<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.184.40.134" dst_port="80" proto="tcp" src_ip="149.197.227.22"/>
      <filter dst_ip="215.184.40.134" dst_port="80" proto="udp" src_ip="149.197.227.22"/>
      <filter dst_ip="215.184.40.134" dst_port="53" proto="tcp" src_ip="149.197.227.22"/>
      <filter dst_ip="215.184.40.134" dst_port="53" proto="udp" src_ip="149.197.227.22"/>
      <from sec="1183785082" usec="0"/>
      <to sec="1183785087" usec="0"/>
    </slice>
    <from sec="1183785082" usec="0"/>
    <to sec="1183785087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="145.84.98.38" src_port="52663"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="145.84.98.38" src_port="52663"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="145.84.98.38" src_port="52663"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="145.84.98.38" src_port="52663"/>
      <from sec="1183784452" usec="0"/>
      <to sec="1183785237" usec="0"/>
    </slice>
    <from sec="1183784452" usec="0"/>
    <to sec="1183785237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.84.128.174" dst_port="1127" proto="tcp" src_ip="1.216.26.41" src_port="80"/>
      <filter dst_ip="145.84.128.174" dst_port="1132" proto="tcp" src_ip="1.216.26.41" src_port="80"/>
      <from sec="1183785282" usec="0"/>
      <to sec="1183785300" usec="0"/>
    </slice>
    <from sec="1183785282" usec="0"/>
    <to sec="1183785301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.184.40.134" dst_port="22" proto="tcp" src_ip="215.21.30.43"/>
      <filter dst_ip="215.184.40.134" dst_port="22" proto="udp" src_ip="215.21.30.43"/>
      <filter dst_ip="215.184.40.134" dst_port="53" proto="tcp" src_ip="215.21.30.43"/>
      <filter dst_ip="215.184.40.134" dst_port="53" proto="udp" src_ip="215.21.30.43"/>
      <filter dst_ip="215.184.40.134" dst_port="80" proto="tcp" src_ip="215.21.30.43"/>
      <filter dst_ip="215.184.40.134" dst_port="80" proto="udp" src_ip="215.21.30.43"/>
      <from sec="1183784419" usec="0"/>
      <to sec="1183784607" usec="0"/>
    </slice>
    <from sec="1183784419" usec="0"/>
    <to sec="1183784607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.84.136.74" dst_port="1077" proto="tcp" src_ip="1.216.26.69" src_port="80"/>
      <filter dst_ip="145.84.136.74" dst_port="1077" proto="udp" src_ip="1.216.26.69" src_port="80"/>
      <filter dst_ip="145.84.136.74" dst_port="80" proto="tcp" src_ip="1.216.26.69" src_port="80"/>
      <filter dst_ip="145.84.136.74" dst_port="80" proto="udp" src_ip="1.216.26.69" src_port="80"/>
      <filter dst_ip="145.84.136.74" dst_port="53" proto="tcp" src_ip="1.216.26.69" src_port="80"/>
      <filter dst_ip="145.84.136.74" dst_port="53" proto="udp" src_ip="1.216.26.69" src_port="80"/>
      <from sec="1183785269" usec="0"/>
      <to sec="1183785276" usec="0"/>
    </slice>
    <from sec="1183785269" usec="0"/>
    <to sec="1183785276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.84.4.98" dst_port="1084" proto="tcp" src_ip="214.129.208.75" src_port="80"/>
      <filter dst_ip="145.84.4.98" dst_port="1084" proto="udp" src_ip="214.129.208.75" src_port="80"/>
      <filter dst_ip="145.84.4.98" dst_port="53" proto="tcp" src_ip="214.129.208.75" src_port="80"/>
      <filter dst_ip="145.84.4.98" dst_port="53" proto="udp" src_ip="214.129.208.75" src_port="80"/>
      <filter dst_ip="145.84.4.98" dst_port="80" proto="tcp" src_ip="214.129.208.75" src_port="80"/>
      <filter dst_ip="145.84.4.98" dst_port="80" proto="udp" src_ip="214.129.208.75" src_port="80"/>
      <from sec="1183785277" usec="0"/>
      <to sec="1183785278" usec="0"/>
    </slice>
    <from sec="1183785275" usec="0"/>
    <to sec="1183785281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="tcp" src_ip="145.84.209.77"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="udp" src_ip="145.84.209.77"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="145.84.209.77"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="145.84.209.77"/>
      <filter dst_ip="215.184.40.134" dst_port="80" proto="tcp" src_ip="145.84.209.77"/>
      <filter dst_ip="215.184.40.134" dst_port="80" proto="udp" src_ip="145.84.209.77"/>
      <filter dst_ip="215.184.40.134" dst_port="53" proto="tcp" src_ip="145.84.209.77"/>
      <filter dst_ip="215.184.40.134" dst_port="53" proto="udp" src_ip="145.84.209.77"/>
      <from sec="1183784888" usec="0"/>
      <to sec="1183785083" usec="0"/>
    </slice>
    <from sec="1183784888" usec="0"/>
    <to sec="1183785083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.206.74.36" dst_port="53" proto="tcp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="165.206.74.36" dst_port="53" proto="udp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="165.206.74.36" dst_port="80" proto="tcp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="165.206.74.36" dst_port="80" proto="udp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="204.183.83.88" src_port="80"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="204.183.83.88" src_port="80"/>
      <from sec="1183785225" usec="0"/>
      <to sec="1183785251" usec="0"/>
    </slice>
    <from sec="1183785225" usec="0"/>
    <to sec="1183785251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.148" dst_port="137" proto="tcp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.148" dst_port="137" proto="udp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.148" dst_port="137" proto="tcp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.148" dst_port="137" proto="udp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.152" dst_port="137" proto="tcp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.152" dst_port="137" proto="udp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.152" dst_port="53" proto="tcp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.152" dst_port="53" proto="udp" src_ip="78.31.37.181" src_port="1025"/>
      <filter dst_ip="214.162.2.152" dst_port="137" proto="tcp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.152" dst_port="137" proto="udp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.152" dst_port="53" proto="tcp" src_ip="78.31.37.181" src_port="1040"/>
      <filter dst_ip="214.162.2.152" dst_port="53" proto="udp" src_ip="78.31.37.181" src_port="1040"/>
      <from sec="1183784503" usec="0"/>
      <to sec="1183784517" usec="0"/>
    </slice>
    <from sec="1183784503" usec="0"/>
    <to sec="1183784517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.206.128.22" dst_port="53" proto="tcp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="165.206.128.22" dst_port="53" proto="udp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="165.206.128.22" dst_port="80" proto="tcp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="165.206.128.22" dst_port="80" proto="udp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="tcp" src_ip="72.12.78.192" src_port="80"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="udp" src_ip="72.12.78.192" src_port="80"/>
      <from sec="1183784437" usec="0"/>
      <to sec="1183784606" usec="0"/>
    </slice>
    <from sec="1183784437" usec="0"/>
    <to sec="1183784607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="145.84.74.193"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="145.84.74.193"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="145.84.74.193"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="145.84.74.193"/>
      <from sec="1183784635" usec="0"/>
      <to sec="1183784950" usec="0"/>
    </slice>
    <from sec="1183784635" usec="0"/>
    <to sec="1183784951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="145.84.192.223"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="145.84.192.223"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="tcp" src_ip="145.84.192.223"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="udp" src_ip="145.84.192.223"/>
      <from sec="1183784631" usec="0"/>
      <to sec="1183785237" usec="0"/>
    </slice>
    <from sec="1183784631" usec="0"/>
    <to sec="1183785237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="72.214.156.29" dst_port="53" proto="tcp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="72.214.156.29" dst_port="53" proto="udp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="72.214.156.29" dst_port="80" proto="tcp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="72.214.156.29" dst_port="80" proto="udp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="145.84.218.224" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="145.84.218.224" src_port="39848"/>
      <from sec="1183785166" usec="0"/>
      <to sec="1183785167" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="72.214.156.29" dst_port="53" proto="tcp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="72.214.156.29" dst_port="53" proto="udp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="72.214.156.29" dst_port="80" proto="tcp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="72.214.156.29" dst_port="80" proto="udp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="149.197.226.197" src_port="39848"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="149.197.226.197" src_port="39848"/>
      <from sec="1183785164" usec="0"/>
      <to sec="1183785170" usec="0"/>
    </slice>
    <from sec="1183785164" usec="0"/>
    <to sec="1183785170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.6.17" proto="udp" src_ip="214.162.6.17"/>
      <filter dst_ip="214.162.6.17" proto="udp" src_ip="214.162.6.17"/>
      <filter dst_ip="214.162.6.17" proto="udp" src_ip="214.162.6.17"/>
      <filter dst_ip="214.162.6.17" proto="udp" src_ip="214.162.6.17"/>
      <from sec="1183784452" usec="0"/>
      <to sec="1183785295" usec="0"/>
    </slice>
    <from sec="1183784452" usec="0"/>
    <to sec="1183785295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="214.162.2.148"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="214.162.2.148"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="214.162.2.148"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="214.162.2.148"/>
      <from sec="1183784405" usec="0"/>
      <to sec="1183785301" usec="0"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="214.7.34.210"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="214.7.34.210"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="214.7.34.210"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="214.7.34.210"/>
      <from sec="1183784537" usec="0"/>
      <to sec="1183784543" usec="0"/>
    </slice>
    <from sec="1183784537" usec="0"/>
    <to sec="1183784543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="72.12.78.193" dst_port="80" proto="tcp" src_ip="165.206.144.211" src_port="80"/>
      <filter dst_ip="72.12.78.193" dst_port="80" proto="udp" src_ip="165.206.144.211" src_port="80"/>
      <filter dst_ip="72.12.78.193" dst_port="53" proto="tcp" src_ip="165.206.144.211" src_port="80"/>
      <filter dst_ip="72.12.78.193" dst_port="53" proto="udp" src_ip="165.206.144.211" src_port="80"/>
      <from sec="1183784523" usec="0"/>
      <to sec="1183784528" usec="0"/>
    </slice>
    <from sec="1183784523" usec="0"/>
    <to sec="1183784528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="tcp" src_ip="136.119.216.217"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="udp" src_ip="136.119.216.217"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="136.119.216.217"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="136.119.216.217"/>
      <from sec="1183784487" usec="0"/>
      <to sec="1183785236" usec="0"/>
    </slice>
    <from sec="1183784487" usec="0"/>
    <to sec="1183785236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.152" proto="udp" src_ip="214.162.2.152"/>
      <filter dst_ip="214.162.2.152" proto="udp" src_ip="214.162.2.152"/>
      <filter dst_ip="214.162.2.152" proto="udp" src_ip="214.162.2.152"/>
      <filter dst_ip="214.162.2.152" proto="udp" src_ip="214.162.2.152"/>
      <from sec="1183784452" usec="0"/>
      <to sec="1183785301" usec="0"/>
    </slice>
    <from sec="1183784452" usec="0"/>
    <to sec="1183785301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="165.206.36.119" dst_port="137" proto="tcp" src_ip="78.163.248.115" src_port="1025"/>
      <filter dst_ip="165.206.36.119" dst_port="137" proto="udp" src_ip="78.163.248.115" src_port="1025"/>
      <filter dst_ip="165.206.36.119" dst_port="3124" proto="tcp" src_ip="78.163.248.115" src_port="1025"/>
      <filter dst_ip="165.206.36.119" dst_port="3124" proto="udp" src_ip="78.163.248.115" src_port="1025"/>
      <from sec="1183785179" usec="0"/>
      <to sec="1183785193" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="165.206.36.119" dst_port="137" proto="tcp" src_ip="195.138.56.115" src_port="1025"/>
      <filter dst_ip="165.206.36.119" dst_port="137" proto="udp" src_ip="195.138.56.115" src_port="1025"/>
      <filter dst_ip="165.206.36.119" dst_port="3124" proto="tcp" src_ip="195.138.56.115" src_port="1025"/>
      <filter dst_ip="165.206.36.119" dst_port="3124" proto="udp" src_ip="195.138.56.115" src_port="1025"/>
      <from sec="1183785183" usec="0"/>
      <to sec="1183785193" usec="0"/>
    </slice>
    <from sec="1183785179" usec="0"/>
    <to sec="1183785193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="tcp" src_ip="193.242.16.194" src_port="1030"/>
      <filter dst_port="137" proto="udp" src_ip="193.242.16.194" src_port="1030"/>
      <filter dst_port="53" proto="tcp" src_ip="193.242.16.194" src_port="1030"/>
      <filter dst_port="53" proto="udp" src_ip="193.242.16.194" src_port="1030"/>
      <from sec="1183784533" usec="0"/>
      <to sec="1183784545" usec="0"/>
    </slice>
    <from sec="1183784533" usec="0"/>
    <to sec="1183784545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="tcp" src_ip="218.22.142.238" src_port="1029"/>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="udp" src_ip="218.22.142.238" src_port="1029"/>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="tcp" src_ip="218.22.142.238" src_port="22"/>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="udp" src_ip="218.22.142.238" src_port="22"/>
      <from sec="1183784472" usec="0"/>
      <to sec="1183784508" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="tcp" src_ip="149.216.78.238" src_port="1029"/>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="udp" src_ip="149.216.78.238" src_port="1029"/>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="tcp" src_ip="149.216.78.238" src_port="22"/>
      <filter dst_ip="197.85.141.111" dst_port="137" proto="udp" src_ip="149.216.78.238" src_port="22"/>
      <from sec="1183784472" usec="0"/>
      <to sec="1183784510" usec="0"/>
    </slice>
    <from sec="1183784472" usec="0"/>
    <to sec="1183784510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="tcp" src_ip="52.26.193.3"/>
      <filter dst_port="1026" proto="udp" src_ip="52.26.193.3"/>
      <from sec="1183784587" usec="0"/>
      <to sec="1183784588" usec="0"/>
    </slice>
    <from sec="1183784586" usec="0"/>
    <to sec="1183784589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="tcp" src_ip="106.11.40.32" src_port="80"/>
      <filter dst_port="1026" proto="udp" src_ip="106.11.40.32" src_port="80"/>
      <from sec="1183784623" usec="0"/>
      <to sec="1183784624" usec="0"/>
    </slice>
    <from sec="1183784623" usec="0"/>
    <to sec="1183784625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="78.160.138.113"/>
      <from sec="1183784805" usec="0"/>
      <to sec="1183784817" usec="0"/>
    </slice>
    <from sec="1183784805" usec="0"/>
    <to sec="1183784818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.84.213.249" dst_port="1026" proto="tcp" src_ip="79.148.1.139" src_port="80"/>
      <filter dst_ip="145.84.213.249" dst_port="1026" proto="udp" src_ip="79.148.1.139" src_port="80"/>
      <from sec="1183784587" usec="0"/>
      <to sec="1183784588" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="145.84.213.249" dst_port="1026" proto="tcp" src_ip="90.115.17.139" src_port="80"/>
      <filter dst_ip="145.84.213.249" dst_port="1026" proto="udp" src_ip="90.115.17.139" src_port="80"/>
      <from sec="1183784586" usec="0"/>
      <to sec="1183784590" usec="0"/>
    </slice>
    <from sec="1183784586" usec="0"/>
    <to sec="1183784590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.85.141.111" dst_port="139" proto="tcp" src_ip="214.174.132.176" src_port="22"/>
      <from sec="1183784987" usec="0"/>
      <to sec="1183785003" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="197.85.141.111" dst_port="139" proto="tcp" src_ip="149.216.64.176" src_port="22"/>
      <from sec="1183784986" usec="0"/>
      <to sec="1183785004" usec="0"/>
    </slice>
    <from sec="1183784986" usec="0"/>
    <to sec="1183785004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="149.197.226.195"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="149.197.226.195"/>
      <filter dst_ip="214.162.0.78" dst_port="25" proto="tcp" src_ip="149.197.226.195"/>
      <filter dst_ip="214.162.0.78" dst_port="25" proto="udp" src_ip="149.197.226.195"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="149.197.226.195"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="149.197.226.195"/>
      <from sec="1183784557" usec="0"/>
      <to sec="1183785170" usec="0"/>
    </slice>
    <from sec="1183784557" usec="0"/>
    <to sec="1183785170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="79.1.114.218"/>
      <from sec="1183784564" usec="0"/>
      <to sec="1183784565" usec="0"/>
    </slice>
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="76.201.80.200"/>
      <from sec="1183784564" usec="0"/>
      <to sec="1183784565" usec="0"/>
    </slice>
    <from sec="1183784564" usec="0"/>
    <to sec="1183784565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="tcp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.2.148" dst_port="53" proto="udp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="tcp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.2.148" dst_port="80" proto="udp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="145.84.151.145" src_port="50299"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="145.84.151.145" src_port="50299"/>
      <from sec="1183784557" usec="0"/>
      <to sec="1183784563" usec="0"/>
    </slice>
    <from sec="1183784557" usec="0"/>
    <to sec="1183784563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.903932,1.76567,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="tcp" src_ip="161.203.230.148" src_port="64498"/>
      <filter dst_ip="214.162.0.78" dst_port="53" proto="udp" src_ip="161.203.230.148" src_port="64498"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="tcp" src_ip="161.203.230.148" src_port="64498"/>
      <filter dst_ip="214.162.0.78" dst_port="80" proto="udp" src_ip="161.203.230.148" src_port="64498"/>
      <from sec="1183785164" usec="0"/>
      <to sec="1183785170" usec="0"/>
    </slice>
    <from sec="1183785164" usec="0"/>
    <to sec="1183785170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1168" usec="0"/>
    <to sec="1227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
374[label="214.105.101.219;d;30pkt 30fpkt", shape=diamond, color=yellow];
375[label="144.46.250.206;s;287pkt 287fpkt", shape=diamond, color=yellow];
1402[label="57.184.222.38;d;102pkt 102fpkt", shape=diamond, color=yellow];
2391[label="192.187.190.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.250.206:80, 57.184.222.38:*}[35.5401%]&lt;BR/&gt;{144.46.250.206:80, 72.101.73.27:*}[20.2091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0499%)&lt;BR/&gt; 1887: (0.356295%)&lt;BR/&gt; 1886: (0.356295%)&lt;BR/&gt; 58778: (0.23753%)&lt;BR/&gt; 55485: (0.23753%)&gt;];
}
374--375[label="1;30pkt 30fpkt"];
375--1402[label="1;102pkt 102fpkt"];
375--1977[label="0.0792683;13pkt 13fpkt"];
375--2391[label="1;2pkt 2fpkt"];
375--2656[label="0.95082;58pkt 58fpkt"];
375--3936[label="0.075;3pkt 3fpkt"];
375--4697[label="0.0775194;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="57.184.222.38" src_ip="144.46.250.206" src_port="80"/>
      <filter dst_ip="72.101.73.27" src_ip="144.46.250.206" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
481[label="193.206.86.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
482[label="149.216.103.172;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.103.172:1110, 193.206.86.74:11000}[33.3333%]&lt;BR/&gt;{149.216.103.172:1274, 207.110.15.102:5004}[33.3333%]&lt;BR/&gt;{149.216.103.172:1192, 215.234.81.146:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11000: (25%)&lt;BR/&gt; 1110: (25%)&lt;BR/&gt; 5004: (12.5%)&lt;BR/&gt; 1274: (12.5%)&lt;BR/&gt; 1192: (12.5%)&gt;];
}
481--482[label="1;1pkt 1fpkt"];
482--1349[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.234.81.146" dst_port="80" src_ip="149.216.103.172" src_port="1192"/>
      <filter dst_ip="207.110.15.102" dst_port="5004" src_ip="149.216.103.172" src_port="1274"/>
      <filter dst_ip="193.206.86.74" dst_port="11000" src_ip="149.216.103.172" src_port="1110"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
484[label="0.41.227.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
485[label="214.7.142.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
4668[label="214.7.142.156;d;1pkt 1fpkt", shape=hexagon, color=black];
5126[label="0.41.227.148;s;1pkt 1fpkt", shape=hexagon, color=black];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.207.51.34:0, 214.7.142.156:0}[50%]&lt;BR/&gt;{0.41.227.148:12250, 214.7.142.156:1341}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12250: (40%)&lt;BR/&gt; 1341: (40%)&lt;BR/&gt; 0: (20%)&gt;];
}
484--485[label="1;1pkt 1fpkt"];
484--4668[label="1;1pkt 1fpkt"];
484--5126[label="1;1pkt 1fpkt"];
485--4668[label="1;1pkt 1fpkt"];
485--5126[label="1;1pkt 1fpkt"];
4668--5126[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.142.156" dst_port="1341" src_ip="0.41.227.148" src_port="12250"/>
      <filter dst_ip="214.7.142.156" src_ip="6.207.51.34"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
491[label="165.206.5.3;d;3pkt 3fpkt", shape=diamond, color=yellow];
492[label="220.223.15.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.223.15.24:30000, 165.206.5.3:49899}[33.3333%]&lt;BR/&gt;{90.115.84.198:80, 165.206.5.3:52168}[33.3333%]&lt;BR/&gt;{90.115.84.203:80, 165.206.5.3:52169}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49899: (25%)&lt;BR/&gt; 30000: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 52169: (12.5%)&lt;BR/&gt; 52168: (12.5%)&gt;];
}
491--492[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.5.3" dst_port="52169" src_ip="90.115.84.203" src_port="80"/>
      <filter dst_ip="165.206.5.3" dst_port="52168" src_ip="90.115.84.198" src_port="80"/>
      <filter dst_ip="165.206.5.3" dst_port="49899" src_ip="220.223.15.24" src_port="30000"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
46[label="136.119.211.107s;1pkt 1fpkt", shape=rectangle, color=red];
496[label="163.171.255.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
4317[label="163.171.255.104;d;1pkt 1fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.211.107:55713, 163.171.255.104:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55713: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
46--496[label="1;1pkt 1fpkt"];
46--1957[label="1;1pkt 1fpkt"];
46--4317[label="1;1pkt 1fpkt"];
496--1957[label="1;1pkt 1fpkt"];
496--4317[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.171.255.104" dst_port="25" src_ip="136.119.211.107" src_port="55713"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784409" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
504[label="196.97.22.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
505[label="149.216.96.248;s;2pkt 2fpkt", shape=diamond, color=yellow];
4213[label="196.97.22.99;d;1pkt 1fpkt", shape=hexagon, color=black];
4319[label="149.216.96.248;s;1pkt 1fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.96.248:2782, 193.207.71.98:80}[50%]&lt;BR/&gt;{149.216.96.248:2756, 196.97.22.99:5090}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5090: (40%)&lt;BR/&gt; 2756: (40%)&lt;BR/&gt; 2782: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
504--505[label="1;1pkt 1fpkt"];
504--4213[label="1;1pkt 1fpkt"];
504--4319[label="1;1pkt 1fpkt"];
505--4213[label="1;1pkt 1fpkt"];
505--4319[label="1;1pkt 1fpkt"];
4213--4319[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.97.22.99" dst_port="5090" src_ip="149.216.96.248" src_port="2756"/>
      <filter dst_ip="193.207.71.98" dst_port="80" src_ip="149.216.96.248" src_port="2782"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
519[label="198.9.153.92;s;4pkt 4fpkt", shape=diamond, color=yellow];
520[label="145.84.101.2;d;10pkt 10fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.9.153.92:80, 145.84.101.2:*}[40%]&lt;BR/&gt;{198.9.153.81:80, 145.84.101.2:*}[20%]&lt;BR/&gt;{198.9.153.98:80, 145.84.101.2:*}[20%]&lt;BR/&gt;{198.9.153.109:80, 145.84.101.2:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1170: (7.14286%)&lt;BR/&gt; 1169: (7.14286%)&lt;BR/&gt; 1163: (7.14286%)&lt;BR/&gt; 1161: (7.14286%)&gt;];
}
519--520[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.101.2" src_ip="198.9.153.92" src_port="80"/>
      <filter dst_ip="145.84.101.2" src_ip="198.9.153.109" src_port="80"/>
      <filter dst_ip="145.84.101.2" src_ip="198.9.153.98" src_port="80"/>
      <filter dst_ip="145.84.101.2" src_ip="198.9.153.81" src_port="80"/>
    </slice>
    <from sec="1183784959" usec="0"/>
    <to sec="1183785225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
529[label="167.82.131.148;d;6pkt 6fpkt", shape=diamond, color=yellow];
530[label="207.137.167.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
5143[label="167.82.131.148;d;5pkt 5fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.64.45.128:80, 167.82.131.148:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 123: (16.6667%)&lt;BR/&gt; 3266: (12.5%)&lt;BR/&gt; 3281: (8.33333%)&lt;BR/&gt; 3168: (8.33333%)&gt;];
}
529--530[label="1;1pkt 1fpkt"];
529--5143[label="1;5pkt 5fpkt"];
530--5143[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.131.148" src_ip="198.64.45.128" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.90779,1.71065,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
37[label="136.119.1.92s;2pkt 2fpkt", shape=rectangle, color=red];
553[label="215.40.209.185;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.1.92:2212, 215.40.209.189:554}[20%]&lt;BR/&gt;{136.119.1.92:2251, 215.40.209.185:554}[20%]&lt;BR/&gt;{136.119.1.92:2255, 215.40.209.185:554}[20%]&lt;BR/&gt;{136.119.1.92:2257, 215.40.209.185:554}[20%]&lt;BR/&gt;{136.119.1.92:2260, 215.40.209.185:554}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 2260: (16.6667%)&lt;BR/&gt; 2257: (8.33333%)&lt;BR/&gt; 2255: (8.33333%)&lt;BR/&gt; 2251: (8.33333%)&gt;];
}
37--553[label="0.5;1pkt 1fpkt"];
37--554[label="1;2pkt 2fpkt"];
37--2341[label="0.5;1pkt 1fpkt"];
37--5401[label="0.5;1pkt 1fpkt"];
553--554[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.209.185" dst_port="554" src_ip="136.119.1.92" src_port="2260"/>
      <filter dst_ip="215.40.209.185" dst_port="554" src_ip="136.119.1.92" src_port="2257"/>
      <filter dst_ip="215.40.209.185" dst_port="554" src_ip="136.119.1.92" src_port="2255"/>
      <filter dst_ip="215.40.209.185" dst_port="554" src_ip="136.119.1.92" src_port="2251"/>
      <filter dst_ip="215.40.209.189" dst_port="554" src_ip="136.119.1.92" src_port="2212"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
637[label="1.216.24.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
638[label="149.216.246.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
4732[label="149.216.246.245;s;1pkt 1fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.246.245:1122, 1.216.24.45:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1122: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
637--638[label="1;1pkt 1fpkt"];
637--4732[label="1;1pkt 1fpkt"];
638--4732[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.216.24.45" dst_port="554" src_ip="149.216.246.245" src_port="1122"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
639[label="165.206.36.43;d;160pkt 160fpkt", shape=diamond, color=yellow];
640[label="207.193.41.204;s;159pkt 159fpkt", shape=diamond, color=yellow];
4237[label="207.193.41.204;s;159pkt 159fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.193.41.204:*, 165.206.36.43:*}[99.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (3.45188%)&lt;BR/&gt; 49468: (0.627615%)&lt;BR/&gt; 64201: (0.313808%)&lt;BR/&gt; 63923: (0.313808%)&lt;BR/&gt; 63709: (0.313808%)&gt;];
}
639--640[label="1;159pkt 159fpkt"];
639--4237[label="1;159pkt 159fpkt"];
640--4237[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.36.43" src_ip="207.193.41.204"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
50[label="149.216.132.110s;1pkt 1fpkt", shape=rectangle, color=red];
646[label="215.48.7.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
647[label="149.216.132.110;s;6pkt 6fpkt", shape=diamond, color=yellow];
831[label="215.48.7.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
853[label="215.48.7.4;d;3pkt 3fpkt", shape=diamond, color=yellow];
4269[label="215.48.7.202;d;1pkt 1fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.132.110:*, 215.48.7.4:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1056: (11.5385%)&lt;BR/&gt; 1070: (7.69231%)&lt;BR/&gt; 1067: (7.69231%)&lt;BR/&gt; 1061: (7.69231%)&gt;];
}
50--647[label="1;1pkt 1fpkt"];
646--647[label="1;1pkt 1fpkt"];
647--831[label="1;1pkt 1fpkt"];
647--853[label="1;3pkt 3fpkt"];
647--4269[label="1;1pkt 1fpkt"];
831--4269[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.48.7.4" dst_port="80" src_ip="149.216.132.110"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
2675[label="11.80.14.148;s;229pkt 229fpkt", shape=diamond, color=yellow];
5056[label="11.80.14.148;s;139pkt 139fpkt", shape=hexagon, color=black];
6691[label="11.80.14.148;228pkt 228fpkt", shape=pentagon, color=darkviolet];
7331[label="11.80.14.148;228pkt 228fpkt", shape=invtriangle, color=brown];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{11.80.14.148:*, 215.184.42.145:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4103: (0.242718%)&lt;BR/&gt; 4102: (0.242718%)&lt;BR/&gt; 4101: (0.242718%)&lt;BR/&gt; 4100: (0.242718%)&gt;];
}
2675--5056[label="1;139pkt 139fpkt"];
2675--6691[label="1;228pkt 228fpkt"];
2675--7331[label="1;228pkt 228fpkt"];
5056--6691[label="0.992806;138pkt 138fpkt"];
5056--7331[label="0.992806;138pkt 138fpkt"];
6691--7331[label="1;228pkt 228fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.42.145" dst_port="3127" src_ip="11.80.14.148"/>
    </slice>
    <from sec="1183784684" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="145.84.97.11"/>
      <from sec="1183784401" usec="0"/>
      <to sec="1183784544" usec="0"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183784544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
802[label="206.45.230.59;d;27pkt 27fpkt", shape=diamond, color=yellow];
803[label="145.84.88.172;s;29pkt 29fpkt", shape=diamond, color=yellow];
4394[label="206.45.230.59;d;27pkt 27fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.88.172:*, 206.45.230.59:80}[58.6207%]&lt;BR/&gt;{145.84.88.172:*, 206.45.230.59:443}[34.4828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.7229%)&lt;BR/&gt; 443: (19.2771%)&lt;BR/&gt; 3996: (1.80723%)&lt;BR/&gt; 3995: (1.80723%)&lt;BR/&gt; 3994: (1.80723%)&gt;];
}
802--803[label="1;27pkt 27fpkt"];
802--4394[label="1;27pkt 27fpkt"];
803--4394[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="206.45.230.59" dst_port="80" src_ip="145.84.88.172"/>
      <filter dst_ip="206.45.230.59" dst_port="443" src_ip="145.84.88.172"/>
    </slice>
    <from sec="1183784410" usec="0"/>
    <to sec="1183784547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
825[label="214.10.197.234;s;2pkt 2fpkt", shape=diamond, color=yellow];
826[label="49.18.0.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
4268[label="49.18.0.11;d;1pkt 1fpkt", shape=hexagon, color=black];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.10.197.234:1122, 49.18.0.11:80}[50%]&lt;BR/&gt;{214.10.197.234:138, 214.10.197.237:138}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1122: (37.5%)&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 138: (25%)&gt;];
}
825--826[label="1;1pkt 1fpkt"];
825--4268[label="1;1pkt 1fpkt"];
826--4268[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.197.237" dst_port="138" src_ip="214.10.197.234" src_port="138"/>
      <filter dst_ip="49.18.0.11" dst_port="80" src_ip="214.10.197.234" src_port="1122"/>
    </slice>
    <from sec="1183784422" usec="0"/>
    <to sec="1183784648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
824[label="214.10.197.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
827[label="49.18.0.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.18.0.11:80, 214.10.197.234:1122}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1122: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
824--827[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.197.234" dst_port="1122" src_ip="49.18.0.11" src_port="80"/>
    </slice>
    <from sec="1183784422" usec="0"/>
    <to sec="1183784648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
108[label="7.68.125.11s;254pkt 254fpkt", shape=rectangle, color=red];
765[label="206.206.240.0;s;12pkt 12fpkt", shape=diamond, color=yellow];
838[label="145.84.168.49;d;9pkt 9fpkt", shape=diamond, color=yellow];
1247[label="206.206.252.48;s;80pkt 80fpkt", shape=diamond, color=yellow];
1796[label="7.68.125.11;s;254pkt 254fpkt", shape=diamond, color=yellow];
4406[label="145.84.168.49;d;9pkt 9fpkt", shape=hexagon, color=black];
4537[label="165.206.148.178;d;87pkt 87fpkt", shape=hexagon, color=black];
5266[label="145.84.168.11;d;73pkt 73fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.68.125.11:*, *:25}[50.0986%]&lt;BR/&gt;{*:80, *:*}[35.7002%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (37.018%)&lt;BR/&gt; 80: (12.5321%)&lt;BR/&gt; 113: (0.321337%)&lt;BR/&gt; 4538: (0.257069%)&lt;BR/&gt; 4584: (0.192802%)&gt;];
}
108--838[label="0.111111;1pkt 1fpkt"];
108--1604[label="0.00549451;1pkt 1fpkt"];
108--1796[label="1;254pkt 254fpkt"];
108--2149[label="0.00393701;1pkt 1fpkt"];
108--2537[label="0.00961538;1pkt 1fpkt"];
108--4406[label="0.111111;1pkt 1fpkt"];
108--5266[label="0.0136986;1pkt 1fpkt"];
765--838[label="0.222222;2pkt 2fpkt"];
765--4162[label="0.416667;5pkt 5fpkt"];
765--4406[label="0.222222;2pkt 2fpkt"];
765--5800[label="0.416667;5pkt 5fpkt"];
838--1247[label="0.111111;1pkt 1fpkt"];
838--1796[label="0.111111;1pkt 1fpkt"];
838--2557[label="0.222222;2pkt 2fpkt"];
838--4370[label="0.111111;1pkt 1fpkt"];
838--4380[label="0.111111;1pkt 1fpkt"];
838--4406[label="1;9pkt 9fpkt"];
1247--1332[label="0.0377358;2pkt 2fpkt"];
1247--3288[label="0.0375;3pkt 3fpkt"];
1247--4162[label="0.0125;1pkt 1fpkt"];
1247--4380[label="1;74pkt 74fpkt"];
1247--4406[label="0.111111;1pkt 1fpkt"];
1247--4474[label="0.85;68pkt 68fpkt"];
1247--4537[label="0.0375;3pkt 3fpkt"];
1247--5510[label="0.0125;1pkt 1fpkt"];
1247--5800[label="0.0125;1pkt 1fpkt"];
1796--2149[label="0.00393701;1pkt 1fpkt"];
1796--2537[label="0.00961538;1pkt 1fpkt"];
1796--4406[label="0.111111;1pkt 1fpkt"];
1796--5266[label="0.0136986;1pkt 1fpkt"];
4537--4741[label="0.0229885;2pkt 2fpkt"];
4537--4789[label="0.0166667;1pkt 1fpkt"];
4537--5320[label="0.0229885;2pkt 2fpkt"];
4537--5619[label="0.0547945;4pkt 4fpkt"];
4537--5627[label="0.0454545;2pkt 2fpkt"];
5266--5890[label="0.0273973;2pkt 2fpkt"];
5266--5908[label="0.191781;14pkt 14fpkt"];
5266--5911[label="0.178082;13pkt 13fpkt"];
5266--5923[label="0.0273973;2pkt 2fpkt"];
5266--5944[label="0.0273973;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_port="25" src_ip="7.68.125.11"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183785223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.217.85.179"/>
      <from sec="1183784451" usec="0"/>
      <to sec="1183784462" usec="0"/>
    </slice>
    <from sec="1183784451" usec="0"/>
    <to sec="1183784462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
271[label="72.193.170.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
925[label="136.119.63.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.63.193:31030, 72.193.170.139:33293}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33293: (50%)&lt;BR/&gt; 31030: (50%)&gt;];
}
271--925[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.193.170.139" dst_port="33293" src_ip="136.119.63.193" src_port="31030"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994585,1.65517,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
25[label="134.201.52.62s;2pkt 2fpkt", shape=rectangle, color=red];
948[label="38.75.197.232;d;57pkt 57fpkt", shape=diamond, color=yellow];
949[label="134.201.52.62;s;59pkt 59fpkt", shape=diamond, color=yellow];
3201[label="36.5.131.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
4297[label="134.201.52.62;s;42pkt 42fpkt", shape=hexagon, color=black];
6310[label="134.201.52.62;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.52.62:*, 38.75.197.232:12043}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12043: (46.0177%)&lt;BR/&gt; 12035: (2.21239%)&lt;BR/&gt; 1067: (1.99115%)&lt;BR/&gt; 1048: (1.99115%)&lt;BR/&gt; 12036: (1.76991%)&gt;];
}
25--948[label="1;2pkt 2fpkt"];
25--949[label="1;2pkt 2fpkt"];
25--4297[label="1;2pkt 2fpkt"];
25--6310[label="1;2pkt 2fpkt"];
948--949[label="1;57pkt 57fpkt"];
948--4297[label="0.952381;40pkt 40fpkt"];
948--6310[label="1;57pkt 57fpkt"];
949--3201[label="1;2pkt 2fpkt"];
949--4297[label="1;42pkt 42fpkt"];
949--6310[label="1;59pkt 59fpkt"];
3201--4297[label="1;2pkt 2fpkt"];
3201--6310[label="1;2pkt 2fpkt"];
4297--6310[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="38.75.197.232" dst_port="12043" src_ip="134.201.52.62"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
404[label="207.166.189.148;d;4pkt 4fpkt", shape=diamond, color=yellow];
964[label="145.84.210.156;s;5pkt 5fpkt", shape=diamond, color=yellow];
4305[label="145.84.210.156;s;5pkt 5fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.210.156:80, 42.131.27.186:55370}[20%]&lt;BR/&gt;{145.84.210.156:80, 207.166.189.148:6204}[20%]&lt;BR/&gt;{145.84.210.156:80, 207.166.189.148:35628}[20%]&lt;BR/&gt;{145.84.210.156:80, 207.166.189.148:39821}[20%]&lt;BR/&gt;{145.84.210.156:80, 207.166.189.148:61725}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61725: (10.7143%)&lt;BR/&gt; 39821: (10.7143%)&lt;BR/&gt; 35628: (10.7143%)&lt;BR/&gt; 6204: (10.7143%)&gt;];
}
404--964[label="1;4pkt 4fpkt"];
404--4305[label="1;4pkt 4fpkt"];
964--4305[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="207.166.189.148" dst_port="61725" src_ip="145.84.210.156" src_port="80"/>
      <filter dst_ip="207.166.189.148" dst_port="39821" src_ip="145.84.210.156" src_port="80"/>
      <filter dst_ip="207.166.189.148" dst_port="35628" src_ip="145.84.210.156" src_port="80"/>
      <filter dst_ip="207.166.189.148" dst_port="6204" src_ip="145.84.210.156" src_port="80"/>
      <filter dst_ip="42.131.27.186" dst_port="55370" src_ip="145.84.210.156" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,501,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
286[label="215.184.52.94;s;1029pkt 1029fpkt", shape=diamond, color=yellow];
372[label="37.125.59.28;d;421pkt 421fpkt", shape=diamond, color=yellow];
1001[label="37.52.6.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
1033[label="37.48.211.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
3569[label="37.117.182.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
3872[label="37.6.199.206;d;33pkt 33fpkt", shape=diamond, color=yellow];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.52.94:*, 37.125.59.30:21}[41.0107%]&lt;BR/&gt;{215.184.52.94:*, 37.125.59.28:21}[40.9135%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (46.2315%)&lt;BR/&gt; 22: (3.70121%)&lt;BR/&gt; 0: (0.13459%)&lt;BR/&gt; 60540: (0.0672948%)&lt;BR/&gt; 60535: (0.0672948%)&gt;];
}
286--287[label="1;422pkt 422fpkt"];
286--372[label="1;421pkt 421fpkt"];
286--381[label="0.298701;46pkt 46fpkt"];
286--494[label="1;1pkt 1fpkt"];
286--578[label="1;1pkt 1fpkt"];
286--922[label="0.0779537;64pkt 64fpkt"];
286--1001[label="1;1pkt 1fpkt"];
286--1033[label="1;1pkt 1fpkt"];
286--1038[label="1;1pkt 1fpkt"];
286--1064[label="1;1pkt 1fpkt"];
286--3569[label="1;1pkt 1fpkt"];
286--3872[label="1;33pkt 33fpkt"];
286--4178[label="1;287pkt 287fpkt"];
286--4286[label="0.0636095;43pkt 43fpkt"];
286--4673[label="1;1pkt 1fpkt"];
286--4941[label="1;1pkt 1fpkt"];
286--5498[label="1;1pkt 1fpkt"];
286--5504[label="1;1pkt 1fpkt"];
286--5801[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="37.125.59.30" dst_port="21" src_ip="215.184.52.94"/>
      <filter dst_ip="37.125.59.28" dst_port="21" src_ip="215.184.52.94"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
227[label="165.206.145.37;d;59pkt 59fpkt", shape=diamond, color=yellow];
228[label="73.62.187.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
1044[label="197.18.126.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
6197[label="79.118.194.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6522[label="73.183.26.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53124, 165.206.145.37:53124}[45.7627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53124: (65.873%)&lt;BR/&gt; 80: (6.34921%)&lt;BR/&gt; 53125: (2.38095%)&lt;BR/&gt; 35328: (1.5873%)&lt;BR/&gt; 55991: (0.793651%)&gt;];
}
227--228[label="1;1pkt 1fpkt"];
227--1044[label="1;1pkt 1fpkt"];
227--6197[label="1;1pkt 1fpkt"];
227--6522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.145.37" dst_port="53124" src_port="53124"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
435[label="149.2.160.73;d;1294pkt 1294fpkt", shape=diamond, color=yellow];
1659[label="1.108.235.2;s;131pkt 131fpkt", shape=diamond, color=yellow];
2533[label="201.81.206.173;s;7pkt 7fpkt", shape=diamond, color=yellow];
2847[label="40.64.181.254;s;96pkt 96fpkt", shape=diamond, color=yellow];
4000[label="52.194.74.68;s;86pkt 86fpkt", shape=diamond, color=yellow];
4468[label="149.2.160.73;d;860pkt 860fpkt", shape=hexagon, color=black];
5217[label="40.64.181.254;s;92pkt 92fpkt", shape=hexagon, color=black];
6636[label="72.59.101.134;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6647[label="37.78.104.137;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6792[label="201.81.206.173;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7076[label="40.64.181.254;95pkt 95fpkt", shape=pentagon, color=darkviolet];
7368[label="201.81.206.173;7pkt 7fpkt", shape=invtriangle, color=brown];
7480[label="40.64.181.254;95pkt 95fpkt", shape=invtriangle, color=brown];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.2.160.73:*}[99.462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2406: (9.98568%)&lt;BR/&gt; 2650: (6.96135%)&lt;BR/&gt; 80: (5.52971%)&lt;BR/&gt; 8080: (4.09807%)&lt;BR/&gt; 2475: (3.5612%)&gt;];
}
435--473[label="0.00534759;1pkt 1fpkt"];
435--1070[label="0.0224719;2pkt 2fpkt"];
435--1228[label="0.0714286;2pkt 2fpkt"];
435--1659[label="0.984733;129pkt 129fpkt"];
435--2533[label="0.428571;3pkt 3fpkt"];
435--2832[label="0.0833333;2pkt 2fpkt"];
435--2847[label="1;96pkt 96fpkt"];
435--3302[label="0.979592;96pkt 96fpkt"];
435--3540[label="0.0555556;1pkt 1fpkt"];
435--4000[label="1;86pkt 86fpkt"];
435--4468[label="1;860pkt 860fpkt"];
435--5217[label="1;92pkt 92fpkt"];
435--6045[label="0.00529101;1pkt 1fpkt"];
435--6224[label="0.05;1pkt 1fpkt"];
435--6636[label="1;18pkt 18fpkt"];
435--6647[label="0.833333;5pkt 5fpkt"];
435--6792[label="0.428571;3pkt 3fpkt"];
435--6801[label="0.423077;11pkt 11fpkt"];
435--7076[label="1;95pkt 95fpkt"];
435--7368[label="0.428571;3pkt 3fpkt"];
435--7480[label="1;95pkt 95fpkt"];
1659--4468[label="0.984733;129pkt 129fpkt"];
1659--5910[label="0.0152672;2pkt 2fpkt"];
1659--5939[label="0.0152672;2pkt 2fpkt"];
1659--5960[label="0.0152672;2pkt 2fpkt"];
2533--4468[label="0.285714;2pkt 2fpkt"];
2533--4521[label="0.142857;1pkt 1fpkt"];
2533--5913[label="0.142857;1pkt 1fpkt"];
2533--6792[label="1;7pkt 7fpkt"];
2533--7368[label="1;7pkt 7fpkt"];
2847--4468[label="0.854167;82pkt 82fpkt"];
2847--5217[label="1;92pkt 92fpkt"];
2847--7076[label="1;95pkt 95fpkt"];
2847--7480[label="1;95pkt 95fpkt"];
4000--4468[label="0.313953;27pkt 27fpkt"];
4468--5217[label="0.891304;82pkt 82fpkt"];
4468--6224[label="0.05;1pkt 1fpkt"];
4468--6636[label="1;18pkt 18fpkt"];
4468--6647[label="0.833333;5pkt 5fpkt"];
4468--6792[label="0.285714;2pkt 2fpkt"];
4468--6801[label="0.115385;3pkt 3fpkt"];
4468--7076[label="0.852632;81pkt 81fpkt"];
4468--7368[label="0.285714;2pkt 2fpkt"];
4468--7480[label="0.852632;81pkt 81fpkt"];
5217--7076[label="0.98913;91pkt 91fpkt"];
5217--7480[label="0.98913;91pkt 91fpkt"];
6792--7368[label="1;7pkt 7fpkt"];
7076--7480[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="149.2.160.73"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
1078[label="167.82.102.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
1079[label="194.117.149.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
4705[label="167.82.102.171;s;1pkt 1fpkt", shape=hexagon, color=black];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.82.102.171:1027, 194.117.149.178:21098}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21098: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
1078--1079[label="1;1pkt 1fpkt"];
1078--4705[label="1;1pkt 1fpkt"];
1079--4705[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.117.149.178" dst_port="21098" src_ip="167.82.102.171" src_port="1027"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.10.197.181"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="6.207.202.57"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183784854" usec="0"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
1109[label="149.197.248.90;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.248.90:80, 39.145.136.154:*}[33.3333%]&lt;BR/&gt;{149.197.248.90:*, *:8083}[33.3333%]&lt;BR/&gt;{149.197.248.90:*, 220.143.244.210:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8083: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 33027: (8.33333%)&lt;BR/&gt; 32927: (8.33333%)&gt;];
}
1109--3360[label="0.333333;2pkt 2fpkt"];
1109--4726[label="1;2pkt 2fpkt"];
1109--4727[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="220.143.244.210" src_ip="149.197.248.90"/>
      <filter dst_port="8083" src_ip="149.197.248.90"/>
      <filter dst_ip="39.145.136.154" src_ip="149.197.248.90" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
1145[label="149.38.149.54;s;386pkt 386fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.38.149.54:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1145--3215[label="0.00299401;1pkt 1fpkt"];
1145--3886[label="0.00411523;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.38.149.54"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1176[label="79.9.79.51;d;163pkt 163fpkt", shape=diamond, color=yellow];
1177[label="144.46.250.201;s;397pkt 397fpkt", shape=diamond, color=yellow];
4752[label="79.9.79.51;d;163pkt 163fpkt", shape=hexagon, color=black];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.250.201:80, 79.9.79.51:*}[41.9598%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1735: (0.276625%)&lt;BR/&gt; 1861: (0.207469%)&lt;BR/&gt; 1860: (0.207469%)&lt;BR/&gt; 1859: (0.207469%)&gt;];
}
1176--1177[label="0.993865;162pkt 162fpkt"];
1176--1685[label="0.00970874;1pkt 1fpkt"];
1176--4752[label="1;163pkt 163fpkt"];
1176--5274[label="0.00970874;1pkt 1fpkt"];
1177--4752[label="0.993865;162pkt 162fpkt"];
4752--5274[label="0.00970874;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="79.9.79.51" src_ip="144.46.250.201" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
879[label="38.178.207.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.58.52:49376, 38.178.207.129:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49376: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="38.178.207.129" dst_port="80" src_ip="214.7.58.52" src_port="49376"/>
    </slice>
    <from sec="1183784462" usec="0"/>
    <to sec="1183784507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
554[label="136.119.1.92;s;16pkt 16fpkt", shape=diamond, color=yellow];
1357[label="215.40.209.216;d;7pkt 7fpkt", shape=diamond, color=yellow];
4569[label="215.40.209.216;d;7pkt 7fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.1.92:*, 215.40.209.185:554}[26.3158%]&lt;BR/&gt;{136.119.1.92:*, 215.40.209.189:554}[21.0526%]&lt;BR/&gt;{136.119.1.92:*, 215.40.209.216:554}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (41.6667%)&lt;BR/&gt; 2175: (5%)&lt;BR/&gt; 2172: (5%)&lt;BR/&gt; 2170: (5%)&lt;BR/&gt; 2166: (5%)&gt;];
}
554--1357[label="0.571429;4pkt 4fpkt"];
554--2341[label="1;4pkt 4fpkt"];
554--4569[label="0.571429;4pkt 4fpkt"];
554--5401[label="1;4pkt 4fpkt"];
554--5891[label="0.0625;1pkt 1fpkt"];
554--5910[label="0.0625;1pkt 1fpkt"];
554--5924[label="0.0625;1pkt 1fpkt"];
554--5939[label="0.0625;1pkt 1fpkt"];
554--5945[label="0.0625;1pkt 1fpkt"];
554--5960[label="0.0625;1pkt 1fpkt"];
1357--4569[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.209.216" dst_port="554" src_ip="136.119.1.92"/>
      <filter dst_ip="215.40.209.185" dst_port="554" src_ip="136.119.1.92"/>
      <filter dst_ip="215.40.209.189" dst_port="554" src_ip="136.119.1.92"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.105.101.92"/>
      <from sec="1183784456" usec="0"/>
      <to sec="1183784578" usec="0"/>
    </slice>
    <from sec="1183784456" usec="0"/>
    <to sec="1183784578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
67[label="145.84.102.146s;1pkt 1fpkt", shape=rectangle, color=red];
1486[label="38.178.197.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
4438[label="38.178.197.12;d;1pkt 1fpkt", shape=hexagon, color=black];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.102.146:35965, 38.178.197.12:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35965: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
67--159[label="1;1pkt 1fpkt"];
67--407[label="1;1pkt 1fpkt"];
67--1486[label="1;1pkt 1fpkt"];
67--4438[label="1;1pkt 1fpkt"];
1486--4438[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.178.197.12" dst_port="80" src_ip="145.84.102.146" src_port="35965"/>
    </slice>
    <from sec="1183784433" usec="0"/>
    <to sec="1183785291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.197.229.56"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
951[label="205.72.53.3;d;7pkt 7fpkt", shape=diamond, color=yellow];
1517[label="161.203.195.241;s;6pkt 6fpkt", shape=diamond, color=yellow];
2045[label="161.203.168.132;s;4pkt 4fpkt", shape=diamond, color=yellow];
2930[label="161.203.248.20;s;2pkt 2fpkt", shape=diamond, color=yellow];
5488[label="205.72.53.3;d;7pkt 7fpkt", shape=hexagon, color=black];
7040[label="161.203.195.241;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.168.132:*, *:*}[28.5714%]&lt;BR/&gt;{161.203.195.241:*, 205.72.53.3:6667}[21.4286%]&lt;BR/&gt;{*:*, *:5050}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (42.1875%)&lt;BR/&gt; 47444: (6.25%)&lt;BR/&gt; 44936: (6.25%)&lt;BR/&gt; 34105: (6.25%)&lt;BR/&gt; 0: (6.25%)&gt;];
}
951--1517[label="0.5;3pkt 3fpkt"];
951--1950[label="0.142857;1pkt 1fpkt"];
951--2045[label="0.25;1pkt 1fpkt"];
951--2930[label="0.5;1pkt 1fpkt"];
951--5488[label="1;7pkt 7fpkt"];
951--7040[label="0.5;3pkt 3fpkt"];
1517--2464[label="0.333333;2pkt 2fpkt"];
1517--5488[label="0.5;3pkt 3fpkt"];
1517--7040[label="1;6pkt 6fpkt"];
2045--3579[label="0.5;2pkt 2fpkt"];
2045--5488[label="0.25;1pkt 1fpkt"];
2930--5488[label="0.5;1pkt 1fpkt"];
5488--7040[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="161.203.168.132"/>
      <filter dst_port="5050"/>
      <filter dst_ip="205.72.53.3" dst_port="6667" src_ip="161.203.195.241"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
1535[label="0.41.227.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
1536[label="165.206.145.66;d;12pkt 12fpkt", shape=diamond, color=yellow];
4659[label="165.206.145.66;d;11pkt 11fpkt", shape=hexagon, color=black];
4926[label="0.41.227.133;s;1pkt 1fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.41.227.225:8080, 165.206.145.66:*}[66.6667%]&lt;BR/&gt;{215.201.35.1:80, 165.206.145.66:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (32%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 10126: (8%)&lt;BR/&gt; 4226: (8%)&lt;BR/&gt; 4335: (4%)&gt;];
}
1535--1536[label="1;1pkt 1fpkt"];
1535--4659[label="1;1pkt 1fpkt"];
1535--4926[label="1;1pkt 1fpkt"];
1536--4659[label="1;11pkt 11fpkt"];
1536--4926[label="1;1pkt 1fpkt"];
4659--4926[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.145.66" src_ip="0.41.227.225" src_port="8080"/>
      <filter dst_ip="165.206.145.66" src_ip="215.201.35.1" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
1007[label="220.223.15.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
1544[label="165.206.5.3;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.5.3:49899, 220.223.15.24:30000}[33.3333%]&lt;BR/&gt;{165.206.5.3:52168, 90.115.84.198:80}[33.3333%]&lt;BR/&gt;{165.206.5.3:52169, 90.115.84.203:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49899: (25%)&lt;BR/&gt; 30000: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 52169: (12.5%)&lt;BR/&gt; 52168: (12.5%)&gt;];
}
1007--1544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="90.115.84.203" dst_port="80" src_ip="165.206.5.3" src_port="52169"/>
      <filter dst_ip="90.115.84.198" dst_port="80" src_ip="165.206.5.3" src_port="52168"/>
      <filter dst_ip="220.223.15.24" dst_port="30000" src_ip="165.206.5.3" src_port="49899"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1568[label="144.100.73.178;s;155pkt 155fpkt", shape=diamond, color=yellow];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.100.73.178:22, 36.54.151.126:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60973: (0.322581%)&lt;BR/&gt; 60825: (0.322581%)&lt;BR/&gt; 60268: (0.322581%)&lt;BR/&gt; 59712: (0.322581%)&gt;];
}
1568--4936[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="36.54.151.126" src_ip="144.100.73.178" src_port="22"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
312[label="215.184.32.66;s;68pkt 68fpkt", shape=diamond, color=yellow];
1605[label="43.94.108.93;d;1pkt 1fpkt", shape=diamond, color=yellow];
1629[label="54.148.174.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
1985[label="56.201.226.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
1999[label="34.197.17.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
2001[label="173.132.79.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
2003[label="204.139.100.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
2006[label="35.11.95.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
2831[label="40.104.53.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
3986[label="32.226.214.226;d;2pkt 2fpkt", shape=diamond, color=yellow];
4510[label="54.148.174.98;d;1pkt 1fpkt", shape=hexagon, color=black];
4721[label="173.132.79.249;d;1pkt 1fpkt", shape=hexagon, color=black];
5190[label="204.139.100.172;d;1pkt 1fpkt", shape=hexagon, color=black];
5191[label="35.11.95.120;d;1pkt 1fpkt", shape=hexagon, color=black];
6334[label="215.184.32.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.32.66:45862, *:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45862: (29.1667%)&lt;BR/&gt; 51619: (2.38095%)&lt;BR/&gt; 11003: (2.38095%)&lt;BR/&gt; 3648: (2.38095%)&lt;BR/&gt; 46295: (1.78571%)&gt;];
}
312--1605[label="1;1pkt 1fpkt"];
312--1629[label="1;1pkt 1fpkt"];
312--1955[label="1;1pkt 1fpkt"];
312--1985[label="1;1pkt 1fpkt"];
312--1997[label="1;1pkt 1fpkt"];
312--1999[label="1;1pkt 1fpkt"];
312--2001[label="1;1pkt 1fpkt"];
312--2003[label="1;1pkt 1fpkt"];
312--2006[label="1;1pkt 1fpkt"];
312--2009[label="1;1pkt 1fpkt"];
312--2831[label="1;1pkt 1fpkt"];
312--3986[label="0.5;1pkt 1fpkt"];
312--4510[label="1;1pkt 1fpkt"];
312--4670[label="1;1pkt 1fpkt"];
312--4721[label="1;1pkt 1fpkt"];
312--4950[label="1;1pkt 1fpkt"];
312--4952[label="1;1pkt 1fpkt"];
312--5190[label="1;1pkt 1fpkt"];
312--5191[label="1;1pkt 1fpkt"];
312--6334[label="1;2pkt 2fpkt"];
1629--4510[label="1;1pkt 1fpkt"];
1629--6334[label="1;1pkt 1fpkt"];
2001--4721[label="1;1pkt 1fpkt"];
