<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="tcp" src_ip="198.155.86.61"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="udp" src_ip="198.155.86.61"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="tcp" src_ip="198.155.86.61"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="udp" src_ip="198.155.86.61"/>
      <from sec="1178341201" usec="0"/>
      <to sec="1178342083" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="199.181.146.69" src_port="3128"/>
      <filter dst_port="80" proto="tcp" src_ip="199.181.146.69" src_port="3124"/>
      <filter dst_port="80" proto="tcp" src_ip="199.181.146.69" src_port="3127"/>
      <from sec="1178341206" usec="0"/>
      <to sec="1178342055" usec="0"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.145.176.202" dst_port="80" proto="tcp" src_ip="199.181.146.75" src_port="3127"/>
      <filter dst_ip="210.145.176.202" dst_port="80" proto="tcp" src_ip="199.181.146.75" src_port="3128"/>
      <filter dst_ip="210.145.176.202" dst_port="80" proto="tcp" src_ip="199.181.146.75" src_port="3124"/>
      <from sec="1178341329" usec="0"/>
      <to sec="1178342080" usec="0"/>
    </slice>
    <from sec="1178341329" usec="0"/>
    <to sec="1178342080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="tcp" src_ip="134.149.16.115"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="udp" src_ip="134.149.16.115"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="tcp" src_ip="134.149.16.115"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="udp" src_ip="134.149.16.115"/>
      <from sec="1178341986" usec="0"/>
      <to sec="1178341991" usec="0"/>
    </slice>
    <from sec="1178341985" usec="0"/>
    <to sec="1178341991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="tcp" src_ip="199.181.144.212" src_port="80"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="udp" src_ip="199.181.144.212" src_port="80"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="tcp" src_ip="199.181.144.212" src_port="80"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="udp" src_ip="199.181.144.212" src_port="80"/>
      <from sec="1178341256" usec="0"/>
      <to sec="1178342083" usec="0"/>
    </slice>
    <from sec="1178341256" usec="0"/>
    <to sec="1178342083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="53" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="tcp" src_ip="198.15.220.192" src_port="1034"/>
      <filter dst_ip="198.15.220.192" dst_port="80" proto="udp" src_ip="198.15.220.192" src_port="1034"/>
      <from sec="1178341201" usec="0"/>
      <to sec="1178342099" usec="0"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="tcp" src_ip="155.255.138.5"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="udp" src_ip="155.255.138.5"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="tcp" src_ip="155.255.138.5"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="udp" src_ip="155.255.138.5"/>
      <from sec="1178341318" usec="0"/>
      <to sec="1178341324" usec="0"/>
    </slice>
    <from sec="1178341317" usec="0"/>
    <to sec="1178341324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="172.113.168.139" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="172.113.168.139" src_port="80"/>
      <filter dst_port="53" proto="tcp" src_ip="172.113.168.139" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="172.113.168.139" src_port="80"/>
      <from sec="1178341285" usec="0"/>
      <to sec="1178342063" usec="0"/>
    </slice>
    <from sec="1178341285" usec="0"/>
    <to sec="1178342063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.222.89" dst_port="137" proto="tcp" src_ip="89.117.64.92" src_port="1029"/>
      <filter dst_ip="198.15.222.89" dst_port="137" proto="udp" src_ip="89.117.64.92" src_port="1029"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="tcp" src_ip="89.117.64.92" src_port="1029"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="udp" src_ip="89.117.64.92" src_port="1029"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="tcp" src_ip="89.117.64.92" src_port="1029"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="udp" src_ip="89.117.64.92" src_port="1029"/>
      <from sec="1178341697" usec="0"/>
      <to sec="1178341709" usec="0"/>
    </slice>
    <from sec="1178341697" usec="0"/>
    <to sec="1178341709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="tcp" src_ip="220.193.200.147" src_port="1090"/>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="udp" src_ip="220.193.200.147" src_port="1090"/>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="tcp" src_ip="220.193.200.147" src_port="80"/>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="udp" src_ip="220.193.200.147" src_port="80"/>
      <from sec="1178341549" usec="0"/>
      <to sec="1178341555" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="tcp" src_ip="13.227.0.147" src_port="1090"/>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="udp" src_ip="13.227.0.147" src_port="1090"/>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="tcp" src_ip="13.227.0.147" src_port="80"/>
      <filter dst_ip="198.150.8.195" dst_port="137" proto="udp" src_ip="13.227.0.147" src_port="80"/>
      <from sec="1178341549" usec="0"/>
      <to sec="1178341555" usec="0"/>
    </slice>
    <from sec="1178341549" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.60.132.146" dst_port="80" proto="tcp" src_ip="168.45.207.114" src_port="3124"/>
      <filter dst_ip="144.60.132.146" dst_port="80" proto="tcp" src_ip="168.45.207.114" src_port="3128"/>
      <filter dst_ip="144.60.132.146" dst_port="80" proto="tcp" src_ip="168.45.207.114" src_port="3127"/>
      <filter dst_ip="209.146.11.251" dst_port="80" proto="tcp" src_ip="168.45.207.114" src_port="3124"/>
      <filter dst_ip="209.146.11.251" dst_port="80" proto="tcp" src_ip="168.45.207.114" src_port="3128"/>
      <filter dst_ip="209.146.11.251" dst_port="80" proto="tcp" src_ip="168.45.207.114" src_port="3127"/>
      <from sec="1178341873" usec="0"/>
      <to sec="1178342055" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="144.60.132.146" dst_port="80" proto="tcp" src_ip="199.181.146.68" src_port="3124"/>
      <filter dst_ip="144.60.132.146" dst_port="80" proto="tcp" src_ip="199.181.146.68" src_port="3128"/>
      <filter dst_ip="144.60.132.146" dst_port="80" proto="tcp" src_ip="199.181.146.68" src_port="3127"/>
      <filter dst_ip="209.146.11.251" dst_port="80" proto="tcp" src_ip="199.181.146.68" src_port="3124"/>
      <filter dst_ip="209.146.11.251" dst_port="80" proto="tcp" src_ip="199.181.146.68" src_port="3128"/>
      <filter dst_ip="209.146.11.251" dst_port="80" proto="tcp" src_ip="199.181.146.68" src_port="3127"/>
      <from sec="1178341873" usec="0"/>
      <to sec="1178341878" usec="0"/>
    </slice>
    <from sec="1178341873" usec="0"/>
    <to sec="1178342055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,001,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="9898" proto="tcp" src_ip="106.29.168.10"/>
      <from sec="1178341954" usec="0"/>
      <to sec="1178341958" usec="0"/>
    </slice>
    <from sec="1178341954" usec="0"/>
    <to sec="1178341958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="tcp" src_ip="155.255.138.45"/>
      <filter dst_ip="198.15.222.89" dst_port="80" proto="udp" src_ip="155.255.138.45"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="tcp" src_ip="155.255.138.45"/>
      <filter dst_ip="198.15.222.89" dst_port="53" proto="udp" src_ip="155.255.138.45"/>
      <from sec="1178341587" usec="0"/>
      <to sec="1178341886" usec="0"/>
    </slice>
    <from sec="1178341587" usec="0"/>
    <to sec="1178341886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44358,2.73576,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.136.135.99" dst_port="80" proto="tcp" src_ip="155.255.213.151" src_port="80"/>
      <filter dst_ip="216.136.135.99" dst_port="80" proto="udp" src_ip="155.255.213.151" src_port="80"/>
      <from sec="1178341349" usec="0"/>
      <to sec="1178341352" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="216.136.135.99" dst_port="80" proto="tcp" src_ip="168.45.207.9" src_port="80"/>
      <filter dst_ip="216.136.135.99" dst_port="80" proto="udp" src_ip="168.45.207.9" src_port="80"/>
      <from sec="1178341348" usec="0"/>
      <to sec="1178341355" usec="0"/>
    </slice>
    <from sec="1178341348" usec="0"/>
    <to sec="1178341355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="53.198.153.91"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178341248" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178341248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="22501016" usec="0"/>
    <to sec="22501016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="22501016" usec="0"/>
    <to sec="22501016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
295[label="68.152.42.80;d;4pkt 4fpkt", shape=diamond, color=yellow];
296[label="172.113.212.211;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.212.211:*, 68.152.42.80:20}[50%]&lt;BR/&gt;{172.113.212.211:*, *:6665}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (30%)&lt;BR/&gt; 6665: (10%)&lt;BR/&gt; 4493: (10%)&lt;BR/&gt; 4492: (10%)&lt;BR/&gt; 4478: (10%)&gt;];
}
295--296[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_port="6665" src_ip="172.113.212.211"/>
      <filter dst_ip="68.152.42.80" dst_port="20" src_ip="172.113.212.211"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
378[label="134.144.53.134;d;49pkt 49fpkt", shape=diamond, color=yellow];
379[label="93.7.50.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
3283[label="134.144.53.134;d;49pkt 49fpkt", shape=hexagon, color=black];
6560[label="53.203.8.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8644[label="53.203.8.184;1pkt 1fpkt", shape=invtriangle, color=brown];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.225.40.200:80, 134.144.53.134:*}[44.898%]&lt;BR/&gt;{92.225.40.204:80, 134.144.53.134:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54116: (1.9802%)&lt;BR/&gt; 53876: (1.48515%)&lt;BR/&gt; 54133: (0.990099%)&lt;BR/&gt; 54094: (0.990099%)&gt;];
}
378--379[label="1;1pkt 1fpkt"];
378--3283[label="1;49pkt 49fpkt"];
378--6560[label="1;1pkt 1fpkt"];
378--8644[label="1;1pkt 1fpkt"];
379--3283[label="1;1pkt 1fpkt"];
3283--6560[label="1;1pkt 1fpkt"];
3283--8644[label="1;1pkt 1fpkt"];
6560--8644[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.53.134" src_ip="92.225.40.200" src_port="80"/>
      <filter dst_ip="134.144.53.134" src_ip="92.225.40.204" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178341403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
428[label="208.17.67.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
429[label="134.149.133.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
3385[label="208.17.67.248;d;1pkt 1fpkt", shape=hexagon, color=black];
6742[label="134.149.133.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.133.198:80, 92.5.133.132:1277}[50%]&lt;BR/&gt;{134.149.133.198:80, 208.17.67.248:2088}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2088: (33.3333%)&lt;BR/&gt; 1277: (16.6667%)&gt;];
}
428--429[label="1;1pkt 1fpkt"];
428--3385[label="1;1pkt 1fpkt"];
428--6742[label="1;1pkt 1fpkt"];
429--3385[label="1;1pkt 1fpkt"];
429--6742[label="1;2pkt 2fpkt"];
3385--6742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.17.67.248" dst_port="2088" src_ip="134.149.133.198" src_port="80"/>
      <filter dst_ip="92.5.133.132" dst_port="1277" src_ip="134.149.133.198" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
442[label="202.37.22.24;s;265pkt 265fpkt", shape=diamond, color=yellow];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.37.22.24:6667, *:*}[26.0377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (13.0189%)&lt;BR/&gt; 6661: (3.39623%)&lt;BR/&gt; 6664: (3.20755%)&lt;BR/&gt; 113: (3.01887%)&lt;BR/&gt; 6663: (2.64151%)&gt;];
}
442--4026[label="0.00377358;1pkt 1fpkt"];
442--4027[label="0.00377358;1pkt 1fpkt"];
442--4040[label="0.00754717;2pkt 2fpkt"];
442--4044[label="0.00754717;2pkt 2fpkt"];
442--4053[label="0.00377358;1pkt 1fpkt"];
442--4074[label="0.00377358;1pkt 1fpkt"];
442--4075[label="0.00377358;1pkt 1fpkt"];
442--4085[label="0.00754717;2pkt 2fpkt"];
442--4089[label="0.00754717;2pkt 2fpkt"];
442--4098[label="0.00377358;1pkt 1fpkt"];
442--4115[label="0.00377358;1pkt 1fpkt"];
442--4116[label="0.00377358;1pkt 1fpkt"];
442--4126[label="0.00754717;2pkt 2fpkt"];
442--4130[label="0.00754717;2pkt 2fpkt"];
442--4137[label="0.00377358;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="202.37.22.24" src_port="6667"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_30{
style=filled;
color=gray75;
458[label="134.33.163.65;s;3258pkt 3258fpkt", shape=diamond, color=yellow];
stat30[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.33.163.65:6881, *:*}[99.9386%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (54.2664%)&lt;BR/&gt; 49152: (0.844076%)&lt;BR/&gt; 50000: (0.368324%)&lt;BR/&gt; 52525: (0.33763%)&lt;BR/&gt; 6882: (0.306937%)&gt;];
}
458--4027[label="0.00124688;1pkt 1fpkt"];
458--4040[label="0.000306937;1pkt 1fpkt"];
458--4075[label="0.00124688;1pkt 1fpkt"];
458--4085[label="0.000306937;1pkt 1fpkt"];
458--4116[label="0.00124688;1pkt 1fpkt"];
458--4126[label="0.000306937;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.33.163.65" src_port="6881"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
513[label="89.93.200.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
514[label="145.206.175.34;s;168pkt 168fpkt", shape=diamond, color=yellow];
4684[label="145.206.175.34;186pkt 186fpkt", shape=pentagon, color=darkviolet];
7641[label="145.206.175.34;186pkt 186fpkt", shape=invtriangle, color=brown];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.175.34:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24179: (3.23475%)&lt;BR/&gt; 52591: (3.14233%)&lt;BR/&gt; 23785: (3.14233%)&lt;BR/&gt; 23833: (3.04991%)&lt;BR/&gt; 26406: (2.95749%)&gt;];
}
513--514[label="1;1pkt 1fpkt"];
513--4684[label="1;1pkt 1fpkt"];
513--7641[label="1;1pkt 1fpkt"];
514--3008[label="0.00595238;1pkt 1fpkt"];
514--4684[label="1;168pkt 168fpkt"];
514--7641[label="1;168pkt 168fpkt"];
4684--7641[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter src_ip="145.206.175.34"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
559[label="13.228.9.113;d;53pkt 53fpkt", shape=diamond, color=yellow];
560[label="134.128.71.89;s;53pkt 53fpkt", shape=diamond, color=yellow];
3867[label="13.228.9.113;d;53pkt 53fpkt", shape=hexagon, color=black];
3868[label="134.128.71.89;s;53pkt 53fpkt", shape=hexagon, color=black];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.71.89:80, 13.228.9.113:*}[69.8113%]&lt;BR/&gt;{134.128.71.89:10039, 13.228.9.113:*}[30.1887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.9057%)&lt;BR/&gt; 10039: (15.0943%)&lt;BR/&gt; 50149: (0.943396%)&lt;BR/&gt; 50148: (0.943396%)&lt;BR/&gt; 50147: (0.943396%)&gt;];
}
559--560[label="1;53pkt 53fpkt"];
559--3867[label="1;53pkt 53fpkt"];
559--3868[label="1;53pkt 53fpkt"];
560--3867[label="1;53pkt 53fpkt"];
560--3868[label="1;53pkt 53fpkt"];
3867--3868[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="13.228.9.113" src_ip="134.128.71.89" src_port="80"/>
      <filter dst_ip="13.228.9.113" src_ip="134.128.71.89" src_port="10039"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
441[label="199.181.156.3;d;7pkt 7fpkt", shape=diamond, color=yellow];
581[label="54.128.33.109;s;3pkt 3fpkt", shape=diamond, color=yellow];
5703[label="54.128.33.109;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.33.109:*, 199.181.156.3:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 21: (11.1111%)&lt;BR/&gt; 53822: (8.33333%)&lt;BR/&gt; 51975: (8.33333%)&lt;BR/&gt; 51844: (8.33333%)&gt;];
}
441--581[label="1;3pkt 3fpkt"];
441--5282[label="0.142857;1pkt 1fpkt"];
441--5703[label="0.571429;4pkt 4fpkt"];
581--5703[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.156.3" dst_port="80" src_ip="54.128.33.109"/>
    </slice>
    <from sec="1178341215" usec="0"/>
    <to sec="1178341989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_34{
style=filled;
color=gray75;
440[label="168.45.207.8;s;309pkt 309fpkt", shape=diamond, color=yellow];
602[label="213.170.8.4;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat34[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.207.8:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1720: (0.47619%)&lt;BR/&gt; 4368: (0.31746%)&lt;BR/&gt; 3827: (0.31746%)&lt;BR/&gt; 2596: (0.31746%)&gt;];
}
440--602[label="1;6pkt 6fpkt"];
440--1232[label="0.0126582;1pkt 1fpkt"];
440--1496[label="0.0121951;1pkt 1fpkt"];
440--2510[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.207.8" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178341668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
594[label="168.45.2.125;s;13pkt 13fpkt", shape=diamond, color=yellow];
644[label="41.144.85.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
1018[label="201.172.68.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
1361[label="41.120.27.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
5865[label="168.45.2.125;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8261[label="168.45.2.125;13pkt 13fpkt", shape=invtriangle, color=brown];
9585[label="168.45.2.125;13pkt 13fpkt", shape=invhouse, color=bisque];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.2.125:*, 201.172.68.250:80}[30.7692%]&lt;BR/&gt;{168.45.2.125:53544, *:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.4545%)&lt;BR/&gt; 53544: (17.2727%)&lt;BR/&gt; 8968: (4.54545%)&lt;BR/&gt; 8708: (4.54545%)&lt;BR/&gt; 8314: (4.54545%)&gt;];
}
594--644[label="1;1pkt 1fpkt"];
594--1018[label="1;1pkt 1fpkt"];
594--1361[label="1;1pkt 1fpkt"];
594--4040[label="0.0769231;1pkt 1fpkt"];
594--4085[label="0.0769231;1pkt 1fpkt"];
594--4126[label="0.0769231;1pkt 1fpkt"];
594--5865[label="1;13pkt 13fpkt"];
594--8261[label="1;13pkt 13fpkt"];
594--9585[label="1;13pkt 13fpkt"];
644--5865[label="1;1pkt 1fpkt"];
644--8261[label="1;1pkt 1fpkt"];
644--9585[label="1;1pkt 1fpkt"];
1018--5865[label="1;1pkt 1fpkt"];
1018--8261[label="1;1pkt 1fpkt"];
1018--9585[label="1;1pkt 1fpkt"];
1361--5865[label="1;1pkt 1fpkt"];
1361--8261[label="1;1pkt 1fpkt"];
1361--9585[label="1;1pkt 1fpkt"];
5865--8261[label="1;13pkt 13fpkt"];
5865--9585[label="1;13pkt 13fpkt"];
8261--9585[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.2.125" src_port="53544"/>
      <filter dst_ip="201.172.68.250" dst_port="80" src_ip="168.45.2.125"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178342038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
238[label="212.169.58.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
682[label="134.149.69.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.69.41:30509, 212.169.58.252:6699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30509: (50%)&lt;BR/&gt; 6699: (50%)&gt;];
}
238--682[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.169.58.252" dst_port="6699" src_ip="134.149.69.41" src_port="30509"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
683[label="208.17.150.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
684[label="129.206.198.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.17.150.167:36172, 134.128.65.66:31310}[50%]&lt;BR/&gt;{208.17.150.167:58088, 129.206.198.232:3389}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58088: (33.3333%)&lt;BR/&gt; 3389: (33.3333%)&lt;BR/&gt; 36172: (16.6667%)&lt;BR/&gt; 31310: (16.6667%)&gt;];
}
683--684[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.198.232" dst_port="3389" src_ip="208.17.150.167" src_port="58088"/>
      <filter dst_ip="134.128.65.66" dst_port="31310" src_ip="208.17.150.167" src_port="36172"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
256[label="54.204.8.100;s;22pkt 22fpkt", shape=diamond, color=yellow];
691[label="129.206.165.226;d;24pkt 24fpkt", shape=diamond, color=yellow];
5577[label="54.204.8.100;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.204.8.100:80, 129.206.165.226:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34628: (2.20588%)&lt;BR/&gt; 34624: (2.20588%)&lt;BR/&gt; 34622: (2.20588%)&lt;BR/&gt; 34621: (2.20588%)&gt;];
}
256--691[label="1;22pkt 22fpkt"];
256--5577[label="1;22pkt 22fpkt"];
691--5577[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.165.226" src_ip="54.204.8.100" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178341926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
723[label="199.181.157.159;d;288pkt 288fpkt", shape=diamond, color=yellow];
724[label="208.3.146.209;s;228pkt 228fpkt", shape=diamond, color=yellow];
3326[label="208.3.146.209;s;66pkt 66fpkt", shape=hexagon, color=black];
3911[label="199.181.157.159;d;288pkt 288fpkt", shape=hexagon, color=black];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.3.146.209:*, 199.181.157.159:445}[99.6528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (49.8851%)&lt;BR/&gt; 4987: (0.229885%)&lt;BR/&gt; 4924: (0.229885%)&lt;BR/&gt; 4859: (0.229885%)&lt;BR/&gt; 4773: (0.229885%)&gt;];
}
723--724[label="1;228pkt 228fpkt"];
723--997[label="0.00347222;1pkt 1fpkt"];
723--3326[label="1;66pkt 66fpkt"];
723--3361[label="0.00347222;1pkt 1fpkt"];
723--3911[label="1;288pkt 288fpkt"];
723--3983[label="0.00347222;1pkt 1fpkt"];
723--4051[label="0.00347222;1pkt 1fpkt"];
723--4096[label="0.00347222;1pkt 1fpkt"];
723--4135[label="0.00347222;1pkt 1fpkt"];
723--5108[label="0.00347222;1pkt 1fpkt"];
723--7854[label="0.00347222;1pkt 1fpkt"];
723--9354[label="0.00347222;1pkt 1fpkt"];
724--3326[label="1;66pkt 66fpkt"];
724--3911[label="1;228pkt 228fpkt"];
3326--3911[label="1;66pkt 66fpkt"];
3911--3983[label="0.00347222;1pkt 1fpkt"];
3911--4051[label="0.00347222;1pkt 1fpkt"];
3911--4096[label="0.00347222;1pkt 1fpkt"];
3911--4135[label="0.00347222;1pkt 1fpkt"];
3911--5108[label="0.00347222;1pkt 1fpkt"];
3911--7854[label="0.00347222;1pkt 1fpkt"];
3911--9354[label="0.00347222;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.157.159" dst_port="445" src_ip="208.3.146.209"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
732[label="52.116.157.217;d;2pkt 2fpkt", shape=diamond, color=yellow];
733[label="168.45.208.144;s;2pkt 2fpkt", shape=diamond, color=yellow];
3667[label="52.116.157.217;d;2pkt 2fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.208.144:0, 52.116.157.217:0}[50%]&lt;BR/&gt;{168.45.208.144:1723, 52.116.157.217:3504}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 3504: (25%)&lt;BR/&gt; 1723: (25%)&gt;];
}
732--733[label="1;2pkt 2fpkt"];
732--3667[label="1;2pkt 2fpkt"];
733--3667[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="52.116.157.217" dst_port="3504" src_ip="168.45.208.144" src_port="1723"/>
      <filter dst_ip="52.116.157.217" src_ip="168.45.208.144"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
347[label="168.45.0.101;s;25pkt 25fpkt", shape=diamond, color=yellow];
747[label="199.193.50.84;d;1pkt 1fpkt", shape=diamond, color=yellow];
769[label="199.193.50.81;d;1pkt 1fpkt", shape=diamond, color=yellow];
3378[label="168.45.0.101;s;18pkt 18fpkt", shape=hexagon, color=black];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.0.101:2743, *:*}[84%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2743: (38.8889%)&lt;BR/&gt; 16202: (3.33333%)&lt;BR/&gt; 13201: (3.33333%)&lt;BR/&gt; 3499: (3.33333%)&lt;BR/&gt; 2938: (3.33333%)&gt;];
}
347--747[label="1;1pkt 1fpkt"];
347--769[label="1;1pkt 1fpkt"];
347--3378[label="1;18pkt 18fpkt"];
747--3378[label="1;1pkt 1fpkt"];
769--3378[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.0.101" src_port="2743"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
346[label="168.45.0.101;d;15pkt 15fpkt", shape=diamond, color=yellow];
748[label="199.193.50.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
770[label="199.193.50.81;s;1pkt 1fpkt", shape=diamond, color=yellow];
3280[label="168.45.0.101;d;10pkt 10fpkt", shape=hexagon, color=black];
3329[label="199.193.50.81;s;1pkt 1fpkt", shape=hexagon, color=black];
3573[label="199.193.50.84;s;1pkt 1fpkt", shape=hexagon, color=black];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.45.0.101:2743}[86.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2743: (36.2069%)&lt;BR/&gt; 16202: (6.89655%)&lt;BR/&gt; 13201: (6.89655%)&lt;BR/&gt; 3499: (6.89655%)&lt;BR/&gt; 2938: (6.89655%)&gt;];
}
346--748[label="1;1pkt 1fpkt"];
346--770[label="1;1pkt 1fpkt"];
346--3280[label="1;10pkt 10fpkt"];
346--3329[label="1;1pkt 1fpkt"];
346--3573[label="1;1pkt 1fpkt"];
748--3280[label="1;1pkt 1fpkt"];
748--3573[label="1;1pkt 1fpkt"];
770--3280[label="1;1pkt 1fpkt"];
770--3329[label="1;1pkt 1fpkt"];
3280--3329[label="1;1pkt 1fpkt"];
3280--3573[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.0.101" dst_port="2743"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
841[label="168.45.2.41;s;4pkt 4fpkt", shape=diamond, color=yellow];
842[label="12.211.88.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
3339[label="168.45.2.41;s;1pkt 1fpkt", shape=hexagon, color=black];
4774[label="168.45.2.41;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.2.41:3144, 12.211.88.32:10125}[25%]&lt;BR/&gt;{168.45.2.41:3292, 199.193.56.54:80}[25%]&lt;BR/&gt;{168.45.2.41:3297, 199.193.56.54:80}[25%]&lt;BR/&gt;{168.45.2.41:3302, 199.193.56.54:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 10125: (20%)&lt;BR/&gt; 3144: (20%)&lt;BR/&gt; 3302: (10%)&lt;BR/&gt; 3297: (10%)&gt;];
}
841--842[label="1;1pkt 1fpkt"];
841--3339[label="1;1pkt 1fpkt"];
841--4774[label="1;4pkt 4fpkt"];
842--3339[label="1;1pkt 1fpkt"];
842--4774[label="1;1pkt 1fpkt"];
3339--4774[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.193.56.54" dst_port="80" src_ip="168.45.2.41" src_port="3302"/>
      <filter dst_ip="199.193.56.54" dst_port="80" src_ip="168.45.2.41" src_port="3297"/>
      <filter dst_ip="199.193.56.54" dst_port="80" src_ip="168.45.2.41" src_port="3292"/>
      <filter dst_ip="12.211.88.32" dst_port="10125" src_ip="168.45.2.41" src_port="3144"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
448[label="168.45.178.108;d;8pkt 8fpkt", shape=diamond, color=yellow];
844[label="219.34.66.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.8.156.213:80, 168.45.178.108:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 9416: (11.1111%)&lt;BR/&gt; 1990: (11.1111%)&lt;BR/&gt; 4558: (5.55556%)&lt;BR/&gt; 4556: (5.55556%)&gt;];
}
448--844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.178.108" src_ip="215.8.156.213" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
847[label="210.66.220.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
848[label="199.132.189.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
3512[label="210.66.220.90;d;1pkt 1fpkt", shape=hexagon, color=black];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.132.189.32:2752, 210.66.220.90:6660}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6660: (50%)&lt;BR/&gt; 2752: (50%)&gt;];
}
847--848[label="1;1pkt 1fpkt"];
847--3512[label="1;1pkt 1fpkt"];
848--3512[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.66.220.90" dst_port="6660" src_ip="199.132.189.32" src_port="2752"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
859[label="199.181.155.8;s;454pkt 454fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.155.8:0, *:0}[99.7797%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7797%)&lt;BR/&gt; 8080: (0.110132%)&lt;BR/&gt; 6000: (0.110132%)&gt;];
}
859--996[label="0.00440529;2pkt 2fpkt"];
859--2149[label="0.0131579;1pkt 1fpkt"];
859--2730[label="0.0131579;1pkt 1fpkt"];
859--3360[label="0.00440529;2pkt 2fpkt"];
859--3860[label="0.0131579;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.181.155.8"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
954[label="168.45.128.228;s;6pkt 6fpkt", shape=diamond, color=yellow];
1004[label="58.40.69.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
1413[label="54.128.40.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.128.228:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46930: (12.5%)&lt;BR/&gt; 43501: (12.5%)&lt;BR/&gt; 60669: (6.25%)&lt;BR/&gt; 58713: (6.25%)&gt;];
}
954--1004[label="1;1pkt 1fpkt"];
954--1413[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.128.228" src_port="80"/>
    </slice>
    <from sec="1178341223" usec="0"/>
    <to sec="1178341558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
1043[label="210.66.178.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
1044[label="199.132.140.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.132.140.186:1108, 210.66.178.169:29000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29000: (50%)&lt;BR/&gt; 1108: (50%)&gt;];
}
1043--1044[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.66.178.169" dst_port="29000" src_ip="199.132.140.186" src_port="1108"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178341777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
663[label="198.155.84.116;s;154pkt 154fpkt", shape=diamond, color=yellow];
786[label="92.91.103.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
1069[label="45.35.27.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
1130[label="54.20.118.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="213.141.185.123;d;17pkt 17fpkt", shape=diamond, color=yellow];
1579[label="55.117.46.36;d;3pkt 3fpkt", shape=diamond, color=yellow];
1603[label="51.217.162.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
1829[label="89.117.155.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
2357[label="155.203.82.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
2372[label="51.46.252.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
2421[label="88.13.61.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
2456[label="112.198.171.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
2686[label="55.67.33.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
2772[label="34.136.56.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
3070[label="42.218.86.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
3382[label="54.20.118.89;d;1pkt 1fpkt", shape=hexagon, color=black];
3524[label="55.117.46.36;d;3pkt 3fpkt", shape=hexagon, color=black];
3657[label="155.203.82.25;d;1pkt 1fpkt", shape=hexagon, color=black];
3710[label="88.13.61.111;d;1pkt 1fpkt", shape=hexagon, color=black];
3918[label="92.91.103.71;d;1pkt 1fpkt", shape=hexagon, color=black];
5781[label="198.155.84.116;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8219[label="198.155.84.116;171pkt 171fpkt", shape=invtriangle, color=brown];
9560[label="198.155.84.116;171pkt 171fpkt", shape=invhouse, color=bisque];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.155.84.116:13750, *:*}[21.0526%]&lt;BR/&gt;{198.155.84.116:1104, *:*}[20.4678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13750: (10.7807%)&lt;BR/&gt; 1104: (9.38662%)&lt;BR/&gt; 6881: (6.59851%)&lt;BR/&gt; 0: (2.41636%)&lt;BR/&gt; 21160: (2.23048%)&gt;];
}
663--786[label="1;1pkt 1fpkt"];
663--1069[label="1;1pkt 1fpkt"];
663--1130[label="1;1pkt 1fpkt"];
663--1490[label="1;17pkt 17fpkt"];
663--1579[label="1;3pkt 3fpkt"];
663--1603[label="1;1pkt 1fpkt"];
663--1829[label="1;1pkt 1fpkt"];
663--2357[label="1;1pkt 1fpkt"];
663--2372[label="1;1pkt 1fpkt"];
663--2421[label="1;2pkt 2fpkt"];
663--2456[label="1;1pkt 1fpkt"];
663--2686[label="1;1pkt 1fpkt"];
663--2772[label="1;1pkt 1fpkt"];
663--3070[label="1;1pkt 1fpkt"];
663--3382[label="1;1pkt 1fpkt"];
663--3524[label="1;3pkt 3fpkt"];
663--3657[label="1;1pkt 1fpkt"];
663--3710[label="1;1pkt 1fpkt"];
663--3918[label="1;1pkt 1fpkt"];
663--5781[label="1;2pkt 2fpkt"];
663--8219[label="1;154pkt 154fpkt"];
663--9560[label="1;154pkt 154fpkt"];
786--3918[label="1;1pkt 1fpkt"];
786--8219[label="1;1pkt 1fpkt"];
786--9560[label="1;1pkt 1fpkt"];
1069--8219[label="1;1pkt 1fpkt"];
1069--9560[label="1;1pkt 1fpkt"];
1130--3382[label="1;1pkt 1fpkt"];
1130--5781[label="1;1pkt 1fpkt"];
1130--8219[label="1;1pkt 1fpkt"];
1130--9560[label="1;1pkt 1fpkt"];
1490--8219[label="1;17pkt 17fpkt"];
1490--9560[label="1;17pkt 17fpkt"];
1579--3524[label="1;3pkt 3fpkt"];
1579--8219[label="1;3pkt 3fpkt"];
1579--9560[label="1;3pkt 3fpkt"];
1603--8219[label="1;1pkt 1fpkt"];
1603--9560[label="1;1pkt 1fpkt"];
1829--8219[label="1;1pkt 1fpkt"];
1829--9560[label="1;1pkt 1fpkt"];
2357--3657[label="1;1pkt 1fpkt"];
2357--8219[label="1;1pkt 1fpkt"];
2357--9560[label="1;1pkt 1fpkt"];
2372--8219[label="1;1pkt 1fpkt"];
2372--9560[label="1;1pkt 1fpkt"];
2421--3710[label="1;1pkt 1fpkt"];
2421--8219[label="1;2pkt 2fpkt"];
2421--9560[label="1;2pkt 2fpkt"];
2456--8219[label="1;1pkt 1fpkt"];
2456--9560[label="1;1pkt 1fpkt"];
2686--8219[label="1;1pkt 1fpkt"];
2686--9560[label="1;1pkt 1fpkt"];
2772--8219[label="1;1pkt 1fpkt"];
2772--9560[label="1;1pkt 1fpkt"];
3070--8219[label="1;1pkt 1fpkt"];
3070--9560[label="1;1pkt 1fpkt"];
3382--5781[label="1;1pkt 1fpkt"];
3382--8219[label="1;1pkt 1fpkt"];
3382--9560[label="1;1pkt 1fpkt"];
3524--8219[label="1;3pkt 3fpkt"];
3524--9560[label="1;3pkt 3fpkt"];
3657--8219[label="1;1pkt 1fpkt"];
3657--9560[label="1;1pkt 1fpkt"];
3710--8219[label="1;1pkt 1fpkt"];
3710--9560[label="1;1pkt 1fpkt"];
3918--8219[label="1;1pkt 1fpkt"];
3918--9560[label="1;1pkt 1fpkt"];
5781--8219[label="1;2pkt 2fpkt"];
5781--9560[label="1;2pkt 2fpkt"];
8219--9560[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter src_ip="198.155.84.116" src_port="13750"/>
      <filter src_ip="198.155.84.116" src_port="1104"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.206.174.142"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
783[label="221.12.86.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
1129[label="170.129.22.84;d;16pkt 16fpkt", shape=diamond, color=yellow];
3433[label="170.129.22.84;d;6pkt 6fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.12.87.97:80, 170.129.22.84:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4783%)&lt;BR/&gt; 1678: (6.52174%)&lt;BR/&gt; 554: (6.52174%)&lt;BR/&gt; 1802: (4.34783%)&lt;BR/&gt; 1799: (4.34783%)&gt;];
}
783--1129[label="1;1pkt 1fpkt"];
783--3433[label="1;1pkt 1fpkt"];
1129--3433[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="170.129.22.84" src_ip="221.12.87.97" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
1136[label="168.45.2.121;d;222pkt 222fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.45.2.121:3224}[68.4685%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3224: (34.2342%)&lt;BR/&gt; 3078: (9.23423%)&lt;BR/&gt; 3428: (3.37838%)&lt;BR/&gt; 80: (3.15315%)&lt;BR/&gt; 59564: (0.45045%)&gt;];
}
1136--4026[label="0.0045045;1pkt 1fpkt"];
1136--4074[label="0.0045045;1pkt 1fpkt"];
1136--4115[label="0.0045045;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.2.121" dst_port="3224"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="130.42.137.161"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
843[label="12.211.88.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
1170[label="168.45.2.41;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.211.88.32:10125, 168.45.2.41:3144}[25%]&lt;BR/&gt;{199.193.56.54:80, 168.45.2.41:3292}[25%]&lt;BR/&gt;{199.193.56.54:80, 168.45.2.41:3297}[25%]&lt;BR/&gt;{199.193.56.54:80, 168.45.2.41:3302}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 10125: (20%)&lt;BR/&gt; 3144: (20%)&lt;BR/&gt; 3302: (10%)&lt;BR/&gt; 3297: (10%)&gt;];
}
843--1170[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.2.41" dst_port="3302" src_ip="199.193.56.54" src_port="80"/>
      <filter dst_ip="168.45.2.41" dst_port="3297" src_ip="199.193.56.54" src_port="80"/>
      <filter dst_ip="168.45.2.41" dst_port="3292" src_ip="199.193.56.54" src_port="80"/>
      <filter dst_ip="168.45.2.41" dst_port="3144" src_ip="12.211.88.32" src_port="10125"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
1189[label="199.181.152.213;d;585pkt 585fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 199.181.152.213:*}[78.1197%]&lt;BR/&gt;{*:0, 199.181.152.213:0}[20.6838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.0598%)&lt;BR/&gt; 0: (20.6838%)&lt;BR/&gt; 22: (0.512821%)&lt;BR/&gt; 1646: (0.25641%)&lt;BR/&gt; 5000: (0.17094%)&gt;];
}
1189--3361[label="0.0017094;1pkt 1fpkt"];
1189--3983[label="0.0017094;1pkt 1fpkt"];
1189--4051[label="0.0017094;1pkt 1fpkt"];
1189--4096[label="0.0017094;1pkt 1fpkt"];
1189--4135[label="0.0017094;1pkt 1fpkt"];
1189--5108[label="0.0017094;1pkt 1fpkt"];
1189--7854[label="0.0017094;1pkt 1fpkt"];
1189--9354[label="0.0017094;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.152.213" src_port="53"/>
      <filter dst_ip="199.181.152.213"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="202.37.22.29"/>
      <from sec="1178341201" usec="0"/>
      <to sec="1178342027" usec="0"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,003,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.158.169.184"/>
      <from sec="1178341317" usec="0"/>
      <to sec="1178341649" usec="0"/>
    </slice>
    <from sec="1178341317" usec="0"/>
    <to sec="1178341649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
1341[label="92.5.243.138;d;1pkt 1fpkt", shape=diamond, color=yellow];
1342[label="134.128.177.42;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.177.42:8000, 92.5.243.138:17768}[33.3333%]&lt;BR/&gt;{134.128.177.42:18000, 128.114.111.179:43283}[33.3333%]&lt;BR/&gt;{134.128.177.42:18000, 213.206.22.193:1473}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18000: (25%)&lt;BR/&gt; 17768: (25%)&lt;BR/&gt; 8000: (25%)&lt;BR/&gt; 43283: (12.5%)&lt;BR/&gt; 1473: (12.5%)&gt;];
}
1341--1342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.206.22.193" dst_port="1473" src_ip="134.128.177.42" src_port="18000"/>
      <filter dst_ip="128.114.111.179" dst_port="43283" src_ip="134.128.177.42" src_port="18000"/>
      <filter dst_ip="92.5.243.138" dst_port="17768" src_ip="134.128.177.42" src_port="8000"/>
    </slice>
    <from sec="1178341329" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="48.97.155.215"/>
      <from sec="1178341930" usec="0"/>
      <to sec="1178341970" usec="0"/>
    </slice>
    <from sec="1178341930" usec="0"/>
    <to sec="1178341970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="43.107.129.3"/>
      <from sec="1178341378" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341378" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
1425[label="172.113.169.53;s;439pkt 439fpkt", shape=diamond, color=yellow];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.169.53:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1425--2730[label="0.0131579;1pkt 1fpkt"];
1425--3422[label="0.0025641;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.113.169.53"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.203.71.149"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.153.8.239"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.824914,2.68815,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
1182[label="145.206.174.215;s;10pkt 10fpkt", shape=diamond, color=yellow];
1531[label="13.219.167.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
8851[label="145.206.174.215;11pkt 11fpkt", shape=invtriangle, color=brown];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.174.215:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11353: (6.81818%)&lt;BR/&gt; 4897: (6.81818%)&lt;BR/&gt; 18085: (4.54545%)&lt;BR/&gt; 17077: (4.54545%)&lt;BR/&gt; 14460: (4.54545%)&gt;];
}
1182--1531[label="1;1pkt 1fpkt"];
1182--8851[label="1;10pkt 10fpkt"];
1531--8851[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.206.174.215"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
746[label="13.227.2.157;d;2pkt 2fpkt", shape=diamond, color=yellow];
1454[label="134.149.72.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
1545[label="155.255.105.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
3377[label="13.227.2.157;d;2pkt 2fpkt", shape=hexagon, color=black];
6208[label="134.149.72.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.105.20:12270, 13.227.2.157:554}[50%]&lt;BR/&gt;{134.149.72.154:1405, 13.227.2.157:554}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 1405: (28.5714%)&lt;BR/&gt; 12270: (21.4286%)&gt;];
}
746--1454[label="1;1pkt 1fpkt"];
746--1545[label="1;1pkt 1fpkt"];
746--3377[label="1;2pkt 2fpkt"];
746--6208[label="1;1pkt 1fpkt"];
1454--3377[label="1;1pkt 1fpkt"];
1454--6208[label="1;1pkt 1fpkt"];
1545--3377[label="1;1pkt 1fpkt"];
3377--6208[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.227.2.157" dst_port="554" src_ip="134.149.72.154" src_port="1405"/>
      <filter dst_ip="13.227.2.157" dst_port="554" src_ip="155.255.105.20" src_port="12270"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
1327[label="145.206.174.228;s;37pkt 37fpkt", shape=diamond, color=yellow];
1676[label="213.202.235.67;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.174.228:*, 212.72.10.137:80}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.5128%)&lt;BR/&gt; 2723: (7.69231%)&lt;BR/&gt; 0: (5.12821%)&lt;BR/&gt; 9340: (2.5641%)&lt;BR/&gt; 5340: (2.5641%)&gt;];
}
1327--1676[label="1;2pkt 2fpkt"];
1327--4040[label="0.027027;1pkt 1fpkt"];
1327--4085[label="0.027027;1pkt 1fpkt"];
1327--4126[label="0.027027;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.72.10.137" dst_port="80" src_ip="145.206.174.228"/>
    </slice>
    <from sec="1178341273" usec="0"/>
    <to sec="1178341811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
1710[label="213.22.74.201;d;25pkt 25fpkt", shape=diamond, color=yellow];
1711[label="155.255.64.202;s;25pkt 25fpkt", shape=diamond, color=yellow];
6792[label="155.255.64.202;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.64.202:80, 213.22.74.201:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50817: (2.02703%)&lt;BR/&gt; 50816: (2.02703%)&lt;BR/&gt; 50815: (2.02703%)&lt;BR/&gt; 50796: (2.02703%)&gt;];
}
1710--1711[label="1;25pkt 25fpkt"];
1710--6792[label="1;24pkt 24fpkt"];
1711--6792[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="213.22.74.201" src_ip="155.255.64.202" src_port="80"/>
    </slice>
    <from sec="1178341474" usec="0"/>
    <to sec="1178341649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.101.25.68"/>
      <from sec="1178341513" usec="0"/>
      <to sec="1178341649" usec="0"/>
    </slice>
    <from sec="1178341513" usec="0"/>
    <to sec="1178341649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1796[label="129.206.233.134;s;82pkt 82fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.233.134:25, *:*}[92.6829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64763: (0.609756%)&lt;BR/&gt; 62714: (0.609756%)&lt;BR/&gt; 62620: (0.609756%)&lt;BR/&gt; 57465: (0.609756%)&gt;];
}
1796--3729[label="0.0121951;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.233.134" src_port="25"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
1804[label="168.45.2.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
1805[label="12.211.88.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
3923[label="12.211.88.47;d;1pkt 1fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.2.16:1494, 12.211.88.47:10106}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10106: (50%)&lt;BR/&gt; 1494: (50%)&gt;];
}
1804--1805[label="1;1pkt 1fpkt"];
1804--3923[label="1;1pkt 1fpkt"];
1805--3923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.211.88.47" dst_port="10106" src_ip="168.45.2.16" src_port="1494"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1803[label="168.45.2.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
1806[label="12.211.88.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.211.88.47:10106, 168.45.2.16:1494}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10106: (50%)&lt;BR/&gt; 1494: (50%)&gt;];
}
1803--1806[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.2.16" dst_port="1494" src_ip="12.211.88.47" src_port="10106"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.824914,2.68815,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
1513[label="145.206.51.193;s;39pkt 39fpkt", shape=diamond, color=yellow];
1815[label="212.130.33.191;d;1pkt 1fpkt", shape=diamond, color=yellow];
8703[label="145.206.51.193;40pkt 40fpkt", shape=invtriangle, color=brown];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.51.193:16552, *:*}[90.2439%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16552: (45%)&lt;BR/&gt; 26742: (2.5%)&lt;BR/&gt; 80: (2.5%)&lt;BR/&gt; 55560: (1.875%)&lt;BR/&gt; 55084: (1.25%)&gt;];
}
1513--1815[label="1;1pkt 1fpkt"];
1513--8703[label="0.974359;38pkt 38fpkt"];
1815--8703[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.206.51.193" src_port="16552"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
1251[label="193.82.82.36;s;332pkt 332fpkt", shape=diamond, color=yellow];
1883[label="199.181.144.182;d;261pkt 261fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.82.82.36:80, 199.181.144.182:*}[99.6997%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9157%)&lt;BR/&gt; 60611: (0.168634%)&lt;BR/&gt; 60610: (0.168634%)&lt;BR/&gt; 60609: (0.168634%)&lt;BR/&gt; 60608: (0.168634%)&gt;];
}
1251--1883[label="0.996169;260pkt 260fpkt"];
1883--3361[label="0.00383142;1pkt 1fpkt"];
1883--3983[label="0.00383142;1pkt 1fpkt"];
1883--4051[label="0.00383142;1pkt 1fpkt"];
1883--4096[label="0.00383142;1pkt 1fpkt"];
1883--4135[label="0.00383142;1pkt 1fpkt"];
1883--5108[label="0.00383142;1pkt 1fpkt"];
1883--7854[label="0.00383142;1pkt 1fpkt"];
1883--9354[label="0.00383142;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.144.182" src_ip="193.82.82.36" src_port="80"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
1949[label="145.133.16.146;s;105pkt 105fpkt", shape=diamond, color=yellow];
1965[label="54.128.48.13;d;84pkt 84fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.133.16.146:80, 54.128.48.13:*}[67.2566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1481%)&lt;BR/&gt; 32793: (1.85185%)&lt;BR/&gt; 53: (1.85185%)&lt;BR/&gt; 61439: (0.529101%)&lt;BR/&gt; 61438: (0.529101%)&gt;];
}
1949--1965[label="0.904762;76pkt 76fpkt"];
1965--3645[label="0.0119048;1pkt 1fpkt"];
1965--3690[label="0.0119048;1pkt 1fpkt"];
1965--4046[label="0.0119048;1pkt 1fpkt"];
1965--4091[label="0.0119048;1pkt 1fpkt"];
1965--4132[label="0.0119048;1pkt 1fpkt"];
1965--4960[label="0.0119048;1pkt 1fpkt"];
1965--5372[label="0.0119048;1pkt 1fpkt"];
1965--6990[label="0.0119048;1pkt 1fpkt"];
1965--8013[label="0.0119048;1pkt 1fpkt"];
1965--9435[label="0.0119048;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="54.128.48.13" src_ip="145.133.16.146" src_port="80"/>
    </slice>
    <from sec="1178341381" usec="0"/>
    <to sec="1178341977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.74.67.88"/>
      <from sec="1178341883" usec="0"/>
      <to sec="1178341989" usec="0"/>
    </slice>
    <from sec="1178341883" usec="0"/>
    <to sec="1178341989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1886[label="198.15.222.180;d;38pkt 38fpkt", shape=diamond, color=yellow];
1995[label="75.158.213.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.234.207.32:*, 198.15.222.180:80}[34.2105%]&lt;BR/&gt;{*:0, 198.15.222.180:0}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.7436%)&lt;BR/&gt; 0: (20.5128%)&lt;BR/&gt; 64447: (2.5641%)&lt;BR/&gt; 56964: (1.28205%)&lt;BR/&gt; 56957: (1.28205%)&gt;];
}
1886--1995[label="1;1pkt 1fpkt"];
1886--2167[label="0.0263158;1pkt 1fpkt"];
1886--4026[label="0.0263158;1pkt 1fpkt"];
1886--4074[label="0.0263158;1pkt 1fpkt"];
1886--4115[label="0.0263158;1pkt 1fpkt"];
1886--4598[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.15.222.180" dst_port="80" src_ip="88.234.207.32"/>
      <filter dst_ip="198.15.222.180"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
2000[label="88.224.37.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
2001[label="155.255.196.46;s;2pkt 2fpkt", shape=diamond, color=yellow];
3553[label="88.224.37.165;d;1pkt 1fpkt", shape=hexagon, color=black];
3554[label="155.255.196.46;s;2pkt 2fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.196.46:1433, 88.224.37.165:80}[50%]&lt;BR/&gt;{155.255.196.46:2028, 88.86.72.169:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1433: (33.3333%)&lt;BR/&gt; 2028: (16.6667%)&gt;];
}
2000--2001[label="1;1pkt 1fpkt"];
2000--3553[label="1;1pkt 1fpkt"];
2000--3554[label="1;1pkt 1fpkt"];
2001--3553[label="1;1pkt 1fpkt"];
2001--3554[label="1;2pkt 2fpkt"];
3553--3554[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="88.86.72.169" dst_port="80" src_ip="155.255.196.46" src_port="2028"/>
      <filter dst_ip="88.224.37.165" dst_port="80" src_ip="155.255.196.46" src_port="1433"/>
    </slice>
    <from sec="1178341582" usec="0"/>
    <to sec="1178341638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
1924[label="134.2.35.140;s;15pkt 15fpkt", shape=diamond, color=yellow];
2020[label="196.76.20.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
6045[label="134.2.35.140;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8364[label="134.2.35.140;15pkt 15fpkt", shape=invtriangle, color=brown];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.2.35.140:80, 196.77.202.236:*}[33.3333%]&lt;BR/&gt;{134.2.35.140:*, 93.92.65.248:*}[26.6667%]&lt;BR/&gt;{134.2.35.140:21, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.1739%)&lt;BR/&gt; 123: (9.78261%)&lt;BR/&gt; 21: (9.78261%)&lt;BR/&gt; 11142: (4.34783%)&lt;BR/&gt; 63567: (3.26087%)&gt;];
}
1924--2020[label="1;1pkt 1fpkt"];
1924--6045[label="1;15pkt 15fpkt"];
1924--8364[label="1;15pkt 15fpkt"];
2020--6045[label="1;1pkt 1fpkt"];
2020--8364[label="1;1pkt 1fpkt"];
6045--8364[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="93.92.65.248" src_ip="134.2.35.140"/>
      <filter src_ip="134.2.35.140" src_port="21"/>
      <filter dst_ip="196.77.202.236" src_ip="134.2.35.140" src_port="80"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
2031[label="134.33.79.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
2032[label="88.32.75.231;s;1pkt 1fpkt", shape=diamond, color=yellow];
7105[label="88.32.75.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.32.75.231:80, 134.33.79.85:30273}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30273: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2031--2032[label="1;1pkt 1fpkt"];
2031--7105[label="1;1pkt 1fpkt"];
2032--7105[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.33.79.85" dst_port="30273" src_ip="88.32.75.231" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.78.51.109"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342026" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.206.233.8"/>
      <from sec="1178341201" usec="0"/>
      <to sec="1178341938" usec="0"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1858[label="172.113.214.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
2130[label="200.18.76.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.214.47:1041, 200.18.76.141:6667}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1041: (50%)&gt;];
}
1858--2130[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.18.76.141" dst_port="6667" src_ip="172.113.214.47" src_port="1041"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.206.161.96"/>
      <from sec="1178341204" usec="0"/>
      <to sec="1178342026" usec="0"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1383[label="134.144.218.2;d;142pkt 142fpkt", shape=diamond, color=yellow];
1678[label="208.16.70.65;s;143pkt 143fpkt", shape=diamond, color=yellow];
2294[label="55.7.105.150;d;19pkt 19fpkt", shape=diamond, color=yellow];
3478[label="134.144.218.2;d;142pkt 142fpkt", shape=hexagon, color=black];
3893[label="55.7.105.150;d;19pkt 19fpkt", shape=hexagon, color=black];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.16.70.65:*, 134.144.218.2:443}[87.6543%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.8065%)&lt;BR/&gt; 80: (4.19355%)&lt;BR/&gt; 1475: (0.322581%)&lt;BR/&gt; 1474: (0.322581%)&lt;BR/&gt; 1473: (0.322581%)&gt;];
}
1383--1678[label="1;142pkt 142fpkt"];
1383--3478[label="1;142pkt 142fpkt"];
1678--3478[label="1;142pkt 142fpkt"];
2294--3893[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.218.2" dst_port="443" src_ip="208.16.70.65"/>
    </slice>
    <from sec="1178341401" usec="0"/>
    <to sec="1178341917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
2213[label="134.149.218.27;s;45pkt 45fpkt", shape=diamond, color=yellow];
2243[label="92.5.114.135;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.218.27:80, 208.90.232.133:*}[48.8889%]&lt;BR/&gt;{134.149.218.27:80, 92.5.114.135:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2727%)&lt;BR/&gt; 0: (5.45455%)&lt;BR/&gt; 1411: (1.81818%)&lt;BR/&gt; 1407: (1.81818%)&lt;BR/&gt; 1403: (1.81818%)&gt;];
}
2213--2243[label="1;10pkt 10fpkt"];
2213--2881[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.90.232.133" src_ip="134.149.218.27" src_port="80"/>
      <filter dst_ip="92.5.114.135" src_ip="134.149.218.27" src_port="80"/>
    </slice>
    <from sec="1178341236" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
2207[label="134.2.35.140;d;6pkt 6fpkt", shape=diamond, color=yellow];
2283[label="196.76.20.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
3798[label="196.76.20.166;s;1pkt 1fpkt", shape=hexagon, color=black];
6337[label="196.76.20.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8533[label="196.76.20.166;1pkt 1fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.74.39.94:*, 134.2.35.140:80}[33.3333%]&lt;BR/&gt;{*:*, 134.2.35.140:123}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35%)&lt;BR/&gt; 11142: (25%)&lt;BR/&gt; 123: (15%)&lt;BR/&gt; 61541: (5%)&lt;BR/&gt; 50820: (5%)&gt;];
}
2207--2283[label="1;1pkt 1fpkt"];
2207--3798[label="1;1pkt 1fpkt"];
2207--6337[label="1;1pkt 1fpkt"];
2207--8533[label="1;1pkt 1fpkt"];
2283--3798[label="1;1pkt 1fpkt"];
2283--6337[label="1;1pkt 1fpkt"];
2283--8533[label="1;1pkt 1fpkt"];
3798--6337[label="1;1pkt 1fpkt"];
3798--8533[label="1;1pkt 1fpkt"];
6337--8533[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.2.35.140" dst_port="123"/>
      <filter dst_ip="134.2.35.140" dst_port="80" src_ip="200.74.39.94"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
2033[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
2355[label="129.206.40.54;s;1pkt 1fpkt", shape=diamond, color=yellow];
4953[label="129.206.40.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.40.54:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
2033--2355[label="1;1pkt 1fpkt"];
2033--4953[label="1;1pkt 1fpkt"];
2355--4953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="129.206.40.54" src_port="4445"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
2379[label="56.139.127.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
2380[label="172.113.183.90;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.183.90:1188, 56.139.121.51:6667}[33.3333%]&lt;BR/&gt;{172.113.183.90:3599, 56.139.127.162:6665}[33.3333%]&lt;BR/&gt;{172.113.183.90:0, 197.212.247.172:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (25%)&lt;BR/&gt; 3599: (25%)&lt;BR/&gt; 0: (25%)&lt;BR/&gt; 6667: (12.5%)&lt;BR/&gt; 1188: (12.5%)&gt;];
}
2379--2380[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="197.212.247.172" src_ip="172.113.183.90"/>
      <filter dst_ip="56.139.127.162" dst_port="6665" src_ip="172.113.183.90" src_port="3599"/>
      <filter dst_ip="56.139.121.51" dst_port="6667" src_ip="172.113.183.90" src_port="1188"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
2381[label="198.170.116.192;d;127pkt 127fpkt", shape=diamond, color=yellow];
2382[label="199.181.144.161;s;155pkt 155fpkt", shape=diamond, color=yellow];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.144.161:80, 198.170.116.192:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63498: (0.35461%)&lt;BR/&gt; 63494: (0.35461%)&lt;BR/&gt; 63485: (0.35461%)&lt;BR/&gt; 63428: (0.35461%)&gt;];
}
2381--2382[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter dst_ip="198.170.116.192" src_ip="199.181.144.161" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="56.139.80.55"/>
      <from sec="1178341201" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
2132[label="200.18.76.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
2442[label="172.113.236.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.236.91:1070, 200.18.76.142:6664}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6664: (50%)&lt;BR/&gt; 1070: (50%)&gt;];
}
2132--2442[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.18.76.142" dst_port="6664" src_ip="172.113.236.91" src_port="1070"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
2484[label="134.128.10.160;s;600pkt 600fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.10.160:*, *:53}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.5%)&lt;BR/&gt; 25: (0.666667%)&lt;BR/&gt; 32769: (0.166667%)&lt;BR/&gt; 32768: (0.166667%)&lt;BR/&gt; 22691: (0.166667%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="134.128.10.160"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.68552,2.63015,999,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
13[label="53.108.29.20s;1pkt 1fpkt", shape=rectangle, color=red];
2666[label="199.181.144.130;d;9pkt 9fpkt", shape=diamond, color=yellow];
2669[label="53.108.29.20;s;2pkt 2fpkt", shape=diamond, color=yellow];
4483[label="53.108.29.20;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7537[label="53.108.29.20;2pkt 2fpkt", shape=invtriangle, color=brown];
9188[label="53.108.29.20;2pkt 2fpkt", shape=invhouse, color=bisque];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:123, 199.181.144.130:123}[30%]&lt;BR/&gt;{*:0, 199.181.144.130:0}[20%]&lt;BR/&gt;{*:*, 199.181.144.130:25}[20%]&lt;BR/&gt;{*:*, 199.181.144.130:995}[20%]&lt;BR/&gt;{53.108.29.20:*, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (19.4444%)&lt;BR/&gt; 33306: (16.6667%)&lt;BR/&gt; 123: (16.6667%)&lt;BR/&gt; 33362: (11.1111%)&lt;BR/&gt; 110: (11.1111%)&gt;];
}
13--2666[label="1;1pkt 1fpkt"];
13--2669[label="1;1pkt 1fpkt"];
13--4483[label="1;1pkt 1fpkt"];
13--7537[label="1;1pkt 1fpkt"];
13--9188[label="1;1pkt 1fpkt"];
2666--2669[label="0.5;1pkt 1fpkt"];
2666--4483[label="0.5;1pkt 1fpkt"];
2666--7537[label="0.5;1pkt 1fpkt"];
2666--9188[label="0.5;1pkt 1fpkt"];
2669--4483[label="1;2pkt 2fpkt"];
2669--7537[label="1;2pkt 2fpkt"];
2669--9188[label="1;2pkt 2fpkt"];
4483--7537[label="1;2pkt 2fpkt"];
4483--9188[label="1;2pkt 2fpkt"];
7537--9188[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="53.108.29.20"/>
      <filter dst_ip="199.181.144.130" dst_port="995"/>
      <filter dst_ip="199.181.144.130" dst_port="25"/>
      <filter dst_ip="199.181.144.130" dst_port="123" src_port="123"/>
      <filter dst_ip="199.181.144.130"/>
    </slice>
    <from sec="1178341780" usec="0"/>
    <to sec="1178342018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
2610[label="54.128.34.113;s;3pkt 3fpkt", shape=diamond, color=yellow];
2680[label="134.128.88.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.34.113:54387, 134.128.88.9:80}[33.3333%]&lt;BR/&gt;{54.128.34.113:36245, 199.181.134.156:80}[33.3333%]&lt;BR/&gt;{54.128.34.113:54133, 199.181.134.156:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54387: (25%)&lt;BR/&gt; 54133: (12.5%)&lt;BR/&gt; 36245: (12.5%)&gt;];
