--5782[label="1;2pkt 2fpkt"];
917--8016[label="1;1pkt 1fpkt"];
5782--8016[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="214.60.235.206" src_port="22138"/>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="214.60.235.206" src_port="18810"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.3.119.207"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
1957[label="195.89.66.200;s;316pkt 316fpkt", shape=diamond, color=yellow];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.66.200:32819, *:53}[62.0253%]&lt;BR/&gt;{195.89.66.200:53, *:*}[36.0759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32819: (31.0127%)&lt;BR/&gt; 0: (0.949367%)&lt;BR/&gt; 32773: (0.474684%)&lt;BR/&gt; 32772: (0.474684%)&gt;];
}
1957--2178[label="0.00628931;1pkt 1fpkt"];
1957--2515[label="0.00571429;1pkt 1fpkt"];
1957--2522[label="0.00641026;1pkt 1fpkt"];
1957--2545[label="0.0625;1pkt 1fpkt"];
1957--2564[label="0.00584795;1pkt 1fpkt"];
1957--3287[label="0.0189873;6pkt 6fpkt"];
1957--3290[label="0.0126582;4pkt 4fpkt"];
1957--3295[label="0.00949367;3pkt 3fpkt"];
1957--3302[label="0.0379747;12pkt 12fpkt"];
1957--5702[label="1;316pkt 316fpkt"];
1957--7960[label="1;316pkt 316fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.66.200" src_port="53"/>
      <filter dst_port="53" src_ip="195.89.66.200" src_port="32819"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.226.98.208"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
2100[label="147.13.162.130;d;183pkt 183fpkt", shape=diamond, color=yellow];
3878[label="83.181.122.42;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4798[label="83.181.122.128;48pkt 48fpkt", shape=pentagon, color=darkviolet];
5795[label="83.181.122.208;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7325[label="83.181.122.128;48pkt 48fpkt", shape=invtriangle, color=brown];
8025[label="83.181.122.208;13pkt 13fpkt", shape=invtriangle, color=brown];
9047[label="83.181.122.128;48pkt 48fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.122.128:80, 147.13.162.130:*}[26.4865%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3113%)&lt;BR/&gt; 4023: (0.550964%)&lt;BR/&gt; 4005: (0.550964%)&lt;BR/&gt; 4000: (0.550964%)&lt;BR/&gt; 3991: (0.550964%)&gt;];
}
2100--3292[label="0.180328;33pkt 33fpkt"];
2100--3303[label="0.180328;33pkt 33fpkt"];
2100--3878[label="1;10pkt 10fpkt"];
2100--4148[label="0.666667;22pkt 22fpkt"];
2100--4625[label="0.0294118;1pkt 1fpkt"];
2100--4798[label="1;48pkt 48fpkt"];
2100--5795[label="0.846154;11pkt 11fpkt"];
2100--6864[label="0.647059;22pkt 22fpkt"];
2100--7325[label="1;48pkt 48fpkt"];
2100--8025[label="0.846154;11pkt 11fpkt"];
2100--8750[label="0.647059;22pkt 22fpkt"];
2100--9047[label="1;48pkt 48fpkt"];
4798--7325[label="1;48pkt 48fpkt"];
4798--9047[label="1;48pkt 48fpkt"];
5795--8025[label="1;13pkt 13fpkt"];
7325--9047[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.162.130" src_ip="83.181.122.128" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.169.186.208"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.210.177.209"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
2664[label="80.70.174.218;d;2pkt 2fpkt", shape=diamond, color=yellow];
5821[label="132.18.189.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.189.209:38092, 220.108.223.144:80}[25%]&lt;BR/&gt;{132.18.189.209:38093, 220.108.223.144:80}[25%]&lt;BR/&gt;{132.18.189.209:38094, 80.70.174.218:80}[25%]&lt;BR/&gt;{132.18.189.209:38095, 80.70.174.218:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38095: (16.6667%)&lt;BR/&gt; 38094: (16.6667%)&lt;BR/&gt; 38093: (8.33333%)&lt;BR/&gt; 38092: (8.33333%)&gt;];
}
2664--3296[label="1;2pkt 2fpkt"];
2664--5821[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="80.70.174.218" dst_port="80" src_ip="132.18.189.209" src_port="38095"/>
      <filter dst_ip="80.70.174.218" dst_port="80" src_ip="132.18.189.209" src_port="38094"/>
      <filter dst_ip="220.108.223.144" dst_port="80" src_ip="132.18.189.209" src_port="38093"/>
      <filter dst_ip="220.108.223.144" dst_port="80" src_ip="132.18.189.209" src_port="38092"/>
    </slice>
    <from sec="1144127478" usec="0"/>
    <to sec="1144127667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.174.210"/>
    </slice>
    <from sec="1144126828" usec="0"/>
    <to sec="1144127641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.156.181.210"/>
    </slice>
    <from sec="1144127585" usec="0"/>
    <to sec="1144127653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
1002[label="132.19.54.75;d;540pkt 540fpkt", shape=diamond, color=yellow];
1766[label="215.51.133.246;s;317pkt 317fpkt", shape=diamond, color=yellow];
5209[label="214.213.192.158;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5837[label="208.104.32.211;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6219[label="215.51.133.246;332pkt 332fpkt", shape=pentagon, color=darkviolet];
6272[label="208.35.27.253;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7609[label="214.213.192.158;27pkt 27fpkt", shape=invtriangle, color=brown];
8332[label="215.51.133.246;332pkt 332fpkt", shape=invtriangle, color=brown];
9227[label="214.213.192.158;28pkt 28fpkt", shape=invhouse, color=bisque];
9708[label="215.51.133.246;331pkt 331fpkt", shape=invhouse, color=bisque];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.51.133.246:*, 132.19.54.75:80}[53.4733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24601: (0.2003%)&lt;BR/&gt; 25068: (0.150225%)&lt;BR/&gt; 25434: (0.125188%)&lt;BR/&gt; 25187: (0.125188%)&gt;];
}
1002--1766[label="0.826498;262pkt 262fpkt"];
1002--5209[label="1;27pkt 27fpkt"];
1002--5837[label="0.805556;29pkt 29fpkt"];
1002--6219[label="0.789157;262pkt 262fpkt"];
1002--6272[label="0.925926;25pkt 25fpkt"];
1002--7609[label="1;27pkt 27fpkt"];
1002--8332[label="0.789157;262pkt 262fpkt"];
1002--9227[label="1;28pkt 28fpkt"];
1002--9708[label="0.791541;262pkt 262fpkt"];
1766--3296[label="0.0630915;20pkt 20fpkt"];
1766--6219[label="1;317pkt 317fpkt"];
1766--8332[label="1;317pkt 317fpkt"];
1766--9708[label="0.996845;316pkt 316fpkt"];
5209--7609[label="1;27pkt 27fpkt"];
5209--9227[label="1;27pkt 27fpkt"];
6219--8332[label="1;332pkt 332fpkt"];
6219--9708[label="1;331pkt 331fpkt"];
7609--9227[label="1;27pkt 27fpkt"];
8332--9708[label="1;331pkt 331fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.54.75" dst_port="80" src_ip="215.51.133.246"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
1404[label="164.23.231.42;d;6pkt 6fpkt", shape=diamond, color=yellow];
2180[label="210.226.98.211;s;24pkt 24fpkt", shape=diamond, color=yellow];
2903[label="83.163.160.4;s;720pkt 720fpkt", shape=hexagon, color=black];
3243[label="210.226.98.211;s;24pkt 24fpkt", shape=hexagon, color=black];
5839[label="210.226.98.211;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8054[label="210.226.98.211;24pkt 24fpkt", shape=invtriangle, color=brown];
9518[label="210.226.98.211;24pkt 24fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.163.160.4:1203, *:1434}[96.2567%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1203: (42.9669%)&lt;BR/&gt; 1434: (42.6123%)&lt;BR/&gt; 5050: (5.96927%)&lt;BR/&gt; 23: (0.886525%)&lt;BR/&gt; 60635: (0.295508%)&gt;];
}
1404--2180[label="0.166667;1pkt 1fpkt"];
1404--2903[label="0.166667;1pkt 1fpkt"];
1404--3243[label="0.166667;1pkt 1fpkt"];
1404--4967[label="0.166667;1pkt 1fpkt"];
1404--5839[label="0.166667;1pkt 1fpkt"];
1404--8054[label="0.166667;1pkt 1fpkt"];
1404--9518[label="0.166667;1pkt 1fpkt"];
2180--3243[label="1;24pkt 24fpkt"];
2180--5839[label="1;24pkt 24fpkt"];
2180--8054[label="1;24pkt 24fpkt"];
2180--9518[label="1;24pkt 24fpkt"];
3243--5839[label="1;24pkt 24fpkt"];
3243--8054[label="1;24pkt 24fpkt"];
3243--9518[label="1;24pkt 24fpkt"];
5839--8054[label="1;24pkt 24fpkt"];
5839--9518[label="1;24pkt 24fpkt"];
8054--9518[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.163.160.4" src_port="1203"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.223.100.211"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
695[label="38.113.15.66;d;2pkt 2fpkt", shape=diamond, color=yellow];
696[label="132.19.51.212;s;2pkt 2fpkt", shape=diamond, color=yellow];
5846[label="132.19.51.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.51.212:1031, 38.113.15.66:443}[50%]&lt;BR/&gt;{132.19.51.212:1416, 38.113.15.66:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1416: (25%)&lt;BR/&gt; 1031: (25%)&gt;];
}
695--696[label="1;2pkt 2fpkt"];
695--5846[label="1;2pkt 2fpkt"];
696--5846[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="38.113.15.66" dst_port="443" src_ip="132.19.51.212" src_port="1416"/>
      <filter dst_ip="38.113.15.66" dst_port="443" src_ip="132.19.51.212" src_port="1031"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
2163[label="161.223.80.212;s;87pkt 87fpkt", shape=diamond, color=yellow];
3195[label="161.223.80.212;s;81pkt 81fpkt", shape=hexagon, color=black];
5848[label="161.223.80.212;91pkt 91fpkt", shape=pentagon, color=darkviolet];
8058[label="161.223.80.212;90pkt 90fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.80.212:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62411: (0.573066%)&lt;BR/&gt; 62298: (0.573066%)&lt;BR/&gt; 59183: (0.573066%)&lt;BR/&gt; 57555: (0.573066%)&gt;];
}
2163--3195[label="1;81pkt 81fpkt"];
2163--5848[label="1;87pkt 87fpkt"];
2163--8058[label="0.988506;86pkt 86fpkt"];
3195--5848[label="1;81pkt 81fpkt"];
3195--8058[label="0.987654;80pkt 80fpkt"];
5848--8058[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.80.212" src_port="25"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.226.98.213"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
1785[label="33.38.100.213;s;3pkt 3fpkt", shape=diamond, color=yellow];
2247[label="132.19.196.171;d;145pkt 145fpkt", shape=diamond, color=yellow];
2679[label="33.38.100.133;s;5pkt 5fpkt", shape=diamond, color=yellow];
2994[label="33.38.100.213;s;3pkt 3fpkt", shape=hexagon, color=black];
4833[label="33.38.100.130;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4883[label="33.38.100.133;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5121[label="34.186.60.152;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5752[label="33.38.100.204;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5864[label="33.38.100.213;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7385[label="33.38.100.133;13pkt 13fpkt", shape=invtriangle, color=brown];
7548[label="34.186.60.152;2pkt 2fpkt", shape=invtriangle, color=brown];
7999[label="33.38.100.204;4pkt 4fpkt", shape=invtriangle, color=brown];
9082[label="33.38.100.133;12pkt 12fpkt", shape=invhouse, color=bisque];
9186[label="34.186.60.152;3pkt 3fpkt", shape=invhouse, color=bisque];
9478[label="33.38.100.204;4pkt 4fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.32.96.29:80, 132.19.196.171:*}[28.6624%]&lt;BR/&gt;{216.94.153.105:80, 132.19.196.171:*}[20.3822%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2301%)&lt;BR/&gt; 443: (1.76991%)&lt;BR/&gt; 3450: (0.884956%)&lt;BR/&gt; 3383: (0.884956%)&lt;BR/&gt; 3371: (0.884956%)&gt;];
}
1785--2247[label="1;3pkt 3fpkt"];
1785--2994[label="1;3pkt 3fpkt"];
1785--5864[label="1;3pkt 3fpkt"];
2247--2994[label="1;3pkt 3fpkt"];
2247--3216[label="0.6625;53pkt 53fpkt"];
2247--3689[label="0.0140845;2pkt 2fpkt"];
2247--3726[label="0.56383;53pkt 53fpkt"];
2247--4041[label="0.714286;5pkt 5fpkt"];
2247--4833[label="0.6;3pkt 3fpkt"];
2247--4883[label="0.615385;8pkt 8fpkt"];
2247--5121[label="1;3pkt 3fpkt"];
2247--5318[label="0.185185;10pkt 10fpkt"];
2247--5752[label="0.5;2pkt 2fpkt"];
2247--5864[label="0.571429;4pkt 4fpkt"];
2247--6557[label="0.013986;2pkt 2fpkt"];
2247--6578[label="0.56383;53pkt 53fpkt"];
2247--6787[label="0.714286;5pkt 5fpkt"];
2247--7385[label="0.615385;8pkt 8fpkt"];
2247--7548[label="1;2pkt 2fpkt"];
2247--7689[label="0.185185;10pkt 10fpkt"];
2247--7999[label="0.5;2pkt 2fpkt"];
2247--8553[label="0.0140845;2pkt 2fpkt"];
2247--8698[label="0.666667;4pkt 4fpkt"];
2247--9082[label="0.583333;7pkt 7fpkt"];
2247--9186[label="1;3pkt 3fpkt"];
2247--9281[label="0.188679;10pkt 10fpkt"];
2247--9478[label="0.5;2pkt 2fpkt"];
2679--4883[label="1;5pkt 5fpkt"];
2679--7385[label="1;5pkt 5fpkt"];
2679--9082[label="1;5pkt 5fpkt"];
2994--5864[label="1;3pkt 3fpkt"];
4883--7385[label="1;13pkt 13fpkt"];
4883--9082[label="1;12pkt 12fpkt"];
5121--7548[label="1;2pkt 2fpkt"];
5121--9186[label="1;3pkt 3fpkt"];
5752--7999[label="1;4pkt 4fpkt"];
5752--9478[label="1;4pkt 4fpkt"];
7385--9082[label="1;12pkt 12fpkt"];
7548--9186[label="1;2pkt 2fpkt"];
7999--9478[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.196.171" src_ip="217.32.96.29" src_port="80"/>
      <filter dst_ip="132.19.196.171" src_ip="216.94.153.105" src_port="80"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
2071[label="53.110.225.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
5868[label="53.110.225.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8074[label="53.110.225.213;1pkt 1fpkt", shape=invtriangle, color=brown];
9530[label="53.110.225.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.110.225.213:9016, 194.212.152.241:23932}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23932: (50%)&lt;BR/&gt; 9016: (50%)&gt;];
}
2071--5868[label="1;1pkt 1fpkt"];
2071--8074[label="1;1pkt 1fpkt"];
2071--9530[label="1;1pkt 1fpkt"];
5868--8074[label="1;1pkt 1fpkt"];
5868--9530[label="1;1pkt 1fpkt"];
8074--9530[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.152.241" dst_port="23932" src_ip="53.110.225.213" src_port="9016"/>
    </slice>
    <from sec="1144127262" usec="0"/>
    <to sec="1144127320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.217.34.215"/>
    </slice>
    <from sec="1144127256" usec="0"/>
    <to sec="1144127423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.128.53.215"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.226.98.215"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.131.215"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.70.146.215"/>
    </slice>
    <from sec="1144127263" usec="0"/>
    <to sec="1144127283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7015,2.3052,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
374[label="210.169.222.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
902[label="128.202.6.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
5894[label="210.169.222.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9545[label="210.169.222.215;1pkt 1fpkt", shape=invhouse, color=bisque];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.169.222.215:80, 128.202.6.196:1181}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1181: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
374--902[label="1;1pkt 1fpkt"];
374--3288[label="1;1pkt 1fpkt"];
374--5894[label="1;1pkt 1fpkt"];
374--9545[label="1;1pkt 1fpkt"];
902--3288[label="1;1pkt 1fpkt"];
902--5894[label="1;1pkt 1fpkt"];
902--9545[label="1;1pkt 1fpkt"];
5894--9545[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.6.196" dst_port="1181" src_ip="210.169.222.215" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.5.84.217"/>
    </slice>
    <from sec="1144127480" usec="0"/>
    <to sec="1144127523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.89.66.218"/>
    </slice>
    <from sec="1144126932" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.87.1.219"/>
    </slice>
    <from sec="1144127086" usec="0"/>
    <to sec="1144127108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.156.70.219"/>
    </slice>
    <from sec="1144126987" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.212.150.219"/>
    </slice>
    <from sec="1144126818" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.69.157.219"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.27.192.219"/>
    </slice>
    <from sec="1144127533" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.23.141.223"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.1.32.224"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.84.129.224"/>
    </slice>
    <from sec="1144127276" usec="0"/>
    <to sec="1144127331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.126.99.225"/>
    </slice>
    <from sec="1144126964" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
1328[label="195.89.117.225;s;120pkt 120fpkt", shape=diamond, color=yellow];
6003[label="195.89.117.225;131pkt 131fpkt", shape=pentagon, color=darkviolet];
8171[label="195.89.117.225;131pkt 131fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.117.225:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1328--2153[label="0.00833333;1pkt 1fpkt"];
1328--2331[label="0.00833333;1pkt 1fpkt"];
1328--6003[label="1;120pkt 120fpkt"];
1328--8171[label="1;120pkt 120fpkt"];
6003--8171[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.117.225"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
5856[label="55.11.239.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.11.239.212:80, 132.19.54.2:1736}[50%]&lt;BR/&gt;{55.11.239.212:80, 132.19.54.2:1737}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1737: (25%)&lt;BR/&gt; 1736: (25%)&gt;];
}
5856--8064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.54.2" dst_port="1737" src_ip="55.11.239.212" src_port="80"/>
      <filter dst_ip="132.19.54.2" dst_port="1736" src_ip="55.11.239.212" src_port="80"/>
    </slice>
    <from sec="1144127066" usec="0"/>
    <to sec="1144127095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.24.7.226"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_831{
style=filled;
color=gray75;
2038[label="41.25.166.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat831[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.166.5:49129, 128.28.29.146:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49129: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2038--3387[label="1;1pkt 1fpkt"];
2038--6346[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.29.146" dst_port="80" src_ip="41.25.166.5" src_port="49129"/>
    </slice>
    <from sec="1144127183" usec="0"/>
    <to sec="1144127294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.226.98.226"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.51.26.227"/>
    </slice>
    <from sec="1144126858" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.133.103.227"/>
    </slice>
    <from sec="1144127228" usec="0"/>
    <to sec="1144127416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.195.30.229"/>
    </slice>
    <from sec="1144126849" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.170.225.229"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
975[label="209.98.33.230;s;1600pkt 1600fpkt", shape=diamond, color=yellow];
6057[label="209.98.33.230;1750pkt 1750fpkt", shape=pentagon, color=darkviolet];
8212[label="209.98.33.230;1749pkt 1749fpkt", shape=invtriangle, color=brown];
9623[label="209.98.33.230;1749pkt 1749fpkt", shape=invhouse, color=bisque];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.98.33.230:3145, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3145: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
975--1764[label="0.00444444;1pkt 1fpkt"];
975--6057[label="1;1600pkt 1600fpkt"];
975--8212[label="0.999375;1599pkt 1599fpkt"];
975--9623[label="0.999375;1599pkt 1599fpkt"];
6057--8212[label="1;1749pkt 1749fpkt"];
6057--9623[label="1;1749pkt 1749fpkt"];
8212--9623[label="1;1749pkt 1749fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.98.33.230" src_port="3145"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.21.87.230"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
2356[label="161.223.52.81;d;73pkt 73fpkt", shape=diamond, color=yellow];
4681[label="199.2.119.112;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6067[label="38.190.87.231;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7237[label="199.2.119.112;7pkt 7fpkt", shape=invtriangle, color=brown];
8220[label="38.190.87.231;8pkt 8fpkt", shape=invtriangle, color=brown];
8989[label="199.2.119.112;7pkt 7fpkt", shape=invhouse, color=bisque];
9627[label="38.190.87.231;9pkt 9fpkt", shape=invhouse, color=bisque];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 161.223.52.81:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4827: (1.66667%)&lt;BR/&gt; 4705: (1.66667%)&lt;BR/&gt; 4605: (1.66667%)&lt;BR/&gt; 4482: (1.66667%)&gt;];
}
2356--3288[label="0.0410959;3pkt 3fpkt"];
2356--3292[label="0.164384;12pkt 12fpkt"];
2356--3303[label="0.164384;12pkt 12fpkt"];
2356--4681[label="0.875;7pkt 7fpkt"];
2356--6067[label="0.75;6pkt 6fpkt"];
2356--7237[label="0.857143;6pkt 6fpkt"];
2356--8220[label="0.75;6pkt 6fpkt"];
2356--8989[label="0.857143;6pkt 6fpkt"];
2356--9627[label="0.777778;7pkt 7fpkt"];
4681--7237[label="1;7pkt 7fpkt"];
4681--8989[label="1;7pkt 7fpkt"];
6067--8220[label="1;8pkt 8fpkt"];
6067--9627[label="1;8pkt 8fpkt"];
7237--8989[label="1;7pkt 7fpkt"];
8220--9627[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.52.81" src_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.36.233.232"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.140.255.232"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
2125[label="210.226.98.200;s;18pkt 18fpkt", shape=diamond, color=yellow];
2519[label="164.23.92.84;d;36pkt 36fpkt", shape=diamond, color=yellow];
5703[label="210.226.98.200;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5719[label="210.226.98.201;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5850[label="210.226.98.212;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6259[label="210.226.98.251;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8360[label="210.226.98.251;12pkt 12fpkt", shape=invtriangle, color=brown];
9643[label="210.226.98.234;13pkt 13fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5050, *:*}[62.766%]&lt;BR/&gt;{*:443, 164.23.92.84:*}[21.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34.0909%)&lt;BR/&gt; 443: (7.57576%)&lt;BR/&gt; 23: (3.78788%)&lt;BR/&gt; 1050: (3.40909%)&lt;BR/&gt; 20: (2.65152%)&gt;];
}
2125--2519[label="0.0555556;1pkt 1fpkt"];
2125--5703[label="1;18pkt 18fpkt"];
2125--7961[label="1;17pkt 17fpkt"];
2125--9452[label="1;17pkt 17fpkt"];
2519--2540[label="0.047619;1pkt 1fpkt"];
2519--4867[label="0.0294118;1pkt 1fpkt"];
2519--4967[label="0.0588235;2pkt 2fpkt"];
2519--5029[label="0.0384615;1pkt 1fpkt"];
2519--5703[label="0.0555556;1pkt 1fpkt"];
2519--5719[label="0.222222;2pkt 2fpkt"];
2519--5850[label="0.0769231;1pkt 1fpkt"];
2519--6031[label="0.05;1pkt 1fpkt"];
2519--6098[label="0.153846;2pkt 2fpkt"];
2519--6169[label="0.0344828;1pkt 1fpkt"];
2519--6259[label="0.153846;2pkt 2fpkt"];
2519--7375[label="0.030303;1pkt 1fpkt"];
2519--7492[label="0.037037;1pkt 1fpkt"];
2519--7961[label="0.0588235;1pkt 1fpkt"];
2519--8191[label="0.0526316;1pkt 1fpkt"];
2519--8244[label="0.166667;2pkt 2fpkt"];
2519--8360[label="0.166667;2pkt 2fpkt"];
2519--9151[label="0.0384615;1pkt 1fpkt"];
2519--9452[label="0.0588235;1pkt 1fpkt"];
2519--9643[label="0.153846;2pkt 2fpkt"];
5703--7961[label="1;17pkt 17fpkt"];
5703--9452[label="1;17pkt 17fpkt"];
6259--8360[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_port="5050"/>
      <filter dst_ip="164.23.92.84" src_port="443"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.136.71.234"/>
    </slice>
    <from sec="1144126866" usec="0"/>
    <to sec="1144127261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.106.130.234"/>
    </slice>
    <from sec="1144127120" usec="0"/>
    <to sec="1144127517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,010,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
753[label="208.36.198.235;s;456pkt 456fpkt", shape=diamond, color=yellow];
2783[label="208.36.198.235;s;456pkt 456fpkt", shape=hexagon, color=black];
6115[label="208.36.198.235;906pkt 906fpkt", shape=pentagon, color=darkviolet];
8254[label="208.36.198.235;906pkt 906fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.36.198.235:*, *:139}[55.1876%]&lt;BR/&gt;{208.36.198.235:*, *:445}[44.8124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (27.6432%)&lt;BR/&gt; 445: (22.3568%)&lt;BR/&gt; 1952: (0.220264%)&lt;BR/&gt; 1928: (0.220264%)&lt;BR/&gt; 1747: (0.220264%)&gt;];
}
753--2783[label="1;456pkt 456fpkt"];
753--6115[label="1;456pkt 456fpkt"];
753--8254[label="1;456pkt 456fpkt"];
2783--6115[label="1;456pkt 456fpkt"];
2783--8254[label="1;456pkt 456fpkt"];
6115--8254[label="1;906pkt 906fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.36.198.235"/>
      <filter dst_port="445" src_ip="208.36.198.235"/>
    </slice>
    <from sec="1144126882" usec="0"/>
    <to sec="1144127347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.857229,2.34417,503,0 0 0 0 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
2879[label="132.19.208.235;s;9pkt 9fpkt", shape=hexagon, color=black];
6116[label="132.19.208.235;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.208.235:*, 39.204.218.223:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 1087: (5.55556%)&lt;BR/&gt; 1086: (5.55556%)&lt;BR/&gt; 1085: (5.55556%)&lt;BR/&gt; 1084: (5.55556%)&gt;];
}
2879--6116[label="1;9pkt 9fpkt"];
2879--8255[label="1;8pkt 8fpkt"];
6116--8255[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="132.19.208.235"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.174.54.238"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.89.85.238"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.18.116.238"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.11.122.239"/>
    </slice>
    <from sec="1144126995" usec="0"/>
    <to sec="1144127054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.202.100.240"/>
    </slice>
    <from sec="1144127238" usec="0"/>
    <to sec="1144127298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.116.142.240"/>
    </slice>
    <from sec="1144127006" usec="0"/>
    <to sec="1144127056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.91.137.242"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.157.236.243"/>
    </slice>
    <from sec="1144127585" usec="0"/>
    <to sec="1144127593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
2577[label="132.19.212.157;d;20pkt 20fpkt", shape=diamond, color=yellow];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.50.92.19:80, 132.19.212.157:*}[35%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16665: (2.5%)&lt;BR/&gt; 16309: (2.5%)&lt;BR/&gt; 16184: (2.5%)&lt;BR/&gt; 16124: (2.5%)&gt;];
}
2577--3038[label="0.15;3pkt 3fpkt"];
2577--3292[label="0.05;1pkt 1fpkt"];
2577--3303[label="0.05;1pkt 1fpkt"];
2577--3343[label="0.166667;1pkt 1fpkt"];
2577--3583[label="0.875;7pkt 7fpkt"];
2577--4242[label="0.1;2pkt 2fpkt"];
2577--4942[label="0.05;1pkt 1fpkt"];
2577--5814[label="0.1;2pkt 2fpkt"];
2577--6312[label="0.166667;1pkt 1fpkt"];
2577--6480[label="0.777778;7pkt 7fpkt"];
2577--6931[label="0.1;2pkt 2fpkt"];
2577--7427[label="0.05;1pkt 1fpkt"];
2577--8037[label="0.1;2pkt 2fpkt"];
2577--8399[label="0.166667;1pkt 1fpkt"];
2577--8791[label="0.1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.212.157" src_ip="38.50.92.19" src_port="80"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_857{
style=filled;
color=gray75;
1081[label="196.111.138.254;d;285pkt 285fpkt", shape=diamond, color=yellow];
1089[label="132.19.43.128;s;97pkt 97fpkt", shape=diamond, color=yellow];
1150[label="161.223.52.82;s;75pkt 75fpkt", shape=diamond, color=yellow];
2458[label="132.19.245.200;s;84pkt 84fpkt", shape=diamond, color=yellow];
2638[label="220.194.57.135;d;86pkt 86fpkt", shape=diamond, color=yellow];
3927[label="161.223.85.48;8pkt 8fpkt", shape=pentagon, color=darkviolet];
4364[label="161.223.195.82;29pkt 29fpkt", shape=pentagon, color=darkviolet];
5084[label="132.19.59.149;40pkt 40fpkt", shape=pentagon, color=darkviolet];
5465[label="128.28.170.179;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5527[label="132.19.43.186;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5643[label="132.19.98.196;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5714[label="132.19.245.200;91pkt 91fpkt", shape=pentagon, color=darkviolet];
6019[label="195.80.111.226;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6207[label="132.19.98.245;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7783[label="128.28.170.179;22pkt 22fpkt", shape=invtriangle, color=brown];
7919[label="132.19.98.196;5pkt 5fpkt", shape=invtriangle, color=brown];
8322[label="132.19.98.245;22pkt 22fpkt", shape=invtriangle, color=brown];
9340[label="128.28.170.179;23pkt 23fpkt", shape=invhouse, color=bisque];
9428[label="132.19.98.196;6pkt 6fpkt", shape=invhouse, color=bisque];
stat857[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 196.111.138.254:80}[45.6%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0309%)&lt;BR/&gt; 0: (1.75258%)&lt;BR/&gt; 25: (1.28866%)&lt;BR/&gt; 53: (0.670103%)&lt;BR/&gt; 1863: (0.618557%)&gt;];
}
1081--1089[label="0.0206186;2pkt 2fpkt"];
1081--1150[label="0.493333;37pkt 37fpkt"];
1081--1632[label="0.0078125;1pkt 1fpkt"];
1081--1666[label="0.0151515;1pkt 1fpkt"];
1081--1893[label="0.0357143;1pkt 1fpkt"];
1081--1989[label="0.0224719;2pkt 2fpkt"];
1081--2458[label="0.0238095;2pkt 2fpkt"];
1081--3121[label="0.04;1pkt 1fpkt"];
1081--3138[label="0.0212766;1pkt 1fpkt"];
1081--3180[label="0.00350877;1pkt 1fpkt"];
1081--3225[label="0.0280702;8pkt 8fpkt"];
1081--3296[label="0.0421053;12pkt 12fpkt"];
1081--3462[label="0.0142857;1pkt 1fpkt"];
1081--3927[label="0.5;4pkt 4fpkt"];
1081--4111[label="0.181818;4pkt 4fpkt"];
1081--4364[label="0.241379;7pkt 7fpkt"];
1081--4373[label="0.0245614;7pkt 7fpkt"];
1081--4375[label="0.00350877;1pkt 1fpkt"];
1081--4555[label="0.736842;42pkt 42fpkt"];
1081--4988[label="0.00884956;1pkt 1fpkt"];
1081--5084[label="0.1;4pkt 4fpkt"];
1081--5465[label="0.347826;8pkt 8fpkt"];
1081--5527[label="0.0526316;1pkt 1fpkt"];
1081--5632[label="0.0175439;5pkt 5fpkt"];
1081--5643[label="0.166667;1pkt 1fpkt"];
1081--5704[label="0.136842;39pkt 39fpkt"];
1081--5714[label="0.0549451;5pkt 5fpkt"];
1081--5775[label="0.0162602;2pkt 2fpkt"];
1081--6019[label="1;26pkt 26fpkt"];
1081--6207[label="0.130435;3pkt 3fpkt"];
1081--6399[label="0.0142857;1pkt 1fpkt"];
1081--6838[label="0.181818;4pkt 4fpkt"];
1081--7025[label="0.0245614;7pkt 7fpkt"];
1081--7027[label="0.00350877;1pkt 1fpkt"];
1081--7459[label="0.00909091;1pkt 1fpkt"];
1081--7783[label="0.363636;8pkt 8fpkt"];
1081--7911[label="0.0175439;5pkt 5fpkt"];
1081--7919[label="0.2;1pkt 1fpkt"];
1081--8322[label="0.136364;3pkt 3fpkt"];
1081--8453[label="0.0142857;1pkt 1fpkt"];
1081--8850[label="0.0245614;7pkt 7fpkt"];
1081--8852[label="0.00350877;1pkt 1fpkt"];
1081--9340[label="0.347826;8pkt 8fpkt"];
1081--9422[label="0.0175439;5pkt 5fpkt"];
1081--9428[label="0.166667;1pkt 1fpkt"];
1089--1824[label="0.015625;1pkt 1fpkt"];
1089--1864[label="0.0309278;3pkt 3fpkt"];
1089--2036[label="0.0714286;1pkt 1fpkt"];
1089--3290[label="0.0103093;1pkt 1fpkt"];
1089--3295[label="0.0103093;1pkt 1fpkt"];
1150--1898[label="0.213333;16pkt 16fpkt"];
2458--2638[label="0.964286;81pkt 81fpkt"];
2458--5714[label="1;84pkt 84fpkt"];
2638--3296[label="0.0465116;4pkt 4fpkt"];
2638--5714[label="0.988372;85pkt 85fpkt"];
2638--5876[label="0.0116279;1pkt 1fpkt"];
2638--8082[label="0.0116279;1pkt 1fpkt"];
2638--9535[label="0.0116279;1pkt 1fpkt"];
5465--7783[label="1;22pkt 22fpkt"];
5465--9340[label="1;23pkt 23fpkt"];
5643--7919[label="1;5pkt 5fpkt"];
5643--9428[label="1;6pkt 6fpkt"];
6207--8322[label="1;22pkt 22fpkt"];
7783--9340[label="1;22pkt 22fpkt"];
7919--9428[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.111.138.254" dst_port="80"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
2351[label="164.23.205.13;d;45pkt 45fpkt", shape=diamond, color=yellow];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.23.205.13:80}[82.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.1111%)&lt;BR/&gt; 443: (6.66667%)&lt;BR/&gt; 5050: (2.22222%)&lt;BR/&gt; 58645: (1.11111%)&lt;BR/&gt; 56076: (1.11111%)&gt;];
}
2351--3296[label="0.0888889;4pkt 4fpkt"];
2351--6208[label="0.0243902;1pkt 1fpkt"];
2351--8323[label="0.0243902;1pkt 1fpkt"];
2351--9701[label="0.0243902;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.205.13" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
1637[label="164.23.142.25;s;177pkt 177fpkt", shape=diamond, color=yellow];
3680[label="164.23.142.25;194pkt 194fpkt", shape=pentagon, color=darkviolet];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.142.25:*, 205.193.63.234:6667}[50.2564%]&lt;BR/&gt;{164.23.142.25:*, 205.137.225.232:6667}[31.7949%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (49.7305%)&lt;BR/&gt; 2301: (0.269542%)&lt;BR/&gt; 2300: (0.269542%)&lt;BR/&gt; 2299: (0.269542%)&lt;BR/&gt; 2298: (0.269542%)&gt;];
}
1637--3680[label="0.99435;176pkt 176fpkt"];
1637--6551[label="0.99435;176pkt 176fpkt"];
3680--6551[label="1;194pkt 194fpkt"];
</description>
    <slice>
      <filter dst_ip="205.193.63.234" dst_port="6667" src_ip="164.23.142.25"/>
      <filter dst_ip="205.137.225.232" dst_port="6667" src_ip="164.23.142.25"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.55.149.245"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.155.3.247"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
6227[label="194.212.156.247;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.156.247:0, *:0}[97.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5%)&lt;BR/&gt; 445: (1.25%)&lt;BR/&gt; 2417: (0.625%)&lt;BR/&gt; 1490: (0.625%)&gt;];
}
</description>
    <slice>
      <filter src_ip="194.212.156.247"/>
    </slice>
    <from sec="1144126831" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.116.143.248"/>
    </slice>
    <from sec="1144126852" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.2.151.248"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.23.216.249"/>
    </slice>
    <from sec="1144126846" usec="0"/>
    <to sec="1144127640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.98.15.250"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_867{
style=filled;
color=gray75;
1609[label="83.129.200.250;s;1036pkt 1036fpkt", shape=diamond, color=yellow];
2955[label="83.129.200.250;s;665pkt 665fpkt", shape=hexagon, color=black];
6251[label="83.129.200.250;1139pkt 1139fpkt", shape=pentagon, color=darkviolet];
8354[label="83.129.200.250;1139pkt 1139fpkt", shape=invtriangle, color=brown];
9723[label="83.129.200.250;1139pkt 1139fpkt", shape=invhouse, color=bisque];
stat867[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.129.200.250:1057, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1057: (50%)&gt;];
}
1609--2955[label="1;665pkt 665fpkt"];
1609--6251[label="1;1036pkt 1036fpkt"];
1609--8354[label="1;1036pkt 1036fpkt"];
1609--9723[label="1;1036pkt 1036fpkt"];
2955--6251[label="1;665pkt 665fpkt"];
2955--8354[label="1;665pkt 665fpkt"];
2955--9723[label="1;665pkt 665fpkt"];
6251--8354[label="1;1139pkt 1139fpkt"];
6251--9723[label="1;1139pkt 1139fpkt"];
8354--9723[label="1;1139pkt 1139fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.129.200.250" src_port="1057"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.237.69.251"/>
    </slice>
    <from sec="1144126972" usec="0"/>
    <to sec="1144127076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.10.185.251"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
268[label="128.28.244.123;d;7pkt 7fpkt", shape=diamond, color=yellow];
309[label="35.193.70.252;s;3pkt 3fpkt", shape=diamond, color=yellow];
532[label="81.50.65.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
6266[label="35.193.70.252;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8366[label="35.193.70.252;3pkt 3fpkt", shape=invtriangle, color=brown];
9729[label="35.193.70.252;2pkt 2fpkt", shape=invhouse, color=bisque];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.193.70.252:*, 128.28.244.123:80}[42.8571%]&lt;BR/&gt;{210.81.108.64:*, 128.28.244.123:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 57033: (13.1579%)&lt;BR/&gt; 54217: (13.1579%)&lt;BR/&gt; 65481: (10.5263%)&lt;BR/&gt; 18000: (5.26316%)&gt;];
}
268--309[label="1;3pkt 3fpkt"];
268--532[label="1;1pkt 1fpkt"];
268--1455[label="1;1pkt 1fpkt"];
268--3296[label="0.142857;1pkt 1fpkt"];
268--6266[label="1;3pkt 3fpkt"];
268--6984[label="1;1pkt 1fpkt"];
268--8366[label="1;3pkt 3fpkt"];
268--9729[label="1;2pkt 2fpkt"];
309--6266[label="1;3pkt 3fpkt"];
309--8366[label="1;3pkt 3fpkt"];
309--9729[label="1;2pkt 2fpkt"];
6266--8366[label="1;3pkt 3fpkt"];
6266--9729[label="1;2pkt 2fpkt"];
8366--9729[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.244.123" dst_port="80" src_ip="35.193.70.252"/>
      <filter dst_ip="128.28.244.123" dst_port="80" src_ip="210.81.108.64"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.213.96.252"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.217.82.253"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.177.101.253"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.167.132.254"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
3317[label="215.66.33.1;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6296[label="215.66.33.1;2pkt 2fpkt", shape=invtriangle, color=brown];
8389[label="215.66.33.1;2pkt 2fpkt", shape=invhouse, color=bisque];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.66.33.1:3811, 128.28.83.115:25}[33.3333%]&lt;BR/&gt;{215.66.33.1:3897, 128.28.83.115:25}[33.3333%]&lt;BR/&gt;{215.66.33.1:4228, 128.28.83.115:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4228: (21.4286%)&lt;BR/&gt; 3897: (21.4286%)&lt;BR/&gt; 3811: (7.14286%)&gt;];
}
3317--6296[label="1;2pkt 2fpkt"];
3317--8389[label="1;2pkt 2fpkt"];
6296--8389[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.66.33.1" src_port="4228"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.66.33.1" src_port="3897"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.66.33.1" src_port="3811"/>
    </slice>
    <from sec="1144127511" usec="0"/>
    <to sec="1144127659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
2408[label="132.19.69.1;s;64pkt 64fpkt", shape=diamond, color=yellow];
3320[label="132.19.69.1;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6298[label="132.19.69.1;63pkt 63fpkt", shape=invtriangle, color=brown];
8390[label="132.19.69.1;64pkt 64fpkt", shape=invhouse, color=bisque];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.69.1:*, 208.116.224.148:80}[56.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6471%)&lt;BR/&gt; 1863: (1.56863%)&lt;BR/&gt; 64012: (0.784314%)&lt;BR/&gt; 63926: (0.784314%)&lt;BR/&gt; 63349: (0.784314%)&gt;];
}
2408--3296[label="0.03125;2pkt 2fpkt"];
2408--3320[label="1;64pkt 64fpkt"];
2408--6298[label="1;63pkt 63fpkt"];
2408--8390[label="1;64pkt 64fpkt"];
3320--6298[label="1;63pkt 63fpkt"];
3320--8390[label="1;64pkt 64fpkt"];
6298--8390[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="208.116.224.148" dst_port="80" src_ip="132.19.69.1"/>
    </slice>
    <from sec="1144126831" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_877{
style=filled;
color=gray75;
350[label="132.19.195.1;s;1115pkt 1115fpkt", shape=diamond, color=yellow];
2309[label="218.40.48.102;d;19pkt 19fpkt", shape=diamond, color=yellow];
2545[label="218.98.49.79;d;16pkt 16fpkt", shape=diamond, color=yellow];
3325[label="132.19.195.1;1241pkt 1241fpkt", shape=pentagon, color=darkviolet];
6301[label="132.19.195.1;1241pkt 1241fpkt", shape=invtriangle, color=brown];
8392[label="132.19.195.1;1241pkt 1241fpkt", shape=invhouse, color=bisque];
stat877[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.195.1:52663, *:53}[75.7457%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1792%)&lt;BR/&gt; 52663: (38.7236%)&lt;BR/&gt; 0: (2.44203%)&lt;BR/&gt; 32769: (0.287297%)&lt;BR/&gt; 32768: (0.246255%)&gt;];
}
350--675[label="0.0263158;1pkt 1fpkt"];
350--906[label="0.00568182;1pkt 1fpkt"];
350--1342[label="0.0030581;1pkt 1fpkt"];
350--1372[label="0.1;1pkt 1fpkt"];
350--1503[label="0.00274725;1pkt 1fpkt"];
350--1670[label="0.25;1pkt 1fpkt"];
350--1811[label="0.0060241;1pkt 1fpkt"];
350--1818[label="0.0126582;1pkt 1fpkt"];
350--1864[label="0.00584795;1pkt 1fpkt"];
350--1900[label="0.0147059;1pkt 1fpkt"];
350--1930[label="0.00689655;1pkt 1fpkt"];
350--2178[label="0.00628931;1pkt 1fpkt"];
350--2309[label="0.0526316;1pkt 1fpkt"];
350--2378[label="0.0131579;1pkt 1fpkt"];
350--2515[label="0.00571429;1pkt 1fpkt"];
350--2522[label="0.00641026;1pkt 1fpkt"];
350--2545[label="0.0625;1pkt 1fpkt"];
350--2564[label="0.00584795;1pkt 1fpkt"];
350--2822[label="0.0434783;1pkt 1fpkt"];
350--2961[label="0.00653595;1pkt 1fpkt"];
350--3287[label="0.0188341;21pkt 21fpkt"];
350--3290[label="0.12287;137pkt 137fpkt"];
350--3295[label="0.102242;114pkt 114fpkt"];
350--3302[label="0.0161435;18pkt 18fpkt"];
350--3325[label="1;1115pkt 1115fpkt"];
350--6301[label="1;1115pkt 1115fpkt"];
350--8392[label="1;1115pkt 1115fpkt"];
2309--3325[label="0.0526316;1pkt 1fpkt"];
2309--5244[label="0.894737;17pkt 17fpkt"];
2309--6301[label="0.0526316;1pkt 1fpkt"];
2309--7636[label="0.947368;18pkt 18fpkt"];
2309--8392[label="0.0526316;1pkt 1fpkt"];
2309--9247[label="0.894737;17pkt 17fpkt"];
2545--3050[label="0.125;2pkt 2fpkt"];
2545--3290[label="0.4375;7pkt 7fpkt"];
2545--3295[label="0.1875;3pkt 3fpkt"];
2545--3325[label="0.0625;1pkt 1fpkt"];
2545--3699[label="0.0625;1pkt 1fpkt"];
2545--3834[label="0.0625;1pkt 1fpkt"];
2545--4268[label="0.0625;1pkt 1fpkt"];
2545--5416[label="0.1875;3pkt 3fpkt"];
2545--5702[label="0.0625;1pkt 1fpkt"];
2545--5781[label="1;1pkt 1fpkt"];
2545--5792[label="0.0625;1pkt 1fpkt"];
2545--6301[label="0.0625;1pkt 1fpkt"];
2545--6645[label="0.0625;1pkt 1fpkt"];
2545--6952[label="0.0625;1pkt 1fpkt"];
2545--7960[label="0.0625;1pkt 1fpkt"];
2545--8015[label="1;1pkt 1fpkt"];
2545--8392[label="0.0625;1pkt 1fpkt"];
2545--8808[label="0.0625;1pkt 1fpkt"];
2545--9489[label="1;1pkt 1fpkt"];
3325--6301[label="1;1241pkt 1241fpkt"];
3325--8392[label="1;1241pkt 1241fpkt"];
6301--8392[label="1;1241pkt 1241fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="132.19.195.1" src_port="52663"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
979[label="166.138.86.2;s;3pkt 3fpkt", shape=diamond, color=yellow];
3116[label="166.138.86.2;s;3pkt 3fpkt", shape=hexagon, color=black];
3337[label="166.138.86.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6307[label="166.138.86.2;1pkt 1fpkt", shape=invtriangle, color=brown];
8395[label="166.138.86.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.2:32827, 206.172.31.41:53}[33.3333%]&lt;BR/&gt;{166.138.86.2:32827, 195.89.107.44:53}[33.3333%]&lt;BR/&gt;{166.138.86.2:32827, 128.28.83.79:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32827: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
979--1019[label="0.333333;1pkt 1fpkt"];
979--1812[label="0.333333;1pkt 1fpkt"];
979--3116[label="1;3pkt 3fpkt"];
979--3290[label="0.333333;1pkt 1fpkt"];
979--3295[label="0.333333;1pkt 1fpkt"];
979--3337[label="1;1pkt 1fpkt"];
979--6307[label="1;1pkt 1fpkt"];
979--8395[label="1;1pkt 1fpkt"];
3116--3290[label="0.333333;1pkt 1fpkt"];
3116--3295[label="0.333333;1pkt 1fpkt"];
3116--3337[label="1;1pkt 1fpkt"];
3116--6307[label="1;1pkt 1fpkt"];
3116--8395[label="1;1pkt 1fpkt"];
3337--6307[label="1;1pkt 1fpkt"];
3337--8395[label="1;1pkt 1fpkt"];
6307--8395[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.79" dst_port="53" src_ip="166.138.86.2" src_port="32827"/>
      <filter dst_ip="195.89.107.44" dst_port="53" src_ip="166.138.86.2" src_port="32827"/>
      <filter dst_ip="206.172.31.41" dst_port="53" src_ip="166.138.86.2" src_port="32827"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
3339[label="132.19.106.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6309[label="132.19.106.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.106.2:49697, 33.65.50.23:8620}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49697: (50%)&lt;BR/&gt; 8620: (50%)&gt;];
}
3339--6309[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.65.50.23" dst_port="8620" src_ip="132.19.106.2" src_port="49697"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_880{
style=filled;
color=gray75;
3344[label="128.28.29.3;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6313[label="128.28.29.3;51pkt 51fpkt", shape=invtriangle, color=brown];
stat880[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.29.3:17740, *:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17740: (47.0588%)&lt;BR/&gt; 27858: (1.96078%)&lt;BR/&gt; 65279: (0.980392%)&lt;BR/&gt; 64381: (0.980392%)&lt;BR/&gt; 64108: (0.980392%)&gt;];
}
3344--6313[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.29.3" src_port="17740"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
835[label="132.19.87.254;d;153pkt 153fpkt", shape=diamond, color=yellow];
1027[label="166.138.86.3;s;7pkt 7fpkt", shape=diamond, color=yellow];
2321[label="194.160.9.91;s;2pkt 2fpkt", shape=diamond, color=yellow];
3347[label="166.138.86.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5324[label="196.28.253.166;186pkt 186fpkt", shape=pentagon, color=darkviolet];
5636[label="195.192.153.195;50pkt 50fpkt", shape=pentagon, color=darkviolet];
6316[label="166.138.86.3;2pkt 2fpkt", shape=invtriangle, color=brown];
7914[label="195.192.153.195;49pkt 49fpkt", shape=invtriangle, color=brown];
8109[label="207.123.45.218;37pkt 37fpkt", shape=invtriangle, color=brown];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.28.253.166:*, 206.172.31.41:53}[43.1235%]&lt;BR/&gt;{*:*, 132.19.87.254:25}[22.8438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.1807%)&lt;BR/&gt; 25: (13.2444%)&lt;BR/&gt; 80: (10.6776%)&lt;BR/&gt; 47098: (1.12936%)&lt;BR/&gt; 60415: (0.308008%)&gt;];
}
835--1027[label="0.142857;1pkt 1fpkt"];
835--1093[label="0.277778;5pkt 5fpkt"];
835--2221[label="0.113924;9pkt 9fpkt"];
835--3212[label="0.113924;9pkt 9fpkt"];
835--3290[label="0.0130719;2pkt 2fpkt"];
835--4182[label="0.109756;9pkt 9fpkt"];
835--4256[label="0.233333;7pkt 7fpkt"];
835--5636[label="0.1;5pkt 5fpkt"];
835--6887[label="0.109756;9pkt 9fpkt"];
835--7914[label="0.102041;5pkt 5fpkt"];
835--8765[label="0.111111;9pkt 9fpkt"];
1027--1237[label="0.142857;1pkt 1fpkt"];
1027--1812[label="0.142857;1pkt 1fpkt"];
1027--1840[label="0.142857;1pkt 1fpkt"];
1027--2509[label="0.142857;1pkt 1fpkt"];
1027--3290[label="0.285714;2pkt 2fpkt"];
1027--3295[label="0.142857;1pkt 1fpkt"];
1027--3347[label="1;1pkt 1fpkt"];
1027--6316[label="1;2pkt 2fpkt"];
2321--3290[label="0.5;1pkt 1fpkt"];
2321--3295[label="0.5;1pkt 1fpkt"];
2321--4458[label="1;2pkt 2fpkt"];
2321--7084[label="0.5;1pkt 1fpkt"];
2321--8892[label="0.5;1pkt 1fpkt"];
3347--6316[label="1;1pkt 1fpkt"];
5324--7695[label="1;186pkt 186fpkt"];
5324--9287[label="1;186pkt 186fpkt"];
5636--7914[label="1;49pkt 49fpkt"];
8109--9555[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.87.254" dst_port="25"/>
      <filter dst_ip="206.172.31.41" dst_port="53" src_ip="196.28.253.166"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.180.115.3"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.188.195.3"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.149.238.3"/>
    </slice>
    <from sec="1144127163" usec="0"/>
    <to sec="1144127198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.33.64.4"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_886{
style=filled;
color=gray75;
3362[label="128.2.80.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6329[label="128.2.80.4;2pkt 2fpkt", shape=invtriangle, color=brown];
8411[label="128.2.80.4;2pkt 2fpkt", shape=invhouse, color=bisque];
stat886[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.80.4:1433, 214.51.37.73:3982}[50%]&lt;BR/&gt;{128.2.80.4:1433, 214.51.37.73:4029}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4029: (25%)&lt;BR/&gt; 3982: (25%)&gt;];
}
3362--6329[label="1;2pkt 2fpkt"];
3362--8411[label="1;2pkt 2fpkt"];
6329--8411[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.51.37.73" dst_port="4029" src_ip="128.2.80.4" src_port="1433"/>
      <filter dst_ip="214.51.37.73" dst_port="3982" src_ip="128.2.80.4" src_port="1433"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
3369[label="83.163.160.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6333[label="83.163.160.4;1pkt 1fpkt", shape=invtriangle, color=brown];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.163.160.4:1203, 128.28.172.57:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1203: (50%)&gt;];
}
3369--6333[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.172.57" dst_port="1434" src_ip="83.163.160.4" src_port="1203"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
3374[label="161.223.212.4;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6337[label="161.223.212.4;5pkt 5fpkt", shape=invtriangle, color=brown];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.212.4:1275, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.212.4:1276, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.212.4:1277, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.212.4:1281, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.212.4:1282, 39.204.218.222:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1282: (10%)&lt;BR/&gt; 1281: (10%)&lt;BR/&gt; 1277: (10%)&lt;BR/&gt; 1276: (10%)&gt;];
}
3374--6337[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.212.4" src_port="1282"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.212.4" src_port="1281"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.212.4" src_port="1277"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.212.4" src_port="1276"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.212.4" src_port="1275"/>
    </slice>
    <from sec="1144127482" usec="0"/>
    <to sec="1144127501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
1643[label="132.19.40.5;s;200pkt 200fpkt", shape=diamond, color=yellow];
3378[label="132.19.40.5;208pkt 208fpkt", shape=pentagon, color=darkviolet];
6340[label="132.19.40.5;207pkt 207fpkt", shape=invtriangle, color=brown];
8418[label="132.19.40.5;208pkt 208fpkt", shape=invhouse, color=bisque];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.40.5:49152, *:53}[53.3654%]&lt;BR/&gt;{132.19.40.5:25, *:*}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (33.8396%)&lt;BR/&gt; 49152: (26.7922%)&lt;BR/&gt; 25: (14.034%)&lt;BR/&gt; 0: (2.43013%)&lt;BR/&gt; 110: (1.15431%)&gt;];
}
1643--1967[label="0.0526316;1pkt 1fpkt"];
1643--2246[label="0.0555556;1pkt 1fpkt"];
1643--2378[label="0.0131579;1pkt 1fpkt"];
1643--2564[label="0.00584795;1pkt 1fpkt"];
1643--3287[label="0.01;2pkt 2fpkt"];
1643--3290[label="0.025;5pkt 5fpkt"];
1643--3295[label="0.08;16pkt 16fpkt"];
1643--3302[label="0.035;7pkt 7fpkt"];
1643--3378[label="1;200pkt 200fpkt"];
1643--6340[label="0.995;199pkt 199fpkt"];
1643--8418[label="1;200pkt 200fpkt"];
3378--6340[label="1;207pkt 207fpkt"];
3378--8418[label="1;208pkt 208fpkt"];
6340--8418[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.40.5" src_port="25"/>
      <filter dst_port="53" src_ip="132.19.40.5" src_port="49152"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
2686[label="195.89.72.5;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.72.5:1063, 39.204.218.223:80}[25%]&lt;BR/&gt;{195.89.72.5:1064, 39.204.218.223:80}[25%]&lt;BR/&gt;{195.89.72.5:1065, 39.204.218.223:80}[25%]&lt;BR/&gt;{195.89.72.5:1066, 39.204.218.223:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1066: (12.5%)&lt;BR/&gt; 1065: (12.5%)&lt;BR/&gt; 1064: (12.5%)&lt;BR/&gt; 1063: (12.5%)&gt;];
}
2686--3255[label="1;4pkt 4fpkt"];
2686--3296[label="0.5;2pkt 2fpkt"];
2686--3381[label="1;4pkt 4fpkt"];
2686--6342[label="0.75;3pkt 3fpkt"];
2686--8420[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1066"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1065"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1064"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1063"/>
    </slice>
    <from sec="1144127559" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_891{
style=filled;
color=gray75;
962[label="166.138.86.6;s;4pkt 4fpkt", shape=diamond, color=yellow];
1895[label="34.186.143.200;s;14pkt 14fpkt", shape=diamond, color=yellow];
2867[label="166.138.86.6;s;4pkt 4fpkt", shape=hexagon, color=black];
3393[label="166.138.86.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6351[label="166.138.86.6;1pkt 1fpkt", shape=invtriangle, color=brown];
8425[label="166.138.86.6;1pkt 1fpkt", shape=invhouse, color=bisque];
stat891[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.186.143.200:2430, *:53}[72.2222%]&lt;BR/&gt;{166.138.86.6:32792, *:53}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52%)&lt;BR/&gt; 2430: (26%)&lt;BR/&gt; 32792: (22%)&gt;];
}
962--1047[label="0.25;1pkt 1fpkt"];
962--1812[label="0.25;1pkt 1fpkt"];
962--2155[label="0.25;1pkt 1fpkt"];
962--2867[label="1;4pkt 4fpkt"];
962--2899[label="0.25;1pkt 1fpkt"];
962--3290[label="0.25;1pkt 1fpkt"];
962--3295[label="0.25;1pkt 1fpkt"];
962--3393[label="1;1pkt 1fpkt"];
962--6351[label="1;1pkt 1fpkt"];
962--8425[label="1;1pkt 1fpkt"];
1895--2899[label="0.0714286;1pkt 1fpkt"];
1895--3287[label="0.0714286;1pkt 1fpkt"];
1895--3290[label="0.214286;3pkt 3fpkt"];
1895--3295[label="0.214286;3pkt 3fpkt"];
1895--3302[label="0.0714286;1pkt 1fpkt"];
1895--5706[label="1;14pkt 14fpkt"];
1895--7963[label="1;14pkt 14fpkt"];
2867--2899[label="0.25;1pkt 1fpkt"];
2867--3290[label="0.25;1pkt 1fpkt"];
2867--3295[label="0.25;1pkt 1fpkt"];
2867--3393[label="1;1pkt 1fpkt"];
2867--6351[label="1;1pkt 1fpkt"];
2867--8425[label="1;1pkt 1fpkt"];
3393--6351[label="1;1pkt 1fpkt"];
3393--8425[label="1;1pkt 1fpkt"];
6351--8425[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="34.186.143.200" src_port="2430"/>
      <filter dst_port="53" src_ip="166.138.86.6" src_port="32792"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
867[label="147.13.174.80;d;639pkt 639fpkt", shape=diamond, color=yellow];
3400[label="213.211.161.6;46pkt 46fpkt", shape=pentagon, color=darkviolet];
4017[label="82.172.79.56;47pkt 47fpkt", shape=pentagon, color=darkviolet];
6357[label="213.211.161.6;46pkt 46fpkt", shape=invtriangle, color=brown];
8429[label="213.211.161.6;46pkt 46fpkt", shape=invhouse, color=bisque];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.13.174.80:21}[51.0802%]&lt;BR/&gt;{*:*, 147.13.174.80:22222}[48.9198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22222: (27.3058%)&lt;BR/&gt; 21: (22.6942%)&lt;BR/&gt; 1375: (0.364078%)&lt;BR/&gt; 1786: (0.303398%)&lt;BR/&gt; 1728: (0.303398%)&gt;];
}
867--3400[label="0.891304;41pkt 41fpkt"];
867--4017[label="0.914894;43pkt 43fpkt"];
867--6357[label="0.891304;41pkt 41fpkt"];
867--8429[label="0.891304;41pkt 41fpkt"];
3400--6357[label="1;46pkt 46fpkt"];
3400--8429[label="1;46pkt 46fpkt"];
6357--8429[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.174.80" dst_port="21"/>
      <filter dst_ip="147.13.174.80" dst_port="22222"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
3434[label="208.125.30.9;137pkt 137fpkt", shape=pentagon, color=darkviolet];
6375[label="208.125.30.9;137pkt 137fpkt", shape=invtriangle, color=brown];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.125.30.9:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 51790: (0.364964%)&lt;BR/&gt; 51778: (0.364964%)&lt;BR/&gt; 51772: (0.364964%)&lt;BR/&gt; 51650: (0.364964%)&gt;];
}
3434--6375[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="208.125.30.9"/>
    </slice>
    <from sec="1144127412" usec="0"/>
    <to sec="1144127483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.26.196.9"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.34.36.10"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.77.53.10"/>
    </slice>
    <from sec="1144126830" usec="0"/>
    <to sec="1144127671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
1397[label="166.138.86.10;s;7pkt 7fpkt", shape=diamond, color=yellow];
3053[label="166.138.86.10;s;6pkt 6fpkt", shape=hexagon, color=black];
3452[label="166.138.86.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6389[label="166.138.86.10;1pkt 1fpkt", shape=invtriangle, color=brown];
8446[label="166.138.86.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.10:38141, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38141: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1397--1812[label="0.142857;1pkt 1fpkt"];
1397--1840[label="0.142857;1pkt 1fpkt"];
1397--3053[label="1;6pkt 6fpkt"];
1397--3290[label="0.142857;1pkt 1fpkt"];
1397--3295[label="0.142857;1pkt 1fpkt"];
1397--3452[label="1;1pkt 1fpkt"];
1397--6389[label="1;1pkt 1fpkt"];
1397--8446[label="1;1pkt 1fpkt"];
3053--3290[label="0.166667;1pkt 1fpkt"];
3053--3295[label="0.166667;1pkt 1fpkt"];
3053--3452[label="1;1pkt 1fpkt"];
3053--6389[label="1;1pkt 1fpkt"];
3053--8446[label="1;1pkt 1fpkt"];
3452--6389[label="1;1pkt 1fpkt"];
3452--8446[label="1;1pkt 1fpkt"];
6389--8446[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.138.86.10" src_port="38141"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
3454[label="132.18.129.10;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6391[label="132.18.129.10;58pkt 58fpkt", shape=invtriangle, color=brown];
8448[label="132.18.129.10;59pkt 59fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.10:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3454--6391[label="1;58pkt 58fpkt"];
3454--8448[label="1;59pkt 59fpkt"];
6391--8448[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.129.10"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_899{
style=filled;
color=gray75;
3457[label="194.212.156.10;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6394[label="194.212.156.10;5pkt 5fpkt", shape=invtriangle, color=brown];
8449[label="194.212.156.10;6pkt 6fpkt", shape=invhouse, color=bisque];
stat899[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.156.10:*, *:1863}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (40.625%)&lt;BR/&gt; 1581: (9.375%)&lt;BR/&gt; 1577: (9.375%)&lt;BR/&gt; 1567: (9.375%)&lt;BR/&gt; 1062: (9.375%)&gt;];
}
3457--6394[label="1;5pkt 5fpkt"];
3457--8449[label="1;5pkt 5fpkt"];
6394--8449[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="194.212.156.10"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
3458[label="38.53.161.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6395[label="38.53.161.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.161.10:80, 195.89.105.214:58054}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58054: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3458--6395[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="58054" src_ip="38.53.161.10" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
3460[label="213.104.190.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6397[label="213.104.190.10;3pkt 3fpkt", shape=invtriangle, color=brown];
8451[label="213.104.190.10;3pkt 3fpkt", shape=invhouse, color=bisque];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.104.190.10:1037, 194.212.163.98:1434}[33.3333%]&lt;BR/&gt;{213.104.190.10:1037, 128.228.114.164:1434}[33.3333%]&lt;BR/&gt;{213.104.190.10:1037, 132.19.187.180:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1037: (50%)&gt;];
}
3460--6397[label="1;3pkt 3fpkt"];
3460--8451[label="1;3pkt 3fpkt"];
6397--8451[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.187.180" dst_port="1434" src_ip="213.104.190.10" src_port="1037"/>
      <filter dst_ip="128.228.114.164" dst_port="1434" src_ip="213.104.190.10" src_port="1037"/>
      <filter dst_ip="194.212.163.98" dst_port="1434" src_ip="213.104.190.10" src_port="1037"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.37.51.11"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
3475[label="128.28.217.11;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6407[label="128.28.217.11;20pkt 20fpkt", shape=invtriangle, color=brown];
8457[label="128.28.217.11;19pkt 19fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.217.11:*, 36.20.14.204:2703}[50%]&lt;BR/&gt;{128.28.217.11:*, 36.20.14.215:2703}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 57825: (2.58621%)&lt;BR/&gt; 57824: (2.58621%)&lt;BR/&gt; 57823: (2.58621%)&lt;BR/&gt; 57822: (2.58621%)&gt;];
}
3475--6407[label="1;19pkt 19fpkt"];
3475--8457[label="1;19pkt 19fpkt"];
6407--8457[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="36.20.14.215" dst_port="2703" src_ip="128.28.217.11"/>
      <filter dst_ip="36.20.14.204" dst_port="2703" src_ip="128.28.217.11"/>
    </slice>
    <from sec="1144127491" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.142.74.12"/>
    </slice>
    <from sec="1144127285" usec="0"/>
    <to sec="1144127362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.113.152.12"/>
    </slice>
    <from sec="1144127649" usec="0"/>
    <to sec="1144127674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.74.19.13"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
205[label="128.202.87.13;s;11pkt 11fpkt", shape=diamond, color=yellow];
3500[label="128.202.87.13;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6426[label="128.202.87.13;10pkt 10fpkt", shape=invtriangle, color=brown];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.87.13:*, 41.148.12.192:80}[45.4545%]&lt;BR/&gt;{128.202.87.13:*, 53.174.69.143:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1988: (4.83871%)&lt;BR/&gt; 1986: (4.83871%)&lt;BR/&gt; 1984: (4.83871%)&lt;BR/&gt; 1982: (4.83871%)&gt;];
}
205--511[label="0.363636;4pkt 4fpkt"];
205--737[label="0.454545;5pkt 5fpkt"];
205--1151[label="0.181818;2pkt 2fpkt"];
205--3088[label="0.363636;4pkt 4fpkt"];
205--3500[label="1;10pkt 10fpkt"];
205--6426[label="1;10pkt 10fpkt"];
3500--6426[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="41.148.12.192" dst_port="80" src_ip="128.202.87.13"/>
      <filter dst_ip="53.174.69.143" dst_port="80" src_ip="128.202.87.13"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.28.176.14"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
3512[label="132.19.192.14;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6433[label="132.19.192.14;6pkt 6fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.14:*, 219.73.82.151:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1081: (8.33333%)&lt;BR/&gt; 1080: (8.33333%)&lt;BR/&gt; 1079: (8.33333%)&lt;BR/&gt; 1078: (8.33333%)&gt;];
}
3512--6433[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.82.151" dst_port="80" src_ip="132.19.192.14"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
3517[label="209.97.109.15;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6434[label="209.97.109.15;2pkt 2fpkt", shape=invtriangle, color=brown];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.97.109.15:51736, 194.212.234.182:48456}[50%]&lt;BR/&gt;{209.97.109.15:17276, 128.2.244.232:15649}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51736: (25%)&lt;BR/&gt; 48456: (25%)&lt;BR/&gt; 17276: (25%)&lt;BR/&gt; 15649: (25%)&gt;];
}
3517--6434[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.2.244.232" dst_port="15649" src_ip="209.97.109.15" src_port="17276"/>
      <filter dst_ip="194.212.234.182" dst_port="48456" src_ip="209.97.109.15" src_port="51736"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.162.183.15"/>
    </slice>
    <from sec="1144126925" usec="0"/>
    <to sec="1144127024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
3529[label="36.172.50.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6440[label="36.172.50.16;1pkt 1fpkt", shape=invtriangle, color=brown];
8480[label="36.172.50.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.172.50.16:48566, 164.23.141.28:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48566: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3529--6440[label="1;1pkt 1fpkt"];
3529--8480[label="1;1pkt 1fpkt"];
6440--8480[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.141.28" dst_port="25" src_ip="36.172.50.16" src_port="48566"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.208.113.16"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.193.131.16"/>
    </slice>
    <from sec="1144126872" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
3538[label="84.44.139.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6445[label="84.44.139.16;3pkt 3fpkt", shape=invtriangle, color=brown];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.44.139.16:62141, 161.146.170.38:137}[33.3333%]&lt;BR/&gt;{84.44.139.16:62141, 161.146.170.39:137}[33.3333%]&lt;BR/&gt;{84.44.139.16:62141, 161.146.170.40:137}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62141: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3538--6445[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.146.170.40" dst_port="137" src_ip="84.44.139.16" src_port="62141"/>
      <filter dst_ip="161.146.170.39" dst_port="137" src_ip="84.44.139.16" src_port="62141"/>
      <filter dst_ip="161.146.170.38" dst_port="137" src_ip="84.44.139.16" src_port="62141"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_916{
style=filled;
color=gray75;
3545[label="197.17.45.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6452[label="197.17.45.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat916[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.17.45.17:80, 195.89.105.215:60182}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60182: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3545--6452[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" dst_port="60182" src_ip="197.17.45.17" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.76.46.17"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_918{
style=filled;
color=gray75;
3557[label="194.212.156.17;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6460[label="194.212.156.17;4pkt 4fpkt", shape=invtriangle, color=brown];
stat918[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.156.17:1194, 210.88.147.51:80}[25%]&lt;BR/&gt;{194.212.156.17:1155, 132.4.150.179:80}[25%]&lt;BR/&gt;{194.212.156.17:1179, 194.29.21.24:80}[25%]&lt;BR/&gt;{194.212.156.17:1180, 194.29.21.24:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1180: (14.2857%)&lt;BR/&gt; 1179: (14.2857%)&lt;BR/&gt; 1155: (14.2857%)&lt;BR/&gt; 1194: (7.14286%)&gt;];
}
3557--6460[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.29.21.24" dst_port="80" src_ip="194.212.156.17" src_port="1180"/>
      <filter dst_ip="194.29.21.24" dst_port="80" src_ip="194.212.156.17" src_port="1179"/>
      <filter dst_ip="132.4.150.179" dst_port="80" src_ip="194.212.156.17" src_port="1155"/>
      <filter dst_ip="210.88.147.51" dst_port="80" src_ip="194.212.156.17" src_port="1194"/>
    </slice>
    <from sec="1144127436" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
3560[label="193.64.2.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6462[label="193.64.2.18;1pkt 1fpkt", shape=invtriangle, color=brown];
8493[label="193.64.2.18;1pkt 1fpkt", shape=invhouse, color=bisque];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.64.2.18:36275, 194.212.155.160:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36275: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3560--6462[label="1;1pkt 1fpkt"];
3560--8493[label="1;1pkt 1fpkt"];
6462--8493[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.155.160" dst_port="80" src_ip="193.64.2.18" src_port="36275"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
1385[label="166.138.86.18;s;3pkt 3fpkt", shape=diamond, color=yellow];
3563[label="166.138.86.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6464[label="166.138.86.18;1pkt 1fpkt", shape=invtriangle, color=brown];
8494[label="166.138.86.18;1pkt 1fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.18:32771, 206.172.31.41:53}[33.3333%]&lt;BR/&gt;{166.138.86.18:32771, 128.202.100.132:53}[33.3333%]&lt;BR/&gt;{166.138.86.18:32771, 128.202.100.133:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32771: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1385--1812[label="0.333333;1pkt 1fpkt"];
1385--2509[label="0.333333;1pkt 1fpkt"];
1385--3290[label="0.333333;1pkt 1fpkt"];
1385--3295[label="0.333333;1pkt 1fpkt"];
1385--3563[label="1;1pkt 1fpkt"];
1385--6464[label="1;1pkt 1fpkt"];
1385--8494[label="1;1pkt 1fpkt"];
3563--6464[label="1;1pkt 1fpkt"];
3563--8494[label="1;1pkt 1fpkt"];
6464--8494[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.100.133" dst_port="53" src_ip="166.138.86.18" src_port="32771"/>
      <filter dst_ip="128.202.100.132" dst_port="53" src_ip="166.138.86.18" src_port="32771"/>
      <filter dst_ip="206.172.31.41" dst_port="53" src_ip="166.138.86.18" src_port="32771"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_921{
style=filled;
color=gray75;
3567[label="194.212.141.18;77pkt 77fpkt", shape=pentagon, color=darkviolet];
6468[label="194.212.141.18;77pkt 77fpkt", shape=invtriangle, color=brown];
stat921[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.141.18:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1511: (6.49351%)&lt;BR/&gt; 35718: (5.19481%)&lt;BR/&gt; 28102: (3.24675%)&lt;BR/&gt; 80: (3.24675%)&lt;BR/&gt; 57384: (2.5974%)&gt;];
}
3567--6468[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.141.18"/>
    </slice>
    <from sec="1144126870" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_922{
style=filled;
color=gray75;
262[label="132.19.241.18;s;414pkt 414fpkt", shape=diamond, color=yellow];
2233[label="39.64.11.134;d;17pkt 17fpkt", shape=diamond, color=yellow];
3573[label="132.19.241.18;439pkt 439fpkt", shape=pentagon, color=darkviolet];
6472[label="132.19.241.18;439pkt 439fpkt", shape=invtriangle, color=brown];
stat922[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.241.18:25, *:*}[55.5066%]&lt;BR/&gt;{132.19.241.18:*, *:80}[25.7709%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.0787%)&lt;BR/&gt; 80: (14.0183%)&lt;BR/&gt; 53: (3.13216%)&lt;BR/&gt; 50028: (0.229183%)&lt;BR/&gt; 4468: (0.229183%)&gt;];
}
262--311[label="0.0603865;25pkt 25fpkt"];
262--438[label="0.142857;1pkt 1fpkt"];
262--792[label="0.0700483;29pkt 29fpkt"];
262--808[label="0.0116959;4pkt 4fpkt"];
262--869[label="0.00958466;3pkt 3fpkt"];
262--1066[label="0.00621118;1pkt 1fpkt"];
262--1386[label="0.00766284;2pkt 2fpkt"];
262--1403[label="0.00694444;1pkt 1fpkt"];
262--1513[label="0.0210843;7pkt 7fpkt"];
262--1517[label="0.00520833;1pkt 1fpkt"];
262--1898[label="0.0106383;1pkt 1fpkt"];
262--1921[label="0.0700483;29pkt 29fpkt"];
262--1982[label="0.240506;19pkt 19fpkt"];
262--2233[label="0.117647;2pkt 2fpkt"];
262--3287[label="0.00241546;1pkt 1fpkt"];
262--3296[label="0.00241546;1pkt 1fpkt"];
262--3302[label="0.00241546;1pkt 1fpkt"];
262--3573[label="1;414pkt 414fpkt"];
262--6472[label="1;414pkt 414fpkt"];
2233--3336[label="0.235294;4pkt 4fpkt"];
2233--3573[label="0.117647;2pkt 2fpkt"];
2233--5673[label="0.294118;5pkt 5fpkt"];
2233--5739[label="0.0588235;1pkt 1fpkt"];
2233--6306[label="0.235294;4pkt 4fpkt"];
2233--6472[label="0.117647;2pkt 2fpkt"];
3573--6472[label="1;439pkt 439fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.241.18" src_port="25"/>
      <filter dst_port="80" src_ip="132.19.241.18"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_923{
style=filled;
color=gray75;
3585[label="208.42.122.19;343pkt 343fpkt", shape=pentagon, color=darkviolet];
6482[label="208.42.122.19;343pkt 343fpkt", shape=invtriangle, color=brown];
8502[label="208.42.122.19;342pkt 342fpkt", shape=invhouse, color=bisque];
stat923[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.42.122.19:1841, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1841: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
3585--6482[label="1;343pkt 343fpkt"];
3585--8502[label="1;342pkt 342fpkt"];
6482--8502[label="1;342pkt 342fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.42.122.19" src_port="1841"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.90.143.19"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_925{
style=filled;
color=gray75;
3590[label="83.160.210.19;109pkt 109fpkt", shape=pentagon, color=darkviolet];
6485[label="83.160.210.19;110pkt 110fpkt", shape=invtriangle, color=brown];
8505[label="83.160.210.19;109pkt 109fpkt", shape=invhouse, color=bisque];
stat925[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.160.210.19:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3590--6485[label="1;109pkt 109fpkt"];
3590--8505[label="1;109pkt 109fpkt"];
6485--8505[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="83.160.210.19"/>
    </slice>
    <from sec="1144126859" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_926{
style=filled;
color=gray75;
3598[label="208.120.34.20;164pkt 164fpkt", shape=pentagon, color=darkviolet];
6491[label="208.120.34.20;164pkt 164fpkt", shape=invtriangle, color=brown];
stat926[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.120.34.20:1159, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1159: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3598--6491[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.120.34.20" src_port="1159"/>
    </slice>
    <from sec="1144127352" usec="0"/>
    <to sec="1144127424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
3601[label="83.181.99.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6494[label="83.181.99.20;1pkt 1fpkt", shape=invtriangle, color=brown];
8512[label="83.181.99.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.99.20:80, 147.13.42.129:2227}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2227: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3601--6494[label="1;1pkt 1fpkt"];
3601--8512[label="1;1pkt 1fpkt"];
6494--8512[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.42.129" dst_port="2227" src_ip="83.181.99.20" src_port="80"/>
    </slice>
    <from sec="1144126961" usec="0"/>
    <to sec="1144127074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.179.121.20"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
3606[label="214.204.199.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6497[label="214.204.199.20;1pkt 1fpkt", shape=invtriangle, color=brown];
8515[label="214.204.199.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.204.199.20:16881, 147.13.228.88:4018}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (50%)&lt;BR/&gt; 4018: (50%)&gt;];
}
3606--6497[label="1;1pkt 1fpkt"];
3606--8515[label="1;1pkt 1fpkt"];