2003--5190[label="1;1pkt 1fpkt"];
2006--5191[label="1;1pkt 1fpkt"];
2006--6334[label="1;1pkt 1fpkt"];
4510--6334[label="1;1pkt 1fpkt"];
5191--6334[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.32.66" src_port="45862"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
1608[label="196.163.157.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
1609[label="149.216.119.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
4504[label="196.163.157.133;d;1pkt 1fpkt", shape=hexagon, color=black];
5512[label="149.216.119.136;s;1pkt 1fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.119.136:80, 196.163.157.133:1430}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1430: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1608--1609[label="1;1pkt 1fpkt"];
1608--4504[label="1;1pkt 1fpkt"];
1608--5512[label="1;1pkt 1fpkt"];
1609--4504[label="1;1pkt 1fpkt"];
1609--5512[label="1;1pkt 1fpkt"];
4504--5512[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.157.133" dst_port="1430" src_ip="149.216.119.136" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.84.116.10"/>
      <from sec="1183784790" usec="0"/>
      <to sec="1183785222" usec="0"/>
    </slice>
    <from sec="1183784790" usec="0"/>
    <to sec="1183785222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
1805[label="72.101.112.228;d;12pkt 12fpkt", shape=diamond, color=yellow];
1806[label="149.216.198.132;s;14pkt 14fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.198.132:80, 72.101.112.228:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1248: (3.84615%)&lt;BR/&gt; 1247: (3.84615%)&lt;BR/&gt; 1246: (3.84615%)&lt;BR/&gt; 1245: (3.84615%)&gt;];
}
1805--1806[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="72.101.112.228" src_ip="149.216.198.132" src_port="80"/>
    </slice>
    <from sec="1183784532" usec="0"/>
    <to sec="1183784813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
43[label="161.203.207.103s;3pkt 3fpkt", shape=rectangle, color=red];
1344[label="161.203.207.103;s;24pkt 24fpkt", shape=diamond, color=yellow];
1815[label="90.109.193.60;d;23pkt 23fpkt", shape=diamond, color=yellow];
4823[label="161.203.207.103;s;24pkt 24fpkt", shape=hexagon, color=black];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.207.103:*, 90.109.193.60:20}[52%]&lt;BR/&gt;{161.203.207.103:*, 90.109.193.60:21}[36%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (28.3784%)&lt;BR/&gt; 21: (18.2432%)&lt;BR/&gt; 5050: (2.7027%)&lt;BR/&gt; 1617: (2.7027%)&lt;BR/&gt; 1615: (2.7027%)&gt;];
}
43--1344[label="1;3pkt 3fpkt"];
43--1815[label="1;3pkt 3fpkt"];
43--4823[label="1;3pkt 3fpkt"];
1344--1815[label="0.956522;22pkt 22fpkt"];
1344--4823[label="1;24pkt 24fpkt"];
1815--1950[label="0.0434783;1pkt 1fpkt"];
1815--4823[label="0.956522;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="90.109.193.60" dst_port="20" src_ip="161.203.207.103"/>
      <filter dst_ip="90.109.193.60" dst_port="21" src_ip="161.203.207.103"/>
    </slice>
    <from sec="1183784433" usec="0"/>
    <to sec="1183785134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0585,1.71597,999,1 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
1[label="204.50.185.5s;1pkt 1fpkt", shape=rectangle, color=red];
105[label="145.84.55.232d;1pkt 1fpkt", shape=rectangle, color=red];
1816[label="204.50.185.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
7092[label="204.50.185.5;1pkt 1fpkt", shape=invtriangle, color=brown];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.50.185.5:31812, 145.84.55.232:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31812: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1--105[label="1;1pkt 1fpkt"];
1--1173[label="1;1pkt 1fpkt"];
1--1816[label="1;1pkt 1fpkt"];
1--4974[label="1;1pkt 1fpkt"];
1--7092[label="1;1pkt 1fpkt"];
105--1173[label="1;1pkt 1fpkt"];
105--1816[label="1;1pkt 1fpkt"];
105--4974[label="1;1pkt 1fpkt"];
105--7092[label="1;1pkt 1fpkt"];
1816--4974[label="1;1pkt 1fpkt"];
1816--7092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.55.232" dst_port="25" src_ip="204.50.185.5" src_port="31812"/>
    </slice>
    <from sec="1183784552" usec="0"/>
    <to sec="1183784711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
64[label="215.184.34.143s;1pkt 1fpkt", shape=rectangle, color=red];
341[label="215.184.34.143;s;528pkt 528fpkt", shape=diamond, color=yellow];
342[label="51.83.61.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
363[label="162.38.76.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
373[label="37.26.69.40;d;3pkt 3fpkt", shape=diamond, color=yellow];
545[label="79.80.135.202;d;4pkt 4fpkt", shape=diamond, color=yellow];
984[label="197.90.85.195;d;3pkt 3fpkt", shape=diamond, color=yellow];
1057[label="208.252.34.163;d;2pkt 2fpkt", shape=diamond, color=yellow];
1350[label="140.244.86.182;d;36pkt 36fpkt", shape=diamond, color=yellow];
1832[label="38.240.121.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
1902[label="1.221.253.169;d;143pkt 143fpkt", shape=diamond, color=yellow];
2374[label="214.99.229.84;d;62pkt 62fpkt", shape=diamond, color=yellow];
3036[label="214.146.5.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
3705[label="117.175.192.46;d;4pkt 4fpkt", shape=diamond, color=yellow];
4043[label="215.38.24.165;d;6pkt 6fpkt", shape=diamond, color=yellow];
4186[label="51.83.61.26;d;1pkt 1fpkt", shape=hexagon, color=black];
4311[label="197.90.85.195;d;3pkt 3fpkt", shape=hexagon, color=black];
4457[label="215.184.34.143;s;442pkt 442fpkt", shape=hexagon, color=black];
4600[label="38.240.121.110;d;1pkt 1fpkt", shape=hexagon, color=black];
4616[label="1.221.253.169;d;143pkt 143fpkt", shape=hexagon, color=black];
4937[label="208.252.34.163;d;1pkt 1fpkt", shape=hexagon, color=black];
5152[label="79.80.135.202;d;4pkt 4fpkt", shape=hexagon, color=black];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.34.143:80, 1.221.253.169:*}[27.2212%]&lt;BR/&gt;{215.184.34.143:80, 198.106.105.13:*}[21.172%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.056%)&lt;BR/&gt; 0: (4.52586%)&lt;BR/&gt; 21: (2.22701%)&lt;BR/&gt; 873: (1.2931%)&lt;BR/&gt; 52010: (0.179598%)&gt;];
}
64--341[label="1;1pkt 1fpkt"];
64--1832[label="1;1pkt 1fpkt"];
64--4457[label="1;1pkt 1fpkt"];
64--4600[label="1;1pkt 1fpkt"];
341--342[label="1;1pkt 1fpkt"];
341--363[label="1;2pkt 2fpkt"];
341--373[label="1;3pkt 3fpkt"];
341--545[label="1;4pkt 4fpkt"];
341--984[label="1;3pkt 3fpkt"];
341--1057[label="0.5;1pkt 1fpkt"];
341--1350[label="1;36pkt 36fpkt"];
341--1832[label="1;1pkt 1fpkt"];
341--1902[label="1;143pkt 143fpkt"];
341--2038[label="0.741722;112pkt 112fpkt"];
341--2202[label="0.0714286;1pkt 1fpkt"];
341--2374[label="1;62pkt 62fpkt"];
341--2382[label="0.00189394;1pkt 1fpkt"];
341--3036[label="1;1pkt 1fpkt"];
341--3705[label="1;4pkt 4fpkt"];
341--4043[label="1;6pkt 6fpkt"];
341--4186[label="1;1pkt 1fpkt"];
341--4311[label="1;3pkt 3fpkt"];
341--4457[label="1;442pkt 442fpkt"];
341--4600[label="1;1pkt 1fpkt"];
341--4616[label="1;143pkt 143fpkt"];
341--4937[label="1;1pkt 1fpkt"];
341--5152[label="1;4pkt 4fpkt"];
341--5409[label="0.00189394;1pkt 1fpkt"];
342--4186[label="1;1pkt 1fpkt"];
342--4457[label="1;1pkt 1fpkt"];
363--4457[label="1;2pkt 2fpkt"];
373--4457[label="1;3pkt 3fpkt"];
545--4457[label="1;4pkt 4fpkt"];
545--5152[label="1;4pkt 4fpkt"];
984--4311[label="1;3pkt 3fpkt"];
984--4457[label="1;3pkt 3fpkt"];
1057--4457[label="0.5;1pkt 1fpkt"];
1057--4937[label="1;1pkt 1fpkt"];
1350--4457[label="0.666667;24pkt 24fpkt"];
1832--4457[label="1;1pkt 1fpkt"];
1832--4600[label="1;1pkt 1fpkt"];
1902--4457[label="1;143pkt 143fpkt"];
1902--4616[label="1;143pkt 143fpkt"];
2374--4457[label="1;62pkt 62fpkt"];
3036--4457[label="1;1pkt 1fpkt"];
3705--4457[label="0.5;2pkt 2fpkt"];
4186--4457[label="1;1pkt 1fpkt"];
4311--4457[label="1;3pkt 3fpkt"];
4457--4600[label="1;1pkt 1fpkt"];
4457--4616[label="1;143pkt 143fpkt"];
4457--4937[label="1;1pkt 1fpkt"];
4457--5152[label="1;4pkt 4fpkt"];
4457--5409[label="0.00226244;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.221.253.169" src_ip="215.184.34.143" src_port="80"/>
      <filter dst_ip="198.106.105.13" src_ip="215.184.34.143" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
1765[label="149.197.71.69;s;6pkt 6fpkt", shape=diamond, color=yellow];
1839[label="40.240.76.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.71.69:25, *:*}[66.6667%]&lt;BR/&gt;{149.197.71.69:110, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.5714%)&lt;BR/&gt; 110: (21.4286%)&lt;BR/&gt; 11902: (14.2857%)&lt;BR/&gt; 62941: (7.14286%)&lt;BR/&gt; 46471: (7.14286%)&gt;];
}
1765--1839[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.197.71.69" src_port="25"/>
      <filter src_ip="149.197.71.69" src_port="110"/>
    </slice>
    <from sec="1183784442" usec="0"/>
    <to sec="1183784605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1764[label="149.197.71.69;d;6pkt 6fpkt", shape=diamond, color=yellow];
1840[label="40.240.76.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.197.71.69:25}[66.6667%]&lt;BR/&gt;{*:*, 149.197.71.69:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.5714%)&lt;BR/&gt; 110: (21.4286%)&lt;BR/&gt; 11902: (14.2857%)&lt;BR/&gt; 62941: (7.14286%)&lt;BR/&gt; 46471: (7.14286%)&gt;];
}
1764--1840[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.71.69" dst_port="25"/>
      <filter dst_ip="149.197.71.69" dst_port="110"/>
    </slice>
    <from sec="1183784442" usec="0"/>
    <to sec="1183784605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
1824[label="145.84.181.234;s;2pkt 2fpkt", shape=diamond, color=yellow];
1860[label="36.77.34.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.181.234:3503, 1.216.26.67:80}[50%]&lt;BR/&gt;{145.84.181.234:80, 36.77.34.70:37353}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37353: (33.3333%)&lt;BR/&gt; 3503: (16.6667%)&gt;];
}
1824--1860[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.77.34.70" dst_port="37353" src_ip="145.84.181.234" src_port="80"/>
      <filter dst_ip="1.216.26.67" dst_port="80" src_ip="145.84.181.234" src_port="3503"/>
    </slice>
    <from sec="1183784566" usec="0"/>
    <to sec="1183784636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
1887[label="149.197.202.143;s;5pkt 5fpkt", shape=diamond, color=yellow];
1888[label="32.3.12.28;d;5pkt 5fpkt", shape=diamond, color=yellow];
4876[label="149.197.202.143;s;5pkt 5fpkt", shape=hexagon, color=black];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.202.143:80, 32.3.12.28:3314}[20%]&lt;BR/&gt;{149.197.202.143:80, 32.3.12.28:3315}[20%]&lt;BR/&gt;{149.197.202.143:80, 32.3.12.28:3316}[20%]&lt;BR/&gt;{149.197.202.143:80, 32.3.12.28:3317}[20%]&lt;BR/&gt;{149.197.202.143:80, 32.3.12.28:3318}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3318: (10%)&lt;BR/&gt; 3317: (10%)&lt;BR/&gt; 3316: (10%)&lt;BR/&gt; 3315: (10%)&gt;];
}
1887--1888[label="1;5pkt 5fpkt"];
1887--4876[label="1;5pkt 5fpkt"];
1888--4876[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="32.3.12.28" dst_port="3318" src_ip="149.197.202.143" src_port="80"/>
      <filter dst_ip="32.3.12.28" dst_port="3317" src_ip="149.197.202.143" src_port="80"/>
      <filter dst_ip="32.3.12.28" dst_port="3316" src_ip="149.197.202.143" src_port="80"/>
      <filter dst_ip="32.3.12.28" dst_port="3315" src_ip="149.197.202.143" src_port="80"/>
      <filter dst_ip="32.3.12.28" dst_port="3314" src_ip="149.197.202.143" src_port="80"/>
    </slice>
    <from sec="1183784631" usec="0"/>
    <to sec="1183784689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
365[label="215.184.45.121;s;212pkt 212fpkt", shape=diamond, color=yellow];
1467[label="218.34.166.135;d;1pkt 1fpkt", shape=diamond, color=yellow];
1706[label="215.184.37.208;s;67pkt 67fpkt", shape=diamond, color=yellow];
1917[label="218.34.166.234;d;4pkt 4fpkt", shape=diamond, color=yellow];
4379[label="72.242.42.237;d;88pkt 88fpkt", shape=hexagon, color=black];
4591[label="218.34.166.135;d;1pkt 1fpkt", shape=hexagon, color=black];
4920[label="215.184.45.121;s;134pkt 134fpkt", shape=hexagon, color=black];
5302[label="215.184.37.208;s;50pkt 50fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.45.121:80, *:*}[57.5%]&lt;BR/&gt;{*:80, 72.242.42.237:*}[25.2778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6912%)&lt;BR/&gt; 53: (3.32136%)&lt;BR/&gt; 0: (1.79533%)&lt;BR/&gt; 51362: (0.359066%)&lt;BR/&gt; 37903: (0.359066%)&gt;];
}
365--754[label="0.00943396;2pkt 2fpkt"];
365--1004[label="0.00943396;2pkt 2fpkt"];
365--1244[label="0.0188679;4pkt 4fpkt"];
365--1305[label="0.0188679;4pkt 4fpkt"];
365--2382[label="0.00471698;1pkt 1fpkt"];
365--3041[label="0.2;1pkt 1fpkt"];
365--4379[label="0.0454545;4pkt 4fpkt"];
365--4560[label="0.0188679;4pkt 4fpkt"];
365--4920[label="1;134pkt 134fpkt"];
365--5409[label="0.00471698;1pkt 1fpkt"];
1467--1706[label="1;1pkt 1fpkt"];
1467--4591[label="1;1pkt 1fpkt"];
1467--5302[label="1;1pkt 1fpkt"];
1706--1917[label="1;4pkt 4fpkt"];
1706--2382[label="0.0149254;1pkt 1fpkt"];
1706--4379[label="0.0447761;3pkt 3fpkt"];
1706--4477[label="0.0447761;3pkt 3fpkt"];
1706--4560[label="0.0597015;4pkt 4fpkt"];
1706--4591[label="1;1pkt 1fpkt"];
1706--5302[label="1;50pkt 50fpkt"];
1706--5303[label="0.0895522;6pkt 6fpkt"];
1706--5409[label="0.0149254;1pkt 1fpkt"];
1706--5909[label="0.0149254;1pkt 1fpkt"];
1706--5912[label="0.0149254;1pkt 1fpkt"];
1706--5914[label="0.0149254;1pkt 1fpkt"];
1706--5938[label="0.0149254;1pkt 1fpkt"];
1706--5959[label="0.0149254;1pkt 1fpkt"];
1917--5302[label="1;4pkt 4fpkt"];
4379--4654[label="0.0227273;2pkt 2fpkt"];
4379--4920[label="0.0454545;4pkt 4fpkt"];
4379--4976[label="0.0113636;1pkt 1fpkt"];
4379--5241[label="0.0340909;3pkt 3fpkt"];
4379--5244[label="0.0340909;3pkt 3fpkt"];
4379--5286[label="0.0113636;1pkt 1fpkt"];
4379--5302[label="0.06;3pkt 3fpkt"];
4379--5317[label="0.0227273;2pkt 2fpkt"];
4379--5347[label="0.0113636;1pkt 1fpkt"];
4379--5543[label="0.0491803;3pkt 3fpkt"];
4379--5609[label="0.0576923;3pkt 3fpkt"];
4379--5668[label="0.0340909;3pkt 3fpkt"];
4379--5758[label="0.0652174;3pkt 3fpkt"];
4379--6076[label="0.0113636;1pkt 1fpkt"];
4379--6146[label="0.0340909;3pkt 3fpkt"];
4379--6285[label="0.025;1pkt 1fpkt"];
4379--6356[label="0.0340909;3pkt 3fpkt"];
4379--6774[label="0.0833333;3pkt 3fpkt"];
4379--7120[label="0.0113636;1pkt 1fpkt"];
4379--7182[label="0.025641;1pkt 1fpkt"];
4379--7202[label="0.0340909;3pkt 3fpkt"];
4379--7208[label="0.05;3pkt 3fpkt"];
4379--7535[label="0.0340909;3pkt 3fpkt"];
4591--5302[label="1;1pkt 1fpkt"];
4920--5409[label="0.00746269;1pkt 1fpkt"];
5302--5303[label="0.12;6pkt 6fpkt"];
5302--5409[label="0.02;1pkt 1fpkt"];
5302--5909[label="0.02;1pkt 1fpkt"];
5302--5912[label="0.02;1pkt 1fpkt"];
5302--5914[label="0.02;1pkt 1fpkt"];
5302--5938[label="0.02;1pkt 1fpkt"];
5302--5959[label="0.02;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.45.121" src_port="80"/>
      <filter dst_ip="72.242.42.237" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
311[label="215.184.32.66;d;94pkt 94fpkt", shape=diamond, color=yellow];
1606[label="43.94.108.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
1630[label="54.148.174.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
1956[label="117.174.253.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
1986[label="56.201.226.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
1998[label="117.147.25.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
2000[label="34.197.17.215;s;1pkt 1fpkt", shape=diamond, color=yellow];
2002[label="173.132.79.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
2004[label="204.139.100.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
2046[label="117.16.114.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
4671[label="117.174.253.43;s;1pkt 1fpkt", shape=hexagon, color=black];
4720[label="34.197.17.215;s;1pkt 1fpkt", shape=hexagon, color=black];
4722[label="204.139.100.172;s;1pkt 1fpkt", shape=hexagon, color=black];
4944[label="56.201.226.200;s;1pkt 1fpkt", shape=hexagon, color=black];
5632[label="54.148.174.98;s;1pkt 1fpkt", shape=hexagon, color=black];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.184.32.66:45862}[53.1915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45862: (24.0741%)&lt;BR/&gt; 2702: (7.40741%)&lt;BR/&gt; 4447: (3.24074%)&lt;BR/&gt; 43886: (1.38889%)&lt;BR/&gt; 43607: (1.38889%)&gt;];
}
311--1606[label="1;1pkt 1fpkt"];
311--1630[label="1;1pkt 1fpkt"];
311--1658[label="1;1pkt 1fpkt"];
311--1956[label="1;1pkt 1fpkt"];
311--1986[label="1;1pkt 1fpkt"];
311--1998[label="1;1pkt 1fpkt"];
311--2000[label="1;1pkt 1fpkt"];
311--2002[label="1;1pkt 1fpkt"];
311--2004[label="1;1pkt 1fpkt"];
311--2007[label="1;1pkt 1fpkt"];
311--2010[label="1;1pkt 1fpkt"];
311--2046[label="1;1pkt 1fpkt"];
311--2383[label="0.0106383;1pkt 1fpkt"];
311--4671[label="1;1pkt 1fpkt"];
311--4720[label="1;1pkt 1fpkt"];
311--4722[label="1;1pkt 1fpkt"];
311--4763[label="1;1pkt 1fpkt"];
311--4901[label="0.0106383;1pkt 1fpkt"];
311--4944[label="1;1pkt 1fpkt"];
311--5192[label="1;1pkt 1fpkt"];
311--5511[label="1;1pkt 1fpkt"];
311--5632[label="1;1pkt 1fpkt"];
311--5831[label="0.0106383;1pkt 1fpkt"];
311--5906[label="0.0106383;1pkt 1fpkt"];
311--5936[label="0.0106383;1pkt 1fpkt"];
311--5957[label="0.0106383;1pkt 1fpkt"];
1630--5632[label="1;1pkt 1fpkt"];
1956--4671[label="1;1pkt 1fpkt"];
1986--4944[label="1;1pkt 1fpkt"];
2000--4720[label="1;1pkt 1fpkt"];
2004--4722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.32.66" dst_port="45862"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
2063[label="1.216.24.54;d;2pkt 2fpkt", shape=diamond, color=yellow];
2064[label="136.119.60.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.60.22:20511, 1.216.24.54:554}[50%]&lt;BR/&gt;{136.119.221.169:1127, 1.216.24.54:554}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 20511: (33.3333%)&lt;BR/&gt; 1127: (16.6667%)&gt;];
}
2063--2064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.216.24.54" dst_port="554" src_ip="136.119.221.169" src_port="1127"/>
      <filter dst_ip="1.216.24.54" dst_port="554" src_ip="136.119.60.22" src_port="20511"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
285[label="215.184.52.94;d;1579pkt 1579fpkt", shape=diamond, color=yellow];
288[label="37.125.59.30;s;422pkt 422fpkt", shape=diamond, color=yellow];
362[label="37.112.254.37;s;500pkt 500fpkt", shape=diamond, color=yellow];
1002[label="37.52.6.201;s;1pkt 1fpkt", shape=diamond, color=yellow];
1008[label="37.48.211.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
1034[label="37.48.211.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
1521[label="37.125.59.28;s;421pkt 421fpkt", shape=diamond, color=yellow];
2069[label="37.117.182.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
4291[label="37.125.59.30;s;102pkt 102fpkt", shape=hexagon, color=black];
5614[label="37.125.59.28;s;376pkt 376fpkt", shape=hexagon, color=black];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.112.254.37:21, 215.184.52.94:*}[31.6656%]&lt;BR/&gt;{37.125.59.30:21, 215.184.52.94:*}[26.7258%]&lt;BR/&gt;{37.125.59.28:21, 215.184.52.94:*}[26.6624%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (48.5899%)&lt;BR/&gt; 22: (0.940071%)&lt;BR/&gt; 113: (0.411281%)&lt;BR/&gt; 59078: (0.0587544%)&lt;BR/&gt; 123: (0.0587544%)&gt;];
}
285--288[label="1;422pkt 422fpkt"];
285--362[label="1;500pkt 500fpkt"];
285--1002[label="1;1pkt 1fpkt"];
285--1008[label="1;1pkt 1fpkt"];
285--1034[label="1;1pkt 1fpkt"];
285--1039[label="1;1pkt 1fpkt"];
285--1065[label="1;1pkt 1fpkt"];
285--1521[label="1;421pkt 421fpkt"];
285--1585[label="1;1pkt 1fpkt"];
285--2069[label="1;1pkt 1fpkt"];
285--2093[label="1;52pkt 52fpkt"];
285--2843[label="1;51pkt 51fpkt"];
285--4291[label="1;102pkt 102fpkt"];
285--4685[label="1;1pkt 1fpkt"];
285--4701[label="1;1pkt 1fpkt"];
285--5083[label="0.0784314;64pkt 64fpkt"];
285--5167[label="1;1pkt 1fpkt"];
285--5212[label="1;39pkt 39fpkt"];
285--5614[label="1;376pkt 376fpkt"];
285--5749[label="1;52pkt 52fpkt"];
288--4291[label="1;102pkt 102fpkt"];
1521--5614[label="1;376pkt 376fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.52.94" src_ip="37.112.254.37" src_port="21"/>
      <filter dst_ip="215.184.52.94" src_ip="37.125.59.30" src_port="21"/>
      <filter dst_ip="215.184.52.94" src_ip="37.125.59.28" src_port="21"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
1817[label="167.82.161.177;d;142pkt 142fpkt", shape=diamond, color=yellow];
1821[label="215.166.64.57;s;137pkt 137fpkt", shape=diamond, color=yellow];
2167[label="40.240.77.21;s;31pkt 31fpkt", shape=diamond, color=yellow];
5376[label="167.82.161.177;d;142pkt 142fpkt", shape=hexagon, color=black];
5377[label="215.166.64.57;s;137pkt 137fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.166.64.57:80, 167.82.161.177:*}[79.6512%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9151%)&lt;BR/&gt; 4021: (0.339559%)&lt;BR/&gt; 4016: (0.339559%)&lt;BR/&gt; 4014: (0.339559%)&lt;BR/&gt; 4010: (0.339559%)&gt;];
}
1817--1821[label="1;137pkt 137fpkt"];
1817--2167[label="0.0322581;1pkt 1fpkt"];
1817--3917[label="0.0208333;1pkt 1fpkt"];
1817--5376[label="1;142pkt 142fpkt"];
1817--5377[label="1;137pkt 137fpkt"];
1821--5376[label="1;137pkt 137fpkt"];
1821--5377[label="1;137pkt 137fpkt"];
2167--4463[label="0.193548;6pkt 6fpkt"];
2167--5108[label="0.0967742;3pkt 3fpkt"];
2167--5376[label="0.0322581;1pkt 1fpkt"];
5376--5377[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.161.177" src_ip="215.166.64.57" src_port="80"/>
    </slice>
    <from sec="1183784418" usec="0"/>
    <to sec="1183785136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1325[label="38.189.146.158;d;2pkt 2fpkt", shape=diamond, color=yellow];
2173[label="165.206.108.161;s;12pkt 12fpkt", shape=diamond, color=yellow];
4404[label="38.189.146.158;d;2pkt 2fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.108.161:80, *:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34753: (9.375%)&lt;BR/&gt; 47193: (6.25%)&lt;BR/&gt; 60080: (3.125%)&lt;BR/&gt; 57374: (3.125%)&gt;];
}
1325--2173[label="0.5;1pkt 1fpkt"];
1325--4404[label="1;2pkt 2fpkt"];
2173--4404[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="165.206.108.161" src_port="80"/>
    </slice>
    <from sec="1183784422" usec="0"/>
    <to sec="1183784695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
2175[label="145.84.64.207;d;163pkt 163fpkt", shape=diamond, color=yellow];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.193.69.163:80, 145.84.64.207:*}[48.4663%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4749: (0.306748%)&lt;BR/&gt; 4747: (0.306748%)&lt;BR/&gt; 4744: (0.306748%)&lt;BR/&gt; 4743: (0.306748%)&gt;];
}
2175--4198[label="0.0122699;2pkt 2fpkt"];
2175--4733[label="0.00613497;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.64.207" src_ip="214.193.69.163" src_port="80"/>
    </slice>
    <from sec="1183784422" usec="0"/>
    <to sec="1183785219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
224[label="217.72.197.129;s;39688pkt 39688fpkt", shape=diamond, color=yellow];
325[label="217.72.197.132;s;6383pkt 6383fpkt", shape=diamond, color=yellow];
445[label="215.184.35.159;s;4247pkt 4247fpkt", shape=diamond, color=yellow];
561[label="161.203.242.201;s;9pkt 9fpkt", shape=diamond, color=yellow];
579[label="161.203.231.84;s;1457pkt 1457fpkt", shape=diamond, color=yellow];
597[label="149.197.56.168;s;5414pkt 5414fpkt", shape=diamond, color=yellow];
1052[label="217.246.105.29;d;4pkt 4fpkt", shape=diamond, color=yellow];
1595[label="219.37.174.35;d;3pkt 3fpkt", shape=diamond, color=yellow];
1654[label="214.10.197.76;s;844pkt 844fpkt", shape=diamond, color=yellow];
1989[label="149.38.148.168;s;468pkt 468fpkt", shape=diamond, color=yellow];
2195[label="37.85.133.20;d;40pkt 40fpkt", shape=diamond, color=yellow];
2799[label="205.118.22.192;d;565pkt 565fpkt", shape=diamond, color=yellow];
2840[label="163.120.72.177;d;20pkt 20fpkt", shape=diamond, color=yellow];
3763[label="75.133.10.221;d;22pkt 22fpkt", shape=diamond, color=yellow];
4222[label="161.203.231.84;s;1078pkt 1078fpkt", shape=hexagon, color=black];
4333[label="217.246.105.29;d;4pkt 4fpkt", shape=hexagon, color=black];
4914[label="217.72.197.132;s;4531pkt 4531fpkt", shape=hexagon, color=black];
5181[label="149.197.56.168;s;3089pkt 3089fpkt", shape=hexagon, color=black];
5205[label="163.120.72.177;d;15pkt 15fpkt", shape=hexagon, color=black];
6895[label="161.203.242.201;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.72.197.129:53, *:*}[67.7104%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (52.0401%)&lt;BR/&gt; 32768: (2.41424%)&lt;BR/&gt; 32769: (0.823403%)&lt;BR/&gt; 32772: (0.339525%)&lt;BR/&gt; 1024: (0.234206%)&gt;];
}
224--1057[label="0.5;1pkt 1fpkt"];
224--1506[label="0.900155;1740pkt 1740fpkt"];
224--1595[label="0.333333;1pkt 1fpkt"];
224--1650[label="1;2pkt 2fpkt"];
224--2195[label="0.025;1pkt 1fpkt"];
224--2799[label="0.955752;540pkt 540fpkt"];
224--2840[label="0.05;1pkt 1fpkt"];
224--3182[label="1;1pkt 1fpkt"];
224--3297[label="0.25;1pkt 1fpkt"];
224--3888[label="1;2pkt 2fpkt"];
224--3902[label="0.0106383;1pkt 1fpkt"];
224--4519[label="1;2pkt 2fpkt"];
224--5205[label="0.0666667;1pkt 1fpkt"];
224--5893[label="0.00105932;1pkt 1fpkt"];
224--5897[label="1;5668pkt 5668fpkt"];
224--5904[label="0.139612;381pkt 381fpkt"];
224--5909[label="0.00924713;367pkt 367fpkt"];
224--5912[label="0.00922193;366pkt 366fpkt"];
224--5914[label="0.00288082;73pkt 73fpkt"];
224--5926[label="0.00105932;1pkt 1fpkt"];
224--5930[label="1;5668pkt 5668fpkt"];
224--5934[label="0.139612;381pkt 381fpkt"];
224--5938[label="0.00924713;367pkt 367fpkt"];
224--5947[label="0.00105932;1pkt 1fpkt"];
224--5951[label="1;5668pkt 5668fpkt"];
224--5955[label="0.139612;381pkt 381fpkt"];
224--5959[label="0.00924713;367pkt 367fpkt"];
325--1506[label="0.00103466;2pkt 2fpkt"];
325--2840[label="0.05;1pkt 1fpkt"];
325--4914[label="1;4531pkt 4531fpkt"];
325--5205[label="0.0666667;1pkt 1fpkt"];
325--5891[label="0.000313332;2pkt 2fpkt"];
325--5904[label="0.0128252;35pkt 35fpkt"];
325--5909[label="0.00626665;40pkt 40fpkt"];
325--5910[label="0.000469998;3pkt 3fpkt"];
325--5912[label="0.00689331;44pkt 44fpkt"];
325--5913[label="0.000313332;2pkt 2fpkt"];
325--5914[label="0.000783331;5pkt 5fpkt"];
325--5924[label="0.000313332;2pkt 2fpkt"];
325--5934[label="0.0128252;35pkt 35fpkt"];
325--5938[label="0.00626665;40pkt 40fpkt"];
325--5939[label="0.000469998;3pkt 3fpkt"];
325--5945[label="0.000313332;2pkt 2fpkt"];
325--5955[label="0.0128252;35pkt 35fpkt"];
325--5959[label="0.00626665;40pkt 40fpkt"];
325--5960[label="0.000469998;3pkt 3fpkt"];
445--2195[label="0.025;1pkt 1fpkt"];
445--2382[label="0.00128535;1pkt 1fpkt"];
445--2625[label="0.0185185;1pkt 1fpkt"];
445--2799[label="0.00176991;1pkt 1fpkt"];
445--2840[label="0.05;1pkt 1fpkt"];
445--3338[label="0.5;1pkt 1fpkt"];
445--3803[label="0.00190476;1pkt 1fpkt"];
445--5205[label="0.0666667;1pkt 1fpkt"];
445--5409[label="0.00128535;1pkt 1fpkt"];
445--5904[label="0.0150238;41pkt 41fpkt"];
445--5909[label="0.0110666;47pkt 47fpkt"];
445--5912[label="0.00847657;36pkt 36fpkt"];
445--5914[label="0.00141276;6pkt 6fpkt"];
445--5934[label="0.0150238;41pkt 41fpkt"];
445--5938[label="0.0110666;47pkt 47fpkt"];
445--5955[label="0.0150238;41pkt 41fpkt"];
445--5959[label="0.0110666;47pkt 47fpkt"];
561--1052[label="0.25;1pkt 1fpkt"];
561--4333[label="0.25;1pkt 1fpkt"];
561--6895[label="1;8pkt 8fpkt"];
579--2799[label="0.00353982;2pkt 2fpkt"];
579--2840[label="0.05;1pkt 1fpkt"];
579--4222[label="1;1078pkt 1078fpkt"];
579--5205[label="0.0666667;1pkt 1fpkt"];
579--5904[label="0.00480439;7pkt 7fpkt"];
579--5909[label="0.00617708;9pkt 9fpkt"];
579--5912[label="0.00754976;11pkt 11fpkt"];
579--5914[label="0.00137268;2pkt 2fpkt"];
579--5934[label="0.00480439;7pkt 7fpkt"];
579--5938[label="0.00617708;9pkt 9fpkt"];
579--5955[label="0.00480439;7pkt 7fpkt"];
579--5959[label="0.00617708;9pkt 9fpkt"];
597--1052[label="0.25;1pkt 1fpkt"];
597--2799[label="0.00707965;4pkt 4fpkt"];
597--2840[label="0.05;1pkt 1fpkt"];
597--3763[label="0.0454545;1pkt 1fpkt"];
597--4333[label="0.25;1pkt 1fpkt"];
597--5181[label="1;3089pkt 3089fpkt"];
597--5205[label="0.0666667;1pkt 1fpkt"];
597--5904[label="0.00806156;22pkt 22fpkt"];
597--5909[label="0.00535648;29pkt 29fpkt"];
597--5912[label="0.00517178;28pkt 28fpkt"];
597--5913[label="0.000184706;1pkt 1fpkt"];
597--5914[label="0.000184706;1pkt 1fpkt"];
597--5934[label="0.00806156;22pkt 22fpkt"];
597--5938[label="0.00535648;29pkt 29fpkt"];
597--5955[label="0.00806156;22pkt 22fpkt"];
597--5959[label="0.00535648;29pkt 29fpkt"];
1052--1950[label="0.25;1pkt 1fpkt"];
1052--4333[label="1;4pkt 4fpkt"];
1052--5181[label="0.25;1pkt 1fpkt"];
1654--2603[label="0.00719424;1pkt 1fpkt"];
1654--2840[label="0.05;1pkt 1fpkt"];
1654--2970[label="0.037037;3pkt 3fpkt"];
1654--5904[label="0.00947867;8pkt 8fpkt"];
1654--5909[label="0.00592417;5pkt 5fpkt"];
1654--5912[label="0.00473934;4pkt 4fpkt"];
1654--5934[label="0.00947867;8pkt 8fpkt"];
1654--5938[label="0.00592417;5pkt 5fpkt"];
1654--5955[label="0.00947867;8pkt 8fpkt"];
1654--5959[label="0.00592417;5pkt 5fpkt"];
1989--2054[label="0.00724638;1pkt 1fpkt"];
1989--2410[label="0.00840336;1pkt 1fpkt"];
1989--2805[label="0.00819672;1pkt 1fpkt"];
1989--2840[label="0.05;1pkt 1fpkt"];
1989--2922[label="0.0031348;1pkt 1fpkt"];
1989--3158[label="0.00757576;1pkt 1fpkt"];
1989--3166[label="0.008;1pkt 1fpkt"];
1989--3258[label="0.00980392;1pkt 1fpkt"];
1989--3612[label="0.0666667;1pkt 1fpkt"];
1989--3884[label="0.00943396;1pkt 1fpkt"];
1989--4702[label="0.0175439;1pkt 1fpkt"];
1989--5106[label="0.0070922;1pkt 1fpkt"];
1989--5176[label="1;328pkt 328fpkt"];
1989--5205[label="0.0666667;1pkt 1fpkt"];
1989--5904[label="0.00641026;3pkt 3fpkt"];
1989--5909[label="0.126068;59pkt 59fpkt"];
1989--5912[label="0.108974;51pkt 51fpkt"];
1989--5914[label="0.025641;12pkt 12fpkt"];
1989--5934[label="0.00641026;3pkt 3fpkt"];
1989--5938[label="0.126068;59pkt 59fpkt"];
1989--5955[label="0.00641026;3pkt 3fpkt"];
1989--5959[label="0.126068;59pkt 59fpkt"];
2195--2461[label="0.025;1pkt 1fpkt"];
2195--5891[label="0.025;1pkt 1fpkt"];
2195--5913[label="0.175;7pkt 7fpkt"];
2195--5924[label="0.025;1pkt 1fpkt"];
2195--5945[label="0.025;1pkt 1fpkt"];
2195--6571[label="0.925;37pkt 37fpkt"];
2799--5181[label="0.00353982;2pkt 2fpkt"];
2799--5897[label="0.125664;71pkt 71fpkt"];
2799--5930[label="0.125664;71pkt 71fpkt"];
2799--5951[label="0.125664;71pkt 71fpkt"];
2840--2871[label="0.05;1pkt 1fpkt"];
2840--4222[label="0.05;1pkt 1fpkt"];
2840--4914[label="0.05;1pkt 1fpkt"];
2840--5176[label="0.05;1pkt 1fpkt"];
2840--5180[label="0.05;1pkt 1fpkt"];
2840--5181[label="0.05;1pkt 1fpkt"];
2840--5205[label="1;15pkt 15fpkt"];
2840--5628[label="0.05;1pkt 1fpkt"];
2840--5897[label="0.05;1pkt 1fpkt"];
2840--5930[label="0.05;1pkt 1fpkt"];
2840--5951[label="0.05;1pkt 1fpkt"];
2840--6722[label="0.05;1pkt 1fpkt"];
2840--7332[label="0.05;1pkt 1fpkt"];
2840--7347[label="0.05;1pkt 1fpkt"];
2840--7589[label="0.05;1pkt 1fpkt"];
4222--5205[label="0.0666667;1pkt 1fpkt"];
4222--5904[label="0.00649351;7pkt 7fpkt"];
4222--5909[label="0.00834879;9pkt 9fpkt"];
4222--5912[label="0.0102041;11pkt 11fpkt"];
4222--5914[label="0.00185529;2pkt 2fpkt"];
4222--5934[label="0.00649351;7pkt 7fpkt"];
4222--5938[label="0.00834879;9pkt 9fpkt"];
4222--5955[label="0.00649351;7pkt 7fpkt"];
4222--5959[label="0.00834879;9pkt 9fpkt"];
4333--5181[label="0.25;1pkt 1fpkt"];
4914--5205[label="0.0666667;1pkt 1fpkt"];
4914--5891[label="0.000441404;2pkt 2fpkt"];
4914--5904[label="0.0128252;35pkt 35fpkt"];
4914--5909[label="0.00882807;40pkt 40fpkt"];
4914--5910[label="0.000662105;3pkt 3fpkt"];
4914--5912[label="0.00971088;44pkt 44fpkt"];
4914--5913[label="0.000441404;2pkt 2fpkt"];
4914--5914[label="0.00110351;5pkt 5fpkt"];
4914--5924[label="0.000441404;2pkt 2fpkt"];
4914--5934[label="0.0128252;35pkt 35fpkt"];
4914--5938[label="0.00882807;40pkt 40fpkt"];
4914--5939[label="0.000662105;3pkt 3fpkt"];
4914--5945[label="0.000441404;2pkt 2fpkt"];
4914--5955[label="0.0128252;35pkt 35fpkt"];
4914--5959[label="0.00882807;40pkt 40fpkt"];
4914--5960[label="0.000662105;3pkt 3fpkt"];
5181--5205[label="0.0666667;1pkt 1fpkt"];
5181--5904[label="0.00806156;22pkt 22fpkt"];
5181--5909[label="0.00938815;29pkt 29fpkt"];
5181--5912[label="0.00906442;28pkt 28fpkt"];
5181--5913[label="0.000323729;1pkt 1fpkt"];
5181--5914[label="0.000323729;1pkt 1fpkt"];
5181--5934[label="0.00806156;22pkt 22fpkt"];
5181--5938[label="0.00938815;29pkt 29fpkt"];
5181--5955[label="0.00806156;22pkt 22fpkt"];
5181--5959[label="0.00938815;29pkt 29fpkt"];
5205--5628[label="0.0666667;1pkt 1fpkt"];
5205--5897[label="0.0666667;1pkt 1fpkt"];
5205--5930[label="0.0666667;1pkt 1fpkt"];
5205--5951[label="0.0666667;1pkt 1fpkt"];
5205--6722[label="0.0666667;1pkt 1fpkt"];
5205--7347[label="0.0666667;1pkt 1fpkt"];
5205--7589[label="0.0666667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.72.197.129" src_port="53"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
4022[label="149.216.4.152;s;27pkt 27fpkt", shape=diamond, color=yellow];
4033[label="214.129.219.134;d;28pkt 28fpkt", shape=diamond, color=yellow];
6708[label="149.216.4.152;41pkt 41fpkt", shape=pentagon, color=darkviolet];
7010[label="136.119.63.233;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7341[label="149.216.4.152;41pkt 41fpkt", shape=invtriangle, color=brown];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.4.152:*, 214.129.219.134:80}[51.9231%]&lt;BR/&gt;{136.119.63.233:*, *:80}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3243%)&lt;BR/&gt; 33677: (1.35135%)&lt;BR/&gt; 33671: (1.35135%)&lt;BR/&gt; 33655: (1.35135%)&lt;BR/&gt; 33648: (1.35135%)&gt;];
}
4022--4033[label="0.814815;22pkt 22fpkt"];
4022--6708[label="1;27pkt 27fpkt"];
4022--7341[label="1;27pkt 27fpkt"];
4033--6708[label="0.785714;22pkt 22fpkt"];
4033--7010[label="0.545455;6pkt 6fpkt"];
4033--7341[label="0.785714;22pkt 22fpkt"];
6708--7341[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.119.63.233"/>
      <filter dst_ip="214.129.219.134" dst_port="80" src_ip="149.216.4.152"/>
    </slice>
    <from sec="1183784739" usec="0"/>
    <to sec="1183785296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
2109[label="215.184.40.163;s;44pkt 44fpkt", shape=diamond, color=yellow];
2294[label="215.181.225.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
5284[label="215.184.40.163;s;25pkt 25fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.40.163:8080, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (12.8571%)&lt;BR/&gt; 25590: (4.28571%)&lt;BR/&gt; 7144: (3.57143%)&lt;BR/&gt; 15512: (2.85714%)&lt;BR/&gt; 4682: (2.85714%)&gt;];
}
2109--2294[label="1;1pkt 1fpkt"];
2109--5284[label="1;25pkt 25fpkt"];
2294--5284[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.40.163" src_port="8080"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1174[label="145.84.55.232;s;229pkt 229fpkt", shape=diamond, color=yellow];
1469[label="204.50.185.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
1877[label="204.50.185.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2300[label="204.50.185.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
4592[label="204.50.185.5;d;1pkt 1fpkt", shape=hexagon, color=black];
4874[label="204.50.185.17;d;1pkt 1fpkt", shape=hexagon, color=black];
4975[label="145.84.55.232;s;170pkt 170fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.55.232:25, *:*}[72.4891%]&lt;BR/&gt;{145.84.55.232:*, *:25}[27.5109%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 37168: (0.49505%)&lt;BR/&gt; 31812: (0.49505%)&lt;BR/&gt; 30860: (0.371287%)&lt;BR/&gt; 4583: (0.371287%)&gt;];
}
1174--1208[label="0.0142857;1pkt 1fpkt"];
1174--1469[label="1;1pkt 1fpkt"];
1174--1877[label="1;1pkt 1fpkt"];
1174--2300[label="1;1pkt 1fpkt"];
1174--2513[label="0.115385;3pkt 3fpkt"];
1174--2617[label="0.0136986;1pkt 1fpkt"];
1174--2933[label="0.0147059;1pkt 1fpkt"];
1174--2977[label="0.0888889;4pkt 4fpkt"];
1174--3206[label="0.0147059;2pkt 2fpkt"];
1174--3279[label="0.047619;2pkt 2fpkt"];
1174--3926[label="0.0695652;8pkt 8fpkt"];
1174--4528[label="0.0344828;1pkt 1fpkt"];
1174--4592[label="1;1pkt 1fpkt"];
1174--4874[label="1;1pkt 1fpkt"];
1174--4975[label="1;170pkt 170fpkt"];
1174--5351[label="0.0833333;2pkt 2fpkt"];
1174--5651[label="0.115385;3pkt 3fpkt"];
1174--5890[label="0.00436681;1pkt 1fpkt"];
1174--5908[label="0.00873362;2pkt 2fpkt"];
1174--5911[label="0.00873362;2pkt 2fpkt"];
1174--5923[label="0.00436681;1pkt 1fpkt"];
1174--5944[label="0.00436681;1pkt 1fpkt"];
1469--4592[label="1;1pkt 1fpkt"];
1469--4975[label="1;1pkt 1fpkt"];
1877--4874[label="1;1pkt 1fpkt"];
1877--4975[label="1;1pkt 1fpkt"];
2300--4975[label="1;1pkt 1fpkt"];
4592--4975[label="1;1pkt 1fpkt"];
4874--4975[label="1;1pkt 1fpkt"];
4975--5351[label="0.0833333;2pkt 2fpkt"];
4975--5651[label="0.0769231;2pkt 2fpkt"];
4975--5890[label="0.00588235;1pkt 1fpkt"];
4975--5908[label="0.0117647;2pkt 2fpkt"];
4975--5911[label="0.00588235;1pkt 1fpkt"];
4975--5923[label="0.00588235;1pkt 1fpkt"];
4975--5944[label="0.00588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.84.55.232" src_port="25"/>
      <filter dst_port="25" src_ip="145.84.55.232"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
2346[label="145.84.97.128;d;4pkt 4fpkt", shape=diamond, color=yellow];
2347[label="206.61.169.54;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.61.169.54:80, 145.84.97.128:3367}[25%]&lt;BR/&gt;{206.61.169.54:80, 145.84.97.128:3368}[25%]&lt;BR/&gt;{206.61.169.54:80, 145.84.97.128:3379}[25%]&lt;BR/&gt;{206.61.169.54:80, 145.84.97.128:3380}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3380: (12.5%)&lt;BR/&gt; 3379: (12.5%)&lt;BR/&gt; 3368: (12.5%)&lt;BR/&gt; 3367: (12.5%)&gt;];
}
2346--2347[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.97.128" dst_port="3380" src_ip="206.61.169.54" src_port="80"/>
      <filter dst_ip="145.84.97.128" dst_port="3379" src_ip="206.61.169.54" src_port="80"/>
      <filter dst_ip="145.84.97.128" dst_port="3368" src_ip="206.61.169.54" src_port="80"/>
      <filter dst_ip="145.84.97.128" dst_port="3367" src_ip="206.61.169.54" src_port="80"/>
    </slice>
    <from sec="1183784715" usec="0"/>
    <to sec="1183784968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
2211[label="215.184.37.56;s;61pkt 61fpkt", shape=diamond, color=yellow];
6283[label="215.184.37.56;65pkt 65fpkt", shape=pentagon, color=darkviolet];
7180[label="215.184.37.56;64pkt 64fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.37.56:80, *:*}[98.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2105%)&lt;BR/&gt; 62480: (0.789474%)&lt;BR/&gt; 62474: (0.789474%)&lt;BR/&gt; 61906: (0.789474%)&lt;BR/&gt; 61905: (0.789474%)&gt;];
}
2211--2382[label="0.0163934;1pkt 1fpkt"];
2211--3007[label="0.2;1pkt 1fpkt"];
2211--5396[label="0.25;1pkt 1fpkt"];
2211--5409[label="0.0163934;1pkt 1fpkt"];
2211--6283[label="1;61pkt 61fpkt"];
2211--7180[label="0.983607;60pkt 60fpkt"];
6283--7180[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.37.56" src_port="80"/>
    </slice>
    <from sec="1183784453" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="165.206.77.153"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183785221" usec="0"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
2432[label="197.24.158.80;d;21pkt 21fpkt", shape=diamond, color=yellow];
2433[label="161.203.230.129;s;21pkt 21fpkt", shape=diamond, color=yellow];
5131[label="197.24.158.80;d;21pkt 21fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.230.129:21, 197.24.158.80:*}[47.619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (23.8095%)&lt;BR/&gt; 64540: (2.38095%)&lt;BR/&gt; 64278: (2.38095%)&lt;BR/&gt; 63987: (2.38095%)&lt;BR/&gt; 60948: (2.38095%)&gt;];
}
2432--2433[label="1;21pkt 21fpkt"];
2432--5131[label="1;21pkt 21fpkt"];
2433--5131[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="197.24.158.80" src_ip="161.203.230.129" src_port="21"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
737[label="145.84.213.249;d;194pkt 194fpkt", shape=diamond, color=yellow];
904[label="221.185.149.68;s;8pkt 8fpkt", shape=diamond, color=yellow];
1012[label="215.212.172.160;s;189pkt 189fpkt", shape=diamond, color=yellow];
1844[label="38.76.14.106;s;26pkt 26fpkt", shape=diamond, color=yellow];
1898[label="38.76.12.181;s;4pkt 4fpkt", shape=diamond, color=yellow];
4278[label="221.185.149.68;s;7pkt 7fpkt", shape=hexagon, color=black];
4990[label="145.84.213.249;d;188pkt 188fpkt", shape=hexagon, color=black];
5384[label="38.76.14.106;s;19pkt 19fpkt", shape=hexagon, color=black];
5390[label="38.76.12.181;s;3pkt 3fpkt", shape=hexagon, color=black];
6523[label="38.76.14.106;25pkt 25fpkt", shape=pentagon, color=darkviolet];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.212.172.160:80, *:*}[49.8681%]&lt;BR/&gt;{*:80, 145.84.213.249:*}[28.496%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.3303%)&lt;BR/&gt; 53: (9.72851%)&lt;BR/&gt; 443: (2.0362%)&lt;BR/&gt; 123: (0.904977%)&lt;BR/&gt; 10476: (0.377074%)&gt;];
}
737--904[label="1;8pkt 8fpkt"];
737--1012[label="0.021164;4pkt 4fpkt"];
737--1027[label="0.0114943;1pkt 1fpkt"];
737--1076[label="0.0979381;19pkt 19fpkt"];
737--1217[label="0.00515464;1pkt 1fpkt"];
737--1220[label="0.00561798;1pkt 1fpkt"];
737--1844[label="1;26pkt 26fpkt"];
737--1898[label="1;4pkt 4fpkt"];
737--2411[label="0.00892857;1pkt 1fpkt"];
737--2447[label="0.0298507;2pkt 2fpkt"];
737--2450[label="0.013245;2pkt 2fpkt"];
737--2469[label="0.0149254;2pkt 2fpkt"];
737--2498[label="0.0211268;3pkt 3fpkt"];
737--2816[label="0.0535714;6pkt 6fpkt"];
737--3167[label="0.00854701;1pkt 1fpkt"];
737--3205[label="0.0102041;1pkt 1fpkt"];
737--4198[label="0.0257732;5pkt 5fpkt"];
737--4278[label="1;7pkt 7fpkt"];
737--4374[label="0.00515464;1pkt 1fpkt"];
737--4674[label="0.028777;4pkt 4fpkt"];
737--4733[label="0.0107527;2pkt 2fpkt"];
737--4945[label="0.0196078;2pkt 2fpkt"];
737--4948[label="0.00515464;1pkt 1fpkt"];
737--4989[label="0.00675676;1pkt 1fpkt"];
737--4990[label="1;188pkt 188fpkt"];
737--5090[label="0.0116279;1pkt 1fpkt"];
737--5160[label="0.0645161;6pkt 6fpkt"];
737--5174[label="0.0655738;12pkt 12fpkt"];
737--5384[label="1;19pkt 19fpkt"];
737--5390[label="1;3pkt 3fpkt"];
737--5825[label="0.00515464;1pkt 1fpkt"];
737--6179[label="0.0108696;1pkt 1fpkt"];
737--6281[label="0.00813008;1pkt 1fpkt"];
737--6445[label="0.00840336;1pkt 1fpkt"];
737--6523[label="1;25pkt 25fpkt"];
737--6996[label="0.00540541;1pkt 1fpkt"];
737--7233[label="0.00840336;1pkt 1fpkt"];
737--7548[label="0.00840336;1pkt 1fpkt"];
904--4278[label="1;7pkt 7fpkt"];
904--4990[label="1;8pkt 8fpkt"];
1012--1237[label="0.0634921;4pkt 4fpkt"];
1012--1242[label="0.00529101;1pkt 1fpkt"];
1012--2011[label="0.156863;8pkt 8fpkt"];
1012--2709[label="0.615385;8pkt 8fpkt"];
1012--2945[label="0.0163934;1pkt 1fpkt"];
1012--3241[label="0.117647;4pkt 4fpkt"];
1012--3328[label="0.615385;8pkt 8fpkt"];
1012--3639[label="0.12766;6pkt 6fpkt"];
1012--3899[label="0.010582;2pkt 2fpkt"];
1012--4162[label="0.037037;7pkt 7fpkt"];
1012--4180[label="0.021164;4pkt 4fpkt"];
1012--4463[label="0.015873;3pkt 3fpkt"];
1012--4474[label="0.00606061;1pkt 1fpkt"];
1012--4553[label="0.0536913;8pkt 8fpkt"];
1012--4623[label="0.026455;5pkt 5fpkt"];
1012--4674[label="1;139pkt 139fpkt"];
1012--4990[label="0.0212766;4pkt 4fpkt"];
1012--5575[label="0.615385;8pkt 8fpkt"];
1012--5800[label="0.037037;7pkt 7fpkt"];
1012--5842[label="0.026455;5pkt 5fpkt"];
1844--4990[label="1;26pkt 26fpkt"];
1844--5384[label="1;19pkt 19fpkt"];
1844--6523[label="1;25pkt 25fpkt"];
1898--4990[label="1;4pkt 4fpkt"];
1898--5390[label="1;3pkt 3fpkt"];
4278--4990[label="1;7pkt 7fpkt"];
4990--5090[label="0.0116279;1pkt 1fpkt"];
4990--5160[label="0.0645161;6pkt 6fpkt"];
4990--5174[label="0.0655738;12pkt 12fpkt"];
4990--5384[label="1;19pkt 19fpkt"];
4990--5390[label="1;3pkt 3fpkt"];
4990--5825[label="0.00531915;1pkt 1fpkt"];
4990--6179[label="0.0108696;1pkt 1fpkt"];
4990--6281[label="0.00813008;1pkt 1fpkt"];
4990--6445[label="0.00840336;1pkt 1fpkt"];
4990--6523[label="1;25pkt 25fpkt"];
4990--6996[label="0.00540541;1pkt 1fpkt"];
4990--7233[label="0.00840336;1pkt 1fpkt"];
4990--7548[label="0.00840336;1pkt 1fpkt"];
5384--6523[label="0.947368;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="215.212.172.160" src_port="80"/>
      <filter dst_ip="145.84.213.249" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
237[label="165.206.146.129;s;7pkt 7fpkt", shape=diamond, color=yellow];
238[label="0.41.227.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
2550[label="0.41.227.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
3797[label="0.41.227.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
6609[label="165.206.146.129;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.146.129:*, 215.201.35.46:80}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.5294%)&lt;BR/&gt; 62193: (8.82353%)&lt;BR/&gt; 62101: (8.82353%)&lt;BR/&gt; 61811: (8.82353%)&lt;BR/&gt; 21141: (8.82353%)&gt;];
}
237--238[label="1;1pkt 1fpkt"];
237--2550[label="1;1pkt 1fpkt"];
237--3797[label="1;1pkt 1fpkt"];
237--6609[label="1;7pkt 7fpkt"];
238--6609[label="1;1pkt 1fpkt"];
2550--6609[label="1;1pkt 1fpkt"];
3797--6609[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.201.35.46" dst_port="80" src_ip="165.206.146.129"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="149.197.69.18"/>
      <from sec="1183784406" usec="0"/>
      <to sec="1183784837" usec="0"/>
    </slice>
    <from sec="1183784406" usec="0"/>
    <to sec="1183784837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1626[label="134.201.12.29;s;228pkt 228fpkt", shape=diamond, color=yellow];
1850[label="193.149.58.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
2639[label="193.176.215.211;d;2pkt 2fpkt", shape=diamond, color=yellow];
3602[label="1.185.141.171;d;6pkt 6fpkt", shape=diamond, color=yellow];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.12.29:18007, *:*}[46.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18007: (22.1519%)&lt;BR/&gt; 20129: (9.2827%)&lt;BR/&gt; 50771: (2.53165%)&lt;BR/&gt; 13003: (1.89873%)&lt;BR/&gt; 21611: (1.68776%)&gt;];
}
1626--1850[label="1;1pkt 1fpkt"];
1626--2639[label="1;2pkt 2fpkt"];
1626--3602[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="134.201.12.29" src_port="18007"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1685[label="144.46.250.202;s;103pkt 103fpkt", shape=diamond, color=yellow];
2656[label="72.101.73.27;d;61pkt 61fpkt", shape=diamond, color=yellow];
5274[label="144.46.250.202;s;103pkt 103fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.250.206:80, 72.101.73.27:*}[35.8025%]&lt;BR/&gt;{144.46.250.202:80, 72.66.233.111:*}[26.5432%]&lt;BR/&gt;{144.46.250.202:80, 72.1.90.7:*}[22.8395%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1712: (0.749064%)&lt;BR/&gt; 49393: (0.561798%)&lt;BR/&gt; 49260: (0.561798%)&lt;BR/&gt; 61922: (0.374532%)&gt;];
}
1685--2656[label="0.0327869;2pkt 2fpkt"];
1685--4752[label="0.00970874;1pkt 1fpkt"];
1685--5274[label="1;103pkt 103fpkt"];
2656--5274[label="0.0327869;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="72.66.233.111" src_ip="144.46.250.202" src_port="80"/>
      <filter dst_ip="72.1.90.7" src_ip="144.46.250.202" src_port="80"/>
      <filter dst_ip="72.101.73.27" src_ip="144.46.250.206" src_port="80"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183784850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
2658[label="210.92.223.185;s;150pkt 150fpkt", shape=diamond, color=yellow];
2659[label="215.184.40.202;d;148pkt 148fpkt", shape=diamond, color=yellow];
6843[label="210.92.223.185;199pkt 199fpkt", shape=pentagon, color=darkviolet];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.92.223.185:80, 215.184.40.202:*}[99.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8994%)&lt;BR/&gt; 58453: (0.301811%)&lt;BR/&gt; 58452: (0.301811%)&lt;BR/&gt; 58451: (0.301811%)&lt;BR/&gt; 58450: (0.301811%)&gt;];
}
2658--2659[label="0.993243;147pkt 147fpkt"];
2658--6843[label="1;150pkt 150fpkt"];
2659--4901[label="0.00675676;1pkt 1fpkt"];
2659--5831[label="0.00675676;1pkt 1fpkt"];
2659--5906[label="0.00675676;1pkt 1fpkt"];
2659--5936[label="0.00675676;1pkt 1fpkt"];
2659--5957[label="0.00675676;1pkt 1fpkt"];
2659--6843[label="0.993243;147pkt 147fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.40.202" src_ip="210.92.223.185" src_port="80"/>
    </slice>
    <from sec="1183784407" usec="0"/>
    <to sec="1183785296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.90779,1.71065,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
55[label="165.206.36.122s;1pkt 1fpkt", shape=rectangle, color=red];
2770[label="37.161.51.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.36.122:53828, 37.161.51.182:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53828: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
55--1084[label="1;1pkt 1fpkt"];
55--2770[label="1;1pkt 1fpkt"];
55--5913[label="1;1pkt 1fpkt"];
2770--5913[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.161.51.182" dst_port="80" src_ip="165.206.36.122" src_port="53828"/>
    </slice>
    <from sec="1183784818" usec="0"/>
    <to sec="1183785042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
2427[label="214.7.137.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
2807[label="207.129.162.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
5125[label="214.7.137.127;d;1pkt 1fpkt", shape=hexagon, color=black];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.129.162.120:7002, 214.7.137.127:1207}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7002: (50%)&lt;BR/&gt; 1207: (50%)&gt;];
}
2427--2807[label="1;1pkt 1fpkt"];
2427--5125[label="1;1pkt 1fpkt"];
2807--5125[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.137.127" dst_port="1207" src_ip="207.129.162.120" src_port="7002"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
2833[label="219.107.203.78;d;2pkt 2fpkt", shape=diamond, color=yellow];
2834[label="161.203.131.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.33.56:0, 219.107.203.78:0}[50%]&lt;BR/&gt;{161.203.131.154:1116, 219.107.203.78:6667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (33.3333%)&lt;BR/&gt; 1116: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
2833--2834[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.107.203.78" dst_port="6667" src_ip="161.203.131.154" src_port="1116"/>
      <filter dst_ip="219.107.203.78" src_ip="215.184.33.56"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
2149[label="145.84.168.102;d;255pkt 255fpkt", shape=diamond, color=yellow];
2942[label="34.2.166.53;s;183pkt 183fpkt", shape=diamond, color=yellow];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.2.166.53:80, 145.84.168.102:*}[71.0938%]&lt;BR/&gt;{195.19.217.132:80, 145.84.168.102:*}[27.3438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8858%)&lt;BR/&gt; 35190: (0.228311%)&lt;BR/&gt; 34774: (0.228311%)&lt;BR/&gt; 34770: (0.228311%)&lt;BR/&gt; 34766: (0.228311%)&gt;];
}
2149--2942[label="0.994536;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.168.102" src_ip="34.2.166.53" src_port="80"/>
      <filter dst_ip="145.84.168.102" src_ip="195.19.217.132" src_port="80"/>
    </slice>
    <from sec="1183784410" usec="0"/>
    <to sec="1183785195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
3055[label="194.153.180.137;s;621pkt 621fpkt", shape=diamond, color=yellow];
5450[label="194.153.180.137;s;320pkt 320fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.153.180.137:80, 167.82.130.161:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2621: (0.10627%)&lt;BR/&gt; 2620: (0.10627%)&lt;BR/&gt; 2619: (0.10627%)&lt;BR/&gt; 2618: (0.10627%)&gt;];
}
3055--5450[label="1;320pkt 320fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.130.161" src_ip="194.153.180.137" src_port="80"/>
    </slice>
    <from sec="1183784848" usec="0"/>
    <to sec="1183785226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
3002[label="136.119.154.53;s;7pkt 7fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.154.53:80, 196.163.44.52:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 46176: (7.14286%)&lt;BR/&gt; 44231: (7.14286%)&lt;BR/&gt; 43936: (7.14286%)&lt;BR/&gt; 43198: (7.14286%)&gt;];
}
3002--5379[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.44.52" src_ip="136.119.154.53" src_port="80"/>
    </slice>
    <from sec="1183784596" usec="0"/>
    <to sec="1183785212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.90779,1.71065,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
142[label="7.169.86.93s;64pkt 64fpkt", shape=rectangle, color=red];
3025[label="7.169.86.93;s;396pkt 396fpkt", shape=diamond, color=yellow];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.169.86.93:*, *:445}[64.1414%]&lt;BR/&gt;{7.169.86.93:*, *:139}[35.8586%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (34.5652%)&lt;BR/&gt; 139: (15.4348%)&lt;BR/&gt; 64194: (0.326087%)&lt;BR/&gt; 64188: (0.326087%)&lt;BR/&gt; 64182: (0.326087%)&gt;];
}
142--3025[label="1;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="7.169.86.93"/>
      <filter dst_port="139" src_ip="7.169.86.93"/>
    </slice>
    <from sec="1183784763" usec="0"/>
    <to sec="1183784967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
3088[label="215.184.40.236;d;2pkt 2fpkt", shape=diamond, color=yellow];
3091[label="36.77.35.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.77.35.88:46685, 215.184.40.236:80}[50%]&lt;BR/&gt;{42.131.18.164:54142, 215.184.40.236:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46685: (33.3333%)&lt;BR/&gt; 54142: (16.6667%)&gt;];
}
3088--3091[label="1;1pkt 1fpkt"];
3088--5913[label="1;2pkt 2fpkt"];
3091--5913[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.40.236" dst_port="80" src_ip="42.131.18.164" src_port="54142"/>
      <filter dst_ip="215.184.40.236" dst_port="80" src_ip="36.77.35.88" src_port="46685"/>
    </slice>
    <from sec="1183784881" usec="0"/>
    <to sec="1183784901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
77[label="145.84.192.174s;2pkt 2fpkt", shape=rectangle, color=red];
3093[label="38.178.201.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
3426[label="38.178.201.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
5583[label="38.178.201.4;d;2pkt 2fpkt", shape=hexagon, color=black];
5594[label="38.178.201.53;d;1pkt 1fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.23.63:57369, 38.178.201.53:80}[25%]&lt;BR/&gt;{145.84.192.174:2353, 38.178.201.4:80}[25%]&lt;BR/&gt;{145.84.192.174:2381, 38.178.201.4:80}[25%]&lt;BR/&gt;{145.84.192.174:2401, 38.178.201.53:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2401: (16.6667%)&lt;BR/&gt; 2353: (16.6667%)&lt;BR/&gt; 2381: (11.1111%)&lt;BR/&gt; 57369: (5.55556%)&gt;];
}
77--1256[label="1;2pkt 2fpkt"];
77--3093[label="0.5;1pkt 1fpkt"];
77--3426[label="0.5;1pkt 1fpkt"];
77--5583[label="0.5;1pkt 1fpkt"];
77--5594[label="1;1pkt 1fpkt"];
77--5913[label="0.5;1pkt 1fpkt"];
3093--5583[label="1;2pkt 2fpkt"];
3093--5913[label="0.5;1pkt 1fpkt"];
3426--5594[label="1;1pkt 1fpkt"];
5583--5913[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.178.201.53" dst_port="80" src_ip="145.84.192.174" src_port="2401"/>
      <filter dst_ip="38.178.201.4" dst_port="80" src_ip="145.84.192.174" src_port="2381"/>
      <filter dst_ip="38.178.201.4" dst_port="80" src_ip="145.84.192.174" src_port="2353"/>
      <filter dst_ip="38.178.201.53" dst_port="80" src_ip="165.206.23.63" src_port="57369"/>
    </slice>
    <from sec="1183784882" usec="0"/>
    <to sec="1183785175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.181.227.236"/>
      <from sec="1183785164" usec="0"/>
      <to sec="1183785220" usec="0"/>
    </slice>
    <from sec="1183785164" usec="0"/>
    <to sec="1183785220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
116[label="215.184.40.209s;6pkt 6fpkt", shape=rectangle, color=red];
3131[label="7.225.66.133;d;10pkt 10fpkt", shape=diamond, color=yellow];
5477[label="7.225.66.133;d;6pkt 6fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.40.209:*, 7.225.66.133:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65413: (6.81818%)&lt;BR/&gt; 65412: (6.81818%)&lt;BR/&gt; 65409: (6.81818%)&lt;BR/&gt; 65408: (6.81818%)&gt;];
}
116--613[label="1;6pkt 6fpkt"];
116--3131[label="1;6pkt 6fpkt"];
116--5477[label="1;6pkt 6fpkt"];
116--5913[label="1;6pkt 6fpkt"];
3131--5477[label="1;6pkt 6fpkt"];
3131--5913[label="0.6;6pkt 6fpkt"];
5477--5913[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="7.225.66.133" dst_port="80" src_ip="215.184.40.209"/>
    </slice>
    <from sec="1183784912" usec="0"/>
    <to sec="1183785032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