}
2610--2680[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.134.156" dst_port="80" src_ip="54.128.34.113" src_port="54133"/>
      <filter dst_ip="199.181.134.156" dst_port="80" src_ip="54.128.34.113" src_port="36245"/>
      <filter dst_ip="134.128.88.9" dst_port="80" src_ip="54.128.34.113" src_port="54387"/>
    </slice>
    <from sec="1178341679" usec="0"/>
    <to sec="1178341846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.56681,2.69447,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
12[label="134.149.26.20s;48pkt 48fpkt", shape=rectangle, color=red];
2683[label="198.48.3.211;d;49pkt 49fpkt", shape=diamond, color=yellow];
2684[label="134.149.26.20;s;48pkt 48fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.26.20:*, 198.48.3.211:80}[97.9592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59188: (1.03448%)&lt;BR/&gt; 59187: (1.03448%)&lt;BR/&gt; 59186: (1.03448%)&lt;BR/&gt; 59185: (1.03448%)&gt;];
}
12--2683[label="1;48pkt 48fpkt"];
12--2684[label="1;48pkt 48fpkt"];
2683--2684[label="1;48pkt 48fpkt"];
2683--6439[label="0.1;1pkt 1fpkt"];
2683--8583[label="0.1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.3.211" dst_port="80" src_ip="134.149.26.20"/>
    </slice>
    <from sec="1178341837" usec="0"/>
    <to sec="1178341899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.117.242.223"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="208.17.162.53"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.153.201.183"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.153.205.13"/>
      <from sec="1178341200" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.824914,2.68815,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
302[label="145.206.203.84;s;770pkt 770fpkt", shape=diamond, color=yellow];
2763[label="210.64.27.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
2790[label="216.217.64.213;d;20pkt 20fpkt", shape=diamond, color=yellow];
7996[label="145.206.203.84;797pkt 797fpkt", shape=invtriangle, color=brown];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.203.84:45343, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45343: (50%)&lt;BR/&gt; 10000: (0.251889%)&lt;BR/&gt; 59317: (0.188917%)&lt;BR/&gt; 1057: (0.188917%)&lt;BR/&gt; 63477: (0.125945%)&gt;];
}
302--2763[label="1;1pkt 1fpkt"];
302--2790[label="1;20pkt 20fpkt"];
302--7996[label="0.998701;769pkt 769fpkt"];
2763--7996[label="1;1pkt 1fpkt"];
2790--7996[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="145.206.203.84" src_port="45343"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
2632[label="202.209.242.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
2771[label="172.113.175.15;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.175.15:1919, 202.209.242.135:22}[33.3333%]&lt;BR/&gt;{172.113.175.15:3727, 215.117.242.204:5050}[33.3333%]&lt;BR/&gt;{172.113.175.15:3312, 215.117.242.242:5050}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5050: (25%)&lt;BR/&gt; 1919: (25%)&lt;BR/&gt; 22: (25%)&lt;BR/&gt; 3727: (12.5%)&lt;BR/&gt; 3312: (12.5%)&gt;];
}
2632--2771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.117.242.242" dst_port="5050" src_ip="172.113.175.15" src_port="3312"/>
      <filter dst_ip="215.117.242.204" dst_port="5050" src_ip="172.113.175.15" src_port="3727"/>
      <filter dst_ip="202.209.242.135" dst_port="22" src_ip="172.113.175.15" src_port="1919"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.128.162.190"/>
      <from sec="1178341207" usec="0"/>
      <to sec="1178342026" usec="0"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.824914,2.68815,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
2609[label="54.128.34.113;d;3pkt 3fpkt", shape=diamond, color=yellow];
2959[label="134.128.88.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
7445[label="134.128.88.9;1pkt 1fpkt", shape=invtriangle, color=brown];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.88.9:80, 54.128.34.113:54387}[33.3333%]&lt;BR/&gt;{199.181.134.156:80, 54.128.34.113:36245}[33.3333%]&lt;BR/&gt;{199.181.134.156:80, 54.128.34.113:54133}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54387: (30%)&lt;BR/&gt; 54133: (10%)&lt;BR/&gt; 36245: (10%)&gt;];
}
2609--2959[label="1;1pkt 1fpkt"];
2609--7445[label="1;1pkt 1fpkt"];
2959--7445[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="54.128.34.113" dst_port="54133" src_ip="199.181.134.156" src_port="80"/>
      <filter dst_ip="54.128.34.113" dst_port="36245" src_ip="199.181.134.156" src_port="80"/>
      <filter dst_ip="54.128.34.113" dst_port="54387" src_ip="134.128.88.9" src_port="80"/>
    </slice>
    <from sec="1178341679" usec="0"/>
    <to sec="1178341847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
2953[label="134.2.35.200;s;3pkt 3fpkt", shape=diamond, color=yellow];
2971[label="52.97.147.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
6765[label="134.2.35.200;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.2.35.200:80, 68.157.227.108:*}[28.5714%]&lt;BR/&gt;{134.2.35.200:80, 52.96.82.192:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35929: (13.6364%)&lt;BR/&gt; 38406: (9.09091%)&lt;BR/&gt; 35591: (9.09091%)&lt;BR/&gt; 53215: (4.54545%)&gt;];
}
2953--2971[label="1;1pkt 1fpkt"];
2953--6765[label="1;3pkt 3fpkt"];
2971--6765[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="52.96.82.192" src_ip="134.2.35.200" src_port="80"/>
      <filter dst_ip="68.157.227.108" src_ip="134.2.35.200" src_port="80"/>
    </slice>
    <from sec="1178341471" usec="0"/>
    <to sec="1178341897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
2952[label="128.122.82.239;s;150pkt 150fpkt", shape=diamond, color=yellow];
2990[label="92.5.182.172;d;107pkt 107fpkt", shape=diamond, color=yellow];
7182[label="128.122.82.239;225pkt 225fpkt", shape=pentagon, color=darkviolet];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.82.239:80, 92.5.182.172:*}[76%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1359: (0.414938%)&lt;BR/&gt; 1567: (0.311203%)&lt;BR/&gt; 1565: (0.311203%)&lt;BR/&gt; 1563: (0.311203%)&gt;];
}
2952--2990[label="1;107pkt 107fpkt"];
2952--7182[label="1;150pkt 150fpkt"];
2990--7182[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="92.5.182.172" src_ip="128.122.82.239" src_port="80"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.117.242.234"/>
      <from sec="1178341203" usec="0"/>
      <to sec="1178342027" usec="0"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
2155[label="155.255.219.238;s;1009pkt 1009fpkt", shape=diamond, color=yellow];
3115[label="213.200.198.109;d;41pkt 41fpkt", shape=diamond, color=yellow];
3189[label="89.92.17.71;d;960pkt 960fpkt", shape=diamond, color=yellow];
7175[label="155.255.219.238;1490pkt 1490fpkt", shape=pentagon, color=darkviolet];
9010[label="155.255.219.238;1490pkt 1490fpkt", shape=invtriangle, color=brown];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.219.238:*, 89.92.17.71:*}[96.6443%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3077: (0.12024%)&lt;BR/&gt; 16628: (0.0801603%)&lt;BR/&gt; 16627: (0.0801603%)&lt;BR/&gt; 16626: (0.0801603%)&lt;BR/&gt; 16625: (0.0801603%)&gt;];
}
2155--3115[label="1;41pkt 41fpkt"];
2155--3189[label="1;960pkt 960fpkt"];
2155--7175[label="1;1009pkt 1009fpkt"];
2155--9010[label="1;1009pkt 1009fpkt"];
3115--7175[label="1;41pkt 41fpkt"];
3115--9010[label="1;41pkt 41fpkt"];
3189--7175[label="1;960pkt 960fpkt"];
3189--9010[label="1;960pkt 960fpkt"];
7175--9010[label="1;1490pkt 1490fpkt"];
</description>
    <slice>
      <filter dst_ip="89.92.17.71" src_ip="155.255.219.238"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
2948[label="155.255.106.217;s;77pkt 77fpkt", shape=diamond, color=yellow];
3166[label="198.48.3.4;d;15pkt 15fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.106.217:*, 13.227.0.146:80}[27.2727%]&lt;BR/&gt;{155.255.106.217:*, 13.227.0.177:80}[24.6753%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4711: (1.08696%)&lt;BR/&gt; 4710: (1.08696%)&lt;BR/&gt; 4673: (1.08696%)&lt;BR/&gt; 4672: (1.08696%)&gt;];
}
2948--3166[label="1;15pkt 15fpkt"];
2948--4061[label="0.012987;1pkt 1fpkt"];
2948--4105[label="0.012987;1pkt 1fpkt"];
2948--4141[label="0.012987;1pkt 1fpkt"];
3166--4061[label="0.0666667;1pkt 1fpkt"];
3166--4105[label="0.0666667;1pkt 1fpkt"];
3166--4141[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.227.0.146" dst_port="80" src_ip="155.255.106.217"/>
      <filter dst_ip="13.227.0.177" dst_port="80" src_ip="155.255.106.217"/>
    </slice>
    <from sec="1178341594" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
3197[label="8.117.155.179;d;74pkt 74fpkt", shape=diamond, color=yellow];
3198[label="198.150.160.98;s;74pkt 74fpkt", shape=diamond, color=yellow];
5551[label="198.150.160.98;74pkt 74fpkt", shape=pentagon, color=darkviolet];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.150.160.98:443, 8.117.155.179:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1869: (0.675676%)&lt;BR/&gt; 1868: (0.675676%)&lt;BR/&gt; 1867: (0.675676%)&lt;BR/&gt; 1866: (0.675676%)&gt;];
}
3197--3198[label="1;74pkt 74fpkt"];
3197--5551[label="1;74pkt 74fpkt"];
3198--5551[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="8.117.155.179" src_ip="198.150.160.98" src_port="443"/>
    </slice>
    <from sec="1178341905" usec="0"/>
    <to sec="1178341962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910024,2.66762,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
3227[label="128.19.212.175;s;15pkt 15fpkt", shape=diamond, color=yellow];
3229[label="168.77.77.233;d;10pkt 10fpkt", shape=diamond, color=yellow];
6458[label="128.19.212.175;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9762[label="128.19.212.175;15pkt 15fpkt", shape=invhouse, color=bisque];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.212.175:*, 168.77.77.233:80}[66.6667%]&lt;BR/&gt;{128.19.212.175:*, 168.77.77.255:80}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62500: (3.63636%)&lt;BR/&gt; 61707: (3.63636%)&lt;BR/&gt; 61353: (3.63636%)&lt;BR/&gt; 60657: (3.63636%)&gt;];
}
3227--3229[label="1;10pkt 10fpkt"];
3227--6458[label="1;15pkt 15fpkt"];
3227--9762[label="1;15pkt 15fpkt"];
3229--6458[label="1;10pkt 10fpkt"];
3229--9762[label="1;10pkt 10fpkt"];
6458--9762[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="168.77.77.233" dst_port="80" src_ip="128.19.212.175"/>
      <filter dst_ip="168.77.77.255" dst_port="80" src_ip="128.19.212.175"/>
    </slice>
    <from sec="1178341975" usec="0"/>
    <to sec="1178342041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
879[label="134.149.64.163;s;167pkt 167fpkt", shape=diamond, color=yellow];
3235[label="212.188.147.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
3343[label="134.149.64.163;s;167pkt 167fpkt", shape=hexagon, color=black];
3966[label="212.188.147.6;d;1pkt 1fpkt", shape=hexagon, color=black];
6299[label="134.149.64.163;187pkt 187fpkt", shape=pentagon, color=darkviolet];
8507[label="134.149.64.163;187pkt 187fpkt", shape=invtriangle, color=brown];
9708[label="134.149.64.163;187pkt 187fpkt", shape=invhouse, color=bisque];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.64.163:25, *:*}[99.4652%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6098%)&lt;BR/&gt; 4040: (0.613155%)&lt;BR/&gt; 4638: (0.557414%)&lt;BR/&gt; 4172: (0.557414%)&lt;BR/&gt; 3702: (0.557414%)&gt;];
}
879--3235[label="1;1pkt 1fpkt"];
879--3343[label="1;167pkt 167fpkt"];
879--3966[label="1;1pkt 1fpkt"];
879--6299[label="1;167pkt 167fpkt"];
879--8507[label="1;167pkt 167fpkt"];
879--9708[label="1;167pkt 167fpkt"];
3235--3343[label="1;1pkt 1fpkt"];
3235--3966[label="1;1pkt 1fpkt"];
3235--6299[label="1;1pkt 1fpkt"];
3235--8507[label="1;1pkt 1fpkt"];
3235--9708[label="1;1pkt 1fpkt"];
3343--3966[label="1;1pkt 1fpkt"];
3343--6299[label="1;167pkt 167fpkt"];
3343--8507[label="1;167pkt 167fpkt"];
3343--9708[label="1;167pkt 167fpkt"];
3966--6299[label="1;1pkt 1fpkt"];
3966--8507[label="1;1pkt 1fpkt"];
3966--9708[label="1;1pkt 1fpkt"];
6299--8507[label="1;187pkt 187fpkt"];
6299--9708[label="1;187pkt 187fpkt"];
8507--9708[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter src_ip="134.149.64.163" src_port="25"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="56.133.44.232"/>
      <from sec="1178341995" usec="0"/>
      <to sec="1178342002" usec="0"/>
    </slice>
    <from sec="1178341995" usec="0"/>
    <to sec="1178342002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="53.153.220.103"/>
      <from sec="1178342010" usec="0"/>
      <to sec="1178342028" usec="0"/>
    </slice>
    <from sec="1178342010" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
344[label="199.181.157.0;d;889pkt 889fpkt", shape=diamond, color=yellow];
345[label="198.234.142.45;s;3883pkt 3883fpkt", shape=diamond, color=yellow];
375[label="199.181.144.159;d;943pkt 943fpkt", shape=diamond, color=yellow];
3328[label="199.181.157.0;d;780pkt 780fpkt", shape=hexagon, color=black];
3428[label="199.181.144.159;d;943pkt 943fpkt", shape=hexagon, color=black];
4854[label="198.234.142.45;4239pkt 4239fpkt", shape=pentagon, color=darkviolet];
7729[label="198.234.142.45;4233pkt 4233fpkt", shape=invtriangle, color=brown];
9291[label="198.234.142.45;4233pkt 4233fpkt", shape=invhouse, color=bisque];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.234.142.45:*, 199.181.144.159:21}[26.8396%]&lt;BR/&gt;{198.234.142.45:*, 199.181.157.0:21}[25.4953%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.995%)&lt;BR/&gt; 56954: (0.039716%)&lt;BR/&gt; 56653: (0.039716%)&lt;BR/&gt; 40781: (0.039716%)&lt;BR/&gt; 60582: (0.0347515%)&gt;];
}
344--345[label="1;889pkt 889fpkt"];
344--3328[label="1;780pkt 780fpkt"];
344--4854[label="1;889pkt 889fpkt"];
344--7729[label="0.996625;886pkt 886fpkt"];
344--9291[label="0.996625;886pkt 886fpkt"];
345--375[label="0.99894;942pkt 942fpkt"];
345--3328[label="1;780pkt 780fpkt"];
345--3428[label="0.99894;942pkt 942fpkt"];
345--4854[label="1;3883pkt 3883fpkt"];
345--7729[label="0.998455;3877pkt 3877fpkt"];
345--9291[label="0.998455;3877pkt 3877fpkt"];
375--997[label="0.00106045;1pkt 1fpkt"];
375--3361[label="0.00106045;1pkt 1fpkt"];
375--3428[label="1;943pkt 943fpkt"];
375--3983[label="0.00106045;1pkt 1fpkt"];
375--4051[label="0.00106045;1pkt 1fpkt"];
375--4096[label="0.00106045;1pkt 1fpkt"];
375--4135[label="0.00106045;1pkt 1fpkt"];
375--4854[label="0.99894;942pkt 942fpkt"];
375--5108[label="0.00106045;1pkt 1fpkt"];
375--7729[label="0.996819;940pkt 940fpkt"];
375--7854[label="0.00106045;1pkt 1fpkt"];
375--9291[label="0.996819;940pkt 940fpkt"];
375--9354[label="0.00106045;1pkt 1fpkt"];
3328--4854[label="1;780pkt 780fpkt"];
3328--7729[label="0.996154;777pkt 777fpkt"];
3328--9291[label="0.996154;777pkt 777fpkt"];
3428--3983[label="0.00106045;1pkt 1fpkt"];
3428--4051[label="0.00106045;1pkt 1fpkt"];
3428--4096[label="0.00106045;1pkt 1fpkt"];
3428--4135[label="0.00106045;1pkt 1fpkt"];
3428--4854[label="0.99894;942pkt 942fpkt"];
3428--5108[label="0.00106045;1pkt 1fpkt"];
3428--7729[label="0.996819;940pkt 940fpkt"];
3428--7854[label="0.00106045;1pkt 1fpkt"];
3428--9291[label="0.996819;940pkt 940fpkt"];
3428--9354[label="0.00106045;1pkt 1fpkt"];
4854--7729[label="1;4233pkt 4233fpkt"];
4854--9291[label="1;4233pkt 4233fpkt"];
7729--9291[label="1;4233pkt 4233fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.144.159" dst_port="21" src_ip="198.234.142.45"/>
      <filter dst_ip="199.181.157.0" dst_port="21" src_ip="198.234.142.45"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
991[label="216.137.109.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
3357[label="216.137.109.230;s;2pkt 2fpkt", shape=hexagon, color=black];
7094[label="216.137.109.230;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8949[label="216.137.109.230;2pkt 2fpkt", shape=invtriangle, color=brown];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.137.109.230:0, 199.181.144.154:0}[50%]&lt;BR/&gt;{216.137.109.230:0, 199.181.155.195:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
991--3357[label="1;1pkt 1fpkt"];
991--7094[label="1;1pkt 1fpkt"];
991--8949[label="1;1pkt 1fpkt"];
3357--7094[label="1;2pkt 2fpkt"];
3357--8949[label="1;2pkt 2fpkt"];
7094--8949[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.155.195" src_ip="216.137.109.230"/>
      <filter dst_ip="199.181.144.154" src_ip="216.137.109.230"/>
    </slice>
    <from sec="1178341312" usec="0"/>
    <to sec="1178342024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
566[label="58.19.4.36;s;281pkt 281fpkt", shape=diamond, color=yellow];
567[label="198.155.84.203;d;298pkt 298fpkt", shape=diamond, color=yellow];
3396[label="58.19.4.36;s;214pkt 214fpkt", shape=hexagon, color=black];
3397[label="198.155.84.203;d;298pkt 298fpkt", shape=hexagon, color=black];
4696[label="58.19.4.36;281pkt 281fpkt", shape=pentagon, color=darkviolet];
6214[label="192.196.12.155;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7649[label="58.19.4.36;281pkt 281fpkt", shape=invtriangle, color=brown];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.19.4.36:80, 198.155.84.203:*}[92.4092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5201%)&lt;BR/&gt; 2065: (0.179964%)&lt;BR/&gt; 2063: (0.179964%)&lt;BR/&gt; 2062: (0.179964%)&lt;BR/&gt; 2061: (0.179964%)&gt;];
}
566--567[label="0.996441;280pkt 280fpkt"];
566--2347[label="0.00403226;1pkt 1fpkt"];
566--3396[label="1;214pkt 214fpkt"];
566--3397[label="0.996441;280pkt 280fpkt"];
566--4696[label="1;281pkt 281fpkt"];
566--7649[label="1;281pkt 281fpkt"];
567--3396[label="0.995327;213pkt 213fpkt"];
567--3397[label="1;298pkt 298fpkt"];
567--4575[label="0.0100671;3pkt 3fpkt"];
567--4696[label="0.996441;280pkt 280fpkt"];
567--5964[label="0.0033557;1pkt 1fpkt"];
567--6214[label="0.714286;10pkt 10fpkt"];
567--6493[label="0.00395257;1pkt 1fpkt"];
567--7582[label="0.0100671;3pkt 3fpkt"];
567--7649[label="0.996441;280pkt 280fpkt"];
567--8317[label="0.0033557;1pkt 1fpkt"];
567--8615[label="0.00395257;1pkt 1fpkt"];
567--9209[label="0.0100671;3pkt 3fpkt"];
567--9609[label="0.0033557;1pkt 1fpkt"];
3396--3397[label="0.995327;213pkt 213fpkt"];
3396--4696[label="1;214pkt 214fpkt"];
3396--7649[label="1;214pkt 214fpkt"];
3397--4575[label="0.0100671;3pkt 3fpkt"];
3397--4696[label="0.996441;280pkt 280fpkt"];
3397--5964[label="0.0033557;1pkt 1fpkt"];
3397--6214[label="0.714286;10pkt 10fpkt"];
3397--6493[label="0.00395257;1pkt 1fpkt"];
3397--7582[label="0.0100671;3pkt 3fpkt"];
3397--7649[label="0.996441;280pkt 280fpkt"];
3397--8317[label="0.0033557;1pkt 1fpkt"];
3397--8615[label="0.00395257;1pkt 1fpkt"];
3397--9209[label="0.0100671;3pkt 3fpkt"];
3397--9609[label="0.0033557;1pkt 1fpkt"];
4696--7649[label="1;281pkt 281fpkt"];
</description>
    <slice>
      <filter dst_ip="198.155.84.203" src_ip="58.19.4.36" src_port="80"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
917[label="198.150.26.175;s;1129pkt 1129fpkt", shape=diamond, color=yellow];
1387[label="58.128.52.93;d;170pkt 170fpkt", shape=diamond, color=yellow];
1682[label="40.164.3.16;d;226pkt 226fpkt", shape=diamond, color=yellow];
3407[label="58.128.52.93;d;170pkt 170fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.150.26.175:25, *:*}[36.6696%]&lt;BR/&gt;{198.150.26.175:*, *:113}[36.0496%]&lt;BR/&gt;{198.150.26.175:2251, *:53}[26.5722%]&lt;BR/&gt;{198.150.26.175:*, 40.164.3.16:*}[20.0177%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (20.826%)&lt;BR/&gt; 113: (20.295%)&lt;BR/&gt; 2251: (8.84956%)&lt;BR/&gt; 53: (8.84956%)&lt;BR/&gt; 4640: (0.117994%)&gt;];
}
917--1048[label="0.00847458;1pkt 1fpkt"];
917--1163[label="0.0078125;1pkt 1fpkt"];
917--1387[label="1;170pkt 170fpkt"];
917--1682[label="1;226pkt 226fpkt"];
917--2142[label="0.00892857;1pkt 1fpkt"];
917--3029[label="0.015873;1pkt 1fpkt"];
917--3042[label="0.0138889;1pkt 1fpkt"];
917--3045[label="0.0111111;1pkt 1fpkt"];
917--3082[label="0.0140845;1pkt 1fpkt"];
917--3407[label="1;170pkt 170fpkt"];
917--3414[label="0.0147059;1pkt 1fpkt"];
917--3729[label="0.0070922;2pkt 2fpkt"];
917--4039[label="0.00179856;1pkt 1fpkt"];
917--4060[label="0.00354296;4pkt 4fpkt"];
917--4084[label="0.00179856;1pkt 1fpkt"];
917--4104[label="0.00354296;4pkt 4fpkt"];
917--4125[label="0.00179856;1pkt 1fpkt"];
917--4140[label="0.00354296;4pkt 4fpkt"];
1387--3407[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_ip="40.164.3.16" src_ip="198.150.26.175"/>
      <filter src_ip="198.150.26.175" src_port="25"/>
      <filter dst_port="113" src_ip="198.150.26.175"/>
      <filter dst_port="53" src_ip="198.150.26.175" src_port="2251"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
221[label="91.76.34.92;d;27pkt 27fpkt", shape=diamond, color=yellow];
222[label="145.206.151.193;s;98pkt 98fpkt", shape=diamond, color=yellow];
270[label="56.150.33.169;d;26pkt 26fpkt", shape=diamond, color=yellow];
274[label="53.34.222.140;d;29pkt 29fpkt", shape=diamond, color=yellow];
1856[label="54.205.16.38;d;3pkt 3fpkt", shape=diamond, color=yellow];
2388[label="53.34.223.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
2395[label="53.34.222.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
3416[label="91.76.34.92;d;16pkt 16fpkt", shape=hexagon, color=black];
3658[label="56.150.33.169;d;23pkt 23fpkt", shape=hexagon, color=black];
3659[label="53.34.222.140;d;24pkt 24fpkt", shape=hexagon, color=black];
6679[label="145.206.151.193;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.151.193:*, 56.150.33.169:12043}[28.5714%]&lt;BR/&gt;{145.206.151.193:*, 91.76.34.92:12043}[28.5714%]&lt;BR/&gt;{145.206.151.193:*, 53.34.222.140:12043}[27.551%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12043: (43.254%)&lt;BR/&gt; 13005: (2.57937%)&lt;BR/&gt; 4346: (2.57937%)&lt;BR/&gt; 4362: (2.38095%)&lt;BR/&gt; 12035: (2.18254%)&gt;];
}
221--222[label="1;27pkt 27fpkt"];
221--3416[label="1;16pkt 16fpkt"];
222--270[label="1;26pkt 26fpkt"];
222--274[label="1;29pkt 29fpkt"];
222--1856[label="1;3pkt 3fpkt"];
222--2388[label="1;2pkt 2fpkt"];
222--2395[label="1;2pkt 2fpkt"];
222--3416[label="1;16pkt 16fpkt"];
222--3658[label="1;23pkt 23fpkt"];
222--3659[label="1;24pkt 24fpkt"];
222--6679[label="1;2pkt 2fpkt"];
270--3658[label="1;23pkt 23fpkt"];
270--6679[label="0.5;1pkt 1fpkt"];
274--3659[label="1;24pkt 24fpkt"];
274--6679[label="0.5;1pkt 1fpkt"];
3658--6679[label="0.5;1pkt 1fpkt"];
3659--6679[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="91.76.34.92" dst_port="12043" src_ip="145.206.151.193"/>
      <filter dst_ip="56.150.33.169" dst_port="12043" src_ip="145.206.151.193"/>
      <filter dst_ip="53.34.222.140" dst_port="12043" src_ip="145.206.151.193"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
359[label="12.77.158.54;d;52pkt 52fpkt", shape=diamond, color=yellow];
884[label="93.80.13.182;d;3pkt 3fpkt", shape=diamond, color=yellow];
972[label="93.41.3.76;d;6pkt 6fpkt", shape=diamond, color=yellow];
1097[label="54.128.34.50;d;53pkt 53fpkt", shape=diamond, color=yellow];
1431[label="199.181.157.19;s;167pkt 167fpkt", shape=diamond, color=yellow];
3425[label="54.128.34.50;d;24pkt 24fpkt", shape=hexagon, color=black];
3713[label="93.80.13.182;d;3pkt 3fpkt", shape=hexagon, color=black];
3906[label="199.181.157.19;s;167pkt 167fpkt", shape=hexagon, color=black];
4476[label="199.181.157.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7534[label="199.181.157.19;2pkt 2fpkt", shape=invtriangle, color=brown];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.157.19:*, 54.128.34.50:*}[31.5476%]&lt;BR/&gt;{199.181.157.19:21, 12.77.158.54:*}[27.9762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (28.0793%)&lt;BR/&gt; 80: (7.51566%)&lt;BR/&gt; 25065: (0.521921%)&lt;BR/&gt; 3803: (0.521921%)&lt;BR/&gt; 64932: (0.417537%)&gt;];
}
359--1431[label="1;52pkt 52fpkt"];
359--3906[label="1;52pkt 52fpkt"];
359--4053[label="0.0192308;1pkt 1fpkt"];
359--4098[label="0.0192308;1pkt 1fpkt"];
359--4137[label="0.0192308;1pkt 1fpkt"];
359--4476[label="0.5;1pkt 1fpkt"];
359--7534[label="0.5;1pkt 1fpkt"];
884--1431[label="1;3pkt 3fpkt"];
884--3713[label="1;3pkt 3fpkt"];
884--3906[label="1;3pkt 3fpkt"];
972--1431[label="1;6pkt 6fpkt"];
972--3906[label="1;6pkt 6fpkt"];
1097--1431[label="1;53pkt 53fpkt"];
1097--3425[label="1;24pkt 24fpkt"];
1097--3906[label="1;53pkt 53fpkt"];
1431--2651[label="0.333333;1pkt 1fpkt"];
1431--3360[label="0.00598802;1pkt 1fpkt"];
1431--3425[label="1;24pkt 24fpkt"];
1431--3713[label="1;3pkt 3fpkt"];
1431--3906[label="1;167pkt 167fpkt"];
1431--4053[label="0.00598802;1pkt 1fpkt"];
1431--4098[label="0.00598802;1pkt 1fpkt"];
1431--4137[label="0.00598802;1pkt 1fpkt"];
1431--4476[label="0.5;1pkt 1fpkt"];
1431--7534[label="0.5;1pkt 1fpkt"];
3425--3906[label="1;24pkt 24fpkt"];
3713--3906[label="1;3pkt 3fpkt"];
3906--4053[label="0.00598802;1pkt 1fpkt"];
3906--4098[label="0.00598802;1pkt 1fpkt"];
3906--4137[label="0.00598802;1pkt 1fpkt"];
3906--4476[label="0.5;1pkt 1fpkt"];
3906--7534[label="0.5;1pkt 1fpkt"];
4476--7534[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="54.128.34.50" src_ip="199.181.157.19"/>
      <filter dst_ip="12.77.158.54" src_ip="199.181.157.19" src_port="21"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
1166[label="202.19.98.88;s;904pkt 904fpkt", shape=diamond, color=yellow];
3445[label="202.19.98.88;s;425pkt 425fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.19.98.88:*, *:2967}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 8409: (0.188111%)&lt;BR/&gt; 8193: (0.150489%)&lt;BR/&gt; 8176: (0.150489%)&lt;BR/&gt; 7911: (0.150489%)&gt;];
}
1166--1198[label="0.00414938;1pkt 1fpkt"];
1166--3445[label="1;425pkt 425fpkt"];
</description>
    <slice>
      <filter dst_port="2967" src_ip="202.19.98.88"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
575[label="218.32.147.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
883[label="134.128.117.3;s;378pkt 378fpkt", shape=diamond, color=yellow];
1339[label="68.154.77.255;d;3pkt 3fpkt", shape=diamond, color=yellow];
2336[label="204.80.82.21;d;235pkt 235fpkt", shape=diamond, color=yellow];
2621[label="194.65.9.9;d;6pkt 6fpkt", shape=diamond, color=yellow];
2981[label="193.122.166.42;d;24pkt 24fpkt", shape=diamond, color=yellow];
3454[label="134.128.117.3;s;378pkt 378fpkt", shape=hexagon, color=black];
3490[label="218.32.147.47;d;1pkt 1fpkt", shape=hexagon, color=black];
3780[label="68.154.77.255;d;3pkt 3fpkt", shape=hexagon, color=black];
3957[label="194.65.9.9;d;6pkt 6fpkt", shape=hexagon, color=black];
3960[label="204.80.82.21;d;235pkt 235fpkt", shape=hexagon, color=black];
4215[label="134.128.117.3;378pkt 378fpkt", shape=pentagon, color=darkviolet];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.117.3:*, 204.80.82.21:80}[61.5183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1965: (0.182039%)&lt;BR/&gt; 1973: (0.151699%)&lt;BR/&gt; 1972: (0.151699%)&lt;BR/&gt; 1971: (0.151699%)&gt;];
}
575--883[label="1;1pkt 1fpkt"];
575--3454[label="1;1pkt 1fpkt"];
575--3490[label="1;1pkt 1fpkt"];
575--4215[label="1;1pkt 1fpkt"];
883--1265[label="0.010101;1pkt 1fpkt"];
883--1339[label="1;3pkt 3fpkt"];
883--2336[label="1;235pkt 235fpkt"];
883--2459[label="0.0117647;1pkt 1fpkt"];
883--2621[label="1;6pkt 6fpkt"];
883--2981[label="0.833333;20pkt 20fpkt"];
883--3336[label="0.00531915;1pkt 1fpkt"];
883--3393[label="0.010101;1pkt 1fpkt"];
883--3454[label="1;378pkt 378fpkt"];
883--3490[label="1;1pkt 1fpkt"];
883--3780[label="1;3pkt 3fpkt"];
883--3957[label="1;6pkt 6fpkt"];
883--3960[label="1;235pkt 235fpkt"];
883--4026[label="0.015873;6pkt 6fpkt"];
883--4040[label="0.116402;44pkt 44fpkt"];
883--4061[label="0.00529101;2pkt 2fpkt"];
883--4074[label="0.015873;6pkt 6fpkt"];
883--4085[label="0.116402;44pkt 44fpkt"];
883--4105[label="0.00529101;2pkt 2fpkt"];
883--4115[label="0.015873;6pkt 6fpkt"];
883--4126[label="0.116402;44pkt 44fpkt"];
883--4141[label="0.00529101;2pkt 2fpkt"];
883--4215[label="1;378pkt 378fpkt"];
1339--3454[label="1;3pkt 3fpkt"];
1339--3780[label="1;3pkt 3fpkt"];
1339--4040[label="0.666667;2pkt 2fpkt"];
1339--4061[label="0.333333;1pkt 1fpkt"];
1339--4085[label="0.666667;2pkt 2fpkt"];
1339--4105[label="0.333333;1pkt 1fpkt"];
1339--4126[label="0.666667;2pkt 2fpkt"];
1339--4141[label="0.333333;1pkt 1fpkt"];
1339--4215[label="1;3pkt 3fpkt"];
2336--3454[label="1;235pkt 235fpkt"];
2336--3960[label="1;235pkt 235fpkt"];
2336--4215[label="1;235pkt 235fpkt"];
2621--3454[label="1;6pkt 6fpkt"];
2621--3957[label="1;6pkt 6fpkt"];
2621--4215[label="1;6pkt 6fpkt"];
2981--3454[label="0.833333;20pkt 20fpkt"];
2981--4215[label="0.833333;20pkt 20fpkt"];
3454--3490[label="1;1pkt 1fpkt"];
3454--3780[label="1;3pkt 3fpkt"];
3454--3957[label="1;6pkt 6fpkt"];
3454--3960[label="1;235pkt 235fpkt"];
3454--4026[label="0.015873;6pkt 6fpkt"];
3454--4040[label="0.116402;44pkt 44fpkt"];
3454--4061[label="0.00529101;2pkt 2fpkt"];
3454--4074[label="0.015873;6pkt 6fpkt"];
3454--4085[label="0.116402;44pkt 44fpkt"];
3454--4105[label="0.00529101;2pkt 2fpkt"];
3454--4115[label="0.015873;6pkt 6fpkt"];
3454--4126[label="0.116402;44pkt 44fpkt"];
3454--4141[label="0.00529101;2pkt 2fpkt"];
3454--4215[label="1;378pkt 378fpkt"];
3490--4215[label="1;1pkt 1fpkt"];
3780--4040[label="0.666667;2pkt 2fpkt"];
3780--4061[label="0.333333;1pkt 1fpkt"];
3780--4085[label="0.666667;2pkt 2fpkt"];
3780--4105[label="0.333333;1pkt 1fpkt"];
3780--4126[label="0.666667;2pkt 2fpkt"];
3780--4141[label="0.333333;1pkt 1fpkt"];
3780--4215[label="1;3pkt 3fpkt"];
3957--4215[label="1;6pkt 6fpkt"];
3960--4215[label="1;235pkt 235fpkt"];
</description>
    <slice>
      <filter dst_ip="204.80.82.21" dst_port="80" src_ip="134.128.117.3"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33809,2.62922,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1049[label="128.122.80.64;s;160pkt 160fpkt", shape=diamond, color=yellow];
3495[label="128.122.80.64;s;75pkt 75fpkt", shape=hexagon, color=black];
5075[label="128.122.80.64;170pkt 170fpkt", shape=pentagon, color=darkviolet];
9346[label="128.122.80.64;170pkt 170fpkt", shape=invhouse, color=bisque];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.80.64:25, 13.136.96.182:*}[22.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (43.8261%)&lt;BR/&gt; 110: (3.65217%)&lt;BR/&gt; 995: (2.52174%)&lt;BR/&gt; 4762: (0.695652%)&lt;BR/&gt; 64829: (0.347826%)&gt;];
}
1049--3495[label="1;75pkt 75fpkt"];
1049--5075[label="1;160pkt 160fpkt"];
1049--9346[label="1;160pkt 160fpkt"];
3495--5075[label="1;75pkt 75fpkt"];
3495--9346[label="1;75pkt 75fpkt"];
5075--9346[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_ip="13.136.96.182" src_ip="128.122.80.64" src_port="25"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
357[label="129.206.25.3;d;106pkt 106fpkt", shape=diamond, color=yellow];
765[label="93.21.29.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
1104[label="46.195.173.151;s;1pkt 1fpkt", shape=diamond, color=yellow];
1460[label="214.75.0.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
1853[label="88.203.236.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
3174[label="89.231.7.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
3575[label="214.75.0.158;s;1pkt 1fpkt", shape=hexagon, color=black];
3832[label="129.206.25.3;d;102pkt 102fpkt", shape=hexagon, color=black];
3852[label="88.203.236.109;s;1pkt 1fpkt", shape=hexagon, color=black];
6764[label="93.21.29.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.206.25.3:26938}[48.1132%]&lt;BR/&gt;{*:*, 129.206.25.3:1033}[21.6981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26938: (24.3056%)&lt;BR/&gt; 1033: (10.6481%)&lt;BR/&gt; 5420: (8.33333%)&lt;BR/&gt; 3014: (3.7037%)&lt;BR/&gt; 4662: (2.08333%)&gt;];
}
357--765[label="1;1pkt 1fpkt"];
357--1104[label="1;1pkt 1fpkt"];
357--1460[label="1;1pkt 1fpkt"];
357--1853[label="1;1pkt 1fpkt"];
357--2460[label="0.0128205;1pkt 1fpkt"];
357--3174[label="1;1pkt 1fpkt"];
357--3575[label="1;1pkt 1fpkt"];
357--3832[label="1;102pkt 102fpkt"];
357--3852[label="1;1pkt 1fpkt"];
357--6057[label="0.0105263;1pkt 1fpkt"];
357--6764[label="1;1pkt 1fpkt"];
357--8370[label="0.0105263;1pkt 1fpkt"];
765--3832[label="1;1pkt 1fpkt"];
765--6764[label="1;1pkt 1fpkt"];
1104--3832[label="1;1pkt 1fpkt"];
1460--3575[label="1;1pkt 1fpkt"];
1460--3832[label="1;1pkt 1fpkt"];
1853--3832[label="1;1pkt 1fpkt"];
1853--3852[label="1;1pkt 1fpkt"];
3174--3832[label="1;1pkt 1fpkt"];
3575--3832[label="1;1pkt 1fpkt"];
3832--3852[label="1;1pkt 1fpkt"];
3832--6057[label="0.0105263;1pkt 1fpkt"];
3832--6764[label="1;1pkt 1fpkt"];
3832--8370[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.25.3" dst_port="26938"/>
      <filter dst_ip="129.206.25.3" dst_port="1033"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
2112[label="217.78.172.203;s;430pkt 430fpkt", shape=diamond, color=yellow];
3594[label="217.78.172.203;s;285pkt 285fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.78.172.203:*, *:2967}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 4998: (0.27972%)&lt;BR/&gt; 4261: (0.27972%)&lt;BR/&gt; 3763: (0.27972%)&lt;BR/&gt; 3528: (0.27972%)&gt;];
}
2112--3594[label="1;285pkt 285fpkt"];
</description>
    <slice>
      <filter dst_port="2967" src_ip="217.78.172.203"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
165[label="198.15.217.57;s;1202pkt 1202fpkt", shape=diamond, color=yellow];
423[label="172.17.0.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
839[label="202.128.79.24;s;30pkt 30fpkt", shape=diamond, color=yellow];
1174[label="192.168.53.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
1194[label="10.211.1.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
1197[label="172.16.5.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
1224[label="10.160.8.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1548[label="10.26.131.7;d;2pkt 2fpkt", shape=diamond, color=yellow];
1801[label="10.26.131.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
1860[label="10.1.1.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
2079[label="10.26.131.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
2086[label="192.168.10.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
2113[label="202.184.243.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
2114[label="10.26.131.1;d;2pkt 2fpkt", shape=diamond, color=yellow];
2415[label="192.168.1.2;d;30pkt 30fpkt", shape=diamond, color=yellow];
2446[label="10.1.2.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
2700[label="10.5.53.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
2999[label="132.109.101.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
3028[label="202.182.106.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
3585[label="10.26.131.2;d;2pkt 2fpkt", shape=hexagon, color=black];
3586[label="202.128.79.24;s;23pkt 23fpkt", shape=hexagon, color=black];
3596[label="172.16.5.1;d;1pkt 1fpkt", shape=hexagon, color=black];
5001[label="198.15.217.57;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.15.217.57:53, *:*}[95.6245%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.3432%)&lt;BR/&gt; 32771: (1.25858%)&lt;BR/&gt; 9100: (0.915332%)&lt;BR/&gt; 1032: (0.762777%)&lt;BR/&gt; 1038: (0.572082%)&gt;];
}
165--423[label="1;1pkt 1fpkt"];
165--1174[label="1;1pkt 1fpkt"];
165--1194[label="1;1pkt 1fpkt"];
165--1197[label="1;1pkt 1fpkt"];
165--1224[label="1;1pkt 1fpkt"];
165--1548[label="0.5;1pkt 1fpkt"];
165--1801[label="0.5;1pkt 1fpkt"];
165--1860[label="1;1pkt 1fpkt"];
165--2079[label="0.5;1pkt 1fpkt"];
165--2086[label="1;1pkt 1fpkt"];
165--2113[label="1;1pkt 1fpkt"];
165--2114[label="0.5;1pkt 1fpkt"];
165--2415[label="0.166667;5pkt 5fpkt"];
165--2446[label="1;1pkt 1fpkt"];
165--2700[label="1;1pkt 1fpkt"];
165--2999[label="1;1pkt 1fpkt"];
165--3028[label="1;1pkt 1fpkt"];
165--3585[label="0.5;1pkt 1fpkt"];
165--3596[label="1;1pkt 1fpkt"];
165--4034[label="0.0166389;20pkt 20fpkt"];
165--4050[label="0.0183028;22pkt 22fpkt"];
165--4055[label="0.0199667;24pkt 24fpkt"];
165--4060[label="0.0133111;16pkt 16fpkt"];
165--4095[label="0.0183028;22pkt 22fpkt"];
165--4100[label="0.0199667;24pkt 24fpkt"];
165--4104[label="0.0133111;16pkt 16fpkt"];
165--4134[label="0.0183028;22pkt 22fpkt"];
165--4139[label="0.0199667;24pkt 24fpkt"];
165--4140[label="0.0133111;16pkt 16fpkt"];
165--5001[label="1;3pkt 3fpkt"];
839--1548[label="0.5;1pkt 1fpkt"];
839--1801[label="0.5;1pkt 1fpkt"];
839--2079[label="0.5;1pkt 1fpkt"];
839--2114[label="0.5;1pkt 1fpkt"];
839--3585[label="0.5;1pkt 1fpkt"];
839--3586[label="1;23pkt 23fpkt"];
1197--3596[label="1;1pkt 1fpkt"];
1548--3586[label="0.5;1pkt 1fpkt"];
1801--3586[label="0.5;1pkt 1fpkt"];
2079--3585[label="1;2pkt 2fpkt"];
2079--3586[label="0.5;1pkt 1fpkt"];
2079--5001[label="0.5;1pkt 1fpkt"];
2086--5001[label="1;1pkt 1fpkt"];
2114--3586[label="0.5;1pkt 1fpkt"];
3585--3586[label="0.5;1pkt 1fpkt"];
3585--5001[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="198.15.217.57" src_port="53"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1291[label="134.128.134.82;s;13pkt 13fpkt", shape=diamond, color=yellow];
3618[label="134.128.134.82;s;13pkt 13fpkt", shape=hexagon, color=black];
5340[label="134.128.134.82;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7984[label="134.128.134.82;14pkt 14fpkt", shape=invtriangle, color=brown];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.134.82:143, *:*}[42.8571%]&lt;BR/&gt;{134.128.134.82:443, *:*}[28.5714%]&lt;BR/&gt;{134.128.134.82:*, 88.216.198.169:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (22.2222%)&lt;BR/&gt; 443: (12.963%)&lt;BR/&gt; 993: (7.40741%)&lt;BR/&gt; 110: (7.40741%)&lt;BR/&gt; 59516: (3.7037%)&gt;];
}
1291--3618[label="1;13pkt 13fpkt"];
1291--5340[label="1;13pkt 13fpkt"];
1291--7984[label="1;13pkt 13fpkt"];
3618--5340[label="1;13pkt 13fpkt"];
3618--7984[label="1;13pkt 13fpkt"];
5340--7984[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="88.216.198.169" src_ip="134.128.134.82"/>
      <filter src_ip="134.128.134.82" src_port="143"/>
      <filter src_ip="134.128.134.82" src_port="443"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
2499[label="168.45.207.50;d;60pkt 60fpkt", shape=diamond, color=yellow];
2825[label="54.128.33.170;s;46pkt 46fpkt", shape=diamond, color=yellow];
6394[label="54.128.33.170;49pkt 49fpkt", shape=pentagon, color=darkviolet];
8559[label="54.128.33.170;49pkt 49fpkt", shape=invtriangle, color=brown];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.33.170:*, 168.45.207.50:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65530: (0.980392%)&lt;BR/&gt; 63522: (0.980392%)&lt;BR/&gt; 63117: (0.980392%)&lt;BR/&gt; 62962: (0.980392%)&gt;];
}
2499--2825[label="1;46pkt 46fpkt"];
2499--3519[label="0.116667;7pkt 7fpkt"];
2499--4026[label="0.05;3pkt 3fpkt"];
2499--4040[label="0.05;3pkt 3fpkt"];
2499--4074[label="0.05;3pkt 3fpkt"];
2499--4085[label="0.05;3pkt 3fpkt"];
2499--4115[label="0.05;3pkt 3fpkt"];
2499--4126[label="0.05;3pkt 3fpkt"];
2499--5421[label="0.162791;7pkt 7fpkt"];
2499--6394[label="0.938776;46pkt 46fpkt"];
2499--8559[label="0.938776;46pkt 46fpkt"];
2825--4026[label="0.0652174;3pkt 3fpkt"];
2825--4040[label="0.0652174;3pkt 3fpkt"];
2825--4074[label="0.0652174;3pkt 3fpkt"];
2825--4085[label="0.0652174;3pkt 3fpkt"];
2825--4115[label="0.0652174;3pkt 3fpkt"];
2825--4126[label="0.0652174;3pkt 3fpkt"];
2825--6394[label="1;46pkt 46fpkt"];
2825--8559[label="1;46pkt 46fpkt"];
6394--8559[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.207.50" dst_port="80" src_ip="54.128.33.170"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
2667[label="199.181.144.130;s;7pkt 7fpkt", shape=diamond, color=yellow];
2668[label="53.108.29.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
3817[label="53.108.29.20;d;2pkt 2fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.144.130:25, *:*}[37.5%]&lt;BR/&gt;{199.181.144.130:0, *:0}[25%]&lt;BR/&gt;{199.181.144.130:995, *:*}[25%]&lt;BR/&gt;{*:*, 53.108.29.20:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (18.1818%)&lt;BR/&gt; 0: (18.1818%)&lt;BR/&gt; 33306: (13.6364%)&lt;BR/&gt; 25: (13.6364%)&lt;BR/&gt; 33362: (9.09091%)&gt;];
}
2667--2668[label="0.5;1pkt 1fpkt"];
2667--3817[label="0.5;1pkt 1fpkt"];
2668--3817[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="53.108.29.20"/>
      <filter src_ip="199.181.144.130" src_port="25"/>
      <filter src_ip="199.181.144.130" src_port="995"/>
      <filter src_ip="199.181.144.130"/>
    </slice>
    <from sec="1178341780" usec="0"/>
    <to sec="1178342018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1793[label="199.232.4.115;s;474pkt 474fpkt", shape=diamond, color=yellow];
3837[label="199.232.4.115;s;430pkt 430fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.232.4.115:*, *:2967}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 4555: (0.276549%)&lt;BR/&gt; 3111: (0.276549%)&lt;BR/&gt; 4677: (0.221239%)&lt;BR/&gt; 4536: (0.221239%)&gt;];
}
1793--3837[label="1;430pkt 430fpkt"];
</description>
    <slice>
      <filter dst_port="2967" src_ip="199.232.4.115"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33809,2.62922,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1537[label="168.45.130.28;s;106pkt 106fpkt", shape=diamond, color=yellow];
3849[label="168.45.130.28;s;106pkt 106fpkt", shape=hexagon, color=black];
4599[label="168.45.130.28;116pkt 116fpkt", shape=pentagon, color=darkviolet];
9212[label="168.45.130.28;115pkt 115fpkt", shape=invhouse, color=bisque];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.130.28:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64124: (0.451467%)&lt;BR/&gt; 63649: (0.451467%)&lt;BR/&gt; 62997: (0.451467%)&lt;BR/&gt; 62311: (0.451467%)&gt;];
}
1537--3849[label="1;106pkt 106fpkt"];
1537--4599[label="1;106pkt 106fpkt"];
1537--9212[label="0.990566;105pkt 105fpkt"];
3849--4599[label="1;106pkt 106fpkt"];
3849--9212[label="0.990566;105pkt 105fpkt"];
4599--9212[label="1;115pkt 115fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.130.28" src_port="25"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
309[label="145.206.173.118;s;2004pkt 2004fpkt", shape=diamond, color=yellow];
838[label="213.89.62.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
1657[label="209.104.12.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
2378[label="209.105.113.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
2452[label="88.157.167.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
3444[label="213.89.62.158;d;1pkt 1fpkt", shape=hexagon, color=black];
3856[label="88.157.167.186;d;1pkt 1fpkt", shape=hexagon, color=black];
5803[label="145.206.173.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8231[label="145.206.173.118;1pkt 1fpkt", shape=invtriangle, color=brown];
9567[label="145.206.173.118;1pkt 1fpkt", shape=invhouse, color=bisque];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.173.118:*, *:2967}[97.4052%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (48.4848%)&lt;BR/&gt; 16179: (0.372578%)&lt;BR/&gt; 17515: (0.149031%)&lt;BR/&gt; 1848: (0.149031%)&lt;BR/&gt; 10241: (0.124193%)&gt;];
}
309--838[label="1;1pkt 1fpkt"];
309--1657[label="1;1pkt 1fpkt"];
309--2378[label="1;1pkt 1fpkt"];
309--2452[label="1;1pkt 1fpkt"];
309--3444[label="1;1pkt 1fpkt"];
309--3856[label="1;1pkt 1fpkt"];
309--5803[label="1;1pkt 1fpkt"];
309--8231[label="1;1pkt 1fpkt"];
309--9567[label="1;1pkt 1fpkt"];
838--3444[label="1;1pkt 1fpkt"];
838--5803[label="1;1pkt 1fpkt"];
838--8231[label="1;1pkt 1fpkt"];
838--9567[label="1;1pkt 1fpkt"];
2452--3856[label="1;1pkt 1fpkt"];
3444--5803[label="1;1pkt 1fpkt"];
3444--8231[label="1;1pkt 1fpkt"];
3444--9567[label="1;1pkt 1fpkt"];
5803--8231[label="1;1pkt 1fpkt"];
5803--9567[label="1;1pkt 1fpkt"];
8231--9567[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="2967" src_ip="145.206.173.118"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.68552,2.63015,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
45[label="129.206.190.238s;1pkt 1fpkt", shape=rectangle, color=red];
2777[label="56.155.234.138;d;54pkt 54fpkt", shape=diamond, color=yellow];
3187[label="129.206.190.238;s;8pkt 8fpkt", shape=diamond, color=yellow];
7173[label="129.206.190.238;28pkt 28fpkt", shape=pentagon, color=darkviolet];
9009[label="129.206.190.238;28pkt 28fpkt", shape=invtriangle, color=brown];
9976[label="129.206.190.238;28pkt 28fpkt", shape=invhouse, color=bisque];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 56.155.234.138:80}[66.6667%]&lt;BR/&gt;{129.206.190.238:*, *:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6395%)&lt;BR/&gt; 1061: (2.04082%)&lt;BR/&gt; 1060: (1.36054%)&lt;BR/&gt; 1058: (1.36054%)&lt;BR/&gt; 1057: (1.36054%)&gt;];
}
45--2777[label="1;1pkt 1fpkt"];
45--3187[label="1;1pkt 1fpkt"];
45--7173[label="1;1pkt 1fpkt"];
45--9009[label="1;1pkt 1fpkt"];
45--9976[label="1;1pkt 1fpkt"];
2777--2883[label="0.0185185;1pkt 1fpkt"];
2777--3116[label="0.0188679;1pkt 1fpkt"];
2777--3187[label="0.125;1pkt 1fpkt"];
2777--3202[label="0.0454545;1pkt 1fpkt"];
2777--3415[label="0.037037;2pkt 2fpkt"];
2777--3732[label="0.0204082;1pkt 1fpkt"];
2777--3820[label="0.0185185;1pkt 1fpkt"];
2777--3861[label="0.0185185;1pkt 1fpkt"];
2777--4026[label="0.0925926;5pkt 5fpkt"];
2777--4040[label="0.296296;16pkt 16fpkt"];
2777--4061[label="0.0185185;1pkt 1fpkt"];
2777--4074[label="0.0925926;5pkt 5fpkt"];
2777--4085[label="0.296296;16pkt 16fpkt"];
2777--4105[label="0.0185185;1pkt 1fpkt"];
2777--4115[label="0.0925926;5pkt 5fpkt"];
2777--4126[label="0.296296;16pkt 16fpkt"];
2777--4141[label="0.0185185;1pkt 1fpkt"];
2777--4174[label="0.0185185;1pkt 1fpkt"];
2777--4206[label="0.0185185;1pkt 1fpkt"];
2777--5230[label="0.0185185;1pkt 1fpkt"];
2777--5828[label="0.0416667;1pkt 1fpkt"];
2777--6120[label="0.0208333;1pkt 1fpkt"];
2777--6278[label="0.0212766;1pkt 1fpkt"];
2777--6288[label="0.0588235;1pkt 1fpkt"];
2777--6349[label="0.02;1pkt 1fpkt"];
2777--7173[label="0.0357143;1pkt 1fpkt"];
2777--7362[label="0.0185185;1pkt 1fpkt"];
2777--8244[label="0.0416667;1pkt 1fpkt"];
2777--8360[label="0.0185185;1pkt 1fpkt"];
2777--8401[label="0.0208333;1pkt 1fpkt"];
2777--8493[label="0.0212766;1pkt 1fpkt"];
2777--9009[label="0.0357143;1pkt 1fpkt"];
2777--9632[label="0.0185185;1pkt 1fpkt"];
2777--9655[label="0.0208333;1pkt 1fpkt"];
2777--9976[label="0.0357143;1pkt 1fpkt"];
3187--7173[label="1;8pkt 8fpkt"];
3187--9009[label="1;8pkt 8fpkt"];
3187--9976[label="1;8pkt 8fpkt"];
7173--9009[label="1;28pkt 28fpkt"];
7173--9976[label="1;28pkt 28fpkt"];
9009--9976[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="129.206.190.238"/>
      <filter dst_ip="56.155.234.138" dst_port="80"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1979[label="208.90.198.213;d;65pkt 65fpkt", shape=diamond, color=yellow];
3888[label="208.90.198.213;d;65pkt 65fpkt", shape=hexagon, color=black];
4281[label="134.149.77.7;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.77.108:80, 208.90.198.213:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4055: (1.1194%)&lt;BR/&gt; 4054: (1.1194%)&lt;BR/&gt; 4053: (1.1194%)&lt;BR/&gt; 4047: (1.1194%)&gt;];
}
1979--3888[label="1;65pkt 65fpkt"];
1979--4281[label="1;4pkt 4fpkt"];
3888--4281[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="208.90.198.213" src_ip="134.149.77.108" src_port="80"/>
    </slice>
    <from sec="1178341517" usec="0"/>
    <to sec="1178341916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
2998[label="134.153.142.85;s;217pkt 217fpkt", shape=diamond, color=yellow];
3907[label="134.153.142.85;s;217pkt 217fpkt", shape=hexagon, color=black];
5381[label="134.153.142.85;235pkt 235fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.142.85:34052, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34052: (50%)&lt;BR/&gt; 3954: (0.44843%)&lt;BR/&gt; 3706: (0.298954%)&lt;BR/&gt; 65431: (0.224215%)&lt;BR/&gt; 65397: (0.224215%)&gt;];
}
2998--3907[label="1;217pkt 217fpkt"];
2998--5381[label="1;217pkt 217fpkt"];
3907--5381[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter src_ip="134.153.142.85" src_port="34052"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
780[label="198.155.85.6;s;475pkt 475fpkt", shape=diamond, color=yellow];
3916[label="198.155.85.6;s;475pkt 475fpkt", shape=hexagon, color=black];
4266[label="198.155.85.6;477pkt 477fpkt", shape=pentagon, color=darkviolet];
7415[label="198.155.85.6;478pkt 478fpkt", shape=invtriangle, color=brown];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.155.85.6:0, *:0}[99.7908%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.79%)&lt;BR/&gt; 41174: (0.104987%)&lt;BR/&gt; 22: (0.104987%)&gt;];
}
780--1085[label="0.00543478;1pkt 1fpkt"];
780--2697[label="0.0119048;1pkt 1fpkt"];
780--2730[label="0.0131579;1pkt 1fpkt"];
780--2954[label="0.00671141;1pkt 1fpkt"];
780--3062[label="0.0142857;1pkt 1fpkt"];
780--3422[label="0.0025641;1pkt 1fpkt"];
780--3663[label="0.00806452;1pkt 1fpkt"];
780--3916[label="1;475pkt 475fpkt"];
780--4266[label="0.997895;474pkt 474fpkt"];
780--7415[label="1;475pkt 475fpkt"];
3916--4266[label="0.997895;474pkt 474fpkt"];
3916--7415[label="1;475pkt 475fpkt"];
4266--7415[label="1;477pkt 477fpkt"];
</description>
    <slice>
      <filter src_ip="198.155.85.6"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
2723[label="200.177.152.214;d;2pkt 2fpkt", shape=diamond, color=yellow];
2724[label="129.206.198.130;s;3pkt 3fpkt", shape=diamond, color=yellow];
3924[label="200.177.152.214;d;2pkt 2fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.225.132:47957, 200.177.152.214:6667}[25%]&lt;BR/&gt;{129.206.198.130:0, 112.105.72.137:0}[25%]&lt;BR/&gt;{129.206.198.130:0, 193.141.187.198:0}[25%]&lt;BR/&gt;{129.206.198.130:11359, 200.177.152.214:6667}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (35.7143%)&lt;BR/&gt; 0: (28.5714%)&lt;BR/&gt; 11359: (21.4286%)&lt;BR/&gt; 47957: (14.2857%)&gt;];
}
2723--2724[label="0.5;1pkt 1fpkt"];
2723--3924[label="1;2pkt 2fpkt"];
2724--3924[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.177.152.214" dst_port="6667" src_ip="129.206.198.130" src_port="11359"/>
      <filter dst_ip="193.141.187.198" src_ip="129.206.198.130"/>
      <filter dst_ip="112.105.72.137" src_ip="129.206.198.130"/>
      <filter dst_ip="200.177.152.214" dst_port="6667" src_ip="134.128.225.132" src_port="47957"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
2779[label="134.149.24.6;s;95pkt 95fpkt", shape=diamond, color=yellow];
3938[label="134.149.24.6;s;95pkt 95fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.24.6:51616, *:53}[57.8947%]&lt;BR/&gt;{134.149.24.6:53, *:*}[38.9474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 51616: (28.9474%)&lt;BR/&gt; 0: (3.15789%)&lt;BR/&gt; 32768: (1.57895%)&lt;BR/&gt; 61823: (0.526316%)&gt;];
}
2779--3029[label="0.015873;1pkt 1fpkt"];
2779--3938[label="1;95pkt 95fpkt"];
2779--4060[label="0.0631579;6pkt 6fpkt"];
2779--4104[label="0.0631579;6pkt 6fpkt"];
2779--4140[label="0.0631579;6pkt 6fpkt"];
3938--4060[label="0.0631579;6pkt 6fpkt"];
3938--4104[label="0.0631579;6pkt 6fpkt"];
3938--4140[label="0.0631579;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="134.149.24.6" src_port="53"/>
      <filter dst_port="53" src_ip="134.149.24.6" src_port="51616"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
3153[label="134.149.247.57;s;11pkt 11fpkt", shape=diamond, color=yellow];
3955[label="134.149.247.57;s;11pkt 11fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.247.57:2954, 89.91.237.40:*}[54.5455%]&lt;BR/&gt;{134.149.247.57:1336, *:*}[27.2727%]&lt;BR/&gt;{134.149.247.57:*, 93.166.205.134:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2954: (36.3636%)&lt;BR/&gt; 1336: (13.6364%)&lt;BR/&gt; 2512: (4.54545%)&lt;BR/&gt; 2465: (4.54545%)&lt;BR/&gt; 2377: (4.54545%)&gt;];
}
3153--3955[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="93.166.205.134" src_ip="134.149.247.57"/>
      <filter src_ip="134.149.247.57" src_port="1336"/>
      <filter dst_ip="89.91.237.40" src_ip="134.149.247.57" src_port="2954"/>
    </slice>
    <from sec="1178341305" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
830[label="168.45.3.90;d;3pkt 3fpkt", shape=diamond, color=yellow];
831[label="68.135.4.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
1302[label="168.45.3.102;d;63pkt 63fpkt", shape=diamond, color=yellow];
2319[label="210.91.244.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
2460[label="56.155.234.140;s;78pkt 78fpkt", shape=diamond, color=yellow];
3442[label="168.45.3.90;d;3pkt 3fpkt", shape=hexagon, color=black];
4249[label="217.134.56.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6057[label="56.155.234.140;95pkt 95fpkt", shape=pentagon, color=darkviolet];
6727[label="210.91.244.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8370[label="56.155.234.140;95pkt 95fpkt", shape=invtriangle, color=brown];
8739[label="210.91.244.196;1pkt 1fpkt", shape=invtriangle, color=brown];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.155.234.140:80, *:*}[59.375%]&lt;BR/&gt;{*:80, 168.45.3.102:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4063%)&lt;BR/&gt; 8080: (2.16138%)&lt;BR/&gt; 4873: (0.864553%)&lt;BR/&gt; 4358: (0.720461%)&lt;BR/&gt; 4735: (0.576369%)&gt;];
}
830--831[label="1;1pkt 1fpkt"];
830--2460[label="0.333333;1pkt 1fpkt"];
830--3442[label="1;3pkt 3fpkt"];
830--6057[label="0.333333;1pkt 1fpkt"];
830--8370[label="0.333333;1pkt 1fpkt"];
831--3442[label="1;1pkt 1fpkt"];
1302--2319[label="1;1pkt 1fpkt"];
1302--2460[label="0.015873;1pkt 1fpkt"];
1302--4249[label="0.833333;5pkt 5fpkt"];
1302--6057[label="0.015873;1pkt 1fpkt"];
1302--6727[label="1;1pkt 1fpkt"];
1302--8370[label="0.015873;1pkt 1fpkt"];
1302--8739[label="1;1pkt 1fpkt"];
2319--6727[label="1;1pkt 1fpkt"];
2319--8739[label="1;1pkt 1fpkt"];
2460--3131[label="0.025641;1pkt 1fpkt"];
2460--3442[label="0.333333;1pkt 1fpkt"];
2460--3467[label="0.0208333;1pkt 1fpkt"];
2460--3500[label="0.025641;2pkt 2fpkt"];
2460--3608[label="0.0128205;1pkt 1fpkt"];
2460--3772[label="0.0217391;1pkt 1fpkt"];
2460--3832[label="0.0128205;1pkt 1fpkt"];
2460--3926[label="0.0181818;1pkt 1fpkt"];
2460--3990[label="0.0208333;1pkt 1fpkt"];
2460--4006[label="0.025641;2pkt 2fpkt"];
2460--6057[label="1;78pkt 78fpkt"];
2460--8370[label="1;78pkt 78fpkt"];
3442--6057[label="0.333333;1pkt 1fpkt"];
3442--8370[label="0.333333;1pkt 1fpkt"];
6057--8370[label="1;95pkt 95fpkt"];
6727--8739[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="56.155.234.140" src_port="80"/>
      <filter dst_ip="168.45.3.102" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
2581[label="198.48.0.143;d;139pkt 139fpkt", shape=diamond, color=yellow];
5376[label="168.45.101.85;22pkt 22fpkt", shape=pentagon, color=darkviolet];
6708[label="134.149.197.195;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7999[label="168.45.101.85;22pkt 22fpkt", shape=invtriangle, color=brown];
8725[label="134.149.197.195;10pkt 10fpkt", shape=invtriangle, color=brown];
9840[label="134.149.197.195;10pkt 10fpkt", shape=invhouse, color=bisque];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.3.54:*, 198.48.0.143:80}[68.4848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49203: (0.938967%)&lt;BR/&gt; 49194: (0.938967%)&lt;BR/&gt; 49188: (0.938967%)&lt;BR/&gt; 49184: (0.938967%)&gt;];
}
2581--3782[label="0.037037;4pkt 4fpkt"];
2581--5248[label="0.285714;2pkt 2fpkt"];
2581--5376[label="0.0909091;2pkt 2fpkt"];
2581--6708[label="0.4;4pkt 4fpkt"];
2581--7999[label="0.0909091;2pkt 2fpkt"];
2581--8725[label="0.4;4pkt 4fpkt"];
2581--9840[label="0.4;4pkt 4fpkt"];
5376--7999[label="1;22pkt 22fpkt"];
6708--8725[label="1;10pkt 10fpkt"];
6708--9840[label="1;10pkt 10fpkt"];
8725--9840[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.0.143" dst_port="80" src_ip="168.45.3.54"/>
    </slice>
    <from sec="1178341433" usec="0"/>
    <to sec="1178342038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
5194[label="155.255.128.71;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5698[label="134.128.71.108;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.128.71:53310, *:53}[43.8356%]&lt;BR/&gt;{134.128.71.108:*, *:*}[32.8767%]&lt;BR/&gt;{*:53, *:*}[24.6575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.6712%)&lt;BR/&gt; 53310: (21.9178%)&lt;BR/&gt; 80: (8.90411%)&lt;BR/&gt; 123: (4.10959%)&lt;BR/&gt; 0: (4.10959%)&gt;];
}
</description>
    <slice>
      <filter src_ip="134.128.71.108"/>
      <filter src_port="53"/>
      <filter dst_port="53" src_ip="155.255.128.71" src_port="53310"/>
    </slice>
    <from sec="1178341214" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
282[label="200.64.16.0;s;9pkt 9fpkt", shape=diamond, color=yellow];
1078[label="168.45.0.91;d;59pkt 59fpkt", shape=diamond, color=yellow];
3661[label="168.45.0.91;d;46pkt 46fpkt", shape=hexagon, color=black];
4147[label="200.64.16.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5005[label="200.129.42.58;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6622[label="203.118.52.189;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8677[label="203.118.52.189;4pkt 4fpkt", shape=invtriangle, color=brown];
9105[label="200.64.16.0;8pkt 8fpkt", shape=invhouse, color=bisque];
9806[label="203.118.52.189;4pkt 4fpkt", shape=invhouse, color=bisque];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 168.45.0.91:*}[98.3051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3421%)&lt;BR/&gt; 1407: (1.64474%)&lt;BR/&gt; 1374: (1.64474%)&lt;BR/&gt; 1372: (1.64474%)&lt;BR/&gt; 1360: (1.64474%)&gt;];
}
282--1078[label="1;9pkt 9fpkt"];
282--3661[label="1;9pkt 9fpkt"];
282--4147[label="1;8pkt 8fpkt"];
282--9105[label="1;8pkt 8fpkt"];
1078--3661[label="1;46pkt 46fpkt"];
1078--4147[label="1;8pkt 8fpkt"];
1078--5005[label="1;10pkt 10fpkt"];
1078--6622[label="1;4pkt 4fpkt"];
1078--8677[label="1;4pkt 4fpkt"];
1078--9105[label="1;8pkt 8fpkt"];
1078--9806[label="1;4pkt 4fpkt"];
3661--4147[label="1;8pkt 8fpkt"];
3661--5005[label="0.7;7pkt 7fpkt"];
3661--6622[label="0.75;3pkt 3fpkt"];
3661--8677[label="0.75;3pkt 3fpkt"];
3661--9105[label="1;8pkt 8fpkt"];
3661--9806[label="0.75;3pkt 3fpkt"];
4147--9105[label="1;8pkt 8fpkt"];
6622--8677[label="1;4pkt 4fpkt"];
6622--9806[label="1;4pkt 4fpkt"];
8677--9806[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.0.91" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178341976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.117.42.0"/>
    </slice>
    <from sec="1178342013" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.190.0"/>
    </slice>
    <from sec="1178341226" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.246.232.0"/>
    </slice>
    <from sec="1178342021" usec="0"/>
    <to sec="1178342050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.176.24.1"/>
    </slice>
    <from sec="1178341817" usec="0"/>
    <to sec="1178341882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.89.1"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.172.114.1"/>
    </slice>
    <from sec="1178341839" usec="0"/>
    <to sec="1178341853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.221.135.1"/>
    </slice>
    <from sec="1178341263" usec="0"/>
    <to sec="1178341278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.145.188.1"/>
    </slice>
    <from sec="1178341632" usec="0"/>
    <to sec="1178341664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.218.1"/>
    </slice>
    <from sec="1178341250" usec="0"/>
    <to sec="1178342089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.118.9.2"/>
    </slice>