6497--8515[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.88" dst_port="4018" src_ip="214.204.199.20" src_port="16881"/>
    </slice>
    <from sec="1144126941" usec="0"/>
    <to sec="1144127540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.52.249.20"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.24.5.21"/>
    </slice>
    <from sec="1144126848" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
3611[label="161.223.44.21;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6501[label="161.223.44.21;9pkt 9fpkt", shape=invtriangle, color=brown];
8519[label="161.223.44.21;9pkt 9fpkt", shape=invhouse, color=bisque];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.44.21:*, 39.12.147.122:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32780: (5.35714%)&lt;BR/&gt; 32779: (5.35714%)&lt;BR/&gt; 32778: (5.35714%)&lt;BR/&gt; 32777: (5.35714%)&gt;];
}
3611--6501[label="1;9pkt 9fpkt"];
3611--8519[label="1;9pkt 9fpkt"];
6501--8519[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="39.12.147.122" dst_port="80" src_ip="161.223.44.21"/>
    </slice>
    <from sec="1144127325" usec="0"/>
    <to sec="1144127364" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
3612[label="132.19.51.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6502[label="132.19.51.21;1pkt 1fpkt", shape=invtriangle, color=brown];
8520[label="132.19.51.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.51.21:19603, 38.192.181.247:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19603: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3612--6502[label="1;1pkt 1fpkt"];
3612--8520[label="1;1pkt 1fpkt"];
6502--8520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.192.181.247" dst_port="80" src_ip="132.19.51.21" src_port="19603"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
3615[label="161.223.85.21;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6504[label="161.223.85.21;14pkt 14fpkt", shape=invtriangle, color=brown];
8521[label="161.223.85.21;14pkt 14fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.85.21:3696, *:*}[64.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3696: (32.1429%)&lt;BR/&gt; 12227: (7.14286%)&lt;BR/&gt; 11555: (7.14286%)&lt;BR/&gt; 64553: (3.57143%)&lt;BR/&gt; 52952: (3.57143%)&gt;];
}
3615--6504[label="1;14pkt 14fpkt"];
3615--8521[label="1;14pkt 14fpkt"];
6504--8521[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.85.21" src_port="3696"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
3617[label="194.212.152.21;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6506[label="194.212.152.21;4pkt 4fpkt", shape=invtriangle, color=brown];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.152.21:2365, 198.4.56.2:53}[25%]&lt;BR/&gt;{194.212.152.21:2365, 151.24.14.24:53}[25%]&lt;BR/&gt;{194.212.152.21:2365, 141.98.195.26:53}[25%]&lt;BR/&gt;{194.212.152.21:2365, 141.91.255.146:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2365: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
3617--6506[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="141.91.255.146" dst_port="53" src_ip="194.212.152.21" src_port="2365"/>
      <filter dst_ip="141.98.195.26" dst_port="53" src_ip="194.212.152.21" src_port="2365"/>
      <filter dst_ip="151.24.14.24" dst_port="53" src_ip="194.212.152.21" src_port="2365"/>
      <filter dst_ip="198.4.56.2" dst_port="53" src_ip="194.212.152.21" src_port="2365"/>
    </slice>
    <from sec="1144127506" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
3621[label="199.155.164.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6509[label="199.155.164.21;1pkt 1fpkt", shape=invtriangle, color=brown];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.155.164.21:45900, 164.23.221.75:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45900: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3621--6509[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.221.75" dst_port="25" src_ip="199.155.164.21" src_port="45900"/>
    </slice>
    <from sec="1144127560" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_937{
style=filled;
color=gray75;
1536[label="195.89.120.171;d;241pkt 241fpkt", shape=diamond, color=yellow];
1607[label="36.52.227.21;s;71pkt 71fpkt", shape=diamond, color=yellow];
3625[label="36.52.227.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6513[label="36.52.227.21;1pkt 1fpkt", shape=invtriangle, color=brown];
8525[label="36.52.227.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat937[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.89.120.171:53}[32.1543%]&lt;BR/&gt;{*:53, 195.89.120.171:65502}[31.1897%]&lt;BR/&gt;{36.52.227.21:53, *:*}[22.8296%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.7619%)&lt;BR/&gt; 65502: (15.5556%)&lt;BR/&gt; 25: (4.44444%)&lt;BR/&gt; 32768: (2.22222%)&lt;BR/&gt; 113: (1.74603%)&gt;];
}
1536--1607[label="0.0140845;1pkt 1fpkt"];
1536--2560[label="0.0151515;1pkt 1fpkt"];
1536--3287[label="0.0124481;3pkt 3fpkt"];
1536--3290[label="0.0124481;3pkt 3fpkt"];
1536--3295[label="0.0165975;4pkt 4fpkt"];
1536--3302[label="0.0497925;12pkt 12fpkt"];
1536--3604[label="0.0133333;1pkt 1fpkt"];
1536--3803[label="0.0185185;1pkt 1fpkt"];
1536--3919[label="0.0188679;1pkt 1fpkt"];
1536--3950[label="0.0116279;1pkt 1fpkt"];
1536--4388[label="0.0151515;1pkt 1fpkt"];
1536--4411[label="0.0277778;1pkt 1fpkt"];
1536--4436[label="0.0212766;1pkt 1fpkt"];
1536--4449[label="0.0714286;1pkt 1fpkt"];
1536--4673[label="0.0243902;1pkt 1fpkt"];
1536--4691[label="0.0192308;1pkt 1fpkt"];
1536--4885[label="0.0185185;1pkt 1fpkt"];
1536--4915[label="0.0138889;1pkt 1fpkt"];
1536--5359[label="0.03125;1pkt 1fpkt"];
1536--5430[label="0.0555556;1pkt 1fpkt"];
1536--5433[label="0.00757576;1pkt 1fpkt"];
1536--5502[label="0.0416667;1pkt 1fpkt"];
1536--5524[label="0.0416667;1pkt 1fpkt"];
1536--5572[label="0.0357143;1pkt 1fpkt"];
1536--5625[label="0.0185185;1pkt 1fpkt"];
1536--5750[label="0.0138889;1pkt 1fpkt"];
1536--5762[label="0.0833333;1pkt 1fpkt"];
1536--5929[label="0.030303;1pkt 1fpkt"];
1536--5945[label="0.0625;1pkt 1fpkt"];
1536--5973[label="0.0212766;1pkt 1fpkt"];
1536--5995[label="0.0454545;1pkt 1fpkt"];
1536--6626[label="0.0185185;1pkt 1fpkt"];
1536--6725[label="0.0114943;1pkt 1fpkt"];
1536--7038[label="0.0153846;1pkt 1fpkt"];
1536--7056[label="0.0277778;1pkt 1fpkt"];
1536--7229[label="0.025;1pkt 1fpkt"];
1536--7245[label="0.0192308;1pkt 1fpkt"];
1536--7387[label="0.0185185;1pkt 1fpkt"];
1536--7716[label="0.0322581;1pkt 1fpkt"];
1536--7759[label="0.0588235;1pkt 1fpkt"];
1536--7762[label="0.00757576;1pkt 1fpkt"];
1536--7810[label="0.0416667;1pkt 1fpkt"];
1536--7827[label="0.0416667;1pkt 1fpkt"];
1536--7906[label="0.0185185;1pkt 1fpkt"];
1536--7997[label="0.0138889;1pkt 1fpkt"];
1536--8005[label="0.0833333;1pkt 1fpkt"];
1536--8117[label="0.030303;1pkt 1fpkt"];
1536--8129[label="0.0625;1pkt 1fpkt"];
1536--8149[label="0.0212766;1pkt 1fpkt"];
1536--8166[label="0.0454545;1pkt 1fpkt"];
1536--8653[label="0.0116279;1pkt 1fpkt"];
1536--8859[label="0.0153846;1pkt 1fpkt"];
1536--8873[label="0.0277778;1pkt 1fpkt"];
1536--8882[label="0.0208333;1pkt 1fpkt"];
1536--8994[label="0.0192308;1pkt 1fpkt"];
1536--9299[label="0.03125;1pkt 1fpkt"];
1536--9326[label="0.0555556;1pkt 1fpkt"];
1536--9328[label="0.00757576;1pkt 1fpkt"];
1536--9371[label="0.0416667;1pkt 1fpkt"];
1536--9419[label="0.0188679;1pkt 1fpkt"];
1536--9476[label="0.0140845;1pkt 1fpkt"];
1536--9480[label="0.0833333;1pkt 1fpkt"];
1536--9560[label="0.030303;1pkt 1fpkt"];
1536--9569[label="0.0666667;1pkt 1fpkt"];
1536--9582[label="0.0212766;1pkt 1fpkt"];
1607--1721[label="0.0196078;1pkt 1fpkt"];
1607--1821[label="0.0140845;1pkt 1fpkt"];
1607--1825[label="0.0140845;1pkt 1fpkt"];
1607--1840[label="0.0140845;1pkt 1fpkt"];
1607--1866[label="0.0140845;1pkt 1fpkt"];
1607--2099[label="0.0140845;1pkt 1fpkt"];
1607--2155[label="0.0140845;1pkt 1fpkt"];
1607--2203[label="0.0140845;1pkt 1fpkt"];
1607--2509[label="0.0140845;1pkt 1fpkt"];
1607--2907[label="0.056338;4pkt 4fpkt"];
1607--3067[label="0.0208333;1pkt 1fpkt"];
1607--3099[label="0.0140845;1pkt 1fpkt"];
1607--3287[label="0.211268;15pkt 15fpkt"];
1607--3290[label="0.0140845;1pkt 1fpkt"];
1607--3295[label="0.0140845;1pkt 1fpkt"];
1607--3302[label="0.478873;34pkt 34fpkt"];
1607--3625[label="1;1pkt 1fpkt"];
1607--6513[label="1;1pkt 1fpkt"];
1607--8525[label="1;1pkt 1fpkt"];
3625--6513[label="1;1pkt 1fpkt"];
3625--8525[label="1;1pkt 1fpkt"];
6513--8525[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="36.52.227.21" src_port="53"/>
      <filter dst_ip="195.89.120.171" dst_port="53"/>
      <filter dst_ip="195.89.120.171" dst_port="65502" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_938{
style=filled;
color=gray75;
3630[label="82.140.87.22;277pkt 277fpkt", shape=pentagon, color=darkviolet];
6516[label="82.140.87.22;278pkt 278fpkt", shape=invtriangle, color=brown];
stat938[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.140.87.22:*, *:139}[63.3094%]&lt;BR/&gt;{82.140.87.22:*, *:445}[36.6906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (31.6216%)&lt;BR/&gt; 445: (18.3784%)&lt;BR/&gt; 65097: (0.18018%)&lt;BR/&gt; 65095: (0.18018%)&lt;BR/&gt; 65093: (0.18018%)&gt;];
}
3630--6516[label="1;277pkt 277fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="82.140.87.22"/>
      <filter dst_port="445" src_ip="82.140.87.22"/>
    </slice>
    <from sec="1144127192" usec="0"/>
    <to sec="1144127235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
3636[label="128.28.203.22;50pkt 50fpkt", shape=pentagon, color=darkviolet];
6518[label="128.28.203.22;51pkt 51fpkt", shape=invtriangle, color=brown];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.203.22:33943, *:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33943: (47.0297%)&lt;BR/&gt; 55866: (1.9802%)&lt;BR/&gt; 1863: (1.9802%)&lt;BR/&gt; 63112: (0.990099%)&lt;BR/&gt; 62059: (0.990099%)&gt;];
}
3636--6518[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.203.22" src_port="33943"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
3638[label="33.65.50.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6520[label="33.65.50.23;1pkt 1fpkt", shape=invtriangle, color=brown];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.65.50.23:8620, 132.19.106.2:49697}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49697: (50%)&lt;BR/&gt; 8620: (50%)&gt;];
}
3638--6520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.106.2" dst_port="49697" src_ip="33.65.50.23" src_port="8620"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
3643[label="33.207.137.23;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6523[label="33.207.137.23;4pkt 4fpkt", shape=invtriangle, color=brown];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.207.137.23:1490, 161.223.8.108:80}[25%]&lt;BR/&gt;{33.207.137.23:1491, 161.223.8.108:80}[25%]&lt;BR/&gt;{33.207.137.23:1492, 161.223.8.108:80}[25%]&lt;BR/&gt;{33.207.137.23:1493, 161.223.8.108:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1493: (14.2857%)&lt;BR/&gt; 1492: (14.2857%)&lt;BR/&gt; 1491: (14.2857%)&lt;BR/&gt; 1490: (7.14286%)&gt;];
}
3643--6523[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.8.108" dst_port="80" src_ip="33.207.137.23" src_port="1493"/>
      <filter dst_ip="161.223.8.108" dst_port="80" src_ip="33.207.137.23" src_port="1492"/>
      <filter dst_ip="161.223.8.108" dst_port="80" src_ip="33.207.137.23" src_port="1491"/>
      <filter dst_ip="161.223.8.108" dst_port="80" src_ip="33.207.137.23" src_port="1490"/>
    </slice>
    <from sec="1144126913" usec="0"/>
    <to sec="1144126950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
3647[label="194.5.187.23;80pkt 80fpkt", shape=pentagon, color=darkviolet];
6526[label="194.5.187.23;81pkt 81fpkt", shape=invtriangle, color=brown];
8531[label="194.5.187.23;80pkt 80fpkt", shape=invhouse, color=bisque];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.5.187.23:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4897: (0.622407%)&lt;BR/&gt; 4746: (0.622407%)&lt;BR/&gt; 4642: (0.622407%)&lt;BR/&gt; 4557: (0.622407%)&gt;];
}
3647--6526[label="1;80pkt 80fpkt"];
3647--8531[label="1;80pkt 80fpkt"];
6526--8531[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="194.5.187.23"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
3652[label="194.29.21.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6528[label="194.29.21.24;2pkt 2fpkt", shape=invtriangle, color=brown];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.29.21.24:80, 194.212.156.17:1179}[50%]&lt;BR/&gt;{194.29.21.24:80, 194.212.156.17:1180}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1180: (33.3333%)&lt;BR/&gt; 1179: (16.6667%)&gt;];
}
3652--6528[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.156.17" dst_port="1180" src_ip="194.29.21.24" src_port="80"/>
      <filter dst_ip="194.212.156.17" dst_port="1179" src_ip="194.29.21.24" src_port="80"/>
    </slice>
    <from sec="1144127518" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
964[label="166.138.86.24;s;4pkt 4fpkt", shape=diamond, color=yellow];
1019[label="195.89.107.44;d;521pkt 521fpkt", shape=diamond, color=yellow];
2813[label="166.138.86.24;s;4pkt 4fpkt", shape=hexagon, color=black];
3655[label="166.138.86.24;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4843[label="196.28.253.130;187pkt 187fpkt", shape=pentagon, color=darkviolet];
6531[label="166.138.86.24;3pkt 3fpkt", shape=invtriangle, color=brown];
7358[label="196.28.253.130;187pkt 187fpkt", shape=invtriangle, color=brown];
8535[label="166.138.86.24;4pkt 4fpkt", shape=invhouse, color=bisque];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.89.107.44:53}[72.7401%]&lt;BR/&gt;{196.28.253.130:*, 206.172.31.41:53}[25.7062%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.931%)&lt;BR/&gt; 32768: (1.15005%)&lt;BR/&gt; 38365: (1.04053%)&lt;BR/&gt; 32769: (0.438116%)&lt;BR/&gt; 0: (0.438116%)&gt;];
}
964--1019[label="0.25;1pkt 1fpkt"];
964--1237[label="0.25;1pkt 1fpkt"];
964--1812[label="0.25;1pkt 1fpkt"];
964--2813[label="1;4pkt 4fpkt"];
964--3290[label="0.25;1pkt 1fpkt"];
964--3295[label="0.5;2pkt 2fpkt"];
964--3655[label="1;3pkt 3fpkt"];
964--6531[label="1;3pkt 3fpkt"];
964--8535[label="1;4pkt 4fpkt"];
1019--2397[label="0.0588235;1pkt 1fpkt"];
1019--2580[label="0.0714286;1pkt 1fpkt"];
1019--2813[label="0.25;1pkt 1fpkt"];
1019--3116[label="0.333333;1pkt 1fpkt"];
1019--3287[label="0.00191939;1pkt 1fpkt"];
1019--3290[label="0.0863724;45pkt 45fpkt"];
1019--3295[label="0.0767754;40pkt 40fpkt"];
1019--3302[label="0.00575816;3pkt 3fpkt"];
1019--3359[label="0.0588235;1pkt 1fpkt"];
1019--3596[label="0.25;1pkt 1fpkt"];
1019--3627[label="0.25;1pkt 1fpkt"];
1019--3655[label="0.333333;1pkt 1fpkt"];
1019--3822[label="0.0555556;1pkt 1fpkt"];
1019--4134[label="0.0909091;1pkt 1fpkt"];
1019--4149[label="0.25;1pkt 1fpkt"];
1019--4480[label="0.111111;1pkt 1fpkt"];
1019--4520[label="0.153846;2pkt 2fpkt"];
1019--4671[label="0.00534759;1pkt 1fpkt"];
1019--4791[label="0.0172414;1pkt 1fpkt"];
1019--4843[label="0.0160428;3pkt 3fpkt"];
1019--4958[label="0.0342857;6pkt 6fpkt"];
1019--4991[label="0.0209424;4pkt 4fpkt"];
1019--5205[label="0.0555556;1pkt 1fpkt"];
1019--5592[label="0.0714286;1pkt 1fpkt"];
1019--5756[label="0.0909091;1pkt 1fpkt"];
1019--5807[label="0.0121951;2pkt 2fpkt"];
1019--5859[label="0.125;1pkt 1fpkt"];
1019--5955[label="0.166667;1pkt 1fpkt"];
1019--6088[label="0.0357143;1pkt 1fpkt"];
1019--6327[label="0.0588235;1pkt 1fpkt"];
1019--6489[label="0.2;1pkt 1fpkt"];
1019--6531[label="0.333333;1pkt 1fpkt"];
1019--6635[label="0.0555556;1pkt 1fpkt"];
1019--7227[label="0.00534759;1pkt 1fpkt"];
1019--7358[label="0.0160428;3pkt 3fpkt"];
1019--7436[label="0.0342857;6pkt 6fpkt"];
1019--7607[label="0.0555556;1pkt 1fpkt"];
1019--7878[label="0.0714286;1pkt 1fpkt"];
1019--8001[label="0.0909091;1pkt 1fpkt"];
1019--8067[label="0.125;1pkt 1fpkt"];
1019--8134[label="0.166667;1pkt 1fpkt"];
1019--8236[label="0.037037;1pkt 1fpkt"];
1019--8409[label="0.0588235;1pkt 1fpkt"];
1019--8509[label="0.25;1pkt 1fpkt"];
1019--8535[label="0.25;1pkt 1fpkt"];
1019--8601[label="0.0555556;1pkt 1fpkt"];
1019--9573[label="0.2;1pkt 1fpkt"];
1019--9637[label="0.037037;1pkt 1fpkt"];
2813--3290[label="0.25;1pkt 1fpkt"];
2813--3295[label="0.5;2pkt 2fpkt"];
2813--3655[label="1;3pkt 3fpkt"];
2813--6531[label="1;3pkt 3fpkt"];
2813--8535[label="1;4pkt 4fpkt"];
3655--6531[label="1;3pkt 3fpkt"];
3655--8535[label="1;3pkt 3fpkt"];
4843--7358[label="1;187pkt 187fpkt"];
6531--8535[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.107.44" dst_port="53"/>
      <filter dst_ip="206.172.31.41" dst_port="53" src_ip="196.28.253.130"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.16.98.24"/>
    </slice>
    <from sec="1144127195" usec="0"/>
    <to sec="1144127244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
3661[label="81.2.162.24;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6537[label="81.2.162.24;42pkt 42fpkt", shape=invtriangle, color=brown];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.2.162.24:80, 161.223.54.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2472: (1.19048%)&lt;BR/&gt; 2471: (1.19048%)&lt;BR/&gt; 2470: (1.19048%)&lt;BR/&gt; 2469: (1.19048%)&gt;];
}
3661--6537[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.54.177" src_ip="81.2.162.24" src_port="80"/>
    </slice>
    <from sec="1144127496" usec="0"/>
    <to sec="1144127554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.168.77.25"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
1088[label="166.138.86.25;s;8pkt 8fpkt", shape=diamond, color=yellow];
3673[label="166.138.86.25;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6546[label="166.138.86.25;1pkt 1fpkt", shape=invtriangle, color=brown];
8547[label="166.138.86.25;1pkt 1fpkt", shape=invhouse, color=bisque];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.25:38130, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38130: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1088--1237[label="0.125;1pkt 1fpkt"];
1088--1812[label="0.125;1pkt 1fpkt"];
1088--3290[label="0.125;1pkt 1fpkt"];
1088--3295[label="0.125;1pkt 1fpkt"];
1088--3673[label="1;1pkt 1fpkt"];
1088--6546[label="1;1pkt 1fpkt"];
1088--8547[label="1;1pkt 1fpkt"];
3673--6546[label="1;1pkt 1fpkt"];
3673--8547[label="1;1pkt 1fpkt"];
6546--8547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.138.86.25" src_port="38130"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
3679[label="85.181.137.25;221pkt 221fpkt", shape=pentagon, color=darkviolet];
6550[label="85.181.137.25;221pkt 221fpkt", shape=invtriangle, color=brown];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.181.137.25:11018, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11018: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3679--6550[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.181.137.25" src_port="11018"/>
    </slice>
    <from sec="1144126822" usec="0"/>
    <to sec="1144126838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_950{
style=filled;
color=gray75;
1059[label="36.172.50.26;s;8pkt 8fpkt", shape=diamond, color=yellow];
3686[label="36.172.50.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6554[label="36.172.50.26;1pkt 1fpkt", shape=invtriangle, color=brown];
stat950[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.172.50.26:*, 164.23.141.28:25}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 34462: (15%)&lt;BR/&gt; 33005: (5%)&lt;BR/&gt; 32982: (5%)&lt;BR/&gt; 32981: (5%)&gt;];
}
1059--3686[label="1;1pkt 1fpkt"];
1059--6554[label="1;1pkt 1fpkt"];
3686--6554[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.141.28" dst_port="25" src_ip="36.172.50.26"/>
    </slice>
    <from sec="1144127314" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,053,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
3700[label="132.18.156.27;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6564[label="132.18.156.27;116pkt 116fpkt", shape=invtriangle, color=brown];
8560[label="132.18.156.27;116pkt 116fpkt", shape=invhouse, color=bisque];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.156.27:*, 221.156.38.153:80}[94.8276%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8448%)&lt;BR/&gt; 5190: (1.72414%)&lt;BR/&gt; 0: (0.862069%)&lt;BR/&gt; 50051: (0.431034%)&lt;BR/&gt; 50024: (0.431034%)&gt;];
}
3700--6564[label="1;116pkt 116fpkt"];
3700--8560[label="1;116pkt 116fpkt"];
6564--8560[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="221.156.38.153" dst_port="80" src_ip="132.18.156.27"/>
    </slice>
    <from sec="1144127010" usec="0"/>
    <to sec="1144127662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.8.185.27"/>
    </slice>
    <from sec="1144126901" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
1324[label="166.138.86.28;s;7pkt 7fpkt", shape=diamond, color=yellow];
3706[label="166.138.86.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6567[label="166.138.86.28;1pkt 1fpkt", shape=invtriangle, color=brown];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.28:32776, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32776: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1324--1812[label="0.142857;1pkt 1fpkt"];
1324--1840[label="0.142857;1pkt 1fpkt"];
1324--2155[label="0.142857;1pkt 1fpkt"];
1324--2899[label="0.142857;1pkt 1fpkt"];
1324--3290[label="0.142857;1pkt 1fpkt"];
1324--3295[label="0.285714;2pkt 2fpkt"];
1324--3706[label="1;1pkt 1fpkt"];
1324--6567[label="1;1pkt 1fpkt"];
3706--6567[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.138.86.28" src_port="32776"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
3708[label="164.23.141.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6569[label="164.23.141.28;2pkt 2fpkt", shape=invtriangle, color=brown];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.141.28:25, 36.172.50.0:35788}[50%]&lt;BR/&gt;{164.23.141.28:80, 32.208.22.2:42171}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42171: (25%)&lt;BR/&gt; 35788: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
3708--6569[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.208.22.2" dst_port="42171" src_ip="164.23.141.28" src_port="80"/>
      <filter dst_ip="36.172.50.0" dst_port="35788" src_ip="164.23.141.28" src_port="25"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
3711[label="194.232.169.28;125pkt 125fpkt", shape=pentagon, color=darkviolet];
6570[label="194.232.169.28;126pkt 126fpkt", shape=invtriangle, color=brown];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.232.169.28:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3711--6570[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="194.232.169.28" src_port="1026"/>
    </slice>
    <from sec="1144126857" usec="0"/>
    <to sec="1144126871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_956{
style=filled;
color=gray75;
3721[label="173.77.68.29;116pkt 116fpkt", shape=pentagon, color=darkviolet];
6576[label="173.77.68.29;116pkt 116fpkt", shape=invtriangle, color=brown];
8566[label="173.77.68.29;117pkt 117fpkt", shape=invhouse, color=bisque];
stat956[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.77.68.29:1034, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3721--6576[label="1;116pkt 116fpkt"];
3721--8566[label="1;116pkt 116fpkt"];
6576--8566[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="173.77.68.29" src_port="1034"/>
    </slice>
    <from sec="1144127069" usec="0"/>
    <to sec="1144127087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
1409[label="166.138.86.11;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.138.86.11:39580, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39580: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1409--1512[label="0.125;1pkt 1fpkt"];
1409--1812[label="0.125;1pkt 1fpkt"];
1409--3139[label="1;7pkt 7fpkt"];
1409--3290[label="0.125;1pkt 1fpkt"];
1409--3295[label="0.125;1pkt 1fpkt"];
1409--3468[label="1;7pkt 7fpkt"];
1409--6402[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="166.138.86.11" src_port="39580"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_958{
style=filled;
color=gray75;
840[label="196.75.24.136;d;97pkt 97fpkt", shape=diamond, color=yellow];
1011[label="218.150.67.24;d;178pkt 178fpkt", shape=diamond, color=yellow];
2239[label="132.19.206.2;s;40pkt 40fpkt", shape=diamond, color=yellow];
2461[label="161.223.103.29;s;26pkt 26fpkt", shape=diamond, color=yellow];
3152[label="132.19.206.2;s;40pkt 40fpkt", shape=hexagon, color=black];
3727[label="161.223.103.29;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4023[label="132.19.230.56;23pkt 23fpkt", shape=pentagon, color=darkviolet];
4399[label="132.19.206.85;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4831[label="132.19.90.130;19pkt 19fpkt", shape=pentagon, color=darkviolet];
4933[label="132.19.192.136;18pkt 18fpkt", shape=pentagon, color=darkviolet];
5402[label="132.19.51.173;21pkt 21fpkt", shape=pentagon, color=darkviolet];
5481[label="161.223.180.181;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6579[label="161.223.103.29;47pkt 47fpkt", shape=invtriangle, color=brown];
7048[label="132.19.206.85;12pkt 12fpkt", shape=invtriangle, color=brown];
7350[label="132.19.90.130;20pkt 20fpkt", shape=invtriangle, color=brown];
7420[label="132.19.192.136;17pkt 17fpkt", shape=invtriangle, color=brown];
7745[label="132.19.51.173;20pkt 20fpkt", shape=invtriangle, color=brown];
8567[label="161.223.103.29;47pkt 47fpkt", shape=invhouse, color=bisque];
8867[label="132.19.206.85;12pkt 12fpkt", shape=invhouse, color=bisque];
9104[label="132.19.192.136;18pkt 18fpkt", shape=invhouse, color=bisque];
9134[label="128.202.7.142;18pkt 18fpkt", shape=invhouse, color=bisque];
9318[label="132.19.51.173;21pkt 21fpkt", shape=invhouse, color=bisque];
stat958[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 218.150.67.24:80}[44.2786%]&lt;BR/&gt;{*:*, 196.75.24.136:80}[24.1294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.112%)&lt;BR/&gt; 1863: (0.455729%)&lt;BR/&gt; 7001: (0.390625%)&lt;BR/&gt; 3263: (0.390625%)&lt;BR/&gt; 443: (0.390625%)&gt;];
}
840--2729[label="0.103093;10pkt 10fpkt"];
840--3225[label="0.0515464;5pkt 5fpkt"];
840--3233[label="0.0206186;2pkt 2fpkt"];
840--3284[label="0.0412371;4pkt 4fpkt"];
840--3296[label="0.0721649;7pkt 7fpkt"];
840--3727[label="0.0208333;1pkt 1fpkt"];
840--4108[label="0.0206186;2pkt 2fpkt"];
840--4327[label="0.0103093;1pkt 1fpkt"];
840--4399[label="0.153846;2pkt 2fpkt"];
840--4831[label="0.105263;2pkt 2fpkt"];
840--4933[label="0.0555556;1pkt 1fpkt"];
840--5402[label="0.142857;3pkt 3fpkt"];
840--5481[label="0.0769231;1pkt 1fpkt"];
840--5876[label="0.319588;31pkt 31fpkt"];
840--5888[label="0.391753;38pkt 38fpkt"];
840--6579[label="0.0212766;1pkt 1fpkt"];
840--6835[label="0.0206186;2pkt 2fpkt"];
840--6992[label="0.0103093;1pkt 1fpkt"];
840--7048[label="0.166667;2pkt 2fpkt"];
840--7350[label="0.1;2pkt 2fpkt"];
840--7420[label="0.0588235;1pkt 1fpkt"];
840--7745[label="0.15;3pkt 3fpkt"];
840--8082[label="0.319588;31pkt 31fpkt"];
840--8091[label="0.391753;38pkt 38fpkt"];
840--8567[label="0.0212766;1pkt 1fpkt"];
840--8728[label="0.0206186;2pkt 2fpkt"];
840--8831[label="0.0103093;1pkt 1fpkt"];
840--8867[label="0.166667;2pkt 2fpkt"];
840--9104[label="0.0555556;1pkt 1fpkt"];
840--9318[label="0.142857;3pkt 3fpkt"];
840--9535[label="0.319588;31pkt 31fpkt"];
840--9542[label="0.391753;38pkt 38fpkt"];
1011--1119[label="0.00561798;1pkt 1fpkt"];
1011--2239[label="0.05;2pkt 2fpkt"];
1011--2838[label="0.00943396;1pkt 1fpkt"];
1011--3152[label="0.05;2pkt 2fpkt"];
1011--3225[label="0.0449438;8pkt 8fpkt"];
1011--3233[label="0.0617978;11pkt 11fpkt"];
1011--3296[label="0.0449438;8pkt 8fpkt"];
1011--3336[label="0.00561798;1pkt 1fpkt"];
1011--3528[label="0.0333333;1pkt 1fpkt"];
1011--3727[label="0.208333;10pkt 10fpkt"];
1011--3936[label="0.0337079;6pkt 6fpkt"];
1011--4023[label="0.217391;5pkt 5fpkt"];
1011--4108[label="0.0561798;10pkt 10fpkt"];
1011--4327[label="0.0925926;10pkt 10fpkt"];
1011--4399[label="0.692308;9pkt 9fpkt"];
1011--4831[label="0.473684;9pkt 9fpkt"];
1011--4933[label="0.944444;17pkt 17fpkt"];
1011--5000[label="0.647059;11pkt 11fpkt"];
1011--5402[label="0.52381;11pkt 11fpkt"];
1011--5481[label="0.153846;2pkt 2fpkt"];
1011--5775[label="0.0406504;5pkt 5fpkt"];
1011--6306[label="0.00561798;1pkt 1fpkt"];
1011--6579[label="0.191489;9pkt 9fpkt"];
1011--6715[label="0.0337079;6pkt 6fpkt"];
1011--6835[label="0.0561798;10pkt 10fpkt"];
1011--6992[label="0.0925926;10pkt 10fpkt"];
1011--7048[label="0.666667;8pkt 8fpkt"];
1011--7350[label="0.5;10pkt 10fpkt"];
1011--7420[label="0.941176;16pkt 16fpkt"];
1011--7468[label="0.647059;11pkt 11fpkt"];
1011--7745[label="0.5;10pkt 10fpkt"];
1011--8567[label="0.191489;9pkt 9fpkt"];
1011--8728[label="0.0561798;10pkt 10fpkt"];
1011--8831[label="0.0917431;10pkt 10fpkt"];
1011--8867[label="0.666667;8pkt 8fpkt"];
1011--9104[label="0.944444;17pkt 17fpkt"];
1011--9134[label="0.611111;11pkt 11fpkt"];
1011--9318[label="0.52381;11pkt 11fpkt"];
2239--2350[label="0.0588235;2pkt 2fpkt"];
2239--3152[label="1;40pkt 40fpkt"];
2461--3727[label="1;26pkt 26fpkt"];
2461--6579[label="1;26pkt 26fpkt"];
2461--8567[label="1;26pkt 26fpkt"];
3727--6579[label="1;47pkt 47fpkt"];
3727--8567[label="1;47pkt 47fpkt"];
4399--7048[label="1;12pkt 12fpkt"];
4399--8867[label="1;12pkt 12fpkt"];
4831--7350[label="1;19pkt 19fpkt"];
4933--7420[label="1;17pkt 17fpkt"];
4933--9104[label="1;18pkt 18fpkt"];
5402--7745[label="1;20pkt 20fpkt"];
5402--9318[label="1;21pkt 21fpkt"];
6579--8567[label="1;47pkt 47fpkt"];
7048--8867[label="1;12pkt 12fpkt"];
7420--9104[label="1;17pkt 17fpkt"];
7745--9318[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="218.150.67.24" dst_port="80"/>
      <filter dst_ip="196.75.24.136" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
3729[label="99.8.140.29;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6580[label="99.8.140.29;8pkt 8fpkt", shape=invtriangle, color=brown];
8568[label="99.8.140.29;9pkt 9fpkt", shape=invhouse, color=bisque];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.8.140.29:*, 128.28.217.140:110}[66.6667%]&lt;BR/&gt;{99.8.140.29:*, 128.28.217.140:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (36%)&lt;BR/&gt; 25: (14%)&lt;BR/&gt; 1893: (6%)&lt;BR/&gt; 1891: (6%)&lt;BR/&gt; 1889: (6%)&gt;];
}
3729--6580[label="1;8pkt 8fpkt"];
3729--8568[label="1;8pkt 8fpkt"];
6580--8568[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.140" dst_port="110" src_ip="99.8.140.29"/>
      <filter dst_ip="128.28.217.140" dst_port="25" src_ip="99.8.140.29"/>
    </slice>
    <from sec="1144126839" usec="0"/>
    <to sec="1144127634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.162.181.30"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144126930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.150.231.30"/>
    </slice>
    <from sec="1144127453" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_962{
style=filled;
color=gray75;
3753[label="215.104.55.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6591[label="215.104.55.31;1pkt 1fpkt", shape=invtriangle, color=brown];
8573[label="215.104.55.31;1pkt 1fpkt", shape=invhouse, color=bisque];
stat962[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.104.55.31:34411, 128.156.248.40:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34411: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3753--6591[label="1;1pkt 1fpkt"];
3753--8573[label="1;1pkt 1fpkt"];
6591--8573[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.156.248.40" dst_port="25" src_ip="215.104.55.31" src_port="34411"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
3757[label="84.84.233.31;134pkt 134fpkt", shape=pentagon, color=darkviolet];
6595[label="84.84.233.31;133pkt 133fpkt", shape=invtriangle, color=brown];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.84.233.31:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3785: (0.749064%)&lt;BR/&gt; 3673: (0.749064%)&lt;BR/&gt; 3561: (0.749064%)&lt;BR/&gt; 3443: (0.749064%)&gt;];
}
3757--6595[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="84.84.233.31"/>
    </slice>
    <from sec="1144127484" usec="0"/>
    <to sec="1144127538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="132.19.249.31"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.107.253.31"/>
    </slice>
    <from sec="1144126991" usec="0"/>
    <to sec="1144127069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_966{
style=filled;
color=gray75;
3767[label="213.187.110.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6601[label="213.187.110.32;2pkt 2fpkt", shape=invtriangle, color=brown];
stat966[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.187.110.32:80, 147.13.220.1:36533}[33.3333%]&lt;BR/&gt;{213.187.110.32:80, 147.13.220.1:36534}[33.3333%]&lt;BR/&gt;{213.187.110.32:80, 147.13.220.1:36540}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36540: (20%)&lt;BR/&gt; 36534: (20%)&lt;BR/&gt; 36533: (10%)&gt;];
}
3767--6601[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.1" dst_port="36540" src_ip="213.187.110.32" src_port="80"/>
      <filter dst_ip="147.13.220.1" dst_port="36534" src_ip="213.187.110.32" src_port="80"/>
      <filter dst_ip="147.13.220.1" dst_port="36533" src_ip="213.187.110.32" src_port="80"/>
    </slice>
    <from sec="1144127660" usec="0"/>
    <to sec="1144127689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
3770[label="197.81.180.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6603[label="197.81.180.32;7pkt 7fpkt", shape=invtriangle, color=brown];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.81.180.32:80, 132.19.90.131:*}[50%]&lt;BR/&gt;{197.81.180.32:80, 132.19.43.186:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58528: (6.66667%)&lt;BR/&gt; 55440: (6.66667%)&lt;BR/&gt; 54692: (6.66667%)&lt;BR/&gt; 50902: (6.66667%)&gt;];
}
3770--6603[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.43.186" src_ip="197.81.180.32" src_port="80"/>
      <filter dst_ip="132.19.90.131" src_ip="197.81.180.32" src_port="80"/>
    </slice>
    <from sec="1144126915" usec="0"/>
    <to sec="1144127618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_968{
style=filled;
color=gray75;
481[label="161.223.242.32;s;15pkt 15fpkt", shape=diamond, color=yellow];
3774[label="161.223.242.32;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6605[label="161.223.242.32;18pkt 18fpkt", shape=invtriangle, color=brown];
8581[label="161.223.242.32;19pkt 19fpkt", shape=invhouse, color=bisque];
stat968[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.242.32:*, 53.174.69.136:80}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1818: (2.85714%)&lt;BR/&gt; 1817: (2.85714%)&lt;BR/&gt; 1816: (2.85714%)&lt;BR/&gt; 1815: (2.85714%)&gt;];
}
481--511[label="0.2;3pkt 3fpkt"];
481--1025[label="0.8;12pkt 12fpkt"];
481--3088[label="0.133333;2pkt 2fpkt"];
481--3774[label="0.933333;14pkt 14fpkt"];
481--6605[label="0.933333;14pkt 14fpkt"];
481--8581[label="1;15pkt 15fpkt"];
3774--6605[label="1;18pkt 18fpkt"];
3774--8581[label="1;18pkt 18fpkt"];
6605--8581[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="161.223.242.32"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.198.86.34"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.106.139.34"/>
    </slice>
    <from sec="1144126854" usec="0"/>
    <to sec="1144126882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_971{
style=filled;
color=gray75;
3793[label="128.202.0.35;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6618[label="128.202.0.35;5pkt 5fpkt", shape=invtriangle, color=brown];
8591[label="128.202.0.35;5pkt 5fpkt", shape=invhouse, color=bisque];
stat971[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.0.35:2654, 202.193.62.67:80}[20%]&lt;BR/&gt;{128.202.0.35:2652, 68.240.150.123:80}[20%]&lt;BR/&gt;{128.202.0.35:2604, 195.192.153.195:80}[20%]&lt;BR/&gt;{128.202.0.35:2605, 195.192.153.195:80}[20%]&lt;BR/&gt;{128.202.0.35:2609, 195.192.153.195:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2654: (10%)&lt;BR/&gt; 2652: (10%)&lt;BR/&gt; 2609: (10%)&lt;BR/&gt; 2605: (10%)&gt;];
}
3793--6618[label="1;5pkt 5fpkt"];
3793--8591[label="1;5pkt 5fpkt"];
6618--8591[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="195.192.153.195" dst_port="80" src_ip="128.202.0.35" src_port="2609"/>
      <filter dst_ip="195.192.153.195" dst_port="80" src_ip="128.202.0.35" src_port="2605"/>
      <filter dst_ip="195.192.153.195" dst_port="80" src_ip="128.202.0.35" src_port="2604"/>
      <filter dst_ip="68.240.150.123" dst_port="80" src_ip="128.202.0.35" src_port="2652"/>
      <filter dst_ip="202.193.62.67" dst_port="80" src_ip="128.202.0.35" src_port="2654"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.248.27.35"/>
    </slice>
    <from sec="1144127038" usec="0"/>
    <to sec="1144127061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.112.30.35"/>
    </slice>
    <from sec="1144126848" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
3802[label="208.36.5.36;453pkt 453fpkt", shape=pentagon, color=darkviolet];
6625[label="208.36.5.36;454pkt 454fpkt", shape=invtriangle, color=brown];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.36.5.36:1605, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1605: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
3802--6625[label="1;453pkt 453fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.36.5.36" src_port="1605"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
3804[label="194.85.36.36;88pkt 88fpkt", shape=pentagon, color=darkviolet];
6627[label="194.85.36.36;88pkt 88fpkt", shape=invtriangle, color=brown];
8595[label="194.85.36.36;89pkt 89fpkt", shape=invhouse, color=bisque];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.85.36.36:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 2326: (1.13208%)&lt;BR/&gt; 4947: (0.566038%)&lt;BR/&gt; 4884: (0.566038%)&lt;BR/&gt; 4820: (0.566038%)&gt;];
}
3804--6627[label="1;88pkt 88fpkt"];
3804--8595[label="1;88pkt 88fpkt"];
6627--8595[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="194.85.36.36"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
3807[label="132.18.96.36;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6629[label="132.18.96.36;1pkt 1fpkt", shape=invtriangle, color=brown];
8596[label="132.18.96.36;1pkt 1fpkt", shape=invhouse, color=bisque];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.96.36:46474, 204.174.241.79:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46474: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3807--6629[label="1;1pkt 1fpkt"];
3807--8596[label="1;1pkt 1fpkt"];
6629--8596[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.174.241.79" dst_port="25" src_ip="132.18.96.36" src_port="46474"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.136.166.36"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.23.171.36"/>
    </slice>
    <from sec="1144127445" usec="0"/>
    <to sec="1144127631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
3817[label="161.223.153.37;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6633[label="161.223.153.37;26pkt 26fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.153.37:*, 53.174.69.146:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1376: (1.92308%)&lt;BR/&gt; 1374: (1.92308%)&lt;BR/&gt; 1372: (1.92308%)&lt;BR/&gt; 1370: (1.92308%)&gt;];
}
3817--6633[label="1;26pkt 26fpkt"];
3817--8599[label="1;26pkt 26fpkt"];
6633--8599[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="53.174.69.146" dst_port="80" src_ip="161.223.153.37"/>
    </slice>
    <from sec="1144127595" usec="0"/>
    <to sec="1144127610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.226.195.37"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.109.217.37"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_982{
style=filled;
color=gray75;
3826[label="132.19.238.37;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6639[label="132.19.238.37;28pkt 28fpkt", shape=invtriangle, color=brown];
8605[label="132.19.238.37;28pkt 28fpkt", shape=invhouse, color=bisque];
stat982[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.238.37:*, 167.140.90.162:80}[64.2857%]&lt;BR/&gt;{132.19.238.37:*, 167.140.90.13:80}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1084: (1.78571%)&lt;BR/&gt; 1083: (1.78571%)&lt;BR/&gt; 1082: (1.78571%)&lt;BR/&gt; 1081: (1.78571%)&gt;];
}
3826--6639[label="1;28pkt 28fpkt"];
3826--8605[label="1;28pkt 28fpkt"];
6639--8605[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="167.140.90.162" dst_port="80" src_ip="132.19.238.37"/>
      <filter dst_ip="167.140.90.13" dst_port="80" src_ip="132.19.238.37"/>
    </slice>
    <from sec="1144127336" usec="0"/>
    <to sec="1144127478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_983{
style=filled;
color=gray75;
3827[label="214.51.250.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6640[label="214.51.250.37;1pkt 1fpkt", shape=invtriangle, color=brown];
stat983[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.51.250.37:2521, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2521: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3827--6640[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="214.51.250.37" src_port="2521"/>
    </slice>
    <from sec="1144127424" usec="0"/>
    <to sec="1144127446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
3829[label="128.28.224.38;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6642[label="128.28.224.38;12pkt 12fpkt", shape=invtriangle, color=brown];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.224.38:1306, *:*}[58.3333%]&lt;BR/&gt;{128.28.224.38:*, 52.173.145.7:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1306: (29.1667%)&lt;BR/&gt; 443: (8.33333%)&lt;BR/&gt; 65048: (4.16667%)&lt;BR/&gt; 55834: (4.16667%)&lt;BR/&gt; 50465: (4.16667%)&gt;];
}
3829--6642[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="52.173.145.7" src_ip="128.28.224.38"/>
      <filter src_ip="128.28.224.38" src_port="1306"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_985{
style=filled;
color=gray75;
3836[label="161.223.154.39;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6647[label="161.223.154.39;14pkt 14fpkt", shape=invtriangle, color=brown];
stat985[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.154.39:*, 219.73.81.46:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2426: (3.7037%)&lt;BR/&gt; 2425: (3.7037%)&lt;BR/&gt; 2424: (3.7037%)&lt;BR/&gt; 2418: (3.7037%)&gt;];
}
3836--6647[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.81.46" dst_port="80" src_ip="161.223.154.39"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144126959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_986{
style=filled;
color=gray75;
3838[label="83.67.167.39;82pkt 82fpkt", shape=pentagon, color=darkviolet];
6649[label="83.67.167.39;82pkt 82fpkt", shape=invtriangle, color=brown];
stat986[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.67.167.39:*, *:445}[62.1951%]&lt;BR/&gt;{83.67.167.39:*, *:139}[37.8049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (31.0976%)&lt;BR/&gt; 139: (18.9024%)&lt;BR/&gt; 55506: (0.609756%)&lt;BR/&gt; 55191: (0.609756%)&lt;BR/&gt; 54882: (0.609756%)&gt;];
}
3838--6649[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="83.67.167.39"/>
      <filter dst_port="139" src_ip="83.67.167.39"/>
    </slice>
    <from sec="1144127177" usec="0"/>
    <to sec="1144127392" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.92.80.40"/>
    </slice>
    <from sec="1144126952" usec="0"/>
    <to sec="1144127067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
3851[label="128.2.173.40;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6655[label="128.2.173.40;11pkt 11fpkt", shape=invtriangle, color=brown];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.173.40:42, 218.33.214.209:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (39.1304%)&lt;BR/&gt; 80: (8.69565%)&lt;BR/&gt; 4018: (4.34783%)&lt;BR/&gt; 4009: (4.34783%)&lt;BR/&gt; 3955: (4.34783%)&gt;];
}
3851--6655[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="218.33.214.209" src_ip="128.2.173.40" src_port="42"/>
    </slice>
    <from sec="1144127570" usec="0"/>
    <to sec="1144127638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_989{
style=filled;
color=gray75;
1143[label="218.225.110.41;s;4pkt 4fpkt", shape=diamond, color=yellow];
3861[label="218.225.110.41;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6663[label="218.225.110.41;4pkt 4fpkt", shape=invtriangle, color=brown];
stat989[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.225.110.41:80, 132.19.18.84:4132}[25%]&lt;BR/&gt;{218.225.110.41:80, 132.19.18.84:4133}[25%]&lt;BR/&gt;{218.225.110.41:80, 132.19.18.84:4136}[25%]&lt;BR/&gt;{218.225.110.41:80, 132.19.18.84:4137}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4137: (13.6364%)&lt;BR/&gt; 4136: (13.6364%)&lt;BR/&gt; 4133: (13.6364%)&lt;BR/&gt; 4132: (9.09091%)&gt;];
}
1143--1249[label="1;4pkt 4fpkt"];
1143--3288[label="0.5;2pkt 2fpkt"];
1143--3861[label="1;3pkt 3fpkt"];
1143--6663[label="1;4pkt 4fpkt"];
3861--6663[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.18.84" dst_port="4137" src_ip="218.225.110.41" src_port="80"/>
      <filter dst_ip="132.19.18.84" dst_port="4136" src_ip="218.225.110.41" src_port="80"/>
      <filter dst_ip="132.19.18.84" dst_port="4133" src_ip="218.225.110.41" src_port="80"/>
      <filter dst_ip="132.19.18.84" dst_port="4132" src_ip="218.225.110.41" src_port="80"/>
    </slice>
    <from sec="1144126833" usec="0"/>
    <to sec="1144126977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
331[label="38.53.177.41;s;322pkt 322fpkt", shape=diamond, color=yellow];
1114[label="132.19.53.210;d;33pkt 33fpkt", shape=diamond, color=yellow];
2103[label="194.212.152.160;d;31pkt 31fpkt", shape=diamond, color=yellow];
2327[label="210.226.98.252;s;11pkt 11fpkt", shape=diamond, color=yellow];
2583[label="161.223.49.32;d;40pkt 40fpkt", shape=diamond, color=yellow];
3182[label="210.226.98.252;s;11pkt 11fpkt", shape=hexagon, color=black];
3205[label="132.19.53.210;d;30pkt 30fpkt", shape=hexagon, color=black];
3232[label="38.53.177.41;s;322pkt 322fpkt", shape=hexagon, color=black];
3860[label="41.8.86.41;6pkt 6fpkt", shape=pentagon, color=darkviolet];
3865[label="38.53.177.41;345pkt 345fpkt", shape=pentagon, color=darkviolet];
6206[label="210.226.96.245;247pkt 247fpkt", shape=pentagon, color=darkviolet];
6662[label="41.8.86.41;6pkt 6fpkt", shape=invtriangle, color=brown];
6666[label="38.53.177.41;346pkt 346fpkt", shape=invtriangle, color=brown];
8617[label="41.8.86.41;6pkt 6fpkt", shape=invhouse, color=bisque];
8619[label="38.53.177.41;345pkt 345fpkt", shape=invhouse, color=bisque];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.177.41:80, *:*}[36.5714%]&lt;BR/&gt;{210.226.96.245:80, *:*}[35.2857%]&lt;BR/&gt;{*:80, 195.89.105.214:*}[23.5714%]&lt;BR/&gt;{*:80, 195.89.105.215:*}[22.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4341%)&lt;BR/&gt; 443: (10.614%)&lt;BR/&gt; 5050: (0.547358%)&lt;BR/&gt; 22338: (0.356973%)&lt;BR/&gt; 2687: (0.166587%)&gt;];
}
331--787[label="0.158385;51pkt 51fpkt"];
331--788[label="0.248447;80pkt 80fpkt"];
331--1114[label="0.030303;1pkt 1fpkt"];
331--1920[label="0.42268;41pkt 41fpkt"];
331--2103[label="0.0322581;1pkt 1fpkt"];
331--2162[label="0.11828;11pkt 11fpkt"];
331--2174[label="0.25;2pkt 2fpkt"];
331--2583[label="0.075;3pkt 3fpkt"];
331--3205[label="0.0333333;1pkt 1fpkt"];
331--3232[label="1;322pkt 322fpkt"];
331--3288[label="0.0745342;24pkt 24fpkt"];
331--3292[label="0.111801;36pkt 36fpkt"];
331--3303[label="0.111801;36pkt 36fpkt"];
331--3865[label="0.996894;321pkt 321fpkt"];
331--6666[label="1;322pkt 322fpkt"];
331--8619[label="0.996894;321pkt 321fpkt"];
1114--1274[label="0.030303;1pkt 1fpkt"];
1114--1314[label="0.030303;1pkt 1fpkt"];
1114--3118[label="0.030303;1pkt 1fpkt"];
1114--3205[label="1;30pkt 30fpkt"];
1114--3232[label="0.030303;1pkt 1fpkt"];
1114--3288[label="0.0606061;2pkt 2fpkt"];
1114--3367[label="0.242424;8pkt 8fpkt"];
1114--3865[label="0.030303;1pkt 1fpkt"];
1114--3948[label="0.030303;1pkt 1fpkt"];
1114--4063[label="0.030303;1pkt 1fpkt"];
1114--4764[label="0.363636;12pkt 12fpkt"];
1114--5830[label="0.030303;1pkt 1fpkt"];
1114--6006[label="0.030303;1pkt 1fpkt"];
1114--6331[label="0.242424;8pkt 8fpkt"];
1114--6666[label="0.030303;1pkt 1fpkt"];
1114--6799[label="0.030303;1pkt 1fpkt"];
1114--7299[label="0.363636;12pkt 12fpkt"];
1114--8048[label="0.030303;1pkt 1fpkt"];
1114--8174[label="0.030303;1pkt 1fpkt"];
1114--8412[label="0.242424;8pkt 8fpkt"];
1114--8619[label="0.030303;1pkt 1fpkt"];
1114--8705[label="0.030303;1pkt 1fpkt"];
1114--9513[label="0.030303;1pkt 1fpkt"];
1114--9597[label="0.030303;1pkt 1fpkt"];
2103--2327[label="0.0909091;1pkt 1fpkt"];
2103--2817[label="0.193548;6pkt 6fpkt"];
2103--3051[label="0.0967742;3pkt 3fpkt"];
2103--3182[label="0.0909091;1pkt 1fpkt"];
2103--3232[label="0.0322581;1pkt 1fpkt"];
2103--3288[label="0.16129;5pkt 5fpkt"];
2103--3292[label="0.0967742;3pkt 3fpkt"];
2103--3303[label="0.0967742;3pkt 3fpkt"];
2103--3486[label="0.0645161;2pkt 2fpkt"];
2103--3632[label="0.0909091;1pkt 1fpkt"];
2103--3865[label="0.0322581;1pkt 1fpkt"];
2103--5144[label="0.0967742;3pkt 3fpkt"];
2103--6416[label="0.0645161;2pkt 2fpkt"];
2103--6666[label="0.0322581;1pkt 1fpkt"];
2103--7564[label="0.0967742;3pkt 3fpkt"];
2103--8464[label="0.0645161;2pkt 2fpkt"];
2103--8619[label="0.0322581;1pkt 1fpkt"];
2103--9198[label="0.0967742;3pkt 3fpkt"];
2327--3182[label="1;11pkt 11fpkt"];
2583--3232[label="0.075;3pkt 3fpkt"];
2583--3292[label="0.075;3pkt 3fpkt"];
2583--3303[label="0.075;3pkt 3fpkt"];
2583--3470[label="0.2;3pkt 3fpkt"];
2583--3860[label="1;6pkt 6fpkt"];
2583--3865[label="0.075;3pkt 3fpkt"];
2583--4306[label="0.3;12pkt 12fpkt"];
2583--4316[label="0.15;6pkt 6fpkt"];
2583--4875[label="0.04;1pkt 1fpkt"];
2583--6206[label="0.05;2pkt 2fpkt"];
2583--6404[label="0.2;3pkt 3fpkt"];
2583--6662[label="1;6pkt 6fpkt"];
2583--6666[label="0.075;3pkt 3fpkt"];
2583--6976[label="0.3;12pkt 12fpkt"];
2583--6985[label="0.15;6pkt 6fpkt"];
2583--7379[label="0.04;1pkt 1fpkt"];
2583--8617[label="1;6pkt 6fpkt"];
2583--8619[label="0.075;3pkt 3fpkt"];
2583--8829[label="0.15;6pkt 6fpkt"];
3205--3232[label="0.0333333;1pkt 1fpkt"];
3205--3288[label="0.0666667;2pkt 2fpkt"];
3205--3367[label="0.266667;8pkt 8fpkt"];
3205--3865[label="0.0333333;1pkt 1fpkt"];
3205--3948[label="0.0333333;1pkt 1fpkt"];
3205--4063[label="0.0333333;1pkt 1fpkt"];
3205--4764[label="0.4;12pkt 12fpkt"];
3205--5830[label="0.0333333;1pkt 1fpkt"];
3205--6006[label="0.0333333;1pkt 1fpkt"];
3205--6331[label="0.266667;8pkt 8fpkt"];
3205--6666[label="0.0333333;1pkt 1fpkt"];
3205--6799[label="0.0333333;1pkt 1fpkt"];
3205--7299[label="0.4;12pkt 12fpkt"];
3205--8048[label="0.0333333;1pkt 1fpkt"];
3205--8174[label="0.0333333;1pkt 1fpkt"];
3205--8412[label="0.266667;8pkt 8fpkt"];
3205--8619[label="0.0333333;1pkt 1fpkt"];
3205--8705[label="0.0333333;1pkt 1fpkt"];
3205--9513[label="0.0333333;1pkt 1fpkt"];
3205--9597[label="0.0333333;1pkt 1fpkt"];
3232--3288[label="0.0745342;24pkt 24fpkt"];
3232--3292[label="0.111801;36pkt 36fpkt"];
3232--3303[label="0.111801;36pkt 36fpkt"];
3232--3865[label="0.996894;321pkt 321fpkt"];
3232--6666[label="1;322pkt 322fpkt"];
3232--8619[label="0.996894;321pkt 321fpkt"];
3860--6662[label="1;6pkt 6fpkt"];
3860--8617[label="1;6pkt 6fpkt"];
3865--6666[label="1;345pkt 345fpkt"];
3865--8619[label="1;345pkt 345fpkt"];
6662--8617[label="1;6pkt 6fpkt"];
6666--8619[label="1;345pkt 345fpkt"];
</description>
    <slice>
      <filter src_ip="38.53.177.41" src_port="80"/>
      <filter src_ip="210.226.96.245" src_port="80"/>
      <filter dst_ip="195.89.105.214" src_port="80"/>
      <filter dst_ip="195.89.105.215" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.149.227.41"/>
    </slice>
    <from sec="1144126947" usec="0"/>
    <to sec="1144127592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.106.66.42"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_993{
style=filled;
color=gray75;
3883[label="213.58.213.42;224pkt 224fpkt", shape=pentagon, color=darkviolet];
6678[label="213.58.213.42;224pkt 224fpkt", shape=invtriangle, color=brown];
8626[label="213.58.213.42;223pkt 223fpkt", shape=invhouse, color=bisque];
stat993[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.58.213.42:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3666: (0.223547%)&lt;BR/&gt; 3664: (0.223547%)&lt;BR/&gt; 3662: (0.223547%)&lt;BR/&gt; 3660: (0.223547%)&gt;];
}
3883--6678[label="1;224pkt 224fpkt"];
3883--8626[label="1;223pkt 223fpkt"];
6678--8626[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.58.213.42"/>
    </slice>
    <from sec="1144127678" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
3886[label="215.36.71.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6679[label="215.36.71.43;3pkt 3fpkt", shape=invtriangle, color=brown];
8627[label="215.36.71.43;3pkt 3fpkt", shape=invhouse, color=bisque];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.36.71.43:39281, 132.19.33.7:25}[25%]&lt;BR/&gt;{215.36.71.43:39293, 132.19.33.7:25}[25%]&lt;BR/&gt;{215.36.71.43:113, 132.19.33.7:2117}[25%]&lt;BR/&gt;{215.36.71.43:113, 132.19.33.7:2131}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (30%)&lt;BR/&gt; 25: (20%)&lt;BR/&gt; 39293: (15%)&lt;BR/&gt; 2131: (15%)&lt;BR/&gt; 2117: (15%)&gt;];
}
3886--6679[label="1;3pkt 3fpkt"];
3886--8627[label="1;3pkt 3fpkt"];
6679--8627[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.33.7" dst_port="2131" src_ip="215.36.71.43" src_port="113"/>
      <filter dst_ip="132.19.33.7" dst_port="2117" src_ip="215.36.71.43" src_port="113"/>
      <filter dst_ip="132.19.33.7" dst_port="25" src_ip="215.36.71.43" src_port="39293"/>
      <filter dst_ip="132.19.33.7" dst_port="25" src_ip="215.36.71.43" src_port="39281"/>
    </slice>
    <from sec="1144126974" usec="0"/>
    <to sec="1144127015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_995{
style=filled;
color=gray75;
3888[label="132.19.195.43;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6681[label="132.19.195.43;20pkt 20fpkt", shape=invtriangle, color=brown];
8629[label="132.19.195.43;20pkt 20fpkt", shape=invhouse, color=bisque];
stat995[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.195.43:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50237: (2.5%)&lt;BR/&gt; 4319: (2.5%)&lt;BR/&gt; 4245: (2.5%)&lt;BR/&gt; 4015: (2.5%)&gt;];
}
3888--6681[label="1;20pkt 20fpkt"];
3888--8629[label="1;20pkt 20fpkt"];
6681--8629[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.195.43" src_port="25"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_996{
style=filled;
color=gray75;
3890[label="193.152.2.44;253pkt 253fpkt", shape=pentagon, color=darkviolet];
6683[label="193.152.2.44;253pkt 253fpkt", shape=invtriangle, color=brown];
8630[label="193.152.2.44;252pkt 252fpkt", shape=invhouse, color=bisque];
stat996[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.152.2.44:1091, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1091: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3890--6683[label="1;253pkt 253fpkt"];
3890--8630[label="1;252pkt 252fpkt"];
6683--8630[label="1;252pkt 252fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.152.2.44" src_port="1091"/>
    </slice>
    <from sec="1144126880" usec="0"/>
    <to sec="1144126896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.154.32.44"/>
    </slice>
    <from sec="1144126921" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_998{
style=filled;
color=gray75;
3897[label="161.223.159.44;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6689[label="161.223.159.44;16pkt 16fpkt", shape=invtriangle, color=brown];
stat998[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.159.44:*, 196.206.5.187:80}[50%]&lt;BR/&gt;{161.223.159.44:*, 196.206.52.211:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2394: (3.125%)&lt;BR/&gt; 2393: (3.125%)&lt;BR/&gt; 2392: (3.125%)&lt;BR/&gt; 2391: (3.125%)&gt;];
}
3897--6689[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.52.211" dst_port="80" src_ip="161.223.159.44"/>
      <filter dst_ip="196.206.5.187" dst_port="80" src_ip="161.223.159.44"/>
    </slice>
    <from sec="1144127074" usec="0"/>
    <to sec="1144127184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
3907[label="204.84.194.45;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6694[label="204.84.194.45;15pkt 15fpkt", shape=invtriangle, color=brown];
8634[label="204.84.194.45;15pkt 15fpkt", shape=invhouse, color=bisque];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.84.194.45:80, 161.223.52.82:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2705: (3.26087%)&lt;BR/&gt; 2704: (3.26087%)&lt;BR/&gt; 2703: (3.26087%)&lt;BR/&gt; 2702: (3.26087%)&gt;];
}
3907--6694[label="1;15pkt 15fpkt"];
3907--8634[label="1;15pkt 15fpkt"];
6694--8634[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.52.82" src_ip="204.84.194.45" src_port="80"/>
    </slice>
    <from sec="1144127083" usec="0"/>
    <to sec="1144127174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1000{
style=filled;
color=gray75;
719[label="106.105.98.46;s;21pkt 21fpkt", shape=diamond, color=yellow];
1953[label="210.164.145.208;s;94pkt 94fpkt", shape=diamond, color=yellow];
2505[label="132.19.69.201;d;43pkt 43fpkt", shape=diamond, color=yellow];
2777[label="106.105.98.46;s;21pkt 21fpkt", shape=hexagon, color=black];
3465[label="36.126.17.11;13pkt 13fpkt", shape=pentagon, color=darkviolet];
3911[label="106.105.98.46;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6698[label="106.105.98.46;20pkt 20fpkt", shape=invtriangle, color=brown];
8636[label="106.105.98.46;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1000[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.164.145.208:80, *:*}[42.4837%]&lt;BR/&gt;{*:80, 132.19.69.201:*}[24.8366%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3071%)&lt;BR/&gt; 443: (5.70866%)&lt;BR/&gt; 50199: (1.1811%)&lt;BR/&gt; 50114: (1.1811%)&lt;BR/&gt; 1956: (1.1811%)&gt;];
}
719--1173[label="0.619048;13pkt 13fpkt"];
719--2505[label="0.238095;5pkt 5fpkt"];
719--2777[label="1;21pkt 21fpkt"];
719--3288[label="0.0952381;2pkt 2fpkt"];
719--3911[label="1;21pkt 21fpkt"];
719--6698[label="1;20pkt 20fpkt"];
719--8636[label="1;21pkt 21fpkt"];
1953--2096[label="0.0744681;7pkt 7fpkt"];
1953--2206[label="0.164384;12pkt 12fpkt"];
1953--2223[label="0.153846;6pkt 6fpkt"];
1953--3288[label="0.0212766;2pkt 2fpkt"];
1953--3292[label="0.12766;12pkt 12fpkt"];
1953--3303[label="0.12766;12pkt 12fpkt"];
1953--5798[label="1;94pkt 94fpkt"];
1953--8026[label="0.989362;93pkt 93fpkt"];
1953--9497[label="1;94pkt 94fpkt"];
2505--2777[label="0.238095;5pkt 5fpkt"];
2505--3292[label="0.255814;11pkt 11fpkt"];
2505--3303[label="0.255814;11pkt 11fpkt"];
2505--3465[label="1;13pkt 13fpkt"];
2505--3911[label="0.238095;5pkt 5fpkt"];
2505--3948[label="0.0232558;1pkt 1fpkt"];
2505--4242[label="0.0232558;1pkt 1fpkt"];
2505--5158[label="0.0434783;1pkt 1fpkt"];
2505--5971[label="0.0465116;2pkt 2fpkt"];
2505--6040[label="0.0232558;1pkt 1fpkt"];
2505--6236[label="0.0465116;2pkt 2fpkt"];
2505--6698[label="0.25;5pkt 5fpkt"];
2505--6931[label="0.0232558;1pkt 1fpkt"];
2505--7577[label="0.0434783;1pkt 1fpkt"];
2505--8147[label="0.0465116;2pkt 2fpkt"];
2505--8199[label="0.0232558;1pkt 1fpkt"];
2505--8344[label="0.0465116;2pkt 2fpkt"];
2505--8636[label="0.238095;5pkt 5fpkt"];
2505--8791[label="0.0232558;1pkt 1fpkt"];
2505--9207[label="0.0416667;1pkt 1fpkt"];
2505--9580[label="0.0465116;2pkt 2fpkt"];
2505--9715[label="0.0465116;2pkt 2fpkt"];
2777--3288[label="0.0952381;2pkt 2fpkt"];
2777--3911[label="1;21pkt 21fpkt"];
2777--6698[label="1;20pkt 20fpkt"];
2777--8636[label="1;21pkt 21fpkt"];
3911--6698[label="1;20pkt 20fpkt"];
3911--8636[label="1;21pkt 21fpkt"];
6698--8636[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="210.164.145.208" src_port="80"/>
      <filter dst_ip="132.19.69.201" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
3913[label="221.112.226.46;143pkt 143fpkt", shape=pentagon, color=darkviolet];
6700[label="221.112.226.46;143pkt 143fpkt", shape=invtriangle, color=brown];
8638[label="221.112.226.46;143pkt 143fpkt", shape=invhouse, color=bisque];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.112.226.46:1315, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1315: (50%)&gt;];
}
3913--6700[label="1;143pkt 143fpkt"];
3913--8638[label="1;143pkt 143fpkt"];
6700--8638[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="221.112.226.46" src_port="1315"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
3917[label="83.213.88.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6702[label="83.213.88.47;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.213.88.47:1478, 147.13.220.153:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1478: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3917--6702[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="83.213.88.47" src_port="1478"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
937[label="195.89.107.47;s;1035pkt 1035fpkt", shape=diamond, color=yellow];
3110[label="195.89.107.47;s;831pkt 831fpkt", shape=hexagon, color=black];
3918[label="195.89.107.47;1110pkt 1110fpkt", shape=pentagon, color=darkviolet];
6703[label="195.89.107.47;1110pkt 1110fpkt", shape=invtriangle, color=brown];
8640[label="195.89.107.47;1111pkt 1111fpkt", shape=invhouse, color=bisque];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.107.47:53, *:*}[99.82%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.7329%)&lt;BR/&gt; 32768: (2.92476%)&lt;BR/&gt; 32769: (0.875505%)&lt;BR/&gt; 32770: (0.683086%)&lt;BR/&gt; 32772: (0.673465%)&gt;];
}
937--1650[label="0.0909091;1pkt 1fpkt"];
937--1670[label="0.25;1pkt 1fpkt"];
937--3110[label="1;831pkt 831fpkt"];
937--3287[label="0.068599;71pkt 71fpkt"];
937--3290[label="0.00386473;4pkt 4fpkt"];
937--3295[label="0.0115942;12pkt 12fpkt"];
937--3302[label="0.102415;106pkt 106fpkt"];
937--3918[label="0.999034;1034pkt 1034fpkt"];
937--6703[label="0.999034;1034pkt 1034fpkt"];
937--8640[label="1;1035pkt 1035fpkt"];
3110--3287[label="0.0854392;71pkt 71fpkt"];
3110--3290[label="0.00481348;4pkt 4fpkt"];
3110--3295[label="0.00481348;4pkt 4fpkt"];
3110--3302[label="0.0914561;76pkt 76fpkt"];
3110--3918[label="0.998797;830pkt 830fpkt"];
3110--6703[label="0.998797;830pkt 830fpkt"];
3110--8640[label="1;831pkt 831fpkt"];
3918--6703[label="1;1110pkt 1110fpkt"];
3918--8640[label="1;1110pkt 1110fpkt"];
6703--8640[label="1;1110pkt 1110fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.107.47" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.172.62.48"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.223.150.49"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1006{
style=filled;
color=gray75;
3943[label="164.23.215.49;24pkt 24fpkt", shape=pentagon, color=darkviolet];
6720[label="164.23.215.49;24pkt 24fpkt", shape=invtriangle, color=brown];
stat1006[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.215.49:25, *:*}[37.5%]&lt;BR/&gt;{164.23.215.49:80, *:*}[37.5%]&lt;BR/&gt;{164.23.215.49:53, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18.75%)&lt;BR/&gt; 25: (18.75%)&lt;BR/&gt; 53: (12.5%)&lt;BR/&gt; 33701: (4.16667%)&lt;BR/&gt; 64891: (2.08333%)&gt;];
}
3943--6720[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.215.49" src_port="80"/>
      <filter src_ip="164.23.215.49" src_port="25"/>
      <filter src_ip="164.23.215.49" src_port="53"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.18.236.49"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.101.44.50"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
3967[label="216.3.118.51;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6740[label="216.3.118.51;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.3.118.51:80, 132.19.109.152:2871}[33.3333%]&lt;BR/&gt;{216.3.118.51:80, 132.19.109.152:2872}[33.3333%]&lt;BR/&gt;{216.3.118.51:80, 132.19.109.152:2873}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2873: (16.6667%)&lt;BR/&gt; 2872: (16.6667%)&lt;BR/&gt; 2871: (16.6667%)&gt;];
}
3967--6740[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.109.152" dst_port="2873" src_ip="216.3.118.51" src_port="80"/>
      <filter dst_ip="132.19.109.152" dst_port="2872" src_ip="216.3.118.51" src_port="80"/>
      <filter dst_ip="132.19.109.152" dst_port="2871" src_ip="216.3.118.51" src_port="80"/>
    </slice>
    <from sec="1144127640" usec="0"/>
    <to sec="1144127665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1010{
style=filled;
color=gray75;
3971[label="36.84.173.51;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6742[label="36.84.173.51;9pkt 9fpkt", shape=invtriangle, color=brown];
8664[label="36.84.173.51;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1010[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.84.173.51:80, 132.19.233.208:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3596: (5.35714%)&lt;BR/&gt; 3595: (5.35714%)&lt;BR/&gt; 3594: (5.35714%)&lt;BR/&gt; 3590: (5.35714%)&gt;];
}
3971--6742[label="1;9pkt 9fpkt"];
3971--8664[label="1;9pkt 9fpkt"];
6742--8664[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.233.208" src_ip="36.84.173.51" src_port="80"/>
    </slice>
    <from sec="1144126924" usec="0"/>
    <to sec="1144126957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1011{
style=filled;
color=gray75;
3979[label="130.193.218.52;160pkt 160fpkt", shape=pentagon, color=darkviolet];
6747[label="130.193.218.52;161pkt 161fpkt", shape=invtriangle, color=brown];
8667[label="130.193.218.52;161pkt 161fpkt", shape=invhouse, color=bisque];
stat1011[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.193.218.52:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3979--6747[label="1;160pkt 160fpkt"];
3979--8667[label="1;160pkt 160fpkt"];
6747--8667[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="130.193.218.52" src_port="1028"/>
    </slice>
    <from sec="1144127126" usec="0"/>
    <to sec="1144127136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
3980[label="132.19.15.53;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6748[label="132.19.15.53;20pkt 20fpkt", shape=invtriangle, color=brown];
8668[label="132.19.15.53;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.15.53:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3980--6748[label="1;19pkt 19fpkt"];
3980--8668[label="1;19pkt 19fpkt"];
6748--8668[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.15.53"/>
    </slice>
    <from sec="1144126908" usec="0"/>
    <to sec="1144127597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1013{
style=filled;
color=gray75;
3983[label="161.223.82.53;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6750[label="161.223.82.53;1pkt 1fpkt", shape=invtriangle, color=brown];
8670[label="161.223.82.53;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1013[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.82.53:25, 214.50.35.32:1851}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1851: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
3983--6750[label="1;1pkt 1fpkt"];
3983--8670[label="1;1pkt 1fpkt"];
6750--8670[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.50.35.32" dst_port="1851" src_ip="161.223.82.53" src_port="25"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
3984[label="41.25.102.53;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4996[label="216.196.85.141;39pkt 39fpkt", shape=pentagon, color=darkviolet];
5486[label="34.28.37.182;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6751[label="41.25.102.53;6pkt 6fpkt", shape=invtriangle, color=brown];
7464[label="216.196.85.141;39pkt 39fpkt", shape=invtriangle, color=brown];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.196.85.141:*, 194.212.153.164:80}[79.5918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55995: (1.06383%)&lt;BR/&gt; 54247: (1.06383%)&lt;BR/&gt; 53832: (1.06383%)&lt;BR/&gt; 48001: (1.06383%)&gt;];
}
3984--6751[label="1;6pkt 6fpkt"];
3984--8671[label="1;6pkt 6fpkt"];
4996--7464[label="1;39pkt 39fpkt"];
4996--9131[label="1;38pkt 38fpkt"];
5486--7800[label="1;3pkt 3fpkt"];
6751--8671[label="1;6pkt 6fpkt"];
7464--9131[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.153.164" dst_port="80" src_ip="216.196.85.141"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1015{
style=filled;
color=gray75;
3986[label="194.212.158.53;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6753[label="194.212.158.53;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1015[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.158.53:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63794: (3.7037%)&lt;BR/&gt; 53906: (3.7037%)&lt;BR/&gt; 53521: (3.7037%)&lt;BR/&gt; 20802: (3.7037%)&gt;];
}
3986--6753[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.158.53" src_port="25"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.246.170.53"/>
    </slice>
    <from sec="1144126846" usec="0"/>
    <to sec="1144127673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1017{
style=filled;
color=gray75;
3989[label="201.104.25.54;128pkt 128fpkt", shape=pentagon, color=darkviolet];
6755[label="201.104.25.54;128pkt 128fpkt", shape=invtriangle, color=brown];
8674[label="201.104.25.54;128pkt 128fpkt", shape=invhouse, color=bisque];
stat1017[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.104.25.54:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
3989--6755[label="1;128pkt 128fpkt"];
3989--8674[label="1;128pkt 128fpkt"];
6755--8674[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="201.104.25.54" src_port="1025"/>
    </slice>
    <from sec="1144127498" usec="0"/>
    <to sec="1144127518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1018{
style=filled;
color=gray75;
3991[label="213.125.60.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6756[label="213.125.60.54;3pkt 3fpkt", shape=invtriangle, color=brown];
8675[label="213.125.60.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1018[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.125.60.54:1809, 147.13.224.216:60085}[33.3333%]&lt;BR/&gt;{213.125.60.54:1814, 147.13.224.216:60085}[33.3333%]&lt;BR/&gt;{213.125.60.54:1841, 147.13.224.216:60085}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60085: (50%)&lt;BR/&gt; 1841: (16.6667%)&lt;BR/&gt; 1814: (16.6667%)&lt;BR/&gt; 1809: (16.6667%)&gt;];
}
3991--6756[label="1;3pkt 3fpkt"];
3991--8675[label="1;3pkt 3fpkt"];
6756--8675[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_ip="213.125.60.54" src_port="1841"/>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_ip="213.125.60.54" src_port="1814"/>
      <filter dst_ip="147.13.224.216" dst_port="60085" src_ip="213.125.60.54" src_port="1809"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.75.72.54"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.40655,2.40982,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1020{
style=filled;
color=gray75;
36[label="84.46.147.54s;255pkt 255fpkt", shape=rectangle, color=red];
3998[label="84.46.147.54;254pkt 254fpkt", shape=pentagon, color=darkviolet];
6760[label="84.46.147.54;255pkt 255fpkt", shape=invtriangle, color=brown];
stat1020[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.46.147.54:1033, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1033: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
36--101[label="1;255pkt 255fpkt"];
36--153[label="0.928;116pkt 116fpkt"];
36--3998[label="1;254pkt 254fpkt"];
36--6760[label="1;255pkt 255fpkt"];
3998--6760[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.46.147.54" src_port="1033"/>
    </slice>
    <from sec="1144127097" usec="0"/>
    <to sec="1144127111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.201.12.55"/>
    </slice>
    <from sec="1144127061" usec="0"/>
    <to sec="1144127121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
4014[label="214.214.34.56;197pkt 197fpkt", shape=pentagon, color=darkviolet];
6770[label="214.214.34.56;198pkt 198fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.214.34.56:56996, *:1026}[54.0404%]&lt;BR/&gt;{214.214.34.56:56996, *:1027}[45.9596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56996: (50%)&lt;BR/&gt; 1026: (26.962%)&lt;BR/&gt; 1027: (23.038%)&gt;];
}
4014--6770[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="214.214.34.56" src_port="56996"/>
      <filter dst_port="1027" src_ip="214.214.34.56" src_port="56996"/>
    </slice>
    <from sec="1144127087" usec="0"/>
    <to sec="1144127088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.156.144.56"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1024{
style=filled;
color=gray75;
4024[label="128.28.236.56;48pkt 48fpkt", shape=pentagon, color=darkviolet];
6774[label="128.28.236.56;48pkt 48fpkt", shape=invtriangle, color=brown];
8689[label="128.28.236.56;47pkt 47fpkt", shape=invhouse, color=bisque];
stat1024[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.236.56:29268, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29268: (41.6084%)&lt;BR/&gt; 443: (3.14685%)&lt;BR/&gt; 9903: (2.0979%)&lt;BR/&gt; 1305: (2.0979%)&lt;BR/&gt; 65343: (1.04895%)&gt;];
}
4024--6774[label="1;48pkt 48fpkt"];
4024--8689[label="1;47pkt 47fpkt"];
6774--8689[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.236.56" src_port="29268"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.92.233.57"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
4045[label="36.106.136.58;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6788[label="36.106.136.58;20pkt 20fpkt", shape=invtriangle, color=brown];
8699[label="36.106.136.58;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.136.58:*, 132.19.212.137:80}[65%]&lt;BR/&gt;{36.106.136.58:*, 164.23.174.125:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53553: (2.58621%)&lt;BR/&gt; 53384: (2.58621%)&lt;BR/&gt; 53371: (2.58621%)&lt;BR/&gt; 53349: (2.58621%)&gt;];
}
4045--6788[label="1;19pkt 19fpkt"];
4045--8699[label="1;19pkt 19fpkt"];
6788--8699[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.212.137" dst_port="80" src_ip="36.106.136.58"/>