3215[label="192.6.208.73;d;334pkt 334fpkt", shape=diamond, color=yellow];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 192.6.208.73:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3215--5154[label="0.00299401;1pkt 1fpkt"];
3215--6012[label="0.00364964;1pkt 1fpkt"];
3215--6452[label="0.00925926;1pkt 1fpkt"];
3215--6550[label="0.00299401;1pkt 1fpkt"];
3215--7275[label="0.00299401;1pkt 1fpkt"];
3215--7558[label="0.00299401;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.6.208.73"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
3236[label="215.184.35.145;s;101pkt 101fpkt", shape=diamond, color=yellow];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.35.145:25, *:*}[49.505%]&lt;BR/&gt;{215.184.35.145:*, *:113}[48.5149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.7525%)&lt;BR/&gt; 113: (24.2574%)&lt;BR/&gt; 0: (0.990099%)&lt;BR/&gt; 63484: (0.49505%)&lt;BR/&gt; 63473: (0.49505%)&gt;];
}
3236--5409[label="0.00990099;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.35.145" src_port="25"/>
      <filter dst_port="113" src_ip="215.184.35.145"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.203.136.100"/>
      <from sec="1183784405" usec="0"/>
      <to sec="1183785117" usec="0"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="165.206.78.238"/>
      <from sec="1183784757" usec="0"/>
      <to sec="1183785045" usec="0"/>
    </slice>
    <from sec="1183784757" usec="0"/>
    <to sec="1183785045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1108[label="220.143.244.210;d;2pkt 2fpkt", shape=diamond, color=yellow];
4726[label="220.143.244.210;d;2pkt 2fpkt", shape=hexagon, color=black];
4727[label="149.197.248.90;s;6pkt 6fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.248.90:80, 39.145.136.154:*}[33.3333%]&lt;BR/&gt;{149.197.248.90:*, *:8083}[33.3333%]&lt;BR/&gt;{149.197.248.90:*, 220.143.244.210:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (30%)&lt;BR/&gt; 1723: (15%)&lt;BR/&gt; 1241: (15%)&lt;BR/&gt; 8083: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
1108--1109[label="1;2pkt 2fpkt"];
1108--4726[label="1;2pkt 2fpkt"];
1108--4727[label="1;2pkt 2fpkt"];
4726--4727[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.143.244.210" src_ip="149.197.248.90"/>
      <filter dst_port="8083" src_ip="149.197.248.90"/>
      <filter dst_ip="39.145.136.154" src_ip="149.197.248.90" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.157.174.163"/>
      <from sec="1183784946" usec="0"/>
      <to sec="1183785130" usec="0"/>
    </slice>
    <from sec="1183784946" usec="0"/>
    <to sec="1183785130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="78.221.166.168"/>
      <from sec="1183784958" usec="0"/>
      <to sec="1183785154" usec="0"/>
    </slice>
    <from sec="1183784958" usec="0"/>
    <to sec="1183785154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.90779,1.71065,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
93[label="145.84.218.226s;1pkt 1fpkt", shape=rectangle, color=red];
3398[label="38.178.195.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.218.226:1986, 38.178.195.34:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1986: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
93--3372[label="1;1pkt 1fpkt"];
93--3398[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.178.195.34" dst_port="80" src_ip="145.84.218.226" src_port="1986"/>
    </slice>
    <from sec="1183784959" usec="0"/>
    <to sec="1183785038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="79.154.90.125"/>
      <from sec="1183785139" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183785139" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="79.154.90.125"/>
      <from sec="1183785139" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183785139" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
3421[label="33.105.181.45;d;3pkt 3fpkt", shape=diamond, color=yellow];
3422[label="136.119.4.232;s;3pkt 3fpkt", shape=diamond, color=yellow];
5700[label="33.105.181.45;d;3pkt 3fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.4.232:80, 33.105.181.45:3799}[33.3333%]&lt;BR/&gt;{136.119.4.232:80, 33.105.181.45:3800}[33.3333%]&lt;BR/&gt;{136.119.4.232:80, 33.105.181.45:3801}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3801: (16.6667%)&lt;BR/&gt; 3800: (16.6667%)&lt;BR/&gt; 3799: (16.6667%)&gt;];
}
3421--3422[label="1;3pkt 3fpkt"];
3421--5700[label="1;3pkt 3fpkt"];
3422--5700[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="33.105.181.45" dst_port="3801" src_ip="136.119.4.232" src_port="80"/>
      <filter dst_ip="33.105.181.45" dst_port="3800" src_ip="136.119.4.232" src_port="80"/>
      <filter dst_ip="33.105.181.45" dst_port="3799" src_ip="136.119.4.232" src_port="80"/>
    </slice>
    <from sec="1183784973" usec="0"/>
    <to sec="1183785047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="78.146.175.252"/>
      <from sec="1183784986" usec="0"/>
      <to sec="1183785047" usec="0"/>
    </slice>
    <from sec="1183784986" usec="0"/>
    <to sec="1183785047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
3319[label="165.206.145.156;d;31pkt 31fpkt", shape=diamond, color=yellow];
3466[label="38.178.192.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.139.205.42:80, 165.206.145.156:*}[80.6452%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2713: (3.125%)&lt;BR/&gt; 2715: (1.5625%)&lt;BR/&gt; 2711: (1.5625%)&lt;BR/&gt; 2710: (1.5625%)&gt;];
}
3319--3466[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.145.156" src_ip="211.139.205.42" src_port="80"/>
    </slice>
    <from sec="1183784713" usec="0"/>
    <to sec="1183785226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
506[label="165.206.145.133;d;43pkt 43fpkt", shape=diamond, color=yellow];
508[label="38.178.206.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
2395[label="38.178.206.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
3410[label="38.178.194.250;s;2pkt 2fpkt", shape=diamond, color=yellow];
3497[label="38.178.207.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
3785[label="38.178.195.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
4321[label="38.178.206.182;s;1pkt 1fpkt", shape=hexagon, color=black];
5412[label="38.178.206.21;s;1pkt 1fpkt", shape=hexagon, color=black];
5616[label="165.206.145.133;d;41pkt 41fpkt", shape=hexagon, color=black];
6104[label="38.178.206.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.183.83.191:80, 165.206.145.133:*}[65.1163%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1242: (2.68817%)&lt;BR/&gt; 1202: (2.15054%)&lt;BR/&gt; 1280: (1.6129%)&lt;BR/&gt; 1276: (1.6129%)&gt;];
}
506--508[label="1;1pkt 1fpkt"];
506--723[label="0.0232558;1pkt 1fpkt"];
506--2121[label="0.0232558;1pkt 1fpkt"];
506--2395[label="1;1pkt 1fpkt"];
506--2540[label="0.55814;24pkt 24fpkt"];
506--3410[label="1;2pkt 2fpkt"];
506--3497[label="1;1pkt 1fpkt"];
506--3785[label="1;1pkt 1fpkt"];
506--4321[label="1;1pkt 1fpkt"];
506--4370[label="0.0232558;1pkt 1fpkt"];
506--5269[label="0.418605;18pkt 18fpkt"];
506--5412[label="1;1pkt 1fpkt"];
506--5616[label="1;41pkt 41fpkt"];
506--6104[label="1;1pkt 1fpkt"];
508--4321[label="1;1pkt 1fpkt"];
508--5616[label="1;1pkt 1fpkt"];
2395--5412[label="1;1pkt 1fpkt"];
2395--5616[label="1;1pkt 1fpkt"];
2395--6104[label="1;1pkt 1fpkt"];
3410--5616[label="1;2pkt 2fpkt"];
3497--5616[label="1;1pkt 1fpkt"];
3785--5616[label="1;1pkt 1fpkt"];
4321--5616[label="1;1pkt 1fpkt"];
5412--5616[label="1;1pkt 1fpkt"];
5412--6104[label="1;1pkt 1fpkt"];
5616--6104[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.145.133" src_ip="204.183.83.191" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
260[label="149.216.147.157;s;372pkt 372fpkt", shape=diamond, color=yellow];
1123[label="144.46.248.56;s;302pkt 302fpkt", shape=diamond, color=yellow];
2739[label="196.163.44.188;d;1pkt 1fpkt", shape=diamond, color=yellow];
3592[label="136.119.154.140;s;44pkt 44fpkt", shape=diamond, color=yellow];
6659[label="136.119.154.140;51pkt 51fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.147.157:25, *:*}[51.3103%]&lt;BR/&gt;{144.46.248.56:25, *:*}[32%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.3896%)&lt;BR/&gt; 995: (2.85714%)&lt;BR/&gt; 110: (1.75325%)&lt;BR/&gt; 2611: (0.25974%)&lt;BR/&gt; 3879: (0.194805%)&gt;];
}
260--2970[label="0.0617284;5pkt 5fpkt"];
260--4635[label="1;323pkt 323fpkt"];
1123--2739[label="1;1pkt 1fpkt"];
1123--2970[label="0.0987654;8pkt 8fpkt"];
1123--5563[label="0.0208333;1pkt 1fpkt"];
3592--6659[label="1;44pkt 44fpkt"];
3592--7321[label="1;44pkt 44fpkt"];
6659--7321[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="149.216.147.157" src_port="25"/>
      <filter src_ip="144.46.248.56" src_port="25"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
446[label="215.184.39.2;d;793pkt 793fpkt", shape=diamond, color=yellow];
1399[label="37.8.191.174;s;2pkt 2fpkt", shape=diamond, color=yellow];
1429[label="210.92.102.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
1455[label="38.178.195.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
1477[label="215.114.148.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
1871[label="34.112.73.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
1874[label="35.143.224.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
1897[label="194.169.138.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
2322[label="207.187.154.160;s;2pkt 2fpkt", shape=diamond, color=yellow];
2389[label="215.114.206.233;s;2pkt 2fpkt", shape=diamond, color=yellow];
3060[label="79.249.2.198;s;2pkt 2fpkt", shape=diamond, color=yellow];
3434[label="196.147.80.107;s;2pkt 2fpkt", shape=diamond, color=yellow];
4427[label="210.92.102.170;s;1pkt 1fpkt", shape=hexagon, color=black];
4588[label="38.178.195.168;s;1pkt 1fpkt", shape=hexagon, color=black];
4878[label="194.169.138.134;s;1pkt 1fpkt", shape=hexagon, color=black];
5389[label="34.112.73.65;s;1pkt 1fpkt", shape=hexagon, color=black];
5580[label="79.249.2.198;s;2pkt 2fpkt", shape=hexagon, color=black];
6008[label="206.65.173.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6527[label="196.147.80.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6737[label="207.187.154.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6798[label="37.8.191.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7352[label="207.187.154.160;2pkt 2fpkt", shape=invtriangle, color=brown];
7371[label="37.8.191.174;2pkt 2fpkt", shape=invtriangle, color=brown];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.184.39.2:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (10.1572%)&lt;BR/&gt; 8080: (8.28295%)&lt;BR/&gt; 80: (4.59492%)&lt;BR/&gt; 3128: (3.74849%)&lt;BR/&gt; 2122: (3.08343%)&gt;];
}
446--455[label="0.212121;21pkt 21fpkt"];
446--471[label="0.0149254;1pkt 1fpkt"];
446--473[label="0.122995;23pkt 23fpkt"];
446--678[label="0.0269058;6pkt 6fpkt"];
446--980[label="0.0657895;5pkt 5fpkt"];
446--990[label="0.104575;16pkt 16fpkt"];
446--1016[label="0.0863309;24pkt 24fpkt"];
446--1041[label="0.0871795;17pkt 17fpkt"];
446--1058[label="0.0588235;7pkt 7fpkt"];
446--1060[label="0.122449;6pkt 6fpkt"];
446--1092[label="0.0847458;10pkt 10fpkt"];
446--1094[label="0.0588235;10pkt 10fpkt"];
446--1201[label="0.166667;3pkt 3fpkt"];
446--1277[label="0.135294;46pkt 46fpkt"];
446--1399[label="1;2pkt 2fpkt"];
446--1429[label="1;1pkt 1fpkt"];
446--1455[label="1;1pkt 1fpkt"];
446--1477[label="1;2pkt 2fpkt"];
446--1541[label="0.0714286;1pkt 1fpkt"];
446--1548[label="0.0655738;12pkt 12fpkt"];
446--1588[label="0.173333;13pkt 13fpkt"];
446--1599[label="0.0444444;2pkt 2fpkt"];
446--1620[label="0.0680851;16pkt 16fpkt"];
446--1625[label="0.0989011;18pkt 18fpkt"];
446--1628[label="0.0600707;17pkt 17fpkt"];
446--1871[label="1;1pkt 1fpkt"];
446--1874[label="1;1pkt 1fpkt"];
446--1897[label="1;1pkt 1fpkt"];
446--1948[label="0.0714286;1pkt 1fpkt"];
446--2021[label="0.197802;18pkt 18fpkt"];
446--2044[label="0.0714286;3pkt 3fpkt"];
446--2106[label="0.111111;4pkt 4fpkt"];
446--2322[label="1;2pkt 2fpkt"];
446--2383[label="0.00126103;1pkt 1fpkt"];
446--2389[label="1;2pkt 2fpkt"];
446--2507[label="0.0828025;13pkt 13fpkt"];
446--2541[label="0.230769;21pkt 21fpkt"];
446--2610[label="0.238095;5pkt 5fpkt"];
446--2827[label="0.0769231;1pkt 1fpkt"];
446--2844[label="0.163636;9pkt 9fpkt"];
446--2849[label="0.137931;12pkt 12fpkt"];
446--2935[label="0.179487;14pkt 14fpkt"];
446--2973[label="0.166667;1pkt 1fpkt"];
446--3060[label="1;2pkt 2fpkt"];
446--3177[label="0.147541;9pkt 9fpkt"];
446--3434[label="1;2pkt 2fpkt"];
446--3522[label="0.140625;9pkt 9fpkt"];
446--3838[label="1;2pkt 2fpkt"];
446--4427[label="1;1pkt 1fpkt"];
446--4588[label="1;1pkt 1fpkt"];
446--4700[label="0.111111;3pkt 3fpkt"];
446--4713[label="0.0588235;10pkt 10fpkt"];
446--4736[label="0.179487;14pkt 14fpkt"];
446--4878[label="1;1pkt 1fpkt"];
446--4901[label="0.00126103;1pkt 1fpkt"];
446--4992[label="0.229508;14pkt 14fpkt"];
446--4998[label="0.125;3pkt 3fpkt"];
446--5120[label="0.212121;21pkt 21fpkt"];
446--5123[label="0.0188679;1pkt 1fpkt"];
446--5124[label="0.0714286;1pkt 1fpkt"];
446--5135[label="0.0759494;12pkt 12fpkt"];
446--5186[label="0.0769231;1pkt 1fpkt"];
446--5220[label="0.0588235;2pkt 2fpkt"];
446--5239[label="0.146667;11pkt 11fpkt"];
446--5249[label="0.0909091;1pkt 1fpkt"];
446--5306[label="0.116438;34pkt 34fpkt"];
446--5314[label="0.179104;12pkt 12fpkt"];
446--5350[label="0.166667;1pkt 1fpkt"];
446--5389[label="1;1pkt 1fpkt"];
446--5580[label="1;2pkt 2fpkt"];
446--5615[label="0.108844;16pkt 16fpkt"];
446--5620[label="0.0619469;7pkt 7fpkt"];
446--5631[label="0.0594796;16pkt 16fpkt"];
446--5633[label="0.166667;9pkt 9fpkt"];
446--5728[label="1;2pkt 2fpkt"];
446--5739[label="0.147541;9pkt 9fpkt"];
446--5831[label="0.00126103;1pkt 1fpkt"];
446--5849[label="0.0769231;1pkt 1fpkt"];
446--5857[label="0.2;11pkt 11fpkt"];
446--5891[label="0.00126103;1pkt 1fpkt"];
446--5906[label="0.00126103;1pkt 1fpkt"];
446--5909[label="0.00126103;1pkt 1fpkt"];
446--5924[label="0.00126103;1pkt 1fpkt"];
446--5936[label="0.00126103;1pkt 1fpkt"];
446--5938[label="0.00126103;1pkt 1fpkt"];
446--5945[label="0.00126103;1pkt 1fpkt"];
446--5957[label="0.00126103;1pkt 1fpkt"];
446--5959[label="0.00126103;1pkt 1fpkt"];
446--6002[label="0.166667;13pkt 13fpkt"];
446--6008[label="1;2pkt 2fpkt"];
446--6045[label="0.116402;22pkt 22fpkt"];
446--6056[label="0.0833333;1pkt 1fpkt"];
446--6105[label="0.0952381;4pkt 4fpkt"];
446--6288[label="0.0769231;1pkt 1fpkt"];
446--6333[label="0.175;14pkt 14fpkt"];
446--6491[label="0.129032;8pkt 8fpkt"];
446--6527[label="1;1pkt 1fpkt"];
446--6673[label="0.0833333;1pkt 1fpkt"];
446--6737[label="1;2pkt 2fpkt"];
446--6798[label="1;2pkt 2fpkt"];
446--6853[label="0.333333;1pkt 1fpkt"];
446--7035[label="0.486486;36pkt 36fpkt"];
446--7352[label="1;2pkt 2fpkt"];
446--7371[label="1;2pkt 2fpkt"];
1399--6798[label="1;2pkt 2fpkt"];
1399--7371[label="1;2pkt 2fpkt"];
1429--4427[label="1;1pkt 1fpkt"];
1455--4588[label="1;1pkt 1fpkt"];
1871--5389[label="1;1pkt 1fpkt"];
1897--4878[label="1;1pkt 1fpkt"];
2322--6737[label="1;2pkt 2fpkt"];
2322--7352[label="1;2pkt 2fpkt"];
3060--5580[label="1;2pkt 2fpkt"];
3434--6527[label="1;1pkt 1fpkt"];
6737--7352[label="1;2pkt 2fpkt"];
6798--7371[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.39.2"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
3541[label="196.235.238.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
3573[label="145.84.98.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.235.238.217:123, 145.84.98.0:123}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (100%)&gt;];
}
3541--3573[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.98.0" dst_port="123" src_ip="196.235.238.217" src_port="123"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
2[label="149.216.235.5s;2pkt 2fpkt", shape=rectangle, color=red];
1422[label="207.81.184.97;d;19pkt 19fpkt", shape=diamond, color=yellow];
1423[label="149.216.235.5;s;243pkt 243fpkt", shape=diamond, color=yellow];
4582[label="207.81.184.97;d;19pkt 19fpkt", shape=hexagon, color=black];
4850[label="149.216.235.5;s;241pkt 241fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.235.5:*, *:80}[99.5885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8092%)&lt;BR/&gt; 57121: (0.477099%)&lt;BR/&gt; 51350: (0.477099%)&lt;BR/&gt; 56850: (0.381679%)&lt;BR/&gt; 56555: (0.381679%)&gt;];
}
2--1422[label="1;2pkt 2fpkt"];
2--1423[label="1;2pkt 2fpkt"];
2--4582[label="1;2pkt 2fpkt"];
2--4850[label="1;2pkt 2fpkt"];
1422--1423[label="1;19pkt 19fpkt"];
1422--4582[label="1;19pkt 19fpkt"];
1422--4850[label="1;19pkt 19fpkt"];
1422--5891[label="0.105263;2pkt 2fpkt"];
1422--5924[label="0.105263;2pkt 2fpkt"];
1422--5945[label="0.105263;2pkt 2fpkt"];
1423--3647[label="0.12;3pkt 3fpkt"];
1423--4257[label="0.0205761;5pkt 5fpkt"];
1423--4582[label="1;19pkt 19fpkt"];
1423--4850[label="1;241pkt 241fpkt"];
1423--5891[label="0.0658436;16pkt 16fpkt"];
1423--5910[label="0.0946502;23pkt 23fpkt"];
1423--5913[label="0.148148;36pkt 36fpkt"];
1423--5924[label="0.0658436;16pkt 16fpkt"];
1423--5939[label="0.0946502;23pkt 23fpkt"];
1423--5945[label="0.0658436;16pkt 16fpkt"];
1423--5960[label="0.0946502;23pkt 23fpkt"];
4582--4850[label="1;19pkt 19fpkt"];
4582--5891[label="0.105263;2pkt 2fpkt"];
4582--5924[label="0.105263;2pkt 2fpkt"];
4582--5945[label="0.105263;2pkt 2fpkt"];
4850--5891[label="0.06639;16pkt 16fpkt"];
4850--5910[label="0.0954357;23pkt 23fpkt"];
4850--5913[label="0.149378;36pkt 36fpkt"];
4850--5924[label="0.06639;16pkt 16fpkt"];
4850--5939[label="0.0954357;23pkt 23fpkt"];
4850--5945[label="0.06639;16pkt 16fpkt"];
4850--5960[label="0.0954357;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.216.235.5"/>
    </slice>
    <from sec="1183784518" usec="0"/>
    <to sec="1183785150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.203.224.19"/>
      <from sec="1183784911" usec="0"/>
      <to sec="1183785216" usec="0"/>
    </slice>
    <from sec="1183784911" usec="0"/>
    <to sec="1183785216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
3746[label="136.119.129.122;s;83pkt 83fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.129.122:*, 215.73.118.1:80}[56.6265%]&lt;BR/&gt;{136.119.129.122:*, 215.73.118.28:80}[27.7108%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33321: (0.60241%)&lt;BR/&gt; 33320: (0.60241%)&lt;BR/&gt; 33319: (0.60241%)&lt;BR/&gt; 33318: (0.60241%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="215.73.118.1" dst_port="80" src_ip="136.119.129.122"/>
      <filter dst_ip="215.73.118.28" dst_port="80" src_ip="136.119.129.122"/>
    </slice>
    <from sec="1183785033" usec="0"/>
    <to sec="1183785200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
3409[label="38.178.194.250;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.145.133:1267, 38.178.194.250:80}[50%]&lt;BR/&gt;{165.206.145.133:1272, 38.178.194.250:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1272: (25%)&lt;BR/&gt; 1267: (25%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="38.178.194.250" dst_port="80" src_ip="165.206.145.133" src_port="1272"/>
      <filter dst_ip="38.178.194.250" dst_port="80" src_ip="165.206.145.133" src_port="1267"/>
    </slice>
    <from sec="1183784965" usec="0"/>
    <to sec="1183785021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="4.43.150.48"/>
      <from sec="1183785056" usec="0"/>
      <to sec="1183785068" usec="0"/>
    </slice>
    <from sec="1183785056" usec="0"/>
    <to sec="1183785068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
3786[label="149.197.241.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
3796[label="32.228.121.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
5719[label="32.228.121.54;s;2pkt 2fpkt", shape=hexagon, color=black];
5774[label="149.197.241.12;d;2pkt 2fpkt", shape=hexagon, color=black];
6274[label="32.228.121.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.228.121.54:80, 149.197.241.12:36234}[50%]&lt;BR/&gt;{32.228.121.54:80, 149.197.241.12:36235}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36235: (25%)&lt;BR/&gt; 36234: (25%)&gt;];
}
3786--3796[label="1;2pkt 2fpkt"];
3786--5719[label="1;2pkt 2fpkt"];
3786--5774[label="1;2pkt 2fpkt"];
3786--6274[label="1;2pkt 2fpkt"];
3796--5719[label="1;2pkt 2fpkt"];
3796--5774[label="1;2pkt 2fpkt"];
3796--6274[label="1;2pkt 2fpkt"];
5719--5774[label="1;2pkt 2fpkt"];
5719--6274[label="1;2pkt 2fpkt"];
5774--6274[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.241.12" dst_port="36235" src_ip="32.228.121.54" src_port="80"/>
      <filter dst_ip="149.197.241.12" dst_port="36234" src_ip="32.228.121.54" src_port="80"/>
    </slice>
    <from sec="1183785064" usec="0"/>
    <to sec="1183785157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
1890[label="215.194.83.96;d;2pkt 2fpkt", shape=diamond, color=yellow];
4613[label="215.194.83.96;d;2pkt 2fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.42.152:3125, 215.194.83.96:1857}[50%]&lt;BR/&gt;{215.184.42.152:3125, 215.194.83.96:1858}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 1858: (25%)&lt;BR/&gt; 1857: (25%)&gt;];
}
1890--4443[label="1;2pkt 2fpkt"];
1890--4613[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.194.83.96" dst_port="1858" src_ip="215.184.42.152" src_port="3125"/>
      <filter dst_ip="215.194.83.96" dst_port="1857" src_ip="215.184.42.152" src_port="3125"/>
    </slice>
    <from sec="1183784635" usec="0"/>
    <to sec="1183784690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
413[label="36.77.51.248;s;906pkt 906fpkt", shape=diamond, color=yellow];
471[label="215.0.35.205;s;67pkt 67fpkt", shape=diamond, color=yellow];
652[label="145.84.224.168;d;30pkt 30fpkt", shape=diamond, color=yellow];
723[label="36.77.51.31;s;814pkt 814fpkt", shape=diamond, color=yellow];
778[label="145.84.253.74;d;8pkt 8fpkt", shape=diamond, color=yellow];
1074[label="165.206.145.209;d;512pkt 512fpkt", shape=diamond, color=yellow];
1242[label="149.197.187.73;d;385pkt 385fpkt", shape=diamond, color=yellow];
1312[label="204.183.83.88;s;1039pkt 1039fpkt", shape=diamond, color=yellow];
1320[label="90.114.184.51;s;27pkt 27fpkt", shape=diamond, color=yellow];
1332[label="165.206.145.124;d;53pkt 53fpkt", shape=diamond, color=yellow];
1373[label="149.197.89.41;d;110pkt 110fpkt", shape=diamond, color=yellow];
1432[label="149.197.133.97;d;3pkt 3fpkt", shape=diamond, color=yellow];
1434[label="40.240.121.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
1531[label="214.10.224.129;d;89pkt 89fpkt", shape=diamond, color=yellow];
1572[label="145.84.136.51;d;224pkt 224fpkt", shape=diamond, color=yellow];
1646[label="145.84.98.142;d;135pkt 135fpkt", shape=diamond, color=yellow];
1741[label="204.183.10.34;s;81pkt 81fpkt", shape=diamond, color=yellow];
1964[label="145.84.81.238;d;39pkt 39fpkt", shape=diamond, color=yellow];
2011[label="145.84.96.21;d;51pkt 51fpkt", shape=diamond, color=yellow];
2052[label="214.162.6.88;d;206pkt 206fpkt", shape=diamond, color=yellow];
2144[label="145.84.106.212;d;46pkt 46fpkt", shape=diamond, color=yellow];
2207[label="145.84.181.66;d;79pkt 79fpkt", shape=diamond, color=yellow];
2219[label="145.84.77.69;d;24pkt 24fpkt", shape=diamond, color=yellow];
2232[label="214.205.78.0;s;18pkt 18fpkt", shape=diamond, color=yellow];
2476[label="36.5.94.105;s;104pkt 104fpkt", shape=diamond, color=yellow];
2568[label="214.7.139.16;d;132pkt 132fpkt", shape=diamond, color=yellow];
2624[label="34.2.169.103;s;37pkt 37fpkt", shape=diamond, color=yellow];
2888[label="215.184.46.0;d;215pkt 215fpkt", shape=diamond, color=yellow];
2954[label="1.216.26.72;s;69pkt 69fpkt", shape=diamond, color=yellow];
3063[label="145.84.81.130;d;6pkt 6fpkt", shape=diamond, color=yellow];
3194[label="165.206.17.247;d;67pkt 67fpkt", shape=diamond, color=yellow];
3202[label="215.184.38.33;d;157pkt 157fpkt", shape=diamond, color=yellow];
3288[label="165.206.145.58;d;83pkt 83fpkt", shape=diamond, color=yellow];
3331[label="145.84.218.69;d;35pkt 35fpkt", shape=diamond, color=yellow];
3358[label="145.84.97.194;d;47pkt 47fpkt", shape=diamond, color=yellow];
3480[label="217.240.6.112;s;102pkt 102fpkt", shape=diamond, color=yellow];
3591[label="215.0.35.206;d;23pkt 23fpkt", shape=diamond, color=yellow];
3648[label="145.84.14.137;d;21pkt 21fpkt", shape=diamond, color=yellow];
3732[label="200.45.148.99;s;174pkt 174fpkt", shape=diamond, color=yellow];
3793[label="79.108.174.184;s;2pkt 2fpkt", shape=diamond, color=yellow];
3878[label="145.84.184.125;d;115pkt 115fpkt", shape=diamond, color=yellow];
3899[label="165.206.74.36;d;190pkt 190fpkt", shape=diamond, color=yellow];
4224[label="145.84.26.38;d;47pkt 47fpkt", shape=hexagon, color=black];
4239[label="145.84.224.168;d;29pkt 29fpkt", shape=hexagon, color=black];
4370[label="36.77.51.31;s;381pkt 381fpkt", shape=hexagon, color=black];
4498[label="165.206.145.209;d;512pkt 512fpkt", shape=hexagon, color=black];
4572[label="149.197.89.41;d;47pkt 47fpkt", shape=hexagon, color=black];
4652[label="165.206.146.194;d;26pkt 26fpkt", shape=hexagon, color=black];
5007[label="145.84.97.140;d;53pkt 53fpkt", shape=hexagon, color=black];
5185[label="215.184.40.209;d;602pkt 602fpkt", shape=hexagon, color=black];
5209[label="40.240.82.188;s;80pkt 80fpkt", shape=hexagon, color=black];
5326[label="145.84.253.18;d;48pkt 48fpkt", shape=hexagon, color=black];
5331[label="204.183.83.88;s;728pkt 728fpkt", shape=hexagon, color=black];
5510[label="149.197.227.22;d;277pkt 277fpkt", shape=hexagon, color=black];
5667[label="214.7.139.16;d;126pkt 126fpkt", shape=hexagon, color=black];
5684[label="145.84.181.176;d;8pkt 8fpkt", shape=hexagon, color=black];
6499[label="200.45.148.99;180pkt 180fpkt", shape=pentagon, color=darkviolet];
6662[label="206.206.252.140;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6835[label="79.108.174.184;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[77.0667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.7957%)&lt;BR/&gt; 0: (3.67389%)&lt;BR/&gt; 53: (1.49123%)&lt;BR/&gt; 443: (0.830753%)&lt;BR/&gt; 25: (0.810114%)&gt;];
}
413--436[label="0.028314;22pkt 22fpkt"];
413--453[label="0.00110375;1pkt 1fpkt"];
413--464[label="0.0157068;3pkt 3fpkt"];
413--506[label="0.0232558;1pkt 1fpkt"];
413--558[label="0.0751748;43pkt 43fpkt"];
413--582[label="0.0333333;8pkt 8fpkt"];
413--612[label="0.0375147;32pkt 32fpkt"];
413--616[label="0.0672854;29pkt 29fpkt"];
413--652[label="0.133333;4pkt 4fpkt"];
413--666[label="0.00267023;2pkt 2fpkt"];
413--737[label="0.0103093;2pkt 2fpkt"];
413--741[label="0.0145278;6pkt 6fpkt"];
413--762[label="0.0555556;2pkt 2fpkt"];
413--768[label="0.0060241;1pkt 1fpkt"];
413--778[label="0.125;1pkt 1fpkt"];
413--916[label="0.00331126;3pkt 3fpkt"];
413--961[label="0.00220751;2pkt 2fpkt"];
413--994[label="0.00987654;8pkt 8fpkt"];
413--1074[label="0.00585938;3pkt 3fpkt"];
413--1162[label="0.0740741;2pkt 2fpkt"];
413--1195[label="0.0163043;9pkt 9fpkt"];
413--1197[label="0.0454545;2pkt 2fpkt"];
413--1234[label="0.0606061;6pkt 6fpkt"];
413--1242[label="0.0207792;8pkt 8fpkt"];
413--1255[label="0.016129;4pkt 4fpkt"];
413--1257[label="0.00946372;6pkt 6fpkt"];
413--1295[label="0.1;3pkt 3fpkt"];
413--1332[label="0.0188679;1pkt 1fpkt"];
413--1373[label="0.354545;39pkt 39fpkt"];
413--1528[label="0.0350877;2pkt 2fpkt"];
413--1562[label="0.135417;13pkt 13fpkt"];
413--1572[label="0.0357143;8pkt 8fpkt"];
413--1633[label="0.00714286;1pkt 1fpkt"];
413--1661[label="0.00845666;4pkt 4fpkt"];
413--1687[label="0.010101;1pkt 1fpkt"];
413--1734[label="0.0506329;4pkt 4fpkt"];
413--1742[label="0.245614;14pkt 14fpkt"];
413--1964[label="0.333333;13pkt 13fpkt"];
413--2011[label="0.0784314;4pkt 4fpkt"];
413--2061[label="0.030303;1pkt 1fpkt"];
413--2144[label="0.152174;7pkt 7fpkt"];
413--2152[label="0.00564972;1pkt 1fpkt"];
413--2207[label="0.0886076;7pkt 7fpkt"];
413--2217[label="0.0208333;2pkt 2fpkt"];
413--2219[label="0.0416667;1pkt 1fpkt"];
413--2436[label="0.0283019;3pkt 3fpkt"];
413--2437[label="0.0425532;2pkt 2fpkt"];
413--2448[label="0.0428571;3pkt 3fpkt"];
413--2477[label="0.010101;2pkt 2fpkt"];
413--2493[label="0.22;11pkt 11fpkt"];
413--2499[label="0.0257235;8pkt 8fpkt"];
413--2568[label="0.0909091;12pkt 12fpkt"];
413--2679[label="0.0555556;1pkt 1fpkt"];
413--2682[label="0.00540541;1pkt 1fpkt"];
413--2951[label="0.0138889;1pkt 1fpkt"];
413--3063[label="0.333333;2pkt 2fpkt"];
413--3194[label="0.0597015;4pkt 4fpkt"];
413--3219[label="0.0130719;2pkt 2fpkt"];
413--3241[label="0.117647;4pkt 4fpkt"];
413--3271[label="0.290323;27pkt 27fpkt"];
413--3288[label="0.0481928;4pkt 4fpkt"];
413--3331[label="0.0285714;1pkt 1fpkt"];
413--3358[label="0.0212766;1pkt 1fpkt"];
413--3626[label="0.084507;6pkt 6fpkt"];
413--3648[label="0.190476;4pkt 4fpkt"];
413--3673[label="0.5;4pkt 4fpkt"];
413--3878[label="0.0434783;5pkt 5fpkt"];
413--3895[label="0.272727;6pkt 6fpkt"];
413--3899[label="0.0631579;12pkt 12fpkt"];
413--3921[label="0.0263158;2pkt 2fpkt"];
413--4162[label="0.00772627;7pkt 7fpkt"];
413--4168[label="0.0143885;12pkt 12fpkt"];
413--4180[label="0.0231788;21pkt 21fpkt"];
413--4224[label="0.0638298;3pkt 3fpkt"];
413--4239[label="0.137931;4pkt 4fpkt"];
413--4331[label="0.138889;10pkt 10fpkt"];
413--4449[label="0.00110375;1pkt 1fpkt"];
413--4463[label="0.0178891;10pkt 10fpkt"];
413--4474[label="0.00606061;1pkt 1fpkt"];
413--4488[label="0.220339;13pkt 13fpkt"];
413--4498[label="0.00585938;3pkt 3fpkt"];
413--4525[label="0.0103627;4pkt 4fpkt"];
413--4537[label="0.0689655;6pkt 6fpkt"];
413--4545[label="0.00831947;5pkt 5fpkt"];
413--4572[label="0.361702;17pkt 17fpkt"];
413--4623[label="0.0234742;5pkt 5fpkt"];
413--4629[label="0.00220751;2pkt 2fpkt"];
413--4652[label="0.0769231;2pkt 2fpkt"];
413--4760[label="0.00588235;2pkt 2fpkt"];
413--4784[label="0.016129;4pkt 4fpkt"];
413--4805[label="0.025;1pkt 1fpkt"];
413--4811[label="0.302326;13pkt 13fpkt"];
413--4990[label="0.0106383;2pkt 2fpkt"];
413--5058[label="0.00540541;1pkt 1fpkt"];
413--5108[label="0.00682594;2pkt 2fpkt"];
413--5114[label="0.0321361;17pkt 17fpkt"];
413--5166[label="0.0338983;2pkt 2fpkt"];
413--5185[label="0.0282392;17pkt 17fpkt"];
413--5321[label="0.133333;6pkt 6fpkt"];
413--5510[label="0.0541516;15pkt 15fpkt"];
413--5521[label="0.222222;10pkt 10fpkt"];
413--5536[label="0.0322581;1pkt 1fpkt"];
413--5616[label="0.0243902;1pkt 1fpkt"];
413--5667[label="0.0952381;12pkt 12fpkt"];
413--5684[label="0.5;4pkt 4fpkt"];
413--5793[label="0.0118694;4pkt 4fpkt"];
413--5800[label="0.00772627;7pkt 7fpkt"];
413--5808[label="0.220339;13pkt 13fpkt"];
413--5821[label="0.0163934;7pkt 7fpkt"];
413--5842[label="0.0234742;5pkt 5fpkt"];
413--5887[label="0.00110375;1pkt 1fpkt"];
471--582[label="0.0149254;1pkt 1fpkt"];
471--612[label="0.0149254;1pkt 1fpkt"];
471--741[label="0.0149254;1pkt 1fpkt"];
471--916[label="0.0149254;1pkt 1fpkt"];
471--930[label="0.0149254;1pkt 1fpkt"];
471--961[label="0.0149254;1pkt 1fpkt"];
471--1131[label="0.0149254;1pkt 1fpkt"];
471--1531[label="0.0149254;1pkt 1fpkt"];
471--1646[label="0.0149254;1pkt 1fpkt"];
471--1697[label="0.0149254;1pkt 1fpkt"];
471--1991[label="0.0149254;1pkt 1fpkt"];
471--2034[label="0.0149254;1pkt 1fpkt"];
471--2052[label="0.0149254;1pkt 1fpkt"];
471--2126[label="0.0149254;1pkt 1fpkt"];
471--2888[label="0.0149254;1pkt 1fpkt"];
471--3202[label="0.0149254;1pkt 1fpkt"];
471--3591[label="0.0434783;1pkt 1fpkt"];
471--4159[label="0.0149254;1pkt 1fpkt"];
471--4170[label="0.0149254;1pkt 1fpkt"];
471--4180[label="0.0149254;1pkt 1fpkt"];
471--4283[label="0.0149254;1pkt 1fpkt"];
471--4310[label="0.0149254;1pkt 1fpkt"];
471--4444[label="0.0149254;1pkt 1fpkt"];
471--4449[label="0.0149254;1pkt 1fpkt"];
471--4456[label="0.0149254;1pkt 1fpkt"];
471--4517[label="0.0149254;1pkt 1fpkt"];
471--4629[label="0.0149254;1pkt 1fpkt"];
471--4645[label="0.0149254;1pkt 1fpkt"];
471--4709[label="0.0149254;1pkt 1fpkt"];
471--5103[label="0.0149254;1pkt 1fpkt"];
471--5123[label="1;53pkt 53fpkt"];
471--5185[label="0.0149254;1pkt 1fpkt"];
471--5486[label="0.0149254;1pkt 1fpkt"];
471--5630[label="0.0149254;1pkt 1fpkt"];
471--5793[label="0.0149254;1pkt 1fpkt"];
471--5880[label="0.0149254;1pkt 1fpkt"];
471--5881[label="0.0149254;1pkt 1fpkt"];
471--5886[label="0.0149254;1pkt 1fpkt"];
471--5887[label="0.0149254;1pkt 1fpkt"];
471--5916[label="0.0149254;1pkt 1fpkt"];
471--5917[label="0.0149254;1pkt 1fpkt"];
471--5940[label="0.0149254;1pkt 1fpkt"];
652--723[label="0.366667;11pkt 11fpkt"];
652--1076[label="0.0333333;1pkt 1fpkt"];
652--1741[label="0.0666667;2pkt 2fpkt"];
652--2116[label="0.0333333;1pkt 1fpkt"];
652--2196[label="0.0666667;2pkt 2fpkt"];
652--3917[label="0.0666667;2pkt 2fpkt"];
652--4239[label="1;29pkt 29fpkt"];
652--4370[label="0.333333;10pkt 10fpkt"];
652--5174[label="0.0333333;1pkt 1fpkt"];
652--6156[label="0.0666667;2pkt 2fpkt"];
723--735[label="0.00340136;1pkt 1fpkt"];
723--741[label="0.0145278;6pkt 6fpkt"];
723--774[label="0.0769231;3pkt 3fpkt"];
723--838[label="0.111111;1pkt 1fpkt"];
723--920[label="0.0111111;1pkt 1fpkt"];
723--961[label="0.0110565;9pkt 9fpkt"];
723--994[label="0.0111111;9pkt 9fpkt"];
723--1074[label="0.00390625;2pkt 2fpkt"];
723--1181[label="0.142857;1pkt 1fpkt"];
723--1195[label="0.00181159;1pkt 1fpkt"];
723--1197[label="0.181818;8pkt 8fpkt"];
723--1226[label="0.00625;1pkt 1fpkt"];
723--1234[label="0.040404;4pkt 4fpkt"];
723--1242[label="0.0155844;6pkt 6fpkt"];
723--1279[label="0.0153846;1pkt 1fpkt"];
723--1332[label="0.283019;15pkt 15fpkt"];
723--1373[label="0.327273;36pkt 36fpkt"];
723--1375[label="0.03125;1pkt 1fpkt"];
723--1432[label="0.666667;2pkt 2fpkt"];
723--1526[label="0.00478469;1pkt 1fpkt"];
723--1572[label="0.0446429;10pkt 10fpkt"];
723--1661[label="0.0190275;9pkt 9fpkt"];
723--1734[label="0.0126582;1pkt 1fpkt"];
723--1771[label="0.0175439;1pkt 1fpkt"];
723--1991[label="0.0227964;15pkt 15fpkt"];
723--2011[label="0.0588235;3pkt 3fpkt"];
723--2061[label="0.030303;1pkt 1fpkt"];
723--2144[label="0.152174;7pkt 7fpkt"];
723--2152[label="0.0169492;3pkt 3fpkt"];
723--2183[label="0.193548;6pkt 6fpkt"];
723--2186[label="0.00614251;5pkt 5fpkt"];
723--2219[label="0.0416667;1pkt 1fpkt"];
723--2448[label="0.0714286;5pkt 5fpkt"];
723--2493[label="0.16;8pkt 8fpkt"];
723--2499[label="0.022508;7pkt 7fpkt"];
723--2568[label="0.0833333;11pkt 11fpkt"];
723--2587[label="0.0243902;1pkt 1fpkt"];
723--2592[label="0.0491803;3pkt 3fpkt"];
723--2607[label="0.0519481;4pkt 4fpkt"];
723--2679[label="0.5;9pkt 9fpkt"];
723--2709[label="0.0769231;1pkt 1fpkt"];
723--2786[label="0.107143;3pkt 3fpkt"];
723--2808[label="0.2;10pkt 10fpkt"];
723--2951[label="0.0138889;1pkt 1fpkt"];
723--3063[label="0.5;3pkt 3fpkt"];
723--3194[label="0.0149254;1pkt 1fpkt"];
723--3219[label="0.0130719;2pkt 2fpkt"];
723--3223[label="0.0172414;2pkt 2fpkt"];
723--3241[label="0.0294118;1pkt 1fpkt"];
723--3271[label="0.27957;26pkt 26fpkt"];
723--3288[label="0.0361446;3pkt 3fpkt"];
723--3331[label="0.114286;4pkt 4fpkt"];
723--3358[label="0.12766;6pkt 6fpkt"];
723--3526[label="0.0555556;6pkt 6fpkt"];
723--3606[label="0.0625;2pkt 2fpkt"];
723--3626[label="0.0985915;7pkt 7fpkt"];
723--3648[label="0.142857;3pkt 3fpkt"];
723--3675[label="0.0175439;1pkt 1fpkt"];
723--3878[label="0.0173913;2pkt 2fpkt"];
723--4162[label="0.012285;10pkt 10fpkt"];
723--4168[label="0.019656;16pkt 16fpkt"];
723--4180[label="0.0208845;17pkt 17fpkt"];
723--4224[label="0.0638298;3pkt 3fpkt"];
723--4239[label="0.37931;11pkt 11fpkt"];
723--4331[label="0.0972222;7pkt 7fpkt"];
723--4370[label="1;381pkt 381fpkt"];
723--4406[label="0.111111;1pkt 1fpkt"];
723--4462[label="0.00980392;1pkt 1fpkt"];
723--4463[label="0.0161002;9pkt 9fpkt"];
723--4474[label="0.00606061;1pkt 1fpkt"];
723--4498[label="0.00390625;2pkt 2fpkt"];
723--4525[label="0.0233161;9pkt 9fpkt"];
723--4533[label="0.00704225;1pkt 1fpkt"];
723--4537[label="0.0344828;3pkt 3fpkt"];
723--4571[label="0.05;1pkt 1fpkt"];
723--4572[label="0.340426;16pkt 16fpkt"];
723--4623[label="0.0234742;5pkt 5fpkt"];
723--4631[label="0.0357143;1pkt 1fpkt"];
723--4709[label="0.0192926;6pkt 6fpkt"];
723--5007[label="0.0188679;1pkt 1fpkt"];
723--5076[label="0.047619;1pkt 1fpkt"];
723--5096[label="0.0666667;3pkt 3fpkt"];
723--5108[label="0.00682594;2pkt 2fpkt"];
723--5114[label="0.0378072;20pkt 20fpkt"];
723--5166[label="0.0508475;3pkt 3fpkt"];
723--5185[label="0.0182724;11pkt 11fpkt"];
723--5321[label="0.155556;7pkt 7fpkt"];
723--5326[label="0.0416667;2pkt 2fpkt"];
723--5334[label="0.0277778;1pkt 1fpkt"];
723--5346[label="0.00547445;3pkt 3fpkt"];
723--5496[label="0.208333;10pkt 10fpkt"];
723--5510[label="0.0613718;17pkt 17fpkt"];
723--5521[label="0.133333;6pkt 6fpkt"];
723--5616[label="0.0243902;1pkt 1fpkt"];
723--5624[label="0.0588235;5pkt 5fpkt"];
723--5667[label="0.0873016;11pkt 11fpkt"];
723--5793[label="0.0178042;6pkt 6fpkt"];
723--5800[label="0.012285;10pkt 10fpkt"];
723--5821[label="0.0257611;11pkt 11fpkt"];
723--5842[label="0.0234742;5pkt 5fpkt"];
778--4367[label="0.75;6pkt 6fpkt"];
1074--1076[label="0.00840336;2pkt 2fpkt"];
1074--1142[label="0.679688;348pkt 348fpkt"];
1074--1312[label="0.283203;145pkt 145fpkt"];
1074--1539[label="0.0675676;5pkt 5fpkt"];
1074--4198[label="0.00502513;1pkt 1fpkt"];
1074--4370[label="0.00524934;2pkt 2fpkt"];
1074--4498[label="1;512pkt 512fpkt"];
1074--4733[label="0.016129;3pkt 3fpkt"];
1074--4741[label="0.720251;345pkt 345fpkt"];
1074--5174[label="0.010929;2pkt 2fpkt"];
1074--5331[label="0.283203;145pkt 145fpkt"];
1074--6663[label="0.333333;1pkt 1fpkt"];
1242--1281[label="0.00699301;1pkt 1fpkt"];
1242--1298[label="0.00490196;1pkt 1fpkt"];
1242--1934[label="0.0025974;1pkt 1fpkt"];
1242--2132[label="0.031746;2pkt 2fpkt"];
1242--2694[label="0.0357143;1pkt 1fpkt"];
1242--2932[label="0.0192308;1pkt 1fpkt"];
1242--4370[label="0.0104987;4pkt 4fpkt"];
1242--4554[label="0.0025974;1pkt 1fpkt"];
1242--4674[label="0.00719424;1pkt 1fpkt"];
1242--4948[label="0.024024;8pkt 8fpkt"];
1242--5310[label="0.0238095;1pkt 1fpkt"];
1242--6171[label="0.0185185;1pkt 1fpkt"];
1242--6630[label="0.00302115;1pkt 1fpkt"];
1242--7353[label="0.0046729;1pkt 1fpkt"];
1312--1964[label="0.410256;16pkt 16fpkt"];
1312--2011[label="0.156863;8pkt 8fpkt"];
1312--2144[label="0.173913;8pkt 8fpkt"];
1312--2499[label="0.0514469;16pkt 16fpkt"];
1312--2568[label="0.0530303;7pkt 7fpkt"];
1312--2587[label="0.829268;34pkt 34fpkt"];
1312--3358[label="0.0212766;1pkt 1fpkt"];
1312--3899[label="0.847368;161pkt 161fpkt"];
1312--4162[label="0.00769971;8pkt 8fpkt"];
1312--4180[label="0.00769971;8pkt 8fpkt"];
1312--4331[label="0.263889;19pkt 19fpkt"];
1312--4498[label="0.283203;145pkt 145fpkt"];
1312--4545[label="0.304493;183pkt 183fpkt"];
1312--5114[label="0.177694;94pkt 94fpkt"];
1312--5321[label="0.177778;8pkt 8fpkt"];
1312--5331[label="1;728pkt 728fpkt"];
1312--5667[label="0.0555556;7pkt 7fpkt"];
1312--5800[label="0.00769971;8pkt 8fpkt"];
1320--1332[label="0.259259;7pkt 7fpkt"];
1320--4224[label="0.37037;10pkt 10fpkt"];
1332--1571[label="0.0188679;1pkt 1fpkt"];
1332--2067[label="0.0188679;1pkt 1fpkt"];
1332--2121[label="0.0377358;2pkt 2fpkt"];
1332--2554[label="0.0188679;1pkt 1fpkt"];
1332--4370[label="0.245283;13pkt 13fpkt"];
1332--4733[label="0.0188679;1pkt 1fpkt"];
1332--4765[label="0.0377358;2pkt 2fpkt"];
1332--4789[label="0.0377358;2pkt 2fpkt"];
1332--5619[label="0.0188679;1pkt 1fpkt"];
1373--4370[label="0.154545;17pkt 17fpkt"];
1373--4572[label="1;47pkt 47fpkt"];
1432--1434[label="1;1pkt 1fpkt"];
1432--4370[label="0.666667;2pkt 2fpkt"];
1531--2411[label="0.011236;1pkt 1fpkt"];
1531--2450[label="0.011236;1pkt 1fpkt"];
1531--2469[label="0.011236;1pkt 1fpkt"];
1531--2498[label="0.011236;1pkt 1fpkt"];
1531--2501[label="0.016129;1pkt 1fpkt"];
1531--3167[label="0.011236;1pkt 1fpkt"];
1531--3205[label="0.011236;1pkt 1fpkt"];
1531--4945[label="0.011236;1pkt 1fpkt"];
1531--4971[label="0.0208333;1pkt 1fpkt"];
1531--5090[label="0.0116279;1pkt 1fpkt"];
1531--5123[label="0.0188679;1pkt 1fpkt"];
1531--5891[label="0.011236;1pkt 1fpkt"];
1531--5910[label="0.0337079;3pkt 3fpkt"];
1531--5913[label="0.0224719;2pkt 2fpkt"];
1531--5924[label="0.011236;1pkt 1fpkt"];
1531--5939[label="0.0337079;3pkt 3fpkt"];
1531--5945[label="0.011236;1pkt 1fpkt"];
1531--5960[label="0.0337079;3pkt 3fpkt"];
1531--6170[label="0.0909091;1pkt 1fpkt"];
1531--6281[label="0.011236;1pkt 1fpkt"];
1531--6445[label="0.011236;1pkt 1fpkt"];
1531--6555[label="0.166667;1pkt 1fpkt"];
1531--7233[label="0.011236;1pkt 1fpkt"];
1531--7548[label="0.011236;1pkt 1fpkt"];
1572--1639[label="0.0213904;4pkt 4fpkt"];
1572--1745[label="0.0146341;3pkt 3fpkt"];
1572--1747[label="0.00446429;1pkt 1fpkt"];
1572--1934[label="0.0178571;4pkt 4fpkt"];
1572--2075[label="0.0111732;2pkt 2fpkt"];
1572--2078[label="0.00446429;1pkt 1fpkt"];
1572--2112[label="0.0171429;3pkt 3fpkt"];
1572--2143[label="0.00938967;2pkt 2fpkt"];
1572--2148[label="0.0159574;3pkt 3fpkt"];
1572--2178[label="0.00446429;1pkt 1fpkt"];
1572--2192[label="0.0283019;3pkt 3fpkt"];
1572--2411[label="0.00892857;1pkt 1fpkt"];
1572--2450[label="0.00662252;1pkt 1fpkt"];
1572--2469[label="0.00746269;1pkt 1fpkt"];
1572--2489[label="0.0102041;1pkt 1fpkt"];
1572--2498[label="0.00704225;1pkt 1fpkt"];
1572--2599[label="0.00719424;1pkt 1fpkt"];
1572--2816[label="0.00892857;1pkt 1fpkt"];
1572--3164[label="0.0120482;1pkt 1fpkt"];
1572--3171[label="0.037037;1pkt 1fpkt"];
1572--3205[label="0.0102041;1pkt 1fpkt"];
1572--3262[label="0.0307692;2pkt 2fpkt"];
1572--3502[label="0.008;1pkt 1fpkt"];
1572--3990[label="0.0133333;1pkt 1fpkt"];
1572--4191[label="0.00546448;1pkt 1fpkt"];
1572--4198[label="0.0201005;4pkt 4fpkt"];
1572--4313[label="0.0178571;4pkt 4fpkt"];
1572--4367[label="0.00446429;1pkt 1fpkt"];
1572--4370[label="0.0357143;8pkt 8fpkt"];
1572--4554[label="0.00446429;1pkt 1fpkt"];
1572--4733[label="0.016129;3pkt 3fpkt"];
1572--4768[label="0.0217391;2pkt 2fpkt"];
1572--4787[label="0.0232558;1pkt 1fpkt"];
1572--4798[label="0.00934579;2pkt 2fpkt"];
1572--4812[label="0.0227273;3pkt 3fpkt"];
1572--4945[label="0.00980392;1pkt 1fpkt"];
1572--5026[label="0.0526316;3pkt 3fpkt"];
1572--5090[label="0.0116279;1pkt 1fpkt"];
1572--5160[label="0.0107527;1pkt 1fpkt"];
1572--5174[label="0.0273224;5pkt 5fpkt"];
1572--5247[label="0.00446429;1pkt 1fpkt"];
1572--5256[label="0.00446429;1pkt 1fpkt"];
1572--5320[label="0.01;1pkt 1fpkt"];
1572--5332[label="0.0117647;1pkt 1fpkt"];
1572--5538[label="0.0212766;2pkt 2fpkt"];
1572--5555[label="0.03125;3pkt 3fpkt"];
1572--5862[label="0.0526316;3pkt 3fpkt"];
1572--6179[label="0.0108696;1pkt 1fpkt"];
1572--6445[label="0.00840336;1pkt 1fpkt"];
1572--6606[label="0.0245902;3pkt 3fpkt"];
1572--6630[label="0.00446429;1pkt 1fpkt"];
1572--6631[label="0.0285714;1pkt 1fpkt"];
1572--6662[label="0.388889;7pkt 7fpkt"];
1572--6747[label="0.0157068;3pkt 3fpkt"];
1572--6866[label="0.0113636;1pkt 1fpkt"];
1572--6933[label="0.00645161;1pkt 1fpkt"];
1572--6951[label="0.0178571;1pkt 1fpkt"];
1572--7233[label="0.00840336;1pkt 1fpkt"];
1572--7294[label="0.0245902;3pkt 3fpkt"];
1572--7303[label="0.0285714;1pkt 1fpkt"];
1572--7337[label="0.0113636;1pkt 1fpkt"];
1572--7353[label="0.00934579;2pkt 2fpkt"];
1572--7430[label="0.0178571;1pkt 1fpkt"];
1572--7548[label="0.00840336;1pkt 1fpkt"];
1646--2420[label="0.00925926;1pkt 1fpkt"];
1646--2472[label="0.0253165;2pkt 2fpkt"];
1646--2504[label="0.0246914;2pkt 2fpkt"];
1646--2947[label="0.0425532;4pkt 4fpkt"];
1646--3294[label="0.0172414;1pkt 1fpkt"];
1646--3580[label="0.0277778;2pkt 2fpkt"];
1646--4517[label="1;81pkt 81fpkt"];
1646--5123[label="0.0188679;1pkt 1fpkt"];
1646--5673[label="0.0465116;4pkt 4fpkt"];
1646--5890[label="0.0222222;3pkt 3fpkt"];
1646--5908[label="0.0148148;2pkt 2fpkt"];
1646--5911[label="0.0296296;4pkt 4fpkt"];
1646--5923[label="0.0222222;3pkt 3fpkt"];
1646--5944[label="0.0222222;3pkt 3fpkt"];
1646--5969[label="0.016129;1pkt 1fpkt"];
1646--6118[label="0.0253165;2pkt 2fpkt"];
1646--6389[label="0.0232558;2pkt 2fpkt"];
1646--6401[label="0.00869565;1pkt 1fpkt"];
1646--6957[label="0.0142857;1pkt 1fpkt"];
1646--7519[label="0.04;3pkt 3fpkt"];
1741--3194[label="0.0298507;2pkt 2fpkt"];
1741--3288[label="0.0123457;1pkt 1fpkt"];
1741--3895[label="0.0454545;1pkt 1fpkt"];
1741--3899[label="0.0246914;2pkt 2fpkt"];
1741--4168[label="0.0617284;5pkt 5fpkt"];
1741--4180[label="0.0246914;2pkt 2fpkt"];
1741--4239[label="0.0689655;2pkt 2fpkt"];
1741--4314[label="0.0833333;3pkt 3fpkt"];
1741--5185[label="0.037037;3pkt 3fpkt"];
1741--5821[label="0.0493827;4pkt 4fpkt"];
1964--4198[label="0.025641;1pkt 1fpkt"];
1964--4989[label="0.0512821;2pkt 2fpkt"];
1964--5331[label="0.410256;16pkt 16fpkt"];
1964--6996[label="0.0512821;2pkt 2fpkt"];
2011--2116[label="0.137255;7pkt 7fpkt"];
2011--2121[label="0.0392157;2pkt 2fpkt"];
2011--2476[label="0.0196078;1pkt 1fpkt"];
2011--2557[label="0.0217391;1pkt 1fpkt"];
2011--3261[label="0.0196078;1pkt 1fpkt"];
2011--4370[label="0.0196078;1pkt 1fpkt"];
2011--4518[label="0.0196078;1pkt 1fpkt"];
2011--4674[label="0.0784314;4pkt 4fpkt"];
2011--4789[label="0.0392157;2pkt 2fpkt"];
2011--4812[label="0.0196078;1pkt 1fpkt"];
2011--4963[label="0.0196078;1pkt 1fpkt"];
2011--5247[label="0.0196078;1pkt 1fpkt"];
2011--5331[label="0.156863;8pkt 8fpkt"];
2011--5811[label="0.0196078;1pkt 1fpkt"];
2011--7262[label="0.0196078;1pkt 1fpkt"];
2052--5123[label="0.0188679;1pkt 1fpkt"];
2052--5124[label="0.0714286;1pkt 1fpkt"];
2052--6288[label="0.0769231;1pkt 1fpkt"];
2052--6935[label="0.1;1pkt 1fpkt"];
2052--7248[label="0.0909091;1pkt 1fpkt"];
2052--7425[label="0.1;1pkt 1fpkt"];
2144--2830[label="0.0217391;1pkt 1fpkt"];
2144--2836[label="0.0652174;3pkt 3fpkt"];
2144--2838[label="0.05;2pkt 2fpkt"];
2144--4370[label="0.152174;7pkt 7fpkt"];
2144--4812[label="0.0652174;3pkt 3fpkt"];
2144--5188[label="0.0217391;1pkt 1fpkt"];
2144--5200[label="0.0652174;3pkt 3fpkt"];
2144--5321[label="1;45pkt 45fpkt"];
2144--5331[label="0.173913;8pkt 8fpkt"];
2144--5893[label="0.0217391;1pkt 1fpkt"];
2144--5926[label="0.0217391;1pkt 1fpkt"];
2144--5947[label="0.0217391;1pkt 1fpkt"];
2144--6583[label="0.0652174;3pkt 3fpkt"];
2144--6893[label="0.0217391;1pkt 1fpkt"];
2144--7284[label="0.0652174;3pkt 3fpkt"];
2144--7406[label="0.0217391;1pkt 1fpkt"];
2207--2411[label="0.0126582;1pkt 1fpkt"];
2207--2450[label="0.0126582;1pkt 1fpkt"];
2207--2469[label="0.0126582;1pkt 1fpkt"];
2207--2476[label="0.0253165;2pkt 2fpkt"];
2207--2540[label="0.0379747;3pkt 3fpkt"];
2207--2806[label="0.0126582;1pkt 1fpkt"];
2207--2816[label="0.0126582;1pkt 1fpkt"];
2207--2988[label="0.0253165;2pkt 2fpkt"];
2207--3164[label="0.0126582;1pkt 1fpkt"];
2207--4518[label="0.0126582;1pkt 1fpkt"];
2207--4945[label="0.0126582;1pkt 1fpkt"];
2207--4948[label="0.0506329;4pkt 4fpkt"];
2207--5090[label="0.0126582;1pkt 1fpkt"];
2207--5118[label="0.0126582;1pkt 1fpkt"];
2207--5160[label="0.0126582;1pkt 1fpkt"];
2207--5174[label="0.0379747;3pkt 3fpkt"];
2207--5269[label="0.0405405;3pkt 3fpkt"];
2207--5368[label="0.0253165;2pkt 2fpkt"];
2207--5555[label="0.0506329;4pkt 4fpkt"];
2207--5811[label="0.0126582;1pkt 1fpkt"];
2207--6423[label="0.0869565;2pkt 2fpkt"];
2207--6445[label="0.0126582;1pkt 1fpkt"];
2207--6447[label="0.0126582;1pkt 1fpkt"];
2207--6563[label="0.0434783;1pkt 1fpkt"];
2207--6870[label="0.025641;1pkt 1fpkt"];
2207--7233[label="0.0126582;1pkt 1fpkt"];
2207--7234[label="0.0126582;1pkt 1fpkt"];
2207--7262[label="0.0253165;2pkt 2fpkt"];
2207--7337[label="0.0126582;1pkt 1fpkt"];
2207--7548[label="0.0126582;1pkt 1fpkt"];
2219--2232[label="1;18pkt 18fpkt"];
2219--2476[label="0.0416667;1pkt 1fpkt"];
2219--2624[label="0.0416667;1pkt 1fpkt"];
2219--4370[label="0.0416667;1pkt 1fpkt"];
2219--4963[label="0.0416667;1pkt 1fpkt"];
2219--5209[label="0.0416667;1pkt 1fpkt"];
2219--7262[label="0.0416667;1pkt 1fpkt"];
2476--2477[label="0.0192308;2pkt 2fpkt"];
2476--2592[label="0.0163934;1pkt 1fpkt"];
2476--2934[label="0.0133333;1pkt 1fpkt"];
2476--3042[label="0.08;2pkt 2fpkt"];
2476--3878[label="0.00961538;1pkt 1fpkt"];
2476--3885[label="0.243902;10pkt 10fpkt"];
2476--4120[label="0.00961538;1pkt 1fpkt"];
2476--4162[label="0.00961538;1pkt 1fpkt"];
2476--4168[label="0.0384615;4pkt 4fpkt"];
2476--4180[label="0.0288462;3pkt 3fpkt"];
2476--4474[label="0.00961538;1pkt 1fpkt"];
2476--4553[label="0.00961538;1pkt 1fpkt"];
2476--4963[label="1;60pkt 60fpkt"];
2476--5510[label="0.0192308;2pkt 2fpkt"];
2476--5793[label="0.00961538;1pkt 1fpkt"];
2476--5800[label="0.00961538;1pkt 1fpkt"];
2476--5821[label="0.0192308;2pkt 2fpkt"];
2476--7262[label="0.990385;103pkt 103fpkt"];
2568--2622[label="0.0322581;1pkt 1fpkt"];
2568--2836[label="0.0227273;3pkt 3fpkt"];
2568--2932[label="0.0192308;1pkt 1fpkt"];
2568--4370[label="0.0454545;6pkt 6fpkt"];
2568--4789[label="0.0166667;1pkt 1fpkt"];
2568--5024[label="0.0322581;1pkt 1fpkt"];
2568--5200[label="0.0227273;3pkt 3fpkt"];
2568--5209[label="0.0375;3pkt 3fpkt"];
2568--5310[label="0.0238095;1pkt 1fpkt"];
2568--5667[label="1;126pkt 126fpkt"];
2568--5966[label="0.0111111;1pkt 1fpkt"];
2568--6143[label="0.0232558;1pkt 1fpkt"];
2568--6171[label="0.0185185;1pkt 1fpkt"];
2568--6583[label="0.0227273;3pkt 3fpkt"];
2568--7078[label="0.0111111;1pkt 1fpkt"];
2568--7137[label="0.0232558;1pkt 1fpkt"];
2568--7284[label="0.0227273;3pkt 3fpkt"];
2568--7481[label="0.010989;1pkt 1fpkt"];
2624--5326[label="0.918919;34pkt 34fpkt"];
2888--4901[label="0.00465116;1pkt 1fpkt"];
2888--5123[label="0.0188679;1pkt 1fpkt"];
2888--5124[label="0.0714286;1pkt 1fpkt"];
2888--5186[label="0.0769231;1pkt 1fpkt"];
2888--5831[label="0.00465116;1pkt 1fpkt"];
2888--5849[label="0.0769231;1pkt 1fpkt"];
2888--5906[label="0.00465116;1pkt 1fpkt"];
2888--5936[label="0.00465116;1pkt 1fpkt"];
2888--5957[label="0.00465116;1pkt 1fpkt"];
2954--3223[label="0.0144928;1pkt 1fpkt"];
2954--4180[label="0.0289855;2pkt 2fpkt"];
2954--4224[label="0.0638298;3pkt 3fpkt"];
2954--4782[label="0.289855;20pkt 20fpkt"];
2954--4811[label="0.511628;22pkt 22fpkt"];
2954--5510[label="0.0144928;1pkt 1fpkt"];
2954--6364[label="1;69pkt 69fpkt"];
3194--4733[label="0.223881;15pkt 15fpkt"];
3194--4789[label="0.0166667;1pkt 1fpkt"];
3194--5174[label="0.119403;8pkt 8fpkt"];
3194--5332[label="0.0298507;2pkt 2fpkt"];
3194--5619[label="0.0298507;2pkt 2fpkt"];
3194--6156[label="0.0149254;1pkt 1fpkt"];
3202--3502[label="0.008;1pkt 1fpkt"];
3202--4901[label="0.00636943;1pkt 1fpkt"];
3202--4945[label="0.00980392;1pkt 1fpkt"];
3202--5090[label="0.0116279;1pkt 1fpkt"];
3202--5118[label="0.0111111;1pkt 1fpkt"];
3202--5831[label="0.00636943;1pkt 1fpkt"];
3202--5906[label="0.00636943;1pkt 1fpkt"];
3202--5908[label="0.00636943;1pkt 1fpkt"];
3202--5911[label="0.00636943;1pkt 1fpkt"];
3202--5936[label="0.00636943;1pkt 1fpkt"];
3202--5957[label="0.00636943;1pkt 1fpkt"];
3202--6445[label="0.00840336;1pkt 1fpkt"];
3202--6880[label="0.0555556;1pkt 1fpkt"];
3202--7233[label="0.00840336;1pkt 1fpkt"];
3202--7446[label="0.0930233;4pkt 4fpkt"];
3202--7548[label="0.00840336;1pkt 1fpkt"];
3288--4198[label="0.216867;18pkt 18fpkt"];
3288--4294[label="0.0963855;8pkt 8fpkt"];
3288--4733[label="0.0120482;1pkt 1fpkt"];
3288--6156[label="0.0128205;1pkt 1fpkt"];
3288--6240[label="0.204819;17pkt 17fpkt"];
3331--4226[label="0.0571429;2pkt 2fpkt"];
3331--4367[label="0.0571429;2pkt 2fpkt"];
3331--6127[label="0.171429;6pkt 6fpkt"];
3331--6933[label="0.0571429;2pkt 2fpkt"];
3331--7131[label="0.171429;6pkt 6fpkt"];
3358--5256[label="0.0212766;1pkt 1fpkt"];
3358--5555[label="0.0425532;2pkt 2fpkt"];
3480--5185[label="0.980392;100pkt 100fpkt"];
3591--5123[label="0.0434783;1pkt 1fpkt"];
3648--3793[label="1;2pkt 2fpkt"];
3648--4370[label="0.142857;3pkt 3fpkt"];
3648--4733[label="0.142857;3pkt 3fpkt"];
3648--6835[label="1;2pkt 2fpkt"];
3732--5185[label="0.235632;41pkt 41fpkt"];
3732--6499[label="1;174pkt 174fpkt"];
3793--6835[label="1;2pkt 2fpkt"];
3878--3890[label="0.0322581;2pkt 2fpkt"];
3878--4733[label="0.026087;3pkt 3fpkt"];
3878--4963[label="0.0166667;1pkt 1fpkt"];
3878--5160[label="0.0107527;1pkt 1fpkt"];
3878--5247[label="0.0173913;2pkt 2fpkt"];
3878--5890[label="0.00869565;1pkt 1fpkt"];
3878--5908[label="0.026087;3pkt 3fpkt"];
3878--5923[label="0.00869565;1pkt 1fpkt"];
3878--5944[label="0.00869565;1pkt 1fpkt"];
3878--6179[label="0.0108696;1pkt 1fpkt"];
3878--6281[label="0.00869565;1pkt 1fpkt"];
3878--6445[label="0.00869565;1pkt 1fpkt"];
3878--6447[label="0.010101;1pkt 1fpkt"];
3878--6519[label="0.0217391;1pkt 1fpkt"];
3878--7233[label="0.00869565;1pkt 1fpkt"];
3878--7234[label="0.010101;1pkt 1fpkt"];
3878--7262[label="0.00952381;1pkt 1fpkt"];
3878--7548[label="0.00869565;1pkt 1fpkt"];
3899--4674[label="0.0143885;2pkt 2fpkt"];
3899--5732[label="0.0377358;2pkt 2fpkt"];
4224--4370[label="0.0638298;3pkt 3fpkt"];
4224--4518[label="0.0638298;3pkt 3fpkt"];
4224--5282[label="0.047619;2pkt 2fpkt"];
4224--5757[label="0.0322581;1pkt 1fpkt"];
4224--5811[label="0.0638298;3pkt 3fpkt"];
4224--6364[label="0.0638298;3pkt 3fpkt"];
4224--6655[label="0.0425532;2pkt 2fpkt"];
4224--7318[label="0.0425532;2pkt 2fpkt"];
4224--7580[label="0.0425532;2pkt 2fpkt"];
4239--4370[label="0.344828;10pkt 10fpkt"];
4239--5174[label="0.0344828;1pkt 1fpkt"];
4239--6156[label="0.0689655;2pkt 2fpkt"];
4370--4406[label="0.111111;1pkt 1fpkt"];
4370--4462[label="0.00980392;1pkt 1fpkt"];
4370--4463[label="0.023622;9pkt 9fpkt"];
4370--4474[label="0.00606061;1pkt 1fpkt"];
4370--4498[label="0.00524934;2pkt 2fpkt"];
4370--4525[label="0.00262467;1pkt 1fpkt"];
4370--4533[label="0.00704225;1pkt 1fpkt"];
4370--4537[label="0.0344828;3pkt 3fpkt"];
4370--4571[label="0.05;1pkt 1fpkt"];
4370--4572[label="0.340426;16pkt 16fpkt"];
4370--4623[label="0.0187793;4pkt 4fpkt"];
4370--4631[label="0.0357143;1pkt 1fpkt"];
4370--4709[label="0.0192926;6pkt 6fpkt"];
4370--5007[label="0.0188679;1pkt 1fpkt"];
4370--5096[label="0.0222222;1pkt 1fpkt"];
4370--5108[label="0.00682594;2pkt 2fpkt"];
4370--5114[label="0.0209974;8pkt 8fpkt"];
4370--5166[label="0.0338983;2pkt 2fpkt"];
4370--5185[label="0.0183727;7pkt 7fpkt"];
4370--5321[label="0.155556;7pkt 7fpkt"];
4370--5326[label="0.0208333;1pkt 1fpkt"];
4370--5346[label="0.00787402;3pkt 3fpkt"];
4370--5510[label="0.0433213;12pkt 12fpkt"];
4370--5521[label="0.0444444;2pkt 2fpkt"];
4370--5616[label="0.0243902;1pkt 1fpkt"];
4370--5624[label="0.0352941;3pkt 3fpkt"];
4370--5667[label="0.047619;6pkt 6fpkt"];
4370--5793[label="0.0178042;6pkt 6fpkt"];
4370--5800[label="0.023622;9pkt 9fpkt"];
4370--5821[label="0.0288714;11pkt 11fpkt"];
4370--5842[label="0.0187793;4pkt 4fpkt"];
4498--4733[label="0.016129;3pkt 3fpkt"];
4498--4741[label="0.720251;345pkt 345fpkt"];
4498--5174[label="0.010929;2pkt 2fpkt"];
4498--5331[label="0.283203;145pkt 145fpkt"];
4498--6663[label="0.333333;1pkt 1fpkt"];
4652--5343[label="0.0769231;2pkt 2fpkt"];
4652--5368[label="0.0769231;2pkt 2fpkt"];
4652--5619[label="0.0384615;1pkt 1fpkt"];
4652--6233[label="1;1pkt 1fpkt"];
5185--5200[label="0.0111111;2pkt 2fpkt"];
5185--5310[label="0.0238095;1pkt 1fpkt"];
5185--5555[label="0.0104167;1pkt 1fpkt"];
5185--5811[label="0.00546448;1pkt 1fpkt"];
5185--5822[label="0.0245098;10pkt 10fpkt"];
5185--5831[label="0.00166113;1pkt 1fpkt"];
5185--5906[label="0.00166113;1pkt 1fpkt"];
5185--5936[label="0.00166113;1pkt 1fpkt"];
5185--5957[label="0.00166113;1pkt 1fpkt"];
5185--6127[label="0.00411523;1pkt 1fpkt"];
5185--6143[label="0.0232558;1pkt 1fpkt"];
5185--6156[label="0.025641;2pkt 2fpkt"];
5185--6171[label="0.0185185;1pkt 1fpkt"];
5185--6240[label="0.0265781;16pkt 16fpkt"];
5185--6447[label="0.020202;2pkt 2fpkt"];
5185--6499[label="0.227778;41pkt 41fpkt"];
5185--6573[label="0.0909091;1pkt 1fpkt"];
5185--6583[label="0.0104167;2pkt 2fpkt"];
5185--7131[label="0.00411523;1pkt 1fpkt"];
5185--7137[label="0.0232558;1pkt 1fpkt"];
5185--7234[label="0.020202;2pkt 2fpkt"];
5185--7284[label="0.0104167;2pkt 2fpkt"];
5209--5521[label="0.0444444;2pkt 2fpkt"];
5209--5667[label="0.0375;3pkt 3fpkt"];
5209--5800[label="0.0375;3pkt 3fpkt"];
5326--6156[label="0.0416667;2pkt 2fpkt"];
5331--5800[label="0.010989;8pkt 8fpkt"];
5510--5556[label="0.00438596;1pkt 1fpkt"];
5510--5623[label="0.00361011;1pkt 1fpkt"];
5510--5729[label="0.00760456;2pkt 2fpkt"];
5510--5757[label="0.0322581;1pkt 1fpkt"];
5510--5822[label="0.00361011;1pkt 1fpkt"];
5510--5825[label="0.0743802;18pkt 18fpkt"];
5510--6127[label="0.0123457;3pkt 3fpkt"];
5510--6243[label="0.025641;1pkt 1fpkt"];
5510--6364[label="0.0144928;1pkt 1fpkt"];
5510--6630[label="0.0144404;4pkt 4fpkt"];
5510--6777[label="0.0454545;1pkt 1fpkt"];
5510--6893[label="0.0186916;2pkt 2fpkt"];
5510--6996[label="0.00540541;1pkt 1fpkt"];
5510--7131[label="0.0123457;3pkt 3fpkt"];
5510--7262[label="0.0190476;2pkt 2fpkt"];
5510--7353[label="0.0046729;1pkt 1fpkt"];
5510--7406[label="0.0186916;2pkt 2fpkt"];
5667--5966[label="0.0111111;1pkt 1fpkt"];
5667--6143[label="0.0232558;1pkt 1fpkt"];
5667--6171[label="0.0185185;1pkt 1fpkt"];
5667--6583[label="0.00793651;1pkt 1fpkt"];
5667--7078[label="0.0111111;1pkt 1fpkt"];