    <from sec="1178341987" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.8.83.2"/>
    </slice>
    <from sec="1178341532" usec="0"/>
    <to sec="1178341560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.224.213.2"/>
    </slice>
    <from sec="1178341928" usec="0"/>
    <to sec="1178341974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
358[label="129.206.25.3;s;153pkt 153fpkt", shape=diamond, color=yellow];
753[label="46.195.173.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
757[label="214.75.0.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
787[label="42.234.211.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
804[label="35.158.70.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
2935[label="89.231.7.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
3914[label="214.75.0.158;d;1pkt 1fpkt", shape=hexagon, color=black];
4207[label="129.206.25.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7381[label="129.206.25.3;1pkt 1fpkt", shape=invtriangle, color=brown];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.25.3:26938, *:*}[41.1765%]&lt;BR/&gt;{129.206.25.3:1033, *:*}[37.9085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26938: (21.7391%)&lt;BR/&gt; 1033: (18.0124%)&lt;BR/&gt; 4236: (4.03727%)&lt;BR/&gt; 5420: (3.72671%)&lt;BR/&gt; 3014: (3.72671%)&gt;];
}
358--753[label="1;1pkt 1fpkt"];
358--757[label="1;1pkt 1fpkt"];
358--787[label="1;1pkt 1fpkt"];
358--804[label="1;1pkt 1fpkt"];
358--2459[label="0.0117647;1pkt 1fpkt"];
358--2935[label="1;1pkt 1fpkt"];
358--3914[label="1;1pkt 1fpkt"];
358--4040[label="0.00653595;1pkt 1fpkt"];
358--4085[label="0.00653595;1pkt 1fpkt"];
358--4126[label="0.00653595;1pkt 1fpkt"];
358--4207[label="1;1pkt 1fpkt"];
358--7381[label="1;1pkt 1fpkt"];
757--3914[label="1;1pkt 1fpkt"];
787--4207[label="1;1pkt 1fpkt"];
787--7381[label="1;1pkt 1fpkt"];
4207--7381[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.25.3" src_port="26938"/>
      <filter src_ip="129.206.25.3" src_port="1033"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.176.41.3"/>
    </slice>
    <from sec="1178341734" usec="0"/>
    <to sec="1178341777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.2.102.3"/>
    </slice>
    <from sec="1178341541" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.179.3"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.112.224.3"/>
    </slice>
    <from sec="1178341849" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.128.64.4"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.100.76.4"/>
    </slice>
    <from sec="1178341240" usec="0"/>
    <to sec="1178342090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.142.87.4"/>
    </slice>
    <from sec="1178341619" usec="0"/>
    <to sec="1178341650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.188.187.4"/>
    </slice>
    <from sec="1178341486" usec="0"/>
    <to sec="1178341901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.52.109.5"/>
    </slice>
    <from sec="1178341609" usec="0"/>
    <to sec="1178341689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
407[label="209.148.58.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
655[label="198.150.162.206;d;127pkt 127fpkt", shape=diamond, color=yellow];
658[label="208.10.226.110;s;3pkt 3fpkt", shape=diamond, color=yellow];
798[label="89.117.111.118;s;4pkt 4fpkt", shape=diamond, color=yellow];
800[label="8.166.11.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
806[label="46.213.59.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
899[label="193.45.164.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
901[label="89.192.104.60;s;7pkt 7fpkt", shape=diamond, color=yellow];
903[label="210.41.26.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
1084[label="213.248.26.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
1142[label="210.41.211.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
1152[label="212.90.253.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
1515[label="88.41.122.228;s;3pkt 3fpkt", shape=diamond, color=yellow];
1661[label="209.4.169.248;s;3pkt 3fpkt", shape=diamond, color=yellow];
1670[label="92.174.205.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
1707[label="198.107.89.53;s;2pkt 2fpkt", shape=diamond, color=yellow];
1724[label="210.41.42.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
1774[label="89.100.118.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
1942[label="213.183.98.190;s;9pkt 9fpkt", shape=diamond, color=yellow];
1968[label="88.58.194.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
2263[label="13.165.208.5;s;2pkt 2fpkt", shape=diamond, color=yellow];
2274[label="213.158.151.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
2605[label="32.166.165.22;s;3pkt 3fpkt", shape=diamond, color=yellow];
3289[label="209.148.58.40;s;1pkt 1fpkt", shape=hexagon, color=black];
3317[label="208.10.226.110;s;1pkt 1fpkt", shape=hexagon, color=black];
3335[label="46.213.59.249;s;1pkt 1fpkt", shape=hexagon, color=black];
3541[label="209.4.169.248;s;3pkt 3fpkt", shape=hexagon, color=black];
3648[label="198.150.162.206;d;122pkt 122fpkt", shape=hexagon, color=black];
3683[label="89.117.111.118;s;4pkt 4fpkt", shape=hexagon, color=black];
4257[label="13.165.208.5;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4363[label="213.158.151.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4520[label="213.248.26.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4525[label="32.166.165.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4674[label="210.41.42.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4879[label="210.177.165.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5034[label="89.192.104.60;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5223[label="213.92.207.72;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5700[label="209.139.114.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6257[label="92.174.205.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6312[label="213.73.26.164;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6636[label="213.183.98.190;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6707[label="193.45.164.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6788[label="208.133.22.202;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7411[label="13.165.208.5;2pkt 2fpkt", shape=invtriangle, color=brown];
7557[label="32.166.165.22;2pkt 2fpkt", shape=invtriangle, color=brown];
7633[label="210.41.42.34;1pkt 1fpkt", shape=invtriangle, color=brown];
7744[label="210.177.165.47;2pkt 2fpkt", shape=invtriangle, color=brown];
8054[label="210.41.26.93;1pkt 1fpkt", shape=invtriangle, color=brown];
8171[label="209.139.114.108;1pkt 1fpkt", shape=invtriangle, color=brown];
8230[label="89.117.111.118;3pkt 3fpkt", shape=invtriangle, color=brown];
8480[label="92.174.205.158;1pkt 1fpkt", shape=invtriangle, color=brown];
8517[label="213.73.26.164;3pkt 3fpkt", shape=invtriangle, color=brown];
8724[label="193.45.164.195;1pkt 1fpkt", shape=invtriangle, color=brown];
8770[label="208.133.22.202;1pkt 1fpkt", shape=invtriangle, color=brown];
9139[label="13.165.208.5;2pkt 2fpkt", shape=invhouse, color=bisque];
9303[label="210.177.165.47;2pkt 2fpkt", shape=invhouse, color=bisque];
9713[label="213.73.26.164;3pkt 3fpkt", shape=invhouse, color=bisque];
9839[label="193.45.164.195;1pkt 1fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 198.150.162.206:10572}[99.2126%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10572: (49.5946%)&lt;BR/&gt; 2014: (1.21622%)&lt;BR/&gt; 27204: (0.810811%)&lt;BR/&gt; 26872: (0.810811%)&lt;BR/&gt; 1170: (0.810811%)&gt;];
}
407--655[label="1;1pkt 1fpkt"];
407--3289[label="1;1pkt 1fpkt"];
407--3648[label="1;1pkt 1fpkt"];
655--658[label="1;3pkt 3fpkt"];
655--798[label="1;4pkt 4fpkt"];
655--800[label="1;1pkt 1fpkt"];
655--806[label="1;1pkt 1fpkt"];
655--899[label="1;1pkt 1fpkt"];
655--901[label="1;7pkt 7fpkt"];
655--903[label="1;1pkt 1fpkt"];
655--1084[label="1;1pkt 1fpkt"];
655--1142[label="1;1pkt 1fpkt"];
655--1152[label="1;1pkt 1fpkt"];
655--1515[label="1;3pkt 3fpkt"];
655--1661[label="1;3pkt 3fpkt"];
655--1670[label="1;1pkt 1fpkt"];
655--1707[label="1;2pkt 2fpkt"];
655--1724[label="1;1pkt 1fpkt"];
655--1774[label="1;1pkt 1fpkt"];
655--1942[label="1;9pkt 9fpkt"];
655--1968[label="1;1pkt 1fpkt"];
655--2263[label="1;2pkt 2fpkt"];
655--2274[label="1;1pkt 1fpkt"];
655--2605[label="1;3pkt 3fpkt"];
655--3289[label="1;1pkt 1fpkt"];
655--3317[label="1;1pkt 1fpkt"];
655--3335[label="1;1pkt 1fpkt"];
655--3541[label="1;3pkt 3fpkt"];
655--3648[label="1;122pkt 122fpkt"];
655--3683[label="1;4pkt 4fpkt"];
655--4257[label="1;2pkt 2fpkt"];
655--4363[label="1;1pkt 1fpkt"];
655--4520[label="1;1pkt 1fpkt"];
655--4525[label="1;2pkt 2fpkt"];
655--4674[label="1;1pkt 1fpkt"];
655--4879[label="1;2pkt 2fpkt"];
655--5034[label="1;7pkt 7fpkt"];
655--5223[label="1;4pkt 4fpkt"];
655--5700[label="1;1pkt 1fpkt"];
655--6257[label="1;1pkt 1fpkt"];
655--6312[label="1;3pkt 3fpkt"];
655--6636[label="1;9pkt 9fpkt"];
655--6707[label="1;1pkt 1fpkt"];
655--6788[label="1;1pkt 1fpkt"];
655--7411[label="1;2pkt 2fpkt"];
655--7557[label="1;2pkt 2fpkt"];
655--7633[label="1;1pkt 1fpkt"];
655--7744[label="1;2pkt 2fpkt"];
655--8054[label="1;1pkt 1fpkt"];
655--8171[label="1;1pkt 1fpkt"];
655--8230[label="1;3pkt 3fpkt"];
655--8480[label="1;1pkt 1fpkt"];
655--8517[label="1;3pkt 3fpkt"];
655--8724[label="1;1pkt 1fpkt"];
655--8770[label="1;1pkt 1fpkt"];
655--9139[label="1;2pkt 2fpkt"];
655--9303[label="1;2pkt 2fpkt"];
655--9713[label="1;3pkt 3fpkt"];
655--9839[label="1;1pkt 1fpkt"];
658--3317[label="1;1pkt 1fpkt"];
658--3648[label="1;3pkt 3fpkt"];
798--3648[label="1;4pkt 4fpkt"];
798--3683[label="1;4pkt 4fpkt"];
798--8230[label="1;3pkt 3fpkt"];
800--3648[label="1;1pkt 1fpkt"];
806--3335[label="1;1pkt 1fpkt"];
806--3648[label="1;1pkt 1fpkt"];
899--3648[label="1;1pkt 1fpkt"];
899--6707[label="1;1pkt 1fpkt"];
899--8724[label="1;1pkt 1fpkt"];
899--9839[label="1;1pkt 1fpkt"];
901--3648[label="0.714286;5pkt 5fpkt"];
901--5034[label="1;7pkt 7fpkt"];
903--3648[label="1;1pkt 1fpkt"];
903--8054[label="1;1pkt 1fpkt"];
1084--3648[label="1;1pkt 1fpkt"];
1084--4520[label="1;1pkt 1fpkt"];
1142--3648[label="1;1pkt 1fpkt"];
1152--3648[label="1;1pkt 1fpkt"];
1515--3648[label="1;3pkt 3fpkt"];
1661--3541[label="1;3pkt 3fpkt"];
1661--3648[label="1;3pkt 3fpkt"];
1670--3648[label="1;1pkt 1fpkt"];
1670--6257[label="1;1pkt 1fpkt"];
1670--8480[label="1;1pkt 1fpkt"];
1707--3648[label="1;2pkt 2fpkt"];
1724--3648[label="1;1pkt 1fpkt"];
1724--4674[label="1;1pkt 1fpkt"];
1724--7633[label="1;1pkt 1fpkt"];
1774--3648[label="1;1pkt 1fpkt"];
1942--3648[label="1;9pkt 9fpkt"];
1942--6636[label="1;9pkt 9fpkt"];
1968--3648[label="1;1pkt 1fpkt"];
2263--3648[label="1;2pkt 2fpkt"];
2263--4257[label="1;2pkt 2fpkt"];
2263--7411[label="1;2pkt 2fpkt"];
2263--9139[label="1;2pkt 2fpkt"];
2274--3648[label="1;1pkt 1fpkt"];
2274--4363[label="1;1pkt 1fpkt"];
2605--3648[label="1;3pkt 3fpkt"];
2605--4525[label="1;2pkt 2fpkt"];
2605--7557[label="1;2pkt 2fpkt"];
3289--3648[label="1;1pkt 1fpkt"];
3317--3648[label="1;1pkt 1fpkt"];
3335--3648[label="1;1pkt 1fpkt"];
3541--3648[label="1;3pkt 3fpkt"];
3648--3683[label="1;4pkt 4fpkt"];
3648--4257[label="1;2pkt 2fpkt"];
3648--4363[label="1;1pkt 1fpkt"];
3648--4520[label="1;1pkt 1fpkt"];
3648--4525[label="1;2pkt 2fpkt"];
3648--4674[label="1;1pkt 1fpkt"];
3648--4879[label="1;2pkt 2fpkt"];
3648--5034[label="0.714286;5pkt 5fpkt"];
3648--5223[label="1;4pkt 4fpkt"];
3648--5700[label="1;1pkt 1fpkt"];
3648--6257[label="1;1pkt 1fpkt"];
3648--6312[label="1;3pkt 3fpkt"];
3648--6636[label="1;9pkt 9fpkt"];
3648--6707[label="1;1pkt 1fpkt"];
3648--6788[label="1;1pkt 1fpkt"];
3648--7411[label="1;2pkt 2fpkt"];
3648--7557[label="1;2pkt 2fpkt"];
3648--7633[label="1;1pkt 1fpkt"];
3648--7744[label="1;2pkt 2fpkt"];
3648--8054[label="1;1pkt 1fpkt"];
3648--8171[label="1;1pkt 1fpkt"];
3648--8230[label="1;3pkt 3fpkt"];
3648--8480[label="1;1pkt 1fpkt"];
3648--8517[label="1;3pkt 3fpkt"];
3648--8724[label="1;1pkt 1fpkt"];
3648--8770[label="1;1pkt 1fpkt"];
3648--9139[label="1;2pkt 2fpkt"];
3648--9303[label="1;2pkt 2fpkt"];
3648--9713[label="1;3pkt 3fpkt"];
3648--9839[label="1;1pkt 1fpkt"];
3683--8230[label="1;3pkt 3fpkt"];
4257--7411[label="1;2pkt 2fpkt"];
4257--9139[label="1;2pkt 2fpkt"];
4525--7557[label="1;2pkt 2fpkt"];
4674--7633[label="1;1pkt 1fpkt"];
4879--7744[label="1;2pkt 2fpkt"];
4879--9303[label="1;2pkt 2fpkt"];
5700--8171[label="1;1pkt 1fpkt"];
6257--8480[label="1;1pkt 1fpkt"];
6312--8517[label="1;3pkt 3fpkt"];
6312--9713[label="1;3pkt 3fpkt"];
6707--8724[label="1;1pkt 1fpkt"];
6707--9839[label="1;1pkt 1fpkt"];
6788--8770[label="1;1pkt 1fpkt"];
7411--9139[label="1;2pkt 2fpkt"];
7744--9303[label="1;2pkt 2fpkt"];
8517--9713[label="1;3pkt 3fpkt"];
8724--9839[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.150.162.206" dst_port="10572"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.218.214.5"/>
    </slice>
    <from sec="1178341602" usec="0"/>
    <to sec="1178341634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.207.26.6"/>
    </slice>
    <from sec="1178341617" usec="0"/>
    <to sec="1178341635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.176.44.6"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.70.138.6"/>
    </slice>
    <from sec="1178341590" usec="0"/>
    <to sec="1178341650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.158.139.6"/>
    </slice>
    <from sec="1178341760" usec="0"/>
    <to sec="1178341917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.91.195.6"/>
    </slice>
    <from sec="1178341281" usec="0"/>
    <to sec="1178341282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.206.216.7"/>
    </slice>
    <from sec="1178341662" usec="0"/>
    <to sec="1178341714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.227.2.8"/>
    </slice>
    <from sec="1178341519" usec="0"/>
    <to sec="1178341536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.134.8"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178341940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.128.88.9"/>
    </slice>
    <from sec="1178341828" usec="0"/>
    <to sec="1178341847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.176.136.9"/>
    </slice>
    <from sec="1178341407" usec="0"/>
    <to sec="1178341519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.210.169.9"/>
    </slice>
    <from sec="1178341722" usec="0"/>
    <to sec="1178341742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.145.175.9"/>
    </slice>
    <from sec="1178341971" usec="0"/>
    <to sec="1178341980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.198.3.10"/>
    </slice>
    <from sec="1178341618" usec="0"/>
    <to sec="1178341643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.234.30.11"/>
    </slice>
    <from sec="1178341564" usec="0"/>
    <to sec="1178341591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.118.35.11"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178341594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.132.58.11"/>
    </slice>
    <from sec="1178341393" usec="0"/>
    <to sec="1178341414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
2944[label="172.113.130.11;s;93pkt 93fpkt", shape=diamond, color=yellow];
4348[label="172.113.130.11;95pkt 95fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.130.11:25, 51.156.146.220:*}[56.8421%]&lt;BR/&gt;{172.113.130.11:25, 199.80.138.47:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61800: (0.531915%)&lt;BR/&gt; 59935: (0.531915%)&lt;BR/&gt; 59213: (0.531915%)&lt;BR/&gt; 57260: (0.531915%)&gt;];
}
2944--4348[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="51.156.146.220" src_ip="172.113.130.11" src_port="25"/>
      <filter dst_ip="199.80.138.47" src_ip="172.113.130.11" src_port="25"/>
    </slice>
    <from sec="1178341464" usec="0"/>
    <to sec="1178342061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.120.216.11"/>
    </slice>
    <from sec="1178341269" usec="0"/>
    <to sec="1178341299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.142.40.12"/>
    </slice>
    <from sec="1178341668" usec="0"/>
    <to sec="1178341832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.117.91.12"/>
    </slice>
    <from sec="1178341785" usec="0"/>
    <to sec="1178341801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.232.38.13"/>
    </slice>
    <from sec="1178341237" usec="0"/>
    <to sec="1178341282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.240.39.13"/>
    </slice>
    <from sec="1178341523" usec="0"/>
    <to sec="1178341558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.35.119.13"/>
    </slice>
    <from sec="1178341556" usec="0"/>
    <to sec="1178341572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1164[label="134.128.10.220;s;931pkt 931fpkt", shape=diamond, color=yellow];
3066[label="43.184.103.117;d;173pkt 173fpkt", shape=diamond, color=yellow];
3690[label="134.128.10.220;s;700pkt 700fpkt", shape=hexagon, color=black];
6990[label="134.128.10.220;1024pkt 1024fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.10.220:80, *:*}[99.6094%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7878%)&lt;BR/&gt; 4933: (0.123762%)&lt;BR/&gt; 4917: (0.123762%)&lt;BR/&gt; 4908: (0.123762%)&lt;BR/&gt; 55791: (0.106082%)&gt;];
}
1164--1965[label="0.0119048;1pkt 1fpkt"];
1164--3066[label="1;173pkt 173fpkt"];
1164--3690[label="1;700pkt 700fpkt"];
1164--6990[label="1;931pkt 931fpkt"];
3066--3690[label="0.797688;138pkt 138fpkt"];
3066--6990[label="1;173pkt 173fpkt"];
3690--6990[label="1;700pkt 700fpkt"];
</description>
    <slice>
      <filter src_ip="134.128.10.220" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.122.144.13"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178342086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.130.191.15"/>
    </slice>
    <from sec="1178341347" usec="0"/>
    <to sec="1178341547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.34.17"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.72.80.17"/>
    </slice>
    <from sec="1178341959" usec="0"/>
    <to sec="1178341998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.255.132.17"/>
    </slice>
    <from sec="1178341334" usec="0"/>
    <to sec="1178341414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.68.19.19"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.212.35.19"/>
    </slice>
    <from sec="1178341546" usec="0"/>
    <to sec="1178341562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.145.162.19"/>
    </slice>
    <from sec="1178341723" usec="0"/>
    <to sec="1178341764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.143.164.19"/>
    </slice>
    <from sec="1178341466" usec="0"/>
    <to sec="1178341564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.202.225.19"/>
    </slice>
    <from sec="1178341709" usec="0"/>
    <to sec="1178341744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.98.20"/>
    </slice>
    <from sec="1178341280" usec="0"/>
    <to sec="1178342071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
4485[label="199.181.149.20;192pkt 192fpkt", shape=pentagon, color=darkviolet];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.149.20:*, 199.66.59.146:53}[50%]&lt;BR/&gt;{199.181.149.20:*, 199.66.59.147:53}[49.4792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 53739: (0.520833%)&lt;BR/&gt; 53706: (0.520833%)&lt;BR/&gt; 53686: (0.520833%)&lt;BR/&gt; 53645: (0.520833%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="199.66.59.146" dst_port="53" src_ip="199.181.149.20"/>
      <filter dst_ip="199.66.59.147" dst_port="53" src_ip="199.181.149.20"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
2901[label="88.71.81.166;d;29pkt 29fpkt", shape=diamond, color=yellow];
4495[label="134.149.249.20;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7543[label="134.149.249.20;11pkt 11fpkt", shape=invtriangle, color=brown];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.139.112:*, 88.71.81.166:80}[62.069%]&lt;BR/&gt;{134.149.249.20:*, 88.71.81.166:80}[37.931%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63575: (2.94118%)&lt;BR/&gt; 63202: (2.94118%)&lt;BR/&gt; 62023: (2.94118%)&lt;BR/&gt; 61992: (2.94118%)&gt;];
}
2901--4040[label="0.0689655;2pkt 2fpkt"];
2901--4085[label="0.0689655;2pkt 2fpkt"];
2901--4126[label="0.0689655;2pkt 2fpkt"];
2901--4495[label="1;11pkt 11fpkt"];
2901--7543[label="1;11pkt 11fpkt"];
4495--7543[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="88.71.81.166" dst_port="80" src_ip="155.255.139.112"/>
      <filter dst_ip="88.71.81.166" dst_port="80" src_ip="134.149.249.20"/>
    </slice>
    <from sec="1178341283" usec="0"/>
    <to sec="1178342002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.197.21"/>
    </slice>
    <from sec="1178341549" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.17.22"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.16.105.22"/>
    </slice>
    <from sec="1178341632" usec="0"/>
    <to sec="1178341645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.129.22"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.233.8.23"/>
    </slice>
    <from sec="1178341744" usec="0"/>
    <to sec="1178341819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.122.78.23"/>
    </slice>
    <from sec="1178341612" usec="0"/>
    <to sec="1178341784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.211.40.26"/>
    </slice>
    <from sec="1178341324" usec="0"/>
    <to sec="1178341784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.178.41.27"/>
    </slice>
    <from sec="1178341516" usec="0"/>
    <to sec="1178341544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.4.188.27"/>
    </slice>
    <from sec="1178341213" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.130.204.27"/>
    </slice>
    <from sec="1178341554" usec="0"/>
    <to sec="1178341710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.219.27"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.237.185.28"/>
    </slice>
    <from sec="1178341557" usec="0"/>
    <to sec="1178341589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.40.17.30"/>
    </slice>
    <from sec="1178341216" usec="0"/>
    <to sec="1178342087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.120.89.30"/>
    </slice>
    <from sec="1178341270" usec="0"/>
    <to sec="1178341277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.147.130.30"/>
    </slice>
    <from sec="1178341659" usec="0"/>
    <to sec="1178341815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.164.174.30"/>
    </slice>
    <from sec="1178341674" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.22.40.31"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.145.6.32"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.201.164.32"/>
    </slice>
    <from sec="1178341621" usec="0"/>
    <to sec="1178342000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.54.242.33"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.176.3.34"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.230.183.34"/>
    </slice>
    <from sec="1178341554" usec="0"/>
    <to sec="1178341580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.15.131.35"/>
    </slice>
    <from sec="1178341511" usec="0"/>
    <to sec="1178341563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.153.197.35"/>
    </slice>
    <from sec="1178341676" usec="0"/>
    <to sec="1178341735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.41.94.36"/>
    </slice>
    <from sec="1178341949" usec="0"/>
    <to sec="1178341973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.255.203.36"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178342080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.142.209.36"/>
    </slice>
    <from sec="1178341507" usec="0"/>
    <to sec="1178341587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.81.223.36"/>
    </slice>
    <from sec="1178341690" usec="0"/>
    <to sec="1178341746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42769,2.70164,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
79[label="214.146.94.37s;62pkt 62fpkt", shape=rectangle, color=red];
4728[label="214.146.94.37;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.146.94.37:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 3864: (0.531915%)&lt;BR/&gt; 3839: (0.531915%)&lt;BR/&gt; 3832: (0.531915%)&lt;BR/&gt; 3817: (0.531915%)&gt;];
}
79--4728[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="214.146.94.37"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.178.103.37"/>
    </slice>
    <from sec="1178341627" usec="0"/>
    <to sec="1178341650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.133.116.38"/>
    </slice>
    <from sec="1178341693" usec="0"/>
    <to sec="1178341799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.153.223.38"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.107.8.39"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
1314[label="43.104.14.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
1315[label="168.45.49.8;d;4pkt 4fpkt", shape=diamond, color=yellow];
1379[label="32.23.217.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
4202[label="32.23.217.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4750[label="43.104.14.39;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7678[label="43.104.14.39;2pkt 2fpkt", shape=invtriangle, color=brown];
9262[label="43.104.14.39;2pkt 2fpkt", shape=invhouse, color=bisque];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.23.217.2:80, 168.45.49.8:46948}[25%]&lt;BR/&gt;{32.23.216.53:80, 168.45.49.8:60589}[25%]&lt;BR/&gt;{43.104.14.39:80, 168.45.49.8:43403}[25%]&lt;BR/&gt;{43.104.14.39:80, 168.45.49.8:46178}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46178: (17.8571%)&lt;BR/&gt; 43403: (17.8571%)&lt;BR/&gt; 46948: (10.7143%)&lt;BR/&gt; 60589: (3.57143%)&gt;];
}
1314--1315[label="1;2pkt 2fpkt"];
1314--4750[label="1;2pkt 2fpkt"];
1314--7678[label="1;2pkt 2fpkt"];
1314--9262[label="1;2pkt 2fpkt"];
1315--1379[label="1;1pkt 1fpkt"];
1315--4202[label="1;1pkt 1fpkt"];
1315--4750[label="1;2pkt 2fpkt"];
1315--7678[label="1;2pkt 2fpkt"];
1315--9262[label="1;2pkt 2fpkt"];
1379--4202[label="1;1pkt 1fpkt"];
4750--7678[label="1;2pkt 2fpkt"];
4750--9262[label="1;2pkt 2fpkt"];
7678--9262[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.49.8" dst_port="46178" src_ip="43.104.14.39" src_port="80"/>
      <filter dst_ip="168.45.49.8" dst_port="43403" src_ip="43.104.14.39" src_port="80"/>
      <filter dst_ip="168.45.49.8" dst_port="60589" src_ip="32.23.216.53" src_port="80"/>
      <filter dst_ip="168.45.49.8" dst_port="46948" src_ip="32.23.217.2" src_port="80"/>
    </slice>
    <from sec="1178341241" usec="0"/>
    <to sec="1178341406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.96.39"/>
    </slice>
    <from sec="1178341275" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.132.161.40"/>
    </slice>
    <from sec="1178341529" usec="0"/>
    <to sec="1178341560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.150.6.41"/>
    </slice>
    <from sec="1178341261" usec="0"/>
    <to sec="1178342000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.142.53.41"/>
    </slice>
    <from sec="1178341514" usec="0"/>
    <to sec="1178342060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.34.69.41"/>
    </slice>
    <from sec="1178341214" usec="0"/>
    <to sec="1178341276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.12.86.41"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.133.41"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.61.112.43"/>
    </slice>
    <from sec="1178341834" usec="0"/>
    <to sec="1178341863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.69.168.43"/>
    </slice>
    <from sec="1178341381" usec="0"/>
    <to sec="1178341399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.140.135.44"/>
    </slice>
    <from sec="1178341358" usec="0"/>
    <to sec="1178341551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.148.200.44"/>
    </slice>
    <from sec="1178341597" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.206.130.45"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.221.10.47"/>
    </slice>
    <from sec="1178341711" usec="0"/>
    <to sec="1178341756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.211.88.47"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.213.148.47"/>
    </slice>
    <from sec="1178341629" usec="0"/>
    <to sec="1178341643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.43.216.47"/>
    </slice>
    <from sec="1178342054" usec="0"/>
    <to sec="1178342077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.197.93.48"/>
    </slice>
    <from sec="1178341676" usec="0"/>
    <to sec="1178341786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.182.48"/>
    </slice>
    <from sec="1178341257" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1838[label="172.113.169.49;s;193pkt 193fpkt", shape=diamond, color=yellow];
4904[label="172.113.169.49;199pkt 199fpkt", shape=pentagon, color=darkviolet];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.169.49:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1838--4904[label="1;193pkt 193fpkt"];
</description>
    <slice>
      <filter src_ip="172.113.169.49"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.228.171.49"/>
    </slice>
    <from sec="1178341919" usec="0"/>
    <to sec="1178342020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.42.202.50"/>
    </slice>
    <from sec="1178341217" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.9.56.51"/>
    </slice>
    <from sec="1178341534" usec="0"/>
    <to sec="1178341681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.112.106.51"/>
    </slice>
    <from sec="1178341233" usec="0"/>
    <to sec="1178341256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.150.53"/>
    </slice>
    <from sec="1178341214" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.45.220.53"/>
    </slice>
    <from sec="1178341761" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.96.54"/>
    </slice>
    <from sec="1178341241" usec="0"/>
    <to sec="1178342079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.102.27.55"/>
    </slice>
    <from sec="1178341608" usec="0"/>
    <to sec="1178341648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.232.64.55"/>
    </slice>
    <from sec="1178342033" usec="0"/>
    <to sec="1178342040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.7.91.55"/>
    </slice>
    <from sec="1178341980" usec="0"/>
    <to sec="1178341994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.117.166.56"/>
    </slice>
    <from sec="1178341396" usec="0"/>
    <to sec="1178341426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.8.167.56"/>
    </slice>
    <from sec="1178341912" usec="0"/>
    <to sec="1178341942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.133.219.56"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.202.169.57"/>
    </slice>
    <from sec="1178341598" usec="0"/>
    <to sec="1178341616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.24.146.58"/>
    </slice>
    <from sec="1178342008" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.133.35.59"/>
    </slice>
    <from sec="1178341842" usec="0"/>
    <to sec="1178341847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.149.123.59"/>
    </slice>
    <from sec="1178341608" usec="0"/>
    <to sec="1178341627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.38.124.59"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.77.138.59"/>
    </slice>
    <from sec="1178341630" usec="0"/>
    <to sec="1178341746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.19.104.60"/>
    </slice>
    <from sec="1178341388" usec="0"/>
    <to sec="1178341396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.115.240.60"/>
    </slice>
    <from sec="1178341622" usec="0"/>
    <to sec="1178341824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.89.241.60"/>
    </slice>
    <from sec="1178341724" usec="0"/>
    <to sec="1178341735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.149.76.62"/>
    </slice>
    <from sec="1178341312" usec="0"/>
    <to sec="1178341330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="159.66.117.63"/>
    </slice>
    <from sec="1178341356" usec="0"/>
    <to sec="1178341372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.193.92.64"/>
    </slice>
    <from sec="1178341613" usec="0"/>
    <to sec="1178341654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.176.220.64"/>
    </slice>
    <from sec="1178341583" usec="0"/>
    <to sec="1178341644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
2044[label="192.168.88.13;d;2pkt 2fpkt", shape=diamond, color=yellow];
2368[label="202.73.225.102;s;65pkt 65fpkt", shape=diamond, color=yellow];
2715[label="202.73.225.64;s;50pkt 50fpkt", shape=diamond, color=yellow];
5085[label="202.73.225.64;57pkt 57fpkt", shape=pentagon, color=darkviolet];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.73.225.102:53, *:*}[53.2787%]&lt;BR/&gt;{202.73.225.64:53, *:*}[46.7213%]&lt;BR/&gt;{*:53, 192.168.4.3:*}[28.6885%]&lt;BR/&gt;{*:53, 198.68.55.174:*}[21.3115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1060: (1.43678%)&lt;BR/&gt; 1038: (0.862069%)&lt;BR/&gt; 1025: (0.862069%)&lt;BR/&gt; 4944: (0.574713%)&gt;];
}
2044--2368[label="0.5;1pkt 1fpkt"];
2044--2715[label="0.5;1pkt 1fpkt"];
2044--5085[label="0.5;1pkt 1fpkt"];
2715--5085[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="202.73.225.102" src_port="53"/>
      <filter src_ip="202.73.225.64" src_port="53"/>
      <filter dst_ip="192.168.4.3" src_port="53"/>
      <filter dst_ip="198.68.55.174" src_port="53"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.201.24.65"/>
    </slice>
    <from sec="1178341614" usec="0"/>
    <to sec="1178341645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.213.41.65"/>
    </slice>
    <from sec="1178341936" usec="0"/>
    <to sec="1178341947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.211.118.65"/>
    </slice>
    <from sec="1178341267" usec="0"/>
    <to sec="1178341306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.168.61.66"/>
    </slice>
    <from sec="1178341513" usec="0"/>
    <to sec="1178341547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.45.100.66"/>
    </slice>
    <from sec="1178341286" usec="0"/>
    <to sec="1178342046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.47.167.66"/>
    </slice>
    <from sec="1178341654" usec="0"/>
    <to sec="1178341676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.118.10.67"/>
    </slice>
    <from sec="1178341577" usec="0"/>
    <to sec="1178341640" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.75.27.67"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178341529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,053,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1753[label="129.206.220.169;d;67pkt 67fpkt", shape=diamond, color=yellow];
3172[label="217.143.64.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
3956[label="217.143.64.109;s;1pkt 1fpkt", shape=hexagon, color=black];
5134[label="92.189.237.67;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5708[label="217.143.64.109;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7868[label="92.189.237.67;2pkt 2fpkt", shape=invtriangle, color=brown];
8176[label="217.143.64.109;2pkt 2fpkt", shape=invtriangle, color=brown];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.67.120.136:80, 129.206.220.169:*}[23.5294%]&lt;BR/&gt;{8.67.120.148:80, 129.206.220.169:*}[20.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 7705: (4.54545%)&lt;BR/&gt; 2821: (2.5974%)&lt;BR/&gt; 2750: (1.94805%)&lt;BR/&gt; 2749: (1.94805%)&gt;];
}
1753--4562[label="0.285714;2pkt 2fpkt"];
1753--5134[label="1;2pkt 2fpkt"];
1753--5708[label="0.5;1pkt 1fpkt"];
1753--7868[label="1;2pkt 2fpkt"];
1753--8176[label="0.5;1pkt 1fpkt"];
3172--3956[label="1;1pkt 1fpkt"];
3172--5708[label="1;1pkt 1fpkt"];
3172--8176[label="1;1pkt 1fpkt"];
3956--5708[label="1;1pkt 1fpkt"];
3956--8176[label="1;1pkt 1fpkt"];
5134--7868[label="1;2pkt 2fpkt"];
5708--8176[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.220.169" src_ip="8.67.120.136" src_port="80"/>
      <filter dst_ip="129.206.220.169" src_ip="8.67.120.148" src_port="80"/>
    </slice>
    <from sec="1178341319" usec="0"/>
    <to sec="1178342057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.45.49.68"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.142.68.68"/>
    </slice>
    <from sec="1178341719" usec="0"/>
    <to sec="1178341752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910024,2.66762,010,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1456[label="218.68.113.68;s;1084pkt 1084fpkt", shape=diamond, color=yellow];
5140[label="218.68.113.68;1200pkt 1200fpkt", shape=pentagon, color=darkviolet];
9362[label="218.68.113.68;1194pkt 1194fpkt", shape=invhouse, color=bisque];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.68.113.68:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50716: (0.0862565%)&lt;BR/&gt; 48320: (0.0862565%)&lt;BR/&gt; 43551: (0.0862565%)&lt;BR/&gt; 41086: (0.0862565%)&gt;];
}
1456--5140[label="1;1084pkt 1084fpkt"];
1456--9362[label="0.994465;1078pkt 1078fpkt"];
5140--9362[label="1;1194pkt 1194fpkt"];
</description>
    <slice>
      <filter src_ip="218.68.113.68" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.173.122.68"/>
    </slice>
    <from sec="1178341830" usec="0"/>
    <to sec="1178341860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.97.173.68"/>
    </slice>
    <from sec="1178341353" usec="0"/>
    <to sec="1178341550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.136.56.69"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.133.85.69"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.65.57.70"/>
    </slice>
    <from sec="1178341765" usec="0"/>
    <to sec="1178341793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.188.70"/>
    </slice>
    <from sec="1178341280" usec="0"/>
    <to sec="1178342088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.221.74.71"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.95.79.71"/>
    </slice>
    <from sec="1178341250" usec="0"/>
    <to sec="1178341303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.91.103.71"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.45.130.71"/>
    </slice>
    <from sec="1178341274" usec="0"/>
    <to sec="1178341924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.114.147.71"/>
    </slice>
    <from sec="1178341993" usec="0"/>
    <to sec="1178342009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.149.170.71"/>
    </slice>
    <from sec="1178342020" usec="0"/>
    <to sec="1178342041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.46.194.71"/>
    </slice>
    <from sec="1178341333" usec="0"/>
    <to sec="1178341840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.67.246.71"/>
    </slice>
    <from sec="1178341216" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.165.41.72"/>
    </slice>
    <from sec="1178341530" usec="0"/>
    <to sec="1178341560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.179.45.72"/>
    </slice>
    <from sec="1178341556" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.13.67.72"/>
    </slice>
    <from sec="1178341681" usec="0"/>
    <to sec="1178341700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.24.73.72"/>
    </slice>
    <from sec="1178341654" usec="0"/>
    <to sec="1178341668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.166.99.72"/>
    </slice>
    <from sec="1178341291" usec="0"/>
    <to sec="1178341320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.220.73"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.2.17.74"/>
    </slice>
    <from sec="1178341521" usec="0"/>
    <to sec="1178341646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.218.219.74"/>
    </slice>
    <from sec="1178341751" usec="0"/>
    <to sec="1178341837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.40.107.75"/>
    </slice>
    <from sec="1178341249" usec="0"/>
    <to sec="1178341258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
253[label="199.181.157.19;d;190pkt 190fpkt", shape=diamond, color=yellow];
360[label="12.77.158.54;s;50pkt 50fpkt", shape=diamond, color=yellow];
973[label="93.41.3.76;s;6pkt 6fpkt", shape=diamond, color=yellow];
1058[label="213.226.23.67;s;4pkt 4fpkt", shape=diamond, color=yellow];
1098[label="54.128.34.50;s;53pkt 53fpkt", shape=diamond, color=yellow];
1555[label="93.80.13.182;s;3pkt 3fpkt", shape=diamond, color=yellow];
2936[label="209.176.191.115;s;2pkt 2fpkt", shape=diamond, color=yellow];
3929[label="93.80.13.182;s;3pkt 3fpkt", shape=hexagon, color=black];
4909[label="54.128.34.50;59pkt 59fpkt", shape=pentagon, color=darkviolet];
5270[label="93.41.3.76;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7103[label="175.6.44.231;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7861[label="213.226.23.67;3pkt 3fpkt", shape=invtriangle, color=brown];
7943[label="93.41.3.76;5pkt 5fpkt", shape=invtriangle, color=brown];
8953[label="175.6.44.231;11pkt 11fpkt", shape=invtriangle, color=brown];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.34.50:*, 199.181.157.19:*}[30.102%]&lt;BR/&gt;{12.77.158.54:*, 199.181.157.19:21}[24.4898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (26.6667%)&lt;BR/&gt; 80: (6.17284%)&lt;BR/&gt; 62748: (0.493827%)&lt;BR/&gt; 59852: (0.493827%)&lt;BR/&gt; 59668: (0.493827%)&gt;];
}
253--360[label="1;50pkt 50fpkt"];
253--973[label="1;6pkt 6fpkt"];
253--997[label="0.00526316;1pkt 1fpkt"];
253--1058[label="1;4pkt 4fpkt"];
253--1098[label="1;53pkt 53fpkt"];
253--1555[label="1;3pkt 3fpkt"];
253--2936[label="1;2pkt 2fpkt"];
253--3361[label="0.00526316;1pkt 1fpkt"];
253--3929[label="1;3pkt 3fpkt"];
253--3983[label="0.00526316;1pkt 1fpkt"];
253--4026[label="0.0421053;8pkt 8fpkt"];
253--4040[label="0.00526316;1pkt 1fpkt"];
253--4051[label="0.00526316;1pkt 1fpkt"];
253--4074[label="0.0421053;8pkt 8fpkt"];
253--4085[label="0.00526316;1pkt 1fpkt"];
253--4096[label="0.00526316;1pkt 1fpkt"];
253--4115[label="0.0421053;8pkt 8fpkt"];
253--4126[label="0.00526316;1pkt 1fpkt"];
253--4135[label="0.00526316;1pkt 1fpkt"];
253--4909[label="0.898305;53pkt 53fpkt"];
253--5018[label="0.588235;10pkt 10fpkt"];
253--5108[label="0.00526316;1pkt 1fpkt"];
253--5270[label="1;5pkt 5fpkt"];
253--7103[label="1;11pkt 11fpkt"];
253--7819[label="0.588235;10pkt 10fpkt"];
253--7854[label="0.00526316;1pkt 1fpkt"];
253--7861[label="1;3pkt 3fpkt"];
253--7943[label="1;5pkt 5fpkt"];
253--8953[label="1;11pkt 11fpkt"];
253--9354[label="0.00526316;1pkt 1fpkt"];
973--5270[label="1;5pkt 5fpkt"];
973--7943[label="1;5pkt 5fpkt"];
1058--7861[label="1;3pkt 3fpkt"];
1098--4026[label="0.0188679;1pkt 1fpkt"];
1098--4040[label="0.0188679;1pkt 1fpkt"];
1098--4074[label="0.0188679;1pkt 1fpkt"];
1098--4085[label="0.0188679;1pkt 1fpkt"];
1098--4115[label="0.0188679;1pkt 1fpkt"];
1098--4126[label="0.0188679;1pkt 1fpkt"];
1098--4909[label="1;53pkt 53fpkt"];
1555--3929[label="1;3pkt 3fpkt"];
5270--7943[label="1;5pkt 5fpkt"];
7103--8953[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.157.19" src_ip="54.128.34.50"/>
      <filter dst_ip="199.181.157.19" dst_port="21" src_ip="12.77.158.54"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.232.28.76"/>
    </slice>
    <from sec="1178341670" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.122.96.76"/>
    </slice>
    <from sec="1178341226" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.219.137.76"/>
    </slice>
    <from sec="1178341625" usec="0"/>
    <to sec="1178341639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.220.76"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.214.147.77"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.157.23.79"/>
    </slice>
    <from sec="1178341934" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.48.210.79"/>
    </slice>
    <from sec="1178342023" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.255.128.80"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.73.159.80"/>
    </slice>
    <from sec="1178341259" usec="0"/>
    <to sec="1178341286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.13.209.80"/>
    </slice>
    <from sec="1178341886" usec="0"/>
    <to sec="1178342085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.99.55.82"/>
    </slice>
    <from sec="1178341515" usec="0"/>
    <to sec="1178341659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.30.105.82"/>
    </slice>
    <from sec="1178341935" usec="0"/>
    <to sec="1178342076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.231.7.83"/>
    </slice>
    <from sec="1178341695" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.176.14.83"/>
    </slice>
    <from sec="1178341890" usec="0"/>
    <to sec="1178341919" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.107.47.84"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.7.105.85"/>
    </slice>
    <from sec="1178341381" usec="0"/>
    <to sec="1178341561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.216.138.85"/>
    </slice>
    <from sec="1178341512" usec="0"/>
    <to sec="1178341606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.215.85"/>
    </slice>
    <from sec="1178341258" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.150.111.86"/>
    </slice>
    <from sec="1178341819" usec="0"/>
    <to sec="1178341826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
5399[label="88.55.136.86;167pkt 167fpkt", shape=pentagon, color=darkviolet];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.55.136.86:58117, *:1027}[52.0958%]&lt;BR/&gt;{88.55.136.86:58117, *:1026}[47.9042%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58117: (50%)&lt;BR/&gt; 1027: (26.0479%)&lt;BR/&gt; 1026: (23.9521%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1027" src_ip="88.55.136.86" src_port="58117"/>
      <filter dst_port="1026" src_ip="88.55.136.86" src_port="58117"/>
    </slice>
    <from sec="1178341743" usec="0"/>
    <to sec="1178341744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.45.24.87"/>
    </slice>
    <from sec="1178341347" usec="0"/>
    <to sec="1178342054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.20.134.87"/>
    </slice>
    <from sec="1178342025" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.143.182.87"/>
    </slice>
    <from sec="1178341458" usec="0"/>
    <to sec="1178341767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.155.96.88"/>
    </slice>
    <from sec="1178341452" usec="0"/>
    <to sec="1178342048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.222.98.88"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.73.164.88"/>
    </slice>
    <from sec="1178341299" usec="0"/>
    <to sec="1178341329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
2038[label="199.181.153.90;s;122pkt 122fpkt", shape=diamond, color=yellow];
5445[label="199.181.153.90;137pkt 137fpkt", shape=pentagon, color=darkviolet];
8033[label="199.181.153.90;136pkt 136fpkt", shape=invtriangle, color=brown];
9456[label="199.181.153.90;136pkt 136fpkt", shape=invhouse, color=bisque];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.153.90:25, *:*}[52.5547%]&lt;BR/&gt;{199.181.153.90:*, *:113}[46.7153%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.2712%)&lt;BR/&gt; 113: (23.4463%)&lt;BR/&gt; 63955: (0.376648%)&lt;BR/&gt; 63946: (0.376648%)&lt;BR/&gt; 63929: (0.376648%)&gt;];
}
2038--5445[label="1;122pkt 122fpkt"];
2038--8033[label="0.991803;121pkt 121fpkt"];
2038--9456[label="0.991803;121pkt 121fpkt"];
5445--8033[label="1;136pkt 136fpkt"];
5445--9456[label="1;136pkt 136fpkt"];
8033--9456[label="1;136pkt 136fpkt"];
</description>
    <slice>
      <filter src_ip="199.181.153.90" src_port="25"/>
      <filter dst_port="113" src_ip="199.181.153.90"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
2769[label="198.34.173.90;s;128pkt 128fpkt", shape=diamond, color=yellow];
5446[label="198.34.173.90;148pkt 148fpkt", shape=pentagon, color=darkviolet];
8034[label="198.34.173.90;148pkt 148fpkt", shape=invtriangle, color=brown];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.34.173.90:32778, *:53}[43.2432%]&lt;BR/&gt;{198.34.173.90:25, *:*}[28.3784%]&lt;BR/&gt;{198.34.173.90:53, *:*}[27.027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (35.0236%)&lt;BR/&gt; 32778: (21.2264%)&lt;BR/&gt; 25: (14.5047%)&lt;BR/&gt; 0: (1.41509%)&lt;BR/&gt; 32768: (1.06132%)&gt;];
}
2769--3043[label="0.012987;1pkt 1fpkt"];
2769--4060[label="0.0390625;5pkt 5fpkt"];
2769--4104[label="0.0390625;5pkt 5fpkt"];
2769--4140[label="0.0390625;5pkt 5fpkt"];
2769--5446[label="1;128pkt 128fpkt"];
2769--8034[label="1;128pkt 128fpkt"];
5446--8034[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter src_ip="198.34.173.90" src_port="25"/>
      <filter src_ip="198.34.173.90" src_port="53"/>
      <filter dst_port="53" src_ip="198.34.173.90" src_port="32778"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.34.239.90"/>
    </slice>
    <from sec="1178342020" usec="0"/>
    <to sec="1178342050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.113.241.90"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178341237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,001,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.4.188.92"/>
    </slice>
    <from sec="1178341221" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.153.177.93"/>
    </slice>
    <from sec="1178341461" usec="0"/>
    <to sec="1178341519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.7.79.94"/>
    </slice>
    <from sec="1178341847" usec="0"/>
    <to sec="1178341887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.203.167.94"/>
    </slice>
    <from sec="1178341805" usec="0"/>
    <to sec="1178341875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.164.197.94"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.134.147.95"/>
    </slice>
    <from sec="1178341675" usec="0"/>
    <to sec="1178341705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.99.21.96"/>
    </slice>
    <from sec="1178341668" usec="0"/>
    <to sec="1178341694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.71.96"/>
    </slice>
    <from sec="1178341227" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
2781[label="172.113.214.97;s;34pkt 34fpkt", shape=diamond, color=yellow];
5539[label="172.113.214.97;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.214.97:*, 49.87.24.27:20}[38.4615%]&lt;BR/&gt;{172.113.214.97:*, *:21}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (34.2466%)&lt;BR/&gt; 21: (15.7534%)&lt;BR/&gt; 5001: (4.10959%)&lt;BR/&gt; 5002: (2.73973%)&lt;BR/&gt; 5006: (2.05479%)&gt;];
}
2781--5539[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="172.113.214.97"/>
      <filter dst_ip="49.87.24.27" dst_port="20" src_ip="172.113.214.97"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.73.225.97"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.142.24.98"/>
    </slice>
    <from sec="1178341684" usec="0"/>
    <to sec="1178341813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
569[label="58.40.86.205;d;2pkt 2fpkt", shape=diamond, color=yellow];
618[label="134.128.18.99;s;2pkt 2fpkt", shape=diamond, color=yellow];
793[label="198.155.96.85;s;105pkt 105fpkt", shape=diamond, color=yellow];
3307[label="58.40.86.205;d;2pkt 2fpkt", shape=hexagon, color=black];
5558[label="134.128.18.99;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8097[label="134.128.18.99;2pkt 2fpkt", shape=invtriangle, color=brown];
9485[label="134.128.18.99;2pkt 2fpkt", shape=invhouse, color=bisque];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.155.96.85:61519, *:53}[83.1776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61519: (38.0342%)&lt;BR/&gt; 53: (38.0342%)&lt;BR/&gt; 80: (11.5385%)&lt;BR/&gt; 58138: (2.5641%)&lt;BR/&gt; 58480: (1.7094%)&gt;];
}
569--618[label="0.5;1pkt 1fpkt"];
569--793[label="0.5;1pkt 1fpkt"];
569--3307[label="1;2pkt 2fpkt"];
569--5558[label="0.5;1pkt 1fpkt"];
569--8097[label="0.5;1pkt 1fpkt"];
569--9485[label="0.5;1pkt 1fpkt"];
618--3307[label="0.5;1pkt 1fpkt"];
618--5558[label="1;2pkt 2fpkt"];
618--8097[label="1;2pkt 2fpkt"];
618--9485[label="1;2pkt 2fpkt"];
793--1163[label="0.00952381;1pkt 1fpkt"];
793--2142[label="0.00952381;1pkt 1fpkt"];
793--2954[label="0.00952381;1pkt 1fpkt"];
793--3045[label="0.0111111;1pkt 1fpkt"];
793--3307[label="0.5;1pkt 1fpkt"];
793--4060[label="0.00952381;1pkt 1fpkt"];
793--4104[label="0.00952381;1pkt 1fpkt"];
793--4140[label="0.00952381;1pkt 1fpkt"];
3307--5558[label="0.5;1pkt 1fpkt"];
3307--8097[label="0.5;1pkt 1fpkt"];
3307--9485[label="0.5;1pkt 1fpkt"];
5558--8097[label="1;2pkt 2fpkt"];
5558--9485[label="1;2pkt 2fpkt"];
8097--9485[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="198.155.96.85" src_port="61519"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.15.211.99"/>
    </slice>
    <from sec="1178341580" usec="0"/>
    <to sec="1178342047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
5299[label="168.45.244.78;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.244.78:30237, *:*}[69.3878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30237: (34.6939%)&lt;BR/&gt; 443: (9.18367%)&lt;BR/&gt; 80: (4.08163%)&lt;BR/&gt; 58035: (2.04082%)&lt;BR/&gt; 28428: (2.04082%)&gt;];
}
</description>
    <slice>
      <filter src_ip="168.45.244.78" src_port="30237"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.181.154.100"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178342089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
499[label="198.150.160.100;s;174pkt 174fpkt", shape=diamond, color=yellow];
5585[label="198.150.160.100;220pkt 220fpkt", shape=pentagon, color=darkviolet];
8107[label="198.150.160.100;220pkt 220fpkt", shape=invtriangle, color=brown];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.150.160.100:25, 48.236.125.127:*}[20.4545%]&lt;BR/&gt;{198.150.160.100:25, 58.139.132.251:*}[20.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2433: (0.488599%)&lt;BR/&gt; 2020: (0.488599%)&lt;BR/&gt; 2377: (0.407166%)&lt;BR/&gt; 49387: (0.2443%)&gt;];
}
499--5585[label="1;174pkt 174fpkt"];
499--8107[label="1;174pkt 174fpkt"];
5585--8107[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter dst_ip="58.139.132.251" src_ip="198.150.160.100" src_port="25"/>
      <filter dst_ip="48.236.125.127" src_ip="198.150.160.100" src_port="25"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.100.101"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.128.101"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.240.193.101"/>
    </slice>
    <from sec="1178341213" usec="0"/>
    <to sec="1178342092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.79.210.101"/>
    </slice>
    <from sec="1178341412" usec="0"/>
    <to sec="1178341428" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.64.121.102"/>
    </slice>
    <from sec="1178342072" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.112.204.102"/>
    </slice>
    <from sec="1178341450" usec="0"/>
    <to sec="1178341506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.248.209.102"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.89.165.103"/>
    </slice>
    <from sec="1178341639" usec="0"/>
    <to sec="1178341659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.166.103"/>
    </slice>
    <from sec="1178341259" usec="0"/>
    <to sec="1178342038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.228.176.103"/>
    </slice>
    <from sec="1178341225" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.153.220.103"/>
    </slice>
    <from sec="1178342012" usec="0"/>
    <to sec="1178342065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.75.136.104"/>
    </slice>
    <from sec="1178341958" usec="0"/>
    <to sec="1178341980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.137.104"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.111.42.105"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.116.208.105"/>
    </slice>
    <from sec="1178341372" usec="0"/>
    <to sec="1178341403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.181.154.106"/>
    </slice>
    <from sec="1178341211" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.206.175.106"/>
    </slice>
    <from sec="1178341580" usec="0"/>
    <to sec="1178341629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.50.131.107"/>
    </slice>
    <from sec="1178341489" usec="0"/>
    <to sec="1178341545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.94.67.108"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.186.52.109"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.104.153.109"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.203.236.109"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.128.33.110"/>
    </slice>
    <from sec="1178341345" usec="0"/>
    <to sec="1178342006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.119.222.110"/>
    </slice>
    <from sec="1178341447" usec="0"/>
    <to sec="1178341541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.122.162.111"/>
    </slice>
    <from sec="1178341435" usec="0"/>
    <to sec="1178342070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.143.35.112"/>
    </slice>
    <from sec="1178341841" usec="0"/>
    <to sec="1178341891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.64.157.112"/>
    </slice>
    <from sec="1178341338" usec="0"/>
    <to sec="1178341360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.43.7.113"/>
    </slice>
    <from sec="1178341369" usec="0"/>
    <to sec="1178341810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.216.36.114"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910024,2.66762,999,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
862[label="145.206.179.114;s;440pkt 440fpkt", shape=diamond, color=yellow];
5761[label="145.206.179.114;457pkt 457fpkt", shape=pentagon, color=darkviolet];
9548[label="145.206.179.114;457pkt 457fpkt", shape=invhouse, color=bisque];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.179.114:36550, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36550: (50%)&lt;BR/&gt; 64774: (0.221566%)&lt;BR/&gt; 59321: (0.221566%)&lt;BR/&gt; 59319: (0.221566%)&lt;BR/&gt; 50688: (0.221566%)&gt;];
}
862--5761[label="1;440pkt 440fpkt"];
862--9548[label="1;440pkt 440fpkt"];
5761--9548[label="1;457pkt 457fpkt"];
</description>
    <slice>
      <filter src_ip="145.206.179.114" src_port="36550"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.208.114"/>
    </slice>
    <from sec="1178341234" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.195.214.114"/>
    </slice>
    <from sec="1178341639" usec="0"/>
    <to sec="1178341935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.241.65.115"/>
    </slice>
    <from sec="1178341526" usec="0"/>
    <to sec="1178341546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.174.80.115"/>
    </slice>
    <from sec="1178341750" usec="0"/>
    <to sec="1178341796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.70.140.115"/>