      <filter dst_ip="164.23.174.125" dst_port="80" src_ip="36.106.136.58"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
4046[label="213.212.150.58;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6789[label="213.212.150.58;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.212.150.58:80, 147.13.230.171:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1494: (5.55556%)&lt;BR/&gt; 1493: (5.55556%)&lt;BR/&gt; 1492: (5.55556%)&lt;BR/&gt; 1489: (5.55556%)&gt;];
}
4046--6789[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.171" src_ip="213.212.150.58" src_port="80"/>
    </slice>
    <from sec="1144127582" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1028{
style=filled;
color=gray75;
570[label="164.23.209.58;s;1263pkt 1263fpkt", shape=diamond, color=yellow];
4051[label="164.23.209.58;1349pkt 1349fpkt", shape=pentagon, color=darkviolet];
6792[label="164.23.209.58;1350pkt 1350fpkt", shape=invtriangle, color=brown];
stat1028[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.209.58:53, *:*}[99.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.1171%)&lt;BR/&gt; 32768: (2.0949%)&lt;BR/&gt; 32769: (0.921252%)&lt;BR/&gt; 33701: (0.757193%)&lt;BR/&gt; 32770: (0.378597%)&gt;];
}
570--722[label="0.0618893;19pkt 19fpkt"];
570--1321[label="0.2;1pkt 1fpkt"];
570--3287[label="0.0649248;82pkt 82fpkt"];
570--3290[label="0.00475059;6pkt 6fpkt"];
570--3295[label="0.00475059;6pkt 6fpkt"];
570--3296[label="0.000791766;1pkt 1fpkt"];
570--3302[label="0.0768013;97pkt 97fpkt"];
570--4051[label="0.999208;1262pkt 1262fpkt"];
570--6792[label="1;1263pkt 1263fpkt"];
4051--6792[label="1;1349pkt 1349fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.209.58" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
4053[label="81.113.224.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6793[label="81.113.224.58;2pkt 2fpkt", shape=invtriangle, color=brown];
8701[label="81.113.224.58;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.113.224.58:80, 195.89.66.195:37899}[50%]&lt;BR/&gt;{81.113.224.58:80, 195.89.66.195:38359}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38359: (25%)&lt;BR/&gt; 37899: (25%)&gt;];
}
4053--6793[label="1;2pkt 2fpkt"];
4053--8701[label="1;2pkt 2fpkt"];
6793--8701[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.66.195" dst_port="38359" src_ip="81.113.224.58" src_port="80"/>
      <filter dst_ip="195.89.66.195" dst_port="37899" src_ip="81.113.224.58" src_port="80"/>
    </slice>
    <from sec="1144127225" usec="0"/>
    <to sec="1144127367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.78.98.59"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.84.173.59"/>
    </slice>
    <from sec="1144127014" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1032{
style=filled;
color=gray75;
4072[label="84.46.39.60;240pkt 240fpkt", shape=pentagon, color=darkviolet];
6806[label="84.46.39.60;241pkt 241fpkt", shape=invtriangle, color=brown];
8708[label="84.46.39.60;240pkt 240fpkt", shape=invhouse, color=bisque];
stat1032[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.46.39.60:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4072--6806[label="1;240pkt 240fpkt"];
4072--8708[label="1;240pkt 240fpkt"];
6806--8708[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.46.39.60" src_port="1025"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144126851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.86.51.60"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.197.60.60"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
4038[label="161.223.44.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6784[label="161.223.44.58;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.44.58:*, 219.56.180.87:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.4737%)&lt;BR/&gt; 1863: (5.26316%)&lt;BR/&gt; 1116: (5.26316%)&lt;BR/&gt; 1109: (5.26316%)&lt;BR/&gt; 1092: (5.26316%)&gt;];
}
4038--6784[label="1;9pkt 9fpkt"];
4038--8696[label="1;9pkt 9fpkt"];
6784--8696[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="219.56.180.87" dst_port="80" src_ip="161.223.44.58"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.87.212.60"/>
    </slice>
    <from sec="1144127437" usec="0"/>
    <to sec="1144127495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
4086[label="208.122.64.61;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6818[label="208.122.64.61;13pkt 13fpkt", shape=invtriangle, color=brown];
8714[label="208.122.64.61;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.122.64.61:*, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4304: (3.84615%)&lt;BR/&gt; 4241: (3.84615%)&lt;BR/&gt; 4222: (3.84615%)&lt;BR/&gt; 4220: (3.84615%)&gt;];
}
4086--6818[label="1;13pkt 13fpkt"];
4086--8714[label="1;13pkt 13fpkt"];
6818--8714[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="208.122.64.61"/>
    </slice>
    <from sec="1144127601" usec="0"/>
    <to sec="1144127646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.21.97.61"/>
    </slice>
    <from sec="1144127452" usec="0"/>
    <to sec="1144127522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1039{
style=filled;
color=gray75;
4091[label="83.170.3.62;221pkt 221fpkt", shape=pentagon, color=darkviolet];
6823[label="83.170.3.62;221pkt 221fpkt", shape=invtriangle, color=brown];
8719[label="83.170.3.62;221pkt 221fpkt", shape=invhouse, color=bisque];
stat1039[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.170.3.62:28803, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28803: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4091--6823[label="1;221pkt 221fpkt"];
4091--8719[label="1;221pkt 221fpkt"];
6823--8719[label="1;221pkt 221fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="83.170.3.62" src_port="28803"/>
    </slice>
    <from sec="1144127468" usec="0"/>
    <to sec="1144127482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.232.69.62"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
4099[label="164.23.209.62;156pkt 156fpkt", shape=pentagon, color=darkviolet];
6828[label="164.23.209.62;156pkt 156fpkt", shape=invtriangle, color=brown];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.209.62:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4099--6828[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.209.62"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1042{
style=filled;
color=gray75;
1630[label="213.107.227.62;s;922pkt 922fpkt", shape=diamond, color=yellow];
2512[label="147.13.10.235;d;19pkt 19fpkt", shape=diamond, color=yellow];
4100[label="213.107.227.62;1116pkt 1116fpkt", shape=pentagon, color=darkviolet];
6829[label="213.107.227.62;1116pkt 1116fpkt", shape=invtriangle, color=brown];
8723[label="213.107.227.62;1115pkt 1115fpkt", shape=invhouse, color=bisque];
8936[label="36.52.244.100;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1042[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.107.227.62:3421, *:1434}[98.4141%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3421: (49.6512%)&lt;BR/&gt; 1434: (49.6512%)&lt;BR/&gt; 80: (0.302326%)&lt;BR/&gt; 1863: (0.0465116%)&lt;BR/&gt; 3597: (0.0232558%)&gt;];
}
1630--2512[label="0.0526316;1pkt 1fpkt"];
1630--4100[label="0.998915;921pkt 921fpkt"];
1630--6829[label="0.998915;921pkt 921fpkt"];
1630--8723[label="0.997831;920pkt 920fpkt"];
2512--3096[label="0.105263;2pkt 2fpkt"];
2512--4100[label="0.0526316;1pkt 1fpkt"];
2512--4554[label="0.923077;12pkt 12fpkt"];
2512--5819[label="0.105263;2pkt 2fpkt"];
2512--6829[label="0.0526316;1pkt 1fpkt"];
2512--7151[label="0.923077;12pkt 12fpkt"];
2512--8723[label="0.0526316;1pkt 1fpkt"];
2512--8936[label="1;12pkt 12fpkt"];
4100--6829[label="1;1116pkt 1116fpkt"];
4100--8723[label="1;1115pkt 1115fpkt"];
6829--8723[label="1;1115pkt 1115fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="213.107.227.62" src_port="3421"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.136.57.63"/>
    </slice>
    <from sec="1144126823" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1044{
style=filled;
color=gray75;
4261[label="132.19.152.74;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6945[label="132.19.152.74;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1044[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.152.74:*, 208.172.87.54:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44%)&lt;BR/&gt; 8000: (4%)&lt;BR/&gt; 1103: (4%)&lt;BR/&gt; 1101: (4%)&lt;BR/&gt; 1096: (4%)&gt;];
}
4261--6945[label="1;12pkt 12fpkt"];
4261--8801[label="1;12pkt 12fpkt"];
6945--8801[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="208.172.87.54" dst_port="80" src_ip="132.19.152.74"/>
    </slice>
    <from sec="1144127204" usec="0"/>
    <to sec="1144127523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1045{
style=filled;
color=gray75;
6111[label="164.23.131.235;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8252[label="164.23.131.235;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1045[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.131.235:123, 196.206.26.55:123}[33.3333%]&lt;BR/&gt;{164.23.131.235:123, 196.206.85.78:123}[33.3333%]&lt;BR/&gt;{164.23.131.235:2194, 210.226.98.221:5050}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (66.6667%)&lt;BR/&gt; 5050: (16.6667%)&lt;BR/&gt; 2194: (16.6667%)&gt;];
}
6111--8252[label="1;3pkt 3fpkt"];
6111--9650[label="1;2pkt 2fpkt"];
8252--9650[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.226.98.221" dst_port="5050" src_ip="164.23.131.235" src_port="2194"/>
      <filter dst_ip="196.206.85.78" dst_port="123" src_ip="164.23.131.235" src_port="123"/>
      <filter dst_ip="196.206.26.55" dst_port="123" src_ip="164.23.131.235" src_port="123"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1046{
style=filled;
color=gray75;
666[label="132.19.150.64;s;76pkt 76fpkt", shape=diamond, color=yellow];
2159[label="196.206.8.221;d;23pkt 23fpkt", shape=diamond, color=yellow];
stat1046[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.150.64:*, *:80}[71.134%]&lt;BR/&gt;{*:*, 196.206.8.221:*}[23.7113%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 443: (6.06061%)&lt;BR/&gt; 1863: (2.0202%)&lt;BR/&gt; 37297: (1.0101%)&lt;BR/&gt; 37291: (1.0101%)&gt;];
}
666--792[label="0.131579;10pkt 10fpkt"];
666--869[label="0.118421;9pkt 9fpkt"];
666--957[label="0.0131579;1pkt 1fpkt"];
666--1156[label="0.294118;5pkt 5fpkt"];
666--1400[label="0.0263158;2pkt 2fpkt"];
666--1555[label="0.0263158;2pkt 2fpkt"];
666--1917[label="0.0131579;1pkt 1fpkt"];
666--2159[label="0.0869565;2pkt 2fpkt"];
666--2215[label="0.0657895;5pkt 5fpkt"];
666--3037[label="1;72pkt 72fpkt"];
666--3065[label="0.384615;5pkt 5fpkt"];
666--3296[label="0.0394737;3pkt 3fpkt"];
666--4125[label="1;76pkt 76fpkt"];
666--6847[label="1;76pkt 76fpkt"];
2159--3037[label="0.0869565;2pkt 2fpkt"];
2159--4038[label="0.1;1pkt 1fpkt"];
2159--4125[label="0.0869565;2pkt 2fpkt"];
2159--4331[label="0.0869565;2pkt 2fpkt"];
2159--4416[label="0.0869565;2pkt 2fpkt"];
2159--4982[label="0.142857;2pkt 2fpkt"];
2159--5416[label="0.130435;3pkt 3fpkt"];
2159--5495[label="0.0869565;2pkt 2fpkt"];
2159--6784[label="0.111111;1pkt 1fpkt"];
2159--6847[label="0.0869565;2pkt 2fpkt"];
2159--6996[label="0.0869565;2pkt 2fpkt"];
2159--7454[label="0.133333;2pkt 2fpkt"];
2159--7806[label="0.0869565;2pkt 2fpkt"];
2159--8696[label="0.111111;1pkt 1fpkt"];
2159--9124[label="0.133333;2pkt 2fpkt"];
2159--9354[label="0.0869565;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.8.221"/>
      <filter dst_port="80" src_ip="132.19.150.64"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1047{
style=filled;
color=gray75;
4126[label="194.212.153.64;51pkt 51fpkt", shape=pentagon, color=darkviolet];
6848[label="194.212.153.64;52pkt 52fpkt", shape=invtriangle, color=brown];
8738[label="194.212.153.64;52pkt 52fpkt", shape=invhouse, color=bisque];
stat1047[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.153.64:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4126--6848[label="1;51pkt 51fpkt"];
4126--8738[label="1;51pkt 51fpkt"];
6848--8738[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.153.64"/>
    </slice>
    <from sec="1144126888" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.4.227.64"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.80.8.65"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.36.179.65"/>
    </slice>
    <from sec="1144126870" usec="0"/>
    <to sec="1144127244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1051{
style=filled;
color=gray75;
4150[label="32.118.50.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6865[label="32.118.50.66;3pkt 3fpkt", shape=invtriangle, color=brown];
8751[label="32.118.50.66;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1051[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.118.50.66:29065, 128.28.217.250:80}[33.3333%]&lt;BR/&gt;{32.118.50.66:29067, 128.28.217.250:80}[33.3333%]&lt;BR/&gt;{32.118.50.66:29069, 128.28.217.250:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29069: (16.6667%)&lt;BR/&gt; 29067: (16.6667%)&lt;BR/&gt; 29065: (16.6667%)&gt;];
}
4150--6865[label="1;3pkt 3fpkt"];
4150--8751[label="1;3pkt 3fpkt"];
6865--8751[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.118.50.66" src_port="29069"/>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.118.50.66" src_port="29067"/>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.118.50.66" src_port="29065"/>
    </slice>
    <from sec="1144127528" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1052{
style=filled;
color=gray75;
4156[label="216.184.138.66;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6870[label="216.184.138.66;64pkt 64fpkt", shape=invtriangle, color=brown];
8755[label="216.184.138.66;65pkt 65fpkt", shape=invhouse, color=bisque];
stat1052[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.184.138.66:80, 164.23.209.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57391: (0.777202%)&lt;BR/&gt; 57376: (0.777202%)&lt;BR/&gt; 57367: (0.777202%)&lt;BR/&gt; 57361: (0.777202%)&gt;];
}
4156--6870[label="1;64pkt 64fpkt"];
4156--8755[label="1;64pkt 64fpkt"];
6870--8755[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.209.48" src_ip="216.184.138.66" src_port="80"/>
    </slice>
    <from sec="1144127485" usec="0"/>
    <to sec="1144127678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1053{
style=filled;
color=gray75;
4157[label="83.133.177.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6871[label="83.133.177.66;1pkt 1fpkt", shape=invtriangle, color=brown];
8756[label="83.133.177.66;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1053[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.133.177.66:80, 147.13.220.1:35671}[50%]&lt;BR/&gt;{83.133.177.66:80, 147.13.230.171:1518}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35671: (30%)&lt;BR/&gt; 1518: (20%)&gt;];
}
4157--6871[label="1;1pkt 1fpkt"];
4157--8756[label="1;2pkt 2fpkt"];
6871--8756[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.171" dst_port="1518" src_ip="83.133.177.66" src_port="80"/>
      <filter dst_ip="147.13.220.1" dst_port="35671" src_ip="83.133.177.66" src_port="80"/>
    </slice>
    <from sec="1144127532" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1054{
style=filled;
color=gray75;
2250[label="132.19.32.90;d;6pkt 6fpkt", shape=diamond, color=yellow];
2338[label="161.223.213.157;d;35pkt 35fpkt", shape=diamond, color=yellow];
4165[label="41.25.173.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5734[label="41.25.103.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6873[label="41.25.173.67;2pkt 2fpkt", shape=invtriangle, color=brown];
7983[label="41.25.103.202;1pkt 1fpkt", shape=invtriangle, color=brown];
8758[label="41.25.173.67;3pkt 3fpkt", shape=invhouse, color=bisque];
9465[label="41.25.103.202;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1054[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.223.213.157:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0196%)&lt;BR/&gt; 58134: (3.92157%)&lt;BR/&gt; 52699: (3.92157%)&lt;BR/&gt; 47672: (3.92157%)&lt;BR/&gt; 0: (1.96078%)&gt;];
}
2250--3296[label="0.333333;2pkt 2fpkt"];
2250--4165[label="0.5;1pkt 1fpkt"];
2250--5734[label="1;1pkt 1fpkt"];
2250--6873[label="0.5;1pkt 1fpkt"];
2250--7983[label="1;1pkt 1fpkt"];
2250--8758[label="0.333333;1pkt 1fpkt"];
2250--9465[label="1;1pkt 1fpkt"];
2338--3296[label="0.0571429;2pkt 2fpkt"];
2338--4165[label="0.5;1pkt 1fpkt"];
2338--6873[label="0.5;1pkt 1fpkt"];
2338--8758[label="0.333333;1pkt 1fpkt"];
4165--6873[label="1;2pkt 2fpkt"];
4165--8758[label="1;2pkt 2fpkt"];
5734--7983[label="1;1pkt 1fpkt"];
5734--9465[label="1;1pkt 1fpkt"];
6873--8758[label="1;2pkt 2fpkt"];
7983--9465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.213.157" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1055{
style=filled;
color=gray75;
4166[label="164.23.201.67;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6874[label="164.23.201.67;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1055[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.201.67:25, 82.42.90.68:*}[25%]&lt;BR/&gt;{164.23.201.67:25, 210.163.48.83:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64265: (4.16667%)&lt;BR/&gt; 61015: (4.16667%)&lt;BR/&gt; 60711: (4.16667%)&lt;BR/&gt; 50847: (4.16667%)&gt;];
}
4166--6874[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="210.163.48.83" src_ip="164.23.201.67" src_port="25"/>
      <filter dst_ip="82.42.90.68" src_ip="164.23.201.67" src_port="25"/>
    </slice>
    <from sec="1144126861" usec="0"/>
    <to sec="1144127615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1056{
style=filled;
color=gray75;
4167[label="214.232.215.67;147pkt 147fpkt", shape=pentagon, color=darkviolet];
6875[label="214.232.215.67;147pkt 147fpkt", shape=invtriangle, color=brown];
8759[label="214.232.215.67;146pkt 146fpkt", shape=invhouse, color=bisque];
stat1056[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.232.215.67:1098, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1098: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4167--6875[label="1;147pkt 147fpkt"];
4167--8759[label="1;146pkt 146fpkt"];
6875--8759[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="214.232.215.67" src_port="1098"/>
    </slice>
    <from sec="1144126995" usec="0"/>
    <to sec="1144127020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.107.147.68"/>
    </slice>
    <from sec="1144126830" usec="0"/>
    <to sec="1144127132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
4177[label="199.8.17.69;15pkt 15fpkt", shape=pentagon, color=darkviolet];
6883[label="199.8.17.69;14pkt 14fpkt", shape=invtriangle, color=brown];
8762[label="199.8.17.69;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.8.17.69:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4177--6883[label="1;14pkt 14fpkt"];
4177--8762[label="1;15pkt 15fpkt"];
6883--8762[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="199.8.17.69"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.13.47.69"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144127610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1060{
style=filled;
color=gray75;
4181[label="194.8.73.69;82pkt 82fpkt", shape=pentagon, color=darkviolet];
6886[label="194.8.73.69;81pkt 81fpkt", shape=invtriangle, color=brown];
stat1060[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.8.73.69:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4993: (1.22699%)&lt;BR/&gt; 3829: (1.22699%)&lt;BR/&gt; 3058: (1.22699%)&lt;BR/&gt; 4943: (0.613497%)&gt;];
}
4181--6886[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="194.8.73.69"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1061{
style=filled;
color=gray75;
327[label="161.223.134.69;s;6pkt 6fpkt", shape=diamond, color=yellow];
328[label="206.115.91.146;d;52pkt 52fpkt", shape=diamond, color=yellow];
1359[label="198.185.152.12;d;53pkt 53fpkt", shape=diamond, color=yellow];
4184[label="161.223.134.69;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5038[label="132.19.121.145;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6889[label="161.223.134.69;6pkt 6fpkt", shape=invtriangle, color=brown];
7497[label="132.19.121.145;23pkt 23fpkt", shape=invtriangle, color=brown];
9155[label="132.19.121.145;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1061[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.121.145:*, 198.185.152.12:80}[22.0183%]&lt;BR/&gt;{132.19.53.165:*, 206.115.91.146:80}[22.0183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4408: (1.04167%)&lt;BR/&gt; 4405: (1.04167%)&lt;BR/&gt; 4402: (1.04167%)&lt;BR/&gt; 1512: (1.04167%)&gt;];
}
327--328[label="0.333333;2pkt 2fpkt"];
327--1359[label="0.166667;1pkt 1fpkt"];
327--4184[label="1;6pkt 6fpkt"];
327--6889[label="1;6pkt 6fpkt"];
328--569[label="0.115385;6pkt 6fpkt"];
328--1632[label="0.461538;24pkt 24fpkt"];
328--3180[label="0.115385;6pkt 6fpkt"];
328--3296[label="0.0576923;3pkt 3fpkt"];
328--4184[label="0.333333;2pkt 2fpkt"];
328--4375[label="0.115385;6pkt 6fpkt"];
328--6889[label="0.333333;2pkt 2fpkt"];
328--7027[label="0.115385;6pkt 6fpkt"];
328--8852[label="0.115385;6pkt 6fpkt"];
1359--3296[label="0.0754717;4pkt 4fpkt"];
1359--3843[label="0.0943396;5pkt 5fpkt"];
1359--3877[label="0.423077;11pkt 11fpkt"];
1359--4184[label="0.166667;1pkt 1fpkt"];
1359--4589[label="0.285714;4pkt 4fpkt"];
1359--5038[label="0.956522;22pkt 22fpkt"];
1359--6889[label="0.166667;1pkt 1fpkt"];
1359--7497[label="0.956522;22pkt 22fpkt"];
1359--9155[label="0.956522;22pkt 22fpkt"];
4184--6889[label="1;6pkt 6fpkt"];
5038--7497[label="1;23pkt 23fpkt"];
5038--9155[label="1;23pkt 23fpkt"];
7497--9155[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="206.115.91.146" dst_port="80" src_ip="132.19.53.165"/>
      <filter dst_ip="198.185.152.12" dst_port="80" src_ip="132.19.121.145"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1062{
style=filled;
color=gray75;
4185[label="85.206.138.69;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6890[label="85.206.138.69;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1062[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.206.138.69:61298, 128.28.83.115:25}[25%]&lt;BR/&gt;{85.206.138.69:61313, 128.28.83.115:25}[25%]&lt;BR/&gt;{85.206.138.69:61326, 128.28.83.115:25}[25%]&lt;BR/&gt;{85.206.138.69:61351, 128.28.83.115:25}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61351: (12.5%)&lt;BR/&gt; 61326: (12.5%)&lt;BR/&gt; 61313: (12.5%)&lt;BR/&gt; 61298: (12.5%)&gt;];
}
4185--6890[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="85.206.138.69" src_port="61351"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="85.206.138.69" src_port="61326"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="85.206.138.69" src_port="61313"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="85.206.138.69" src_port="61298"/>
    </slice>
    <from sec="1144127636" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.34.197.69"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1064{
style=filled;
color=gray75;
4203[label="210.191.170.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6902[label="210.191.170.70;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1064[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.191.170.70:80, 195.89.105.214:58807}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58807: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4203--6902[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="58807" src_ip="210.191.170.70" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1065{
style=filled;
color=gray75;
4220[label="210.169.220.71;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6916[label="210.169.220.71;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1065[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.169.220.71:4484, 128.202.234.44:1434}[33.3333%]&lt;BR/&gt;{210.169.220.71:4484, 128.28.143.154:1434}[33.3333%]&lt;BR/&gt;{210.169.220.71:4484, 128.228.152.240:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4484: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
4220--6916[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.228.152.240" dst_port="1434" src_ip="210.169.220.71" src_port="4484"/>
      <filter dst_ip="128.28.143.154" dst_port="1434" src_ip="210.169.220.71" src_port="4484"/>
      <filter dst_ip="128.202.234.44" dst_port="1434" src_ip="210.169.220.71" src_port="4484"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.60.37.72"/>
    </slice>
    <from sec="1144127090" usec="0"/>
    <to sec="1144127114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1067{
style=filled;
color=gray75;
4229[label="83.181.78.72;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6924[label="83.181.78.72;2pkt 2fpkt", shape=invtriangle, color=brown];
8788[label="83.181.78.72;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1067[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.181.78.72:20903, 132.19.96.74:88}[50%]&lt;BR/&gt;{83.181.78.72:62615, 128.28.65.109:8000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62615: (25%)&lt;BR/&gt; 20903: (25%)&lt;BR/&gt; 8000: (25%)&lt;BR/&gt; 88: (25%)&gt;];
}
4229--6924[label="1;2pkt 2fpkt"];
4229--8788[label="1;2pkt 2fpkt"];
6924--8788[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.65.109" dst_port="8000" src_ip="83.181.78.72" src_port="62615"/>
      <filter dst_ip="132.19.96.74" dst_port="88" src_ip="83.181.78.72" src_port="20903"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1068{
style=filled;
color=gray75;
4232[label="208.139.146.72;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6926[label="208.139.146.72;102pkt 102fpkt", shape=invtriangle, color=brown];
stat1068[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.139.146.72:*, *:445}[57.8431%]&lt;BR/&gt;{208.139.146.72:*, *:139}[42.1569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (28.8177%)&lt;BR/&gt; 139: (21.1823%)&lt;BR/&gt; 4956: (0.492611%)&lt;BR/&gt; 4953: (0.492611%)&lt;BR/&gt; 4952: (0.492611%)&gt;];
}
4232--6926[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="208.139.146.72"/>
      <filter dst_port="139" src_ip="208.139.146.72"/>
    </slice>
    <from sec="1144127147" usec="0"/>
    <to sec="1144127180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1069{
style=filled;
color=gray75;
4239[label="132.19.41.73;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6929[label="132.19.41.73;34pkt 34fpkt", shape=invtriangle, color=brown];
stat1069[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.41.73:*, 219.73.82.151:80}[58.8235%]&lt;BR/&gt;{132.19.41.73:*, 219.73.80.150:80}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1102: (1.49254%)&lt;BR/&gt; 1100: (1.49254%)&lt;BR/&gt; 1099: (1.49254%)&lt;BR/&gt; 1098: (1.49254%)&gt;];
}
4239--6929[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.82.151" dst_port="80" src_ip="132.19.41.73"/>
      <filter dst_ip="219.73.80.150" dst_port="80" src_ip="132.19.41.73"/>
    </slice>
    <from sec="1144127666" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1070{
style=filled;
color=gray75;
406[label="208.44.148.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
954[label="195.80.109.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
4245[label="208.44.148.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4948[label="206.43.42.138;146pkt 146fpkt", shape=pentagon, color=darkviolet];
6932[label="208.44.148.73;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1070[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.43.42.138:1032, *:1434}[99.3197%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (48.6755%)&lt;BR/&gt; 1032: (48.6755%)&lt;BR/&gt; 61075: (1.3245%)&lt;BR/&gt; 80: (1.3245%)&gt;];
}
406--954[label="1;1pkt 1fpkt"];
406--3296[label="1;1pkt 1fpkt"];
406--4245[label="1;1pkt 1fpkt"];
406--6932[label="1;1pkt 1fpkt"];
954--3296[label="0.5;1pkt 1fpkt"];
954--4245[label="1;1pkt 1fpkt"];
954--4948[label="0.5;1pkt 1fpkt"];
954--6932[label="1;1pkt 1fpkt"];
4245--6932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="206.43.42.138" src_port="1032"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.186.219.73"/>
    </slice>
    <from sec="1144127611" usec="0"/>
    <to sec="1144127641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.202.225.73"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.116.60.74"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.95.99.74"/>
    </slice>
    <from sec="1144127301" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1075{
style=filled;
color=gray75;
4262[label="32.136.153.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6946[label="32.136.153.74;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1075[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.153.74:80, 195.89.105.214:52073}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52073: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4262--6946[label="1;1pkt 1fpkt"];
4262--8802[label="1;1pkt 1fpkt"];
6946--8802[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="52073" src_ip="32.136.153.74" src_port="80"/>
    </slice>
    <from sec="1144126818" usec="0"/>
    <to sec="1144127357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
2010[label="209.122.200.74;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.122.200.74:0, 147.13.228.63:0}[33.3333%]&lt;BR/&gt;{209.122.200.74:58353, 147.13.228.63:6669}[33.3333%]&lt;BR/&gt;{209.122.200.74:58855, 147.13.228.63:6666}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (33.3333%)&lt;BR/&gt; 58855: (16.6667%)&lt;BR/&gt; 58353: (16.6667%)&lt;BR/&gt; 6669: (16.6667%)&lt;BR/&gt; 6666: (16.6667%)&gt;];
}
2010--3001[label="1;3pkt 3fpkt"];
2010--4266[label="1;3pkt 3fpkt"];
2010--6950[label="0.666667;2pkt 2fpkt"];
2010--8806[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.228.63" dst_port="6666" src_ip="209.122.200.74" src_port="58855"/>
      <filter dst_ip="147.13.228.63" dst_port="6669" src_ip="209.122.200.74" src_port="58353"/>
      <filter dst_ip="147.13.228.63" src_ip="209.122.200.74"/>
    </slice>
    <from sec="1144127057" usec="0"/>
    <to sec="1144127538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1077{
style=filled;
color=gray75;
1344[label="208.38.24.75;s;1043pkt 1043fpkt", shape=diamond, color=yellow];
4270[label="208.38.24.75;1143pkt 1143fpkt", shape=pentagon, color=darkviolet];
6954[label="208.38.24.75;1143pkt 1143fpkt", shape=invtriangle, color=brown];
8810[label="208.38.24.75;1143pkt 1143fpkt", shape=invhouse, color=bisque];
stat1077[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.38.24.75:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50.0783%)&lt;BR/&gt; 249: (0.223614%)&lt;BR/&gt; 31: (0.223614%)&lt;BR/&gt; 316: (0.178891%)&lt;BR/&gt; 268: (0.178891%)&gt;];
}
1344--3288[label="0.0460211;48pkt 48fpkt"];
1344--3292[label="0.0469799;49pkt 49fpkt"];
1344--3303[label="0.0469799;49pkt 49fpkt"];
1344--4270[label="1;1043pkt 1043fpkt"];
1344--6954[label="1;1043pkt 1043fpkt"];
1344--8810[label="1;1043pkt 1043fpkt"];
4270--6954[label="1;1143pkt 1143fpkt"];
4270--8810[label="1;1143pkt 1143fpkt"];
6954--8810[label="1;1143pkt 1143fpkt"];
</description>
    <slice>
      <filter src_ip="208.38.24.75" src_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.155.167.75"/>
    </slice>
    <from sec="1144126912" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="132.19.210.75"/>
    </slice>
    <from sec="1144126889" usec="0"/>
    <to sec="1144127036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.194.220.75"/>
    </slice>
    <from sec="1144127596" usec="0"/>
    <to sec="1144127627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.116.21.76"/>
    </slice>
    <from sec="1144127185" usec="0"/>
    <to sec="1144127202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,011,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1082{
style=filled;
color=gray75;
4295[label="161.223.8.77;165pkt 165fpkt", shape=pentagon, color=darkviolet];
6970[label="161.223.8.77;164pkt 164fpkt", shape=invtriangle, color=brown];
stat1082[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.8.77:3128, 220.61.107.212:*}[39.3939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 1810: (0.607903%)&lt;BR/&gt; 64501: (0.303951%)&lt;BR/&gt; 61357: (0.303951%)&lt;BR/&gt; 59912: (0.303951%)&gt;];
}
4295--6970[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_ip="220.61.107.212" src_ip="161.223.8.77" src_port="3128"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
4300[label="210.164.148.77;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6972[label="210.164.148.77;28pkt 28fpkt", shape=invtriangle, color=brown];
8819[label="210.164.148.77;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.164.148.77:*, 164.23.215.49:25}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63869: (1.80723%)&lt;BR/&gt; 61626: (1.80723%)&lt;BR/&gt; 57093: (1.80723%)&lt;BR/&gt; 57083: (1.80723%)&gt;];
}
4300--6972[label="1;28pkt 28fpkt"];
4300--8819[label="1;27pkt 27fpkt"];
6972--8819[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.215.49" dst_port="25" src_ip="210.164.148.77"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1084{
style=filled;
color=gray75;
4307[label="138.27.29.78;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6977[label="138.27.29.78;3pkt 3fpkt", shape=invtriangle, color=brown];
8823[label="138.27.29.78;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1084[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.27.29.78:80, 132.19.53.165:65316}[33.3333%]&lt;BR/&gt;{138.27.29.78:80, 132.19.53.165:65318}[33.3333%]&lt;BR/&gt;{138.27.29.78:80, 132.19.53.165:65319}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65319: (16.6667%)&lt;BR/&gt; 65318: (16.6667%)&lt;BR/&gt; 65316: (16.6667%)&gt;];
}
4307--6977[label="1;3pkt 3fpkt"];
4307--8823[label="1;3pkt 3fpkt"];
6977--8823[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.53.165" dst_port="65319" src_ip="138.27.29.78" src_port="80"/>
      <filter dst_ip="132.19.53.165" dst_port="65318" src_ip="138.27.29.78" src_port="80"/>
      <filter dst_ip="132.19.53.165" dst_port="65316" src_ip="138.27.29.78" src_port="80"/>
    </slice>
    <from sec="1144127677" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1085{
style=filled;
color=gray75;
4313[label="132.19.132.78;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6982[label="132.19.132.78;15pkt 15fpkt", shape=invtriangle, color=brown];
8826[label="132.19.132.78;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1085[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.132.78:*, 53.190.27.130:443}[46.6667%]&lt;BR/&gt;{132.19.132.78:*, 210.237.12.195:443}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49816: (3.48837%)&lt;BR/&gt; 49815: (3.48837%)&lt;BR/&gt; 49814: (3.48837%)&lt;BR/&gt; 49813: (3.48837%)&gt;];
}
4313--6982[label="1;14pkt 14fpkt"];
4313--8826[label="1;14pkt 14fpkt"];
6982--8826[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="53.190.27.130" dst_port="443" src_ip="132.19.132.78"/>
      <filter dst_ip="210.237.12.195" dst_port="443" src_ip="132.19.132.78"/>
    </slice>
    <from sec="1144127264" usec="0"/>
    <to sec="1144127531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.682868,2.33824,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1086{
style=filled;
color=gray75;
1455[label="35.195.179.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
6984[label="35.195.179.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1086[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.195.179.78:1387, 128.28.244.123:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1387: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1455--3296[label="1;1pkt 1fpkt"];
1455--6984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.244.123" dst_port="80" src_ip="35.195.179.78" src_port="1387"/>
    </slice>
    <from sec="1144126945" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1087{
style=filled;
color=gray75;
4319[label="193.209.146.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6988[label="193.209.146.79;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1087[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.209.146.79:2234, 128.28.217.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2234: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4319--6988[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="193.209.146.79" src_port="2234"/>
    </slice>
    <from sec="1144127524" usec="0"/>
    <to sec="1144127579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1088{
style=filled;
color=gray75;
4322[label="164.23.239.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6989[label="164.23.239.79;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1088[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.239.79:1446, 32.136.179.150:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1446: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
4322--6989[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.136.179.150" dst_port="443" src_ip="164.23.239.79" src_port="1446"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1089{
style=filled;
color=gray75;
4328[label="208.127.72.80;169pkt 169fpkt", shape=pentagon, color=darkviolet];
6993[label="208.127.72.80;169pkt 169fpkt", shape=invtriangle, color=brown];
8832[label="208.127.72.80;169pkt 169fpkt", shape=invhouse, color=bisque];
stat1089[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.127.72.80:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 65383: (0.295858%)&lt;BR/&gt; 65339: (0.295858%)&lt;BR/&gt; 65319: (0.295858%)&lt;BR/&gt; 65080: (0.295858%)&gt;];
}
4328--6993[label="1;169pkt 169fpkt"];
4328--8832[label="1;169pkt 169fpkt"];
6993--8832[label="1;169pkt 169fpkt"];
</description>
    <slice>
      <filter src_ip="208.127.72.80" src_port="25"/>
    </slice>
    <from sec="1144126940" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1090{
style=filled;
color=gray75;
4329[label="164.23.92.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6994[label="164.23.92.80;3pkt 3fpkt", shape=invtriangle, color=brown];
8833[label="164.23.92.80;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1090[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.92.80:25, 36.52.249.3:40193}[33.3333%]&lt;BR/&gt;{164.23.92.80:25, 36.172.50.18:32701}[33.3333%]&lt;BR/&gt;{164.23.92.80:0, 109.1.4.62:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (42.8571%)&lt;BR/&gt; 25: (28.5714%)&lt;BR/&gt; 32701: (21.4286%)&lt;BR/&gt; 40193: (7.14286%)&gt;];
}
4329--6994[label="1;2pkt 2fpkt"];
4329--8833[label="1;2pkt 2fpkt"];
6994--8833[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="109.1.4.62" src_ip="164.23.92.80"/>
      <filter dst_ip="36.172.50.18" dst_port="32701" src_ip="164.23.92.80" src_port="25"/>
      <filter dst_ip="36.52.249.3" dst_port="40193" src_ip="164.23.92.80" src_port="25"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="161.223.117.80"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1092{
style=filled;
color=gray75;
2287[label="128.28.29.76;d;5pkt 5fpkt", shape=diamond, color=yellow];
4332[label="36.106.136.80;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6997[label="36.106.136.80;4pkt 4fpkt", shape=invtriangle, color=brown];
8834[label="36.106.136.80;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1092[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.6.88.87:41071, 128.28.29.76:80}[20%]&lt;BR/&gt;{36.106.136.80:44677, 128.28.29.76:80}[20%]&lt;BR/&gt;{36.106.136.80:47964, 128.28.29.76:80}[20%]&lt;BR/&gt;{36.106.136.80:48345, 128.28.29.76:80}[20%]&lt;BR/&gt;{36.106.136.80:49360, 128.28.29.76:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49360: (11.7647%)&lt;BR/&gt; 48345: (11.7647%)&lt;BR/&gt; 47964: (11.7647%)&lt;BR/&gt; 44677: (11.7647%)&gt;];
}
2287--4332[label="1;4pkt 4fpkt"];
2287--6997[label="1;4pkt 4fpkt"];
2287--8834[label="1;4pkt 4fpkt"];
4332--6997[label="1;4pkt 4fpkt"];
4332--8834[label="1;4pkt 4fpkt"];
6997--8834[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.29.76" dst_port="80" src_ip="36.106.136.80" src_port="49360"/>
      <filter dst_ip="128.28.29.76" dst_port="80" src_ip="36.106.136.80" src_port="48345"/>
      <filter dst_ip="128.28.29.76" dst_port="80" src_ip="36.106.136.80" src_port="47964"/>
      <filter dst_ip="128.28.29.76" dst_port="80" src_ip="36.106.136.80" src_port="44677"/>
      <filter dst_ip="128.28.29.76" dst_port="80" src_ip="41.6.88.87" src_port="41071"/>
    </slice>
    <from sec="1144127278" usec="0"/>
    <to sec="1144127434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1093{
style=filled;
color=gray75;
4333[label="210.107.159.80;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6998[label="210.107.159.80;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1093[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.107.159.80:443, 164.23.238.96:1204}[33.3333%]&lt;BR/&gt;{210.107.159.80:443, 164.23.238.96:1205}[33.3333%]&lt;BR/&gt;{210.107.159.80:443, 164.23.238.96:1213}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1213: (16.6667%)&lt;BR/&gt; 1205: (16.6667%)&lt;BR/&gt; 1204: (16.6667%)&gt;];
}
4333--6998[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.238.96" dst_port="1213" src_ip="210.107.159.80" src_port="443"/>
      <filter dst_ip="164.23.238.96" dst_port="1205" src_ip="210.107.159.80" src_port="443"/>
      <filter dst_ip="164.23.238.96" dst_port="1204" src_ip="210.107.159.80" src_port="443"/>
    </slice>
    <from sec="1144127461" usec="0"/>
    <to sec="1144127626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.13.168.80"/>
    </slice>
    <from sec="1144126825" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1095{
style=filled;
color=gray75;
4341[label="161.223.52.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7005[label="161.223.52.81;2pkt 2fpkt", shape=invtriangle, color=brown];
8838[label="161.223.52.81;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1095[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.52.81:1121, 41.136.86.8:80}[50%]&lt;BR/&gt;{161.223.52.81:1122, 41.136.86.8:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1122: (25%)&lt;BR/&gt; 1121: (25%)&gt;];
}
4341--7005[label="1;2pkt 2fpkt"];
4341--8838[label="1;2pkt 2fpkt"];
7005--8838[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="41.136.86.8" dst_port="80" src_ip="161.223.52.81" src_port="1122"/>
      <filter dst_ip="41.136.86.8" dst_port="80" src_ip="161.223.52.81" src_port="1121"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1096{
style=filled;
color=gray75;
4343[label="161.223.54.81;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7007[label="161.223.54.81;1pkt 1fpkt", shape=invtriangle, color=brown];
8840[label="161.223.54.81;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1096[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.54.81:80, 41.25.163.225:37591}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37591: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4343--7007[label="1;1pkt 1fpkt"];
4343--8840[label="1;1pkt 1fpkt"];
7007--8840[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.25.163.225" dst_port="37591" src_ip="161.223.54.81" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.931849,2.30287,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1097{
style=filled;
color=gray75;
1625[label="213.168.97.81;s;10pkt 10fpkt", shape=diamond, color=yellow];
1826[label="147.13.230.148;d;1415pkt 1415fpkt", shape=diamond, color=yellow];
3194[label="213.168.97.81;s;10pkt 10fpkt", shape=hexagon, color=black];
4347[label="213.168.97.81;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat1097[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 147.13.230.148:2271}[47.8903%]&lt;BR/&gt;{*:*, 147.13.230.148:7617}[33.5443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2271: (23.7881%)&lt;BR/&gt; 7617: (16.6205%)&lt;BR/&gt; 20128: (7.65235%)&lt;BR/&gt; 0: (1.10803%)&lt;BR/&gt; 80: (0.865651%)&gt;];
}
1625--1826[label="0.3;3pkt 3fpkt"];
1625--2696[label="0.7;7pkt 7fpkt"];
1625--3194[label="1;10pkt 10fpkt"];
1625--3259[label="0.7;7pkt 7fpkt"];
1625--3286[label="0.4;4pkt 4fpkt"];
1625--3296[label="0.3;3pkt 3fpkt"];
1625--3300[label="0.4;4pkt 4fpkt"];
1625--3305[label="0.4;4pkt 4fpkt"];
1625--4347[label="1;9pkt 9fpkt"];
1625--7010[label="1;10pkt 10fpkt"];
1826--3194[label="0.3;3pkt 3fpkt"];
1826--3922[label="0.333333;1pkt 1fpkt"];
1826--4347[label="0.333333;3pkt 3fpkt"];
1826--4719[label="1;5pkt 5fpkt"];
1826--6704[label="0.5;1pkt 1fpkt"];
1826--7010[label="0.3;3pkt 3fpkt"];
1826--7264[label="1;5pkt 5fpkt"];
1826--9008[label="1;5pkt 5fpkt"];
3194--3259[label="0.7;7pkt 7fpkt"];
3194--3286[label="0.4;4pkt 4fpkt"];
3194--3296[label="0.3;3pkt 3fpkt"];
3194--3300[label="0.4;4pkt 4fpkt"];
3194--3305[label="0.4;4pkt 4fpkt"];
3194--4347[label="1;9pkt 9fpkt"];
3194--7010[label="1;10pkt 10fpkt"];
4347--7010[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.148" dst_port="2271"/>
      <filter dst_ip="147.13.230.148" dst_port="7617"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.139.180.81"/>
    </slice>
    <from sec="1144126867" usec="0"/>
    <to sec="1144127673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.235.193.81"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.18.165.82"/>
    </slice>
    <from sec="1144126850" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.208.19.83"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1102{
style=filled;
color=gray75;
4370[label="164.23.142.83;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7023[label="164.23.142.83;10pkt 10fpkt", shape=invtriangle, color=brown];
8848[label="164.23.142.83;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1102[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.142.83:80, *:*}[30%]&lt;BR/&gt;{164.23.142.83:25, 210.243.57.156:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.4828%)&lt;BR/&gt; 80: (15.5172%)&lt;BR/&gt; 54553: (5.17241%)&lt;BR/&gt; 42401: (5.17241%)&lt;BR/&gt; 35298: (5.17241%)&gt;];
}
4370--7023[label="1;10pkt 10fpkt"];
4370--8848[label="1;9pkt 9fpkt"];
7023--8848[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.142.83" src_port="80"/>
      <filter dst_ip="210.243.57.156" src_ip="164.23.142.83" src_port="25"/>
    </slice>
    <from sec="1144126981" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1103{
style=filled;
color=gray75;
323[label="128.28.217.83;s;524pkt 524fpkt", shape=diamond, color=yellow];
869[label="196.206.46.108;d;313pkt 313fpkt", shape=diamond, color=yellow];
1268[label="219.73.82.134;d;223pkt 223fpkt", shape=diamond, color=yellow];
1640[label="219.56.180.87;d;65pkt 65fpkt", shape=diamond, color=yellow];
1679[label="39.64.58.30;d;112pkt 112fpkt", shape=diamond, color=yellow];
1689[label="39.64.74.164;d;108pkt 108fpkt", shape=diamond, color=yellow];
1972[label="132.19.98.145;s;80pkt 80fpkt", shape=diamond, color=yellow];
2202[label="132.19.98.249;s;87pkt 87fpkt", shape=diamond, color=yellow];
2324[label="196.206.46.107;d;120pkt 120fpkt", shape=diamond, color=yellow];
2432[label="132.19.196.160;s;57pkt 57fpkt", shape=diamond, color=yellow];
2749[label="128.28.217.83;s;127pkt 127fpkt", shape=hexagon, color=black];
2831[label="132.19.198.45;s;455pkt 455fpkt", shape=hexagon, color=black];
3057[label="132.19.98.145;s;80pkt 80fpkt", shape=hexagon, color=black];
3954[label="132.19.192.50;31pkt 31fpkt", shape=pentagon, color=darkviolet];
4075[label="132.19.90.60;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4078[label="132.19.192.60;69pkt 69fpkt", shape=pentagon, color=darkviolet];
4109[label="132.19.90.63;48pkt 48fpkt", shape=pentagon, color=darkviolet];
4373[label="128.28.217.83;554pkt 554fpkt", shape=pentagon, color=darkviolet];
4585[label="128.28.68.104;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4642[label="132.19.192.108;75pkt 75fpkt", shape=pentagon, color=darkviolet];
4842[label="132.19.245.130;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4861[label="132.19.90.132;40pkt 40fpkt", shape=pentagon, color=darkviolet];
4969[label="132.19.192.139;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5037[label="132.19.98.145;82pkt 82fpkt", shape=pentagon, color=darkviolet];
5163[label="132.19.205.154;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5233[label="132.19.196.160;57pkt 57fpkt", shape=pentagon, color=darkviolet];
5673[label="132.19.245.197;50pkt 50fpkt", shape=pentagon, color=darkviolet];
5806[label="132.19.245.208;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6238[label="132.19.98.249;87pkt 87fpkt", shape=pentagon, color=darkviolet];
6728[label="132.19.192.50;30pkt 30fpkt", shape=invtriangle, color=brown];
6809[label="132.19.90.60;32pkt 32fpkt", shape=invtriangle, color=brown];
6812[label="132.19.192.60;69pkt 69fpkt", shape=invtriangle, color=brown];
6836[label="132.19.90.63;48pkt 48fpkt", shape=invtriangle, color=brown];
7025[label="128.28.217.83;553pkt 553fpkt", shape=invtriangle, color=brown];
7206[label="132.19.192.108;76pkt 76fpkt", shape=invtriangle, color=brown];
7357[label="132.19.245.130;21pkt 21fpkt", shape=invtriangle, color=brown];
7369[label="132.19.90.132;39pkt 39fpkt", shape=invtriangle, color=brown];
7443[label="132.19.192.139;34pkt 34fpkt", shape=invtriangle, color=brown];
7582[label="132.19.205.154;29pkt 29fpkt", shape=invtriangle, color=brown];
8031[label="132.19.245.208;10pkt 10fpkt", shape=invtriangle, color=brown];
8655[label="132.19.192.50;30pkt 30fpkt", shape=invhouse, color=bisque];
8696[label="161.223.44.58;9pkt 9fpkt", shape=invhouse, color=bisque];
8710[label="132.19.90.60;31pkt 31fpkt", shape=invhouse, color=bisque];
8713[label="132.19.192.60;68pkt 68fpkt", shape=invhouse, color=bisque];
8729[label="132.19.90.63;47pkt 47fpkt", shape=invhouse, color=bisque];
8850[label="128.28.217.83;554pkt 554fpkt", shape=invhouse, color=bisque];
9119[label="132.19.192.139;34pkt 34fpkt", shape=invhouse, color=bisque];
9500[label="132.19.245.208;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1103[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.217.83:*, *:80}[23.1293%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1063%)&lt;BR/&gt; 443: (1.42265%)&lt;BR/&gt; 1863: (0.216695%)&lt;BR/&gt; 2017: (0.0942152%)&lt;BR/&gt; 1048: (0.0942152%)&gt;];
}
323--579[label="0.0438931;23pkt 23fpkt"];
323--602[label="0.272727;24pkt 24fpkt"];
323--611[label="0.0019084;1pkt 1fpkt"];
323--792[label="0.0152672;8pkt 8fpkt"];
323--808[label="0.169591;58pkt 58fpkt"];
323--869[label="0.0415335;13pkt 13fpkt"];
323--1066[label="0.0124224;2pkt 2fpkt"];
323--1081[label="0.0245614;7pkt 7fpkt"];
323--1268[label="0.0134529;3pkt 3fpkt"];
323--1386[label="0.0536398;14pkt 14fpkt"];
323--1403[label="0.0138889;2pkt 2fpkt"];
323--1513[label="0.171687;57pkt 57fpkt"];
323--1517[label="0.00520833;1pkt 1fpkt"];
323--1531[label="0.0130719;2pkt 2fpkt"];
323--1631[label="0.0298507;2pkt 2fpkt"];
323--1640[label="0.0307692;2pkt 2fpkt"];
323--1689[label="0.0462963;5pkt 5fpkt"];
323--1690[label="0.428571;21pkt 21fpkt"];
323--1898[label="0.0106383;1pkt 1fpkt"];
323--1917[label="0.0434783;4pkt 4fpkt"];
323--2139[label="0.0105263;1pkt 1fpkt"];
323--2324[label="0.00833333;1pkt 1fpkt"];
323--2555[label="0.00704225;1pkt 1fpkt"];
323--2574[label="0.0365854;3pkt 3fpkt"];
323--2587[label="0.0192308;1pkt 1fpkt"];
323--2749[label="1;127pkt 127fpkt"];
323--3296[label="0.0515267;27pkt 27fpkt"];
323--4373[label="1;524pkt 524fpkt"];
323--7025[label="0.998092;523pkt 523fpkt"];
323--8850[label="1;524pkt 524fpkt"];
869--1094[label="0.0113636;2pkt 2fpkt"];
869--1509[label="0.0810811;9pkt 9fpkt"];
869--1972[label="0.075;6pkt 6fpkt"];
869--2143[label="0.0192308;3pkt 3fpkt"];
869--2202[label="0.413793;36pkt 36fpkt"];
869--2258[label="0.0792079;8pkt 8fpkt"];
869--2283[label="0.0483871;3pkt 3fpkt"];
869--2366[label="0.0267857;3pkt 3fpkt"];
869--2412[label="0.16;12pkt 12fpkt"];
869--2424[label="0.34375;22pkt 22fpkt"];
869--2432[label="0.280702;16pkt 16fpkt"];
869--2749[label="0.0314961;4pkt 4fpkt"];
869--2831[label="0.0255591;8pkt 8fpkt"];
869--3006[label="0.0957447;9pkt 9fpkt"];
869--3037[label="0.125;9pkt 9fpkt"];
869--3057[label="0.075;6pkt 6fpkt"];
869--3196[label="0.0285714;3pkt 3fpkt"];
869--3225[label="0.0894569;28pkt 28fpkt"];
869--3233[label="0.0114068;3pkt 3fpkt"];
869--3346[label="0.222222;4pkt 4fpkt"];
869--3550[label="0.16;12pkt 12fpkt"];
869--3573[label="0.00958466;3pkt 3fpkt"];
869--3816[label="0.047619;3pkt 3fpkt"];
869--3954[label="0.0967742;3pkt 3fpkt"];
869--4078[label="0.0724638;5pkt 5fpkt"];
869--4109[label="0.270833;13pkt 13fpkt"];
869--4125[label="0.116883;9pkt 9fpkt"];
869--4344[label="0.0267857;3pkt 3fpkt"];
869--4373[label="0.0415335;13pkt 13fpkt"];
869--4577[label="0.0438596;5pkt 5fpkt"];
869--4585[label="0.142857;2pkt 2fpkt"];
869--4642[label="0.08;6pkt 6fpkt"];
869--4842[label="0.047619;1pkt 1fpkt"];
869--4861[label="0.45;18pkt 18fpkt"];
869--5037[label="0.0731707;6pkt 6fpkt"];
869--5163[label="0.107143;3pkt 3fpkt"];
869--5233[label="0.280702;16pkt 16fpkt"];
869--5261[label="0.0208333;1pkt 1fpkt"];
869--5360[label="0.344828;10pkt 10fpkt"];
869--5403[label="0.34375;22pkt 22fpkt"];
869--5632[label="0.00958466;3pkt 3fpkt"];
869--5673[label="0.08;4pkt 4fpkt"];
869--5876[label="0.00319489;1pkt 1fpkt"];
869--5981[label="0.111111;5pkt 5fpkt"];
869--6238[label="0.413793;36pkt 36fpkt"];
869--6315[label="0.222222;4pkt 4fpkt"];
869--6455[label="0.162162;12pkt 12fpkt"];
869--6472[label="0.00958466;3pkt 3fpkt"];
869--6632[label="0.0483871;3pkt 3fpkt"];
869--6728[label="0.1;3pkt 3fpkt"];
869--6812[label="0.0724638;5pkt 5fpkt"];
869--6836[label="0.270833;13pkt 13fpkt"];
869--6847[label="0.116883;9pkt 9fpkt"];
869--7025[label="0.0415335;13pkt 13fpkt"];
869--7167[label="0.0438596;5pkt 5fpkt"];
869--7206[label="0.0789474;6pkt 6fpkt"];
869--7357[label="0.047619;1pkt 1fpkt"];
869--7369[label="0.461538;18pkt 18fpkt"];
869--7582[label="0.103448;3pkt 3fpkt"];
869--7746[label="0.34375;22pkt 22fpkt"];
869--7911[label="0.00958466;3pkt 3fpkt"];
869--8082[label="0.00319489;1pkt 1fpkt"];
869--8155[label="0.111111;5pkt 5fpkt"];
869--8401[label="0.222222;4pkt 4fpkt"];
869--8488[label="0.16;12pkt 12fpkt"];
869--8598[label="0.047619;3pkt 3fpkt"];
869--8655[label="0.1;3pkt 3fpkt"];
869--8713[label="0.0735294;5pkt 5fpkt"];
869--8729[label="0.276596;13pkt 13fpkt"];
869--8850[label="0.0415335;13pkt 13fpkt"];
869--8945[label="0.0434783;5pkt 5fpkt"];
869--9422[label="0.00958466;3pkt 3fpkt"];
869--9535[label="0.00319489;1pkt 1fpkt"];
869--9584[label="0.111111;5pkt 5fpkt"];
1268--1408[label="0.0267857;3pkt 3fpkt"];
1268--1989[label="0.0224719;2pkt 2fpkt"];
1268--2533[label="0.0044843;1pkt 1fpkt"];
1268--2878[label="0.0454545;3pkt 3fpkt"];
1268--3296[label="0.0179372;4pkt 4fpkt"];
1268--3448[label="0.8;12pkt 12fpkt"];
1268--3928[label="0.529412;9pkt 9fpkt"];
1268--3933[label="0.675676;50pkt 50fpkt"];
1268--4075[label="0.0625;2pkt 2fpkt"];
1268--4078[label="0.217391;15pkt 15fpkt"];
1268--4108[label="0.0672646;15pkt 15fpkt"];
1268--4373[label="0.0134529;3pkt 3fpkt"];
1268--4577[label="0.105263;12pkt 12fpkt"];
1268--4969[label="0.0588235;2pkt 2fpkt"];
1268--4988[label="0.0353982;4pkt 4fpkt"];
1268--5775[label="0.00813008;1pkt 1fpkt"];
1268--5806[label="0.7;7pkt 7fpkt"];
1268--6385[label="0.8;12pkt 12fpkt"];
1268--6712[label="0.684932;50pkt 50fpkt"];
1268--6809[label="0.0625;2pkt 2fpkt"];
1268--6812[label="0.217391;15pkt 15fpkt"];
1268--6835[label="0.0672646;15pkt 15fpkt"];
1268--7025[label="0.0134529;3pkt 3fpkt"];
1268--7167[label="0.105263;12pkt 12fpkt"];
1268--7443[label="0.0588235;2pkt 2fpkt"];
1268--7459[label="0.0363636;4pkt 4fpkt"];
1268--8031[label="0.7;7pkt 7fpkt"];
1268--8646[label="0.684932;50pkt 50fpkt"];
1268--8710[label="0.0645161;2pkt 2fpkt"];
1268--8713[label="0.220588;15pkt 15fpkt"];
1268--8728[label="0.0672646;15pkt 15fpkt"];
1268--8850[label="0.0134529;3pkt 3fpkt"];
1268--8945[label="0.104348;12pkt 12fpkt"];
1268--9119[label="0.0588235;2pkt 2fpkt"];
1268--9500[label="0.7;7pkt 7fpkt"];
1640--1972[label="0.0307692;2pkt 2fpkt"];
1640--2258[label="0.0307692;2pkt 2fpkt"];
1640--2412[label="0.0153846;1pkt 1fpkt"];
1640--2424[label="0.03125;2pkt 2fpkt"];
1640--2831[label="0.123077;8pkt 8fpkt"];
1640--3057[label="0.0307692;2pkt 2fpkt"];
1640--3233[label="0.0461538;3pkt 3fpkt"];
1640--3550[label="0.0153846;1pkt 1fpkt"];
1640--4038[label="0.3;3pkt 3fpkt"];
1640--4078[label="0.0307692;2pkt 2fpkt"];
1640--4373[label="0.0307692;2pkt 2fpkt"];
1640--4560[label="0.142857;4pkt 4fpkt"];
1640--4642[label="0.0153846;1pkt 1fpkt"];
1640--4795[label="0.0769231;5pkt 5fpkt"];
1640--4842[label="0.047619;1pkt 1fpkt"];
1640--4861[label="0.1;4pkt 4fpkt"];
1640--5037[label="0.0307692;2pkt 2fpkt"];
1640--5163[label="0.0714286;2pkt 2fpkt"];
1640--5403[label="0.03125;2pkt 2fpkt"];
1640--5632[label="0.0615385;4pkt 4fpkt"];
1640--5673[label="0.04;2pkt 2fpkt"];
1640--6455[label="0.0153846;1pkt 1fpkt"];
1640--6784[label="0.333333;3pkt 3fpkt"];
1640--6812[label="0.0307692;2pkt 2fpkt"];
1640--7025[label="0.0307692;2pkt 2fpkt"];
1640--7206[label="0.0153846;1pkt 1fpkt"];
1640--7322[label="0.0769231;5pkt 5fpkt"];
1640--7357[label="0.047619;1pkt 1fpkt"];
1640--7369[label="0.102564;4pkt 4fpkt"];
1640--7582[label="0.0689655;2pkt 2fpkt"];
1640--7746[label="0.03125;2pkt 2fpkt"];
1640--7911[label="0.0615385;4pkt 4fpkt"];
1640--8488[label="0.0153846;1pkt 1fpkt"];
1640--8696[label="0.333333;3pkt 3fpkt"];
1640--8713[label="0.0307692;2pkt 2fpkt"];
1640--8850[label="0.0307692;2pkt 2fpkt"];
1640--9044[label="0.0769231;5pkt 5fpkt"];
1640--9422[label="0.0615385;4pkt 4fpkt"];
1679--1972[label="0.075;6pkt 6fpkt"];
1679--2202[label="0.149425;13pkt 13fpkt"];
1679--2239[label="0.1;4pkt 4fpkt"];
1679--2432[label="0.210526;12pkt 12fpkt"];
1679--2772[label="0.0178571;2pkt 2fpkt"];
1679--2873[label="0.00990099;1pkt 1fpkt"];
1679--2878[label="0.030303;2pkt 2fpkt"];
1679--2947[label="0.00892857;1pkt 1fpkt"];
1679--3057[label="0.075;6pkt 6fpkt"];
1679--3152[label="0.1;4pkt 4fpkt"];
1679--3180[label="0.0178571;2pkt 2fpkt"];
1679--3296[label="0.0446429;5pkt 5fpkt"];
1679--3463[label="0.0222222;1pkt 1fpkt"];
1679--4001[label="0.027027;1pkt 1fpkt"];
1679--4109[label="0.104167;5pkt 5fpkt"];
1679--4296[label="0.0540541;2pkt 2fpkt"];
1679--4375[label="0.0178571;2pkt 2fpkt"];
1679--4492[label="0.0178571;2pkt 2fpkt"];
1679--4499[label="1;1pkt 1fpkt"];
1679--4639[label="0.00892857;1pkt 1fpkt"];
1679--4642[label="0.133333;10pkt 10fpkt"];
1679--5037[label="0.0731707;6pkt 6fpkt"];
1679--5233[label="0.210526;12pkt 12fpkt"];
1679--5470[label="0.0285714;1pkt 1fpkt"];
1679--5495[label="0.125;6pkt 6fpkt"];
1679--6238[label="0.149425;13pkt 13fpkt"];
1679--6762[label="0.0263158;1pkt 1fpkt"];
1679--6836[label="0.104167;5pkt 5fpkt"];
1679--6971[label="0.0526316;2pkt 2fpkt"];
1679--7027[label="0.0178571;2pkt 2fpkt"];
1679--7107[label="0.0178571;2pkt 2fpkt"];
1679--7110[label="0.5;1pkt 1fpkt"];
1679--7206[label="0.131579;10pkt 10fpkt"];
1679--7786[label="0.0285714;1pkt 1fpkt"];
1679--7806[label="0.12766;6pkt 6fpkt"];
1679--8729[label="0.106383;5pkt 5fpkt"];
1679--8818[label="0.0526316;2pkt 2fpkt"];
1679--8852[label="0.0178571;2pkt 2fpkt"];
1679--8904[label="0.0178571;2pkt 2fpkt"];
1679--8907[label="1;1pkt 1fpkt"];
1679--9354[label="0.12766;6pkt 6fpkt"];
1689--1972[label="0.025;2pkt 2fpkt"];
1689--2412[label="0.106667;8pkt 8fpkt"];
1689--2432[label="0.105263;6pkt 6fpkt"];
1689--2533[label="0.00925926;1pkt 1fpkt"];
1689--2831[label="0.0462963;5pkt 5fpkt"];
1689--3057[label="0.025;2pkt 2fpkt"];
1689--3336[label="0.101852;11pkt 11fpkt"];
1689--3550[label="0.106667;8pkt 8fpkt"];
1689--4078[label="0.0869565;6pkt 6fpkt"];
1689--4183[label="0.257143;9pkt 9fpkt"];
1689--4373[label="0.0462963;5pkt 5fpkt"];
1689--4560[label="0.214286;6pkt 6fpkt"];
1689--4642[label="0.0666667;5pkt 5fpkt"];
1689--5037[label="0.0243902;2pkt 2fpkt"];
1689--5233[label="0.105263;6pkt 6fpkt"];
1689--5673[label="0.2;10pkt 10fpkt"];
1689--5876[label="0.0277778;3pkt 3fpkt"];
1689--6306[label="0.101852;11pkt 11fpkt"];
1689--6455[label="0.108108;8pkt 8fpkt"];
1689--6812[label="0.0869565;6pkt 6fpkt"];
1689--6888[label="0.257143;9pkt 9fpkt"];
1689--7025[label="0.0462963;5pkt 5fpkt"];
1689--7206[label="0.0657895;5pkt 5fpkt"];
1689--8082[label="0.0277778;3pkt 3fpkt"];
1689--8488[label="0.106667;8pkt 8fpkt"];
1689--8713[label="0.0882353;6pkt 6fpkt"];
1689--8766[label="0.25;9pkt 9fpkt"];
1689--8850[label="0.0462963;5pkt 5fpkt"];
1689--9535[label="0.0277778;3pkt 3fpkt"];
1972--2139[label="0.0125;1pkt 1fpkt"];
1972--2324[label="0.0125;1pkt 1fpkt"];
1972--2419[label="0.0638298;3pkt 3fpkt"];
1972--2555[label="0.0125;1pkt 1fpkt"];
1972--3057[label="1;80pkt 80fpkt"];
1972--3296[label="0.025;2pkt 2fpkt"];
1972--5037[label="0.9875;79pkt 79fpkt"];
2202--6238[label="1;87pkt 87fpkt"];
2324--2402[label="0.0204082;1pkt 1fpkt"];
2324--2424[label="0.03125;2pkt 2fpkt"];
2324--2432[label="0.0175439;1pkt 1fpkt"];
2324--2831[label="0.0166667;2pkt 2fpkt"];
2324--2874[label="0.0555556;1pkt 1fpkt"];
2324--2878[label="0.0151515;1pkt 1fpkt"];
2324--2947[label="0.0833333;10pkt 10fpkt"];
2324--3006[label="0.0106383;1pkt 1fpkt"];
2324--3057[label="0.0125;1pkt 1fpkt"];
2324--3180[label="0.00833333;1pkt 1fpkt"];
2324--3209[label="0.0227273;1pkt 1fpkt"];
2324--3233[label="0.00833333;1pkt 1fpkt"];
2324--3336[label="0.0583333;7pkt 7fpkt"];
2324--3389[label="0.0666667;4pkt 4fpkt"];
2324--3461[label="0.015873;1pkt 1fpkt"];
2324--3463[label="0.0666667;3pkt 3fpkt"];
2324--3747[label="0.0232558;1pkt 1fpkt"];
2324--3816[label="0.015873;1pkt 1fpkt"];
2324--3875[label="0.0344828;1pkt 1fpkt"];
2324--3936[label="0.025;3pkt 3fpkt"];
2324--4001[label="0.0540541;2pkt 2fpkt"];
2324--4109[label="0.0208333;1pkt 1fpkt"];
2324--4327[label="0.00925926;1pkt 1fpkt"];
2324--4373[label="0.00833333;1pkt 1fpkt"];
2324--4375[label="0.00833333;1pkt 1fpkt"];
2324--4421[label="0.0147059;1pkt 1fpkt"];
2324--4492[label="0.00847458;1pkt 1fpkt"];
2324--4524[label="0.05;1pkt 1fpkt"];
2324--4560[label="0.0357143;1pkt 1fpkt"];
2324--4639[label="0.0916667;11pkt 11fpkt"];
2324--4795[label="0.0166667;2pkt 2fpkt"];
2324--4825[label="0.0377358;2pkt 2fpkt"];
2324--4842[label="0.190476;4pkt 4fpkt"];
2324--4861[label="0.05;2pkt 2fpkt"];
2324--4954[label="0.0294118;1pkt 1fpkt"];
2324--5037[label="0.0121951;1pkt 1fpkt"];
2324--5163[label="0.0357143;1pkt 1fpkt"];
2324--5181[label="0.047619;1pkt 1fpkt"];
2324--5222[label="0.0384615;1pkt 1fpkt"];
2324--5233[label="0.0175439;1pkt 1fpkt"];
2324--5385[label="0.0147059;1pkt 1fpkt"];
2324--5403[label="0.03125;2pkt 2fpkt"];
2324--5458[label="0.0357143;1pkt 1fpkt"];
2324--5495[label="0.0208333;1pkt 1fpkt"];
2324--5578[label="0.0333333;1pkt 1fpkt"];
2324--5704[label="0.05;6pkt 6fpkt"];
2324--5876[label="0.00833333;1pkt 1fpkt"];
2324--5888[label="0.025;3pkt 3fpkt"];
2324--5981[label="0.0222222;1pkt 1fpkt"];
2324--6085[label="0.0294118;1pkt 1fpkt"];
2324--6306[label="0.0583333;7pkt 7fpkt"];
2324--6398[label="0.015873;1pkt 1fpkt"];
2324--6632[label="0.016129;1pkt 1fpkt"];
2324--6673[label="0.0357143;1pkt 1fpkt"];
2324--6715[label="0.025;3pkt 3fpkt"];
2324--6762[label="0.0526316;2pkt 2fpkt"];
2324--6836[label="0.0208333;1pkt 1fpkt"];
2324--6992[label="0.00925926;1pkt 1fpkt"];
2324--7025[label="0.00833333;1pkt 1fpkt"];
2324--7027[label="0.00833333;1pkt 1fpkt"];
2324--7062[label="0.0144928;1pkt 1fpkt"];
2324--7107[label="0.00847458;1pkt 1fpkt"];
2324--7322[label="0.0166667;2pkt 2fpkt"];
2324--7345[label="0.0377358;2pkt 2fpkt"];
2324--7357[label="0.190476;4pkt 4fpkt"];
2324--7369[label="0.0512821;2pkt 2fpkt"];
2324--7434[label="0.0294118;1pkt 1fpkt"];
2324--7582[label="0.0344828;1pkt 1fpkt"];
2324--7621[label="0.04;1pkt 1fpkt"];
2324--7733[label="0.0147059;1pkt 1fpkt"];
2324--7746[label="0.03125;2pkt 2fpkt"];
2324--7777[label="0.0357143;1pkt 1fpkt"];
2324--7806[label="0.0212766;1pkt 1fpkt"];
2324--7869[label="0.0344828;1pkt 1fpkt"];
2324--8082[label="0.00833333;1pkt 1fpkt"];
2324--8091[label="0.025;3pkt 3fpkt"];
2324--8155[label="0.0222222;1pkt 1fpkt"];
2324--8234[label="0.03125;1pkt 1fpkt"];
2324--8452[label="0.015625;1pkt 1fpkt"];
2324--8598[label="0.015873;1pkt 1fpkt"];
2324--8729[label="0.0212766;1pkt 1fpkt"];
2324--8831[label="0.00917431;1pkt 1fpkt"];
2324--8850[label="0.00833333;1pkt 1fpkt"];
2324--8852[label="0.00833333;1pkt 1fpkt"];
2324--8876[label="0.0147059;1pkt 1fpkt"];
2324--8904[label="0.00854701;1pkt 1fpkt"];
2324--9044[label="0.0166667;2pkt 2fpkt"];
2324--9062[label="0.0377358;2pkt 2fpkt"];
2324--9114[label="0.0294118;1pkt 1fpkt"];
2324--9234[label="0.04;1pkt 1fpkt"];
2324--9311[label="0.0147059;1pkt 1fpkt"];
2324--9354[label="0.0212766;1pkt 1fpkt"];
2324--9397[label="0.0333333;1pkt 1fpkt"];
2324--9535[label="0.00833333;1pkt 1fpkt"];
2324--9542[label="0.025;3pkt 3fpkt"];
2324--9584[label="0.0222222;1pkt 1fpkt"];
2432--3296[label="0.0175439;1pkt 1fpkt"];
2432--5233[label="1;57pkt 57fpkt"];
2749--4373[label="1;127pkt 127fpkt"];
2749--7025[label="1;127pkt 127fpkt"];
2749--8850[label="1;127pkt 127fpkt"];
2831--2908[label="0.0888889;4pkt 4fpkt"];
2831--3054[label="0.211111;19pkt 19fpkt"];
2831--3908[label="0.5;1pkt 1fpkt"];
2831--6695[label="0.5;1pkt 1fpkt"];
3057--3296[label="0.025;2pkt 2fpkt"];
3057--5037[label="0.9875;79pkt 79fpkt"];
3954--6728[label="1;30pkt 30fpkt"];
3954--8655[label="1;30pkt 30fpkt"];
4075--6809[label="1;32pkt 32fpkt"];
4075--8710[label="1;31pkt 31fpkt"];
4078--6812[label="1;69pkt 69fpkt"];
4078--8713[label="1;68pkt 68fpkt"];
4109--6836[label="1;48pkt 48fpkt"];
4109--8729[label="1;47pkt 47fpkt"];
4373--7025[label="1;553pkt 553fpkt"];
4373--8850[label="1;554pkt 554fpkt"];
4642--7206[label="1;75pkt 75fpkt"];
4842--7357[label="1;21pkt 21fpkt"];
4861--7369[label="1;39pkt 39fpkt"];
4969--7443[label="1;34pkt 34fpkt"];
4969--9119[label="1;34pkt 34fpkt"];
5163--7582[label="1;28pkt 28fpkt"];
5806--8031[label="1;10pkt 10fpkt"];
5806--9500[label="1;10pkt 10fpkt"];
6728--8655[label="1;30pkt 30fpkt"];
6809--8710[label="1;31pkt 31fpkt"];
6812--8713[label="1;68pkt 68fpkt"];
6836--8729[label="1;47pkt 47fpkt"];
7025--8850[label="1;553pkt 553fpkt"];
7443--9119[label="1;34pkt 34fpkt"];
8031--9500[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.28.217.83"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1104{
style=filled;
color=gray75;
4376[label="32.214.22.84;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7028[label="32.214.22.84;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1104[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.214.22.84:*, 128.28.83.18:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1988: (5%)&lt;BR/&gt; 1987: (5%)&lt;BR/&gt; 1986: (5%)&lt;BR/&gt; 1983: (5%)&gt;];
}
4376--7028[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.18" dst_port="80" src_ip="32.214.22.84"/>
    </slice>
    <from sec="1144126846" usec="0"/>
    <to sec="1144127465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1105{
style=filled;
color=gray75;
4377[label="132.19.46.84;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7029[label="132.19.46.84;6pkt 6fpkt", shape=invtriangle, color=brown];
8853[label="132.19.46.84;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1105[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.46.84:*, 216.89.66.103:80}[66.6667%]&lt;BR/&gt;{132.19.46.84:*, 36.20.86.0:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1075: (8.82353%)&lt;BR/&gt; 1072: (8.82353%)&lt;BR/&gt; 1069: (8.82353%)&lt;BR/&gt; 1068: (8.82353%)&gt;];
}
4377--7029[label="1;6pkt 6fpkt"];
4377--8853[label="1;5pkt 5fpkt"];
7029--8853[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="216.89.66.103" dst_port="80" src_ip="132.19.46.84"/>
      <filter dst_ip="36.20.86.0" dst_port="80" src_ip="132.19.46.84"/>
    </slice>
    <from sec="1144127473" usec="0"/>
    <to sec="1144127508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1106{
style=filled;
color=gray75;
2219[label="132.19.97.84;s;24pkt 24fpkt", shape=diamond, color=yellow];
2600[label="195.14.32.133;d;5pkt 5fpkt", shape=diamond, color=yellow];
4382[label="132.19.97.84;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7034[label="132.19.97.84;28pkt 28fpkt", shape=invtriangle, color=brown];
stat1106[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.97.84:80, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0476%)&lt;BR/&gt; 25: (5.95238%)&lt;BR/&gt; 2563: (2.38095%)&lt;BR/&gt; 2529: (2.38095%)&lt;BR/&gt; 2468: (2.38095%)&gt;];
}
2219--2600[label="1;5pkt 5fpkt"];
2219--3288[label="0.0416667;1pkt 1fpkt"];
2219--3292[label="0.0416667;1pkt 1fpkt"];
2219--3303[label="0.0416667;1pkt 1fpkt"];
2219--4382[label="1;24pkt 24fpkt"];
2219--7034[label="1;24pkt 24fpkt"];
2600--3288[label="0.2;1pkt 1fpkt"];
2600--3292[label="0.2;1pkt 1fpkt"];
2600--3303[label="0.2;1pkt 1fpkt"];
2600--4382[label="1;5pkt 5fpkt"];
2600--7034[label="1;5pkt 5fpkt"];
4382--7034[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.97.84" src_port="80"/>
    </slice>
    <from sec="1144126825" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1107{
style=filled;
color=gray75;
2323[label="128.231.110.227;d;177pkt 177fpkt", shape=diamond, color=yellow];
stat1107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 128.231.110.227:1774}[45.7627%]&lt;BR/&gt;{*:*, 128.231.110.227:53}[40.678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.0452%)&lt;BR/&gt; 1774: (22.8814%)&lt;BR/&gt; 25: (5.64972%)&lt;BR/&gt; 0: (1.12994%)&lt;BR/&gt; 1025: (0.847458%)&gt;];
}
2323--2560[label="0.0151515;1pkt 1fpkt"];
2323--2916[label="0.00564972;1pkt 1fpkt"];
2323--3287[label="0.0112994;2pkt 2fpkt"];
2323--3290[label="0.0169492;3pkt 3fpkt"];
2323--3295[label="0.0112994;2pkt 2fpkt"];
2323--3302[label="0.0564972;10pkt 10fpkt"];
2323--3755[label="0.0166667;1pkt 1fpkt"];
2323--3760[label="0.0357143;1pkt 1fpkt"];
2323--3849[label="0.0116279;1pkt 1fpkt"];
2323--4143[label="0.0416667;1pkt 1fpkt"];
2323--4359[label="0.142857;1pkt 1fpkt"];
2323--4388[label="0.0151515;1pkt 1fpkt"];
2323--4400[label="0.05;1pkt 1fpkt"];
2323--4673[label="0.0243902;1pkt 1fpkt"];
2323--4691[label="0.0192308;1pkt 1fpkt"];
2323--5359[label="0.0625;2pkt 2fpkt"];
2323--5379[label="0.0666667;2pkt 2fpkt"];
2323--5508[label="0.00564972;1pkt 1fpkt"];
2323--5571[label="0.03125;1pkt 1fpkt"];
2323--5612[label="0.0666667;1pkt 1fpkt"];
2323--5625[label="0.0185185;1pkt 1fpkt"];
2323--6000[label="0.0294118;1pkt 1fpkt"];
2323--6099[label="0.0140845;1pkt 1fpkt"];
2323--6285[label="0.0909091;1pkt 1fpkt"];
2323--6593[label="0.0169492;1pkt 1fpkt"];
2323--7018[label="0.166667;1pkt 1fpkt"];
2323--7038[label="0.0153846;1pkt 1fpkt"];
2323--7049[label="0.0526316;1pkt 1fpkt"];
2323--7229[label="0.025;1pkt 1fpkt"];
2323--7245[label="0.0192308;1pkt 1fpkt"];
2323--7716[label="0.0645161;2pkt 2fpkt"];
2323--7815[label="0.00564972;1pkt 1fpkt"];
2323--7864[label="0.0322581;1pkt 1fpkt"];
2323--7894[label="0.0666667;1pkt 1fpkt"];
2323--7906[label="0.0185185;1pkt 1fpkt"];
2323--8168[label="0.030303;1pkt 1fpkt"];
2323--8381[label="0.0909091;1pkt 1fpkt"];
2323--8575[label="0.0166667;1pkt 1fpkt"];
2323--8845[label="0.142857;1pkt 1fpkt"];
2323--8859[label="0.0153846;1pkt 1fpkt"];
2323--8994[label="0.0192308;1pkt 1fpkt"];
2323--9299[label="0.0625;2pkt 2fpkt"];
2323--9419[label="0.0188679;1pkt 1fpkt"];
2323--9594[label="0.0294118;1pkt 1fpkt"];
2323--9740[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.227" dst_port="53"/>
      <filter dst_ip="128.231.110.227" dst_port="1774" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.94.16.85"/>
    </slice>
    <from sec="1144126847" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.216.123.85"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1110{
style=filled;
color=gray75;
4397[label="132.19.176.85;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7046[label="132.19.176.85;15pkt 15fpkt", shape=invtriangle, color=brown];
8866[label="132.19.176.85;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1110[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.176.85:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61520: (3.26087%)&lt;BR/&gt; 52934: (3.26087%)&lt;BR/&gt; 48777: (3.26087%)&lt;BR/&gt; 48136: (3.26087%)&gt;];
}
4397--7046[label="1;15pkt 15fpkt"];
4397--8866[label="1;15pkt 15fpkt"];
7046--8866[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.176.85" src_port="25"/>
    </slice>
    <from sec="1144126930" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1112{
style=filled;
color=gray75;
4404[label="215.58.48.86;198pkt 198fpkt", shape=pentagon, color=darkviolet];
7051[label="215.58.48.86;197pkt 197fpkt", shape=invtriangle, color=brown];
8868[label="215.58.48.86;198pkt 198fpkt", shape=invhouse, color=bisque];
stat1112[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.58.48.86:*, *:139}[58.0808%]&lt;BR/&gt;{215.58.48.86:*, *:445}[41.9192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (29.0051%)&lt;BR/&gt; 445: (20.9949%)&lt;BR/&gt; 3823: (0.505902%)&lt;BR/&gt; 3665: (0.505902%)&lt;BR/&gt; 3631: (0.505902%)&gt;];
}
4404--7051[label="1;197pkt 197fpkt"];
4404--8868[label="1;198pkt 198fpkt"];
7051--8868[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="215.58.48.86"/>
      <filter dst_port="445" src_ip="215.58.48.86"/>
    </slice>
    <from sec="1144127336" usec="0"/>
    <to sec="1144127399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.211.55.86"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45837,2.397,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1114{
style=filled;
color=gray75;
38[label="55.167.155.86s;253pkt 253fpkt", shape=rectangle, color=red];
4414[label="55.167.155.86;252pkt 252fpkt", shape=pentagon, color=darkviolet];
7057[label="55.167.155.86;251pkt 251fpkt", shape=invtriangle, color=brown];
8874[label="55.167.155.86;251pkt 251fpkt", shape=invhouse, color=bisque];
stat1114[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.167.155.86:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
38--4414[label="1;252pkt 252fpkt"];
38--7057[label="1;251pkt 251fpkt"];
38--8874[label="1;251pkt 251fpkt"];
4414--7057[label="1;251pkt 251fpkt"];
4414--8874[label="1;251pkt 251fpkt"];
7057--8874[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="55.167.155.86" src_port="1032"/>
    </slice>
    <from sec="1144127261" usec="0"/>
    <to sec="1144127277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1115{
style=filled;
color=gray75;