5667--7137[label="0.0232558;1pkt 1fpkt"];
5667--7284[label="0.00793651;1pkt 1fpkt"];
5667--7481[label="0.010989;1pkt 1fpkt"];
5684--5725[label="1;3pkt 3fpkt"];
5684--5757[label="0.125;1pkt 1fpkt"];
5684--6128[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
3886[label="214.226.132.72;d;243pkt 243fpkt", shape=diamond, color=yellow];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 214.226.132.72:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3886--5154[label="0.00411523;1pkt 1fpkt"];
3886--6012[label="0.00411523;1pkt 1fpkt"];
3886--6452[label="0.00925926;1pkt 1fpkt"];
3886--6550[label="0.00411523;1pkt 1fpkt"];
3886--7275[label="0.00411523;1pkt 1fpkt"];
3886--7558[label="0.00411523;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.226.132.72"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
3891[label="214.236.225.51;d;239pkt 239fpkt", shape=diamond, color=yellow];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 214.236.225.51:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3891--5154[label="0.0041841;1pkt 1fpkt"];
3891--5193[label="0.0041841;1pkt 1fpkt"];
3891--6012[label="0.0041841;1pkt 1fpkt"];
3891--6550[label="0.0041841;1pkt 1fpkt"];
3891--7275[label="0.0041841;1pkt 1fpkt"];
3891--7558[label="0.0041841;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.236.225.51"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
241[label="214.162.6.17;s;2006pkt 2006fpkt", shape=diamond, color=yellow];
509[label="10.1.3.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
1086[label="10.1.1.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
2050[label="217.157.0.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
3013[label="12.207.116.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
3260[label="10.50.1.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
3853[label="150.108.210.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
3903[label="144.67.157.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
3911[label="172.24.128.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
4214[label="10.1.3.198;d;1pkt 1fpkt", shape=hexagon, color=black];
5081[label="214.162.6.17;s;1459pkt 1459fpkt", shape=hexagon, color=black];
5398[label="12.207.116.52;d;1pkt 1fpkt", shape=hexagon, color=black];
6075[label="214.162.6.17;2155pkt 2155fpkt", shape=pentagon, color=darkviolet];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.162.6.17:53, *:*}[99.8151%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.9059%)&lt;BR/&gt; 1024: (1.33215%)&lt;BR/&gt; 32768: (0.577265%)&lt;BR/&gt; 1037: (0.381883%)&lt;BR/&gt; 1034: (0.35524%)&gt;];
}
241--509[label="1;1pkt 1fpkt"];
241--1086[label="1;1pkt 1fpkt"];
241--2050[label="1;1pkt 1fpkt"];
241--3013[label="1;1pkt 1fpkt"];
241--3260[label="1;1pkt 1fpkt"];
241--3853[label="1;1pkt 1fpkt"];
241--3903[label="1;1pkt 1fpkt"];
241--3911[label="1;1pkt 1fpkt"];
241--4214[label="1;1pkt 1fpkt"];
241--5081[label="1;1459pkt 1459fpkt"];
241--5398[label="1;1pkt 1fpkt"];
241--5904[label="0.00897308;18pkt 18fpkt"];
241--5909[label="0.00997009;20pkt 20fpkt"];
241--5912[label="0.0104686;21pkt 21fpkt"];
241--5914[label="0.00697906;14pkt 14fpkt"];
241--5934[label="0.00897308;18pkt 18fpkt"];
241--5938[label="0.00997009;20pkt 20fpkt"];
241--5955[label="0.00897308;18pkt 18fpkt"];
241--5959[label="0.00997009;20pkt 20fpkt"];
241--6075[label="0.996012;1998pkt 1998fpkt"];
509--4214[label="1;1pkt 1fpkt"];
509--5081[label="1;1pkt 1fpkt"];
509--6075[label="1;1pkt 1fpkt"];
1086--5081[label="1;1pkt 1fpkt"];
1086--6075[label="1;1pkt 1fpkt"];
2050--5081[label="1;1pkt 1fpkt"];
2050--6075[label="1;1pkt 1fpkt"];
3013--5081[label="1;1pkt 1fpkt"];
3013--5398[label="1;1pkt 1fpkt"];
3013--6075[label="1;1pkt 1fpkt"];
3260--5081[label="1;1pkt 1fpkt"];
3260--6075[label="1;1pkt 1fpkt"];
3853--5081[label="1;1pkt 1fpkt"];
3853--6075[label="1;1pkt 1fpkt"];
3903--5081[label="1;1pkt 1fpkt"];
3903--6075[label="1;1pkt 1fpkt"];
3911--5081[label="1;1pkt 1fpkt"];
3911--6075[label="1;1pkt 1fpkt"];
4214--5081[label="1;1pkt 1fpkt"];
4214--6075[label="1;1pkt 1fpkt"];
5081--5398[label="1;1pkt 1fpkt"];
5081--5904[label="0.0123372;18pkt 18fpkt"];
5081--5909[label="0.013708;20pkt 20fpkt"];
5081--5912[label="0.0143934;21pkt 21fpkt"];
5081--5914[label="0.00959561;14pkt 14fpkt"];
5081--5934[label="0.0123372;18pkt 18fpkt"];
5081--5938[label="0.013708;20pkt 20fpkt"];
5081--5955[label="0.0123372;18pkt 18fpkt"];
5081--5959[label="0.013708;20pkt 20fpkt"];
5081--6075[label="0.994517;1451pkt 1451fpkt"];
5398--6075[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="214.162.6.17" src_port="53"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
1586[label="149.197.33.188;s;638pkt 638fpkt", shape=diamond, color=yellow];
3904[label="58.164.117.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
5171[label="149.197.33.188;s;403pkt 403fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.33.188:42247, *:*}[95.9248%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42247: (48.2726%)&lt;BR/&gt; 6881: (3.21497%)&lt;BR/&gt; 52525: (0.6238%)&lt;BR/&gt; 6882: (0.383877%)&lt;BR/&gt; 49152: (0.335893%)&gt;];
}
1586--3904[label="1;1pkt 1fpkt"];
1586--5171[label="1;403pkt 403fpkt"];
1586--5913[label="0.0031348;2pkt 2fpkt"];
3904--5171[label="1;1pkt 1fpkt"];
5171--5913[label="0.00496278;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="149.197.33.188" src_port="42247"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="161.203.166.237"/>
      <from sec="1183784423" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183784423" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
2014[label="161.203.198.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
2464[label="132.184.212.61;d;8pkt 8fpkt", shape=diamond, color=yellow];
3973[label="161.203.173.64;s;2pkt 2fpkt", shape=diamond, color=yellow];
4954[label="161.203.198.0;s;1pkt 1fpkt", shape=hexagon, color=black];
6254[label="161.203.225.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6322[label="161.203.173.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7194[label="161.203.173.64;2pkt 2fpkt", shape=invtriangle, color=brown];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.195.241:*, 132.184.212.61:6667}[22.2222%]&lt;BR/&gt;{161.203.173.64:*, *:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (34.375%)&lt;BR/&gt; 5050: (9.375%)&lt;BR/&gt; 1793: (9.375%)&lt;BR/&gt; 1164: (9.375%)&lt;BR/&gt; 1096: (9.375%)&gt;];
}
2014--2464[label="1;1pkt 1fpkt"];
2014--4954[label="1;1pkt 1fpkt"];
2464--3973[label="0.5;1pkt 1fpkt"];
2464--4954[label="1;1pkt 1fpkt"];
2464--6254[label="1;1pkt 1fpkt"];
2464--7040[label="0.333333;2pkt 2fpkt"];
2464--7194[label="0.5;1pkt 1fpkt"];
3973--6322[label="1;1pkt 1fpkt"];
3973--7194[label="1;2pkt 2fpkt"];
6322--7194[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="161.203.173.64"/>
      <filter dst_ip="132.184.212.61" dst_port="6667" src_ip="161.203.195.241"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="165.206.5.52"/>
      <from sec="1183784991" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183784991" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
3197[label="145.84.101.182;d;77pkt 77fpkt", shape=diamond, color=yellow];
3380[label="205.90.131.62;s;46pkt 46fpkt", shape=diamond, color=yellow];
4041[label="204.40.83.80;s;7pkt 7fpkt", shape=diamond, color=yellow];
5188[label="204.183.77.203;s;64pkt 64fpkt", shape=hexagon, color=black];
6312[label="205.90.131.62;57pkt 57fpkt", shape=pentagon, color=darkviolet];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.183.77.203:80, *:*}[45.2055%]&lt;BR/&gt;{205.90.131.62:80, 145.84.101.182:*}[39.0411%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2025: (0.59761%)&lt;BR/&gt; 2024: (0.59761%)&lt;BR/&gt; 2022: (0.59761%)&lt;BR/&gt; 2020: (0.59761%)&gt;];
}
3197--3261[label="0.025974;2pkt 2fpkt"];
3197--3380[label="1;46pkt 46fpkt"];
3197--4041[label="1;7pkt 7fpkt"];
3197--4757[label="0.0909091;7pkt 7fpkt"];
3197--5188[label="0.078125;5pkt 5fpkt"];
3197--5744[label="1;77pkt 77fpkt"];
3197--6312[label="0.824561;47pkt 47fpkt"];
3380--5744[label="1;46pkt 46fpkt"];
3380--6312[label="1;46pkt 46fpkt"];
4041--5744[label="1;7pkt 7fpkt"];
5188--5321[label="0.0222222;1pkt 1fpkt"];
5188--5510[label="0.296875;19pkt 19fpkt"];
5188--5744[label="0.078125;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="204.183.77.203" src_port="80"/>
      <filter dst_ip="145.84.101.182" src_ip="205.90.131.62" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.90779,1.71065,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
115[label="145.84.64.207s;79pkt 79fpkt", shape=rectangle, color=red];
4054[label="214.193.69.163;d;79pkt 79fpkt", shape=diamond, color=yellow];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.64.207:*, 214.193.69.163:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4744: (0.632911%)&lt;BR/&gt; 4739: (0.632911%)&lt;BR/&gt; 4738: (0.632911%)&lt;BR/&gt; 4737: (0.632911%)&gt;];
}
115--1748[label="1;79pkt 79fpkt"];
115--4054[label="1;79pkt 79fpkt"];
</description>
    <slice>
      <filter dst_ip="214.193.69.163" dst_port="80" src_ip="145.84.64.207"/>
    </slice>
    <from sec="1183784787" usec="0"/>
    <to sec="1183785087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.181.227.214"/>
      <from sec="1183785139" usec="0"/>
      <to sec="1183785180" usec="0"/>
    </slice>
    <from sec="1183785139" usec="0"/>
    <to sec="1183785180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.20.131.112"/>
      <from sec="1183785144" usec="0"/>
      <to sec="1183785182" usec="0"/>
    </slice>
    <from sec="1183785144" usec="0"/>
    <to sec="1183785182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="117.21.235.132"/>
      <from sec="1183785164" usec="0"/>
      <to sec="1183785189" usec="0"/>
    </slice>
    <from sec="1183785164" usec="0"/>
    <to sec="1183785189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="79.20.19.75"/>
      <from sec="1183785166" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183785166" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
1406[label="144.46.250.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
4113[label="196.157.201.9;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.248.3:53, 196.157.201.9:11770}[33.3333%]&lt;BR/&gt;{144.46.248.57:53, 196.157.201.9:11770}[33.3333%]&lt;BR/&gt;{144.46.250.203:80, 196.157.201.9:29941}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29941: (25%)&lt;BR/&gt; 11770: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (25%)&gt;];
}
1406--4113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.157.201.9" dst_port="29941" src_ip="144.46.250.203" src_port="80"/>
      <filter dst_ip="196.157.201.9" dst_port="11770" src_ip="144.46.248.57" src_port="53"/>
      <filter dst_ip="196.157.201.9" dst_port="11770" src_ip="144.46.248.3" src_port="53"/>
    </slice>
    <from sec="1183785175" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.230.130.185"/>
      <from sec="1183785183" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183785183" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.140.238.132"/>
      <from sec="1183785195" usec="0"/>
      <to sec="1183785228" usec="0"/>
    </slice>
    <from sec="1183785195" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
4120[label="165.206.192.27;d;125pkt 125fpkt", shape=diamond, color=yellow];
4149[label="207.217.3.14;s;104pkt 104fpkt", shape=diamond, color=yellow];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.217.3.14:80, 165.206.192.27:*}[83.2%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55394: (0.436681%)&lt;BR/&gt; 55392: (0.436681%)&lt;BR/&gt; 55391: (0.436681%)&lt;BR/&gt; 55390: (0.436681%)&gt;];
}
4120--4149[label="1;104pkt 104fpkt"];
4120--6049[label="0.895652;103pkt 103fpkt"];
4120--6269[label="0.272727;3pkt 3fpkt"];
4120--7262[label="0.00952381;1pkt 1fpkt"];
4149--6049[label="0.990385;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.192.27" src_ip="207.217.3.14" src_port="80"/>
    </slice>
    <from sec="1183785181" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
252[label="149.197.246.163;s;8043pkt 8043fpkt", shape=diamond, color=yellow];
4171[label="149.197.246.163;s;8043pkt 8043fpkt", shape=hexagon, color=black];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.246.163:10627, *:*}[99.9627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10627: (49.9814%)&lt;BR/&gt; 55003: (0.0559493%)&lt;BR/&gt; 54045: (0.0559493%)&lt;BR/&gt; 49389: (0.0435161%)&lt;BR/&gt; 10000: (0.0435161%)&gt;];
}
252--4171[label="1;8043pkt 8043fpkt"];
252--5891[label="0.000124332;1pkt 1fpkt"];
252--5910[label="0.000124332;1pkt 1fpkt"];
252--5913[label="0.000124332;1pkt 1fpkt"];
252--5924[label="0.000124332;1pkt 1fpkt"];
252--5939[label="0.000124332;1pkt 1fpkt"];
252--5945[label="0.000124332;1pkt 1fpkt"];
252--5960[label="0.000124332;1pkt 1fpkt"];
4171--5891[label="0.000124332;1pkt 1fpkt"];
4171--5910[label="0.000124332;1pkt 1fpkt"];
4171--5913[label="0.000124332;1pkt 1fpkt"];
4171--5924[label="0.000124332;1pkt 1fpkt"];
4171--5939[label="0.000124332;1pkt 1fpkt"];
4171--5945[label="0.000124332;1pkt 1fpkt"];
4171--5960[label="0.000124332;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.197.246.163" src_port="10627"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
309[label="206.163.22.75;d;2pkt 2fpkt", shape=diamond, color=yellow];
310[label="215.184.34.73;s;58pkt 58fpkt", shape=diamond, color=yellow];
2382[label="214.238.94.192;d;778pkt 778fpkt", shape=diamond, color=yellow];
3662[label="215.184.41.109;s;20pkt 20fpkt", shape=diamond, color=yellow];
4048[label="51.197.241.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
4182[label="206.163.22.75;d;2pkt 2fpkt", shape=hexagon, color=black];
7008[label="215.184.33.233;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7208[label="215.184.34.73;60pkt 60fpkt", shape=invtriangle, color=brown];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8080, 214.238.94.192:6000}[83.7745%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (39.1863%)&lt;BR/&gt; 6000: (39.1863%)&lt;BR/&gt; 80: (6.37045%)&lt;BR/&gt; 0: (5.78158%)&lt;BR/&gt; 53: (0.695931%)&gt;];
}
309--310[label="1;2pkt 2fpkt"];
309--4182[label="1;2pkt 2fpkt"];
309--5609[label="1;2pkt 2fpkt"];
309--7208[label="1;2pkt 2fpkt"];
310--754[label="0.103448;6pkt 6fpkt"];
310--1004[label="0.12069;7pkt 7fpkt"];
310--1244[label="0.155172;9pkt 9fpkt"];
310--1271[label="0.12069;7pkt 7fpkt"];
310--1305[label="0.155172;9pkt 9fpkt"];
310--2382[label="0.0172414;1pkt 1fpkt"];
310--3936[label="0.025;1pkt 1fpkt"];
310--4182[label="1;2pkt 2fpkt"];
310--4379[label="0.0517241;3pkt 3fpkt"];
310--4477[label="0.0172414;1pkt 1fpkt"];
310--4560[label="0.103448;6pkt 6fpkt"];
310--5303[label="0.0517241;3pkt 3fpkt"];
310--5409[label="0.0172414;1pkt 1fpkt"];
310--5609[label="1;52pkt 52fpkt"];
310--7208[label="0.982759;57pkt 57fpkt"];
2382--2500[label="0.00358423;1pkt 1fpkt"];
2382--2569[label="0.0104167;1pkt 1fpkt"];
2382--2660[label="0.00662252;1pkt 1fpkt"];
2382--2673[label="0.0454545;1pkt 1fpkt"];
2382--3160[label="0.0166667;1pkt 1fpkt"];
2382--3236[label="0.00990099;1pkt 1fpkt"];
2382--3251[label="0.0169492;1pkt 1fpkt"];
2382--3517[label="0.00234192;1pkt 1fpkt"];
2382--3537[label="0.00552486;1pkt 1fpkt"];
2382--3608[label="0.047619;1pkt 1fpkt"];
2382--3643[label="0.0243902;1pkt 1fpkt"];
2382--3662[label="0.05;1pkt 1fpkt"];
2382--4160[label="0.00128535;1pkt 1fpkt"];
2382--4292[label="0.00204499;1pkt 1fpkt"];
2382--4345[label="0.0113636;1pkt 1fpkt"];
2382--4443[label="0.00128535;1pkt 1fpkt"];
2382--4457[label="0.00226244;1pkt 1fpkt"];
2382--4654[label="0.00454545;1pkt 1fpkt"];
2382--4686[label="0.00990099;1pkt 1fpkt"];
2382--4694[label="0.0243902;1pkt 1fpkt"];
2382--4703[label="0.00215517;1pkt 1fpkt"];
2382--4833[label="0.0588235;1pkt 1fpkt"];
2382--4912[label="0.00128535;1pkt 1fpkt"];
2382--4916[label="0.00128535;1pkt 1fpkt"];
2382--4917[label="0.00840336;1pkt 1fpkt"];
2382--4920[label="0.00746269;1pkt 1fpkt"];
2382--4922[label="0.00359066;2pkt 2fpkt"];
2382--4970[label="0.00497512;1pkt 1fpkt"];
2382--5137[label="0.00900901;1pkt 1fpkt"];
2382--5180[label="0.00128535;1pkt 1fpkt"];
2382--5199[label="0.00128535;1pkt 1fpkt"];
2382--5237[label="0.00497512;1pkt 1fpkt"];
2382--5244[label="0.00925926;1pkt 1fpkt"];
2382--5302[label="0.02;1pkt 1fpkt"];
2382--5394[label="0.0454545;1pkt 1fpkt"];
2382--5409[label="1;778pkt 778fpkt"];
2382--5492[label="0.00128535;1pkt 1fpkt"];
2382--5541[label="0.0169492;1pkt 1fpkt"];
2382--5571[label="0.00675676;1pkt 1fpkt"];
2382--5609[label="0.0192308;1pkt 1fpkt"];
2382--5613[label="0.0175439;1pkt 1fpkt"];
2382--5738[label="0.00552486;1pkt 1fpkt"];
2382--5788[label="0.00128535;1pkt 1fpkt"];
2382--5835[label="0.0769231;1pkt 1fpkt"];
2382--5888[label="0.00128535;1pkt 1fpkt"];
2382--5921[label="0.00128535;1pkt 1fpkt"];
2382--5942[label="0.00128535;1pkt 1fpkt"];
2382--6011[label="0.00337838;1pkt 1fpkt"];
2382--6012[label="0.00729927;2pkt 2fpkt"];
2382--6283[label="0.0153846;1pkt 1fpkt"];
2382--6722[label="0.00128535;1pkt 1fpkt"];
2382--6868[label="0.00534759;1pkt 1fpkt"];
2382--6896[label="0.005;1pkt 1fpkt"];
2382--7008[label="0.0769231;1pkt 1fpkt"];
2382--7098[label="0.00338983;1pkt 1fpkt"];
2382--7142[label="0.00529101;1pkt 1fpkt"];
2382--7180[label="0.015625;1pkt 1fpkt"];
2382--7208[label="0.0166667;1pkt 1fpkt"];
2382--7305[label="0.00128535;1pkt 1fpkt"];
2382--7347[label="0.00128535;1pkt 1fpkt"];
2382--7407[label="0.005;1pkt 1fpkt"];
2382--7496[label="0.00337838;1pkt 1fpkt"];
2382--7512[label="0.00529101;1pkt 1fpkt"];
2382--7547[label="0.0021322;1pkt 1fpkt"];
2382--7573[label="0.00128535;1pkt 1fpkt"];
2382--7589[label="0.00128535;1pkt 1fpkt"];
3662--4048[label="1;1pkt 1fpkt"];
3662--5409[label="0.05;1pkt 1fpkt"];
4182--5609[label="1;2pkt 2fpkt"];
4182--7208[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.238.94.192" dst_port="6000" src_port="8080"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
360[label="165.206.148.140;d;54pkt 54fpkt", shape=diamond, color=yellow];
361[label="144.20.234.64;s;3pkt 3fpkt", shape=diamond, color=yellow];
4189[label="165.206.148.140;d;41pkt 41fpkt", shape=hexagon, color=black];
4459[label="144.20.234.64;s;3pkt 3fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 165.206.148.140:4019}[59.2593%]&lt;BR/&gt;{36.5.15.129:443, 165.206.148.140:*}[25.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4019: (30.198%)&lt;BR/&gt; 443: (10.8911%)&lt;BR/&gt; 5004: (3.46535%)&lt;BR/&gt; 80: (2.47525%)&lt;BR/&gt; 1914: (1.9802%)&gt;];
}
360--361[label="1;3pkt 3fpkt"];
360--4189[label="1;41pkt 41fpkt"];
360--4459[label="1;3pkt 3fpkt"];
361--4189[label="0.666667;2pkt 2fpkt"];
361--4459[label="1;3pkt 3fpkt"];
4189--4459[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.148.140" dst_port="4019"/>
      <filter dst_ip="165.206.148.140" src_ip="36.5.15.129" src_port="443"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
366[label="214.10.198.166;d;615pkt 615fpkt", shape=diamond, color=yellow];
1324[label="78.161.79.28;s;2pkt 2fpkt", shape=diamond, color=yellow];
1519[label="213.164.199.155;s;7pkt 7fpkt", shape=diamond, color=yellow];
2887[label="219.16.42.138;s;164pkt 164fpkt", shape=diamond, color=yellow];
2897[label="219.16.42.141;s;147pkt 147fpkt", shape=diamond, color=yellow];
4190[label="214.10.198.166;d;437pkt 437fpkt", shape=hexagon, color=black];
5100[label="213.164.199.155;s;4pkt 4fpkt", shape=hexagon, color=black];
5271[label="219.16.42.138;s;110pkt 110fpkt", shape=hexagon, color=black];
5339[label="78.161.79.28;s;2pkt 2fpkt", shape=hexagon, color=black];
6649[label="219.16.42.138;178pkt 178fpkt", shape=pentagon, color=darkviolet];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.16.42.138:80, 214.10.198.166:*}[28.4127%]&lt;BR/&gt;{*:*, 214.10.198.166:3128}[26.9841%]&lt;BR/&gt;{219.16.42.141:80, 214.10.198.166:*}[26.1905%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6038%)&lt;BR/&gt; 3128: (9.51381%)&lt;BR/&gt; 34486: (1.92077%)&lt;BR/&gt; 1659: (1.62065%)&lt;BR/&gt; 6881: (1.32053%)&gt;];
}
366--1324[label="1;2pkt 2fpkt"];
366--1519[label="1;7pkt 7fpkt"];
366--2887[label="1;164pkt 164fpkt"];
366--2897[label="1;147pkt 147fpkt"];
366--4057[label="0.00325203;2pkt 2fpkt"];
366--4190[label="1;437pkt 437fpkt"];
366--5100[label="1;4pkt 4fpkt"];
366--5271[label="1;110pkt 110fpkt"];
366--5339[label="1;2pkt 2fpkt"];
366--5895[label="0.0439024;27pkt 27fpkt"];
366--5928[label="0.0439024;27pkt 27fpkt"];
366--5949[label="0.0439024;27pkt 27fpkt"];
366--6649[label="0.91573;163pkt 163fpkt"];
1324--4190[label="0.5;1pkt 1fpkt"];
1324--5339[label="1;2pkt 2fpkt"];
1519--4190[label="0.571429;4pkt 4fpkt"];
1519--5100[label="1;4pkt 4fpkt"];
2887--4190[label="0.670732;110pkt 110fpkt"];
2887--5271[label="1;110pkt 110fpkt"];
2887--6649[label="0.993902;163pkt 163fpkt"];
2897--4190[label="0.755102;111pkt 111fpkt"];
4190--5100[label="1;4pkt 4fpkt"];
4190--5271[label="1;110pkt 110fpkt"];
4190--5339[label="0.5;1pkt 1fpkt"];
4190--5895[label="0.0617849;27pkt 27fpkt"];
4190--5928[label="0.0617849;27pkt 27fpkt"];
4190--5949[label="0.0617849;27pkt 27fpkt"];
4190--6649[label="0.61236;109pkt 109fpkt"];
5271--6649[label="0.990909;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.166" dst_port="3128"/>
      <filter dst_ip="214.10.198.166" src_ip="219.16.42.138" src_port="80"/>
      <filter dst_ip="214.10.198.166" src_ip="219.16.42.141" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
622[label="196.163.44.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
623[label="149.197.226.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
4235[label="196.163.44.92;d;1pkt 1fpkt", shape=hexagon, color=black];
4719[label="149.197.226.85;s;1pkt 1fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.226.85:22, 196.163.44.92:61476}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61476: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
622--623[label="1;1pkt 1fpkt"];
622--4235[label="1;1pkt 1fpkt"];
622--4719[label="1;1pkt 1fpkt"];
623--4235[label="1;1pkt 1fpkt"];
623--4719[label="1;1pkt 1fpkt"];
4235--4719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.44.92" dst_port="61476" src_ip="149.197.226.85" src_port="22"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
662[label="72.101.13.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
663[label="149.216.74.65;s;311pkt 311fpkt", shape=diamond, color=yellow];
2938[label="84.77.198.211;d;4pkt 4fpkt", shape=diamond, color=yellow];
3985[label="197.89.99.13;d;9pkt 9fpkt", shape=diamond, color=yellow];
4240[label="149.216.74.65;s;274pkt 274fpkt", shape=hexagon, color=black];
4351[label="72.101.13.196;d;1pkt 1fpkt", shape=hexagon, color=black];
5319[label="84.77.198.211;d;3pkt 3fpkt", shape=hexagon, color=black];
6329[label="149.216.74.65;379pkt 379fpkt", shape=pentagon, color=darkviolet];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.74.65:25494, *:*}[96.8338%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25494: (48.2179%)&lt;BR/&gt; 18490: (0.763747%)&lt;BR/&gt; 6882: (0.661914%)&lt;BR/&gt; 52674: (0.356415%)&lt;BR/&gt; 8921: (0.356415%)&gt;];
}
662--663[label="1;1pkt 1fpkt"];
662--4240[label="1;1pkt 1fpkt"];
662--4351[label="1;1pkt 1fpkt"];
662--6329[label="1;1pkt 1fpkt"];
663--2938[label="0.75;3pkt 3fpkt"];
663--3985[label="0.888889;8pkt 8fpkt"];
663--4240[label="1;274pkt 274fpkt"];
663--4351[label="1;1pkt 1fpkt"];
663--5319[label="1;3pkt 3fpkt"];
663--6329[label="1;311pkt 311fpkt"];
2938--4240[label="0.75;3pkt 3fpkt"];
2938--5319[label="1;3pkt 3fpkt"];
2938--6329[label="1;4pkt 4fpkt"];
3985--4240[label="0.777778;7pkt 7fpkt"];
3985--6329[label="1;9pkt 9fpkt"];
4240--4351[label="1;1pkt 1fpkt"];
4240--5319[label="1;3pkt 3fpkt"];
4240--6329[label="1;274pkt 274fpkt"];
4351--6329[label="1;1pkt 1fpkt"];
5319--6329[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="149.216.74.65" src_port="25494"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
889[label="192.132.136.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
4263[label="214.7.49.200;s;5pkt 5fpkt", shape=hexagon, color=black];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.49.200:80, 192.179.178.134:47673}[20%]&lt;BR/&gt;{214.7.49.200:80, 42.131.25.250:33345}[20%]&lt;BR/&gt;{214.7.49.200:80, 192.132.136.238:2254}[20%]&lt;BR/&gt;{214.7.49.200:80, 192.132.136.238:2255}[20%]&lt;BR/&gt;{214.7.49.200:80, 192.132.136.238:2256}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2256: (12.5%)&lt;BR/&gt; 2255: (12.5%)&lt;BR/&gt; 2254: (12.5%)&lt;BR/&gt; 47673: (6.25%)&gt;];
}
889--4263[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.132.136.238" dst_port="2256" src_ip="214.7.49.200" src_port="80"/>
      <filter dst_ip="192.132.136.238" dst_port="2255" src_ip="214.7.49.200" src_port="80"/>
      <filter dst_ip="192.132.136.238" dst_port="2254" src_ip="214.7.49.200" src_port="80"/>
      <filter dst_ip="42.131.25.250" dst_port="33345" src_ip="214.7.49.200" src_port="80"/>
      <filter dst_ip="192.179.178.134" dst_port="47673" src_ip="214.7.49.200" src_port="80"/>
    </slice>
    <from sec="1183784409" usec="0"/>
    <to sec="1183784501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
717[label="149.221.39.110;d;218pkt 218fpkt", shape=diamond, color=yellow];
1539[label="72.12.78.146;s;74pkt 74fpkt", shape=diamond, color=yellow];
3301[label="194.195.228.39;s;69pkt 69fpkt", shape=diamond, color=yellow];
3699[label="167.82.180.131;d;91pkt 91fpkt", shape=diamond, color=yellow];
3765[label="198.64.52.207;s;24pkt 24fpkt", shape=diamond, color=yellow];
4072[label="214.129.216.83;s;150pkt 150fpkt", shape=diamond, color=yellow];
4251[label="149.221.39.110;d;122pkt 122fpkt", shape=hexagon, color=black];
4383[label="165.206.144.211;d;31pkt 31fpkt", shape=hexagon, color=black];
5045[label="214.7.34.210;d;113pkt 113fpkt", shape=hexagon, color=black];
5627[label="72.12.78.216;s;44pkt 44fpkt", shape=hexagon, color=black];
6426[label="214.129.216.83;150pkt 150fpkt", shape=pentagon, color=darkviolet];
6577[label="194.194.137.119;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6626[label="194.19.168.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6756[label="198.196.44.164;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7301[label="194.19.168.132;2pkt 2fpkt", shape=invtriangle, color=brown];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.129.216.83:80, 149.221.39.110:*}[22.2552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9317%)&lt;BR/&gt; 8080: (1.03417%)&lt;BR/&gt; 0: (0.719424%)&lt;BR/&gt; 443: (0.584532%)&lt;BR/&gt; 63941: (0.179856%)&gt;];
}
717--847[label="0.0714286;1pkt 1fpkt"];
717--1070[label="0.0449438;4pkt 4fpkt"];
717--1171[label="0.0137615;3pkt 3fpkt"];
717--1539[label="0.0540541;4pkt 4fpkt"];
717--1632[label="0.0120482;1pkt 1fpkt"];
717--1644[label="0.00552486;1pkt 1fpkt"];
717--2199[label="0.181818;2pkt 2fpkt"];
717--2554[label="0.0149254;1pkt 1fpkt"];
717--3301[label="0.144928;10pkt 10fpkt"];
717--3527[label="0.0227273;1pkt 1fpkt"];
717--3637[label="0.0588235;1pkt 1fpkt"];
717--4072[label="0.593333;89pkt 89fpkt"];
717--4251[label="1;122pkt 122fpkt"];
717--4272[label="0.1;1pkt 1fpkt"];
717--4518[label="0.00917431;2pkt 2fpkt"];
717--4830[label="0.222222;2pkt 2fpkt"];
717--4948[label="0.0229358;5pkt 5fpkt"];
717--5247[label="0.0137615;3pkt 3fpkt"];
717--5627[label="0.0227273;1pkt 1fpkt"];
717--5811[label="0.00546448;1pkt 1fpkt"];
717--5962[label="0.166667;4pkt 4fpkt"];
717--6426[label="0.593333;89pkt 89fpkt"];
717--6573[label="0.181818;2pkt 2fpkt"];
717--6577[label="0.727273;8pkt 8fpkt"];
717--6626[label="1;2pkt 2fpkt"];
717--6756[label="0.181818;2pkt 2fpkt"];
717--7301[label="1;2pkt 2fpkt"];
1539--3247[label="0.0405405;3pkt 3fpkt"];
1539--4251[label="0.0540541;4pkt 4fpkt"];
1539--4383[label="0.0967742;3pkt 3fpkt"];
1539--4498[label="0.0675676;5pkt 5fpkt"];
1539--5045[label="0.162162;12pkt 12fpkt"];
1539--5550[label="0.0540541;4pkt 4fpkt"];
3301--4251[label="0.144928;10pkt 10fpkt"];
3301--5550[label="0.73913;51pkt 51fpkt"];
3699--3765[label="1;24pkt 24fpkt"];
3699--6756[label="0.818182;9pkt 9fpkt"];
4072--6426[label="1;150pkt 150fpkt"];
4251--4272[label="0.1;1pkt 1fpkt"];
4251--4518[label="0.0163934;2pkt 2fpkt"];
4251--4830[label="0.222222;2pkt 2fpkt"];
4251--4948[label="0.0409836;5pkt 5fpkt"];
4251--5247[label="0.0163934;2pkt 2fpkt"];
4251--5627[label="0.0227273;1pkt 1fpkt"];
4251--5811[label="0.00819672;1pkt 1fpkt"];
4251--5962[label="0.166667;4pkt 4fpkt"];
4251--6573[label="0.181818;2pkt 2fpkt"];
4251--6577[label="0.363636;4pkt 4fpkt"];
4251--6626[label="1;2pkt 2fpkt"];
4251--6756[label="0.181818;2pkt 2fpkt"];
4251--7301[label="1;2pkt 2fpkt"];
4383--4741[label="0.258065;8pkt 8fpkt"];
4383--5619[label="0.0645161;2pkt 2fpkt"];
5045--5362[label="0.704082;69pkt 69fpkt"];
5045--5564[label="0.0833333;1pkt 1fpkt"];
5045--5619[label="0.0136986;1pkt 1fpkt"];
5045--6143[label="0.0232558;1pkt 1fpkt"];
5045--7137[label="0.0232558;1pkt 1fpkt"];
6626--7301[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.221.39.110" src_ip="214.129.216.83" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
346[label="215.40.209.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
347[label="134.201.14.213;s;4pkt 4fpkt", shape=diamond, color=yellow];
897[label="215.40.209.231;d;3pkt 3fpkt", shape=diamond, color=yellow];
4276[label="215.40.209.231;d;3pkt 3fpkt", shape=hexagon, color=black];
6932[label="134.201.14.213;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.14.213:4503, 215.40.209.47:554}[25%]&lt;BR/&gt;{134.201.14.213:4666, 215.40.209.231:554}[25%]&lt;BR/&gt;{134.201.14.213:4670, 215.40.209.231:554}[25%]&lt;BR/&gt;{134.201.14.213:4687, 215.40.209.231:554}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 4687: (14.2857%)&lt;BR/&gt; 4670: (14.2857%)&lt;BR/&gt; 4666: (14.2857%)&lt;BR/&gt; 4503: (7.14286%)&gt;];
}
346--347[label="1;1pkt 1fpkt"];
347--897[label="1;3pkt 3fpkt"];
347--4276[label="1;3pkt 3fpkt"];
347--6932[label="1;3pkt 3fpkt"];
897--4276[label="1;3pkt 3fpkt"];
897--6932[label="1;3pkt 3fpkt"];
4276--6932[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.209.231" dst_port="554" src_ip="134.201.14.213" src_port="4687"/>
      <filter dst_ip="215.40.209.231" dst_port="554" src_ip="134.201.14.213" src_port="4670"/>
      <filter dst_ip="215.40.209.231" dst_port="554" src_ip="134.201.14.213" src_port="4666"/>
      <filter dst_ip="215.40.209.47" dst_port="554" src_ip="134.201.14.213" src_port="4503"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
236[label="165.206.146.129;d;7pkt 7fpkt", shape=diamond, color=yellow];
239[label="0.41.227.194;s;1pkt 1fpkt", shape=diamond, color=yellow];
2900[label="0.41.227.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
4053[label="0.41.227.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
4282[label="0.41.227.194;s;1pkt 1fpkt", shape=hexagon, color=black];
4630[label="165.206.146.129;d;4pkt 4fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.201.35.46:80, 165.206.146.129:*}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 62101: (13.3333%)&lt;BR/&gt; 21141: (13.3333%)&lt;BR/&gt; 61811: (10%)&lt;BR/&gt; 10102: (10%)&gt;];
}
236--239[label="1;1pkt 1fpkt"];
236--2900[label="1;1pkt 1fpkt"];
236--4053[label="1;1pkt 1fpkt"];
236--4282[label="1;1pkt 1fpkt"];
236--4630[label="1;4pkt 4fpkt"];
239--4282[label="1;1pkt 1fpkt"];
239--4630[label="1;1pkt 1fpkt"];
2900--4630[label="1;1pkt 1fpkt"];
4282--4630[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.146.129" src_ip="215.201.35.46" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,502,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
511[label="215.184.38.27;s;112pkt 112fpkt", shape=diamond, color=yellow];
624[label="215.184.53.46;s;60pkt 60fpkt", shape=diamond, color=yellow];
922[label="215.21.30.43;d;821pkt 821fpkt", shape=diamond, color=yellow];
923[label="215.184.50.79;s;79pkt 79fpkt", shape=diamond, color=yellow];
1063[label="215.184.53.16;s;94pkt 94fpkt", shape=diamond, color=yellow];
1103[label="215.184.38.46;s;88pkt 88fpkt", shape=diamond, color=yellow];
1205[label="215.184.38.44;s;89pkt 89fpkt", shape=diamond, color=yellow];
1607[label="215.184.59.32;s;66pkt 66fpkt", shape=diamond, color=yellow];
4286[label="215.21.30.43;d;676pkt 676fpkt", shape=hexagon, color=black];
4287[label="215.184.50.79;s;73pkt 73fpkt", shape=hexagon, color=black];
4345[label="215.184.38.46;s;88pkt 88fpkt", shape=hexagon, color=black];
5137[label="215.184.38.27;s;111pkt 111fpkt", shape=hexagon, color=black];
6904[label="215.184.39.204;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:22, 215.21.30.43:*}[93.508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.0605%)&lt;BR/&gt; 80: (0.772443%)&lt;BR/&gt; 8080: (0.104384%)&lt;BR/&gt; 6000: (0.104384%)&lt;BR/&gt; 64610: (0.0835073%)&gt;];
}
511--922[label="0.866071;97pkt 97fpkt"];
511--2382[label="0.00892857;1pkt 1fpkt"];
511--4286[label="0.696429;78pkt 78fpkt"];
511--5137[label="1;111pkt 111fpkt"];
511--5409[label="0.00892857;1pkt 1fpkt"];
624--922[label="1;60pkt 60fpkt"];
624--4286[label="1;60pkt 60fpkt"];
922--923[label="1;79pkt 79fpkt"];
922--1063[label="0.968085;91pkt 91fpkt"];
922--1103[label="0.988636;87pkt 87fpkt"];
922--1161[label="0.972222;35pkt 35fpkt"];
922--1205[label="0.977528;87pkt 87fpkt"];
922--1576[label="0.478261;22pkt 22fpkt"];
922--1607[label="1;66pkt 66fpkt"];
922--4286[label="1;676pkt 676fpkt"];
922--4287[label="1;73pkt 73fpkt"];
922--4345[label="0.988636;87pkt 87fpkt"];
922--4694[label="0.536585;22pkt 22fpkt"];
922--5137[label="0.864865;96pkt 96fpkt"];
922--6904[label="0.0526316;2pkt 2fpkt"];
923--4286[label="0.924051;73pkt 73fpkt"];
923--4287[label="1;73pkt 73fpkt"];
1063--4286[label="0.765957;72pkt 72fpkt"];
1103--2382[label="0.0113636;1pkt 1fpkt"];
1103--4286[label="0.522727;46pkt 46fpkt"];
1103--4345[label="1;88pkt 88fpkt"];
1103--5409[label="0.0113636;1pkt 1fpkt"];
1205--2382[label="0.011236;1pkt 1fpkt"];
1205--4286[label="0.539326;48pkt 48fpkt"];
1205--5409[label="0.011236;1pkt 1fpkt"];
1607--4286[label="1;66pkt 66fpkt"];
4286--4287[label="1;73pkt 73fpkt"];
4286--4345[label="0.522727;46pkt 46fpkt"];
4286--4694[label="0.536585;22pkt 22fpkt"];
4286--5137[label="0.702703;78pkt 78fpkt"];
4286--6904[label="0.0526316;2pkt 2fpkt"];
4345--5409[label="0.0113636;1pkt 1fpkt"];
5137--5409[label="0.00900901;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.21.30.43" src_port="22"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
279[label="34.217.96.36;s;1pkt 1fpkt", shape=diamond, color=yellow];
4290[label="34.217.96.36;s;1pkt 1fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.217.96.36:80, 214.10.198.177:55409}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55409: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
279--4290[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.177" dst_port="55409" src_ip="34.217.96.36" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
290[label="42.122.38.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
432[label="18.0.198.200;d;4pkt 4fpkt", shape=diamond, color=yellow];
931[label="215.184.33.142;s;1179pkt 1179fpkt", shape=diamond, color=yellow];
2225[label="196.163.44.145;d;5pkt 5fpkt", shape=diamond, color=yellow];
2283[label="145.84.165.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
2314[label="42.131.26.164;d;2pkt 2fpkt", shape=diamond, color=yellow];
3401[label="42.131.90.132;d;5pkt 5fpkt", shape=diamond, color=yellow];
3902[label="7.151.125.27;d;94pkt 94fpkt", shape=diamond, color=yellow];
4092[label="42.131.21.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
4292[label="215.184.33.142;s;489pkt 489fpkt", shape=hexagon, color=black];
4843[label="196.163.44.145;d;5pkt 5fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.33.142:80, *:*}[95.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2923%)&lt;BR/&gt; 443: (1.45577%)&lt;BR/&gt; 52226: (0.139978%)&lt;BR/&gt; 57284: (0.111982%)&lt;BR/&gt; 53352: (0.111982%)&gt;];
}
290--931[label="1;1pkt 1fpkt"];
290--4292[label="1;1pkt 1fpkt"];
432--931[label="0.25;1pkt 1fpkt"];
432--976[label="0.75;3pkt 3fpkt"];
432--4292[label="0.25;1pkt 1fpkt"];
931--1004[label="0.017341;6pkt 6fpkt"];
931--1026[label="0.0208333;1pkt 1fpkt"];
931--1244[label="0.0184697;7pkt 7fpkt"];
931--1271[label="0.0203488;7pkt 7fpkt"];
931--1305[label="0.0181269;6pkt 6fpkt"];
931--2225[label="0.6;3pkt 3fpkt"];
931--2314[label="0.5;1pkt 1fpkt"];
931--2382[label="0.00128535;1pkt 1fpkt"];
931--2455[label="0.103448;3pkt 3fpkt"];
931--2603[label="0.827338;115pkt 115fpkt"];
931--2625[label="0.111111;6pkt 6fpkt"];
931--3005[label="0.2;1pkt 1fpkt"];
931--3029[label="0.03125;2pkt 2fpkt"];
931--3242[label="0.171429;6pkt 6fpkt"];
931--3401[label="0.2;1pkt 1fpkt"];
931--3682[label="0.166667;1pkt 1fpkt"];
931--3689[label="0.96;24pkt 24fpkt"];
931--3902[label="0.882979;83pkt 83fpkt"];
931--3936[label="0.05;2pkt 2fpkt"];
931--3958[label="0.0833333;3pkt 3fpkt"];
931--4092[label="1;1pkt 1fpkt"];
931--4292[label="1;489pkt 489fpkt"];
931--4327[label="0.0243902;1pkt 1fpkt"];
931--4379[label="0.0227273;2pkt 2fpkt"];
931--4477[label="0.025;4pkt 4fpkt"];
931--4560[label="0.0192308;5pkt 5fpkt"];
931--4843[label="0.6;3pkt 3fpkt"];
931--5303[label="0.0211864;5pkt 5fpkt"];
931--5409[label="0.00128535;1pkt 1fpkt"];
2225--2283[label="1;1pkt 1fpkt"];
2225--4292[label="0.6;3pkt 3fpkt"];
2225--4843[label="1;5pkt 5fpkt"];
2283--4843[label="1;1pkt 1fpkt"];
2314--4292[label="0.5;1pkt 1fpkt"];
3902--4292[label="0.404255;38pkt 38fpkt"];
3902--6834[label="0.104478;7pkt 7fpkt"];
4292--4327[label="0.0243902;1pkt 1fpkt"];
4292--4379[label="0.0227273;2pkt 2fpkt"];
4292--4477[label="0.025;4pkt 4fpkt"];
4292--4560[label="0.0115385;3pkt 3fpkt"];
4292--4843[label="0.6;3pkt 3fpkt"];
4292--5303[label="0.00847458;2pkt 2fpkt"];
4292--5409[label="0.00204499;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.33.142" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
303[label="38.178.205.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
4296[label="38.178.205.134;d;1pkt 1fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.144.150:1973, 38.178.205.134:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1973: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
303--4296[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="38.178.205.134" dst_port="80" src_ip="165.206.144.150" src_port="1973"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
962[label="215.184.33.60;d;557pkt 557fpkt", shape=diamond, color=yellow];
4304[label="215.184.33.60;d;373pkt 373fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.184.33.60:0}[84.9192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (87.957%)&lt;BR/&gt; 33436: (1.77419%)&lt;BR/&gt; 33435: (1.77419%)&lt;BR/&gt; 33438: (1.55914%)&lt;BR/&gt; 33437: (0.860215%)&gt;];
}
962--1207[label="0.00179533;1pkt 1fpkt"];
962--2383[label="0.00179533;1pkt 1fpkt"];
962--4304[label="1;373pkt 373fpkt"];
962--4368[label="0.00179533;1pkt 1fpkt"];
962--4901[label="0.00179533;1pkt 1fpkt"];
962--5831[label="0.00179533;1pkt 1fpkt"];
962--5906[label="0.00179533;1pkt 1fpkt"];
962--5936[label="0.00179533;1pkt 1fpkt"];
962--5957[label="0.00179533;1pkt 1fpkt"];
4304--4368[label="0.00268097;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.33.60"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
514[label="194.117.149.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
1022[label="167.82.103.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
4324[label="167.82.103.107;d;1pkt 1fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.117.149.176:21092, 167.82.103.107:1027}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21092: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
514--1022[label="1;1pkt 1fpkt"];
514--4324[label="1;1pkt 1fpkt"];
1022--4324[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.103.107" dst_port="1027" src_ip="194.117.149.176" src_port="21092"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.476084,1.69675,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
1111[label="215.184.38.119;s;307pkt 307fpkt", shape=diamond, color=yellow];
3417[label="194.97.241.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
4136[label="42.131.19.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
4153[label="42.131.20.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.38.119:80, *:*}[83.3876%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.8006%)&lt;BR/&gt; 443: (8.03859%)&lt;BR/&gt; 59088: (0.321543%)&lt;BR/&gt; 56678: (0.321543%)&lt;BR/&gt; 53506: (0.321543%)&gt;];
}
1111--1244[label="0.0228013;7pkt 7fpkt"];
1111--1271[label="0.0130293;4pkt 4fpkt"];
1111--1305[label="0.0358306;11pkt 11fpkt"];
1111--2225[label="0.2;1pkt 1fpkt"];
1111--2264[label="0.333333;1pkt 1fpkt"];
1111--2382[label="0.00325733;1pkt 1fpkt"];
1111--3005[label="0.2;1pkt 1fpkt"];
1111--3321[label="0.0769231;2pkt 2fpkt"];
1111--3401[label="0.2;1pkt 1fpkt"];
1111--3417[label="1;2pkt 2fpkt"];
1111--3902[label="0.0319149;3pkt 3fpkt"];
1111--4136[label="1;1pkt 1fpkt"];
1111--4153[label="1;1pkt 1fpkt"];
1111--4327[label="0.0487805;2pkt 2fpkt"];
1111--4379[label="0.0113636;1pkt 1fpkt"];
1111--4560[label="0.0307692;8pkt 8fpkt"];
1111--4843[label="0.2;1pkt 1fpkt"];
1111--5303[label="0.0169492;4pkt 4fpkt"];
1111--5409[label="0.00325733;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.38.119" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
581[label="194.117.149.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
1077[label="167.82.102.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
4336[label="167.82.102.171;d;1pkt 1fpkt", shape=hexagon, color=black];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.117.149.178:21098, 167.82.102.171:1027}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21098: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
581--1077[label="1;1pkt 1fpkt"];
581--4336[label="1;1pkt 1fpkt"];
1077--4336[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.102.171" dst_port="1027" src_ip="194.117.149.178" src_port="21098"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
660[label="149.216.134.125;s;644pkt 644fpkt", shape=diamond, color=yellow];
4350[label="149.216.134.125;s;538pkt 538fpkt", shape=hexagon, color=black];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.134.125:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6882: (2.83418%)&lt;BR/&gt; 6881: (2.41117%)&lt;BR/&gt; 21279: (2.07276%)&lt;BR/&gt; 14139: (1.69205%)&lt;BR/&gt; 27966: (1.64975%)&gt;];
}
660--4350[label="1;538pkt 538fpkt"];
660--5889[label="0.0015528;1pkt 1fpkt"];
660--5922[label="0.0015528;1pkt 1fpkt"];
660--5943[label="0.0015528;1pkt 1fpkt"];
4350--5889[label="0.00185874;1pkt 1fpkt"];
4350--5922[label="0.00185874;1pkt 1fpkt"];
4350--5943[label="0.00185874;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.216.134.125"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
298[label="192.164.247.47;s;592pkt 592fpkt", shape=diamond, color=yellow];
499[label="215.212.172.162;s;179pkt 179fpkt", shape=diamond, color=yellow];
774[label="165.206.145.64;d;39pkt 39fpkt", shape=diamond, color=yellow];
847[label="1.216.26.98;s;14pkt 14fpkt", shape=diamond, color=yellow];
1142[label="72.12.78.192;s;611pkt 611fpkt", shape=diamond, color=yellow];
1162[label="165.206.128.22;d;27pkt 27fpkt", shape=diamond, color=yellow];
1234[label="165.206.148.178;d;99pkt 99fpkt", shape=diamond, color=yellow];
1264[label="165.206.144.211;d;31pkt 31fpkt", shape=diamond, color=yellow];
1632[label="72.12.78.210;s;83pkt 83fpkt", shape=diamond, color=yellow];
1644[label="72.12.78.235;s;181pkt 181fpkt", shape=diamond, color=yellow];
2709[label="145.84.218.140;d;13pkt 13fpkt", shape=diamond, color=yellow];
2996[label="165.206.146.234;d;22pkt 22fpkt", shape=diamond, color=yellow];
3247[label="165.206.185.5;d;203pkt 203fpkt", shape=diamond, color=yellow];
3328[label="145.84.97.206;d;13pkt 13fpkt", shape=diamond, color=yellow];
3639[label="214.7.58.81;d;47pkt 47fpkt", shape=diamond, color=yellow];
3806[label="145.84.101.167;d;16pkt 16fpkt", shape=diamond, color=yellow];
3824[label="145.84.218.9;d;30pkt 30fpkt", shape=diamond, color=yellow];
4260[label="165.206.145.64;d;12pkt 12fpkt", shape=hexagon, color=black];
4272[label="1.216.26.98;s;10pkt 10fpkt", shape=hexagon, color=black];
4356[label="165.206.128.22;d;19pkt 19fpkt", shape=hexagon, color=black];
4741[label="72.12.78.192;s;479pkt 479fpkt", shape=hexagon, color=black];
5426[label="145.84.97.229;d;12pkt 12fpkt", shape=hexagon, color=black];
5575[label="145.84.97.206;d;13pkt 13fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.12.78.192:80, *:*}[32.1241%]&lt;BR/&gt;{192.164.247.47:80, *:*}[31.1251%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3989%)&lt;BR/&gt; 28474: (0.437158%)&lt;BR/&gt; 1163: (0.163934%)&lt;BR/&gt; 1094: (0.163934%)&lt;BR/&gt; 1093: (0.163934%)&gt;];
}
298--299[label="0.027907;6pkt 6fpkt"];
298--329[label="0.136364;3pkt 3fpkt"];
298--406[label="0.0472973;28pkt 28fpkt"];
298--414[label="0.0208333;8pkt 8fpkt"];
298--417[label="0.328358;22pkt 22fpkt"];
298--582[label="0.00416667;1pkt 1fpkt"];
298--612[label="0.027027;16pkt 16fpkt"];
298--666[label="0.0320946;19pkt 19fpkt"];
298--735[label="0.00680272;2pkt 2fpkt"];
298--788[label="0.04;15pkt 15fpkt"];
298--821[label="0.338983;20pkt 20fpkt"];
298--994[label="0.00168919;1pkt 1fpkt"];
298--1162[label="0.296296;8pkt 8fpkt"];
298--1195[label="0.00362319;2pkt 2fpkt"];
298--1255[label="0.0443548;11pkt 11fpkt"];
298--1293[label="0.321429;9pkt 9fpkt"];
298--1295[label="0.2;6pkt 6fpkt"];
298--1336[label="0.1;4pkt 4fpkt"];
298--1633[label="0.0142857;2pkt 2fpkt"];
298--1661[label="0.0422833;20pkt 20fpkt"];
298--2183[label="0.193548;6pkt 6fpkt"];
298--2209[label="0.5;15pkt 15fpkt"];
298--2436[label="0.0943396;10pkt 10fpkt"];
298--2914[label="0.0357143;1pkt 1fpkt"];
298--2945[label="0.327869;20pkt 20fpkt"];
298--2957[label="0.586207;34pkt 34fpkt"];
298--2998[label="0.230769;18pkt 18fpkt"];
298--3030[label="0.424242;28pkt 28fpkt"];
298--3288[label="0.204819;17pkt 17fpkt"];
298--3606[label="0.09375;3pkt 3fpkt"];
298--3639[label="0.0425532;2pkt 2fpkt"];
298--3806[label="0.625;10pkt 10fpkt"];
298--3824[label="0.666667;20pkt 20fpkt"];
298--4162[label="0.00844595;5pkt 5fpkt"];
298--4168[label="0.00337838;2pkt 2fpkt"];
298--4180[label="0.0152027;9pkt 9fpkt"];
298--4294[label="1;523pkt 523fpkt"];
298--4356[label="0.421053;8pkt 8fpkt"];
298--4407[label="0.1;4pkt 4fpkt"];
298--4463[label="0.0304114;17pkt 17fpkt"];
298--4525[label="0.0466321;18pkt 18fpkt"];
298--4553[label="0.0268456;4pkt 4fpkt"];
298--4555[label="0.333333;9pkt 9fpkt"];
298--4623[label="0.00469484;1pkt 1fpkt"];
298--4760[label="0.00588235;2pkt 2fpkt"];
298--4784[label="0.0443548;11pkt 11fpkt"];
298--5033[label="0.5;15pkt 15fpkt"];
298--5185[label="0.027027;16pkt 16fpkt"];
298--5337[label="0.727273;24pkt 24fpkt"];
298--5426[label="0.416667;5pkt 5fpkt"];
298--5569[label="0.202899;14pkt 14fpkt"];
298--5793[label="0.0207715;7pkt 7fpkt"];
298--5800[label="0.00844595;5pkt 5fpkt"];
298--5827[label="0.0650888;11pkt 11fpkt"];
298--5842[label="0.00469484;1pkt 1fpkt"];
298--6240[label="1;592pkt 592fpkt"];
499--558[label="0.0335196;6pkt 6fpkt"];
499--666[label="0.173184;31pkt 31fpkt"];
499--737[label="0.00558659;1pkt 1fpkt"];
499--788[label="0.0111732;2pkt 2fpkt"];
499--994[label="0.0111732;2pkt 2fpkt"];
499--1237[label="0.0634921;4pkt 4fpkt"];
499--1242[label="0.0111732;2pkt 2fpkt"];
499--2011[label="0.0392157;2pkt 2fpkt"];
499--2568[label="0.00757576;1pkt 1fpkt"];
499--2709[label="0.307692;4pkt 4fpkt"];
499--2945[label="0.0491803;3pkt 3fpkt"];
499--2957[label="0.0689655;4pkt 4fpkt"];
499--3241[label="0.0588235;2pkt 2fpkt"];
499--3328[label="0.384615;5pkt 5fpkt"];
499--3639[label="0.0851064;4pkt 4fpkt"];
499--3899[label="0.0111732;2pkt 2fpkt"];
499--4162[label="0.0111732;2pkt 2fpkt"];
499--4180[label="0.0335196;6pkt 6fpkt"];
499--4314[label="0.0277778;1pkt 1fpkt"];
499--4463[label="0.0111732;2pkt 2fpkt"];
499--4474[label="0.0242424;4pkt 4fpkt"];
499--4553[label="0.0134228;2pkt 2fpkt"];
499--4623[label="0.0111732;2pkt 2fpkt"];
499--4990[label="0.00558659;1pkt 1fpkt"];
499--5108[label="0.00558659;1pkt 1fpkt"];
499--5114[label="0.0223464;4pkt 4fpkt"];
499--5575[label="0.384615;5pkt 5fpkt"];
499--5667[label="0.00793651;1pkt 1fpkt"];
499--5800[label="0.0111732;2pkt 2fpkt"];
499--5842[label="0.0111732;2pkt 2fpkt"];
774--847[label="0.0714286;1pkt 1fpkt"];
774--1142[label="0.0769231;3pkt 3fpkt"];
774--1632[label="0.025641;1pkt 1fpkt"];
774--2476[label="0.025641;1pkt 1fpkt"];
774--2932[label="0.0512821;2pkt 2fpkt"];
774--4260[label="1;12pkt 12fpkt"];
774--4272[label="0.1;1pkt 1fpkt"];
774--4741[label="0.0769231;3pkt 3fpkt"];
774--6171[label="0.0512821;2pkt 2fpkt"];
774--7262[label="0.025641;1pkt 1fpkt"];
847--1162[label="0.0714286;1pkt 1fpkt"];
847--3223[label="0.0714286;1pkt 1fpkt"];
847--3626[label="0.0714286;1pkt 1fpkt"];
847--3952[label="0.214286;3pkt 3fpkt"];
847--4251[label="0.0714286;1pkt 1fpkt"];
847--4260[label="0.0833333;1pkt 1fpkt"];
847--4272[label="1;10pkt 10fpkt"];
847--4356[label="0.0714286;1pkt 1fpkt"];
1142--1162[label="0.0740741;2pkt 2fpkt"];
1142--1234[label="0.0505051;5pkt 5fpkt"];
1142--1264[label="0.258065;8pkt 8fpkt"];
1142--1438[label="0.0105263;2pkt 2fpkt"];
1142--2637[label="0.0594059;6pkt 6fpkt"];
1142--3247[label="0.487685;99pkt 99fpkt"];
1142--3288[label="0.0120482;1pkt 1fpkt"];
1142--3639[label="0.0425532;2pkt 2fpkt"];
1142--4260[label="0.25;3pkt 3fpkt"];
1142--4356[label="0.105263;2pkt 2fpkt"];
1142--4383[label="0.258065;8pkt 8fpkt"];
1142--4498[label="0.679688;348pkt 348fpkt"];
1142--4537[label="0.0229885;2pkt 2fpkt"];
1142--4741[label="1;479pkt 479fpkt"];
1142--5045[label="0.0176991;2pkt 2fpkt"];
1142--5103[label="0.00163666;1pkt 1fpkt"];
1142--5364[label="0.176471;6pkt 6fpkt"];
1162--1632[label="0.0740741;2pkt 2fpkt"];
1162--3964[label="0.0740741;2pkt 2fpkt"];
1162--4272[label="0.1;1pkt 1fpkt"];
1162--4294[label="0.296296;8pkt 8fpkt"];
1162--4356[label="1;19pkt 19fpkt"];
1162--4741[label="0.0740741;2pkt 2fpkt"];
1162--5757[label="0.0740741;2pkt 2fpkt"];
1162--6240[label="0.296296;8pkt 8fpkt"];
1234--1247[label="0.0375;3pkt 3fpkt"];
1234--1571[label="0.0547945;4pkt 4fpkt"];
1234--1632[label="0.0843373;7pkt 7fpkt"];
1234--1644[label="0.010101;1pkt 1fpkt"];
1234--1696[label="0.020202;2pkt 2fpkt"];
1234--2067[label="0.0131579;1pkt 1fpkt"];
1234--2121[label="0.010101;1pkt 1fpkt"];
1234--2143[label="0.020202;2pkt 2fpkt"];
1234--2178[label="0.040404;4pkt 4fpkt"];
1234--2554[label="0.104478;7pkt 7fpkt"];
1234--3527[label="0.0454545;2pkt 2fpkt"];
1234--4370[label="0.030303;3pkt 3fpkt"];
1234--4380[label="0.0405405;3pkt 3fpkt"];
1234--4537[label="1;87pkt 87fpkt"];
1234--4741[label="0.020202;2pkt 2fpkt"];
1234--4789[label="0.0166667;1pkt 1fpkt"];
1234--5320[label="0.020202;2pkt 2fpkt"];
1234--5619[label="0.0547945;4pkt 4fpkt"];
1234--5627[label="0.0454545;2pkt 2fpkt"];
1264--1539[label="0.0967742;3pkt 3fpkt"];
1264--1571[label="0.0645161;2pkt 2fpkt"];
1264--1644[label="0.225806;7pkt 7fpkt"];
1264--4383[label="1;31pkt 31fpkt"];
1264--4741[label="0.258065;8pkt 8fpkt"];
1264--5619[label="0.0645161;2pkt 2fpkt"];
1632--2448[label="0.0142857;1pkt 1fpkt"];
1632--3044[label="0.0882353;6pkt 6fpkt"];
1632--3194[label="0.0597015;4pkt 4fpkt"];
1632--3247[label="0.0240964;2pkt 2fpkt"];
1632--3726[label="0.047619;1pkt 1fpkt"];
1632--4251[label="0.0120482;1pkt 1fpkt"];
1632--4260[label="0.0833333;1pkt 1fpkt"];
1632--4334[label="0.0172414;1pkt 1fpkt"];
1632--4356[label="0.0526316;1pkt 1fpkt"];
1632--4444[label="0.0120482;1pkt 1fpkt"];
1632--4537[label="0.0361446;3pkt 3fpkt"];
1632--5166[label="0.0169492;1pkt 1fpkt"];
1632--5444[label="0.0923077;6pkt 6fpkt"];
1632--5802[label="0.0172414;1pkt 1fpkt"];
1644--2637[label="0.00990099;1pkt 1fpkt"];
1644--2996[label="0.5;11pkt 11fpkt"];
1644--3247[label="0.535912;97pkt 97fpkt"];
1644--3639[label="0.0638298;3pkt 3fpkt"];
1644--4021[label="0.0689655;2pkt 2fpkt"];
1644--4251[label="0.00819672;1pkt 1fpkt"];
1644--4383[label="0.225806;7pkt 7fpkt"];
1644--4537[label="0.0114943;1pkt 1fpkt"];
1644--5045[label="0.0176991;2pkt 2fpkt"];
1644--5364[label="0.0294118;1pkt 1fpkt"];
1644--5550[label="0.0165746;3pkt 3fpkt"];
2709--4370[label="0.0769231;1pkt 1fpkt"];
2996--5277[label="0.136364;3pkt 3fpkt"];
3247--4741[label="0.0394089;8pkt 8fpkt"];
3247--6747[label="0.0052356;1pkt 1fpkt"];
3328--5575[label="1;13pkt 13fpkt"];
3639--4294[label="0.0425532;2pkt 2fpkt"];
3639--4674[label="0.0638298;3pkt 3fpkt"];
3639--6191[label="0.125;2pkt 2fpkt"];
3639--6240[label="0.0425532;2pkt 2fpkt"];
3806--4294[label="0.625;10pkt 10fpkt"];
3806--6240[label="0.625;10pkt 10fpkt"];
3824--4294[label="0.333333;10pkt 10fpkt"];
3824--6240[label="0.666667;20pkt 20fpkt"];
4260--4272[label="0.1;1pkt 1fpkt"];
4260--4741[label="0.25;3pkt 3fpkt"];
4272--4356[label="0.1;1pkt 1fpkt"];
4356--4741[label="0.105263;2pkt 2fpkt"];
4356--5757[label="0.105263;2pkt 2fpkt"];
4356--6240[label="0.421053;8pkt 8fpkt"];
4741--5045[label="0.0176991;2pkt 2fpkt"];
4741--5103[label="0.00208768;1pkt 1fpkt"];
4741--5364[label="0.176471;6pkt 6fpkt"];
5426--6240[label="0.416667;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="72.12.78.192" src_port="80"/>
      <filter src_ip="192.164.247.47" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
689[label="37.176.239.40;s;7pkt 7fpkt", shape=diamond, color=yellow];
4359[label="37.176.239.40;s;7pkt 7fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.176.239.40:80, 214.10.198.181:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64110: (7.14286%)&lt;BR/&gt; 64070: (7.14286%)&lt;BR/&gt; 64043: (7.14286%)&lt;BR/&gt; 61395: (7.14286%)&gt;];
}
689--4359[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.181" src_ip="37.176.239.40" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791535,1.65573,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
710[label="206.206.250.1;s;18pkt 18fpkt", shape=diamond, color=yellow];
711[label="165.206.194.56;d;18pkt 18fpkt", shape=diamond, color=yellow];
4364[label="206.206.250.1;s;18pkt 18fpkt", shape=hexagon, color=black];
7081[label="206.206.250.1;17pkt 17fpkt", shape=invtriangle, color=brown];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.206.250.1:80, 165.206.194.56:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64319: (2.8169%)&lt;BR/&gt; 64318: (2.8169%)&lt;BR/&gt; 64317: (2.8169%)&lt;BR/&gt; 64316: (2.8169%)&gt;];
}
710--711[label="1;18pkt 18fpkt"];
710--4364[label="1;18pkt 18fpkt"];
710--7081[label="1;17pkt 17fpkt"];
711--4364[label="1;18pkt 18fpkt"];
711--7081[label="1;17pkt 17fpkt"];
4364--7081[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.194.56" src_ip="206.206.250.1" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183784420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
795[label="196.77.12.57;d;80pkt 80fpkt", shape=diamond, color=yellow];
4391[label="196.77.12.57;d;80pkt 80fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.220.48:*, 196.77.12.57:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1511: (0.625%)&lt;BR/&gt; 1509: (0.625%)&lt;BR/&gt; 1507: (0.625%)&lt;BR/&gt; 1505: (0.625%)&gt;];
}
795--4391[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="196.77.12.57" dst_port="80" src_ip="136.119.220.48"/>
    </slice>
    <from sec="1183784410" usec="0"/>
    <to sec="1183784436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
1468[label="219.84.210.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
1489[label="90.114.184.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
1689[label="145.84.107.75;s;83pkt 83fpkt", shape=diamond, color=yellow];
1846[label="90.114.184.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
4433[label="219.84.210.48;d;1pkt 1fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.107.75:*, 210.125.252.6:80}[30.1205%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4023%)&lt;BR/&gt; 1935: (4.5977%)&lt;BR/&gt; 1597: (1.72414%)&lt;BR/&gt; 1604: (1.14943%)&lt;BR/&gt; 1602: (1.14943%)&gt;];
}
1468--1689[label="1;1pkt 1fpkt"];
1468--4433[label="1;1pkt 1fpkt"];
1489--1689[label="1;1pkt 1fpkt"];
1689--1707[label="0.0120482;1pkt 1fpkt"];
1689--1846[label="1;1pkt 1fpkt"];
1689--2237[label="0.458333;11pkt 11fpkt"];
1689--4433[label="1;1pkt 1fpkt"];
1689--4548[label="0.0222222;1pkt 1fpkt"];
1689--4590[label="1;1pkt 1fpkt"];
1689--4852[label="0.6875;11pkt 11fpkt"];
1689--5132[label="0.0481928;4pkt 4fpkt"];
1689--5369[label="0.301205;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="210.125.252.6" dst_port="80" src_ip="145.84.107.75"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183784658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
1476[label="215.114.148.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