    </slice>
    <from sec="1178341503" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.140.166.116"/>
    </slice>
    <from sec="1178341460" usec="0"/>
    <to sec="1178341581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.155.72.117"/>
    </slice>
    <from sec="1178341689" usec="0"/>
    <to sec="1178341707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.229.100.117"/>
    </slice>
    <from sec="1178341778" usec="0"/>
    <to sec="1178341793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.190.27.118"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.33.81.118"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
1320[label="129.206.90.196;d;45pkt 45fpkt", shape=diamond, color=yellow];
1702[label="217.88.196.230;s;42pkt 42fpkt", shape=diamond, color=yellow];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.88.196.230:*, 129.206.90.196:80}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3679: (1.14943%)&lt;BR/&gt; 3678: (1.14943%)&lt;BR/&gt; 3677: (1.14943%)&lt;BR/&gt; 3676: (1.14943%)&gt;];
}
1320--1702[label="1;42pkt 42fpkt"];
1320--4026[label="0.0222222;1pkt 1fpkt"];
1320--4074[label="0.0222222;1pkt 1fpkt"];
1320--4115[label="0.0222222;1pkt 1fpkt"];
1320--5805[label="0.0666667;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.90.196" dst_port="80" src_ip="217.88.196.230"/>
    </slice>
    <from sec="1178341242" usec="0"/>
    <to sec="1178341482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.112.141.119"/>
    </slice>
    <from sec="1178341899" usec="0"/>
    <to sec="1178341952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.211.206.119"/>
    </slice>
    <from sec="1178341301" usec="0"/>
    <to sec="1178341401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
2756[label="134.33.163.120;s;25pkt 25fpkt", shape=diamond, color=yellow];
3176[label="54.128.34.132;d;8pkt 8fpkt", shape=diamond, color=yellow];
3196[label="59.203.150.42;d;5pkt 5fpkt", shape=diamond, color=yellow];
5825[label="134.33.163.120;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.33.163.120:80, *:*}[58.9744%]&lt;BR/&gt;{134.33.163.120:*, 54.128.34.132:*}[51.2821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.5195%)&lt;BR/&gt; 113: (5.84416%)&lt;BR/&gt; 21: (5.84416%)&lt;BR/&gt; 20031: (2.5974%)&lt;BR/&gt; 61917: (1.94805%)&gt;];
}
2756--3176[label="0.625;5pkt 5fpkt"];
2756--3196[label="0.8;4pkt 4fpkt"];
2756--5825[label="1;25pkt 25fpkt"];
3176--5825[label="1;8pkt 8fpkt"];
3196--5825[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="54.128.34.132" src_ip="134.33.163.120"/>
      <filter src_ip="134.33.163.120" src_port="80"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.34.96.121"/>
    </slice>
    <from sec="1178341914" usec="0"/>
    <to sec="1178341942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.176.121"/>
    </slice>
    <from sec="1178341819" usec="0"/>
    <to sec="1178341889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.132.255.121"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178341441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.97.40.123"/>
    </slice>
    <from sec="1178341794" usec="0"/>
    <to sec="1178342010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.24.159.124"/>
    </slice>
    <from sec="1178341319" usec="0"/>
    <to sec="1178341545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.255.174.124"/>
    </slice>
    <from sec="1178341874" usec="0"/>
    <to sec="1178341905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.112.8.125"/>
    </slice>
    <from sec="1178341681" usec="0"/>
    <to sec="1178341772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.5.69.125"/>
    </slice>
    <from sec="1178341504" usec="0"/>
    <to sec="1178341512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.212.160.125"/>
    </slice>
    <from sec="1178341235" usec="0"/>
    <to sec="1178342042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.225.75.126"/>
    </slice>
    <from sec="1178341588" usec="0"/>
    <to sec="1178341764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.185.80.128"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.97.104.128"/>
    </slice>
    <from sec="1178342054" usec="0"/>
    <to sec="1178342081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.89.132.128"/>
    </slice>
    <from sec="1178341441" usec="0"/>
    <to sec="1178341675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.202.138.128"/>
    </slice>
    <from sec="1178342004" usec="0"/>
    <to sec="1178342018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
1862[label="168.45.128.129;s;90pkt 90fpkt", shape=diamond, color=yellow];
5916[label="168.45.128.129;97pkt 97fpkt", shape=pentagon, color=darkviolet];
8288[label="168.45.128.129;97pkt 97fpkt", shape=invtriangle, color=brown];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.128.129:25, *:*}[98.9691%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63124: (0.528169%)&lt;BR/&gt; 61263: (0.528169%)&lt;BR/&gt; 60486: (0.528169%)&lt;BR/&gt; 59659: (0.528169%)&gt;];
}
1862--5916[label="1;90pkt 90fpkt"];
1862--8288[label="1;90pkt 90fpkt"];
5916--8288[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.128.129" src_port="25"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.129.154.130"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.66.32.131"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.83.34.131"/>
    </slice>
    <from sec="1178341703" usec="0"/>
    <to sec="1178341730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.172.131"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.203.175.131"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.169.156.132"/>
    </slice>
    <from sec="1178341683" usec="0"/>
    <to sec="1178341708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.239.196.132"/>
    </slice>
    <from sec="1178341500" usec="0"/>
    <to sec="1178341515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.52.226.132"/>
    </slice>
    <from sec="1178341758" usec="0"/>
    <to sec="1178341781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.30.1.135"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.37.2.136"/>
    </slice>
    <from sec="1178341239" usec="0"/>
    <to sec="1178341264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.2.32.136"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178342089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.28.138"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.144.49.138"/>
    </slice>
    <from sec="1178341254" usec="0"/>
    <to sec="1178341308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.138.50.139"/>
    </slice>
    <from sec="1178341711" usec="0"/>
    <to sec="1178341724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.238.85.139"/>
    </slice>
    <from sec="1178341516" usec="0"/>
    <to sec="1178341543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.197.107.139"/>
    </slice>
    <from sec="1178341685" usec="0"/>
    <to sec="1178341704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.142.93.140"/>
    </slice>
    <from sec="1178341587" usec="0"/>
    <to sec="1178341618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.210.204.140"/>
    </slice>
    <from sec="1178341479" usec="0"/>
    <to sec="1178341806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.69.18.141"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.45.46.141"/>
    </slice>
    <from sec="1178341240" usec="0"/>
    <to sec="1178341931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.132.40.142"/>
    </slice>
    <from sec="1178342031" usec="0"/>
    <to sec="1178342066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.152.99.142"/>
    </slice>
    <from sec="1178341903" usec="0"/>
    <to sec="1178341932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.117.155.142"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.89.144"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.199.199.144"/>
    </slice>
    <from sec="1178341928" usec="0"/>
    <to sec="1178341955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.65.140.145"/>
    </slice>
    <from sec="1178341770" usec="0"/>
    <to sec="1178341798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.50.217.146"/>
    </slice>
    <from sec="1178342065" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.15.22.147"/>
    </slice>
    <from sec="1178341684" usec="0"/>
    <to sec="1178341710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.66.59.147"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.0.149"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.118.109.149"/>
    </slice>
    <from sec="1178341790" usec="0"/>
    <to sec="1178341817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.65.143.149"/>
    </slice>
    <from sec="1178341298" usec="0"/>
    <to sec="1178341351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
241[label="208.17.150.167;d;2pkt 2fpkt", shape=diamond, color=yellow];
388[label="145.206.32.165;s;39pkt 39fpkt", shape=diamond, color=yellow];
710[label="128.122.163.132;s;978pkt 978fpkt", shape=diamond, color=yellow];
1061[label="209.154.220.134;d;1430pkt 1430fpkt", shape=diamond, color=yellow];
1123[label="13.171.145.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
1173[label="213.89.168.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
1429[label="129.206.198.232;s;2pkt 2fpkt", shape=diamond, color=yellow];
1495[label="208.17.162.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
1836[label="198.150.164.202;s;62pkt 62fpkt", shape=diamond, color=yellow];
1978[label="145.206.100.150;s;3pkt 3fpkt", shape=diamond, color=yellow];
2014[label="112.105.72.137;d;469pkt 469fpkt", shape=diamond, color=yellow];
2070[label="209.222.44.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
2417[label="54.128.40.230;d;39pkt 39fpkt", shape=diamond, color=yellow];
2708[label="129.206.209.71;s;4pkt 4fpkt", shape=diamond, color=yellow];
2997[label="129.206.214.114;s;24pkt 24fpkt", shape=diamond, color=yellow];
3420[label="209.154.220.134;d;646pkt 646fpkt", shape=hexagon, color=black];
3503[label="13.171.145.66;d;1pkt 1fpkt", shape=hexagon, color=black];
3905[label="129.206.214.114;s;24pkt 24fpkt", shape=hexagon, color=black];
4380[label="129.206.172.13;33pkt 33fpkt", shape=pentagon, color=darkviolet];
4436[label="129.206.97.17;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4638[label="129.206.69.31;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4722[label="129.206.14.37;9pkt 9fpkt", shape=pentagon, color=darkviolet];
4841[label="129.206.218.44;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4952[label="129.206.220.53;21pkt 21fpkt", shape=pentagon, color=darkviolet];
4981[label="129.206.96.56;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5201[label="129.206.209.71;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5655[label="129.206.57.105;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5768[label="129.206.214.114;25pkt 25fpkt", shape=pentagon, color=darkviolet];
5818[label="129.206.65.120;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5877[label="129.206.65.126;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5957[label="128.122.163.132;1035pkt 1035fpkt", shape=pentagon, color=darkviolet];
6161[label="145.206.100.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6676[label="129.206.90.193;28pkt 28fpkt", shape=pentagon, color=darkviolet];
6677[label="129.206.128.193;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6706[label="129.206.90.195;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6724[label="129.206.210.196;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6953[label="129.206.165.216;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7488[label="129.206.172.13;32pkt 32fpkt", shape=invtriangle, color=brown];
7614[label="129.206.69.31;20pkt 20fpkt", shape=invtriangle, color=brown];
7665[label="129.206.14.37;9pkt 9fpkt", shape=invtriangle, color=brown];
7794[label="129.206.96.56;7pkt 7fpkt", shape=invtriangle, color=brown];
8239[label="129.206.65.120;11pkt 11fpkt", shape=invtriangle, color=brown];
8424[label="145.206.100.150;4pkt 4fpkt", shape=invtriangle, color=brown];
8706[label="129.206.128.193;33pkt 33fpkt", shape=invtriangle, color=brown];
8736[label="129.206.210.196;8pkt 8fpkt", shape=invtriangle, color=brown];
9228[label="129.206.69.31;19pkt 19fpkt", shape=invhouse, color=bisque];
9256[label="129.206.14.37;9pkt 9fpkt", shape=invhouse, color=bisque];
9552[label="129.206.214.114;25pkt 25fpkt", shape=invhouse, color=bisque];
9606[label="128.122.163.132;1022pkt 1022fpkt", shape=invhouse, color=bisque];
9666[label="145.206.100.150;4pkt 4fpkt", shape=invhouse, color=bisque];
9826[label="129.206.128.193;33pkt 33fpkt", shape=invhouse, color=bisque];
9845[label="129.206.210.196;8pkt 8fpkt", shape=invhouse, color=bisque];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.154.220.134:80}[42.9099%]&lt;BR/&gt;{128.122.163.132:123, *:123}[22.0855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (41.1878%)&lt;BR/&gt; 80: (18.1447%)&lt;BR/&gt; 0: (12.566%)&lt;BR/&gt; 25: (0.768369%)&lt;BR/&gt; 1026: (0.360173%)&gt;];
}
241--1429[label="0.5;1pkt 1fpkt"];
388--1061[label="0.025641;1pkt 1fpkt"];
388--1123[label="1;1pkt 1fpkt"];
388--1173[label="1;1pkt 1fpkt"];
388--3420[label="0.025641;1pkt 1fpkt"];
388--3503[label="1;1pkt 1fpkt"];
710--1268[label="0.0128205;1pkt 1fpkt"];
710--1495[label="0.5;1pkt 1fpkt"];
710--2070[label="1;1pkt 1fpkt"];
710--5957[label="1;978pkt 978fpkt"];
710--9606[label="0.986708;965pkt 965fpkt"];
1061--1554[label="0.00917431;1pkt 1fpkt"];
1061--2997[label="0.0416667;1pkt 1fpkt"];
1061--3420[label="1;646pkt 646fpkt"];
1061--3905[label="0.0416667;1pkt 1fpkt"];
1061--4026[label="0.0475524;68pkt 68fpkt"];
1061--4040[label="0.0524476;75pkt 75fpkt"];
1061--4074[label="0.0475524;68pkt 68fpkt"];
1061--4085[label="0.0524476;75pkt 75fpkt"];
1061--4115[label="0.0475524;68pkt 68fpkt"];
1061--4126[label="0.0524476;75pkt 75fpkt"];
1061--4436[label="0.1;1pkt 1fpkt"];
1061--4638[label="0.05;1pkt 1fpkt"];
1061--4981[label="0.142857;1pkt 1fpkt"];
1061--5655[label="0.125;1pkt 1fpkt"];
1061--5768[label="0.04;1pkt 1fpkt"];
1061--5818[label="0.0909091;1pkt 1fpkt"];
1061--5877[label="0.25;1pkt 1fpkt"];
1061--6161[label="0.25;1pkt 1fpkt"];
1061--6676[label="0.0357143;1pkt 1fpkt"];
1061--6677[label="0.030303;1pkt 1fpkt"];
1061--6706[label="0.166667;1pkt 1fpkt"];
1061--7204[label="0.0178571;1pkt 1fpkt"];
1061--7614[label="0.05;1pkt 1fpkt"];
1061--7794[label="0.142857;1pkt 1fpkt"];
1061--8239[label="0.0909091;1pkt 1fpkt"];
1061--8424[label="0.25;1pkt 1fpkt"];
1061--8706[label="0.030303;1pkt 1fpkt"];
1061--9023[label="0.0178571;1pkt 1fpkt"];
1061--9228[label="0.0526316;1pkt 1fpkt"];
1061--9552[label="0.04;1pkt 1fpkt"];
1061--9666[label="0.25;1pkt 1fpkt"];
1061--9826[label="0.030303;1pkt 1fpkt"];
1061--9984[label="0.0178571;1pkt 1fpkt"];
1123--3503[label="1;1pkt 1fpkt"];
1429--2014[label="0.5;1pkt 1fpkt"];
1495--2708[label="0.5;1pkt 1fpkt"];
1495--5957[label="0.5;1pkt 1fpkt"];
1495--9606[label="0.5;1pkt 1fpkt"];
1836--2417[label="0.948718;37pkt 37fpkt"];
1978--6161[label="1;3pkt 3fpkt"];
1978--8424[label="1;3pkt 3fpkt"];
1978--9666[label="1;3pkt 3fpkt"];
2014--2400[label="0.0263158;1pkt 1fpkt"];
2014--2491[label="0.00609756;1pkt 1fpkt"];
2014--2708[label="0.25;1pkt 1fpkt"];
2014--2997[label="0.0416667;1pkt 1fpkt"];
2014--3294[label="0.0021322;1pkt 1fpkt"];
2014--3905[label="0.0416667;1pkt 1fpkt"];
2014--4245[label="0.0666667;1pkt 1fpkt"];
2014--4380[label="0.030303;1pkt 1fpkt"];
2014--4436[label="0.1;1pkt 1fpkt"];
2014--4638[label="0.05;1pkt 1fpkt"];
2014--4722[label="0.111111;1pkt 1fpkt"];
2014--4761[label="0.0416667;1pkt 1fpkt"];
2014--4841[label="0.333333;1pkt 1fpkt"];
2014--4895[label="0.03125;1pkt 1fpkt"];
2014--4939[label="0.0021322;1pkt 1fpkt"];
2014--4952[label="0.047619;1pkt 1fpkt"];
2014--4981[label="0.142857;1pkt 1fpkt"];
2014--5150[label="0.00806452;1pkt 1fpkt"];
2014--5201[label="0.333333;1pkt 1fpkt"];
2014--5323[label="0.037037;1pkt 1fpkt"];
2014--5655[label="0.125;1pkt 1fpkt"];
2014--5768[label="0.04;1pkt 1fpkt"];
2014--5818[label="0.0909091;1pkt 1fpkt"];
2014--5877[label="0.25;1pkt 1fpkt"];
2014--6099[label="0.0416667;1pkt 1fpkt"];
2014--6153[label="0.037037;1pkt 1fpkt"];
2014--6389[label="0.00671141;1pkt 1fpkt"];
2014--6676[label="0.0357143;1pkt 1fpkt"];
2014--6706[label="0.166667;1pkt 1fpkt"];
2014--6724[label="0.125;1pkt 1fpkt"];
2014--6953[label="0.142857;1pkt 1fpkt"];
2014--7241[label="0.0666667;1pkt 1fpkt"];
2014--7488[label="0.03125;1pkt 1fpkt"];
2014--7614[label="0.05;1pkt 1fpkt"];
2014--7665[label="0.111111;1pkt 1fpkt"];
2014--7686[label="0.0416667;1pkt 1fpkt"];
2014--7794[label="0.142857;1pkt 1fpkt"];
2014--7880[label="0.00806452;1pkt 1fpkt"];
2014--7971[label="0.037037;1pkt 1fpkt"];
2014--8239[label="0.0909091;1pkt 1fpkt"];
2014--8420[label="0.037037;1pkt 1fpkt"];
2014--8555[label="0.00671141;1pkt 1fpkt"];
2014--8736[label="0.125;1pkt 1fpkt"];
2014--9043[label="0.0666667;1pkt 1fpkt"];
2014--9228[label="0.0526316;1pkt 1fpkt"];
2014--9256[label="0.111111;1pkt 1fpkt"];
2014--9266[label="0.0416667;1pkt 1fpkt"];
2014--9365[label="0.00806452;1pkt 1fpkt"];
2014--9419[label="0.037037;1pkt 1fpkt"];
2014--9552[label="0.04;1pkt 1fpkt"];
2014--9665[label="0.037037;1pkt 1fpkt"];
2014--9737[label="0.00671141;1pkt 1fpkt"];
2014--9845[label="0.125;1pkt 1fpkt"];
2070--5957[label="1;1pkt 1fpkt"];
2070--9606[label="1;1pkt 1fpkt"];
2417--4952[label="0.047619;1pkt 1fpkt"];
2708--5201[label="1;3pkt 3fpkt"];
2997--3008[label="0.0416667;1pkt 1fpkt"];
2997--3420[label="0.0416667;1pkt 1fpkt"];
2997--3905[label="1;24pkt 24fpkt"];
2997--5768[label="1;24pkt 24fpkt"];
2997--9552[label="1;24pkt 24fpkt"];
3420--3905[label="0.0416667;1pkt 1fpkt"];
3420--4026[label="0.105263;68pkt 68fpkt"];
3420--4040[label="0.116099;75pkt 75fpkt"];
3420--4074[label="0.105263;68pkt 68fpkt"];
3420--4085[label="0.116099;75pkt 75fpkt"];
3420--4115[label="0.105263;68pkt 68fpkt"];
3420--4126[label="0.116099;75pkt 75fpkt"];
3420--4981[label="0.142857;1pkt 1fpkt"];
3420--5655[label="0.125;1pkt 1fpkt"];
3420--5768[label="0.04;1pkt 1fpkt"];
3420--5818[label="0.0909091;1pkt 1fpkt"];
3420--5877[label="0.25;1pkt 1fpkt"];
3420--6676[label="0.0357143;1pkt 1fpkt"];
3420--6706[label="0.166667;1pkt 1fpkt"];
3420--7204[label="0.0178571;1pkt 1fpkt"];
3420--7794[label="0.142857;1pkt 1fpkt"];
3420--8239[label="0.0909091;1pkt 1fpkt"];
3420--9023[label="0.0178571;1pkt 1fpkt"];
3420--9552[label="0.04;1pkt 1fpkt"];
3420--9984[label="0.0178571;1pkt 1fpkt"];
3905--5768[label="1;24pkt 24fpkt"];
3905--9552[label="1;24pkt 24fpkt"];
4380--7488[label="1;32pkt 32fpkt"];
4638--7614[label="1;20pkt 20fpkt"];
4638--9228[label="1;19pkt 19fpkt"];
4722--7665[label="1;9pkt 9fpkt"];
4722--9256[label="1;9pkt 9fpkt"];
4981--7794[label="1;7pkt 7fpkt"];
5768--9552[label="1;25pkt 25fpkt"];
5818--8239[label="1;11pkt 11fpkt"];
5957--9606[label="1;1022pkt 1022fpkt"];
6161--8424[label="1;4pkt 4fpkt"];
6161--9666[label="1;4pkt 4fpkt"];
6677--8706[label="1;33pkt 33fpkt"];
6677--9826[label="1;33pkt 33fpkt"];
6724--8736[label="1;8pkt 8fpkt"];
6724--9845[label="1;8pkt 8fpkt"];
7614--9228[label="1;19pkt 19fpkt"];
7665--9256[label="1;9pkt 9fpkt"];
8424--9666[label="1;4pkt 4fpkt"];
8706--9826[label="1;33pkt 33fpkt"];
8736--9845[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="209.154.220.134" dst_port="80"/>
      <filter dst_port="123" src_ip="128.122.163.132" src_port="123"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.176.150"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.212.112.151"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.54.36.153"/>
    </slice>
    <from sec="1178341386" usec="0"/>
    <to sec="1178341761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.153.196.153"/>
    </slice>
    <from sec="1178341794" usec="0"/>
    <to sec="1178341849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.155.25.154"/>
    </slice>
    <from sec="1178341589" usec="0"/>
    <to sec="1178341695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.206.182.154"/>
    </slice>
    <from sec="1178341407" usec="0"/>
    <to sec="1178341434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.124.203.154"/>
    </slice>
    <from sec="1178341506" usec="0"/>
    <to sec="1178341610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
1691[label="134.149.149.155;s;17pkt 17fpkt", shape=diamond, color=yellow];
6224[label="134.149.149.155;22pkt 22fpkt", shape=pentagon, color=darkviolet];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.149.155:*, 216.136.161.39:80}[27.2727%]&lt;BR/&gt;{134.149.149.155:*, 217.201.165.211:80}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1999: (2.5641%)&lt;BR/&gt; 1941: (2.5641%)&lt;BR/&gt; 1940: (2.5641%)&lt;BR/&gt; 1939: (2.5641%)&gt;];
}
1691--6224[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="216.136.161.39" dst_port="80" src_ip="134.149.149.155"/>
      <filter dst_ip="217.201.165.211" dst_port="80" src_ip="134.149.149.155"/>
    </slice>
    <from sec="1178341239" usec="0"/>
    <to sec="1178342064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.133.214.155"/>
    </slice>
    <from sec="1178342011" usec="0"/>
    <to sec="1178342073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.49.4.156"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.93.156"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.47.127.156"/>
    </slice>
    <from sec="1178341557" usec="0"/>
    <to sec="1178341627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.109.160.156"/>
    </slice>
    <from sec="1178341843" usec="0"/>
    <to sec="1178341941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.228.165.156"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.113.112.157"/>
    </slice>
    <from sec="1178341385" usec="0"/>
    <to sec="1178341417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.167.114.157"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.245.150.158"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.236.79.159"/>
    </slice>
    <from sec="1178341725" usec="0"/>
    <to sec="1178341744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.154.194.160"/>
    </slice>
    <from sec="1178341544" usec="0"/>
    <to sec="1178341557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="47.76.209.160"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
4889[label="134.128.88.48;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.88.48:6361, *:*}[62.069%]&lt;BR/&gt;{134.128.88.48:*, 220.148.214.66:12350}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6361: (31.0345%)&lt;BR/&gt; 12350: (13.7931%)&lt;BR/&gt; 80: (3.44828%)&lt;BR/&gt; 62778: (1.72414%)&lt;BR/&gt; 56604: (1.72414%)&gt;];
}
</description>
    <slice>
      <filter src_ip="134.128.88.48" src_port="6361"/>
      <filter dst_ip="220.148.214.66" dst_port="12350" src_ip="134.128.88.48"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.209.105.163"/>
    </slice>
    <from sec="1178342043" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.105.162.163"/>
    </slice>
    <from sec="1178341555" usec="0"/>
    <to sec="1178341614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.102.102.165"/>
    </slice>
    <from sec="1178341216" usec="0"/>
    <to sec="1178341315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.119.119.165"/>
    </slice>
    <from sec="1178341220" usec="0"/>
    <to sec="1178341252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
3081[label="129.206.100.167;s;348pkt 348fpkt", shape=diamond, color=yellow];
6356[label="129.206.100.167;374pkt 374fpkt", shape=pentagon, color=darkviolet];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.100.167:42102, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42102: (50%)&lt;BR/&gt; 3923: (0.277008%)&lt;BR/&gt; 3803: (0.277008%)&lt;BR/&gt; 3603: (0.277008%)&lt;BR/&gt; 3493: (0.277008%)&gt;];
}
3081--6356[label="0.997126;347pkt 347fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.100.167" src_port="42102"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.200.193.167"/>
    </slice>
    <from sec="1178341512" usec="0"/>
    <to sec="1178341529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.233.213.167"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178341707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.214.245.167"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.141.90.168"/>
    </slice>
    <from sec="1178341698" usec="0"/>
    <to sec="1178341781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.244.220.168"/>
    </slice>
    <from sec="1178341748" usec="0"/>
    <to sec="1178341830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.72.18.170"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178341596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.150.29.171"/>
    </slice>
    <from sec="1178341223" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.133.136.171"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
593[label="168.45.2.125;d;9pkt 9fpkt", shape=diamond, color=yellow];
1027[label="41.120.27.138;s;1pkt 1fpkt", shape=diamond, color=yellow];
1330[label="41.144.85.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
1354[label="201.172.68.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
3352[label="168.45.2.125;d;7pkt 7fpkt", shape=hexagon, color=black];
5995[label="201.172.68.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6441[label="41.144.85.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8585[label="41.144.85.173;1pkt 1fpkt", shape=invtriangle, color=brown];
9630[label="41.120.27.138;1pkt 1fpkt", shape=invhouse, color=bisque];
9754[label="41.144.85.173;1pkt 1fpkt", shape=invhouse, color=bisque];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.172.68.250:80, 168.45.2.125:*}[44.4444%]&lt;BR/&gt;{*:*, 168.45.2.125:53544}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53544: (29.1667%)&lt;BR/&gt; 80: (14.5833%)&lt;BR/&gt; 8968: (12.5%)&lt;BR/&gt; 8708: (8.33333%)&lt;BR/&gt; 8314: (8.33333%)&gt;];
}
593--1027[label="1;1pkt 1fpkt"];
593--1330[label="1;1pkt 1fpkt"];
593--1354[label="1;1pkt 1fpkt"];
593--3352[label="1;7pkt 7fpkt"];
593--5995[label="1;1pkt 1fpkt"];
593--6441[label="1;1pkt 1fpkt"];
593--8585[label="1;1pkt 1fpkt"];
593--9630[label="1;1pkt 1fpkt"];
593--9754[label="1;1pkt 1fpkt"];
1027--3352[label="1;1pkt 1fpkt"];
1027--9630[label="1;1pkt 1fpkt"];
1330--3352[label="1;1pkt 1fpkt"];
1330--6441[label="1;1pkt 1fpkt"];
1330--8585[label="1;1pkt 1fpkt"];
1330--9754[label="1;1pkt 1fpkt"];
1354--3352[label="1;1pkt 1fpkt"];
1354--5995[label="1;1pkt 1fpkt"];
3352--5995[label="1;1pkt 1fpkt"];
3352--6441[label="1;1pkt 1fpkt"];
3352--8585[label="1;1pkt 1fpkt"];
3352--9630[label="1;1pkt 1fpkt"];
3352--9754[label="1;1pkt 1fpkt"];
6441--8585[label="1;1pkt 1fpkt"];
6441--9754[label="1;1pkt 1fpkt"];
8585--9754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.2.125" dst_port="53544"/>
      <filter dst_ip="168.45.2.125" src_ip="201.172.68.250" src_port="80"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178341825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.255.200.174"/>
    </slice>
    <from sec="1178341348" usec="0"/>
    <to sec="1178341897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.144.80.175"/>
    </slice>
    <from sec="1178341630" usec="0"/>
    <to sec="1178341767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.243.129.175"/>
    </slice>
    <from sec="1178341369" usec="0"/>
    <to sec="1178341383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.243.181.176"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.28.107.177"/>
    </slice>
    <from sec="1178341912" usec="0"/>
    <to sec="1178342033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.202.2.180"/>
    </slice>
    <from sec="1178341490" usec="0"/>
    <to sec="1178341545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.0.16.180"/>
    </slice>
    <from sec="1178341451" usec="0"/>
    <to sec="1178341517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.217.135.180"/>
    </slice>
    <from sec="1178341921" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.134.196.180"/>
    </slice>
    <from sec="1178341720" usec="0"/>
    <to sec="1178341799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.118.243.180"/>
    </slice>
    <from sec="1178341686" usec="0"/>
    <to sec="1178341709" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.137.13.181"/>
    </slice>
    <from sec="1178341681" usec="0"/>
    <to sec="1178341815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
2120[label="217.78.51.181;s;479pkt 479fpkt", shape=diamond, color=yellow];
6531[label="217.78.51.181;521pkt 521fpkt", shape=pentagon, color=darkviolet];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.78.51.181:*, *:2967}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 3448: (0.3%)&lt;BR/&gt; 4708: (0.2%)&lt;BR/&gt; 4150: (0.2%)&lt;BR/&gt; 4128: (0.2%)&gt;];
}
2120--6531[label="1;479pkt 479fpkt"];
</description>
    <slice>
      <filter dst_port="2967" src_ip="217.78.51.181"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.26.130.181"/>
    </slice>
    <from sec="1178341393" usec="0"/>
    <to sec="1178341740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.212.2.183"/>
    </slice>
    <from sec="1178341621" usec="0"/>
    <to sec="1178342059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.237.170.183"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.179.130.184"/>
    </slice>
    <from sec="1178342063" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.252.145.184"/>
    </slice>
    <from sec="1178341298" usec="0"/>
    <to sec="1178341320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.202.56.185"/>
    </slice>
    <from sec="1178341383" usec="0"/>
    <to sec="1178341410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.155.234.185"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.174.3.186"/>
    </slice>
    <from sec="1178341799" usec="0"/>
    <to sec="1178341814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.132.140.186"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.180.144.186"/>
    </slice>
    <from sec="1178341767" usec="0"/>
    <to sec="1178341786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.143.65.189"/>
    </slice>
    <from sec="1178341527" usec="0"/>
    <to sec="1178341642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
3036[label="129.206.18.190;s;253pkt 253fpkt", shape=diamond, color=yellow];
6633[label="129.206.18.190;272pkt 272fpkt", shape=pentagon, color=darkviolet];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.18.190:40287, *:53}[57.3529%]&lt;BR/&gt;{129.206.18.190:53, *:*}[40.8088%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.2381%)&lt;BR/&gt; 40287: (28.9524%)&lt;BR/&gt; 0: (1.71429%)&lt;BR/&gt; 32772: (0.571429%)&lt;BR/&gt; 32794: (0.380952%)&gt;];
}
3036--3042[label="0.0138889;1pkt 1fpkt"];
3036--3045[label="0.0111111;1pkt 1fpkt"];
3036--3082[label="0.0140845;1pkt 1fpkt"];
3036--3691[label="0.0120482;1pkt 1fpkt"];
3036--4055[label="0.00395257;1pkt 1fpkt"];
3036--4100[label="0.00395257;1pkt 1fpkt"];
3036--4139[label="0.00395257;1pkt 1fpkt"];
3036--6633[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.18.190" src_port="53"/>
      <filter dst_port="53" src_ip="129.206.18.190" src_port="40287"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.85.34.190"/>
    </slice>
    <from sec="1178341690" usec="0"/>
    <to sec="1178341705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.197.212.190"/>
    </slice>
    <from sec="1178341739" usec="0"/>
    <to sec="1178341766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.68.213.190"/>
    </slice>
    <from sec="1178341695" usec="0"/>
    <to sec="1178341713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.165.195.191"/>
    </slice>
    <from sec="1178341792" usec="0"/>
    <to sec="1178341806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.100.76.192"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
1811[label="129.206.128.192;s;171pkt 171fpkt", shape=diamond, color=yellow];
6664[label="129.206.128.192;182pkt 182fpkt", shape=pentagon, color=darkviolet];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.128.192:25, *:*}[71.4286%]&lt;BR/&gt;{129.206.128.192:*, *:25}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 1469: (0.424929%)&lt;BR/&gt; 64540: (0.283286%)&lt;BR/&gt; 63757: (0.283286%)&lt;BR/&gt; 63225: (0.283286%)&gt;];
}
1811--3729[label="0.0116959;2pkt 2fpkt"];
1811--6664[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.128.192" src_port="25"/>
      <filter dst_port="25" src_ip="129.206.128.192"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.33809,2.62922,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
778[label="172.113.141.192;s;5pkt 5fpkt", shape=diamond, color=yellow];
1122[label="146.117.237.73;d;6pkt 6fpkt", shape=diamond, color=yellow];
1794[label="218.113.116.239;d;3pkt 3fpkt", shape=diamond, color=yellow];
1835[label="172.113.214.10;s;2pkt 2fpkt", shape=diamond, color=yellow];
2441[label="172.113.228.37;s;3pkt 3fpkt", shape=diamond, color=yellow];
3833[label="146.117.237.73;d;6pkt 6fpkt", shape=hexagon, color=black];
4731[label="172.113.228.37;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6666[label="172.113.141.192;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9820[label="172.113.141.192;4pkt 4fpkt", shape=invhouse, color=bisque];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.141.192:*, 146.117.237.73:6667}[33.3333%]&lt;BR/&gt;{*:*, 218.113.116.239:*}[25%]&lt;BR/&gt;{172.113.228.37:*, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (43.0556%)&lt;BR/&gt; 4425: (6.94444%)&lt;BR/&gt; 2331: (6.94444%)&lt;BR/&gt; 2310: (6.94444%)&lt;BR/&gt; 3702: (5.55556%)&gt;];
}
778--1122[label="0.8;4pkt 4fpkt"];
778--1794[label="0.333333;1pkt 1fpkt"];
778--3833[label="0.8;4pkt 4fpkt"];
778--6666[label="1;4pkt 4fpkt"];
778--9820[label="1;4pkt 4fpkt"];
1122--2441[label="0.333333;1pkt 1fpkt"];
1122--3833[label="1;6pkt 6fpkt"];
1122--4731[label="0.333333;1pkt 1fpkt"];
1122--6666[label="0.75;3pkt 3fpkt"];
1122--9820[label="0.75;3pkt 3fpkt"];
1794--1835[label="0.5;1pkt 1fpkt"];
1794--6666[label="0.333333;1pkt 1fpkt"];
1794--9820[label="0.333333;1pkt 1fpkt"];
2441--3833[label="0.333333;1pkt 1fpkt"];
2441--4731[label="1;3pkt 3fpkt"];
3833--4731[label="0.333333;1pkt 1fpkt"];
3833--6666[label="0.75;3pkt 3fpkt"];
3833--9820[label="0.75;3pkt 3fpkt"];
6666--9820[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="172.113.228.37"/>
      <filter dst_ip="218.113.116.239"/>
      <filter dst_ip="146.117.237.73" dst_port="6667" src_ip="172.113.141.192"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.155.234.193"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.153.208.194"/>
    </slice>
    <from sec="1178341748" usec="0"/>
    <to sec="1178341754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.224.21.195"/>
    </slice>
    <from sec="1178341244" usec="0"/>
    <to sec="1178341302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.10.24.195"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178341236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.178.67.195"/>
    </slice>
    <from sec="1178341741" usec="0"/>
    <to sec="1178341831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42769,2.70164,002,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
75[label="197.227.13.196s;201pkt 201fpkt", shape=rectangle, color=red];
6711[label="197.227.13.196;255pkt 255fpkt", shape=pentagon, color=darkviolet];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.227.13.196:62336, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62336: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
75--6711[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="197.227.13.196" src_port="62336"/>
    </slice>
    <from sec="1178341975" usec="0"/>
    <to sec="1178341990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.169.55.196"/>
    </slice>
    <from sec="1178341402" usec="0"/>
    <to sec="1178341489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.17.79.196"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.91.145.196"/>
    </slice>
    <from sec="1178341606" usec="0"/>
    <to sec="1178341622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.213.228.196"/>
    </slice>
    <from sec="1178341766" usec="0"/>
    <to sec="1178341788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.141.13.197"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178341237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.72.87.197"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.93.64.198"/>
    </slice>
    <from sec="1178341987" usec="0"/>
    <to sec="1178342014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.48.1.200"/>
    </slice>
    <from sec="1178341555" usec="0"/>
    <to sec="1178341567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.166.130.200"/>
    </slice>
    <from sec="1178341460" usec="0"/>
    <to sec="1178341624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
3233[label="54.64.21.201;s;4pkt 4fpkt", shape=diamond, color=yellow];
6775[label="54.64.21.201;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.64.21.201:80, 199.181.146.74:59957}[25%]&lt;BR/&gt;{54.64.21.201:80, 199.181.146.74:59958}[25%]&lt;BR/&gt;{54.64.21.201:80, 199.181.146.74:60090}[25%]&lt;BR/&gt;{54.64.21.201:80, 199.181.146.74:60091}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60091: (12.5%)&lt;BR/&gt; 60090: (12.5%)&lt;BR/&gt; 59958: (12.5%)&lt;BR/&gt; 59957: (12.5%)&gt;];
}
3233--6775[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.146.74" dst_port="60091" src_ip="54.64.21.201" src_port="80"/>
      <filter dst_ip="199.181.146.74" dst_port="60090" src_ip="54.64.21.201" src_port="80"/>
      <filter dst_ip="199.181.146.74" dst_port="59958" src_ip="54.64.21.201" src_port="80"/>
      <filter dst_ip="199.181.146.74" dst_port="59957" src_ip="54.64.21.201" src_port="80"/>
    </slice>
    <from sec="1178341983" usec="0"/>
    <to sec="1178342054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.4.76.201"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.247.10.202"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.4.84.203"/>
    </slice>
    <from sec="1178341472" usec="0"/>
    <to sec="1178341498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.28.90.203"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.145.192.203"/>
    </slice>
    <from sec="1178341731" usec="0"/>
    <to sec="1178341790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
2403[label="8.149.39.161;d;246pkt 246fpkt", shape=diamond, color=yellow];
6810[label="134.153.80.204;71pkt 71fpkt", shape=pentagon, color=darkviolet];
7509[label="134.153.240.16;73pkt 73fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.240.16:1433, 8.149.39.161:*}[30.0813%]&lt;BR/&gt;{134.153.80.204:1433, 8.149.39.161:*}[29.2683%]&lt;BR/&gt;{134.153.75.20:1433, 8.149.39.161:*}[28.4553%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (46.1538%)&lt;BR/&gt; 139: (1.92308%)&lt;BR/&gt; 80: (1.92308%)&lt;BR/&gt; 2569: (0.512821%)&lt;BR/&gt; 1564: (0.384615%)&gt;];
}
2403--6810[label="1;71pkt 71fpkt"];
2403--7509[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="8.149.39.161" src_ip="134.153.240.16" src_port="1433"/>
      <filter dst_ip="8.149.39.161" src_ip="134.153.80.204" src_port="1433"/>
      <filter dst_ip="8.149.39.161" src_ip="134.153.75.20" src_port="1433"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.149.85.204"/>
    </slice>
    <from sec="1178341215" usec="0"/>
    <to sec="1178342061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.22.202.204"/>
    </slice>
    <from sec="1178341404" usec="0"/>
    <to sec="1178341553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.203.241.204"/>
    </slice>
    <from sec="1178341727" usec="0"/>
    <to sec="1178341754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.135.139.205"/>
    </slice>
    <from sec="1178341943" usec="0"/>
    <to sec="1178341977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.153.223.206"/>
    </slice>
    <from sec="1178341890" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.77.81.207"/>
    </slice>
    <from sec="1178341890" usec="0"/>
    <to sec="1178341961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.33.141.207"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.200.208"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.199.153.209"/>
    </slice>
    <from sec="1178342024" usec="0"/>
    <to sec="1178342049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.215.168.209"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.206.90.210"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.117.222.210"/>
    </slice>
    <from sec="1178342006" usec="0"/>
    <to sec="1178342036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.222.6.212"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
266[label="216.136.174.22;d;149pkt 149fpkt", shape=diamond, color=yellow];
573[label="134.149.136.212;s;213pkt 213fpkt", shape=diamond, color=yellow];
583[label="216.136.174.24;d;336pkt 336fpkt", shape=diamond, color=yellow];
697[label="155.255.139.119;s;136pkt 136fpkt", shape=diamond, color=yellow];
1259[label="155.255.200.52;s;223pkt 223fpkt", shape=diamond, color=yellow];
1325[label="155.255.1.167;s;44pkt 44fpkt", shape=diamond, color=yellow];
1708[label="155.255.80.69;s;13pkt 13fpkt", shape=diamond, color=yellow];
2013[label="155.255.221.189;s;32pkt 32fpkt", shape=diamond, color=yellow];
2252[label="129.206.100.66;s;53pkt 53fpkt", shape=diamond, color=yellow];
3472[label="155.255.1.167;s;37pkt 37fpkt", shape=hexagon, color=black];
3656[label="155.255.139.119;s;119pkt 119fpkt", shape=hexagon, color=black];
3946[label="216.136.174.24;d;336pkt 336fpkt", shape=hexagon, color=black];
4942[label="155.255.200.52;225pkt 225fpkt", shape=pentagon, color=darkviolet];
5158[label="155.255.80.69;13pkt 13fpkt", shape=pentagon, color=darkviolet];
5809[label="155.255.139.119;163pkt 163fpkt", shape=pentagon, color=darkviolet];
6522[label="134.149.128.180;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6631[label="155.255.221.189;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6910[label="134.149.136.212;224pkt 224fpkt", shape=pentagon, color=darkviolet];
7883[label="155.255.80.69;13pkt 13fpkt", shape=invtriangle, color=brown];
8683[label="155.255.221.189;32pkt 32fpkt", shape=invtriangle, color=brown];
8829[label="134.149.136.212;224pkt 224fpkt", shape=invtriangle, color=brown];
9810[label="155.255.221.189;32pkt 32fpkt", shape=invhouse, color=bisque];
9892[label="134.149.136.212;224pkt 224fpkt", shape=invhouse, color=bisque];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.136.174.24:80}[42.0482%]&lt;BR/&gt;{155.255.200.52:*, *:80}[27.1084%]&lt;BR/&gt;{134.149.136.212:*, *:80}[26.988%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9484%)&lt;BR/&gt; 43864: (0.189329%)&lt;BR/&gt; 41331: (0.189329%)&lt;BR/&gt; 43632: (0.172117%)&lt;BR/&gt; 41204: (0.172117%)&gt;];
}
266--697[label="0.448529;61pkt 61fpkt"];
266--851[label="0.00671141;1pkt 1fpkt"];
266--957[label="0.0384615;1pkt 1fpkt"];
266--965[label="0.384615;5pkt 5fpkt"];
266--1259[label="0.288591;43pkt 43fpkt"];
266--1325[label="0.204545;9pkt 9fpkt"];
266--1708[label="0.230769;3pkt 3fpkt"];
266--2013[label="0.4375;14pkt 14fpkt"];
266--2616[label="0.0196078;1pkt 1fpkt"];
266--3353[label="0.0434783;1pkt 1fpkt"];
266--3472[label="0.243243;9pkt 9fpkt"];
266--3656[label="0.445378;53pkt 53fpkt"];
266--3804[label="0.0322581;1pkt 1fpkt"];
266--4026[label="0.0536913;8pkt 8fpkt"];
266--4040[label="0.0872483;13pkt 13fpkt"];
266--4074[label="0.0536913;8pkt 8fpkt"];
266--4085[label="0.0872483;13pkt 13fpkt"];
266--4115[label="0.0536913;8pkt 8fpkt"];
266--4126[label="0.0872483;13pkt 13fpkt"];
266--4900[label="0.0888889;4pkt 4fpkt"];
266--4942[label="0.288591;43pkt 43fpkt"];
266--5158[label="0.230769;3pkt 3fpkt"];
266--5809[label="0.409396;61pkt 61fpkt"];
266--6522[label="0.03125;1pkt 1fpkt"];
266--6631[label="0.4375;14pkt 14fpkt"];
266--7237[label="0.0147059;1pkt 1fpkt"];
266--7883[label="0.230769;3pkt 3fpkt"];
266--8683[label="0.4375;14pkt 14fpkt"];
266--9810[label="0.4375;14pkt 14fpkt"];
573--583[label="0.690141;147pkt 147fpkt"];
573--3946[label="0.690141;147pkt 147fpkt"];
573--4026[label="0.0516432;11pkt 11fpkt"];
573--4040[label="0.0704225;15pkt 15fpkt"];
573--4074[label="0.0516432;11pkt 11fpkt"];
573--4085[label="0.0704225;15pkt 15fpkt"];
573--4115[label="0.0516432;11pkt 11fpkt"];
573--4126[label="0.0704225;15pkt 15fpkt"];
573--6910[label="1;213pkt 213fpkt"];
573--8829[label="1;213pkt 213fpkt"];
573--9892[label="1;213pkt 213fpkt"];
583--697[label="0.433824;59pkt 59fpkt"];
583--957[label="0.269231;7pkt 7fpkt"];
583--965[label="0.153846;2pkt 2fpkt"];
583--1259[label="0.215247;48pkt 48fpkt"];
583--1325[label="0.25;11pkt 11fpkt"];
583--1708[label="0.384615;5pkt 5fpkt"];
583--2013[label="0.21875;7pkt 7fpkt"];
583--2252[label="0.471698;25pkt 25fpkt"];
583--2616[label="0.0392157;2pkt 2fpkt"];
583--3353[label="0.304348;7pkt 7fpkt"];
583--3472[label="0.297297;11pkt 11fpkt"];
583--3656[label="0.445378;53pkt 53fpkt"];
583--3804[label="0.0645161;2pkt 2fpkt"];
583--3946[label="1;336pkt 336fpkt"];
583--4026[label="0.0297619;10pkt 10fpkt"];
583--4040[label="0.0684524;23pkt 23fpkt"];
583--4074[label="0.0297619;10pkt 10fpkt"];
583--4085[label="0.0684524;23pkt 23fpkt"];
583--4115[label="0.0297619;10pkt 10fpkt"];
583--4126[label="0.0684524;23pkt 23fpkt"];
583--4900[label="0.0888889;4pkt 4fpkt"];
583--4942[label="0.213333;48pkt 48fpkt"];
583--5158[label="0.384615;5pkt 5fpkt"];
583--5809[label="0.398773;65pkt 65fpkt"];
583--6522[label="0.0625;2pkt 2fpkt"];
583--6631[label="0.21875;7pkt 7fpkt"];
583--6910[label="0.65625;147pkt 147fpkt"];
583--7237[label="0.0294118;2pkt 2fpkt"];
583--7883[label="0.384615;5pkt 5fpkt"];
583--8683[label="0.21875;7pkt 7fpkt"];
583--8829[label="0.65625;147pkt 147fpkt"];
583--9810[label="0.21875;7pkt 7fpkt"];
583--9892[label="0.65625;147pkt 147fpkt"];
697--890[label="0.0147059;2pkt 2fpkt"];
697--1275[label="0.0533333;4pkt 4fpkt"];
697--3656[label="1;119pkt 119fpkt"];
697--3946[label="0.433824;59pkt 59fpkt"];
697--4026[label="0.0808824;11pkt 11fpkt"];
697--4040[label="0.0808824;11pkt 11fpkt"];
697--4074[label="0.0808824;11pkt 11fpkt"];
697--4085[label="0.0808824;11pkt 11fpkt"];
697--4115[label="0.0808824;11pkt 11fpkt"];
697--4126[label="0.0808824;11pkt 11fpkt"];
697--5809[label="1;136pkt 136fpkt"];
1259--1261[label="0.0379747;3pkt 3fpkt"];
1259--1275[label="0.0133333;1pkt 1fpkt"];
1259--1587[label="0.00934579;1pkt 1fpkt"];
1259--2156[label="0.016129;1pkt 1fpkt"];
1259--3462[label="0.0044843;1pkt 1fpkt"];
1259--3945[label="0.0044843;1pkt 1fpkt"];
1259--3946[label="0.215247;48pkt 48fpkt"];
1259--4026[label="0.0358744;8pkt 8fpkt"];
1259--4040[label="0.0807175;18pkt 18fpkt"];
1259--4074[label="0.0358744;8pkt 8fpkt"];
1259--4085[label="0.0807175;18pkt 18fpkt"];
1259--4115[label="0.0358744;8pkt 8fpkt"];
1259--4126[label="0.0807175;18pkt 18fpkt"];
1259--4942[label="1;223pkt 223fpkt"];
1325--3472[label="1;37pkt 37fpkt"];
1325--3946[label="0.25;11pkt 11fpkt"];
1325--4040[label="0.227273;10pkt 10fpkt"];
1325--4085[label="0.227273;10pkt 10fpkt"];
1325--4126[label="0.227273;10pkt 10fpkt"];
1708--3946[label="0.384615;5pkt 5fpkt"];
1708--5158[label="1;13pkt 13fpkt"];
1708--7883[label="1;13pkt 13fpkt"];
2013--3946[label="0.21875;7pkt 7fpkt"];
2013--6631[label="1;32pkt 32fpkt"];
2013--8683[label="1;32pkt 32fpkt"];
2013--9810[label="1;32pkt 32fpkt"];
2252--2783[label="0.0188679;1pkt 1fpkt"];
2252--2812[label="0.0444444;2pkt 2fpkt"];
2252--3946[label="0.471698;25pkt 25fpkt"];
3472--3946[label="0.297297;11pkt 11fpkt"];
3472--4040[label="0.27027;10pkt 10fpkt"];
3472--4085[label="0.27027;10pkt 10fpkt"];
3472--4126[label="0.27027;10pkt 10fpkt"];
3656--3946[label="0.445378;53pkt 53fpkt"];
3656--4026[label="0.092437;11pkt 11fpkt"];
3656--4040[label="0.092437;11pkt 11fpkt"];
3656--4074[label="0.092437;11pkt 11fpkt"];
3656--4085[label="0.092437;11pkt 11fpkt"];
3656--4115[label="0.092437;11pkt 11fpkt"];
3656--4126[label="0.092437;11pkt 11fpkt"];
3656--5809[label="1;119pkt 119fpkt"];
3946--4026[label="0.0297619;10pkt 10fpkt"];
3946--4040[label="0.0684524;23pkt 23fpkt"];
3946--4074[label="0.0297619;10pkt 10fpkt"];
3946--4085[label="0.0684524;23pkt 23fpkt"];
3946--4115[label="0.0297619;10pkt 10fpkt"];
3946--4126[label="0.0684524;23pkt 23fpkt"];
3946--4900[label="0.0888889;4pkt 4fpkt"];
3946--4942[label="0.213333;48pkt 48fpkt"];
3946--5158[label="0.384615;5pkt 5fpkt"];
3946--5809[label="0.398773;65pkt 65fpkt"];
3946--6522[label="0.0625;2pkt 2fpkt"];
3946--6631[label="0.21875;7pkt 7fpkt"];
3946--6910[label="0.65625;147pkt 147fpkt"];
3946--7237[label="0.0294118;2pkt 2fpkt"];
3946--7883[label="0.384615;5pkt 5fpkt"];
3946--8683[label="0.21875;7pkt 7fpkt"];
3946--8829[label="0.65625;147pkt 147fpkt"];
3946--9810[label="0.21875;7pkt 7fpkt"];
3946--9892[label="0.65625;147pkt 147fpkt"];
5158--7883[label="1;13pkt 13fpkt"];
6631--8683[label="1;32pkt 32fpkt"];
6631--9810[label="1;32pkt 32fpkt"];
6910--8829[label="1;224pkt 224fpkt"];
6910--9892[label="1;224pkt 224fpkt"];
8683--9810[label="1;32pkt 32fpkt"];
8829--9892[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="155.255.200.52"/>
      <filter dst_port="80" src_ip="134.149.136.212"/>
      <filter dst_ip="216.136.174.24" dst_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.32.143.212"/>
    </slice>
    <from sec="1178341325" usec="0"/>
    <to sec="1178341432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
1541[label="199.181.152.213;s;625pkt 625fpkt", shape=diamond, color=yellow];
6924[label="199.181.152.213;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.152.213:*, *:53}[77.6%]&lt;BR/&gt;{199.181.152.213:0, *:0}[21.92%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.3703%)&lt;BR/&gt; 0: (22.7848%)&lt;BR/&gt; 2130: (0.237342%)&lt;BR/&gt; 22: (0.237342%)&lt;BR/&gt; 4730: (0.158228%)&gt;];
}
1541--4060[label="0.0016;1pkt 1fpkt"];
1541--4104[label="0.0016;1pkt 1fpkt"];
1541--4140[label="0.0016;1pkt 1fpkt"];
1541--6924[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="199.181.152.213"/>
      <filter src_ip="199.181.152.213"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.183.108.214"/>
    </slice>
    <from sec="1178341733" usec="0"/>
    <to sec="1178341752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.61.112.215"/>
    </slice>
    <from sec="1178341226" usec="0"/>
    <to sec="1178341313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.206.175.215"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.148.90.216"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.228.216"/>
    </slice>
    <from sec="1178341217" usec="0"/>
    <to sec="1178342048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.41.20.219"/>
    </slice>
    <from sec="1178341508" usec="0"/>
    <to sec="1178341535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
3240[label="34.191.49.219;s;500pkt 500fpkt", shape=diamond, color=yellow];
6981[label="34.191.49.219;1480pkt 1480fpkt", shape=pentagon, color=darkviolet];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.191.49.219:0, *:0}[94.0541%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.0909%)&lt;BR/&gt; 139: (1.64141%)&lt;BR/&gt; 445: (1.31313%)&lt;BR/&gt; 1082: (0.0505051%)&lt;BR/&gt; 1080: (0.0505051%)&gt;];
}
3240--6981[label="1;500pkt 500fpkt"];
</description>
    <slice>
      <filter src_ip="34.191.49.219"/>
    </slice>
    <from sec="1178341993" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.101.134.219"/>
    </slice>
    <from sec="1178341510" usec="0"/>
    <to sec="1178341533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.17.144.219"/>
    </slice>
    <from sec="1178341955" usec="0"/>
    <to sec="1178342053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
1522[label="134.144.153.35;d;2006pkt 2006fpkt", shape=diamond, color=yellow];
7011[label="200.104.243.221;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8898[label="200.104.243.221;1pkt 1fpkt", shape=invtriangle, color=brown];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.144.153.35:5364}[99.003%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5364: (49.502%)&lt;BR/&gt; 0: (0.448207%)&lt;BR/&gt; 443: (0.124502%)&lt;BR/&gt; 80: (0.0996016%)&lt;BR/&gt; 58989: (0.0747012%)&gt;];
}
1522--4025[label="0.0013245;1pkt 1fpkt"];
1522--4038[label="0.000900901;1pkt 1fpkt"];
1522--4040[label="0.000498504;1pkt 1fpkt"];
1522--4083[label="0.000900901;1pkt 1fpkt"];
1522--4085[label="0.000498504;1pkt 1fpkt"];
1522--4124[label="0.00090009;1pkt 1fpkt"];
1522--4126[label="0.000498504;1pkt 1fpkt"];
1522--4561[label="0.0909091;1pkt 1fpkt"];
1522--7011[label="1;1pkt 1fpkt"];
1522--7575[label="0.0909091;1pkt 1fpkt"];
1522--8898[label="1;1pkt 1fpkt"];
7011--8898[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.153.35" dst_port="5364"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.185.222"/>
    </slice>
    <from sec="1178341217" usec="0"/>
    <to sec="1178342080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.114.14.223"/>
    </slice>
    <from sec="1178341364" usec="0"/>
    <to sec="1178341445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.201.142.225"/>
    </slice>
    <from sec="1178341242" usec="0"/>
    <to sec="1178341273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.15.6.226"/>
    </slice>
    <from sec="1178342057" usec="0"/>
    <to sec="1178342072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.235.151.226"/>
    </slice>
    <from sec="1178341353" usec="0"/>
    <to sec="1178341367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.88.244.226"/>
    </slice>
    <from sec="1178341772" usec="0"/>
    <to sec="1178341798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.129.27.228"/>
    </slice>
    <from sec="1178341372" usec="0"/>
    <to sec="1178341544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.165.194.229"/>
    </slice>
    <from sec="1178342024" usec="0"/>
    <to sec="1178342069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.37.53.230"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.245.230"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.138.69.231"/>
    </slice>
    <from sec="1178341405" usec="0"/>
    <to sec="1178341629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
243[label="129.206.22.252;d;198pkt 198fpkt", shape=diamond, color=yellow];
685[label="49.162.75.12;s;203pkt 203fpkt", shape=diamond, color=yellow];
1859[label="134.2.80.59;d;89pkt 89fpkt", shape=diamond, color=yellow];
7108[label="93.28.143.231;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.162.75.12:80, 129.206.22.252:*}[68.5121%]&lt;BR/&gt;{*:*, 134.2.80.59:*}[30.7958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.5455%)&lt;BR/&gt; 8080: (3.23232%)&lt;BR/&gt; 6588: (1.0101%)&lt;BR/&gt; 808: (0.707071%)&lt;BR/&gt; 0: (0.40404%)&gt;];
}
243--685[label="0.883838;175pkt 175fpkt"];
685--1211[label="0.0144928;1pkt 1fpkt"];
685--1859[label="0.303371;27pkt 27fpkt"];
1859--2460[label="0.0128205;1pkt 1fpkt"];
1859--6057[label="0.011236;1pkt 1fpkt"];
1859--6556[label="0.0224719;2pkt 2fpkt"];
1859--7108[label="0.8;4pkt 4fpkt"];
1859--8370[label="0.011236;1pkt 1fpkt"];
1859--8643[label="0.0224719;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.2.80.59"/>
      <filter dst_ip="129.206.22.252" src_ip="49.162.75.12" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
5456[label="8.25.94.91;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.25.94.91:*, 134.128.2.213:80}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 59504: (6.25%)&lt;BR/&gt; 57485: (6.25%)&lt;BR/&gt; 55397: (6.25%)&lt;BR/&gt; 53247: (6.25%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="134.128.2.213" dst_port="80" src_ip="8.25.94.91"/>
    </slice>
    <from sec="1178341287" usec="0"/>
    <to sec="1178342008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.155.20.232"/>
    </slice>
    <from sec="1178341781" usec="0"/>
    <to sec="1178341815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.193.129.233"/>
    </slice>
    <from sec="1178341346" usec="0"/>
    <to sec="1178341507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.188.138.233"/>
    </slice>
    <from sec="1178341680" usec="0"/>
    <to sec="1178341741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.227.113.234"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.179.196.234"/>
    </slice>
    <from sec="1178342028" usec="0"/>
    <to sec="1178342041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.14.229.234"/>
    </slice>
    <from sec="1178341249" usec="0"/>
    <to sec="1178341340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="46.208.90.235"/>
    </slice>
    <from sec="1178341770" usec="0"/>
    <to sec="1178341793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.113.218.236"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.52.62.237"/>
    </slice>
    <from sec="1178341433" usec="0"/>
    <to sec="1178341473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.103.144.238"/>
    </slice>
    <from sec="1178341515" usec="0"/>
    <to sec="1178341596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.112.44.239"/>
    </slice>
    <from sec="1178341817" usec="0"/>
    <to sec="1178341938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.131.105.239"/>
    </slice>
    <from sec="1178341274" usec="0"/>
    <to sec="1178341320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.112.241"/>
    </slice>
    <from sec="1178341222" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
3225[label="168.45.111.170;d;61pkt 61fpkt", shape=diamond, color=yellow];
3231[label="217.195.69.188;s;5pkt 5fpkt", shape=diamond, color=yellow];
3254[label="13.41.63.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
6399[label="217.195.69.170;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6498[label="217.195.68.179;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7210[label="13.41.63.242;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9027[label="13.41.63.242;2pkt 2fpkt", shape=invtriangle, color=brown];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.251.10.201:80, 168.45.111.170:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.75%)&lt;BR/&gt; 1104: (2.5%)&lt;BR/&gt; 1103: (2.5%)&lt;BR/&gt; 1095: (1.25%)&lt;BR/&gt; 1094: (1.25%)&gt;];
}
3225--3231[label="1;5pkt 5fpkt"];
3225--3254[label="1;2pkt 2fpkt"];
3225--4772[label="0.0163934;1pkt 1fpkt"];
3225--6399[label="0.4;2pkt 2fpkt"];
3225--6498[label="1;3pkt 3fpkt"];
3225--7210[label="1;2pkt 2fpkt"];
3225--9027[label="1;2pkt 2fpkt"];
3254--7210[label="1;2pkt 2fpkt"];
3254--9027[label="1;2pkt 2fpkt"];
7210--9027[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.111.170" src_ip="199.251.10.201" src_port="80"/>
    </slice>
    <from sec="1178341972" usec="0"/>
    <to sec="1178342083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="143.116.154.242"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.41.63.243"/>
    </slice>
    <from sec="1178342013" usec="0"/>
    <to sec="1178342015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.153.222.243"/>
    </slice>