4418[label="161.223.52.87;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7059[label="161.223.52.87;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1115[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.52.87:60237, *:*}[88.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60237: (44.2308%)&lt;BR/&gt; 14596: (3.84615%)&lt;BR/&gt; 64931: (1.92308%)&lt;BR/&gt; 64299: (1.92308%)&lt;BR/&gt; 61393: (1.92308%)&gt;];
}
4418--7059[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.52.87" src_port="60237"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.18.84.87"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.193.147.88"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1118{
style=filled;
color=gray75;
1674[label="194.160.9.89;s;4pkt 4fpkt", shape=diamond, color=yellow];
4432[label="194.160.9.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7068[label="194.160.9.89;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1118[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.160.9.89:32806, 194.212.154.6:53}[25%]&lt;BR/&gt;{194.160.9.89:32806, 132.19.247.13:53}[25%]&lt;BR/&gt;{194.160.9.89:32806, 206.172.31.41:53}[25%]&lt;BR/&gt;{194.160.9.89:32806, 128.28.83.79:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32806: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
1674--1812[label="0.25;1pkt 1fpkt"];
1674--3290[label="0.25;1pkt 1fpkt"];
1674--3295[label="0.25;1pkt 1fpkt"];
1674--4432[label="1;1pkt 1fpkt"];
1674--7068[label="1;1pkt 1fpkt"];
4432--7068[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.79" dst_port="53" src_ip="194.160.9.89" src_port="32806"/>
      <filter dst_ip="206.172.31.41" dst_port="53" src_ip="194.160.9.89" src_port="32806"/>
      <filter dst_ip="132.19.247.13" dst_port="53" src_ip="194.160.9.89" src_port="32806"/>
      <filter dst_ip="194.212.154.6" dst_port="53" src_ip="194.160.9.89" src_port="32806"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1119{
style=filled;
color=gray75;
4435[label="214.204.61.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7071[label="214.204.61.89;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1119[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.204.61.89:15705, 147.13.231.15:2909}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15705: (50%)&lt;BR/&gt; 2909: (50%)&gt;];
}
4435--7071[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.231.15" dst_port="2909" src_ip="214.204.61.89" src_port="15705"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1120{
style=filled;
color=gray75;
4437[label="208.10.68.89;224pkt 224fpkt", shape=pentagon, color=darkviolet];
7072[label="208.10.68.89;223pkt 223fpkt", shape=invtriangle, color=brown];
8883[label="208.10.68.89;223pkt 223fpkt", shape=invhouse, color=bisque];
stat1120[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.10.68.89:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4437--7072[label="1;223pkt 223fpkt"];
4437--8883[label="1;223pkt 223fpkt"];
7072--8883[label="1;223pkt 223fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.10.68.89" src_port="1027"/>
    </slice>
    <from sec="1144127408" usec="0"/>
    <to sec="1144127444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1121{
style=filled;
color=gray75;
4452[label="83.66.128.90;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7080[label="83.66.128.90;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1121[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.66.128.90:*, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3790: (9.09091%)&lt;BR/&gt; 3757: (9.09091%)&lt;BR/&gt; 3711: (9.09091%)&lt;BR/&gt; 3706: (9.09091%)&gt;];
}
4452--7080[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="83.66.128.90"/>
    </slice>
    <from sec="1144127539" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.217.0.91"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.225.0.91"/>
    </slice>
    <from sec="1144126846" usec="0"/>
    <to sec="1144127216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1124{
style=filled;
color=gray75;
4460[label="132.19.51.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7086[label="132.19.51.91;2pkt 2fpkt", shape=invtriangle, color=brown];
8894[label="132.19.51.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1124[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.51.91:80, 196.206.212.19:16403}[50%]&lt;BR/&gt;{132.19.51.91:80, 196.206.212.19:16556}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 16556: (30%)&lt;BR/&gt; 16403: (20%)&gt;];
}
4460--7086[label="1;2pkt 2fpkt"];
4460--8894[label="1;1pkt 1fpkt"];
7086--8894[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.212.19" dst_port="16556" src_ip="132.19.51.91" src_port="80"/>
      <filter dst_ip="196.206.212.19" dst_port="16403" src_ip="132.19.51.91" src_port="80"/>
    </slice>
    <from sec="1144127550" usec="0"/>
    <to sec="1144127645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1125{
style=filled;
color=gray75;
4461[label="208.98.73.91;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7087[label="208.98.73.91;2pkt 2fpkt", shape=invtriangle, color=brown];
8895[label="208.98.73.91;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1125[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.98.73.91:2006, 147.13.220.153:21}[50%]&lt;BR/&gt;{208.98.73.91:2044, 147.13.220.153:53390}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53390: (25%)&lt;BR/&gt; 2044: (25%)&lt;BR/&gt; 2006: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
4461--7087[label="1;2pkt 2fpkt"];
4461--8895[label="1;2pkt 2fpkt"];
7087--8895[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="53390" src_ip="208.98.73.91" src_port="2044"/>
      <filter dst_ip="147.13.220.153" dst_port="21" src_ip="208.98.73.91" src_port="2006"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.69.166.91"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.50.76.92"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144126911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1128{
style=filled;
color=gray75;
4476[label="128.28.230.92;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7094[label="128.28.230.92;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1128[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.230.92:*, 208.172.13.176:80}[50%]&lt;BR/&gt;{128.28.230.92:*, 39.64.58.24:80}[41.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 3146: (4.34783%)&lt;BR/&gt; 3145: (4.34783%)&lt;BR/&gt; 3144: (4.34783%)&lt;BR/&gt; 3143: (4.34783%)&gt;];
}
4476--7094[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="208.172.13.176" dst_port="80" src_ip="128.28.230.92"/>
      <filter dst_ip="39.64.58.24" dst_port="80" src_ip="128.28.230.92"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1129{
style=filled;
color=gray75;
4486[label="82.177.196.93;206pkt 206fpkt", shape=pentagon, color=darkviolet];
7101[label="82.177.196.93;207pkt 207fpkt", shape=invtriangle, color=brown];
8900[label="82.177.196.93;207pkt 207fpkt", shape=invhouse, color=bisque];
stat1129[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.177.196.93:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4486--7101[label="1;206pkt 206fpkt"];
4486--8900[label="1;206pkt 206fpkt"];
7101--8900[label="1;207pkt 207fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.177.196.93" src_port="1030"/>
    </slice>
    <from sec="1144127097" usec="0"/>
    <to sec="1144127133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.23.238.93"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1131{
style=filled;
color=gray75;
340[label="164.23.208.94;s;2546pkt 2546fpkt", shape=diamond, color=yellow];
1954[label="210.234.233.84;d;4pkt 4fpkt", shape=diamond, color=yellow];
2238[label="216.210.63.6;d;6pkt 6fpkt", shape=diamond, color=yellow];
2251[label="194.251.77.75;d;32pkt 32fpkt", shape=diamond, color=yellow];
3010[label="164.23.208.94;s;1875pkt 1875fpkt", shape=hexagon, color=black];
4491[label="164.23.208.94;2709pkt 2709fpkt", shape=pentagon, color=darkviolet];
4659[label="162.57.172.110;113pkt 113fpkt", shape=pentagon, color=darkviolet];
7106[label="164.23.208.94;2710pkt 2710fpkt", shape=invtriangle, color=brown];
8903[label="164.23.208.94;2710pkt 2710fpkt", shape=invhouse, color=bisque];
stat1131[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.208.94:53679, *:53}[47.6407%]&lt;BR/&gt;{164.23.208.94:53, *:*}[47.0465%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.3144%)&lt;BR/&gt; 53679: (25.0846%)&lt;BR/&gt; 32768: (1.20031%)&lt;BR/&gt; 32769: (0.381739%)&lt;BR/&gt; 33701: (0.287288%)&gt;];
}
340--722[label="0.0228013;7pkt 7fpkt"];
340--906[label="0.00568182;1pkt 1fpkt"];
340--1342[label="0.0030581;1pkt 1fpkt"];
340--1503[label="0.00274725;1pkt 1fpkt"];
340--1564[label="0.125;1pkt 1fpkt"];
340--1811[label="0.0060241;1pkt 1fpkt"];
340--1818[label="0.0126582;1pkt 1fpkt"];
340--1864[label="0.00584795;1pkt 1fpkt"];
340--1900[label="0.0147059;1pkt 1fpkt"];
340--1930[label="0.00689655;1pkt 1fpkt"];
340--1954[label="0.25;1pkt 1fpkt"];
340--2178[label="0.00628931;1pkt 1fpkt"];
340--2238[label="0.166667;1pkt 1fpkt"];
340--2251[label="0.03125;1pkt 1fpkt"];
340--2378[label="0.0131579;1pkt 1fpkt"];
340--2515[label="0.00571429;1pkt 1fpkt"];
340--2522[label="0.00641026;1pkt 1fpkt"];
340--2564[label="0.00584795;1pkt 1fpkt"];
340--2961[label="0.00653595;1pkt 1fpkt"];
340--3010[label="1;1875pkt 1875fpkt"];
340--3287[label="0.0357423;91pkt 91fpkt"];
340--3290[label="0.0730558;186pkt 186fpkt"];
340--3295[label="0.101335;258pkt 258fpkt"];
340--3302[label="0.04674;119pkt 119fpkt"];
340--4491[label="0.999607;2545pkt 2545fpkt"];
340--7106[label="1;2546pkt 2546fpkt"];
340--8903[label="1;2546pkt 2546fpkt"];
1954--1969[label="1;1pkt 1fpkt"];
1954--3010[label="0.25;1pkt 1fpkt"];
1954--3031[label="0.25;1pkt 1fpkt"];
1954--3290[label="0.5;2pkt 2fpkt"];
1954--4491[label="0.25;1pkt 1fpkt"];
1954--4797[label="0.25;1pkt 1fpkt"];
1954--5686[label="1;1pkt 1fpkt"];
1954--7106[label="0.25;1pkt 1fpkt"];
1954--7324[label="0.25;1pkt 1fpkt"];
1954--8903[label="0.25;1pkt 1fpkt"];
1954--9046[label="0.25;1pkt 1fpkt"];
2238--2794[label="0.166667;1pkt 1fpkt"];
2238--3010[label="0.166667;1pkt 1fpkt"];
2238--3113[label="0.166667;1pkt 1fpkt"];
2238--3292[label="0.166667;1pkt 1fpkt"];
2238--3303[label="0.166667;1pkt 1fpkt"];
2238--4491[label="0.166667;1pkt 1fpkt"];
2238--4659[label="0.166667;1pkt 1fpkt"];
2238--4914[label="0.166667;1pkt 1fpkt"];
2238--5591[label="0.166667;1pkt 1fpkt"];
2238--5656[label="0.166667;1pkt 1fpkt"];
2238--7106[label="0.166667;1pkt 1fpkt"];
2238--7411[label="0.166667;1pkt 1fpkt"];
2238--8903[label="0.166667;1pkt 1fpkt"];
2238--9098[label="0.166667;1pkt 1fpkt"];
2251--3010[label="0.03125;1pkt 1fpkt"];
2251--3296[label="0.03125;1pkt 1fpkt"];
2251--4491[label="0.03125;1pkt 1fpkt"];
2251--5888[label="0.96875;31pkt 31fpkt"];
2251--7106[label="0.03125;1pkt 1fpkt"];
2251--8091[label="0.96875;31pkt 31fpkt"];
2251--8903[label="0.03125;1pkt 1fpkt"];
2251--9542[label="0.96875;31pkt 31fpkt"];
3010--3287[label="0.0485333;91pkt 91fpkt"];
3010--3290[label="0.0992;186pkt 186fpkt"];
3010--3295[label="0.1024;192pkt 192fpkt"];
3010--3302[label="0.0298667;56pkt 56fpkt"];
3010--4491[label="0.999467;1874pkt 1874fpkt"];
3010--7106[label="1;1875pkt 1875fpkt"];
3010--8903[label="1;1875pkt 1875fpkt"];
4491--7106[label="1;2709pkt 2709fpkt"];
4491--8903[label="1;2709pkt 2709fpkt"];
7106--8903[label="1;2710pkt 2710fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.208.94" src_port="53"/>
      <filter dst_port="53" src_ip="164.23.208.94" src_port="53679"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1132{
style=filled;
color=gray75;
4497[label="132.19.201.95;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7109[label="132.19.201.95;17pkt 17fpkt", shape=invtriangle, color=brown];
8906[label="132.19.201.95;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1132[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.201.95:*, 216.163.54.24:80}[58.8235%]&lt;BR/&gt;{132.19.201.95:*, 202.150.169.141:8080}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 8080: (14.7059%)&lt;BR/&gt; 2901: (2.94118%)&lt;BR/&gt; 2900: (2.94118%)&lt;BR/&gt; 2898: (2.94118%)&gt;];
}
4497--7109[label="1;17pkt 17fpkt"];
4497--8906[label="1;17pkt 17fpkt"];
7109--8906[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="216.163.54.24" dst_port="80" src_ip="132.19.201.95"/>
      <filter dst_ip="202.150.169.141" dst_port="8080" src_ip="132.19.201.95"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1133{
style=filled;
color=gray75;
1408[label="128.28.216.95;s;112pkt 112fpkt", shape=diamond, color=yellow];
4499[label="128.28.216.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7110[label="128.28.216.95;2pkt 2fpkt", shape=invtriangle, color=brown];
8907[label="128.28.216.95;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1133[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.216.95:*, *:80}[78.5714%]&lt;BR/&gt;{128.28.216.95:*, *:443}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6552%)&lt;BR/&gt; 443: (10.3448%)&lt;BR/&gt; 38268: (1.72414%)&lt;BR/&gt; 37861: (0.862069%)&lt;BR/&gt; 38553: (0.431034%)&gt;];
}
1408--1425[label="0.00892857;1pkt 1fpkt"];
1408--1513[label="0.0178571;2pkt 2fpkt"];
1408--1517[label="0.00892857;1pkt 1fpkt"];
1408--1531[label="0.00892857;1pkt 1fpkt"];
1408--1555[label="0.00934579;1pkt 1fpkt"];
1408--1679[label="0.0267857;3pkt 3fpkt"];
1408--1894[label="0.0740741;2pkt 2fpkt"];
1408--1965[label="0.0714286;8pkt 8fpkt"];
1408--2139[label="0.0736842;7pkt 7fpkt"];
1408--2175[label="0.027027;1pkt 1fpkt"];
1408--2215[label="0.0235294;2pkt 2fpkt"];
1408--2324[label="0.00892857;1pkt 1fpkt"];
1408--2441[label="0.0714286;2pkt 2fpkt"];
1408--2574[label="0.0121951;1pkt 1fpkt"];
1408--2878[label="1;66pkt 66fpkt"];
1408--3296[label="0.0982143;11pkt 11fpkt"];
1408--4499[label="1;1pkt 1fpkt"];
1408--7110[label="1;2pkt 2fpkt"];
1408--8907[label="1;1pkt 1fpkt"];
4499--7110[label="1;1pkt 1fpkt"];
4499--8907[label="1;1pkt 1fpkt"];
7110--8907[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.28.216.95"/>
      <filter dst_port="443" src_ip="128.28.216.95"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.6.28.96"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,012,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1135{
style=filled;
color=gray75;
1881[label="194.212.149.96;s;4pkt 4fpkt", shape=diamond, color=yellow];
4508[label="194.212.149.96;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7116[label="194.212.149.96;4pkt 4fpkt", shape=invtriangle, color=brown];
8910[label="194.212.149.96;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1135[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.149.96:208, 213.96.35.24:80}[25%]&lt;BR/&gt;{194.212.149.96:80, 55.116.87.169:3686}[25%]&lt;BR/&gt;{194.212.149.96:0, 216.49.89.4:0}[25%]&lt;BR/&gt;{194.212.149.96:135, 216.49.89.4:51888}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (26.6667%)&lt;BR/&gt; 80: (23.3333%)&lt;BR/&gt; 51888: (13.3333%)&lt;BR/&gt; 3686: (13.3333%)&lt;BR/&gt; 135: (13.3333%)&gt;];
}
1881--3288[label="0.25;1pkt 1fpkt"];
1881--3292[label="0.25;1pkt 1fpkt"];
1881--3303[label="0.25;1pkt 1fpkt"];
1881--4508[label="1;3pkt 3fpkt"];
1881--7116[label="1;4pkt 4fpkt"];
1881--8910[label="1;4pkt 4fpkt"];
4508--7116[label="1;3pkt 3fpkt"];
4508--8910[label="1;3pkt 3fpkt"];
7116--8910[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="216.49.89.4" dst_port="51888" src_ip="194.212.149.96" src_port="135"/>
      <filter dst_ip="216.49.89.4" src_ip="194.212.149.96"/>
      <filter dst_ip="55.116.87.169" dst_port="3686" src_ip="194.212.149.96" src_port="80"/>
      <filter dst_ip="213.96.35.24" dst_port="80" src_ip="194.212.149.96" src_port="208"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1136{
style=filled;
color=gray75;
4515[label="132.19.80.97;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7121[label="132.19.80.97;21pkt 21fpkt", shape=invtriangle, color=brown];
8913[label="132.19.80.97;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1136[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.80.97:53, *:*}[47.619%]&lt;BR/&gt;{132.19.80.97:*, *:25}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (23.8095%)&lt;BR/&gt; 25: (16.6667%)&lt;BR/&gt; 80: (9.52381%)&lt;BR/&gt; 62575: (2.38095%)&lt;BR/&gt; 53535: (2.38095%)&gt;];
}
4515--7121[label="1;21pkt 21fpkt"];
4515--8913[label="1;21pkt 21fpkt"];
7121--8913[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.80.97" src_port="53"/>
      <filter dst_port="25" src_ip="132.19.80.97"/>
    </slice>
    <from sec="1144126893" usec="0"/>
    <to sec="1144127488" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.988682,2.35072,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1137{
style=filled;
color=gray75;
1616[label="195.80.155.97;s;20pkt 20fpkt", shape=diamond, color=yellow];
1617[label="210.163.164.136;d;2pkt 2fpkt", shape=diamond, color=yellow];
2959[label="195.80.155.97;s;20pkt 20fpkt", shape=hexagon, color=black];
stat1137[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.155.97:*, 219.72.137.176:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 21978: (7.14286%)&lt;BR/&gt; 63827: (3.57143%)&lt;BR/&gt; 53930: (3.57143%)&lt;BR/&gt; 64113: (2.38095%)&gt;];
}
1616--1617[label="1;2pkt 2fpkt"];
1616--1631[label="0.05;1pkt 1fpkt"];
1616--1731[label="0.1;2pkt 2fpkt"];
1616--2186[label="0.1;2pkt 2fpkt"];
1616--2959[label="1;20pkt 20fpkt"];
1616--3296[label="0.05;1pkt 1fpkt"];
1616--4516[label="1;20pkt 20fpkt"];
1616--7122[label="1;19pkt 19fpkt"];
1616--8914[label="1;20pkt 20fpkt"];
1617--2959[label="1;2pkt 2fpkt"];
1617--4516[label="1;2pkt 2fpkt"];
1617--7122[label="1;2pkt 2fpkt"];
1617--8914[label="1;2pkt 2fpkt"];
2959--3296[label="0.05;1pkt 1fpkt"];
2959--4516[label="1;20pkt 20fpkt"];
2959--7122[label="1;19pkt 19fpkt"];
2959--8914[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="219.72.137.176" dst_port="80" src_ip="195.80.155.97"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.144.180.97"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1139{
style=filled;
color=gray75;
4521[label="132.19.225.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7126[label="132.19.225.97;3pkt 3fpkt", shape=invtriangle, color=brown];
8918[label="132.19.225.97;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1139[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.225.97:80, 41.25.162.84:48553}[33.3333%]&lt;BR/&gt;{132.19.225.97:80, 41.25.164.190:59667}[33.3333%]&lt;BR/&gt;{132.19.225.97:80, 32.136.164.218:56820}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59667: (21.4286%)&lt;BR/&gt; 48553: (21.4286%)&lt;BR/&gt; 56820: (7.14286%)&gt;];
}
4521--7126[label="1;2pkt 2fpkt"];
4521--8918[label="1;2pkt 2fpkt"];
7126--8918[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.136.164.218" dst_port="56820" src_ip="132.19.225.97" src_port="80"/>
      <filter dst_ip="41.25.164.190" dst_port="59667" src_ip="132.19.225.97" src_port="80"/>
      <filter dst_ip="41.25.162.84" dst_port="48553" src_ip="132.19.225.97" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1140{
style=filled;
color=gray75;
4528[label="210.164.149.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7132[label="210.164.149.98;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1140[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.164.149.98:80, 132.19.219.66:49613}[50%]&lt;BR/&gt;{210.164.149.98:80, 132.19.219.66:49622}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49622: (25%)&lt;BR/&gt; 49613: (25%)&gt;];
}
4528--7132[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.219.66" dst_port="49622" src_ip="210.164.149.98" src_port="80"/>
      <filter dst_ip="132.19.219.66" dst_port="49613" src_ip="210.164.149.98" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="132.19.192.98"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1142{
style=filled;
color=gray75;
2637[label="132.19.222.98;s;38pkt 38fpkt", shape=diamond, color=yellow];
4535[label="132.19.222.98;42pkt 42fpkt", shape=pentagon, color=darkviolet];
7138[label="132.19.222.98;41pkt 41fpkt", shape=invtriangle, color=brown];
8925[label="132.19.222.98;42pkt 42fpkt", shape=invhouse, color=bisque];
stat1142[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.222.98:*, 38.51.111.158:80}[59.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.773%)&lt;BR/&gt; 1201: (1.22699%)&lt;BR/&gt; 1200: (1.22699%)&lt;BR/&gt; 1178: (1.22699%)&lt;BR/&gt; 1177: (1.22699%)&gt;];
}
2637--3296[label="0.157895;6pkt 6fpkt"];
2637--4535[label="1;38pkt 38fpkt"];
2637--7138[label="0.973684;37pkt 37fpkt"];
2637--8925[label="1;38pkt 38fpkt"];
4535--7138[label="1;41pkt 41fpkt"];
4535--8925[label="1;42pkt 42fpkt"];
7138--8925[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="38.51.111.158" dst_port="80" src_ip="132.19.222.98"/>
    </slice>
    <from sec="1144127341" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1143{
style=filled;
color=gray75;
4537[label="164.23.232.98;41pkt 41fpkt", shape=pentagon, color=darkviolet];
7140[label="164.23.232.98;41pkt 41fpkt", shape=invtriangle, color=brown];
8927[label="164.23.232.98;41pkt 41fpkt", shape=invhouse, color=bisque];
stat1143[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.232.98:*, 198.212.69.159:5190}[46.3415%]&lt;BR/&gt;{164.23.232.98:*, 198.212.106.28:5190}[29.2683%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5190: (50%)&lt;BR/&gt; 2011: (1.21951%)&lt;BR/&gt; 2010: (1.21951%)&lt;BR/&gt; 2009: (1.21951%)&lt;BR/&gt; 2006: (1.21951%)&gt;];
}
4537--7140[label="1;41pkt 41fpkt"];
4537--8927[label="1;41pkt 41fpkt"];
7140--8927[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="198.212.69.159" dst_port="5190" src_ip="164.23.232.98"/>
      <filter dst_ip="198.212.106.28" dst_port="5190" src_ip="164.23.232.98"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.78.135.99"/>
    </slice>
    <from sec="1144126949" usec="0"/>
    <to sec="1144126989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1145{
style=filled;
color=gray75;
4545[label="161.223.52.100;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7145[label="161.223.52.100;2pkt 2fpkt", shape=invtriangle, color=brown];
8932[label="161.223.52.100;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1145[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.52.100:80, 41.25.103.98:57998}[50%]&lt;BR/&gt;{161.223.52.100:80, 41.25.162.135:41033}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41033: (37.5%)&lt;BR/&gt; 57998: (12.5%)&gt;];
}
4545--7145[label="1;1pkt 1fpkt"];
4545--8932[label="1;1pkt 1fpkt"];
7145--8932[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.25.162.135" dst_port="41033" src_ip="161.223.52.100" src_port="80"/>
      <filter dst_ip="41.25.103.98" dst_port="57998" src_ip="161.223.52.100" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1146{
style=filled;
color=gray75;
2478[label="132.19.142.200;d;91pkt 91fpkt", shape=diamond, color=yellow];
4561[label="210.91.192.101;93pkt 93fpkt", shape=pentagon, color=darkviolet];
7155[label="210.91.192.101;93pkt 93fpkt", shape=invtriangle, color=brown];
8940[label="210.91.192.101;92pkt 92fpkt", shape=invhouse, color=bisque];
stat1146[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.91.192.101:80, 132.19.142.200:*}[93.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5095%)&lt;BR/&gt; 53: (1.49051%)&lt;BR/&gt; 56271: (1.08401%)&lt;BR/&gt; 1916: (0.542005%)&lt;BR/&gt; 1914: (0.542005%)&gt;];
}
2478--3292[label="0.703297;64pkt 64fpkt"];
2478--3303[label="0.703297;64pkt 64fpkt"];
2478--4561[label="0.978022;89pkt 89fpkt"];
2478--7155[label="0.978022;89pkt 89fpkt"];
2478--8940[label="0.978022;89pkt 89fpkt"];
4561--7155[label="1;93pkt 93fpkt"];
4561--8940[label="1;92pkt 92fpkt"];
7155--8940[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.142.200" src_ip="210.91.192.101" src_port="80"/>
    </slice>
    <from sec="1144127415" usec="0"/>
    <to sec="1144127531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1147{
style=filled;
color=gray75;
4565[label="213.180.46.102;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7158[label="213.180.46.102;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1147[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.180.46.102:*, 147.13.220.153:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60786: (3.44828%)&lt;BR/&gt; 60779: (3.44828%)&lt;BR/&gt; 60767: (3.44828%)&lt;BR/&gt; 60763: (3.44828%)&gt;];
}
4565--7158[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="213.180.46.102"/>
    </slice>
    <from sec="1144127660" usec="0"/>
    <to sec="1144127676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1148{
style=filled;
color=gray75;
4572[label="41.8.43.103;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7163[label="41.8.43.103;8pkt 8fpkt", shape=invtriangle, color=brown];
8942[label="41.8.43.103;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1148[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.8.43.103:80, 161.223.222.146:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1549: (6%)&lt;BR/&gt; 1546: (6%)&lt;BR/&gt; 1545: (6%)&lt;BR/&gt; 1544: (6%)&gt;];
}
4572--7163[label="1;8pkt 8fpkt"];
4572--8942[label="1;8pkt 8fpkt"];
7163--8942[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.222.146" src_ip="41.8.43.103" src_port="80"/>
    </slice>
    <from sec="1144127184" usec="0"/>
    <to sec="1144127324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1149{
style=filled;
color=gray75;
4573[label="216.89.66.103;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7164[label="216.89.66.103;3pkt 3fpkt", shape=invtriangle, color=brown];
8943[label="216.89.66.103;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1149[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.89.66.103:80, 132.19.46.84:1068}[25%]&lt;BR/&gt;{216.89.66.103:80, 132.19.46.84:1069}[25%]&lt;BR/&gt;{216.89.66.103:80, 132.19.46.84:1072}[25%]&lt;BR/&gt;{216.89.66.103:80, 132.19.46.84:1075}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1075: (15%)&lt;BR/&gt; 1072: (15%)&lt;BR/&gt; 1069: (15%)&lt;BR/&gt; 1068: (5%)&gt;];
}
4573--7164[label="1;3pkt 3fpkt"];
4573--8943[label="1;3pkt 3fpkt"];
7164--8943[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.46.84" dst_port="1075" src_ip="216.89.66.103" src_port="80"/>
      <filter dst_ip="132.19.46.84" dst_port="1072" src_ip="216.89.66.103" src_port="80"/>
      <filter dst_ip="132.19.46.84" dst_port="1069" src_ip="216.89.66.103" src_port="80"/>
      <filter dst_ip="132.19.46.84" dst_port="1068" src_ip="216.89.66.103" src_port="80"/>
    </slice>
    <from sec="1144127484" usec="0"/>
    <to sec="1144127508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.101.159.103"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1151{
style=filled;
color=gray75;
4580[label="37.202.173.103;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7170[label="37.202.173.103;4pkt 4fpkt", shape=invtriangle, color=brown];
8947[label="37.202.173.103;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1151[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.173.103:80, 132.19.137.56:49154}[25%]&lt;BR/&gt;{37.202.173.103:80, 132.19.137.56:49155}[25%]&lt;BR/&gt;{37.202.173.103:80, 132.19.137.56:49156}[25%]&lt;BR/&gt;{37.202.173.103:80, 132.19.137.56:49157}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49157: (13.6364%)&lt;BR/&gt; 49156: (13.6364%)&lt;BR/&gt; 49155: (13.6364%)&lt;BR/&gt; 49154: (9.09091%)&gt;];
}
4580--7170[label="1;4pkt 4fpkt"];
4580--8947[label="1;3pkt 3fpkt"];
7170--8947[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.137.56" dst_port="49157" src_ip="37.202.173.103" src_port="80"/>
      <filter dst_ip="132.19.137.56" dst_port="49156" src_ip="37.202.173.103" src_port="80"/>
      <filter dst_ip="132.19.137.56" dst_port="49155" src_ip="37.202.173.103" src_port="80"/>
      <filter dst_ip="132.19.137.56" dst_port="49154" src_ip="37.202.173.103" src_port="80"/>
    </slice>
    <from sec="1144127030" usec="0"/>
    <to sec="1144127052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1152{
style=filled;
color=gray75;
1262[label="132.19.80.104;s;52pkt 52fpkt", shape=diamond, color=yellow];
4586[label="132.19.80.104;56pkt 56fpkt", shape=pentagon, color=darkviolet];
7173[label="132.19.80.104;57pkt 57fpkt", shape=invtriangle, color=brown];
stat1152[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.80.104:6346, *:*}[68.4211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (41.5152%)&lt;BR/&gt; 6348: (7.57576%)&lt;BR/&gt; 59995: (0.909091%)&lt;BR/&gt; 59994: (0.909091%)&lt;BR/&gt; 59993: (0.909091%)&gt;];
}
1262--4586[label="0.980769;51pkt 51fpkt"];
1262--7173[label="1;52pkt 52fpkt"];
4586--7173[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.80.104" src_port="6346"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1153{
style=filled;
color=gray75;
392[label="128.28.168.104;s;130pkt 130fpkt", shape=diamond, color=yellow];
4594[label="128.28.168.104;134pkt 134fpkt", shape=pentagon, color=darkviolet];
7179[label="128.28.168.104;134pkt 134fpkt", shape=invtriangle, color=brown];
8953[label="128.28.168.104;134pkt 134fpkt", shape=invhouse, color=bisque];
stat1153[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.168.104:*, 196.206.189.75:80}[54.0741%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8647%)&lt;BR/&gt; 0: (3.7594%)&lt;BR/&gt; 443: (2.25564%)&lt;BR/&gt; 4939: (0.37594%)&lt;BR/&gt; 4916: (0.37594%)&gt;];
}
392--602[label="0.0909091;8pkt 8fpkt"];
392--736[label="0.24;6pkt 6fpkt"];
392--792[label="0.0384615;5pkt 5fpkt"];
392--1292[label="0.0294118;1pkt 1fpkt"];
392--1442[label="0.242424;8pkt 8fpkt"];
392--1531[label="0.00769231;1pkt 1fpkt"];
392--1921[label="0.0230769;3pkt 3fpkt"];
392--2167[label="0.783133;65pkt 65fpkt"];
392--2555[label="0.00769231;1pkt 1fpkt"];
392--2574[label="0.0121951;1pkt 1fpkt"];
392--3296[label="0.0384615;5pkt 5fpkt"];
392--4594[label="0.992308;129pkt 129fpkt"];
392--7179[label="0.992308;129pkt 129fpkt"];
392--8953[label="0.992308;129pkt 129fpkt"];
4594--7179[label="1;134pkt 134fpkt"];
4594--8953[label="1;134pkt 134fpkt"];
7179--8953[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.189.75" dst_port="80" src_ip="128.28.168.104"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1154{
style=filled;
color=gray75;
4609[label="83.119.247.105;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7186[label="83.119.247.105;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1154[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.119.247.105:*, 132.19.69.143:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4937: (3.7037%)&lt;BR/&gt; 4935: (3.7037%)&lt;BR/&gt; 4888: (3.7037%)&lt;BR/&gt; 4879: (3.7037%)&gt;];
}
4609--7186[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.69.143" dst_port="80" src_ip="83.119.247.105"/>
    </slice>
    <from sec="1144126861" usec="0"/>
    <to sec="1144127094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1155{
style=filled;
color=gray75;
4611[label="84.35.38.106;129pkt 129fpkt", shape=pentagon, color=darkviolet];
7187[label="84.35.38.106;129pkt 129fpkt", shape=invtriangle, color=brown];
stat1155[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.35.38.106:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4611--7187[label="1;129pkt 129fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.35.38.106" src_port="1027"/>
    </slice>
    <from sec="1144126850" usec="0"/>
    <to sec="1144126871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1156{
style=filled;
color=gray75;
2193[label="194.212.159.106;s;206pkt 206fpkt", shape=diamond, color=yellow];
4618[label="194.212.159.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7193[label="194.212.159.106;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1156[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.159.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2193--2331[label="0.00485437;1pkt 1fpkt"];
2193--4618[label="1;2pkt 2fpkt"];
2193--7193[label="1;2pkt 2fpkt"];
4618--7193[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.159.106"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1157{
style=filled;
color=gray75;
4619[label="128.202.182.106;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7194[label="128.202.182.106;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1157[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.182.106:1834, 38.192.172.10:80}[33.3333%]&lt;BR/&gt;{128.202.182.106:1830, 198.212.108.90:80}[33.3333%]&lt;BR/&gt;{128.202.182.106:1833, 198.212.108.90:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1834: (16.6667%)&lt;BR/&gt; 1833: (16.6667%)&lt;BR/&gt; 1830: (16.6667%)&gt;];
}
4619--7194[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="198.212.108.90" dst_port="80" src_ip="128.202.182.106" src_port="1833"/>
      <filter dst_ip="198.212.108.90" dst_port="80" src_ip="128.202.182.106" src_port="1830"/>
      <filter dst_ip="38.192.172.10" dst_port="80" src_ip="128.202.182.106" src_port="1834"/>
    </slice>
    <from sec="1144127631" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.70.140.107"/>
    </slice>
    <from sec="1144126818" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1159{
style=filled;
color=gray75;
1583[label="215.42.76.108;s;938pkt 938fpkt", shape=diamond, color=yellow];
4638[label="215.42.76.108;1012pkt 1012fpkt", shape=pentagon, color=darkviolet];
7205[label="215.42.76.108;1011pkt 1011fpkt", shape=invtriangle, color=brown];
stat1159[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.42.76.108:2053, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2053: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1583--4638[label="1;938pkt 938fpkt"];
1583--7205[label="0.998934;937pkt 937fpkt"];
4638--7205[label="1;1011pkt 1011fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.42.76.108" src_port="2053"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1160{
style=filled;
color=gray75;
4652[label="214.51.70.110;173pkt 173fpkt", shape=pentagon, color=darkviolet];
7214[label="214.51.70.110;173pkt 173fpkt", shape=invtriangle, color=brown];
stat1160[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.51.70.110:*, *:1026}[46.2428%]&lt;BR/&gt;{214.51.70.110:41890, *:*}[30.6358%]&lt;BR/&gt;{214.51.70.110:41891, *:*}[29.4798%]&lt;BR/&gt;{214.51.70.110:46285, *:1027}[26.5896%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (26.8786%)&lt;BR/&gt; 1026: (23.1214%)&lt;BR/&gt; 46285: (19.9422%)&lt;BR/&gt; 41890: (15.3179%)&lt;BR/&gt; 41891: (14.7399%)&gt;];
}
4652--7214[label="1;173pkt 173fpkt"];
</description>
    <slice>
      <filter src_ip="214.51.70.110" src_port="41890"/>
      <filter src_ip="214.51.70.110" src_port="41891"/>
      <filter dst_port="1026" src_ip="214.51.70.110"/>
      <filter dst_port="1027" src_ip="214.51.70.110" src_port="46285"/>
    </slice>
    <from sec="1144127010" usec="0"/>
    <to sec="1144127637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1161{
style=filled;
color=gray75;
4653[label="84.153.72.110;124pkt 124fpkt", shape=pentagon, color=darkviolet];
7215[label="84.153.72.110;124pkt 124fpkt", shape=invtriangle, color=brown];
8974[label="84.153.72.110;124pkt 124fpkt", shape=invhouse, color=bisque];
stat1161[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.153.72.110:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4653--7215[label="1;124pkt 124fpkt"];
4653--8974[label="1;124pkt 124fpkt"];
7215--8974[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="84.153.72.110" src_port="1030"/>
    </slice>
    <from sec="1144127429" usec="0"/>
    <to sec="1144127467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1162{
style=filled;
color=gray75;
4654[label="132.19.80.110;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7216[label="132.19.80.110;13pkt 13fpkt", shape=invtriangle, color=brown];
stat1162[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.80.110:80, 80.175.51.25:*}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62430: (4%)&lt;BR/&gt; 61150: (4%)&lt;BR/&gt; 60894: (4%)&lt;BR/&gt; 53615: (4%)&gt;];
}
4654--7216[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="80.175.51.25" src_ip="132.19.80.110" src_port="80"/>
    </slice>
    <from sec="1144127062" usec="0"/>
    <to sec="1144127666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.153.122.110"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.142.202.110"/>
    </slice>
    <from sec="1144126981" usec="0"/>
    <to sec="1144127024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1165{
style=filled;
color=gray75;
4662[label="132.18.203.110;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7220[label="132.18.203.110;7pkt 7fpkt", shape=invtriangle, color=brown];
8977[label="132.18.203.110;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1165[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.203.110:0, *:0}[42.8571%]&lt;BR/&gt;{132.18.203.110:*, *:53}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (45%)&lt;BR/&gt; 53: (22.5%)&lt;BR/&gt; 51645: (7.5%)&lt;BR/&gt; 46252: (7.5%)&lt;BR/&gt; 80: (7.5%)&gt;];
}
4662--7220[label="1;6pkt 6fpkt"];
4662--8977[label="1;6pkt 6fpkt"];
7220--8977[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="132.18.203.110"/>
      <filter src_ip="132.18.203.110"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1166{
style=filled;
color=gray75;
1725[label="214.51.228.110;s;17pkt 17fpkt", shape=diamond, color=yellow];
3068[label="214.51.228.110;s;16pkt 16fpkt", shape=hexagon, color=black];
4663[label="214.51.228.110;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7221[label="214.51.228.110;16pkt 16fpkt", shape=invtriangle, color=brown];
8978[label="214.51.228.110;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1166[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.51.228.110:*, 147.13.220.153:21}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (22.8395%)&lt;BR/&gt; 63828: (3.08642%)&lt;BR/&gt; 60919: (3.08642%)&lt;BR/&gt; 60764: (3.08642%)&lt;BR/&gt; 59740: (3.08642%)&gt;];
}
1725--2696[label="0.941176;16pkt 16fpkt"];
1725--3068[label="1;16pkt 16fpkt"];
1725--3259[label="0.941176;16pkt 16fpkt"];
1725--4663[label="1;16pkt 16fpkt"];
1725--7221[label="1;16pkt 16fpkt"];
1725--8978[label="1;16pkt 16fpkt"];
3068--3259[label="1;16pkt 16fpkt"];
3068--4663[label="0.9375;15pkt 15fpkt"];
3068--7221[label="0.9375;15pkt 15fpkt"];
3068--8978[label="0.9375;15pkt 15fpkt"];
4663--7221[label="1;16pkt 16fpkt"];
4663--8978[label="1;16pkt 16fpkt"];
7221--8978[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="21" src_ip="214.51.228.110"/>
    </slice>
    <from sec="1144126885" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.90.179.111"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.141.67.112"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1169{
style=filled;
color=gray75;
4680[label="128.231.108.112;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7236[label="128.231.108.112;5pkt 5fpkt", shape=invtriangle, color=brown];
8988[label="128.231.108.112;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1169[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.231.108.112:1528, 52.70.146.215:80}[20%]&lt;BR/&gt;{128.231.108.112:1474, 81.168.200.155:80}[20%]&lt;BR/&gt;{128.231.108.112:1486, 81.168.200.155:80}[20%]&lt;BR/&gt;{128.231.108.112:1496, 81.168.200.155:80}[20%]&lt;BR/&gt;{128.231.108.112:1499, 81.168.200.155:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1528: (10%)&lt;BR/&gt; 1499: (10%)&lt;BR/&gt; 1496: (10%)&lt;BR/&gt; 1486: (10%)&gt;];
}
4680--7236[label="1;5pkt 5fpkt"];
4680--8988[label="1;5pkt 5fpkt"];
7236--8988[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="81.168.200.155" dst_port="80" src_ip="128.231.108.112" src_port="1499"/>
      <filter dst_ip="81.168.200.155" dst_port="80" src_ip="128.231.108.112" src_port="1496"/>
      <filter dst_ip="81.168.200.155" dst_port="80" src_ip="128.231.108.112" src_port="1486"/>
      <filter dst_ip="81.168.200.155" dst_port="80" src_ip="128.231.108.112" src_port="1474"/>
      <filter dst_ip="52.70.146.215" dst_port="80" src_ip="128.231.108.112" src_port="1528"/>
    </slice>
    <from sec="1144127017" usec="0"/>
    <to sec="1144127290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1170{
style=filled;
color=gray75;
4696[label="82.106.8.114;139pkt 139fpkt", shape=pentagon, color=darkviolet];
7248[label="82.106.8.114;138pkt 138fpkt", shape=invtriangle, color=brown];
8996[label="82.106.8.114;139pkt 139fpkt", shape=invhouse, color=bisque];
stat1170[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.106.8.114:1028, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1028: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4696--7248[label="1;138pkt 138fpkt"];
4696--8996[label="1;139pkt 139fpkt"];
7248--8996[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="82.106.8.114" src_port="1028"/>
    </slice>
    <from sec="1144127020" usec="0"/>
    <to sec="1144127046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.163.19.114"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.169.184.114"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1173{
style=filled;
color=gray75;
4709[label="209.126.33.116;217pkt 217fpkt", shape=pentagon, color=darkviolet];
7256[label="209.126.33.116;218pkt 218fpkt", shape=invtriangle, color=brown];
9001[label="209.126.33.116;217pkt 217fpkt", shape=invhouse, color=bisque];
stat1173[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.126.33.116:1090, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1090: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4709--7256[label="1;217pkt 217fpkt"];
4709--9001[label="1;217pkt 217fpkt"];
7256--9001[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="209.126.33.116" src_port="1090"/>
    </slice>
    <from sec="1144127499" usec="0"/>
    <to sec="1144127513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.140.109.116"/>
    </slice>
    <from sec="1144126842" usec="0"/>
    <to sec="1144126929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1175{
style=filled;
color=gray75;
4720[label="208.140.115.117;247pkt 247fpkt", shape=pentagon, color=darkviolet];
7265[label="208.140.115.117;247pkt 247fpkt", shape=invtriangle, color=brown];
stat1175[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.140.115.117:64443, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64443: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4720--7265[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.140.115.117" src_port="64443"/>
    </slice>
    <from sec="1144127451" usec="0"/>
    <to sec="1144127489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1176{
style=filled;
color=gray75;
4722[label="81.6.210.117;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7267[label="81.6.210.117;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1176[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.6.210.117:80, 195.89.105.214:58758}[20%]&lt;BR/&gt;{81.6.210.117:80, 195.89.105.214:62177}[20%]&lt;BR/&gt;{81.6.210.117:80, 195.89.105.214:62211}[20%]&lt;BR/&gt;{81.6.210.117:80, 195.89.105.214:64035}[20%]&lt;BR/&gt;{81.6.210.117:80, 195.89.105.214:64036}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64036: (11.1111%)&lt;BR/&gt; 64035: (11.1111%)&lt;BR/&gt; 62211: (11.1111%)&lt;BR/&gt; 62177: (11.1111%)&gt;];
}
4722--7267[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="64036" src_ip="81.6.210.117" src_port="80"/>
      <filter dst_ip="195.89.105.214" dst_port="64035" src_ip="81.6.210.117" src_port="80"/>
      <filter dst_ip="195.89.105.214" dst_port="62211" src_ip="81.6.210.117" src_port="80"/>
      <filter dst_ip="195.89.105.214" dst_port="62177" src_ip="81.6.210.117" src_port="80"/>
      <filter dst_ip="195.89.105.214" dst_port="58758" src_ip="81.6.210.117" src_port="80"/>
    </slice>
    <from sec="1144126916" usec="0"/>
    <to sec="1144127230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1177{
style=filled;
color=gray75;
4739[label="146.82.214.120;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7279[label="146.82.214.120;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1177[shape=component, label=&lt;Rules:&lt;BR/&gt;{146.82.214.120:80, 195.89.105.215:60525}[50%]&lt;BR/&gt;{146.82.214.120:80, 195.89.105.215:61454}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61454: (25%)&lt;BR/&gt; 60525: (25%)&gt;];
}
4739--7279[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" dst_port="61454" src_ip="146.82.214.120" src_port="80"/>
      <filter dst_ip="195.89.105.215" dst_port="60525" src_ip="146.82.214.120" src_port="80"/>
    </slice>
    <from sec="1144127511" usec="0"/>
    <to sec="1144127658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1178{
style=filled;
color=gray75;
4740[label="128.28.225.120;99pkt 99fpkt", shape=pentagon, color=darkviolet];
7280[label="128.28.225.120;99pkt 99fpkt", shape=invtriangle, color=brown];
9014[label="128.28.225.120;100pkt 100fpkt", shape=invhouse, color=bisque];
stat1178[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.225.120:3183, *:*}[94%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3183: (46.9799%)&lt;BR/&gt; 64653: (1.00671%)&lt;BR/&gt; 49523: (1.00671%)&lt;BR/&gt; 30609: (1.00671%)&lt;BR/&gt; 18895: (1.00671%)&gt;];
}
4740--7280[label="1;99pkt 99fpkt"];
4740--9014[label="1;99pkt 99fpkt"];
7280--9014[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.225.120" src_port="3183"/>
    </slice>
    <from sec="1144127434" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.20.7.121"/>
    </slice>
    <from sec="1144126850" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1180{
style=filled;
color=gray75;
4746[label="210.53.109.121;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7284[label="210.53.109.121;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1180[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.53.109.121:80, 161.223.52.31:3536}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3536: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4746--7284[label="1;1pkt 1fpkt"];
4746--9018[label="1;1pkt 1fpkt"];
7284--9018[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.52.31" dst_port="3536" src_ip="210.53.109.121" src_port="80"/>
    </slice>
    <from sec="1144127244" usec="0"/>
    <to sec="1144127262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.40.198.121"/>
    </slice>
    <from sec="1144127505" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1182{
style=filled;
color=gray75;
4758[label="39.12.147.122;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7293[label="39.12.147.122;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1182[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.12.147.122:80, 161.223.44.21:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32780: (5.26316%)&lt;BR/&gt; 32779: (5.26316%)&lt;BR/&gt; 32778: (5.26316%)&lt;BR/&gt; 32777: (5.26316%)&gt;];
}
4758--7293[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.44.21" src_ip="39.12.147.122" src_port="80"/>
    </slice>
    <from sec="1144127326" usec="0"/>
    <to sec="1144127362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1183{
style=filled;
color=gray75;
4760[label="210.88.156.122;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7295[label="210.88.156.122;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1183[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.88.156.122:80, 132.19.150.34:*}[33.3333%]&lt;BR/&gt;{210.88.156.122:80, 132.19.152.102:*}[27.7778%]&lt;BR/&gt;{210.88.156.122:80, 132.19.64.105:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1113: (5.55556%)&lt;BR/&gt; 57975: (2.77778%)&lt;BR/&gt; 57949: (2.77778%)&lt;BR/&gt; 57945: (2.77778%)&gt;];
}
4760--7295[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.150.34" src_ip="210.88.156.122" src_port="80"/>
      <filter dst_ip="132.19.64.105" src_ip="210.88.156.122" src_port="80"/>
      <filter dst_ip="132.19.152.102" src_ip="210.88.156.122" src_port="80"/>
    </slice>
    <from sec="1144127099" usec="0"/>
    <to sec="1144127345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1184{
style=filled;
color=gray75;
4770[label="214.61.84.124;126pkt 126fpkt", shape=pentagon, color=darkviolet];
7304[label="214.61.84.124;125pkt 125fpkt", shape=invtriangle, color=brown];
9031[label="214.61.84.124;126pkt 126fpkt", shape=invhouse, color=bisque];
stat1184[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.61.84.124:7000, 128.156.237.94:*}[30.9524%]&lt;BR/&gt;{214.61.84.124:7000, 161.146.58.136:*}[28.5714%]&lt;BR/&gt;{214.61.84.124:7000, 128.231.172.181:*}[23.0159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 43812: (0.795756%)&lt;BR/&gt; 64063: (0.397878%)&lt;BR/&gt; 63920: (0.397878%)&lt;BR/&gt; 63150: (0.397878%)&gt;];
}
4770--7304[label="1;125pkt 125fpkt"];
4770--9031[label="1;126pkt 126fpkt"];
7304--9031[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter dst_ip="128.156.237.94" src_ip="214.61.84.124" src_port="7000"/>
      <filter dst_ip="161.146.58.136" src_ip="214.61.84.124" src_port="7000"/>
      <filter dst_ip="128.231.172.181" src_ip="214.61.84.124" src_port="7000"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1185{
style=filled;
color=gray75;
4774[label="36.120.137.124;149pkt 149fpkt", shape=pentagon, color=darkviolet];
7306[label="36.120.137.124;149pkt 149fpkt", shape=invtriangle, color=brown];
9033[label="36.120.137.124;149pkt 149fpkt", shape=invhouse, color=bisque];
stat1185[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.120.137.124:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4774--7306[label="1;149pkt 149fpkt"];
4774--9033[label="1;149pkt 149fpkt"];
7306--9033[label="1;149pkt 149fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="36.120.137.124" src_port="1027"/>
    </slice>
    <from sec="1144127440" usec="0"/>
    <to sec="1144127465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1186{
style=filled;
color=gray75;
244[label="132.19.196.124;s;218pkt 218fpkt", shape=diamond, color=yellow];
4777[label="132.19.196.124;218pkt 218fpkt", shape=pentagon, color=darkviolet];
7309[label="132.19.196.124;217pkt 217fpkt", shape=invtriangle, color=brown];
stat1186[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.196.124:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1956: (0.229709%)&lt;BR/&gt; 1955: (0.229709%)&lt;BR/&gt; 1954: (0.229709%)&lt;BR/&gt; 1953: (0.229709%)&gt;];
}
244--811[label="0.2;1pkt 1fpkt"];
244--4777[label="1;218pkt 218fpkt"];
244--7309[label="1;217pkt 217fpkt"];
4777--7309[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.196.124"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1187{
style=filled;
color=gray75;
4783[label="55.65.218.125;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7314[label="55.65.218.125;37pkt 37fpkt", shape=invtriangle, color=brown];
stat1187[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.65.218.125:*, *:4899}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4899: (50%)&lt;BR/&gt; 1405: (1.35135%)&lt;BR/&gt; 1404: (1.35135%)&lt;BR/&gt; 1401: (1.35135%)&lt;BR/&gt; 1399: (1.35135%)&gt;];
}
4783--7314[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_port="4899" src_ip="55.65.218.125"/>
    </slice>
    <from sec="1144127318" usec="0"/>
    <to sec="1144127399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1188{
style=filled;
color=gray75;
4784[label="132.18.252.125;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7315[label="132.18.252.125;54pkt 54fpkt", shape=invtriangle, color=brown];
9039[label="132.18.252.125;54pkt 54fpkt", shape=invhouse, color=bisque];
stat1188[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.252.125:18211, *:*}[51.8519%]&lt;BR/&gt;{132.18.252.125:12617, *:*}[35.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18211: (25.7764%)&lt;BR/&gt; 12617: (17.7019%)&lt;BR/&gt; 11401: (5.59006%)&lt;BR/&gt; 53461: (1.86335%)&lt;BR/&gt; 46951: (1.86335%)&gt;];
}
4784--7315[label="1;53pkt 53fpkt"];
4784--9039[label="1;53pkt 53fpkt"];
7315--9039[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.252.125" src_port="18211"/>
      <filter src_ip="132.18.252.125" src_port="12617"/>
    </slice>
    <from sec="1144126967" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1189{
style=filled;
color=gray75;
554[label="213.96.30.126;s;1708pkt 1708fpkt", shape=diamond, color=yellow];
4785[label="213.96.30.126;1815pkt 1815fpkt", shape=pentagon, color=darkviolet];
7316[label="213.96.30.126;1815pkt 1815fpkt", shape=invtriangle, color=brown];
9040[label="213.96.30.126;1815pkt 1815fpkt", shape=invhouse, color=bisque];
stat1189[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.96.30.126:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50.028%)&lt;BR/&gt; 192: (0.195722%)&lt;BR/&gt; 320: (0.167762%)&lt;BR/&gt; 233: (0.167762%)&lt;BR/&gt; 436: (0.160772%)&gt;];
}
554--2173[label="0.015625;1pkt 1fpkt"];
554--3288[label="0.0474239;81pkt 81fpkt"];
554--3292[label="0.253513;433pkt 433fpkt"];
554--3303[label="0.253513;433pkt 433fpkt"];
554--4785[label="1;1708pkt 1708fpkt"];
554--7316[label="1;1708pkt 1708fpkt"];
554--9040[label="1;1708pkt 1708fpkt"];
4785--7316[label="1;1815pkt 1815fpkt"];
4785--9040[label="1;1815pkt 1815fpkt"];
7316--9040[label="1;1815pkt 1815fpkt"];
</description>
    <slice>
      <filter src_ip="213.96.30.126" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1190{
style=filled;
color=gray75;
4788[label="196.206.188.126;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7318[label="196.206.188.126;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1190[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.206.188.126:1863, 147.13.229.34:1035}[25%]&lt;BR/&gt;{196.206.188.126:1863, 147.13.94.56:3501}[25%]&lt;BR/&gt;{196.206.188.126:1863, 147.13.230.68:1660}[25%]&lt;BR/&gt;{196.206.188.126:1863, 147.13.132.188:4908}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (50%)&lt;BR/&gt; 4908: (12.5%)&lt;BR/&gt; 3501: (12.5%)&lt;BR/&gt; 1660: (12.5%)&lt;BR/&gt; 1035: (12.5%)&gt;];
}
4788--7318[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.132.188" dst_port="4908" src_ip="196.206.188.126" src_port="1863"/>
      <filter dst_ip="147.13.230.68" dst_port="1660" src_ip="196.206.188.126" src_port="1863"/>
      <filter dst_ip="147.13.94.56" dst_port="3501" src_ip="196.206.188.126" src_port="1863"/>
      <filter dst_ip="147.13.229.34" dst_port="1035" src_ip="196.206.188.126" src_port="1863"/>
    </slice>
    <from sec="1144126829" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1191{
style=filled;
color=gray75;
2475[label="132.19.90.128;s;136pkt 136fpkt", shape=diamond, color=yellow];
stat1191[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.90.128:*, 219.73.80.150:80}[69.8529%]&lt;BR/&gt;{132.19.90.128:*, 219.73.82.151:80}[30.1471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3782: (0.367647%)&lt;BR/&gt; 3781: (0.367647%)&lt;BR/&gt; 3778: (0.367647%)&lt;BR/&gt; 3777: (0.367647%)&gt;];
}
2475--4795[label="1;136pkt 136fpkt"];
2475--7322[label="1;136pkt 136fpkt"];
2475--9044[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.80.150" dst_port="80" src_ip="132.19.90.128"/>
      <filter dst_ip="219.73.82.151" dst_port="80" src_ip="132.19.90.128"/>
    </slice>
    <from sec="1144127409" usec="0"/>
    <to sec="1144127498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1192{
style=filled;
color=gray75;
563[label="206.211.95.128;s;1446pkt 1446fpkt", shape=diamond, color=yellow];
4796[label="206.211.95.128;1556pkt 1556fpkt", shape=pentagon, color=darkviolet];
7323[label="206.211.95.128;1556pkt 1556fpkt", shape=invtriangle, color=brown];
9045[label="206.211.95.128;1556pkt 1556fpkt", shape=invhouse, color=bisque];
stat1192[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.211.95.128:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.0327%)&lt;BR/&gt; 2376: (0.163559%)&lt;BR/&gt; 2273: (0.130847%)&lt;BR/&gt; 1638: (0.130847%)&lt;BR/&gt; 1459: (0.130847%)&gt;];
}
563--3287[label="0.0684647;99pkt 99fpkt"];
563--3302[label="0.0670816;97pkt 97fpkt"];
563--4796[label="1;1446pkt 1446fpkt"];
563--7323[label="1;1446pkt 1446fpkt"];
563--9045[label="1;1446pkt 1446fpkt"];
4796--7323[label="1;1556pkt 1556fpkt"];
4796--9045[label="1;1556pkt 1556fpkt"];
7323--9045[label="1;1556pkt 1556fpkt"];
</description>
    <slice>
      <filter src_ip="206.211.95.128" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1193{
style=filled;
color=gray75;
390[label="194.212.147.128;s;43pkt 43fpkt", shape=diamond, color=yellow];
4803[label="194.212.147.128;45pkt 45fpkt", shape=pentagon, color=darkviolet];
7328[label="194.212.147.128;45pkt 45fpkt", shape=invtriangle, color=brown];
9050[label="194.212.147.128;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1193[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.147.128:*, 36.21.111.35:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3049: (2.24719%)&lt;BR/&gt; 4989: (1.1236%)&lt;BR/&gt; 4904: (1.1236%)&lt;BR/&gt; 4858: (1.1236%)&gt;];
}
390--1819[label="0.0232558;1pkt 1fpkt"];
390--4803[label="1;43pkt 43fpkt"];
390--7328[label="1;43pkt 43fpkt"];
390--9050[label="1;43pkt 43fpkt"];
4803--7328[label="1;45pkt 45fpkt"];
4803--9050[label="1;45pkt 45fpkt"];
7328--9050[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_ip="36.21.111.35" dst_port="80" src_ip="194.212.147.128"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1194{
style=filled;
color=gray75;
4809[label="82.177.193.128;58pkt 58fpkt", shape=pentagon, color=darkviolet];
7333[label="82.177.193.128;58pkt 58fpkt", shape=invtriangle, color=brown];
9054[label="82.177.193.128;58pkt 58fpkt", shape=invhouse, color=bisque];
stat1194[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.177.193.128:*, 132.19.54.75:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2474: (0.862069%)&lt;BR/&gt; 2473: (0.862069%)&lt;BR/&gt; 2471: (0.862069%)&lt;BR/&gt; 2466: (0.862069%)&gt;];
}
4809--7333[label="1;58pkt 58fpkt"];
4809--9054[label="1;58pkt 58fpkt"];
7333--9054[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.54.75" dst_port="80" src_ip="82.177.193.128"/>
    </slice>
    <from sec="1144127415" usec="0"/>
    <to sec="1144127478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1195{
style=filled;
color=gray75;
4813[label="193.210.88.129;105pkt 105fpkt", shape=pentagon, color=darkviolet];
7335[label="193.210.88.129;105pkt 105fpkt", shape=invtriangle, color=brown];
9056[label="193.210.88.129;104pkt 104fpkt", shape=invhouse, color=bisque];
stat1195[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.210.88.129:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 61520: (0.477707%)&lt;BR/&gt; 61515: (0.477707%)&lt;BR/&gt; 61512: (0.477707%)&lt;BR/&gt; 61415: (0.477707%)&gt;];
}
4813--7335[label="1;105pkt 105fpkt"];
4813--9056[label="1;104pkt 104fpkt"];
7335--9056[label="1;104pkt 104fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="193.210.88.129"/>
    </slice>
    <from sec="1144127064" usec="0"/>
    <to sec="1144127079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.204.191.129"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1197{
style=filled;
color=gray75;
4826[label="132.19.201.129;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7346[label="132.19.201.129;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1197[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.201.129:*, 219.73.82.151:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51619: (2.77778%)&lt;BR/&gt; 51595: (2.77778%)&lt;BR/&gt; 51575: (2.77778%)&lt;BR/&gt; 51569: (2.77778%)&gt;];
}
4826--7346[label="1;18pkt 18fpkt"];
4826--9063[label="1;18pkt 18fpkt"];
7346--9063[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.82.151" dst_port="80" src_ip="132.19.201.129"/>
    </slice>
    <from sec="1144127156" usec="0"/>
    <to sec="1144127178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1198{
style=filled;
color=gray75;
4828[label="132.19.9.130;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7348[label="132.19.9.130;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1198[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.9.130:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4828--7348[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.9.130"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
4834[label="37.202.108.130;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7351[label="37.202.108.130;14pkt 14fpkt", shape=invtriangle, color=brown];
9065[label="37.202.108.130;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.108.130:80, 195.89.66.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41151: (3.65854%)&lt;BR/&gt; 41143: (3.65854%)&lt;BR/&gt; 41141: (3.65854%)&lt;BR/&gt; 41122: (3.65854%)&gt;];
}
4834--7351[label="1;13pkt 13fpkt"];
4834--9065[label="1;13pkt 13fpkt"];
7351--9065[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.66.195" src_ip="37.202.108.130" src_port="80"/>
    </slice>
    <from sec="1144127507" usec="0"/>
    <to sec="1144127589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1200{
style=filled;
color=gray75;
4835[label="161.223.132.130;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7352[label="161.223.132.130;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1200[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.132.130:*, 196.206.32.72:80}[42.1053%]&lt;BR/&gt;{161.223.132.130:*, 196.206.5.6:80}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4191: (2.63158%)&lt;BR/&gt; 4190: (2.63158%)&lt;BR/&gt; 4189: (2.63158%)&lt;BR/&gt; 4188: (2.63158%)&gt;];
}
4835--7352[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.32.72" dst_port="80" src_ip="161.223.132.130"/>
      <filter dst_ip="196.206.5.6" dst_port="80" src_ip="161.223.132.130"/>
    </slice>
    <from sec="1144127487" usec="0"/>
    <to sec="1144127656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1201{
style=filled;
color=gray75;
4841[label="132.18.244.130;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7356[label="132.18.244.130;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1201[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.244.130:*, 59.96.97.42:9538}[39.4737%]&lt;BR/&gt;{132.18.244.130:*, 206.29.96.84:80}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9538: (20%)&lt;BR/&gt; 80: (13.3333%)&lt;BR/&gt; 123: (4.66667%)&lt;BR/&gt; 25429: (4%)&lt;BR/&gt; 62960: (1.33333%)&gt;];
}
4841--7356[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="59.96.97.42" dst_port="9538" src_ip="132.18.244.130"/>
      <filter dst_ip="206.29.96.84" dst_port="80" src_ip="132.18.244.130"/>
    </slice>
    <from sec="1144126844" usec="0"/>
    <to sec="1144127642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.116.13.131"/>
    </slice>
    <from sec="1144127527" usec="0"/>
    <to sec="1144127569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1203{
style=filled;
color=gray75;
4848[label="36.106.130.131;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7361[label="36.106.130.131;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1203[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.130.131:38342, 128.202.100.129:80}[33.3333%]&lt;BR/&gt;{36.106.130.131:38855, 128.202.100.129:80}[33.3333%]&lt;BR/&gt;{36.106.130.131:55838, 128.202.100.129:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55838: (16.6667%)&lt;BR/&gt; 38855: (16.6667%)&lt;BR/&gt; 38342: (16.6667%)&gt;];
}
4848--7361[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.100.129" dst_port="80" src_ip="36.106.130.131" src_port="55838"/>
      <filter dst_ip="128.202.100.129" dst_port="80" src_ip="36.106.130.131" src_port="38855"/>
      <filter dst_ip="128.202.100.129" dst_port="80" src_ip="36.106.130.131" src_port="38342"/>
    </slice>
    <from sec="1144126906" usec="0"/>
    <to sec="1144127411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1204{
style=filled;
color=gray75;
4849[label="82.105.138.131;198pkt 198fpkt", shape=pentagon, color=darkviolet];
7362[label="82.105.138.131;198pkt 198fpkt", shape=invtriangle, color=brown];
9069[label="82.105.138.131;197pkt 197fpkt", shape=invhouse, color=bisque];
stat1204[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.105.138.131:1325, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1325: (50%)&gt;];
}
4849--7362[label="1;198pkt 198fpkt"];
4849--9069[label="1;197pkt 197fpkt"];
7362--9069[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="82.105.138.131" src_port="1325"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1205{
style=filled;
color=gray75;
4850[label="83.171.161.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7363[label="83.171.161.131;2pkt 2fpkt", shape=invtriangle, color=brown];
9070[label="83.171.161.131;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1205[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.171.161.131:80, 147.13.162.139:3683}[50%]&lt;BR/&gt;{83.171.161.131:80, 147.13.162.139:3684}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3684: (25%)&lt;BR/&gt; 3683: (25%)&gt;];
}
4850--7363[label="1;2pkt 2fpkt"];
4850--9070[label="1;2pkt 2fpkt"];
7363--9070[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.162.139" dst_port="3684" src_ip="83.171.161.131" src_port="80"/>
      <filter dst_ip="147.13.162.139" dst_port="3683" src_ip="83.171.161.131" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1206{
style=filled;
color=gray75;
2213[label="216.196.64.132;s;29pkt 29fpkt", shape=diamond, color=yellow];
3247[label="216.196.64.132;s;29pkt 29fpkt", shape=hexagon, color=black];
4859[label="216.196.64.132;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7368[label="216.196.64.132;31pkt 31fpkt", shape=invtriangle, color=brown];
stat1206[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.196.64.132:80, 195.89.105.214:*}[54.8387%]&lt;BR/&gt;{216.196.64.132:80, 195.89.105.215:*}[45.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64008: (1.66667%)&lt;BR/&gt; 63638: (1.66667%)&lt;BR/&gt; 63181: (1.66667%)&lt;BR/&gt; 62707: (1.66667%)&gt;];
}
2213--3247[label="1;29pkt 29fpkt"];
2213--3288[label="0.310345;9pkt 9fpkt"];
2213--4859[label="1;29pkt 29fpkt"];
2213--7368[label="1;29pkt 29fpkt"];
2213--9073[label="1;29pkt 29fpkt"];
3247--3288[label="0.310345;9pkt 9fpkt"];
3247--4859[label="1;29pkt 29fpkt"];
3247--7368[label="1;29pkt 29fpkt"];
3247--9073[label="1;29pkt 29fpkt"];
4859--7368[label="1;31pkt 31fpkt"];
4859--9073[label="1;31pkt 31fpkt"];
7368--9073[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" src_ip="216.196.64.132" src_port="80"/>
      <filter dst_ip="195.89.105.215" src_ip="216.196.64.132" src_port="80"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1207{
style=filled;
color=gray75;
3490[label="132.19.192.12;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5824[label="132.19.245.209;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6419[label="132.19.192.12;20pkt 20fpkt", shape=invtriangle, color=brown];
8044[label="132.19.245.209;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1207[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.12:*, 197.81.180.44:80}[40%]&lt;BR/&gt;{132.19.245.209:*, *:80}[33.3333%]&lt;BR/&gt;{132.19.192.12:*, 197.81.186.166:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3371: (1.69492%)&lt;BR/&gt; 3345: (1.69492%)&lt;BR/&gt; 3344: (1.69492%)&lt;BR/&gt; 3343: (1.69492%)&gt;];
}
3490--6419[label="1;19pkt 19fpkt"];
3490--8467[label="1;19pkt 19fpkt"];
5824--8044[label="1;10pkt 10fpkt"];
5824--9511[label="1;9pkt 9fpkt"];
6419--8467[label="1;20pkt 20fpkt"];
8044--9511[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.245.209"/>
      <filter dst_ip="197.81.180.44" dst_port="80" src_ip="132.19.192.12"/>
      <filter dst_ip="197.81.186.166" dst_port="80" src_ip="132.19.192.12"/>
    </slice>
    <from sec="1144126841" usec="0"/>
    <to sec="1144127576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1208{
style=filled;
color=gray75;
428[label="132.18.129.133;s;695pkt 695fpkt", shape=diamond, color=yellow];
4886[label="132.18.129.133;743pkt 743fpkt", shape=pentagon, color=darkviolet];
7388[label="132.18.129.133;742pkt 742fpkt", shape=invtriangle, color=brown];
stat1208[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.133:1398, *:53}[98.9233%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.5183%)&lt;BR/&gt; 1398: (49.4495%)&lt;BR/&gt; 0: (0.963303%)&lt;BR/&gt; 4980: (0.0688073%)&gt;];
}
428--906[label="0.00568182;1pkt 1fpkt"];
428--1811[label="0.0060241;1pkt 1fpkt"];
428--1864[label="0.00584795;1pkt 1fpkt"];
428--1930[label="0.00689655;1pkt 1fpkt"];
428--2178[label="0.00628931;1pkt 1fpkt"];
428--2378[label="0.0131579;1pkt 1fpkt"];
428--2515[label="0.00571429;1pkt 1fpkt"];
428--2522[label="0.00641026;1pkt 1fpkt"];
428--2564[label="0.00584795;1pkt 1fpkt"];
428--3290[label="0.145324;101pkt 101fpkt"];
428--3295[label="0.152518;106pkt 106fpkt"];
428--4886[label="1;695pkt 695fpkt"];
428--7388[label="0.998561;694pkt 694fpkt"];
4886--7388[label="1;742pkt 742fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="132.18.129.133" src_port="1398"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1209{
style=filled;
color=gray75;
4887[label="161.223.134.133;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7389[label="161.223.134.133;4pkt 4fpkt", shape=invtriangle, color=brown];
9084[label="161.223.134.133;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1209[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.134.133:3127, 53.174.69.136:80}[20%]&lt;BR/&gt;{161.223.134.133:3128, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.134.133:3129, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.134.133:3130, 39.204.218.222:80}[20%]&lt;BR/&gt;{161.223.134.133:3131, 39.204.218.222:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3131: (10.7143%)&lt;BR/&gt; 3130: (10.7143%)&lt;BR/&gt; 3129: (10.7143%)&lt;BR/&gt; 3128: (10.7143%)&gt;];
}
4887--7389[label="1;4pkt 4fpkt"];
4887--9084[label="1;5pkt 5fpkt"];
7389--9084[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.134.133" src_port="3131"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.134.133" src_port="3130"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.134.133" src_port="3129"/>
      <filter dst_ip="39.204.218.222" dst_port="80" src_ip="161.223.134.133" src_port="3128"/>
      <filter dst_ip="53.174.69.136" dst_port="80" src_ip="161.223.134.133" src_port="3127"/>
    </slice>
    <from sec="1144127636" usec="0"/>
    <to sec="1144127653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1210{
style=filled;
color=gray75;
4888[label="195.80.139.133;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7390[label="195.80.139.133;44pkt 44fpkt", shape=invtriangle, color=brown];
9085[label="195.80.139.133;44pkt 44fpkt", shape=invhouse, color=bisque];
stat1210[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.139.133:*, 83.185.7.25:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 2353: (1.13636%)&lt;BR/&gt; 2352: (1.13636%)&lt;BR/&gt; 2351: (1.13636%)&lt;BR/&gt; 2350: (1.13636%)&gt;];
}
4888--7390[label="1;44pkt 44fpkt"];
4888--9085[label="1;44pkt 44fpkt"];
7390--9085[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="83.185.7.25" dst_port="1080" src_ip="195.80.139.133"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.54.150.133"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.127.210.133"/>
    </slice>
    <from sec="1144126868" usec="0"/>
    <to sec="1144127420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1213{
style=filled;
color=gray75;
4898[label="199.8.6.134;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7399[label="199.8.6.134;10pkt 10fpkt", shape=invtriangle, color=brown];
9090[label="199.8.6.134;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1213[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.8.6.134:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4898--7399[label="1;10pkt 10fpkt"];
4898--9090[label="1;10pkt 10fpkt"];
7399--9090[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="199.8.6.134"/>
    </slice>
    <from sec="1144127166" usec="0"/>
    <to sec="1144127633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.93.59.134"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1215{
style=filled;
color=gray75;
4901[label="161.223.76.134;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7402[label="161.223.76.134;25pkt 25fpkt", shape=invtriangle, color=brown];
9093[label="161.223.76.134;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1215[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.76.134:80, 39.65.65.87:*}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54027: (2%)&lt;BR/&gt; 47477: (2%)&lt;BR/&gt; 46557: (2%)&lt;BR/&gt; 46038: (2%)&gt;];
}
4901--7402[label="1;25pkt 25fpkt"];
4901--9093[label="1;25pkt 25fpkt"];
7402--9093[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="39.65.65.87" src_ip="161.223.76.134" src_port="80"/>
    </slice>
    <from sec="1144126996" usec="0"/>
    <to sec="1144127657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.155.83.134"/>
    </slice>
    <from sec="1144127451" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1217{
style=filled;
color=gray75;
4904[label="67.52.140.134;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7404[label="67.52.140.134;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1217[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.52.140.134:80, 132.19.211.244:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1638: (3.125%)&lt;BR/&gt; 1636: (3.125%)&lt;BR/&gt; 1635: (3.125%)&lt;BR/&gt; 1634: (3.125%)&gt;];
}
4904--7404[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.211.244" src_ip="67.52.140.134" src_port="80"/>
    </slice>
    <from sec="1144127375" usec="0"/>
    <to sec="1144127380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1218{
style=filled;
color=gray75;
4906[label="83.101.151.134;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7405[label="83.101.151.134;1pkt 1fpkt", shape=invtriangle, color=brown];
9095[label="83.101.151.134;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1218[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.101.151.134:9592, 132.19.101.170:2417}[50%]&lt;BR/&gt;{83.101.151.134:9592, 132.19.101.170:2419}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9592: (50%)&lt;BR/&gt; 2419: (30%)&lt;BR/&gt; 2417: (20%)&gt;];