4436[label="215.114.148.198;d;2pkt 2fpkt", shape=hexagon, color=black];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.39.2:3125, 215.114.148.198:1947}[50%]&lt;BR/&gt;{215.184.39.2:3125, 215.114.148.198:1954}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 1954: (25%)&lt;BR/&gt; 1947: (25%)&gt;];
}
1476--4436[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.114.148.198" dst_port="1954" src_ip="215.184.39.2" src_port="3125"/>
      <filter dst_ip="215.114.148.198" dst_port="1947" src_ip="215.184.39.2" src_port="3125"/>
    </slice>
    <from sec="1183784555" usec="0"/>
    <to sec="1183784583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
313[label="207.40.172.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
1514[label="134.201.50.65;s;6pkt 6fpkt", shape=diamond, color=yellow];
4451[label="207.40.172.222;d;1pkt 1fpkt", shape=hexagon, color=black];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.50.65:*, 193.97.145.90:19101}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (43.75%)&lt;BR/&gt; 54466: (18.75%)&lt;BR/&gt; 54778: (6.25%)&lt;BR/&gt; 54758: (6.25%)&lt;BR/&gt; 54739: (6.25%)&gt;];
}
313--1514[label="1;1pkt 1fpkt"];
313--4451[label="1;1pkt 1fpkt"];
1514--4451[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.97.145.90" dst_port="19101" src_ip="134.201.50.65"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
330[label="165.206.146.173;s;44pkt 44fpkt", shape=diamond, color=yellow];
1054[label="215.201.41.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
1516[label="215.201.41.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
4454[label="215.201.41.50;d;1pkt 1fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.146.173:2743, *:*}[61.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2743: (28.7234%)&lt;BR/&gt; 80: (8.51064%)&lt;BR/&gt; 13201: (3.19149%)&lt;BR/&gt; 4371: (3.19149%)&lt;BR/&gt; 32898: (2.12766%)&gt;];
}
330--469[label="0.0227273;1pkt 1fpkt"];
330--722[label="0.0227273;1pkt 1fpkt"];
330--769[label="0.0227273;1pkt 1fpkt"];
330--1054[label="1;1pkt 1fpkt"];
330--1516[label="1;1pkt 1fpkt"];
330--4454[label="1;1pkt 1fpkt"];
1516--4454[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="165.206.146.173" src_port="2743"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
1534[label="0.41.227.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
1537[label="165.206.145.66;s;12pkt 12fpkt", shape=diamond, color=yellow];
4470[label="0.41.227.133;d;1pkt 1fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.145.66:*, 0.41.227.225:8080}[66.6667%]&lt;BR/&gt;{165.206.145.66:*, 215.201.35.1:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (28.5714%)&lt;BR/&gt; 10126: (10.7143%)&lt;BR/&gt; 4226: (10.7143%)&lt;BR/&gt; 80: (10.7143%)&lt;BR/&gt; 4340: (3.57143%)&gt;];
}
1534--1537[label="1;1pkt 1fpkt"];
1534--4470[label="1;1pkt 1fpkt"];
1537--4470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.41.227.225" dst_port="8080" src_ip="165.206.145.66"/>
      <filter dst_ip="215.201.35.1" dst_port="80" src_ip="165.206.145.66"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
449[label="193.135.213.72;d;4pkt 4fpkt", shape=diamond, color=yellow];
450[label="136.119.210.97;s;87pkt 87fpkt", shape=diamond, color=yellow];
1248[label="196.97.42.37;d;31pkt 31fpkt", shape=diamond, color=yellow];
2057[label="198.196.152.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
4201[label="136.119.210.97;s;39pkt 39fpkt", shape=hexagon, color=black];
4473[label="193.135.213.72;d;4pkt 4fpkt", shape=hexagon, color=black];
4542[label="196.97.42.37;d;31pkt 31fpkt", shape=hexagon, color=black];
4972[label="198.196.152.250;d;1pkt 1fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.210.97:*, *:80}[82.8283%]&lt;BR/&gt;{*:*, 196.97.42.37:80}[31.3131%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9495%)&lt;BR/&gt; 8099: (4.0404%)&lt;BR/&gt; 4257: (1.0101%)&lt;BR/&gt; 1630: (1.0101%)&lt;BR/&gt; 1627: (1.0101%)&gt;];
}
449--450[label="1;4pkt 4fpkt"];
449--4201[label="1;4pkt 4fpkt"];
449--4473[label="1;4pkt 4fpkt"];
450--1248[label="0.612903;19pkt 19fpkt"];
450--2057[label="1;1pkt 1fpkt"];
450--4201[label="1;39pkt 39fpkt"];
450--4473[label="1;4pkt 4fpkt"];
450--4542[label="0.612903;19pkt 19fpkt"];
450--4972[label="1;1pkt 1fpkt"];
450--5891[label="0.0574713;5pkt 5fpkt"];
450--5913[label="0.0804598;7pkt 7fpkt"];
450--5924[label="0.0574713;5pkt 5fpkt"];
450--5945[label="0.0574713;5pkt 5fpkt"];
1248--4201[label="0.451613;14pkt 14fpkt"];
1248--4542[label="1;31pkt 31fpkt"];
2057--4201[label="1;1pkt 1fpkt"];
2057--4972[label="1;1pkt 1fpkt"];
4201--4473[label="1;4pkt 4fpkt"];
4201--4542[label="0.451613;14pkt 14fpkt"];
4201--4972[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.119.210.97"/>
      <filter dst_ip="196.97.42.37" dst_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
1066[label="215.184.35.88;d;464pkt 464fpkt", shape=diamond, color=yellow];
4496[label="215.184.35.88;d;378pkt 378fpkt", shape=hexagon, color=black];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 215.184.35.88:0}[99.7845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8812%)&lt;BR/&gt; 8080: (0.0593824%)&lt;BR/&gt; 6000: (0.0593824%)&gt;];
}
1066--2383[label="0.00215517;1pkt 1fpkt"];
1066--4496[label="1;378pkt 378fpkt"];
1066--4901[label="0.00215517;1pkt 1fpkt"];
1066--5831[label="0.00215517;1pkt 1fpkt"];
1066--5906[label="0.00215517;1pkt 1fpkt"];
1066--5936[label="0.00215517;1pkt 1fpkt"];
1066--5957[label="0.00215517;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.35.88"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1756[label="215.184.34.208;d;522pkt 522fpkt", shape=diamond, color=yellow];
4566[label="215.184.34.208;d;522pkt 522fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 215.184.34.208:*}[77.5862%]&lt;BR/&gt;{*:0, 215.184.34.208:0}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (38.7931%)&lt;BR/&gt; 0: (22.2222%)&lt;BR/&gt; 4551: (0.191571%)&lt;BR/&gt; 4424: (0.191571%)&lt;BR/&gt; 4158: (0.191571%)&gt;];
}
1756--2383[label="0.00191571;1pkt 1fpkt"];
1756--4566[label="1;522pkt 522fpkt"];
1756--4901[label="0.00191571;1pkt 1fpkt"];
1756--5831[label="0.00191571;1pkt 1fpkt"];
1756--5906[label="0.00191571;1pkt 1fpkt"];
1756--5936[label="0.00191571;1pkt 1fpkt"];
1756--5957[label="0.00191571;1pkt 1fpkt"];
4566--4901[label="0.00191571;1pkt 1fpkt"];
4566--5831[label="0.00191571;1pkt 1fpkt"];
4566--5906[label="0.00191571;1pkt 1fpkt"];
4566--5936[label="0.00191571;1pkt 1fpkt"];
4566--5957[label="0.00191571;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.34.208" src_port="53"/>
      <filter dst_ip="215.184.34.208"/>
    </slice>
    <from sec="1183784432" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
1464[label="90.114.184.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
4590[label="90.114.184.0;d;1pkt 1fpkt", shape=hexagon, color=black];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.107.75:1593, 90.114.184.0:1935}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 1593: (50%)&gt;];
}
1464--1689[label="1;1pkt 1fpkt"];
1464--4590[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="90.114.184.0" dst_port="1935" src_ip="145.84.107.75" src_port="1593"/>
    </slice>
    <from sec="1183784546" usec="0"/>
    <to sec="1183784573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1237[label="145.84.107.75;d;63pkt 63fpkt", shape=diamond, color=yellow];
1465[label="90.114.184.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="90.114.184.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
1847[label="90.114.184.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
4598[label="90.114.184.18;s;1pkt 1fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.125.252.6:80, 145.84.107.75:*}[39.6825%]&lt;BR/&gt;{90.114.184.48:80, 145.84.107.75:*}[25.3968%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5373%)&lt;BR/&gt; 1935: (7.46269%)&lt;BR/&gt; 1602: (2.23881%)&lt;BR/&gt; 1604: (1.49254%)&lt;BR/&gt; 1593: (1.49254%)&gt;];
}
1237--1465[label="1;1pkt 1fpkt"];
1237--1490[label="1;1pkt 1fpkt"];
1237--1847[label="1;1pkt 1fpkt"];
1237--4598[label="1;1pkt 1fpkt"];
1237--4674[label="0.0634921;4pkt 4fpkt"];
1490--4598[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.107.75" src_ip="210.125.252.6" src_port="80"/>
      <filter dst_ip="145.84.107.75" src_ip="90.114.184.48" src_port="80"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183784658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
305[label="59.46.117.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
427[label="44.192.186.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
495[label="204.199.17.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
661[label="117.98.56.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
671[label="35.43.49.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
691[label="34.200.3.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
695[label="56.161.12.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
913[label="149.38.148.131;s;1811pkt 1811fpkt", shape=diamond, color=yellow];
914[label="117.28.58.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1037[label="36.155.186.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1351[label="33.205.63.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
1640[label="42.233.114.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
2293[label="33.164.145.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
2449[label="49.79.76.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
2800[label="32.19.201.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
4200[label="44.192.186.2;d;1pkt 1fpkt", shape=hexagon, color=black];
4212[label="204.199.17.213;d;1pkt 1fpkt", shape=hexagon, color=black];
4246[label="34.200.3.189;d;1pkt 1fpkt", shape=hexagon, color=black];
4450[label="59.46.117.7;d;1pkt 1fpkt", shape=hexagon, color=black];
4486[label="36.155.186.11;d;1pkt 1fpkt", shape=hexagon, color=black];
4627[label="149.38.148.131;s;979pkt 979fpkt", shape=hexagon, color=black];
4965[label="35.43.49.7;d;1pkt 1fpkt", shape=hexagon, color=black];
5080[label="117.28.58.11;d;1pkt 1fpkt", shape=hexagon, color=black];
5104[label="32.19.201.41;d;1pkt 1fpkt", shape=hexagon, color=black];
5506[label="49.79.76.75;d;1pkt 1fpkt", shape=hexagon, color=black];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.38.148.131:6881, *:*}[99.1717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (52.0619%)&lt;BR/&gt; 6882: (0.479915%)&lt;BR/&gt; 49152: (0.46214%)&lt;BR/&gt; 50000: (0.337718%)&lt;BR/&gt; 52525: (0.284394%)&gt;];
}
305--913[label="1;1pkt 1fpkt"];
305--4450[label="1;1pkt 1fpkt"];
305--4627[label="1;1pkt 1fpkt"];
427--913[label="1;1pkt 1fpkt"];
427--4200[label="1;1pkt 1fpkt"];
427--4627[label="1;1pkt 1fpkt"];
495--913[label="1;1pkt 1fpkt"];
495--4212[label="1;1pkt 1fpkt"];
495--4627[label="1;1pkt 1fpkt"];
661--913[label="1;1pkt 1fpkt"];
661--4627[label="1;1pkt 1fpkt"];
671--913[label="1;1pkt 1fpkt"];
671--4627[label="1;1pkt 1fpkt"];
671--4965[label="1;1pkt 1fpkt"];
691--913[label="1;1pkt 1fpkt"];
691--4246[label="1;1pkt 1fpkt"];
691--4627[label="1;1pkt 1fpkt"];
695--913[label="1;1pkt 1fpkt"];
695--4627[label="1;1pkt 1fpkt"];
913--914[label="1;1pkt 1fpkt"];
913--1037[label="1;1pkt 1fpkt"];
913--1351[label="1;1pkt 1fpkt"];
913--1640[label="1;1pkt 1fpkt"];
913--2293[label="1;1pkt 1fpkt"];
913--2449[label="1;1pkt 1fpkt"];
913--2800[label="1;1pkt 1fpkt"];
913--4200[label="1;1pkt 1fpkt"];
913--4212[label="1;1pkt 1fpkt"];
913--4246[label="1;1pkt 1fpkt"];
913--4450[label="1;1pkt 1fpkt"];
913--4486[label="1;1pkt 1fpkt"];
913--4627[label="1;979pkt 979fpkt"];
913--4965[label="1;1pkt 1fpkt"];
913--5080[label="1;1pkt 1fpkt"];
913--5104[label="1;1pkt 1fpkt"];
913--5506[label="1;1pkt 1fpkt"];
913--5910[label="0.000552181;1pkt 1fpkt"];
913--5913[label="0.000552181;1pkt 1fpkt"];
913--5939[label="0.000552181;1pkt 1fpkt"];
913--5960[label="0.000552181;1pkt 1fpkt"];
914--4627[label="1;1pkt 1fpkt"];
914--5080[label="1;1pkt 1fpkt"];
1037--4486[label="1;1pkt 1fpkt"];
1037--4627[label="1;1pkt 1fpkt"];
1351--4627[label="1;1pkt 1fpkt"];
1640--4627[label="1;1pkt 1fpkt"];
2293--4627[label="1;1pkt 1fpkt"];
2449--4627[label="1;1pkt 1fpkt"];
2449--5506[label="1;1pkt 1fpkt"];
2800--4627[label="1;1pkt 1fpkt"];
2800--5104[label="1;1pkt 1fpkt"];
4200--4627[label="1;1pkt 1fpkt"];
4212--4627[label="1;1pkt 1fpkt"];
4246--4627[label="1;1pkt 1fpkt"];
4450--4627[label="1;1pkt 1fpkt"];
4486--4627[label="1;1pkt 1fpkt"];
4627--4965[label="1;1pkt 1fpkt"];
4627--5080[label="1;1pkt 1fpkt"];
4627--5104[label="1;1pkt 1fpkt"];
4627--5506[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.38.148.131" src_port="6881"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
389[label="205.38.20.116;d;1pkt 1fpkt", shape=diamond, color=yellow];
921[label="4.182.117.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1786[label="165.206.141.162;s;14pkt 14fpkt", shape=diamond, color=yellow];
4577[label="165.206.141.162;s;14pkt 14fpkt", shape=hexagon, color=black];
4633[label="4.182.117.11;d;1pkt 1fpkt", shape=hexagon, color=black];
4650[label="205.38.20.116;d;1pkt 1fpkt", shape=hexagon, color=black];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.141.162:*, 1.216.26.67:80}[81.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 19101: (3.125%)&lt;BR/&gt; 11050: (3.125%)&lt;BR/&gt; 3110: (3.125%)&lt;BR/&gt; 2047: (3.125%)&gt;];
}
389--4632[label="1;1pkt 1fpkt"];
389--4650[label="1;1pkt 1fpkt"];
921--4632[label="1;1pkt 1fpkt"];
921--4633[label="1;1pkt 1fpkt"];
1786--4577[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="1.216.26.67" dst_port="80" src_ip="165.206.141.162"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568496,1.70718,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1183784400" usec="0"/>
      <to sec="1183784958" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
329[label="165.206.146.173;d;22pkt 22fpkt", shape=diamond, color=yellow];
944[label="215.201.41.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
1055[label="215.201.41.53;s;1pkt 1fpkt", shape=diamond, color=yellow];
4453[label="165.206.146.173;d;7pkt 7fpkt", shape=hexagon, color=black];
4644[label="215.201.41.50;s;1pkt 1fpkt", shape=hexagon, color=black];
5162[label="215.201.41.53;s;1pkt 1fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 165.206.146.173:2743}[54.5455%]&lt;BR/&gt;{*:80, 165.206.146.173:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2743: (24.2424%)&lt;BR/&gt; 80: (10.6061%)&lt;BR/&gt; 15206: (6.06061%)&lt;BR/&gt; 13201: (6.06061%)&lt;BR/&gt; 11826: (6.06061%)&gt;];
}
329--470[label="0.0454545;1pkt 1fpkt"];
329--723[label="0.0454545;1pkt 1fpkt"];
329--944[label="1;1pkt 1fpkt"];
329--1055[label="1;1pkt 1fpkt"];
329--4453[label="1;7pkt 7fpkt"];
329--4644[label="1;1pkt 1fpkt"];
329--5162[label="1;1pkt 1fpkt"];
329--6240[label="0.136364;3pkt 3fpkt"];
944--4453[label="1;1pkt 1fpkt"];
944--4644[label="1;1pkt 1fpkt"];
1055--4453[label="1;1pkt 1fpkt"];
1055--5162[label="1;1pkt 1fpkt"];
4453--4644[label="1;1pkt 1fpkt"];
4453--5162[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.146.173" src_port="80"/>
      <filter dst_ip="165.206.146.173" dst_port="2743"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
956[label="145.84.74.156;s;158pkt 158fpkt", shape=diamond, color=yellow];
1026[label="7.151.124.174;d;48pkt 48fpkt", shape=diamond, color=yellow];
1784[label="42.131.89.208;d;4pkt 4fpkt", shape=diamond, color=yellow];
2431[label="145.84.145.75;s;24pkt 24fpkt", shape=diamond, color=yellow];
4649[label="145.84.74.156;s;111pkt 111fpkt", shape=hexagon, color=black];
4773[label="197.12.76.161;d;27pkt 27fpkt", shape=hexagon, color=black];
5014[label="163.170.70.168;d;19pkt 19fpkt", shape=hexagon, color=black];
5130[label="145.84.145.75;s;24pkt 24fpkt", shape=hexagon, color=black];
6390[label="145.84.145.75;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6783[label="134.133.165.170;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7213[label="145.84.145.75;41pkt 41fpkt", shape=invtriangle, color=brown];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.74.156:80, *:*}[49.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3371%)&lt;BR/&gt; 48330: (0.473485%)&lt;BR/&gt; 64418: (0.378788%)&lt;BR/&gt; 62720: (0.378788%)&lt;BR/&gt; 59093: (0.378788%)&gt;];
}
956--1026[label="0.0208333;1pkt 1fpkt"];
956--1259[label="0.0189873;3pkt 3fpkt"];
956--1727[label="0.294118;10pkt 10fpkt"];
956--1784[label="0.25;1pkt 1fpkt"];
956--2092[label="0.0344828;1pkt 1fpkt"];
956--2101[label="0.153846;2pkt 2fpkt"];
956--2496[label="0.0316456;5pkt 5fpkt"];
956--3029[label="0.015625;1pkt 1fpkt"];
956--3317[label="0.25;6pkt 6fpkt"];
956--3679[label="0.0443038;7pkt 7fpkt"];
956--3708[label="0.2;1pkt 1fpkt"];
956--3936[label="0.05;2pkt 2fpkt"];
956--3998[label="0.1;1pkt 1fpkt"];
956--4327[label="0.0243902;1pkt 1fpkt"];
956--4575[label="0.25;1pkt 1fpkt"];
956--4649[label="1;111pkt 111fpkt"];
956--4773[label="0.037037;1pkt 1fpkt"];
956--5014[label="0.315789;6pkt 6fpkt"];
956--5687[label="0.0612245;6pkt 6fpkt"];
1026--1035[label="0.0208333;1pkt 1fpkt"];
1026--1111[label="0.0416667;2pkt 2fpkt"];
1026--1120[label="0.0208333;1pkt 1fpkt"];
1026--1160[label="0.0416667;2pkt 2fpkt"];
1026--1280[label="0.0833333;4pkt 4fpkt"];
1026--2103[label="0.0208333;1pkt 1fpkt"];
1026--2431[label="0.0416667;1pkt 1fpkt"];
1026--2868[label="0.0833333;1pkt 1fpkt"];
1026--3251[label="0.0208333;1pkt 1fpkt"];
1026--3272[label="0.0833333;4pkt 4fpkt"];
1026--4292[label="0.0208333;1pkt 1fpkt"];
1026--4327[label="1;41pkt 41fpkt"];
1026--4649[label="0.0208333;1pkt 1fpkt"];
1026--4795[label="0.0833333;4pkt 4fpkt"];
1026--5130[label="0.0416667;1pkt 1fpkt"];
1026--5224[label="0.0416667;2pkt 2fpkt"];
1026--5280[label="0.0263158;1pkt 1fpkt"];
1026--5317[label="0.0625;3pkt 3fpkt"];
1026--5526[label="0.0833333;1pkt 1fpkt"];
1026--5541[label="0.0208333;1pkt 1fpkt"];
1026--6390[label="0.0238095;1pkt 1fpkt"];
1026--6783[label="0.1;3pkt 3fpkt"];
1026--7213[label="0.0243902;1pkt 1fpkt"];
1784--3651[label="0.25;1pkt 1fpkt"];
1784--4575[label="1;4pkt 4fpkt"];
1784--4649[label="0.25;1pkt 1fpkt"];
1784--4976[label="0.25;1pkt 1fpkt"];
2431--4327[label="0.0416667;1pkt 1fpkt"];
2431--5130[label="1;24pkt 24fpkt"];
2431--6390[label="1;24pkt 24fpkt"];
2431--7213[label="1;24pkt 24fpkt"];
4649--4773[label="0.037037;1pkt 1fpkt"];
4649--5014[label="0.315789;6pkt 6fpkt"];
4649--5687[label="0.0204082;2pkt 2fpkt"];
4773--4774[label="0.0740741;2pkt 2fpkt"];
4773--4976[label="0.0740741;2pkt 2fpkt"];
4773--5147[label="0.037037;1pkt 1fpkt"];
5014--5241[label="0.0526316;1pkt 1fpkt"];
5130--6390[label="1;24pkt 24fpkt"];
5130--7213[label="1;24pkt 24fpkt"];
6390--7213[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="145.84.74.156" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
402[label="165.206.144.153;d;6pkt 6fpkt", shape=diamond, color=yellow];
403[label="36.16.214.115;s;6pkt 6fpkt", shape=diamond, color=yellow];
4651[label="165.206.144.153;d;6pkt 6fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.16.214.115:5004, 165.206.144.153:*}[66.6667%]&lt;BR/&gt;{36.16.214.115:554, 165.206.144.153:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5004: (33.3333%)&lt;BR/&gt; 554: (16.6667%)&lt;BR/&gt; 1830: (8.33333%)&lt;BR/&gt; 1828: (8.33333%)&lt;BR/&gt; 1827: (8.33333%)&gt;];
}
402--403[label="1;6pkt 6fpkt"];
402--4651[label="1;6pkt 6fpkt"];
403--4651[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.144.153" src_ip="36.16.214.115" src_port="5004"/>
      <filter dst_ip="165.206.144.153" src_ip="36.16.214.115" src_port="554"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
972[label="214.196.0.142;d;2pkt 2fpkt", shape=diamond, color=yellow];
1530[label="161.203.130.44;s;2pkt 2fpkt", shape=diamond, color=yellow];
4655[label="214.196.0.142;d;2pkt 2fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.130.44:22, 214.196.0.142:13573}[50%]&lt;BR/&gt;{161.203.130.44:22, 214.196.0.142:54330}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 54330: (25%)&lt;BR/&gt; 13573: (25%)&gt;];
}
972--1530[label="1;2pkt 2fpkt"];
972--4655[label="1;2pkt 2fpkt"];
1530--4655[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="214.196.0.142" dst_port="54330" src_ip="161.203.130.44" src_port="22"/>
      <filter dst_ip="214.196.0.142" dst_port="13573" src_ip="161.203.130.44" src_port="22"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
483[label="0.41.227.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
1000[label="214.7.142.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
4667[label="0.41.227.148;d;1pkt 1fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.142.156:1341, 0.41.227.148:12250}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12250: (50%)&lt;BR/&gt; 1341: (50%)&gt;];
}
483--1000[label="1;1pkt 1fpkt"];
483--4667[label="1;1pkt 1fpkt"];
1000--4667[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.41.227.148" dst_port="12250" src_ip="214.7.142.156" src_port="1341"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
1955[label="117.174.253.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
4670[label="117.174.253.43;d;1pkt 1fpkt", shape=hexagon, color=black];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.32.66:3769, 117.174.253.43:27214}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27214: (50%)&lt;BR/&gt; 3769: (50%)&gt;];
}
1955--4670[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="117.174.253.43" dst_port="27214" src_ip="215.184.32.66" src_port="3769"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
494[label="37.48.211.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
4673[label="37.48.211.105;d;1pkt 1fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.52.94:58156, 37.48.211.105:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58156: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
494--4673[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.48.211.105" dst_port="21" src_ip="215.184.52.94" src_port="58156"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_256{
style=filled;
color=gray75;
1552[label="167.82.103.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
1553[label="194.117.149.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
4679[label="167.82.103.107;s;1pkt 1fpkt", shape=hexagon, color=black];
4680[label="194.117.149.176;d;1pkt 1fpkt", shape=hexagon, color=black];
stat256[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.82.103.107:1027, 194.117.149.176:21092}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21092: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
1552--1553[label="1;1pkt 1fpkt"];
1552--4679[label="1;1pkt 1fpkt"];
1552--4680[label="1;1pkt 1fpkt"];
1553--4679[label="1;1pkt 1fpkt"];
1553--4680[label="1;1pkt 1fpkt"];
4679--4680[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.117.149.176" dst_port="21092" src_ip="167.82.103.107" src_port="1027"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1039[label="37.48.211.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
4685[label="37.48.211.78;s;1pkt 1fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.48.211.78:21, 215.184.52.94:34847}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34847: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
1039--4685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.52.94" dst_port="34847" src_ip="37.48.211.78" src_port="21"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
381[label="215.149.161.156;d;154pkt 154fpkt", shape=diamond, color=yellow];
967[label="215.184.39.86;s;55pkt 55fpkt", shape=diamond, color=yellow];
4686[label="215.184.48.32;s;101pkt 101fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.39.86:22, 215.149.161.156:*}[24.6637%]&lt;BR/&gt;{215.184.48.32:*, *:25}[22.4215%]&lt;BR/&gt;{215.184.52.94:22, 215.149.161.156:*}[20.6278%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (38.871%)&lt;BR/&gt; 25: (8.06452%)&lt;BR/&gt; 32769: (2.74194%)&lt;BR/&gt; 53: (2.74194%)&lt;BR/&gt; 60838: (0.322581%)&gt;];
}
381--511[label="0.125;14pkt 14fpkt"];
381--535[label="0.235294;32pkt 32fpkt"];
381--967[label="1;55pkt 55fpkt"];
381--4686[label="0.316832;32pkt 32fpkt"];
381--5137[label="0.126126;14pkt 14fpkt"];
4686--5106[label="0.00990099;1pkt 1fpkt"];
4686--5409[label="0.00990099;1pkt 1fpkt"];
4686--5639[label="0.00990099;1pkt 1fpkt"];
4686--5890[label="0.237624;24pkt 24fpkt"];
4686--5908[label="0.148515;15pkt 15fpkt"];
4686--5911[label="0.019802;2pkt 2fpkt"];
4686--5923[label="0.237624;24pkt 24fpkt"];
4686--5944[label="0.237624;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="215.184.48.32"/>
      <filter dst_ip="215.149.161.156" src_ip="215.184.39.86" src_port="22"/>
      <filter dst_ip="215.149.161.156" src_ip="215.184.52.94" src_port="22"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
544[label="40.249.223.41;s;29pkt 29fpkt", shape=diamond, color=yellow];
4690[label="40.249.223.41;s;20pkt 20fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.249.223.41:80, 145.84.115.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59852: (2.04082%)&lt;BR/&gt; 59658: (2.04082%)&lt;BR/&gt; 59362: (2.04082%)&lt;BR/&gt; 59160: (2.04082%)&gt;];
}
544--4690[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.115.162" src_ip="40.249.223.41" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1065[label="37.48.211.73;s;1pkt 1fpkt", shape=diamond, color=yellow];
4701[label="37.48.211.73;s;1pkt 1fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.48.211.73:21, 215.184.52.94:53648}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53648: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
1065--4701[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.52.94" dst_port="53648" src_ip="37.48.211.73" src_port="21"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568496,1.70718,020,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
4703[label="215.184.35.88;s;464pkt 464fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.35.88:0, *:0}[99.7845%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7845%)&lt;BR/&gt; 8080: (0.107759%)&lt;BR/&gt; 6000: (0.107759%)&gt;];
}
4703--4958[label="0.00465116;1pkt 1fpkt"];
4703--5409[label="0.00215517;1pkt 1fpkt"];
4703--5495[label="0.00694444;1pkt 1fpkt"];
4703--7547[label="0.997845;463pkt 463fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.35.88"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1602[label="214.10.197.181;s;502pkt 502fpkt", shape=diamond, color=yellow];
4718[label="214.10.197.181;s;475pkt 475fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.10.197.181:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1602--4718[label="1;475pkt 475fpkt"];
</description>
    <slice>
      <filter src_ip="214.10.197.181"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
1125[label="217.83.100.33;s;148pkt 148fpkt", shape=diamond, color=yellow];
4731[label="217.83.100.33;s;148pkt 148fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.83.100.33:6667, *:*}[37.1622%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.5811%)&lt;BR/&gt; 6662: (4.05405%)&lt;BR/&gt; 6668: (3.71622%)&lt;BR/&gt; 6660: (3.71622%)&lt;BR/&gt; 3128: (3.37838%)&gt;];
}
1125--4731[label="1;148pkt 148fpkt"];
1125--5895[label="0.00675676;1pkt 1fpkt"];
1125--5928[label="0.00675676;1pkt 1fpkt"];
1125--5949[label="0.00675676;1pkt 1fpkt"];
4731--5895[label="0.00675676;1pkt 1fpkt"];
4731--5928[label="0.00675676;1pkt 1fpkt"];
4731--5949[label="0.00675676;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.83.100.33" src_port="6667"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
3019[label="84.77.19.201;s;109pkt 109fpkt", shape=diamond, color=yellow];
3350[label="145.84.125.36;d;97pkt 97fpkt", shape=diamond, color=yellow];
4742[label="145.84.116.1;d;40pkt 40fpkt", shape=hexagon, color=black];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.77.19.201:*, 145.84.125.36:443}[66.8966%]&lt;BR/&gt;{*:*, 145.84.116.1:80}[26.8966%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (40.6504%)&lt;BR/&gt; 80: (9.14634%)&lt;BR/&gt; 65000: (0.406504%)&lt;BR/&gt; 64880: (0.406504%)&lt;BR/&gt; 64097: (0.406504%)&gt;];
}
3019--3350[label="1;97pkt 97fpkt"];
3019--4742[label="0.1;4pkt 4fpkt"];
3019--5891[label="0.0550459;6pkt 6fpkt"];
3019--5924[label="0.0550459;6pkt 6fpkt"];
3019--5945[label="0.0550459;6pkt 6fpkt"];
4742--5292[label="0.025;1pkt 1fpkt"];
4742--5891[label="0.125;5pkt 5fpkt"];
4742--5924[label="0.125;5pkt 5fpkt"];
4742--5945[label="0.125;5pkt 5fpkt"];
4742--5973[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.116.1" dst_port="80"/>
      <filter dst_ip="145.84.125.36" dst_port="443" src_ip="84.77.19.201"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963123,1.6645,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
39[label="134.201.15.95s;1pkt 1fpkt", shape=rectangle, color=red];
1150[label="134.201.15.95;s;122pkt 122fpkt", shape=diamond, color=yellow];
1470[label="214.104.112.61;d;2pkt 2fpkt", shape=diamond, color=yellow];
2042[label="197.81.112.51;d;2pkt 2fpkt", shape=diamond, color=yellow];
2668[label="198.54.103.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
2672[label="193.244.54.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
3028[label="196.155.116.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
3776[label="206.148.182.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
4747[label="134.201.15.95;s;94pkt 94fpkt", shape=hexagon, color=black];
5418[label="196.155.116.20;d;1pkt 1fpkt", shape=hexagon, color=black];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.15.95:9308, *:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9308: (27.6549%)&lt;BR/&gt; 0: (4.42478%)&lt;BR/&gt; 6707: (4.20354%)&lt;BR/&gt; 80: (3.9823%)&lt;BR/&gt; 7686: (0.884956%)&gt;];
}
39--1150[label="1;1pkt 1fpkt"];
39--2672[label="1;1pkt 1fpkt"];
39--4747[label="1;1pkt 1fpkt"];
1150--1470[label="1;2pkt 2fpkt"];
1150--2042[label="1;2pkt 2fpkt"];
1150--2668[label="1;1pkt 1fpkt"];
1150--2672[label="1;1pkt 1fpkt"];
1150--3028[label="1;1pkt 1fpkt"];
1150--3776[label="1;1pkt 1fpkt"];
1150--4747[label="1;94pkt 94fpkt"];
1150--5418[label="1;1pkt 1fpkt"];
1150--5913[label="0.00819672;1pkt 1fpkt"];
1470--4747[label="1;2pkt 2fpkt"];
2042--4747[label="0.5;1pkt 1fpkt"];
2668--4747[label="1;1pkt 1fpkt"];
2672--4747[label="1;1pkt 1fpkt"];
3028--4747[label="1;1pkt 1fpkt"];
3028--5418[label="1;1pkt 1fpkt"];
4747--5418[label="1;1pkt 1fpkt"];
4747--5913[label="0.0106383;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.201.15.95" src_port="9308"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1635[label="214.7.138.98;d;4pkt 4fpkt", shape=diamond, color=yellow];
1636[label="0.41.226.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
4748[label="0.41.226.98;s;1pkt 1fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.41.226.98:10795, 214.7.138.98:1257}[25%]&lt;BR/&gt;{215.201.35.74:80, 214.7.138.98:1333}[25%]&lt;BR/&gt;{215.201.35.74:80, 214.7.138.98:1335}[25%]&lt;BR/&gt;{215.201.35.74:80, 214.7.138.98:1338}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10795: (25%)&lt;BR/&gt; 1257: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 1338: (8.33333%)&lt;BR/&gt; 1335: (8.33333%)&gt;];
}
1635--1636[label="1;1pkt 1fpkt"];
1635--4748[label="1;1pkt 1fpkt"];
1636--4748[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.138.98" dst_port="1338" src_ip="215.201.35.74" src_port="80"/>
      <filter dst_ip="214.7.138.98" dst_port="1335" src_ip="215.201.35.74" src_port="80"/>
      <filter dst_ip="214.7.138.98" dst_port="1333" src_ip="215.201.35.74" src_port="80"/>
      <filter dst_ip="214.7.138.98" dst_port="1257" src_ip="0.41.226.98" src_port="10795"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
698[label="161.203.230.153;s;13pkt 13fpkt", shape=diamond, color=yellow];
1182[label="36.77.34.175;d;12pkt 12fpkt", shape=diamond, color=yellow];
4522[label="36.77.34.175;d;2pkt 2fpkt", shape=hexagon, color=black];
4756[label="161.203.230.153;s;10pkt 10fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.230.153:80, 36.77.34.175:*}[57.8947%]&lt;BR/&gt;{161.203.230.153:80, 192.153.70.217:*}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6486%)&lt;BR/&gt; 57822: (5.40541%)&lt;BR/&gt; 57307: (5.40541%)&lt;BR/&gt; 53718: (4.05405%)&lt;BR/&gt; 62149: (2.7027%)&gt;];
}
698--1182[label="0.5;6pkt 6fpkt"];
698--4522[label="1;2pkt 2fpkt"];
698--4756[label="1;10pkt 10fpkt"];
1182--1950[label="0.0833333;1pkt 1fpkt"];
1182--4522[label="1;2pkt 2fpkt"];
1182--4756[label="0.3;3pkt 3fpkt"];
4522--4756[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="36.77.34.175" src_ip="161.203.230.153" src_port="80"/>
      <filter dst_ip="192.153.70.217" src_ip="161.203.230.153" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1658[label="33.89.123.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
4763[label="33.89.123.18;s;1pkt 1fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.89.123.18:43369, 215.184.32.66:4085}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43369: (50%)&lt;BR/&gt; 4085: (50%)&gt;];
}
1658--4763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.32.66" dst_port="4085" src_ip="33.89.123.18" src_port="43369"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
715[label="206.55.93.180;s;6pkt 6fpkt", shape=diamond, color=yellow];
4767[label="206.55.93.180;s;2pkt 2fpkt", shape=hexagon, color=black];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.55.93.180:80, 145.84.115.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58792: (12.5%)&lt;BR/&gt; 57068: (12.5%)&lt;BR/&gt; 60719: (6.25%)&lt;BR/&gt; 60670: (6.25%)&gt;];
}
715--4767[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.115.162" src_ip="206.55.93.180" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
1734[label="214.7.138.164;d;79pkt 79fpkt", shape=diamond, color=yellow];
3387[label="38.178.192.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
3842[label="38.178.194.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
3849[label="38.178.204.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
6083[label="38.178.192.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 214.7.138.164:*}[98.7342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3976%)&lt;BR/&gt; 50135: (1.80723%)&lt;BR/&gt; 50286: (1.20482%)&lt;BR/&gt; 50282: (1.20482%)&lt;BR/&gt; 50380: (0.60241%)&gt;];
}
1734--2027[label="0.126582;10pkt 10fpkt"];
1734--2067[label="0.0263158;2pkt 2fpkt"];
1734--2097[label="0.126582;10pkt 10fpkt"];
1734--2121[label="0.126582;10pkt 10fpkt"];
1734--2132[label="0.015873;1pkt 1fpkt"];
1734--2285[label="1;1pkt 1fpkt"];
1734--3387[label="1;1pkt 1fpkt"];
1734--3842[label="1;1pkt 1fpkt"];
1734--3849[label="1;1pkt 1fpkt"];
1734--4789[label="0.0833333;5pkt 5fpkt"];
1734--4805[label="1;40pkt 40fpkt"];
1734--5209[label="0.0759494;6pkt 6fpkt"];
1734--6083[label="1;1pkt 1fpkt"];
1734--6243[label="0.0512821;2pkt 2fpkt"];
3387--6083[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.138.164" src_port="80"/>
    </slice>
    <from sec="1183784412" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1368[label="90.104.207.211;s;41pkt 41fpkt", shape=diamond, color=yellow];
1771[label="145.84.13.41;d;57pkt 57fpkt", shape=diamond, color=yellow];
4812[label="1.216.24.138;s;132pkt 132fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.216.24.138:80, 145.84.115.162:*}[35.6808%]&lt;BR/&gt;{*:80, 145.84.13.41:*}[26.7606%]&lt;BR/&gt;{90.104.207.211:80, *:*}[23.0047%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49658: (0.434783%)&lt;BR/&gt; 49657: (0.434783%)&lt;BR/&gt; 49656: (0.434783%)&lt;BR/&gt; 49655: (0.434783%)&gt;];
}
1368--1771[label="0.390244;16pkt 16fpkt"];
1771--2099[label="0.0175439;1pkt 1fpkt"];
1771--2116[label="0.0175439;1pkt 1fpkt"];
1771--4370[label="0.0175439;1pkt 1fpkt"];
1771--4571[label="1;20pkt 20fpkt"];
1771--4812[label="0.0175439;1pkt 1fpkt"];
1771--4948[label="0.0526316;3pkt 3fpkt"];
1771--5277[label="0.0175439;1pkt 1fpkt"];
1771--5362[label="0.0701754;4pkt 4fpkt"];
1771--6933[label="0.0175439;1pkt 1fpkt"];
4812--4857[label="0.0526316;1pkt 1fpkt"];
4812--5048[label="0.0126582;1pkt 1fpkt"];
4812--5108[label="0.00757576;1pkt 1fpkt"];
4812--5321[label="0.0666667;3pkt 3fpkt"];
4812--5346[label="0.0378788;5pkt 5fpkt"];
4812--5493[label="0.0555556;2pkt 2fpkt"];
4812--5510[label="0.00757576;1pkt 1fpkt"];
4812--5800[label="0.0227273;3pkt 3fpkt"];
4812--5808[label="0.0169492;1pkt 1fpkt"];
4812--5821[label="0.00757576;1pkt 1fpkt"];
4812--5827[label="0.0151515;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="90.104.207.211" src_port="80"/>
      <filter dst_ip="145.84.13.41" src_port="80"/>
      <filter dst_ip="145.84.115.162" src_ip="1.216.24.138" src_port="80"/>
    </slice>
    <from sec="1183784420" usec="0"/>
    <to sec="1183785225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
843[label="37.176.239.77;s;12pkt 12fpkt", shape=diamond, color=yellow];
4822[label="37.176.239.77;s;12pkt 12fpkt", shape=hexagon, color=black];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.176.239.77:80, 214.10.198.181:*}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64065: (4.16667%)&lt;BR/&gt; 64062: (4.16667%)&lt;BR/&gt; 64056: (4.16667%)&lt;BR/&gt; 64049: (4.16667%)&gt;];
}
843--4822[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.181" src_ip="37.176.239.77" src_port="80"/>
    </slice>
    <from sec="1183784430" usec="0"/>
    <to sec="1183784616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1345[label="196.160.193.13;d;211pkt 211fpkt", shape=diamond, color=yellow];
1353[label="149.216.64.37;s;86pkt 86fpkt", shape=diamond, color=yellow];
1760[label="149.216.70.91;s;26pkt 26fpkt", shape=diamond, color=yellow];
2647[label="149.216.70.82;s;124pkt 124fpkt", shape=diamond, color=yellow];
4409[label="196.160.193.13;d;81pkt 81fpkt", shape=hexagon, color=black];
4825[label="149.216.70.91;s;26pkt 26fpkt", shape=hexagon, color=black];
5373[label="149.216.70.82;s;124pkt 124fpkt", shape=hexagon, color=black];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.70.82:80, 196.160.193.13:*}[52.1008%]&lt;BR/&gt;{149.216.64.37:80, 196.160.193.13:*}[26.0504%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2301%)&lt;BR/&gt; 995: (0.884956%)&lt;BR/&gt; 53: (0.516224%)&lt;BR/&gt; 25: (0.368732%)&lt;BR/&gt; 2612: (0.294985%)&gt;];
}
1345--1353[label="0.72093;62pkt 62fpkt"];
1345--1760[label="0.884615;23pkt 23fpkt"];
1345--2647[label="1;124pkt 124fpkt"];
1345--4409[label="1;81pkt 81fpkt"];
1345--4825[label="0.884615;23pkt 23fpkt"];
1345--5373[label="1;124pkt 124fpkt"];
1760--4409[label="0.346154;9pkt 9fpkt"];
1760--4825[label="1;26pkt 26fpkt"];
2647--4409[label="0.876543;71pkt 71fpkt"];
2647--5373[label="1;124pkt 124fpkt"];
4409--4825[label="0.346154;9pkt 9fpkt"];
4409--5373[label="0.876543;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="196.160.193.13" src_ip="149.216.70.82" src_port="80"/>
      <filter dst_ip="196.160.193.13" src_ip="149.216.64.37" src_port="80"/>
    </slice>
    <from sec="1183784434" usec="0"/>
    <to sec="1183785058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
2127[label="149.197.214.100;s;121pkt 121fpkt", shape=diamond, color=yellow];
4557[label="1.216.24.162;d;175pkt 175fpkt", shape=hexagon, color=black];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.214.100:*, 38.186.213.253:80}[35.3741%]&lt;BR/&gt;{145.84.174.241:*, 1.216.24.162:80}[34.0136%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8311%)&lt;BR/&gt; 4033: (0.337838%)&lt;BR/&gt; 3828: (0.337838%)&lt;BR/&gt; 64798: (0.168919%)&lt;BR/&gt; 64787: (0.168919%)&gt;];
}
2127--2128[label="0.00826446;1pkt 1fpkt"];
2127--2524[label="0.0120482;1pkt 1fpkt"];
2127--2921[label="0.928571;104pkt 104fpkt"];
2127--4478[label="0.00826446;1pkt 1fpkt"];
2127--4557[label="0.0165289;2pkt 2fpkt"];
2127--4792[label="1;66pkt 66fpkt"];
2127--4793[label="0.00900901;1pkt 1fpkt"];
2127--5094[label="0.0330579;4pkt 4fpkt"];
2127--5910[label="0.0661157;8pkt 8fpkt"];
2127--5939[label="0.0661157;8pkt 8fpkt"];
2127--5960[label="0.0661157;8pkt 8fpkt"];
4557--4639[label="0.0228571;4pkt 4fpkt"];
4557--4640[label="0.00571429;1pkt 1fpkt"];
4557--4792[label="0.0151515;1pkt 1fpkt"];
4557--4969[label="0.0171429;3pkt 3fpkt"];
4557--5107[label="0.0228571;4pkt 4fpkt"];
4557--5109[label="0.0114286;2pkt 2fpkt"];
4557--5291[label="0.00571429;1pkt 1fpkt"];
4557--5491[label="0.0171429;3pkt 3fpkt"];
4557--5733[label="0.0114286;2pkt 2fpkt"];
4557--5760[label="0.0171429;3pkt 3fpkt"];
4557--5891[label="0.0685714;12pkt 12fpkt"];
4557--5910[label="0.0857143;15pkt 15fpkt"];
4557--5913[label="0.102857;18pkt 18fpkt"];
4557--5915[label="0.0114286;2pkt 2fpkt"];
4557--5924[label="0.0685714;12pkt 12fpkt"];
4557--5939[label="0.0857143;15pkt 15fpkt"];
4557--5945[label="0.0685714;12pkt 12fpkt"];
4557--5960[label="0.0857143;15pkt 15fpkt"];
4557--6661[label="0.0171429;3pkt 3fpkt"];
4557--6974[label="0.0171429;3pkt 3fpkt"];
4557--7004[label="0.0228571;4pkt 4fpkt"];
4557--7167[label="0.0210526;2pkt 2fpkt"];
4557--7226[label="0.00571429;1pkt 1fpkt"];
4557--7322[label="0.0171429;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="38.186.213.253" dst_port="80" src_ip="149.197.214.100"/>
      <filter dst_ip="1.216.24.162" dst_port="80" src_ip="145.84.174.241"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1456[label="215.178.199.10;d;68pkt 68fpkt", shape=diamond, color=yellow];
4851[label="136.119.221.95;s;83pkt 83fpkt", shape=hexagon, color=black];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.221.95:*, 215.178.199.10:80}[78.3133%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0132%)&lt;BR/&gt; 1935: (1.98675%)&lt;BR/&gt; 4456: (0.662252%)&lt;BR/&gt; 4454: (0.662252%)&lt;BR/&gt; 4451: (0.662252%)&gt;];
}
1456--4851[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="215.178.199.10" dst_port="80" src_ip="136.119.221.95"/>
    </slice>
    <from sec="1183784521" usec="0"/>
    <to sec="1183784614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1804[label="214.129.217.8;d;7pkt 7fpkt", shape=diamond, color=yellow];
2242[label="149.216.2.81;s;8pkt 8fpkt", shape=diamond, color=yellow];
4586[label="214.129.217.8;d;7pkt 7fpkt", shape=hexagon, color=black];
4856[label="149.216.2.81;s;8pkt 8fpkt", shape=hexagon, color=black];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.2.81:*, 214.129.217.8:80}[36.3636%]&lt;BR/&gt;{149.216.2.81:*, 72.214.174.96:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58020: (6.66667%)&lt;BR/&gt; 58019: (6.66667%)&lt;BR/&gt; 58018: (6.66667%)&lt;BR/&gt; 58015: (6.66667%)&gt;];
}
1804--2242[label="0.571429;4pkt 4fpkt"];
1804--4586[label="1;7pkt 7fpkt"];
1804--4856[label="0.571429;4pkt 4fpkt"];
2242--4344[label="0.375;3pkt 3fpkt"];
2242--4586[label="0.571429;4pkt 4fpkt"];
2242--4856[label="1;8pkt 8fpkt"];
4586--4856[label="0.571429;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="214.129.217.8" dst_port="80" src_ip="149.216.2.81"/>
      <filter dst_ip="72.214.174.96" dst_port="80" src_ip="149.216.2.81"/>
    </slice>
    <from sec="1183784530" usec="0"/>
    <to sec="1183784683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
2260[label="38.178.207.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
4867[label="38.178.207.52;s;1pkt 1fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.207.52:80, 145.84.192.223:2642}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2642: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2260--4867[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.192.223" dst_port="2642" src_ip="38.178.207.52" src_port="80"/>
    </slice>
    <from sec="1183784605" usec="0"/>
    <to sec="1183784633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
2307[label="136.119.15.64;s;48pkt 48fpkt", shape=diamond, color=yellow];
4882[label="136.119.15.64;s;48pkt 48fpkt", shape=hexagon, color=black];
6319[label="136.119.15.64;48pkt 48fpkt", shape=pentagon, color=darkviolet];
7192[label="136.119.15.64;48pkt 48fpkt", shape=invtriangle, color=brown];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.15.64:*, 206.6.196.176:80}[39.5833%]&lt;BR/&gt;{136.119.15.64:*, 206.6.196.177:80}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 8080: (6.25%)&lt;BR/&gt; 50909: (1.04167%)&lt;BR/&gt; 50908: (1.04167%)&lt;BR/&gt; 50907: (1.04167%)&gt;];
}
2307--4882[label="1;48pkt 48fpkt"];
2307--5891[label="0.166667;8pkt 8fpkt"];
2307--5924[label="0.166667;8pkt 8fpkt"];
2307--5945[label="0.166667;8pkt 8fpkt"];
2307--6319[label="1;48pkt 48fpkt"];
2307--7192[label="1;48pkt 48fpkt"];
4882--5891[label="0.166667;8pkt 8fpkt"];
4882--5924[label="0.166667;8pkt 8fpkt"];
4882--5945[label="0.166667;8pkt 8fpkt"];
4882--6319[label="1;48pkt 48fpkt"];
4882--7192[label="1;48pkt 48fpkt"];
6319--7192[label="1;48pkt 48fpkt"];
</description>
    <slice>
      <filter dst_ip="206.6.196.176" dst_port="80" src_ip="136.119.15.64"/>
      <filter dst_ip="206.6.196.177" dst_port="80" src_ip="136.119.15.64"/>
    </slice>
    <from sec="1183784688" usec="0"/>
    <to sec="1183784728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
2318[label="204.68.87.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
4885[label="204.68.87.71;s;1pkt 1fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.68.87.71:80, 165.206.36.118:48412}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48412: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2318--4885[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.36.118" dst_port="48412" src_ip="204.68.87.71" src_port="80"/>
    </slice>
    <from sec="1183784696" usec="0"/>
    <to sec="1183784750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568496,1.70718,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.63.23.12"/>
      <from sec="1183784716" usec="0"/>
      <to sec="1183784777" usec="0"/>
    </slice>
    <from sec="1183784716" usec="0"/>
    <to sec="1183784777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
786[label="214.7.58.52;d;22pkt 22fpkt", shape=diamond, color=yellow];
1369[label="38.178.207.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
2378[label="38.178.207.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
4262[label="214.7.58.52;d;22pkt 22fpkt", shape=hexagon, color=black];
4899[label="38.178.207.160;s;1pkt 1fpkt", shape=hexagon, color=black];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.240.78.10:80, 214.7.58.52:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49388: (4.25532%)&lt;BR/&gt; 49376: (3.19149%)&lt;BR/&gt; 49391: (2.12766%)&lt;BR/&gt; 49389: (2.12766%)&gt;];
}
786--1199[label="0.818182;18pkt 18fpkt"];
786--1369[label="1;1pkt 1fpkt"];
786--2378[label="1;1pkt 1fpkt"];
786--4262[label="1;22pkt 22fpkt"];
786--4765[label="0.772727;17pkt 17fpkt"];
786--4899[label="1;1pkt 1fpkt"];
1369--4262[label="1;1pkt 1fpkt"];
2378--4262[label="1;1pkt 1fpkt"];
2378--4899[label="1;1pkt 1fpkt"];
4262--4765[label="0.772727;17pkt 17fpkt"];
4262--4899[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.58.52" src_ip="40.240.78.10" src_port="80"/>
    </slice>
    <from sec="1183784407" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
945[label="215.184.40.217;s;1949pkt 1949fpkt", shape=diamond, color=yellow];
4916[label="215.184.40.217;s;1946pkt 1946fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.40.217:0, *:0}[99.4869%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5635%)&lt;BR/&gt; 22: (0.0898588%)&lt;BR/&gt; 80: (0.0641849%)&lt;BR/&gt; 58151: (0.0256739%)&lt;BR/&gt; 47462: (0.0256739%)&gt;];
}
945--2382[label="0.00128535;1pkt 1fpkt"];
945--2802[label="0.00458716;1pkt 1fpkt"];
945--4916[label="1;1946pkt 1946fpkt"];
945--5409[label="0.00128535;1pkt 1fpkt"];
4916--5409[label="0.00128535;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.40.217"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
354[label="35.1.220.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
4919[label="35.1.220.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.41.103:80, 35.1.220.15:4559}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4559: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
354--4919[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="35.1.220.15" dst_port="4559" src_ip="215.184.41.103" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
2426[label="207.129.162.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
2428[label="214.7.137.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
4929[label="207.129.162.120;d;1pkt 1fpkt", shape=hexagon, color=black];
4930[label="214.7.137.127;s;1pkt 1fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.7.137.127:1207, 207.129.162.120:7002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7002: (50%)&lt;BR/&gt; 1207: (50%)&gt;];
}
2426--2428[label="1;1pkt 1fpkt"];
2426--4929[label="1;1pkt 1fpkt"];
2426--4930[label="1;1pkt 1fpkt"];
2428--4929[label="1;1pkt 1fpkt"];
2428--4930[label="1;1pkt 1fpkt"];
4929--4930[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.129.162.120" dst_port="7002" src_ip="214.7.137.127" src_port="1207"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
448[label="145.84.85.172;d;371pkt 371fpkt", shape=diamond, color=yellow];
1496[label="145.84.161.89;d;208pkt 208fpkt", shape=diamond, color=yellow];
1526[label="145.84.125.231;d;209pkt 209fpkt", shape=diamond, color=yellow];
1546[label="215.184.38.107;d;626pkt 626fpkt", shape=diamond, color=yellow];
1556[label="149.197.88.221;d;291pkt 291fpkt", shape=diamond, color=yellow];
1982[label="36.4.79.193;s;211pkt 211fpkt", shape=diamond, color=yellow];
2034[label="145.84.172.6;d;319pkt 319fpkt", shape=diamond, color=yellow];
2438[label="204.68.177.97;s;234pkt 234fpkt", shape=diamond, color=yellow];
3157[label="204.183.10.62;s;46pkt 46fpkt", shape=diamond, color=yellow];
3737[label="201.122.218.39;s;30pkt 30fpkt", shape=diamond, color=yellow];
4441[label="145.84.161.89;d;78pkt 78fpkt", shape=hexagon, color=black];
4471[label="145.84.85.172;d;98pkt 98fpkt", shape=hexagon, color=black];
4676[label="215.184.38.107;d;468pkt 468fpkt", shape=hexagon, color=black];
4932[label="204.183.10.93;s;43pkt 43fpkt", shape=hexagon, color=black];
5173[label="36.4.79.193;s;186pkt 186fpkt", shape=hexagon, color=black];
5177[label="204.68.177.96;s;203pkt 203fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2703, *:*}[29.3111%]&lt;BR/&gt;{*:53, 215.184.38.107:32788}[22.5503%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (18.7793%)&lt;BR/&gt; 53: (18.0751%)&lt;BR/&gt; 32788: (12.8832%)&lt;BR/&gt; 25: (10.2044%)&lt;BR/&gt; 80: (2.07125%)&gt;];
}
448--479[label="0.00269542;1pkt 1fpkt"];
448--1696[label="0.0136054;2pkt 2fpkt"];
448--2099[label="0.0202703;3pkt 3fpkt"];
448--2116[label="0.03;3pkt 3fpkt"];
448--2132[label="0.111111;7pkt 7fpkt"];
448--2411[label="0.00892857;1pkt 1fpkt"];
448--2435[label="0.0517241;3pkt 3fpkt"];
448--2450[label="0.00662252;1pkt 1fpkt"];
448--2469[label="0.00746269;1pkt 1fpkt"];
448--2472[label="0.0126582;1pkt 1fpkt"];
448--2498[label="0.00704225;1pkt 1fpkt"];
448--2504[label="0.0246914;2pkt 2fpkt"];
448--2557[label="0.152174;7pkt 7fpkt"];
448--2583[label="0.00943396;1pkt 1fpkt"];
448--2806[label="0.00840336;1pkt 1fpkt"];
448--2932[label="0.134615;7pkt 7fpkt"];
448--2947[label="0.0106383;1pkt 1fpkt"];
448--3157[label="0.0652174;3pkt 3fpkt"];
448--3167[label="0.00854701;1pkt 1fpkt"];
448--3205[label="0.0102041;1pkt 1fpkt"];
448--3502[label="0.008;1pkt 1fpkt"];
448--3580[label="0.0138889;1pkt 1fpkt"];
448--3621[label="0.0606061;4pkt 4fpkt"];
448--3642[label="0.0172414;1pkt 1fpkt"];
448--3737[label="0.166667;5pkt 5fpkt"];
448--4315[label="0.00269542;1pkt 1fpkt"];
448--4471[label="1;98pkt 98fpkt"];
448--4932[label="0.0697674;3pkt 3fpkt"];
448--4945[label="0.00980392;1pkt 1fpkt"];
448--5090[label="0.0116279;1pkt 1fpkt"];
448--5118[label="0.0111111;1pkt 1fpkt"];
448--5277[label="0.0326087;3pkt 3fpkt"];
448--5310[label="0.166667;7pkt 7fpkt"];
448--5673[label="0.0116279;1pkt 1fpkt"];
448--5890[label="0.00808625;3pkt 3fpkt"];
448--5904[label="0.00269542;1pkt 1fpkt"];
448--5908[label="0.0161725;6pkt 6fpkt"];
448--5909[label="0.00539084;2pkt 2fpkt"];
448--5911[label="0.0134771;5pkt 5fpkt"];
448--5912[label="0.00539084;2pkt 2fpkt"];
448--5923[label="0.00808625;3pkt 3fpkt"];
448--5934[label="0.00269542;1pkt 1fpkt"];
448--5938[label="0.00539084;2pkt 2fpkt"];
448--5944[label="0.00808625;3pkt 3fpkt"];
448--5955[label="0.00269542;1pkt 1fpkt"];
448--5959[label="0.00539084;2pkt 2fpkt"];
448--5966[label="0.0111111;1pkt 1fpkt"];
448--5969[label="0.0322581;2pkt 2fpkt"];
448--6059[label="0.1;1pkt 1fpkt"];
448--6118[label="0.0126582;1pkt 1fpkt"];
448--6171[label="0.12963;7pkt 7fpkt"];
448--6281[label="0.00813008;1pkt 1fpkt"];
448--6389[label="0.0116279;1pkt 1fpkt"];
448--6445[label="0.00840336;1pkt 1fpkt"];
448--6885[label="0.0714286;1pkt 1fpkt"];
448--7078[label="0.0111111;1pkt 1fpkt"];
448--7233[label="0.00840336;1pkt 1fpkt"];
448--7402[label="0.0714286;1pkt 1fpkt"];
448--7446[label="0.0465116;2pkt 2fpkt"];
448--7481[label="0.010989;1pkt 1fpkt"];
448--7519[label="0.0133333;1pkt 1fpkt"];
448--7548[label="0.00840336;1pkt 1fpkt"];
1496--1982[label="0.346154;72pkt 72fpkt"];
1496--2438[label="0.182692;38pkt 38fpkt"];
1496--2451[label="0.167488;34pkt 34fpkt"];
1496--2472[label="0.0253165;2pkt 2fpkt"];
1496--2504[label="0.0246914;2pkt 2fpkt"];
1496--2583[label="0.0377358;4pkt 4fpkt"];
1496--2928[label="0.0121951;1pkt 1fpkt"];
1496--2947[label="0.0212766;2pkt 2fpkt"];
1496--3294[label="0.0172414;1pkt 1fpkt"];
1496--3580[label="0.0138889;1pkt 1fpkt"];
1496--4441[label="1;78pkt 78fpkt"];
1496--5173[label="0.306452;57pkt 57fpkt"];
1496--5177[label="0.167488;34pkt 34fpkt"];
1496--5315[label="0.0483871;3pkt 3fpkt"];
1496--5673[label="0.0232558;2pkt 2fpkt"];
1496--5908[label="0.00961538;2pkt 2fpkt"];
1496--5911[label="0.00480769;1pkt 1fpkt"];
1496--5969[label="0.016129;1pkt 1fpkt"];
1496--6118[label="0.0126582;1pkt 1fpkt"];
1496--6389[label="0.0232558;2pkt 2fpkt"];
1496--6957[label="0.0142857;1pkt 1fpkt"];
1496--7446[label="0.0232558;1pkt 1fpkt"];
1496--7519[label="0.0266667;2pkt 2fpkt"];
1526--1639[label="0.00534759;1pkt 1fpkt"];
1526--1934[label="0.0287081;6pkt 6fpkt"];
1526--2075[label="0.027933;5pkt 5fpkt"];
1526--2078[label="0.00478469;1pkt 1fpkt"];
1526--2112[label="0.0228571;4pkt 4fpkt"];
1526--2141[label="0.0171429;3pkt 3fpkt"];
1526--2148[label="0.0159574;3pkt 3fpkt"];
1526--2192[label="0.00943396;1pkt 1fpkt"];
1526--2411[label="0.00892857;1pkt 1fpkt"];
1526--2420[label="0.00925926;1pkt 1fpkt"];
1526--2435[label="0.0172414;1pkt 1fpkt"];
1526--2450[label="0.00662252;1pkt 1fpkt"];
1526--2469[label="0.00746269;1pkt 1fpkt"];
1526--2472[label="0.0126582;1pkt 1fpkt"];
1526--2498[label="0.00704225;1pkt 1fpkt"];
1526--2599[label="0.00719424;1pkt 1fpkt"];
1526--2806[label="0.00840336;1pkt 1fpkt"];
1526--2873[label="0.0625;1pkt 1fpkt"];
1526--2947[label="0.0106383;1pkt 1fpkt"];
1526--3167[label="0.00854701;1pkt 1fpkt"];
1526--3205[label="0.0102041;1pkt 1fpkt"];
1526--3502[label="0.008;1pkt 1fpkt"];
1526--3621[label="0.0151515;1pkt 1fpkt"];
1526--3737[label="0.166667;5pkt 5fpkt"];
1526--3946[label="0.0210526;2pkt 2fpkt"];
1526--4191[label="0.010929;2pkt 2fpkt"];
1526--4256[label="0.00956938;2pkt 2fpkt"];
1526--4370[label="0.00478469;1pkt 1fpkt"];
1526--4462[label="1;102pkt 102fpkt"];
1526--4518[label="0.00478469;1pkt 1fpkt"];
1526--4768[label="0.0108696;1pkt 1fpkt"];
1526--4798[label="0.00478469;1pkt 1fpkt"];
1526--4932[label="0.0232558;1pkt 1fpkt"];
1526--5026[label="0.0175439;1pkt 1fpkt"];
1526--5247[label="0.0334928;7pkt 7fpkt"];
1526--5256[label="0.00478469;1pkt 1fpkt"];
1526--5538[label="0.0319149;3pkt 3fpkt"];
1526--5555[label="0.03125;3pkt 3fpkt"];
1526--5673[label="0.0116279;1pkt 1fpkt"];
1526--5729[label="0.00956938;2pkt 2fpkt"];
1526--5754[label="0.0210526;2pkt 2fpkt"];
1526--5811[label="0.00546448;1pkt 1fpkt"];
1526--5862[label="0.0175439;1pkt 1fpkt"];
1526--5890[label="0.00956938;2pkt 2fpkt"];
1526--5908[label="0.0239234;5pkt 5fpkt"];
1526--5911[label="0.0287081;6pkt 6fpkt"];
1526--5912[label="0.00478469;1pkt 1fpkt"];
1526--5923[label="0.00956938;2pkt 2fpkt"];
1526--5944[label="0.00956938;2pkt 2fpkt"];
1526--6127[label="0.00956938;2pkt 2fpkt"];
1526--6281[label="0.00813008;1pkt 1fpkt"];
1526--6389[label="0.0116279;1pkt 1fpkt"];
1526--6445[label="0.00840336;1pkt 1fpkt"];
1526--6606[label="0.00819672;1pkt 1fpkt"];
1526--6630[label="0.0287081;6pkt 6fpkt"];
1526--6747[label="0.0209424;4pkt 4fpkt"];
1526--7131[label="0.00956938;2pkt 2fpkt"];
1526--7233[label="0.00840336;1pkt 1fpkt"];
1526--7294[label="0.00819672;1pkt 1fpkt"];
1526--7353[label="0.0143541;3pkt 3fpkt"];
1526--7548[label="0.00840336;1pkt 1fpkt"];
1526--7611[label="0.0289855;2pkt 2fpkt"];
1546--1982[label="0.042654;9pkt 9fpkt"];
1546--2383[label="0.00159744;1pkt 1fpkt"];
1546--2411[label="0.00892857;1pkt 1fpkt"];