    <from sec="1178341273" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.229.19.244"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.40.95.244"/>
    </slice>
    <from sec="1178341900" usec="0"/>
    <to sec="1178341904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.120.134.244"/>
    </slice>
    <from sec="1178341335" usec="0"/>
    <to sec="1178341347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.82.151.244"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178341615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.145.128.245"/>
    </slice>
    <from sec="1178341580" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.59.227.246"/>
    </slice>
    <from sec="1178341378" usec="0"/>
    <to sec="1178341906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.55.35.247"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.170.204.247"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178341264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.1.17.248"/>
    </slice>
    <from sec="1178341583" usec="0"/>
    <to sec="1178341621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.41.198.248"/>
    </slice>
    <from sec="1178341466" usec="0"/>
    <to sec="1178341523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.221.75.249"/>
    </slice>
    <from sec="1178342058" usec="0"/>
    <to sec="1178342080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.12.32.250"/>
    </slice>
    <from sec="1178341658" usec="0"/>
    <to sec="1178341696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.153.178.250"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.185.186.251"/>
    </slice>
    <from sec="1178341494" usec="0"/>
    <to sec="1178341571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21573,2.63695,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
244[label="129.206.22.252;s;198pkt 198fpkt", shape=diamond, color=yellow];
245[label="49.162.75.12;d;203pkt 203fpkt", shape=diamond, color=yellow];
1568[label="134.2.80.59;s;140pkt 140fpkt", shape=diamond, color=yellow];
3654[label="49.162.75.12;d;176pkt 176fpkt", shape=hexagon, color=black];
5014[label="134.2.80.59;146pkt 146fpkt", shape=pentagon, color=darkviolet];
7313[label="129.206.22.252;218pkt 218fpkt", shape=pentagon, color=darkviolet];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.22.252:*, 49.162.75.12:80}[59.0164%]&lt;BR/&gt;{134.2.80.59:*, *:*}[40.1639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.1656%)&lt;BR/&gt; 8080: (2.59019%)&lt;BR/&gt; 6588: (2.31267%)&lt;BR/&gt; 7212: (0.925069%)&lt;BR/&gt; 808: (0.647549%)&gt;];
}
244--245[label="0.883838;175pkt 175fpkt"];
244--3654[label="0.857955;151pkt 151fpkt"];
244--4026[label="0.0353535;7pkt 7fpkt"];
244--4040[label="0.0606061;12pkt 12fpkt"];
244--4074[label="0.0353535;7pkt 7fpkt"];
244--4085[label="0.0606061;12pkt 12fpkt"];
244--4115[label="0.0353535;7pkt 7fpkt"];
244--4126[label="0.0606061;12pkt 12fpkt"];
244--7313[label="1;198pkt 198fpkt"];
245--1568[label="0.192857;27pkt 27fpkt"];
245--3654[label="1;176pkt 176fpkt"];
245--4026[label="0.0394089;8pkt 8fpkt"];
245--4040[label="0.0640394;13pkt 13fpkt"];
245--4074[label="0.0394089;8pkt 8fpkt"];
245--4085[label="0.0640394;13pkt 13fpkt"];
245--4115[label="0.0394089;8pkt 8fpkt"];
245--4126[label="0.0640394;13pkt 13fpkt"];
245--5014[label="0.184932;27pkt 27fpkt"];
245--5530[label="0.03125;1pkt 1fpkt"];
245--7313[label="0.862069;175pkt 175fpkt"];
245--8081[label="0.03125;1pkt 1fpkt"];
1568--2459[label="0.0117647;1pkt 1fpkt"];
1568--3654[label="0.171429;24pkt 24fpkt"];
1568--4026[label="0.00714286;1pkt 1fpkt"];
1568--4040[label="0.0142857;2pkt 2fpkt"];
1568--4074[label="0.00714286;1pkt 1fpkt"];
1568--4085[label="0.0142857;2pkt 2fpkt"];
1568--4115[label="0.00714286;1pkt 1fpkt"];
1568--4126[label="0.0142857;2pkt 2fpkt"];
1568--5014[label="0.992857;139pkt 139fpkt"];
3654--4026[label="0.0454545;8pkt 8fpkt"];
3654--4040[label="0.0738636;13pkt 13fpkt"];
3654--4074[label="0.0454545;8pkt 8fpkt"];
3654--4085[label="0.0738636;13pkt 13fpkt"];
3654--4115[label="0.0454545;8pkt 8fpkt"];
3654--4126[label="0.0738636;13pkt 13fpkt"];
3654--5014[label="0.164384;24pkt 24fpkt"];
3654--5530[label="0.03125;1pkt 1fpkt"];
3654--7313[label="0.857955;151pkt 151fpkt"];
3654--8081[label="0.03125;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.2.80.59"/>
      <filter dst_ip="49.162.75.12" dst_port="80" src_ip="129.206.22.252"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.6.107.252"/>
    </slice>
    <from sec="1178341806" usec="0"/>
    <to sec="1178341823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.201.128.252"/>
    </slice>
    <from sec="1178341982" usec="0"/>
    <to sec="1178341992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.235.65.253"/>
    </slice>
    <from sec="1178341648" usec="0"/>
    <to sec="1178341685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.119.168.253"/>
    </slice>
    <from sec="1178341901" usec="0"/>
    <to sec="1178342019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.99.70.255"/>
    </slice>
    <from sec="1178341609" usec="0"/>
    <to sec="1178341667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.380385,2.71683,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.92.86.255"/>
    </slice>
    <from sec="1178341572" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718086,2.67525,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
2036[label="134.153.163.255;s;311pkt 311fpkt", shape=diamond, color=yellow];
7349[label="134.153.163.255;333pkt 333fpkt", shape=pentagon, color=darkviolet];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.163.255:34052, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34052: (50%)&lt;BR/&gt; 1707: (0.310559%)&lt;BR/&gt; 64908: (0.15528%)&lt;BR/&gt; 61877: (0.15528%)&lt;BR/&gt; 61217: (0.15528%)&gt;];
}
2036--7349[label="0.996785;310pkt 310fpkt"];
</description>
    <slice>
      <filter src_ip="134.153.163.255" src_port="34052"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
4160[label="134.149.168.0;77pkt 77fpkt", shape=pentagon, color=darkviolet];
7354[label="134.149.168.0;76pkt 76fpkt", shape=invtriangle, color=brown];
9107[label="134.149.168.0;76pkt 76fpkt", shape=invhouse, color=bisque];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.168.0:*, 88.179.110.21:80}[80.5195%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1859: (0.655022%)&lt;BR/&gt; 1858: (0.655022%)&lt;BR/&gt; 1857: (0.655022%)&lt;BR/&gt; 1856: (0.655022%)&gt;];
}
4160--7354[label="1;76pkt 76fpkt"];
4160--9107[label="1;76pkt 76fpkt"];
7354--9107[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="88.179.110.21" dst_port="80" src_ip="134.149.168.0"/>
    </slice>
    <from sec="1178341390" usec="0"/>
    <to sec="1178341473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,501,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
2907[label="172.113.228.0;s;76pkt 76fpkt", shape=diamond, color=yellow];
4165[label="172.113.228.0;91pkt 91fpkt", shape=pentagon, color=darkviolet];
7357[label="172.113.228.0;92pkt 92fpkt", shape=invtriangle, color=brown];
9109[label="172.113.228.0;91pkt 91fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.228.0:*, *:21}[82.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (40.8571%)&lt;BR/&gt; 123: (9.71429%)&lt;BR/&gt; 3177: (0.571429%)&lt;BR/&gt; 3175: (0.571429%)&lt;BR/&gt; 3173: (0.571429%)&gt;];
}
2907--4165[label="0.986842;75pkt 75fpkt"];
2907--7357[label="1;76pkt 76fpkt"];
2907--9109[label="0.986842;75pkt 75fpkt"];
4165--7357[label="1;91pkt 91fpkt"];
4165--9109[label="1;91pkt 91fpkt"];
7357--9109[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="172.113.228.0"/>
    </slice>
    <from sec="1178341362" usec="0"/>
    <to sec="1178342065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.246.232.0"/>
    </slice>
    <from sec="1178342021" usec="0"/>
    <to sec="1178342050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
4170[label="128.122.80.1;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7360[label="128.122.80.1;13pkt 13fpkt", shape=invtriangle, color=brown];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.80.1:995, 198.226.132.116:*}[35.7143%]&lt;BR/&gt;{128.122.80.1:995, 212.183.89.182:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 64607: (3.7037%)&lt;BR/&gt; 64585: (3.7037%)&lt;BR/&gt; 63145: (3.7037%)&lt;BR/&gt; 60269: (3.7037%)&gt;];
}
4170--7360[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="198.226.132.116" src_ip="128.122.80.1" src_port="995"/>
      <filter dst_ip="212.183.89.182" src_ip="128.122.80.1" src_port="995"/>
    </slice>
    <from sec="1178341218" usec="0"/>
    <to sec="1178341883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.145.188.1"/>
    </slice>
    <from sec="1178341632" usec="0"/>
    <to sec="1178341664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
4190[label="128.122.80.2;34pkt 34fpkt", shape=pentagon, color=darkviolet];
7369[label="128.122.80.2;35pkt 35fpkt", shape=invtriangle, color=brown];
9114[label="128.122.80.2;35pkt 35fpkt", shape=invhouse, color=bisque];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.80.2:43301, *:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43301: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4190--7369[label="1;34pkt 34fpkt"];
4190--9114[label="1;34pkt 34fpkt"];
7369--9114[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="128.122.80.2" src_port="43301"/>
    </slice>
    <from sec="1178341223" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.8.83.2"/>
    </slice>
    <from sec="1178341532" usec="0"/>
    <to sec="1178341560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
4196[label="172.113.171.2;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7373[label="172.113.171.2;14pkt 14fpkt", shape=invtriangle, color=brown];
9115[label="172.113.171.2;15pkt 15fpkt", shape=invhouse, color=bisque];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.171.2:*, 53.211.2.2:21}[80%]&lt;BR/&gt;{172.113.171.2:*, 215.117.242.203:5050}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (39.5349%)&lt;BR/&gt; 5050: (10.4651%)&lt;BR/&gt; 1145: (3.48837%)&lt;BR/&gt; 1142: (3.48837%)&lt;BR/&gt; 1132: (3.48837%)&gt;];
}
4196--7373[label="1;14pkt 14fpkt"];
4196--9115[label="1;14pkt 14fpkt"];
7373--9115[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="53.211.2.2" dst_port="21" src_ip="172.113.171.2"/>
      <filter dst_ip="215.117.242.203" dst_port="5050" src_ip="172.113.171.2"/>
    </slice>
    <from sec="1178341332" usec="0"/>
    <to sec="1178342057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.224.213.2"/>
    </slice>
    <from sec="1178341928" usec="0"/>
    <to sec="1178341974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
4204[label="134.153.232.2;87pkt 87fpkt", shape=pentagon, color=darkviolet];
7379[label="134.153.232.2;87pkt 87fpkt", shape=invtriangle, color=brown];
9118[label="134.153.232.2;87pkt 87fpkt", shape=invhouse, color=bisque];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.232.2:1433, 9.101.249.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4941: (0.574713%)&lt;BR/&gt; 4911: (0.574713%)&lt;BR/&gt; 4813: (0.574713%)&lt;BR/&gt; 4779: (0.574713%)&gt;];
}
4204--7379[label="1;87pkt 87fpkt"];
4204--9118[label="1;87pkt 87fpkt"];
7379--9118[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="9.101.249.210" src_ip="134.153.232.2" src_port="1433"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.176.41.3"/>
    </slice>
    <from sec="1178341734" usec="0"/>
    <to sec="1178341777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_654{
style=filled;
color=gray75;
4219[label="212.183.188.3;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7388[label="212.183.188.3;23pkt 23fpkt", shape=invtriangle, color=brown];
stat654[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.183.188.3:80, 129.206.177.82:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63570: (2.17391%)&lt;BR/&gt; 63569: (2.17391%)&lt;BR/&gt; 63568: (2.17391%)&lt;BR/&gt; 63567: (2.17391%)&gt;];
}
4219--7388[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.177.82" src_ip="212.183.188.3" src_port="80"/>
    </slice>
    <from sec="1178341259" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
4220[label="172.113.220.3;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7389[label="172.113.220.3;8pkt 8fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.220.3:25, 32.246.108.5:*}[22.2222%]&lt;BR/&gt;{172.113.220.3:*, *:6667}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.3529%)&lt;BR/&gt; 6667: (11.7647%)&lt;BR/&gt; 63185: (5.88235%)&lt;BR/&gt; 34085: (5.88235%)&lt;BR/&gt; 27634: (5.88235%)&gt;];
}
4220--7389[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="6667" src_ip="172.113.220.3"/>
      <filter dst_ip="32.246.108.5" src_ip="172.113.220.3" src_port="25"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.142.87.4"/>
    </slice>
    <from sec="1178341619" usec="0"/>
    <to sec="1178341650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.218.214.5"/>
    </slice>
    <from sec="1178341602" usec="0"/>
    <to sec="1178341634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
4268[label="199.132.132.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7416[label="199.132.132.6;1pkt 1fpkt", shape=invtriangle, color=brown];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.132.132.6:80, 199.170.194.155:40259}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40259: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4268--7416[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.170.194.155" dst_port="40259" src_ip="199.132.132.6" src_port="80"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.70.138.6"/>
    </slice>
    <from sec="1178341590" usec="0"/>
    <to sec="1178341650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.91.195.6"/>
    </slice>
    <from sec="1178341281" usec="0"/>
    <to sec="1178341282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
4276[label="172.113.224.6;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7423[label="172.113.224.6;19pkt 19fpkt", shape=invtriangle, color=brown];
9147[label="172.113.224.6;18pkt 18fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.224.6:25, 58.31.146.144:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 37816: (2.67857%)&lt;BR/&gt; 36940: (2.67857%)&lt;BR/&gt; 22088: (2.67857%)&lt;BR/&gt; 8578: (2.67857%)&gt;];
}
4276--7423[label="1;19pkt 19fpkt"];
4276--9147[label="1;18pkt 18fpkt"];
7423--9147[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="58.31.146.144" src_ip="172.113.224.6" src_port="25"/>
    </slice>
    <from sec="1178341211" usec="0"/>
    <to sec="1178342062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.37.19.7"/>
    </slice>
    <from sec="1178341781" usec="0"/>
    <to sec="1178341826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.796784,2.65343,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
1677[label="168.45.106.7;s;28pkt 28fpkt", shape=diamond, color=yellow];
4285[label="168.45.106.7;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7430[label="168.45.106.7;30pkt 30fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.106.7:*, *:80}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.5909%)&lt;BR/&gt; 123: (3.40909%)&lt;BR/&gt; 49258: (1.70455%)&lt;BR/&gt; 49254: (1.70455%)&lt;BR/&gt; 49253: (1.70455%)&gt;];
}
1677--2459[label="0.0357143;1pkt 1fpkt"];
1677--3439[label="0.0833333;2pkt 2fpkt"];
1677--4285[label="0.964286;27pkt 27fpkt"];
1677--7430[label="0.964286;27pkt 27fpkt"];
4285--7430[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.45.106.7"/>
    </slice>
    <from sec="1178341383" usec="0"/>
    <to sec="1178342054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.206.216.7"/>
    </slice>
    <from sec="1178341662" usec="0"/>
    <to sec="1178341714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.113.134.8"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178341940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.749176,2.70969,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
2270[label="168.45.0.84;s;69pkt 69fpkt", shape=diamond, color=yellow];
2312[label="53.153.208.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.0.84:*, *:80}[98.5507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2857%)&lt;BR/&gt; 1081: (1.42857%)&lt;BR/&gt; 123: (1.42857%)&lt;BR/&gt; 1122: (0.714286%)&lt;BR/&gt; 1121: (0.714286%)&gt;];
}
2270--2312[label="1;1pkt 1fpkt"];
2270--2816[label="0.0425532;2pkt 2fpkt"];
2270--3336[label="0.0144928;1pkt 1fpkt"];
2270--4061[label="0.0434783;3pkt 3fpkt"];
2270--4105[label="0.0434783;3pkt 3fpkt"];
2270--4141[label="0.0434783;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.45.0.84"/>
    </slice>
    <from sec="1178341589" usec="0"/>
    <to sec="1178341938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.176.136.9"/>
    </slice>
    <from sec="1178341407" usec="0"/>
    <to sec="1178341519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.145.175.9"/>
    </slice>
    <from sec="1178341971" usec="0"/>
    <to sec="1178341980" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.198.3.10"/>
    </slice>
    <from sec="1178341618" usec="0"/>
    <to sec="1178341643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.118.35.11"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178341594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.120.216.11"/>
    </slice>
    <from sec="1178341269" usec="0"/>
    <to sec="1178341299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.233.1.12"/>
    </slice>
    <from sec="1178342059" usec="0"/>
    <to sec="1178342074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.142.40.12"/>
    </slice>
    <from sec="1178341668" usec="0"/>
    <to sec="1178341832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.117.91.12"/>
    </slice>
    <from sec="1178341785" usec="0"/>
    <to sec="1178341801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.196.92.12"/>
    </slice>
    <from sec="1178341986" usec="0"/>
    <to sec="1178342002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.81.129.12"/>
    </slice>
    <from sec="1178341514" usec="0"/>
    <to sec="1178341532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.232.38.13"/>
    </slice>
    <from sec="1178341237" usec="0"/>
    <to sec="1178341282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
4375[label="128.122.96.13;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7486[label="128.122.96.13;12pkt 12fpkt", shape=invtriangle, color=brown];
9167[label="128.122.96.13;13pkt 13fpkt", shape=invhouse, color=bisque];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.96.13:30848, *:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30848: (46.0526%)&lt;BR/&gt; 60908: (3.94737%)&lt;BR/&gt; 57835: (3.94737%)&lt;BR/&gt; 54968: (3.94737%)&lt;BR/&gt; 53327: (3.94737%)&gt;];
}
4375--7486[label="1;12pkt 12fpkt"];
4375--9167[label="1;13pkt 13fpkt"];
7486--9167[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="128.122.96.13" src_port="30848"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.132.57.14"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.46.160.14"/>
    </slice>
    <from sec="1178341646" usec="0"/>
    <to sec="1178341667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_681{
style=filled;
color=gray75;
4431[label="216.71.79.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7513[label="216.71.79.17;1pkt 1fpkt", shape=invtriangle, color=brown];
9176[label="216.71.79.17;1pkt 1fpkt", shape=invhouse, color=bisque];
stat681[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.71.79.17:60711, 199.181.152.190:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60711: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
4431--7513[label="1;1pkt 1fpkt"];
4431--9176[label="1;1pkt 1fpkt"];
7513--9176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.152.190" dst_port="20" src_ip="216.71.79.17" src_port="60711"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.139.144.17"/>
    </slice>
    <from sec="1178341552" usec="0"/>
    <to sec="1178341577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
4448[label="129.206.221.17;56pkt 56fpkt", shape=pentagon, color=darkviolet];
7521[label="129.206.221.17;56pkt 56fpkt", shape=invtriangle, color=brown];
9179[label="129.206.221.17;56pkt 56fpkt", shape=invhouse, color=bisque];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.221.17:*, 219.107.4.83:80}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53520: (0.892857%)&lt;BR/&gt; 53519: (0.892857%)&lt;BR/&gt; 53518: (0.892857%)&lt;BR/&gt; 53517: (0.892857%)&gt;];
}
4448--7521[label="1;56pkt 56fpkt"];
4448--9179[label="1;56pkt 56fpkt"];
7521--9179[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="219.107.4.83" dst_port="80" src_ip="129.206.221.17"/>
    </slice>
    <from sec="1178341562" usec="0"/>
    <to sec="1178341892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.212.35.19"/>
    </slice>
    <from sec="1178341546" usec="0"/>
    <to sec="1178341562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.16.105.22"/>
    </slice>
    <from sec="1178341632" usec="0"/>
    <to sec="1178341645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.122.78.23"/>
    </slice>
    <from sec="1178341612" usec="0"/>
    <to sec="1178341784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
4537[label="145.133.81.23;57pkt 57fpkt", shape=pentagon, color=darkviolet];
7562[label="145.133.81.23;57pkt 57fpkt", shape=invtriangle, color=brown];
9199[label="145.133.81.23;56pkt 56fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.133.81.23:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4537--7562[label="1;57pkt 57fpkt"];
4537--9199[label="1;56pkt 56fpkt"];
7562--9199[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="145.133.81.23"/>
    </slice>
    <from sec="1178341229" usec="0"/>
    <to sec="1178342076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_688{
style=filled;
color=gray75;
4577[label="134.149.16.27;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7583[label="134.149.16.27;7pkt 7fpkt", shape=invtriangle, color=brown];
stat688[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.16.27:*, 199.101.229.183:80}[42.8571%]&lt;BR/&gt;{134.149.16.27:*, 212.130.47.98:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2228: (7.14286%)&lt;BR/&gt; 2227: (7.14286%)&lt;BR/&gt; 2196: (7.14286%)&lt;BR/&gt; 2161: (7.14286%)&gt;];
}
4577--7583[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="199.101.229.183" dst_port="80" src_ip="134.149.16.27"/>
      <filter dst_ip="212.130.47.98" dst_port="80" src_ip="134.149.16.27"/>
    </slice>
    <from sec="1178341720" usec="0"/>
    <to sec="1178341886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.178.41.27"/>
    </slice>
    <from sec="1178341516" usec="0"/>
    <to sec="1178341544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.237.185.28"/>
    </slice>
    <from sec="1178341557" usec="0"/>
    <to sec="1178341589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
4611[label="155.255.213.29;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7600[label="155.255.213.29;4pkt 4fpkt", shape=invtriangle, color=brown];
9220[label="155.255.213.29;3pkt 3fpkt", shape=invhouse, color=bisque];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.213.29:60485, 216.162.83.120:80}[25%]&lt;BR/&gt;{155.255.213.29:60507, 216.162.83.120:80}[25%]&lt;BR/&gt;{155.255.213.29:60589, 216.162.83.120:80}[25%]&lt;BR/&gt;{155.255.213.29:60625, 216.162.83.120:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60589: (13.6364%)&lt;BR/&gt; 60507: (13.6364%)&lt;BR/&gt; 60485: (13.6364%)&lt;BR/&gt; 60625: (9.09091%)&gt;];
}
4611--7600[label="1;4pkt 4fpkt"];
4611--9220[label="1;3pkt 3fpkt"];
7600--9220[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.162.83.120" dst_port="80" src_ip="155.255.213.29" src_port="60625"/>
      <filter dst_ip="216.162.83.120" dst_port="80" src_ip="155.255.213.29" src_port="60589"/>
      <filter dst_ip="216.162.83.120" dst_port="80" src_ip="155.255.213.29" src_port="60507"/>
      <filter dst_ip="216.162.83.120" dst_port="80" src_ip="155.255.213.29" src_port="60485"/>
    </slice>
    <from sec="1178341697" usec="0"/>
    <to sec="1178341782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.120.89.30"/>
    </slice>
    <from sec="1178341270" usec="0"/>
    <to sec="1178341277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_694{
style=filled;
color=gray75;
1920[label="212.169.96.164;d;46pkt 46fpkt", shape=diamond, color=yellow];
4624[label="128.122.140.30;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7606[label="128.122.140.30;14pkt 14fpkt", shape=invtriangle, color=brown];
9224[label="128.122.140.30;13pkt 13fpkt", shape=invhouse, color=bisque];
stat694[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.138.11:*, 212.169.96.164:80}[65.9574%]&lt;BR/&gt;{128.122.140.30:*, 212.169.96.164:80}[27.6596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8506%)&lt;BR/&gt; 20505: (2.29885%)&lt;BR/&gt; 20504: (2.29885%)&lt;BR/&gt; 20503: (2.29885%)&lt;BR/&gt; 20502: (2.29885%)&gt;];
}
1920--3522[label="0.347826;16pkt 16fpkt"];
1920--4026[label="0.0217391;1pkt 1fpkt"];
1920--4040[label="0.0217391;1pkt 1fpkt"];
1920--4074[label="0.0217391;1pkt 1fpkt"];
1920--4085[label="0.0217391;1pkt 1fpkt"];
1920--4115[label="0.0217391;1pkt 1fpkt"];
1920--4126[label="0.0217391;1pkt 1fpkt"];
1920--4349[label="0.673913;31pkt 31fpkt"];
1920--4624[label="0.928571;13pkt 13fpkt"];
1920--7606[label="0.928571;13pkt 13fpkt"];
1920--9224[label="0.923077;12pkt 12fpkt"];
4624--7606[label="1;14pkt 14fpkt"];
4624--9224[label="1;13pkt 13fpkt"];
7606--9224[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="212.169.96.164" dst_port="80" src_ip="155.255.138.11"/>
      <filter dst_ip="212.169.96.164" dst_port="80" src_ip="128.122.140.30"/>
    </slice>
    <from sec="1178341225" usec="0"/>
    <to sec="1178342023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
4626[label="155.255.149.30;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7608[label="155.255.149.30;21pkt 21fpkt", shape=invtriangle, color=brown];
9225[label="155.255.149.30;21pkt 21fpkt", shape=invhouse, color=bisque];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.149.30:80, 88.216.210.30:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2934: (2.38095%)&lt;BR/&gt; 2933: (2.38095%)&lt;BR/&gt; 2932: (2.38095%)&lt;BR/&gt; 2931: (2.38095%)&gt;];
}
4626--7608[label="1;21pkt 21fpkt"];
4626--9225[label="1;21pkt 21fpkt"];
7608--9225[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="88.216.210.30" src_ip="155.255.149.30" src_port="80"/>
    </slice>
    <from sec="1178341232" usec="0"/>
    <to sec="1178341339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.164.174.30"/>
    </slice>
    <from sec="1178341674" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.145.6.32"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_698{
style=filled;
color=gray75;
4653[label="172.113.162.32;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7626[label="172.113.162.32;11pkt 11fpkt", shape=invtriangle, color=brown];
9237[label="172.113.162.32;10pkt 10fpkt", shape=invhouse, color=bisque];
stat698[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.162.32:*, 195.105.186.191:21}[45.4545%]&lt;BR/&gt;{172.113.162.32:*, 53.211.2.56:21}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (45.3125%)&lt;BR/&gt; 5050: (4.6875%)&lt;BR/&gt; 1506: (4.6875%)&lt;BR/&gt; 1374: (4.6875%)&lt;BR/&gt; 1371: (4.6875%)&gt;];
}
4653--7626[label="1;11pkt 11fpkt"];
4653--9237[label="1;10pkt 10fpkt"];
7626--9237[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="195.105.186.191" dst_port="21" src_ip="172.113.162.32"/>
      <filter dst_ip="53.211.2.56" dst_port="21" src_ip="172.113.162.32"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.176.3.34"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.176.42.34"/>
    </slice>
    <from sec="1178341494" usec="0"/>
    <to sec="1178341497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
4676[label="213.70.52.34;139pkt 139fpkt", shape=pentagon, color=darkviolet];
7635[label="213.70.52.34;139pkt 139fpkt", shape=invtriangle, color=brown];
9242[label="213.70.52.34;139pkt 139fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.70.52.34:1054, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1054: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4676--7635[label="1;139pkt 139fpkt"];
4676--9242[label="1;139pkt 139fpkt"];
7635--9242[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.70.52.34" src_port="1054"/>
    </slice>
    <from sec="1178341956" usec="0"/>
    <to sec="1178341977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
4683[label="172.113.175.34;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7640[label="172.113.175.34;11pkt 11fpkt", shape=invtriangle, color=brown];
9245[label="172.113.175.34;10pkt 10fpkt", shape=invhouse, color=bisque];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.175.34:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44762: (4.6875%)&lt;BR/&gt; 35156: (4.6875%)&lt;BR/&gt; 34450: (4.6875%)&lt;BR/&gt; 29648: (4.6875%)&gt;];
}
4683--7640[label="1;11pkt 11fpkt"];
4683--9245[label="1;10pkt 10fpkt"];
7640--9245[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="172.113.175.34" src_port="25"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.230.183.34"/>
    </slice>
    <from sec="1178341554" usec="0"/>
    <to sec="1178341580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_704{
style=filled;
color=gray75;
4690[label="53.108.29.35;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7645[label="53.108.29.35;2pkt 2fpkt", shape=invtriangle, color=brown];
9247[label="53.108.29.35;1pkt 1fpkt", shape=invhouse, color=bisque];
stat704[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.108.29.35:42376, 198.150.160.102:110}[50%]&lt;BR/&gt;{53.108.29.35:42377, 198.150.160.102:110}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 42377: (30%)&lt;BR/&gt; 42376: (20%)&gt;];
}
4690--7645[label="1;2pkt 2fpkt"];
4690--9247[label="1;1pkt 1fpkt"];
7645--9247[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.150.160.102" dst_port="110" src_ip="53.108.29.35" src_port="42377"/>
      <filter dst_ip="198.150.160.102" dst_port="110" src_ip="53.108.29.35" src_port="42376"/>
    </slice>
    <from sec="1178341672" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.40.86.35"/>
    </slice>
    <from sec="1178341317" usec="0"/>
    <to sec="1178341322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.15.131.35"/>
    </slice>
    <from sec="1178341511" usec="0"/>
    <to sec="1178341563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
4711[label="199.181.158.36;97pkt 97fpkt", shape=pentagon, color=darkviolet];
7659[label="199.181.158.36;97pkt 97fpkt", shape=invtriangle, color=brown];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.158.36:53, 88.137.165.9:*}[28.866%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.2062%)&lt;BR/&gt; 80: (7.73196%)&lt;BR/&gt; 32772: (1.54639%)&lt;BR/&gt; 113: (1.03093%)&lt;BR/&gt; 25: (1.03093%)&gt;];
}
4711--7659[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="88.137.165.9" src_ip="199.181.158.36" src_port="53"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.142.209.36"/>
    </slice>
    <from sec="1178341507" usec="0"/>
    <to sec="1178341587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.153.223.38"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_710{
style=filled;
color=gray75;
4758[label="208.17.230.39;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7683[label="208.17.230.39;9pkt 9fpkt", shape=invtriangle, color=brown];
stat710[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.17.230.39:*, 168.45.130.71:993}[66.6667%]&lt;BR/&gt;{208.17.230.39:*, 168.45.130.71:995}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (33.3333%)&lt;BR/&gt; 995: (16.6667%)&lt;BR/&gt; 2965: (5.55556%)&lt;BR/&gt; 2964: (5.55556%)&lt;BR/&gt; 2963: (5.55556%)&gt;];
}
4758--7683[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.130.71" dst_port="993" src_ip="208.17.230.39"/>
      <filter dst_ip="168.45.130.71" dst_port="995" src_ip="208.17.230.39"/>
    </slice>
    <from sec="1178341274" usec="0"/>
    <to sec="1178341924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
4759[label="56.155.232.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7684[label="56.155.232.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.155.232.39:80, 129.206.1.1:2345}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2345: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4759--7684[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.1.1" dst_port="2345" src_ip="56.155.232.39" src_port="80"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.132.161.40"/>
    </slice>
    <from sec="1178341529" usec="0"/>
    <to sec="1178341560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.34.69.41"/>
    </slice>
    <from sec="1178341214" usec="0"/>
    <to sec="1178341276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
4799[label="168.45.110.42;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7706[label="168.45.110.42;3pkt 3fpkt", shape=invtriangle, color=brown];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.110.42:2065, 54.205.38.4:80}[33.3333%]&lt;BR/&gt;{168.45.110.42:2063, 199.66.39.179:80}[33.3333%]&lt;BR/&gt;{168.45.110.42:2064, 199.66.39.179:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2065: (16.6667%)&lt;BR/&gt; 2064: (16.6667%)&lt;BR/&gt; 2063: (16.6667%)&gt;];
}
4799--7706[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="199.66.39.179" dst_port="80" src_ip="168.45.110.42" src_port="2064"/>
      <filter dst_ip="199.66.39.179" dst_port="80" src_ip="168.45.110.42" src_port="2063"/>
      <filter dst_ip="54.205.38.4" dst_port="80" src_ip="168.45.110.42" src_port="2065"/>
    </slice>
    <from sec="1178341971" usec="0"/>
    <to sec="1178342011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
4805[label="208.102.176.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7707[label="208.102.176.42;2pkt 2fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.102.176.42:1096, 168.45.128.213:80}[50%]&lt;BR/&gt;{208.102.176.42:1097, 168.45.128.213:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1097: (25%)&lt;BR/&gt; 1096: (25%)&gt;];
}
4805--7707[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.128.213" dst_port="80" src_ip="208.102.176.42" src_port="1097"/>
      <filter dst_ip="168.45.128.213" dst_port="80" src_ip="208.102.176.42" src_port="1096"/>
    </slice>
    <from sec="1178341971" usec="0"/>
    <to sec="1178342025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
4808[label="170.129.213.42;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7710[label="170.129.213.42;19pkt 19fpkt", shape=invtriangle, color=brown];
9280[label="170.129.213.42;19pkt 19fpkt", shape=invhouse, color=bisque];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.129.213.42:25, *:*}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 57949: (2.63158%)&lt;BR/&gt; 52234: (2.63158%)&lt;BR/&gt; 50167: (2.63158%)&lt;BR/&gt; 49074: (2.63158%)&gt;];
}
4808--7710[label="1;19pkt 19fpkt"];
4808--9280[label="1;19pkt 19fpkt"];
7710--9280[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="170.129.213.42" src_port="25"/>
    </slice>
    <from sec="1178341241" usec="0"/>
    <to sec="1178342040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.61.112.43"/>
    </slice>
    <from sec="1178341834" usec="0"/>
    <to sec="1178341863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.69.168.43"/>
    </slice>
    <from sec="1178341381" usec="0"/>
    <to sec="1178341399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.140.135.44"/>
    </slice>
    <from sec="1178341358" usec="0"/>
    <to sec="1178341551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_722{
style=filled;
color=gray75;
215[label="168.45.0.53;d;76pkt 76fpkt", shape=diamond, color=yellow];
247[label="129.206.45.17;d;35pkt 35fpkt", shape=diamond, color=yellow];
687[label="68.153.111.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
882[label="134.128.117.3;d;360pkt 360fpkt", shape=diamond, color=yellow];
980[label="43.44.164.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
1008[label="68.154.77.255;s;3pkt 3fpkt", shape=diamond, color=yellow];
1192[label="168.45.171.64;d;91pkt 91fpkt", shape=diamond, color=yellow];
1639[label="68.134.125.2;s;113pkt 113fpkt", shape=diamond, color=yellow];
2326[label="194.65.9.9;s;6pkt 6fpkt", shape=diamond, color=yellow];
2331[label="217.106.182.96;s;2pkt 2fpkt", shape=diamond, color=yellow];
2337[label="204.80.82.21;s;235pkt 235fpkt", shape=diamond, color=yellow];
2982[label="193.122.166.42;s;24pkt 24fpkt", shape=diamond, color=yellow];
3130[label="168.45.115.75;d;121pkt 121fpkt", shape=diamond, color=yellow];
3345[label="134.128.117.3;d;41pkt 41fpkt", shape=hexagon, color=black];
3781[label="68.154.77.255;s;3pkt 3fpkt", shape=hexagon, color=black];
3896[label="194.65.9.9;s;6pkt 6fpkt", shape=hexagon, color=black];
4154[label="68.134.125.0;93pkt 93fpkt", shape=pentagon, color=darkviolet];
4193[label="68.134.125.2;122pkt 122fpkt", shape=pentagon, color=darkviolet];
4343[label="204.80.82.11;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4500[label="204.80.82.21;235pkt 235fpkt", shape=pentagon, color=darkviolet];
4803[label="193.122.166.42;70pkt 70fpkt", shape=pentagon, color=darkviolet];
4862[label="50.254.44.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5525[label="217.106.182.96;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6506[label="43.44.164.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7121[label="216.136.148.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7353[label="68.134.125.0;92pkt 92fpkt", shape=invtriangle, color=brown];
7371[label="68.134.125.2;122pkt 122fpkt", shape=invtriangle, color=brown];
7467[label="204.80.82.11;10pkt 10fpkt", shape=invtriangle, color=brown];
7734[label="50.254.44.46;1pkt 1fpkt", shape=invtriangle, color=brown];
9106[label="68.134.125.0;92pkt 92fpkt", shape=invhouse, color=bisque];
stat722[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.80.82.21:80, 134.128.117.3:*}[31.586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6454%)&lt;BR/&gt; 53: (0.278622%)&lt;BR/&gt; 32768: (0.253293%)&lt;BR/&gt; 1973: (0.177305%)&lt;BR/&gt; 1953: (0.177305%)&gt;];
}
215--846[label="0.0263158;2pkt 2fpkt"];
215--980[label="1;1pkt 1fpkt"];
215--1639[label="0.0131579;1pkt 1fpkt"];
215--3447[label="0.0263158;2pkt 2fpkt"];
215--4193[label="0.0131579;1pkt 1fpkt"];
215--4343[label="0.0909091;1pkt 1fpkt"];
215--4803[label="0.571429;40pkt 40fpkt"];
215--4862[label="1;1pkt 1fpkt"];
215--6506[label="1;1pkt 1fpkt"];
215--7371[label="0.0131579;1pkt 1fpkt"];
215--7467[label="0.1;1pkt 1fpkt"];
215--7734[label="1;1pkt 1fpkt"];
247--402[label="0.0285714;1pkt 1fpkt"];
247--687[label="1;1pkt 1fpkt"];
247--735[label="0.0285714;1pkt 1fpkt"];
247--824[label="0.0285714;1pkt 1fpkt"];
247--837[label="0.0285714;1pkt 1fpkt"];
247--1639[label="0.142857;5pkt 5fpkt"];
247--2083[label="0.0285714;1pkt 1fpkt"];
247--2768[label="0.0285714;1pkt 1fpkt"];
247--3031[label="0.0285714;1pkt 1fpkt"];
247--4193[label="0.142857;5pkt 5fpkt"];
247--4399[label="0.0285714;1pkt 1fpkt"];
247--4772[label="0.0285714;1pkt 1fpkt"];
247--4803[label="0.114286;4pkt 4fpkt"];
247--5740[label="0.0285714;1pkt 1fpkt"];
247--6596[label="0.0285714;1pkt 1fpkt"];
247--6613[label="0.0285714;1pkt 1fpkt"];
247--7371[label="0.142857;5pkt 5fpkt"];
247--7950[label="0.0285714;1pkt 1fpkt"];
247--9407[label="0.0285714;1pkt 1fpkt"];
882--1008[label="1;3pkt 3fpkt"];
882--2326[label="1;6pkt 6fpkt"];
882--2331[label="1;2pkt 2fpkt"];
882--2337[label="1;235pkt 235fpkt"];
882--2460[label="0.0128205;1pkt 1fpkt"];
882--2982[label="0.833333;20pkt 20fpkt"];
882--3345[label="1;41pkt 41fpkt"];
882--3781[label="1;3pkt 3fpkt"];
882--3896[label="1;6pkt 6fpkt"];
882--4154[label="0.0537634;5pkt 5fpkt"];
882--4343[label="0.909091;10pkt 10fpkt"];
882--4500[label="1;235pkt 235fpkt"];
882--4772[label="0.00328947;1pkt 1fpkt"];
882--4803[label="0.285714;20pkt 20fpkt"];
882--5525[label="1;4pkt 4fpkt"];
882--6057[label="0.0105263;1pkt 1fpkt"];
882--6709[label="0.111111;4pkt 4fpkt"];
882--7353[label="0.0543478;5pkt 5fpkt"];
882--7467[label="0.9;9pkt 9fpkt"];
882--8370[label="0.0105263;1pkt 1fpkt"];
882--8726[label="0.111111;4pkt 4fpkt"];
882--9106[label="0.0543478;5pkt 5fpkt"];
882--9841[label="0.111111;4pkt 4fpkt"];
980--6506[label="1;1pkt 1fpkt"];
1008--3345[label="1;3pkt 3fpkt"];
1008--3781[label="1;3pkt 3fpkt"];
1192--1539[label="0.0357143;2pkt 2fpkt"];
1192--1639[label="0.186813;17pkt 17fpkt"];
1192--4154[label="0.131868;12pkt 12fpkt"];
1192--4193[label="0.186813;17pkt 17fpkt"];
1192--4334[label="0.0434783;1pkt 1fpkt"];
1192--4772[label="0.032967;3pkt 3fpkt"];
1192--5555[label="0.0128205;1pkt 1fpkt"];
1192--5847[label="0.0117647;1pkt 1fpkt"];
1192--7121[label="1;2pkt 2fpkt"];
1192--7353[label="0.131868;12pkt 12fpkt"];
1192--7371[label="0.186813;17pkt 17fpkt"];
1192--8253[label="0.0117647;1pkt 1fpkt"];
1192--8283[label="0.0350877;2pkt 2fpkt"];
1192--9106[label="0.131868;12pkt 12fpkt"];
1192--9579[label="0.0117647;1pkt 1fpkt"];
1639--1914[label="0.115385;12pkt 12fpkt"];
1639--3130[label="0.637168;72pkt 72fpkt"];
1639--4193[label="1;113pkt 113fpkt"];
1639--7371[label="1;113pkt 113fpkt"];
2326--3896[label="1;6pkt 6fpkt"];
2331--5525[label="1;2pkt 2fpkt"];
2337--4500[label="1;235pkt 235fpkt"];
2982--4803[label="1;24pkt 24fpkt"];
3130--4154[label="0.516129;48pkt 48fpkt"];
3130--4193[label="0.595041;72pkt 72fpkt"];
3130--7353[label="0.521739;48pkt 48fpkt"];
3130--7371[label="0.595041;72pkt 72fpkt"];
3130--9106[label="0.521739;48pkt 48fpkt"];
3345--3781[label="1;3pkt 3fpkt"];
3345--4343[label="0.0909091;1pkt 1fpkt"];
3345--4772[label="0.0243902;1pkt 1fpkt"];
4154--7353[label="1;92pkt 92fpkt"];
4154--9106[label="1;92pkt 92fpkt"];
4193--7371[label="1;122pkt 122fpkt"];
4343--7467[label="1;10pkt 10fpkt"];
4862--7734[label="1;1pkt 1fpkt"];
7353--9106[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="134.128.117.3" src_ip="204.80.82.21" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.221.10.47"/>
    </slice>
    <from sec="1178341711" usec="0"/>
    <to sec="1178341756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.228.171.49"/>
    </slice>
    <from sec="1178341919" usec="0"/>
    <to sec="1178342020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.9.56.51"/>
    </slice>
    <from sec="1178341534" usec="0"/>
    <to sec="1178341681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.221.94.51"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.112.106.51"/>
    </slice>
    <from sec="1178341233" usec="0"/>
    <to sec="1178341256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
589[label="134.128.20.203;d;255pkt 255fpkt", shape=diamond, color=yellow];
642[label="217.195.18.38;s;13pkt 13fpkt", shape=diamond, color=yellow];
1386[label="217.195.18.55;s;4pkt 4fpkt", shape=diamond, color=yellow];
1629[label="129.206.2.36;d;138pkt 138fpkt", shape=diamond, color=yellow];
1989[label="210.91.195.43;s;5pkt 5fpkt", shape=diamond, color=yellow];
3309[label="134.128.20.203;d;255pkt 255fpkt", shape=hexagon, color=black];
3465[label="129.206.2.36;d;87pkt 87fpkt", shape=hexagon, color=black];
3551[label="210.91.195.43;s;5pkt 5fpkt", shape=hexagon, color=black];
4713[label="217.106.193.36;66pkt 66fpkt", shape=pentagon, color=darkviolet];
4733[label="217.195.18.38;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4751[label="217.129.22.39;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4825[label="210.91.195.43;7pkt 7fpkt", shape=pentagon, color=darkviolet];
4885[label="217.195.18.48;14pkt 14fpkt", shape=pentagon, color=darkviolet];
4941[label="217.106.172.52;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4966[label="217.195.18.55;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5460[label="217.138.160.91;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5712[label="217.138.161.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5895[label="217.195.5.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5991[label="217.195.5.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6016[label="217.195.5.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6263[label="217.106.173.159;57pkt 57fpkt", shape=pentagon, color=darkviolet];
6798[label="56.155.243.202;36pkt 36fpkt", shape=pentagon, color=darkviolet];
6955[label="217.106.193.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7669[label="217.195.18.38;13pkt 13fpkt", shape=invtriangle, color=brown];
7679[label="217.129.22.39;5pkt 5fpkt", shape=invtriangle, color=brown];
7749[label="217.195.18.48;14pkt 14fpkt", shape=invtriangle, color=brown];
7773[label="217.106.172.52;6pkt 6fpkt", shape=invtriangle, color=brown];
7785[label="217.195.18.55;4pkt 4fpkt", shape=invtriangle, color=brown];
8044[label="217.138.160.91;5pkt 5fpkt", shape=invtriangle, color=brown];
8277[label="217.195.5.128;1pkt 1fpkt", shape=invtriangle, color=brown];
8351[label="217.195.5.138;2pkt 2fpkt", shape=invtriangle, color=brown];
8483[label="217.106.173.159;57pkt 57fpkt", shape=invtriangle, color=brown];
9258[label="217.195.18.38;13pkt 13fpkt", shape=invhouse, color=bisque];
9263[label="217.129.22.39;5pkt 5fpkt", shape=invhouse, color=bisque];
9311[label="217.106.172.52;6pkt 6fpkt", shape=invhouse, color=bisque];
9315[label="217.195.18.55;4pkt 4fpkt", shape=invhouse, color=bisque];
9628[label="217.195.5.138;2pkt 2fpkt", shape=invhouse, color=bisque];
9698[label="217.106.173.159;57pkt 57fpkt", shape=invhouse, color=bisque];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 134.128.20.203:*}[60.9113%]&lt;BR/&gt;{*:*, 129.206.2.36:*}[33.0935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4775%)&lt;BR/&gt; 53: (4.07816%)&lt;BR/&gt; 32781: (3.69584%)&lt;BR/&gt; 25: (1.1045%)&lt;BR/&gt; 123: (0.339847%)&gt;];
}
589--642[label="1;13pkt 13fpkt"];
589--1386[label="1;4pkt 4fpkt"];
589--3309[label="1;255pkt 255fpkt"];
589--4713[label="1;66pkt 66fpkt"];
589--4733[label="1;13pkt 13fpkt"];
589--4751[label="1;5pkt 5fpkt"];
589--4825[label="0.285714;2pkt 2fpkt"];
589--4885[label="1;14pkt 14fpkt"];
589--4966[label="1;4pkt 4fpkt"];
589--5460[label="1;5pkt 5fpkt"];
589--5712[label="1;1pkt 1fpkt"];
589--5895[label="1;1pkt 1fpkt"];
589--5991[label="1;2pkt 2fpkt"];
589--6016[label="1;2pkt 2fpkt"];
589--6263[label="1;57pkt 57fpkt"];
589--6955[label="1;2pkt 2fpkt"];
589--7669[label="1;13pkt 13fpkt"];
589--7679[label="1;5pkt 5fpkt"];
589--7749[label="1;14pkt 14fpkt"];
589--7785[label="1;4pkt 4fpkt"];
589--8044[label="1;5pkt 5fpkt"];
589--8277[label="1;1pkt 1fpkt"];
589--8351[label="1;2pkt 2fpkt"];
589--8483[label="1;57pkt 57fpkt"];
589--9258[label="1;13pkt 13fpkt"];
589--9263[label="1;5pkt 5fpkt"];
589--9315[label="1;4pkt 4fpkt"];
589--9628[label="1;2pkt 2fpkt"];
589--9698[label="1;57pkt 57fpkt"];
642--3309[label="1;13pkt 13fpkt"];
642--4733[label="1;13pkt 13fpkt"];
642--7669[label="1;13pkt 13fpkt"];
642--9258[label="1;13pkt 13fpkt"];
1386--3309[label="1;4pkt 4fpkt"];
1386--4966[label="1;4pkt 4fpkt"];
1386--7785[label="1;4pkt 4fpkt"];
1386--9315[label="1;4pkt 4fpkt"];
1629--1989[label="1;5pkt 5fpkt"];
1629--2083[label="0.0111111;1pkt 1fpkt"];
1629--3031[label="0.0128205;1pkt 1fpkt"];
1629--3046[label="0.0106383;1pkt 1fpkt"];
1629--3089[label="0.00943396;1pkt 1fpkt"];
1629--3465[label="1;87pkt 87fpkt"];
1629--3551[label="1;5pkt 5fpkt"];
1629--3651[label="0.0104167;1pkt 1fpkt"];
1629--3717[label="0.0217391;3pkt 3fpkt"];
1629--4008[label="0.0217391;3pkt 3fpkt"];
1629--4328[label="0.0111111;1pkt 1fpkt"];
1629--4535[label="0.0588235;1pkt 1fpkt"];
1629--4687[label="0.0909091;1pkt 1fpkt"];
1629--4772[label="0.0144928;2pkt 2fpkt"];
1629--4825[label="0.714286;5pkt 5fpkt"];
1629--4941[label="1;6pkt 6fpkt"];
1629--4975[label="0.0277778;1pkt 1fpkt"];
1629--5271[label="0.0555556;1pkt 1fpkt"];
1629--5353[label="0.0153846;1pkt 1fpkt"];
1629--5490[label="0.0909091;1pkt 1fpkt"];
1629--5740[label="0.00724638;1pkt 1fpkt"];
1629--5967[label="0.0149254;1pkt 1fpkt"];
1629--6009[label="0.015873;1pkt 1fpkt"];
1629--6351[label="0.00884956;1pkt 1fpkt"];
1629--6691[label="0.0149254;1pkt 1fpkt"];
1629--6798[label="0.333333;12pkt 12fpkt"];
1629--7118[label="0.0138889;1pkt 1fpkt"];
1629--7212[label="0.0344828;1pkt 1fpkt"];
1629--7458[label="0.010989;1pkt 1fpkt"];
1629--7773[label="1;6pkt 6fpkt"];
1629--7950[label="0.0107527;1pkt 1fpkt"];
1629--7987[label="0.0153846;1pkt 1fpkt"];
1629--8061[label="0.0909091;1pkt 1fpkt"];
1629--8319[label="0.0149254;1pkt 1fpkt"];
1629--8714[label="0.0149254;1pkt 1fpkt"];
1629--8968[label="0.0138889;1pkt 1fpkt"];
1629--9156[label="0.0111111;1pkt 1fpkt"];
1629--9311[label="1;6pkt 6fpkt"];
1629--9407[label="0.0107527;1pkt 1fpkt"];
1629--9430[label="0.0153846;1pkt 1fpkt"];
1629--9611[label="0.0149254;1pkt 1fpkt"];
1629--9832[label="0.0149254;1pkt 1fpkt"];
1989--3465[label="0.8;4pkt 4fpkt"];
1989--3551[label="1;5pkt 5fpkt"];
1989--4825[label="1;5pkt 5fpkt"];
3309--4713[label="1;66pkt 66fpkt"];
3309--4733[label="1;13pkt 13fpkt"];
3309--4751[label="1;5pkt 5fpkt"];
3309--4825[label="0.285714;2pkt 2fpkt"];
3309--4885[label="1;14pkt 14fpkt"];
3309--4966[label="1;4pkt 4fpkt"];
3309--5460[label="1;5pkt 5fpkt"];
3309--5712[label="1;1pkt 1fpkt"];
3309--5895[label="1;1pkt 1fpkt"];
3309--5991[label="1;2pkt 2fpkt"];
3309--6016[label="1;2pkt 2fpkt"];
3309--6263[label="1;57pkt 57fpkt"];
3309--6955[label="1;2pkt 2fpkt"];
3309--7669[label="1;13pkt 13fpkt"];
3309--7679[label="1;5pkt 5fpkt"];
3309--7749[label="1;14pkt 14fpkt"];
3309--7785[label="1;4pkt 4fpkt"];
3309--8044[label="1;5pkt 5fpkt"];
3309--8277[label="1;1pkt 1fpkt"];
3309--8351[label="1;2pkt 2fpkt"];
3309--8483[label="1;57pkt 57fpkt"];
3309--9258[label="1;13pkt 13fpkt"];
3309--9263[label="1;5pkt 5fpkt"];
3309--9315[label="1;4pkt 4fpkt"];
3309--9628[label="1;2pkt 2fpkt"];
3309--9698[label="1;57pkt 57fpkt"];
3465--3551[label="0.8;4pkt 4fpkt"];
3465--3651[label="0.0114943;1pkt 1fpkt"];
3465--4328[label="0.0114943;1pkt 1fpkt"];
3465--4772[label="0.0114943;1pkt 1fpkt"];
3465--4825[label="0.571429;4pkt 4fpkt"];
3465--4941[label="1;6pkt 6fpkt"];
3465--4975[label="0.0277778;1pkt 1fpkt"];
3465--5353[label="0.0153846;1pkt 1fpkt"];
3465--5740[label="0.0114943;1pkt 1fpkt"];
3465--5967[label="0.0149254;1pkt 1fpkt"];
3465--6351[label="0.0114943;1pkt 1fpkt"];
3465--6691[label="0.0149254;1pkt 1fpkt"];
3465--6798[label="0.333333;12pkt 12fpkt"];
3465--7118[label="0.0138889;1pkt 1fpkt"];
3465--7458[label="0.0114943;1pkt 1fpkt"];
3465--7773[label="1;6pkt 6fpkt"];
3465--7950[label="0.0114943;1pkt 1fpkt"];
3465--7987[label="0.0153846;1pkt 1fpkt"];
3465--8319[label="0.0149254;1pkt 1fpkt"];
3465--8714[label="0.0149254;1pkt 1fpkt"];
3465--8968[label="0.0138889;1pkt 1fpkt"];
3465--9156[label="0.0114943;1pkt 1fpkt"];
3465--9311[label="1;6pkt 6fpkt"];
3465--9407[label="0.0114943;1pkt 1fpkt"];
3465--9430[label="0.0153846;1pkt 1fpkt"];
3465--9611[label="0.0149254;1pkt 1fpkt"];
3465--9832[label="0.0149254;1pkt 1fpkt"];
3551--4825[label="1;5pkt 5fpkt"];
4733--7669[label="1;13pkt 13fpkt"];
4733--9258[label="1;13pkt 13fpkt"];
4751--7679[label="1;5pkt 5fpkt"];
4751--9263[label="1;5pkt 5fpkt"];
4885--7749[label="1;14pkt 14fpkt"];
4941--7773[label="1;6pkt 6fpkt"];
4941--9311[label="1;6pkt 6fpkt"];
4966--7785[label="1;4pkt 4fpkt"];
4966--9315[label="1;4pkt 4fpkt"];
5460--8044[label="1;5pkt 5fpkt"];
5895--8277[label="1;1pkt 1fpkt"];
6016--8351[label="1;2pkt 2fpkt"];
6016--9628[label="1;2pkt 2fpkt"];
6263--8483[label="1;57pkt 57fpkt"];
6263--9698[label="1;57pkt 57fpkt"];
7669--9258[label="1;13pkt 13fpkt"];
7679--9263[label="1;5pkt 5fpkt"];
7773--9311[label="1;6pkt 6fpkt"];
7785--9315[label="1;4pkt 4fpkt"];
8351--9628[label="1;2pkt 2fpkt"];
8483--9698[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.2.36"/>
      <filter dst_ip="134.128.20.203" src_port="80"/>
    </slice>
    <from sec="1178341215" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.45.220.53"/>
    </slice>
    <from sec="1178341761" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
4957[label="129.206.93.54;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7780[label="129.206.93.54;3pkt 3fpkt", shape=invtriangle, color=brown];
9313[label="129.206.93.54;3pkt 3fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.93.54:80, 68.157.197.113:43145}[33.3333%]&lt;BR/&gt;{129.206.93.54:80, 58.40.94.136:60222}[33.3333%]&lt;BR/&gt;{129.206.93.54:80, 56.133.88.235:44694}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60222: (16.6667%)&lt;BR/&gt; 44694: (16.6667%)&lt;BR/&gt; 43145: (16.6667%)&gt;];
}
4957--7780[label="1;3pkt 3fpkt"];
4957--9313[label="1;3pkt 3fpkt"];
7780--9313[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="56.133.88.235" dst_port="44694" src_ip="129.206.93.54" src_port="80"/>
      <filter dst_ip="58.40.94.136" dst_port="60222" src_ip="129.206.93.54" src_port="80"/>
      <filter dst_ip="68.157.197.113" dst_port="43145" src_ip="129.206.93.54" src_port="80"/>
    </slice>
    <from sec="1178341502" usec="0"/>
    <to sec="1178341602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.102.27.55"/>
    </slice>
    <from sec="1178341608" usec="0"/>
    <to sec="1178341648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.232.64.55"/>
    </slice>
    <from sec="1178342033" usec="0"/>
    <to sec="1178342040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.7.91.55"/>
    </slice>
    <from sec="1178341980" usec="0"/>
    <to sec="1178341994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.117.166.56"/>
    </slice>
    <from sec="1178341396" usec="0"/>
    <to sec="1178341426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.8.167.56"/>
    </slice>
    <from sec="1178341912" usec="0"/>
    <to sec="1178341942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
4998[label="199.181.159.57;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7808[label="199.181.159.57;4pkt 4fpkt", shape=invtriangle, color=brown];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.159.57:0, 88.208.94.39:0}[25%]&lt;BR/&gt;{199.181.159.57:0, 92.194.59.67:0}[25%]&lt;BR/&gt;{199.181.159.57:0, 217.189.59.131:0}[25%]&lt;BR/&gt;{199.181.159.57:135, 93.29.9.143:2107}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 2107: (12.5%)&lt;BR/&gt; 135: (12.5%)&gt;];
}
4998--7808[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="93.29.9.143" dst_port="2107" src_ip="199.181.159.57" src_port="135"/>
      <filter dst_ip="217.189.59.131" src_ip="199.181.159.57"/>
      <filter dst_ip="92.194.59.67" src_ip="199.181.159.57"/>
      <filter dst_ip="88.208.94.39" src_ip="199.181.159.57"/>
    </slice>
    <from sec="1178341350" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.202.169.57"/>
    </slice>
    <from sec="1178341598" usec="0"/>
    <to sec="1178341616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_738{
style=filled;
color=gray75;
5008[label="134.128.135.58;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7814[label="134.128.135.58;7pkt 7fpkt", shape=invtriangle, color=brown];
9327[label="134.128.135.58;7pkt 7fpkt", shape=invhouse, color=bisque];
stat738[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.135.58:*, 54.159.57.114:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55996: (7.14286%)&lt;BR/&gt; 55995: (7.14286%)&lt;BR/&gt; 55994: (7.14286%)&lt;BR/&gt; 55993: (7.14286%)&gt;];
}
5008--7814[label="1;7pkt 7fpkt"];
5008--9327[label="1;7pkt 7fpkt"];
7814--9327[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="54.159.57.114" dst_port="80" src_ip="134.128.135.58"/>
    </slice>
    <from sec="1178341741" usec="0"/>
    <to sec="1178341779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
5016[label="155.255.86.59;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7818[label="155.255.86.59;5pkt 5fpkt", shape=invtriangle, color=brown];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.86.59:53, 198.76.91.9:51639}[20%]&lt;BR/&gt;{155.255.86.59:53, 216.64.90.24:32768}[20%]&lt;BR/&gt;{155.255.86.59:25, 216.237.56.118:3704}[20%]&lt;BR/&gt;{155.255.86.59:53, 88.197.99.164:54563}[20%]&lt;BR/&gt;{155.255.86.59:80, 92.5.152.180:1638}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (30%)&lt;BR/&gt; 54563: (10%)&lt;BR/&gt; 51639: (10%)&lt;BR/&gt; 32768: (10%)&lt;BR/&gt; 3704: (10%)&gt;];
}
5016--7818[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="92.5.152.180" dst_port="1638" src_ip="155.255.86.59" src_port="80"/>
      <filter dst_ip="88.197.99.164" dst_port="54563" src_ip="155.255.86.59" src_port="53"/>
      <filter dst_ip="216.237.56.118" dst_port="3704" src_ip="155.255.86.59" src_port="25"/>
      <filter dst_ip="216.64.90.24" dst_port="32768" src_ip="155.255.86.59" src_port="53"/>
      <filter dst_ip="198.76.91.9" dst_port="51639" src_ip="155.255.86.59" src_port="53"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.38.124.59"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.77.138.59"/>
    </slice>
    <from sec="1178341630" usec="0"/>
    <to sec="1178341746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.89.241.60"/>
    </slice>
    <from sec="1178341724" usec="0"/>
    <to sec="1178341735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_743{
style=filled;
color=gray75;
5042[label="155.255.11.61;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7828[label="155.255.11.61;40pkt 40fpkt", shape=invtriangle, color=brown];
9333[label="155.255.11.61;40pkt 40fpkt", shape=invhouse, color=bisque];
stat743[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.11.61:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63863: (1.25%)&lt;BR/&gt; 61093: (1.25%)&lt;BR/&gt; 49957: (1.25%)&lt;BR/&gt; 42980: (1.25%)&gt;];
}
5042--7828[label="1;40pkt 40fpkt"];
5042--9333[label="1;40pkt 40fpkt"];
7828--9333[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="155.255.11.61" src_port="25"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_744{
style=filled;
color=gray75;
5049[label="92.224.2.62;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7833[label="92.224.2.62;28pkt 28fpkt", shape=invtriangle, color=brown];
stat744[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.224.2.62:*, 134.144.53.164:110}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 3585: (1.78571%)&lt;BR/&gt; 3583: (1.78571%)&lt;BR/&gt; 3575: (1.78571%)&lt;BR/&gt; 3573: (1.78571%)&gt;];
}
5049--7833[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.53.164" dst_port="110" src_ip="92.224.2.62"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.193.92.64"/>
    </slice>
    <from sec="1178341613" usec="0"/>
    <to sec="1178341654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_746{
style=filled;
color=gray75;
5078[label="168.45.100.64;25pkt 25fpkt", shape=pentagon, color=darkviolet];
7845[label="168.45.100.64;25pkt 25fpkt", shape=invtriangle, color=brown];
9348[label="168.45.100.64;25pkt 25fpkt", shape=invhouse, color=bisque];
stat746[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.100.64:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56591: (2%)&lt;BR/&gt; 56272: (2%)&lt;BR/&gt; 54842: (2%)&lt;BR/&gt; 54840: (2%)&gt;];
}
5078--7845[label="1;25pkt 25fpkt"];
5078--9348[label="1;25pkt 25fpkt"];