}
4906--7405[label="1;1pkt 1fpkt"];
4906--9095[label="1;2pkt 2fpkt"];
7405--9095[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.101.170" dst_port="2419" src_ip="83.101.151.134" src_port="9592"/>
      <filter dst_ip="132.19.101.170" dst_port="2417" src_ip="83.101.151.134" src_port="9592"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144126862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.28.115.135"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1220{
style=filled;
color=gray75;
4912[label="132.19.192.135;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7410[label="132.19.192.135;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1220[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.135:*, 38.202.204.179:80}[66.6667%]&lt;BR/&gt;{132.19.192.135:*, 38.202.204.181:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3163: (2.77778%)&lt;BR/&gt; 3162: (2.77778%)&lt;BR/&gt; 3159: (2.77778%)&lt;BR/&gt; 3138: (2.77778%)&gt;];
}
4912--7410[label="1;18pkt 18fpkt"];
4912--9097[label="1;18pkt 18fpkt"];
7410--9097[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="38.202.204.179" dst_port="80" src_ip="132.19.192.135"/>
      <filter dst_ip="38.202.204.181" dst_port="80" src_ip="132.19.192.135"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1221{
style=filled;
color=gray75;
4925[label="164.23.141.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7414[label="164.23.141.136;2pkt 2fpkt", shape=invtriangle, color=brown];
9101[label="164.23.141.136;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1221[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.141.136:4918, 220.181.84.168:21}[50%]&lt;BR/&gt;{164.23.141.136:4363, 210.226.98.207:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25%)&lt;BR/&gt; 4918: (25%)&lt;BR/&gt; 4363: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
4925--7414[label="1;2pkt 2fpkt"];
4925--9101[label="1;2pkt 2fpkt"];
7414--9101[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.226.98.207" dst_port="5050" src_ip="164.23.141.136" src_port="4363"/>
      <filter dst_ip="220.181.84.168" dst_port="21" src_ip="164.23.141.136" src_port="4918"/>
    </slice>
    <from sec="1144126847" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1222{
style=filled;
color=gray75;
1064[label="210.163.164.136;s;5pkt 5fpkt", shape=diamond, color=yellow];
1615[label="195.80.155.97;d;16pkt 16fpkt", shape=diamond, color=yellow];
4929[label="210.163.164.136;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7418[label="210.163.164.136;4pkt 4fpkt", shape=invtriangle, color=brown];
9103[label="210.163.164.136;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1222[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 195.80.155.97:*}[70.5882%]&lt;BR/&gt;{210.163.164.136:*, 195.80.155.97:53930}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53930: (27.9412%)&lt;BR/&gt; 80: (17.6471%)&lt;BR/&gt; 61569: (7.35294%)&lt;BR/&gt; 61430: (7.35294%)&lt;BR/&gt; 60818: (7.35294%)&gt;];
}
1064--1615[label="0.8;4pkt 4fpkt"];
1064--4929[label="1;5pkt 5fpkt"];
1064--7418[label="1;4pkt 4fpkt"];
1064--9103[label="1;4pkt 4fpkt"];
1615--2187[label="0.125;2pkt 2fpkt"];
1615--3200[label="0.125;2pkt 2fpkt"];
1615--3216[label="0.125;2pkt 2fpkt"];
1615--3564[label="0.125;2pkt 2fpkt"];
1615--3726[label="0.125;2pkt 2fpkt"];
1615--4929[label="0.8;4pkt 4fpkt"];
1615--5066[label="0.125;2pkt 2fpkt"];
1615--5130[label="0.0625;1pkt 1fpkt"];
1615--5318[label="0.125;2pkt 2fpkt"];
1615--6465[label="0.125;2pkt 2fpkt"];
1615--6578[label="0.125;2pkt 2fpkt"];
1615--7418[label="0.75;3pkt 3fpkt"];
1615--7555[label="0.0625;1pkt 1fpkt"];
1615--7689[label="0.125;2pkt 2fpkt"];
1615--9103[label="0.75;3pkt 3fpkt"];
1615--9192[label="0.0625;1pkt 1fpkt"];
1615--9281[label="0.125;2pkt 2fpkt"];
4929--7418[label="1;4pkt 4fpkt"];
4929--9103[label="1;4pkt 4fpkt"];
7418--9103[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="195.80.155.97" src_port="80"/>
      <filter dst_ip="195.80.155.97" dst_port="53930" src_ip="210.163.164.136"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1223{
style=filled;
color=gray75;
1525[label="210.226.98.198;d;82pkt 82fpkt", shape=diamond, color=yellow];
4259[label="164.23.145.74;67pkt 67fpkt", shape=pentagon, color=darkviolet];
4937[label="164.23.239.136;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6086[label="164.23.142.233;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7423[label="164.23.239.136;5pkt 5fpkt", shape=invtriangle, color=brown];
9105[label="164.23.239.136;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1223[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.145.74:*, *:*}[49.2647%]&lt;BR/&gt;{*:*, 210.226.98.198:5050}[25.7353%]&lt;BR/&gt;{*:*, *:23}[24.2647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (19.5122%)&lt;BR/&gt; 23: (11.8902%)&lt;BR/&gt; 21: (8.23171%)&lt;BR/&gt; 20: (5.79268%)&lt;BR/&gt; 443: (3.65854%)&gt;];
}
1525--1586[label="0.0121951;1pkt 1fpkt"];
1525--3031[label="0.0121951;1pkt 1fpkt"];
1525--4066[label="0.0121951;1pkt 1fpkt"];
1525--4122[label="0.0121951;1pkt 1fpkt"];
1525--4259[label="0.268657;18pkt 18fpkt"];
1525--4797[label="0.0121951;1pkt 1fpkt"];
1525--4937[label="0.25;1pkt 1fpkt"];
1525--6086[label="0.5;1pkt 1fpkt"];
1525--6801[label="0.0121951;1pkt 1fpkt"];
1525--6845[label="0.0121951;1pkt 1fpkt"];
1525--7324[label="0.0121951;1pkt 1fpkt"];
1525--7423[label="0.2;1pkt 1fpkt"];
1525--8736[label="0.0121951;1pkt 1fpkt"];
1525--9046[label="0.0121951;1pkt 1fpkt"];
1525--9105[label="0.25;1pkt 1fpkt"];
4937--7423[label="1;4pkt 4fpkt"];
4937--9105[label="1;4pkt 4fpkt"];
7423--9105[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.145.74"/>
      <filter dst_port="23"/>
      <filter dst_ip="210.226.98.198" dst_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1224{
style=filled;
color=gray75;
3825[label="208.10.233.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1224[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.10.233.37:113, 194.212.154.8:55342}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55342: (50%)&lt;BR/&gt; 113: (50%)&gt;];
}
3825--6638[label="1;1pkt 1fpkt"];
3825--8604[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.154.8" dst_port="55342" src_ip="208.10.233.37" src_port="113"/>
    </slice>
    <from sec="1144127106" usec="0"/>
    <to sec="1144127141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1225{
style=filled;
color=gray75;
4966[label="195.80.139.139;44pkt 44fpkt", shape=pentagon, color=darkviolet];
7441[label="195.80.139.139;44pkt 44fpkt", shape=invtriangle, color=brown];
9118[label="195.80.139.139;44pkt 44fpkt", shape=invhouse, color=bisque];
stat1225[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.139.139:*, 83.185.7.25:1080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1080: (50%)&lt;BR/&gt; 1958: (1.13636%)&lt;BR/&gt; 1957: (1.13636%)&lt;BR/&gt; 1956: (1.13636%)&lt;BR/&gt; 1955: (1.13636%)&gt;];
}
4966--7441[label="1;44pkt 44fpkt"];
4966--9118[label="1;44pkt 44fpkt"];
7441--9118[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="83.185.7.25" dst_port="1080" src_ip="195.80.139.139"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.140.190.139"/>
    </slice>
    <from sec="1144126914" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1227{
style=filled;
color=gray75;
4985[label="67.34.170.140;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7457[label="67.34.170.140;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1227[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.34.170.140:80, 164.23.209.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65532: (5%)&lt;BR/&gt; 53094: (5%)&lt;BR/&gt; 52901: (5%)&lt;BR/&gt; 50973: (5%)&gt;];
}
4985--7457[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.209.48" src_ip="67.34.170.140" src_port="80"/>
    </slice>
    <from sec="1144126895" usec="0"/>
    <to sec="1144127268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1228{
style=filled;
color=gray75;
4993[label="132.19.43.141;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7461[label="132.19.43.141;28pkt 28fpkt", shape=invtriangle, color=brown];
9128[label="132.19.43.141;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1228[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.43.141:*, *:25}[60.7143%]&lt;BR/&gt;{132.19.43.141:25, *:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (40.9639%)&lt;BR/&gt; 0: (10.8434%)&lt;BR/&gt; 80: (3.61446%)&lt;BR/&gt; 60764: (1.80723%)&lt;BR/&gt; 49922: (1.80723%)&gt;];
}
4993--7461[label="1;27pkt 27fpkt"];
4993--9128[label="1;27pkt 27fpkt"];
7461--9128[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.43.141" src_port="25"/>
      <filter dst_port="25" src_ip="132.19.43.141"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.162.46.141"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1230{
style=filled;
color=gray75;
4998[label="36.106.139.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7466[label="36.106.139.141;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1230[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.139.141:40562, 128.202.100.130:80}[50%]&lt;BR/&gt;{36.106.139.141:45616, 161.223.117.154:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40562: (33.3333%)&lt;BR/&gt; 45616: (16.6667%)&gt;];
}
4998--7466[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.117.154" dst_port="80" src_ip="36.106.139.141" src_port="45616"/>
      <filter dst_ip="128.202.100.130" dst_port="80" src_ip="36.106.139.141" src_port="40562"/>
    </slice>
    <from sec="1144126933" usec="0"/>
    <to sec="1144127109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.88.18.142"/>
    </slice>
    <from sec="1144126913" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1232{
style=filled;
color=gray75;
1251[label="194.212.152.142;s;21pkt 21fpkt", shape=diamond, color=yellow];
1833[label="199.8.135.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
5004[label="194.212.152.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7472[label="194.212.152.142;2pkt 2fpkt", shape=invtriangle, color=brown];
9137[label="194.212.152.142;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1232[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.152.142:22328, *:*}[90.4762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22328: (38.8889%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 3868: (9.25926%)&lt;BR/&gt; 12052: (5.55556%)&lt;BR/&gt; 55103: (1.85185%)&gt;];
}
1251--1833[label="1;1pkt 1fpkt"];
1251--3296[label="0.0952381;2pkt 2fpkt"];
1251--5004[label="1;1pkt 1fpkt"];
1251--7472[label="1;2pkt 2fpkt"];
1251--9137[label="1;2pkt 2fpkt"];
1833--3296[label="1;1pkt 1fpkt"];
1833--5004[label="1;1pkt 1fpkt"];
1833--7472[label="1;1pkt 1fpkt"];
1833--9137[label="1;1pkt 1fpkt"];
5004--7472[label="1;1pkt 1fpkt"];
5004--9137[label="1;1pkt 1fpkt"];
7472--9137[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.152.142" src_port="22328"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1233{
style=filled;
color=gray75;
157[label="195.89.80.143;s;1580pkt 1580fpkt", shape=diamond, color=yellow];
813[label="213.146.77.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
819[label="215.34.197.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
1369[label="84.17.18.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
1621[label="54.66.2.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
1642[label="52.5.247.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
2145[label="51.13.69.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
5013[label="195.89.80.143;1811pkt 1811fpkt", shape=pentagon, color=darkviolet];
7480[label="195.89.80.143;1812pkt 1812fpkt", shape=invtriangle, color=brown];
stat1233[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.80.143:*, *:4662}[42.1634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (29.7754%)&lt;BR/&gt; 4672: (16.2699%)&lt;BR/&gt; 4661: (0.892686%)&lt;BR/&gt; 6662: (0.710309%)&lt;BR/&gt; 5662: (0.374352%)&gt;];
}
157--813[label="1;1pkt 1fpkt"];
157--819[label="1;1pkt 1fpkt"];
157--1369[label="1;1pkt 1fpkt"];
157--1621[label="1;1pkt 1fpkt"];
157--1642[label="1;1pkt 1fpkt"];
157--2145[label="1;1pkt 1fpkt"];
157--3290[label="0.000632911;1pkt 1fpkt"];
157--3296[label="0.000632911;1pkt 1fpkt"];
157--5013[label="0.999367;1579pkt 1579fpkt"];
157--7480[label="1;1580pkt 1580fpkt"];
813--5013[label="1;1pkt 1fpkt"];
813--7480[label="1;1pkt 1fpkt"];
819--5013[label="1;1pkt 1fpkt"];
819--7480[label="1;1pkt 1fpkt"];
1369--5013[label="1;1pkt 1fpkt"];
1369--7480[label="1;1pkt 1fpkt"];
1621--5013[label="1;1pkt 1fpkt"];
1621--7480[label="1;1pkt 1fpkt"];
1642--5013[label="1;1pkt 1fpkt"];
1642--7480[label="1;1pkt 1fpkt"];
2145--5013[label="1;1pkt 1fpkt"];
2145--7480[label="1;1pkt 1fpkt"];
5013--7480[label="1;1811pkt 1811fpkt"];
</description>
    <slice>
      <filter dst_port="4662" src_ip="195.89.80.143"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.164.80.143"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.72.165.143"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.113.235.143"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1237{
style=filled;
color=gray75;
5040[label="198.246.139.145;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7499[label="198.246.139.145;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1237[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.246.139.145:110, 161.223.212.235:1437}[33.3333%]&lt;BR/&gt;{198.246.139.145:110, 161.223.212.235:1442}[33.3333%]&lt;BR/&gt;{198.246.139.145:110, 161.223.212.235:1462}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 1462: (20%)&lt;BR/&gt; 1442: (20%)&lt;BR/&gt; 1437: (10%)&gt;];
}
5040--7499[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.212.235" dst_port="1462" src_ip="198.246.139.145" src_port="110"/>
      <filter dst_ip="161.223.212.235" dst_port="1442" src_ip="198.246.139.145" src_port="110"/>
      <filter dst_ip="161.223.212.235" dst_port="1437" src_ip="198.246.139.145" src_port="110"/>
    </slice>
    <from sec="1144127086" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1238{
style=filled;
color=gray75;
5041[label="132.18.154.145;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7500[label="132.18.154.145;15pkt 15fpkt", shape=invtriangle, color=brown];
9156[label="132.18.154.145;16pkt 16fpkt", shape=invhouse, color=bisque];
stat1238[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.154.145:24093, *:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24093: (43.617%)&lt;BR/&gt; 64265: (6.38298%)&lt;BR/&gt; 62692: (3.19149%)&lt;BR/&gt; 62229: (3.19149%)&lt;BR/&gt; 45564: (3.19149%)&gt;];
}
5041--7500[label="1;15pkt 15fpkt"];
5041--9156[label="1;16pkt 16fpkt"];
7500--9156[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="132.18.154.145" src_port="24093"/>
    </slice>
    <from sec="1144126882" usec="0"/>
    <to sec="1144127664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.178.168.145"/>
    </slice>
    <from sec="1144127277" usec="0"/>
    <to sec="1144127296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1240{
style=filled;
color=gray75;
1734[label="128.28.29.146;s;23pkt 23fpkt", shape=diamond, color=yellow];
5047[label="128.28.29.146;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7503[label="128.28.29.146;28pkt 28fpkt", shape=invtriangle, color=brown];
9158[label="128.28.29.146;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1240[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.29.146:80, *:*}[50%]&lt;BR/&gt;{128.28.29.146:53, *:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.2991%)&lt;BR/&gt; 53: (23.8318%)&lt;BR/&gt; 47403: (5.60748%)&lt;BR/&gt; 59506: (1.86916%)&lt;BR/&gt; 57540: (1.86916%)&gt;];
}
1734--3292[label="0.0434783;1pkt 1fpkt"];
1734--3303[label="0.0434783;1pkt 1fpkt"];
1734--5047[label="1;23pkt 23fpkt"];
1734--7503[label="1;23pkt 23fpkt"];
1734--9158[label="1;23pkt 23fpkt"];
5047--7503[label="1;28pkt 28fpkt"];
5047--9158[label="1;28pkt 28fpkt"];
7503--9158[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.29.146" src_port="80"/>
      <filter src_ip="128.28.29.146" src_port="53"/>
    </slice>
    <from sec="1144126963" usec="0"/>
    <to sec="1144127667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1241{
style=filled;
color=gray75;
5048[label="37.26.37.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7504[label="37.26.37.146;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1241[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.26.37.146:2533, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2533: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5048--7504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="37.26.37.146" src_port="2533"/>
    </slice>
    <from sec="1144127488" usec="0"/>
    <to sec="1144127499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1242{
style=filled;
color=gray75;
5054[label="132.18.129.146;165pkt 165fpkt", shape=pentagon, color=darkviolet];
7507[label="132.18.129.146;165pkt 165fpkt", shape=invtriangle, color=brown];
9161[label="132.18.129.146;166pkt 166fpkt", shape=invhouse, color=bisque];
stat1242[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.146:*, 206.10.5.190:25}[30.7229%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63529: (0.302419%)&lt;BR/&gt; 34546: (0.302419%)&lt;BR/&gt; 34535: (0.302419%)&lt;BR/&gt; 34534: (0.302419%)&gt;];
}
5054--7507[label="1;165pkt 165fpkt"];
5054--9161[label="1;165pkt 165fpkt"];
7507--9161[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="206.10.5.190" dst_port="25" src_ip="132.18.129.146"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.157.198.146"/>
    </slice>
    <from sec="1144127236" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1244{
style=filled;
color=gray75;
5071[label="195.89.80.148;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7518[label="195.89.80.148;6pkt 6fpkt", shape=invtriangle, color=brown];
9168[label="195.89.80.148;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1244[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.80.148:*, 38.202.200.25:80}[33.3333%]&lt;BR/&gt;{195.89.80.148:*, 39.64.26.99:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 0: (17.6471%)&lt;BR/&gt; 1585: (8.82353%)&lt;BR/&gt; 1584: (8.82353%)&lt;BR/&gt; 1583: (8.82353%)&gt;];
}
5071--7518[label="1;6pkt 6fpkt"];
5071--9168[label="1;5pkt 5fpkt"];
7518--9168[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="39.64.26.99" dst_port="80" src_ip="195.89.80.148"/>
      <filter dst_ip="38.202.200.25" dst_port="80" src_ip="195.89.80.148"/>
    </slice>
    <from sec="1144126829" usec="0"/>
    <to sec="1144127660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1245{
style=filled;
color=gray75;
5083[label="216.13.22.149;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7528[label="216.13.22.149;19pkt 19fpkt", shape=invtriangle, color=brown];
9175[label="216.13.22.149;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1245[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.13.22.149:80, 164.23.209.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56608: (2.63158%)&lt;BR/&gt; 56527: (2.63158%)&lt;BR/&gt; 55994: (2.63158%)&lt;BR/&gt; 55894: (2.63158%)&gt;];
}
5083--7528[label="1;19pkt 19fpkt"];
5083--9175[label="1;19pkt 19fpkt"];
7528--9175[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.209.48" src_ip="216.13.22.149" src_port="80"/>
    </slice>
    <from sec="1144127520" usec="0"/>
    <to sec="1144127645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.122.97.149"/>
    </slice>
    <from sec="1144127061" usec="0"/>
    <to sec="1144127260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.162.110.149"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.30.188.149"/>
    </slice>
    <from sec="1144127040" usec="0"/>
    <to sec="1144127077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1249{
style=filled;
color=gray75;
5081[label="52.59.17.149;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat1249[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.59.17.149:*, 206.172.31.44:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1495: (1.31579%)&lt;BR/&gt; 1488: (1.31579%)&lt;BR/&gt; 1481: (1.31579%)&lt;BR/&gt; 1474: (1.31579%)&gt;];
}
5081--7527[label="1;38pkt 38fpkt"];
5081--9174[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="206.172.31.44" dst_port="53" src_ip="52.59.17.149"/>
    </slice>
    <from sec="1144127539" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.682868,2.33824,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1250{
style=filled;
color=gray75;
1846[label="132.19.80.104;d;27pkt 27fpkt", shape=diamond, color=yellow];
7544[label="34.26.191.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.80.104:6346}[70.3704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (37.5%)&lt;BR/&gt; 59841: (3.57143%)&lt;BR/&gt; 28751: (3.57143%)&lt;BR/&gt; 6349: (3.57143%)&lt;BR/&gt; 6348: (3.57143%)&gt;];
}
1846--7544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.80.104" dst_port="6346"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1251{
style=filled;
color=gray75;
5123[label="132.19.109.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7550[label="132.19.109.152;1pkt 1fpkt", shape=invtriangle, color=brown];
9187[label="132.19.109.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1251[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.109.152:2876, 149.33.164.164:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2876: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5123--7550[label="1;1pkt 1fpkt"];
5123--9187[label="1;1pkt 1fpkt"];
7550--9187[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.33.164.164" dst_port="80" src_ip="132.19.109.152" src_port="2876"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1252{
style=filled;
color=gray75;
5124[label="132.19.121.152;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7551[label="132.19.121.152;7pkt 7fpkt", shape=invtriangle, color=brown];
9188[label="132.19.121.152;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1252[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.121.152:*, 196.206.170.53:80}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5%)&lt;BR/&gt; 2188: (7.5%)&lt;BR/&gt; 2185: (7.5%)&lt;BR/&gt; 2183: (7.5%)&lt;BR/&gt; 2181: (7.5%)&gt;];
}
5124--7551[label="1;7pkt 7fpkt"];
5124--9188[label="1;6pkt 6fpkt"];
7551--9188[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.170.53" dst_port="80" src_ip="132.19.121.152"/>
    </slice>
    <from sec="1144127164" usec="0"/>
    <to sec="1144127216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1253{
style=filled;
color=gray75;
886[label="53.201.131.152;s;679pkt 679fpkt", shape=diamond, color=yellow];
5126[label="53.201.131.152;827pkt 827fpkt", shape=pentagon, color=darkviolet];
7552[label="53.201.131.152;826pkt 826fpkt", shape=invtriangle, color=brown];
9189[label="53.201.131.152;827pkt 827fpkt", shape=invhouse, color=bisque];
stat1253[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.201.131.152:6667, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1981: (0.189934%)&lt;BR/&gt; 1628: (0.174106%)&lt;BR/&gt; 1939: (0.158278%)&lt;BR/&gt; 4249: (0.126622%)&gt;];
}
886--5126[label="1;679pkt 679fpkt"];
886--7552[label="0.998527;678pkt 678fpkt"];
886--9189[label="1;679pkt 679fpkt"];
5126--7552[label="1;826pkt 826fpkt"];
5126--9189[label="1;827pkt 827fpkt"];
7552--9189[label="1;826pkt 826fpkt"];
</description>
    <slice>
      <filter src_ip="53.201.131.152" src_port="6667"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.13.69.153"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1255{
style=filled;
color=gray75;
5139[label="53.174.69.153;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7561[label="53.174.69.153;3pkt 3fpkt", shape=invtriangle, color=brown];
9195[label="53.174.69.153;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1255[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.174.69.153:80, 128.202.18.213:4110}[33.3333%]&lt;BR/&gt;{53.174.69.153:80, 128.202.18.213:4111}[33.3333%]&lt;BR/&gt;{53.174.69.153:80, 128.202.18.213:4113}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4113: (16.6667%)&lt;BR/&gt; 4111: (16.6667%)&lt;BR/&gt; 4110: (16.6667%)&gt;];
}
5139--7561[label="1;3pkt 3fpkt"];
5139--9195[label="1;3pkt 3fpkt"];
7561--9195[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.18.213" dst_port="4113" src_ip="53.174.69.153" src_port="80"/>
      <filter dst_ip="128.202.18.213" dst_port="4111" src_ip="53.174.69.153" src_port="80"/>
      <filter dst_ip="128.202.18.213" dst_port="4110" src_ip="53.174.69.153" src_port="80"/>
    </slice>
    <from sec="1144127125" usec="0"/>
    <to sec="1144127179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1256{
style=filled;
color=gray75;
5140[label="216.3.118.153;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7562[label="216.3.118.153;3pkt 3fpkt", shape=invtriangle, color=brown];
9196[label="216.3.118.153;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1256[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.3.118.153:80, 132.19.109.152:2864}[25%]&lt;BR/&gt;{216.3.118.153:80, 132.19.109.152:2865}[25%]&lt;BR/&gt;{216.3.118.153:80, 132.19.109.152:2868}[25%]&lt;BR/&gt;{216.3.118.153:80, 132.19.109.152:2869}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2869: (15%)&lt;BR/&gt; 2868: (15%)&lt;BR/&gt; 2865: (15%)&lt;BR/&gt; 2864: (5%)&gt;];
}
5140--7562[label="1;3pkt 3fpkt"];
5140--9196[label="1;3pkt 3fpkt"];
7562--9196[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.109.152" dst_port="2869" src_ip="216.3.118.153" src_port="80"/>
      <filter dst_ip="132.19.109.152" dst_port="2868" src_ip="216.3.118.153" src_port="80"/>
      <filter dst_ip="132.19.109.152" dst_port="2865" src_ip="216.3.118.153" src_port="80"/>
      <filter dst_ip="132.19.109.152" dst_port="2864" src_ip="216.3.118.153" src_port="80"/>
    </slice>
    <from sec="1144127636" usec="0"/>
    <to sec="1144127671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1257{
style=filled;
color=gray75;
940[label="38.53.161.221;s;55pkt 55fpkt", shape=diamond, color=yellow];
1391[label="36.106.151.153;s;85pkt 85fpkt", shape=diamond, color=yellow];
1844[label="194.212.152.231;d;31pkt 31fpkt", shape=diamond, color=yellow];
2135[label="210.226.98.250;s;19pkt 19fpkt", shape=diamond, color=yellow];
3017[label="194.212.152.231;d;16pkt 16fpkt", shape=hexagon, color=black];
3051[label="36.106.151.153;s;68pkt 68fpkt", shape=hexagon, color=black];
4776[label="49.73.178.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5144[label="36.106.151.153;90pkt 90fpkt", shape=pentagon, color=darkviolet];
6248[label="210.226.98.250;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7308[label="49.73.178.124;1pkt 1fpkt", shape=invtriangle, color=brown];
7564[label="36.106.151.153;89pkt 89fpkt", shape=invtriangle, color=brown];
8351[label="210.226.98.250;19pkt 19fpkt", shape=invtriangle, color=brown];
9035[label="49.73.178.124;1pkt 1fpkt", shape=invhouse, color=bisque];
9198[label="36.106.151.153;89pkt 89fpkt", shape=invhouse, color=bisque];
9721[label="210.226.98.250;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1257[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.151.153:80, *:*}[38.5475%]&lt;BR/&gt;{38.53.161.221:995, *:*}[30.7263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4509%)&lt;BR/&gt; 443: (8.40266%)&lt;BR/&gt; 5050: (5.74043%)&lt;BR/&gt; 995: (4.6589%)&lt;BR/&gt; 1972: (0.998336%)&gt;];
}
940--1097[label="0.0181818;1pkt 1fpkt"];
940--1249[label="0.0545455;3pkt 3fpkt"];
940--1404[label="0.5;3pkt 3fpkt"];
940--1844[label="0.0322581;1pkt 1fpkt"];
940--1902[label="0.0666667;1pkt 1fpkt"];
1391--1844[label="0.451613;14pkt 14fpkt"];
1391--1902[label="0.0666667;1pkt 1fpkt"];
1391--2103[label="0.0967742;3pkt 3fpkt"];
1391--2853[label="0.0352941;3pkt 3fpkt"];
1391--3017[label="0.625;10pkt 10fpkt"];
1391--3051[label="1;68pkt 68fpkt"];
1391--3288[label="0.0941176;8pkt 8fpkt"];
1391--3292[label="0.105882;9pkt 9fpkt"];
1391--3303[label="0.105882;9pkt 9fpkt"];
1391--5144[label="1;85pkt 85fpkt"];
1391--7564[label="0.988235;84pkt 84fpkt"];
1391--9198[label="0.988235;84pkt 84fpkt"];
1844--2135[label="0.0526316;1pkt 1fpkt"];
1844--3017[label="1;16pkt 16fpkt"];
1844--3051[label="0.322581;10pkt 10fpkt"];
1844--3096[label="0.0645161;2pkt 2fpkt"];
1844--3288[label="0.0967742;3pkt 3fpkt"];
1844--3292[label="0.0967742;3pkt 3fpkt"];
1844--3303[label="0.0967742;3pkt 3fpkt"];
1844--4776[label="1;1pkt 1fpkt"];
1844--5144[label="0.451613;14pkt 14fpkt"];
1844--5659[label="0.5;6pkt 6fpkt"];
1844--5819[label="0.0645161;2pkt 2fpkt"];
1844--6248[label="0.0526316;1pkt 1fpkt"];
1844--6416[label="0.0322581;1pkt 1fpkt"];
1844--7308[label="1;1pkt 1fpkt"];
1844--7564[label="0.419355;13pkt 13fpkt"];
1844--7930[label="0.454545;5pkt 5fpkt"];
1844--8351[label="0.0526316;1pkt 1fpkt"];
1844--8464[label="0.0322581;1pkt 1fpkt"];
1844--9035[label="1;1pkt 1fpkt"];
1844--9198[label="0.419355;13pkt 13fpkt"];
1844--9434[label="0.454545;5pkt 5fpkt"];
1844--9721[label="0.0555556;1pkt 1fpkt"];
2135--3017[label="0.0625;1pkt 1fpkt"];
2135--6248[label="1;19pkt 19fpkt"];
2135--8351[label="1;19pkt 19fpkt"];
2135--9721[label="1;18pkt 18fpkt"];
3017--3051[label="0.625;10pkt 10fpkt"];
3017--3288[label="0.1875;3pkt 3fpkt"];
3017--3292[label="0.0625;1pkt 1fpkt"];
3017--3303[label="0.0625;1pkt 1fpkt"];
3017--4776[label="1;1pkt 1fpkt"];
3017--5144[label="0.625;10pkt 10fpkt"];
3017--6248[label="0.0625;1pkt 1fpkt"];
3017--6416[label="0.0625;1pkt 1fpkt"];
3017--7308[label="1;1pkt 1fpkt"];
3017--7564[label="0.5625;9pkt 9fpkt"];
3017--8351[label="0.0625;1pkt 1fpkt"];
3017--8464[label="0.0625;1pkt 1fpkt"];
3017--9035[label="1;1pkt 1fpkt"];
3017--9198[label="0.5625;9pkt 9fpkt"];
3017--9721[label="0.0625;1pkt 1fpkt"];
3051--3288[label="0.117647;8pkt 8fpkt"];
3051--3292[label="0.0735294;5pkt 5fpkt"];
3051--3303[label="0.0735294;5pkt 5fpkt"];
3051--5144[label="1;68pkt 68fpkt"];
3051--7564[label="0.985294;67pkt 67fpkt"];
3051--9198[label="0.985294;67pkt 67fpkt"];
4776--7308[label="1;1pkt 1fpkt"];
4776--9035[label="1;1pkt 1fpkt"];
5144--7564[label="1;89pkt 89fpkt"];
5144--9198[label="1;89pkt 89fpkt"];
6248--8351[label="1;19pkt 19fpkt"];
6248--9721[label="1;18pkt 18fpkt"];
7308--9035[label="1;1pkt 1fpkt"];
7564--9198[label="1;89pkt 89fpkt"];
8351--9721[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="36.106.151.153" src_port="80"/>
      <filter src_ip="38.53.161.221" src_port="995"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1258{
style=filled;
color=gray75;
5146[label="32.136.179.153;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7566[label="32.136.179.153;18pkt 18fpkt", shape=invtriangle, color=brown];
9200[label="32.136.179.153;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1258[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.179.153:443, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63732: (2.77778%)&lt;BR/&gt; 4395: (2.77778%)&lt;BR/&gt; 4323: (2.77778%)&lt;BR/&gt; 4183: (2.77778%)&gt;];
}
5146--7566[label="1;18pkt 18fpkt"];
5146--9200[label="1;18pkt 18fpkt"];
7566--9200[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="32.136.179.153" src_port="443"/>
    </slice>
    <from sec="1144126857" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1259{
style=filled;
color=gray75;
5151[label="215.36.68.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7570[label="215.36.68.154;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1259[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.36.68.154:37186, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37186: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5151--7570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.36.68.154" src_port="37186"/>
    </slice>
    <from sec="1144127509" usec="0"/>
    <to sec="1144127665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
5154[label="83.215.129.154;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7573[label="83.215.129.154;2pkt 2fpkt", shape=invtriangle, color=brown];
9204[label="83.215.129.154;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.215.129.154:80, 128.28.193.23:3553}[50%]&lt;BR/&gt;{83.215.129.154:80, 128.28.193.23:3562}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3562: (25%)&lt;BR/&gt; 3553: (25%)&gt;];
}
5154--7573[label="1;2pkt 2fpkt"];
5154--9204[label="1;2pkt 2fpkt"];
7573--9204[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.193.23" dst_port="3562" src_ip="83.215.129.154" src_port="80"/>
      <filter dst_ip="128.28.193.23" dst_port="3553" src_ip="83.215.129.154" src_port="80"/>
    </slice>
    <from sec="1144127675" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1261{
style=filled;
color=gray75;
1234[label="195.80.133.154;s;296pkt 296fpkt", shape=diamond, color=yellow];
3093[label="195.80.133.154;s;276pkt 276fpkt", shape=hexagon, color=black];
5155[label="195.80.133.154;308pkt 308fpkt", shape=pentagon, color=darkviolet];
7574[label="195.80.133.154;307pkt 307fpkt", shape=invtriangle, color=brown];
stat1261[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.133.154:1025, *:53}[30.8442%]&lt;BR/&gt;{195.80.133.154:25, *:*}[30.1948%]&lt;BR/&gt;{195.80.133.154:*, *:113}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (19.7978%)&lt;BR/&gt; 53: (17.7338%)&lt;BR/&gt; 1025: (15.5855%)&lt;BR/&gt; 113: (12.5527%)&lt;BR/&gt; 3949: (0.336984%)&gt;];
}
1234--1334[label="0.0264901;4pkt 4fpkt"];
1234--1811[label="0.0060241;1pkt 1fpkt"];
1234--1864[label="0.00584795;1pkt 1fpkt"];
1234--1900[label="0.0147059;1pkt 1fpkt"];
1234--1930[label="0.00689655;1pkt 1fpkt"];
1234--1970[label="0.0277778;1pkt 1fpkt"];
1234--2178[label="0.00628931;1pkt 1fpkt"];
1234--2378[label="0.0131579;1pkt 1fpkt"];
1234--2515[label="0.00571429;1pkt 1fpkt"];
1234--2522[label="0.00641026;1pkt 1fpkt"];
1234--2564[label="0.00584795;1pkt 1fpkt"];
1234--2607[label="0.0416667;1pkt 1fpkt"];
1234--3093[label="1;276pkt 276fpkt"];
1234--3290[label="0.00675676;2pkt 2fpkt"];
1234--3295[label="0.0371622;11pkt 11fpkt"];
1234--5155[label="1;296pkt 296fpkt"];
1234--7574[label="0.996622;295pkt 295fpkt"];
3093--3290[label="0.00724638;2pkt 2fpkt"];
3093--3295[label="0.0217391;6pkt 6fpkt"];
3093--5155[label="1;276pkt 276fpkt"];
3093--7574[label="0.996377;275pkt 275fpkt"];
5155--7574[label="1;307pkt 307fpkt"];
</description>
    <slice>
      <filter src_ip="195.80.133.154" src_port="25"/>
      <filter dst_port="113" src_ip="195.80.133.154"/>
      <filter dst_port="53" src_ip="195.80.133.154" src_port="1025"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.136.164.154"/>
    </slice>
    <from sec="1144127159" usec="0"/>
    <to sec="1144127201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1263{
style=filled;
color=gray75;
5165[label="132.18.234.154;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7584[label="132.18.234.154;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1263[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.234.154:*, 206.70.31.28:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63511: (7.14286%)&lt;BR/&gt; 62417: (7.14286%)&lt;BR/&gt; 62114: (7.14286%)&lt;BR/&gt; 61523: (7.14286%)&gt;];
}
5165--7584[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="206.70.31.28" dst_port="80" src_ip="132.18.234.154"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1264{
style=filled;
color=gray75;
5166[label="53.218.13.155;157pkt 157fpkt", shape=pentagon, color=darkviolet];
7585[label="53.218.13.155;157pkt 157fpkt", shape=invtriangle, color=brown];
9211[label="53.218.13.155;156pkt 156fpkt", shape=invhouse, color=bisque];
stat1264[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.218.13.155:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 10236: (0.319149%)&lt;BR/&gt; 10196: (0.319149%)&lt;BR/&gt; 10164: (0.319149%)&lt;BR/&gt; 10154: (0.319149%)&gt;];
}
5166--7585[label="1;157pkt 157fpkt"];
5166--9211[label="1;156pkt 156fpkt"];
7585--9211[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="53.218.13.155"/>
    </slice>
    <from sec="1144127652" usec="0"/>
    <to sec="1144127683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.83.19.155"/>
    </slice>
    <from sec="1144127588" usec="0"/>
    <to sec="1144127611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1266{
style=filled;
color=gray75;
688[label="219.42.20.155;s;2pkt 2fpkt", shape=diamond, color=yellow];
5169[label="219.42.20.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7587[label="219.42.20.155;2pkt 2fpkt", shape=invtriangle, color=brown];
9212[label="219.42.20.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1266[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.42.20.155:80, 195.89.105.214:63409}[50%]&lt;BR/&gt;{219.42.20.155:80, 195.89.105.215:62053}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63409: (28.5714%)&lt;BR/&gt; 62053: (21.4286%)&gt;];
}
688--787[label="0.5;1pkt 1fpkt"];
688--788[label="0.5;1pkt 1fpkt"];
688--3288[label="1;2pkt 2fpkt"];
688--3292[label="0.5;1pkt 1fpkt"];
688--3303[label="0.5;1pkt 1fpkt"];
688--5169[label="1;2pkt 2fpkt"];
688--7587[label="1;2pkt 2fpkt"];
688--9212[label="1;1pkt 1fpkt"];
5169--7587[label="1;2pkt 2fpkt"];
5169--9212[label="1;1pkt 1fpkt"];
7587--9212[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" dst_port="62053" src_ip="219.42.20.155" src_port="80"/>
      <filter dst_ip="195.89.105.214" dst_port="63409" src_ip="219.42.20.155" src_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1267{
style=filled;
color=gray75;
5170[label="82.26.26.155;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7588[label="82.26.26.155;18pkt 18fpkt", shape=invtriangle, color=brown];
9213[label="82.26.26.155;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1267[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.26.26.155:*, 128.231.2.144:138}[52.6316%]&lt;BR/&gt;{82.26.26.155:*, 128.231.2.144:137}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 138: (30%)&lt;BR/&gt; 137: (18.1818%)&lt;BR/&gt; 80: (5.45455%)&lt;BR/&gt; 62902: (2.72727%)&lt;BR/&gt; 61538: (2.72727%)&gt;];
}
5170--7588[label="1;18pkt 18fpkt"];
5170--9213[label="1;18pkt 18fpkt"];
7588--9213[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.2.144" dst_port="138" src_ip="82.26.26.155"/>
      <filter dst_ip="128.231.2.144" dst_port="137" src_ip="82.26.26.155"/>
    </slice>
    <from sec="1144126852" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1268{
style=filled;
color=gray75;
5171[label="82.100.33.155;239pkt 239fpkt", shape=pentagon, color=darkviolet];
7589[label="82.100.33.155;239pkt 239fpkt", shape=invtriangle, color=brown];
9214[label="82.100.33.155;240pkt 240fpkt", shape=invhouse, color=bisque];
stat1268[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.100.33.155:2875, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2875: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5171--7589[label="1;239pkt 239fpkt"];
5171--9214[label="1;239pkt 239fpkt"];
7589--9214[label="1;239pkt 239fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="82.100.33.155" src_port="2875"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1269{
style=filled;
color=gray75;
5172[label="81.8.102.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7590[label="81.8.102.155;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1269[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.8.102.155:28934, 161.223.8.63:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28934: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
5172--7590[label="1;1pkt 1fpkt"];
5172--9215[label="1;1pkt 1fpkt"];
7590--9215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.8.63" dst_port="8080" src_ip="81.8.102.155" src_port="28934"/>
    </slice>
    <from sec="1144126851" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.247.157.155"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,004,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1271{
style=filled;
color=gray75;
5193[label="36.118.68.157;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7601[label="36.118.68.157;21pkt 21fpkt", shape=invtriangle, color=brown];
9221[label="36.118.68.157;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1271[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.118.68.157:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4457: (2.41935%)&lt;BR/&gt; 4225: (2.41935%)&lt;BR/&gt; 4106: (2.41935%)&lt;BR/&gt; 3918: (2.41935%)&gt;];
}
5193--7601[label="1;21pkt 21fpkt"];
5193--9221[label="1;20pkt 20fpkt"];
7601--9221[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="36.118.68.157"/>
    </slice>
    <from sec="1144126901" usec="0"/>
    <to sec="1144127031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.21.47.158"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.156.57.159"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="143.41.94.159"/>
    </slice>
    <from sec="1144126839" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
5216[label="195.161.144.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7615[label="195.161.144.159;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.161.144.159:32778, 216.33.8.145:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32778: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
5216--7615[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.33.8.145" dst_port="53" src_ip="195.161.144.159" src_port="32778"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1276{
style=filled;
color=gray75;
5218[label="36.151.189.159;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7617[label="36.151.189.159;11pkt 11fpkt", shape=invtriangle, color=brown];
9232[label="36.151.189.159;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1276[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.151.189.159:80, 132.19.152.103:*}[63.6364%]&lt;BR/&gt;{36.151.189.159:80, 132.19.44.78:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56599: (4.54545%)&lt;BR/&gt; 56598: (4.54545%)&lt;BR/&gt; 56597: (4.54545%)&lt;BR/&gt; 56583: (4.54545%)&gt;];
}
5218--7617[label="1;11pkt 11fpkt"];
5218--9232[label="1;11pkt 11fpkt"];
7617--9232[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.152.103" src_ip="36.151.189.159" src_port="80"/>
      <filter dst_ip="132.19.44.78" src_ip="36.151.189.159" src_port="80"/>
    </slice>
    <from sec="1144126890" usec="0"/>
    <to sec="1144127299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1277{
style=filled;
color=gray75;
2097[label="208.116.219.159;s;514pkt 514fpkt", shape=diamond, color=yellow];
5221[label="208.116.219.159;722pkt 722fpkt", shape=pentagon, color=darkviolet];
7620[label="208.116.219.159;722pkt 722fpkt", shape=invtriangle, color=brown];
stat1277[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.116.219.159:3977, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3977: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2097--5221[label="0.998054;513pkt 513fpkt"];
2097--7620[label="0.998054;513pkt 513fpkt"];
5221--7620[label="1;722pkt 722fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.116.219.159" src_port="3977"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.101.85.160"/>
    </slice>
    <from sec="1144127404" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1279{
style=filled;
color=gray75;
5227[label="208.121.104.160;225pkt 225fpkt", shape=pentagon, color=darkviolet];
7625[label="208.121.104.160;226pkt 226fpkt", shape=invtriangle, color=brown];
9238[label="208.121.104.160;225pkt 225fpkt", shape=invhouse, color=bisque];
stat1279[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.121.104.160:9149, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9149: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5227--7625[label="1;225pkt 225fpkt"];
5227--9238[label="1;225pkt 225fpkt"];
7625--9238[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="208.121.104.160" src_port="9149"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144126836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1280{
style=filled;
color=gray75;
5229[label="132.18.140.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7627[label="132.18.140.160;1pkt 1fpkt", shape=invtriangle, color=brown];
9240[label="132.18.140.160;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1280[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.140.160:62968, 205.115.111.37:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62968: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5229--7627[label="1;1pkt 1fpkt"];
5229--9240[label="1;1pkt 1fpkt"];
7627--9240[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.115.111.37" dst_port="25" src_ip="132.18.140.160" src_port="62968"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1282{
style=filled;
color=gray75;
5236[label="208.56.210.160;243pkt 243fpkt", shape=pentagon, color=darkviolet];
7631[label="208.56.210.160;243pkt 243fpkt", shape=invtriangle, color=brown];
9243[label="208.56.210.160;243pkt 243fpkt", shape=invhouse, color=bisque];
stat1282[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.56.210.160:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5236--7631[label="1;243pkt 243fpkt"];
5236--9243[label="1;243pkt 243fpkt"];
7631--9243[label="1;243pkt 243fpkt"];
</description>
    <slice>
      <filter src_ip="208.56.210.160"/>
    </slice>
    <from sec="1144127352" usec="0"/>
    <to sec="1144127664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1283{
style=filled;
color=gray75;
5241[label="195.13.164.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7634[label="195.13.164.161;2pkt 2fpkt", shape=invtriangle, color=brown];
9245[label="195.13.164.161;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1283[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.13.164.161:80, 195.89.105.215:58966}[50%]&lt;BR/&gt;{195.13.164.161:80, 195.89.105.215:59896}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59896: (37.5%)&lt;BR/&gt; 58966: (12.5%)&gt;];
}
5241--7634[label="1;1pkt 1fpkt"];
5241--9245[label="1;1pkt 1fpkt"];
7634--9245[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" dst_port="59896" src_ip="195.13.164.161" src_port="80"/>
      <filter dst_ip="195.89.105.215" dst_port="58966" src_ip="195.13.164.161" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1284{
style=filled;
color=gray75;
5247[label="128.28.226.161;126pkt 126fpkt", shape=pentagon, color=darkviolet];
7639[label="128.28.226.161;127pkt 127fpkt", shape=invtriangle, color=brown];
9250[label="128.28.226.161;126pkt 126fpkt", shape=invhouse, color=bisque];
stat1284[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.226.161:*, 145.191.90.173:8906}[99.2126%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8906: (49.8681%)&lt;BR/&gt; 1464: (0.395778%)&lt;BR/&gt; 1462: (0.395778%)&lt;BR/&gt; 1460: (0.395778%)&lt;BR/&gt; 1458: (0.395778%)&gt;];
}
5247--7639[label="1;126pkt 126fpkt"];
5247--9250[label="1;126pkt 126fpkt"];
7639--9250[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_ip="145.191.90.173" dst_port="8906" src_ip="128.28.226.161"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1285{
style=filled;
color=gray75;
2549[label="206.125.114.162;s;402pkt 402fpkt", shape=diamond, color=yellow];
5253[label="206.125.114.162;426pkt 426fpkt", shape=pentagon, color=darkviolet];
7644[label="206.125.114.162;425pkt 425fpkt", shape=invtriangle, color=brown];
stat1285[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.125.114.162:53, *:*}[99.7653%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (55.6265%)&lt;BR/&gt; 32768: (4.11014%)&lt;BR/&gt; 32769: (1.67598%)&lt;BR/&gt; 1053: (0.957702%)&lt;BR/&gt; 9253: (0.478851%)&gt;];
}
2549--3287[label="0.0522388;21pkt 21fpkt"];
2549--3290[label="0.00746269;3pkt 3fpkt"];
2549--3295[label="0.00248756;1pkt 1fpkt"];
2549--3302[label="0.0572139;23pkt 23fpkt"];
2549--5253[label="1;402pkt 402fpkt"];
2549--7644[label="0.997512;401pkt 401fpkt"];
5253--7644[label="1;425pkt 425fpkt"];
</description>
    <slice>
      <filter src_ip="206.125.114.162" src_port="53"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
690[label="35.164.142.162;s;2pkt 2fpkt", shape=diamond, color=yellow];
5256[label="35.164.142.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.164.142.162:1, 128.231.110.208:32961}[50%]&lt;BR/&gt;{35.164.142.162:1, 128.231.110.208:45583}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1: (50%)&lt;BR/&gt; 45583: (33.3333%)&lt;BR/&gt; 32961: (16.6667%)&gt;];
}
690--782[label="1;2pkt 2fpkt"];
690--2893[label="1;2pkt 2fpkt"];
690--3277[label="1;2pkt 2fpkt"];
690--5256[label="1;1pkt 1fpkt"];
690--7646[label="1;1pkt 1fpkt"];
5256--7646[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.231.110.208" dst_port="45583" src_ip="35.164.142.162" src_port="1"/>
      <filter dst_ip="128.231.110.208" dst_port="32961" src_ip="35.164.142.162" src_port="1"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1287{
style=filled;
color=gray75;
1949[label="194.212.150.162;s;105pkt 105fpkt", shape=diamond, color=yellow];
5258[label="194.212.150.162;122pkt 122fpkt", shape=pentagon, color=darkviolet];
7648[label="194.212.150.162;122pkt 122fpkt", shape=invtriangle, color=brown];
9255[label="194.212.150.162;123pkt 123fpkt", shape=invhouse, color=bisque];
stat1287[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.150.162:80, 39.131.81.69:*}[44.7154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.3008%)&lt;BR/&gt; 53: (6.25%)&lt;BR/&gt; 3428: (3.38983%)&lt;BR/&gt; 25: (3.17797%)&lt;BR/&gt; 113: (0.847458%)&gt;];
}
1949--2378[label="0.0131579;1pkt 1fpkt"];
1949--3288[label="0.0571429;6pkt 6fpkt"];
1949--3292[label="0.047619;5pkt 5fpkt"];
1949--3303[label="0.047619;5pkt 5fpkt"];
1949--5258[label="0.990476;104pkt 104fpkt"];
1949--7648[label="0.990476;104pkt 104fpkt"];
1949--9255[label="1;105pkt 105fpkt"];
5258--7648[label="1;122pkt 122fpkt"];
5258--9255[label="1;122pkt 122fpkt"];
7648--9255[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_ip="39.131.81.69" src_ip="194.212.150.162" src_port="80"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1288{
style=filled;
color=gray75;
665[label="164.23.141.28;s;133pkt 133fpkt", shape=diamond, color=yellow];
853[label="164.23.214.162;s;31pkt 31fpkt", shape=diamond, color=yellow];
1336[label="164.23.141.162;s;3pkt 3fpkt", shape=diamond, color=yellow];
1611[label="36.172.50.26;d;17pkt 17fpkt", shape=diamond, color=yellow];
2113[label="164.23.237.196;s;39pkt 39fpkt", shape=diamond, color=yellow];
2609[label="164.23.141.70;s;7pkt 7fpkt", shape=diamond, color=yellow];
2912[label="164.23.214.162;s;31pkt 31fpkt", shape=hexagon, color=black];
2957[label="164.23.141.162;s;3pkt 3fpkt", shape=hexagon, color=black];
3113[label="164.23.237.196;s;35pkt 35fpkt", shape=hexagon, color=black];
3239[label="164.23.141.28;s;133pkt 133fpkt", shape=hexagon, color=black];
3539[label="164.23.141.16;17pkt 17fpkt", shape=pentagon, color=darkviolet];
4198[label="164.23.141.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5260[label="164.23.214.162;32pkt 32fpkt", shape=pentagon, color=darkviolet];
5656[label="164.23.237.196;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5746[label="164.23.237.203;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6446[label="164.23.141.16;16pkt 16fpkt", shape=invtriangle, color=brown];
7650[label="164.23.214.162;31pkt 31fpkt", shape=invtriangle, color=brown];
7993[label="164.23.237.203;20pkt 20fpkt", shape=invtriangle, color=brown];
9473[label="164.23.237.203;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1288[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.141.28:25, *:*}[46.1538%]&lt;BR/&gt;{*:80, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.2828%)&lt;BR/&gt; 80: (12.4013%)&lt;BR/&gt; 123: (0.473934%)&lt;BR/&gt; 20310: (0.394945%)&lt;BR/&gt; 47433: (0.315956%)&gt;];
}
665--1611[label="0.294118;5pkt 5fpkt"];
665--1996[label="0.5;5pkt 5fpkt"];
665--3239[label="1;133pkt 133fpkt"];
665--3288[label="0.0150376;2pkt 2fpkt"];
665--3292[label="0.0150376;2pkt 2fpkt"];
665--3303[label="0.0150376;2pkt 2fpkt"];
853--1611[label="0.0588235;1pkt 1fpkt"];
853--2912[label="1;31pkt 31fpkt"];
853--3288[label="0.0322581;1pkt 1fpkt"];
853--3292[label="0.0967742;3pkt 3fpkt"];
853--3303[label="0.0967742;3pkt 3fpkt"];
853--5260[label="1;31pkt 31fpkt"];
853--7650[label="0.967742;30pkt 30fpkt"];
1336--1611[label="0.333333;1pkt 1fpkt"];
1336--1996[label="0.333333;1pkt 1fpkt"];
1336--2957[label="1;3pkt 3fpkt"];
1611--2085[label="0.0588235;1pkt 1fpkt"];
1611--2113[label="0.0588235;1pkt 1fpkt"];
1611--2609[label="0.142857;1pkt 1fpkt"];
1611--2912[label="0.0588235;1pkt 1fpkt"];
1611--2957[label="0.333333;1pkt 1fpkt"];
1611--3031[label="0.0588235;1pkt 1fpkt"];
1611--3113[label="0.0588235;1pkt 1fpkt"];
1611--3239[label="0.294118;5pkt 5fpkt"];
1611--3539[label="0.0588235;1pkt 1fpkt"];
1611--4079[label="0.0588235;1pkt 1fpkt"];
1611--4797[label="0.0588235;1pkt 1fpkt"];
1611--5260[label="0.0588235;1pkt 1fpkt"];
1611--5656[label="0.0588235;1pkt 1fpkt"];
1611--5746[label="0.0588235;1pkt 1fpkt"];
1611--6446[label="0.0625;1pkt 1fpkt"];
1611--7324[label="0.0588235;1pkt 1fpkt"];
1611--7650[label="0.0588235;1pkt 1fpkt"];
1611--7993[label="0.0588235;1pkt 1fpkt"];
1611--9046[label="0.0588235;1pkt 1fpkt"];
1611--9473[label="0.0588235;1pkt 1fpkt"];
2113--2238[label="0.166667;1pkt 1fpkt"];
2113--3113[label="1;35pkt 35fpkt"];
2113--3288[label="0.0512821;2pkt 2fpkt"];
2113--3292[label="0.025641;1pkt 1fpkt"];
2113--3303[label="0.025641;1pkt 1fpkt"];
2113--5656[label="1;39pkt 39fpkt"];
2609--4198[label="1;2pkt 2fpkt"];
2912--3288[label="0.0322581;1pkt 1fpkt"];
2912--3292[label="0.0967742;3pkt 3fpkt"];
2912--3303[label="0.0967742;3pkt 3fpkt"];
2912--5260[label="1;31pkt 31fpkt"];
2912--7650[label="0.967742;30pkt 30fpkt"];
3113--3288[label="0.0571429;2pkt 2fpkt"];
3113--3292[label="0.0285714;1pkt 1fpkt"];
3113--3303[label="0.0285714;1pkt 1fpkt"];
3113--5656[label="1;35pkt 35fpkt"];
3239--3288[label="0.0150376;2pkt 2fpkt"];
3239--3292[label="0.0150376;2pkt 2fpkt"];
3239--3303[label="0.0150376;2pkt 2fpkt"];
3539--6446[label="1;16pkt 16fpkt"];
5260--7650[label="1;31pkt 31fpkt"];
5746--7993[label="1;20pkt 20fpkt"];
5746--9473[label="1;21pkt 21fpkt"];
7993--9473[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter src_ip="164.23.141.28" src_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1289{
style=filled;
color=gray75;
5263[label="194.233.45.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7652[label="194.233.45.163;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1289[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.233.45.163:80, 195.89.105.214:61390}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61390: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5263--7652[label="1;1pkt 1fpkt"];
5263--9258[label="1;1pkt 1fpkt"];
7652--9258[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="61390" src_ip="194.233.45.163" src_port="80"/>
    </slice>
    <from sec="1144126878" usec="0"/>
    <to sec="1144127176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.164.49.163"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1291{
style=filled;
color=gray75;
5267[label="132.19.109.163;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7654[label="132.19.109.163;7pkt 7fpkt", shape=invtriangle, color=brown];
9259[label="132.19.109.163;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1291[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.109.163:25, 193.141.150.254:*}[37.5%]&lt;BR/&gt;{132.19.109.163:25, 82.107.189.173:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4556: (6.52174%)&lt;BR/&gt; 4420: (6.52174%)&lt;BR/&gt; 4282: (6.52174%)&lt;BR/&gt; 3660: (6.52174%)&gt;];
}
5267--7654[label="1;7pkt 7fpkt"];
5267--9259[label="1;8pkt 8fpkt"];
7654--9259[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="193.141.150.254" src_ip="132.19.109.163" src_port="25"/>
      <filter dst_ip="82.107.189.173" src_ip="132.19.109.163" src_port="25"/>
    </slice>
    <from sec="1144126965" usec="0"/>
    <to sec="1144127592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1292{
style=filled;
color=gray75;
5270[label="32.136.164.163;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7657[label="32.136.164.163;2pkt 2fpkt", shape=invtriangle, color=brown];
9261[label="32.136.164.163;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1292[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.164.163:47161, 132.19.74.44:80}[50%]&lt;BR/&gt;{32.136.164.163:55419, 128.28.6.85:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55419: (25%)&lt;BR/&gt; 47161: (25%)&gt;];
}
5270--7657[label="1;2pkt 2fpkt"];
5270--9261[label="1;2pkt 2fpkt"];
7657--9261[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.6.85" dst_port="80" src_ip="32.136.164.163" src_port="55419"/>
      <filter dst_ip="132.19.74.44" dst_port="80" src_ip="32.136.164.163" src_port="47161"/>
    </slice>
    <from sec="1144127109" usec="0"/>
    <to sec="1144127317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1293{
style=filled;
color=gray75;
5273[label="164.23.202.163;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7660[label="164.23.202.163;9pkt 9fpkt", shape=invtriangle, color=brown];
9263[label="164.23.202.163;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1293[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.202.163:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 32981: (5.55556%)&lt;BR/&gt; 16125: (5.55556%)&lt;BR/&gt; 4934: (5.55556%)&lt;BR/&gt; 4892: (5.55556%)&gt;];
}
5273--7660[label="1;9pkt 9fpkt"];
5273--9263[label="1;9pkt 9fpkt"];
7660--9263[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.202.163" src_port="25"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1294{
style=filled;
color=gray75;
5274[label="161.223.219.163;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7661[label="161.223.219.163;26pkt 26fpkt", shape=invtriangle, color=brown];
9264[label="161.223.219.163;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1294[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.219.163:28500, *:*}[80.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28500: (40.2597%)&lt;BR/&gt; 56572: (3.8961%)&lt;BR/&gt; 38836: (3.8961%)&lt;BR/&gt; 23770: (3.8961%)&lt;BR/&gt; 12532: (3.8961%)&gt;];
}
5274--7661[label="1;25pkt 25fpkt"];
5274--9264[label="1;25pkt 25fpkt"];
7661--9264[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.219.163" src_port="28500"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1295{
style=filled;
color=gray75;
2645[label="128.202.0.164;s;85pkt 85fpkt", shape=diamond, color=yellow];
5276[label="128.202.0.164;127pkt 127fpkt", shape=pentagon, color=darkviolet];
7663[label="128.202.0.164;126pkt 126fpkt", shape=invtriangle, color=brown];
9266[label="128.202.0.164;126pkt 126fpkt", shape=invhouse, color=bisque];
stat1295[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.0.164:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59694: (0.431034%)&lt;BR/&gt; 59693: (0.431034%)&lt;BR/&gt; 59692: (0.431034%)&lt;BR/&gt; 59691: (0.431034%)&gt;];
}
2645--3296[label="0.294118;25pkt 25fpkt"];
2645--5276[label="1;85pkt 85fpkt"];
2645--7663[label="0.988235;84pkt 84fpkt"];
2645--9266[label="0.988235;84pkt 84fpkt"];
5276--7663[label="1;126pkt 126fpkt"];
5276--9266[label="1;126pkt 126fpkt"];
7663--9266[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.202.0.164"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1296{
style=filled;
color=gray75;
5280[label="132.18.80.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7666[label="132.18.80.164;3pkt 3fpkt", shape=invtriangle, color=brown];
9268[label="132.18.80.164;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1296[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.80.164:33274, 135.76.144.210:13}[33.3333%]&lt;BR/&gt;{132.18.80.164:32803, 53.109.181.234:80}[33.3333%]&lt;BR/&gt;{132.18.80.164:33125, 53.109.181.234:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 33125: (21.4286%)&lt;BR/&gt; 32803: (21.4286%)&lt;BR/&gt; 33274: (7.14286%)&lt;BR/&gt; 13: (7.14286%)&gt;];
}
5280--7666[label="1;2pkt 2fpkt"];
5280--9268[label="1;2pkt 2fpkt"];
7666--9268[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="53.109.181.234" dst_port="80" src_ip="132.18.80.164" src_port="33125"/>
      <filter dst_ip="53.109.181.234" dst_port="80" src_ip="132.18.80.164" src_port="32803"/>
      <filter dst_ip="135.76.144.210" dst_port="13" src_ip="132.18.80.164" src_port="33274"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1297{
style=filled;
color=gray75;
5284[label="149.33.164.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7670[label="149.33.164.164;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1297[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.33.164.164:80, 132.19.109.152:2876}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2876: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5284--7670[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.109.152" dst_port="2876" src_ip="149.33.164.164" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1298{
style=filled;
color=gray75;
2134[label="217.32.96.26;s;127pkt 127fpkt", shape=diamond, color=yellow];
2352[label="161.223.195.69;d;104pkt 104fpkt", shape=diamond, color=yellow];
2652[label="67.53.196.193;s;7pkt 7fpkt", shape=diamond, color=yellow];
3689[label="217.32.96.26;142pkt 142fpkt", shape=pentagon, color=darkviolet];
5610[label="67.53.196.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7892[label="67.53.196.193;6pkt 6fpkt", shape=invtriangle, color=brown];
9412[label="67.53.196.193;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1298[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.32.96.26:80, 161.223.195.69:*}[84.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1385: (0.502513%)&lt;BR/&gt; 1379: (0.502513%)&lt;BR/&gt; 1377: (0.502513%)&lt;BR/&gt; 1375: (0.502513%)&gt;];
}
2134--2247[label="0.015748;2pkt 2fpkt"];
2134--2352[label="1;104pkt 104fpkt"];
2134--3288[label="0.0551181;7pkt 7fpkt"];
2134--3292[label="0.0551181;7pkt 7fpkt"];
2134--3303[label="0.0551181;7pkt 7fpkt"];
2134--3689[label="0.992126;126pkt 126fpkt"];
2134--6557[label="1;127pkt 127fpkt"];
2134--8553[label="0.992126;126pkt 126fpkt"];
2352--3288[label="0.0673077;7pkt 7fpkt"];
2352--3292[label="0.0673077;7pkt 7fpkt"];
2352--3303[label="0.0673077;7pkt 7fpkt"];
2352--3689[label="0.990385;103pkt 103fpkt"];
2352--6557[label="1;104pkt 104fpkt"];
2352--8553[label="0.990385;103pkt 103fpkt"];
2652--3292[label="0.857143;6pkt 6fpkt"];
2652--3303[label="0.857143;6pkt 6fpkt"];
2652--5610[label="1;6pkt 6fpkt"];
2652--7892[label="1;6pkt 6fpkt"];
2652--9412[label="1;6pkt 6fpkt"];
3689--6557[label="1;142pkt 142fpkt"];
3689--8553[label="1;142pkt 142fpkt"];
5610--7892[label="1;6pkt 6fpkt"];
5610--9412[label="1;6pkt 6fpkt"];
7892--9412[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.195.69" src_ip="217.32.96.26" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1300{
style=filled;
color=gray75;
1632[label="132.19.53.165;s;128pkt 128fpkt", shape=diamond, color=yellow];
5290[label="132.19.53.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7674[label="132.19.53.165;1pkt 1fpkt", shape=invtriangle, color=brown];
9274[label="132.19.53.165;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1300[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.53.165:*, *:80}[96.0938%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9466%)&lt;BR/&gt; 1863: (1.9084%)&lt;BR/&gt; 123: (1.9084%)&lt;BR/&gt; 63396: (1.52672%)&lt;BR/&gt; 65265: (0.381679%)&gt;];
}
1632--1683[label="0.0357143;2pkt 2fpkt"];
1632--1898[label="0.0212766;2pkt 2fpkt"];
1632--1921[label="0.0390625;5pkt 5fpkt"];
1632--1925[label="0.0169492;1pkt 1fpkt"];
1632--2573[label="0.0208333;1pkt 1fpkt"];
1632--3296[label="0.0078125;1pkt 1fpkt"];
1632--5290[label="1;1pkt 1fpkt"];
1632--7674[label="1;1pkt 1fpkt"];
1632--9274[label="1;1pkt 1fpkt"];
5290--7674[label="1;1pkt 1fpkt"];
5290--9274[label="1;1pkt 1fpkt"];
7674--9274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.53.165"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1301{
style=filled;
color=gray75;
576[label="195.80.108.165;s;141pkt 141fpkt", shape=diamond, color=yellow];
5293[label="195.80.108.165;148pkt 148fpkt", shape=pentagon, color=darkviolet];
7675[label="195.80.108.165;147pkt 147fpkt", shape=invtriangle, color=brown];
stat1301[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.108.165:80, *:*}[99.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.656%)&lt;BR/&gt; 63050: (0.344037%)&lt;BR/&gt; 60734: (0.344037%)&lt;BR/&gt; 60187: (0.344037%)&lt;BR/&gt; 59313: (0.344037%)&gt;];
}
576--3288[label="0.0496454;7pkt 7fpkt"];
576--3292[label="0.113475;16pkt 16fpkt"];
576--3303[label="0.113475;16pkt 16fpkt"];
576--5293[label="1;141pkt 141fpkt"];
576--7675[label="0.992908;140pkt 140fpkt"];
5293--7675[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter src_ip="195.80.108.165" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.23.131.165"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.23.165.165"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1304{
style=filled;
color=gray75;
5300[label="132.19.245.165;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7680[label="132.19.245.165;16pkt 16fpkt", shape=invtriangle, color=brown];
9275[label="132.19.245.165;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1304[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.245.165:*, 197.81.184.154:80}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1918: (3.19149%)&lt;BR/&gt; 1916: (3.19149%)&lt;BR/&gt; 1915: (3.19149%)&lt;BR/&gt; 1913: (3.19149%)&gt;];
}
5300--7680[label="1;16pkt 16fpkt"];
5300--9275[label="1;15pkt 15fpkt"];
7680--9275[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="197.81.184.154" dst_port="80" src_ip="132.19.245.165"/>
    </slice>
    <from sec="1144127206" usec="0"/>
    <to sec="1144127521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.156.70.166"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.174.79.166"/>
    </slice>
    <from sec="1144126849" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.49895,2.38423,999,1 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1307{
style=filled;
color=gray75;
90[label="161.223.32.232s;2pkt 2fpkt", shape=rectangle, color=red];
804[label="147.13.241.24;d;3pkt 3fpkt", shape=diamond, color=yellow];
5308[label="194.192.79.166;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9279[label="194.192.79.166;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1307[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.32.232:4982, 214.214.94.31:3042}[20%]&lt;BR/&gt;{194.192.79.166:80, 147.13.220.1:30041}[20%]&lt;BR/&gt;{194.192.79.166:0, 147.13.241.24:0}[20%]&lt;BR/&gt;{194.192.79.166:554, 147.13.241.24:2178}[20%]&lt;BR/&gt;{194.192.79.166:5004, 147.13.241.24:2184}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (23.0769%)&lt;BR/&gt; 5004: (15.3846%)&lt;BR/&gt; 2184: (15.3846%)&lt;BR/&gt; 2178: (11.5385%)&lt;BR/&gt; 554: (11.5385%)&gt;];
}
90--214[label="0.5;1pkt 1fpkt"];
90--275[label="0.5;1pkt 1fpkt"];
90--804[label="0.5;1pkt 1fpkt"];
90--837[label="0.5;1pkt 1fpkt"];
90--2708[label="0.5;1pkt 1fpkt"];
90--3002[label="0.5;1pkt 1fpkt"];
90--5308[label="0.5;1pkt 1fpkt"];
90--6073[label="0.5;1pkt 1fpkt"];
90--8226[label="0.5;1pkt 1fpkt"];
90--9279[label="0.5;1pkt 1fpkt"];
90--9632[label="0.5;1pkt 1fpkt"];
804--3002[label="1;3pkt 3fpkt"];
804--5308[label="1;3pkt 3fpkt"];
804--7686[label="0.666667;2pkt 2fpkt"];
804--9279[label="1;3pkt 3fpkt"];
5308--7686[label="1;3pkt 3fpkt"];
5308--9279[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.241.24" dst_port="2184" src_ip="194.192.79.166" src_port="5004"/>
      <filter dst_ip="147.13.241.24" dst_port="2178" src_ip="194.192.79.166" src_port="554"/>
      <filter dst_ip="147.13.241.24" src_ip="194.192.79.166"/>
      <filter dst_ip="147.13.220.1" dst_port="30041" src_ip="194.192.79.166" src_port="80"/>
      <filter dst_ip="214.214.94.31" dst_port="3042" src_ip="161.223.32.232" src_port="4982"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.158.149.166"/>
    </slice>
    <from sec="1144127605" usec="0"/>
    <to sec="1144127632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1309{
style=filled;
color=gray75;
5314[label="132.19.158.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7688[label="132.19.158.166;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1309[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.158.166:80, 219.72.20.150:15577}[50%]&lt;BR/&gt;{132.19.158.166:80, 219.72.20.150:15586}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 15586: (25%)&lt;BR/&gt; 15577: (25%)&gt;];
}
5314--7688[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.72.20.150" dst_port="15586" src_ip="132.19.158.166" src_port="80"/>
      <filter dst_ip="219.72.20.150" dst_port="15577" src_ip="132.19.158.166" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1310{
style=filled;
color=gray75;
5320[label="164.23.202.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7691[label="164.23.202.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1310[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.202.166:113, 205.193.63.234:1133}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1133: (50%)&lt;BR/&gt; 113: (50%)&gt;];
}
5320--7691[label="1;1pkt 1fpkt"];
5320--9283[label="1;1pkt 1fpkt"];
7691--9283[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="205.193.63.234" dst_port="1133" src_ip="164.23.202.166" src_port="113"/>
    </slice>
    <from sec="1144126974" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1311{
style=filled;
color=gray75;
5328[label="161.223.44.167;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7699[label="161.223.44.167;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1311[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.44.167:58773, *:*}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58773: (38%)&lt;BR/&gt; 58805: (8%)&lt;BR/&gt; 49005: (4%)&lt;BR/&gt; 47716: (4%)&lt;BR/&gt; 42895: (4%)&gt;];
}
5328--7699[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.44.167" src_port="58773"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1312{
style=filled;
color=gray75;
5333[label="161.223.213.167;29pkt 29fpkt", shape=pentagon, color=darkviolet];
7702[label="161.223.213.167;29pkt 29fpkt", shape=invtriangle, color=brown];
9290[label="161.223.213.167;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1312[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.213.167:1586, *:*}[93.1034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1586: (46.5116%)&lt;BR/&gt; 62073: (1.74419%)&lt;BR/&gt; 59407: (1.74419%)&lt;BR/&gt; 58163: (1.74419%)&lt;BR/&gt; 56771: (1.74419%)&gt;];
}
5333--7702[label="1;29pkt 29fpkt"];
5333--9290[label="1;28pkt 28fpkt"];
7702--9290[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="161.223.213.167" src_port="1586"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.125.140.168"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
189[label="216.53.8.169;s;1265pkt 1265fpkt", shape=diamond, color=yellow];
298[label="216.53.8.140;s;1144pkt 1144fpkt", shape=diamond, color=yellow];
395[label="210.226.96.136;s;1501pkt 1501fpkt", shape=diamond, color=yellow];
417[label="195.89.105.150;d;364pkt 364fpkt", shape=diamond, color=yellow];
1987[label="195.5.205.72;s;45pkt 45fpkt", shape=diamond, color=yellow];
2162[label="128.202.18.65;d;93pkt 93fpkt", shape=diamond, color=yellow];
2234[label="210.88.158.7;s;48pkt 48fpkt", shape=diamond, color=yellow];
2388[label="216.69.184.50;s;56pkt 56fpkt", shape=diamond, color=yellow];
2433[label="33.107.249.57;s;46pkt 46fpkt", shape=diamond, color=yellow];
3227[label="216.53.8.169;s;1265pkt 1265fpkt", shape=hexagon, color=black];
3359[label="195.232.47.4;17pkt 17fpkt", shape=pentagon, color=darkviolet];
3412[label="210.88.158.7;49pkt 49fpkt", shape=pentagon, color=darkviolet];
3456[label="32.136.156.10;19pkt 19fpkt", shape=pentagon, color=darkviolet];
3768[label="32.136.145.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
3953[label="216.69.184.50;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4036[label="33.107.249.57;56pkt 56fpkt", shape=pentagon, color=darkviolet];
4237[label="195.5.205.72;44pkt 44fpkt", shape=pentagon, color=darkviolet];
4282[label="194.233.10.76;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4428[label="216.69.170.88;54pkt 54fpkt", shape=pentagon, color=darkviolet];
4514[label="216.89.64.97;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4522[label="197.17.47.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4645[label="216.196.66.109;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4974[label="216.53.8.140;1379pkt 1379fpkt", shape=pentagon, color=darkviolet];
5275[label="195.14.230.163;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5346[label="216.53.8.169;1380pkt 1380fpkt", shape=pentagon, color=darkviolet];
5854[label="32.136.180.212;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5997[label="36.72.168.224;26pkt 26fpkt", shape=pentagon, color=darkviolet];
6264[label="37.202.32.252;56pkt 56fpkt", shape=pentagon, color=darkviolet];
6365[label="210.88.158.7;50pkt 50fpkt", shape=invtriangle, color=brown];
6393[label="32.136.156.10;19pkt 19fpkt", shape=invtriangle, color=brown];
6727[label="216.69.184.50;55pkt 55fpkt", shape=invtriangle, color=brown];
6927[label="195.5.205.72;44pkt 44fpkt", shape=invtriangle, color=brown];
7066[label="216.69.170.88;54pkt 54fpkt", shape=invtriangle, color=brown];
7120[label="216.89.64.97;3pkt 3fpkt", shape=invtriangle, color=brown];
7127[label="197.17.47.98;2pkt 2fpkt", shape=invtriangle, color=brown];
7446[label="216.53.8.140;1379pkt 1379fpkt", shape=invtriangle, color=brown];
7662[label="195.14.230.163;7pkt 7fpkt", shape=invtriangle, color=brown];
7711[label="216.53.8.169;1380pkt 1380fpkt", shape=invtriangle, color=brown];
8062[label="32.136.180.212;7pkt 7fpkt", shape=invtriangle, color=brown];
8348[label="38.66.11.250;10pkt 10fpkt", shape=invtriangle, color=brown];
8434[label="210.88.158.7;50pkt 50fpkt", shape=invhouse, color=bisque];
8654[label="216.69.184.50;55pkt 55fpkt", shape=invhouse, color=bisque];