1546--2435[label="0.327586;19pkt 19fpkt"];
1546--2438[label="0.042735;10pkt 10fpkt"];
1546--2447[label="0.0149254;1pkt 1fpkt"];
1546--2450[label="0.00662252;1pkt 1fpkt"];
1546--2451[label="0.0394089;8pkt 8fpkt"];
1546--2469[label="0.00746269;1pkt 1fpkt"];
1546--2498[label="0.00704225;1pkt 1fpkt"];
1546--2806[label="0.00840336;1pkt 1fpkt"];
1546--2816[label="0.00892857;1pkt 1fpkt"];
1546--3157[label="0.304348;14pkt 14fpkt"];
1546--3164[label="0.0120482;1pkt 1fpkt"];
1546--3167[label="0.00854701;1pkt 1fpkt"];
1546--3170[label="0.0555556;1pkt 1fpkt"];
1546--3205[label="0.0102041;1pkt 1fpkt"];
1546--3502[label="0.008;1pkt 1fpkt"];
1546--3516[label="0.0666667;1pkt 1fpkt"];
1546--4676[label="1;468pkt 468fpkt"];
1546--4901[label="0.00159744;1pkt 1fpkt"];
1546--4932[label="0.302326;13pkt 13fpkt"];
1546--4945[label="0.00980392;1pkt 1fpkt"];
1546--5090[label="0.0116279;1pkt 1fpkt"];
1546--5118[label="0.0111111;1pkt 1fpkt"];
1546--5160[label="0.0107527;1pkt 1fpkt"];
1546--5173[label="0.0430108;8pkt 8fpkt"];
1546--5177[label="0.0394089;8pkt 8fpkt"];
1546--5497[label="0.0588235;1pkt 1fpkt"];
1546--5831[label="0.00159744;1pkt 1fpkt"];
1546--5906[label="0.00159744;1pkt 1fpkt"];
1546--5912[label="0.00159744;1pkt 1fpkt"];
1546--5936[label="0.00159744;1pkt 1fpkt"];
1546--5957[label="0.00159744;1pkt 1fpkt"];
1546--6179[label="0.0108696;1pkt 1fpkt"];
1546--6273[label="0.0384615;1pkt 1fpkt"];
1546--6281[label="0.00813008;1pkt 1fpkt"];
1546--6335[label="0.0263158;1pkt 1fpkt"];
1546--6445[label="0.00840336;1pkt 1fpkt"];
1546--6519[label="0.0217391;1pkt 1fpkt"];
1546--6631[label="0.0285714;1pkt 1fpkt"];
1546--6870[label="0.025641;1pkt 1fpkt"];
1546--6951[label="0.0178571;1pkt 1fpkt"];
1546--7037[label="0.0340136;5pkt 5fpkt"];
1546--7233[label="0.00840336;1pkt 1fpkt"];
1546--7303[label="0.0285714;1pkt 1fpkt"];
1546--7337[label="0.0113636;1pkt 1fpkt"];
1546--7430[label="0.0178571;1pkt 1fpkt"];
1546--7548[label="0.00840336;1pkt 1fpkt"];
1556--1561[label="0.0384615;1pkt 1fpkt"];
1556--1982[label="0.36019;76pkt 76fpkt"];
1556--2411[label="0.00892857;1pkt 1fpkt"];
1556--2438[label="0.217949;51pkt 51fpkt"];
1556--2447[label="0.0149254;1pkt 1fpkt"];
1556--2450[label="0.00662252;1pkt 1fpkt"];
1556--2451[label="0.128079;26pkt 26fpkt"];
1556--2469[label="0.00746269;1pkt 1fpkt"];
1556--2498[label="0.00704225;1pkt 1fpkt"];
1556--2806[label="0.00840336;1pkt 1fpkt"];
1556--2816[label="0.00892857;1pkt 1fpkt"];
1556--3280[label="0.142857;6pkt 6fpkt"];
1556--3293[label="0.0227273;1pkt 1fpkt"];
1556--3502[label="0.008;1pkt 1fpkt"];
1556--3852[label="0.125;1pkt 1fpkt"];
1556--4945[label="0.00980392;1pkt 1fpkt"];
1556--5090[label="0.0116279;1pkt 1fpkt"];
1556--5160[label="0.0107527;1pkt 1fpkt"];
1556--5173[label="0.370968;69pkt 69fpkt"];
1556--5177[label="0.128079;26pkt 26fpkt"];
1556--5890[label="0.00343643;1pkt 1fpkt"];
1556--5909[label="0.00687285;2pkt 2fpkt"];
1556--5911[label="0.0206186;6pkt 6fpkt"];
1556--5912[label="0.00687285;2pkt 2fpkt"];
1556--5923[label="0.00343643;1pkt 1fpkt"];
1556--5938[label="0.00687285;2pkt 2fpkt"];
1556--5944[label="0.00343643;1pkt 1fpkt"];
1556--5959[label="0.00687285;2pkt 2fpkt"];
1556--6179[label="0.0108696;1pkt 1fpkt"];
1556--6445[label="0.00840336;1pkt 1fpkt"];
1556--7233[label="0.00840336;1pkt 1fpkt"];
1556--7548[label="0.00840336;1pkt 1fpkt"];
1982--2034[label="0.132701;28pkt 28fpkt"];
1982--4441[label="0.346154;27pkt 27fpkt"];
1982--4676[label="0.0331754;7pkt 7fpkt"];
1982--4744[label="0.118483;25pkt 25fpkt"];
1982--5173[label="1;186pkt 186fpkt"];
2034--2411[label="0.00892857;1pkt 1fpkt"];
2034--2435[label="0.0172414;1pkt 1fpkt"];
2034--2438[label="0.145299;34pkt 34fpkt"];
2034--2450[label="0.00662252;1pkt 1fpkt"];
2034--2451[label="0.108374;22pkt 22fpkt"];
2034--2469[label="0.00746269;1pkt 1fpkt"];
2034--2498[label="0.00704225;1pkt 1fpkt"];
2034--2806[label="0.00840336;1pkt 1fpkt"];
2034--2816[label="0.00892857;1pkt 1fpkt"];
2034--3157[label="0.0217391;1pkt 1fpkt"];
2034--3164[label="0.0120482;1pkt 1fpkt"];
2034--3205[label="0.0102041;1pkt 1fpkt"];
2034--3502[label="0.008;1pkt 1fpkt"];
2034--4744[label="1;276pkt 276fpkt"];
2034--4932[label="0.0232558;1pkt 1fpkt"];
2034--4945[label="0.00980392;1pkt 1fpkt"];
2034--5090[label="0.0116279;1pkt 1fpkt"];
2034--5118[label="0.0111111;1pkt 1fpkt"];
2034--5160[label="0.0107527;1pkt 1fpkt"];
2034--5173[label="0.150538;28pkt 28fpkt"];
2034--5177[label="0.108374;22pkt 22fpkt"];
2034--5890[label="0.00940439;3pkt 3fpkt"];
2034--5908[label="0.00940439;3pkt 3fpkt"];
2034--5909[label="0.00626959;2pkt 2fpkt"];
2034--5911[label="0.00626959;2pkt 2fpkt"];
2034--5912[label="0.0031348;1pkt 1fpkt"];
2034--5923[label="0.00940439;3pkt 3fpkt"];
2034--5938[label="0.00626959;2pkt 2fpkt"];
2034--5944[label="0.00940439;3pkt 3fpkt"];
2034--5959[label="0.00626959;2pkt 2fpkt"];
2034--6179[label="0.0108696;1pkt 1fpkt"];
2034--6335[label="0.0263158;1pkt 1fpkt"];
2034--6445[label="0.00840336;1pkt 1fpkt"];
2034--6631[label="0.0285714;1pkt 1fpkt"];
2034--6738[label="0.111111;1pkt 1fpkt"];
2034--6870[label="0.025641;1pkt 1fpkt"];
2034--6883[label="0.111111;1pkt 1fpkt"];
2034--7233[label="0.00840336;1pkt 1fpkt"];
2034--7303[label="0.0285714;1pkt 1fpkt"];
2034--7337[label="0.0113636;1pkt 1fpkt"];
2034--7401[label="0.111111;1pkt 1fpkt"];
2034--7548[label="0.00840336;1pkt 1fpkt"];
2438--4441[label="0.153846;12pkt 12fpkt"];
2438--4676[label="0.042735;10pkt 10fpkt"];
2438--4744[label="0.119658;28pkt 28fpkt"];
3157--3896[label="0.0217391;1pkt 1fpkt"];
3157--4318[label="0.0217391;1pkt 1fpkt"];
3157--4676[label="0.152174;7pkt 7fpkt"];
3157--4744[label="0.0217391;1pkt 1fpkt"];
3157--5258[label="0.1;3pkt 3fpkt"];
3737--4339[label="0.166667;5pkt 5fpkt"];
4441--5173[label="0.346154;27pkt 27fpkt"];
4441--5177[label="0.179487;14pkt 14fpkt"];
4441--5315[label="0.0322581;2pkt 2fpkt"];
4441--5969[label="0.016129;1pkt 1fpkt"];
4441--6389[label="0.0128205;1pkt 1fpkt"];
4441--6957[label="0.0142857;1pkt 1fpkt"];
4471--4945[label="0.0102041;1pkt 1fpkt"];
4471--5090[label="0.0116279;1pkt 1fpkt"];
4471--5118[label="0.0111111;1pkt 1fpkt"];
4471--5277[label="0.0326087;3pkt 3fpkt"];
4471--6118[label="0.0126582;1pkt 1fpkt"];
4471--6281[label="0.0102041;1pkt 1fpkt"];
4471--6445[label="0.0102041;1pkt 1fpkt"];
4471--7233[label="0.0102041;1pkt 1fpkt"];
4471--7548[label="0.0102041;1pkt 1fpkt"];
4676--4901[label="0.00213675;1pkt 1fpkt"];
4676--4932[label="0.209302;9pkt 9fpkt"];
4676--4945[label="0.00980392;1pkt 1fpkt"];
4676--5090[label="0.0116279;1pkt 1fpkt"];
4676--5118[label="0.0111111;1pkt 1fpkt"];
4676--5160[label="0.0107527;1pkt 1fpkt"];
4676--5173[label="0.0376344;7pkt 7fpkt"];
4676--5177[label="0.0197044;4pkt 4fpkt"];
4676--5497[label="0.0588235;1pkt 1fpkt"];
4676--5831[label="0.00213675;1pkt 1fpkt"];
4676--5906[label="0.00213675;1pkt 1fpkt"];
4676--5912[label="0.00213675;1pkt 1fpkt"];
4676--5936[label="0.00213675;1pkt 1fpkt"];
4676--5957[label="0.00213675;1pkt 1fpkt"];
4676--6179[label="0.0108696;1pkt 1fpkt"];
4676--6273[label="0.0384615;1pkt 1fpkt"];
4676--6281[label="0.00813008;1pkt 1fpkt"];
4676--6335[label="0.0263158;1pkt 1fpkt"];
4676--6445[label="0.00840336;1pkt 1fpkt"];
4676--6519[label="0.0217391;1pkt 1fpkt"];
4676--6631[label="0.0285714;1pkt 1fpkt"];
4676--6951[label="0.0178571;1pkt 1fpkt"];
4676--7037[label="0.0204082;3pkt 3fpkt"];
4676--7233[label="0.00840336;1pkt 1fpkt"];
4676--7303[label="0.0285714;1pkt 1fpkt"];
4676--7337[label="0.0113636;1pkt 1fpkt"];
4676--7430[label="0.0178571;1pkt 1fpkt"];
4676--7548[label="0.00840336;1pkt 1fpkt"];
4932--5258[label="0.1;3pkt 3fpkt"];
4932--5266[label="0.0232558;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="2703"/>
      <filter dst_ip="215.184.38.107" dst_port="32788" src_port="53"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
1555[label="167.82.106.10;d;331pkt 331fpkt", shape=diamond, color=yellow];
4933[label="167.82.106.10;d;330pkt 330fpkt", shape=hexagon, color=black];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 167.82.106.10:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1555--4933[label="1;330pkt 330fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.106.10"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_293{
style=filled;
color=gray75;
1045[label="36.54.151.126;d;155pkt 155fpkt", shape=diamond, color=yellow];
4936[label="144.100.73.178;s;154pkt 154fpkt", shape=hexagon, color=black];
stat293[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.100.73.178:22, 36.54.151.126:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60973: (0.323625%)&lt;BR/&gt; 60825: (0.323625%)&lt;BR/&gt; 60268: (0.323625%)&lt;BR/&gt; 59712: (0.323625%)&gt;];
}
1045--1568[label="1;155pkt 155fpkt"];
1045--4936[label="1;154pkt 154fpkt"];
</description>
    <slice>
      <filter dst_ip="36.54.151.126" src_ip="144.100.73.178" src_port="22"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
1064[label="37.48.211.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
4941[label="37.48.211.73;d;1pkt 1fpkt", shape=hexagon, color=black];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.52.94:53648, 37.48.211.73:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53648: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
1064--4941[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.48.211.73" dst_port="21" src_ip="215.184.52.94" src_port="53648"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1997[label="117.147.25.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
4950[label="117.147.25.67;d;1pkt 1fpkt", shape=hexagon, color=black];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.32.66:2447, 117.147.25.67:49882}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49882: (50%)&lt;BR/&gt; 2447: (50%)&gt;];
}
1997--4950[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="117.147.25.67" dst_port="49882" src_ip="215.184.32.66" src_port="2447"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183784763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
2009[label="43.116.200.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
4952[label="43.116.200.124;d;1pkt 1fpkt", shape=hexagon, color=black];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.32.66:4523, 43.116.200.124:45478}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45478: (50%)&lt;BR/&gt; 4523: (50%)&gt;];
}
2009--4952[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="43.116.200.124" dst_port="45478" src_ip="215.184.32.66" src_port="4523"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
2509[label="219.219.149.132;s;116pkt 116fpkt", shape=diamond, color=yellow];
4978[label="219.219.149.132;s;60pkt 60fpkt", shape=hexagon, color=black];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.219.149.132:80, 145.84.115.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59476: (0.568182%)&lt;BR/&gt; 59438: (0.568182%)&lt;BR/&gt; 59424: (0.568182%)&lt;BR/&gt; 59411: (0.568182%)&gt;];
}
2509--4978[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.115.162" src_ip="219.219.149.132" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1348[label="4.28.157.13;s;2pkt 2fpkt", shape=diamond, color=yellow];
5030[label="4.28.157.13;s;2pkt 2fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.28.157.13:55011, 215.184.42.144:3125}[50%]&lt;BR/&gt;{4.28.157.13:55018, 215.184.42.144:3125}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 55018: (25%)&lt;BR/&gt; 55011: (25%)&gt;];
}
1348--5030[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="4.28.157.13" src_port="55018"/>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="4.28.157.13" src_port="55011"/>
    </slice>
    <from sec="1183784436" usec="0"/>
    <to sec="1183784696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
1417[label="215.0.51.139;d;9pkt 9fpkt", shape=diamond, color=yellow];
1791[label="136.119.4.250;s;13pkt 13fpkt", shape=diamond, color=yellow];
4580[label="215.0.51.139;d;9pkt 9fpkt", shape=hexagon, color=black];
5042[label="136.119.4.250;s;13pkt 13fpkt", shape=hexagon, color=black];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.4.250:*, 215.0.51.139:80}[69.2308%]&lt;BR/&gt;{136.119.4.250:*, *:53}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 53: (6.81818%)&lt;BR/&gt; 63860: (4.54545%)&lt;BR/&gt; 63323: (4.54545%)&lt;BR/&gt; 62391: (4.54545%)&gt;];
}
1417--1791[label="1;9pkt 9fpkt"];
1417--4580[label="1;9pkt 9fpkt"];
1417--5042[label="1;9pkt 9fpkt"];
1417--5891[label="0.222222;2pkt 2fpkt"];
1417--5910[label="0.111111;1pkt 1fpkt"];
1417--5924[label="0.222222;2pkt 2fpkt"];
1417--5939[label="0.111111;1pkt 1fpkt"];
1417--5945[label="0.222222;2pkt 2fpkt"];
1417--5960[label="0.111111;1pkt 1fpkt"];
1791--4580[label="1;9pkt 9fpkt"];
1791--5042[label="1;13pkt 13fpkt"];
1791--5891[label="0.153846;2pkt 2fpkt"];
1791--5910[label="0.0769231;1pkt 1fpkt"];
1791--5924[label="0.153846;2pkt 2fpkt"];
1791--5939[label="0.0769231;1pkt 1fpkt"];
1791--5945[label="0.153846;2pkt 2fpkt"];
1791--5960[label="0.0769231;1pkt 1fpkt"];
4580--5042[label="1;9pkt 9fpkt"];
4580--5891[label="0.222222;2pkt 2fpkt"];
4580--5910[label="0.111111;1pkt 1fpkt"];
4580--5924[label="0.222222;2pkt 2fpkt"];
4580--5939[label="0.111111;1pkt 1fpkt"];
4580--5945[label="0.222222;2pkt 2fpkt"];
4580--5960[label="0.111111;1pkt 1fpkt"];
5042--5891[label="0.153846;2pkt 2fpkt"];
5042--5910[label="0.0769231;1pkt 1fpkt"];
5042--5924[label="0.153846;2pkt 2fpkt"];
5042--5939[label="0.0769231;1pkt 1fpkt"];
5042--5945[label="0.153846;2pkt 2fpkt"];
5042--5960[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.119.4.250"/>
      <filter dst_ip="215.0.51.139" dst_port="80" src_ip="136.119.4.250"/>
    </slice>
    <from sec="1183784511" usec="0"/>
    <to sec="1183784864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
1792[label="36.77.37.130;d;2pkt 2fpkt", shape=diamond, color=yellow];
1793[label="161.203.131.200;s;18pkt 18fpkt", shape=diamond, color=yellow];
5043[label="161.203.131.200;s;4pkt 4fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.131.200:80, 192.154.69.42:*}[57.8947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35537: (6.25%)&lt;BR/&gt; 62023: (4.16667%)&lt;BR/&gt; 11290: (4.16667%)&lt;BR/&gt; 3712: (4.16667%)&gt;];
}
1792--1793[label="0.5;1pkt 1fpkt"];
1792--5043[label="0.5;1pkt 1fpkt"];
1793--5043[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.154.69.42" src_ip="161.203.131.200" src_port="80"/>
    </slice>
    <from sec="1183784513" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
2689[label="90.104.207.208;s;122pkt 122fpkt", shape=diamond, color=yellow];
5048[label="145.84.4.21;d;79pkt 79fpkt", shape=hexagon, color=black];
5062[label="90.104.207.208;s;74pkt 74fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.104.207.208:80, 145.84.4.21:*}[54.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1408: (0.545455%)&lt;BR/&gt; 1405: (0.545455%)&lt;BR/&gt; 1404: (0.545455%)&lt;BR/&gt; 1403: (0.545455%)&gt;];
}
2689--5048[label="0.898734;71pkt 71fpkt"];
2689--5062[label="1;74pkt 74fpkt"];
5048--5062[label="0.959459;71pkt 71fpkt"];
5048--5277[label="0.0126582;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.4.21" src_ip="90.104.207.208" src_port="80"/>
    </slice>
    <from sec="1183784627" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
2664[label="201.208.84.188;s;178pkt 178fpkt", shape=diamond, color=yellow];
5050[label="201.208.84.188;s;73pkt 73fpkt", shape=hexagon, color=black];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.208.84.188:80, 145.84.115.162:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59944: (0.398406%)&lt;BR/&gt; 59940: (0.398406%)&lt;BR/&gt; 59929: (0.398406%)&lt;BR/&gt; 59928: (0.398406%)&gt;];
}
2664--5050[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.115.162" src_ip="201.208.84.188" src_port="80"/>
    </slice>
    <from sec="1183784632" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
2343[label="72.196.81.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
2344[label="145.84.97.202;d;2pkt 2fpkt", shape=diamond, color=yellow];
5061[label="145.84.97.202;d;2pkt 2fpkt", shape=hexagon, color=black];
6379[label="72.196.81.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7210[label="72.196.81.74;2pkt 2fpkt", shape=invtriangle, color=brown];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.196.81.74:80, 145.84.97.202:3742}[50%]&lt;BR/&gt;{72.196.81.74:80, 145.84.97.202:3743}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3743: (25%)&lt;BR/&gt; 3742: (25%)&gt;];
}
2343--2344[label="1;2pkt 2fpkt"];
2343--5061[label="1;2pkt 2fpkt"];
2343--6379[label="1;2pkt 2fpkt"];
2343--7210[label="1;2pkt 2fpkt"];
2344--5061[label="1;2pkt 2fpkt"];
2344--6379[label="1;2pkt 2fpkt"];
2344--7210[label="1;2pkt 2fpkt"];
5061--6379[label="1;2pkt 2fpkt"];
5061--7210[label="1;2pkt 2fpkt"];
6379--7210[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.97.202" dst_port="3743" src_ip="72.196.81.74" src_port="80"/>
      <filter dst_ip="145.84.97.202" dst_port="3742" src_ip="72.196.81.74" src_port="80"/>
    </slice>
    <from sec="1183784713" usec="0"/>
    <to sec="1183784769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
2769[label="42.131.93.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
5074[label="42.131.93.58;s;1pkt 1fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.131.93.58:56471, 145.84.116.4:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56471: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2769--5074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.116.4" dst_port="80" src_ip="42.131.93.58" src_port="56471"/>
    </slice>
    <from sec="1183784817" usec="0"/>
    <to sec="1183784826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
255[label="215.21.30.43;s;817pkt 817fpkt", shape=diamond, color=yellow];
256[label="215.184.50.79;d;80pkt 80fpkt", shape=diamond, color=yellow];
510[label="215.184.38.27;d;98pkt 98fpkt", shape=diamond, color=yellow];
575[label="215.184.53.16;d;94pkt 94fpkt", shape=diamond, color=yellow];
1102[label="215.184.38.46;d;88pkt 88fpkt", shape=diamond, color=yellow];
1104[label="215.184.53.46;d;60pkt 60fpkt", shape=diamond, color=yellow];
1106[label="215.184.59.32;d;66pkt 66fpkt", shape=diamond, color=yellow];
1204[label="215.184.38.44;d;89pkt 89fpkt", shape=diamond, color=yellow];
4221[label="215.184.53.16;d;94pkt 94fpkt", shape=hexagon, color=black];
4322[label="215.184.38.27;d;97pkt 97fpkt", shape=hexagon, color=black];
4346[label="215.184.53.46;d;60pkt 60fpkt", shape=hexagon, color=black];
4503[label="215.184.38.46;d;64pkt 64fpkt", shape=hexagon, color=black];
4526[label="215.184.38.44;d;89pkt 89fpkt", shape=hexagon, color=black];
5083[label="215.21.30.43;s;816pkt 816fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.21.30.43:*, *:22}[99.1505%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.7511%)&lt;BR/&gt; 8080: (0.0957121%)&lt;BR/&gt; 6000: (0.0957121%)&lt;BR/&gt; 65207: (0.0765697%)&lt;BR/&gt; 64738: (0.0765697%)&gt;];
}
255--256[label="1;80pkt 80fpkt"];
255--285[label="0.0783354;64pkt 64fpkt"];
255--510[label="0.989796;97pkt 97fpkt"];
255--575[label="0.968085;91pkt 91fpkt"];
255--1102[label="0.988636;87pkt 87fpkt"];
255--1104[label="1;60pkt 60fpkt"];
255--1106[label="1;66pkt 66fpkt"];
255--1204[label="0.977528;87pkt 87fpkt"];
255--1575[label="0.547619;23pkt 23fpkt"];
255--4221[label="0.968085;91pkt 91fpkt"];
255--4322[label="0.989691;96pkt 96fpkt"];
255--4346[label="1;60pkt 60fpkt"];
255--4503[label="1;64pkt 64fpkt"];
255--4526[label="0.977528;87pkt 87fpkt"];
255--5083[label="1;816pkt 816fpkt"];
255--5158[label="0.621622;23pkt 23fpkt"];
256--5083[label="1;80pkt 80fpkt"];
510--2383[label="0.0102041;1pkt 1fpkt"];
510--4322[label="1;97pkt 97fpkt"];
510--4901[label="0.0102041;1pkt 1fpkt"];
510--5083[label="0.979592;96pkt 96fpkt"];
510--5831[label="0.0102041;1pkt 1fpkt"];
510--5906[label="0.0102041;1pkt 1fpkt"];
510--5936[label="0.0102041;1pkt 1fpkt"];
510--5957[label="0.0102041;1pkt 1fpkt"];
575--1545[label="0.0106383;1pkt 1fpkt"];
575--4221[label="1;94pkt 94fpkt"];
575--5083[label="0.968085;91pkt 91fpkt"];
575--5909[label="0.0212766;2pkt 2fpkt"];
575--5912[label="0.0212766;2pkt 2fpkt"];
575--5938[label="0.0212766;2pkt 2fpkt"];
575--5959[label="0.0212766;2pkt 2fpkt"];
1102--2383[label="0.0113636;1pkt 1fpkt"];
1102--4503[label="1;64pkt 64fpkt"];
1102--4901[label="0.0113636;1pkt 1fpkt"];
1102--5083[label="0.988636;87pkt 87fpkt"];
1102--5831[label="0.0113636;1pkt 1fpkt"];
1102--5906[label="0.0113636;1pkt 1fpkt"];
1102--5936[label="0.0113636;1pkt 1fpkt"];
1102--5957[label="0.0113636;1pkt 1fpkt"];
1104--4346[label="1;60pkt 60fpkt"];
1104--5083[label="1;60pkt 60fpkt"];
1106--5083[label="1;66pkt 66fpkt"];
1204--2383[label="0.011236;1pkt 1fpkt"];
1204--4526[label="1;89pkt 89fpkt"];
1204--4901[label="0.011236;1pkt 1fpkt"];
1204--5083[label="0.977528;87pkt 87fpkt"];
1204--5831[label="0.011236;1pkt 1fpkt"];
1204--5906[label="0.011236;1pkt 1fpkt"];
1204--5936[label="0.011236;1pkt 1fpkt"];
1204--5957[label="0.011236;1pkt 1fpkt"];
4221--5083[label="0.968085;91pkt 91fpkt"];
4221--5909[label="0.0212766;2pkt 2fpkt"];
4221--5912[label="0.0212766;2pkt 2fpkt"];
4221--5938[label="0.0212766;2pkt 2fpkt"];
4221--5959[label="0.0212766;2pkt 2fpkt"];
4322--4901[label="0.0103093;1pkt 1fpkt"];
4322--5083[label="0.989691;96pkt 96fpkt"];
4322--5831[label="0.0103093;1pkt 1fpkt"];
4322--5906[label="0.0103093;1pkt 1fpkt"];
4322--5936[label="0.0103093;1pkt 1fpkt"];
4322--5957[label="0.0103093;1pkt 1fpkt"];
4346--5083[label="1;60pkt 60fpkt"];
4503--5083[label="1;64pkt 64fpkt"];
4526--4901[label="0.011236;1pkt 1fpkt"];
4526--5083[label="0.977528;87pkt 87fpkt"];
4526--5831[label="0.011236;1pkt 1fpkt"];
4526--5906[label="0.011236;1pkt 1fpkt"];
4526--5936[label="0.011236;1pkt 1fpkt"];
4526--5957[label="0.011236;1pkt 1fpkt"];
5083--5158[label="0.621622;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="22" src_ip="215.21.30.43"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
262[label="165.206.146.147;s;276pkt 276fpkt", shape=diamond, color=yellow];
988[label="193.7.104.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
1385[label="73.59.237.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
1504[label="4.51.216.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
1509[label="193.43.62.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
1542[label="73.161.62.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
2486[label="73.59.55.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
2708[label="198.8.173.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
2761[label="73.179.221.227;d;1pkt 1fpkt", shape=diamond, color=yellow];
3081[label="73.58.96.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
3187[label="0.144.169.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
3575[label="73.170.37.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
3991[label="73.58.32.247;d;1pkt 1fpkt", shape=diamond, color=yellow];
4011[label="193.1.21.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
4421[label="73.59.237.173;d;1pkt 1fpkt", shape=hexagon, color=black];
4445[label="4.51.216.70;d;1pkt 1fpkt", shape=hexagon, color=black];
4665[label="73.161.62.153;d;1pkt 1fpkt", shape=hexagon, color=black];
4967[label="73.59.55.194;d;1pkt 1fpkt", shape=hexagon, color=black];
5066[label="198.8.173.51;d;1pkt 1fpkt", shape=hexagon, color=black];
5085[label="165.206.146.147;s;276pkt 276fpkt", shape=hexagon, color=black];
5121[label="193.7.104.19;d;1pkt 1fpkt", shape=hexagon, color=black];
5655[label="73.170.37.73;d;1pkt 1fpkt", shape=hexagon, color=black];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.146.147:53124, *:53124}[43.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53124: (56.2937%)&lt;BR/&gt; 13201: (5.24476%)&lt;BR/&gt; 8000: (2.0979%)&lt;BR/&gt; 53125: (1.66084%)&lt;BR/&gt; 80: (1.22378%)&gt;];
}
262--988[label="1;1pkt 1fpkt"];
262--1385[label="1;1pkt 1fpkt"];
262--1504[label="1;1pkt 1fpkt"];
262--1509[label="1;1pkt 1fpkt"];
262--1542[label="1;1pkt 1fpkt"];
262--2486[label="1;1pkt 1fpkt"];
262--2708[label="1;1pkt 1fpkt"];
262--2761[label="1;1pkt 1fpkt"];
262--3081[label="1;1pkt 1fpkt"];
262--3187[label="1;1pkt 1fpkt"];
262--3575[label="1;1pkt 1fpkt"];
262--3991[label="1;1pkt 1fpkt"];
262--4011[label="1;1pkt 1fpkt"];
262--4421[label="1;1pkt 1fpkt"];
262--4445[label="1;1pkt 1fpkt"];
262--4665[label="1;1pkt 1fpkt"];
262--4967[label="1;1pkt 1fpkt"];
262--5066[label="1;1pkt 1fpkt"];
262--5085[label="1;276pkt 276fpkt"];
262--5121[label="1;1pkt 1fpkt"];
262--5655[label="1;1pkt 1fpkt"];
262--5915[label="0.00362319;1pkt 1fpkt"];
988--5085[label="1;1pkt 1fpkt"];
988--5121[label="1;1pkt 1fpkt"];
1385--4421[label="1;1pkt 1fpkt"];
1385--5085[label="1;1pkt 1fpkt"];
1504--4445[label="1;1pkt 1fpkt"];
1504--5085[label="1;1pkt 1fpkt"];
1509--5085[label="1;1pkt 1fpkt"];
1542--4665[label="1;1pkt 1fpkt"];
1542--5085[label="1;1pkt 1fpkt"];
2486--4967[label="1;1pkt 1fpkt"];
2486--5085[label="1;1pkt 1fpkt"];
2708--5066[label="1;1pkt 1fpkt"];
2708--5085[label="1;1pkt 1fpkt"];
2761--5085[label="1;1pkt 1fpkt"];
3081--5085[label="1;1pkt 1fpkt"];
3187--5085[label="1;1pkt 1fpkt"];
3575--5085[label="1;1pkt 1fpkt"];
3575--5655[label="1;1pkt 1fpkt"];
3991--5085[label="1;1pkt 1fpkt"];
4011--5085[label="1;1pkt 1fpkt"];
4421--5085[label="1;1pkt 1fpkt"];
4445--5085[label="1;1pkt 1fpkt"];
4665--5085[label="1;1pkt 1fpkt"];
4967--5085[label="1;1pkt 1fpkt"];
5066--5085[label="1;1pkt 1fpkt"];
5085--5121[label="1;1pkt 1fpkt"];
5085--5655[label="1;1pkt 1fpkt"];
5085--5915[label="0.00362319;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53124" src_ip="165.206.146.147" src_port="53124"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
2801[label="161.203.196.27;s;25pkt 25fpkt", shape=diamond, color=yellow];
3141[label="52.99.178.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
5110[label="161.203.196.27;s;25pkt 25fpkt", shape=hexagon, color=black];
6134[label="161.203.196.27;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.196.27:80, *:*}[34.6154%]&lt;BR/&gt;{161.203.196.27:25, 44.6.207.115:*}[23.0769%]&lt;BR/&gt;{161.203.196.27:25, 117.74.80.188:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (29.2208%)&lt;BR/&gt; 80: (16.8831%)&lt;BR/&gt; 6667: (3.8961%)&lt;BR/&gt; 57259: (2.5974%)&lt;BR/&gt; 63219: (1.94805%)&gt;];
}
2801--3141[label="1;1pkt 1fpkt"];
2801--5110[label="1;25pkt 25fpkt"];
2801--6134[label="1;25pkt 25fpkt"];
3141--5110[label="1;1pkt 1fpkt"];
3141--6134[label="1;1pkt 1fpkt"];
5110--6134[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="161.203.196.27" src_port="80"/>
      <filter dst_ip="117.74.80.188" src_ip="161.203.196.27" src_port="25"/>
      <filter dst_ip="44.6.207.115" src_ip="161.203.196.27" src_port="25"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13322,1.73299,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1549[label="215.160.101.121;d;501pkt 501fpkt", shape=diamond, color=yellow];
1951[label="215.184.36.189;s;333pkt 333fpkt", shape=diamond, color=yellow];
3537[label="215.184.35.32;s;181pkt 181fpkt", shape=diamond, color=yellow];
4479[label="215.160.101.121;d;405pkt 405fpkt", shape=hexagon, color=black];
5112[label="215.184.36.189;s;226pkt 226fpkt", shape=hexagon, color=black];
5738[label="215.184.35.32;s;181pkt 181fpkt", shape=hexagon, color=black];
7142[label="215.184.35.32;189pkt 189fpkt", shape=invtriangle, color=brown];
7512[label="215.184.35.32;189pkt 189fpkt", shape=invhouse, color=bisque];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.35.32:1433, 215.160.101.121:*}[26.8833%]&lt;BR/&gt;{215.184.36.189:1433, 215.160.101.121:*}[25.7016%]&lt;BR/&gt;{215.184.36.189:1433, 215.208.35.141:*}[23.486%]&lt;BR/&gt;{215.184.37.98:1433, 215.160.101.121:*}[22.1566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.093%)&lt;BR/&gt; 0: (1.63265%)&lt;BR/&gt; 4484: (0.249433%)&lt;BR/&gt; 3207: (0.226757%)&lt;BR/&gt; 2564: (0.226757%)&gt;];
}
1549--1950[label="0.00199601;1pkt 1fpkt"];
1549--1951[label="0.522523;174pkt 174fpkt"];
1549--3537[label="0.955801;173pkt 173fpkt"];
1549--4479[label="1;405pkt 405fpkt"];
1549--5112[label="0.544248;123pkt 123fpkt"];
1549--5738[label="0.955801;173pkt 173fpkt"];
1549--7142[label="0.910053;172pkt 172fpkt"];
1549--7512[label="0.910053;172pkt 172fpkt"];
1951--2802[label="0.729358;159pkt 159fpkt"];
1951--4479[label="0.429429;143pkt 143fpkt"];
1951--5112[label="1;226pkt 226fpkt"];
3537--4479[label="0.779006;141pkt 141fpkt"];
3537--5409[label="0.00552486;1pkt 1fpkt"];
3537--5738[label="1;181pkt 181fpkt"];
3537--7142[label="0.994475;180pkt 180fpkt"];
3537--7512[label="0.994475;180pkt 180fpkt"];
4479--5112[label="0.544248;123pkt 123fpkt"];
4479--5738[label="0.779006;141pkt 141fpkt"];
4479--7142[label="0.740741;140pkt 140fpkt"];
4479--7512[label="0.740741;140pkt 140fpkt"];
5738--7142[label="0.994475;180pkt 180fpkt"];
5738--7512[label="0.994475;180pkt 180fpkt"];
7142--7512[label="1;189pkt 189fpkt"];
</description>
    <slice>
      <filter dst_ip="215.160.101.121" src_ip="215.184.36.189" src_port="1433"/>
      <filter dst_ip="215.208.35.141" src_ip="215.184.36.189" src_port="1433"/>
      <filter dst_ip="215.160.101.121" src_ip="215.184.35.32" src_port="1433"/>
      <filter dst_ip="215.160.101.121" src_ip="215.184.37.98" src_port="1433"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
513[label="149.2.209.34;s;106pkt 106fpkt", shape=diamond, color=yellow];
1020[label="42.131.90.48;d;2pkt 2fpkt", shape=diamond, color=yellow];
3992[label="42.131.92.149;d;5pkt 5fpkt", shape=diamond, color=yellow];
4481[label="42.131.90.48;d;2pkt 2fpkt", shape=hexagon, color=black];
5139[label="149.2.209.34;s;66pkt 66fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.2.209.34:80, *:*}[95.4955%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59924: (1.10497%)&lt;BR/&gt; 63869: (0.552486%)&lt;BR/&gt; 59318: (0.552486%)&lt;BR/&gt; 59123: (0.552486%)&gt;];
}
513--1020[label="0.5;1pkt 1fpkt"];
513--2645[label="0.166667;1pkt 1fpkt"];
513--3992[label="0.2;1pkt 1fpkt"];
513--4481[label="0.5;1pkt 1fpkt"];
513--5139[label="1;66pkt 66fpkt"];
1020--4481[label="1;2pkt 2fpkt"];
1020--5139[label="0.5;1pkt 1fpkt"];
4481--5139[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="149.2.209.34" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1575[label="215.184.39.187;d;42pkt 42fpkt", shape=diamond, color=yellow];
1590[label="193.18.80.24;s;1210pkt 1210fpkt", shape=diamond, color=yellow];
2815[label="40.74.110.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
4942[label="193.18.80.24;s;1210pkt 1210fpkt", shape=hexagon, color=black];
5158[label="215.184.39.187;d;37pkt 37fpkt", shape=hexagon, color=black];
5159[label="40.74.110.79;s;1pkt 1fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.18.80.24:4830, *:1434}[96.7226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4830: (48.4206%)&lt;BR/&gt; 1434: (48.4206%)&lt;BR/&gt; 22: (0.919632%)&lt;BR/&gt; 8245: (0.459816%)&lt;BR/&gt; 5900: (0.079968%)&gt;];
}
1575--1590[label="0.0238095;1pkt 1fpkt"];
1575--2383[label="0.0238095;1pkt 1fpkt"];
1575--2815[label="1;1pkt 1fpkt"];
1575--3635[label="0.0238095;1pkt 1fpkt"];
1575--4901[label="0.0238095;1pkt 1fpkt"];
1575--4942[label="0.0238095;1pkt 1fpkt"];
1575--5083[label="0.547619;23pkt 23fpkt"];
1575--5158[label="1;37pkt 37fpkt"];
1575--5159[label="1;1pkt 1fpkt"];
1575--5831[label="0.0238095;1pkt 1fpkt"];
1575--5906[label="0.0238095;1pkt 1fpkt"];
1575--5936[label="0.0238095;1pkt 1fpkt"];
1575--5957[label="0.0238095;1pkt 1fpkt"];
1590--4942[label="1;1210pkt 1210fpkt"];
1590--5158[label="0.027027;1pkt 1fpkt"];
1590--5893[label="0.106992;101pkt 101fpkt"];
1590--5926[label="0.106992;101pkt 101fpkt"];
1590--5947[label="0.106992;101pkt 101fpkt"];
2815--5158[label="1;1pkt 1fpkt"];
2815--5159[label="1;1pkt 1fpkt"];
4942--5158[label="0.027027;1pkt 1fpkt"];
4942--5893[label="0.106992;101pkt 101fpkt"];
4942--5926[label="0.106992;101pkt 101fpkt"];
4942--5947[label="0.106992;101pkt 101fpkt"];
5158--5159[label="1;1pkt 1fpkt"];
5158--5831[label="0.027027;1pkt 1fpkt"];
5158--5906[label="0.027027;1pkt 1fpkt"];
5158--5936[label="0.027027;1pkt 1fpkt"];
5158--5957[label="0.027027;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="193.18.80.24" src_port="4830"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
1585[label="37.48.211.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
5167[label="37.48.211.96;s;1pkt 1fpkt", shape=hexagon, color=black];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.48.211.96:21, 215.184.52.94:51343}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51343: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
1585--5167[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.52.94" dst_port="51343" src_ip="37.48.211.96" src_port="21"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1593[label="78.194.19.200;s;2pkt 2fpkt", shape=diamond, color=yellow];
2822[label="214.10.214.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
2851[label="214.10.214.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
5175[label="78.194.19.200;s;2pkt 2fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.194.19.200:0, 214.10.214.248:0}[50%]&lt;BR/&gt;{78.194.19.200:0, 214.10.214.250:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1593--2822[label="1;1pkt 1fpkt"];
1593--2851[label="1;1pkt 1fpkt"];
1593--5175[label="1;2pkt 2fpkt"];
2822--5175[label="1;1pkt 1fpkt"];
2851--5175[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.214.250" src_ip="78.194.19.200"/>
      <filter dst_ip="214.10.214.248" src_ip="78.194.19.200"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
2007[label="35.11.95.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
5192[label="35.11.95.120;s;1pkt 1fpkt", shape=hexagon, color=black];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.11.95.120:51619, 215.184.32.66:3648}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51619: (50%)&lt;BR/&gt; 3648: (50%)&gt;];
}
2007--5192[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.32.66" dst_port="3648" src_ip="35.11.95.120" src_port="51619"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1611[label="149.38.149.52;s;433pkt 433fpkt", shape=diamond, color=yellow];
5193[label="149.38.149.52;s;342pkt 342fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.38.149.52:0, *:0}[99.7691%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7419%)&lt;BR/&gt; 65534: (0.129032%)&lt;BR/&gt; 53: (0.129032%)&gt;];
}
1611--2133[label="0.0126582;1pkt 1fpkt"];
1611--3891[label="0.0041841;1pkt 1fpkt"];
1611--5193[label="1;342pkt 342fpkt"];
</description>
    <slice>
      <filter src_ip="149.38.149.52"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
658[label="149.2.131.58;s;6pkt 6fpkt", shape=diamond, color=yellow];
1137[label="209.58.177.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
5207[label="149.2.131.58;s;5pkt 5fpkt", shape=hexagon, color=black];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.2.131.58:*, 109.81.120.210:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 8020: (12.5%)&lt;BR/&gt; 3501: (12.5%)&lt;BR/&gt; 4081: (8.33333%)&lt;BR/&gt; 4079: (8.33333%)&gt;];
}
658--1137[label="1;1pkt 1fpkt"];
658--5207[label="1;5pkt 5fpkt"];
1137--5207[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="109.81.120.210" dst_port="80" src_ip="149.2.131.58"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
2843[label="37.6.199.206;s;51pkt 51fpkt", shape=diamond, color=yellow];
5212[label="37.6.199.206;s;39pkt 39fpkt", shape=hexagon, color=black];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.6.199.206:21, 215.184.52.94:*}[50.9804%]&lt;BR/&gt;{37.6.199.206:*, 215.184.52.94:113}[49.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (25.5556%)&lt;BR/&gt; 113: (24.4444%)&lt;BR/&gt; 60048: (1.11111%)&lt;BR/&gt; 59997: (1.11111%)&lt;BR/&gt; 59946: (1.11111%)&gt;];
}
2843--5212[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.52.94" src_ip="37.6.199.206" src_port="21"/>
      <filter dst_ip="215.184.52.94" dst_port="113" src_ip="37.6.199.206"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
2855[label="149.216.116.63;s;93pkt 93fpkt", shape=diamond, color=yellow];
5223[label="149.216.116.63;s;90pkt 90fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.116.63:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2855--3003[label="0.142857;1pkt 1fpkt"];
2855--5223[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter src_ip="149.216.116.63"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
1202[label="72.214.144.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
2521[label="134.201.179.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
5250[label="72.214.144.22;d;1pkt 1fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.179.40:4781, 72.214.144.22:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4781: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1202--2521[label="1;1pkt 1fpkt"];
1202--5250[label="1;1pkt 1fpkt"];
2521--5250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.214.144.22" dst_port="554" src_ip="134.201.179.40" src_port="4781"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
2126[label="215.184.38.122;d;138pkt 138fpkt", shape=diamond, color=yellow];
2435[label="204.183.10.93;s;58pkt 58fpkt", shape=diamond, color=yellow];
4744[label="145.84.172.6;d;276pkt 276fpkt", shape=hexagon, color=black];
5258[label="149.197.69.218;d;30pkt 30fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.184.38.122:*}[27.7666%]&lt;BR/&gt;{*:53, 145.84.172.6:50489}[24.3461%]&lt;BR/&gt;{*:*, *:25}[22.9376%]&lt;BR/&gt;{*:2703, 145.84.172.6:*}[20.1207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (20.4183%)&lt;BR/&gt; 53: (14.6414%)&lt;BR/&gt; 50489: (12.0518%)&lt;BR/&gt; 2703: (9.96016%)&lt;BR/&gt; 80: (3.48606%)&gt;];
}
2126--2383[label="0.00724638;1pkt 1fpkt"];
2126--2435[label="0.0172414;1pkt 1fpkt"];
2126--2947[label="0.0106383;1pkt 1fpkt"];
2126--3157[label="0.0217391;1pkt 1fpkt"];
2126--3580[label="0.0138889;1pkt 1fpkt"];
2126--4225[label="0.2;7pkt 7fpkt"];
2126--4901[label="0.00724638;1pkt 1fpkt"];
2126--4932[label="0.0232558;1pkt 1fpkt"];
2126--5123[label="0.0188679;1pkt 1fpkt"];
2126--5673[label="0.0116279;1pkt 1fpkt"];
2126--5831[label="0.00724638;1pkt 1fpkt"];
2126--5890[label="0.0217391;3pkt 3fpkt"];
2126--5906[label="0.00724638;1pkt 1fpkt"];
2126--5908[label="0.057971;8pkt 8fpkt"];
2126--5911[label="0.0652174;9pkt 9fpkt"];
2126--5923[label="0.0217391;3pkt 3fpkt"];
2126--5936[label="0.00724638;1pkt 1fpkt"];
2126--5944[label="0.0217391;3pkt 3fpkt"];
2126--5957[label="0.00724638;1pkt 1fpkt"];
2126--6118[label="0.0126582;1pkt 1fpkt"];
2126--6203[label="0.1;1pkt 1fpkt"];
2126--7446[label="0.0232558;1pkt 1fpkt"];
2126--7519[label="0.0133333;1pkt 1fpkt"];
2435--2525[label="0.0869565;4pkt 4fpkt"];
2435--2537[label="0.0172414;1pkt 1fpkt"];
2435--3896[label="0.0172414;1pkt 1fpkt"];
2435--4462[label="0.0172414;1pkt 1fpkt"];
2435--4676[label="0.155172;9pkt 9fpkt"];
2435--4744[label="0.0172414;1pkt 1fpkt"];
2435--4932[label="1;43pkt 43fpkt"];
2435--5258[label="0.1;3pkt 3fpkt"];
2435--5266[label="0.0172414;1pkt 1fpkt"];
4744--4932[label="0.0232558;1pkt 1fpkt"];
4744--4945[label="0.00980392;1pkt 1fpkt"];
4744--5090[label="0.0116279;1pkt 1fpkt"];
4744--5118[label="0.0111111;1pkt 1fpkt"];
4744--5160[label="0.0107527;1pkt 1fpkt"];
4744--5173[label="0.134409;25pkt 25fpkt"];
4744--5177[label="0.108374;22pkt 22fpkt"];
4744--5890[label="0.0108696;3pkt 3fpkt"];
4744--5908[label="0.0108696;3pkt 3fpkt"];
4744--5909[label="0.00724638;2pkt 2fpkt"];
4744--5911[label="0.00724638;2pkt 2fpkt"];
4744--5912[label="0.00362319;1pkt 1fpkt"];
4744--5923[label="0.0108696;3pkt 3fpkt"];
4744--5938[label="0.00724638;2pkt 2fpkt"];
4744--5944[label="0.0108696;3pkt 3fpkt"];
4744--5959[label="0.00724638;2pkt 2fpkt"];
4744--6179[label="0.0108696;1pkt 1fpkt"];
4744--6335[label="0.0263158;1pkt 1fpkt"];
4744--6445[label="0.00840336;1pkt 1fpkt"];
4744--6631[label="0.0285714;1pkt 1fpkt"];
4744--6738[label="0.111111;1pkt 1fpkt"];
4744--6870[label="0.025641;1pkt 1fpkt"];
4744--6883[label="0.111111;1pkt 1fpkt"];
4744--7233[label="0.00840336;1pkt 1fpkt"];
4744--7303[label="0.0285714;1pkt 1fpkt"];
4744--7337[label="0.0113636;1pkt 1fpkt"];
4744--7401[label="0.111111;1pkt 1fpkt"];
4744--7548[label="0.00840336;1pkt 1fpkt"];
5258--5540[label="0.04;1pkt 1fpkt"];
5258--5890[label="0.0333333;1pkt 1fpkt"];
5258--5908[label="0.166667;5pkt 5fpkt"];
5258--5923[label="0.0333333;1pkt 1fpkt"];
5258--5944[label="0.0333333;1pkt 1fpkt"];
5258--6281[label="0.0333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.38.122"/>
      <filter dst_port="25"/>
      <filter dst_ip="145.84.172.6" src_port="2703"/>
      <filter dst_ip="145.84.172.6" dst_port="50489" src_port="53"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
790[label="136.119.68.224;s;364pkt 364fpkt", shape=diamond, color=yellow];
1349[label="215.234.81.146;d;240pkt 240fpkt", shape=diamond, color=yellow];
2082[label="134.201.12.64;s;138pkt 138fpkt", shape=diamond, color=yellow];
2530[label="215.234.81.133;d;125pkt 125fpkt", shape=diamond, color=yellow];
4828[label="215.234.81.146;d;137pkt 137fpkt", shape=hexagon, color=black];
5262[label="215.234.81.133;d;125pkt 125fpkt", shape=hexagon, color=black];
5263[label="134.201.12.64;s;134pkt 134fpkt", shape=hexagon, color=black];
5318[label="136.119.68.224;s;364pkt 364fpkt", shape=hexagon, color=black];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.68.224:*, 198.196.44.164:80}[37.6731%]&lt;BR/&gt;{*:*, 215.234.81.146:80}[33.241%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8322%)&lt;BR/&gt; 9575: (1.10633%)&lt;BR/&gt; 1287: (0.184388%)&lt;BR/&gt; 3341: (0.122926%)&lt;BR/&gt; 3339: (0.122926%)&gt;];
}
790--807[label="0.0697674;3pkt 3fpkt"];
790--1192[label="0.747253;272pkt 272fpkt"];
790--1349[label="0.0625;15pkt 15fpkt"];
790--2594[label="0.0636364;7pkt 7fpkt"];
790--3942[label="0.183908;16pkt 16fpkt"];
790--4264[label="0.0526316;1pkt 1fpkt"];
790--4363[label="0.5;64pkt 64fpkt"];
790--4828[label="0.0729927;10pkt 10fpkt"];
790--5318[label="1;364pkt 364fpkt"];
790--5327[label="0.0462963;5pkt 5fpkt"];
790--5891[label="0.0659341;24pkt 24fpkt"];
790--5910[label="0.0549451;20pkt 20fpkt"];
790--5913[label="0.0659341;24pkt 24fpkt"];
790--5924[label="0.0659341;24pkt 24fpkt"];
790--5939[label="0.0549451;20pkt 20fpkt"];
790--5945[label="0.0659341;24pkt 24fpkt"];
790--5960[label="0.0549451;20pkt 20fpkt"];
1349--1698[label="0.00862069;1pkt 1fpkt"];
1349--2031[label="0.00645161;1pkt 1fpkt"];
1349--2060[label="0.00416667;1pkt 1fpkt"];
1349--2082[label="0.0507246;7pkt 7fpkt"];
1349--2118[label="0.519481;40pkt 40fpkt"];
1349--2633[label="0.275;66pkt 66fpkt"];
1349--3908[label="0.03125;1pkt 1fpkt"];
1349--4743[label="0.00854701;1pkt 1fpkt"];
1349--4783[label="0.0108696;1pkt 1fpkt"];
1349--4828[label="1;137pkt 137fpkt"];
1349--5263[label="0.0522388;7pkt 7fpkt"];
1349--5297[label="0.509804;26pkt 26fpkt"];
1349--5318[label="0.0625;15pkt 15fpkt"];
1349--5891[label="0.145833;35pkt 35fpkt"];
1349--5910[label="0.025;6pkt 6fpkt"];
1349--5913[label="0.0625;15pkt 15fpkt"];
1349--5924[label="0.145833;35pkt 35fpkt"];
1349--5939[label="0.025;6pkt 6fpkt"];
1349--5945[label="0.145833;35pkt 35fpkt"];
1349--5960[label="0.025;6pkt 6fpkt"];
1349--6213[label="0.294118;10pkt 10fpkt"];
1349--6652[label="0.0243902;1pkt 1fpkt"];
1349--7411[label="0.0541667;13pkt 13fpkt"];
2082--2530[label="0.984;123pkt 123fpkt"];
2082--4828[label="0.0145985;2pkt 2fpkt"];
2082--5262[label="0.984;123pkt 123fpkt"];
2082--5263[label="1;134pkt 134fpkt"];
2082--5891[label="0.0652174;9pkt 9fpkt"];
2082--5910[label="0.333333;46pkt 46fpkt"];
2082--5913[label="0.00724638;1pkt 1fpkt"];
2082--5924[label="0.0652174;9pkt 9fpkt"];
2082--5939[label="0.333333;46pkt 46fpkt"];
2082--5945[label="0.0652174;9pkt 9fpkt"];
2082--5960[label="0.333333;46pkt 46fpkt"];
2530--5262[label="1;125pkt 125fpkt"];
2530--5263[label="0.984;123pkt 123fpkt"];
2530--5891[label="0.072;9pkt 9fpkt"];
2530--5910[label="0.296;37pkt 37fpkt"];
2530--5913[label="0.008;1pkt 1fpkt"];
2530--5924[label="0.072;9pkt 9fpkt"];
2530--5939[label="0.296;37pkt 37fpkt"];
2530--5945[label="0.072;9pkt 9fpkt"];
2530--5960[label="0.296;37pkt 37fpkt"];
2530--7411[label="0.016;2pkt 2fpkt"];
4828--5263[label="0.0149254;2pkt 2fpkt"];
4828--5297[label="0.509804;26pkt 26fpkt"];
4828--5318[label="0.0729927;10pkt 10fpkt"];
4828--5891[label="0.255474;35pkt 35fpkt"];
4828--5910[label="0.0145985;2pkt 2fpkt"];
4828--5924[label="0.255474;35pkt 35fpkt"];
4828--5939[label="0.0145985;2pkt 2fpkt"];
4828--5945[label="0.255474;35pkt 35fpkt"];
4828--5960[label="0.0145985;2pkt 2fpkt"];
4828--6213[label="0.147059;5pkt 5fpkt"];
4828--7411[label="0.0948905;13pkt 13fpkt"];
5262--5263[label="0.984;123pkt 123fpkt"];
5262--5891[label="0.072;9pkt 9fpkt"];
5262--5910[label="0.296;37pkt 37fpkt"];
5262--5913[label="0.008;1pkt 1fpkt"];
5262--5924[label="0.072;9pkt 9fpkt"];
5262--5939[label="0.296;37pkt 37fpkt"];
5262--5945[label="0.072;9pkt 9fpkt"];
5262--5960[label="0.296;37pkt 37fpkt"];
5262--7411[label="0.016;2pkt 2fpkt"];
5263--5891[label="0.0671642;9pkt 9fpkt"];
5263--5910[label="0.343284;46pkt 46fpkt"];
5263--5913[label="0.00746269;1pkt 1fpkt"];
5263--5924[label="0.0671642;9pkt 9fpkt"];
5263--5939[label="0.343284;46pkt 46fpkt"];
5263--5945[label="0.0671642;9pkt 9fpkt"];
5263--5960[label="0.343284;46pkt 46fpkt"];
5318--5327[label="0.0462963;5pkt 5fpkt"];
5318--5891[label="0.0659341;24pkt 24fpkt"];
5318--5910[label="0.0549451;20pkt 20fpkt"];
5318--5913[label="0.0659341;24pkt 24fpkt"];
5318--5924[label="0.0659341;24pkt 24fpkt"];
5318--5939[label="0.0549451;20pkt 20fpkt"];
5318--5945[label="0.0659341;24pkt 24fpkt"];
5318--5960[label="0.0549451;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="215.234.81.146" dst_port="80"/>
      <filter dst_ip="198.196.44.164" dst_port="80" src_ip="136.119.68.224"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.994585,1.65517,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
80[label="38.178.206.180s;1pkt 1fpkt", shape=rectangle, color=red];
301[label="165.206.144.150;d;5pkt 5fpkt", shape=diamond, color=yellow];
304[label="38.178.205.134;s;1pkt 1fpkt", shape=diamond, color=yellow];
894[label="145.84.218.59;d;5pkt 5fpkt", shape=diamond, color=yellow];
896[label="42.229.141.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
1215[label="165.206.146.240;d;21pkt 21fpkt", shape=diamond, color=yellow];
1475[label="38.178.192.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
2099[label="36.77.51.34;s;148pkt 148fpkt", shape=diamond, color=yellow];
2540[label="204.183.83.191;s;105pkt 105fpkt", shape=diamond, color=yellow];
2728[label="145.84.218.119;d;4pkt 4fpkt", shape=diamond, color=yellow];
2738[label="38.178.206.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
3371[label="145.84.218.226;d;6pkt 6fpkt", shape=diamond, color=yellow];
3399[label="38.178.195.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
4156[label="38.178.197.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
4295[label="165.206.144.150;d;3pkt 3fpkt", shape=hexagon, color=black];
4373[label="165.206.146.240;d;9pkt 9fpkt", shape=hexagon, color=black];
4420[label="145.84.218.59;d;5pkt 5fpkt", shape=hexagon, color=black];
4571[label="145.84.13.41;d;20pkt 20fpkt", shape=hexagon, color=black];
5069[label="145.84.218.119;d;4pkt 4fpkt", shape=hexagon, color=black];
5429[label="38.178.206.180;s;1pkt 1fpkt", shape=hexagon, color=black];
5587[label="145.84.218.226;d;6pkt 6fpkt", shape=hexagon, color=black];
6936[label="38.178.192.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.77.51.34:80, *:*}[49.4983%]&lt;BR/&gt;{204.183.83.191:80, *:*}[35.786%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1429%)&lt;BR/&gt; 45947: (1.57143%)&lt;BR/&gt; 1978: (0.857143%)&lt;BR/&gt; 1977: (0.857143%)&lt;BR/&gt; 1244: (0.714286%)&gt;];
}
80--2728[label="1;1pkt 1fpkt"];
80--2738[label="1;1pkt 1fpkt"];
80--5069[label="1;1pkt 1fpkt"];
80--5429[label="1;1pkt 1fpkt"];
301--304[label="1;1pkt 1fpkt"];
301--2540[label="0.8;4pkt 4fpkt"];
301--4295[label="1;3pkt 3fpkt"];
301--5269[label="0.8;4pkt 4fpkt"];
304--4295[label="1;1pkt 1fpkt"];
894--896[label="1;1pkt 1fpkt"];
894--2540[label="0.4;2pkt 2fpkt"];
894--4420[label="1;5pkt 5fpkt"];
894--5269[label="0.4;2pkt 2fpkt"];
896--4420[label="1;1pkt 1fpkt"];
1215--1475[label="1;1pkt 1fpkt"];
1215--2540[label="0.0952381;2pkt 2fpkt"];
1215--4156[label="1;1pkt 1fpkt"];
1215--4226[label="0.047619;1pkt 1fpkt"];
1215--4373[label="1;9pkt 9fpkt"];
1215--5269[label="0.0952381;2pkt 2fpkt"];
1215--5822[label="0.047619;1pkt 1fpkt"];
1215--6243[label="0.0952381;2pkt 2fpkt"];
1215--6936[label="1;1pkt 1fpkt"];
1475--4373[label="1;1pkt 1fpkt"];
1475--6936[label="1;1pkt 1fpkt"];
2099--2186[label="0.00675676;1pkt 1fpkt"];
2099--2217[label="0.0625;6pkt 6fpkt"];
2099--2277[label="0.0126582;1pkt 1fpkt"];
2099--2308[label="0.244444;11pkt 11fpkt"];
2099--2477[label="0.0405405;6pkt 6fpkt"];
2099--2499[label="0.00675676;1pkt 1fpkt"];
2099--2909[label="0.0923077;6pkt 6fpkt"];
2099--2996[label="0.136364;3pkt 3fpkt"];
2099--3223[label="0.00862069;1pkt 1fpkt"];
2099--3310[label="0.0952381;2pkt 2fpkt"];
2099--3371[label="0.333333;2pkt 2fpkt"];
2099--3675[label="0.105263;6pkt 6fpkt"];
2099--3980[label="0.015625;1pkt 1fpkt"];
2099--4009[label="0.105263;2pkt 2fpkt"];
2099--4168[label="0.00675676;1pkt 1fpkt"];
2099--4180[label="0.0135135;2pkt 2fpkt"];
2099--4471[label="0.0306122;3pkt 3fpkt"];
2099--4488[label="0.0169492;1pkt 1fpkt"];
2099--4571[label="0.05;1pkt 1fpkt"];
2099--4623[label="0.00675676;1pkt 1fpkt"];
2099--4760[label="0.00675676;1pkt 1fpkt"];
2099--4883[label="0.206897;6pkt 6fpkt"];
2099--5048[label="0.0126582;1pkt 1fpkt"];
2099--5277[label="1;92pkt 92fpkt"];
2099--5587[label="0.333333;2pkt 2fpkt"];
2099--5808[label="0.0169492;1pkt 1fpkt"];
2099--5821[label="0.00675676;1pkt 1fpkt"];
2099--5842[label="0.00675676;1pkt 1fpkt"];
2540--2728[label="0.5;2pkt 2fpkt"];
2540--2951[label="0.208333;15pkt 15fpkt"];
2540--3319[label="0.129032;4pkt 4fpkt"];
2540--3371[label="0.333333;2pkt 2fpkt"];
2540--4168[label="0.0857143;9pkt 9fpkt"];
2540--4295[label="0.666667;2pkt 2fpkt"];
2540--4373[label="0.222222;2pkt 2fpkt"];
2540--4420[label="0.4;2pkt 2fpkt"];
2540--4623[label="0.00952381;1pkt 1fpkt"];
2540--4782[label="0.0138889;1pkt 1fpkt"];
2540--5069[label="0.5;2pkt 2fpkt"];
2540--5269[label="1;74pkt 74fpkt"];
2540--5334[label="0.194444;7pkt 7fpkt"];
2540--5587[label="0.333333;2pkt 2fpkt"];
2540--5616[label="0.585366;24pkt 24fpkt"];
2540--5842[label="0.00952381;1pkt 1fpkt"];
2728--2738[label="1;1pkt 1fpkt"];
2728--5069[label="1;4pkt 4fpkt"];
2728--5269[label="0.5;2pkt 2fpkt"];
2728--5429[label="1;1pkt 1fpkt"];
2738--5069[label="1;1pkt 1fpkt"];
2738--5429[label="1;1pkt 1fpkt"];
3371--3399[label="1;1pkt 1fpkt"];
3371--5269[label="0.333333;2pkt 2fpkt"];
3371--5277[label="0.333333;2pkt 2fpkt"];
3371--5587[label="1;6pkt 6fpkt"];
3399--5587[label="1;1pkt 1fpkt"];
4295--5269[label="0.666667;2pkt 2fpkt"];
4373--5269[label="0.222222;2pkt 2fpkt"];
4373--6243[label="0.111111;1pkt 1fpkt"];
4373--6936[label="1;1pkt 1fpkt"];
4420--5269[label="0.4;2pkt 2fpkt"];
4571--4948[label="0.15;3pkt 3fpkt"];
4571--5277[label="0.05;1pkt 1fpkt"];
4571--5362[label="0.2;4pkt 4fpkt"];
5069--5269[label="0.5;2pkt 2fpkt"];
5069--5429[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="36.77.51.34" src_port="80"/>
      <filter src_ip="204.183.83.191" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
2548[label="215.184.37.96;s;143pkt 143fpkt", shape=diamond, color=yellow];
2661[label="42.131.90.231;d;3pkt 3fpkt", shape=diamond, color=yellow];
5276[label="215.184.37.96;s;143pkt 143fpkt", shape=hexagon, color=black];
5359[label="165.206.219.65;s;44pkt 44fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.37.96:80, *:*}[75.5319%]&lt;BR/&gt;{165.206.219.65:80, *:*}[22.8723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5495%)&lt;BR/&gt; 33228: (0.45045%)&lt;BR/&gt; 65244: (0.3003%)&lt;BR/&gt; 65074: (0.3003%)&lt;BR/&gt; 64853: (0.3003%)&gt;];
}
2548--2661[label="0.333333;1pkt 1fpkt"];
2548--2802[label="0.00699301;1pkt 1fpkt"];
2548--3997[label="0.4;2pkt 2fpkt"];
2548--5276[label="1;143pkt 143fpkt"];
2661--5276[label="0.333333;1pkt 1fpkt"];
2661--5301[label="0.333333;1pkt 1fpkt"];
2661--5359[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.37.96" src_port="80"/>
      <filter src_ip="165.206.219.65" src_port="80"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183785212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1719[label="197.162.235.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
2580[label="149.221.212.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
5311[label="149.221.212.140;d;1pkt 1fpkt", shape=hexagon, color=black];
5312[label="197.162.235.129;s;1pkt 1fpkt", shape=hexagon, color=black];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.162.235.129:0, 149.221.212.140:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1719--2580[label="1;1pkt 1fpkt"];
1719--5311[label="1;1pkt 1fpkt"];
1719--5312[label="1;1pkt 1fpkt"];
2580--5311[label="1;1pkt 1fpkt"];
2580--5312[label="1;1pkt 1fpkt"];
5311--5312[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.221.212.140" src_ip="197.162.235.129"/>
    </slice>
    <from sec="1183784408" usec="0"/>
    <to sec="1183785220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
668[label="136.119.216.217;s;759pkt 759fpkt", shape=diamond, color=yellow];
2644[label="206.206.197.170;d;28pkt 28fpkt", shape=diamond, color=yellow];
2937[label="206.206.208.51;d;29pkt 29fpkt", shape=diamond, color=yellow];
3644[label="206.206.208.48;d;36pkt 36fpkt", shape=diamond, color=yellow];
4353[label="136.119.216.217;s;523pkt 523fpkt", shape=hexagon, color=black];
5316[label="206.206.208.51;d;29pkt 29fpkt", shape=hexagon, color=black];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.216.217:*, *:80}[99.8684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60583: (0.14245%)&lt;BR/&gt; 60538: (0.14245%)&lt;BR/&gt; 60525: (0.14245%)&lt;BR/&gt; 60482: (0.14245%)&gt;];
}
668--764[label="0.284615;74pkt 74fpkt"];
668--1186[label="0.253112;61pkt 61fpkt"];
668--1708[label="0.0117647;1pkt 1fpkt"];
668--2644[label="0.964286;27pkt 27fpkt"];
668--2937[label="1;29pkt 29fpkt"];
668--3644[label="1;36pkt 36fpkt"];
668--4353[label="1;523pkt 523fpkt"];
668--5316[label="1;29pkt 29fpkt"];
668--5891[label="0.0711462;54pkt 54fpkt"];
668--5910[label="0.055336;42pkt 42fpkt"];
668--5913[label="0.0474308;36pkt 36fpkt"];
668--5924[label="0.0711462;54pkt 54fpkt"];
668--5939[label="0.055336;42pkt 42fpkt"];
668--5945[label="0.0711462;54pkt 54fpkt"];
668--5960[label="0.055336;42pkt 42fpkt"];
2644--4353[label="0.964286;27pkt 27fpkt"];
2644--5891[label="0.0714286;2pkt 2fpkt"];
2644--5910[label="0.107143;3pkt 3fpkt"];
2644--5924[label="0.0714286;2pkt 2fpkt"];
2644--5939[label="0.107143;3pkt 3fpkt"];
2644--5945[label="0.0714286;2pkt 2fpkt"];
2644--5960[label="0.107143;3pkt 3fpkt"];
2937--4353[label="1;29pkt 29fpkt"];
2937--5316[label="1;29pkt 29fpkt"];
2937--5891[label="0.0344828;1pkt 1fpkt"];
2937--5910[label="0.103448;3pkt 3fpkt"];
2937--5913[label="0.103448;3pkt 3fpkt"];
2937--5924[label="0.0344828;1pkt 1fpkt"];
2937--5939[label="0.103448;3pkt 3fpkt"];
2937--5945[label="0.0344828;1pkt 1fpkt"];
2937--5960[label="0.103448;3pkt 3fpkt"];
3644--4353[label="0.583333;21pkt 21fpkt"];
3644--5891[label="0.0555556;2pkt 2fpkt"];
3644--5924[label="0.0555556;2pkt 2fpkt"];
3644--5945[label="0.0555556;2pkt 2fpkt"];
4353--5316[label="1;29pkt 29fpkt"];
4353--5891[label="0.10325;54pkt 54fpkt"];
4353--5910[label="0.0803059;42pkt 42fpkt"];
4353--5913[label="0.0688337;36pkt 36fpkt"];
4353--5924[label="0.10325;54pkt 54fpkt"];
4353--5939[label="0.0803059;42pkt 42fpkt"];
4353--5945[label="0.10325;54pkt 54fpkt"];
4353--5960[label="0.0803059;42pkt 42fpkt"];
5316--5891[label="0.0344828;1pkt 1fpkt"];
5316--5910[label="0.103448;3pkt 3fpkt"];
5316--5913[label="0.103448;3pkt 3fpkt"];
5316--5924[label="0.0344828;1pkt 1fpkt"];
5316--5939[label="0.103448;3pkt 3fpkt"];
5316--5945[label="0.0344828;1pkt 1fpkt"];
5316--5960[label="0.103448;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.119.216.217"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
2830[label="204.183.77.203;s;110pkt 110fpkt", shape=diamond, color=yellow];
5321[label="145.84.106.212;d;45pkt 45fpkt", shape=hexagon, color=black];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.84.106.212:*}[27.9221%]&lt;BR/&gt;{204.183.77.203:80, 149.2.182.118:*}[20.1299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 443: (0.967742%)&lt;BR/&gt; 1503: (0.645161%)&lt;BR/&gt; 1183: (0.645161%)&lt;BR/&gt; 995: (0.645161%)&gt;];
}
2830--3197[label="0.0909091;7pkt 7fpkt"];
2830--3241[label="0.0294118;1pkt 1fpkt"];
2830--3630[label="0.0181818;1pkt 1fpkt"];
2830--4463[label="0.0272727;3pkt 3fpkt"];