7845--9348[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.100.64" src_port="80"/>
    </slice>
    <from sec="1178341224" usec="0"/>
    <to sec="1178342084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.211.118.65"/>
    </slice>
    <from sec="1178341267" usec="0"/>
    <to sec="1178341306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.168.61.66"/>
    </slice>
    <from sec="1178341513" usec="0"/>
    <to sec="1178341547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.47.167.66"/>
    </slice>
    <from sec="1178341654" usec="0"/>
    <to sec="1178341676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.142.68.68"/>
    </slice>
    <from sec="1178341719" usec="0"/>
    <to sec="1178341752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.173.122.68"/>
    </slice>
    <from sec="1178341830" usec="0"/>
    <to sec="1178341860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.97.173.68"/>
    </slice>
    <from sec="1178341353" usec="0"/>
    <to sec="1178341550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
5169[label="129.206.29.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7890[label="129.206.29.70;1pkt 1fpkt", shape=invtriangle, color=brown];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.29.70:0, 112.105.72.137:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5169--7890[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="112.105.72.137" src_ip="129.206.29.70"/>
    </slice>
    <from sec="1178341990" usec="0"/>
    <to sec="1178342001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
2258[label="134.144.182.74;d;103pkt 103fpkt", shape=diamond, color=yellow];
4247[label="92.64.45.5;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5173[label="92.75.79.70;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6271[label="92.224.178.160;28pkt 28fpkt", shape=pentagon, color=darkviolet];
7892[label="92.75.79.70;11pkt 11fpkt", shape=invtriangle, color=brown];
9369[label="92.75.79.70;11pkt 11fpkt", shape=invhouse, color=bisque];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.96.33.194:*, 134.144.182.74:80}[31.1927%]&lt;BR/&gt;{92.224.178.160:*, 134.144.182.74:80}[25.6881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1514: (1.11111%)&lt;BR/&gt; 1513: (1.11111%)&lt;BR/&gt; 1512: (1.11111%)&lt;BR/&gt; 1511: (1.11111%)&gt;];
}
2258--4247[label="0.625;10pkt 10fpkt"];
2258--4582[label="0.166667;1pkt 1fpkt"];
2258--5173[label="1;11pkt 11fpkt"];
2258--6271[label="1;28pkt 28fpkt"];
2258--7892[label="1;11pkt 11fpkt"];
2258--9369[label="1;11pkt 11fpkt"];
5173--7892[label="1;11pkt 11fpkt"];
5173--9369[label="1;11pkt 11fpkt"];
7892--9369[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.182.74" dst_port="80" src_ip="209.96.33.194"/>
      <filter dst_ip="134.144.182.74" dst_port="80" src_ip="92.224.178.160"/>
    </slice>
    <from sec="1178341528" usec="0"/>
    <to sec="1178342018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
5182[label="145.206.203.70;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7898[label="145.206.203.70;3pkt 3fpkt", shape=invtriangle, color=brown];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.206.203.70:18184, 13.219.81.33:35724}[33.3333%]&lt;BR/&gt;{145.206.203.70:18184, 12.199.101.44:10376}[33.3333%]&lt;BR/&gt;{145.206.203.70:18184, 12.199.101.44:10403}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18184: (50%)&lt;BR/&gt; 35724: (16.6667%)&lt;BR/&gt; 10403: (16.6667%)&lt;BR/&gt; 10376: (16.6667%)&gt;];
}
5182--7898[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="12.199.101.44" dst_port="10403" src_ip="145.206.203.70" src_port="18184"/>
      <filter dst_ip="12.199.101.44" dst_port="10376" src_ip="145.206.203.70" src_port="18184"/>
      <filter dst_ip="13.219.81.33" dst_port="35724" src_ip="145.206.203.70" src_port="18184"/>
    </slice>
    <from sec="1178341665" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
5186[label="134.153.53.71;83pkt 83fpkt", shape=pentagon, color=darkviolet];
7901[label="134.153.53.71;83pkt 83fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.53.71:1433, 88.187.203.27:*}[71.0843%]&lt;BR/&gt;{134.153.53.71:1433, 88.187.203.26:*}[28.9157%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4957: (0.60241%)&lt;BR/&gt; 4889: (0.60241%)&lt;BR/&gt; 4847: (0.60241%)&lt;BR/&gt; 4825: (0.60241%)&gt;];
}
5186--7901[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="88.187.203.27" src_ip="134.153.53.71" src_port="1433"/>
      <filter dst_ip="88.187.203.26" src_ip="134.153.53.71" src_port="1433"/>
    </slice>
    <from sec="1178341214" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,054,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
5188[label="89.225.69.71;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7903[label="89.225.69.71;14pkt 14fpkt", shape=invtriangle, color=brown];
9374[label="89.225.69.71;14pkt 14fpkt", shape=invhouse, color=bisque];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.225.69.71:443, 134.128.65.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4787: (3.57143%)&lt;BR/&gt; 4786: (3.57143%)&lt;BR/&gt; 4785: (3.57143%)&lt;BR/&gt; 4784: (3.57143%)&gt;];
}
5188--7903[label="1;14pkt 14fpkt"];
5188--9374[label="1;14pkt 14fpkt"];
7903--9374[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="134.128.65.67" src_ip="89.225.69.71" src_port="443"/>
    </slice>
    <from sec="1178341446" usec="0"/>
    <to sec="1178341542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.91.103.71"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.114.147.71"/>
    </slice>
    <from sec="1178341993" usec="0"/>
    <to sec="1178342009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.46.194.71"/>
    </slice>
    <from sec="1178341333" usec="0"/>
    <to sec="1178341840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.179.45.72"/>
    </slice>
    <from sec="1178341556" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
348[label="196.74.218.26;s;6573pkt 6573fpkt", shape=diamond, color=yellow];
750[label="198.155.112.147;d;194pkt 194fpkt", shape=diamond, color=yellow];
1073[label="198.155.86.62;d;22pkt 22fpkt", shape=diamond, color=yellow];
1076[label="50.248.150.34;s;6pkt 6fpkt", shape=diamond, color=yellow];
1114[label="198.155.86.36;d;185pkt 185fpkt", shape=diamond, color=yellow];
1115[label="198.155.86.32;d;369pkt 369fpkt", shape=diamond, color=yellow];
1935[label="198.155.86.17;d;202pkt 202fpkt", shape=diamond, color=yellow];
3429[label="198.155.86.36;d;185pkt 185fpkt", shape=hexagon, color=black];
3538[label="198.155.86.17;d;116pkt 116fpkt", shape=hexagon, color=black];
4575[label="196.74.218.26;6602pkt 6602fpkt", shape=pentagon, color=darkviolet];
4681[label="50.248.150.34;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5217[label="89.110.166.72;254pkt 254fpkt", shape=pentagon, color=darkviolet];
5964[label="209.128.130.133;496pkt 496fpkt", shape=pentagon, color=darkviolet];
6301[label="209.128.130.163;198pkt 198fpkt", shape=pentagon, color=darkviolet];
6493[label="198.101.170.178;253pkt 253fpkt", shape=pentagon, color=darkviolet];
7582[label="196.74.218.26;6602pkt 6602fpkt", shape=invtriangle, color=brown];
7639[label="50.248.150.34;6pkt 6fpkt", shape=invtriangle, color=brown];
7915[label="89.110.166.72;254pkt 254fpkt", shape=invtriangle, color=brown];
8317[label="209.128.130.133;496pkt 496fpkt", shape=invtriangle, color=brown];
8508[label="209.128.130.163;198pkt 198fpkt", shape=invtriangle, color=brown];
8615[label="198.101.170.178;253pkt 253fpkt", shape=invtriangle, color=brown];
9209[label="196.74.218.26;6601pkt 6601fpkt", shape=invhouse, color=bisque];
9384[label="89.110.166.72;254pkt 254fpkt", shape=invhouse, color=bisque];
9609[label="209.128.130.133;496pkt 496fpkt", shape=invhouse, color=bisque];
9709[label="209.128.130.163;198pkt 198fpkt", shape=invhouse, color=bisque];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.74.218.26:0, *:0}[69.9478%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (72.6039%)&lt;BR/&gt; 139: (7.08114%)&lt;BR/&gt; 1026: (3.08682%)&lt;BR/&gt; 1027: (2.41787%)&lt;BR/&gt; 46456: (0.968761%)&gt;];
}
348--567[label="0.0100671;3pkt 3fpkt"];
348--750[label="1;194pkt 194fpkt"];
348--809[label="0.00236967;1pkt 1fpkt"];
348--1114[label="0.935135;173pkt 173fpkt"];
348--1115[label="0.428184;158pkt 158fpkt"];
348--1160[label="0.0254237;3pkt 3fpkt"];
348--1549[label="0.00365408;3pkt 3fpkt"];
348--1935[label="0.910891;184pkt 184fpkt"];
348--3397[label="0.0100671;3pkt 3fpkt"];
348--3429[label="0.935135;173pkt 173fpkt"];
348--3450[label="0.0080429;3pkt 3fpkt"];
348--3538[label="0.913793;106pkt 106fpkt"];
348--3838[label="0.00236967;1pkt 1fpkt"];
348--3903[label="0.0002442;1pkt 1fpkt"];
348--4575[label="1;6573pkt 6573fpkt"];
348--7582[label="1;6573pkt 6573fpkt"];
348--9209[label="0.999848;6572pkt 6572fpkt"];
750--4575[label="1;194pkt 194fpkt"];
750--7582[label="1;194pkt 194fpkt"];
750--9209[label="1;194pkt 194fpkt"];
1073--1076[label="1;6pkt 6fpkt"];
1073--4681[label="1;6pkt 6fpkt"];
1073--5217[label="0.0909091;2pkt 2fpkt"];
1073--5964[label="0.0909091;2pkt 2fpkt"];
1073--6301[label="0.0909091;2pkt 2fpkt"];
1073--6493[label="0.0454545;1pkt 1fpkt"];
1073--7639[label="1;6pkt 6fpkt"];
1073--7915[label="0.0909091;2pkt 2fpkt"];
1073--8317[label="0.0909091;2pkt 2fpkt"];
1073--8508[label="0.0909091;2pkt 2fpkt"];
1073--8615[label="0.0454545;1pkt 1fpkt"];
1073--9384[label="0.0909091;2pkt 2fpkt"];
1073--9609[label="0.0909091;2pkt 2fpkt"];
1073--9709[label="0.0909091;2pkt 2fpkt"];
1076--4681[label="1;6pkt 6fpkt"];
1076--7639[label="1;6pkt 6fpkt"];
1114--3077[label="0.0204082;1pkt 1fpkt"];
1114--3429[label="1;185pkt 185fpkt"];
1114--4575[label="0.935135;173pkt 173fpkt"];
1114--5964[label="0.0108108;2pkt 2fpkt"];
1114--6029[label="0.0192308;1pkt 1fpkt"];
1114--6301[label="0.00540541;1pkt 1fpkt"];
1114--7582[label="0.935135;173pkt 173fpkt"];
1114--8317[label="0.0108108;2pkt 2fpkt"];
1114--8508[label="0.00540541;1pkt 1fpkt"];
1114--9209[label="0.935135;173pkt 173fpkt"];
1114--9609[label="0.0108108;2pkt 2fpkt"];
1114--9709[label="0.00540541;1pkt 1fpkt"];
1115--4026[label="0.00271003;1pkt 1fpkt"];
1115--4074[label="0.00271003;1pkt 1fpkt"];
1115--4115[label="0.00271003;1pkt 1fpkt"];
1115--4575[label="0.428184;158pkt 158fpkt"];
1115--5217[label="0.00393701;1pkt 1fpkt"];
1115--5964[label="0.00271003;1pkt 1fpkt"];
1115--6301[label="0.00505051;1pkt 1fpkt"];
1115--7582[label="0.428184;158pkt 158fpkt"];
1115--7915[label="0.00393701;1pkt 1fpkt"];
1115--8317[label="0.00271003;1pkt 1fpkt"];
1115--8508[label="0.00505051;1pkt 1fpkt"];
1115--9209[label="0.428184;158pkt 158fpkt"];
1115--9384[label="0.00393701;1pkt 1fpkt"];
1115--9609[label="0.00271003;1pkt 1fpkt"];
1115--9709[label="0.00505051;1pkt 1fpkt"];
1935--3538[label="1;116pkt 116fpkt"];
1935--4575[label="0.910891;184pkt 184fpkt"];
1935--5217[label="0.0049505;1pkt 1fpkt"];
1935--5399[label="0.011976;2pkt 2fpkt"];
1935--5964[label="0.019802;4pkt 4fpkt"];
1935--6301[label="0.00505051;1pkt 1fpkt"];
1935--6493[label="0.0049505;1pkt 1fpkt"];
1935--7582[label="0.910891;184pkt 184fpkt"];
1935--7915[label="0.0049505;1pkt 1fpkt"];
1935--8317[label="0.019802;4pkt 4fpkt"];
1935--8508[label="0.00505051;1pkt 1fpkt"];
1935--8615[label="0.0049505;1pkt 1fpkt"];
1935--9209[label="0.910891;184pkt 184fpkt"];
1935--9384[label="0.0049505;1pkt 1fpkt"];
1935--9609[label="0.019802;4pkt 4fpkt"];
1935--9709[label="0.00505051;1pkt 1fpkt"];
3429--4575[label="0.935135;173pkt 173fpkt"];
3429--5964[label="0.0108108;2pkt 2fpkt"];
3429--6029[label="0.0192308;1pkt 1fpkt"];
3429--6301[label="0.00540541;1pkt 1fpkt"];
3429--7582[label="0.935135;173pkt 173fpkt"];
3429--8317[label="0.0108108;2pkt 2fpkt"];
3429--8508[label="0.00540541;1pkt 1fpkt"];
3429--9209[label="0.935135;173pkt 173fpkt"];
3429--9609[label="0.0108108;2pkt 2fpkt"];
3429--9709[label="0.00540541;1pkt 1fpkt"];
3538--4575[label="0.913793;106pkt 106fpkt"];
3538--5964[label="0.0344828;4pkt 4fpkt"];
3538--6301[label="0.00862069;1pkt 1fpkt"];
3538--7582[label="0.913793;106pkt 106fpkt"];
3538--8317[label="0.0344828;4pkt 4fpkt"];
3538--8508[label="0.00862069;1pkt 1fpkt"];
3538--9209[label="0.913793;106pkt 106fpkt"];
3538--9609[label="0.0344828;4pkt 4fpkt"];
3538--9709[label="0.00862069;1pkt 1fpkt"];
4575--7582[label="1;6602pkt 6602fpkt"];
4575--9209[label="1;6601pkt 6601fpkt"];
4681--7639[label="1;6pkt 6fpkt"];
5217--7915[label="1;254pkt 254fpkt"];
5217--9384[label="1;254pkt 254fpkt"];
5964--8317[label="1;496pkt 496fpkt"];
5964--9609[label="1;496pkt 496fpkt"];
6301--8508[label="1;198pkt 198fpkt"];
6301--9709[label="1;198pkt 198fpkt"];
6493--8615[label="1;253pkt 253fpkt"];
7582--9209[label="1;6601pkt 6601fpkt"];
7915--9384[label="1;254pkt 254fpkt"];
8317--9609[label="1;496pkt 496fpkt"];
8508--9709[label="1;198pkt 198fpkt"];
</description>
    <slice>
      <filter src_ip="196.74.218.26"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.113.220.73"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.2.17.74"/>
    </slice>
    <from sec="1178341521" usec="0"/>
    <to sec="1178341646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
5241[label="208.17.57.74;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7928[label="208.17.57.74;26pkt 26fpkt", shape=invtriangle, color=brown];
9392[label="208.17.57.74;26pkt 26fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.17.57.74:*, 129.206.200.208:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2868: (1.92308%)&lt;BR/&gt; 2867: (1.92308%)&lt;BR/&gt; 2866: (1.92308%)&lt;BR/&gt; 2865: (1.92308%)&gt;];
}
5241--7928[label="1;26pkt 26fpkt"];
5241--9392[label="1;26pkt 26fpkt"];
7928--9392[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.200.208" dst_port="80" src_ip="208.17.57.74"/>
    </slice>
    <from sec="1178341630" usec="0"/>
    <to sec="1178341633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
1943[label="215.20.118.7;d;22pkt 22fpkt", shape=diamond, color=yellow];
3626[label="215.20.118.7;d;22pkt 22fpkt", shape=hexagon, color=black];
5243[label="202.128.115.74;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5259[label="202.128.115.75;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5550[label="128.19.150.98;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5569[label="128.19.150.99;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7929[label="202.128.115.74;8pkt 8fpkt", shape=invtriangle, color=brown];
8094[label="128.19.150.98;11pkt 11fpkt", shape=invtriangle, color=brown];
9393[label="202.128.115.74;8pkt 8fpkt", shape=invhouse, color=bisque];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.19.150.99:*, *:*}[29.7872%]&lt;BR/&gt;{128.19.150.98:*, 215.20.118.7:443}[23.4043%]&lt;BR/&gt;{202.128.115.75:*, 215.20.118.7:443}[21.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (46.1864%)&lt;BR/&gt; 25: (3.81356%)&lt;BR/&gt; 45914: (2.11864%)&lt;BR/&gt; 45911: (2.11864%)&lt;BR/&gt; 45910: (2.11864%)&gt;];
}
1943--3626[label="1;22pkt 22fpkt"];
1943--5243[label="0.5;4pkt 4fpkt"];
1943--5259[label="0.428571;6pkt 6fpkt"];
1943--5550[label="0.545455;6pkt 6fpkt"];
1943--5569[label="0.428571;6pkt 6fpkt"];
1943--7929[label="0.5;4pkt 4fpkt"];
1943--8094[label="0.545455;6pkt 6fpkt"];
1943--9393[label="0.5;4pkt 4fpkt"];
3626--5243[label="0.5;4pkt 4fpkt"];
3626--5259[label="0.428571;6pkt 6fpkt"];
3626--5550[label="0.545455;6pkt 6fpkt"];
3626--5569[label="0.428571;6pkt 6fpkt"];
3626--7929[label="0.5;4pkt 4fpkt"];
3626--8094[label="0.545455;6pkt 6fpkt"];
3626--9393[label="0.5;4pkt 4fpkt"];
5243--7929[label="1;8pkt 8fpkt"];
5243--9393[label="1;8pkt 8fpkt"];
5550--8094[label="1;11pkt 11fpkt"];
7929--9393[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="128.19.150.99"/>
      <filter dst_ip="215.20.118.7" dst_port="443" src_ip="202.128.115.75"/>
      <filter dst_ip="215.20.118.7" dst_port="443" src_ip="128.19.150.98"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.40.107.75"/>
    </slice>
    <from sec="1178341249" usec="0"/>
    <to sec="1178341258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.232.28.76"/>
    </slice>
    <from sec="1178341670" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.219.137.76"/>
    </slice>
    <from sec="1178341625" usec="0"/>
    <to sec="1178341639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.153.111.77"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
5293[label="58.40.84.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7953[label="58.40.84.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.40.84.78:43689, 129.206.90.192:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43689: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5293--7953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.90.192" dst_port="80" src_ip="58.40.84.78" src_port="43689"/>
    </slice>
    <from sec="1178341577" usec="0"/>
    <to sec="1178341583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.157.23.79"/>
    </slice>
    <from sec="1178341934" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.48.210.79"/>
    </slice>
    <from sec="1178342023" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.73.159.80"/>
    </slice>
    <from sec="1178341259" usec="0"/>
    <to sec="1178341286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.13.209.80"/>
    </slice>
    <from sec="1178341886" usec="0"/>
    <to sec="1178342085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
5325[label="145.133.77.81;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7972[label="145.133.77.81;50pkt 50fpkt", shape=invtriangle, color=brown];
9420[label="145.133.77.81;50pkt 50fpkt", shape=invhouse, color=bisque];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.133.77.81:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5325--7972[label="1;50pkt 50fpkt"];
5325--9420[label="1;50pkt 50fpkt"];
7972--9420[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="145.133.77.81"/>
    </slice>
    <from sec="1178341253" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.99.55.82"/>
    </slice>
    <from sec="1178341515" usec="0"/>
    <to sec="1178341659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.30.105.82"/>
    </slice>
    <from sec="1178341935" usec="0"/>
    <to sec="1178342076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
5339[label="155.255.128.82;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7983[label="155.255.128.82;16pkt 16fpkt", shape=invtriangle, color=brown];
9428[label="155.255.128.82;16pkt 16fpkt", shape=invhouse, color=bisque];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.128.82:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 60313: (3.125%)&lt;BR/&gt; 50680: (3.125%)&lt;BR/&gt; 50562: (3.125%)&lt;BR/&gt; 34535: (3.125%)&gt;];
}
5339--7983[label="1;16pkt 16fpkt"];
5339--9428[label="1;16pkt 16fpkt"];
7983--9428[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="155.255.128.82" src_port="25"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
5341[label="199.181.156.82;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7985[label="199.181.156.82;10pkt 10fpkt", shape=invtriangle, color=brown];
9429[label="199.181.156.82;10pkt 10fpkt", shape=invhouse, color=bisque];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.181.156.82:*, *:80}[30%]&lt;BR/&gt;{199.181.156.82:*, *:123}[30%]&lt;BR/&gt;{199.181.156.82:53, *:*}[20%]&lt;BR/&gt;{199.181.156.82:*, 193.136.37.68:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (15%)&lt;BR/&gt; 80: (15%)&lt;BR/&gt; 53: (10%)&lt;BR/&gt; 61803: (5%)&lt;BR/&gt; 61044: (5%)&gt;];
}
5341--7985[label="1;10pkt 10fpkt"];
5341--9429[label="1;10pkt 10fpkt"];
7985--9429[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="193.136.37.68" src_ip="199.181.156.82"/>
      <filter src_ip="199.181.156.82" src_port="53"/>
      <filter dst_port="123" src_ip="199.181.156.82"/>
      <filter dst_port="80" src_ip="199.181.156.82"/>
    </slice>
    <from sec="1178341382" usec="0"/>
    <to sec="1178342073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="164.7.105.85"/>
    </slice>
    <from sec="1178341381" usec="0"/>
    <to sec="1178341561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
5387[label="129.206.209.85;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8004[label="129.206.209.85;12pkt 12fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.209.85:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50458: (4.16667%)&lt;BR/&gt; 4291: (4.16667%)&lt;BR/&gt; 4260: (4.16667%)&lt;BR/&gt; 4230: (4.16667%)&gt;];
}
5387--8004[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.209.85" src_port="25"/>
    </slice>
    <from sec="1178341231" usec="0"/>
    <to sec="1178342062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.20.134.87"/>
    </slice>
    <from sec="1178342025" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.143.182.87"/>
    </slice>
    <from sec="1178341458" usec="0"/>
    <to sec="1178341767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.73.164.88"/>
    </slice>
    <from sec="1178341299" usec="0"/>
    <to sec="1178341329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
5426[label="198.94.172.88;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8024[label="198.94.172.88;4pkt 4fpkt", shape=invtriangle, color=brown];
9451[label="198.94.172.88;4pkt 4fpkt", shape=invhouse, color=bisque];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.94.172.88:80, 168.45.4.83:32860}[25%]&lt;BR/&gt;{198.94.172.88:80, 168.45.4.83:33231}[25%]&lt;BR/&gt;{198.94.172.88:80, 168.45.4.83:33416}[25%]&lt;BR/&gt;{198.94.172.88:80, 168.45.4.83:33626}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33626: (12.5%)&lt;BR/&gt; 33416: (12.5%)&lt;BR/&gt; 33231: (12.5%)&lt;BR/&gt; 32860: (12.5%)&gt;];
}
5426--8024[label="1;4pkt 4fpkt"];
5426--9451[label="1;4pkt 4fpkt"];
8024--9451[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.4.83" dst_port="33626" src_ip="198.94.172.88" src_port="80"/>
      <filter dst_ip="168.45.4.83" dst_port="33416" src_ip="198.94.172.88" src_port="80"/>
      <filter dst_ip="168.45.4.83" dst_port="33231" src_ip="198.94.172.88" src_port="80"/>
      <filter dst_ip="168.45.4.83" dst_port="32860" src_ip="198.94.172.88" src_port="80"/>
    </slice>
    <from sec="1178342063" usec="0"/>
    <to sec="1178342077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.113.241.90"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178341237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
5468[label="89.117.64.92;255pkt 255fpkt", shape=pentagon, color=darkviolet];
8047[label="89.117.64.92;255pkt 255fpkt", shape=invtriangle, color=brown];
9463[label="89.117.64.92;255pkt 255fpkt", shape=invhouse, color=bisque];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{89.117.64.92:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
5468--8047[label="1;255pkt 255fpkt"];
5468--9463[label="1;255pkt 255fpkt"];
8047--9463[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="89.117.64.92" src_port="1029"/>
    </slice>
    <from sec="1178341696" usec="0"/>
    <to sec="1178341710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,001,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.4.188.92"/>
    </slice>
    <from sec="1178341221" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.99.21.96"/>
    </slice>
    <from sec="1178341668" usec="0"/>
    <to sec="1178341694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
5531[label="198.167.29.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8082[label="198.167.29.97;1pkt 1fpkt", shape=invtriangle, color=brown];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.167.29.97:22, 134.144.11.87:41978}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41978: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
5531--8082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.11.87" dst_port="41978" src_ip="198.167.29.97" src_port="22"/>
    </slice>
    <from sec="1178342039" usec="0"/>
    <to sec="1178342044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
5532[label="129.206.44.97;67pkt 67fpkt", shape=pentagon, color=darkviolet];
8083[label="129.206.44.97;67pkt 67fpkt", shape=invtriangle, color=brown];
9476[label="129.206.44.97;67pkt 67fpkt", shape=invhouse, color=bisque];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.44.97:53, *:*}[46.2687%]&lt;BR/&gt;{129.206.44.97:25, *:*}[26.8657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (26.8657%)&lt;BR/&gt; 25: (16.4179%)&lt;BR/&gt; 80: (6.71642%)&lt;BR/&gt; 32768: (3.73134%)&lt;BR/&gt; 9253: (2.98507%)&gt;];
}
5532--8083[label="1;67pkt 67fpkt"];
5532--9476[label="1;67pkt 67fpkt"];
8083--9476[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.44.97" src_port="53"/>
      <filter src_ip="129.206.44.97" src_port="25"/>
    </slice>
    <from sec="1178341217" usec="0"/>
    <to sec="1178342085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
5535[label="128.122.102.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8085[label="128.122.102.97;2pkt 2fpkt", shape=invtriangle, color=brown];
9478[label="128.122.102.97;2pkt 2fpkt", shape=invhouse, color=bisque];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.102.97:2197, 198.48.2.144:80}[50%]&lt;BR/&gt;{128.122.102.97:2198, 198.48.2.144:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2198: (25%)&lt;BR/&gt; 2197: (25%)&gt;];
}
5535--8085[label="1;2pkt 2fpkt"];
5535--9478[label="1;2pkt 2fpkt"];
8085--9478[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.2.144" dst_port="80" src_ip="128.122.102.97" src_port="2198"/>
      <filter dst_ip="198.48.2.144" dst_port="80" src_ip="128.122.102.97" src_port="2197"/>
    </slice>
    <from sec="1178341645" usec="0"/>
    <to sec="1178341672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.910024,2.66762,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
3194[label="134.149.16.115;s;74pkt 74fpkt", shape=diamond, color=yellow];
5770[label="134.149.16.115;80pkt 80fpkt", shape=pentagon, color=darkviolet];
9553[label="134.149.16.115;80pkt 80fpkt", shape=invhouse, color=bisque];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.16.115:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62328: (5.12821%)&lt;BR/&gt; 62327: (5.12821%)&lt;BR/&gt; 62313: (4.48718%)&lt;BR/&gt; 62300: (3.84615%)&gt;];
}
3194--5770[label="1;74pkt 74fpkt"];
3194--9553[label="1;74pkt 74fpkt"];
5770--9553[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="134.149.16.115"/>
    </slice>
    <from sec="1178341882" usec="0"/>
    <to sec="1178342053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.131.152.100"/>
    </slice>
    <from sec="1178341243" usec="0"/>
    <to sec="1178342092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.64.121.102"/>
    </slice>
    <from sec="1178342072" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.248.209.102"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.153.220.103"/>
    </slice>
    <from sec="1178342012" usec="0"/>
    <to sec="1178342065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
5661[label="134.149.114.105;35pkt 35fpkt", shape=pentagon, color=darkviolet];
8152[label="134.149.114.105;35pkt 35fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.114.105:32768, *:53}[48.5714%]&lt;BR/&gt;{134.149.114.105:25, *:*}[28.5714%]&lt;BR/&gt;{134.149.114.105:53, *:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (34.2857%)&lt;BR/&gt; 32768: (24.2857%)&lt;BR/&gt; 25: (15.7143%)&lt;BR/&gt; 65456: (1.42857%)&lt;BR/&gt; 56456: (1.42857%)&gt;];
}
5661--8152[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="134.149.114.105" src_port="25"/>
      <filter src_ip="134.149.114.105" src_port="53"/>
      <filter dst_port="53" src_ip="134.149.114.105" src_port="32768"/>
    </slice>
    <from sec="1178341264" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
5667[label="198.48.3.106;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8154[label="198.48.3.106;15pkt 15fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.48.3.106:80, 168.45.101.25:*}[73.3333%]&lt;BR/&gt;{198.48.3.106:80, 198.150.161.159:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63324: (3.33333%)&lt;BR/&gt; 63323: (3.33333%)&lt;BR/&gt; 63305: (3.33333%)&lt;BR/&gt; 63304: (3.33333%)&gt;];
}
5667--8154[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.101.25" src_ip="198.48.3.106" src_port="80"/>
      <filter dst_ip="198.150.161.159" src_ip="198.48.3.106" src_port="80"/>
    </slice>
    <from sec="1178341225" usec="0"/>
    <to sec="1178342032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
5671[label="134.2.67.106;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8156[label="134.2.67.106;14pkt 14fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.2.67.106:*, 56.155.234.172:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 2340: (3.44828%)&lt;BR/&gt; 2338: (3.44828%)&lt;BR/&gt; 2336: (3.44828%)&lt;BR/&gt; 2331: (3.44828%)&gt;];
}
5671--8156[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="56.155.234.172" dst_port="995" src_ip="134.2.67.106"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
5679[label="215.29.1.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8159[label="215.29.1.107;1pkt 1fpkt", shape=invtriangle, color=brown];
9521[label="215.29.1.107;1pkt 1fpkt", shape=invhouse, color=bisque];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.29.1.107:53, 199.181.144.146:32768}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
5679--8159[label="1;1pkt 1fpkt"];
5679--9521[label="1;1pkt 1fpkt"];
8159--9521[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.144.146" dst_port="32768" src_ip="215.29.1.107" src_port="53"/>
    </slice>
    <from sec="1178341224" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.94.67.108"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_806{
style=filled;
color=gray75;
5701[label="134.33.161.108;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8172[label="134.33.161.108;24pkt 24fpkt", shape=invtriangle, color=brown];
stat806[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.33.161.108:*, 53.104.94.10:80}[41.6667%]&lt;BR/&gt;{134.33.161.108:*, 53.104.80.71:80}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1328: (2.08333%)&lt;BR/&gt; 1327: (2.08333%)&lt;BR/&gt; 1326: (2.08333%)&lt;BR/&gt; 1325: (2.08333%)&gt;];
}
5701--8172[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="53.104.94.10" dst_port="80" src_ip="134.33.161.108"/>
      <filter dst_ip="53.104.80.71" dst_port="80" src_ip="134.33.161.108"/>
    </slice>
    <from sec="1178341276" usec="0"/>
    <to sec="1178342005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
5705[label="54.128.40.109;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8174[label="54.128.40.109;4pkt 4fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.40.109:40212, 129.206.69.196:80}[25%]&lt;BR/&gt;{54.128.40.109:42859, 129.206.69.196:80}[25%]&lt;BR/&gt;{54.128.40.109:44623, 129.206.69.196:80}[25%]&lt;BR/&gt;{54.128.40.109:60585, 129.206.69.196:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60585: (12.5%)&lt;BR/&gt; 44623: (12.5%)&lt;BR/&gt; 42859: (12.5%)&lt;BR/&gt; 40212: (12.5%)&gt;];
}
5705--8174[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.69.196" dst_port="80" src_ip="54.128.40.109" src_port="60585"/>
      <filter dst_ip="129.206.69.196" dst_port="80" src_ip="54.128.40.109" src_port="44623"/>
      <filter dst_ip="129.206.69.196" dst_port="80" src_ip="54.128.40.109" src_port="42859"/>
      <filter dst_ip="129.206.69.196" dst_port="80" src_ip="54.128.40.109" src_port="40212"/>
    </slice>
    <from sec="1178341318" usec="0"/>
    <to sec="1178341990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.186.52.109"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.203.236.109"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.198.95.110"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.119.222.110"/>
    </slice>
    <from sec="1178341447" usec="0"/>
    <to sec="1178341541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.143.35.112"/>
    </slice>
    <from sec="1178341841" usec="0"/>
    <to sec="1178341891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.64.157.112"/>
    </slice>
    <from sec="1178341338" usec="0"/>
    <to sec="1178341360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.43.7.113"/>
    </slice>
    <from sec="1178341369" usec="0"/>
    <to sec="1178341810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.216.36.114"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
5765[label="155.255.210.114;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8208[label="155.255.210.114;6pkt 6fpkt", shape=invtriangle, color=brown];
9550[label="155.255.210.114;6pkt 6fpkt", shape=invhouse, color=bisque];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.210.114:80, 212.188.129.18:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49281: (8.33333%)&lt;BR/&gt; 49280: (8.33333%)&lt;BR/&gt; 49279: (8.33333%)&lt;BR/&gt; 49278: (8.33333%)&gt;];
}
5765--8208[label="1;6pkt 6fpkt"];
5765--9550[label="1;6pkt 6fpkt"];
8208--9550[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.188.129.18" src_ip="155.255.210.114" src_port="80"/>
    </slice>
    <from sec="1178341243" usec="0"/>
    <to sec="1178341358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.195.214.114"/>
    </slice>
    <from sec="1178341639" usec="0"/>
    <to sec="1178341935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.241.65.115"/>
    </slice>
    <from sec="1178341526" usec="0"/>
    <to sec="1178341546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.174.80.115"/>
    </slice>
    <from sec="1178341750" usec="0"/>
    <to sec="1178341796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.70.140.115"/>
    </slice>
    <from sec="1178341503" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
5779[label="134.149.74.116;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8218[label="134.149.74.116;5pkt 5fpkt", shape=invtriangle, color=brown];
9559[label="134.149.74.116;5pkt 5fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.74.116:25, 213.89.90.4:3359}[20%]&lt;BR/&gt;{134.149.74.116:25, 217.165.148.10:2282}[20%]&lt;BR/&gt;{134.149.74.116:25, 212.129.210.24:4918}[20%]&lt;BR/&gt;{134.149.74.116:25, 216.136.128.100:48919}[20%]&lt;BR/&gt;{134.149.74.116:25, 8.19.107.105:3510}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 48919: (10%)&lt;BR/&gt; 4918: (10%)&lt;BR/&gt; 3510: (10%)&lt;BR/&gt; 3359: (10%)&gt;];
}
5779--8218[label="1;5pkt 5fpkt"];
5779--9559[label="1;5pkt 5fpkt"];
8218--9559[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="8.19.107.105" dst_port="3510" src_ip="134.149.74.116" src_port="25"/>
      <filter dst_ip="216.136.128.100" dst_port="48919" src_ip="134.149.74.116" src_port="25"/>
      <filter dst_ip="212.129.210.24" dst_port="4918" src_ip="134.149.74.116" src_port="25"/>
      <filter dst_ip="217.165.148.10" dst_port="2282" src_ip="134.149.74.116" src_port="25"/>
      <filter dst_ip="213.89.90.4" dst_port="3359" src_ip="134.149.74.116" src_port="25"/>
    </slice>
    <from sec="1178341285" usec="0"/>
    <to sec="1178342062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.140.166.116"/>
    </slice>
    <from sec="1178341460" usec="0"/>
    <to sec="1178341581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.229.100.117"/>
    </slice>
    <from sec="1178341778" usec="0"/>
    <to sec="1178341793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.34.96.121"/>
    </slice>
    <from sec="1178341914" usec="0"/>
    <to sec="1178341942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.132.255.121"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178341441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.112.8.125"/>
    </slice>
    <from sec="1178341681" usec="0"/>
    <to sec="1178341772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
5894[label="55.6.234.127;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8276[label="55.6.234.127;3pkt 3fpkt", shape=invtriangle, color=brown];
9589[label="55.6.234.127;3pkt 3fpkt", shape=invhouse, color=bisque];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.6.234.127:80, 170.129.19.75:18117}[33.3333%]&lt;BR/&gt;{55.6.234.127:80, 129.206.45.99:265}[33.3333%]&lt;BR/&gt;{55.6.234.127:80, 170.129.64.214:25650}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 25650: (16.6667%)&lt;BR/&gt; 18117: (16.6667%)&lt;BR/&gt; 265: (16.6667%)&gt;];
}
5894--8276[label="1;3pkt 3fpkt"];
5894--9589[label="1;3pkt 3fpkt"];
8276--9589[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="170.129.64.214" dst_port="25650" src_ip="55.6.234.127" src_port="80"/>
      <filter dst_ip="129.206.45.99" dst_port="265" src_ip="55.6.234.127" src_port="80"/>
      <filter dst_ip="170.129.19.75" dst_port="18117" src_ip="55.6.234.127" src_port="80"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.89.132.128"/>
    </slice>
    <from sec="1178341441" usec="0"/>
    <to sec="1178341675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_830{
style=filled;
color=gray75;
5924[label="134.149.4.130;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8293[label="134.149.4.130;14pkt 14fpkt", shape=invtriangle, color=brown];
stat830[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.4.130:*, 198.48.2.51:80}[50%]&lt;BR/&gt;{134.149.4.130:*, 68.128.228.149:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55623: (3.57143%)&lt;BR/&gt; 55610: (3.57143%)&lt;BR/&gt; 55571: (3.57143%)&lt;BR/&gt; 55570: (3.57143%)&gt;];
}
5924--8293[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.2.51" dst_port="80" src_ip="134.149.4.130"/>
      <filter dst_ip="68.128.228.149" dst_port="80" src_ip="134.149.4.130"/>
    </slice>
    <from sec="1178341459" usec="0"/>
    <to sec="1178341478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.169.156.132"/>
    </slice>
    <from sec="1178341683" usec="0"/>
    <to sec="1178341708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.52.226.132"/>
    </slice>
    <from sec="1178341758" usec="0"/>
    <to sec="1178341781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.30.1.135"/>
    </slice>
    <from sec="1178341210" usec="0"/>
    <to sec="1178342092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_834{
style=filled;
color=gray75;
5996[label="58.40.94.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8335[label="58.40.94.136;1pkt 1fpkt", shape=invtriangle, color=brown];
9621[label="58.40.94.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat834[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.40.94.136:60222, 129.206.93.54:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60222: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5996--8335[label="1;1pkt 1fpkt"];
5996--9621[label="1;1pkt 1fpkt"];
8335--9621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.93.54" dst_port="80" src_ip="58.40.94.136" src_port="60222"/>
    </slice>
    <from sec="1178341503" usec="0"/>
    <to sec="1178341506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
5999[label="145.133.166.136;141pkt 141fpkt", shape=pentagon, color=darkviolet];
8338[label="145.133.166.136;141pkt 141fpkt", shape=invtriangle, color=brown];
9623[label="145.133.166.136;141pkt 141fpkt", shape=invhouse, color=bisque];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.133.166.136:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5999--8338[label="1;141pkt 141fpkt"];
5999--9623[label="1;141pkt 141fpkt"];
8338--9623[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="145.133.166.136"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.144.49.138"/>
    </slice>
    <from sec="1178341254" usec="0"/>
    <to sec="1178341308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_837{
style=filled;
color=gray75;
6024[label="134.128.90.138;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8356[label="134.128.90.138;12pkt 12fpkt", shape=invtriangle, color=brown];
stat837[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.90.138:25, *:*}[75%]&lt;BR/&gt;{134.128.90.138:110, 60.10.238.148:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.5%)&lt;BR/&gt; 110: (12.5%)&lt;BR/&gt; 43761: (4.16667%)&lt;BR/&gt; 3674: (4.16667%)&lt;BR/&gt; 3488: (4.16667%)&gt;];
}
6024--8356[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="134.128.90.138" src_port="25"/>
      <filter dst_ip="60.10.238.148" src_ip="134.128.90.138" src_port="110"/>
    </slice>
    <from sec="1178341224" usec="0"/>
    <to sec="1178342084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.238.85.139"/>
    </slice>
    <from sec="1178341516" usec="0"/>
    <to sec="1178341543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.210.204.140"/>
    </slice>
    <from sec="1178341479" usec="0"/>
    <to sec="1178341806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.69.18.141"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.132.40.142"/>
    </slice>
    <from sec="1178342031" usec="0"/>
    <to sec="1178342066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
6086[label="168.45.238.143;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8385[label="168.45.238.143;16pkt 16fpkt", shape=invtriangle, color=brown];
9647[label="168.45.238.143;16pkt 16fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.238.143:65228, *:*}[68.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65228: (34.375%)&lt;BR/&gt; 41579: (6.25%)&lt;BR/&gt; 2621: (6.25%)&lt;BR/&gt; 57150: (3.125%)&lt;BR/&gt; 49523: (3.125%)&gt;];
}
6086--8385[label="1;16pkt 16fpkt"];
6086--9647[label="1;16pkt 16fpkt"];
8385--9647[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="168.45.238.143" src_port="65228"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_844{
style=filled;
color=gray75;
6091[label="134.153.97.144;80pkt 80fpkt", shape=pentagon, color=darkviolet];
8387[label="134.153.97.144;80pkt 80fpkt", shape=invtriangle, color=brown];
9648[label="134.153.97.144;80pkt 80fpkt", shape=invhouse, color=bisque];
stat844[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.97.144:1433, 8.77.128.128:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4979: (0.625%)&lt;BR/&gt; 4888: (0.625%)&lt;BR/&gt; 4801: (0.625%)&lt;BR/&gt; 4792: (0.625%)&gt;];
}
6091--8387[label="1;80pkt 80fpkt"];
6091--9648[label="1;80pkt 80fpkt"];
8387--9648[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="8.77.128.128" src_ip="134.153.97.144" src_port="1433"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
6092[label="155.255.149.144;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8388[label="155.255.149.144;4pkt 4fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.149.144:49349, 217.201.183.1:80}[25%]&lt;BR/&gt;{155.255.149.144:49350, 217.201.183.1:80}[25%]&lt;BR/&gt;{155.255.149.144:49351, 217.201.183.1:80}[25%]&lt;BR/&gt;{155.255.149.144:49352, 217.201.183.1:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49352: (12.5%)&lt;BR/&gt; 49351: (12.5%)&lt;BR/&gt; 49350: (12.5%)&lt;BR/&gt; 49349: (12.5%)&gt;];
}
6092--8388[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="217.201.183.1" dst_port="80" src_ip="155.255.149.144" src_port="49352"/>
      <filter dst_ip="217.201.183.1" dst_port="80" src_ip="155.255.149.144" src_port="49351"/>
      <filter dst_ip="217.201.183.1" dst_port="80" src_ip="155.255.149.144" src_port="49350"/>
      <filter dst_ip="217.201.183.1" dst_port="80" src_ip="155.255.149.144" src_port="49349"/>
    </slice>
    <from sec="1178341968" usec="0"/>
    <to sec="1178341998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.199.199.144"/>
    </slice>
    <from sec="1178341928" usec="0"/>
    <to sec="1178341955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_847{
style=filled;
color=gray75;
6103[label="54.128.33.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8393[label="54.128.33.145;5pkt 5fpkt", shape=invtriangle, color=brown];
stat847[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.33.145:43956, 134.128.69.84:80}[20%]&lt;BR/&gt;{54.128.33.145:48507, 134.128.69.84:80}[20%]&lt;BR/&gt;{54.128.33.145:55015, 134.128.69.84:80}[20%]&lt;BR/&gt;{54.128.33.145:55838, 134.128.69.84:80}[20%]&lt;BR/&gt;{54.128.33.145:64702, 134.128.69.84:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64702: (10%)&lt;BR/&gt; 55838: (10%)&lt;BR/&gt; 55015: (10%)&lt;BR/&gt; 48507: (10%)&gt;];
}
6103--8393[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="134.128.69.84" dst_port="80" src_ip="54.128.33.145" src_port="64702"/>
      <filter dst_ip="134.128.69.84" dst_port="80" src_ip="54.128.33.145" src_port="55838"/>
      <filter dst_ip="134.128.69.84" dst_port="80" src_ip="54.128.33.145" src_port="55015"/>
      <filter dst_ip="134.128.69.84" dst_port="80" src_ip="54.128.33.145" src_port="48507"/>
      <filter dst_ip="134.128.69.84" dst_port="80" src_ip="54.128.33.145" src_port="43956"/>
    </slice>
    <from sec="1178341279" usec="0"/>
    <to sec="1178341956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
6128[label="134.149.72.147;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8404[label="134.149.72.147;10pkt 10fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.72.147:*, 13.227.2.73:80}[20%]&lt;BR/&gt;{134.149.72.147:*, 216.136.135.110:80}[20%]&lt;BR/&gt;{134.149.72.147:*, 212.169.96.166:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2415: (5%)&lt;BR/&gt; 2414: (5%)&lt;BR/&gt; 2411: (5%)&lt;BR/&gt; 2409: (5%)&gt;];
}
6128--8404[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="212.169.96.166" dst_port="80" src_ip="134.149.72.147"/>
      <filter dst_ip="216.136.135.110" dst_port="80" src_ip="134.149.72.147"/>
      <filter dst_ip="13.227.2.73" dst_port="80" src_ip="134.149.72.147"/>
    </slice>
    <from sec="1178341466" usec="0"/>
    <to sec="1178342057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_849{
style=filled;
color=gray75;
6134[label="220.193.200.147;128pkt 128fpkt", shape=pentagon, color=darkviolet];
8409[label="220.193.200.147;128pkt 128fpkt", shape=invtriangle, color=brown];
stat849[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.193.200.147:1090, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1090: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
6134--8409[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="220.193.200.147" src_port="1090"/>
    </slice>
    <from sec="1178341549" usec="0"/>
    <to sec="1178341557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.65.143.149"/>
    </slice>
    <from sec="1178341298" usec="0"/>
    <to sec="1178341351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.212.112.151"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.195.173.151"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.54.36.153"/>
    </slice>
    <from sec="1178341386" usec="0"/>
    <to sec="1178341761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.149.72.154"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.206.182.154"/>
    </slice>
    <from sec="1178341407" usec="0"/>
    <to sec="1178341434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.113.176.155"/>
    </slice>
    <from sec="1178341211" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.109.160.156"/>
    </slice>
    <from sec="1178341843" usec="0"/>
    <to sec="1178341941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.167.114.157"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.154.194.160"/>
    </slice>
    <from sec="1178341544" usec="0"/>
    <to sec="1178341557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="47.76.209.160"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.176.26.163"/>
    </slice>
    <from sec="1178341326" usec="0"/>
    <to sec="1178341404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.102.102.165"/>
    </slice>
    <from sec="1178341216" usec="0"/>
    <to sec="1178341315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
6354[label="134.153.59.167;66pkt 66fpkt", shape=pentagon, color=darkviolet];
8537[label="134.153.59.167;66pkt 66fpkt", shape=invtriangle, color=brown];
9727[label="134.153.59.167;66pkt 66fpkt", shape=invhouse, color=bisque];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.59.167:25469, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25469: (50%)&lt;BR/&gt; 60669: (0.757576%)&lt;BR/&gt; 60245: (0.757576%)&lt;BR/&gt; 53693: (0.757576%)&lt;BR/&gt; 52480: (0.757576%)&gt;];
}
6354--8537[label="1;66pkt 66fpkt"];
6354--9727[label="1;66pkt 66fpkt"];
8537--9727[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter src_ip="134.153.59.167" src_port="25469"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.200.193.167"/>
    </slice>
    <from sec="1178341512" usec="0"/>
    <to sec="1178341529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.114.194.167"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.233.213.167"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178341707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.214.245.167"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.141.90.168"/>
    </slice>
    <from sec="1178341698" usec="0"/>
    <to sec="1178341781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_870{
style=filled;
color=gray75;
6380[label="134.149.20.169;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8549[label="134.149.20.169;3pkt 3fpkt", shape=invtriangle, color=brown];
9733[label="134.149.20.169;3pkt 3fpkt", shape=invhouse, color=bisque];
stat870[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.20.169:61234, 198.48.2.14:80}[33.3333%]&lt;BR/&gt;{134.149.20.169:14520, 41.120.27.18:443}[33.3333%]&lt;BR/&gt;{134.149.20.169:61165, 198.48.3.75:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 61234: (16.6667%)&lt;BR/&gt; 61165: (16.6667%)&lt;BR/&gt; 14520: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
6380--8549[label="1;3pkt 3fpkt"];
6380--9733[label="1;3pkt 3fpkt"];
8549--9733[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.3.75" dst_port="80" src_ip="134.149.20.169" src_port="61165"/>
      <filter dst_ip="41.120.27.18" dst_port="443" src_ip="134.149.20.169" src_port="14520"/>
      <filter dst_ip="198.48.2.14" dst_port="80" src_ip="134.149.20.169" src_port="61234"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
6390[label="129.206.220.169;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8556[label="129.206.220.169;10pkt 10fpkt", shape=invtriangle, color=brown];
9738[label="129.206.220.169;10pkt 10fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.220.169:*, 88.102.177.174:80}[40%]&lt;BR/&gt;{129.206.220.169:*, 88.102.177.162:80}[30%]&lt;BR/&gt;{129.206.220.169:*, 88.102.177.173:80}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2752: (5%)&lt;BR/&gt; 2751: (5%)&lt;BR/&gt; 2747: (5%)&lt;BR/&gt; 2746: (5%)&gt;];
}
6390--8556[label="1;10pkt 10fpkt"];
6390--9738[label="1;10pkt 10fpkt"];
8556--9738[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="88.102.177.174" dst_port="80" src_ip="129.206.220.169"/>
      <filter dst_ip="88.102.177.173" dst_port="80" src_ip="129.206.220.169"/>
      <filter dst_ip="88.102.177.162" dst_port="80" src_ip="129.206.220.169"/>
    </slice>
    <from sec="1178341538" usec="0"/>
    <to sec="1178341544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_872{
style=filled;
color=gray75;
6391[label="216.163.238.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8557[label="216.163.238.169;2pkt 2fpkt", shape=invtriangle, color=brown];
stat872[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.163.238.169:29912, 41.137.211.143:33434}[50%]&lt;BR/&gt;{216.163.238.169:29912, 99.135.152.230:33434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33434: (50%)&lt;BR/&gt; 29912: (50%)&gt;];
}
6391--8557[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="99.135.152.230" dst_port="33434" src_ip="216.163.238.169" src_port="29912"/>
      <filter dst_ip="41.137.211.143" dst_port="33434" src_ip="216.163.238.169" src_port="29912"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_873{
style=filled;
color=gray75;
6422[label="198.150.26.172;49pkt 49fpkt", shape=pentagon, color=darkviolet];
8570[label="198.150.26.172;49pkt 49fpkt", shape=invtriangle, color=brown];
stat873[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.150.26.172:53, *:*}[95.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.9796%)&lt;BR/&gt; 32770: (5.10204%)&lt;BR/&gt; 32768: (4.08163%)&lt;BR/&gt; 0: (4.08163%)&lt;BR/&gt; 32777: (2.04082%)&gt;];
}
6422--8570[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="198.150.26.172" src_port="53"/>
    </slice>
    <from sec="1178341265" usec="0"/>
    <to sec="1178342092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
6435[label="56.155.234.172;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8580[label="56.155.234.172;29pkt 29fpkt", shape=invtriangle, color=brown];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.155.234.172:995, 134.2.67.106:*}[51.7241%]&lt;BR/&gt;{56.155.234.172:995, 134.2.109.226:*}[20.6897%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 3856: (1.72414%)&lt;BR/&gt; 3831: (1.72414%)&lt;BR/&gt; 3826: (1.72414%)&lt;BR/&gt; 3669: (1.72414%)&gt;];
}
6435--8580[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="134.2.67.106" src_ip="56.155.234.172" src_port="995"/>
      <filter dst_ip="134.2.109.226" src_ip="56.155.234.172" src_port="995"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_875{
style=filled;
color=gray75;
6444[label="134.153.66.174;54pkt 54fpkt", shape=pentagon, color=darkviolet];
8586[label="134.153.66.174;54pkt 54fpkt", shape=invtriangle, color=brown];
stat875[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.66.174:1433, 12.30.51.31:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 63420: (0.925926%)&lt;BR/&gt; 62417: (0.925926%)&lt;BR/&gt; 61792: (0.925926%)&lt;BR/&gt; 61153: (0.925926%)&gt;];
}
6444--8586[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="12.30.51.31" src_ip="134.153.66.174" src_port="1433"/>
    </slice>
    <from sec="1178341215" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_876{
style=filled;
color=gray75;
6447[label="155.255.142.174;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8588[label="155.255.142.174;5pkt 5fpkt", shape=invtriangle, color=brown];
stat876[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.142.174:6648, 88.86.75.76:80}[20%]&lt;BR/&gt;{155.255.142.174:9298, 198.48.1.34:80}[20%]&lt;BR/&gt;{155.255.142.174:9306, 198.48.1.34:80}[20%]&lt;BR/&gt;{155.255.142.174:10066, 198.48.3.108:80}[20%]&lt;BR/&gt;{155.255.142.174:10074, 198.48.3.108:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10074: (10%)&lt;BR/&gt; 10066: (10%)&lt;BR/&gt; 9306: (10%)&lt;BR/&gt; 9298: (10%)&gt;];
}
6447--8588[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.3.108" dst_port="80" src_ip="155.255.142.174" src_port="10074"/>
      <filter dst_ip="198.48.3.108" dst_port="80" src_ip="155.255.142.174" src_port="10066"/>
      <filter dst_ip="198.48.1.34" dst_port="80" src_ip="155.255.142.174" src_port="9306"/>
      <filter dst_ip="198.48.1.34" dst_port="80" src_ip="155.255.142.174" src_port="9298"/>
      <filter dst_ip="88.86.75.76" dst_port="80" src_ip="155.255.142.174" src_port="6648"/>
    </slice>
    <from sec="1178341633" usec="0"/>
    <to sec="1178342044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.144.80.175"/>
    </slice>
    <from sec="1178341630" usec="0"/>
    <to sec="1178341767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.243.129.175"/>
    </slice>
    <from sec="1178341369" usec="0"/>
    <to sec="1178341383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.243.181.176"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.153.223.176"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23435,2.67189,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
779[label="198.155.85.6;d;381pkt 381fpkt", shape=diamond, color=yellow];
3431[label="198.155.85.6;d;350pkt 350fpkt", shape=hexagon, color=black];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 198.155.85.6:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
779--1086[label="0.00689655;1pkt 1fpkt"];
779--3431[label="1;350pkt 350fpkt"];
779--5269[label="0.0833333;1pkt 1fpkt"];
779--6475[label="0.0277778;1pkt 1fpkt"];
779--7456[label="0.00555556;1pkt 1fpkt"];
779--8607[label="0.0277778;1pkt 1fpkt"];
3431--5269[label="0.0833333;1pkt 1fpkt"];
3431--6475[label="0.0277778;1pkt 1fpkt"];
3431--7456[label="0.00555556;1pkt 1fpkt"];
3431--8607[label="0.0277778;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.155.85.6"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
6487[label="56.139.66.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8613[label="56.139.66.178;1pkt 1fpkt", shape=invtriangle, color=brown];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.139.66.178:7070, 170.129.154.130:63739}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63739: (50%)&lt;BR/&gt; 7070: (50%)&gt;];
}
6487--8613[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.129.154.130" dst_port="63739" src_ip="56.139.66.178" src_port="7070"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
303[label="44.58.213.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
317[label="34.6.162.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
336[label="90.134.239.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
371[label="46.17.60.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
416[label="53.108.28.212;d;60pkt 60fpkt", shape=diamond, color=yellow];
758[label="44.38.124.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
807[label="197.113.229.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
976[label="34.226.51.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
1010[label="53.153.213.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1040[label="42.40.152.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
1070[label="43.55.96.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1117[label="44.161.149.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1145[label="172.113.214.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
1172[label="144.87.62.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
1176[label="44.59.89.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
1344[label="42.46.194.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
1346[label="46.17.33.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
1364[label="42.59.227.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1420[label="129.206.45.95;s;373pkt 373fpkt", shape=diamond, color=yellow];
1438[label="45.1.210.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
1453[label="40.190.27.118;d;1pkt 1fpkt", shape=diamond, color=yellow];
1479[label="40.197.56.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
1487[label="46.17.79.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1508[label="42.57.239.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
1771[label="46.44.198.117;d;2pkt 2fpkt", shape=diamond, color=yellow];
1841[label="34.1.22.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
2176[label="42.37.53.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
2251[label="168.45.187.0;s;26pkt 26fpkt", shape=diamond, color=yellow];
2284[label="214.72.87.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
2614[label="35.192.104.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
2635[label="43.54.50.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
2674[label="53.153.213.165;d;1pkt 1fpkt", shape=diamond, color=yellow];