8879[label="216.69.170.88;54pkt 54fpkt", shape=invhouse, color=bisque];
9122[label="216.53.8.140;1378pkt 1378fpkt", shape=invhouse, color=bisque];
9522[label="32.136.180.212;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 195.89.105.215:*}[38.7634%]&lt;BR/&gt;{*:80, 195.89.105.214:*}[38.6812%]&lt;BR/&gt;{210.226.96.136:80, *:*}[30.834%]&lt;BR/&gt;{216.53.8.169:80, *:*}[28.3484%]&lt;BR/&gt;{216.53.8.140:80, *:*}[28.3279%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.535%)&lt;BR/&gt; 443: (0.420726%)&lt;BR/&gt; 53753: (0.0332152%)&lt;BR/&gt; 53341: (0.0332152%)&lt;BR/&gt; 65428: (0.0295247%)&gt;];
}
189--417[label="0.134615;49pkt 49fpkt"];
189--787[label="0.375494;475pkt 475fpkt"];
189--788[label="0.468775;593pkt 593fpkt"];
189--3227[label="1;1265pkt 1265fpkt"];
189--3288[label="0.0837945;106pkt 106fpkt"];
189--3292[label="0.0624506;79pkt 79fpkt"];
189--3303[label="0.0624506;79pkt 79fpkt"];
189--5346[label="1;1265pkt 1265fpkt"];
189--7711[label="1;1265pkt 1265fpkt"];
298--417[label="0.14011;51pkt 51fpkt"];
298--787[label="0.41521;475pkt 475fpkt"];
298--788[label="0.467657;535pkt 535fpkt"];
298--3288[label="0.0952797;109pkt 109fpkt"];
298--3292[label="0.0699301;80pkt 80fpkt"];
298--3303[label="0.0699301;80pkt 80fpkt"];
298--4974[label="1;1144pkt 1144fpkt"];
298--7446[label="1;1144pkt 1144fpkt"];
298--9122[label="0.999126;1143pkt 1143fpkt"];
395--417[label="0.357143;130pkt 130fpkt"];
395--787[label="0.277815;417pkt 417fpkt"];
395--788[label="0.359094;539pkt 539fpkt"];
395--858[label="0.134615;84pkt 84fpkt"];
395--2137[label="0.527473;48pkt 48fpkt"];
395--3288[label="0.0612925;92pkt 92fpkt"];
395--3292[label="0.0572951;86pkt 86fpkt"];
395--3303[label="0.0572951;86pkt 86fpkt"];
417--573[label="0.00274725;1pkt 1fpkt"];
417--989[label="0.0116279;1pkt 1fpkt"];
417--1180[label="0.333333;3pkt 3fpkt"];
417--1519[label="0.0295359;7pkt 7fpkt"];
417--1987[label="0.177778;8pkt 8fpkt"];
417--2234[label="0.0208333;1pkt 1fpkt"];
417--2388[label="0.0714286;4pkt 4fpkt"];
417--2433[label="0.0217391;1pkt 1fpkt"];
417--2979[label="0.333333;3pkt 3fpkt"];
417--3227[label="0.134615;49pkt 49fpkt"];
417--3288[label="0.14011;51pkt 51fpkt"];
417--3292[label="0.00824176;3pkt 3fpkt"];
417--3303[label="0.00824176;3pkt 3fpkt"];
417--3329[label="0.0108696;1pkt 1fpkt"];
417--3412[label="0.0204082;1pkt 1fpkt"];
417--3456[label="0.421053;8pkt 8fpkt"];
417--3717[label="0.0212766;2pkt 2fpkt"];
417--3953[label="0.0714286;4pkt 4fpkt"];
417--4036[label="0.0178571;1pkt 1fpkt"];
417--4223[label="0.0108696;1pkt 1fpkt"];
417--4237[label="0.159091;7pkt 7fpkt"];
417--4306[label="0.01;1pkt 1fpkt"];
417--4428[label="0.0555556;3pkt 3fpkt"];
417--4514[label="0.5;2pkt 2fpkt"];
417--4646[label="0.0107527;1pkt 1fpkt"];
417--4652[label="0.00578035;1pkt 1fpkt"];
417--4875[label="0.08;2pkt 2fpkt"];
417--4974[label="0.14011;51pkt 51fpkt"];
417--5219[label="0.25;2pkt 2fpkt"];
417--5346[label="0.134615;49pkt 49fpkt"];
417--5625[label="0.0185185;1pkt 1fpkt"];
417--5854[label="0.5;3pkt 3fpkt"];
417--5997[label="0.0384615;1pkt 1fpkt"];
417--6206[label="0.0283401;7pkt 7fpkt"];
417--6302[label="0.0108696;1pkt 1fpkt"];
417--6365[label="0.02;1pkt 1fpkt"];
417--6393[label="0.421053;8pkt 8fpkt"];
417--6573[label="0.0107527;1pkt 1fpkt"];
417--6727[label="0.0545455;3pkt 3fpkt"];
417--6919[label="0.0108696;1pkt 1fpkt"];
417--6927[label="0.159091;7pkt 7fpkt"];
417--7066[label="0.0555556;3pkt 3fpkt"];
417--7120[label="0.333333;1pkt 1fpkt"];
417--7210[label="0.0108696;1pkt 1fpkt"];
417--7214[label="0.00578035;1pkt 1fpkt"];
417--7379[label="0.08;2pkt 2fpkt"];
417--7446[label="0.14011;51pkt 51fpkt"];
417--7618[label="0.25;2pkt 2fpkt"];
417--7711[label="0.134615;49pkt 49fpkt"];
417--7906[label="0.0185185;1pkt 1fpkt"];
417--8062[label="0.571429;4pkt 4fpkt"];
417--8393[label="0.0108696;1pkt 1fpkt"];
417--8434[label="0.02;1pkt 1fpkt"];
417--8564[label="0.0212766;2pkt 2fpkt"];
417--8654[label="0.0545455;3pkt 3fpkt"];
417--8785[label="0.0108696;1pkt 1fpkt"];
417--8829[label="0.0106383;1pkt 1fpkt"];
417--8879[label="0.0555556;3pkt 3fpkt"];
417--8971[label="0.0107527;1pkt 1fpkt"];
417--9122[label="0.137363;50pkt 50fpkt"];
417--9419[label="0.0188679;1pkt 1fpkt"];
417--9522[label="0.5;3pkt 3fpkt"];
1987--3288[label="0.111111;5pkt 5fpkt"];
1987--3292[label="0.0222222;1pkt 1fpkt"];
1987--3303[label="0.0222222;1pkt 1fpkt"];
1987--4237[label="1;44pkt 44fpkt"];
1987--6927[label="1;44pkt 44fpkt"];
2162--2194[label="0.444444;24pkt 24fpkt"];
2162--2234[label="0.208333;10pkt 10fpkt"];
2162--2606[label="0.0869565;4pkt 4fpkt"];
2162--2818[label="0.172043;16pkt 16fpkt"];
2162--3232[label="0.11828;11pkt 11fpkt"];
2162--3288[label="0.0430108;4pkt 4fpkt"];
2162--3292[label="0.11828;11pkt 11fpkt"];
2162--3303[label="0.11828;11pkt 11fpkt"];
2162--3343[label="0.666667;4pkt 4fpkt"];
2162--3412[label="0.204082;10pkt 10fpkt"];
2162--3486[label="0.0149254;1pkt 1fpkt"];
2162--3865[label="0.11828;11pkt 11fpkt"];
2162--4205[label="0.172043;16pkt 16fpkt"];
2162--4216[label="0.08;4pkt 4fpkt"];
2162--6312[label="0.666667;4pkt 4fpkt"];
2162--6365[label="0.2;10pkt 10fpkt"];
2162--6416[label="0.0147059;1pkt 1fpkt"];
2162--6666[label="0.11828;11pkt 11fpkt"];
2162--6904[label="0.172043;16pkt 16fpkt"];
2162--8399[label="0.666667;4pkt 4fpkt"];
2162--8434[label="0.2;10pkt 10fpkt"];
2162--8464[label="0.0147059;1pkt 1fpkt"];
2162--8619[label="0.11828;11pkt 11fpkt"];
2162--8774[label="0.172043;16pkt 16fpkt"];
2234--3412[label="0.979167;47pkt 47fpkt"];
2234--6365[label="1;48pkt 48fpkt"];
2234--8434[label="1;48pkt 48fpkt"];
2388--3292[label="0.0178571;1pkt 1fpkt"];
2388--3303[label="0.0178571;1pkt 1fpkt"];
2388--3953[label="1;56pkt 56fpkt"];
2388--6727[label="1;55pkt 55fpkt"];
2388--8654[label="1;55pkt 55fpkt"];
2433--3292[label="0.152174;7pkt 7fpkt"];
2433--3303[label="0.152174;7pkt 7fpkt"];
2433--4036[label="1;46pkt 46fpkt"];
3227--3288[label="0.0837945;106pkt 106fpkt"];
3227--3292[label="0.0624506;79pkt 79fpkt"];
3227--3303[label="0.0624506;79pkt 79fpkt"];
3227--5346[label="1;1265pkt 1265fpkt"];
3227--7711[label="1;1265pkt 1265fpkt"];
3359--6327[label="1;17pkt 17fpkt"];
3359--8409[label="1;17pkt 17fpkt"];
3412--6365[label="1;49pkt 49fpkt"];
3412--8434[label="1;49pkt 49fpkt"];
3456--6393[label="1;19pkt 19fpkt"];
3768--6602[label="1;1pkt 1fpkt"];
3768--8580[label="1;1pkt 1fpkt"];
3953--6727[label="1;55pkt 55fpkt"];
3953--8654[label="1;55pkt 55fpkt"];
4237--6927[label="1;44pkt 44fpkt"];
4282--6962[label="1;9pkt 9fpkt"];
4282--8813[label="1;9pkt 9fpkt"];
4428--7066[label="1;54pkt 54fpkt"];
4428--8879[label="1;54pkt 54fpkt"];
4514--7120[label="1;3pkt 3fpkt"];
4522--7127[label="1;2pkt 2fpkt"];
4522--8919[label="1;3pkt 3fpkt"];
4645--7209[label="1;3pkt 3fpkt"];
4645--8970[label="1;3pkt 3fpkt"];
4974--7446[label="1;1379pkt 1379fpkt"];
4974--9122[label="1;1378pkt 1378fpkt"];
5275--7662[label="1;6pkt 6fpkt"];
5275--9265[label="1;6pkt 6fpkt"];
5346--7711[label="1;1380pkt 1380fpkt"];
5854--8062[label="1;6pkt 6fpkt"];
5854--9522[label="1;6pkt 6fpkt"];
6264--8364[label="1;56pkt 56fpkt"];
6264--9727[label="1;55pkt 55fpkt"];
6365--8434[label="1;50pkt 50fpkt"];
6727--8654[label="1;55pkt 55fpkt"];
7066--8879[label="1;54pkt 54fpkt"];
7127--8919[label="1;2pkt 2fpkt"];
7446--9122[label="1;1378pkt 1378fpkt"];
7662--9265[label="1;6pkt 6fpkt"];
8062--9522[label="1;6pkt 6fpkt"];
8348--9719[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.96.136" src_port="80"/>
      <filter src_ip="216.53.8.169" src_port="80"/>
      <filter src_ip="216.53.8.140" src_port="80"/>
      <filter dst_ip="195.89.105.215" src_port="80"/>
      <filter dst_ip="195.89.105.214" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1315{
style=filled;
color=gray75;
356[label="208.149.162.118;s;1pkt 1fpkt", shape=diamond, color=yellow];
693[label="54.66.2.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
781[label="195.89.80.143;d;998pkt 998fpkt", shape=diamond, color=yellow];
1226[label="215.34.197.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
5357[label="54.66.2.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6218[label="193.115.95.246;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7715[label="54.66.2.170;2pkt 2fpkt", shape=invtriangle, color=brown];
8767[label="215.34.197.69;1pkt 1fpkt", shape=invhouse, color=bisque];
9094[label="49.155.83.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1315[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4662, 195.89.80.143:*}[38%]&lt;BR/&gt;{*:*, 195.89.80.143:4662}[22.9%]&lt;BR/&gt;{*:*, 195.89.80.143:4672}[22.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (30.7918%)&lt;BR/&gt; 4672: (18.2796%)&lt;BR/&gt; 0: (0.782014%)&lt;BR/&gt; 4661: (0.635386%)&lt;BR/&gt; 4242: (0.488759%)&gt;];
}
356--781[label="1;1pkt 1fpkt"];
693--781[label="1;1pkt 1fpkt"];
693--5357[label="1;1pkt 1fpkt"];
693--7715[label="1;1pkt 1fpkt"];
781--1226[label="1;1pkt 1fpkt"];
781--1648[label="1;1pkt 1fpkt"];
781--2357[label="1;1pkt 1fpkt"];
781--3190[label="1;1pkt 1fpkt"];
781--3199[label="1;1pkt 1fpkt"];
781--3287[label="0.001002;1pkt 1fpkt"];
781--5357[label="0.5;1pkt 1fpkt"];
781--6218[label="0.9375;15pkt 15fpkt"];
781--6542[label="1;1pkt 1fpkt"];
781--7715[label="0.5;1pkt 1fpkt"];
781--8767[label="1;1pkt 1fpkt"];
781--9094[label="1;1pkt 1fpkt"];
1226--8767[label="1;1pkt 1fpkt"];
5357--7715[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.80.143" src_port="4662"/>
      <filter dst_ip="195.89.80.143" dst_port="4662"/>
      <filter dst_ip="195.89.80.143" dst_port="4672"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1316{
style=filled;
color=gray75;
5361[label="36.253.85.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7717[label="36.253.85.170;1pkt 1fpkt", shape=invtriangle, color=brown];
9300[label="36.253.85.170;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1316[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.253.85.170:55943, 195.80.108.165:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55943: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5361--7717[label="1;1pkt 1fpkt"];
5361--9300[label="1;1pkt 1fpkt"];
7717--9300[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.80.108.165" dst_port="80" src_ip="36.253.85.170" src_port="55943"/>
    </slice>
    <from sec="1144127658" usec="0"/>
    <to sec="1144127683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1317{
style=filled;
color=gray75;
738[label="132.19.101.170;s;21pkt 21fpkt", shape=diamond, color=yellow];
5363[label="132.19.101.170;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7719[label="132.19.101.170;20pkt 20fpkt", shape=invtriangle, color=brown];
9302[label="132.19.101.170;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1317[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.101.170:*, *:80}[47.619%]&lt;BR/&gt;{132.19.101.170:*, *:9592}[23.8095%]&lt;BR/&gt;{132.19.101.170:9592, *:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.0964%)&lt;BR/&gt; 9592: (23.494%)&lt;BR/&gt; 4960: (2.40964%)&lt;BR/&gt; 3158: (2.40964%)&lt;BR/&gt; 2448: (2.40964%)&gt;];
}
738--5363[label="1;21pkt 21fpkt"];
738--7719[label="1;20pkt 20fpkt"];
738--9302[label="1;21pkt 21fpkt"];
5363--7719[label="1;20pkt 20fpkt"];
5363--9302[label="1;21pkt 21fpkt"];
7719--9302[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.101.170" src_port="9592"/>
      <filter dst_port="80" src_ip="132.19.101.170"/>
      <filter dst_port="9592" src_ip="132.19.101.170"/>
    </slice>
    <from sec="1144126844" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1318{
style=filled;
color=gray75;
818[label="83.215.71.171;s;39pkt 39fpkt", shape=diamond, color=yellow];
1816[label="147.13.230.227;d;33pkt 33fpkt", shape=diamond, color=yellow];
3558[label="196.206.188.17;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5377[label="83.215.71.171;46pkt 46fpkt", shape=pentagon, color=darkviolet];
7728[label="83.215.71.171;46pkt 46fpkt", shape=invtriangle, color=brown];
stat1318[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.215.71.171:8080, 147.13.230.227:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (45.509%)&lt;BR/&gt; 19085: (1.1976%)&lt;BR/&gt; 19084: (1.1976%)&lt;BR/&gt; 3014: (1.1976%)&lt;BR/&gt; 3013: (1.1976%)&gt;];
}
818--1816[label="0.878788;29pkt 29fpkt"];
818--5377[label="1;39pkt 39fpkt"];
818--7728[label="1;39pkt 39fpkt"];
1816--3558[label="0.333333;1pkt 1fpkt"];
1816--5377[label="0.878788;29pkt 29fpkt"];
1816--7728[label="0.878788;29pkt 29fpkt"];
5377--7728[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.227" src_ip="83.215.71.171" src_port="8080"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1319{
style=filled;
color=gray75;
1470[label="36.84.173.59;d;2pkt 2fpkt", shape=diamond, color=yellow];
1973[label="161.223.240.171;s;27pkt 27fpkt", shape=diamond, color=yellow];
3058[label="161.223.240.171;s;27pkt 27fpkt", shape=hexagon, color=black];
5384[label="161.223.240.171;27pkt 27fpkt", shape=pentagon, color=darkviolet];
7732[label="161.223.240.171;26pkt 26fpkt", shape=invtriangle, color=brown];
stat1319[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.240.171:*, 196.114.4.99:80}[53.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1651%)&lt;BR/&gt; 4280: (2.29358%)&lt;BR/&gt; 4278: (1.83486%)&lt;BR/&gt; 4276: (1.83486%)&lt;BR/&gt; 4274: (1.83486%)&gt;];
}
1470--1973[label="0.5;1pkt 1fpkt"];
1470--2964[label="0.5;1pkt 1fpkt"];
1470--3058[label="0.5;1pkt 1fpkt"];
1470--3072[label="1;2pkt 2fpkt"];
1470--3296[label="0.5;1pkt 1fpkt"];
1470--5384[label="0.5;1pkt 1fpkt"];
1470--7732[label="0.5;1pkt 1fpkt"];
1973--3058[label="1;27pkt 27fpkt"];
1973--3072[label="0.5;1pkt 1fpkt"];
1973--5384[label="1;27pkt 27fpkt"];
1973--7732[label="1;26pkt 26fpkt"];
3058--3072[label="0.5;1pkt 1fpkt"];
3058--5384[label="1;27pkt 27fpkt"];
3058--7732[label="1;26pkt 26fpkt"];
5384--7732[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="196.114.4.99" dst_port="80" src_ip="161.223.240.171"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1320{
style=filled;
color=gray75;
1218[label="132.19.69.231;s;140pkt 140fpkt", shape=diamond, color=yellow];
6123[label="194.212.156.236;97pkt 97fpkt", shape=pentagon, color=darkviolet];
8259[label="194.212.156.236;97pkt 97fpkt", shape=invtriangle, color=brown];
stat1320[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.156.236:*, *:*}[40.9283%]&lt;BR/&gt;{132.19.69.231:*, *:80}[25.3165%]&lt;BR/&gt;{132.19.69.231:*, *:443}[21.519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (17.6647%)&lt;BR/&gt; 443: (8.23353%)&lt;BR/&gt; 1863: (2.54491%)&lt;BR/&gt; 14771: (1.49701%)&lt;BR/&gt; 14409: (1.49701%)&gt;];
}
1218--1299[label="0.00714286;1pkt 1fpkt"];
1218--1513[label="0.0214286;3pkt 3fpkt"];
1218--1517[label="0.0142857;2pkt 2fpkt"];
1218--1818[label="0.0126582;1pkt 1fpkt"];
1218--2368[label="0.0863309;12pkt 12fpkt"];
1218--2555[label="0.00714286;1pkt 1fpkt"];
1218--2574[label="0.0365854;3pkt 3fpkt"];
1218--3295[label="0.0285714;4pkt 4fpkt"];
1218--3296[label="0.0214286;3pkt 3fpkt"];
1218--6064[label="1;140pkt 140fpkt"];
1218--8218[label="1;140pkt 140fpkt"];
6123--8259[label="1;97pkt 97fpkt"];
6123--9655[label="1;97pkt 97fpkt"];
8259--9655[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.156.236"/>
      <filter dst_port="80" src_ip="132.19.69.231"/>
      <filter dst_port="443" src_ip="132.19.69.231"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1321{
style=filled;
color=gray75;
5386[label="215.57.32.172;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7734[label="215.57.32.172;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1321[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.57.32.172:3799, 161.223.47.74:1434}[50%]&lt;BR/&gt;{215.57.32.172:3799, 128.2.49.74:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3799: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5386--7734[label="1;2pkt 2fpkt"];
5386--9312[label="1;2pkt 2fpkt"];
7734--9312[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.2.49.74" dst_port="1434" src_ip="215.57.32.172" src_port="3799"/>
      <filter dst_ip="161.223.47.74" dst_port="1434" src_ip="215.57.32.172" src_port="3799"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1322{
style=filled;
color=gray75;
5394[label="67.50.154.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7739[label="67.50.154.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1322[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.50.154.172:110, 164.23.223.113:1082}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1082: (50%)&lt;BR/&gt; 110: (50%)&gt;];
}
5394--7739[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.223.113" dst_port="1082" src_ip="67.50.154.172" src_port="110"/>
    </slice>
    <from sec="1144126879" usec="0"/>
    <to sec="1144127066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1323{
style=filled;
color=gray75;
2424[label="132.19.90.173;s;64pkt 64fpkt", shape=diamond, color=yellow];
5403[label="132.19.90.173;64pkt 64fpkt", shape=pentagon, color=darkviolet];
7746[label="132.19.90.173;64pkt 64fpkt", shape=invtriangle, color=brown];
stat1323[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.90.173:*, 196.206.46.108:80}[34.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2188%)&lt;BR/&gt; 1984: (1.5625%)&lt;BR/&gt; 2001: (0.78125%)&lt;BR/&gt; 2000: (0.78125%)&lt;BR/&gt; 1992: (0.78125%)&gt;];
}
2424--5403[label="1;64pkt 64fpkt"];
2424--7746[label="1;64pkt 64fpkt"];
5403--7746[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.46.108" dst_port="80" src_ip="132.19.90.173"/>
    </slice>
    <from sec="1144127028" usec="0"/>
    <to sec="1144127445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1324{
style=filled;
color=gray75;
5417[label="33.16.139.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7750[label="33.16.139.174;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1324[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.16.139.174:58219, 161.223.8.62:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58219: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
5417--7750[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.8.62" dst_port="3128" src_ip="33.16.139.174" src_port="58219"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1325{
style=filled;
color=gray75;
5422[label="132.19.10.175;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7754[label="132.19.10.175;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1325[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.10.175:*, *:25}[58.8235%]&lt;BR/&gt;{132.19.10.175:25, *:*}[41.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 53119: (2.94118%)&lt;BR/&gt; 49908: (2.94118%)&lt;BR/&gt; 36956: (2.94118%)&lt;BR/&gt; 12527: (2.94118%)&gt;];
}
5422--7754[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.10.175" src_port="25"/>
      <filter dst_port="25" src_ip="132.19.10.175"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1326{
style=filled;
color=gray75;
5426[label="132.19.43.175;48pkt 48fpkt", shape=pentagon, color=darkviolet];
7756[label="132.19.43.175;48pkt 48fpkt", shape=invtriangle, color=brown];
9324[label="132.19.43.175;47pkt 47fpkt", shape=invhouse, color=bisque];
stat1326[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.43.175:42724, *:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42724: (46.8531%)&lt;BR/&gt; 12351: (2.0979%)&lt;BR/&gt; 15913: (1.74825%)&lt;BR/&gt; 64322: (1.04895%)&lt;BR/&gt; 60440: (1.04895%)&gt;];
}
5426--7756[label="1;48pkt 48fpkt"];
5426--9324[label="1;47pkt 47fpkt"];
7756--9324[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.43.175" src_port="42724"/>
    </slice>
    <from sec="1144126829" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.34.170.175"/>
    </slice>
    <from sec="1144127572" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.191.211.175"/>
    </slice>
    <from sec="1144127376" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
5436[label="132.18.129.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7765[label="132.18.129.176;1pkt 1fpkt", shape=invtriangle, color=brown];
9329[label="132.18.129.176;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.129.176:53, 197.88.173.7:3676}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3676: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
5436--7765[label="1;1pkt 1fpkt"];
5436--9329[label="1;1pkt 1fpkt"];
7765--9329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.88.173.7" dst_port="3676" src_ip="132.18.129.176" src_port="53"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,011,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1330{
style=filled;
color=gray75;
5445[label="208.72.116.177;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7768[label="208.72.116.177;23pkt 23fpkt", shape=invtriangle, color=brown];
9332[label="208.72.116.177;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1330[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.72.116.177:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 7554: (2.17391%)&lt;BR/&gt; 7423: (2.17391%)&lt;BR/&gt; 7204: (2.17391%)&lt;BR/&gt; 6811: (2.17391%)&gt;];
}
5445--7768[label="1;23pkt 23fpkt"];
5445--9332[label="1;23pkt 23fpkt"];
7768--9332[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="208.72.116.177" src_port="7000"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1331{
style=filled;
color=gray75;
5449[label="208.139.221.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7771[label="208.139.221.177;2pkt 2fpkt", shape=invtriangle, color=brown];
9333[label="208.139.221.177;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1331[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.139.221.177:3975, 147.100.200.139:445}[33.3333%]&lt;BR/&gt;{208.139.221.177:1407, 147.100.200.143:139}[33.3333%]&lt;BR/&gt;{208.139.221.177:3985, 147.100.200.157:445}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.8571%)&lt;BR/&gt; 3985: (21.4286%)&lt;BR/&gt; 3975: (21.4286%)&lt;BR/&gt; 1407: (7.14286%)&lt;BR/&gt; 139: (7.14286%)&gt;];
}
5449--7771[label="1;2pkt 2fpkt"];
5449--9333[label="1;2pkt 2fpkt"];
7771--9333[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.100.200.157" dst_port="445" src_ip="208.139.221.177" src_port="3985"/>
      <filter dst_ip="147.100.200.143" dst_port="139" src_ip="208.139.221.177" src_port="1407"/>
      <filter dst_ip="147.100.200.139" dst_port="445" src_ip="208.139.221.177" src_port="3975"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1332{
style=filled;
color=gray75;
5451[label="84.20.32.178;46pkt 46fpkt", shape=pentagon, color=darkviolet];
7772[label="84.20.32.178;45pkt 45fpkt", shape=invtriangle, color=brown];
stat1332[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.20.32.178:*, *:445}[67.3913%]&lt;BR/&gt;{84.20.32.178:*, *:139}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (33.5165%)&lt;BR/&gt; 139: (16.4835%)&lt;BR/&gt; 4261: (2.1978%)&lt;BR/&gt; 1934: (2.1978%)&lt;BR/&gt; 4935: (1.0989%)&gt;];
}
5451--7772[label="1;45pkt 45fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="84.20.32.178"/>
      <filter dst_port="139" src_ip="84.20.32.178"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144126973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.164.171.178"/>
    </slice>
    <from sec="1144127146" usec="0"/>
    <to sec="1144127194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1334{
style=filled;
color=gray75;
5457[label="216.202.180.178;156pkt 156fpkt", shape=pentagon, color=darkviolet];
7776[label="216.202.180.178;155pkt 155fpkt", shape=invtriangle, color=brown];
9336[label="216.202.180.178;156pkt 156fpkt", shape=invhouse, color=bisque];
stat1334[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.202.180.178:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4187: (0.642398%)&lt;BR/&gt; 2903: (0.642398%)&lt;BR/&gt; 2046: (0.642398%)&lt;BR/&gt; 4999: (0.321199%)&gt;];
}
5457--7776[label="1;155pkt 155fpkt"];
5457--9336[label="1;156pkt 156fpkt"];
7776--9336[label="1;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="216.202.180.178"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1335{
style=filled;
color=gray75;
5462[label="37.202.146.179;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7780[label="37.202.146.179;19pkt 19fpkt", shape=invtriangle, color=brown];
9338[label="37.202.146.179;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1335[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.146.179:80, 147.13.104.1:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2323: (2.54237%)&lt;BR/&gt; 2322: (2.54237%)&lt;BR/&gt; 2321: (2.54237%)&lt;BR/&gt; 2319: (2.54237%)&gt;];
}
5462--7780[label="1;19pkt 19fpkt"];
5462--9338[label="1;20pkt 20fpkt"];
7780--9338[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.104.1" src_ip="37.202.146.179" src_port="80"/>
    </slice>
    <from sec="1144127575" usec="0"/>
    <to sec="1144127593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.13.167.179"/>
    </slice>
    <from sec="1144127244" usec="0"/>
    <to sec="1144127412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.16.120.180"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1338{
style=filled;
color=gray75;
5476[label="209.104.171.180;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7791[label="209.104.171.180;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1338[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.104.171.180:2300, 161.223.8.63:3128}[50%]&lt;BR/&gt;{209.104.171.180:2660, 161.223.8.63:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 2660: (25%)&lt;BR/&gt; 2300: (25%)&gt;];
}
5476--7791[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.8.63" dst_port="3128" src_ip="209.104.171.180" src_port="2660"/>
      <filter dst_ip="161.223.8.63" dst_port="3128" src_ip="209.104.171.180" src_port="2300"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.233.202.180"/>
    </slice>
    <from sec="1144126888" usec="0"/>
    <to sec="1144127458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.23.204.180"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.231.86.182"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1342{
style=filled;
color=gray75;
5490[label="208.72.116.182;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7802[label="208.72.116.182;20pkt 20fpkt", shape=invtriangle, color=brown];
9352[label="208.72.116.182;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1342[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.72.116.182:7000, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 7554: (2.45902%)&lt;BR/&gt; 7423: (2.45902%)&lt;BR/&gt; 7204: (2.45902%)&lt;BR/&gt; 6811: (2.45902%)&gt;];
}
5490--7802[label="1;20pkt 20fpkt"];
5490--9352[label="1;20pkt 20fpkt"];
7802--9352[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="208.72.116.182" src_port="7000"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.123.155.182"/>
    </slice>
    <from sec="1144127321" usec="0"/>
    <to sec="1144127414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1344{
style=filled;
color=gray75;
5492[label="132.19.158.182;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7804[label="132.19.158.182;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1344[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.158.182:*, *:25}[50%]&lt;BR/&gt;{132.19.158.182:995, 32.33.64.43:*}[25%]&lt;BR/&gt;{132.19.158.182:995, 35.59.65.55:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 63803: (6.25%)&lt;BR/&gt; 63754: (6.25%)&lt;BR/&gt; 46313: (6.25%)&gt;];
}
5492--7804[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="132.19.158.182"/>
      <filter dst_ip="35.59.65.55" src_ip="132.19.158.182" src_port="995"/>
      <filter dst_ip="32.33.64.43" src_ip="132.19.158.182" src_port="995"/>
    </slice>
    <from sec="1144126858" usec="0"/>
    <to sec="1144127601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.72.47.183"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1346{
style=filled;
color=gray75;
5500[label="132.19.213.183;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7809[label="132.19.213.183;5pkt 5fpkt", shape=invtriangle, color=brown];
9357[label="132.19.213.183;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1346[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.213.183:2274, 38.202.213.34:1863}[20%]&lt;BR/&gt;{132.19.213.183:2311, 196.206.166.44:1863}[20%]&lt;BR/&gt;{132.19.213.183:1563, 59.97.35.62:14285}[20%]&lt;BR/&gt;{132.19.213.183:1056, 196.206.188.110:1863}[20%]&lt;BR/&gt;{132.19.213.183:2309, 39.64.84.128:1863}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (40%)&lt;BR/&gt; 14285: (10%)&lt;BR/&gt; 2311: (10%)&lt;BR/&gt; 2309: (10%)&lt;BR/&gt; 2274: (10%)&gt;];
}
5500--7809[label="1;5pkt 5fpkt"];
5500--9357[label="1;5pkt 5fpkt"];
7809--9357[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="39.64.84.128" dst_port="1863" src_ip="132.19.213.183" src_port="2309"/>
      <filter dst_ip="196.206.188.110" dst_port="1863" src_ip="132.19.213.183" src_port="1056"/>
      <filter dst_ip="59.97.35.62" dst_port="14285" src_ip="132.19.213.183" src_port="1563"/>
      <filter dst_ip="196.206.166.44" dst_port="1863" src_ip="132.19.213.183" src_port="2311"/>
      <filter dst_ip="38.202.213.34" dst_port="1863" src_ip="132.19.213.183" src_port="2274"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1347{
style=filled;
color=gray75;
5506[label="194.43.69.184;119pkt 119fpkt", shape=pentagon, color=darkviolet];
7814[label="194.43.69.184;119pkt 119fpkt", shape=invtriangle, color=brown];
9360[label="194.43.69.184;119pkt 119fpkt", shape=invhouse, color=bisque];
stat1347[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.43.69.184:*, 147.13.145.132:161}[43.6975%]&lt;BR/&gt;{194.43.69.184:*, 147.13.145.133:161}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 161: (43.6975%)&lt;BR/&gt; 2161: (5.04202%)&lt;BR/&gt; 53: (1.2605%)&lt;BR/&gt; 16324: (0.420168%)&lt;BR/&gt; 16323: (0.420168%)&gt;];
}
5506--7814[label="1;119pkt 119fpkt"];
5506--9360[label="1;119pkt 119fpkt"];
7814--9360[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.145.132" dst_port="161" src_ip="194.43.69.184"/>
      <filter dst_ip="147.13.145.133" dst_port="161" src_ip="194.43.69.184"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1348{
style=filled;
color=gray75;
561[label="209.118.97.184;s;2712pkt 2712fpkt", shape=diamond, color=yellow];
2916[label="209.118.97.184;s;2712pkt 2712fpkt", shape=hexagon, color=black];
5508[label="209.118.97.184;2954pkt 2954fpkt", shape=pentagon, color=darkviolet];
7815[label="209.118.97.184;2953pkt 2953fpkt", shape=invtriangle, color=brown];
stat1348[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.118.97.184:2383, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2383: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
561--1204[label="0.00182815;1pkt 1fpkt"];
561--2323[label="0.00564972;1pkt 1fpkt"];
561--2916[label="1;2712pkt 2712fpkt"];
561--5508[label="1;2712pkt 2712fpkt"];
561--7815[label="0.999631;2711pkt 2711fpkt"];
2916--5508[label="1;2712pkt 2712fpkt"];
2916--7815[label="0.999631;2711pkt 2711fpkt"];
5508--7815[label="1;2953pkt 2953fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="209.118.97.184" src_port="2383"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
5511[label="209.115.119.184;227pkt 227fpkt", shape=pentagon, color=darkviolet];
7817[label="209.115.119.184;227pkt 227fpkt", shape=invtriangle, color=brown];
9362[label="209.115.119.184;227pkt 227fpkt", shape=invhouse, color=bisque];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.115.119.184:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4648: (0.440529%)&lt;BR/&gt; 4543: (0.440529%)&lt;BR/&gt; 4514: (0.440529%)&lt;BR/&gt; 4491: (0.440529%)&gt;];
}
5511--7817[label="1;227pkt 227fpkt"];
5511--9362[label="1;227pkt 227fpkt"];
7817--9362[label="1;227pkt 227fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="209.115.119.184"/>
    </slice>
    <from sec="1144126934" usec="0"/>
    <to sec="1144126963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
5513[label="208.107.178.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7819[label="208.107.178.184;1pkt 1fpkt", shape=invtriangle, color=brown];
9364[label="208.107.178.184;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.107.178.184:3202, 128.28.217.137:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3202: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5513--7819[label="1;1pkt 1fpkt"];
5513--9364[label="1;1pkt 1fpkt"];
7819--9364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.137" dst_port="25" src_ip="208.107.178.184" src_port="3202"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.79.247.185"/>
    </slice>
    <from sec="1144127493" usec="0"/>
    <to sec="1144127533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1352{
style=filled;
color=gray75;
5526[label="39.36.41.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7828[label="39.36.41.186;1pkt 1fpkt", shape=invtriangle, color=brown];
9372[label="39.36.41.186;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1352[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.36.41.186:4165, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4165: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5526--7828[label="1;1pkt 1fpkt"];
5526--9372[label="1;1pkt 1fpkt"];
7828--9372[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="39.36.41.186" src_port="4165"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.162.140.186"/>
    </slice>
    <from sec="1144127562" usec="0"/>
    <to sec="1144127661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1354{
style=filled;
color=gray75;
5536[label="132.19.201.186;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7834[label="132.19.201.186;14pkt 14fpkt", shape=invtriangle, color=brown];
9378[label="132.19.201.186;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1354[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.201.186:25, *:*}[53.3333%]&lt;BR/&gt;{132.19.201.186:*, 196.206.6.60:25}[20%]&lt;BR/&gt;{132.19.201.186:*, *:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.7727%)&lt;BR/&gt; 80: (10.2273%)&lt;BR/&gt; 53706: (3.40909%)&lt;BR/&gt; 52768: (3.40909%)&lt;BR/&gt; 48954: (3.40909%)&gt;];
}
5536--7834[label="1;14pkt 14fpkt"];
5536--9378[label="1;15pkt 15fpkt"];
7834--9378[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.201.186" src_port="25"/>
      <filter dst_port="80" src_ip="132.19.201.186"/>
      <filter dst_ip="196.206.6.60" dst_port="25" src_ip="132.19.201.186"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1355{
style=filled;
color=gray75;
5539[label="215.156.236.186;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7837[label="215.156.236.186;18pkt 18fpkt", shape=invtriangle, color=brown];
9380[label="215.156.236.186;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1355[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.156.236.186:443, 147.13.138.84:*}[73.6842%]&lt;BR/&gt;{215.156.236.186:443, 147.13.8.223:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4610: (2.72727%)&lt;BR/&gt; 4594: (2.72727%)&lt;BR/&gt; 4568: (2.72727%)&lt;BR/&gt; 4553: (2.72727%)&gt;];
}
5539--7837[label="1;18pkt 18fpkt"];
5539--9380[label="1;18pkt 18fpkt"];
7837--9380[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.138.84" src_ip="215.156.236.186" src_port="443"/>
      <filter dst_ip="147.13.8.223" src_ip="215.156.236.186" src_port="443"/>
    </slice>
    <from sec="1144126919" usec="0"/>
    <to sec="1144127610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1356{
style=filled;
color=gray75;
2683[label="194.203.32.187;s;706pkt 706fpkt", shape=diamond, color=yellow];
5540[label="194.203.32.187;960pkt 960fpkt", shape=pentagon, color=darkviolet];
7838[label="194.203.32.187;960pkt 960fpkt", shape=invtriangle, color=brown];
stat1356[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.203.32.187:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3494: (0.0571211%)&lt;BR/&gt; 3490: (0.0571211%)&lt;BR/&gt; 3486: (0.0571211%)&lt;BR/&gt; 3483: (0.0571211%)&gt;];
}
2683--3298[label="0.661473;467pkt 467fpkt"];
2683--5540[label="1;706pkt 706fpkt"];
2683--7838[label="1;706pkt 706fpkt"];
5540--7838[label="1;960pkt 960fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="194.203.32.187"/>
    </slice>
    <from sec="1144127553" usec="0"/>
    <to sec="1144127665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1357{
style=filled;
color=gray75;
5545[label="83.146.150.187;264pkt 264fpkt", shape=pentagon, color=darkviolet];
7841[label="83.146.150.187;263pkt 263fpkt", shape=invtriangle, color=brown];
9382[label="83.146.150.187;263pkt 263fpkt", shape=invhouse, color=bisque];
stat1357[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.146.150.187:1591, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1591: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5545--7841[label="1;263pkt 263fpkt"];
5545--9382[label="1;263pkt 263fpkt"];
7841--9382[label="1;263pkt 263fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="83.146.150.187" src_port="1591"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1358{
style=filled;
color=gray75;
5549[label="82.99.76.188;93pkt 93fpkt", shape=pentagon, color=darkviolet];
7844[label="82.99.76.188;93pkt 93fpkt", shape=invtriangle, color=brown];
stat1358[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.99.76.188:*, *:139}[80.6452%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (40.3226%)&lt;BR/&gt; 445: (9.67742%)&lt;BR/&gt; 3975: (0.537634%)&lt;BR/&gt; 3974: (0.537634%)&lt;BR/&gt; 3973: (0.537634%)&gt;];
}
5549--7844[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="82.99.76.188"/>
    </slice>
    <from sec="1144127181" usec="0"/>
    <to sec="1144127206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1359{
style=filled;
color=gray75;
5560[label="83.134.71.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7855[label="83.134.71.189;1pkt 1fpkt", shape=invtriangle, color=brown];
9388[label="83.134.71.189;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1359[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.134.71.189:1211, 194.212.197.2:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1211: (50%)&gt;];
}
5560--7855[label="1;1pkt 1fpkt"];
5560--9388[label="1;1pkt 1fpkt"];
7855--9388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.197.2" dst_port="1434" src_ip="83.134.71.189" src_port="1211"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1360{
style=filled;
color=gray75;
5562[label="208.56.89.189;248pkt 248fpkt", shape=pentagon, color=darkviolet];
7857[label="208.56.89.189;247pkt 247fpkt", shape=invtriangle, color=brown];
9390[label="208.56.89.189;248pkt 248fpkt", shape=invhouse, color=bisque];
stat1360[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.56.89.189:1085, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1085: (50%)&gt;];
}
5562--7857[label="1;247pkt 247fpkt"];
5562--9390[label="1;248pkt 248fpkt"];
7857--9390[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="208.56.89.189" src_port="1085"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1361{
style=filled;
color=gray75;
5564[label="132.19.98.189;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7858[label="132.19.98.189;9pkt 9fpkt", shape=invtriangle, color=brown];
9391[label="132.19.98.189;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1361[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.98.189:80, 215.145.23.139:*}[66.6667%]&lt;BR/&gt;{132.19.98.189:80, 196.206.212.19:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47885: (5.76923%)&lt;BR/&gt; 47618: (5.76923%)&lt;BR/&gt; 47453: (5.76923%)&lt;BR/&gt; 47187: (5.76923%)&gt;];
}
5564--7858[label="1;9pkt 9fpkt"];
5564--9391[label="1;8pkt 8fpkt"];
7858--9391[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="215.145.23.139" src_ip="132.19.98.189" src_port="80"/>
      <filter dst_ip="196.206.212.19" src_ip="132.19.98.189" src_port="80"/>
    </slice>
    <from sec="1144127127" usec="0"/>
    <to sec="1144127689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.164.144.189"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1363{
style=filled;
color=gray75;
1134[label="132.19.219.189;s;31pkt 31fpkt", shape=diamond, color=yellow];
5569[label="132.19.219.189;31pkt 31fpkt", shape=pentagon, color=darkviolet];
7862[label="132.19.219.189;30pkt 30fpkt", shape=invtriangle, color=brown];
stat1363[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.219.189:*, 216.137.138.104:80}[64.5161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2648: (1.63043%)&lt;BR/&gt; 2647: (1.63043%)&lt;BR/&gt; 2643: (1.63043%)&lt;BR/&gt; 2634: (1.63043%)&gt;];
}
1134--5569[label="1;31pkt 31fpkt"];
1134--7862[label="1;30pkt 30fpkt"];
5569--7862[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="216.137.138.104" dst_port="80" src_ip="132.19.219.189"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.48.129.190"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1365{
style=filled;
color=gray75;
5576[label="34.186.217.190;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7867[label="34.186.217.190;6pkt 6fpkt", shape=invtriangle, color=brown];
9395[label="34.186.217.190;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1365[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.186.217.190:80, 132.19.192.197:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3968: (8.33333%)&lt;BR/&gt; 3966: (8.33333%)&lt;BR/&gt; 3949: (8.33333%)&lt;BR/&gt; 3947: (8.33333%)&gt;];
}
5576--7867[label="1;6pkt 6fpkt"];
5576--9395[label="1;6pkt 6fpkt"];
7867--9395[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.192.197" src_ip="34.186.217.190" src_port="80"/>
    </slice>
    <from sec="1144126892" usec="0"/>
    <to sec="1144126953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1366{
style=filled;
color=gray75;
5585[label="210.226.98.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7875[label="210.226.98.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1366[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.192:5050, 164.23.192.80:1481}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1481: (50%)&gt;];
}
5585--7875[label="1;1pkt 1fpkt"];
5585--9401[label="1;1pkt 1fpkt"];
7875--9401[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.192.80" dst_port="1481" src_ip="210.226.98.192" src_port="5050"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1367{
style=filled;
color=gray75;
5596[label="197.81.181.192;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7882[label="197.81.181.192;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1367[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.81.181.192:80, 161.223.180.181:*}[66.6667%]&lt;BR/&gt;{197.81.181.192:80, 132.19.20.184:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3558: (4.16667%)&lt;BR/&gt; 3557: (4.16667%)&lt;BR/&gt; 3556: (4.16667%)&lt;BR/&gt; 3555: (4.16667%)&gt;];
}
5596--7882[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.180.181" src_ip="197.81.181.192" src_port="80"/>
      <filter dst_ip="132.19.20.184" src_ip="197.81.181.192" src_port="80"/>
    </slice>
    <from sec="1144127163" usec="0"/>
    <to sec="1144127302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.44.89.193"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.173.125.193"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
5614[label="210.55.24.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7896[label="210.55.24.194;1pkt 1fpkt", shape=invtriangle, color=brown];
9413[label="210.55.24.194;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.55.24.194:80, 195.89.66.195:42596}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42596: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5614--7896[label="1;1pkt 1fpkt"];
5614--9413[label="1;1pkt 1fpkt"];
7896--9413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.66.195" dst_port="42596" src_ip="210.55.24.194" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1371{
style=filled;
color=gray75;
5616[label="195.89.85.194;39pkt 39fpkt", shape=pentagon, color=darkviolet];
7898[label="195.89.85.194;39pkt 39fpkt", shape=invtriangle, color=brown];
9415[label="195.89.85.194;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1371[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.85.194:38544, 203.56.125.138:*}[43.5897%]&lt;BR/&gt;{195.89.85.194:38608, 203.56.125.138:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38544: (21.7949%)&lt;BR/&gt; 38608: (16.6667%)&lt;BR/&gt; 4121: (7.69231%)&lt;BR/&gt; 2121: (5.12821%)&lt;BR/&gt; 0: (5.12821%)&gt;];
}
5616--7898[label="1;39pkt 39fpkt"];
5616--9415[label="1;39pkt 39fpkt"];
7898--9415[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="203.56.125.138" src_ip="195.89.85.194" src_port="38544"/>
      <filter dst_ip="203.56.125.138" src_ip="195.89.85.194" src_port="38608"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1372{
style=filled;
color=gray75;
1935[label="210.226.98.194;s;89pkt 89fpkt", shape=diamond, color=yellow];
5617[label="210.226.98.194;92pkt 92fpkt", shape=pentagon, color=darkviolet];
7899[label="210.226.98.194;92pkt 92fpkt", shape=invtriangle, color=brown];
stat1372[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.194:5050, *:*}[52.1739%]&lt;BR/&gt;{210.226.98.194:*, 164.23.144.159:*}[40.2174%]&lt;BR/&gt;{210.226.98.194:20, *:*}[28.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25.8242%)&lt;BR/&gt; 20: (14.2857%)&lt;BR/&gt; 23: (9.89011%)&lt;BR/&gt; 1441: (1.0989%)&lt;BR/&gt; 63494: (0.549451%)&gt;];
}
1935--5617[label="1;89pkt 89fpkt"];
1935--7899[label="1;89pkt 89fpkt"];
5617--7899[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.144.159" src_ip="210.226.98.194"/>
      <filter src_ip="210.226.98.194" src_port="5050"/>
      <filter src_ip="210.226.98.194" src_port="20"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1373{
style=filled;
color=gray75;
5618[label="41.25.103.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7900[label="41.25.103.194;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1373[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.103.194:51158, 194.212.154.1:80}[50%]&lt;BR/&gt;{41.25.103.194:35484, 147.13.50.79:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51158: (25%)&lt;BR/&gt; 35484: (25%)&gt;];
}
5618--7900[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.50.79" dst_port="80" src_ip="41.25.103.194" src_port="35484"/>
      <filter dst_ip="194.212.154.1" dst_port="80" src_ip="41.25.103.194" src_port="51158"/>
    </slice>
    <from sec="1144127033" usec="0"/>
    <to sec="1144127294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.122.17.195"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144127632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1375{
style=filled;
color=gray75;
421[label="132.19.146.166;s;177pkt 177fpkt", shape=diamond, color=yellow];
2765[label="132.19.146.166;s;81pkt 81fpkt", shape=hexagon, color=black];
5312[label="132.19.146.166;186pkt 186fpkt", shape=pentagon, color=darkviolet];
6007[label="195.80.148.225;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8175[label="195.80.148.225;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1375[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.146.166:*, *:80}[32.6425%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.2232%)&lt;BR/&gt; 443: (7.22101%)&lt;BR/&gt; 1863: (0.984683%)&lt;BR/&gt; 35325: (0.765864%)&lt;BR/&gt; 123: (0.765864%)&gt;];
}
421--1296[label="1;1pkt 1fpkt"];
421--1403[label="0.00694444;1pkt 1fpkt"];
421--1425[label="0.0155039;2pkt 2fpkt"];
421--1654[label="0.216667;13pkt 13fpkt"];
421--1898[label="0.0319149;3pkt 3fpkt"];
421--1903[label="0.00757576;1pkt 1fpkt"];
421--2175[label="0.0540541;2pkt 2fpkt"];
421--2350[label="0.0588235;2pkt 2fpkt"];
421--2574[label="0.0243902;2pkt 2fpkt"];
421--2765[label="1;81pkt 81fpkt"];
421--3296[label="0.0169492;3pkt 3fpkt"];
421--5312[label="1;177pkt 177fpkt"];
2765--3296[label="0.0123457;1pkt 1fpkt"];
2765--5312[label="1;81pkt 81fpkt"];
6007--8175[label="1;6pkt 6fpkt"];
6007--9598[label="1;6pkt 6fpkt"];
8175--9598[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.146.166"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1376{
style=filled;
color=gray75;
2642[label="128.202.0.136;d;28pkt 28fpkt", shape=diamond, color=yellow];
2674[label="199.252.49.88;s;24pkt 24fpkt", shape=diamond, color=yellow];
5971[label="38.53.161.222;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8147[label="38.53.161.222;57pkt 57fpkt", shape=invtriangle, color=brown];
stat1376[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.161.222:995, *:*}[68.6747%]&lt;BR/&gt;{199.252.49.88:80, 128.202.0.136:*}[28.9157%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (34.9398%)&lt;BR/&gt; 80: (15.0602%)&lt;BR/&gt; 49669: (0.903614%)&lt;BR/&gt; 49668: (0.903614%)&lt;BR/&gt; 60884: (0.60241%)&gt;];
}
2642--2674[label="1;24pkt 24fpkt"];
2642--5971[label="0.0714286;2pkt 2fpkt"];
2642--8147[label="0.0714286;2pkt 2fpkt"];
2642--9580[label="0.0714286;2pkt 2fpkt"];
5971--8147[label="1;57pkt 57fpkt"];
5971--9580[label="1;56pkt 56fpkt"];
8147--9580[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="38.53.161.222" src_port="995"/>
      <filter dst_ip="128.202.0.136" src_ip="199.252.49.88" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1377{
style=filled;
color=gray75;
5646[label="164.23.131.196;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7920[label="164.23.131.196;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1377[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.131.196:1786, 196.206.188.125:1863}[25%]&lt;BR/&gt;{164.23.131.196:1787, 210.226.98.239:5050}[25%]&lt;BR/&gt;{164.23.131.196:1785, 39.64.11.12:1863}[25%]&lt;BR/&gt;{164.23.131.196:1793, 39.64.11.12:1863}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1863: (37.5%)&lt;BR/&gt; 5050: (12.5%)&lt;BR/&gt; 1793: (12.5%)&lt;BR/&gt; 1787: (12.5%)&lt;BR/&gt; 1786: (12.5%)&gt;];
}
5646--7920[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.64.11.12" dst_port="1863" src_ip="164.23.131.196" src_port="1793"/>
      <filter dst_ip="39.64.11.12" dst_port="1863" src_ip="164.23.131.196" src_port="1785"/>
      <filter dst_ip="210.226.98.239" dst_port="5050" src_ip="164.23.131.196" src_port="1787"/>
      <filter dst_ip="196.206.188.125" dst_port="1863" src_ip="164.23.131.196" src_port="1786"/>
    </slice>
    <from sec="1144127005" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.124.153.196"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,504,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1379{
style=filled;
color=gray75;
91[label="161.223.249.176d;6pkt 6fpkt", shape=rectangle, color=red];
2286[label="106.109.162.196;s;54pkt 54fpkt", shape=diamond, color=yellow];
5650[label="106.109.162.196;117pkt 117fpkt", shape=pentagon, color=darkviolet];
7923[label="106.109.162.196;116pkt 116fpkt", shape=invtriangle, color=brown];
9431[label="106.109.162.196;116pkt 116fpkt", shape=invhouse, color=bisque];
stat1379[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.109.162.196:443, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 60067: (0.488998%)&lt;BR/&gt; 60066: (0.488998%)&lt;BR/&gt; 60065: (0.488998%)&lt;BR/&gt; 60064: (0.488998%)&gt;];
}
91--5650[label="1;6pkt 6fpkt"];
91--7923[label="1;6pkt 6fpkt"];
91--9431[label="1;6pkt 6fpkt"];
2286--2894[label="0.0185185;1pkt 1fpkt"];
2286--5650[label="1;54pkt 54fpkt"];
2286--7923[label="0.981481;53pkt 53fpkt"];
2286--9431[label="0.981481;53pkt 53fpkt"];
5650--7923[label="1;116pkt 116fpkt"];
5650--9431[label="1;116pkt 116fpkt"];
7923--9431[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="106.109.162.196" src_port="443"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.15.171.196"/>
    </slice>
    <from sec="1144126895" usec="0"/>
    <to sec="1144127084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1381{
style=filled;
color=gray75;
5657[label="125.228.242.196;161pkt 161fpkt", shape=pentagon, color=darkviolet];
7928[label="125.228.242.196;161pkt 161fpkt", shape=invtriangle, color=brown];
9433[label="125.228.242.196;160pkt 160fpkt", shape=invhouse, color=bisque];
stat1381[shape=component, label=&lt;Rules:&lt;BR/&gt;{125.228.242.196:0, *:1025}[50.3106%]&lt;BR/&gt;{125.228.242.196:0, *:1026}[49.6894%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 1025: (25.1037%)&lt;BR/&gt; 1026: (24.8963%)&gt;];
}
5657--7928[label="1;161pkt 161fpkt"];
5657--9433[label="1;160pkt 160fpkt"];
7928--9433[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="1025" src_ip="125.228.242.196"/>
      <filter dst_port="1026" src_ip="125.228.242.196"/>
    </slice>
    <from sec="1144127437" usec="0"/>
    <to sec="1144127438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1382{
style=filled;
color=gray75;
5658[label="132.19.245.196;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7929[label="132.19.245.196;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1382[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.245.196:*, 219.73.81.46:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4625: (2.22222%)&lt;BR/&gt; 4624: (2.22222%)&lt;BR/&gt; 4623: (2.22222%)&lt;BR/&gt; 4622: (2.22222%)&gt;];
}
5658--7929[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.81.46" dst_port="80" src_ip="132.19.245.196"/>
    </slice>
    <from sec="1144127131" usec="0"/>
    <to sec="1144127422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1383{
style=filled;
color=gray75;
5669[label="208.121.165.197;214pkt 214fpkt", shape=pentagon, color=darkviolet];
7937[label="208.121.165.197;213pkt 213fpkt", shape=invtriangle, color=brown];
9439[label="208.121.165.197;214pkt 214fpkt", shape=invhouse, color=bisque];
stat1383[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.121.165.197:500, *:500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 500: (100%)&gt;];
}
5669--7937[label="1;213pkt 213fpkt"];
5669--9439[label="1;214pkt 214fpkt"];
7937--9439[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="500" src_ip="208.121.165.197" src_port="500"/>
    </slice>
    <from sec="1144127572" usec="0"/>
    <to sec="1144127573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0611,2.33757,503,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1384{
style=filled;
color=gray75;
1105[label="67.34.162.24;d;310pkt 310fpkt", shape=diamond, color=yellow];
1758[label="132.19.192.197;s;82pkt 82fpkt", shape=diamond, color=yellow];
2991[label="132.19.192.197;s;82pkt 82fpkt", shape=hexagon, color=black];
3049[label="132.19.193.10;s;169pkt 169fpkt", shape=hexagon, color=black];
8584[label="132.19.65.33;18pkt 18fpkt", shape=invhouse, color=bisque];
9554[label="132.19.221.217;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1384[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.51.52:*, 67.34.162.24:80}[35.654%]&lt;BR/&gt;{132.19.193.10:*, *:80}[35.0211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7024%)&lt;BR/&gt; 1351: (0.297619%)&lt;BR/&gt; 1350: (0.297619%)&lt;BR/&gt; 1349: (0.297619%)&lt;BR/&gt; 1322: (0.297619%)&gt;];
}
1105--1758[label="0.756098;62pkt 62fpkt"];
1105--2991[label="0.756098;62pkt 62fpkt"];
1105--3049[label="0.195266;33pkt 33fpkt"];
1105--3778[label="0.882353;15pkt 15fpkt"];
1105--3975[label="0.545161;169pkt 169fpkt"];
1105--5670[label="0.704545;62pkt 62fpkt"];
1105--5912[label="0.5;6pkt 6fpkt"];
1105--6609[label="0.882353;15pkt 15fpkt"];
1105--7938[label="0.712644;62pkt 62fpkt"];
1105--8108[label="0.5;6pkt 6fpkt"];
1105--8584[label="0.833333;15pkt 15fpkt"];
1105--9554[label="0.545455;6pkt 6fpkt"];
1758--1921[label="0.170732;14pkt 14fpkt"];
1758--2991[label="1;82pkt 82fpkt"];
1758--5670[label="1;82pkt 82fpkt"];
1758--7938[label="0.987805;81pkt 81fpkt"];
2991--5670[label="1;82pkt 82fpkt"];
2991--7938[label="0.987805;81pkt 81fpkt"];
3049--3296[label="0.0118343;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.193.10"/>
      <filter dst_ip="67.34.162.24" dst_port="80" src_ip="132.19.51.52"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1385{
style=filled;
color=gray75;
1248[label="210.226.98.198;s;68pkt 68fpkt", shape=diamond, color=yellow];
2860[label="210.226.98.198;s;66pkt 66fpkt", shape=hexagon, color=black];
5679[label="210.226.98.198;68pkt 68fpkt", shape=pentagon, color=darkviolet];
7945[label="210.226.98.198;67pkt 67fpkt", shape=invtriangle, color=brown];
9442[label="210.226.98.198;67pkt 67fpkt", shape=invhouse, color=bisque];
stat1385[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.198:5050, *:*}[55.8824%]&lt;BR/&gt;{210.226.98.198:23, *:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.9762%)&lt;BR/&gt; 23: (14.7321%)&lt;BR/&gt; 20: (7.29167%)&lt;BR/&gt; 1302: (1.4881%)&lt;BR/&gt; 60641: (0.744048%)&gt;];
}
1248--2860[label="1;66pkt 66fpkt"];
1248--5679[label="1;68pkt 68fpkt"];
1248--7945[label="1;67pkt 67fpkt"];
1248--9442[label="1;67pkt 67fpkt"];
2860--5679[label="1;66pkt 66fpkt"];
2860--7945[label="0.984848;65pkt 65fpkt"];
2860--9442[label="0.984848;65pkt 65fpkt"];
5679--7945[label="1;67pkt 67fpkt"];
5679--9442[label="1;67pkt 67fpkt"];
7945--9442[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.198" src_port="5050"/>
      <filter src_ip="210.226.98.198" src_port="23"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.107.144.198"/>
    </slice>
    <from sec="1144126919" usec="0"/>
    <to sec="1144127358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.240.147.198"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1388{
style=filled;
color=gray75;
5684[label="219.46.172.198;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7948[label="219.46.172.198;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1388[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.46.172.198:*, 132.19.216.62:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2289: (5%)&lt;BR/&gt; 2288: (5%)&lt;BR/&gt; 2287: (5%)&lt;BR/&gt; 2286: (5%)&gt;];
}
5684--7948[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.216.62" dst_port="80" src_ip="219.46.172.198"/>
    </slice>
    <from sec="1144126908" usec="0"/>
    <to sec="1144126999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1389{
style=filled;
color=gray75;
5695[label="219.164.194.199;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7955[label="219.164.194.199;2pkt 2fpkt", shape=invtriangle, color=brown];
9448[label="219.164.194.199;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1389[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.164.194.199:1101, 128.28.83.115:25}[50%]&lt;BR/&gt;{219.164.194.199:1325, 128.28.83.115:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1325: (30%)&lt;BR/&gt; 1101: (20%)&gt;];
}
5695--7955[label="1;2pkt 2fpkt"];
5695--9448[label="1;1pkt 1fpkt"];
7955--9448[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="219.164.194.199" src_port="1325"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="219.164.194.199" src_port="1101"/>
    </slice>
    <from sec="1144127463" usec="0"/>
    <to sec="1144127587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1390{
style=filled;
color=gray75;
6098[label="210.226.98.234;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8244[label="210.226.98.234;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1390[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.234:5050, *:*}[69.2308%]&lt;BR/&gt;{210.226.98.234:23, *:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (34%)&lt;BR/&gt; 23: (12%)&lt;BR/&gt; 1036: (8%)&lt;BR/&gt; 62408: (4%)&lt;BR/&gt; 62375: (4%)&gt;];
}
6098--8244[label="1;12pkt 12fpkt"];
6098--9643[label="1;13pkt 13fpkt"];
8244--9643[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.234" src_port="5050"/>
      <filter src_ip="210.226.98.234" src_port="23"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1391{
style=filled;
color=gray75;
2454[label="210.91.192.101;d;94pkt 94fpkt", shape=diamond, color=yellow];
2479[label="132.19.142.200;s;89pkt 89fpkt", shape=diamond, color=yellow];
5705[label="132.19.142.200;89pkt 89fpkt", shape=pentagon, color=darkviolet];
7962[label="132.19.142.200;89pkt 89fpkt", shape=invtriangle, color=brown];
9453[label="132.19.142.200;88pkt 88fpkt", shape=invhouse, color=bisque];
stat1391[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.142.200:*, 210.91.192.101:80}[94.6809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4432%)&lt;BR/&gt; 1916: (0.556793%)&lt;BR/&gt; 1914: (0.556793%)&lt;BR/&gt; 1912: (0.556793%)&lt;BR/&gt; 1910: (0.556793%)&gt;];
}
2454--2479[label="1;89pkt 89fpkt"];
2454--3102[label="0.0106383;1pkt 1fpkt"];
2454--3302[label="0.0319149;3pkt 3fpkt"];
2454--3891[label="0.0106383;1pkt 1fpkt"];
2454--4482[label="0.0106383;1pkt 1fpkt"];
2454--5007[label="0.0106383;1pkt 1fpkt"];
2454--5705[label="1;89pkt 89fpkt"];
2454--5982[label="0.0106383;1pkt 1fpkt"];
2454--6092[label="0.0106383;1pkt 1fpkt"];
2454--6684[label="0.0106383;1pkt 1fpkt"];
2454--7475[label="0.0106383;1pkt 1fpkt"];
2454--7962[label="1;89pkt 89fpkt"];
2454--8156[label="0.0106383;1pkt 1fpkt"];
2454--8240[label="0.0106383;1pkt 1fpkt"];
2454--8631[label="0.0106383;1pkt 1fpkt"];
2454--9139[label="0.0106383;1pkt 1fpkt"];
2454--9453[label="1;88pkt 88fpkt"];
2479--5705[label="1;89pkt 89fpkt"];
2479--7962[label="1;89pkt 89fpkt"];
2479--9453[label="1;88pkt 88fpkt"];
5705--7962[label="1;89pkt 89fpkt"];
5705--9453[label="1;88pkt 88fpkt"];
7962--9453[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_ip="210.91.192.101" dst_port="80" src_ip="132.19.142.200"/>
    </slice>
    <from sec="1144127277" usec="0"/>
    <to sec="1144127531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1392{
style=filled;
color=gray75;
1432[label="128.202.92.27;d;14pkt 14fpkt", shape=diamond, color=yellow];
5828[label="210.226.98.210;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat1392[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.210:5050, *:*}[50%]&lt;BR/&gt;{32.136.144.200:80, 128.202.92.27:*}[28.125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (24.2424%)&lt;BR/&gt; 80: (19.697%)&lt;BR/&gt; 1245: (3.0303%)&lt;BR/&gt; 23: (3.0303%)&lt;BR/&gt; 4746: (1.51515%)&gt;];
}
1432--1491[label="0.642857;9pkt 9fpkt"];
1432--1519[label="0.214286;3pkt 3fpkt"];
1432--3292[label="0.0714286;1pkt 1fpkt"];
1432--3303[label="0.0714286;1pkt 1fpkt"];
1432--5707[label="0.615385;8pkt 8fpkt"];
1432--5828[label="0.0714286;1pkt 1fpkt"];
1432--6206[label="0.214286;3pkt 3fpkt"];
1432--7964[label="0.615385;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.210" src_port="5050"/>
      <filter dst_ip="128.202.92.27" src_ip="32.136.144.200" src_port="80"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1393{
style=filled;
color=gray75;
1104[label="38.53.165.200;s;116pkt 116fpkt", shape=diamond, color=yellow];
stat1393[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.53.165.200:25, 128.28.217.143:*}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64608: (0.431034%)&lt;BR/&gt; 64231: (0.431034%)&lt;BR/&gt; 64207: (0.431034%)&lt;BR/&gt; 63438: (0.431034%)&gt;];
}
1104--1892[label="0.5;22pkt 22fpkt"];
1104--1952[label="0.272727;3pkt 3fpkt"];
1104--2225[label="0.137931;4pkt 4fpkt"];
1104--2833[label="1;41pkt 41fpkt"];
1104--5712[label="1;116pkt 116fpkt"];
1104--7967[label="0.991379;115pkt 115fpkt"];
1104--9455[label="0.991379;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.143" src_ip="38.53.165.200" src_port="25"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.68.190.200"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.141.52.201"/>
    </slice>
    <from sec="1144127455" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1396{
style=filled;
color=gray75;
272[label="132.19.69.201;s;199pkt 199fpkt", shape=diamond, color=yellow];
533[label="39.64.87.76;d;57pkt 57fpkt", shape=diamond, color=yellow];
1903[label="38.202.192.6;d;132pkt 132fpkt", shape=diamond, color=yellow];
2908[label="39.64.87.76;d;45pkt 45fpkt", shape=hexagon, color=black];
4224[label="128.28.26.72;89pkt 89fpkt", shape=pentagon, color=darkviolet];
4597[label="128.28.26.105;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5211[label="128.28.24.159;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5235[label="132.19.200.160;34pkt 34fpkt", shape=pentagon, color=darkviolet];
5718[label="132.19.69.201;234pkt 234fpkt", shape=pentagon, color=darkviolet];
6920[label="128.28.26.72;89pkt 89fpkt", shape=invtriangle, color=brown];
7630[label="132.19.200.160;33pkt 33fpkt", shape=invtriangle, color=brown];
7971[label="132.19.69.201;233pkt 233fpkt", shape=invtriangle, color=brown];
8786[label="128.28.26.72;90pkt 90fpkt", shape=invhouse, color=bisque];
stat1396[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.69.201:*, *:80}[44.6184%]&lt;BR/&gt;{*:*, 38.202.192.6:80}[26.6145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2642%)&lt;BR/&gt; 110: (2.01741%)&lt;BR/&gt; 29566: (1.30538%)&lt;BR/&gt; 1863: (1.30538%)&lt;BR/&gt; 64505: (0.316456%)&gt;];
}
272--533[label="0.263158;15pkt 15fpkt"];
272--957[label="0.0212766;2pkt 2fpkt"];
272--1066[label="0.0621118;10pkt 10fpkt"];
272--1555[label="0.00934579;1pkt 1fpkt"];
272--1903[label="0.113636;15pkt 15fpkt"];
272--2218[label="0.00877193;1pkt 1fpkt"];
272--2573[label="0.0416667;2pkt 2fpkt"];
272--2908[label="0.333333;15pkt 15fpkt"];
272--5718[label="1;199pkt 199fpkt"];
272--7971[label="0.994975;198pkt 198fpkt"];
533--704[label="0.192982;11pkt 11fpkt"];
533--1951[label="0.175439;10pkt 10fpkt"];
533--2831[label="0.0701754;4pkt 4fpkt"];
533--2908[label="1;45pkt 45fpkt"];
533--3052[label="0.107143;6pkt 6fpkt"];
533--3296[label="0.157895;9pkt 9fpkt"];
533--4224[label="0.175439;10pkt 10fpkt"];
533--4597[label="0.210526;4pkt 4fpkt"];
533--5235[label="0.294118;10pkt 10fpkt"];
533--5718[label="0.385965;22pkt 22fpkt"];
533--6920[label="0.175439;10pkt 10fpkt"];
533--7630[label="0.30303;10pkt 10fpkt"];
533--7971[label="0.385965;22pkt 22fpkt"];
533--8786[label="0.175439;10pkt 10fpkt"];
1903--2831[label="0.00757576;1pkt 1fpkt"];
1903--3975[label="0.0454545;6pkt 6fpkt"];
1903--4299[label="0.115385;3pkt 3fpkt"];
1903--5211[label="0.1;1pkt 1fpkt"];
1903--5235[label="0.0882353;3pkt 3fpkt"];
1903--5312[label="0.00757576;1pkt 1fpkt"];
1903--5718[label="0.113636;15pkt 15fpkt"];
1903--6080[label="0.4;18pkt 18fpkt"];
1903--7630[label="0.0909091;3pkt 3fpkt"];
1903--7971[label="0.113636;15pkt 15fpkt"];
1903--8230[label="0.409091;18pkt 18fpkt"];
1903--9634[label="0.4;18pkt 18fpkt"];
2908--3052[label="0.133333;6pkt 6fpkt"];
2908--4224[label="0.177778;8pkt 8fpkt"];
2908--4597[label="0.157895;3pkt 3fpkt"];
2908--5235[label="0.294118;10pkt 10fpkt"];
2908--5718[label="0.333333;15pkt 15fpkt"];
2908--6920[label="0.177778;8pkt 8fpkt"];
2908--7630[label="0.30303;10pkt 10fpkt"];
2908--7971[label="0.333333;15pkt 15fpkt"];
2908--8786[label="0.177778;8pkt 8fpkt"];
4224--6920[label="1;89pkt 89fpkt"];
4224--8786[label="1;89pkt 89fpkt"];
5235--7630[label="1;33pkt 33fpkt"];
5718--7971[label="1;233pkt 233fpkt"];
6920--8786[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.69.201"/>
      <filter dst_ip="38.202.192.6" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1397{
style=filled;
color=gray75;
5721[label="164.23.140.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7973[label="164.23.140.201;1pkt 1fpkt", shape=invtriangle, color=brown];
9459[label="164.23.140.201;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1397[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.140.201:1503, 32.136.179.152:443}[50%]&lt;BR/&gt;{164.23.140.201:1485, 210.226.98.216:5050}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (37.5%)&lt;BR/&gt; 1485: (37.5%)&lt;BR/&gt; 1503: (12.5%)&lt;BR/&gt; 443: (12.5%)&gt;];
}
5721--7973[label="1;1pkt 1fpkt"];
5721--9459[label="1;1pkt 1fpkt"];
7973--9459[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.226.98.216" dst_port="5050" src_ip="164.23.140.201" src_port="1485"/>
      <filter dst_ip="32.136.179.152" dst_port="443" src_ip="164.23.140.201" src_port="1503"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1398{
style=filled;
color=gray75;
5723[label="128.2.189.201;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7975[label="128.2.189.201;12pkt 12fpkt", shape=invtriangle, color=brown];
9461[label="128.2.189.201;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1398[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.2.189.201:42, 218.33.214.209:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42: (38.5714%)&lt;BR/&gt; 80: (8.57143%)&lt;BR/&gt; 0: (5.71429%)&lt;BR/&gt; 4126: (4.28571%)&lt;BR/&gt; 4080: (4.28571%)&gt;];
}
5723--7975[label="1;12pkt 12fpkt"];
5723--9461[label="1;11pkt 11fpkt"];
7975--9461[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="218.33.214.209" src_ip="128.2.189.201" src_port="42"/>
    </slice>
    <from sec="1144127569" usec="0"/>
    <to sec="1144127668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1399{
style=filled;
color=gray75;
5726[label="132.19.205.201;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7977[label="132.19.205.201;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1399[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.205.201:25, *:*}[54.1667%]&lt;BR/&gt;{132.19.205.201:*, *:25}[45.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60278: (2.12766%)&lt;BR/&gt; 55072: (2.12766%)&lt;BR/&gt; 55053: (2.12766%)&lt;BR/&gt; 54999: (2.12766%)&gt;];
}
5726--7977[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.205.201" src_port="25"/>
      <filter dst_port="25" src_ip="132.19.205.201"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1400{
style=filled;
color=gray75;
2376[label="128.2.2.41;d;114pkt 114fpkt", shape=diamond, color=yellow];
2377[label="193.209.90.202;s;114pkt 114fpkt", shape=diamond, color=yellow];
5731[label="193.209.90.202;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7980[label="193.209.90.202;3pkt 3fpkt", shape=invtriangle, color=brown];
9463[label="193.209.90.202;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1400[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.209.90.202:*, 128.2.2.41:60203}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60203: (50%)&lt;BR/&gt; 2328: (0.847458%)&lt;BR/&gt; 3610: (0.635593%)&lt;BR/&gt; 3595: (0.635593%)&lt;BR/&gt; 3346: (0.423729%)&gt;];
}
2376--2377[label="1;114pkt 114fpkt"];
2376--7980[label="0.333333;1pkt 1fpkt"];
2376--9463[label="0.333333;1pkt 1fpkt"];
2377--7980[label="0.333333;1pkt 1fpkt"];
2377--9463[label="0.333333;1pkt 1fpkt"];
5731--7980[label="1;2pkt 2fpkt"];
5731--9463[label="1;2pkt 2fpkt"];
7980--9463[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.2.2.41" dst_port="60203" src_ip="193.209.90.202"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1401{
style=filled;
color=gray75;
5735[label="210.107.144.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7984[label="210.107.144.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1401[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.107.144.202:80, 164.23.209.48:50623}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50623: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5735--7984[label="1;1pkt 1fpkt"];
5735--9466[label="1;1pkt 1fpkt"];
7984--9466[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.209.48" dst_port="50623" src_ip="210.107.144.202" src_port="80"/>
    </slice>
    <from sec="1144127020" usec="0"/>
    <to sec="1144127357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
5736[label="32.136.144.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7985[label="32.136.144.202;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.144.202:80, 164.23.209.48:57607}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57607: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5736--7985[label="1;1pkt 1fpkt"];
5736--9467[label="1;1pkt 1fpkt"];
7985--9467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.209.48" dst_port="57607" src_ip="32.136.144.202" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1403{
style=filled;
color=gray75;
595[label="215.11.43.203;s;1231pkt 1231fpkt", shape=diamond, color=yellow];
947[label="132.19.18.24;d;37pkt 37fpkt", shape=diamond, color=yellow];
5738[label="215.11.43.203;1331pkt 1331fpkt", shape=pentagon, color=darkviolet];
7987[label="215.11.43.203;1330pkt 1330fpkt", shape=invtriangle, color=brown];
stat1403[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.11.43.203:0, *:0}[94.0746%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.6732%)&lt;BR/&gt; 1433: (0.916264%)&lt;BR/&gt; 137: (0.381777%)&lt;BR/&gt; 445: (0.305421%)&lt;BR/&gt; 139: (0.305421%)&gt;];
}
595--947[label="0.027027;1pkt 1fpkt"];
595--1249[label="0.00490196;1pkt 1fpkt"];
595--5738[label="1;1231pkt 1231fpkt"];
595--7987[label="0.999188;1230pkt 1230fpkt"];
947--2098[label="0.027027;1pkt 1fpkt"];
947--2575[label="0.0540541;2pkt 2fpkt"];
947--2866[label="1;5pkt 5fpkt"];
947--3181[label="0.027027;1pkt 1fpkt"];
947--3288[label="0.027027;1pkt 1fpkt"];
947--3290[label="0.027027;1pkt 1fpkt"];
947--3292[label="0.027027;1pkt 1fpkt"];
947--3303[label="0.027027;1pkt 1fpkt"];
947--3310[label="0.027027;1pkt 1fpkt"];
947--3950[label="0.027027;1pkt 1fpkt"];
947--3999[label="0.027027;1pkt 1fpkt"];
947--4908[label="0.0540541;2pkt 2fpkt"];
947--5738[label="0.027027;1pkt 1fpkt"];
947--5950[label="0.027027;1pkt 1fpkt"];
947--6725[label="0.027027;1pkt 1fpkt"];
947--6761[label="0.027027;1pkt 1fpkt"];
947--7987[label="0.027027;1pkt 1fpkt"];
947--8132[label="0.027027;1pkt 1fpkt"];
947--8653[label="0.027027;1pkt 1fpkt"];
947--8679[label="0.027027;1pkt 1fpkt"];
947--9571[label="0.027027;1pkt 1fpkt"];
5738--7987[label="1;1330pkt 1330fpkt"];
</description>
    <slice>
      <filter src_ip="215.11.43.203"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1404{
style=filled;
color=gray75;
2532[label="210.226.98.205;s;24pkt 24fpkt", shape=diamond, color=yellow];
5765[label="210.226.98.205;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8006[label="210.226.98.205;26pkt 26fpkt", shape=invtriangle, color=brown];
9481[label="210.226.98.205;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1404[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.205:5050, *:*}[85.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (42.233%)&lt;BR/&gt; 23: (3.8835%)&lt;BR/&gt; 52818: (1.94175%)&lt;BR/&gt; 32773: (1.94175%)&lt;BR/&gt; 4660: (1.94175%)&gt;];
}
2532--3292[label="0.0416667;1pkt 1fpkt"];
2532--3303[label="0.0416667;1pkt 1fpkt"];