2830--5188[label="1;64pkt 64fpkt"];
2830--5321[label="0.0222222;1pkt 1fpkt"];
2830--5510[label="0.2;22pkt 22fpkt"];
2830--5744[label="0.0909091;7pkt 7fpkt"];
5321--5331[label="0.177778;8pkt 8fpkt"];
5321--5893[label="0.0222222;1pkt 1fpkt"];
5321--5926[label="0.0222222;1pkt 1fpkt"];
5321--5947[label="0.0222222;1pkt 1fpkt"];
5321--6583[label="0.0666667;3pkt 3fpkt"];
5321--6893[label="0.0222222;1pkt 1fpkt"];
5321--7284[label="0.0666667;3pkt 3fpkt"];
5321--7406[label="0.0222222;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.106.212" src_port="80"/>
      <filter dst_ip="149.2.182.118" src_ip="204.183.77.203" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
794[label="165.206.145.5;d;67pkt 67fpkt", shape=diamond, color=yellow];
1724[label="213.40.29.140;s;6pkt 6fpkt", shape=diamond, color=yellow];
5323[label="213.40.29.140;s;4pkt 4fpkt", shape=hexagon, color=black];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.40.25.188:80, 165.206.145.5:*}[40.2985%]&lt;BR/&gt;{213.40.26.121:80, 165.206.145.5:*}[29.8507%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.6104%)&lt;BR/&gt; 554: (10.3896%)&lt;BR/&gt; 58941: (1.94805%)&lt;BR/&gt; 58887: (1.94805%)&lt;BR/&gt; 58841: (1.94805%)&gt;];
}
794--1724[label="1;6pkt 6fpkt"];
794--5323[label="1;4pkt 4fpkt"];
1724--5323[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.145.5" src_ip="213.40.25.188" src_port="80"/>
      <filter dst_ip="165.206.145.5" src_ip="213.40.26.121" src_port="80"/>
    </slice>
    <from sec="1183784409" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
834[label="117.109.89.219;d;504pkt 504fpkt", shape=diamond, color=yellow];
5345[label="117.109.89.219;d;504pkt 504fpkt", shape=hexagon, color=black];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2967, 117.109.89.219:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50.0992%)&lt;BR/&gt; 2120: (0.297619%)&lt;BR/&gt; 4384: (0.198413%)&lt;BR/&gt; 4249: (0.198413%)&lt;BR/&gt; 3725: (0.198413%)&gt;];
}
834--5345[label="1;504pkt 504fpkt"];
</description>
    <slice>
      <filter dst_ip="117.109.89.219" src_port="2967"/>
    </slice>
    <from sec="1183784426" usec="0"/>
    <to sec="1183784902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
2203[label="149.197.226.192;s;53pkt 53fpkt", shape=diamond, color=yellow];
4831[label="149.197.226.192;s;49pkt 49fpkt", shape=hexagon, color=black];
5348[label="196.163.44.164;d;64pkt 64fpkt", shape=hexagon, color=black];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.226.4:443, 196.163.44.164:*}[36.6667%]&lt;BR/&gt;{149.197.226.192:443, 196.163.44.164:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (35.241%)&lt;BR/&gt; 993: (5.12048%)&lt;BR/&gt; 995: (4.81928%)&lt;BR/&gt; 143: (4.21687%)&lt;BR/&gt; 11861: (0.903614%)&gt;];
}
2203--2752[label="0.5;2pkt 2fpkt"];
2203--4831[label="1;49pkt 49fpkt"];
2203--5348[label="0.509434;27pkt 27fpkt"];
4831--5348[label="0.55102;27pkt 27fpkt"];
5348--5993[label="0.942857;33pkt 33fpkt"];
5348--7091[label="0.942857;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.44.164" src_ip="149.197.226.192" src_port="443"/>
      <filter dst_ip="196.163.44.164" src_ip="149.197.226.4" src_port="443"/>
    </slice>
    <from sec="1183784431" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
2981[label="149.197.226.192;d;10pkt 10fpkt", shape=diamond, color=yellow];
5355[label="149.197.226.192;d;8pkt 8fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.66.216.79:*, 149.197.226.192:143}[30%]&lt;BR/&gt;{40.240.126.26:*, 149.197.226.192:995}[20%]&lt;BR/&gt;{38.34.154.105:*, 149.197.226.192:995}[20%]&lt;BR/&gt;{205.120.91.150:*, 149.197.226.192:993}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (22.2222%)&lt;BR/&gt; 995: (16.6667%)&lt;BR/&gt; 993: (11.1111%)&lt;BR/&gt; 61678: (5.55556%)&lt;BR/&gt; 60929: (5.55556%)&gt;];
}
2981--5355[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.226.192" dst_port="143" src_ip="72.66.216.79"/>
      <filter dst_ip="149.197.226.192" dst_port="993" src_ip="205.120.91.150"/>
      <filter dst_ip="149.197.226.192" dst_port="995" src_ip="38.34.154.105"/>
      <filter dst_ip="149.197.226.192" dst_port="995" src_ip="40.240.126.26"/>
    </slice>
    <from sec="1183784447" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
1801[label="38.243.118.176;s;2pkt 2fpkt", shape=diamond, color=yellow];
1802[label="145.84.5.177;d;6pkt 6fpkt", shape=diamond, color=yellow];
2241[label="36.217.150.27;s;2pkt 2fpkt", shape=diamond, color=yellow];
4584[label="145.84.5.177;d;4pkt 4fpkt", shape=hexagon, color=black];
5372[label="38.243.118.176;s;2pkt 2fpkt", shape=hexagon, color=black];
5682[label="36.217.150.27;s;2pkt 2fpkt", shape=hexagon, color=black];
6806[label="38.243.118.176;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.217.150.27:80, 145.84.5.177:*}[33.3333%]&lt;BR/&gt;{38.243.118.176:80, 145.84.5.177:*}[33.3333%]&lt;BR/&gt;{36.217.150.198:80, 145.84.5.177:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54421: (12.5%)&lt;BR/&gt; 54418: (12.5%)&lt;BR/&gt; 54420: (10%)&lt;BR/&gt; 54434: (7.5%)&gt;];
}
1801--1802[label="1;2pkt 2fpkt"];
1801--4584[label="1;2pkt 2fpkt"];
1801--5372[label="1;2pkt 2fpkt"];
1801--6806[label="1;2pkt 2fpkt"];
1802--2241[label="1;2pkt 2fpkt"];
1802--4584[label="1;4pkt 4fpkt"];
1802--5372[label="1;2pkt 2fpkt"];
1802--5682[label="1;2pkt 2fpkt"];
1802--6806[label="1;2pkt 2fpkt"];
2241--4584[label="0.5;1pkt 1fpkt"];
2241--5682[label="1;2pkt 2fpkt"];
4584--5372[label="1;2pkt 2fpkt"];
4584--5682[label="0.5;1pkt 1fpkt"];
4584--6806[label="1;2pkt 2fpkt"];
5372--6806[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.5.177" src_ip="36.217.150.198" src_port="80"/>
      <filter dst_ip="145.84.5.177" src_ip="38.243.118.176" src_port="80"/>
      <filter dst_ip="145.84.5.177" src_ip="36.217.150.27" src_port="80"/>
    </slice>
    <from sec="1183784527" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2358[label="196.163.44.52;d;5pkt 5fpkt", shape=diamond, color=yellow];
5379[label="136.119.154.53;s;6pkt 6fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.154.53:80, 196.163.44.52:*}[71.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 44231: (9.09091%)&lt;BR/&gt; 43936: (9.09091%)&lt;BR/&gt; 43198: (9.09091%)&lt;BR/&gt; 43035: (9.09091%)&gt;];
}
2358--3002[label="1;5pkt 5fpkt"];
2358--5379[label="0.8;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.44.52" src_ip="136.119.154.53" src_port="80"/>
    </slice>
    <from sec="1183784596" usec="0"/>
    <to sec="1183785111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
1870[label="34.112.73.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
5388[label="34.112.73.65;d;1pkt 1fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.39.2:8080, 34.112.73.65:3583}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3583: (50%)&gt;];
}
1870--5388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.112.73.65" dst_port="3583" src_ip="215.184.39.2" src_port="8080"/>
    </slice>
    <from sec="1183784622" usec="0"/>
    <to sec="1183785022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
2295[label="40.208.60.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
5392[label="40.208.60.218;s;1pkt 1fpkt", shape=hexagon, color=black];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.208.60.218:80, 214.10.198.177:54271}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2295--5392[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.177" dst_port="54271" src_ip="40.208.60.218" src_port="80"/>
    </slice>
    <from sec="1183784665" usec="0"/>
    <to sec="1183785139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
2651[label="38.3.131.118;d;11pkt 11fpkt", shape=diamond, color=yellow];
2671[label="161.203.231.90;s;11pkt 11fpkt", shape=diamond, color=yellow];
5393[label="161.203.231.90;s;11pkt 11fpkt", shape=hexagon, color=black];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.231.90:80, 38.3.131.118:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60165: (4.54545%)&lt;BR/&gt; 57955: (4.54545%)&lt;BR/&gt; 57314: (4.54545%)&lt;BR/&gt; 55580: (4.54545%)&gt;];
}
2651--2671[label="0.909091;10pkt 10fpkt"];
2651--5393[label="0.909091;10pkt 10fpkt"];
2671--5393[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="38.3.131.118" src_ip="161.203.231.90" src_port="80"/>
    </slice>
    <from sec="1183784563" usec="0"/>
    <to sec="1183785006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
2312[label="79.246.131.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
5397[label="79.246.131.25;d;1pkt 1fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.64.39:3125, 79.246.131.25:4600}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4600: (50%)&lt;BR/&gt; 3125: (50%)&gt;];
}
2312--5397[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="79.246.131.25" dst_port="4600" src_ip="149.216.64.39" src_port="3125"/>
    </slice>
    <from sec="1183784692" usec="0"/>
    <to sec="1183784867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
2341[label="215.40.209.189;d;4pkt 4fpkt", shape=diamond, color=yellow];
5401[label="215.40.209.189;d;4pkt 4fpkt", shape=hexagon, color=black];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.1.92:2203, 215.40.209.189:554}[25%]&lt;BR/&gt;{136.119.1.92:2207, 215.40.209.189:554}[25%]&lt;BR/&gt;{136.119.1.92:2209, 215.40.209.189:554}[25%]&lt;BR/&gt;{136.119.1.92:2212, 215.40.209.189:554}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 2212: (12.5%)&lt;BR/&gt; 2209: (12.5%)&lt;BR/&gt; 2207: (12.5%)&lt;BR/&gt; 2203: (12.5%)&gt;];
}
2341--5401[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="215.40.209.189" dst_port="554" src_ip="136.119.1.92" src_port="2212"/>
      <filter dst_ip="215.40.209.189" dst_port="554" src_ip="136.119.1.92" src_port="2209"/>
      <filter dst_ip="215.40.209.189" dst_port="554" src_ip="136.119.1.92" src_port="2207"/>
      <filter dst_ip="215.40.209.189" dst_port="554" src_ip="136.119.1.92" src_port="2203"/>
    </slice>
    <from sec="1183784713" usec="0"/>
    <to sec="1183785097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
353[label="215.184.41.103;s;3pkt 3fpkt", shape=diamond, color=yellow];
488[label="215.184.33.198;s;65pkt 65fpkt", shape=diamond, color=yellow];
1161[label="215.184.37.154;s;36pkt 36fpkt", shape=diamond, color=yellow];
1576[label="215.184.39.187;s;46pkt 46fpkt", shape=diamond, color=yellow];
2673[label="215.184.35.129;s;22pkt 22fpkt", shape=diamond, color=yellow];
2802[label="215.208.35.141;d;218pkt 218fpkt", shape=diamond, color=yellow];
3172[label="40.74.110.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
3608[label="215.184.34.148;s;21pkt 21fpkt", shape=diamond, color=yellow];
4694[label="215.184.39.187;s;41pkt 41fpkt", shape=hexagon, color=black];
5409[label="214.238.94.192;d;778pkt 778fpkt", shape=hexagon, color=black];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8080, 214.238.94.192:6000}[61.6427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (29.8132%)&lt;BR/&gt; 6000: (29.8132%)&lt;BR/&gt; 0: (11.0479%)&lt;BR/&gt; 1433: (8.36718%)&lt;BR/&gt; 22: (3.45248%)&gt;];
}
353--354[label="1;1pkt 1fpkt"];
353--2382[label="0.333333;1pkt 1fpkt"];
353--2802[label="0.333333;1pkt 1fpkt"];
353--4919[label="1;1pkt 1fpkt"];
353--5409[label="0.333333;1pkt 1fpkt"];
488--2382[label="0.0153846;1pkt 1fpkt"];
488--5409[label="0.0153846;1pkt 1fpkt"];
1161--2802[label="0.0277778;1pkt 1fpkt"];
1161--4286[label="0.972222;35pkt 35fpkt"];
1576--2382[label="0.0217391;1pkt 1fpkt"];
1576--3172[label="1;1pkt 1fpkt"];
1576--3951[label="0.0217391;1pkt 1fpkt"];
1576--4286[label="0.478261;22pkt 22fpkt"];
1576--4694[label="1;41pkt 41fpkt"];
1576--5409[label="0.0217391;1pkt 1fpkt"];
2673--2802[label="0.0454545;1pkt 1fpkt"];
2673--5394[label="1;22pkt 22fpkt"];
2673--5409[label="0.0454545;1pkt 1fpkt"];
2802--4916[label="0.00458716;1pkt 1fpkt"];
2802--4922[label="0.00458716;1pkt 1fpkt"];
2802--5112[label="0.472477;103pkt 103fpkt"];
2802--5276[label="0.00699301;1pkt 1fpkt"];
2802--5394[label="0.0454545;1pkt 1fpkt"];
2802--6012[label="0.00458716;1pkt 1fpkt"];
3172--4694[label="1;1pkt 1fpkt"];
3608--5409[label="0.047619;1pkt 1fpkt"];
4694--5409[label="0.0243902;1pkt 1fpkt"];
5409--5492[label="0.00128535;1pkt 1fpkt"];
5409--5541[label="0.0169492;1pkt 1fpkt"];
5409--5571[label="0.00675676;1pkt 1fpkt"];
5409--5609[label="0.0192308;1pkt 1fpkt"];
5409--5613[label="0.0175439;1pkt 1fpkt"];
5409--5738[label="0.00552486;1pkt 1fpkt"];
5409--5788[label="0.00128535;1pkt 1fpkt"];
5409--5835[label="0.0769231;1pkt 1fpkt"];
5409--5888[label="0.00128535;1pkt 1fpkt"];
5409--5921[label="0.00128535;1pkt 1fpkt"];
5409--5942[label="0.00128535;1pkt 1fpkt"];
5409--6011[label="0.00337838;1pkt 1fpkt"];
5409--6012[label="0.00729927;2pkt 2fpkt"];
5409--6283[label="0.0153846;1pkt 1fpkt"];
5409--6722[label="0.00128535;1pkt 1fpkt"];
5409--6868[label="0.00534759;1pkt 1fpkt"];
5409--6896[label="0.005;1pkt 1fpkt"];
5409--7008[label="0.0769231;1pkt 1fpkt"];
5409--7098[label="0.00338983;1pkt 1fpkt"];
5409--7142[label="0.00529101;1pkt 1fpkt"];
5409--7180[label="0.015625;1pkt 1fpkt"];
5409--7208[label="0.0166667;1pkt 1fpkt"];
5409--7305[label="0.00128535;1pkt 1fpkt"];
5409--7347[label="0.00128535;1pkt 1fpkt"];
5409--7407[label="0.005;1pkt 1fpkt"];
5409--7496[label="0.00337838;1pkt 1fpkt"];
5409--7512[label="0.00529101;1pkt 1fpkt"];
5409--7547[label="0.0021322;1pkt 1fpkt"];
5409--7573[label="0.00128535;1pkt 1fpkt"];
5409--7589[label="0.00128535;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.238.94.192" dst_port="6000" src_port="8080"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
2710[label="192.157.227.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
5415[label="192.157.227.197;d;1pkt 1fpkt", shape=hexagon, color=black];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.42.153:3125, 192.157.227.197:49727}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49727: (50%)&lt;BR/&gt; 3125: (50%)&gt;];
}
2710--5415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.157.227.197" dst_port="49727" src_ip="215.184.42.153" src_port="3125"/>
    </slice>
    <from sec="1183784763" usec="0"/>
    <to sec="1183784793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
2727[label="149.216.112.37;s;11pkt 11fpkt", shape=diamond, color=yellow];
2733[label="36.128.20.154;d;4pkt 4fpkt", shape=diamond, color=yellow];
5425[label="36.128.20.154;d;4pkt 4fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.112.37:*, 36.128.20.59:443}[63.6364%]&lt;BR/&gt;{149.216.112.37:*, 36.128.20.154:443}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1497: (7.89474%)&lt;BR/&gt; 1492: (7.89474%)&lt;BR/&gt; 1490: (7.89474%)&lt;BR/&gt; 1487: (7.89474%)&gt;];
}
2727--2733[label="1;4pkt 4fpkt"];
2727--5425[label="1;4pkt 4fpkt"];
2733--5425[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="36.128.20.59" dst_port="443" src_ip="149.216.112.37"/>
      <filter dst_ip="36.128.20.154" dst_port="443" src_ip="149.216.112.37"/>
    </slice>
    <from sec="1183784781" usec="0"/>
    <to sec="1183784887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
2757[label="214.194.12.65;d;7pkt 7fpkt", shape=diamond, color=yellow];
2758[label="149.216.180.242;s;5pkt 5fpkt", shape=diamond, color=yellow];
5431[label="149.216.180.242;s;5pkt 5fpkt", shape=hexagon, color=black];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.180.242:80, 214.194.12.65:*}[71.4286%]&lt;BR/&gt;{149.216.46.183:80, 214.194.12.65:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3346: (8.82353%)&lt;BR/&gt; 3343: (8.82353%)&lt;BR/&gt; 3342: (8.82353%)&lt;BR/&gt; 3341: (8.82353%)&gt;];
}
2757--2758[label="1;5pkt 5fpkt"];
2757--5431[label="1;5pkt 5fpkt"];
2758--5431[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="214.194.12.65" src_ip="149.216.180.242" src_port="80"/>
      <filter dst_ip="214.194.12.65" src_ip="149.216.46.183" src_port="80"/>
    </slice>
    <from sec="1183784805" usec="0"/>
    <to sec="1183784857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
3037[label="219.171.158.165;s;79pkt 79fpkt", shape=diamond, color=yellow];
5435[label="219.171.158.165;s;79pkt 79fpkt", shape=hexagon, color=black];
6761[label="219.171.158.165;78pkt 78fpkt", shape=pentagon, color=darkviolet];
7359[label="219.171.158.165;78pkt 78fpkt", shape=invtriangle, color=brown];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.171.158.165:80, 214.10.198.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60287: (0.636943%)&lt;BR/&gt; 59801: (0.636943%)&lt;BR/&gt; 59713: (0.636943%)&lt;BR/&gt; 59379: (0.636943%)&gt;];
}
3037--5435[label="1;79pkt 79fpkt"];
3037--6761[label="1;78pkt 78fpkt"];
3037--7359[label="1;78pkt 78fpkt"];
5435--6761[label="1;78pkt 78fpkt"];
5435--7359[label="1;78pkt 78fpkt"];
6761--7359[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.177" src_ip="219.171.158.165" src_port="80"/>
    </slice>
    <from sec="1183784816" usec="0"/>
    <to sec="1183785035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
2771[label="214.145.43.71;d;67pkt 67fpkt", shape=diamond, color=yellow];
5438[label="214.145.43.71;d;67pkt 67fpkt", shape=hexagon, color=black];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.26.38:*, 214.145.43.71:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35996: (0.746269%)&lt;BR/&gt; 35992: (0.746269%)&lt;BR/&gt; 35991: (0.746269%)&lt;BR/&gt; 35990: (0.746269%)&gt;];
}
2771--5438[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="214.145.43.71" dst_port="80" src_ip="145.84.26.38"/>
    </slice>
    <from sec="1183784820" usec="0"/>
    <to sec="1183784845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
2774[label="38.178.195.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
5440[label="38.178.195.129;s;1pkt 1fpkt", shape=hexagon, color=black];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.195.129:80, 165.206.144.104:2874}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2874: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2774--5440[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.144.104" dst_port="2874" src_ip="38.178.195.129" src_port="80"/>
    </slice>
    <from sec="1183784821" usec="0"/>
    <to sec="1183784882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
3040[label="35.62.49.168;d;276pkt 276fpkt", shape=diamond, color=yellow];
5442[label="35.62.49.168;d;276pkt 276fpkt", shape=hexagon, color=black];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:2967, 35.62.49.168:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 4754: (0.362319%)&lt;BR/&gt; 4516: (0.362319%)&lt;BR/&gt; 3988: (0.362319%)&lt;BR/&gt; 3472: (0.362319%)&gt;];
}
3040--5442[label="1;276pkt 276fpkt"];
</description>
    <slice>
      <filter dst_ip="35.62.49.168" src_port="2967"/>
    </slice>
    <from sec="1183784823" usec="0"/>
    <to sec="1183785012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
3049[label="51.186.173.220;s;10pkt 10fpkt", shape=diamond, color=yellow];
5447[label="51.186.173.220;s;10pkt 10fpkt", shape=hexagon, color=black];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{51.186.173.220:*, 145.84.74.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2141: (5%)&lt;BR/&gt; 2140: (5%)&lt;BR/&gt; 2138: (5%)&lt;BR/&gt; 2136: (5%)&gt;];
}
3049--5447[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.74.152" dst_port="80" src_ip="51.186.173.220"/>
    </slice>
    <from sec="1183784841" usec="0"/>
    <to sec="1183784889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
3073[label="209.83.10.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
3074[label="161.203.202.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
5455[label="161.203.202.37;s;1pkt 1fpkt", shape=hexagon, color=black];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.202.37:80, 209.83.10.34:4163}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4163: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3073--3074[label="1;1pkt 1fpkt"];
3073--5455[label="1;1pkt 1fpkt"];
3074--5455[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.83.10.34" dst_port="4163" src_ip="161.203.202.37" src_port="80"/>
    </slice>
    <from sec="1183784867" usec="0"/>
    <to sec="1183785042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
2249[label="206.207.159.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
5458[label="206.207.159.172;s;1pkt 1fpkt", shape=hexagon, color=black];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.207.159.172:0, 215.184.40.234:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2249--3001[label="1;1pkt 1fpkt"];
2249--5458[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.40.234" src_ip="206.207.159.172"/>
    </slice>
    <from sec="1183784867" usec="0"/>
    <to sec="1183784978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
503[label="165.206.145.1;s;28pkt 28fpkt", shape=diamond, color=yellow];
856[label="219.84.210.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
3080[label="215.48.7.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
3839[label="219.84.210.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
5134[label="165.206.145.1;s;22pkt 22fpkt", shape=hexagon, color=black];
5461[label="215.48.7.19;d;1pkt 1fpkt", shape=hexagon, color=black];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.145.1:*, 219.84.210.239:80}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4383: (3.7037%)&lt;BR/&gt; 3889: (2.77778%)&lt;BR/&gt; 4593: (1.85185%)&lt;BR/&gt; 4384: (1.85185%)&gt;];
}
503--856[label="1;1pkt 1fpkt"];
503--3080[label="1;1pkt 1fpkt"];
503--3839[label="1;1pkt 1fpkt"];
503--5134[label="1;22pkt 22fpkt"];
503--5461[label="1;1pkt 1fpkt"];
856--5134[label="1;1pkt 1fpkt"];
3080--5134[label="1;1pkt 1fpkt"];
3080--5461[label="1;1pkt 1fpkt"];
5134--5461[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.84.210.239" dst_port="80" src_ip="165.206.145.1"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
569[label="165.206.36.37;s;758pkt 758fpkt", shape=diamond, color=yellow];
701[label="219.171.158.139;d;169pkt 169fpkt", shape=diamond, color=yellow];
739[label="149.38.148.170;s;208pkt 208fpkt", shape=diamond, color=yellow];
2276[label="40.232.35.169;d;2pkt 2fpkt", shape=diamond, color=yellow];
3127[label="40.232.35.173;d;4pkt 4fpkt", shape=diamond, color=yellow];
4938[label="165.206.36.37;s;531pkt 531fpkt", shape=hexagon, color=black];
5476[label="40.232.35.173;d;4pkt 4fpkt", shape=hexagon, color=black];
5527[label="219.171.158.139;d;143pkt 143fpkt", shape=hexagon, color=black];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.36.37:80, *:*}[78.1799%]&lt;BR/&gt;{149.38.148.170:80, *:*}[21.0962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8076%)&lt;BR/&gt; 0: (0.329852%)&lt;BR/&gt; 1057: (0.192413%)&lt;BR/&gt; 56606: (0.137438%)&lt;BR/&gt; 55794: (0.137438%)&gt;];
}
569--701[label="1;169pkt 169fpkt"];
569--2202[label="0.285714;4pkt 4fpkt"];
569--3127[label="0.25;1pkt 1fpkt"];
569--3682[label="0.166667;1pkt 1fpkt"];
569--4938[label="1;531pkt 531fpkt"];
569--5476[label="0.25;1pkt 1fpkt"];
569--5527[label="1;143pkt 143fpkt"];
701--4938[label="0.769231;130pkt 130fpkt"];
701--5527[label="1;143pkt 143fpkt"];
739--1026[label="0.0833333;4pkt 4fpkt"];
739--2276[label="1;2pkt 2fpkt"];
739--3127[label="0.5;2pkt 2fpkt"];
739--4327[label="0.0487805;2pkt 2fpkt"];
739--5476[label="0.5;2pkt 2fpkt"];
3127--5476[label="1;4pkt 4fpkt"];
4938--5527[label="0.909091;130pkt 130fpkt"];
</description>
    <slice>
      <filter src_ip="165.206.36.37" src_port="80"/>
      <filter src_ip="149.38.148.170" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
866[label="1.216.26.73;s;48pkt 48fpkt", shape=diamond, color=yellow];
2078[label="1.216.24.184;s;227pkt 227fpkt", shape=diamond, color=yellow];
2599[label="1.216.24.197;s;139pkt 139fpkt", shape=diamond, color=yellow];
2951[label="145.84.74.192;d;72pkt 72fpkt", shape=diamond, color=yellow];
3102[label="38.178.206.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
3137[label="38.178.204.8;s;3pkt 3fpkt", shape=diamond, color=yellow];
4115[label="38.178.206.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
4151[label="38.178.204.132;s;2pkt 2fpkt", shape=diamond, color=yellow];
5293[label="214.7.142.212;d;85pkt 85fpkt", shape=hexagon, color=black];
5334[label="145.84.74.192;d;36pkt 36fpkt", shape=hexagon, color=black];
5468[label="38.178.206.117;s;1pkt 1fpkt", shape=hexagon, color=black];
5480[label="38.178.204.8;s;3pkt 3fpkt", shape=hexagon, color=black];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.216.24.184:80, *:*}[40.4635%]&lt;BR/&gt;{1.216.24.197:80, *:*}[24.7772%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34310: (0.323625%)&lt;BR/&gt; 34308: (0.323625%)&lt;BR/&gt; 34306: (0.323625%)&lt;BR/&gt; 34298: (0.323625%)&gt;];
}
866--2436[label="0.458333;22pkt 22fpkt"];
866--2560[label="0.0416667;2pkt 2fpkt"];
866--4162[label="0.0625;3pkt 3fpkt"];
866--4180[label="0.0208333;1pkt 1fpkt"];
866--4414[label="1;48pkt 48fpkt"];
866--5293[label="0.0416667;2pkt 2fpkt"];
866--5800[label="0.0625;3pkt 3fpkt"];
866--5806[label="1;48pkt 48fpkt"];
2078--2152[label="0.0621469;11pkt 11fpkt"];
2078--2186[label="0.145374;33pkt 33fpkt"];
2078--2273[label="0.0704846;16pkt 16fpkt"];
2078--2499[label="0.0969163;22pkt 22fpkt"];
2078--2560[label="0.0550459;6pkt 6fpkt"];
2078--3112[label="0.108108;8pkt 8fpkt"];
2078--3358[label="0.0212766;1pkt 1fpkt"];
2078--3728[label="0.047619;5pkt 5fpkt"];
2078--3747[label="0.0909091;1pkt 1fpkt"];
2078--3980[label="0.015625;1pkt 1fpkt"];
2078--4162[label="0.00881057;2pkt 2fpkt"];
2078--4168[label="0.0484581;11pkt 11fpkt"];
2078--4180[label="0.030837;7pkt 7fpkt"];
2078--4462[label="0.00980392;1pkt 1fpkt"];
2078--4525[label="0.0176211;4pkt 4fpkt"];
2078--4623[label="0.00469484;1pkt 1fpkt"];
2078--4760[label="0.0396476;9pkt 9fpkt"];
2078--4784[label="0.00440529;1pkt 1fpkt"];
2078--5256[label="1;227pkt 227fpkt"];
2078--5293[label="0.0470588;4pkt 4fpkt"];
2078--5702[label="0.0617284;5pkt 5fpkt"];
2078--5800[label="0.00881057;2pkt 2fpkt"];
2078--5827[label="0.00591716;1pkt 1fpkt"];
2078--5842[label="0.00469484;1pkt 1fpkt"];
2599--2951[label="0.0138889;1pkt 1fpkt"];
2599--3194[label="0.0298507;2pkt 2fpkt"];
2599--3641[label="0.0677966;4pkt 4fpkt"];
2599--3758[label="0.0909091;2pkt 2fpkt"];
2599--4162[label="0.028777;4pkt 4fpkt"];
2599--4168[label="0.0359712;5pkt 5fpkt"];
2599--4314[label="0.0555556;2pkt 2fpkt"];
2599--4553[label="0.00719424;1pkt 1fpkt"];
2599--4563[label="0.0535714;3pkt 3fpkt"];
2599--4623[label="0.0143885;2pkt 2fpkt"];
2599--5293[label="0.0352941;3pkt 3fpkt"];
2599--5332[label="1;85pkt 85fpkt"];
2599--5334[label="0.0277778;1pkt 1fpkt"];
2599--5346[label="0.107914;15pkt 15fpkt"];
2599--5510[label="0.0143885;2pkt 2fpkt"];
2599--5800[label="0.028777;4pkt 4fpkt"];
2599--5821[label="0.028777;4pkt 4fpkt"];
2599--5842[label="0.0143885;2pkt 2fpkt"];
2951--3102[label="1;1pkt 1fpkt"];
2951--3137[label="1;3pkt 3fpkt"];
2951--4115[label="1;1pkt 1fpkt"];
2951--4151[label="1;2pkt 2fpkt"];
2951--4198[label="0.0416667;3pkt 3fpkt"];
2951--4733[label="0.0416667;3pkt 3fpkt"];
2951--4787[label="0.0232558;1pkt 1fpkt"];
2951--5174[label="0.0694444;5pkt 5fpkt"];
2951--5269[label="0.0972222;7pkt 7fpkt"];
2951--5332[label="0.0138889;1pkt 1fpkt"];
2951--5334[label="1;36pkt 36fpkt"];
2951--5468[label="1;1pkt 1fpkt"];
2951--5480[label="1;3pkt 3fpkt"];
2951--5623[label="0.0138889;1pkt 1fpkt"];
2951--6866[label="0.0138889;1pkt 1fpkt"];
2951--6933[label="0.0138889;1pkt 1fpkt"];
3102--5334[label="1;1pkt 1fpkt"];
3102--5468[label="1;1pkt 1fpkt"];
3137--5334[label="1;3pkt 3fpkt"];
3137--5480[label="1;3pkt 3fpkt"];
5293--5320[label="0.0352941;3pkt 3fpkt"];
5293--5332[label="0.0235294;2pkt 2fpkt"];
5293--5538[label="0.0117647;1pkt 1fpkt"];
5293--5555[label="0.0117647;1pkt 1fpkt"];
5293--5556[label="0.0470588;4pkt 4fpkt"];
5293--5806[label="0.0416667;2pkt 2fpkt"];
5293--5825[label="0.0235294;2pkt 2fpkt"];
5293--6630[label="0.0588235;5pkt 5fpkt"];
5293--6747[label="0.0117647;1pkt 1fpkt"];
5293--6893[label="0.0235294;2pkt 2fpkt"];
5293--6933[label="0.0117647;1pkt 1fpkt"];
5293--6948[label="0.0117647;1pkt 1fpkt"];
5293--6996[label="0.0117647;1pkt 1fpkt"];
5293--7406[label="0.0235294;2pkt 2fpkt"];
5334--5468[label="1;1pkt 1fpkt"];
5334--5480[label="1;3pkt 3fpkt"];
5334--6866[label="0.0277778;1pkt 1fpkt"];
5334--6933[label="0.0277778;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="1.216.24.184" src_port="80"/>
      <filter src_ip="1.216.24.197" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
3148[label="34.26.21.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
5483[label="34.26.21.18;d;1pkt 1fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.36.122:8080, 34.26.21.18:46322}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46322: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
3148--5483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.26.21.18" dst_port="46322" src_ip="165.206.36.122" src_port="8080"/>
    </slice>
    <from sec="1183784933" usec="0"/>
    <to sec="1183784982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
314[label="197.3.131.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
1500[label="165.206.145.37;s;54pkt 54fpkt", shape=diamond, color=yellow];
1564[label="197.18.126.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
1825[label="198.11.127.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
1935[label="73.62.187.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
2243[label="6.169.128.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
3058[label="197.14.184.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
3306[label="79.157.161.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
3353[label="197.222.130.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
4490[label="197.18.126.147;d;1pkt 1fpkt", shape=hexagon, color=black];
4625[label="73.62.187.213;d;1pkt 1fpkt", shape=hexagon, color=black];
4860[label="198.11.127.106;d;1pkt 1fpkt", shape=hexagon, color=black];
5079[label="165.206.145.37;s;42pkt 42fpkt", shape=hexagon, color=black];
5487[label="197.3.131.4;d;1pkt 1fpkt", shape=hexagon, color=black];
5691[label="197.222.130.60;d;1pkt 1fpkt", shape=hexagon, color=black];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.145.37:53124, *:53124}[57.4074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53124: (77.9817%)&lt;BR/&gt; 53125: (2.75229%)&lt;BR/&gt; 35328: (1.83486%)&lt;BR/&gt; 0: (1.83486%)&lt;BR/&gt; 46251: (0.917431%)&gt;];
}
314--1500[label="1;1pkt 1fpkt"];
314--5079[label="1;1pkt 1fpkt"];
314--5487[label="1;1pkt 1fpkt"];
1500--1564[label="1;1pkt 1fpkt"];
1500--1825[label="1;1pkt 1fpkt"];
1500--1935[label="1;1pkt 1fpkt"];
1500--2243[label="1;1pkt 1fpkt"];
1500--3058[label="1;1pkt 1fpkt"];
1500--3306[label="1;1pkt 1fpkt"];
1500--3353[label="1;1pkt 1fpkt"];
1500--4490[label="1;1pkt 1fpkt"];
1500--4625[label="1;1pkt 1fpkt"];
1500--4860[label="1;1pkt 1fpkt"];
1500--5079[label="1;42pkt 42fpkt"];
1500--5487[label="1;1pkt 1fpkt"];
1500--5691[label="1;1pkt 1fpkt"];
1564--4490[label="1;1pkt 1fpkt"];
1564--5079[label="1;1pkt 1fpkt"];
1825--4860[label="1;1pkt 1fpkt"];
1825--5079[label="1;1pkt 1fpkt"];
1935--4625[label="1;1pkt 1fpkt"];
1935--5079[label="1;1pkt 1fpkt"];
2243--5079[label="1;1pkt 1fpkt"];
3058--5079[label="1;1pkt 1fpkt"];
3306--5079[label="1;1pkt 1fpkt"];
3353--5079[label="1;1pkt 1fpkt"];
3353--5691[label="1;1pkt 1fpkt"];
4490--5079[label="1;1pkt 1fpkt"];
4625--5079[label="1;1pkt 1fpkt"];
4860--5079[label="1;1pkt 1fpkt"];
5079--5487[label="1;1pkt 1fpkt"];
5079--5691[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53124" src_ip="165.206.145.37" src_port="53124"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
1038[label="37.48.211.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
5498[label="37.48.211.78;d;1pkt 1fpkt", shape=hexagon, color=black];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.52.94:34847, 37.48.211.78:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34847: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
1038--5498[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.48.211.78" dst_port="21" src_ip="215.184.52.94" src_port="34847"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
578[label="37.48.211.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
5504[label="37.48.211.96;d;1pkt 1fpkt", shape=hexagon, color=black];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.52.94:51343, 37.48.211.96:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51343: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
578--5504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="37.48.211.96" dst_port="21" src_ip="215.184.52.94" src_port="51343"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
3173[label="149.197.33.188;d;396pkt 396fpkt", shape=diamond, color=yellow];
5505[label="149.197.33.188;d;237pkt 237fpkt", shape=hexagon, color=black];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.197.33.188:42247}[71.4646%]&lt;BR/&gt;{51.246.68.191:*, 149.197.33.188:*}[23.2323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42247: (39.8104%)&lt;BR/&gt; 0: (4.2654%)&lt;BR/&gt; 80: (4.02844%)&lt;BR/&gt; 6881: (2.92259%)&lt;BR/&gt; 52525: (0.789889%)&gt;];
}
3173--5505[label="1;237pkt 237fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.33.188" src_ip="51.246.68.191"/>
      <filter dst_ip="149.197.33.188" dst_port="42247"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
2010[label="43.116.200.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
5511[label="43.116.200.124;s;1pkt 1fpkt", shape=hexagon, color=black];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.116.200.124:45478, 215.184.32.66:4523}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45478: (50%)&lt;BR/&gt; 4523: (50%)&gt;];
}
2010--5511[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.32.66" dst_port="4523" src_ip="43.116.200.124" src_port="45478"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
2693[label="1.216.26.66;d;30pkt 30fpkt", shape=diamond, color=yellow];
2977[label="204.183.77.149;d;45pkt 45fpkt", shape=diamond, color=yellow];
5522[label="145.84.184.125;s;116pkt 116fpkt", shape=hexagon, color=black];
6716[label="165.206.77.154;50pkt 50fpkt", shape=pentagon, color=darkviolet];
7344[label="165.206.77.154;50pkt 50fpkt", shape=invtriangle, color=brown];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:25}[37.931%]&lt;BR/&gt;{*:*, *:80}[22.8448%]&lt;BR/&gt;{165.206.77.154:*, *:*}[21.5517%]&lt;BR/&gt;{145.84.184.125:32781, *:53}[21.1207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (28.866%)&lt;BR/&gt; 53: (9.62199%)&lt;BR/&gt; 80: (9.27835%)&lt;BR/&gt; 32781: (8.41924%)&lt;BR/&gt; 0: (2.06186%)&gt;];
}
2693--2858[label="0.0333333;1pkt 1fpkt"];
2693--5063[label="1;26pkt 26fpkt"];
2693--5522[label="0.0333333;1pkt 1fpkt"];
2693--5891[label="0.1;3pkt 3fpkt"];
2693--5910[label="0.266667;8pkt 8fpkt"];
2693--5913[label="0.0333333;1pkt 1fpkt"];
2693--5924[label="0.1;3pkt 3fpkt"];
2693--5939[label="0.266667;8pkt 8fpkt"];
2693--5945[label="0.1;3pkt 3fpkt"];
2693--5960[label="0.266667;8pkt 8fpkt"];
2693--7323[label="0.0666667;2pkt 2fpkt"];
2693--7581[label="0.0666667;2pkt 2fpkt"];
2977--3222[label="0.0444444;2pkt 2fpkt"];
2977--3251[label="0.0666667;3pkt 3fpkt"];
2977--4288[label="0.0666667;3pkt 3fpkt"];
2977--4975[label="0.0444444;2pkt 2fpkt"];
2977--5144[label="0.0222222;1pkt 1fpkt"];
2977--5336[label="0.0769231;1pkt 1fpkt"];
2977--5351[label="1;24pkt 24fpkt"];
2977--5522[label="0.0444444;2pkt 2fpkt"];
2977--5529[label="0.0444444;2pkt 2fpkt"];
2977--5541[label="0.0666667;3pkt 3fpkt"];
2977--5890[label="0.0444444;2pkt 2fpkt"];
2977--5908[label="0.111111;5pkt 5fpkt"];
2977--5911[label="0.0444444;2pkt 2fpkt"];
2977--5923[label="0.0444444;2pkt 2fpkt"];
2977--5944[label="0.0444444;2pkt 2fpkt"];
2977--6157[label="0.04;1pkt 1fpkt"];
2977--6354[label="0.0555556;1pkt 1fpkt"];
2977--6360[label="0.0222222;1pkt 1fpkt"];
2977--6716[label="0.133333;6pkt 6fpkt"];
2977--6800[label="0.15;6pkt 6fpkt"];
2977--7344[label="0.133333;6pkt 6fpkt"];
2977--7373[label="0.15;6pkt 6fpkt"];
2977--7595[label="0.153846;6pkt 6fpkt"];
5522--5651[label="0.0769231;2pkt 2fpkt"];
5522--5890[label="0.00862069;1pkt 1fpkt"];
5522--5891[label="0.0172414;2pkt 2fpkt"];
5522--5908[label="0.00862069;1pkt 1fpkt"];
5522--5909[label="0.0344828;4pkt 4fpkt"];
5522--5910[label="0.00862069;1pkt 1fpkt"];
5522--5911[label="0.00862069;1pkt 1fpkt"];
5522--5912[label="0.0948276;11pkt 11fpkt"];
5522--5913[label="0.146552;17pkt 17fpkt"];
5522--5914[label="0.00862069;1pkt 1fpkt"];
5522--5923[label="0.00862069;1pkt 1fpkt"];
5522--5924[label="0.0172414;2pkt 2fpkt"];
5522--5938[label="0.0344828;4pkt 4fpkt"];
5522--5939[label="0.00862069;1pkt 1fpkt"];
5522--5944[label="0.00862069;1pkt 1fpkt"];
5522--5945[label="0.0172414;2pkt 2fpkt"];
5522--5959[label="0.0344828;4pkt 4fpkt"];
5522--5960[label="0.00862069;1pkt 1fpkt"];
6716--7344[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter src_ip="165.206.77.154"/>
      <filter dst_port="25"/>
      <filter dst_port="80"/>
      <filter dst_port="53" src_ip="145.84.184.125" src_port="32781"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
3239[label="1.216.24.241;s;106pkt 106fpkt", shape=diamond, color=yellow];
5553[label="145.84.235.87;d;17pkt 17fpkt", shape=hexagon, color=black];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.216.24.241:80, *:*}[86.8852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2015: (0.813008%)&lt;BR/&gt; 57635: (0.406504%)&lt;BR/&gt; 53146: (0.406504%)&lt;BR/&gt; 51040: (0.406504%)&gt;];
}
3239--3980[label="0.0625;4pkt 4fpkt"];
3239--4168[label="0.216981;23pkt 23fpkt"];
3239--4525[label="0.00943396;1pkt 1fpkt"];
3239--4784[label="0.0377358;4pkt 4fpkt"];
3239--5493[label="0.0555556;2pkt 2fpkt"];
3239--5534[label="1;99pkt 99fpkt"];
3239--5553[label="0.0588235;1pkt 1fpkt"];
3239--5821[label="0.122642;13pkt 13fpkt"];
3239--5827[label="0.0377358;4pkt 4fpkt"];
5553--6866[label="0.352941;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="1.216.24.241" src_port="80"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183785215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
2350[label="193.207.173.216;s;342pkt 342fpkt", shape=diamond, color=yellow];
5403[label="193.207.173.216;s;342pkt 342fpkt", shape=hexagon, color=black];
6950[label="193.207.173.216;346pkt 346fpkt", shape=pentagon, color=darkviolet];
7429[label="193.207.173.216;346pkt 346fpkt", shape=invtriangle, color=brown];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.207.173.216:80, 145.84.74.193:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34790: (0.145349%)&lt;BR/&gt; 34731: (0.145349%)&lt;BR/&gt; 34693: (0.145349%)&lt;BR/&gt; 34690: (0.145349%)&gt;];
}
2350--5403[label="1;342pkt 342fpkt"];
2350--6950[label="1;342pkt 342fpkt"];
2350--7429[label="1;342pkt 342fpkt"];
5403--6950[label="1;342pkt 342fpkt"];
5403--7429[label="1;342pkt 342fpkt"];
6950--7429[label="1;346pkt 346fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.74.193" src_ip="193.207.173.216" src_port="80"/>
    </slice>
    <from sec="1183784716" usec="0"/>
    <to sec="1183785287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
2168[label="161.203.204.222;s;36pkt 36fpkt", shape=diamond, color=yellow];
2303[label="40.197.117.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
5558[label="161.203.204.222;s;28pkt 28fpkt", shape=hexagon, color=black];
6975[label="161.203.204.222;41pkt 41fpkt", shape=pentagon, color=darkviolet];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.204.222:25, *:*}[87.8049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (44.8113%)&lt;BR/&gt; 80: (5.18868%)&lt;BR/&gt; 40392: (1.88679%)&lt;BR/&gt; 63070: (1.41509%)&lt;BR/&gt; 59783: (1.41509%)&gt;];
}
2168--2303[label="1;1pkt 1fpkt"];
2168--5558[label="1;28pkt 28fpkt"];
2168--6975[label="1;36pkt 36fpkt"];
2303--5558[label="1;1pkt 1fpkt"];
2303--6975[label="1;1pkt 1fpkt"];
5558--6975[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="161.203.204.222" src_port="25"/>
    </slice>
    <from sec="1183784418" usec="0"/>
    <to sec="1183785292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
2176[label="149.221.173.13;d;194pkt 194fpkt", shape=diamond, color=yellow];
5562[label="149.221.173.13;d;170pkt 170fpkt", shape=hexagon, color=black];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 149.221.173.13:*}[47.9381%]&lt;BR/&gt;{*:*, 149.221.173.13:16338}[37.1134%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (23.2143%)&lt;BR/&gt; 16338: (19.7802%)&lt;BR/&gt; 0: (9.34066%)&lt;BR/&gt; 16275: (2.47253%)&lt;BR/&gt; 113: (0.961538%)&gt;];
}
2176--5562[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_ip="149.221.173.13" src_port="25"/>
      <filter dst_ip="149.221.173.13" dst_port="16338"/>
    </slice>
    <from sec="1183784422" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
382[label="144.46.34.204;s;1565pkt 1565fpkt", shape=diamond, color=yellow];
829[label="196.160.194.150;d;52pkt 52fpkt", shape=diamond, color=yellow];
2037[label="196.235.238.217;d;2pkt 2fpkt", shape=diamond, color=yellow];
2616[label="144.46.248.34;s;46pkt 46fpkt", shape=diamond, color=yellow];
3574[label="145.84.98.0;s;3pkt 3fpkt", shape=diamond, color=yellow];
5105[label="144.46.34.204;s;1154pkt 1154fpkt", shape=hexagon, color=black];
5563[label="196.160.194.150;d;48pkt 48fpkt", shape=hexagon, color=black];
6541[label="144.46.248.109;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.34.204:123, *:123}[59.7356%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (77.5322%)&lt;BR/&gt; 3128: (1.5315%)&lt;BR/&gt; 80: (0.870171%)&lt;BR/&gt; 1026: (0.435085%)&lt;BR/&gt; 1024: (0.435085%)&gt;];
}
382--829[label="0.0192308;1pkt 1fpkt"];
382--2037[label="0.5;1pkt 1fpkt"];
382--2202[label="0.0714286;1pkt 1fpkt"];
382--5105[label="1;1154pkt 1154fpkt"];
382--5563[label="0.0208333;1pkt 1fpkt"];
829--1123[label="0.0192308;1pkt 1fpkt"];
829--1221[label="0.826923;43pkt 43fpkt"];
829--2616[label="0.0434783;2pkt 2fpkt"];
829--5105[label="0.0192308;1pkt 1fpkt"];
829--5563[label="1;48pkt 48fpkt"];
829--6541[label="0.666667;2pkt 2fpkt"];
2037--3574[label="0.5;1pkt 1fpkt"];
2037--5105[label="0.5;1pkt 1fpkt"];
2616--2656[label="0.0217391;1pkt 1fpkt"];
2616--5563[label="0.0434783;2pkt 2fpkt"];
5105--5563[label="0.0208333;1pkt 1fpkt"];
5563--6541[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="144.46.34.204" src_port="123"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
2669[label="53.156.16.33;s;1pkt 1fpkt", shape=diamond, color=yellow];
5573[label="53.156.16.33;s;1pkt 1fpkt", shape=hexagon, color=black];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.156.16.33:25986, 214.10.198.181:1353}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25986: (50%)&lt;BR/&gt; 1353: (50%)&gt;];
}
2669--5573[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.181" dst_port="1353" src_ip="53.156.16.33" src_port="25986"/>
    </slice>
    <from sec="1183784650" usec="0"/>
    <to sec="1183785151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
3462[label="72.202.128.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
3463[label="144.46.243.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
5601[label="72.202.128.250;d;1pkt 1fpkt", shape=hexagon, color=black];
6773[label="144.46.243.168;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7364[label="144.46.243.168;1pkt 1fpkt", shape=invtriangle, color=brown];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.243.168:29219, 72.202.128.250:47420}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47420: (50%)&lt;BR/&gt; 29219: (50%)&gt;];
}
3462--3463[label="1;1pkt 1fpkt"];
3462--5601[label="1;1pkt 1fpkt"];
3462--6773[label="1;1pkt 1fpkt"];
3462--7364[label="1;1pkt 1fpkt"];
3463--5601[label="1;1pkt 1fpkt"];
3463--6773[label="1;1pkt 1fpkt"];
3463--7364[label="1;1pkt 1fpkt"];
5601--6773[label="1;1pkt 1fpkt"];
5601--7364[label="1;1pkt 1fpkt"];
6773--7364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.202.128.250" dst_port="47420" src_ip="144.46.243.168" src_port="29219"/>
    </slice>
    <from sec="1183785006" usec="0"/>
    <to sec="1183785018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
3315[label="165.206.145.139;d;70pkt 70fpkt", shape=diamond, color=yellow];
3471[label="206.184.115.0;s;8pkt 8fpkt", shape=diamond, color=yellow];
4074[label="193.180.102.174;s;2pkt 2fpkt", shape=diamond, color=yellow];
5602[label="206.184.115.0;s;8pkt 8fpkt", shape=hexagon, color=black];
5964[label="206.184.115.0;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.115.74.239:80, 165.206.145.139:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8947%)&lt;BR/&gt; 2244: (2.10526%)&lt;BR/&gt; 2243: (2.10526%)&lt;BR/&gt; 2240: (2.10526%)&lt;BR/&gt; 2239: (2.10526%)&gt;];
}
3315--3471[label="1;8pkt 8fpkt"];
3315--3527[label="0.0227273;1pkt 1fpkt"];
3315--3653[label="0.0571429;4pkt 4fpkt"];
3315--4074[label="1;2pkt 2fpkt"];
3315--5602[label="1;8pkt 8fpkt"];
3315--5627[label="0.0227273;1pkt 1fpkt"];
3315--5964[label="1;7pkt 7fpkt"];
3471--5602[label="1;8pkt 8fpkt"];
3471--5964[label="1;7pkt 7fpkt"];
5602--5964[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.145.139" src_ip="90.115.74.239" src_port="80"/>
    </slice>
    <from sec="1183784692" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
3472[label="56.122.230.50;d;8pkt 8fpkt", shape=diamond, color=yellow];
5603[label="56.122.230.50;d;8pkt 8fpkt", shape=hexagon, color=black];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.74.152:80, 56.122.230.50:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63227: (6.25%)&lt;BR/&gt; 60129: (6.25%)&lt;BR/&gt; 58926: (6.25%)&lt;BR/&gt; 58528: (6.25%)&gt;];
}
3472--5603[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="56.122.230.50" src_ip="145.84.74.152" src_port="80"/>
    </slice>
    <from sec="1183785013" usec="0"/>
    <to sec="1183785142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
3479[label="217.240.6.112;d;102pkt 102fpkt", shape=diamond, color=yellow];
5605[label="217.240.6.112;d;100pkt 100fpkt", shape=hexagon, color=black];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.40.209:*, 217.240.6.112:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65352: (0.49505%)&lt;BR/&gt; 65351: (0.49505%)&lt;BR/&gt; 65350: (0.49505%)&lt;BR/&gt; 65349: (0.49505%)&gt;];
}
3479--5605[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="217.240.6.112" dst_port="80" src_ip="215.184.40.209"/>
    </slice>
    <from sec="1183785019" usec="0"/>
    <to sec="1183785114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
3498[label="38.178.201.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
5607[label="38.178.201.6;s;1pkt 1fpkt", shape=hexagon, color=black];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.201.6:80, 165.206.23.63:57365}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57365: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3498--5607[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.23.63" dst_port="57365" src_ip="38.178.201.6" src_port="80"/>
    </slice>
    <from sec="1183785041" usec="0"/>
    <to sec="1183785049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
322[label="136.119.128.42;s;1095pkt 1095fpkt", shape=diamond, color=yellow];
539[label="72.60.142.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
998[label="79.8.32.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
1666[label="72.90.27.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
1733[label="72.94.161.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
2070[label="72.92.62.47;d;2pkt 2fpkt", shape=diamond, color=yellow];
2079[label="1.231.78.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
2129[label="206.144.184.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
2153[label="196.160.154.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
2172[label="7.87.44.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
2213[label="214.104.35.105;d;2pkt 2fpkt", shape=diamond, color=yellow];
2440[label="197.173.84.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
2535[label="72.52.135.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
2602[label="192.145.162.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
2605[label="192.144.133.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
2613[label="207.29.7.118;d;2pkt 2fpkt", shape=diamond, color=yellow];
2614[label="73.33.202.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
2630[label="1.231.64.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
2652[label="79.142.172.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
2874[label="198.52.62.170;d;2pkt 2fpkt", shape=diamond, color=yellow];
2878[label="7.193.245.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
2889[label="192.148.140.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
2989[label="207.20.19.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
2993[label="1.231.10.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
3159[label="72.54.14.66;d;2pkt 2fpkt", shape=diamond, color=yellow];
3175[label="72.92.158.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
3190[label="72.103.99.232;d;2pkt 2fpkt", shape=diamond, color=yellow];
3218[label="206.144.187.164;d;2pkt 2fpkt", shape=diamond, color=yellow];
3249[label="214.214.205.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
3285[label="193.176.161.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
3296[label="192.187.66.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
3601[label="79.8.43.24;d;2pkt 2fpkt", shape=diamond, color=yellow];
3658[label="206.144.163.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
3975[label="1.231.159.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
4005[label="1.231.17.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
4762[label="72.92.62.47;d;1pkt 1fpkt", shape=hexagon, color=black];
4814[label="7.87.44.59;d;1pkt 1fpkt", shape=hexagon, color=black];
4836[label="214.104.35.105;d;2pkt 2fpkt", shape=hexagon, color=black];
5248[label="198.52.62.170;d;2pkt 2fpkt", shape=hexagon, color=black];
5340[label="73.33.202.34;d;1pkt 1fpkt", shape=hexagon, color=black];
5370[label="1.231.10.29;d;1pkt 1fpkt", shape=hexagon, color=black];
5570[label="79.142.172.47;d;1pkt 1fpkt", shape=hexagon, color=black];
5611[label="136.119.128.42;s;960pkt 960fpkt", shape=hexagon, color=black];
5657[label="206.144.187.164;d;2pkt 2fpkt", shape=hexagon, color=black];
5674[label="7.131.86.50;d;4pkt 4fpkt", shape=hexagon, color=black];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.128.42:*, *:*}[99.9088%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (1.08747%)&lt;BR/&gt; 21588: (0.732861%)&lt;BR/&gt; 8921: (0.614657%)&lt;BR/&gt; 5107: (0.472813%)&lt;BR/&gt; 20367: (0.425532%)&gt;];
}
322--411[label="1;1pkt 1fpkt"];
322--463[label="1;4pkt 4fpkt"];
322--539[label="1;1pkt 1fpkt"];
322--998[label="1;1pkt 1fpkt"];
322--1666[label="1;1pkt 1fpkt"];
322--1733[label="1;1pkt 1fpkt"];
322--2070[label="1;2pkt 2fpkt"];
322--2079[label="1;1pkt 1fpkt"];
322--2129[label="1;2pkt 2fpkt"];
322--2153[label="1;1pkt 1fpkt"];
322--2172[label="1;1pkt 1fpkt"];
322--2213[label="1;2pkt 2fpkt"];
322--2440[label="1;1pkt 1fpkt"];
322--2535[label="1;2pkt 2fpkt"];
322--2597[label="0.75;3pkt 3fpkt"];
322--2602[label="1;1pkt 1fpkt"];
322--2605[label="1;1pkt 1fpkt"];
322--2613[label="1;2pkt 2fpkt"];
322--2614[label="1;1pkt 1fpkt"];
322--2630[label="1;1pkt 1fpkt"];
322--2652[label="1;1pkt 1fpkt"];
322--2874[label="1;2pkt 2fpkt"];
322--2878[label="1;1pkt 1fpkt"];
322--2879[label="1;1pkt 1fpkt"];
322--2889[label="1;1pkt 1fpkt"];
322--2989[label="1;1pkt 1fpkt"];
322--2993[label="1;1pkt 1fpkt"];
322--3159[label="1;2pkt 2fpkt"];
322--3175[label="1;1pkt 1fpkt"];
322--3190[label="1;2pkt 2fpkt"];
322--3218[label="1;2pkt 2fpkt"];
322--3249[label="1;1pkt 1fpkt"];
322--3285[label="1;1pkt 1fpkt"];
322--3296[label="1;1pkt 1fpkt"];
322--3601[label="1;2pkt 2fpkt"];
322--3658[label="1;1pkt 1fpkt"];
322--3975[label="1;1pkt 1fpkt"];
322--4005[label="1;2pkt 2fpkt"];
322--4762[label="1;1pkt 1fpkt"];
322--4814[label="1;1pkt 1fpkt"];
322--4836[label="1;2pkt 2fpkt"];
322--5248[label="1;2pkt 2fpkt"];
322--5257[label="1;1pkt 1fpkt"];
322--5340[label="1;1pkt 1fpkt"];
322--5370[label="1;1pkt 1fpkt"];
322--5570[label="1;1pkt 1fpkt"];
322--5611[label="1;960pkt 960fpkt"];
322--5657[label="1;2pkt 2fpkt"];
322--5674[label="0.75;3pkt 3fpkt"];
322--5854[label="1;1pkt 1fpkt"];
322--5891[label="0.00182648;2pkt 2fpkt"];
322--5910[label="0.00182648;2pkt 2fpkt"];
322--5913[label="0.000913242;1pkt 1fpkt"];
322--5915[label="0.000913242;1pkt 1fpkt"];
322--5924[label="0.00182648;2pkt 2fpkt"];
322--5939[label="0.00182648;2pkt 2fpkt"];
322--5945[label="0.00182648;2pkt 2fpkt"];
322--5960[label="0.00182648;2pkt 2fpkt"];
539--5611[label="1;1pkt 1fpkt"];
998--5611[label="1;1pkt 1fpkt"];
1666--5611[label="1;1pkt 1fpkt"];
1733--5611[label="1;1pkt 1fpkt"];
2070--4762[label="1;1pkt 1fpkt"];
2070--5611[label="1;2pkt 2fpkt"];
2079--5611[label="1;1pkt 1fpkt"];
2129--5611[label="1;2pkt 2fpkt"];
2153--5611[label="1;1pkt 1fpkt"];
2172--4814[label="1;1pkt 1fpkt"];
2172--5611[label="1;1pkt 1fpkt"];
2213--4836[label="1;2pkt 2fpkt"];
2213--5611[label="1;2pkt 2fpkt"];
2440--5611[label="1;1pkt 1fpkt"];
2535--5611[label="1;2pkt 2fpkt"];
2602--5611[label="1;1pkt 1fpkt"];
2605--5611[label="1;1pkt 1fpkt"];
2613--5611[label="1;2pkt 2fpkt"];
2614--5340[label="1;1pkt 1fpkt"];
2614--5611[label="1;1pkt 1fpkt"];
2630--5611[label="1;1pkt 1fpkt"];
2652--5570[label="1;1pkt 1fpkt"];
2652--5611[label="1;1pkt 1fpkt"];
2874--5248[label="1;2pkt 2fpkt"];
2874--5611[label="1;2pkt 2fpkt"];
2878--5611[label="1;1pkt 1fpkt"];
2889--5611[label="1;1pkt 1fpkt"];
2989--5611[label="1;1pkt 1fpkt"];
2993--5370[label="1;1pkt 1fpkt"];
2993--5611[label="1;1pkt 1fpkt"];
3159--5611[label="1;2pkt 2fpkt"];
3175--5611[label="1;1pkt 1fpkt"];
3190--5611[label="1;2pkt 2fpkt"];
3218--5611[label="1;2pkt 2fpkt"];
3218--5657[label="1;2pkt 2fpkt"];
3249--5611[label="1;1pkt 1fpkt"];
3285--5611[label="1;1pkt 1fpkt"];
3296--5611[label="1;1pkt 1fpkt"];
3601--5611[label="1;2pkt 2fpkt"];
3658--5611[label="1;1pkt 1fpkt"];
3975--5611[label="1;1pkt 1fpkt"];
4005--5611[label="1;2pkt 2fpkt"];
4762--5611[label="1;1pkt 1fpkt"];
4814--5611[label="1;1pkt 1fpkt"];
4836--5611[label="1;2pkt 2fpkt"];
5248--5611[label="1;2pkt 2fpkt"];
5340--5611[label="1;1pkt 1fpkt"];
5370--5611[label="1;1pkt 1fpkt"];
5570--5611[label="1;1pkt 1fpkt"];
5611--5657[label="1;2pkt 2fpkt"];
5611--5674[label="0.75;3pkt 3fpkt"];
5611--5854[label="1;1pkt 1fpkt"];
5611--5891[label="0.00208333;2pkt 2fpkt"];
5611--5910[label="0.00208333;2pkt 2fpkt"];
5611--5913[label="0.00104167;1pkt 1fpkt"];
5611--5915[label="0.00104167;1pkt 1fpkt"];
5611--5924[label="0.00208333;2pkt 2fpkt"];
5611--5939[label="0.00208333;2pkt 2fpkt"];
5611--5945[label="0.00208333;2pkt 2fpkt"];
5611--5960[label="0.00208333;2pkt 2fpkt"];
5674--6535[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.119.128.42"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
1335[label="165.206.148.161;d;180pkt 180fpkt", shape=diamond, color=yellow];
1742[label="165.206.173.226;d;57pkt 57fpkt", shape=diamond, color=yellow];
5619[label="72.12.78.193;s;73pkt 73fpkt", shape=hexagon, color=black];
6250[label="208.199.64.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 165.206.148.161:*}[61.0169%]&lt;BR/&gt;{72.12.78.193:80, *:*}[24.7458%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5884%)&lt;BR/&gt; 7235: (2.41158%)&lt;BR/&gt; 39862: (0.321543%)&lt;BR/&gt; 39848: (0.321543%)&lt;BR/&gt; 39846: (0.321543%)&gt;];
}
1335--1571[label="0.191781;14pkt 14fpkt"];
1335--1990[label="0.0909091;1pkt 1fpkt"];
1335--2554[label="0.0149254;1pkt 1fpkt"];
1335--5023[label="1;180pkt 180fpkt"];
1335--5619[label="0.191781;14pkt 14fpkt"];
1335--6250[label="1;1pkt 1fpkt"];
1742--2121[label="0.0175439;1pkt 1fpkt"];
1742--2954[label="0.385965;22pkt 22fpkt"];
1742--4198[label="0.0175439;1pkt 1fpkt"];
1742--4789[label="0.0175439;1pkt 1fpkt"];
1742--4811[label="1;43pkt 43fpkt"];
1742--5619[label="0.0175439;1pkt 1fpkt"];
1742--6364[label="0.385965;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="72.12.78.193" src_port="80"/>
      <filter dst_ip="165.206.148.161" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
3044[label="165.206.145.2;d;68pkt 68fpkt", shape=diamond, color=yellow];
3527[label="72.12.78.216;s;44pkt 44fpkt", shape=diamond, color=yellow];
5444[label="165.206.145.2;d;65pkt 65fpkt", shape=hexagon, color=black];
6984[label="215.177.64.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7443[label="215.177.64.225;2pkt 2fpkt", shape=invtriangle, color=brown];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 165.206.145.2:*}[57.7982%]&lt;BR/&gt;{72.12.78.216:80, *:*}[39.4495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2376%)&lt;BR/&gt; 443: (2.76243%)&lt;BR/&gt; 1417: (1.10497%)&lt;BR/&gt; 1411: (1.10497%)&lt;BR/&gt; 1383: (0.828729%)&gt;];