3207[label="47.144.178.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
3274[label="44.58.213.25;d;1pkt 1fpkt", shape=hexagon, color=black];
3376[label="34.6.162.239;d;1pkt 1fpkt", shape=hexagon, color=black];
3470[label="34.226.51.188;d;1pkt 1fpkt", shape=hexagon, color=black];
3504[label="40.197.56.119;d;1pkt 1fpkt", shape=hexagon, color=black];
3515[label="34.1.22.194;d;1pkt 1fpkt", shape=hexagon, color=black];
3660[label="46.44.198.117;d;2pkt 2fpkt", shape=hexagon, color=black];
3674[label="44.38.124.59;d;1pkt 1fpkt", shape=hexagon, color=black];
4161[label="168.45.187.0;28pkt 28fpkt", shape=pentagon, color=darkviolet];
5766[label="172.113.214.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7355[label="168.45.187.0;27pkt 27fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.45.95:*, *:80}[39.6861%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20.3971%)&lt;BR/&gt; 995: (9.38628%)&lt;BR/&gt; 4662: (4.9639%)&lt;BR/&gt; 4665: (4.51264%)&lt;BR/&gt; 443: (2.25632%)&gt;];
}
303--1420[label="1;1pkt 1fpkt"];
303--3274[label="1;1pkt 1fpkt"];
317--1420[label="1;1pkt 1fpkt"];
317--3376[label="1;1pkt 1fpkt"];
336--1420[label="1;1pkt 1fpkt"];
371--1420[label="1;1pkt 1fpkt"];
416--577[label="0.0666667;2pkt 2fpkt"];
416--1145[label="1;1pkt 1fpkt"];
416--1202[label="0.0172414;1pkt 1fpkt"];
416--1300[label="0.05;3pkt 3fpkt"];
416--1304[label="0.0166667;1pkt 1fpkt"];
416--1420[label="0.0833333;5pkt 5fpkt"];
416--1538[label="0.0333333;2pkt 2fpkt"];
416--1618[label="0.0333333;2pkt 2fpkt"];
416--1654[label="0.0166667;1pkt 1fpkt"];
416--2251[label="0.384615;10pkt 10fpkt"];
416--2883[label="0.0166667;1pkt 1fpkt"];
416--3116[label="0.0566038;3pkt 3fpkt"];
416--3388[label="0.0192308;1pkt 1fpkt"];
416--4161[label="0.357143;10pkt 10fpkt"];
416--4206[label="0.0545455;3pkt 3fpkt"];
416--4699[label="0.0172414;1pkt 1fpkt"];
416--5157[label="0.0344828;1pkt 1fpkt"];
416--5230[label="0.0166667;1pkt 1fpkt"];
416--5659[label="0.117647;2pkt 2fpkt"];
416--5766[label="1;1pkt 1fpkt"];
416--5911[label="0.0555556;2pkt 2fpkt"];
416--6116[label="0.0363636;2pkt 2fpkt"];
416--6157[label="0.0714286;1pkt 1fpkt"];
416--6614[label="0.0166667;1pkt 1fpkt"];
416--6737[label="0.0166667;1pkt 1fpkt"];
416--7355[label="0.37037;10pkt 10fpkt"];
416--8150[label="0.117647;2pkt 2fpkt"];
416--8422[label="0.0714286;1pkt 1fpkt"];
416--8672[label="0.0166667;1pkt 1fpkt"];
416--9249[label="0.0178571;1pkt 1fpkt"];
758--1420[label="1;1pkt 1fpkt"];
758--3674[label="1;1pkt 1fpkt"];
807--1420[label="1;1pkt 1fpkt"];
976--1420[label="1;1pkt 1fpkt"];
976--3470[label="1;1pkt 1fpkt"];
1010--1420[label="1;1pkt 1fpkt"];
1040--1420[label="1;1pkt 1fpkt"];
1070--1420[label="1;1pkt 1fpkt"];
1117--1420[label="1;1pkt 1fpkt"];
1145--5766[label="1;1pkt 1fpkt"];
1172--1420[label="1;1pkt 1fpkt"];
1176--1420[label="1;1pkt 1fpkt"];
1344--1420[label="1;1pkt 1fpkt"];
1346--1420[label="1;1pkt 1fpkt"];
1364--1420[label="1;1pkt 1fpkt"];
1420--1438[label="1;1pkt 1fpkt"];
1420--1453[label="1;1pkt 1fpkt"];
1420--1479[label="1;1pkt 1fpkt"];
1420--1487[label="1;1pkt 1fpkt"];
1420--1508[label="1;1pkt 1fpkt"];
1420--1647[label="0.0227273;4pkt 4fpkt"];
1420--1771[label="1;2pkt 2fpkt"];
1420--1821[label="0.214286;9pkt 9fpkt"];
1420--1841[label="1;1pkt 1fpkt"];
1420--1899[label="0.0515464;10pkt 10fpkt"];
1420--1906[label="0.025641;1pkt 1fpkt"];
1420--1919[label="0.130435;6pkt 6fpkt"];
1420--2108[label="0.0357143;2pkt 2fpkt"];
1420--2176[label="1;1pkt 1fpkt"];
1420--2198[label="0.106195;12pkt 12fpkt"];
1420--2284[label="1;1pkt 1fpkt"];
1420--2389[label="0.0102041;1pkt 1fpkt"];
1420--2591[label="0.0166667;1pkt 1fpkt"];
1420--2614[label="1;1pkt 1fpkt"];
1420--2635[label="1;1pkt 1fpkt"];
1420--2674[label="1;1pkt 1fpkt"];
1420--2732[label="0.0740741;2pkt 2fpkt"];
1420--2777[label="0.0185185;1pkt 1fpkt"];
1420--2783[label="0.0412371;4pkt 4fpkt"];
1420--2812[label="0.0222222;1pkt 1fpkt"];
1420--3097[label="0.131579;5pkt 5fpkt"];
1420--3207[label="1;1pkt 1fpkt"];
1420--3230[label="1;1pkt 1fpkt"];
1420--3274[label="1;1pkt 1fpkt"];
1420--3376[label="1;1pkt 1fpkt"];
1420--3461[label="0.0110803;4pkt 4fpkt"];
1420--3470[label="1;1pkt 1fpkt"];
1420--3504[label="1;1pkt 1fpkt"];
1420--3515[label="1;1pkt 1fpkt"];
1420--3535[label="0.0285714;1pkt 1fpkt"];
1420--3622[label="0.0135135;2pkt 2fpkt"];
1420--3660[label="1;2pkt 2fpkt"];
1420--3674[label="1;1pkt 1fpkt"];
1420--3703[label="0.0384615;2pkt 2fpkt"];
1420--3997[label="0.0285714;1pkt 1fpkt"];
1420--4009[label="0.0135135;2pkt 2fpkt"];
1420--4026[label="0.0563003;21pkt 21fpkt"];
1420--4040[label="0.0697051;26pkt 26fpkt"];
1420--4061[label="0.0321716;12pkt 12fpkt"];
1420--4074[label="0.0563003;21pkt 21fpkt"];
1420--4085[label="0.0697051;26pkt 26fpkt"];
1420--4105[label="0.0321716;12pkt 12fpkt"];
1420--4115[label="0.0563003;21pkt 21fpkt"];
1420--4126[label="0.0697051;26pkt 26fpkt"];
1420--4141[label="0.0321716;12pkt 12fpkt"];
1479--3504[label="1;1pkt 1fpkt"];
1771--3660[label="1;2pkt 2fpkt"];
1841--3515[label="1;1pkt 1fpkt"];
2251--2459[label="0.0384615;1pkt 1fpkt"];
2251--3336[label="0.153846;4pkt 4fpkt"];
2251--4061[label="0.0384615;1pkt 1fpkt"];
2251--4105[label="0.0384615;1pkt 1fpkt"];
2251--4141[label="0.0384615;1pkt 1fpkt"];
2251--4161[label="1;26pkt 26fpkt"];
2251--7355[label="0.961538;25pkt 25fpkt"];
4161--7355[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="129.206.45.95"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
6497[label="199.66.39.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8616[label="199.66.39.179;2pkt 2fpkt", shape=invtriangle, color=brown];
9775[label="199.66.39.179;2pkt 2fpkt", shape=invhouse, color=bisque];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.66.39.179:80, 168.45.110.42:2063}[50%]&lt;BR/&gt;{199.66.39.179:80, 168.45.110.42:2064}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2064: (25%)&lt;BR/&gt; 2063: (25%)&gt;];
}
6497--8616[label="1;2pkt 2fpkt"];
6497--9775[label="1;2pkt 2fpkt"];
8616--9775[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.110.42" dst_port="2064" src_ip="199.66.39.179" src_port="80"/>
      <filter dst_ip="168.45.110.42" dst_port="2063" src_ip="199.66.39.179" src_port="80"/>
    </slice>
    <from sec="1178341971" usec="0"/>
    <to sec="1178342011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.134.196.180"/>
    </slice>
    <from sec="1178341720" usec="0"/>
    <to sec="1178341799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.137.13.181"/>
    </slice>
    <from sec="1178341681" usec="0"/>
    <to sec="1178341815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_887{
style=filled;
color=gray75;
6538[label="134.153.119.181;33pkt 33fpkt", shape=pentagon, color=darkviolet];
8632[label="134.153.119.181;33pkt 33fpkt", shape=invtriangle, color=brown];
9785[label="134.153.119.181;33pkt 33fpkt", shape=invhouse, color=bisque];
stat887[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.119.181:1433, 213.144.83.98:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 60234: (1.51515%)&lt;BR/&gt; 59240: (1.51515%)&lt;BR/&gt; 57325: (1.51515%)&lt;BR/&gt; 56225: (1.51515%)&gt;];
}
6538--8632[label="1;33pkt 33fpkt"];
6538--9785[label="1;33pkt 33fpkt"];
8632--9785[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="213.144.83.98" src_ip="134.153.119.181" src_port="1433"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
6545[label="168.45.52.182;29pkt 29fpkt", shape=pentagon, color=darkviolet];
8637[label="168.45.52.182;27pkt 27fpkt", shape=invtriangle, color=brown];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.45.52.182:*, 100.145.30.132:80}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3046: (1.78571%)&lt;BR/&gt; 3045: (1.78571%)&lt;BR/&gt; 3042: (1.78571%)&lt;BR/&gt; 3041: (1.78571%)&gt;];
}
6545--8637[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="100.145.30.132" dst_port="80" src_ip="168.45.52.182"/>
    </slice>
    <from sec="1178341255" usec="0"/>
    <to sec="1178342055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_889{
style=filled;
color=gray75;
6561[label="54.128.33.184;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8645[label="54.128.33.184;10pkt 10fpkt", shape=invtriangle, color=brown];
9788[label="54.128.33.184;10pkt 10fpkt", shape=invhouse, color=bisque];
stat889[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.33.184:*, 134.128.150.241:80}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63837: (5%)&lt;BR/&gt; 61943: (5%)&lt;BR/&gt; 59859: (5%)&lt;BR/&gt; 59640: (5%)&gt;];
}
6561--8645[label="1;10pkt 10fpkt"];
6561--9788[label="1;10pkt 10fpkt"];
8645--9788[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="134.128.150.241" dst_port="80" src_ip="54.128.33.184"/>
    </slice>
    <from sec="1178341234" usec="0"/>
    <to sec="1178342049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.252.145.184"/>
    </slice>
    <from sec="1178341298" usec="0"/>
    <to sec="1178341320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.202.56.185"/>
    </slice>
    <from sec="1178341383" usec="0"/>
    <to sec="1178341410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_892{
style=filled;
color=gray75;
6581[label="199.132.135.185;97pkt 97fpkt", shape=pentagon, color=darkviolet];
8660[label="199.132.135.185;97pkt 97fpkt", shape=invtriangle, color=brown];
stat892[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.132.135.185:443, 210.65.65.151:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1333: (0.515464%)&lt;BR/&gt; 1332: (0.515464%)&lt;BR/&gt; 1331: (0.515464%)&lt;BR/&gt; 1330: (0.515464%)&gt;];
}
6581--8660[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="210.65.65.151" src_ip="199.132.135.185" src_port="443"/>
    </slice>
    <from sec="1178341977" usec="0"/>
    <to sec="1178342089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.132.140.186"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.206.1.187"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.143.65.189"/>
    </slice>
    <from sec="1178341527" usec="0"/>
    <to sec="1178341642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.85.34.190"/>
    </slice>
    <from sec="1178341690" usec="0"/>
    <to sec="1178341705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.996483,2.68057,999,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
1826[label="163.29.50.192;d;310pkt 310fpkt", shape=diamond, color=yellow];
8685[label="134.153.48.190;60pkt 60fpkt", shape=invtriangle, color=brown];
9811[label="134.153.48.190;60pkt 60fpkt", shape=invhouse, color=bisque];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.8.44:1433, 163.29.50.192:*}[25.4839%]&lt;BR/&gt;{134.153.157.64:1433, 163.29.50.192:*}[24.8387%]&lt;BR/&gt;{134.153.165.91:1433, 163.29.50.192:*}[24.8387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 30596: (0.348837%)&lt;BR/&gt; 30412: (0.348837%)&lt;BR/&gt; 30247: (0.348837%)&lt;BR/&gt; 30078: (0.348837%)&gt;];
}
1826--8685[label="1;60pkt 60fpkt"];
1826--9811[label="1;60pkt 60fpkt"];
8685--9811[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="163.29.50.192" src_ip="134.153.8.44" src_port="1433"/>
      <filter dst_ip="163.29.50.192" src_ip="134.153.165.91" src_port="1433"/>
      <filter dst_ip="163.29.50.192" src_ip="134.153.157.64" src_port="1433"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.99.51.192"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178341918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.100.76.192"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
172[label="198.155.84.116;d;391pkt 391fpkt", shape=diamond, color=yellow];
785[label="54.20.118.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
858[label="199.181.155.8;d;494pkt 494fpkt", shape=diamond, color=yellow];
1131[label="92.91.103.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
1190[label="54.20.72.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
1419[label="55.67.33.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1491[label="213.141.185.123;s;17pkt 17fpkt", shape=diamond, color=yellow];
1773[label="45.35.27.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
1830[label="89.117.155.142;s;1pkt 1fpkt", shape=diamond, color=yellow];
2146[label="42.218.86.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
2147[label="112.198.171.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
2373[label="51.46.252.89;s;1pkt 1fpkt", shape=diamond, color=yellow];
2405[label="218.164.177.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
2422[label="88.13.61.111;s;2pkt 2fpkt", shape=diamond, color=yellow];
2689[label="155.203.82.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
2773[label="34.136.56.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
3032[label="214.173.161.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
3071[label="48.221.74.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
3080[label="55.30.1.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
3342[label="199.181.155.8;d;408pkt 408fpkt", shape=hexagon, color=black];
3436[label="54.20.118.89;s;1pkt 1fpkt", shape=hexagon, color=black];
3493[label="55.67.33.20;s;1pkt 1fpkt", shape=hexagon, color=black];
3920[label="213.141.185.123;s;17pkt 17fpkt", shape=hexagon, color=black];
4540[label="214.173.161.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4977[label="220.201.184.55;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5962[label="45.35.27.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6660[label="54.20.77.192;90pkt 90fpkt", shape=pentagon, color=darkviolet];
6800[label="54.20.77.203;53pkt 53fpkt", shape=pentagon, color=darkviolet];
7050[label="54.20.77.226;81pkt 81fpkt", shape=pentagon, color=darkviolet];
7792[label="220.201.184.55;2pkt 2fpkt", shape=invtriangle, color=brown];
8315[label="45.35.27.133;1pkt 1fpkt", shape=invtriangle, color=brown];
8697[label="54.20.77.192;90pkt 90fpkt", shape=invtriangle, color=brown];
8778[label="54.20.77.203;53pkt 53fpkt", shape=invtriangle, color=brown];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 198.155.84.116:*}[42.4731%]&lt;BR/&gt;{*:0, 199.181.155.8:0}[41.7204%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (43.1395%)&lt;BR/&gt; 33438: (6.33721%)&lt;BR/&gt; 33437: (6.33721%)&lt;BR/&gt; 33435: (5.23256%)&lt;BR/&gt; 13750: (1.77326%)&gt;];
}
172--785[label="1;1pkt 1fpkt"];
172--1131[label="1;1pkt 1fpkt"];
172--1190[label="1;1pkt 1fpkt"];
172--1419[label="1;1pkt 1fpkt"];
172--1491[label="1;17pkt 17fpkt"];
172--1773[label="1;1pkt 1fpkt"];
172--1830[label="1;1pkt 1fpkt"];
172--2146[label="1;1pkt 1fpkt"];
172--2147[label="1;1pkt 1fpkt"];
172--2373[label="1;1pkt 1fpkt"];
172--2405[label="1;1pkt 1fpkt"];
172--2422[label="1;2pkt 2fpkt"];
172--2689[label="1;1pkt 1fpkt"];
172--2773[label="1;1pkt 1fpkt"];
172--3032[label="1;1pkt 1fpkt"];
172--3071[label="1;1pkt 1fpkt"];
172--3080[label="1;1pkt 1fpkt"];
172--3436[label="1;1pkt 1fpkt"];
172--3493[label="1;1pkt 1fpkt"];
172--3920[label="1;17pkt 17fpkt"];
172--4540[label="1;1pkt 1fpkt"];
172--4977[label="1;2pkt 2fpkt"];
172--5962[label="1;1pkt 1fpkt"];
172--5964[label="0.00255754;1pkt 1fpkt"];
172--6493[label="0.00395257;1pkt 1fpkt"];
172--6660[label="0.466667;42pkt 42fpkt"];
172--6800[label="1;53pkt 53fpkt"];
172--7050[label="0.518519;42pkt 42fpkt"];
172--7792[label="1;2pkt 2fpkt"];
172--8315[label="1;1pkt 1fpkt"];
172--8317[label="0.00255754;1pkt 1fpkt"];
172--8615[label="0.00395257;1pkt 1fpkt"];
172--8697[label="0.466667;42pkt 42fpkt"];
172--8778[label="1;53pkt 53fpkt"];
172--9609[label="0.00255754;1pkt 1fpkt"];
785--3436[label="1;1pkt 1fpkt"];
858--997[label="0.00202429;1pkt 1fpkt"];
858--3342[label="1;408pkt 408fpkt"];
858--3361[label="0.00202429;1pkt 1fpkt"];
858--3983[label="0.00202429;1pkt 1fpkt"];
858--4051[label="0.00202429;1pkt 1fpkt"];
858--4096[label="0.00202429;1pkt 1fpkt"];
858--4135[label="0.00202429;1pkt 1fpkt"];
858--5108[label="0.00202429;1pkt 1fpkt"];
858--5269[label="0.0833333;1pkt 1fpkt"];
858--6475[label="0.0277778;1pkt 1fpkt"];
858--6660[label="0.466667;42pkt 42fpkt"];
858--7854[label="0.00202429;1pkt 1fpkt"];
858--8607[label="0.0277778;1pkt 1fpkt"];
858--8697[label="0.466667;42pkt 42fpkt"];
858--9354[label="0.00202429;1pkt 1fpkt"];
1419--3493[label="1;1pkt 1fpkt"];
1491--3920[label="1;17pkt 17fpkt"];
1773--5962[label="1;1pkt 1fpkt"];
1773--8315[label="1;1pkt 1fpkt"];
3032--4540[label="1;1pkt 1fpkt"];
3342--3361[label="0.00245098;1pkt 1fpkt"];
3342--3983[label="0.00245098;1pkt 1fpkt"];
3342--4051[label="0.00245098;1pkt 1fpkt"];
3342--4096[label="0.00245098;1pkt 1fpkt"];
3342--4135[label="0.00245098;1pkt 1fpkt"];
3342--5108[label="0.00245098;1pkt 1fpkt"];
3342--5269[label="0.0833333;1pkt 1fpkt"];
3342--6475[label="0.0277778;1pkt 1fpkt"];
3342--6660[label="0.233333;21pkt 21fpkt"];
3342--7854[label="0.00245098;1pkt 1fpkt"];
3342--8607[label="0.0277778;1pkt 1fpkt"];
3342--8697[label="0.233333;21pkt 21fpkt"];
3342--9354[label="0.00245098;1pkt 1fpkt"];
4977--7792[label="1;2pkt 2fpkt"];
5962--8315[label="1;1pkt 1fpkt"];
6660--8697[label="1;90pkt 90fpkt"];
6800--8778[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="198.155.84.116"/>
      <filter dst_ip="199.181.155.8"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
6662[label="56.35.84.192;41pkt 41fpkt", shape=pentagon, color=darkviolet];
8698[label="56.35.84.192;41pkt 41fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{56.35.84.192:*, 134.144.218.2:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3936: (1.21951%)&lt;BR/&gt; 3935: (1.21951%)&lt;BR/&gt; 3934: (1.21951%)&lt;BR/&gt; 3933: (1.21951%)&gt;];
}
6662--8698[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="134.144.218.2" dst_port="443" src_ip="56.35.84.192"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178341851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
6668[label="198.101.170.192;214pkt 214fpkt", shape=pentagon, color=darkviolet];
8699[label="198.101.170.192;214pkt 214fpkt", shape=invtriangle, color=brown];
9821[label="198.101.170.192;214pkt 214fpkt", shape=invhouse, color=bisque];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.101.170.192:50053, *:1026}[60.2804%]&lt;BR/&gt;{198.101.170.192:50053, *:1027}[39.7196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50053: (50%)&lt;BR/&gt; 1026: (30.1402%)&lt;BR/&gt; 1027: (19.8598%)&gt;];
}
6668--8699[label="1;214pkt 214fpkt"];
6668--9821[label="1;214pkt 214fpkt"];
8699--9821[label="1;214pkt 214fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="198.101.170.192" src_port="50053"/>
      <filter dst_port="1027" src_ip="198.101.170.192" src_port="50053"/>
    </slice>
    <from sec="1178342072" usec="0"/>
    <to sec="1178342073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
6681[label="134.33.163.193;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8708[label="134.33.163.193;25pkt 25fpkt", shape=invtriangle, color=brown];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.33.163.193:53, *:*}[56%]&lt;BR/&gt;{134.33.163.193:80, *:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (28%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 32772: (4%)&lt;BR/&gt; 60746: (2%)&lt;BR/&gt; 57486: (2%)&gt;];
}
6681--8708[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="134.33.163.193" src_port="53"/>
      <filter src_ip="134.33.163.193" src_port="80"/>
    </slice>
    <from sec="1178341228" usec="0"/>
    <to sec="1178342043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
6689[label="54.128.33.194;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8712[label="54.128.33.194;14pkt 14fpkt", shape=invtriangle, color=brown];
9830[label="54.128.33.194;14pkt 14fpkt", shape=invhouse, color=bisque];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.33.194:*, 168.45.21.229:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62420: (3.57143%)&lt;BR/&gt; 61405: (3.57143%)&lt;BR/&gt; 59938: (3.57143%)&lt;BR/&gt; 59850: (3.57143%)&gt;];
}
6689--8712[label="1;14pkt 14fpkt"];
6689--9830[label="1;14pkt 14fpkt"];
8712--9830[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="168.45.21.229" dst_port="80" src_ip="54.128.33.194"/>
    </slice>
    <from sec="1178341218" usec="0"/>
    <to sec="1178342031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.153.208.194"/>
    </slice>
    <from sec="1178341748" usec="0"/>
    <to sec="1178341754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.178.67.195"/>
    </slice>
    <from sec="1178341741" usec="0"/>
    <to sec="1178341831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.17.79.196"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.91.145.196"/>
    </slice>
    <from sec="1178341606" usec="0"/>
    <to sec="1178341622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
6723[label="134.149.170.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8735[label="134.149.170.196;1pkt 1fpkt", shape=invtriangle, color=brown];
9844[label="134.149.170.196;1pkt 1fpkt", shape=invhouse, color=bisque];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.170.196:29912, 92.54.239.57:33434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33434: (50%)&lt;BR/&gt; 29912: (50%)&gt;];
}
6723--8735[label="1;1pkt 1fpkt"];
6723--9844[label="1;1pkt 1fpkt"];
8735--9844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="92.54.239.57" dst_port="33434" src_ip="134.149.170.196" src_port="29912"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.213.228.196"/>
    </slice>
    <from sec="1178341766" usec="0"/>
    <to sec="1178341788" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
6726[label="172.113.230.196;19pkt 19fpkt", shape=pentagon, color=darkviolet];
8738[label="172.113.230.196;19pkt 19fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.230.196:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61960: (2.63158%)&lt;BR/&gt; 58970: (2.63158%)&lt;BR/&gt; 55298: (2.63158%)&lt;BR/&gt; 41972: (2.63158%)&gt;];
}
6726--8738[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="172.113.230.196" src_port="25"/>
    </slice>
    <from sec="1178341229" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
6766[label="54.128.40.200;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8756[label="54.128.40.200;9pkt 9fpkt", shape=invtriangle, color=brown];
9851[label="54.128.40.200;9pkt 9fpkt", shape=invhouse, color=bisque];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.40.200:*, 199.181.152.33:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64582: (5.55556%)&lt;BR/&gt; 63310: (5.55556%)&lt;BR/&gt; 62826: (5.55556%)&lt;BR/&gt; 62499: (5.55556%)&gt;];
}
6766--8756[label="1;9pkt 9fpkt"];
6766--9851[label="1;9pkt 9fpkt"];
8756--9851[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.152.33" dst_port="80" src_ip="54.128.40.200"/>
    </slice>
    <from sec="1178341286" usec="0"/>
    <to sec="1178342056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.4.76.201"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_914{
style=filled;
color=gray75;
6782[label="129.206.210.201;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8767[label="129.206.210.201;3pkt 3fpkt", shape=invtriangle, color=brown];
stat914[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.210.201:80, 58.40.83.26:33268}[33.3333%]&lt;BR/&gt;{129.206.210.201:80, 88.168.41.53:49545}[33.3333%]&lt;BR/&gt;{129.206.210.201:80, 54.128.33.208:43715}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49545: (16.6667%)&lt;BR/&gt; 43715: (16.6667%)&lt;BR/&gt; 33268: (16.6667%)&gt;];
}
6782--8767[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="54.128.33.208" dst_port="43715" src_ip="129.206.210.201" src_port="80"/>
      <filter dst_ip="88.168.41.53" dst_port="49545" src_ip="129.206.210.201" src_port="80"/>
      <filter dst_ip="58.40.83.26" dst_port="33268" src_ip="129.206.210.201" src_port="80"/>
    </slice>
    <from sec="1178341217" usec="0"/>
    <to sec="1178341741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
6783[label="170.129.212.201;187pkt 187fpkt", shape=pentagon, color=darkviolet];
8768[label="170.129.212.201;187pkt 187fpkt", shape=invtriangle, color=brown];
9857[label="170.129.212.201;187pkt 187fpkt", shape=invhouse, color=bisque];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.129.212.201:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.4064%)&lt;BR/&gt; 9253: (2.6738%)&lt;BR/&gt; 32768: (1.87166%)&lt;BR/&gt; 53535: (1.06952%)&lt;BR/&gt; 32769: (1.06952%)&gt;];
}
6783--8768[label="1;187pkt 187fpkt"];
6783--9857[label="1;187pkt 187fpkt"];
8768--9857[label="1;187pkt 187fpkt"];
</description>
    <slice>
      <filter src_ip="170.129.212.201" src_port="53"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.247.10.202"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.4.84.203"/>
    </slice>
    <from sec="1178341472" usec="0"/>
    <to sec="1178341498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.28.90.203"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.145.192.203"/>
    </slice>
    <from sec="1178341731" usec="0"/>
    <to sec="1178341790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
177[label="198.155.85.37;d;1067pkt 1067fpkt", shape=diamond, color=yellow];
179[label="198.155.86.61;d;4095pkt 4095fpkt", shape=diamond, color=yellow];
335[label="53.153.217.39;s;187pkt 187fpkt", shape=diamond, color=yellow];
339[label="168.45.232.234;d;3pkt 3fpkt", shape=diamond, color=yellow];
342[label="53.153.221.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
343[label="218.103.16.123;s;17pkt 17fpkt", shape=diamond, color=yellow];
352[label="218.103.16.74;s;26pkt 26fpkt", shape=diamond, color=yellow];
390[label="219.165.226.218;s;39pkt 39fpkt", shape=diamond, color=yellow];
667[label="53.153.220.121;s;68pkt 68fpkt", shape=diamond, color=yellow];
672[label="53.198.154.186;s;11pkt 11fpkt", shape=diamond, color=yellow];
741[label="215.108.249.163;s;33pkt 33fpkt", shape=diamond, color=yellow];
744[label="49.12.231.164;s;200pkt 200fpkt", shape=diamond, color=yellow];
761[label="56.155.234.164;s;144pkt 144fpkt", shape=diamond, color=yellow];
792[label="88.86.72.167;s;3pkt 3fpkt", shape=diamond, color=yellow];
914[label="53.108.8.68;s;226pkt 226fpkt", shape=diamond, color=yellow];
920[label="129.206.218.169;d;116pkt 116fpkt", shape=diamond, color=yellow];
964[label="59.161.42.179;s;126pkt 126fpkt", shape=diamond, color=yellow];
979[label="218.103.24.167;s;39pkt 39fpkt", shape=diamond, color=yellow];
990[label="68.157.128.25;s;16pkt 16fpkt", shape=diamond, color=yellow];
1083[label="53.153.221.116;s;68pkt 68fpkt", shape=diamond, color=yellow];
1087[label="200.164.196.198;s;41pkt 41fpkt", shape=diamond, color=yellow];
1118[label="53.198.156.124;s;4pkt 4fpkt", shape=diamond, color=yellow];
1147[label="53.153.221.215;s;189pkt 189fpkt", shape=diamond, color=yellow];
1185[label="129.206.20.226;d;380pkt 380fpkt", shape=diamond, color=yellow];
1196[label="88.234.193.27;s;582pkt 582fpkt", shape=diamond, color=yellow];
1244[label="88.234.193.22;s;22pkt 22fpkt", shape=diamond, color=yellow];
1245[label="50.254.223.98;s;81pkt 81fpkt", shape=diamond, color=yellow];
1274[label="55.27.64.210;s;69pkt 69fpkt", shape=diamond, color=yellow];
1399[label="54.38.129.237;s;1pkt 1fpkt", shape=diamond, color=yellow];
1421[label="192.22.40.31;s;19pkt 19fpkt", shape=diamond, color=yellow];
1424[label="59.161.97.211;s;8pkt 8fpkt", shape=diamond, color=yellow];
1430[label="218.65.95.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
1465[label="53.153.208.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
1474[label="53.153.217.51;s;82pkt 82fpkt", shape=diamond, color=yellow];
1486[label="13.227.0.206;s;248pkt 248fpkt", shape=diamond, color=yellow];
1511[label="53.153.223.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
1519[label="219.85.164.131;s;58pkt 58fpkt", shape=diamond, color=yellow];
1539[label="219.85.164.128;s;56pkt 56fpkt", shape=diamond, color=yellow];
1540[label="53.105.154.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
1560[label="13.227.0.147;s;21pkt 21fpkt", shape=diamond, color=yellow];
1596[label="13.227.2.53;s;56pkt 56fpkt", shape=diamond, color=yellow];
1643[label="13.227.0.161;s;20pkt 20fpkt", shape=diamond, color=yellow];
1652[label="193.139.92.172;s;71pkt 71fpkt", shape=diamond, color=yellow];
1946[label="134.128.71.91;d;90pkt 90fpkt", shape=diamond, color=yellow];
1963[label="129.206.100.66;d;42pkt 42fpkt", shape=diamond, color=yellow];
1973[label="208.102.100.178;s;26pkt 26fpkt", shape=diamond, color=yellow];
2190[label="216.136.174.24;s;26pkt 26fpkt", shape=diamond, color=yellow];
2203[label="53.153.222.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
2266[label="53.198.156.8;s;16pkt 16fpkt", shape=diamond, color=yellow];
2282[label="192.14.238.122;s;21pkt 21fpkt", shape=diamond, color=yellow];
2729[label="13.227.2.27;s;80pkt 80fpkt", shape=diamond, color=yellow];
2809[label="217.195.22.204;s;42pkt 42fpkt", shape=diamond, color=yellow];
2914[label="48.34.142.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
2930[label="49.64.59.64;s;46pkt 46fpkt", shape=diamond, color=yellow];
2947[label="148.58.37.75;s;69pkt 69fpkt", shape=diamond, color=yellow];
3103[label="13.227.2.66;s;18pkt 18fpkt", shape=diamond, color=yellow];
3144[label="50.252.160.200;s;63pkt 63fpkt", shape=diamond, color=yellow];
3161[label="201.171.100.8;s;14pkt 14fpkt", shape=diamond, color=yellow];
3167[label="168.45.110.207;d;30pkt 30fpkt", shape=diamond, color=yellow];
3168[label="53.153.223.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
3173[label="54.164.174.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
3192[label="198.150.22.35;d;2pkt 2fpkt", shape=diamond, color=yellow];
3390[label="88.234.193.22;s;21pkt 21fpkt", shape=hexagon, color=black];
3391[label="129.206.218.169;d;104pkt 104fpkt", shape=hexagon, color=black];
3401[label="218.103.24.167;s;39pkt 39fpkt", shape=hexagon, color=black];
3434[label="219.165.226.218;s;24pkt 24fpkt", shape=hexagon, color=black];
3437[label="13.227.0.206;s;101pkt 101fpkt", shape=hexagon, color=black];
3443[label="53.153.223.38;s;1pkt 1fpkt", shape=hexagon, color=black];
3474[label="193.139.92.172;s;37pkt 37fpkt", shape=hexagon, color=black];
3544[label="134.128.71.91;d;42pkt 42fpkt", shape=hexagon, color=black];
3561[label="59.161.97.211;s;5pkt 5fpkt", shape=hexagon, color=black];
3669[label="218.103.16.74;s;26pkt 26fpkt", shape=hexagon, color=black];
3767[label="59.161.42.179;s;123pkt 123fpkt", shape=hexagon, color=black];
3839[label="53.153.221.215;s;189pkt 189fpkt", shape=hexagon, color=black];
3875[label="216.136.174.24;s;25pkt 25fpkt", shape=hexagon, color=black];
3892[label="49.64.59.64;s;46pkt 46fpkt", shape=hexagon, color=black];
3903[label="198.155.86.61;d;4095pkt 4095fpkt", shape=hexagon, color=black];
4225[label="54.205.38.4;32pkt 32fpkt", shape=pentagon, color=darkviolet];
4295[label="53.198.156.8;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4313[label="219.85.139.9;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4347[label="53.218.115.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4367[label="55.33.215.12;29pkt 29fpkt", shape=pentagon, color=darkviolet];
4442[label="53.148.155.17;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4491[label="54.109.205.20;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4528[label="88.234.193.22;22pkt 22fpkt", shape=pentagon, color=darkviolet];
4553[label="216.136.174.24;26pkt 26fpkt", shape=pentagon, color=darkviolet];
4576[label="13.227.2.27;92pkt 92fpkt", shape=pentagon, color=darkviolet];
4842[label="199.101.224.44;35pkt 35fpkt", shape=pentagon, color=darkviolet];
4907[label="68.135.4.50;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4931[label="53.153.217.51;81pkt 81fpkt", shape=pentagon, color=darkviolet];
4944[label="13.227.2.53;65pkt 65fpkt", shape=pentagon, color=darkviolet];
5072[label="49.64.59.64;54pkt 54fpkt", shape=pentagon, color=darkviolet];
5105[label="13.227.2.66;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5183[label="59.161.210.70;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5222[label="198.247.206.72;41pkt 41fpkt", shape=pentagon, color=darkviolet];
5239[label="218.103.16.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5255[label="148.58.37.75;68pkt 68fpkt", shape=pentagon, color=darkviolet];
5262[label="68.157.129.75;4pkt 4fpkt", shape=pentagon, color=darkviolet];
5354[label="49.162.86.83;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5408[label="53.72.87.87;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5434[label="221.56.80.89;46pkt 46fpkt", shape=pentagon, color=darkviolet];
5554[label="50.254.223.98;85pkt 85fpkt", shape=pentagon, color=darkviolet];
5689[label="54.183.196.107;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5734[label="53.233.35.112;49pkt 49fpkt", shape=pentagon, color=darkviolet];
5750[label="192.14.238.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5751[label="44.130.0.114;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5829[label="218.118.29.121;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5849[label="218.103.16.123;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5922[label="13.227.0.130;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5943[label="219.85.164.131;62pkt 62fpkt", shape=pentagon, color=darkviolet];
5951[label="13.227.0.132;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5984[label="219.48.164.135;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6017[label="53.216.11.138;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6130[label="218.65.92.147;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6177[label="13.227.0.152;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6258[label="218.70.211.158;39pkt 39fpkt", shape=pentagon, color=darkviolet];
6286[label="219.85.186.161;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6306[label="215.108.249.163;33pkt 33fpkt", shape=pentagon, color=darkviolet];
6307[label="13.227.0.164;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6322[label="49.12.231.164;217pkt 217fpkt", shape=pentagon, color=darkviolet];
6323[label="13.227.0.165;20pkt 20fpkt", shape=pentagon, color=darkviolet];
6348[label="219.169.165.166;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6353[label="218.103.24.167;79pkt 79fpkt", shape=pentagon, color=darkviolet];
6355[label="88.86.72.167;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6392[label="13.227.0.170;37pkt 37fpkt", shape=pentagon, color=darkviolet];
6419[label="13.227.0.172;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6427[label="193.139.92.172;70pkt 70fpkt", shape=pentagon, color=darkviolet];
6438[label="13.227.0.173;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6489[label="208.102.100.178;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6569[label="201.85.171.184;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6667[label="53.198.154.192;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6692[label="49.42.169.194;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6698[label="13.227.0.195;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6805[label="56.155.243.203;43pkt 43fpkt", shape=pentagon, color=darkviolet];
6830[label="13.227.0.206;271pkt 271fpkt", shape=pentagon, color=darkviolet];
6884[label="55.27.64.210;68pkt 68fpkt", shape=pentagon, color=darkviolet];
6897[label="59.161.97.211;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6936[label="48.34.184.214;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6967[label="53.216.11.218;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6995[label="198.0.104.220;33pkt 33fpkt", shape=pentagon, color=darkviolet];
7311[label="219.153.13.252;26pkt 26fpkt", shape=pentagon, color=darkviolet];
7392[label="54.205.38.4;32pkt 32fpkt", shape=invtriangle, color=brown];
7471[label="53.218.115.11;2pkt 2fpkt", shape=invtriangle, color=brown];
7560[label="88.234.193.22;22pkt 22fpkt", shape=invtriangle, color=brown];
7758[label="68.135.4.50;3pkt 3fpkt", shape=invtriangle, color=brown];
7842[label="49.64.59.64;54pkt 54fpkt", shape=invtriangle, color=brown];
7870[label="53.108.8.68;233pkt 233fpkt", shape=invtriangle, color=brown];
7899[label="59.161.210.70;8pkt 8fpkt", shape=invtriangle, color=brown];
7937[label="148.58.37.75;68pkt 68fpkt", shape=invtriangle, color=brown];
7940[label="68.157.129.75;4pkt 4fpkt", shape=invtriangle, color=brown];
8026[label="221.56.80.89;46pkt 46fpkt", shape=invtriangle, color=brown];
8191[label="53.233.35.112;49pkt 49fpkt", shape=invtriangle, color=brown];
8200[label="192.14.238.113;2pkt 2fpkt", shape=invtriangle, color=brown];
8283[label="219.85.164.128;57pkt 57fpkt", shape=invtriangle, color=brown];
8291[label="13.227.0.130;24pkt 24fpkt", shape=invtriangle, color=brown];
8306[label="13.227.0.132;11pkt 11fpkt", shape=invtriangle, color=brown];
8332[label="219.48.164.135;6pkt 6fpkt", shape=invtriangle, color=brown];
8352[label="53.216.11.138;4pkt 4fpkt", shape=invtriangle, color=brown];
8397[label="13.227.0.146;22pkt 22fpkt", shape=invtriangle, color=brown];
8405[label="218.65.92.147;16pkt 16fpkt", shape=invtriangle, color=brown];
8431[label="13.227.0.152;25pkt 25fpkt", shape=invtriangle, color=brown];
8481[label="218.70.211.158;39pkt 39fpkt", shape=invtriangle, color=brown];
8512[label="215.108.249.163;32pkt 32fpkt", shape=invtriangle, color=brown];
8513[label="13.227.0.164;20pkt 20fpkt", shape=invtriangle, color=brown];
8523[label="53.153.217.164;1pkt 1fpkt", shape=invtriangle, color=brown];
8538[label="88.86.72.167;3pkt 3fpkt", shape=invtriangle, color=brown];
8558[label="13.227.0.170;37pkt 37fpkt", shape=invtriangle, color=brown];
8574[label="193.139.92.172;70pkt 70fpkt", shape=invtriangle, color=brown];
8582[label="13.227.0.173;34pkt 34fpkt", shape=invtriangle, color=brown];
8597[label="13.227.0.176;45pkt 45fpkt", shape=invtriangle, color=brown];
8622[label="13.227.0.180;61pkt 61fpkt", shape=invtriangle, color=brown];
8715[label="49.42.169.194;8pkt 8fpkt", shape=invtriangle, color=brown];
8720[label="13.227.0.195;12pkt 12fpkt", shape=invtriangle, color=brown];
8782[label="56.155.243.203;43pkt 43fpkt", shape=invtriangle, color=brown];
8815[label="55.27.64.210;68pkt 68fpkt", shape=invtriangle, color=brown];
8819[label="59.161.97.211;7pkt 7fpkt", shape=invtriangle, color=brown];
8862[label="53.216.11.218;4pkt 4fpkt", shape=invtriangle, color=brown];
8886[label="198.0.104.220;33pkt 33fpkt", shape=invtriangle, color=brown];
9004[label="193.139.75.238;16pkt 16fpkt", shape=invtriangle, color=brown];
9081[label="219.153.13.252;26pkt 26fpkt", shape=invtriangle, color=brown];
9123[label="54.205.38.4;32pkt 32fpkt", shape=invhouse, color=bisque];
9198[label="88.234.193.22;21pkt 21fpkt", shape=invhouse, color=bisque];
9307[label="68.135.4.50;3pkt 3fpkt", shape=invhouse, color=bisque];
9344[label="49.64.59.64;54pkt 54fpkt", shape=invhouse, color=bisque];
9398[label="148.58.37.75;68pkt 68fpkt", shape=invhouse, color=bisque];
9400[label="68.157.129.75;4pkt 4fpkt", shape=invhouse, color=bisque];
9453[label="221.56.80.89;46pkt 46fpkt", shape=invhouse, color=bisque];
9544[label="192.14.238.113;2pkt 2fpkt", shape=invhouse, color=bisque];
9603[label="13.227.0.132;11pkt 11fpkt", shape=invhouse, color=bisque];
9696[label="218.70.211.158;39pkt 39fpkt", shape=invhouse, color=bisque];
9712[label="215.108.249.163;32pkt 32fpkt", shape=invhouse, color=bisque];
9717[label="53.153.217.164;1pkt 1fpkt", shape=invhouse, color=bisque];
9718[label="13.227.0.165;19pkt 19fpkt", shape=invhouse, color=bisque];
9728[label="88.86.72.167;3pkt 3fpkt", shape=invhouse, color=bisque];
9747[label="193.139.92.172;70pkt 70fpkt", shape=invhouse, color=bisque];
9753[label="13.227.0.173;34pkt 34fpkt", shape=invhouse, color=bisque];
9778[label="13.227.0.180;61pkt 61fpkt", shape=invhouse, color=bisque];
9836[label="13.227.0.195;12pkt 12fpkt", shape=invhouse, color=bisque];
9864[label="56.155.243.203;43pkt 43fpkt", shape=invhouse, color=bisque];
9886[label="55.27.64.210;68pkt 68fpkt", shape=invhouse, color=bisque];
9972[label="193.139.75.238;16pkt 16fpkt", shape=invhouse, color=bisque];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 198.155.86.61:*}[61.708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2704%)&lt;BR/&gt; 53: (0.676312%)&lt;BR/&gt; 443: (0.573757%)&lt;BR/&gt; 0: (0.0443484%)&lt;BR/&gt; 32768: (0.0332613%)&gt;];
}
177--335[label="1;187pkt 187fpkt"];
177--484[label="0.0776699;16pkt 16fpkt"];
177--548[label="0.0909091;10pkt 10fpkt"];
177--555[label="0.0149254;1pkt 1fpkt"];
177--667[label="1;68pkt 68fpkt"];
177--761[label="0.0208333;3pkt 3fpkt"];
177--1083[label="1;68pkt 68fpkt"];
177--1087[label="1;41pkt 41fpkt"];
177--1147[label="1;189pkt 189fpkt"];
177--1474[label="1;82pkt 82fpkt"];
177--1493[label="0.0106383;1pkt 1fpkt"];
177--1596[label="0.0178571;1pkt 1fpkt"];
177--2065[label="0.0147059;1pkt 1fpkt"];
177--2729[label="0.2;16pkt 16fpkt"];
177--2809[label="0.0714286;3pkt 3fpkt"];
177--3103[label="0.166667;3pkt 3fpkt"];
177--3717[label="0.0776699;16pkt 16fpkt"];
177--3839[label="1;189pkt 189fpkt"];
177--4008[label="0.10596;16pkt 16fpkt"];
177--4205[label="0.0178571;1pkt 1fpkt"];
177--4481[label="0.0434783;3pkt 3fpkt"];
177--4576[label="0.173913;16pkt 16fpkt"];
177--4931[label="1;81pkt 81fpkt"];
177--4944[label="0.0153846;1pkt 1fpkt"];
177--5105[label="0.15;3pkt 3fpkt"];
177--5354[label="0.222222;2pkt 2fpkt"];
177--5967[label="0.0149254;1pkt 1fpkt"];
177--6378[label="0.121212;4pkt 4fpkt"];
177--6596[label="0.0232558;1pkt 1fpkt"];
177--6821[label="0.0847458;10pkt 10fpkt"];
177--6936[label="0.333333;2pkt 2fpkt"];
177--6995[label="1;33pkt 33fpkt"];
177--7380[label="0.0178571;1pkt 1fpkt"];
177--7535[label="0.0434783;3pkt 3fpkt"];
177--8319[label="0.0149254;1pkt 1fpkt"];
177--8886[label="1;33pkt 33fpkt"];
177--9611[label="0.0149254;1pkt 1fpkt"];
179--343[label="1;17pkt 17fpkt"];
179--348[label="0.0002442;1pkt 1fpkt"];
179--352[label="1;26pkt 26fpkt"];
179--390[label="1;39pkt 39fpkt"];
179--402[label="0.0185874;5pkt 5fpkt"];
179--425[label="0.0483871;3pkt 3fpkt"];
179--484[label="0.0485437;10pkt 10fpkt"];
179--548[label="0.190909;21pkt 21fpkt"];
179--672[label="1;11pkt 11fpkt"];
179--679[label="0.223464;40pkt 40fpkt"];
179--741[label="1;33pkt 33fpkt"];
179--744[label="1;200pkt 200fpkt"];
179--761[label="0.736111;106pkt 106fpkt"];
179--792[label="1;3pkt 3fpkt"];
179--824[label="0.0865052;25pkt 25fpkt"];
179--828[label="0.189189;21pkt 21fpkt"];
179--846[label="0.0981818;27pkt 27fpkt"];
179--914[label="0.278761;63pkt 63fpkt"];
179--923[label="0.00287356;1pkt 1fpkt"];
179--964[label="1;126pkt 126fpkt"];
179--979[label="1;39pkt 39fpkt"];
179--990[label="1;16pkt 16fpkt"];
179--1118[label="1;4pkt 4fpkt"];
179--1151[label="0.0666667;3pkt 3fpkt"];
179--1196[label="0.934708;544pkt 544fpkt"];
179--1230[label="0.0148148;2pkt 2fpkt"];
179--1244[label="0.636364;14pkt 14fpkt"];
179--1245[label="1;81pkt 81fpkt"];
179--1272[label="0.0824742;16pkt 16fpkt"];
179--1274[label="1;69pkt 69fpkt"];
179--1421[label="1;19pkt 19fpkt"];
179--1424[label="1;8pkt 8fpkt"];
179--1430[label="1;1pkt 1fpkt"];
179--1465[label="1;1pkt 1fpkt"];
179--1486[label="1;248pkt 248fpkt"];
179--1493[label="0.0106383;1pkt 1fpkt"];
179--1511[label="1;1pkt 1fpkt"];
179--1519[label="0.241379;14pkt 14fpkt"];
179--1539[label="0.392857;22pkt 22fpkt"];
179--1540[label="1;1pkt 1fpkt"];
179--1560[label="0.380952;8pkt 8fpkt"];
179--1596[label="0.142857;8pkt 8fpkt"];
179--1621[label="0.111111;4pkt 4fpkt"];
179--1643[label="0.85;17pkt 17fpkt"];
179--1652[label="1;71pkt 71fpkt"];
179--2062[label="0.0103093;1pkt 1fpkt"];
179--2065[label="0.117647;8pkt 8fpkt"];
179--2203[label="1;1pkt 1fpkt"];
179--2266[label="1;16pkt 16fpkt"];
179--2282[label="1;21pkt 21fpkt"];
179--2809[label="0.142857;6pkt 6fpkt"];
179--2817[label="0.1;4pkt 4fpkt"];
179--2914[label="1;2pkt 2fpkt"];
179--2930[label="1;46pkt 46fpkt"];
179--2947[label="1;69pkt 69fpkt"];
179--3103[label="0.166667;3pkt 3fpkt"];
179--3144[label="1;63pkt 63fpkt"];
179--3161[label="1;14pkt 14fpkt"];
179--3168[label="1;1pkt 1fpkt"];
179--3173[label="1;1pkt 1fpkt"];
179--3390[label="0.666667;14pkt 14fpkt"];
179--3401[label="1;39pkt 39fpkt"];
179--3434[label="1;24pkt 24fpkt"];
179--3437[label="1;101pkt 101fpkt"];
179--3443[label="1;1pkt 1fpkt"];
179--3447[label="0.0697674;9pkt 9fpkt"];
179--3474[label="1;37pkt 37fpkt"];
179--3497[label="0.13;13pkt 13fpkt"];
179--3561[label="1;5pkt 5fpkt"];
179--3669[label="1;26pkt 26fpkt"];
179--3717[label="0.0485437;10pkt 10fpkt"];
179--3767[label="1;123pkt 123fpkt"];
179--3892[label="1;46pkt 46fpkt"];
179--3903[label="1;4095pkt 4095fpkt"];
179--4008[label="0.0662252;10pkt 10fpkt"];
179--4164[label="0.115385;3pkt 3fpkt"];
179--4199[label="0.0149254;2pkt 2fpkt"];
179--4200[label="0.05;1pkt 1fpkt"];
179--4205[label="0.0357143;2pkt 2fpkt"];
179--4225[label="0.40625;13pkt 13fpkt"];
179--4295[label="0.8;16pkt 16fpkt"];
179--4313[label="0.166667;3pkt 3fpkt"];
179--4334[label="0.173913;4pkt 4fpkt"];
179--4347[label="0.333333;1pkt 1fpkt"];
179--4367[label="0.862069;25pkt 25fpkt"];
179--4398[label="0.0952381;2pkt 2fpkt"];
179--4423[label="0.0714286;1pkt 1fpkt"];
179--4442[label="0.833333;15pkt 15fpkt"];
179--4477[label="0.333333;1pkt 1fpkt"];
179--4491[label="0.833333;5pkt 5fpkt"];
179--4496[label="0.0483871;3pkt 3fpkt"];
179--4505[label="0.222222;2pkt 2fpkt"];
179--4528[label="0.636364;14pkt 14fpkt"];
179--4551[label="0.5;1pkt 1fpkt"];
179--4575[label="0.0002442;1pkt 1fpkt"];
179--4600[label="0.0555556;1pkt 1fpkt"];
179--4658[label="0.00257732;1pkt 1fpkt"];
179--4688[label="0.0952381;2pkt 2fpkt"];
179--4695[label="0.105263;2pkt 2fpkt"];
179--4717[label="0.133333;2pkt 2fpkt"];
179--4772[label="0.0822368;25pkt 25fpkt"];
179--4827[label="0.00892857;1pkt 1fpkt"];
179--4842[label="0.514286;18pkt 18fpkt"];
179--4907[label="0.333333;1pkt 1fpkt"];
179--4944[label="0.123077;8pkt 8fpkt"];
179--5072[label="1;54pkt 54fpkt"];
179--5105[label="0.15;3pkt 3fpkt"];
179--5183[label="1;8pkt 8fpkt"];
179--5222[label="0.97561;40pkt 40fpkt"];
179--5239[label="1;2pkt 2fpkt"];
179--5255[label="1;68pkt 68fpkt"];
179--5262[label="1;4pkt 4fpkt"];
179--5317[label="0.4;2pkt 2fpkt"];
179--5354[label="0.777778;7pkt 7fpkt"];
179--5408[label="1;2pkt 2fpkt"];
179--5554[label="0.941176;80pkt 80fpkt"];
179--5689[label="0.764706;13pkt 13fpkt"];
179--5734[label="0.591837;29pkt 29fpkt"];
179--5750[label="1;2pkt 2fpkt"];
179--5751[label="0.588235;10pkt 10fpkt"];
179--5829[label="0.888889;8pkt 8fpkt"];
179--5849[label="1;17pkt 17fpkt"];
179--5922[label="0.458333;11pkt 11fpkt"];
179--5929[label="0.108108;4pkt 4fpkt"];
179--5943[label="0.225806;14pkt 14fpkt"];
179--5951[label="0.272727;3pkt 3fpkt"];
179--5964[label="0.00201613;1pkt 1fpkt"];
179--5984[label="1;6pkt 6fpkt"];
179--6017[label="1;4pkt 4fpkt"];
179--6130[label="0.5625;9pkt 9fpkt"];
179--6177[label="0.44;11pkt 11fpkt"];
179--6186[label="0.0769231;2pkt 2fpkt"];
179--6286[label="0.789474;15pkt 15fpkt"];
179--6306[label="1;33pkt 33fpkt"];
179--6307[label="0.7;14pkt 14fpkt"];
179--6322[label="0.921659;200pkt 200fpkt"];
179--6323[label="0.7;14pkt 14fpkt"];
179--6348[label="0.384615;5pkt 5fpkt"];
179--6353[label="1;79pkt 79fpkt"];
179--6355[label="1;3pkt 3fpkt"];
179--6392[label="0.486486;18pkt 18fpkt"];
179--6419[label="0.72;18pkt 18fpkt"];
179--6427[label="1;70pkt 70fpkt"];
179--6438[label="0.911765;31pkt 31fpkt"];
179--6617[label="0.037037;3pkt 3fpkt"];
179--6667[label="1;9pkt 9fpkt"];
179--6692[label="1;8pkt 8fpkt"];
179--6698[label="1;12pkt 12fpkt"];
179--6772[label="0.0930233;4pkt 4fpkt"];
179--6798[label="0.0555556;2pkt 2fpkt"];
179--6805[label="0.209302;9pkt 9fpkt"];
179--6821[label="0.177966;21pkt 21fpkt"];
179--6830[label="0.915129;248pkt 248fpkt"];
179--6884[label="1;68pkt 68fpkt"];
179--6897[label="1;7pkt 7fpkt"];
179--6936[label="0.333333;2pkt 2fpkt"];
179--6967[label="0.75;3pkt 3fpkt"];
179--7311[label="0.615385;16pkt 16fpkt"];
179--7375[label="0.0148148;2pkt 2fpkt"];
179--7376[label="0.0526316;1pkt 1fpkt"];
179--7380[label="0.0357143;2pkt 2fpkt"];
179--7392[label="0.40625;13pkt 13fpkt"];
179--7471[label="0.5;1pkt 1fpkt"];
179--7508[label="0.0714286;1pkt 1fpkt"];
179--7544[label="0.0483871;3pkt 3fpkt"];
179--7549[label="0.222222;2pkt 2fpkt"];
179--7560[label="0.636364;14pkt 14fpkt"];
179--7571[label="0.5;1pkt 1fpkt"];
179--7582[label="0.0002442;1pkt 1fpkt"];
179--7591[label="0.0555556;1pkt 1fpkt"];
179--7629[label="0.00257732;1pkt 1fpkt"];
179--7644[label="0.0952381;2pkt 2fpkt"];
179--7662[label="0.133333;2pkt 2fpkt"];
179--7758[label="0.333333;1pkt 1fpkt"];
179--7816[label="0.0545455;3pkt 3fpkt"];
179--7842[label="1;54pkt 54fpkt"];
179--7870[label="0.270386;63pkt 63fpkt"];
179--7899[label="1;8pkt 8fpkt"];
179--7937[label="1;68pkt 68fpkt"];
179--7940[label="1;4pkt 4fpkt"];
179--8191[label="0.591837;29pkt 29fpkt"];
179--8200[label="1;2pkt 2fpkt"];
179--8283[label="0.385965;22pkt 22fpkt"];
179--8291[label="0.458333;11pkt 11fpkt"];
179--8306[label="0.272727;3pkt 3fpkt"];
179--8317[label="0.00201613;1pkt 1fpkt"];
179--8332[label="1;6pkt 6fpkt"];
179--8352[label="1;4pkt 4fpkt"];
179--8397[label="0.909091;20pkt 20fpkt"];
179--8405[label="0.5625;9pkt 9fpkt"];
179--8431[label="0.44;11pkt 11fpkt"];
179--8512[label="1;32pkt 32fpkt"];
179--8513[label="0.7;14pkt 14fpkt"];
179--8523[label="1;1pkt 1fpkt"];
179--8538[label="1;3pkt 3fpkt"];
179--8558[label="0.486486;18pkt 18fpkt"];
179--8574[label="1;70pkt 70fpkt"];
179--8582[label="0.911765;31pkt 31fpkt"];
179--8597[label="0.977778;44pkt 44fpkt"];
179--8622[label="0.852459;52pkt 52fpkt"];
179--8715[label="1;8pkt 8fpkt"];
179--8720[label="1;12pkt 12fpkt"];
179--8761[label="0.0930233;4pkt 4fpkt"];
179--8782[label="0.209302;9pkt 9fpkt"];
179--8815[label="1;68pkt 68fpkt"];
179--8819[label="1;7pkt 7fpkt"];
179--8862[label="0.75;3pkt 3fpkt"];
179--9004[label="1;16pkt 16fpkt"];
179--9081[label="0.615385;16pkt 16fpkt"];
179--9116[label="0.0148148;2pkt 2fpkt"];
179--9117[label="0.05;1pkt 1fpkt"];
179--9123[label="0.40625;13pkt 13fpkt"];
179--9173[label="0.0714286;1pkt 1fpkt"];
179--9198[label="0.666667;14pkt 14fpkt"];
179--9209[label="0.0002442;1pkt 1fpkt"];
179--9239[label="0.00258398;1pkt 1fpkt"];
179--9307[label="0.333333;1pkt 1fpkt"];
179--9344[label="1;54pkt 54fpkt"];
179--9398[label="1;68pkt 68fpkt"];
179--9400[label="1;4pkt 4fpkt"];
179--9544[label="1;2pkt 2fpkt"];
179--9603[label="0.272727;3pkt 3fpkt"];
179--9609[label="0.00201613;1pkt 1fpkt"];
179--9712[label="1;32pkt 32fpkt"];
179--9717[label="1;1pkt 1fpkt"];
179--9718[label="0.684211;13pkt 13fpkt"];
179--9728[label="1;3pkt 3fpkt"];
179--9747[label="1;70pkt 70fpkt"];
179--9753[label="0.911765;31pkt 31fpkt"];
179--9778[label="0.852459;52pkt 52fpkt"];
179--9836[label="1;12pkt 12fpkt"];
179--9864[label="0.209302;9pkt 9fpkt"];
179--9886[label="1;68pkt 68fpkt"];
179--9972[label="1;16pkt 16fpkt"];
339--342[label="1;1pkt 1fpkt"];
339--2733[label="0.333333;1pkt 1fpkt"];
339--6805[label="0.333333;1pkt 1fpkt"];
339--8782[label="0.333333;1pkt 1fpkt"];
339--9864[label="0.333333;1pkt 1fpkt"];
343--3903[label="1;17pkt 17fpkt"];
343--5849[label="1;17pkt 17fpkt"];
352--3669[label="1;26pkt 26fpkt"];
352--3903[label="1;26pkt 26fpkt"];
352--5239[label="1;2pkt 2fpkt"];
390--3434[label="1;24pkt 24fpkt"];
390--3903[label="1;39pkt 39fpkt"];
672--3903[label="1;11pkt 11fpkt"];
741--3903[label="1;33pkt 33fpkt"];
741--6306[label="1;33pkt 33fpkt"];
741--8512[label="1;32pkt 32fpkt"];
741--9712[label="1;32pkt 32fpkt"];
744--3903[label="1;200pkt 200fpkt"];
744--6322[label="1;200pkt 200fpkt"];
761--2900[label="0.189189;7pkt 7fpkt"];
761--3167[label="0.2;6pkt 6fpkt"];
761--3903[label="0.736111;106pkt 106fpkt"];
792--3903[label="1;3pkt 3fpkt"];
792--6355[label="1;3pkt 3fpkt"];
792--8538[label="1;3pkt 3fpkt"];
792--9728[label="1;3pkt 3fpkt"];
914--1185[label="0.00884956;2pkt 2fpkt"];
914--1946[label="0.955556;86pkt 86fpkt"];
914--2185[label="0.12;3pkt 3fpkt"];
914--2472[label="0.0322581;2pkt 2fpkt"];
914--3266[label="0.0405405;3pkt 3fpkt"];
914--3418[label="0.00442478;1pkt 1fpkt"];
914--3544[label="0.928571;39pkt 39fpkt"];
914--3737[label="0.0454545;2pkt 2fpkt"];
914--3845[label="0.216216;8pkt 8fpkt"];
914--3903[label="0.278761;63pkt 63fpkt"];
914--7870[label="1;226pkt 226fpkt"];
920--2171[label="0.027027;1pkt 1fpkt"];
920--3332[label="0.0172414;2pkt 2fpkt"];
920--3391[label="1;104pkt 104fpkt"];
920--4225[label="0.1875;6pkt 6fpkt"];
920--5434[label="1;46pkt 46fpkt"];
920--6569[label="1;19pkt 19fpkt"];
920--6630[label="0.115385;3pkt 3fpkt"];
920--7392[label="0.1875;6pkt 6fpkt"];
920--8026[label="1;46pkt 46fpkt"];
920--9123[label="0.1875;6pkt 6fpkt"];
920--9453[label="1;46pkt 46fpkt"];
964--3767[label="1;123pkt 123fpkt"];
964--3903[label="1;126pkt 126fpkt"];
979--3401[label="1;39pkt 39fpkt"];
979--3903[label="1;39pkt 39fpkt"];
979--6353[label="0.974359;38pkt 38fpkt"];
990--3903[label="1;16pkt 16fpkt"];
1118--3903[label="1;4pkt 4fpkt"];
1147--3839[label="1;189pkt 189fpkt"];
1185--1230[label="0.00740741;1pkt 1fpkt"];
1185--1399[label="1;1pkt 1fpkt"];
1185--1596[label="0.0357143;2pkt 2fpkt"];
1185--1792[label="0.030303;2pkt 2fpkt"];
1185--1799[label="0.0357143;2pkt 2fpkt"];
1185--1892[label="0.0617284;5pkt 5fpkt"];
1185--1973[label="1;26pkt 26fpkt"];
1185--2065[label="0.0735294;5pkt 5fpkt"];
1185--2199[label="0.0294118;3pkt 3fpkt"];
1185--2460[label="0.0128205;1pkt 1fpkt"];
1185--2506[label="0.0169492;1pkt 1fpkt"];
1185--2729[label="0.05;4pkt 4fpkt"];
1185--2768[label="0.0196078;2pkt 2fpkt"];
1185--3031[label="0.025641;2pkt 2fpkt"];
1185--3046[label="0.0106383;1pkt 1fpkt"];
1185--3103[label="0.222222;4pkt 4fpkt"];
1185--3717[label="0.0242718;5pkt 5fpkt"];
1185--3871[label="0.0178571;1pkt 1fpkt"];
1185--4008[label="0.0331126;5pkt 5fpkt"];
1185--4026[label="0.00263158;1pkt 1fpkt"];
1185--4040[label="0.00263158;1pkt 1fpkt"];
1185--4074[label="0.00263158;1pkt 1fpkt"];
1185--4085[label="0.00263158;1pkt 1fpkt"];
1185--4115[label="0.00263158;1pkt 1fpkt"];
1185--4126[label="0.00263158;1pkt 1fpkt"];
1185--4199[label="0.00746269;1pkt 1fpkt"];
1185--4399[label="0.047619;2pkt 2fpkt"];
1185--4423[label="0.0714286;1pkt 1fpkt"];
1185--4496[label="0.0322581;2pkt 2fpkt"];
1185--4576[label="0.0434783;4pkt 4fpkt"];
1185--4842[label="0.2;7pkt 7fpkt"];
1185--4944[label="0.0307692;2pkt 2fpkt"];
1185--5105[label="0.2;4pkt 4fpkt"];
1185--5267[label="0.03125;1pkt 1fpkt"];
1185--5353[label="0.0461538;3pkt 3fpkt"];
1185--5740[label="0.00719424;1pkt 1fpkt"];
1185--5805[label="0.0362903;9pkt 9fpkt"];
1185--6057[label="0.0105263;1pkt 1fpkt"];
1185--6258[label="0.923077;36pkt 36fpkt"];
1185--6348[label="0.230769;3pkt 3fpkt"];
1185--6489[label="1;25pkt 25fpkt"];
1185--6613[label="0.0186916;2pkt 2fpkt"];
1185--7312[label="0.015873;1pkt 1fpkt"];
1185--7375[label="0.00740741;1pkt 1fpkt"];
1185--7508[label="0.0714286;1pkt 1fpkt"];
1185--7544[label="0.0322581;2pkt 2fpkt"];
1185--7816[label="0.0363636;2pkt 2fpkt"];
1185--7870[label="0.00858369;2pkt 2fpkt"];
1185--7987[label="0.0461538;3pkt 3fpkt"];
1185--8370[label="0.0105263;1pkt 1fpkt"];
1185--8481[label="0.923077;36pkt 36fpkt"];
1185--9082[label="0.015873;1pkt 1fpkt"];
1185--9116[label="0.00740741;1pkt 1fpkt"];
1185--9173[label="0.0714286;1pkt 1fpkt"];
1185--9430[label="0.0461538;3pkt 3fpkt"];
1185--9696[label="0.923077;36pkt 36fpkt"];
1185--10014[label="0.015873;1pkt 1fpkt"];
1196--1922[label="0.0357143;7pkt 7fpkt"];
1196--2411[label="0.0267857;3pkt 3fpkt"];
1196--3903[label="0.934708;544pkt 544fpkt"];
1244--1916[label="0.0454545;1pkt 1fpkt"];
1244--3387[label="0.0454545;1pkt 1fpkt"];
1244--3390[label="1;21pkt 21fpkt"];
1244--3903[label="0.636364;14pkt 14fpkt"];
1244--3988[label="0.0454545;1pkt 1fpkt"];
1244--4528[label="1;22pkt 22fpkt"];
1244--7560[label="1;22pkt 22fpkt"];
1244--9198[label="1;21pkt 21fpkt"];
1245--3903[label="1;81pkt 81fpkt"];
1245--5554[label="0.987654;80pkt 80fpkt"];
1274--3903[label="1;69pkt 69fpkt"];
1274--6884[label="1;68pkt 68fpkt"];
1274--8815[label="1;68pkt 68fpkt"];
1274--9886[label="1;68pkt 68fpkt"];
1421--3903[label="1;19pkt 19fpkt"];
1424--3561[label="1;5pkt 5fpkt"];
1424--3903[label="1;8pkt 8fpkt"];
1424--6897[label="1;7pkt 7fpkt"];
1424--8819[label="1;7pkt 7fpkt"];
1430--3903[label="1;1pkt 1fpkt"];
1465--3903[label="1;1pkt 1fpkt"];
1474--4931[label="1;81pkt 81fpkt"];
1486--3437[label="1;101pkt 101fpkt"];
1486--3903[label="1;248pkt 248fpkt"];
1486--6830[label="1;248pkt 248fpkt"];
1511--3443[label="1;1pkt 1fpkt"];
1511--3903[label="1;1pkt 1fpkt"];
1519--1646[label="0.0172414;1pkt 1fpkt"];
1519--1717[label="0.0526316;1pkt 1fpkt"];
1519--1914[label="0.0172414;1pkt 1fpkt"];
1519--1916[label="0.0172414;1pkt 1fpkt"];
1519--1922[label="0.0172414;1pkt 1fpkt"];
1519--2165[label="0.0263158;1pkt 1fpkt"];
1519--3128[label="0.142857;3pkt 3fpkt"];
1519--3308[label="0.0217391;1pkt 1fpkt"];
1519--3387[label="0.0172414;1pkt 1fpkt"];
1519--3500[label="0.0344828;2pkt 2fpkt"];
1519--3903[label="0.241379;14pkt 14fpkt"];
1519--3948[label="0.142857;3pkt 3fpkt"];
1519--3988[label="0.0172414;1pkt 1fpkt"];
1519--4006[label="0.0344828;2pkt 2fpkt"];
1519--5943[label="1;58pkt 58fpkt"];
1539--1939[label="0.0238095;1pkt 1fpkt"];
1539--2165[label="0.0526316;2pkt 2fpkt"];
1539--2236[label="0.0357143;2pkt 2fpkt"];
1539--3266[label="0.0357143;2pkt 2fpkt"];
1539--3500[label="0.125;7pkt 7fpkt"];
1539--3903[label="0.392857;22pkt 22fpkt"];
1539--4006[label="0.125;7pkt 7fpkt"];
1539--8283[label="0.982143;55pkt 55fpkt"];
1540--3903[label="1;1pkt 1fpkt"];
1560--1699[label="0.619048;13pkt 13fpkt"];
1560--3903[label="0.380952;8pkt 8fpkt"];
1596--1617[label="0.0535714;3pkt 3fpkt"];
1596--1914[label="0.125;7pkt 7fpkt"];
1596--1916[label="0.0357143;2pkt 2fpkt"];
1596--3387[label="0.0892857;5pkt 5fpkt"];
1596--3903[label="0.142857;8pkt 8fpkt"];
1596--3988[label="0.0535714;3pkt 3fpkt"];
1596--4944[label="1;56pkt 56fpkt"];
1643--1958[label="0.0909091;1pkt 1fpkt"];
1643--3903[label="0.85;17pkt 17fpkt"];
1652--3474[label="1;37pkt 37fpkt"];
1652--3903[label="1;71pkt 71fpkt"];
1652--6427[label="1;70pkt 70fpkt"];
1652--8574[label="1;70pkt 70fpkt"];
1652--9747[label="1;70pkt 70fpkt"];
1946--3544[label="1;42pkt 42fpkt"];
1946--7870[label="0.955556;86pkt 86fpkt"];
1963--2190[label="0.961538;25pkt 25fpkt"];
1963--3875[label="1;25pkt 25fpkt"];
1963--4553[label="0.961538;25pkt 25fpkt"];
1963--6805[label="0.047619;2pkt 2fpkt"];
1963--8782[label="0.047619;2pkt 2fpkt"];
1963--9864[label="0.047619;2pkt 2fpkt"];
1973--6489[label="1;25pkt 25fpkt"];
2190--3875[label="1;25pkt 25fpkt"];
2190--4553[label="1;26pkt 26fpkt"];
2203--3903[label="1;1pkt 1fpkt"];
2266--3903[label="1;16pkt 16fpkt"];
2266--4295[label="1;16pkt 16fpkt"];
2282--3903[label="1;21pkt 21fpkt"];
2729--3052[label="0.0169492;1pkt 1fpkt"];
2729--3418[label="0.0125;1pkt 1fpkt"];
2729--3706[label="0.0125;1pkt 1fpkt"];
2729--3772[label="0.0217391;1pkt 1fpkt"];
2729--4027[label="0.0125;1pkt 1fpkt"];
2729--4075[label="0.0125;1pkt 1fpkt"];
2729--4116[label="0.0125;1pkt 1fpkt"];
2729--4576[label="1;80pkt 80fpkt"];
2809--3903[label="0.142857;6pkt 6fpkt"];
2914--3903[label="1;2pkt 2fpkt"];
2930--3892[label="1;46pkt 46fpkt"];
2930--3903[label="1;46pkt 46fpkt"];
2930--5072[label="0.978261;45pkt 45fpkt"];
2930--7842[label="0.978261;45pkt 45fpkt"];
2930--9344[label="0.978261;45pkt 45fpkt"];
2947--3903[label="1;69pkt 69fpkt"];
2947--5255[label="1;68pkt 68fpkt"];
2947--7937[label="1;68pkt 68fpkt"];
2947--9398[label="1;68pkt 68fpkt"];
3103--3903[label="0.166667;3pkt 3fpkt"];
3103--5105[label="1;18pkt 18fpkt"];
3144--3903[label="1;63pkt 63fpkt"];
3161--3903[label="1;14pkt 14fpkt"];
3167--5555[label="0.0333333;1pkt 1fpkt"];