2532--5765[label="1;24pkt 24fpkt"];
2532--8006[label="0.958333;23pkt 23fpkt"];
2532--9481[label="0.958333;23pkt 23fpkt"];
5765--8006[label="1;26pkt 26fpkt"];
5765--9481[label="1;26pkt 26fpkt"];
8006--9481[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.205" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.77.67.206"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.10.76.206"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1407{
style=filled;
color=gray75;
5787[label="164.23.200.207;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8020[label="164.23.200.207;18pkt 18fpkt", shape=invtriangle, color=brown];
9492[label="164.23.200.207;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1407[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.200.207:25, *:*}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.1698%)&lt;BR/&gt; 53923: (2.83019%)&lt;BR/&gt; 48603: (2.83019%)&lt;BR/&gt; 47223: (2.83019%)&lt;BR/&gt; 46037: (2.83019%)&gt;];
}
5787--8020[label="1;18pkt 18fpkt"];
5787--9492[label="1;17pkt 17fpkt"];
8020--9492[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="164.23.200.207" src_port="25"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1408{
style=filled;
color=gray75;
5790[label="132.19.21.208;57pkt 57fpkt", shape=pentagon, color=darkviolet];
8022[label="132.19.21.208;56pkt 56fpkt", shape=invtriangle, color=brown];
9494[label="132.19.21.208;56pkt 56fpkt", shape=invhouse, color=bisque];
stat1408[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.21.208:1113, *:*}[96.4912%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1113: (48.2249%)&lt;BR/&gt; 3432: (1.77515%)&lt;BR/&gt; 63934: (0.887574%)&lt;BR/&gt; 63339: (0.887574%)&lt;BR/&gt; 63077: (0.887574%)&gt;];
}
5790--8022[label="1;56pkt 56fpkt"];
5790--9494[label="1;56pkt 56fpkt"];
8022--9494[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.21.208" src_port="1113"/>
    </slice>
    <from sec="1144127396" usec="0"/>
    <to sec="1144127641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1409{
style=filled;
color=gray75;
307[label="128.202.30.208;s;27pkt 27fpkt", shape=diamond, color=yellow];
559[label="38.51.92.143;d;1pkt 1fpkt", shape=diamond, color=yellow];
2746[label="128.202.30.208;s;27pkt 27fpkt", shape=hexagon, color=black];
5791[label="128.202.30.208;31pkt 31fpkt", shape=pentagon, color=darkviolet];
8023[label="128.202.30.208;30pkt 30fpkt", shape=invtriangle, color=brown];
9495[label="128.202.30.208;31pkt 31fpkt", shape=invhouse, color=bisque];
stat1409[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.202.30.208:*, *:80}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2993%)&lt;BR/&gt; 2414: (1.70068%)&lt;BR/&gt; 2412: (1.70068%)&lt;BR/&gt; 2411: (1.70068%)&lt;BR/&gt; 2410: (1.70068%)&gt;];
}
307--559[label="1;1pkt 1fpkt"];
307--611[label="0.148148;4pkt 4fpkt"];
307--2746[label="1;27pkt 27fpkt"];
307--3296[label="0.037037;1pkt 1fpkt"];
307--5791[label="1;27pkt 27fpkt"];
307--8023[label="0.962963;26pkt 26fpkt"];
307--9495[label="1;27pkt 27fpkt"];
559--2746[label="1;1pkt 1fpkt"];
559--3296[label="1;1pkt 1fpkt"];
559--5791[label="1;1pkt 1fpkt"];
559--9495[label="1;1pkt 1fpkt"];
2746--3296[label="0.037037;1pkt 1fpkt"];
2746--5791[label="1;27pkt 27fpkt"];
2746--8023[label="0.962963;26pkt 26fpkt"];
2746--9495[label="1;27pkt 27fpkt"];
5791--8023[label="1;30pkt 30fpkt"];
5791--9495[label="1;31pkt 31fpkt"];
8023--9495[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.202.30.208"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.169.186.208"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1411{
style=filled;
color=gray75;
5808[label="195.200.3.209;121pkt 121fpkt", shape=pentagon, color=darkviolet];
8032[label="195.200.3.209;120pkt 120fpkt", shape=invtriangle, color=brown];
9501[label="195.200.3.209;121pkt 121fpkt", shape=invhouse, color=bisque];
stat1411[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.200.3.209:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5808--8032[label="1;120pkt 120fpkt"];
5808--9501[label="1;121pkt 121fpkt"];
8032--9501[label="1;120pkt 120fpkt"];
</description>
    <slice>
      <filter src_ip="195.200.3.209"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1412{
style=filled;
color=gray75;
341[label="132.18.77.209;s;221pkt 221fpkt", shape=diamond, color=yellow];
1322[label="195.177.10.236;d;8pkt 8fpkt", shape=diamond, color=yellow];
5195[label="132.18.129.157;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5810[label="132.18.77.209;235pkt 235fpkt", shape=pentagon, color=darkviolet];
8034[label="132.18.77.209;234pkt 234fpkt", shape=invtriangle, color=brown];
9503[label="132.18.77.209;235pkt 235fpkt", shape=invhouse, color=bisque];
stat1412[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.77.209:25, *:*}[76.6187%]&lt;BR/&gt;{*:*, *:25}[23.0216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7938%)&lt;BR/&gt; 50520: (0.412371%)&lt;BR/&gt; 2268: (0.412371%)&lt;BR/&gt; 0: (0.412371%)&lt;BR/&gt; 52066: (0.257732%)&gt;];
}
341--1322[label="0.125;1pkt 1fpkt"];
341--1514[label="0.00543478;1pkt 1fpkt"];
341--5810[label="1;221pkt 221fpkt"];
341--8034[label="0.995475;220pkt 220fpkt"];
341--9503[label="1;221pkt 221fpkt"];
1322--5195[label="0.125;1pkt 1fpkt"];
1322--5810[label="0.125;1pkt 1fpkt"];
1322--6196[label="1;1pkt 1fpkt"];
1322--8034[label="0.125;1pkt 1fpkt"];
1322--8315[label="1;1pkt 1fpkt"];
1322--9503[label="0.125;1pkt 1fpkt"];
5810--8034[label="1;234pkt 234fpkt"];
5810--9503[label="1;235pkt 235fpkt"];
8034--9503[label="1;234pkt 234fpkt"];
</description>
    <slice>
      <filter dst_port="25"/>
      <filter src_ip="132.18.77.209" src_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1413{
style=filled;
color=gray75;
5811[label="210.226.98.209;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8035[label="210.226.98.209;5pkt 5fpkt", shape=invtriangle, color=brown];
9504[label="210.226.98.209;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1413[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.209:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 4271: (9.375%)&lt;BR/&gt; 1128: (9.375%)&lt;BR/&gt; 1096: (9.375%)&lt;BR/&gt; 1061: (9.375%)&gt;];
}
5811--8035[label="1;5pkt 5fpkt"];
5811--9504[label="1;5pkt 5fpkt"];
8035--9504[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.209" src_port="5050"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1414{
style=filled;
color=gray75;
4070[label="132.19.192.59;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat1414[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.192.59:*, 67.34.162.16:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4111: (8.33333%)&lt;BR/&gt; 4110: (8.33333%)&lt;BR/&gt; 4109: (8.33333%)&lt;BR/&gt; 4108: (8.33333%)&gt;];
}
4070--6804[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="67.34.162.16" dst_port="80" src_ip="132.19.192.59"/>
    </slice>
    <from sec="1144127229" usec="0"/>
    <to sec="1144127306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1415{
style=filled;
color=gray75;
477[label="38.53.161.209;s;142pkt 142fpkt", shape=diamond, color=yellow];
959[label="213.52.24.13;s;1969pkt 1969fpkt", shape=diamond, color=yellow];
1133[label="132.19.219.189;d;13pkt 13fpkt", shape=diamond, color=yellow];
1424[label="161.223.54.169;d;42pkt 42fpkt", shape=diamond, color=yellow];
2776[label="38.53.161.209;s;61pkt 61fpkt", shape=hexagon, color=black];
5814[label="38.53.161.209;166pkt 166fpkt", shape=pentagon, color=darkviolet];
8037[label="38.53.161.209;165pkt 165fpkt", shape=invtriangle, color=brown];
stat1415[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.52.24.13:3476, *:1434}[90.2797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3476: (38.5066%)&lt;BR/&gt; 1434: (38.5066%)&lt;BR/&gt; 80: (11.1415%)&lt;BR/&gt; 443: (0.351837%)&lt;BR/&gt; 62980: (0.156372%)&gt;];
}
477--784[label="0.0422535;6pkt 6fpkt"];
477--787[label="0.197183;28pkt 28fpkt"];
477--788[label="0.21831;31pkt 31fpkt"];
477--1133[label="0.153846;2pkt 2fpkt"];
477--1249[label="0.028169;4pkt 4fpkt"];
477--1415[label="0.0235294;2pkt 2fpkt"];
477--1424[label="0.119048;5pkt 5fpkt"];
477--2096[label="0.239437;34pkt 34fpkt"];
477--2577[label="0.1;2pkt 2fpkt"];
477--2776[label="1;61pkt 61fpkt"];
477--3288[label="0.0704225;10pkt 10fpkt"];
477--3292[label="0.0915493;13pkt 13fpkt"];
477--3303[label="0.0915493;13pkt 13fpkt"];
477--5814[label="1;142pkt 142fpkt"];
477--8037[label="0.992958;141pkt 141fpkt"];
959--1424[label="0.0238095;1pkt 1fpkt"];
1133--1164[label="1;6pkt 6fpkt"];
1133--2776[label="0.153846;2pkt 2fpkt"];
1133--2844[label="1;6pkt 6fpkt"];
1133--3288[label="0.0769231;1pkt 1fpkt"];
1133--5814[label="0.153846;2pkt 2fpkt"];
1133--5949[label="1;6pkt 6fpkt"];
1133--8037[label="0.153846;2pkt 2fpkt"];
1424--2370[label="0.102564;4pkt 4fpkt"];
1424--2776[label="0.0714286;3pkt 3fpkt"];
1424--2778[label="1;5pkt 5fpkt"];
1424--3288[label="0.0714286;3pkt 3fpkt"];
1424--3292[label="0.0238095;1pkt 1fpkt"];
1424--3303[label="0.0238095;1pkt 1fpkt"];
1424--5814[label="0.142857;6pkt 6fpkt"];
1424--6232[label="1;8pkt 8fpkt"];
1424--8037[label="0.142857;6pkt 6fpkt"];
2776--3288[label="0.163934;10pkt 10fpkt"];
2776--5814[label="1;61pkt 61fpkt"];
2776--8037[label="0.983607;60pkt 60fpkt"];
5814--8037[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="213.52.24.13" src_port="3476"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.210.177.209"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1417{
style=filled;
color=gray75;
5823[label="164.23.231.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8043[label="164.23.231.209;1pkt 1fpkt", shape=invtriangle, color=brown];
9510[label="164.23.231.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1417[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.231.209:80, 41.25.102.195:37809}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37809: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5823--8043[label="1;1pkt 1fpkt"];
5823--9510[label="1;1pkt 1fpkt"];
8043--9510[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.25.102.195" dst_port="37809" src_ip="164.23.231.209" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.135.111.210"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1419{
style=filled;
color=gray75;
741[label="41.25.164.210;s;3pkt 3fpkt", shape=diamond, color=yellow];
1137[label="161.223.80.174;d;64pkt 64fpkt", shape=diamond, color=yellow];
5605[label="41.25.102.193;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7889[label="41.25.102.193;7pkt 7fpkt", shape=invtriangle, color=brown];
9410[label="41.25.102.193;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1419[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 161.223.80.174:80}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54958: (2.22222%)&lt;BR/&gt; 51614: (2.22222%)&lt;BR/&gt; 56815: (1.66667%)&lt;BR/&gt; 54472: (1.66667%)&gt;];
}
741--1137[label="0.333333;1pkt 1fpkt"];
741--3014[label="0.333333;1pkt 1fpkt"];
741--5831[label="1;3pkt 3fpkt"];
741--8049[label="0.666667;2pkt 2fpkt"];
741--9514[label="0.666667;2pkt 2fpkt"];
1137--3296[label="0.03125;2pkt 2fpkt"];
1137--4684[label="0.666667;4pkt 4fpkt"];
1137--4939[label="0.015625;1pkt 1fpkt"];
1137--4999[label="0.03125;2pkt 2fpkt"];
1137--5113[label="0.1;1pkt 1fpkt"];
1137--5331[label="0.5;1pkt 1fpkt"];
1137--5605[label="0.25;2pkt 2fpkt"];
1137--5831[label="0.2;1pkt 1fpkt"];
1137--5996[label="0.166667;1pkt 1fpkt"];
1137--7240[label="0.666667;4pkt 4fpkt"];
1137--7425[label="0.015625;1pkt 1fpkt"];
1137--7467[label="0.03125;2pkt 2fpkt"];
1137--7542[label="0.111111;1pkt 1fpkt"];
1137--7700[label="0.5;1pkt 1fpkt"];
1137--7889[label="0.285714;2pkt 2fpkt"];
1137--8049[label="0.25;1pkt 1fpkt"];
1137--8167[label="0.166667;1pkt 1fpkt"];
1137--8991[label="0.666667;4pkt 4fpkt"];
1137--9107[label="0.015625;1pkt 1fpkt"];
1137--9133[label="0.03125;2pkt 2fpkt"];
1137--9184[label="0.1;1pkt 1fpkt"];
1137--9410[label="0.25;2pkt 2fpkt"];
1137--9514[label="0.25;1pkt 1fpkt"];
1137--9593[label="0.2;1pkt 1fpkt"];
5605--7889[label="1;7pkt 7fpkt"];
5605--9410[label="1;8pkt 8fpkt"];
7889--9410[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.80.174" dst_port="80"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.204.218.210"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1421{
style=filled;
color=gray75;
2421[label="164.23.206.145;d;22pkt 22fpkt", shape=diamond, color=yellow];
5842[label="198.246.139.211;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8055[label="198.246.139.211;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1421[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.246.139.211:*, 164.23.206.145:25}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44425: (3.33333%)&lt;BR/&gt; 44356: (3.33333%)&lt;BR/&gt; 44352: (3.33333%)&lt;BR/&gt; 44346: (3.33333%)&gt;];
}
2421--5842[label="1;12pkt 12fpkt"];
2421--8055[label="1;11pkt 11fpkt"];
5842--8055[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.206.145" dst_port="25" src_ip="198.246.139.211"/>
    </slice>
    <from sec="1144126971" usec="0"/>
    <to sec="1144127656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1422{
style=filled;
color=gray75;
5845[label="39.20.25.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8056[label="39.20.25.212;1pkt 1fpkt", shape=invtriangle, color=brown];
9519[label="39.20.25.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1422[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.20.25.212:55975, 147.13.220.153:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55975: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5845--8056[label="1;1pkt 1fpkt"];
5845--9519[label="1;1pkt 1fpkt"];
8056--9519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="39.20.25.212" src_port="55975"/>
    </slice>
    <from sec="1144127654" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1423{
style=filled;
color=gray75;
5849[label="99.206.85.212;165pkt 165fpkt", shape=pentagon, color=darkviolet];
8059[label="99.206.85.212;165pkt 165fpkt", shape=invtriangle, color=brown];
stat1423[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.206.85.212:61139, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61139: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5849--8059[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="99.206.85.212" src_port="61139"/>
    </slice>
    <from sec="1144127654" usec="0"/>
    <to sec="1144127680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1424{
style=filled;
color=gray75;
694[label="32.136.132.4;d;210pkt 210fpkt", shape=diamond, color=yellow];
1166[label="128.28.231.96;s;239pkt 239fpkt", shape=diamond, color=yellow];
1763[label="128.202.18.213;s;18pkt 18fpkt", shape=diamond, color=yellow];
1798[label="210.123.189.24;d;5pkt 5fpkt", shape=diamond, color=yellow];
3161[label="210.123.189.24;d;5pkt 5fpkt", shape=hexagon, color=black];
3336[label="132.19.54.2;188pkt 188fpkt", shape=pentagon, color=darkviolet];
4510[label="128.28.231.96;309pkt 309fpkt", shape=pentagon, color=darkviolet];
5858[label="128.202.18.213;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6306[label="132.19.54.2;188pkt 188fpkt", shape=invtriangle, color=brown];
8066[label="128.202.18.213;18pkt 18fpkt", shape=invtriangle, color=brown];
8837[label="128.28.226.80;27pkt 27fpkt", shape=invhouse, color=bisque];
9523[label="128.202.18.213;18pkt 18fpkt", shape=invhouse, color=bisque];
stat1424[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 32.136.132.4:80}[34.5395%]&lt;BR/&gt;{128.28.231.96:*, 32.136.134.221:80}[23.1908%]&lt;BR/&gt;{132.19.54.2:*, *:80}[22.5329%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.2188%)&lt;BR/&gt; 25: (2.49397%)&lt;BR/&gt; 443: (0.804505%)&lt;BR/&gt; 1863: (0.563154%)&lt;BR/&gt; 1806: (0.281577%)&gt;];
}
694--1119[label="0.0268817;5pkt 5fpkt"];
694--1166[label="0.442857;93pkt 93fpkt"];
694--1763[label="0.166667;3pkt 3fpkt"];
694--1959[label="0.0963855;8pkt 8fpkt"];
694--2838[label="0.0471698;5pkt 5fpkt"];
694--3296[label="0.104762;22pkt 22fpkt"];
694--3336[label="0.0265957;5pkt 5fpkt"];
694--3959[label="0.0333333;7pkt 7fpkt"];
694--4092[label="0.0047619;1pkt 1fpkt"];
694--4104[label="0.0047619;1pkt 1fpkt"];
694--4108[label="0.138095;29pkt 29fpkt"];
694--4114[label="0.0142857;3pkt 3fpkt"];
694--4338[label="0.62963;17pkt 17fpkt"];
694--4510[label="0.571429;120pkt 120fpkt"];
694--5825[label="0.0720721;8pkt 8fpkt"];
694--5858[label="0.166667;3pkt 3fpkt"];
694--6306[label="0.0265957;5pkt 5fpkt"];
694--6733[label="0.0333333;7pkt 7fpkt"];
694--6824[label="0.0047619;1pkt 1fpkt"];
694--6835[label="0.138095;29pkt 29fpkt"];
694--7003[label="0.62963;17pkt 17fpkt"];
694--8045[label="0.0727273;8pkt 8fpkt"];
694--8066[label="0.166667;3pkt 3fpkt"];
694--8657[label="0.0333333;7pkt 7fpkt"];
694--8720[label="0.0047619;1pkt 1fpkt"];
694--8728[label="0.138095;29pkt 29fpkt"];
694--8837[label="0.62963;17pkt 17fpkt"];
694--9523[label="0.166667;3pkt 3fpkt"];
1166--1921[label="0.0460251;11pkt 11fpkt"];
1166--3148[label="0.546154;71pkt 71fpkt"];
1166--3296[label="0.0041841;1pkt 1fpkt"];
1166--4510[label="1;239pkt 239fpkt"];
1763--1798[label="0.8;4pkt 4fpkt"];
1763--3161[label="0.8;4pkt 4fpkt"];
1763--5858[label="1;18pkt 18fpkt"];
1763--8066[label="1;18pkt 18fpkt"];
1763--9523[label="1;18pkt 18fpkt"];
1798--2533[label="0.2;1pkt 1fpkt"];
1798--3161[label="1;5pkt 5fpkt"];
1798--5858[label="0.8;4pkt 4fpkt"];
1798--8066[label="0.8;4pkt 4fpkt"];
1798--9523[label="0.8;4pkt 4fpkt"];
3161--5858[label="0.8;4pkt 4fpkt"];
3161--8066[label="0.8;4pkt 4fpkt"];
3161--9523[label="0.8;4pkt 4fpkt"];
3336--6306[label="1;188pkt 188fpkt"];
5858--8066[label="1;18pkt 18fpkt"];
5858--9523[label="1;18pkt 18fpkt"];
8066--9523[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.54.2"/>
      <filter dst_ip="32.136.132.4" dst_port="80"/>
      <filter dst_ip="32.136.134.221" dst_port="80" src_ip="128.28.231.96"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1425{
style=filled;
color=gray75;
5867[label="161.223.219.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8073[label="161.223.219.213;1pkt 1fpkt", shape=invtriangle, color=brown];
9529[label="161.223.219.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1425[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.219.213:80, 32.34.173.243:2076}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2076: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5867--8073[label="1;1pkt 1fpkt"];
5867--9529[label="1;1pkt 1fpkt"];
8073--9529[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.34.173.243" dst_port="2076" src_ip="161.223.219.213" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1426{
style=filled;
color=gray75;
5872[label="33.192.55.214;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8078[label="33.192.55.214;4pkt 4fpkt", shape=invtriangle, color=brown];
9532[label="33.192.55.214;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1426[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.192.55.214:31704, 161.223.85.21:2062}[20%]&lt;BR/&gt;{33.192.55.214:31704, 161.223.85.37:18222}[20%]&lt;BR/&gt;{33.192.55.214:31704, 161.223.104.52:1086}[20%]&lt;BR/&gt;{33.192.55.214:31704, 161.223.130.149:18856}[20%]&lt;BR/&gt;{33.192.55.214:31704, 161.223.104.201:33868}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31704: (50%)&lt;BR/&gt; 33868: (10.7143%)&lt;BR/&gt; 18222: (10.7143%)&lt;BR/&gt; 2062: (10.7143%)&lt;BR/&gt; 1086: (10.7143%)&gt;];
}
5872--8078[label="1;4pkt 4fpkt"];
5872--9532[label="1;5pkt 5fpkt"];
8078--9532[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.104.201" dst_port="33868" src_ip="33.192.55.214" src_port="31704"/>
      <filter dst_ip="161.223.130.149" dst_port="18856" src_ip="33.192.55.214" src_port="31704"/>
      <filter dst_ip="161.223.104.52" dst_port="1086" src_ip="33.192.55.214" src_port="31704"/>
      <filter dst_ip="161.223.85.37" dst_port="18222" src_ip="33.192.55.214" src_port="31704"/>
      <filter dst_ip="161.223.85.21" dst_port="2062" src_ip="33.192.55.214" src_port="31704"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1427{
style=filled;
color=gray75;
5874[label="210.226.98.214;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8080[label="210.226.98.214;7pkt 7fpkt", shape=invtriangle, color=brown];
9534[label="210.226.98.214;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1427[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.214:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1685: (7.5%)&lt;BR/&gt; 1517: (7.5%)&lt;BR/&gt; 1425: (7.5%)&lt;BR/&gt; 1267: (7.5%)&gt;];
}
5874--8080[label="1;7pkt 7fpkt"];
5874--9534[label="1;6pkt 6fpkt"];
8080--9534[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.214" src_port="5050"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1428{
style=filled;
color=gray75;
2228[label="194.212.152.252;s;74pkt 74fpkt", shape=diamond, color=yellow];
4881[label="132.19.90.133;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5056[label="132.19.157.146;15pkt 15fpkt", shape=pentagon, color=darkviolet];
7509[label="132.19.157.146;14pkt 14fpkt", shape=invtriangle, color=brown];
stat1428[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.152.252:*, 196.42.8.145:443}[24.5098%]&lt;BR/&gt;{194.212.152.252:*, *:80}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.5862%)&lt;BR/&gt; 443: (21.9828%)&lt;BR/&gt; 1174: (0.862069%)&lt;BR/&gt; 1173: (0.862069%)&lt;BR/&gt; 1172: (0.862069%)&gt;];
}
2228--3296[label="0.0135135;1pkt 1fpkt"];
2228--6269[label="1;74pkt 74fpkt"];
2228--8369[label="1;74pkt 74fpkt"];
4881--7384[label="1;13pkt 13fpkt"];
4881--9081[label="1;12pkt 12fpkt"];
5056--7509[label="1;14pkt 14fpkt"];
5056--9163[label="1;14pkt 14fpkt"];
7509--9163[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="194.212.152.252"/>
      <filter dst_ip="196.42.8.145" dst_port="443" src_ip="194.212.152.252"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1429{
style=filled;
color=gray75;
5880[label="83.114.1.215;172pkt 172fpkt", shape=pentagon, color=darkviolet];
8086[label="83.114.1.215;171pkt 171fpkt", shape=invtriangle, color=brown];
9538[label="83.114.1.215;171pkt 171fpkt", shape=invhouse, color=bisque];
stat1429[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.114.1.215:0, *:0}[91.2791%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (91.2451%)&lt;BR/&gt; 80: (4.37743%)&lt;BR/&gt; 4615: (0.291829%)&lt;BR/&gt; 4489: (0.291829%)&lt;BR/&gt; 4288: (0.291829%)&gt;];
}
5880--8086[label="1;171pkt 171fpkt"];
5880--9538[label="1;171pkt 171fpkt"];
8086--9538[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter src_ip="83.114.1.215"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.128.53.215"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1431{
style=filled;
color=gray75;
2354[label="164.23.216.215;s;185pkt 185fpkt", shape=diamond, color=yellow];
5893[label="164.23.216.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8094[label="164.23.216.215;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1431[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.216.215:2800, *:53}[95.6757%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 2800: (47.861%)&lt;BR/&gt; 64872: (0.26738%)&lt;BR/&gt; 55555: (0.26738%)&lt;BR/&gt; 53287: (0.26738%)&gt;];
}
2354--2515[label="0.00571429;1pkt 1fpkt"];
2354--2522[label="0.00641026;1pkt 1fpkt"];
2354--2564[label="0.00584795;1pkt 1fpkt"];
2354--3287[label="0.00540541;1pkt 1fpkt"];
2354--3290[label="0.0918919;17pkt 17fpkt"];
2354--3295[label="0.2;37pkt 37fpkt"];
2354--3302[label="0.0108108;2pkt 2fpkt"];
2354--5893[label="1;1pkt 1fpkt"];
2354--8094[label="1;1pkt 1fpkt"];
5893--8094[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="164.23.216.215" src_port="2800"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.169.222.215"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1433{
style=filled;
color=gray75;
5897[label="210.226.98.216;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8096[label="210.226.98.216;7pkt 7fpkt", shape=invtriangle, color=brown];
9546[label="210.226.98.216;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1433[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.216:5050, 164.23.226.105:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 49155: (6.81818%)&lt;BR/&gt; 1998: (6.81818%)&lt;BR/&gt; 1874: (6.81818%)&lt;BR/&gt; 1485: (6.81818%)&gt;];
}
5897--8096[label="1;7pkt 7fpkt"];
5897--9546[label="1;7pkt 7fpkt"];
8096--9546[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.226.105" src_ip="210.226.98.216" src_port="5050"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.169.122.216"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1435{
style=filled;
color=gray75;
5901[label="210.164.145.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8098[label="210.164.145.216;1pkt 1fpkt", shape=invtriangle, color=brown];
9547[label="210.164.145.216;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1435[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.164.145.216:80, 195.89.105.214:58446}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58446: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5901--8098[label="1;1pkt 1fpkt"];
5901--9547[label="1;1pkt 1fpkt"];
8098--9547[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="58446" src_ip="210.164.145.216" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.5.84.217"/>
    </slice>
    <from sec="1144127480" usec="0"/>
    <to sec="1144127523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1437{
style=filled;
color=gray75;
2510[label="10.0.0.1;d;26pkt 26fpkt", shape=diamond, color=yellow];
2511[label="164.23.93.217;s;22pkt 22fpkt", shape=diamond, color=yellow];
5906[label="164.23.93.217;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8102[label="164.23.93.217;22pkt 22fpkt", shape=invtriangle, color=brown];
9550[label="164.23.93.217;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1437[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.93.217:*, 10.0.0.1:53}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.2301%)&lt;BR/&gt; 1269: (2.21239%)&lt;BR/&gt; 1214: (2.21239%)&lt;BR/&gt; 1213: (2.21239%)&lt;BR/&gt; 1212: (2.21239%)&gt;];
}
2510--2511[label="1;22pkt 22fpkt"];
2510--3290[label="0.230769;6pkt 6fpkt"];
2510--3295[label="0.115385;3pkt 3fpkt"];
2510--5906[label="1;21pkt 21fpkt"];
2510--8102[label="1;22pkt 22fpkt"];
2510--9550[label="1;22pkt 22fpkt"];
2511--3290[label="0.272727;6pkt 6fpkt"];
2511--3295[label="0.136364;3pkt 3fpkt"];
2511--5906[label="1;21pkt 21fpkt"];
2511--8102[label="1;22pkt 22fpkt"];
2511--9550[label="1;22pkt 22fpkt"];
5906--8102[label="1;21pkt 21fpkt"];
5906--9550[label="1;21pkt 21fpkt"];
8102--9550[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.0.1" dst_port="53" src_ip="164.23.93.217"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1438{
style=filled;
color=gray75;
5908[label="194.153.131.217;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8104[label="194.153.131.217;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1438[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.153.131.217:80, 147.13.42.129:2225}[33.3333%]&lt;BR/&gt;{194.153.131.217:80, 147.13.42.129:2228}[33.3333%]&lt;BR/&gt;{194.153.131.217:80, 147.13.42.129:2233}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2233: (16.6667%)&lt;BR/&gt; 2228: (16.6667%)&lt;BR/&gt; 2225: (16.6667%)&gt;];
}
5908--8104[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.42.129" dst_port="2233" src_ip="194.153.131.217" src_port="80"/>
      <filter dst_ip="147.13.42.129" dst_port="2228" src_ip="194.153.131.217" src_port="80"/>
      <filter dst_ip="147.13.42.129" dst_port="2225" src_ip="194.153.131.217" src_port="80"/>
    </slice>
    <from sec="1144126810" usec="0"/>
    <to sec="1144127682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1439{
style=filled;
color=gray75;
5910[label="214.231.155.217;102pkt 102fpkt", shape=pentagon, color=darkviolet];
8106[label="214.231.155.217;101pkt 101fpkt", shape=invtriangle, color=brown];
9552[label="214.231.155.217;101pkt 101fpkt", shape=invhouse, color=bisque];
stat1439[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.231.155.217:*, 132.19.54.75:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1959: (0.493421%)&lt;BR/&gt; 1951: (0.493421%)&lt;BR/&gt; 1942: (0.493421%)&lt;BR/&gt; 1926: (0.493421%)&gt;];
}
5910--8106[label="1;101pkt 101fpkt"];
5910--9552[label="1;101pkt 101fpkt"];
8106--9552[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.54.75" dst_port="80" src_ip="214.231.155.217"/>
    </slice>
    <from sec="1144127408" usec="0"/>
    <to sec="1144127504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1440{
style=filled;
color=gray75;
1995[label="128.202.100.225;d;69pkt 69fpkt", shape=diamond, color=yellow];
stat1440[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.202.100.225:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60873: (0.724638%)&lt;BR/&gt; 60544: (0.724638%)&lt;BR/&gt; 60064: (0.724638%)&lt;BR/&gt; 59565: (0.724638%)&gt;];
}
1995--2253[label="0.166667;1pkt 1fpkt"];
1995--3296[label="0.0724638;5pkt 5fpkt"];
1995--3532[label="0.0144928;1pkt 1fpkt"];
1995--5129[label="0.015873;1pkt 1fpkt"];
1995--5924[label="0.111111;1pkt 1fpkt"];
1995--8114[label="0.111111;1pkt 1fpkt"];
1995--9191[label="0.015873;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.100.225" dst_port="80"/>
    </slice>
    <from sec="1144126857" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1441{
style=filled;
color=gray75;
5930[label="132.19.245.218;94pkt 94fpkt", shape=pentagon, color=darkviolet];
8118[label="132.19.245.218;94pkt 94fpkt", shape=invtriangle, color=brown];
stat1441[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.245.218:*, 199.1.41.69:80}[98.9362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2979: (0.531915%)&lt;BR/&gt; 2978: (0.531915%)&lt;BR/&gt; 2977: (0.531915%)&lt;BR/&gt; 2976: (0.531915%)&gt;];
}
5930--8118[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="199.1.41.69" dst_port="80" src_ip="132.19.245.218"/>
    </slice>
    <from sec="1144127261" usec="0"/>
    <to sec="1144127430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.87.1.219"/>
    </slice>
    <from sec="1144127086" usec="0"/>
    <to sec="1144127108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.156.70.219"/>
    </slice>
    <from sec="1144126987" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1444{
style=filled;
color=gray75;
5938[label="195.194.139.219;309pkt 309fpkt", shape=pentagon, color=darkviolet];
8124[label="195.194.139.219;309pkt 309fpkt", shape=invtriangle, color=brown];
9564[label="195.194.139.219;308pkt 308fpkt", shape=invhouse, color=bisque];
stat1444[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.194.139.219:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 6260: (0.323974%)&lt;BR/&gt; 4697: (0.323974%)&lt;BR/&gt; 4673: (0.323974%)&lt;BR/&gt; 3076: (0.323974%)&gt;];
}
5938--8124[label="1;309pkt 309fpkt"];
5938--9564[label="1;308pkt 308fpkt"];
8124--9564[label="1;308pkt 308fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="195.194.139.219"/>
    </slice>
    <from sec="1144127418" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.69.157.219"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.27.192.219"/>
    </slice>
    <from sec="1144127533" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
5946[label="37.202.19.220;31pkt 31fpkt", shape=pentagon, color=darkviolet];
8130[label="37.202.19.220;31pkt 31fpkt", shape=invtriangle, color=brown];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.19.220:80, 132.19.195.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4923: (1.6129%)&lt;BR/&gt; 4846: (1.6129%)&lt;BR/&gt; 4804: (1.6129%)&lt;BR/&gt; 4671: (1.6129%)&gt;];
}
5946--8130[label="1;31pkt 31fpkt"];
5946--9570[label="1;30pkt 30fpkt"];
8130--9570[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.195.48" src_ip="37.202.19.220" src_port="80"/>
    </slice>
    <from sec="1144127062" usec="0"/>
    <to sec="1144127068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1448{
style=filled;
color=gray75;
5948[label="210.226.98.220;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8131[label="210.226.98.220;12pkt 12fpkt", shape=invtriangle, color=brown];
stat1448[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.220:5050, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.6667%)&lt;BR/&gt; 36531: (4.16667%)&lt;BR/&gt; 2339: (4.16667%)&lt;BR/&gt; 2289: (4.16667%)&lt;BR/&gt; 2244: (4.16667%)&gt;];
}
5948--8131[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.220" src_port="5050"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1449{
style=filled;
color=gray75;
5956[label="132.19.221.220;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8135[label="132.19.221.220;4pkt 4fpkt", shape=invtriangle, color=brown];
9574[label="132.19.221.220;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1449[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.221.220:1354, 221.181.84.5:80}[25%]&lt;BR/&gt;{132.19.221.220:1358, 221.181.84.5:80}[25%]&lt;BR/&gt;{132.19.221.220:1366, 220.57.179.85:80}[25%]&lt;BR/&gt;{132.19.221.220:1372, 220.57.179.85:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1372: (15%)&lt;BR/&gt; 1358: (15%)&lt;BR/&gt; 1354: (15%)&lt;BR/&gt; 1366: (5%)&gt;];
}
5956--8135[label="1;3pkt 3fpkt"];
5956--9574[label="1;3pkt 3fpkt"];
8135--9574[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="220.57.179.85" dst_port="80" src_ip="132.19.221.220" src_port="1372"/>
      <filter dst_ip="220.57.179.85" dst_port="80" src_ip="132.19.221.220" src_port="1366"/>
      <filter dst_ip="221.181.84.5" dst_port="80" src_ip="132.19.221.220" src_port="1358"/>
      <filter dst_ip="221.181.84.5" dst_port="80" src_ip="132.19.221.220" src_port="1354"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1450{
style=filled;
color=gray75;
5959[label="195.89.107.221;48pkt 48fpkt", shape=pentagon, color=darkviolet];
8137[label="195.89.107.221;47pkt 47fpkt", shape=invtriangle, color=brown];
stat1450[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.107.221:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5959--8137[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="195.89.107.221"/>
    </slice>
    <from sec="1144126841" usec="0"/>
    <to sec="1144127685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1451{
style=filled;
color=gray75;
5964[label="213.186.228.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8140[label="213.186.228.221;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1451[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.186.228.221:55630, 147.13.220.153:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55630: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5964--8140[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="213.186.228.221" src_port="55630"/>
    </slice>
    <from sec="1144127646" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1452{
style=filled;
color=gray75;
608[label="36.130.237.221;s;2pkt 2fpkt", shape=diamond, color=yellow];
5965[label="36.130.237.221;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8141[label="36.130.237.221;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1452[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.130.237.221:443, 164.23.209.48:55306}[50%]&lt;BR/&gt;{36.130.237.221:443, 195.89.105.215:56977}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 56977: (25%)&lt;BR/&gt; 55306: (25%)&gt;];
}
608--787[label="0.5;1pkt 1fpkt"];
608--5965[label="1;2pkt 2fpkt"];
608--8141[label="1;2pkt 2fpkt"];
5965--8141[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.215" dst_port="56977" src_ip="36.130.237.221" src_port="443"/>
      <filter dst_ip="164.23.209.48" dst_port="55306" src_ip="36.130.237.221" src_port="443"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1453{
style=filled;
color=gray75;
5969[label="210.226.98.222;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8145[label="210.226.98.222;12pkt 12fpkt", shape=invtriangle, color=brown];
9578[label="210.226.98.222;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1453[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.222:5050, 164.23.226.32:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (41.6667%)&lt;BR/&gt; 1035: (8.33333%)&lt;BR/&gt; 3289: (4.16667%)&lt;BR/&gt; 3279: (4.16667%)&lt;BR/&gt; 3256: (4.16667%)&gt;];
}
5969--8145[label="1;12pkt 12fpkt"];
5969--9578[label="1;12pkt 12fpkt"];
8145--9578[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.226.32" src_ip="210.226.98.222" src_port="5050"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1454{
style=filled;
color=gray75;
5972[label="32.136.164.222;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8148[label="32.136.164.222;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1454[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.164.222:39329, 161.223.232.76:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39329: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5972--8148[label="1;1pkt 1fpkt"];
5972--9581[label="1;1pkt 1fpkt"];
8148--9581[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.232.76" dst_port="80" src_ip="32.136.164.222" src_port="39329"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1455{
style=filled;
color=gray75;
5976[label="210.226.98.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8152[label="210.226.98.223;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1455[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.223:5050, 164.23.131.165:1279}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1279: (50%)&gt;];
}
5976--8152[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.131.165" dst_port="1279" src_ip="210.226.98.223" src_port="5050"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1456{
style=filled;
color=gray75;
5980[label="39.204.218.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8154[label="39.204.218.223;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1456[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.204.218.223:80, 128.202.108.104:1069}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1069: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5980--8154[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.108.104" dst_port="1069" src_ip="39.204.218.223" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1457{
style=filled;
color=gray75;
334[label="132.19.96.246;s;74pkt 74fpkt", shape=diamond, color=yellow];
1193[label="41.148.12.151;d;32pkt 32fpkt", shape=diamond, color=yellow];
1894[label="196.206.1.152;d;27pkt 27fpkt", shape=diamond, color=yellow];
2083[label="161.223.80.206;s;463pkt 463fpkt", shape=diamond, color=yellow];
2752[label="132.19.96.246;s;24pkt 24fpkt", shape=hexagon, color=black];
4513[label="128.28.26.97;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4961[label="132.19.43.139;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5058[label="132.19.208.146;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7119[label="128.28.26.97;6pkt 6fpkt", shape=invtriangle, color=brown];
7511[label="132.19.208.146;20pkt 20fpkt", shape=invtriangle, color=brown];
8912[label="128.28.26.97;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1457[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.80.206:53, *:*}[56.3444%]&lt;BR/&gt;{*:*, *:53}[20.997%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (36.8276%)&lt;BR/&gt; 80: (8.62069%)&lt;BR/&gt; 32798: (5.51724%)&lt;BR/&gt; 1842: (2.06897%)&lt;BR/&gt; 0: (2.06897%)&gt;];
}
334--675[label="0.0263158;1pkt 1fpkt"];
334--1081[label="0.0135135;1pkt 1fpkt"];
334--1095[label="0.0405405;3pkt 3fpkt"];
334--1193[label="0.03125;1pkt 1fpkt"];
334--1448[label="0.0135135;1pkt 1fpkt"];
334--1818[label="0.0135135;1pkt 1fpkt"];
334--1894[label="0.0740741;2pkt 2fpkt"];
334--2378[label="0.0135135;1pkt 1fpkt"];
334--2545[label="0.0625;1pkt 1fpkt"];
334--2564[label="0.0135135;1pkt 1fpkt"];
334--2752[label="1;24pkt 24fpkt"];
334--2822[label="0.0434783;1pkt 1fpkt"];
334--3288[label="0.027027;2pkt 2fpkt"];
334--3290[label="0.0540541;4pkt 4fpkt"];
334--3295[label="0.027027;2pkt 2fpkt"];
1193--1661[label="0.03125;1pkt 1fpkt"];
1193--1669[label="0.03125;1pkt 1fpkt"];
1193--2172[label="0.0526316;1pkt 1fpkt"];
1193--2716[label="0.21875;7pkt 7fpkt"];
1193--2752[label="0.0416667;1pkt 1fpkt"];
1193--3180[label="0.0625;2pkt 2fpkt"];
1193--3225[label="0.03125;1pkt 1fpkt"];
1193--3519[label="0.0333333;1pkt 1fpkt"];
1193--4001[label="0.28125;9pkt 9fpkt"];
1193--4029[label="0.21875;7pkt 7fpkt"];
1193--4375[label="0.0625;2pkt 2fpkt"];
1193--4412[label="0.0625;1pkt 1fpkt"];
1193--4961[label="0.03125;1pkt 1fpkt"];
1193--5058[label="0.047619;1pkt 1fpkt"];
1193--5805[label="0.03125;1pkt 1fpkt"];
1193--6762[label="0.28125;9pkt 9fpkt"];
1193--6778[label="0.21875;7pkt 7fpkt"];
1193--7027[label="0.0625;2pkt 2fpkt"];
1193--7511[label="0.05;1pkt 1fpkt"];
1193--8030[label="0.03125;1pkt 1fpkt"];
1193--8852[label="0.0625;2pkt 2fpkt"];
1193--9499[label="0.03125;1pkt 1fpkt"];
1894--2003[label="0.0740741;2pkt 2fpkt"];
1894--2878[label="0.0740741;2pkt 2fpkt"];
1894--3031[label="0.037037;1pkt 1fpkt"];
1894--3070[label="0.0740741;2pkt 2fpkt"];
1894--3448[label="0.0666667;1pkt 1fpkt"];
1894--3561[label="0.037037;1pkt 1fpkt"];
1894--4492[label="0.037037;1pkt 1fpkt"];
1894--4513[label="0.333333;2pkt 2fpkt"];
1894--4797[label="0.037037;1pkt 1fpkt"];
1894--5073[label="0.0740741;2pkt 2fpkt"];
1894--5392[label="0.037037;1pkt 1fpkt"];
1894--5993[label="0.0740741;2pkt 2fpkt"];
1894--6385[label="0.0666667;1pkt 1fpkt"];
1894--7107[label="0.037037;1pkt 1fpkt"];
1894--7119[label="0.333333;2pkt 2fpkt"];
1894--7324[label="0.037037;1pkt 1fpkt"];
1894--7520[label="0.0740741;2pkt 2fpkt"];
1894--8904[label="0.037037;1pkt 1fpkt"];
1894--8912[label="0.333333;2pkt 2fpkt"];
1894--9046[label="0.037037;1pkt 1fpkt"];
1894--9170[label="0.0740741;2pkt 2fpkt"];
2083--2178[label="0.00628931;1pkt 1fpkt"];
2083--2522[label="0.00641026;1pkt 1fpkt"];
2083--3287[label="0.0669546;31pkt 31fpkt"];
2083--3290[label="0.012959;6pkt 6fpkt"];
2083--3295[label="0.0151188;7pkt 7fpkt"];
2083--3302[label="0.0712743;33pkt 33fpkt"];
2083--5773[label="1;463pkt 463fpkt"];
2083--8010[label="1;463pkt 463fpkt"];
2083--9484[label="1;463pkt 463fpkt"];
2752--3288[label="0.0833333;2pkt 2fpkt"];
2752--3290[label="0.166667;4pkt 4fpkt"];
2752--3295[label="0.0833333;2pkt 2fpkt"];
4513--7119[label="1;6pkt 6fpkt"];
4513--8912[label="1;6pkt 6fpkt"];
5058--7511[label="1;20pkt 20fpkt"];
7119--8912[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="53"/>
      <filter src_ip="161.223.80.206" src_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598833,2.34646,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1458{
style=filled;
color=gray75;
5989[label="210.226.98.224;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9590[label="210.226.98.224;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1458[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.224:5050, 164.23.206.98:1275}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 1275: (50%)&gt;];
}
5989--8162[label="1;1pkt 1fpkt"];
5989--9590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.206.98" dst_port="1275" src_ip="210.226.98.224" src_port="5050"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1459{
style=filled;
color=gray75;
5992[label="36.106.130.224;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8164[label="36.106.130.224;5pkt 5fpkt", shape=invtriangle, color=brown];
9591[label="36.106.130.224;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1459[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.130.224:*, 128.28.83.21:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44054: (8.82353%)&lt;BR/&gt; 44052: (8.82353%)&lt;BR/&gt; 44050: (8.82353%)&lt;BR/&gt; 44011: (8.82353%)&gt;];
}
5992--8164[label="1;5pkt 5fpkt"];
5992--9591[label="1;6pkt 6fpkt"];
8164--9591[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.21" dst_port="80" src_ip="36.106.130.224"/>
    </slice>
    <from sec="1144126849" usec="0"/>
    <to sec="1144126863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1460{
style=filled;
color=gray75;
5994[label="161.223.156.224;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8165[label="161.223.156.224;13pkt 13fpkt", shape=invtriangle, color=brown];
9592[label="161.223.156.224;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1460[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.156.224:*, 67.34.162.18:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4549: (3.84615%)&lt;BR/&gt; 4543: (3.84615%)&lt;BR/&gt; 4542: (3.84615%)&lt;BR/&gt; 4541: (3.84615%)&gt;];
}
5994--8165[label="1;13pkt 13fpkt"];
5994--9592[label="1;13pkt 13fpkt"];
8165--9592[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="67.34.162.18" dst_port="80" src_ip="161.223.156.224"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.126.99.225"/>
    </slice>
    <from sec="1144126964" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1462{
style=filled;
color=gray75;
6008[label="41.25.163.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8176[label="41.25.163.225;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1462[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.163.225:37591, 161.223.54.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37591: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6008--8176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.54.81" dst_port="80" src_ip="41.25.163.225" src_port="37591"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1463{
style=filled;
color=gray75;
832[label="214.196.182.225;s;2031pkt 2031fpkt", shape=diamond, color=yellow];
6009[label="214.196.182.225;2231pkt 2231fpkt", shape=pentagon, color=darkviolet];
8177[label="214.196.182.225;2230pkt 2230fpkt", shape=invtriangle, color=brown];
9599[label="214.196.182.225;2230pkt 2230fpkt", shape=invhouse, color=bisque];
stat1463[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.196.182.225:1158, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1158: (50%)&gt;];
}
832--6009[label="1;2031pkt 2031fpkt"];
832--8177[label="0.999508;2030pkt 2030fpkt"];
832--9599[label="0.999508;2030pkt 2030fpkt"];
6009--8177[label="1;2230pkt 2230fpkt"];
6009--9599[label="1;2230pkt 2230fpkt"];
8177--9599[label="1;2230pkt 2230fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="214.196.182.225" src_port="1158"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1464{
style=filled;
color=gray75;
6015[label="36.189.34.226;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8180[label="36.189.34.226;23pkt 23fpkt", shape=invtriangle, color=brown];
9602[label="36.189.34.226;24pkt 24fpkt", shape=invhouse, color=bisque];
stat1464[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.189.34.226:80, 128.28.217.83:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34990: (2.11268%)&lt;BR/&gt; 34989: (2.11268%)&lt;BR/&gt; 34987: (2.11268%)&lt;BR/&gt; 34986: (2.11268%)&gt;];
}
6015--8180[label="1;23pkt 23fpkt"];
6015--9602[label="1;24pkt 24fpkt"];
8180--9602[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.83" src_ip="36.189.34.226" src_port="80"/>
    </slice>
    <from sec="1144127630" usec="0"/>
    <to sec="1144127652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1465{
style=filled;
color=gray75;
6020[label="164.23.128.226;197pkt 197fpkt", shape=pentagon, color=darkviolet];
8183[label="164.23.128.226;197pkt 197fpkt", shape=invtriangle, color=brown];
9604[label="164.23.128.226;196pkt 196fpkt", shape=invhouse, color=bisque];
stat1465[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.128.226:*, *:443}[99.4924%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.7458%)&lt;BR/&gt; 5000: (0.254237%)&lt;BR/&gt; 4984: (0.254237%)&lt;BR/&gt; 4973: (0.254237%)&lt;BR/&gt; 4967: (0.254237%)&gt;];
}
6020--8183[label="1;197pkt 197fpkt"];
6020--9604[label="1;196pkt 196fpkt"];
8183--9604[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="443" src_ip="164.23.128.226"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.50344,2.35662,010,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1466{
style=filled;
color=gray75;
76[label="194.198.142.226s;1019pkt 1019fpkt", shape=rectangle, color=red];
2692[label="194.198.142.226;s;447pkt 447fpkt", shape=diamond, color=yellow];
6021[label="194.198.142.226;1020pkt 1020fpkt", shape=pentagon, color=darkviolet];
8184[label="194.198.142.226;1020pkt 1020fpkt", shape=invtriangle, color=brown];
9605[label="194.198.142.226;1020pkt 1020fpkt", shape=invhouse, color=bisque];
stat1466[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.198.142.226:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4839: (0.0994255%)&lt;BR/&gt; 4838: (0.0994255%)&lt;BR/&gt; 4837: (0.0994255%)&lt;BR/&gt; 4836: (0.0994255%)&gt;];
}
76--2692[label="1;447pkt 447fpkt"];
76--3298[label="0.251227;256pkt 256fpkt"];
76--6021[label="1;1019pkt 1019fpkt"];
76--8184[label="1;1019pkt 1019fpkt"];
76--9605[label="1;1019pkt 1019fpkt"];
2692--3298[label="0.572707;256pkt 256fpkt"];
2692--6021[label="1;447pkt 447fpkt"];
2692--8184[label="1;447pkt 447fpkt"];
2692--9605[label="1;447pkt 447fpkt"];
6021--8184[label="1;1020pkt 1020fpkt"];
6021--9605[label="1;1020pkt 1020fpkt"];
8184--9605[label="1;1020pkt 1020fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="194.198.142.226"/>
    </slice>
    <from sec="1144127592" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
6025[label="161.223.202.226;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8187[label="161.223.202.226;13pkt 13fpkt", shape=invtriangle, color=brown];
9607[label="161.223.202.226;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.202.226:*, 37.152.47.10:80}[78.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4077: (3.75%)&lt;BR/&gt; 4076: (3.75%)&lt;BR/&gt; 4075: (3.75%)&lt;BR/&gt; 4074: (3.75%)&gt;];
}
6025--8187[label="1;13pkt 13fpkt"];
6025--9607[label="1;13pkt 13fpkt"];
8187--9607[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="37.152.47.10" dst_port="80" src_ip="161.223.202.226"/>
    </slice>
    <from sec="1144126984" usec="0"/>
    <to sec="1144127453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7015,2.3052,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1468{
style=filled;
color=gray75;
433[label="132.19.18.19;s;355pkt 355fpkt", shape=diamond, color=yellow];
1171[label="196.206.9.186;d;9pkt 9fpkt", shape=diamond, color=yellow];
1299[label="132.4.148.214;d;143pkt 143fpkt", shape=diamond, color=yellow];
2139[label="196.206.44.77;d;95pkt 95fpkt", shape=diamond, color=yellow];
4299[label="132.19.143.77;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8659[label="161.223.44.51;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1468[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.18.19:*, *:80}[49.7577%]&lt;BR/&gt;{*:*, 132.4.148.214:80}[23.1018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.7031%)&lt;BR/&gt; 32769: (1.95312%)&lt;BR/&gt; 53: (1.95312%)&lt;BR/&gt; 443: (1.17188%)&lt;BR/&gt; 110: (0.546875%)&gt;];
}
433--808[label="0.00584795;2pkt 2fpkt"];
433--995[label="0.00711744;2pkt 2fpkt"];
433--1066[label="0.00621118;1pkt 1fpkt"];
433--1158[label="0.166667;8pkt 8fpkt"];
433--1171[label="1;9pkt 9fpkt"];
433--1268[label="0.0179372;4pkt 4fpkt"];
433--1299[label="0.048951;7pkt 7fpkt"];
433--1367[label="0.08;8pkt 8fpkt"];
433--1400[label="0.0111111;3pkt 3fpkt"];
433--1403[label="0.0208333;3pkt 3fpkt"];
433--1513[label="0.00903614;3pkt 3fpkt"];
433--1517[label="0.078125;15pkt 15fpkt"];
433--1900[label="0.0147059;1pkt 1fpkt"];
433--1917[label="0.0326087;3pkt 3fpkt"];
433--2089[label="0.0199005;4pkt 4fpkt"];
433--2139[label="0.0210526;2pkt 2fpkt"];
433--2324[label="0.116667;14pkt 14fpkt"];
433--3290[label="0.0225352;8pkt 8fpkt"];
433--3295[label="0.0028169;1pkt 1fpkt"];
433--3296[label="0.0140845;5pkt 5fpkt"];
1299--1408[label="0.0892857;10pkt 10fpkt"];
1299--2220[label="0.02;1pkt 1fpkt"];
1299--2878[label="0.151515;10pkt 10fpkt"];
1299--3143[label="0.0204082;1pkt 1fpkt"];
1299--3962[label="0.181818;2pkt 2fpkt"];
1299--4299[label="0.0384615;1pkt 1fpkt"];
1299--4331[label="0.57377;70pkt 70fpkt"];
1299--4416[label="0.328671;47pkt 47fpkt"];
1299--5458[label="0.0714286;2pkt 2fpkt"];
1299--5632[label="0.00699301;1pkt 1fpkt"];
1299--5888[label="0.00699301;1pkt 1fpkt"];
1299--6064[label="0.00699301;1pkt 1fpkt"];
1299--6736[label="0.166667;2pkt 2fpkt"];
1299--6996[label="0.569106;70pkt 70fpkt"];
1299--7777[label="0.0714286;2pkt 2fpkt"];
1299--7911[label="0.00699301;1pkt 1fpkt"];
1299--8091[label="0.00699301;1pkt 1fpkt"];
1299--8218[label="0.00699301;1pkt 1fpkt"];
1299--8659[label="0.166667;2pkt 2fpkt"];
1299--9422[label="0.00699301;1pkt 1fpkt"];
1299--9542[label="0.00699301;1pkt 1fpkt"];
2139--2192[label="0.0210526;2pkt 2fpkt"];
2139--2220[label="0.04;2pkt 2fpkt"];
2139--2239[label="0.025;1pkt 1fpkt"];
2139--2386[label="0.0163934;1pkt 1fpkt"];
2139--2772[label="0.0105263;1pkt 1fpkt"];
2139--2831[label="0.0105263;1pkt 1fpkt"];
2139--2873[label="0.0105263;1pkt 1fpkt"];
2139--2878[label="0.030303;2pkt 2fpkt"];
2139--3006[label="0.0106383;1pkt 1fpkt"];
2139--3057[label="0.0125;1pkt 1fpkt"];
2139--3143[label="0.0408163;2pkt 2fpkt"];
2139--3152[label="0.025;1pkt 1fpkt"];
2139--3246[label="0.0163934;1pkt 1fpkt"];
2139--3296[label="0.0210526;2pkt 2fpkt"];
2139--3333[label="0.0210526;2pkt 2fpkt"];
2139--3437[label="0.0172414;1pkt 1fpkt"];
2139--3463[label="0.0666667;3pkt 3fpkt"];
2139--3528[label="0.0333333;1pkt 1fpkt"];
2139--3840[label="0.0106383;1pkt 1fpkt"];
2139--4001[label="0.189189;7pkt 7fpkt"];
2139--4043[label="0.0163934;1pkt 1fpkt"];
2139--4114[label="0.0105263;1pkt 1fpkt"];
2139--4118[label="0.125;1pkt 1fpkt"];
2139--4373[label="0.0105263;1pkt 1fpkt"];
2139--4421[label="0.470588;32pkt 32fpkt"];
2139--4492[label="0.0105263;1pkt 1fpkt"];
2139--4815[label="0.0588235;1pkt 1fpkt"];
2139--4825[label="0.0754717;4pkt 4fpkt"];
2139--4946[label="0.1;1pkt 1fpkt"];
2139--5037[label="0.0121951;1pkt 1fpkt"];
2139--5181[label="0.047619;1pkt 1fpkt"];
2139--5222[label="0.0384615;1pkt 1fpkt"];
2139--5458[label="0.0357143;1pkt 1fpkt"];
2139--5495[label="0.0208333;1pkt 1fpkt"];
2139--5578[label="0.0333333;1pkt 1fpkt"];
2139--5825[label="0.0105263;1pkt 1fpkt"];
2139--5876[label="0.0105263;1pkt 1fpkt"];
2139--6085[label="0.0294118;1pkt 1fpkt"];
2139--6304[label="0.0210526;2pkt 2fpkt"];
2139--6378[label="0.0175439;1pkt 1fpkt"];
2139--6651[label="0.0105263;1pkt 1fpkt"];
2139--6762[label="0.184211;7pkt 7fpkt"];
2139--6843[label="0.111111;1pkt 1fpkt"];
2139--7025[label="0.0105263;1pkt 1fpkt"];
2139--7062[label="0.463768;32pkt 32fpkt"];
2139--7107[label="0.0105263;1pkt 1fpkt"];
2139--7337[label="0.0588235;1pkt 1fpkt"];
2139--7345[label="0.0754717;4pkt 4fpkt"];
2139--7621[label="0.04;1pkt 1fpkt"];
2139--7777[label="0.0357143;1pkt 1fpkt"];
2139--7806[label="0.0212766;1pkt 1fpkt"];
2139--7869[label="0.0344828;1pkt 1fpkt"];
2139--8045[label="0.0105263;1pkt 1fpkt"];
2139--8082[label="0.0105263;1pkt 1fpkt"];
2139--8234[label="0.03125;1pkt 1fpkt"];
2139--8439[label="0.0175439;1pkt 1fpkt"];
2139--8734[label="0.125;1pkt 1fpkt"];
2139--8850[label="0.0105263;1pkt 1fpkt"];
2139--8876[label="0.470588;32pkt 32fpkt"];
2139--8904[label="0.0105263;1pkt 1fpkt"];
2139--9058[label="0.0625;1pkt 1fpkt"];
2139--9062[label="0.0754717;4pkt 4fpkt"];
2139--9234[label="0.04;1pkt 1fpkt"];
2139--9354[label="0.0212766;1pkt 1fpkt"];
2139--9397[label="0.0333333;1pkt 1fpkt"];
2139--9535[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.18.19"/>
      <filter dst_ip="132.4.148.214" dst_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1469{
style=filled;
color=gray75;
6034[label="132.18.118.227;100pkt 100fpkt", shape=pentagon, color=darkviolet];
8193[label="132.18.118.227;100pkt 100fpkt", shape=invtriangle, color=brown];
9609[label="132.18.118.227;100pkt 100fpkt", shape=invhouse, color=bisque];
stat1469[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.118.227:33575, *:20128}[37%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33575: (49.5%)&lt;BR/&gt; 20128: (18.5%)&lt;BR/&gt; 29511: (1%)&lt;BR/&gt; 64213: (0.5%)&lt;BR/&gt; 62905: (0.5%)&gt;];
}
6034--8193[label="1;100pkt 100fpkt"];
6034--9609[label="1;100pkt 100fpkt"];
8193--9609[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_port="20128" src_ip="132.18.118.227" src_port="33575"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.217.225.227"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1471{
style=filled;
color=gray75;
1445[label="164.23.233.227;s;85pkt 85fpkt", shape=diamond, color=yellow];
6038[label="164.23.233.227;89pkt 89fpkt", shape=pentagon, color=darkviolet];
8197[label="164.23.233.227;89pkt 89fpkt", shape=invtriangle, color=brown];
9613[label="164.23.233.227;88pkt 88fpkt", shape=invhouse, color=bisque];
stat1471[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.233.227:44727, *:53}[96.6292%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44727: (48.2906%)&lt;BR/&gt; 53: (48.2906%)&lt;BR/&gt; 25: (1.7094%)&lt;BR/&gt; 53574: (0.569801%)&lt;BR/&gt; 2345: (0.569801%)&gt;];
}
1445--1811[label="0.0117647;1pkt 1fpkt"];
1445--1818[label="0.0126582;1pkt 1fpkt"];
1445--1864[label="0.0117647;1pkt 1fpkt"];
1445--1900[label="0.0147059;1pkt 1fpkt"];
1445--2178[label="0.0117647;1pkt 1fpkt"];
1445--2378[label="0.0131579;1pkt 1fpkt"];
1445--2515[label="0.0117647;1pkt 1fpkt"];
1445--2522[label="0.0117647;1pkt 1fpkt"];
1445--2564[label="0.0117647;1pkt 1fpkt"];
1445--3295[label="0.329412;28pkt 28fpkt"];
1445--6038[label="1;85pkt 85fpkt"];
1445--8197[label="1;85pkt 85fpkt"];
1445--9613[label="0.988235;84pkt 84fpkt"];
6038--8197[label="1;89pkt 89fpkt"];
6038--9613[label="1;88pkt 88fpkt"];
8197--9613[label="1;88pkt 88fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="164.23.233.227" src_port="44727"/>
    </slice>
    <from sec="1144126864" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.195.30.229"/>
    </slice>
    <from sec="1144126849" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1473{
style=filled;
color=gray75;
6051[label="128.28.148.229;39pkt 39fpkt", shape=pentagon, color=darkviolet];
8206[label="128.28.148.229;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1473[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.148.229:*, 207.153.39.9:80}[74.359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4214: (1.2987%)&lt;BR/&gt; 4213: (1.2987%)&lt;BR/&gt; 4212: (1.2987%)&lt;BR/&gt; 4211: (1.2987%)&gt;];
}
6051--8206[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="207.153.39.9" dst_port="80" src_ip="128.28.148.229"/>
    </slice>
    <from sec="1144127542" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.170.225.229"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.21.87.230"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1476{
style=filled;
color=gray75;
6060[label="213.63.97.230;135pkt 135fpkt", shape=pentagon, color=darkviolet];
8215[label="213.63.97.230;134pkt 134fpkt", shape=invtriangle, color=brown];
stat1476[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.63.97.230:*, *:139}[55.5556%]&lt;BR/&gt;{213.63.97.230:*, *:445}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (27.6952%)&lt;BR/&gt; 445: (22.3048%)&lt;BR/&gt; 3732: (0.743494%)&lt;BR/&gt; 3727: (0.743494%)&lt;BR/&gt; 3185: (0.743494%)&gt;];
}
6060--8215[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="213.63.97.230"/>
      <filter dst_port="445" src_ip="213.63.97.230"/>
    </slice>
    <from sec="1144127000" usec="0"/>
    <to sec="1144127049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1477{
style=filled;
color=gray75;
729[label="81.50.144.231;s;34pkt 34fpkt", shape=diamond, color=yellow];
2042[label="195.80.109.216;d;4pkt 4fpkt", shape=diamond, color=yellow];
6069[label="81.50.144.231;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8222[label="81.50.144.231;36pkt 36fpkt", shape=invtriangle, color=brown];
9629[label="81.50.144.231;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1477[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.50.144.231:80, 195.89.66.195:*}[39.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1245: (3.10345%)&lt;BR/&gt; 1249: (1.72414%)&lt;BR/&gt; 44738: (1.37931%)&lt;BR/&gt; 39012: (1.37931%)&gt;];
}
729--784[label="0.323529;11pkt 11fpkt"];
729--2040[label="0.5;3pkt 3fpkt"];
729--2042[label="0.5;2pkt 2fpkt"];
729--2057[label="0.333333;1pkt 1fpkt"];
729--3288[label="0.117647;4pkt 4fpkt"];
729--3292[label="0.0294118;1pkt 1fpkt"];
729--3303[label="0.0294118;1pkt 1fpkt"];
729--6069[label="1;34pkt 34fpkt"];
729--8222[label="1;34pkt 34fpkt"];
729--9629[label="1;34pkt 34fpkt"];
2042--6069[label="0.5;2pkt 2fpkt"];
2042--8222[label="0.5;2pkt 2fpkt"];
2042--9629[label="0.5;2pkt 2fpkt"];
6069--8222[label="1;36pkt 36fpkt"];
6069--9629[label="1;35pkt 35fpkt"];
8222--9629[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.66.195" src_ip="81.50.144.231" src_port="80"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1478{
style=filled;
color=gray75;
2095[label="210.226.98.232;s;40pkt 40fpkt", shape=diamond, color=yellow];
6074[label="210.226.98.232;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8227[label="210.226.98.232;43pkt 43fpkt", shape=invtriangle, color=brown];
stat1478[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.232:5050, 164.23.233.83:*}[25.5814%]&lt;BR/&gt;{210.226.98.232:5050, 164.23.233.96:*}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (44.0476%)&lt;BR/&gt; 23: (2.38095%)&lt;BR/&gt; 3801: (1.19048%)&lt;BR/&gt; 3122: (1.19048%)&lt;BR/&gt; 2865: (1.19048%)&gt;];
}
2095--6074[label="1;40pkt 40fpkt"];
2095--8227[label="1;40pkt 40fpkt"];
6074--8227[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.233.83" src_ip="210.226.98.232" src_port="5050"/>
      <filter dst_ip="164.23.233.96" src_ip="210.226.98.232" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.36.233.232"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.140.255.232"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1481{
style=filled;
color=gray75;
6102[label="206.82.154.234;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8246[label="206.82.154.234;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1481[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.82.154.234:80, 128.202.74.63:2504}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2504: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6102--8246[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.74.63" dst_port="2504" src_ip="206.82.154.234" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1482{
style=filled;
color=gray75;
2102[label="128.28.200.234;s;69pkt 69fpkt", shape=diamond, color=yellow];
6103[label="128.28.200.234;75pkt 75fpkt", shape=pentagon, color=darkviolet];
8247[label="128.28.200.234;74pkt 74fpkt", shape=invtriangle, color=brown];
9645[label="128.28.200.234;74pkt 74fpkt", shape=invhouse, color=bisque];
stat1482[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.200.234:*, *:6667}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (41.7808%)&lt;BR/&gt; 0: (13.6986%)&lt;BR/&gt; 42252: (0.684932%)&lt;BR/&gt; 41147: (0.684932%)&lt;BR/&gt; 41136: (0.684932%)&gt;];
}
2102--6103[label="1;69pkt 69fpkt"];
2102--8247[label="0.985507;68pkt 68fpkt"];
2102--9645[label="0.985507;68pkt 68fpkt"];
6103--8247[label="1;74pkt 74fpkt"];
6103--9645[label="1;74pkt 74fpkt"];
8247--9645[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_port="6667" src_ip="128.28.200.234"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.118.51.235"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1484{
style=filled;
color=gray75;
6114[label="218.210.194.235;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8253[label="218.210.194.235;8pkt 8fpkt", shape=invtriangle, color=brown];
9651[label="218.210.194.235;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1484[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.210.194.235:*, 128.202.100.240:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 40402: (6%)&lt;BR/&gt; 40188: (6%)&lt;BR/&gt; 39940: (6%)&lt;BR/&gt; 39692: (6%)&gt;];
}
6114--8253[label="1;8pkt 8fpkt"];
6114--9651[label="1;8pkt 8fpkt"];
8253--9651[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="128.202.100.240" dst_port="22" src_ip="218.210.194.235"/>
    </slice>
    <from sec="1144127238" usec="0"/>
    <to sec="1144127298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.682868,2.33824,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1485{
style=filled;
color=gray75;
478[label="132.19.208.235;s;9pkt 9fpkt", shape=diamond, color=yellow];
8255[label="132.19.208.235;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1485[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.208.235:*, 39.204.218.223:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 1087: (5.88235%)&lt;BR/&gt; 1086: (5.88235%)&lt;BR/&gt; 1085: (5.88235%)&lt;BR/&gt; 1084: (5.88235%)&gt;];
}
478--1057[label="0.777778;7pkt 7fpkt"];
478--1448[label="0.111111;1pkt 1fpkt"];
478--2879[label="1;9pkt 9fpkt"];
478--6116[label="1;9pkt 9fpkt"];
478--8255[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="132.19.208.235"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1486{
style=filled;
color=gray75;
6121[label="195.80.111.236;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8257[label="195.80.111.236;17pkt 17fpkt", shape=invtriangle, color=brown];
9653[label="195.80.111.236;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1486[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.80.111.236:*, 219.72.45.74:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1983: (2.94118%)&lt;BR/&gt; 1981: (2.94118%)&lt;BR/&gt; 1980: (2.94118%)&lt;BR/&gt; 1979: (2.94118%)&gt;];
}
6121--8257[label="1;17pkt 17fpkt"];
6121--9653[label="1;17pkt 17fpkt"];
8257--9653[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="219.72.45.74" dst_port="80" src_ip="195.80.111.236"/>
    </slice>
    <from sec="1144126936" usec="0"/>
    <to sec="1144127082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1487{
style=filled;
color=gray75;
6122[label="132.18.116.236;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8258[label="132.18.116.236;2pkt 2fpkt", shape=invtriangle, color=brown];
9654[label="132.18.116.236;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1487[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.116.236:1469, 172.88.16.78:443}[33.3333%]&lt;BR/&gt;{132.18.116.236:1470, 172.88.16.78:443}[33.3333%]&lt;BR/&gt;{132.18.116.236:1472, 172.88.16.78:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1472: (21.4286%)&lt;BR/&gt; 1469: (21.4286%)&lt;BR/&gt; 1470: (7.14286%)&gt;];
}
6122--8258[label="1;2pkt 2fpkt"];
6122--9654[label="1;2pkt 2fpkt"];
8258--9654[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.88.16.78" dst_port="443" src_ip="132.18.116.236" src_port="1472"/>
      <filter dst_ip="172.88.16.78" dst_port="443" src_ip="132.18.116.236" src_port="1470"/>
      <filter dst_ip="172.88.16.78" dst_port="443" src_ip="132.18.116.236" src_port="1469"/>
    </slice>
    <from sec="1144127567" usec="0"/>
    <to sec="1144127586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1488{
style=filled;
color=gray75;
6129[label="210.226.98.237;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8263[label="210.226.98.237;6pkt 6fpkt", shape=invtriangle, color=brown];
9658[label="210.226.98.237;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1488[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.237:5050, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (50%)&lt;BR/&gt; 62479: (7.5%)&lt;BR/&gt; 2854: (7.5%)&lt;BR/&gt; 2013: (7.5%)&lt;BR/&gt; 1978: (7.5%)&gt;];
}
6129--8263[label="1;6pkt 6fpkt"];
6129--9658[label="1;7pkt 7fpkt"];
8263--9658[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.237" src_port="5050"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.174.54.238"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1490{
style=filled;
color=gray75;
6147[label="32.150.138.238;138pkt 138fpkt", shape=pentagon, color=darkviolet];
8276[label="32.150.138.238;138pkt 138fpkt", shape=invtriangle, color=brown];
9666[label="32.150.138.238;137pkt 137fpkt", shape=invhouse, color=bisque];
stat1490[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.150.138.238:*, *:445}[51.4493%]&lt;BR/&gt;{32.150.138.238:*, *:139}[48.5507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.7869%)&lt;BR/&gt; 139: (24.2131%)&lt;BR/&gt; 63265: (0.726392%)&lt;BR/&gt; 63263: (0.726392%)&lt;BR/&gt; 63249: (0.726392%)&gt;];
}
6147--8276[label="1;138pkt 138fpkt"];
6147--9666[label="1;137pkt 137fpkt"];
8276--9666[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="32.150.138.238"/>
      <filter dst_port="139" src_ip="32.150.138.238"/>
    </slice>
    <from sec="1144126982" usec="0"/>
    <to sec="1144127027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1491{
style=filled;
color=gray75;
6148[label="215.45.176.238;322pkt 322fpkt", shape=pentagon, color=darkviolet];
8277[label="215.45.176.238;322pkt 322fpkt", shape=invtriangle, color=brown];
9667[label="215.45.176.238;322pkt 322fpkt", shape=invhouse, color=bisque];
stat1491[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.45.176.238:1685, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1685: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
6148--8277[label="1;322pkt 322fpkt"];
6148--9667[label="1;322pkt 322fpkt"];
8277--9667[label="1;322pkt 322fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.45.176.238" src_port="1685"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1492{
style=filled;
color=gray75;
6153[label="210.226.98.239;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8281[label="210.226.98.239;10pkt 10fpkt", shape=invtriangle, color=brown];
9671[label="210.226.98.239;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1492[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.239:5050, *:*}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (35.4839%)&lt;BR/&gt; 20: (9.67742%)&lt;BR/&gt; 61451: (4.83871%)&lt;BR/&gt; 3594: (4.83871%)&lt;BR/&gt; 3016: (4.83871%)&gt;];
}
6153--8281[label="1;10pkt 10fpkt"];
6153--9671[label="1;10pkt 10fpkt"];
8281--9671[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.239" src_port="5050"/>
    </slice>
    <from sec="1144126823" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1493{
style=filled;
color=gray75;
6158[label="219.162.0.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8283[label="219.162.0.240;2pkt 2fpkt", shape=invtriangle, color=brown];
9673[label="219.162.0.240;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1493[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.162.0.240:24747, 128.28.83.115:25}[33.3333%]&lt;BR/&gt;{219.162.0.240:24748, 128.28.83.115:25}[33.3333%]&lt;BR/&gt;{219.162.0.240:24749, 128.28.83.115:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 24749: (21.4286%)&lt;BR/&gt; 24748: (21.4286%)&lt;BR/&gt; 24747: (7.14286%)&gt;];
}
6158--8283[label="1;2pkt 2fpkt"];
6158--9673[label="1;2pkt 2fpkt"];
8283--9673[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="219.162.0.240" src_port="24749"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="219.162.0.240" src_port="24748"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="219.162.0.240" src_port="24747"/>
    </slice>
    <from sec="1144127479" usec="0"/>
    <to sec="1144127494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.116.142.240"/>
    </slice>
    <from sec="1144127006" usec="0"/>
    <to sec="1144127056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1495{
style=filled;
color=gray75;
6166[label="48.213.44.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8289[label="48.213.44.241;1pkt 1fpkt", shape=invtriangle, color=brown];
9677[label="48.213.44.241;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1495[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.213.44.241:52003, 128.28.217.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52003: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6166--8289[label="1;1pkt 1fpkt"];
6166--9677[label="1;1pkt 1fpkt"];
8289--9677[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="48.213.44.241" src_port="52003"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.34.16.242"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1497{
style=filled;
color=gray75;
6173[label="132.19.43.242;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8293[label="132.19.43.242;4pkt 4fpkt", shape=invtriangle, color=brown];
9680[label="132.19.43.242;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1497[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.43.242:1394, 39.204.218.223:80}[25%]&lt;BR/&gt;{132.19.43.242:1395, 39.204.218.223:80}[25%]&lt;BR/&gt;{132.19.43.242:1396, 39.204.218.223:80}[25%]&lt;BR/&gt;{132.19.43.242:1397, 39.204.218.223:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1397: (12.5%)&lt;BR/&gt; 1396: (12.5%)&lt;BR/&gt; 1395: (12.5%)&lt;BR/&gt; 1394: (12.5%)&gt;];
}
6173--8293[label="1;4pkt 4fpkt"];
6173--9680[label="1;4pkt 4fpkt"];
8293--9680[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="132.19.43.242" src_port="1397"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="132.19.43.242" src_port="1396"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="132.19.43.242" src_port="1395"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="132.19.43.242" src_port="1394"/>
    </slice>
    <from sec="1144127436" usec="0"/>
    <to sec="1144127459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1498{
style=filled;
color=gray75;
1533[label="210.226.98.242;s;40pkt 40fpkt", shape=diamond, color=yellow];
6177[label="210.226.98.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8297[label="210.226.98.242;1pkt 1fpkt", shape=invtriangle, color=brown];
9683[label="210.226.98.242;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1498[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.242:5050, 164.23.234.192:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (46.5116%)&lt;BR/&gt; 1299: (4.65116%)&lt;BR/&gt; 20: (2.32558%)&lt;BR/&gt; 62436: (1.16279%)&lt;BR/&gt; 49174: (1.16279%)&gt;];
}
1533--6177[label="1;1pkt 1fpkt"];
1533--8297[label="1;1pkt 1fpkt"];
1533--9683[label="1;1pkt 1fpkt"];
6177--8297[label="1;1pkt 1fpkt"];
6177--9683[label="1;1pkt 1fpkt"];