3167--6821[label="0.0666667;2pkt 2fpkt"];
3167--7065[label="0.04;1pkt 1fpkt"];
3167--8931[label="0.04;1pkt 1fpkt"];
3168--3903[label="1;1pkt 1fpkt"];
3173--3903[label="1;1pkt 1fpkt"];
3192--4347[label="0.5;1pkt 1fpkt"];
3390--3903[label="0.666667;14pkt 14fpkt"];
3390--3988[label="0.047619;1pkt 1fpkt"];
3390--4528[label="1;21pkt 21fpkt"];
3390--7560[label="1;21pkt 21fpkt"];
3390--9198[label="0.952381;20pkt 20fpkt"];
3391--4225[label="0.1875;6pkt 6fpkt"];
3391--5434[label="1;46pkt 46fpkt"];
3391--6569[label="1;19pkt 19fpkt"];
3391--6630[label="0.0769231;2pkt 2fpkt"];
3391--7392[label="0.1875;6pkt 6fpkt"];
3391--8026[label="1;46pkt 46fpkt"];
3391--9123[label="0.1875;6pkt 6fpkt"];
3391--9453[label="1;46pkt 46fpkt"];
3401--3903[label="1;39pkt 39fpkt"];
3401--6353[label="0.974359;38pkt 38fpkt"];
3434--3903[label="1;24pkt 24fpkt"];
3437--3903[label="1;101pkt 101fpkt"];
3437--6830[label="1;101pkt 101fpkt"];
3443--3903[label="1;1pkt 1fpkt"];
3474--3903[label="1;37pkt 37fpkt"];
3474--6427[label="0.972973;36pkt 36fpkt"];
3474--8574[label="0.972973;36pkt 36fpkt"];
3474--9747[label="0.972973;36pkt 36fpkt"];
3544--7870[label="0.928571;39pkt 39fpkt"];
3561--3903[label="1;5pkt 5fpkt"];
3561--6897[label="0.8;4pkt 4fpkt"];
3561--8819[label="0.8;4pkt 4fpkt"];
3669--3903[label="1;26pkt 26fpkt"];
3669--5239[label="1;2pkt 2fpkt"];
3767--3903[label="1;123pkt 123fpkt"];
3875--4553[label="1;25pkt 25fpkt"];
3892--3903[label="1;46pkt 46fpkt"];
3892--5072[label="0.978261;45pkt 45fpkt"];
3892--7842[label="0.978261;45pkt 45fpkt"];
3892--9344[label="0.978261;45pkt 45fpkt"];
3903--4008[label="0.0662252;10pkt 10fpkt"];
3903--4164[label="0.115385;3pkt 3fpkt"];
3903--4199[label="0.0149254;2pkt 2fpkt"];
3903--4200[label="0.05;1pkt 1fpkt"];
3903--4205[label="0.0357143;2pkt 2fpkt"];
3903--4225[label="0.40625;13pkt 13fpkt"];
3903--4295[label="0.8;16pkt 16fpkt"];
3903--4313[label="0.166667;3pkt 3fpkt"];
3903--4334[label="0.173913;4pkt 4fpkt"];
3903--4347[label="0.333333;1pkt 1fpkt"];
3903--4367[label="0.862069;25pkt 25fpkt"];
3903--4398[label="0.0952381;2pkt 2fpkt"];
3903--4423[label="0.0714286;1pkt 1fpkt"];
3903--4442[label="0.833333;15pkt 15fpkt"];
3903--4477[label="0.333333;1pkt 1fpkt"];
3903--4491[label="0.833333;5pkt 5fpkt"];
3903--4496[label="0.0483871;3pkt 3fpkt"];
3903--4505[label="0.222222;2pkt 2fpkt"];
3903--4528[label="0.636364;14pkt 14fpkt"];
3903--4551[label="0.5;1pkt 1fpkt"];
3903--4575[label="0.0002442;1pkt 1fpkt"];
3903--4600[label="0.0555556;1pkt 1fpkt"];
3903--4658[label="0.00257732;1pkt 1fpkt"];
3903--4688[label="0.0952381;2pkt 2fpkt"];
3903--4695[label="0.105263;2pkt 2fpkt"];
3903--4717[label="0.133333;2pkt 2fpkt"];
3903--4772[label="0.0822368;25pkt 25fpkt"];
3903--4827[label="0.00892857;1pkt 1fpkt"];
3903--4842[label="0.514286;18pkt 18fpkt"];
3903--4907[label="0.333333;1pkt 1fpkt"];
3903--4944[label="0.123077;8pkt 8fpkt"];
3903--5072[label="1;54pkt 54fpkt"];
3903--5105[label="0.15;3pkt 3fpkt"];
3903--5183[label="1;8pkt 8fpkt"];
3903--5222[label="0.97561;40pkt 40fpkt"];
3903--5239[label="1;2pkt 2fpkt"];
3903--5255[label="1;68pkt 68fpkt"];
3903--5262[label="1;4pkt 4fpkt"];
3903--5317[label="0.4;2pkt 2fpkt"];
3903--5354[label="0.777778;7pkt 7fpkt"];
3903--5408[label="1;2pkt 2fpkt"];
3903--5554[label="0.941176;80pkt 80fpkt"];
3903--5689[label="0.764706;13pkt 13fpkt"];
3903--5734[label="0.591837;29pkt 29fpkt"];
3903--5750[label="1;2pkt 2fpkt"];
3903--5751[label="0.588235;10pkt 10fpkt"];
3903--5829[label="0.888889;8pkt 8fpkt"];
3903--5849[label="1;17pkt 17fpkt"];
3903--5922[label="0.458333;11pkt 11fpkt"];
3903--5929[label="0.108108;4pkt 4fpkt"];
3903--5943[label="0.225806;14pkt 14fpkt"];
3903--5951[label="0.272727;3pkt 3fpkt"];
3903--5964[label="0.00201613;1pkt 1fpkt"];
3903--5984[label="1;6pkt 6fpkt"];
3903--6017[label="1;4pkt 4fpkt"];
3903--6130[label="0.5625;9pkt 9fpkt"];
3903--6177[label="0.44;11pkt 11fpkt"];
3903--6186[label="0.0769231;2pkt 2fpkt"];
3903--6286[label="0.789474;15pkt 15fpkt"];
3903--6306[label="1;33pkt 33fpkt"];
3903--6307[label="0.7;14pkt 14fpkt"];
3903--6322[label="0.921659;200pkt 200fpkt"];
3903--6323[label="0.7;14pkt 14fpkt"];
3903--6348[label="0.384615;5pkt 5fpkt"];
3903--6353[label="1;79pkt 79fpkt"];
3903--6355[label="1;3pkt 3fpkt"];
3903--6392[label="0.486486;18pkt 18fpkt"];
3903--6419[label="0.72;18pkt 18fpkt"];
3903--6427[label="1;70pkt 70fpkt"];
3903--6438[label="0.911765;31pkt 31fpkt"];
3903--6617[label="0.037037;3pkt 3fpkt"];
3903--6667[label="1;9pkt 9fpkt"];
3903--6692[label="1;8pkt 8fpkt"];
3903--6698[label="1;12pkt 12fpkt"];
3903--6772[label="0.0930233;4pkt 4fpkt"];
3903--6798[label="0.0555556;2pkt 2fpkt"];
3903--6805[label="0.209302;9pkt 9fpkt"];
3903--6821[label="0.177966;21pkt 21fpkt"];
3903--6830[label="0.915129;248pkt 248fpkt"];
3903--6884[label="1;68pkt 68fpkt"];
3903--6897[label="1;7pkt 7fpkt"];
3903--6936[label="0.333333;2pkt 2fpkt"];
3903--6967[label="0.75;3pkt 3fpkt"];
3903--7311[label="0.615385;16pkt 16fpkt"];
3903--7375[label="0.0148148;2pkt 2fpkt"];
3903--7376[label="0.0526316;1pkt 1fpkt"];
3903--7380[label="0.0357143;2pkt 2fpkt"];
3903--7392[label="0.40625;13pkt 13fpkt"];
3903--7471[label="0.5;1pkt 1fpkt"];
3903--7508[label="0.0714286;1pkt 1fpkt"];
3903--7544[label="0.0483871;3pkt 3fpkt"];
3903--7549[label="0.222222;2pkt 2fpkt"];
3903--7560[label="0.636364;14pkt 14fpkt"];
3903--7571[label="0.5;1pkt 1fpkt"];
3903--7582[label="0.0002442;1pkt 1fpkt"];
3903--7591[label="0.0555556;1pkt 1fpkt"];
3903--7629[label="0.00257732;1pkt 1fpkt"];
3903--7644[label="0.0952381;2pkt 2fpkt"];
3903--7662[label="0.133333;2pkt 2fpkt"];
3903--7758[label="0.333333;1pkt 1fpkt"];
3903--7816[label="0.0545455;3pkt 3fpkt"];
3903--7842[label="1;54pkt 54fpkt"];
3903--7870[label="0.270386;63pkt 63fpkt"];
3903--7899[label="1;8pkt 8fpkt"];
3903--7937[label="1;68pkt 68fpkt"];
3903--7940[label="1;4pkt 4fpkt"];
3903--8191[label="0.591837;29pkt 29fpkt"];
3903--8200[label="1;2pkt 2fpkt"];
3903--8283[label="0.385965;22pkt 22fpkt"];
3903--8291[label="0.458333;11pkt 11fpkt"];
3903--8306[label="0.272727;3pkt 3fpkt"];
3903--8317[label="0.00201613;1pkt 1fpkt"];
3903--8332[label="1;6pkt 6fpkt"];
3903--8352[label="1;4pkt 4fpkt"];
3903--8397[label="0.909091;20pkt 20fpkt"];
3903--8405[label="0.5625;9pkt 9fpkt"];
3903--8431[label="0.44;11pkt 11fpkt"];
3903--8512[label="1;32pkt 32fpkt"];
3903--8513[label="0.7;14pkt 14fpkt"];
3903--8523[label="1;1pkt 1fpkt"];
3903--8538[label="1;3pkt 3fpkt"];
3903--8558[label="0.486486;18pkt 18fpkt"];
3903--8574[label="1;70pkt 70fpkt"];
3903--8582[label="0.911765;31pkt 31fpkt"];
3903--8597[label="0.977778;44pkt 44fpkt"];
3903--8622[label="0.852459;52pkt 52fpkt"];
3903--8715[label="1;8pkt 8fpkt"];
3903--8720[label="1;12pkt 12fpkt"];
3903--8761[label="0.0930233;4pkt 4fpkt"];
3903--8782[label="0.209302;9pkt 9fpkt"];
3903--8815[label="1;68pkt 68fpkt"];
3903--8819[label="1;7pkt 7fpkt"];
3903--8862[label="0.75;3pkt 3fpkt"];
3903--9004[label="1;16pkt 16fpkt"];
3903--9081[label="0.615385;16pkt 16fpkt"];
3903--9116[label="0.0148148;2pkt 2fpkt"];
3903--9117[label="0.05;1pkt 1fpkt"];
3903--9123[label="0.40625;13pkt 13fpkt"];
3903--9173[label="0.0714286;1pkt 1fpkt"];
3903--9198[label="0.666667;14pkt 14fpkt"];
3903--9209[label="0.0002442;1pkt 1fpkt"];
3903--9239[label="0.00258398;1pkt 1fpkt"];
3903--9307[label="0.333333;1pkt 1fpkt"];
3903--9344[label="1;54pkt 54fpkt"];
3903--9398[label="1;68pkt 68fpkt"];
3903--9400[label="1;4pkt 4fpkt"];
3903--9544[label="1;2pkt 2fpkt"];
3903--9603[label="0.272727;3pkt 3fpkt"];
3903--9609[label="0.00201613;1pkt 1fpkt"];
3903--9712[label="1;32pkt 32fpkt"];
3903--9717[label="1;1pkt 1fpkt"];
3903--9718[label="0.684211;13pkt 13fpkt"];
3903--9728[label="1;3pkt 3fpkt"];
3903--9747[label="1;70pkt 70fpkt"];
3903--9753[label="0.911765;31pkt 31fpkt"];
3903--9778[label="0.852459;52pkt 52fpkt"];
3903--9836[label="1;12pkt 12fpkt"];
3903--9864[label="0.209302;9pkt 9fpkt"];
3903--9886[label="1;68pkt 68fpkt"];
3903--9972[label="1;16pkt 16fpkt"];
4225--7392[label="1;32pkt 32fpkt"];
4225--9123[label="1;32pkt 32fpkt"];
4347--7471[label="1;2pkt 2fpkt"];
4528--7560[label="1;22pkt 22fpkt"];
4528--9198[label="1;21pkt 21fpkt"];
4907--7758[label="1;3pkt 3fpkt"];
4907--9307[label="1;3pkt 3fpkt"];
5072--7842[label="1;54pkt 54fpkt"];
5072--9344[label="1;54pkt 54fpkt"];
5183--7899[label="1;8pkt 8fpkt"];
5255--7937[label="1;68pkt 68fpkt"];
5255--9398[label="1;68pkt 68fpkt"];
5262--7940[label="1;4pkt 4fpkt"];
5262--9400[label="1;4pkt 4fpkt"];
5434--8026[label="1;46pkt 46fpkt"];
5434--9453[label="1;46pkt 46fpkt"];
5734--8191[label="1;49pkt 49fpkt"];
5750--8200[label="1;2pkt 2fpkt"];
5750--9544[label="1;2pkt 2fpkt"];
5922--8291[label="1;24pkt 24fpkt"];
5951--8306[label="1;11pkt 11fpkt"];
5951--9603[label="1;11pkt 11fpkt"];
5984--8332[label="1;6pkt 6fpkt"];
6017--8352[label="1;4pkt 4fpkt"];
6130--8405[label="1;16pkt 16fpkt"];
6177--8431[label="1;25pkt 25fpkt"];
6258--8481[label="1;39pkt 39fpkt"];
6258--9696[label="1;39pkt 39fpkt"];
6306--8512[label="1;32pkt 32fpkt"];
6306--9712[label="1;32pkt 32fpkt"];
6307--8513[label="1;20pkt 20fpkt"];
6323--9718[label="1;19pkt 19fpkt"];
6355--8538[label="1;3pkt 3fpkt"];
6355--9728[label="1;3pkt 3fpkt"];
6392--8558[label="1;37pkt 37fpkt"];
6427--8574[label="1;70pkt 70fpkt"];
6427--9747[label="1;70pkt 70fpkt"];
6438--8582[label="1;34pkt 34fpkt"];
6438--9753[label="1;34pkt 34fpkt"];
6692--8715[label="1;8pkt 8fpkt"];
6698--8720[label="1;12pkt 12fpkt"];
6698--9836[label="1;12pkt 12fpkt"];
6805--8782[label="1;43pkt 43fpkt"];
6805--9864[label="1;43pkt 43fpkt"];
6884--8815[label="1;68pkt 68fpkt"];
6884--9886[label="1;68pkt 68fpkt"];
6897--8819[label="1;7pkt 7fpkt"];
6967--8862[label="1;4pkt 4fpkt"];
6995--8886[label="1;33pkt 33fpkt"];
7311--9081[label="1;26pkt 26fpkt"];
7392--9123[label="1;32pkt 32fpkt"];
7560--9198[label="1;21pkt 21fpkt"];
7758--9307[label="1;3pkt 3fpkt"];
7842--9344[label="1;54pkt 54fpkt"];
7937--9398[label="1;68pkt 68fpkt"];
7940--9400[label="1;4pkt 4fpkt"];
8026--9453[label="1;46pkt 46fpkt"];
8200--9544[label="1;2pkt 2fpkt"];
8306--9603[label="1;11pkt 11fpkt"];
8481--9696[label="1;39pkt 39fpkt"];
8512--9712[label="1;32pkt 32fpkt"];
8523--9717[label="1;1pkt 1fpkt"];
8538--9728[label="1;3pkt 3fpkt"];
8574--9747[label="1;70pkt 70fpkt"];
8582--9753[label="1;34pkt 34fpkt"];
8622--9778[label="1;61pkt 61fpkt"];
8720--9836[label="1;12pkt 12fpkt"];
8782--9864[label="1;43pkt 43fpkt"];
8815--9886[label="1;68pkt 68fpkt"];
9004--9972[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="198.155.86.61" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.22.202.204"/>
    </slice>
    <from sec="1178341404" usec="0"/>
    <to sec="1178341553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.203.241.204"/>
    </slice>
    <from sec="1178341727" usec="0"/>
    <to sec="1178341754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_924{
style=filled;
color=gray75;
6822[label="134.128.40.205;138pkt 138fpkt", shape=pentagon, color=darkviolet];
8790[label="134.128.40.205;138pkt 138fpkt", shape=invtriangle, color=brown];
9870[label="134.128.40.205;138pkt 138fpkt", shape=invhouse, color=bisque];
stat924[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.128.40.205:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.7101%)&lt;BR/&gt; 32768: (3.98551%)&lt;BR/&gt; 32769: (1.44928%)&lt;BR/&gt; 32786: (0.724638%)&lt;BR/&gt; 32772: (0.724638%)&gt;];
}
6822--8790[label="1;138pkt 138fpkt"];
6822--9870[label="1;138pkt 138fpkt"];
8790--9870[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter src_ip="134.128.40.205" src_port="53"/>
    </slice>
    <from sec="1178341213" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.215.168.209"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
6882[label="54.128.33.210;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8814[label="54.128.33.210;6pkt 6fpkt", shape=invtriangle, color=brown];
9885[label="54.128.33.210;6pkt 6fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.33.210:*, 170.129.169.178:28000}[50%]&lt;BR/&gt;{54.128.33.210:*, 170.129.169.178:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28000: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 58431: (8.33333%)&lt;BR/&gt; 57256: (8.33333%)&lt;BR/&gt; 56791: (8.33333%)&gt;];
}
6882--8814[label="1;6pkt 6fpkt"];
6882--9885[label="1;6pkt 6fpkt"];
8814--9885[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="170.129.169.178" dst_port="28000" src_ip="54.128.33.210"/>
      <filter dst_ip="170.129.169.178" dst_port="80" src_ip="54.128.33.210"/>
    </slice>
    <from sec="1178341356" usec="0"/>
    <to sec="1178342067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.32.143.212"/>
    </slice>
    <from sec="1178341325" usec="0"/>
    <to sec="1178341432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.183.108.214"/>
    </slice>
    <from sec="1178341733" usec="0"/>
    <to sec="1178341752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.61.112.215"/>
    </slice>
    <from sec="1178341226" usec="0"/>
    <to sec="1178341313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_933{
style=filled;
color=gray75;
6942[label="172.113.141.215;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8849[label="172.113.141.215;16pkt 16fpkt", shape=invtriangle, color=brown];
stat933[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.141.215:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 62378: (3.125%)&lt;BR/&gt; 50670: (3.125%)&lt;BR/&gt; 37479: (3.125%)&lt;BR/&gt; 28762: (3.125%)&gt;];
}
6942--8849[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="172.113.141.215" src_port="25"/>
    </slice>
    <from sec="1178341209" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.148.90.216"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.89.177.218"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.41.20.219"/>
    </slice>
    <from sec="1178341508" usec="0"/>
    <to sec="1178341535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.101.134.219"/>
    </slice>
    <from sec="1178341510" usec="0"/>
    <to sec="1178341533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="171.17.144.219"/>
    </slice>
    <from sec="1178341955" usec="0"/>
    <to sec="1178342053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
7014[label="54.128.34.222;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8900[label="54.128.34.222;6pkt 6fpkt", shape=invtriangle, color=brown];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.34.222:*, 129.206.210.196:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57477: (8.33333%)&lt;BR/&gt; 51288: (8.33333%)&lt;BR/&gt; 46902: (8.33333%)&lt;BR/&gt; 46557: (8.33333%)&gt;];
}
7014--8900[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.210.196" dst_port="80" src_ip="54.128.34.222"/>
    </slice>
    <from sec="1178341273" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
7017[label="128.122.114.222;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8901[label="128.122.114.222;1pkt 1fpkt", shape=invtriangle, color=brown];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.114.222:80, 8.16.189.127:12528}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12528: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7017--8901[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.16.189.127" dst_port="12528" src_ip="128.122.114.222" src_port="80"/>
    </slice>
    <from sec="1178341355" usec="0"/>
    <to sec="1178341417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.47.240.223"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_942{
style=filled;
color=gray75;
7036[label="172.113.228.224;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8909[label="172.113.228.224;12pkt 12fpkt", shape=invtriangle, color=brown];
stat942[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.113.228.224:*, 53.211.2.47:21}[33.3333%]&lt;BR/&gt;{172.113.228.224:*, 195.105.186.171:21}[33.3333%]&lt;BR/&gt;{172.113.228.224:*, 49.37.89.195:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1229: (4.16667%)&lt;BR/&gt; 1227: (4.16667%)&lt;BR/&gt; 1225: (4.16667%)&lt;BR/&gt; 1223: (4.16667%)&gt;];
}
7036--8909[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="49.37.89.195" dst_port="21" src_ip="172.113.228.224"/>
      <filter dst_ip="195.105.186.171" dst_port="21" src_ip="172.113.228.224"/>
      <filter dst_ip="53.211.2.47" dst_port="21" src_ip="172.113.228.224"/>
    </slice>
    <from sec="1178341323" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38192,2.60701,002,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_943{
style=filled;
color=gray75;
212[label="134.33.162.186;s;622pkt 622fpkt", shape=diamond, color=yellow];
707[label="46.206.115.75;d;6pkt 6fpkt", shape=diamond, color=yellow];
749[label="196.74.218.26;d;684pkt 684fpkt", shape=diamond, color=yellow];
1074[label="198.155.86.62;s;4pkt 4fpkt", shape=diamond, color=yellow];
1075[label="50.248.150.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
1077[label="134.33.162.184;s;448pkt 448fpkt", shape=diamond, color=yellow];
1116[label="198.155.86.32;s;420pkt 420fpkt", shape=diamond, color=yellow];
1468[label="198.155.86.36;s;178pkt 178fpkt", shape=diamond, color=yellow];
1769[label="88.32.75.231;d;2pkt 2fpkt", shape=diamond, color=yellow];
1824[label="168.75.105.225;s;302pkt 302fpkt", shape=diamond, color=yellow];
1831[label="198.155.84.26;s;105pkt 105fpkt", shape=diamond, color=yellow];
2080[label="214.160.227.73;d;400pkt 400fpkt", shape=diamond, color=yellow];
2225[label="198.155.86.17;s;199pkt 199fpkt", shape=diamond, color=yellow];
2954[label="59.135.75.215;d;149pkt 149fpkt", shape=diamond, color=yellow];
3574[label="196.74.218.26;d;614pkt 614fpkt", shape=hexagon, color=black];
4283[label="198.155.84.7;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4434[label="198.155.86.17;200pkt 200fpkt", shape=pentagon, color=darkviolet];
4569[label="198.155.84.26;120pkt 120fpkt", shape=pentagon, color=darkviolet];
5212[label="198.155.71.72;19pkt 19fpkt", shape=pentagon, color=darkviolet];
5940[label="198.155.85.131;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6599[label="134.33.162.186;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6835[label="198.155.85.206;100pkt 100fpkt", shape=pentagon, color=darkviolet];
6872[label="198.155.84.209;101pkt 101fpkt", shape=pentagon, color=darkviolet];
6896[label="198.155.85.211;32pkt 32fpkt", shape=pentagon, color=darkviolet];
6951[label="198.155.103.216;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6971[label="198.155.103.218;73pkt 73fpkt", shape=pentagon, color=darkviolet];
7052[label="168.75.105.226;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7429[label="198.155.84.7;5pkt 5fpkt", shape=invtriangle, color=brown];
7514[label="198.155.86.17;200pkt 200fpkt", shape=invtriangle, color=brown];
7579[label="198.155.84.26;120pkt 120fpkt", shape=invtriangle, color=brown];
7913[label="198.155.71.72;19pkt 19fpkt", shape=invtriangle, color=brown];
8300[label="198.155.85.131;6pkt 6fpkt", shape=invtriangle, color=brown];
8664[label="134.33.162.186;657pkt 657fpkt", shape=invtriangle, color=brown];
8797[label="198.155.85.206;100pkt 100fpkt", shape=invtriangle, color=brown];
8808[label="198.155.84.209;101pkt 101fpkt", shape=invtriangle, color=brown];
8857[label="198.155.103.216;17pkt 17fpkt", shape=invtriangle, color=brown];
8866[label="198.155.103.218;73pkt 73fpkt", shape=invtriangle, color=brown];
8913[label="168.75.105.225;325pkt 325fpkt", shape=invtriangle, color=brown];
8919[label="168.75.105.226;16pkt 16fpkt", shape=invtriangle, color=brown];
9149[label="198.155.84.7;5pkt 5fpkt", shape=invhouse, color=bisque];
9800[label="134.33.162.186;657pkt 657fpkt", shape=invhouse, color=bisque];
9874[label="198.155.85.206;100pkt 100fpkt", shape=invhouse, color=bisque];
9881[label="198.155.84.209;101pkt 101fpkt", shape=invhouse, color=bisque];
9904[label="198.155.103.216;17pkt 17fpkt", shape=invhouse, color=bisque];
stat943[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[68.2628%]&lt;BR/&gt;{*:*, 196.74.218.26:*}[20.3212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (63.3937%)&lt;BR/&gt; 139: (12.8762%)&lt;BR/&gt; 53: (1.86572%)&lt;BR/&gt; 1314: (1.79763%)&lt;BR/&gt; 13750: (1.46398%)&gt;];
}
212--707[label="0.166667;1pkt 1fpkt"];
212--2080[label="0.0025;1pkt 1fpkt"];
212--6599[label="0.5;1pkt 1fpkt"];
212--8664[label="0.998392;621pkt 621fpkt"];
212--9800[label="0.998392;621pkt 621fpkt"];
707--1077[label="0.166667;1pkt 1fpkt"];
707--8664[label="0.166667;1pkt 1fpkt"];
707--9800[label="0.166667;1pkt 1fpkt"];
749--1116[label="0.347619;146pkt 146fpkt"];
749--1468[label="0.97191;173pkt 173fpkt"];
749--1824[label="0.00331126;1pkt 1fpkt"];
749--1831[label="0.00952381;1pkt 1fpkt"];
749--1837[label="0.00146199;1pkt 1fpkt"];
749--2225[label="0.924623;184pkt 184fpkt"];
749--3114[label="0.00487805;1pkt 1fpkt"];
749--3574[label="1;614pkt 614fpkt"];
749--4434[label="0.92;184pkt 184fpkt"];
749--4569[label="0.00833333;1pkt 1fpkt"];
749--4855[label="0.0131579;1pkt 1fpkt"];
749--5212[label="0.157895;3pkt 3fpkt"];
749--5641[label="0.00440529;1pkt 1fpkt"];
749--5940[label="0.166667;1pkt 1fpkt"];
749--6835[label="0.03;3pkt 3fpkt"];
749--6872[label="0.029703;3pkt 3fpkt"];
749--6952[label="0.0277778;1pkt 1fpkt"];
749--6971[label="0.0136986;1pkt 1fpkt"];
749--7429[label="0.2;1pkt 1fpkt"];
749--7514[label="0.92;184pkt 184fpkt"];
749--7579[label="0.00833333;1pkt 1fpkt"];
749--7730[label="0.0131579;1pkt 1fpkt"];
749--7913[label="0.157895;3pkt 3fpkt"];
749--8139[label="0.00440529;1pkt 1fpkt"];
749--8300[label="0.166667;1pkt 1fpkt"];
749--8797[label="0.03;3pkt 3fpkt"];
749--8808[label="0.029703;3pkt 3fpkt"];
749--8866[label="0.0136986;1pkt 1fpkt"];
749--8913[label="0.00307692;1pkt 1fpkt"];
749--9149[label="0.2;1pkt 1fpkt"];
749--9292[label="0.0131579;1pkt 1fpkt"];
749--9874[label="0.03;3pkt 3fpkt"];
749--9881[label="0.029703;3pkt 3fpkt"];
1074--1075[label="1;1pkt 1fpkt"];
1074--2954[label="0.25;1pkt 1fpkt"];
1077--1769[label="0.5;1pkt 1fpkt"];
1077--2080[label="0.0025;1pkt 1fpkt"];
1116--2954[label="0.00671141;1pkt 1fpkt"];
1116--3574[label="0.292857;123pkt 123fpkt"];
1468--2777[label="0.0185185;1pkt 1fpkt"];
1468--3574[label="0.97191;173pkt 173fpkt"];
1769--1824[label="0.5;1pkt 1fpkt"];
1769--8913[label="0.5;1pkt 1fpkt"];
1824--2080[label="0.00331126;1pkt 1fpkt"];
1824--3574[label="0.00331126;1pkt 1fpkt"];
1824--8913[label="1;302pkt 302fpkt"];
1831--2954[label="0.0190476;2pkt 2fpkt"];
1831--3574[label="0.00952381;1pkt 1fpkt"];
1831--4569[label="1;105pkt 105fpkt"];
1831--7579[label="1;105pkt 105fpkt"];
2080--4855[label="0.0131579;1pkt 1fpkt"];
2080--5098[label="0.0025;1pkt 1fpkt"];
2080--5846[label="0.0416667;1pkt 1fpkt"];
2080--6049[label="0.00347222;1pkt 1fpkt"];
2080--6599[label="0.5;1pkt 1fpkt"];
2080--6835[label="0.01;1pkt 1fpkt"];
2080--6951[label="0.0588235;1pkt 1fpkt"];
2080--6971[label="0.0136986;1pkt 1fpkt"];
2080--7317[label="0.0166667;1pkt 1fpkt"];
2080--7730[label="0.0131579;1pkt 1fpkt"];
2080--8664[label="0.0025;1pkt 1fpkt"];
2080--8797[label="0.01;1pkt 1fpkt"];
2080--8857[label="0.0588235;1pkt 1fpkt"];
2080--8866[label="0.0136986;1pkt 1fpkt"];
2080--8913[label="0.00307692;1pkt 1fpkt"];
2080--9085[label="0.0166667;1pkt 1fpkt"];
2080--9292[label="0.0131579;1pkt 1fpkt"];
2080--9800[label="0.0025;1pkt 1fpkt"];
2080--9874[label="0.01;1pkt 1fpkt"];
2080--9904[label="0.0588235;1pkt 1fpkt"];
2080--10016[label="0.0166667;1pkt 1fpkt"];
2225--2954[label="0.00671141;1pkt 1fpkt"];
2225--3574[label="0.708543;141pkt 141fpkt"];
2225--4434[label="1;199pkt 199fpkt"];
2225--7514[label="1;199pkt 199fpkt"];
2954--2996[label="0.00671141;1pkt 1fpkt"];
2954--3096[label="0.00671141;1pkt 1fpkt"];
2954--3114[label="0.00671141;1pkt 1fpkt"];
2954--3916[label="0.00671141;1pkt 1fpkt"];
2954--4266[label="0.00671141;1pkt 1fpkt"];
2954--4434[label="0.00671141;1pkt 1fpkt"];
2954--4569[label="0.0166667;2pkt 2fpkt"];
2954--4727[label="0.00671141;1pkt 1fpkt"];
2954--5212[label="0.0526316;1pkt 1fpkt"];
2954--5396[label="0.0078125;1pkt 1fpkt"];
2954--5641[label="0.00671141;1pkt 1fpkt"];
2954--5940[label="0.166667;1pkt 1fpkt"];
2954--6835[label="0.02;2pkt 2fpkt"];
2954--6896[label="0.03125;1pkt 1fpkt"];
2954--6951[label="0.0588235;1pkt 1fpkt"];
2954--6952[label="0.0277778;1pkt 1fpkt"];
2954--6961[label="0.0222222;1pkt 1fpkt"];
2954--7052[label="0.0625;1pkt 1fpkt"];
2954--7317[label="0.0166667;1pkt 1fpkt"];
2954--7415[label="0.00671141;1pkt 1fpkt"];
2954--7514[label="0.00671141;1pkt 1fpkt"];
2954--7579[label="0.0166667;2pkt 2fpkt"];
2954--7913[label="0.0526316;1pkt 1fpkt"];
2954--8139[label="0.00671141;1pkt 1fpkt"];
2954--8300[label="0.166667;1pkt 1fpkt"];
2954--8797[label="0.02;2pkt 2fpkt"];
2954--8857[label="0.0588235;1pkt 1fpkt"];
2954--8919[label="0.0625;1pkt 1fpkt"];
2954--9085[label="0.0166667;1pkt 1fpkt"];
2954--9378[label="0.00671141;1pkt 1fpkt"];
2954--9874[label="0.02;2pkt 2fpkt"];
2954--9904[label="0.0588235;1pkt 1fpkt"];
2954--10016[label="0.0166667;1pkt 1fpkt"];
3574--4434[label="0.705;141pkt 141fpkt"];
3574--4569[label="0.00833333;1pkt 1fpkt"];
3574--4855[label="0.0131579;1pkt 1fpkt"];
3574--5212[label="0.157895;3pkt 3fpkt"];
3574--5940[label="0.166667;1pkt 1fpkt"];
3574--6835[label="0.03;3pkt 3fpkt"];
3574--6872[label="0.029703;3pkt 3fpkt"];
3574--6952[label="0.0277778;1pkt 1fpkt"];
3574--6971[label="0.0136986;1pkt 1fpkt"];
3574--7429[label="0.2;1pkt 1fpkt"];
3574--7514[label="0.705;141pkt 141fpkt"];
3574--7579[label="0.00833333;1pkt 1fpkt"];
3574--7730[label="0.0131579;1pkt 1fpkt"];
3574--7913[label="0.157895;3pkt 3fpkt"];
3574--8300[label="0.166667;1pkt 1fpkt"];
3574--8797[label="0.03;3pkt 3fpkt"];
3574--8808[label="0.029703;3pkt 3fpkt"];
3574--8866[label="0.0136986;1pkt 1fpkt"];
3574--8913[label="0.00307692;1pkt 1fpkt"];
3574--9149[label="0.2;1pkt 1fpkt"];
3574--9292[label="0.0131579;1pkt 1fpkt"];
3574--9874[label="0.03;3pkt 3fpkt"];
3574--9881[label="0.029703;3pkt 3fpkt"];
4283--7429[label="1;4pkt 4fpkt"];
4283--9149[label="1;4pkt 4fpkt"];
4434--7514[label="1;200pkt 200fpkt"];
4569--7579[label="1;120pkt 120fpkt"];
5212--7913[label="1;19pkt 19fpkt"];
5940--8300[label="1;6pkt 6fpkt"];
6599--8664[label="0.5;1pkt 1fpkt"];
6599--9800[label="0.5;1pkt 1fpkt"];
6835--8797[label="1;100pkt 100fpkt"];
6835--9874[label="1;100pkt 100fpkt"];
6872--8808[label="1;101pkt 101fpkt"];
6872--9881[label="1;101pkt 101fpkt"];
6951--8857[label="1;17pkt 17fpkt"];
6951--9904[label="1;17pkt 17fpkt"];
6971--8866[label="1;73pkt 73fpkt"];
7052--8919[label="1;16pkt 16fpkt"];
7429--9149[label="1;5pkt 5fpkt"];
8664--9800[label="1;657pkt 657fpkt"];
8797--9874[label="1;100pkt 100fpkt"];
8808--9881[label="1;101pkt 101fpkt"];
8857--9904[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="196.74.218.26"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.201.142.225"/>
    </slice>
    <from sec="1178341242" usec="0"/>
    <to sec="1178341273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.15.6.226"/>
    </slice>
    <from sec="1178342057" usec="0"/>
    <to sec="1178342072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
7048[label="54.128.34.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8917[label="54.128.34.226;1pkt 1fpkt", shape=invtriangle, color=brown];
9930[label="54.128.34.226;1pkt 1fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.128.34.226:54956, 134.128.134.171:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54956: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
7048--8917[label="1;1pkt 1fpkt"];
7048--9930[label="1;1pkt 1fpkt"];
8917--9930[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.128.134.171" dst_port="443" src_ip="54.128.34.226" src_port="54956"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.235.151.226"/>
    </slice>
    <from sec="1178341353" usec="0"/>
    <to sec="1178341367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.129.27.228"/>
    </slice>
    <from sec="1178341372" usec="0"/>
    <to sec="1178341544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_949{
style=filled;
color=gray75;
7071[label="217.33.141.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8936[label="217.33.141.228;1pkt 1fpkt", shape=invtriangle, color=brown];
stat949[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.33.141.228:32768, 199.181.133.17:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
7071--8936[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.181.133.17" dst_port="53" src_ip="217.33.141.228" src_port="32768"/>
    </slice>
    <from sec="1178341202" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.165.194.229"/>
    </slice>
    <from sec="1178342024" usec="0"/>
    <to sec="1178342069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_951{
style=filled;
color=gray75;
7086[label="134.2.10.230;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8945[label="134.2.10.230;11pkt 11fpkt", shape=invtriangle, color=brown];
stat951[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.2.10.230:*, 203.109.26.161:1352}[72.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1352: (36.3636%)&lt;BR/&gt; 995: (9.09091%)&lt;BR/&gt; 4705: (4.54545%)&lt;BR/&gt; 4704: (4.54545%)&lt;BR/&gt; 4702: (4.54545%)&gt;];
}
7086--8945[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="203.109.26.161" dst_port="1352" src_ip="134.2.10.230"/>
    </slice>
    <from sec="1178341456" usec="0"/>
    <to sec="1178342064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.138.69.231"/>
    </slice>
    <from sec="1178341405" usec="0"/>
    <to sec="1178341629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.32.75.231"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.155.20.232"/>
    </slice>
    <from sec="1178341781" usec="0"/>
    <to sec="1178341815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.9.45.232"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.193.129.233"/>
    </slice>
    <from sec="1178341346" usec="0"/>
    <to sec="1178341507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_957{
style=filled;
color=gray75;
7131[label="215.8.156.233;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8976[label="215.8.156.233;2pkt 2fpkt", shape=invtriangle, color=brown];
9955[label="215.8.156.233;2pkt 2fpkt", shape=invhouse, color=bisque];
stat957[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.8.156.233:80, 129.206.190.238:1072}[50%]&lt;BR/&gt;{215.8.156.233:80, 129.206.190.238:1074}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1074: (25%)&lt;BR/&gt; 1072: (25%)&gt;];
}
7131--8976[label="1;2pkt 2fpkt"];
7131--9955[label="1;2pkt 2fpkt"];
8976--9955[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.190.238" dst_port="1074" src_ip="215.8.156.233" src_port="80"/>
      <filter dst_ip="129.206.190.238" dst_port="1072" src_ip="215.8.156.233" src_port="80"/>
    </slice>
    <from sec="1178342078" usec="0"/>
    <to sec="1178342095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.227.113.234"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.14.229.234"/>
    </slice>
    <from sec="1178341249" usec="0"/>
    <to sec="1178341340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="46.208.90.235"/>
    </slice>
    <from sec="1178341770" usec="0"/>
    <to sec="1178341793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.113.218.236"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.52.62.237"/>
    </slice>
    <from sec="1178341433" usec="0"/>
    <to sec="1178341473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759215,2.68778,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_963{
style=filled;
color=gray75;
7168[label="128.122.82.238;147pkt 147fpkt", shape=pentagon, color=darkviolet];
9005[label="128.122.82.238;147pkt 147fpkt", shape=invtriangle, color=brown];
9973[label="128.122.82.238;147pkt 147fpkt", shape=invhouse, color=bisque];
stat963[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.122.82.238:80, 212.172.53.157:*}[60.5442%]&lt;BR/&gt;{128.122.82.238:80, 75.158.16.104:*}[31.2925%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39071: (0.340136%)&lt;BR/&gt; 23073: (0.340136%)&lt;BR/&gt; 2152: (0.340136%)&lt;BR/&gt; 2151: (0.340136%)&gt;];
}
7168--9005[label="1;147pkt 147fpkt"];
7168--9973[label="1;147pkt 147fpkt"];
9005--9973[label="1;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="212.172.53.157" src_ip="128.122.82.238" src_port="80"/>
      <filter dst_ip="75.158.16.104" src_ip="128.122.82.238" src_port="80"/>
    </slice>
    <from sec="1178341296" usec="0"/>
    <to sec="1178342059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.103.144.238"/>
    </slice>
    <from sec="1178341515" usec="0"/>
    <to sec="1178341596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
7198[label="199.251.10.241;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9019[label="199.251.10.241;12pkt 12fpkt", shape=invtriangle, color=brown];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.251.10.241:25, 129.206.206.245:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4560: (4.16667%)&lt;BR/&gt; 3871: (4.16667%)&lt;BR/&gt; 3868: (4.16667%)&lt;BR/&gt; 3865: (4.16667%)&gt;];
}
7198--9019[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="129.206.206.245" src_ip="199.251.10.241" src_port="25"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.41.63.243"/>
    </slice>
    <from sec="1178342013" usec="0"/>
    <to sec="1178342015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_967{
style=filled;
color=gray75;
7225[label="129.206.198.243;94pkt 94fpkt", shape=pentagon, color=darkviolet];
9034[label="129.206.198.243;94pkt 94fpkt", shape=invtriangle, color=brown];
stat967[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.206.198.243:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11755: (4.78723%)&lt;BR/&gt; 59179: (2.12766%)&lt;BR/&gt; 48869: (2.12766%)&lt;BR/&gt; 39930: (2.12766%)&lt;BR/&gt; 1452: (2.12766%)&gt;];
}
7225--9034[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="129.206.198.243"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.153.222.243"/>
    </slice>
    <from sec="1178341273" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.229.19.244"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.40.95.244"/>
    </slice>
    <from sec="1178341900" usec="0"/>
    <to sec="1178341904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.120.134.244"/>
    </slice>
    <from sec="1178341335" usec="0"/>
    <to sec="1178341347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.82.151.244"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178341615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.145.128.245"/>
    </slice>
    <from sec="1178341580" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
7257[label="155.255.136.246;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9054[label="155.255.136.246;5pkt 5fpkt", shape=invtriangle, color=brown];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.255.136.246:53, 198.196.27.17:32795}[20%]&lt;BR/&gt;{155.255.136.246:25, 13.219.16.207:4024}[20%]&lt;BR/&gt;{155.255.136.246:53, 216.181.62.249:2573}[20%]&lt;BR/&gt;{155.255.136.246:110, 199.111.73.183:1926}[20%]&lt;BR/&gt;{155.255.136.246:110, 199.111.73.183:1967}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (20%)&lt;BR/&gt; 53: (20%)&lt;BR/&gt; 32795: (10%)&lt;BR/&gt; 4024: (10%)&lt;BR/&gt; 2573: (10%)&gt;];
}
7257--9054[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="199.111.73.183" dst_port="1967" src_ip="155.255.136.246" src_port="110"/>
      <filter dst_ip="199.111.73.183" dst_port="1926" src_ip="155.255.136.246" src_port="110"/>
      <filter dst_ip="216.181.62.249" dst_port="2573" src_ip="155.255.136.246" src_port="53"/>
      <filter dst_ip="13.219.16.207" dst_port="4024" src_ip="155.255.136.246" src_port="25"/>
      <filter dst_ip="198.196.27.17" dst_port="32795" src_ip="155.255.136.246" src_port="53"/>
    </slice>
    <from sec="1178341252" usec="0"/>
    <to sec="1178341983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513722,2.69535,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_975{
style=filled;
color=gray75;
7268[label="213.183.111.247;219pkt 219fpkt", shape=pentagon, color=darkviolet];
9059[label="213.183.111.247;219pkt 219fpkt", shape=invtriangle, color=brown];
stat975[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.183.111.247:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 29660: (0.228311%)&lt;BR/&gt; 29603: (0.228311%)&lt;BR/&gt; 29537: (0.228311%)&lt;BR/&gt; 29384: (0.228311%)&gt;];
}
7268--9059[label="1;219pkt 219fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="213.183.111.247"/>
    </slice>
    <from sec="1178341208" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26381,2.61482,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
314[label="92.54.173.76;d;2pkt 2fpkt", shape=diamond, color=yellow];
728[label="134.149.133.255;s;90pkt 90fpkt", shape=diamond, color=yellow];
1015[label="92.5.192.16;d;7pkt 7fpkt", shape=diamond, color=yellow];
1105[label="216.217.11.170;d;70pkt 70fpkt", shape=diamond, color=yellow];
1350[label="89.89.107.249;d;4pkt 4fpkt", shape=diamond, color=yellow];
2285[label="199.190.166.15;d;5pkt 5fpkt", shape=diamond, color=yellow];
3670[label="216.217.11.170;d;42pkt 42fpkt", shape=hexagon, color=black];
6992[label="145.245.28.220;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7270[label="134.149.134.247;20pkt 20fpkt", shape=pentagon, color=darkviolet];
8884[label="145.245.28.220;11pkt 11fpkt", shape=invtriangle, color=brown];
9060[label="134.149.134.247;20pkt 20fpkt", shape=invtriangle, color=brown];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.149.133.255:80, 216.217.11.170:*}[45.6954%]&lt;BR/&gt;{*:0, *:0}[23.1788%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.7021%)&lt;BR/&gt; 0: (25.1773%)&lt;BR/&gt; 26191: (0.531915%)&lt;BR/&gt; 26190: (0.531915%)&lt;BR/&gt; 26188: (0.531915%)&gt;];
}
314--728[label="1;2pkt 2fpkt"];
728--1015[label="1;7pkt 7fpkt"];
728--1105[label="0.6;42pkt 42fpkt"];
728--1350[label="1;4pkt 4fpkt"];
728--2285[label="0.2;1pkt 1fpkt"];
728--3670[label="1;42pkt 42fpkt"];
1105--3670[label="1;42pkt 42fpkt"];
2285--6992[label="0.2;1pkt 1fpkt"];
2285--7270[label="0.2;1pkt 1fpkt"];
2285--8884[label="0.2;1pkt 1fpkt"];
2285--9060[label="0.2;1pkt 1fpkt"];
6992--8884[label="1;11pkt 11fpkt"];
7270--9060[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="216.217.11.170" src_ip="134.149.133.255" src_port="80"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.973325,2.64574,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_977{
style=filled;
color=gray75;
1636[label="134.128.134.82;d;12pkt 12fpkt", shape=diamond, color=yellow];
7271[label="214.241.160.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9061[label="214.241.160.247;1pkt 1fpkt", shape=invtriangle, color=brown];
10006[label="214.241.160.247;1pkt 1fpkt", shape=invhouse, color=bisque];
stat977[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.128.134.82:143}[33.3333%]&lt;BR/&gt;{*:*, 134.128.134.82:443}[33.3333%]&lt;BR/&gt;{88.216.198.169:*, 134.128.134.82:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (16.6667%)&lt;BR/&gt; 44124: (13.3333%)&lt;BR/&gt; 443: (13.3333%)&lt;BR/&gt; 143: (13.3333%)&lt;BR/&gt; 110: (6.66667%)&gt;];
}
1636--6867[label="0.25;1pkt 1fpkt"];
1636--7271[label="1;1pkt 1fpkt"];
1636--8806[label="0.25;1pkt 1fpkt"];
1636--9061[label="1;1pkt 1fpkt"];
1636--9880[label="0.25;1pkt 1fpkt"];
1636--10006[label="1;1pkt 1fpkt"];
7271--9061[label="1;1pkt 1fpkt"];
7271--10006[label="1;1pkt 1fpkt"];
9061--10006[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.128.134.82" src_ip="88.216.198.169"/>
      <filter dst_ip="134.128.134.82" dst_port="443"/>
      <filter dst_ip="134.128.134.82" dst_port="143"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178341961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.113.176.247"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.1.17.248"/>
    </slice>
    <from sec="1178341583" usec="0"/>
    <to sec="1178341621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.41.198.248"/>
    </slice>
    <from sec="1178341466" usec="0"/>
    <to sec="1178341523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.221.75.249"/>
    </slice>
    <from sec="1178342058" usec="0"/>
    <to sec="1178342080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.12.32.250"/>
    </slice>
    <from sec="1178341658" usec="0"/>
    <to sec="1178341696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.185.186.251"/>
    </slice>
    <from sec="1178341494" usec="0"/>
    <to sec="1178341571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.6.107.252"/>
    </slice>
    <from sec="1178341806" usec="0"/>
    <to sec="1178341823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.119.168.253"/>
    </slice>
    <from sec="1178341901" usec="0"/>
    <to sec="1178342019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.99.70.255"/>
    </slice>
    <from sec="1178341609" usec="0"/>
    <to sec="1178341667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.556352,2.72954,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.92.86.255"/>
    </slice>
    <from sec="1178341572" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.221.135.1"/>
    </slice>
    <from sec="1178341263" usec="0"/>
    <to sec="1178341278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.176.41.3"/>
    </slice>
    <from sec="1178341734" usec="0"/>
    <to sec="1178341777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.70.138.6"/>
    </slice>
    <from sec="1178341590" usec="0"/>
    <to sec="1178341650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.120.216.11"/>
    </slice>
    <from sec="1178341269" usec="0"/>
    <to sec="1178341299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.232.38.13"/>
    </slice>
    <from sec="1178341237" usec="0"/>
    <to sec="1178341282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.212.35.19"/>
    </slice>
    <from sec="1178341546" usec="0"/>
    <to sec="1178341562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.124.202.23"/>
    </slice>
    <from sec="1178341881" usec="0"/>
    <to sec="1178341923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.172.80.25"/>
    </slice>
    <from sec="1178341428" usec="0"/>
    <to sec="1178341434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.203.82.25"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.237.185.28"/>
    </slice>
    <from sec="1178341557" usec="0"/>
    <to sec="1178341589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.242.6.29"/>
    </slice>
    <from sec="1178341349" usec="0"/>
    <to sec="1178341378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.160.197.29"/>
    </slice>
    <from sec="1178341656" usec="0"/>
    <to sec="1178341671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.120.89.30"/>
    </slice>
    <from sec="1178341270" usec="0"/>
    <to sec="1178341277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.164.174.30"/>
    </slice>
    <from sec="1178341674" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.49.243.30"/>
    </slice>
    <from sec="1178341723" usec="0"/>
    <to sec="1178341873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.221.3.32"/>
    </slice>
    <from sec="1178341741" usec="0"/>
    <to sec="1178341753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.145.6.32"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.176.106.32"/>
    </slice>
    <from sec="1178341999" usec="0"/>
    <to sec="1178342012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.41.42.34"/>
    </slice>
    <from sec="1178341511" usec="0"/>
    <to sec="1178341572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.206.178.34"/>
    </slice>
    <from sec="1178341312" usec="0"/>
    <to sec="1178341480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.40.86.35"/>
    </slice>
    <from sec="1178341317" usec="0"/>
    <to sec="1178341322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.132.161.40"/>
    </slice>
    <from sec="1178341529" usec="0"/>
    <to sec="1178341560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.138.166.40"/>
    </slice>
    <from sec="1178341501" usec="0"/>
    <to sec="1178341512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.34.69.41"/>
    </slice>
    <from sec="1178341214" usec="0"/>
    <to sec="1178341276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.12.86.41"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="47.69.168.43"/>
    </slice>
    <from sec="1178341381" usec="0"/>
    <to sec="1178341399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.221.10.47"/>
    </slice>
    <from sec="1178341711" usec="0"/>
    <to sec="1178341756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.228.171.49"/>
    </slice>
    <from sec="1178341919" usec="0"/>
    <to sec="1178342020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.221.94.51"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.112.106.51"/>
    </slice>
    <from sec="1178341233" usec="0"/>
    <to sec="1178341256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.232.64.55"/>
    </slice>
    <from sec="1178342033" usec="0"/>
    <to sec="1178342040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.7.91.55"/>
    </slice>
    <from sec="1178341980" usec="0"/>
    <to sec="1178341994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.182.99.56"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.89.241.60"/>
    </slice>
    <from sec="1178341724" usec="0"/>
    <to sec="1178341735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.193.92.64"/>
    </slice>
    <from sec="1178341613" usec="0"/>
    <to sec="1178341654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.211.118.65"/>
    </slice>
    <from sec="1178341267" usec="0"/>
    <to sec="1178341306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.47.167.66"/>
    </slice>
    <from sec="1178341654" usec="0"/>
    <to sec="1178341676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.788685,2.72206,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1025{
style=filled;
color=gray75;
7896[label="198.150.160.70;3pkt 3fpkt", shape=invtriangle, color=brown];
9372[label="198.150.160.70;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1025[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.150.160.70:42388, 215.111.62.152:80}[33.3333%]&lt;BR/&gt;{198.150.160.70:42389, 215.111.62.152:80}[33.3333%]&lt;BR/&gt;{198.150.160.70:42390, 215.111.62.152:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42390: (16.6667%)&lt;BR/&gt; 42389: (16.6667%)&lt;BR/&gt; 42388: (16.6667%)&gt;];
}
7896--9372[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.111.62.152" dst_port="80" src_ip="198.150.160.70" src_port="42390"/>
      <filter dst_ip="215.111.62.152" dst_port="80" src_ip="198.150.160.70" src_port="42389"/>
      <filter dst_ip="215.111.62.152" dst_port="80" src_ip="198.150.160.70" src_port="42388"/>
    </slice>
    <from sec="1178341592" usec="0"/>
    <to sec="1178341803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.221.74.71"/>
    </slice>
    <from sec="1178341207" usec="0"/>
    <to sec="1178342094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.934752,2.70216,999,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
2705[label="198.155.85.71;s;335pkt 335fpkt", shape=diamond, color=yellow];
9378[label="198.155.85.71;382pkt 382fpkt", shape=invhouse, color=bisque];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.155.85.71:53, *:*}[99.7382%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.7197%)&lt;BR/&gt; 32768: (3.20781%)&lt;BR/&gt; 32769: (1.3947%)&lt;BR/&gt; 32809: (0.83682%)&lt;BR/&gt; 53535: (0.55788%)&gt;];
}
2705--2954[label="0.00671141;1pkt 1fpkt"];
2705--4050[label="0.00298507;1pkt 1fpkt"];
2705--4055[label="0.00298507;1pkt 1fpkt"];
2705--4060[label="0.00298507;1pkt 1fpkt"];
2705--4095[label="0.00298507;1pkt 1fpkt"];
2705--4100[label="0.00298507;1pkt 1fpkt"];
2705--4104[label="0.00298507;1pkt 1fpkt"];
2705--4134[label="0.00298507;1pkt 1fpkt"];
2705--4139[label="0.00298507;1pkt 1fpkt"];
2705--4140[label="0.00298507;1pkt 1fpkt"];
2705--9378[label="1;335pkt 335fpkt"];
</description>
    <slice>
      <filter src_ip="198.155.85.71" src_port="53"/>
    </slice>
    <from sec="1178341200" usec="0"/>
    <to sec="1178342085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.114.147.71"/>
    </slice>
    <from sec="1178341993" usec="0"/>
    <to sec="1178342009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.113.220.73"/>
    </slice>
    <from sec="1178341219" usec="0"/>
    <to sec="1178342097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.232.28.76"/>
    </slice>
    <from sec="1178341670" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.219.137.76"/>
    </slice>
    <from sec="1178341625" usec="0"/>
    <to sec="1178341639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.153.111.77"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.73.159.80"/>
    </slice>
    <from sec="1178341259" usec="0"/>
    <to sec="1178341286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.13.209.80"/>
    </slice>
    <from sec="1178341886" usec="0"/>
    <to sec="1178342085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.30.105.82"/>
    </slice>
    <from sec="1178341935" usec="0"/>
    <to sec="1178342076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.143.182.87"/>
    </slice>
    <from sec="1178341458" usec="0"/>
    <to sec="1178341767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.73.164.88"/>
    </slice>
    <from sec="1178341299" usec="0"/>
    <to sec="1178341329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.113.241.90"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178341237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.248.209.102"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.228.176.103"/>
    </slice>
    <from sec="1178341225" usec="0"/>
    <to sec="1178342084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.153.220.103"/>
    </slice>
    <from sec="1178342012" usec="0"/>
    <to sec="1178342065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.186.52.109"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.203.236.109"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.198.95.110"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.43.7.113"/>
    </slice>
    <from sec="1178341369" usec="0"/>
    <to sec="1178341810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.216.36.114"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.195.214.114"/>
    </slice>
    <from sec="1178341639" usec="0"/>
    <to sec="1178341935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.174.80.115"/>
    </slice>
    <from sec="1178341750" usec="0"/>
    <to sec="1178341796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.70.140.115"/>
    </slice>
    <from sec="1178341503" usec="0"/>
    <to sec="1178341678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.140.166.116"/>
    </slice>
    <from sec="1178341460" usec="0"/>
    <to sec="1178341581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.34.96.121"/>
    </slice>
    <from sec="1178341914" usec="0"/>
    <to sec="1178341942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.132.255.121"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178341441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.210.204.140"/>
    </slice>
    <from sec="1178341479" usec="0"/>
    <to sec="1178341806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.199.199.144"/>
    </slice>
    <from sec="1178341928" usec="0"/>
    <to sec="1178341955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.212.112.151"/>
    </slice>
    <from sec="1178342101" usec="0"/>
    <to sec="1178342102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.149.72.154"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.206.182.154"/>
    </slice>
    <from sec="1178341407" usec="0"/>
    <to sec="1178341434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="106.109.160.156"/>
    </slice>
    <from sec="1178341843" usec="0"/>
    <to sec="1178341941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.167.114.157"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.154.194.160"/>
    </slice>
    <from sec="1178341544" usec="0"/>
    <to sec="1178341557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.102.102.165"/>
    </slice>
    <from sec="1178341216" usec="0"/>
    <to sec="1178341315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.233.213.167"/>
    </slice>
    <from sec="1178341578" usec="0"/>
    <to sec="1178341707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.141.90.168"/>
    </slice>
    <from sec="1178341698" usec="0"/>
    <to sec="1178341781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.144.80.175"/>
    </slice>
    <from sec="1178341630" usec="0"/>
    <to sec="1178341767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.243.129.175"/>
    </slice>
    <from sec="1178341369" usec="0"/>
    <to sec="1178341383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.153.223.176"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.134.196.180"/>
    </slice>
    <from sec="1178341720" usec="0"/>
    <to sec="1178341799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.202.56.185"/>
    </slice>
    <from sec="1178341383" usec="0"/>
    <to sec="1178341410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.132.140.186"/>
    </slice>
    <from sec="1178341201" usec="0"/>
    <to sec="1178341778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.206.1.187"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.143.65.189"/>
    </slice>
    <from sec="1178341527" usec="0"/>
    <to sec="1178341642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.99.51.192"/>
    </slice>
    <from sec="1178341205" usec="0"/>
    <to sec="1178341918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.100.76.192"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.676158,2.70932,999,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1074{
style=filled;
color=gray75;
6685[label="134.153.216.193;81pkt 81fpkt", shape=pentagon, color=darkviolet];
9829[label="134.153.216.193;80pkt 80fpkt", shape=invhouse, color=bisque];
stat1074[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.153.216.193:1433, 213.240.180.163:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 5000: (0.621118%)&lt;BR/&gt; 4848: (0.621118%)&lt;BR/&gt; 4820: (0.621118%)&lt;BR/&gt; 4770: (0.621118%)&gt;];
}
6685--9829[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.180.163" src_ip="134.153.216.193" src_port="1433"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.178.67.195"/>
    </slice>
    <from sec="1178341741" usec="0"/>
    <to sec="1178341831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.91.145.196"/>
    </slice>
    <from sec="1178341606" usec="0"/>
    <to sec="1178341622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.72.87.197"/>
    </slice>
    <from sec="1178341633" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.4.76.201"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178341342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.247.10.202"/>
    </slice>
    <from sec="1178341206" usec="0"/>
    <to sec="1178342099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.28.90.203"/>
    </slice>
    <from sec="1178341212" usec="0"/>
    <to sec="1178342088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.145.192.203"/>
    </slice>
    <from sec="1178341731" usec="0"/>
    <to sec="1178341790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.22.202.204"/>
    </slice>
    <from sec="1178341404" usec="0"/>
    <to sec="1178341553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.203.241.204"/>
    </slice>
    <from sec="1178341727" usec="0"/>
    <to sec="1178341754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.215.168.209"/>
    </slice>
    <from sec="1178341540" usec="0"/>
    <to sec="1178341555" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.61.112.215"/>
    </slice>
    <from sec="1178341226" usec="0"/>
    <to sec="1178341313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.148.90.216"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.89.177.218"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.41.20.219"/>
    </slice>
    <from sec="1178341508" usec="0"/>
    <to sec="1178341535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.47.240.223"/>
    </slice>
    <from sec="1178341203" usec="0"/>
    <to sec="1178341725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.201.142.225"/>
    </slice>
    <from sec="1178341242" usec="0"/>
    <to sec="1178341273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.15.6.226"/>
    </slice>
    <from sec="1178342057" usec="0"/>
    <to sec="1178342072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.129.27.228"/>
    </slice>
    <from sec="1178341372" usec="0"/>
    <to sec="1178341544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.165.194.229"/>
    </slice>
    <from sec="1178342024" usec="0"/>
    <to sec="1178342069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.138.69.231"/>
    </slice>
    <from sec="1178341405" usec="0"/>
    <to sec="1178341629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,010,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.32.75.231"/>
    </slice>
    <from sec="1178341204" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.155.20.232"/>
    </slice>
    <from sec="1178341781" usec="0"/>
    <to sec="1178341815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.14.229.234"/>
    </slice>
    <from sec="1178341249" usec="0"/>
    <to sec="1178341340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="46.208.90.235"/>
    </slice>
    <from sec="1178341770" usec="0"/>
    <to sec="1178341793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.52.62.237"/>
    </slice>
    <from sec="1178341433" usec="0"/>
    <to sec="1178341473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.153.222.243"/>
    </slice>
    <from sec="1178341273" usec="0"/>
    <to sec="1178342100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.229.19.244"/>
    </slice>
    <from sec="1178341673" usec="0"/>
    <to sec="1178341702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.40.95.244"/>
    </slice>
    <from sec="1178341900" usec="0"/>
    <to sec="1178341904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.120.134.244"/>
    </slice>
    <from sec="1178341335" usec="0"/>
    <to sec="1178341347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.82.151.244"/>
    </slice>
    <from sec="1178341434" usec="0"/>
    <to sec="1178341615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.145.128.245"/>
    </slice>
    <from sec="1178341580" usec="0"/>
    <to sec="1178341623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.1.17.248"/>
    </slice>
    <from sec="1178341583" usec="0"/>
    <to sec="1178341621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.12.32.250"/>
    </slice>
    <from sec="1178341658" usec="0"/>
    <to sec="1178341696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709089,2.74333,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.119.168.253"/>
    </slice>
    <from sec="1178341901" usec="0"/>
    <to sec="1178342019" usec="0"/>
  </anomaly>

</admd:annotation>