8297--9683[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.234.192" src_ip="210.226.98.242" src_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.91.137.242"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1500{
style=filled;
color=gray75;
6179[label="209.104.168.242;319pkt 319fpkt", shape=pentagon, color=darkviolet];
8299[label="209.104.168.242;319pkt 319fpkt", shape=invtriangle, color=brown];
stat1500[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.104.168.242:*, *:1027}[50.7837%]&lt;BR/&gt;{209.104.168.242:*, *:1026}[49.2163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (25.3918%)&lt;BR/&gt; 1026: (24.6082%)&lt;BR/&gt; 54641: (2.19436%)&lt;BR/&gt; 58604: (0.31348%)&lt;BR/&gt; 58376: (0.31348%)&gt;];
}
6179--8299[label="1;319pkt 319fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="209.104.168.242"/>
      <filter dst_port="1026" src_ip="209.104.168.242"/>
    </slice>
    <from sec="1144126957" usec="0"/>
    <to sec="1144127653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1501{
style=filled;
color=gray75;
6184[label="83.178.254.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8304[label="83.178.254.242;2pkt 2fpkt", shape=invtriangle, color=brown];
9688[label="83.178.254.242;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1501[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.178.254.242:80, 147.13.220.1:35669}[33.3333%]&lt;BR/&gt;{83.178.254.242:80, 147.13.230.171:1514}[33.3333%]&lt;BR/&gt;{83.178.254.242:80, 147.13.230.171:1517}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35669: (21.4286%)&lt;BR/&gt; 1517: (21.4286%)&lt;BR/&gt; 1514: (7.14286%)&gt;];
}
6184--8304[label="1;2pkt 2fpkt"];
6184--9688[label="1;2pkt 2fpkt"];
8304--9688[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.171" dst_port="1517" src_ip="83.178.254.242" src_port="80"/>
      <filter dst_ip="147.13.230.171" dst_port="1514" src_ip="83.178.254.242" src_port="80"/>
      <filter dst_ip="147.13.220.1" dst_port="35669" src_ip="83.178.254.242" src_port="80"/>
    </slice>
    <from sec="1144127532" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.157.236.243"/>
    </slice>
    <from sec="1144127585" usec="0"/>
    <to sec="1144127593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1503{
style=filled;
color=gray75;
743[label="202.226.16.244;s;2pkt 2fpkt", shape=diamond, color=yellow];
6191[label="202.226.16.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8310[label="202.226.16.244;1pkt 1fpkt", shape=invtriangle, color=brown];
9693[label="202.226.16.244;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1503[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.226.16.244:32768, 128.28.217.142:53}[50%]&lt;BR/&gt;{202.226.16.244:42579, 132.19.213.171:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42579: (40%)&lt;BR/&gt; 25: (40%)&lt;BR/&gt; 32768: (10%)&lt;BR/&gt; 53: (10%)&gt;];
}
743--6191[label="1;1pkt 1fpkt"];
743--8310[label="1;1pkt 1fpkt"];
743--9693[label="1;1pkt 1fpkt"];
6191--8310[label="1;1pkt 1fpkt"];
6191--9693[label="1;1pkt 1fpkt"];
8310--9693[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.213.171" dst_port="25" src_ip="202.226.16.244" src_port="42579"/>
      <filter dst_ip="128.28.217.142" dst_port="53" src_ip="202.226.16.244" src_port="32768"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144127041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1504{
style=filled;
color=gray75;
467[label="132.19.70.244;s;10pkt 10fpkt", shape=diamond, color=yellow];
1057[label="39.204.218.223;d;43pkt 43fpkt", shape=diamond, color=yellow];
4208[label="132.19.207.70;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6195[label="132.19.70.244;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6907[label="132.19.207.70;6pkt 6fpkt", shape=invtriangle, color=brown];
8314[label="132.19.70.244;10pkt 10fpkt", shape=invtriangle, color=brown];
8777[label="132.19.207.70;5pkt 5fpkt", shape=invhouse, color=bisque];
9694[label="132.19.70.244;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1504[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 39.204.218.223:80}[86%]&lt;BR/&gt;{132.19.70.244:*, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9184%)&lt;BR/&gt; 1863: (4.08163%)&lt;BR/&gt; 1087: (3.06122%)&lt;BR/&gt; 1091: (2.55102%)&lt;BR/&gt; 1090: (2.55102%)&gt;];
}
467--1057[label="0.4;4pkt 4fpkt"];
467--1095[label="0.1;1pkt 1fpkt"];
467--6195[label="1;10pkt 10fpkt"];
467--8314[label="1;10pkt 10fpkt"];
467--9694[label="1;9pkt 9fpkt"];
1057--1119[label="0.0930233;4pkt 4fpkt"];
1057--2774[label="0.131579;5pkt 5fpkt"];
1057--2838[label="0.0930233;4pkt 4fpkt"];
1057--2879[label="0.777778;7pkt 7fpkt"];
1057--3180[label="0.0930233;4pkt 4fpkt"];
1057--3225[label="0.0930233;4pkt 4fpkt"];
1057--3336[label="0.0930233;4pkt 4fpkt"];
1057--3346[label="0.111111;2pkt 2fpkt"];
1057--3528[label="0.0666667;2pkt 2fpkt"];
1057--3772[label="0.125;5pkt 5fpkt"];
1057--4208[label="0.8;4pkt 4fpkt"];
1057--4375[label="0.0930233;4pkt 4fpkt"];
1057--5235[label="0.117647;4pkt 4fpkt"];
1057--6116[label="0.777778;7pkt 7fpkt"];
1057--6195[label="0.4;4pkt 4fpkt"];
1057--6306[label="0.0930233;4pkt 4fpkt"];
1057--6315[label="0.111111;2pkt 2fpkt"];
1057--6907[label="0.833333;5pkt 5fpkt"];
1057--7027[label="0.0930233;4pkt 4fpkt"];
1057--7630[label="0.121212;4pkt 4fpkt"];
1057--8255[label="0.875;7pkt 7fpkt"];
1057--8314[label="0.4;4pkt 4fpkt"];
1057--8401[label="0.111111;2pkt 2fpkt"];
1057--8777[label="0.8;4pkt 4fpkt"];
1057--8852[label="0.0930233;4pkt 4fpkt"];
1057--9694[label="0.444444;4pkt 4fpkt"];
4208--6907[label="1;5pkt 5fpkt"];
4208--8777[label="1;5pkt 5fpkt"];
6195--8314[label="1;10pkt 10fpkt"];
6195--9694[label="1;9pkt 9fpkt"];
6907--8777[label="1;5pkt 5fpkt"];
8314--9694[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="132.19.70.244"/>
      <filter dst_ip="39.204.218.223" dst_port="80"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.597628,2.29013,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1505{
style=filled;
color=gray75;
1118[label="132.18.77.244;s;22pkt 22fpkt", shape=diamond, color=yellow];
6196[label="132.18.77.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8315[label="132.18.77.244;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1505[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.18.77.244:*, 195.177.10.236:25}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 56399: (6.25%)&lt;BR/&gt; 56968: (2.08333%)&lt;BR/&gt; 56814: (2.08333%)&lt;BR/&gt; 56726: (2.08333%)&gt;];
}
1118--1322[label="0.75;6pkt 6fpkt"];
1118--6196[label="1;1pkt 1fpkt"];
1118--8315[label="1;1pkt 1fpkt"];
6196--8315[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.177.10.236" dst_port="25" src_ip="132.18.77.244"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1506{
style=filled;
color=gray75;
6197[label="204.92.134.244;248pkt 248fpkt", shape=pentagon, color=darkviolet];
8316[label="204.92.134.244;248pkt 248fpkt", shape=invtriangle, color=brown];
9695[label="204.92.134.244;247pkt 247fpkt", shape=invhouse, color=bisque];
stat1506[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.92.134.244:*, *:139}[50%]&lt;BR/&gt;{204.92.134.244:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.0336%)&lt;BR/&gt; 139: (24.9664%)&lt;BR/&gt; 64506: (0.403769%)&lt;BR/&gt; 64504: (0.403769%)&lt;BR/&gt; 64501: (0.403769%)&gt;];
}
6197--8316[label="1;248pkt 248fpkt"];
6197--9695[label="1;247pkt 247fpkt"];
8316--9695[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="204.92.134.244"/>
      <filter dst_port="139" src_ip="204.92.134.244"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144126859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1507{
style=filled;
color=gray75;
6199[label="132.19.211.244;28pkt 28fpkt", shape=pentagon, color=darkviolet];
8318[label="132.19.211.244;28pkt 28fpkt", shape=invtriangle, color=brown];
9697[label="132.19.211.244;27pkt 27fpkt", shape=invhouse, color=bisque];
stat1507[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.211.244:*, 67.52.140.134:80}[60.7143%]&lt;BR/&gt;{132.19.211.244:*, 210.219.10.50:80}[39.2857%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1638: (1.80723%)&lt;BR/&gt; 1637: (1.80723%)&lt;BR/&gt; 1636: (1.80723%)&lt;BR/&gt; 1635: (1.80723%)&gt;];
}
6199--8318[label="1;28pkt 28fpkt"];
6199--9697[label="1;27pkt 27fpkt"];
8318--9697[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="67.52.140.134" dst_port="80" src_ip="132.19.211.244"/>
      <filter dst_ip="210.219.10.50" dst_port="80" src_ip="132.19.211.244"/>
    </slice>
    <from sec="1144127374" usec="0"/>
    <to sec="1144127380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1508{
style=filled;
color=gray75;
6204[label="214.213.63.245;323pkt 323fpkt", shape=pentagon, color=darkviolet];
8320[label="214.213.63.245;322pkt 322fpkt", shape=invtriangle, color=brown];
9699[label="214.213.63.245;322pkt 322fpkt", shape=invhouse, color=bisque];
stat1508[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.213.63.245:7000, 128.156.160.145:*}[28.7926%]&lt;BR/&gt;{214.213.63.245:7000, 128.231.172.181:*}[25.0774%]&lt;BR/&gt;{214.213.63.245:7000, 128.156.237.94:*}[24.4582%]&lt;BR/&gt;{214.213.63.245:7000, 161.146.58.136:*}[21.6718%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (50%)&lt;BR/&gt; 34114: (0.310238%)&lt;BR/&gt; 22677: (0.310238%)&lt;BR/&gt; 4525: (0.310238%)&lt;BR/&gt; 65331: (0.155119%)&gt;];
}
6204--8320[label="1;322pkt 322fpkt"];
6204--9699[label="1;322pkt 322fpkt"];
8320--9699[label="1;322pkt 322fpkt"];
</description>
    <slice>
      <filter dst_ip="128.156.160.145" src_ip="214.213.63.245" src_port="7000"/>
      <filter dst_ip="128.231.172.181" src_ip="214.213.63.245" src_port="7000"/>
      <filter dst_ip="128.156.237.94" src_ip="214.213.63.245" src_port="7000"/>
      <filter dst_ip="161.146.58.136" src_ip="214.213.63.245" src_port="7000"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.55.149.245"/>
    </slice>
    <from sec="1144126827" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.72.42.246"/>
    </slice>
    <from sec="1144127654" usec="0"/>
    <to sec="1144127662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1511{
style=filled;
color=gray75;
6214[label="83.180.43.246;128pkt 128fpkt", shape=pentagon, color=darkviolet];
8329[label="83.180.43.246;127pkt 127fpkt", shape=invtriangle, color=brown];
9706[label="83.180.43.246;127pkt 127fpkt", shape=invhouse, color=bisque];
stat1511[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.180.43.246:0, *:0}[90.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (90.5759%)&lt;BR/&gt; 80: (4.71204%)&lt;BR/&gt; 4657: (0.39267%)&lt;BR/&gt; 4341: (0.39267%)&lt;BR/&gt; 4313: (0.39267%)&gt;];
}
6214--8329[label="1;127pkt 127fpkt"];
6214--9706[label="1;127pkt 127fpkt"];
8329--9706[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter src_ip="83.180.43.246"/>
    </slice>
    <from sec="1144126843" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.133.88.246"/>
    </slice>
    <from sec="1144126911" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1513{
style=filled;
color=gray75;
6221[label="41.25.173.246;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8334[label="41.25.173.246;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1513[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.25.173.246:38091, 128.28.4.75:80}[50%]&lt;BR/&gt;{41.25.173.246:47507, 128.28.4.75:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47507: (25%)&lt;BR/&gt; 38091: (25%)&gt;];
}
6221--8334[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.4.75" dst_port="80" src_ip="41.25.173.246" src_port="47507"/>
      <filter dst_ip="128.28.4.75" dst_port="80" src_ip="41.25.173.246" src_port="38091"/>
    </slice>
    <from sec="1144126903" usec="0"/>
    <to sec="1144127104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1514{
style=filled;
color=gray75;
6223[label="36.218.27.247;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8335[label="36.218.27.247;4pkt 4fpkt", shape=invtriangle, color=brown];
9710[label="36.218.27.247;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1514[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.218.27.247:80, 132.19.152.102:57923}[20%]&lt;BR/&gt;{36.218.27.247:80, 132.19.152.102:57925}[20%]&lt;BR/&gt;{36.218.27.247:80, 132.19.152.102:57927}[20%]&lt;BR/&gt;{36.218.27.247:80, 132.19.152.102:57961}[20%]&lt;BR/&gt;{36.218.27.247:80, 132.19.152.102:57962}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57962: (11.5385%)&lt;BR/&gt; 57961: (11.5385%)&lt;BR/&gt; 57927: (11.5385%)&lt;BR/&gt; 57925: (11.5385%)&gt;];
}
6223--8335[label="1;4pkt 4fpkt"];
6223--9710[label="1;4pkt 4fpkt"];
8335--9710[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.152.102" dst_port="57962" src_ip="36.218.27.247" src_port="80"/>
      <filter dst_ip="132.19.152.102" dst_port="57961" src_ip="36.218.27.247" src_port="80"/>
      <filter dst_ip="132.19.152.102" dst_port="57927" src_ip="36.218.27.247" src_port="80"/>
      <filter dst_ip="132.19.152.102" dst_port="57925" src_ip="36.218.27.247" src_port="80"/>
      <filter dst_ip="132.19.152.102" dst_port="57923" src_ip="36.218.27.247" src_port="80"/>
    </slice>
    <from sec="1144127113" usec="0"/>
    <to sec="1144127155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1515{
style=filled;
color=gray75;
1041[label="210.226.98.247;s;43pkt 43fpkt", shape=diamond, color=yellow];
1629[label="210.226.98.199;s;217pkt 217fpkt", shape=diamond, color=yellow];
1905[label="164.23.218.92;d;278pkt 278fpkt", shape=diamond, color=yellow];
6224[label="210.226.98.247;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8336[label="210.226.98.247;42pkt 42fpkt", shape=invtriangle, color=brown];
9711[label="210.226.98.247;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1515[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.199:*, 164.23.218.92:*}[41.6887%]&lt;BR/&gt;{*:5050, 164.23.218.92:*}[30.343%]&lt;BR/&gt;{210.226.98.199:5050, *:*}[22.6913%]&lt;BR/&gt;{*:23, 164.23.218.92:*}[21.8997%]&lt;BR/&gt;{36.52.240.3:*, 164.23.218.92:*}[21.372%]&lt;BR/&gt;{*:20, 164.23.218.92:*}[20.5805%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (27.027%)&lt;BR/&gt; 23: (11.6366%)&lt;BR/&gt; 20: (11.1111%)&lt;BR/&gt; 3060: (0.375375%)&lt;BR/&gt; 1624: (0.375375%)&gt;];
}
1041--1905[label="0.0232558;1pkt 1fpkt"];
1041--6224[label="1;43pkt 43fpkt"];
1041--8336[label="1;42pkt 42fpkt"];
1041--9711[label="1;43pkt 43fpkt"];
1629--1905[label="0.728111;158pkt 158fpkt"];
1905--3033[label="0.333333;37pkt 37fpkt"];
1905--4853[label="0.0285714;1pkt 1fpkt"];
1905--5644[label="0.222892;37pkt 37fpkt"];
1905--6224[label="0.0232558;1pkt 1fpkt"];
1905--8336[label="0.0238095;1pkt 1fpkt"];
1905--9711[label="0.0232558;1pkt 1fpkt"];
6224--8336[label="1;42pkt 42fpkt"];
6224--9711[label="1;43pkt 43fpkt"];
8336--9711[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.218.92" src_ip="210.226.98.199"/>
      <filter src_ip="210.226.98.199" src_port="5050"/>
      <filter dst_ip="164.23.218.92" src_ip="36.52.240.3"/>
      <filter dst_ip="164.23.218.92" src_port="5050"/>
      <filter dst_ip="164.23.218.92" src_port="23"/>
      <filter dst_ip="164.23.218.92" src_port="20"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1516{
style=filled;
color=gray75;
6225[label="128.28.143.247;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8337[label="128.28.143.247;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1516[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.143.247:80, 196.206.212.19:20637}[50%]&lt;BR/&gt;{128.28.143.247:80, 196.206.212.19:20899}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20899: (25%)&lt;BR/&gt; 20637: (25%)&gt;];
}
6225--8337[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.206.212.19" dst_port="20899" src_ip="128.28.143.247" src_port="80"/>
      <filter dst_ip="196.206.212.19" dst_port="20637" src_ip="128.28.143.247" src_port="80"/>
    </slice>
    <from sec="1144127562" usec="0"/>
    <to sec="1144127677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1517{
style=filled;
color=gray75;
6226[label="132.19.153.247;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8338[label="132.19.153.247;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1517[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.153.247:49466, 32.136.71.234:80}[25%]&lt;BR/&gt;{132.19.153.247:49467, 32.136.71.234:80}[25%]&lt;BR/&gt;{132.19.153.247:49468, 32.136.71.234:80}[25%]&lt;BR/&gt;{132.19.153.247:49469, 32.136.71.234:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49469: (12.5%)&lt;BR/&gt; 49468: (12.5%)&lt;BR/&gt; 49467: (12.5%)&lt;BR/&gt; 49466: (12.5%)&gt;];
}
6226--8338[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="32.136.71.234" dst_port="80" src_ip="132.19.153.247" src_port="49469"/>
      <filter dst_ip="32.136.71.234" dst_port="80" src_ip="132.19.153.247" src_port="49468"/>
      <filter dst_ip="32.136.71.234" dst_port="80" src_ip="132.19.153.247" src_port="49467"/>
      <filter dst_ip="32.136.71.234" dst_port="80" src_ip="132.19.153.247" src_port="49466"/>
    </slice>
    <from sec="1144127233" usec="0"/>
    <to sec="1144127261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1518{
style=filled;
color=gray75;
6228[label="215.110.188.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8339[label="215.110.188.247;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1518[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.110.188.247:4496, 128.28.83.115:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4496: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
6228--8339[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.110.188.247" src_port="4496"/>
    </slice>
    <from sec="1144127628" usec="0"/>
    <to sec="1144127639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.2.151.248"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.45837,2.397,002,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
79[label="59.33.138.249s;79pkt 79fpkt", shape=rectangle, color=red];
6239[label="59.33.138.249;116pkt 116fpkt", shape=pentagon, color=darkviolet];
8346[label="59.33.138.249;116pkt 116fpkt", shape=invtriangle, color=brown];
9717[label="59.33.138.249;115pkt 115fpkt", shape=invhouse, color=bisque];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.33.138.249:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4936: (0.469484%)&lt;BR/&gt; 4891: (0.469484%)&lt;BR/&gt; 4858: (0.469484%)&lt;BR/&gt; 4808: (0.469484%)&gt;];
}
79--6239[label="1;79pkt 79fpkt"];
79--8346[label="1;79pkt 79fpkt"];
79--9717[label="0.987342;78pkt 78fpkt"];
6239--8346[label="1;116pkt 116fpkt"];
6239--9717[label="1;115pkt 115fpkt"];
8346--9717[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="59.33.138.249"/>
    </slice>
    <from sec="1144127066" usec="0"/>
    <to sec="1144127195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.98.15.250"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1522{
style=filled;
color=gray75;
6249[label="36.133.101.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8352[label="36.133.101.250;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1522[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.133.101.250:80, 161.223.54.169:1529}[50%]&lt;BR/&gt;{36.133.101.250:80, 195.89.105.214:58714}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58714: (25%)&lt;BR/&gt; 1529: (25%)&gt;];
}
6249--8352[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.105.214" dst_port="58714" src_ip="36.133.101.250" src_port="80"/>
      <filter dst_ip="161.223.54.169" dst_port="1529" src_ip="36.133.101.250" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1523{
style=filled;
color=gray75;
6255[label="217.44.237.250;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8357[label="217.44.237.250;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1523[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.44.237.250:80, 132.19.152.102:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58378: (8.33333%)&lt;BR/&gt; 58370: (8.33333%)&lt;BR/&gt; 58368: (8.33333%)&lt;BR/&gt; 58367: (8.33333%)&gt;];
}
6255--8357[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.152.102" src_ip="217.44.237.250" src_port="80"/>
    </slice>
    <from sec="1144127380" usec="0"/>
    <to sec="1144127406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.30.69.251"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.155.89.251"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1526{
style=filled;
color=gray75;
6260[label="36.133.101.251;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8361[label="36.133.101.251;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1526[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.133.101.251:80, 161.223.54.169:1530}[50%]&lt;BR/&gt;{36.133.101.251:80, 161.223.54.169:1531}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1531: (25%)&lt;BR/&gt; 1530: (25%)&gt;];
}
6260--8361[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="161.223.54.169" dst_port="1531" src_ip="36.133.101.251" src_port="80"/>
      <filter dst_ip="161.223.54.169" dst_port="1530" src_ip="36.133.101.251" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1527{
style=filled;
color=gray75;
6263[label="128.28.217.251;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8363[label="128.28.217.251;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1527[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.217.251:80, 195.150.112.133:62403}[33.3333%]&lt;BR/&gt;{128.28.217.251:80, 41.25.170.164:48017}[33.3333%]&lt;BR/&gt;{128.28.217.251:80, 192.110.64.176:47984}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62403: (16.6667%)&lt;BR/&gt; 48017: (16.6667%)&lt;BR/&gt; 47984: (16.6667%)&gt;];
}
6263--8363[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.110.64.176" dst_port="47984" src_ip="128.28.217.251" src_port="80"/>
      <filter dst_ip="41.25.170.164" dst_port="48017" src_ip="128.28.217.251" src_port="80"/>
      <filter dst_ip="195.150.112.133" dst_port="62403" src_ip="128.28.217.251" src_port="80"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1528{
style=filled;
color=gray75;
6267[label="215.77.92.252;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8367[label="215.77.92.252;2pkt 2fpkt", shape=invtriangle, color=brown];
9730[label="215.77.92.252;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1528[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.77.92.252:4381, 128.28.83.115:25}[50%]&lt;BR/&gt;{215.77.92.252:4385, 128.28.83.115:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4385: (25%)&lt;BR/&gt; 4381: (25%)&gt;];
}
6267--8367[label="1;2pkt 2fpkt"];
6267--9730[label="1;2pkt 2fpkt"];
8367--9730[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.77.92.252" src_port="4385"/>
      <filter dst_ip="128.28.83.115" dst_port="25" src_ip="215.77.92.252" src_port="4381"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.213.96.252"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1530{
style=filled;
color=gray75;
372[label="33.84.164.252;s;248pkt 248fpkt", shape=diamond, color=yellow];
901[label="147.13.230.171;d;256pkt 256fpkt", shape=diamond, color=yellow];
6270[label="33.84.164.252;248pkt 248fpkt", shape=pentagon, color=darkviolet];
8370[label="33.84.164.252;247pkt 247fpkt", shape=invtriangle, color=brown];
8891[label="214.225.0.91;1pkt 1fpkt", shape=invhouse, color=bisque];
9732[label="33.84.164.252;247pkt 247fpkt", shape=invhouse, color=bisque];
stat1530[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.84.164.252:80, 147.13.230.171:*}[93.2331%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1472: (0.200481%)&lt;BR/&gt; 1471: (0.200481%)&lt;BR/&gt; 1470: (0.200481%)&lt;BR/&gt; 1469: (0.200481%)&gt;];
}
372--901[label="0.959677;238pkt 238fpkt"];
372--3288[label="0.0927419;23pkt 23fpkt"];
372--3292[label="0.0322581;8pkt 8fpkt"];
372--3303[label="0.0322581;8pkt 8fpkt"];
372--6270[label="1;248pkt 248fpkt"];
372--8370[label="1;247pkt 247fpkt"];
372--9732[label="1;247pkt 247fpkt"];
901--2842[label="1;1pkt 1fpkt"];
901--3288[label="0.144531;37pkt 37fpkt"];
901--3292[label="0.03125;8pkt 8fpkt"];
901--3303[label="0.03125;8pkt 8fpkt"];
901--6270[label="0.959677;238pkt 238fpkt"];
901--8370[label="0.959514;237pkt 237fpkt"];
901--8891[label="1;1pkt 1fpkt"];
901--9732[label="0.959514;237pkt 237fpkt"];
6270--8370[label="1;247pkt 247fpkt"];
6270--9732[label="1;247pkt 247fpkt"];
8370--9732[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.230.171" src_ip="33.84.164.252" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.217.82.253"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.177.101.253"/>
    </slice>
    <from sec="1144126816" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1533{
style=filled;
color=gray75;
6279[label="209.101.45.254;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8376[label="209.101.45.254;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1533[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.101.45.254:12388, 194.212.153.164:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12388: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6279--8376[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.153.164" dst_port="80" src_ip="209.101.45.254" src_port="12388"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1534{
style=filled;
color=gray75;
6281[label="210.226.98.254;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8378[label="210.226.98.254;13pkt 13fpkt", shape=invtriangle, color=brown];
9737[label="210.226.98.254;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1534[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.226.98.254:5050, *:*}[92.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (47.561%)&lt;BR/&gt; 63691: (3.65854%)&lt;BR/&gt; 2282: (3.65854%)&lt;BR/&gt; 2249: (3.65854%)&lt;BR/&gt; 1826: (3.65854%)&gt;];
}
6281--8378[label="1;13pkt 13fpkt"];
6281--9737[label="1;14pkt 14fpkt"];
8378--9737[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="210.226.98.254" src_port="5050"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472925,2.33165,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1535{
style=filled;
color=gray75;
6289[label="37.202.209.255;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8383[label="37.202.209.255;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1535[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.202.209.255:80, 132.19.198.45:52229}[20%]&lt;BR/&gt;{37.202.209.255:80, 132.19.198.45:52261}[20%]&lt;BR/&gt;{37.202.209.255:80, 132.19.198.45:52333}[20%]&lt;BR/&gt;{37.202.209.255:80, 132.19.198.45:52406}[20%]&lt;BR/&gt;{37.202.209.255:80, 132.19.198.45:52439}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52439: (11.1111%)&lt;BR/&gt; 52406: (11.1111%)&lt;BR/&gt; 52333: (11.1111%)&lt;BR/&gt; 52261: (11.1111%)&gt;];
}
6289--8383[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.198.45" dst_port="52439" src_ip="37.202.209.255" src_port="80"/>
      <filter dst_ip="132.19.198.45" dst_port="52406" src_ip="37.202.209.255" src_port="80"/>
      <filter dst_ip="132.19.198.45" dst_port="52333" src_ip="37.202.209.255" src_port="80"/>
      <filter dst_ip="132.19.198.45" dst_port="52261" src_ip="37.202.209.255" src_port="80"/>
      <filter dst_ip="132.19.198.45" dst_port="52229" src_ip="37.202.209.255" src_port="80"/>
    </slice>
    <from sec="1144127205" usec="0"/>
    <to sec="1144127292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.576894,2.37892,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.62.220.255"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.180.115.3"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.188.195.3"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.33.64.4"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.918689,2.39119,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1540{
style=filled;
color=gray75;
3255[label="195.89.72.5;s;4pkt 4fpkt", shape=hexagon, color=black];
stat1540[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.89.72.5:1063, 39.204.218.223:80}[25%]&lt;BR/&gt;{195.89.72.5:1064, 39.204.218.223:80}[25%]&lt;BR/&gt;{195.89.72.5:1065, 39.204.218.223:80}[25%]&lt;BR/&gt;{195.89.72.5:1066, 39.204.218.223:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1066: (12.5%)&lt;BR/&gt; 1065: (12.5%)&lt;BR/&gt; 1064: (12.5%)&lt;BR/&gt; 1063: (12.5%)&gt;];
}
3255--3296[label="0.5;2pkt 2fpkt"];
3255--3381[label="1;4pkt 4fpkt"];
3255--6342[label="0.75;3pkt 3fpkt"];
3255--8420[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1066"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1065"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1064"/>
      <filter dst_ip="39.204.218.223" dst_port="80" src_ip="195.89.72.5" src_port="1063"/>
    </slice>
    <from sec="1144127559" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.113.152.12"/>
    </slice>
    <from sec="1144127649" usec="0"/>
    <to sec="1144127674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.74.19.13"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93906,2.27427,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1543{
style=filled;
color=gray75;
1879[label="210.226.98.192;d;107pkt 107fpkt", shape=diamond, color=yellow];
3117[label="210.226.98.192;d;101pkt 101fpkt", shape=hexagon, color=black];
6090[label="164.23.238.233;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8238[label="164.23.238.233;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1543[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.226.98.192:5050}[73.3945%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (36.6197%)&lt;BR/&gt; 20: (4.22535%)&lt;BR/&gt; 21: (3.75587%)&lt;BR/&gt; 23: (3.28638%)&lt;BR/&gt; 0: (2.8169%)&gt;];
}
1879--3031[label="0.00934579;1pkt 1fpkt"];
1879--3117[label="1;101pkt 101fpkt"];
1879--3504[label="0.025641;1pkt 1fpkt"];
1879--4122[label="0.00934579;1pkt 1fpkt"];
1879--4259[label="0.0895522;6pkt 6fpkt"];
1879--4797[label="0.00934579;1pkt 1fpkt"];
1879--6090[label="0.333333;1pkt 1fpkt"];
1879--6429[label="0.025641;1pkt 1fpkt"];
1879--6845[label="0.00934579;1pkt 1fpkt"];
1879--7324[label="0.00934579;1pkt 1fpkt"];
1879--8238[label="0.5;1pkt 1fpkt"];
1879--8474[label="0.025;1pkt 1fpkt"];
1879--8736[label="0.00934579;1pkt 1fpkt"];
1879--9046[label="0.00934579;1pkt 1fpkt"];
3117--4122[label="0.00990099;1pkt 1fpkt"];
3117--4259[label="0.0895522;6pkt 6fpkt"];
3117--4797[label="0.00990099;1pkt 1fpkt"];
3117--6090[label="0.333333;1pkt 1fpkt"];
3117--6845[label="0.00990099;1pkt 1fpkt"];
3117--7324[label="0.00990099;1pkt 1fpkt"];
3117--8238[label="0.5;1pkt 1fpkt"];
3117--8736[label="0.00990099;1pkt 1fpkt"];
3117--9046[label="0.00990099;1pkt 1fpkt"];
6090--8238[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.226.98.192" dst_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.775404,2.353,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1544{
style=filled;
color=gray75;
270[label="82.28.176.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
8477[label="82.28.176.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1544[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.28.176.14:50270, 147.13.36.46:3077}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50270: (50%)&lt;BR/&gt; 3077: (50%)&gt;];
}
270--1504[label="1;1pkt 1fpkt"];
270--8477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.36.46" dst_port="3077" src_ip="82.28.176.14" src_port="50270"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598833,2.34646,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1545{
style=filled;
color=gray75;
3584[label="161.223.103.19;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8501[label="161.223.103.19;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1545[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.103.19:*, 202.6.76.54:80}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2200: (4.34783%)&lt;BR/&gt; 2199: (4.34783%)&lt;BR/&gt; 2198: (4.34783%)&lt;BR/&gt; 2197: (4.34783%)&gt;];
}
3584--6481[label="1;12pkt 12fpkt"];
3584--8501[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="202.6.76.54" dst_port="80" src_ip="161.223.103.19"/>
    </slice>
    <from sec="1144127288" usec="0"/>
    <to sec="1144127578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.90.143.19"/>
    </slice>
    <from sec="1144126853" usec="0"/>
    <to sec="1144127694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.211.19.20"/>
    </slice>
    <from sec="1144127483" usec="0"/>
    <to sec="1144127526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1548{
style=filled;
color=gray75;
1270[label="195.89.107.47;d;612pkt 612fpkt", shape=diamond, color=yellow];
stat1548[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.89.107.47:53}[99.6732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.451%)&lt;BR/&gt; 32768: (2.69608%)&lt;BR/&gt; 32772: (0.898693%)&lt;BR/&gt; 33701: (0.816993%)&lt;BR/&gt; 32769: (0.735294%)&gt;];
}
1270--1375[label="0.0909091;1pkt 1fpkt"];
1270--1409[label="0.125;1pkt 1fpkt"];
1270--2397[label="0.0588235;1pkt 1fpkt"];
1270--2580[label="0.0714286;1pkt 1fpkt"];
1270--3139[label="0.142857;1pkt 1fpkt"];
1270--3287[label="0.00163399;1pkt 1fpkt"];
1270--3290[label="0.0833333;51pkt 51fpkt"];
1270--3295[label="0.0735294;45pkt 45fpkt"];
1270--3302[label="0.00326797;2pkt 2fpkt"];
1270--3311[label="0.1;1pkt 1fpkt"];
1270--3468[label="0.142857;1pkt 1fpkt"];
1270--3540[label="1;1pkt 1fpkt"];
1270--3596[label="0.25;1pkt 1fpkt"];
1270--3667[label="0.0333333;1pkt 1fpkt"];
1270--3731[label="0.0123457;1pkt 1fpkt"];
1270--3777[label="0.0769231;1pkt 1fpkt"];
1270--4103[label="0.0555556;1pkt 1fpkt"];
1270--4449[label="0.0714286;1pkt 1fpkt"];
1270--4462[label="0.142857;1pkt 1fpkt"];
1270--4512[label="0.0184332;4pkt 4fpkt"];
1270--4595[label="0.111111;1pkt 1fpkt"];
1270--4671[label="0.0320856;6pkt 6fpkt"];
1270--4743[label="0.0434783;1pkt 1fpkt"];
1270--4769[label="0.047619;1pkt 1fpkt"];
1270--4851[label="0.0330579;4pkt 4fpkt"];
1270--4939[label="0.00961538;1pkt 1fpkt"];
1270--5182[label="0.0238095;1pkt 1fpkt"];
1270--5205[label="0.0555556;1pkt 1fpkt"];
1270--5592[label="0.0714286;1pkt 1fpkt"];
1270--5641[label="0.166667;1pkt 1fpkt"];
1270--5756[label="0.0909091;1pkt 1fpkt"];
1270--5778[label="0.0555556;1pkt 1fpkt"];
1270--5859[label="0.125;1pkt 1fpkt"];
1270--5973[label="0.0638298;3pkt 3fpkt"];
1270--5985[label="0.030303;1pkt 1fpkt"];
1270--6099[label="0.0140845;1pkt 1fpkt"];
1270--6160[label="0.1;1pkt 1fpkt"];
1270--6167[label="0.125;1pkt 1fpkt"];
1270--6175[label="0.166667;1pkt 1fpkt"];
1270--6292[label="0.0909091;1pkt 1fpkt"];
1270--6402[label="0.142857;1pkt 1fpkt"];
1270--6447[label="1;1pkt 1fpkt"];
1270--6489[label="0.2;1pkt 1fpkt"];
1270--6608[label="0.0833333;1pkt 1fpkt"];
1270--6831[label="0.0588235;1pkt 1fpkt"];
1270--7118[label="0.0183486;4pkt 4fpkt"];
1270--7227[label="0.0320856;6pkt 6fpkt"];
1270--7303[label="0.047619;1pkt 1fpkt"];
1270--7425[label="0.00952381;1pkt 1fpkt"];
1270--7594[label="0.0238095;1pkt 1fpkt"];
1270--7607[label="0.0555556;1pkt 1fpkt"];
1270--7878[label="0.0714286;1pkt 1fpkt"];
1270--8001[label="0.0909091;1pkt 1fpkt"];
1270--8013[label="0.0555556;1pkt 1fpkt"];
1270--8067[label="0.125;1pkt 1fpkt"];
1270--8149[label="0.0638298;3pkt 3fpkt"];
1270--8158[label="0.03125;1pkt 1fpkt"];
1270--8290[label="0.142857;1pkt 1fpkt"];
1270--8295[label="0.166667;1pkt 1fpkt"];
1270--8386[label="0.0909091;1pkt 1fpkt"];
1270--8483[label="1;1pkt 1fpkt"];
1270--8509[label="0.25;1pkt 1fpkt"];
1270--8583[label="0.0769231;1pkt 1fpkt"];
1270--8724[label="0.0588235;1pkt 1fpkt"];
1270--8911[label="0.0184332;4pkt 4fpkt"];
1270--9030[label="0.05;1pkt 1fpkt"];
1270--9107[label="0.00961538;1pkt 1fpkt"];
1270--9216[label="0.0232558;1pkt 1fpkt"];
1270--9487[label="0.0588235;1pkt 1fpkt"];
1270--9582[label="0.0638298;3pkt 3fpkt"];
1270--9586[label="0.030303;1pkt 1fpkt"];
1270--9678[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.89.107.47" dst_port="53"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.179.121.20"/>
    </slice>
    <from sec="1144126817" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.52.249.20"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.24.5.21"/>
    </slice>
    <from sec="1144126848" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.164.235.21"/>
    </slice>
    <from sec="1144127600" usec="0"/>
    <to sec="1144127637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1553{
style=filled;
color=gray75;
2514[label="210.226.98.252;d;12pkt 12fpkt", shape=diamond, color=yellow];
2528[label="164.23.131.208;s;2pkt 2fpkt", shape=diamond, color=yellow];
5231[label="194.212.152.160;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5796[label="164.23.131.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1553[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.212.152.160:22338, *:*}[69.3878%]&lt;BR/&gt;{*:*, 210.226.98.252:5050}[20.4082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22338: (32.6923%)&lt;BR/&gt; 5050: (11.5385%)&lt;BR/&gt; 0: (3.84615%)&lt;BR/&gt; 6667: (1.92308%)&lt;BR/&gt; 1725: (1.92308%)&gt;];
}
2514--2528[label="0.5;1pkt 1fpkt"];
2514--3631[label="0.0833333;1pkt 1fpkt"];
2514--4122[label="0.0833333;1pkt 1fpkt"];
2514--4259[label="0.0833333;1pkt 1fpkt"];
2514--4602[label="0.0833333;1pkt 1fpkt"];
2514--4797[label="0.0833333;1pkt 1fpkt"];
2514--5231[label="0.0833333;1pkt 1fpkt"];
2514--6517[label="0.0833333;1pkt 1fpkt"];
2514--6845[label="0.0833333;1pkt 1fpkt"];
2514--7324[label="0.0833333;1pkt 1fpkt"];
2514--8528[label="0.0833333;1pkt 1fpkt"];
2514--8736[label="0.0833333;1pkt 1fpkt"];
2514--9046[label="0.0833333;1pkt 1fpkt"];
2528--5796[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.212.152.160" src_port="22338"/>
      <filter dst_ip="210.226.98.252" dst_port="5050"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01502,2.26068,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1554{
style=filled;
color=gray75;
404[label="132.19.18.24;s;51pkt 51fpkt", shape=diamond, color=yellow];
948[label="53.19.78.225;d;11pkt 11fpkt", shape=diamond, color=yellow];
2717[label="132.19.18.24;s;24pkt 24fpkt", shape=hexagon, color=black];
3651[label="132.19.18.24;56pkt 56fpkt", shape=pentagon, color=darkviolet];
6527[label="132.19.18.24;57pkt 57fpkt", shape=invtriangle, color=brown];
8532[label="132.19.18.24;57pkt 57fpkt", shape=invhouse, color=bisque];
stat1554[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.18.24:32769, *:53}[24.5614%]&lt;BR/&gt;{132.19.18.24:*, 53.19.78.225:80}[22.807%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.5234%)&lt;BR/&gt; 32769: (12.5%)&lt;BR/&gt; 53: (12.5%)&lt;BR/&gt; 0: (1.95312%)&lt;BR/&gt; 33443: (1.17188%)&gt;];
}
404--808[label="0.0392157;2pkt 2fpkt"];
404--948[label="1;11pkt 11fpkt"];
404--1513[label="0.0196078;1pkt 1fpkt"];
404--1531[label="0.0196078;1pkt 1fpkt"];
404--2574[label="0.0392157;2pkt 2fpkt"];
404--2587[label="0.0196078;1pkt 1fpkt"];
404--2717[label="1;24pkt 24fpkt"];
404--3296[label="0.0588235;3pkt 3fpkt"];
404--3651[label="0.980392;50pkt 50fpkt"];
404--6527[label="1;51pkt 51fpkt"];
404--8532[label="1;51pkt 51fpkt"];
948--2717[label="0.454545;5pkt 5fpkt"];
948--3296[label="0.0909091;1pkt 1fpkt"];
948--3651[label="1;11pkt 11fpkt"];
948--6527[label="1;11pkt 11fpkt"];
948--8532[label="1;11pkt 11fpkt"];
2717--3651[label="0.958333;23pkt 23fpkt"];
2717--6527[label="1;24pkt 24fpkt"];
2717--8532[label="1;24pkt 24fpkt"];
3651--6527[label="1;56pkt 56fpkt"];
3651--8532[label="1;56pkt 56fpkt"];
6527--8532[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="53.19.78.225" dst_port="80" src_ip="132.19.18.24"/>
      <filter dst_port="53" src_ip="132.19.18.24" src_port="32769"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.16.98.24"/>
    </slice>
    <from sec="1144127195" usec="0"/>
    <to sec="1144127244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.17.18.25"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.168.77.25"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="132.19.249.31"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.198.86.34"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598833,2.34646,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1560{
style=filled;
color=gray75;
3787[label="36.106.139.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8588[label="36.106.139.34;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1560[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.139.34:34924, 128.28.5.168:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34924: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3787--8588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.5.168" dst_port="80" src_ip="36.106.139.34" src_port="34924"/>
    </slice>
    <from sec="1144126854" usec="0"/>
    <to sec="1144126882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.226.195.37"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.51.250.37"/>
    </slice>
    <from sec="1144127424" usec="0"/>
    <to sec="1144127446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.149.227.41"/>
    </slice>
    <from sec="1144126947" usec="0"/>
    <to sec="1144127592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.106.66.42"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.154.32.44"/>
    </slice>
    <from sec="1144126921" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.101.44.50"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.136.167.52"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.75.72.54"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.201.12.55"/>
    </slice>
    <from sec="1144127061" usec="0"/>
    <to sec="1144127121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.92.233.57"/>
    </slice>
    <from sec="1144126804" usec="0"/>
    <to sec="1144127476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.78.98.59"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.84.173.59"/>
    </slice>
    <from sec="1144127014" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.197.60.60"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.12.97.61"/>
    </slice>
    <from sec="1144127488" usec="0"/>
    <to sec="1144127534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.21.97.61"/>
    </slice>
    <from sec="1144127452" usec="0"/>
    <to sec="1144127522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.232.69.62"/>
    </slice>
    <from sec="1144126820" usec="0"/>
    <to sec="1144127670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.136.57.63"/>
    </slice>
    <from sec="1144126823" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="67.36.179.65"/>
    </slice>
    <from sec="1144126870" usec="0"/>
    <to sec="1144127244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1579{
style=filled;
color=gray75;
560[label="132.19.51.52;d;203pkt 203fpkt", shape=diamond, color=yellow];
2575[label="36.20.86.135;s;89pkt 89fpkt", shape=diamond, color=yellow];
4148[label="83.162.29.66;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4908[label="36.20.86.135;97pkt 97fpkt", shape=pentagon, color=darkviolet];
6864[label="83.162.29.66;34pkt 34fpkt", shape=invtriangle, color=brown];
8750[label="83.162.29.66;34pkt 34fpkt", shape=invhouse, color=bisque];
stat1579[shape=component, label=&lt;Rules:&lt;BR/&gt;{67.34.162.24:80, 132.19.51.52:*}[52.4845%]&lt;BR/&gt;{36.20.86.135:80, *:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7755%)&lt;BR/&gt; 13036: (0.612245%)&lt;BR/&gt; 8000: (0.612245%)&lt;BR/&gt; 60837: (0.408163%)&lt;BR/&gt; 60829: (0.408163%)&gt;];
}
560--707[label="0.00492611;1pkt 1fpkt"];
560--751[label="0.00571429;1pkt 1fpkt"];
560--1274[label="0.00934579;1pkt 1fpkt"];
560--2180[label="0.0416667;1pkt 1fpkt"];
560--2575[label="0.101124;9pkt 9fpkt"];
560--2977[label="0.00571429;1pkt 1fpkt"];
560--3243[label="0.0416667;1pkt 1fpkt"];
560--3288[label="0.133005;27pkt 27fpkt"];
560--3662[label="0.832512;169pkt 169fpkt"];
560--3948[label="0.0075188;1pkt 1fpkt"];
560--4148[label="0.121212;4pkt 4fpkt"];
560--4908[label="0.0927835;9pkt 9fpkt"];
560--5830[label="0.025;1pkt 1fpkt"];
560--5839[label="0.0416667;1pkt 1fpkt"];
560--5896[label="0.00492611;1pkt 1fpkt"];
560--6538[label="0.832512;169pkt 169fpkt"];
560--6864[label="0.117647;4pkt 4fpkt"];
560--8048[label="0.025641;1pkt 1fpkt"];
560--8054[label="0.0416667;1pkt 1fpkt"];
560--8540[label="0.832512;169pkt 169fpkt"];
560--8750[label="0.117647;4pkt 4fpkt"];
560--9513[label="0.025641;1pkt 1fpkt"];
560--9518[label="0.0416667;1pkt 1fpkt"];
2575--2902[label="0.0357143;1pkt 1fpkt"];
2575--3288[label="0.0449438;4pkt 4fpkt"];
2575--3292[label="0.0786517;7pkt 7fpkt"];
2575--3303[label="0.0786517;7pkt 7fpkt"];
2575--4908[label="0.988764;88pkt 88fpkt"];
4148--6864[label="1;33pkt 33fpkt"];
4148--8750[label="1;33pkt 33fpkt"];
6864--8750[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="36.20.86.135" src_port="80"/>
      <filter dst_ip="132.19.51.52" src_ip="67.34.162.24" src_port="80"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1580{
style=filled;
color=gray75;
1705[label="132.19.137.66;s;136pkt 136fpkt", shape=diamond, color=yellow];
stat1580[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.137.66:*, 36.172.54.150:80}[25.7353%]&lt;BR/&gt;{132.19.137.66:*, 210.226.96.224:80}[24.2647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2647%)&lt;BR/&gt; 1935: (0.367647%)&lt;BR/&gt; 1894: (0.367647%)&lt;BR/&gt; 1893: (0.367647%)&lt;BR/&gt; 1892: (0.367647%)&gt;];
}
1705--2089[label="0.0147059;2pkt 2fpkt"];
1705--3296[label="0.0808824;11pkt 11fpkt"];
1705--4155[label="1;135pkt 135fpkt"];
1705--6869[label="1;136pkt 136fpkt"];
1705--8754[label="1;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_ip="36.172.54.150" dst_port="80" src_ip="132.19.137.66"/>
      <filter dst_ip="210.226.96.224" dst_port="80" src_ip="132.19.137.66"/>
    </slice>
    <from sec="1144126828" usec="0"/>
    <to sec="1144127622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1581{
style=filled;
color=gray75;
3712[label="208.115.193.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat1581[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.115.193.28:33892, 161.223.8.108:80}[50%]&lt;BR/&gt;{208.115.193.28:33996, 147.13.220.153:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33996: (25%)&lt;BR/&gt; 33892: (25%)&gt;];
}
3712--6571[label="1;1pkt 1fpkt"];
3712--8563[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.153" dst_port="80" src_ip="208.115.193.28" src_port="33996"/>
      <filter dst_ip="161.223.8.108" dst_port="80" src_ip="208.115.193.28" src_port="33892"/>
    </slice>
    <from sec="1144126856" usec="0"/>
    <to sec="1144127375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.216.84.71"/>
    </slice>
    <from sec="1144127486" usec="0"/>
    <to sec="1144127518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.186.219.73"/>
    </slice>
    <from sec="1144127611" usec="0"/>
    <to sec="1144127641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.202.225.73"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.116.60.74"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="132.19.210.75"/>
    </slice>
    <from sec="1144126889" usec="0"/>
    <to sec="1144127036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.195.179.78"/>
    </slice>
    <from sec="1144126945" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.235.193.81"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.208.19.83"/>
    </slice>
    <from sec="1144126821" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.94.16.85"/>
    </slice>
    <from sec="1144126847" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.216.123.85"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.211.55.86"/>
    </slice>
    <from sec="1144126803" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1593{
style=filled;
color=gray75;
1205[label="194.212.156.188;d;2pkt 2fpkt", shape=diamond, color=yellow];
1206[label="36.106.136.86;s;3pkt 3fpkt", shape=diamond, color=yellow];
4410[label="36.106.136.86;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7055[label="36.106.136.86;5pkt 5fpkt", shape=invtriangle, color=brown];
8872[label="36.106.136.86;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1593[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.106.136.86:34913, 194.212.156.188:80}[20%]&lt;BR/&gt;{36.106.136.86:35066, 194.212.156.188:21}[20%]&lt;BR/&gt;{36.106.136.86:35136, 194.212.156.188:52846}[20%]&lt;BR/&gt;{36.106.136.86:47966, 194.212.156.188:21}[20%]&lt;BR/&gt;{36.106.136.86:48031, 194.212.156.188:54793}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (18.4211%)&lt;BR/&gt; 54793: (10.5263%)&lt;BR/&gt; 52846: (10.5263%)&lt;BR/&gt; 48031: (10.5263%)&lt;BR/&gt; 35136: (10.5263%)&gt;];
}
1205--4410[label="0.5;1pkt 1fpkt"];
1205--7055[label="1;2pkt 2fpkt"];
1205--8872[label="1;2pkt 2fpkt"];
1206--4410[label="1;3pkt 3fpkt"];
1206--7055[label="1;3pkt 3fpkt"];
1206--8872[label="1;3pkt 3fpkt"];
4410--7055[label="1;4pkt 4fpkt"];
4410--8872[label="1;4pkt 4fpkt"];
7055--8872[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="194.212.156.188" dst_port="54793" src_ip="36.106.136.86" src_port="48031"/>
      <filter dst_ip="194.212.156.188" dst_port="21" src_ip="36.106.136.86" src_port="47966"/>
      <filter dst_ip="194.212.156.188" dst_port="52846" src_ip="36.106.136.86" src_port="35136"/>
      <filter dst_ip="194.212.156.188" dst_port="21" src_ip="36.106.136.86" src_port="35066"/>
      <filter dst_ip="194.212.156.188" dst_port="80" src_ip="36.106.136.86" src_port="34913"/>
    </slice>
    <from sec="1144127009" usec="0"/>
    <to sec="1144127669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.193.147.88"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.204.61.89"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.14.69.90"/>
    </slice>
    <from sec="1144126902" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.217.0.91"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.144.180.97"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.586232,2.31853,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1599{
style=filled;
color=gray75;
2381[label="132.19.210.45;d;29pkt 29fpkt", shape=diamond, color=yellow];
3921[label="41.25.169.47;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat1599[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.19.210.45:80}[47.2222%]&lt;BR/&gt;{41.25.169.47:*, *:80}[25%]&lt;BR/&gt;{197.81.176.64:80, 132.19.210.45:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3684%)&lt;BR/&gt; 56961: (2.63158%)&lt;BR/&gt; 56868: (2.63158%)&lt;BR/&gt; 25: (2.63158%)&lt;BR/&gt; 59575: (1.31579%)&gt;];
}
2381--2488[label="0.5;1pkt 1fpkt"];
2381--3224[label="0.5;1pkt 1fpkt"];
2381--3292[label="0.0344828;1pkt 1fpkt"];
2381--3296[label="0.0344828;1pkt 1fpkt"];
2381--3303[label="0.0344828;1pkt 1fpkt"];
2381--3921[label="0.222222;2pkt 2fpkt"];
2381--4128[label="0.615385;8pkt 8fpkt"];
2381--4532[label="0.0714286;1pkt 1fpkt"];
2381--6171[label="0.5;1pkt 1fpkt"];
2381--6850[label="0.615385;8pkt 8fpkt"];
2381--7135[label="0.0714286;1pkt 1fpkt"];
2381--8740[label="0.615385;8pkt 8fpkt"];
2381--8922[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="41.25.169.47"/>
      <filter dst_ip="132.19.210.45" dst_port="80"/>
      <filter dst_ip="132.19.210.45" src_ip="197.81.176.64" src_port="80"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="132.19.192.98"/>
    </slice>
    <from sec="1144126813" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.78.135.99"/>
    </slice>
    <from sec="1144126949" usec="0"/>
    <to sec="1144126989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.157.93.104"/>
    </slice>
    <from sec="1144127392" usec="0"/>
    <to sec="1144127454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.202.210.105"/>
    </slice>
    <from sec="1144127033" usec="0"/>
    <to sec="1144127525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.70.140.107"/>
    </slice>
    <from sec="1144126818" usec="0"/>
    <to sec="1144127691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.194.203.107"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.77.74.111"/>
    </slice>
    <from sec="1144126903" usec="0"/>
    <to sec="1144127686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.90.179.111"/>
    </slice>
    <from sec="1144126811" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.141.67.112"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.163.19.114"/>
    </slice>
    <from sec="1144126805" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.239.28.117"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144126890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.20.7.121"/>
    </slice>
    <from sec="1144126850" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.162.3.128"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.77.67.130"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.54.150.133"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.93.59.134"/>
    </slice>
    <from sec="1144126863" usec="0"/>
    <to sec="1144127679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1616{
style=filled;
color=gray75;
2426[label="128.28.6.139;s;28pkt 28fpkt", shape=diamond, color=yellow];
stat1616[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.28.6.139:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58972: (1.78571%)&lt;BR/&gt; 58949: (1.78571%)&lt;BR/&gt; 56755: (1.78571%)&lt;BR/&gt; 53039: (1.78571%)&gt;];
}
2426--4960[label="1;28pkt 28fpkt"];
2426--7438[label="1;28pkt 28fpkt"];
2426--9116[label="0.964286;27pkt 27fpkt"];
</description>
    <slice>
      <filter src_ip="128.28.6.139" src_port="80"/>
    </slice>
    <from sec="1144127063" usec="0"/>
    <to sec="1144127629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1617{
style=filled;
color=gray75;
2048[label="39.206.82.65;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat1617[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.34.140:4856, 39.206.82.65:80}[20%]&lt;BR/&gt;{195.89.66.195:36497, 39.206.82.65:80}[20%]&lt;BR/&gt;{195.89.66.195:36501, 39.206.82.65:80}[20%]&lt;BR/&gt;{195.89.66.195:36506, 39.206.82.65:80}[20%]&lt;BR/&gt;{195.89.66.195:36571, 39.206.82.65:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36571: (10%)&lt;BR/&gt; 36506: (10%)&lt;BR/&gt; 36501: (10%)&lt;BR/&gt; 36497: (10%)&gt;];
}
2048--4975[label="0.2;1pkt 1fpkt"];
2048--5632[label="0.8;4pkt 4fpkt"];
2048--7447[label="0.2;1pkt 1fpkt"];
2048--7911[label="0.8;4pkt 4fpkt"];
2048--9123[label="0.2;1pkt 1fpkt"];
2048--9422[label="0.8;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="39.206.82.65" dst_port="80" src_ip="195.89.66.195" src_port="36571"/>
      <filter dst_ip="39.206.82.65" dst_port="80" src_ip="195.89.66.195" src_port="36506"/>
      <filter dst_ip="39.206.82.65" dst_port="80" src_ip="195.89.66.195" src_port="36501"/>
      <filter dst_ip="39.206.82.65" dst_port="80" src_ip="195.89.66.195" src_port="36497"/>
      <filter dst_ip="39.206.82.65" dst_port="80" src_ip="161.223.34.140" src_port="4856"/>
    </slice>
    <from sec="1144127214" usec="0"/>
    <to sec="1144127316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.162.46.141"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.164.80.143"/>
    </slice>
    <from sec="1144126807" usec="0"/>
    <to sec="1144127625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.72.165.143"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.26.37.146"/>
    </slice>
    <from sec="1144127488" usec="0"/>
    <to sec="1144127499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.157.198.146"/>
    </slice>
    <from sec="1144127236" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1623{
style=filled;
color=gray75;
2210[label="138.166.39.1;d;48pkt 48fpkt", shape=diamond, color=yellow];
5355[label="161.223.153.169;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7484[label="132.19.144.143;27pkt 27fpkt", shape=invtriangle, color=brown];
9146[label="132.19.144.143;26pkt 26fpkt", shape=invhouse, color=bisque];
stat1623[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.223.153.169:*, 194.149.69.153:80}[30.0971%]&lt;BR/&gt;{132.19.144.143:*, 138.166.39.1:80}[21.3592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49215: (0.974026%)&lt;BR/&gt; 49214: (0.974026%)&lt;BR/&gt; 49211: (0.974026%)&lt;BR/&gt; 49210: (0.974026%)&gt;];
}
2210--3136[label="0.129032;4pkt 4fpkt"];
2210--3296[label="0.0416667;2pkt 2fpkt"];
2210--3437[label="0.104167;5pkt 5fpkt"];
2210--5018[label="0.814815;22pkt 22fpkt"];
2210--5073[label="0.0333333;1pkt 1fpkt"];
2210--5355[label="0.0625;3pkt 3fpkt"];
2210--5775[label="0.0416667;2pkt 2fpkt"];
2210--6378[label="0.104167;5pkt 5fpkt"];
2210--7484[label="0.814815;22pkt 22fpkt"];
2210--7520[label="0.0344828;1pkt 1fpkt"];
2210--8439[label="0.104167;5pkt 5fpkt"];
2210--9146[label="0.807692;21pkt 21fpkt"];
2210--9170[label="0.0344828;1pkt 1fpkt"];
7484--9146[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="194.149.69.153" dst_port="80" src_ip="161.223.153.169"/>
      <filter dst_ip="138.166.39.1" dst_port="80" src_ip="132.19.144.143"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.74.135.148"/>
    </slice>
    <from sec="1144126814" usec="0"/>
    <to sec="1144127647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.162.110.149"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.72.3.150"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144126963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.13.69.153"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.181.132.156"/>
    </slice>
    <from sec="1144127376" usec="0"/>
    <to sec="1144127399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.21.47.158"/>
    </slice>
    <from sec="1144126826" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.458439,2.35955,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1630{
style=filled;
color=gray75;
5242[label="32.136.167.161;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat1630[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.136.167.161:53198, 128.28.217.250:80}[50%]&lt;BR/&gt;{32.136.167.161:53222, 128.28.217.250:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53222: (25%)&lt;BR/&gt; 53198: (25%)&gt;];
}
5242--7635[label="1;2pkt 2fpkt"];
5242--9246[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.136.167.161" src_port="53222"/>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.136.167.161" src_port="53198"/>
    </slice>
    <from sec="1144127146" usec="0"/>
    <to sec="1144127195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1631{
style=filled;
color=gray75;
2442[label="67.34.162.25;d;116pkt 116fpkt", shape=diamond, color=yellow];
5251[label="128.28.67.162;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7642[label="128.28.67.162;10pkt 10fpkt", shape=invtriangle, color=brown];
9253[label="128.28.67.162;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1631[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.69.81:*, 67.34.162.25:80}[49.1935%]&lt;BR/&gt;{194.212.147.129:*, 67.34.162.25:80}[42.7419%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3497: (1.36986%)&lt;BR/&gt; 3496: (1.36986%)&lt;BR/&gt; 3534: (1.0274%)&lt;BR/&gt; 3533: (1.0274%)&gt;];
}
2442--3196[label="0.580952;61pkt 61fpkt"];
2442--3296[label="0.0172414;2pkt 2fpkt"];
2442--4344[label="0.544643;61pkt 61fpkt"];
2442--4817[label="0.595506;53pkt 53fpkt"];
2442--5251[label="0.2;2pkt 2fpkt"];
2442--7339[label="0.595506;53pkt 53fpkt"];
2442--7642[label="0.2;2pkt 2fpkt"];
2442--9060[label="0.602273;53pkt 53fpkt"];
2442--9253[label="0.2;2pkt 2fpkt"];
5251--7642[label="1;10pkt 10fpkt"];
5251--9253[label="1;10pkt 10fpkt"];
7642--9253[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="67.34.162.25" dst_port="80" src_ip="132.19.69.81"/>
      <filter dst_ip="67.34.162.25" dst_port="80" src_ip="194.212.147.129"/>
    </slice>
    <from sec="1144127189" usec="0"/>
    <to sec="1144127636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.174.79.166"/>
    </slice>
    <from sec="1144126849" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.43.249.166"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.180.21.167"/>
    </slice>
    <from sec="1144127020" usec="0"/>
    <to sec="1144127045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.125.140.168"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0611,2.33757,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1636{
style=filled;
color=gray75;
1050[label="215.57.32.172;s;1912pkt 1912fpkt", shape=diamond, color=yellow];
2954[label="215.57.32.172;s;1072pkt 1072fpkt", shape=hexagon, color=black];
9312[label="215.57.32.172;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1636[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.57.32.172:3799, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3799: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1050--2954[label="1;1072pkt 1072fpkt"];
1050--9312[label="0.333333;1pkt 1fpkt"];
2954--9312[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="215.57.32.172" src_port="3799"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.42.11.173"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.165.22.179"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.233.202.180"/>
    </slice>
    <from sec="1144126888" usec="0"/>
    <to sec="1144127458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.231.86.182"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.123.155.182"/>
    </slice>
    <from sec="1144127321" usec="0"/>
    <to sec="1144127414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.72.47.183"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.204.249.184"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.33.82.186"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.162.140.186"/>
    </slice>
    <from sec="1144127562" usec="0"/>
    <to sec="1144127661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.11.22.191"/>
    </slice>
    <from sec="1144126952" usec="0"/>
    <to sec="1144127693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.44.89.193"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.173.125.193"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.34.48.195"/>
    </slice>
    <from sec="1144126947" usec="0"/>
    <to sec="1144127162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1650{
style=filled;
color=gray75;
1035[label="132.19.194.28;d;66pkt 66fpkt", shape=diamond, color=yellow];
stat1650[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 132.19.194.28:*}[60.6061%]&lt;BR/&gt;{*:*, 132.19.194.28:25}[25.7576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.1818%)&lt;BR/&gt; 80: (4.54545%)&lt;BR/&gt; 0: (3.0303%)&lt;BR/&gt; 47756: (0.757576%)&lt;BR/&gt; 46729: (0.757576%)&gt;];
}
1035--2895[label="0.0151515;1pkt 1fpkt"];
1035--2962[label="0.1;1pkt 1fpkt"];
1035--3288[label="0.0757576;5pkt 5fpkt"];
1035--3392[label="0.125;1pkt 1fpkt"];
1035--4980[label="0.0588235;1pkt 1fpkt"];
1035--5234[label="0.333333;1pkt 1fpkt"];
1035--5633[label="0.0666667;1pkt 1fpkt"];
1035--5896[label="0.0151515;1pkt 1fpkt"];
1035--6040[label="0.0151515;1pkt 1fpkt"];
1035--6049[label="0.0232558;1pkt 1fpkt"];
1035--6093[label="0.0454545;3pkt 3fpkt"];
1035--6350[label="0.125;1pkt 1fpkt"];
1035--7452[label="0.0588235;1pkt 1fpkt"];
1035--7912[label="0.0666667;1pkt 1fpkt"];
1035--8199[label="0.0151515;1pkt 1fpkt"];
1035--8241[label="0.0454545;3pkt 3fpkt"];
1035--8424[label="0.125;1pkt 1fpkt"];
1035--9423[label="0.0714286;1pkt 1fpkt"];
1035--9640[label="0.0454545;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="132.19.194.28" src_port="25"/>
      <filter dst_ip="132.19.194.28" dst_port="25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.202.6.196"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.124.153.196"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.107.144.198"/>
    </slice>
    <from sec="1144126919" usec="0"/>
    <to sec="1144127358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.141.52.201"/>
    </slice>
    <from sec="1144127455" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1655{
style=filled;
color=gray75;
1115[label="132.19.196.203;s;166pkt 166fpkt", shape=diamond, color=yellow];
stat1655[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.196.203:*, 219.73.81.46:80}[59.6386%]&lt;BR/&gt;{132.19.196.203:*, 219.73.80.150:80}[26.506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1651: (0.301205%)&lt;BR/&gt; 1650: (0.301205%)&lt;BR/&gt; 1649: (0.301205%)&lt;BR/&gt; 1647: (0.301205%)&gt;];
}
1115--1921[label="0.138554;23pkt 23fpkt"];
1115--3207[label="1;159pkt 159fpkt"];
1115--3296[label="0.0180723;3pkt 3fpkt"];
1115--5745[label="1;166pkt 166fpkt"];
1115--7992[label="0.993976;165pkt 165fpkt"];
1115--9472[label="0.993976;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="219.73.81.46" dst_port="80" src_ip="132.19.196.203"/>
      <filter dst_ip="219.73.80.150" dst_port="80" src_ip="132.19.196.203"/>
    </slice>
    <from sec="1144126812" usec="0"/>
    <to sec="1144127578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.77.67.206"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.10.76.206"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.210.177.209"/>
    </slice>
    <from sec="1144126815" usec="0"/>
    <to sec="1144127681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.204.218.210"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.135.67.215"/>
    </slice>
    <from sec="1144126967" usec="0"/>
    <to sec="1144127020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.5.84.217"/>
    </slice>
    <from sec="1144127480" usec="0"/>
    <to sec="1144127523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.156.70.219"/>
    </slice>
    <from sec="1144126987" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.69.157.219"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.27.192.219"/>
    </slice>
    <from sec="1144127533" usec="0"/>
    <to sec="1144127697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1665{
style=filled;
color=gray75;
5977[label="32.126.100.223;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8153[label="32.126.100.223;2pkt 2fpkt", shape=invtriangle, color=brown];
9583[label="32.126.100.223;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1665[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.126.100.223:1903, 128.28.217.250:80}[33.3333%]&lt;BR/&gt;{32.126.100.223:1906, 128.28.217.250:80}[33.3333%]&lt;BR/&gt;{32.126.100.223:1910, 128.28.217.250:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1910: (21.4286%)&lt;BR/&gt; 1906: (21.4286%)&lt;BR/&gt; 1903: (7.14286%)&gt;];
}
5977--8153[label="1;2pkt 2fpkt"];
5977--9583[label="1;2pkt 2fpkt"];
8153--9583[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.126.100.223" src_port="1910"/>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.126.100.223" src_port="1906"/>
      <filter dst_ip="128.28.217.250" dst_port="80" src_ip="32.126.100.223" src_port="1903"/>
    </slice>
    <from sec="1144127524" usec="0"/>
    <to sec="1144127638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.170.225.229"/>
    </slice>
    <from sec="1144126819" usec="0"/>
    <to sec="1144127665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.140.255.232"/>
    </slice>
    <from sec="1144126806" usec="0"/>
    <to sec="1144127476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.7015,2.3052,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1668{
style=filled;
color=gray75;
365[label="205.193.63.234;s;125pkt 125fpkt", shape=diamond, color=yellow];
2542[label="164.23.142.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
6095[label="205.193.63.234;138pkt 138fpkt", shape=pentagon, color=darkviolet];
9641[label="205.193.63.234;138pkt 138fpkt", shape=invhouse, color=bisque];
stat1668[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.193.63.234:6667, 164.23.142.25:*}[71.0145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (40.2985%)&lt;BR/&gt; 6665: (1.86567%)&lt;BR/&gt; 113: (1.49254%)&lt;BR/&gt; 6662: (1.24378%)&lt;BR/&gt; 6666: (1.1194%)&gt;];
}
365--1636[label="0.704;88pkt 88fpkt"];
365--2542[label="1;1pkt 1fpkt"];
365--2567[label="1;1pkt 1fpkt"];
365--6095[label="1;125pkt 125fpkt"];
365--8242[label="1;125pkt 125fpkt"];
365--9641[label="1;125pkt 125fpkt"];
2542--6095[label="1;1pkt 1fpkt"];
2542--8242[label="1;1pkt 1fpkt"];
2542--9641[label="1;1pkt 1fpkt"];
6095--8242[label="1;137pkt 137fpkt"];
6095--9641[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.142.25" src_ip="205.193.63.234" src_port="6667"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.0.142.234"/>
    </slice>
    <from sec="1144126808" usec="0"/>
    <to sec="1144127696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.609993,2.3184,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1670{
style=filled;
color=gray75;
6104[label="132.19.245.234;58pkt 58fpkt", shape=pentagon, color=darkviolet];
8248[label="132.19.245.234;57pkt 57fpkt", shape=invtriangle, color=brown];
9646[label="132.19.245.234;57pkt 57fpkt", shape=invhouse, color=bisque];
stat1670[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.245.234:*, 39.64.99.42:80}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4309: (1.74419%)&lt;BR/&gt; 4312: (0.872093%)&lt;BR/&gt; 4311: (0.872093%)&lt;BR/&gt; 4310: (0.872093%)&gt;];
}
6104--8248[label="1;57pkt 57fpkt"];
6104--9646[label="1;57pkt 57fpkt"];
8248--9646[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="39.64.99.42" dst_port="80" src_ip="132.19.245.234"/>
    </slice>
    <from sec="1144126851" usec="0"/>
    <to sec="1144126929" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.672917,2.36606,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1671{
style=filled;
color=gray75;
1393[label="117.188.173.237;s;14pkt 14fpkt", shape=diamond, color=yellow];
stat1671[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.188.173.237:25, 164.23.209.60:*}[57.1429%]&lt;BR/&gt;{117.188.173.237:25, 128.28.217.137:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64981: (3.57143%)&lt;BR/&gt; 63306: (3.57143%)&lt;BR/&gt; 61634: (3.57143%)&lt;BR/&gt; 60879: (3.57143%)&gt;];
}
1393--1644[label="0.0714286;1pkt 1fpkt"];
1393--1950[label="0.142857;2pkt 2fpkt"];
1393--6132[label="1;14pkt 14fpkt"];
1393--8266[label="0.928571;13pkt 13fpkt"];
1393--9661[label="0.928571;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="164.23.209.60" src_ip="117.188.173.237" src_port="25"/>
      <filter dst_ip="128.28.217.137" src_ip="117.188.173.237" src_port="25"/>
    </slice>
    <from sec="1144126809" usec="0"/>
    <to sec="1144127409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.116.142.240"/>
    </slice>
    <from sec="1144127006" usec="0"/>
    <to sec="1144127056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.91.137.242"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="164.23.224.243"/>
    </slice>
    <from sec="1144126802" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.157.236.243"/>
    </slice>
    <from sec="1144127585" usec="0"/>
    <to sec="1144127593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.711051,2.27663,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1676{
style=filled;
color=gray75;
896[label="205.193.63.234;d;113pkt 113fpkt", shape=diamond, color=yellow];
6209[label="164.23.133.245;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6551[label="164.23.142.25;194pkt 194fpkt", shape=invtriangle, color=brown];
8324[label="164.23.133.245;3pkt 3fpkt", shape=invtriangle, color=brown];
9283[label="164.23.202.166;2pkt 2fpkt", shape=invhouse, color=bisque];
9702[label="164.23.133.245;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1676[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.23.142.25:*, 205.193.63.234:6667}[42.4242%]&lt;BR/&gt;{164.23.142.25:*, 205.137.225.232:6667}[26.8398%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (44.4969%)&lt;BR/&gt; 6665: (1.88679%)&lt;BR/&gt; 113: (1.25786%)&lt;BR/&gt; 1194: (0.628931%)&lt;BR/&gt; 0: (0.628931%)&gt;];
}
896--1098[label="0.00884956;1pkt 1fpkt"];
896--1586[label="0.00884956;1pkt 1fpkt"];
896--1637[label="0.690265;78pkt 78fpkt"];
896--3031[label="0.00884956;1pkt 1fpkt"];
896--3680[label="0.690265;78pkt 78fpkt"];
896--4122[label="0.00884956;1pkt 1fpkt"];
896--4797[label="0.00884956;1pkt 1fpkt"];
896--5320[label="1;1pkt 1fpkt"];
896--6209[label="0.333333;1pkt 1fpkt"];
896--6551[label="0.690265;78pkt 78fpkt"];
896--6845[label="0.00884956;1pkt 1fpkt"];
896--7324[label="0.00884956;1pkt 1fpkt"];
896--7691[label="1;1pkt 1fpkt"];
896--8324[label="0.333333;1pkt 1fpkt"];
896--8736[label="0.00884956;1pkt 1fpkt"];
896--9046[label="0.00884956;1pkt 1fpkt"];
896--9283[label="1;2pkt 2fpkt"];
896--9702[label="0.333333;1pkt 1fpkt"];
6209--8324[label="1;3pkt 3fpkt"];
6209--9702[label="1;3pkt 3fpkt"];
8324--9702[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="205.193.63.234" dst_port="6667" src_ip="164.23.142.25"/>
      <filter dst_ip="205.137.225.232" dst_port="6667" src_ip="164.23.142.25"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.598833,2.34646,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1677{
style=filled;
color=gray75;
6213[label="208.72.42.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9705[label="208.72.42.246;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1677[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.72.42.246:80, 147.13.220.1:36511}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36511: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6213--9705[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="147.13.220.1" dst_port="36511" src_ip="208.72.42.246" src_port="80"/>
    </slice>
    <from sec="1144127654" usec="0"/>
    <to sec="1144127662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.2.151.248"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.30.69.251"/>
    </slice>
    <from sec="1144126801" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.213.96.252"/>
    </slice>
    <from sec="1144127700" usec="0"/>
    <to sec="1144127701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.683922,2.39343,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.217.82.253"/>
    </slice>
    <from sec="1144126832" usec="0"/>
    <to sec="1144127581" usec="0"/>
  </anomaly>

</admd:annotation>