}
3044--3527[label="0.0681818;3pkt 3fpkt"];
3044--5444[label="1;65pkt 65fpkt"];
3044--5627[label="0.0681818;3pkt 3fpkt"];
3044--6355[label="0.0588235;2pkt 2fpkt"];
3044--6984[label="1;2pkt 2fpkt"];
3044--7443[label="1;2pkt 2fpkt"];
3527--4021[label="0.103448;3pkt 3fpkt"];
3527--4251[label="0.0227273;1pkt 1fpkt"];
3527--4537[label="0.0454545;2pkt 2fpkt"];
3527--5166[label="0.159091;7pkt 7fpkt"];
3527--5444[label="0.0681818;3pkt 3fpkt"];
3527--5627[label="1;44pkt 44fpkt"];
5444--5627[label="0.0681818;3pkt 3fpkt"];
5444--6355[label="0.0588235;2pkt 2fpkt"];
5444--6984[label="1;2pkt 2fpkt"];
5444--7443[label="1;2pkt 2fpkt"];
6984--7443[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="72.12.78.216" src_port="80"/>
      <filter dst_ip="165.206.145.2" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
2912[label="145.84.163.28;d;42pkt 42fpkt", shape=diamond, color=yellow];
6021[label="198.64.45.10;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7103[label="198.64.45.10;5pkt 5fpkt", shape=invtriangle, color=brown];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.44.212.72:80, 145.84.163.28:*}[59.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2094: (2.88462%)&lt;BR/&gt; 2085: (2.88462%)&lt;BR/&gt; 2050: (2.88462%)&lt;BR/&gt; 2013: (2.88462%)&gt;];
}
2912--3327[label="0.4;2pkt 2fpkt"];
2912--6021[label="1;5pkt 5fpkt"];
2912--6449[label="0.4;2pkt 2fpkt"];
2912--7103[label="1;5pkt 5fpkt"];
6021--7103[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.163.28" src_ip="193.44.212.72" src_port="80"/>
    </slice>
    <from sec="1183784404" usec="0"/>
    <to sec="1183785213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
1280[label="145.84.109.0;s;98pkt 98fpkt", shape=diamond, color=yellow];
2858[label="145.84.184.125;s;157pkt 157fpkt", shape=diamond, color=yellow];
3251[label="215.184.40.78;s;59pkt 59fpkt", shape=diamond, color=yellow];
5651[label="198.62.227.86;d;26pkt 26fpkt", shape=hexagon, color=black];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, *:*}[29.7619%]&lt;BR/&gt;{145.84.109.0:*, *:*}[29.1667%]&lt;BR/&gt;{*:80, *:*}[22.9167%]&lt;BR/&gt;{145.84.184.125:32781, *:53}[21.7262%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (19.2647%)&lt;BR/&gt; 80: (16.3235%)&lt;BR/&gt; 53: (12.2059%)&lt;BR/&gt; 32781: (10.7353%)&lt;BR/&gt; 0: (2.35294%)&gt;];
}
1280--1527[label="0.0102041;1pkt 1fpkt"];
1280--1648[label="0.0120482;1pkt 1fpkt"];
1280--2024[label="0.0116279;1pkt 1fpkt"];
1280--2138[label="0.0102041;1pkt 1fpkt"];
1280--2513[label="0.0384615;1pkt 1fpkt"];
1280--3015[label="0.0104167;1pkt 1fpkt"];
1280--4327[label="0.097561;4pkt 4fpkt"];
1280--4382[label="0.0306122;3pkt 3fpkt"];
1280--4795[label="1;80pkt 80fpkt"];
1280--5651[label="0.0384615;1pkt 1fpkt"];
1280--5890[label="0.0102041;1pkt 1fpkt"];
1280--5908[label="0.0102041;1pkt 1fpkt"];
1280--5911[label="0.0204082;2pkt 2fpkt"];
1280--5923[label="0.0102041;1pkt 1fpkt"];
1280--5944[label="0.0102041;1pkt 1fpkt"];
2858--2977[label="0.0444444;2pkt 2fpkt"];
2858--3166[label="0.008;1pkt 1fpkt"];
2858--3258[label="0.00980392;1pkt 1fpkt"];
2858--3279[label="0.0238095;1pkt 1fpkt"];
2858--3967[label="0.0136986;1pkt 1fpkt"];
2858--4306[label="0.0254777;4pkt 4fpkt"];
2858--4478[label="0.0127389;2pkt 2fpkt"];
2858--4508[label="0.0194805;3pkt 3fpkt"];
2858--4702[label="0.0175439;1pkt 1fpkt"];
2858--5063[label="0.0384615;1pkt 1fpkt"];
2858--5106[label="0.0070922;1pkt 1fpkt"];
2858--5351[label="0.0833333;2pkt 2fpkt"];
2858--5501[label="0.00980392;1pkt 1fpkt"];
2858--5522[label="1;116pkt 116fpkt"];
2858--5639[label="0.00636943;1pkt 1fpkt"];
2858--5651[label="0.0769231;2pkt 2fpkt"];
2858--5890[label="0.00636943;1pkt 1fpkt"];
2858--5891[label="0.0127389;2pkt 2fpkt"];
2858--5908[label="0.00636943;1pkt 1fpkt"];
2858--5909[label="0.0254777;4pkt 4fpkt"];
2858--5910[label="0.00636943;1pkt 1fpkt"];
2858--5911[label="0.00636943;1pkt 1fpkt"];
2858--5912[label="0.0700637;11pkt 11fpkt"];
2858--5913[label="0.10828;17pkt 17fpkt"];
2858--5914[label="0.00636943;1pkt 1fpkt"];
2858--5923[label="0.00636943;1pkt 1fpkt"];
2858--5924[label="0.0127389;2pkt 2fpkt"];
2858--5938[label="0.0254777;4pkt 4fpkt"];
2858--5939[label="0.00636943;1pkt 1fpkt"];
2858--5944[label="0.00636943;1pkt 1fpkt"];
2858--5945[label="0.0127389;2pkt 2fpkt"];
2858--5959[label="0.0254777;4pkt 4fpkt"];
2858--5960[label="0.00636943;1pkt 1fpkt"];
3251--3279[label="0.0714286;3pkt 3fpkt"];
3251--3936[label="0.025;1pkt 1fpkt"];
3251--4327[label="0.0243902;1pkt 1fpkt"];
3251--5351[label="0.0416667;1pkt 1fpkt"];
3251--5409[label="0.0169492;1pkt 1fpkt"];
3251--5541[label="1;59pkt 59fpkt"];
3251--5651[label="0.0384615;1pkt 1fpkt"];
3251--5908[label="0.0338983;2pkt 2fpkt"];
5651--6079[label="0.115385;3pkt 3fpkt"];
5651--6354[label="0.0555556;1pkt 1fpkt"];
5651--7009[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.84.109.0"/>
      <filter src_port="25"/>
      <filter src_port="80"/>
      <filter dst_port="53" src_ip="145.84.184.125" src_port="32781"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
3425[label="145.84.110.51;d;263pkt 263fpkt", shape=diamond, color=yellow];
3667[label="145.84.218.96;d;441pkt 441fpkt", shape=diamond, color=yellow];
3691[label="197.16.188.162;s;167pkt 167fpkt", shape=diamond, color=yellow];
3724[label="72.139.180.162;s;209pkt 209fpkt", shape=diamond, color=yellow];
3734[label="72.139.147.69;s;22pkt 22fpkt", shape=diamond, color=yellow];
3769[label="197.26.129.91;s;15pkt 15fpkt", shape=diamond, color=yellow];
5689[label="197.16.188.162;s;109pkt 109fpkt", shape=hexagon, color=black];
5772[label="197.26.129.91;s;15pkt 15fpkt", shape=hexagon, color=black];
6348[label="72.139.147.69;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6697[label="72.139.146.149;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.84.110.51:*}[38.9503%]&lt;BR/&gt;{72.139.180.162:80, 145.84.218.96:*}[25%]&lt;BR/&gt;{197.16.188.162:80, 145.84.218.96:*}[21.9613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6863%)&lt;BR/&gt; 5000: (0.313725%)&lt;BR/&gt; 60693: (0.117647%)&lt;BR/&gt; 60243: (0.117647%)&lt;BR/&gt; 58398: (0.117647%)&gt;];
}
3425--3691[label="0.0419162;7pkt 7fpkt"];
3425--3724[label="0.0526316;11pkt 11fpkt"];
3425--3734[label="1;22pkt 22fpkt"];
3425--3769[label="1;15pkt 15fpkt"];
3425--5689[label="0.0642202;7pkt 7fpkt"];
3425--5772[label="1;15pkt 15fpkt"];
3425--6348[label="0.913043;21pkt 21fpkt"];
3425--6697[label="0.909091;10pkt 10fpkt"];
3667--3691[label="0.952096;159pkt 159fpkt"];
3667--3724[label="0.866029;181pkt 181fpkt"];
3667--5538[label="0.0212766;2pkt 2fpkt"];
3667--5689[label="0.926606;101pkt 101fpkt"];
3667--6127[label="0.00411523;1pkt 1fpkt"];
3667--6606[label="0.00819672;1pkt 1fpkt"];
3667--6697[label="0.0909091;1pkt 1fpkt"];
3667--6747[label="0.0157068;3pkt 3fpkt"];
3667--7131[label="0.00411523;1pkt 1fpkt"];
3667--7294[label="0.00819672;1pkt 1fpkt"];
3691--4525[label="0.00598802;1pkt 1fpkt"];
3691--5689[label="1;109pkt 109fpkt"];
3734--6348[label="0.954545;21pkt 21fpkt"];
3769--5772[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.110.51" src_port="80"/>
      <filter dst_ip="145.84.218.96" src_ip="72.139.180.162" src_port="80"/>
      <filter dst_ip="145.84.218.96" src_ip="197.16.188.162" src_port="80"/>
    </slice>
    <from sec="1183784681" usec="0"/>
    <to sec="1183785275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
3413[label="149.216.53.152;s;165pkt 165fpkt", shape=diamond, color=yellow];
5699[label="149.216.53.152;s;118pkt 118fpkt", shape=hexagon, color=black];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.53.152:*, 196.116.173.146:80}[24.2424%]&lt;BR/&gt;{149.216.53.152:*, 198.196.64.68:80}[21.2121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54636: (0.353357%)&lt;BR/&gt; 54633: (0.353357%)&lt;BR/&gt; 54609: (0.353357%)&lt;BR/&gt; 54608: (0.353357%)&gt;];
}
3413--5699[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter dst_ip="196.116.173.146" dst_port="80" src_ip="149.216.53.152"/>
      <filter dst_ip="198.196.64.68" dst_port="80" src_ip="149.216.53.152"/>
    </slice>
    <from sec="1183784966" usec="0"/>
    <to sec="1183785179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
3364[label="215.184.45.99;s;5pkt 5fpkt", shape=diamond, color=yellow];
3440[label="196.132.227.32;d;1pkt 1fpkt", shape=diamond, color=yellow];
5701[label="196.132.227.32;d;1pkt 1fpkt", shape=hexagon, color=black];
6496[label="215.184.45.99;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7253[label="215.184.45.99;2pkt 2fpkt", shape=invtriangle, color=brown];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.45.99:80, 42.131.92.6:43581}[20%]&lt;BR/&gt;{215.184.45.99:80, 196.132.227.32:42894}[20%]&lt;BR/&gt;{215.184.45.99:80, 42.131.83.73:35142}[20%]&lt;BR/&gt;{215.184.45.99:80, 34.92.209.120:60955}[20%]&lt;BR/&gt;{215.184.45.99:80, 42.131.80.226:39120}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42894: (20.8333%)&lt;BR/&gt; 43581: (12.5%)&lt;BR/&gt; 35142: (8.33333%)&lt;BR/&gt; 60955: (4.16667%)&gt;];
}
3364--3440[label="1;1pkt 1fpkt"];
3364--5701[label="1;1pkt 1fpkt"];
3364--6496[label="1;3pkt 3fpkt"];
3364--7253[label="1;2pkt 2fpkt"];
3440--5701[label="1;1pkt 1fpkt"];
3440--6496[label="1;1pkt 1fpkt"];
3440--7253[label="1;1pkt 1fpkt"];
5701--6496[label="1;1pkt 1fpkt"];
5701--7253[label="1;1pkt 1fpkt"];
6496--7253[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="42.131.80.226" dst_port="39120" src_ip="215.184.45.99" src_port="80"/>
      <filter dst_ip="34.92.209.120" dst_port="60955" src_ip="215.184.45.99" src_port="80"/>
      <filter dst_ip="42.131.83.73" dst_port="35142" src_ip="215.184.45.99" src_port="80"/>
      <filter dst_ip="196.132.227.32" dst_port="42894" src_ip="215.184.45.99" src_port="80"/>
      <filter dst_ip="42.131.92.6" dst_port="43581" src_ip="215.184.45.99" src_port="80"/>
    </slice>
    <from sec="1183784924" usec="0"/>
    <to sec="1183785053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
3486[label="38.178.200.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
5706[label="38.178.200.224;s;1pkt 1fpkt", shape=hexagon, color=black];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.200.224:80, 145.84.228.48:33101}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33101: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3486--5706[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.228.48" dst_port="33101" src_ip="38.178.200.224" src_port="80"/>
    </slice>
    <from sec="1183785024" usec="0"/>
    <to sec="1183785111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
933[label="165.206.144.54;d;16pkt 16fpkt", shape=diamond, color=yellow];
1382[label="210.125.252.6;s;22pkt 22fpkt", shape=diamond, color=yellow];
5710[label="210.125.252.6;s;16pkt 16fpkt", shape=hexagon, color=black];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.125.252.6:80, 165.206.144.54:*}[72.7273%]&lt;BR/&gt;{210.125.252.6:80, 165.206.146.194:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1467: (2.77778%)&lt;BR/&gt; 1465: (2.77778%)&lt;BR/&gt; 1464: (2.77778%)&lt;BR/&gt; 1463: (2.77778%)&gt;];
}
933--1382[label="1;16pkt 16fpkt"];
933--5710[label="1;16pkt 16fpkt"];
1382--5710[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.144.54" src_ip="210.125.252.6" src_port="80"/>
      <filter dst_ip="165.206.146.194" src_ip="210.125.252.6" src_port="80"/>
    </slice>
    <from sec="1183785051" usec="0"/>
    <to sec="1183785218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
3822[label="206.246.126.25;s;3pkt 3fpkt", shape=diamond, color=yellow];
5725[label="206.246.126.25;s;3pkt 3fpkt", shape=hexagon, color=black];
6128[label="206.246.126.25;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.246.126.25:80, 145.84.181.176:26762}[33.3333%]&lt;BR/&gt;{206.246.126.25:80, 145.84.181.176:26763}[33.3333%]&lt;BR/&gt;{206.246.126.25:80, 145.84.181.176:26801}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26801: (16.6667%)&lt;BR/&gt; 26763: (16.6667%)&lt;BR/&gt; 26762: (16.6667%)&gt;];
}
3822--5684[label="1;3pkt 3fpkt"];
3822--5725[label="1;3pkt 3fpkt"];
3822--6128[label="1;3pkt 3fpkt"];
5725--6128[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.181.176" dst_port="26801" src_ip="206.246.126.25" src_port="80"/>
      <filter dst_ip="145.84.181.176" dst_port="26763" src_ip="206.246.126.25" src_port="80"/>
      <filter dst_ip="145.84.181.176" dst_port="26762" src_ip="206.246.126.25" src_port="80"/>
    </slice>
    <from sec="1183785091" usec="0"/>
    <to sec="1183785108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
3823[label="205.74.138.79;s;2pkt 2fpkt", shape=diamond, color=yellow];
5726[label="205.74.138.79;s;2pkt 2fpkt", shape=hexagon, color=black];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.74.138.79:143, 149.197.251.1:60284}[50%]&lt;BR/&gt;{205.74.138.79:143, 149.197.251.1:62570}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 143: (50%)&lt;BR/&gt; 62570: (25%)&lt;BR/&gt; 60284: (25%)&gt;];
}
3823--5726[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.251.1" dst_port="62570" src_ip="205.74.138.79" src_port="143"/>
      <filter dst_ip="149.197.251.1" dst_port="60284" src_ip="205.74.138.79" src_port="143"/>
    </slice>
    <from sec="1183785092" usec="0"/>
    <to sec="1183785122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
3838[label="134.229.243.49;s;2pkt 2fpkt", shape=diamond, color=yellow];
5728[label="134.229.243.49;s;2pkt 2fpkt", shape=hexagon, color=black];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.229.243.49:1064, 215.184.39.2:3125}[50%]&lt;BR/&gt;{134.229.243.49:1067, 215.184.39.2:3125}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 1067: (25%)&lt;BR/&gt; 1064: (25%)&gt;];
}
3838--5728[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.39.2" dst_port="3125" src_ip="134.229.243.49" src_port="1067"/>
      <filter dst_ip="215.184.39.2" dst_port="3125" src_ip="134.229.243.49" src_port="1064"/>
    </slice>
    <from sec="1183785111" usec="0"/>
    <to sec="1183785138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
2093[label="37.9.139.212;s;52pkt 52fpkt", shape=diamond, color=yellow];
5749[label="37.9.139.212;s;52pkt 52fpkt", shape=hexagon, color=black];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.9.139.212:21, 215.184.52.94:*}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.0385%)&lt;BR/&gt; 0: (1.92308%)&lt;BR/&gt; 60538: (0.961538%)&lt;BR/&gt; 60508: (0.961538%)&lt;BR/&gt; 60477: (0.961538%)&gt;];
}
2093--5749[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.52.94" src_ip="37.9.139.212" src_port="21"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
4001[label="201.243.19.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
5765[label="201.243.19.31;s;1pkt 1fpkt", shape=hexagon, color=black];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.243.19.31:22434, 214.10.198.181:1436}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22434: (50%)&lt;BR/&gt; 1436: (50%)&gt;];
}
4001--5765[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.10.198.181" dst_port="1436" src_ip="201.243.19.31" src_port="22434"/>
    </slice>
    <from sec="1183784851" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.574612,1.65021,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
512[label="215.160.101.121;s;2156pkt 2156fpkt", shape=diamond, color=yellow];
1529[label="215.184.36.189;d;373pkt 373fpkt", shape=diamond, color=yellow];
3871[label="215.184.35.32;d;175pkt 175fpkt", shape=diamond, color=yellow];
4653[label="215.184.36.189;d;301pkt 301fpkt", shape=hexagon, color=black];
4923[label="215.208.35.141;s;1339pkt 1339fpkt", shape=hexagon, color=black];
5138[label="215.160.101.121;s;1473pkt 1473fpkt", shape=hexagon, color=black];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.160.101.121:*, *:1433}[60.5448%]&lt;BR/&gt;{215.208.35.141:*, *:1433}[39.371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.9656%)&lt;BR/&gt; 1278: (0.085955%)&lt;BR/&gt; 4484: (0.0773595%)&lt;BR/&gt; 3226: (0.0773595%)&lt;BR/&gt; 3207: (0.0773595%)&gt;];
}
512--1529[label="0.512064;191pkt 191fpkt"];
512--3871[label="0.988571;173pkt 173fpkt"];
512--4653[label="0.524917;158pkt 158fpkt"];
512--5138[label="1;1473pkt 1473fpkt"];
512--5892[label="0.166846;155pkt 155fpkt"];
512--5925[label="0.166846;155pkt 155fpkt"];
512--5946[label="0.166667;155pkt 155fpkt"];
1529--4653[label="1;301pkt 301fpkt"];
1529--4923[label="0.316354;118pkt 118fpkt"];
1529--5138[label="0.36193;135pkt 135fpkt"];
1529--5892[label="0.077748;29pkt 29fpkt"];
1529--5925[label="0.077748;29pkt 29fpkt"];
1529--5946[label="0.077748;29pkt 29fpkt"];
3871--4901[label="0.00571429;1pkt 1fpkt"];
3871--5138[label="0.714286;125pkt 125fpkt"];
3871--5831[label="0.00571429;1pkt 1fpkt"];
3871--5892[label="0.0857143;15pkt 15fpkt"];
3871--5906[label="0.00571429;1pkt 1fpkt"];
3871--5925[label="0.0857143;15pkt 15fpkt"];
3871--5936[label="0.00571429;1pkt 1fpkt"];
3871--5946[label="0.0857143;15pkt 15fpkt"];
3871--5957[label="0.00571429;1pkt 1fpkt"];
4653--4923[label="0.392027;118pkt 118fpkt"];
4653--5138[label="0.448505;135pkt 135fpkt"];
4653--5892[label="0.0963455;29pkt 29fpkt"];
4653--5925[label="0.0963455;29pkt 29fpkt"];
4653--5946[label="0.0963455;29pkt 29fpkt"];
4923--5486[label="0.000746826;1pkt 1fpkt"];
4923--5892[label="0.1324;123pkt 123fpkt"];
4923--5925[label="0.1324;123pkt 123fpkt"];
4923--5946[label="0.132258;123pkt 123fpkt"];
5138--5892[label="0.166846;155pkt 155fpkt"];
5138--5925[label="0.166846;155pkt 155fpkt"];
5138--5946[label="0.166667;155pkt 155fpkt"];
</description>
    <slice>
      <filter dst_port="1433" src_ip="215.160.101.121"/>
      <filter dst_port="1433" src_ip="215.208.35.141"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.149.68.0"/>
    </slice>
    <from sec="1183785243" usec="0"/>
    <to sec="1183785256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.203.128.0"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.228.97.2"/>
    </slice>
    <from sec="1183784684" usec="0"/>
    <to sec="1183784723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.46.248.2"/>
    </slice>
    <from sec="1183785011" usec="0"/>
    <to sec="1183785283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.205.3"/>
    </slice>
    <from sec="1183785157" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_408{
style=filled;
color=gray75;
2194[label="196.163.44.164;d;64pkt 64fpkt", shape=diamond, color=yellow];
5993[label="149.197.226.4;35pkt 35fpkt", shape=pentagon, color=darkviolet];
7091[label="149.197.226.4;35pkt 35fpkt", shape=invtriangle, color=brown];
stat408[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.226.4:443, 196.163.44.164:*}[50%]&lt;BR/&gt;{149.197.226.192:443, 196.163.44.164:*}[40.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.0149%)&lt;BR/&gt; 80: (2.23881%)&lt;BR/&gt; 13633: (1.1194%)&lt;BR/&gt; 13629: (1.1194%)&lt;BR/&gt; 13501: (1.1194%)&gt;];
}
2194--2203[label="0.509434;27pkt 27fpkt"];
2194--4831[label="0.55102;27pkt 27fpkt"];
2194--5348[label="1;64pkt 64fpkt"];
2194--5993[label="0.942857;33pkt 33fpkt"];
2194--7091[label="0.942857;33pkt 33fpkt"];
5993--7091[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.44.164" src_ip="149.197.226.4" src_port="443"/>
      <filter dst_ip="196.163.44.164" src_ip="149.197.226.192" src_port="443"/>
    </slice>
    <from sec="1183784431" usec="0"/>
    <to sec="1183785212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.50.185.5"/>
    </slice>
    <from sec="1183784553" usec="0"/>
    <to sec="1183784674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.12.227.5"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183784436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.201.13.6"/>
    </slice>
    <from sec="1183784441" usec="0"/>
    <to sec="1183785290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.51.19.7"/>
    </slice>
    <from sec="1183784973" usec="0"/>
    <to sec="1183784983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
3984[label="149.2.209.7;s;10pkt 10fpkt", shape=diamond, color=yellow];
3997[label="42.131.90.14;d;5pkt 5fpkt", shape=diamond, color=yellow];
5761[label="149.2.209.7;s;10pkt 10fpkt", shape=hexagon, color=black];
6007[label="149.2.209.7;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.2.209.7:80, *:*}[75%]&lt;BR/&gt;{*:80, 42.131.90.14:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39273: (5.40541%)&lt;BR/&gt; 57579: (4.05405%)&lt;BR/&gt; 57474: (4.05405%)&lt;BR/&gt; 55356: (4.05405%)&gt;];
}
3984--3997[label="0.2;1pkt 1fpkt"];
3984--5761[label="1;10pkt 10fpkt"];
3984--6007[label="1;10pkt 10fpkt"];
3997--5276[label="0.4;2pkt 2fpkt"];
3997--5761[label="0.2;1pkt 1fpkt"];
3997--6007[label="0.2;1pkt 1fpkt"];
5761--6007[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="149.2.209.7" src_port="80"/>
      <filter dst_ip="42.131.90.14" src_port="80"/>
    </slice>
    <from sec="1183784712" usec="0"/>
    <to sec="1183785289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.93.150.9"/>
    </slice>
    <from sec="1183784684" usec="0"/>
    <to sec="1183784694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.99.11.10"/>
    </slice>
    <from sec="1183785178" usec="0"/>
    <to sec="1183785191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.116.53.10"/>
    </slice>
    <from sec="1183784655" usec="0"/>
    <to sec="1183784751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_417{
style=filled;
color=gray75;
1190[label="214.193.74.134;s;7pkt 7fpkt", shape=diamond, color=yellow];
2068[label="145.84.8.81;d;26pkt 26fpkt", shape=diamond, color=yellow];
4759[label="145.84.8.81;d;23pkt 23fpkt", shape=hexagon, color=black];
6026[label="208.56.182.10;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6297[label="215.0.51.58;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6398[label="146.134.172.76;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7107[label="208.56.182.10;3pkt 3fpkt", shape=invtriangle, color=brown];
7186[label="215.0.51.58;17pkt 17fpkt", shape=invtriangle, color=brown];
stat417[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.0.51.58:80, 145.84.8.81:*}[56.25%]&lt;BR/&gt;{214.193.74.134:80, *:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4806: (2.0202%)&lt;BR/&gt; 4805: (2.0202%)&lt;BR/&gt; 4761: (2.0202%)&lt;BR/&gt; 4760: (2.0202%)&gt;];
}
1190--1267[label="0.571429;4pkt 4fpkt"];
1190--2068[label="0.428571;3pkt 3fpkt"];
1190--4385[label="0.571429;4pkt 4fpkt"];
1190--4759[label="0.428571;3pkt 3fpkt"];
2068--4759[label="1;23pkt 23fpkt"];
2068--6026[label="0.333333;1pkt 1fpkt"];
2068--6297[label="1;18pkt 18fpkt"];
2068--6398[label="1;2pkt 2fpkt"];
2068--7107[label="0.333333;1pkt 1fpkt"];
2068--7186[label="1;17pkt 17fpkt"];
4759--6297[label="1;18pkt 18fpkt"];
4759--7186[label="1;17pkt 17fpkt"];
6026--7107[label="1;3pkt 3fpkt"];
6297--7186[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="214.193.74.134" src_port="80"/>
      <filter dst_ip="145.84.8.81" src_ip="215.0.51.58" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
1913[label="38.178.192.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
6027[label="38.178.192.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.192.10:80, 167.82.215.155:2001}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2001: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1913--6027[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.82.215.155" dst_port="2001" src_ip="38.178.192.10" src_port="80"/>
    </slice>
    <from sec="1183784656" usec="0"/>
    <to sec="1183784708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.48.7.12"/>
    </slice>
    <from sec="1183785174" usec="0"/>
    <to sec="1183785178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08399,1.76206,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
124[label="7.171.81.12s;256pkt 256fpkt", shape=rectangle, color=red];
6034[label="7.171.81.12;144pkt 144fpkt", shape=pentagon, color=darkviolet];
7109[label="7.171.81.12;144pkt 144fpkt", shape=invtriangle, color=brown];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.171.81.12:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
124--6034[label="1;144pkt 144fpkt"];
124--7109[label="1;144pkt 144fpkt"];
6034--7109[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="7.171.81.12" src_port="1025"/>
    </slice>
    <from sec="1183785210" usec="0"/>
    <to sec="1183785224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
2061[label="165.206.201.101;d;33pkt 33fpkt", shape=diamond, color=yellow];
2404[label="38.178.200.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
3046[label="38.178.204.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
3124[label="38.178.200.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
5445[label="38.178.204.4;s;1pkt 1fpkt", shape=hexagon, color=black];
5991[label="38.178.204.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6071[label="38.178.200.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7119[label="38.178.200.16;1pkt 1fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.240.78.10:80, 165.206.201.101:*}[42.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54766: (5%)&lt;BR/&gt; 54757: (5%)&lt;BR/&gt; 54748: (2.5%)&lt;BR/&gt; 54769: (1.25%)&gt;];
}
2061--2097[label="0.030303;1pkt 1fpkt"];
2061--2404[label="1;1pkt 1fpkt"];
2061--2557[label="0.030303;1pkt 1fpkt"];
2061--3046[label="1;1pkt 1fpkt"];
2061--3124[label="1;1pkt 1fpkt"];
2061--4370[label="0.030303;1pkt 1fpkt"];
2061--4765[label="0.121212;4pkt 4fpkt"];
2061--5445[label="1;1pkt 1fpkt"];
2061--5991[label="1;1pkt 1fpkt"];
2061--6040[label="0.2;3pkt 3fpkt"];
2061--6071[label="1;1pkt 1fpkt"];
2061--7119[label="1;1pkt 1fpkt"];
3046--5445[label="1;1pkt 1fpkt"];
3046--5991[label="1;1pkt 1fpkt"];
3124--6071[label="1;1pkt 1fpkt"];
3124--7119[label="1;1pkt 1fpkt"];
5445--5991[label="1;1pkt 1fpkt"];
6071--7119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.201.101" src_ip="40.240.78.10" src_port="80"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183784957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.201.12.16"/>
    </slice>
    <from sec="1183784412" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.131.93.16"/>
    </slice>
    <from sec="1183784832" usec="0"/>
    <to sec="1183784971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.114.184.16"/>
    </slice>
    <from sec="1183784607" usec="0"/>
    <to sec="1183784633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.12.197.17"/>
    </slice>
    <from sec="1183784419" usec="0"/>
    <to sec="1183785180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
4116[label="206.206.250.17;s;2pkt 2fpkt", shape=diamond, color=yellow];
6080[label="206.206.250.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.206.250.17:80, 145.84.81.132:1028}[50%]&lt;BR/&gt;{206.206.250.17:80, 145.84.81.132:1029}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1029: (25%)&lt;BR/&gt; 1028: (25%)&gt;];
}
4116--6080[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.81.132" dst_port="1029" src_ip="206.206.250.17" src_port="80"/>
      <filter dst_ip="145.84.81.132" dst_port="1028" src_ip="206.206.250.17" src_port="80"/>
    </slice>
    <from sec="1183785175" usec="0"/>
    <to sec="1183785186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.71.0.19"/>
    </slice>
    <from sec="1183784933" usec="0"/>
    <to sec="1183784983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.149.0.19"/>
    </slice>
    <from sec="1183784806" usec="0"/>
    <to sec="1183784824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.48.7.19"/>
    </slice>
    <from sec="1183784874" usec="0"/>
    <to sec="1183784884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.13.20"/>
    </slice>
    <from sec="1183784449" usec="0"/>
    <to sec="1183785269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.937382,1.75687,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
139[label="213.142.105.21s;229pkt 229fpkt", shape=rectangle, color=red];
6100[label="213.142.105.21;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.142.105.21:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 4998: (0.207039%)&lt;BR/&gt; 4991: (0.207039%)&lt;BR/&gt; 4979: (0.207039%)&lt;BR/&gt; 4950: (0.207039%)&gt;];
}
139--6100[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="213.142.105.21"/>
    </slice>
    <from sec="1183785144" usec="0"/>
    <to sec="1183785166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.192.21"/>
    </slice>
    <from sec="1183785008" usec="0"/>
    <to sec="1183785144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.200.21"/>
    </slice>
    <from sec="1183785135" usec="0"/>
    <to sec="1183785146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="11.99.233.21"/>
    </slice>
    <from sec="1183784751" usec="0"/>
    <to sec="1183784811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.247.150.22"/>
    </slice>
    <from sec="1183784939" usec="0"/>
    <to sec="1183785001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.226.96.24"/>
    </slice>
    <from sec="1183785249" usec="0"/>
    <to sec="1183785263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.206.24"/>
    </slice>
    <from sec="1183785278" usec="0"/>
    <to sec="1183785287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
3625[label="149.197.50.26;s;34pkt 34fpkt", shape=diamond, color=yellow];
6130[label="149.197.50.26;37pkt 37fpkt", shape=pentagon, color=darkviolet];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.50.26:80, 7.151.125.17:*}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5915%)&lt;BR/&gt; 123: (2.8169%)&lt;BR/&gt; 59692: (1.40845%)&lt;BR/&gt; 59019: (1.40845%)&lt;BR/&gt; 58918: (1.40845%)&gt;];
}
3625--6130[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="7.151.125.17" src_ip="149.197.50.26" src_port="80"/>
    </slice>
    <from sec="1183784410" usec="0"/>
    <to sec="1183785294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.203.254.26"/>
    </slice>
    <from sec="1183784653" usec="0"/>
    <to sec="1183785177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.18.35.28"/>
    </slice>
    <from sec="1183785259" usec="0"/>
    <to sec="1183785277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
1770[label="145.84.122.30;s;56pkt 56fpkt", shape=diamond, color=yellow];
1780[label="196.163.44.185;d;52pkt 52fpkt", shape=diamond, color=yellow];
6148[label="145.84.122.30;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.122.30:80, 196.163.44.185:*}[69.3333%]&lt;BR/&gt;{145.84.122.30:80, 193.139.80.150:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60897: (0.819672%)&lt;BR/&gt; 60896: (0.819672%)&lt;BR/&gt; 60895: (0.819672%)&lt;BR/&gt; 60876: (0.819672%)&gt;];
}
1770--1780[label="1;52pkt 52fpkt"];
1770--6148[label="1;56pkt 56fpkt"];
1780--6148[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="196.163.44.185" src_ip="145.84.122.30" src_port="80"/>
      <filter dst_ip="193.139.80.150" src_ip="145.84.122.30" src_port="80"/>
    </slice>
    <from sec="1183784458" usec="0"/>
    <to sec="1183785081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.116.142.30"/>
    </slice>
    <from sec="1183784884" usec="0"/>
    <to sec="1183784912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.250.138.31"/>
    </slice>
    <from sec="1183785129" usec="0"/>
    <to sec="1183785233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.161.31"/>
    </slice>
    <from sec="1183784418" usec="0"/>
    <to sec="1183785285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.119.134.33"/>
    </slice>
    <from sec="1183784434" usec="0"/>
    <to sec="1183784528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.16.98.34"/>
    </slice>
    <from sec="1183784680" usec="0"/>
    <to sec="1183784744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.227.34"/>
    </slice>
    <from sec="1183784417" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.228.121.40"/>
    </slice>
    <from sec="1183784465" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11457,1.76863,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
744[label="78.8.209.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
6211[label="78.8.209.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7160[label="78.8.209.40;1pkt 1fpkt", shape=invtriangle, color=brown];
7520[label="78.8.209.40;1pkt 1fpkt", shape=invhouse, color=bisque];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.8.209.40:1156, 215.184.42.144:3125}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 1156: (50%)&gt;];
}
744--961[label="1;1pkt 1fpkt"];
744--6211[label="1;1pkt 1fpkt"];
744--7160[label="1;1pkt 1fpkt"];
744--7520[label="1;1pkt 1fpkt"];
6211--7160[label="1;1pkt 1fpkt"];
6211--7520[label="1;1pkt 1fpkt"];
7160--7520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="78.8.209.40" src_port="1156"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183784418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.157.255.43"/>
    </slice>
    <from sec="1183784410" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.625917,1.64079,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
850[label="145.84.181.44;s;6pkt 6fpkt", shape=diamond, color=yellow];
890[label="214.145.46.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
4826[label="145.84.181.44;s;6pkt 6fpkt", shape=hexagon, color=black];
6227[label="145.84.181.44;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.181.44:80, 7.151.124.174:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 20609: (10%)&lt;BR/&gt; 57420: (7.5%)&lt;BR/&gt; 40551: (7.5%)&lt;BR/&gt; 40502: (7.5%)&gt;];
}
850--890[label="1;1pkt 1fpkt"];
850--4826[label="1;6pkt 6fpkt"];
850--6227[label="0.833333;5pkt 5fpkt"];
890--4826[label="1;1pkt 1fpkt"];
890--6227[label="1;1pkt 1fpkt"];
4826--6227[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="7.151.124.174" src_ip="145.84.181.44" src_port="80"/>
    </slice>
    <from sec="1183784435" usec="0"/>
    <to sec="1183785282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.58.96.45"/>
    </slice>
    <from sec="1183784880" usec="0"/>
    <to sec="1183785201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.169.16.48"/>
    </slice>
    <from sec="1183785104" usec="0"/>
    <to sec="1183785120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.43.150.48"/>
    </slice>
    <from sec="1183785057" usec="0"/>
    <to sec="1183785069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.48.7.49"/>
    </slice>
    <from sec="1183785252" usec="0"/>
    <to sec="1183785255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.147.49"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.30.76.53"/>
    </slice>
    <from sec="1183784652" usec="0"/>
    <to sec="1183784741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.193.33.55"/>
    </slice>
    <from sec="1183784662" usec="0"/>
    <to sec="1183784684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.153.107.55"/>
    </slice>
    <from sec="1183784795" usec="0"/>
    <to sec="1183784820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.108.56"/>
    </slice>
    <from sec="1183784427" usec="0"/>
    <to sec="1183785282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.6.58"/>
    </slice>
    <from sec="1183784440" usec="0"/>
    <to sec="1183785293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.68.5.59"/>
    </slice>
    <from sec="1183785045" usec="0"/>
    <to sec="1183785085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.97.79.62"/>
    </slice>
    <from sec="1183784843" usec="0"/>
    <to sec="1183784924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.217.16.65"/>
    </slice>
    <from sec="1183785248" usec="0"/>
    <to sec="1183785274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.148.53.65"/>
    </slice>
    <from sec="1183784404" usec="0"/>
    <to sec="1183785181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.21.133.68"/>
    </slice>
    <from sec="1183785085" usec="0"/>
    <to sec="1183785113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.171.173.68"/>
    </slice>
    <from sec="1183784895" usec="0"/>
    <to sec="1183784915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
852[label="78.8.53.70;s;2pkt 2fpkt", shape=diamond, color=yellow];
6350[label="78.8.53.70;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.8.53.70:49250, 215.184.42.144:3125}[50%]&lt;BR/&gt;{78.8.53.70:49254, 215.184.42.144:3125}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 49254: (25%)&lt;BR/&gt; 49250: (25%)&gt;];
}
852--961[label="1;2pkt 2fpkt"];
852--6350[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="78.8.53.70" src_port="49254"/>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="78.8.53.70" src_port="49250"/>
    </slice>
    <from sec="1183784437" usec="0"/>
    <to sec="1183784517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.68.87.71"/>
    </slice>
    <from sec="1183784698" usec="0"/>
    <to sec="1183784751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.33.144.71"/>
    </slice>
    <from sec="1183784682" usec="0"/>
    <to sec="1183784697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.69.105.72"/>
    </slice>
    <from sec="1183784638" usec="0"/>
    <to sec="1183784699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.10.196.72"/>
    </slice>
    <from sec="1183784408" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.54.73"/>
    </slice>
    <from sec="1183784409" usec="0"/>
    <to sec="1183785212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.197.130.73"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.67.74"/>
    </slice>
    <from sec="1183784671" usec="0"/>
    <to sec="1183785050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.6.130.74"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.147.74"/>
    </slice>
    <from sec="1183784461" usec="0"/>
    <to sec="1183785209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.169.160.74"/>
    </slice>
    <from sec="1183784455" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.10.196.74"/>
    </slice>
    <from sec="1183784404" usec="0"/>
    <to sec="1183785295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.143.224.74"/>
    </slice>
    <from sec="1183784634" usec="0"/>
    <to sec="1183784934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.32.3.76"/>
    </slice>
    <from sec="1183785269" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.6.111.76"/>
    </slice>
    <from sec="1183784824" usec="0"/>
    <to sec="1183784856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.240.84.78"/>
    </slice>
    <from sec="1183785021" usec="0"/>
    <to sec="1183785093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.206.79"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.161.220.79"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.84.25.80"/>
    </slice>
    <from sec="1183784404" usec="0"/>
    <to sec="1183785181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.150.161.81"/>
    </slice>
    <from sec="1183785255" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.174.177.88"/>
    </slice>
    <from sec="1183784763" usec="0"/>
    <to sec="1183784832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.121.239.88"/>
    </slice>
    <from sec="1183784752" usec="0"/>
    <to sec="1183785301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.200.89"/>
    </slice>
    <from sec="1183785266" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
6452[label="214.10.230.89;108pkt 108fpkt", shape=pentagon, color=darkviolet];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.10.230.89:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="214.10.230.89"/>
    </slice>
    <from sec="1183784408" usec="0"/>
    <to sec="1183785293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.40.103.90"/>
    </slice>
    <from sec="1183785081" usec="0"/>
    <to sec="1183785152" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.145.28.91"/>
    </slice>
    <from sec="1183784949" usec="0"/>
    <to sec="1183785086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.32.216.92"/>
    </slice>
    <from sec="1183784978" usec="0"/>
    <to sec="1183785028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.41.40.93"/>
    </slice>
    <from sec="1183785276" usec="0"/>
    <to sec="1183785288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.0.74.94"/>
    </slice>
    <from sec="1183785186" usec="0"/>
    <to sec="1183785244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.131.223.94"/>
    </slice>
    <from sec="1183784643" usec="0"/>
    <to sec="1183784657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.48.212.96"/>
    </slice>
    <from sec="1183784908" usec="0"/>
    <to sec="1183784942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.34.157.97"/>
    </slice>
    <from sec="1183785014" usec="0"/>
    <to sec="1183785141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.0.40.98"/>
    </slice>
    <from sec="1183784408" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.204.100"/>
    </slice>
    <from sec="1183784499" usec="0"/>
    <to sec="1183784512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2397[label="4.28.161.103;s;2pkt 2fpkt", shape=diamond, color=yellow];
6513[label="4.28.161.103;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.28.161.103:2620, 215.184.42.144:3125}[50%]&lt;BR/&gt;{4.28.161.103:2623, 215.184.42.144:3125}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3125: (50%)&lt;BR/&gt; 2623: (25%)&lt;BR/&gt; 2620: (25%)&gt;];
}
2397--6513[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="4.28.161.103" src_port="2623"/>
      <filter dst_ip="215.184.42.144" dst_port="3125" src_ip="4.28.161.103" src_port="2620"/>
    </slice>
    <from sec="1183784757" usec="0"/>
    <to sec="1183784856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.215.40.104"/>
    </slice>
    <from sec="1183785249" usec="0"/>
    <to sec="1183785272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.130.66.104"/>
    </slice>
    <from sec="1183784724" usec="0"/>
    <to sec="1183784824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.209.155.108"/>
    </slice>
    <from sec="1183784649" usec="0"/>
    <to sec="1183784687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.152.109"/>
    </slice>
    <from sec="1183785167" usec="0"/>
    <to sec="1183785185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.62.214.112"/>
    </slice>
    <from sec="1183785257" usec="0"/>
    <to sec="1183785294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.10.65.114"/>
    </slice>
    <from sec="1183784407" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.110.66.115"/>
    </slice>
    <from sec="1183785072" usec="0"/>
    <to sec="1183785162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.192.36.116"/>
    </slice>
    <from sec="1183784739" usec="0"/>
    <to sec="1183784814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.224.164.118"/>
    </slice>
    <from sec="1183784922" usec="0"/>
    <to sec="1183784926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.51.131.120"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.70.183.122"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.51.197.123"/>
    </slice>
    <from sec="1183785153" usec="0"/>
    <to sec="1183785167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.104.204.123"/>
    </slice>
    <from sec="1183784869" usec="0"/>
    <to sec="1183784893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.103.8.133"/>
    </slice>
    <from sec="1183785020" usec="0"/>
    <to sec="1183785028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.167.133"/>
    </slice>
    <from sec="1183784577" usec="0"/>
    <to sec="1183785027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.2.194.140"/>
    </slice>
    <from sec="1183784701" usec="0"/>
    <to sec="1183784715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.46.16.142"/>
    </slice>
    <from sec="1183785181" usec="0"/>
    <to sec="1183785209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.127.34.145"/>
    </slice>
    <from sec="1183784845" usec="0"/>
    <to sec="1183784868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.68.234.145"/>
    </slice>
    <from sec="1183784905" usec="0"/>
    <to sec="1183784973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.66.147"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="161.203.230.148"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.162.217.151"/>
    </slice>
    <from sec="1183785180" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
1915[label="205.116.52.152;s;1pkt 1fpkt", shape=diamond, color=yellow];
6710[label="205.116.52.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7343[label="205.116.52.152;1pkt 1fpkt", shape=invtriangle, color=brown];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.116.52.152:80, 214.7.140.101:53384}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53384: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1915--5114[label="1;1pkt 1fpkt"];
1915--6710[label="1;1pkt 1fpkt"];
1915--7343[label="1;1pkt 1fpkt"];
6710--7343[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.140.101" dst_port="53384" src_ip="205.116.52.152" src_port="80"/>
    </slice>
    <from sec="1183784657" usec="0"/>
    <to sec="1183784756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.157.226.152"/>
    </slice>
    <from sec="1183785135" usec="0"/>
    <to sec="1183785163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.219.154"/>
    </slice>
    <from sec="1183785052" usec="0"/>
    <to sec="1183785139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.71.77.156"/>
    </slice>
    <from sec="1183784694" usec="0"/>
    <to sec="1183784740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.197.226.156"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.6.237.160"/>
    </slice>
    <from sec="1183784832" usec="0"/>
    <to sec="1183784882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.216.24.162"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.184.35.162"/>
    </slice>
    <from sec="1183784410" usec="0"/>
    <to sec="1183785296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.91.146.162"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.7.143.163"/>
    </slice>
    <from sec="1183784452" usec="0"/>
    <to sec="1183785296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.125.8.164"/>
    </slice>
    <from sec="1183784608" usec="0"/>
    <to sec="1183785277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.216.24.164"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.16.116.167"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.164.247.167"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.174.47.168"/>
    </slice>
    <from sec="1183784872" usec="0"/>
    <to sec="1183784902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.84.74.169"/>
    </slice>
    <from sec="1183784522" usec="0"/>
    <to sec="1183785181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
2566[label="215.184.33.238;d;333pkt 333fpkt", shape=diamond, color=yellow];
6675[label="193.237.184.144;48pkt 48fpkt", shape=pentagon, color=darkviolet];
6784[label="4.17.171.170;59pkt 59fpkt", shape=pentagon, color=darkviolet];
7366[label="4.17.171.170;59pkt 59fpkt", shape=invtriangle, color=brown];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.184.33.238:15121}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13152: (9.01804%)&lt;BR/&gt; 15121: (7.41483%)&lt;BR/&gt; 14097: (5.21042%)&lt;BR/&gt; 53: (1.50301%)&lt;BR/&gt; 12249: (1.1022%)&gt;];
}
2566--2806[label="0.00840336;1pkt 1fpkt"];
2566--3200[label="0.0555556;1pkt 1fpkt"];
2566--3502[label="0.008;1pkt 1fpkt"];
2566--3528[label="0.0526316;1pkt 1fpkt"];
2566--3557[label="0.0526316;1pkt 1fpkt"];
2566--3874[label="0.0625;1pkt 1fpkt"];
2566--4901[label="0.003003;1pkt 1fpkt"];
2566--4945[label="0.00980392;1pkt 1fpkt"];
2566--5118[label="0.0111111;1pkt 1fpkt"];
2566--5524[label="0.0588235;1pkt 1fpkt"];
2566--5831[label="0.003003;1pkt 1fpkt"];
2566--5906[label="0.003003;1pkt 1fpkt"];
2566--5912[label="0.003003;1pkt 1fpkt"];
2566--5936[label="0.003003;1pkt 1fpkt"];
2566--5957[label="0.003003;1pkt 1fpkt"];
2566--6675[label="1;48pkt 48fpkt"];
2566--6784[label="1;59pkt 59fpkt"];
2566--7366[label="1;59pkt 59fpkt"];
6784--7366[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.33.238" dst_port="15121"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.122.38.173"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.117.149.176"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.186.67.178"/>
    </slice>
    <from sec="1183784753" usec="0"/>
    <to sec="1183784767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
4076[label="38.178.200.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
6824[label="38.178.200.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.200.179:80, 214.7.140.101:56572}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56572: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4076--6824[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.140.101" dst_port="56572" src_ip="38.178.200.179" src_port="80"/>
    </slice>
    <from sec="1183785127" usec="0"/>
    <to sec="1183785136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.53.7.185"/>
    </slice>
    <from sec="1183784982" usec="0"/>
    <to sec="1183785012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
2108[label="215.184.40.163;d;38pkt 38fpkt", shape=diamond, color=yellow];
4780[label="215.184.40.163;d;27pkt 27fpkt", shape=hexagon, color=black];
6559[label="192.170.228.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6846[label="206.153.145.187;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7279[label="192.170.228.114;1pkt 1fpkt", shape=invtriangle, color=brown];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 215.184.40.163:8080}[42.8571%]&lt;BR/&gt;{206.153.145.187:*, 215.184.40.163:*}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (22.2892%)&lt;BR/&gt; 1133: (10.8434%)&lt;BR/&gt; 25590: (4.21687%)&lt;BR/&gt; 7144: (3.01205%)&lt;BR/&gt; 3683: (2.40964%)&gt;];
}
2108--4780[label="1;27pkt 27fpkt"];
2108--6559[label="1;1pkt 1fpkt"];
2108--6846[label="0.75;12pkt 12fpkt"];
2108--7279[label="1;1pkt 1fpkt"];
4780--6559[label="1;1pkt 1fpkt"];
4780--6846[label="0.5;8pkt 8fpkt"];
4780--7279[label="1;1pkt 1fpkt"];
6559--7279[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.40.163" src_ip="206.153.145.187"/>
      <filter dst_ip="215.184.40.163" dst_port="8080"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.200.3.189"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.143.197.189"/>
    </slice>
    <from sec="1183784724" usec="0"/>
    <to sec="1183784745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
3521[label="38.97.132.244;d;13pkt 13fpkt", shape=diamond, color=yellow];
6867[label="161.203.242.194;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.242.194:25, *:*}[31.8182%]&lt;BR/&gt;{*:*, 38.97.132.244:6665}[22.7273%]&lt;BR/&gt;{*:*, 38.97.132.244:6667}[22.7273%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6665: (14.5833%)&lt;BR/&gt; 25: (14.5833%)&lt;BR/&gt; 6667: (10.4167%)&lt;BR/&gt; 0: (8.33333%)&lt;BR/&gt; 6666: (4.16667%)&gt;];
}
3521--6867[label="0.181818;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="161.203.242.194" src_port="25"/>
      <filter dst_ip="38.97.132.244" dst_port="6667"/>
      <filter dst_ip="38.97.132.244" dst_port="6665"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.17.53.198"/>
    </slice>
    <from sec="1183784894" usec="0"/>
    <to sec="1183784904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.194.198"/>
    </slice>
    <from sec="1183785270" usec="0"/>
    <to sec="1183785294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.132.79.200"/>
    </slice>
    <from sec="1183784635" usec="0"/>
    <to sec="1183784662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="147.50.117.202"/>
    </slice>
    <from sec="1183784414" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.206.202"/>
    </slice>
    <from sec="1183785177" usec="0"/>
    <to sec="1183785186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.107.22.203"/>
    </slice>
    <from sec="1183784787" usec="0"/>
    <to sec="1183784799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.22.140.206"/>
    </slice>
    <from sec="1183784451" usec="0"/>
    <to sec="1183784457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="79.1.5.207"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.174.137.208"/>
    </slice>
    <from sec="1183784682" usec="0"/>
    <to sec="1183784767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.198.2.211"/>
    </slice>
    <from sec="1183784423" usec="0"/>
    <to sec="1183785247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.30.197.212"/>
    </slice>
    <from sec="1183784741" usec="0"/>
    <to sec="1183785142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.235.238.217"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.46.9.218"/>
    </slice>
    <from sec="1183784800" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
955[label="149.216.229.218;s;7pkt 7fpkt", shape=diamond, color=yellow];
1453[label="206.182.41.50;d;6pkt 6fpkt", shape=diamond, color=yellow];
6960[label="149.216.229.218;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.229.218:80, 206.182.41.50:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38962: (7.5%)&lt;BR/&gt; 38961: (7.5%)&lt;BR/&gt; 38914: (7.5%)&lt;BR/&gt; 38905: (7.5%)&gt;];
}
955--1453[label="1;6pkt 6fpkt"];
955--6960[label="0.857143;6pkt 6fpkt"];
1453--6960[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="206.182.41.50" src_ip="149.216.229.218" src_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.253.213.219"/>
    </slice>
    <from sec="1183785007" usec="0"/>
    <to sec="1183785066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.249.15.220"/>
    </slice>
    <from sec="1183784768" usec="0"/>
    <to sec="1183784878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.138.21.221"/>
    </slice>
    <from sec="1183784406" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.176.88.222"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.224.70.224"/>
    </slice>
    <from sec="1183784402" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
3730[label="165.206.5.52;d;39pkt 39fpkt", shape=diamond, color=yellow];
4031[label="38.134.128.252;s;18pkt 18fpkt", shape=diamond, color=yellow];
4059[label="220.223.15.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
6985[label="38.134.128.226;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.134.128.252:7000, 165.206.5.52:*}[41.0256%]&lt;BR/&gt;{*:80, 165.206.5.52:*}[25.641%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7000: (25.3968%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 30004: (3.1746%)&lt;BR/&gt; 7080: (3.1746%)&lt;BR/&gt; 45003: (1.5873%)&gt;];
}
3730--4031[label="1;18pkt 18fpkt"];
3730--4059[label="1;2pkt 2fpkt"];
3730--6985[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.5.52" src_port="80"/>
      <filter dst_ip="165.206.5.52" src_ip="38.134.128.252" src_port="7000"/>
    </slice>
    <from sec="1183784991" usec="0"/>
    <to sec="1183785228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.132.129.226"/>
    </slice>
    <from sec="1183784817" usec="0"/>
    <to sec="1183784841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.40.171.226"/>
    </slice>
    <from sec="1183784825" usec="0"/>
    <to sec="1183784846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.153.130.230"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.131.19.232"/>
    </slice>
    <from sec="1183785261" usec="0"/>
    <to sec="1183785263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.68.234.235"/>
    </slice>
    <from sec="1183784721" usec="0"/>
    <to sec="1183784828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.161.30.237"/>
    </slice>
    <from sec="1183784804" usec="0"/>
    <to sec="1183784829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.254.116.237"/>
    </slice>
    <from sec="1183784917" usec="0"/>
    <to sec="1183785148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.536889,1.68759,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
2217[label="145.84.97.213;d;96pkt 96fpkt", shape=diamond, color=yellow];
3011[label="35.143.225.92;s;30pkt 30fpkt", shape=diamond, color=yellow];
7053[label="215.217.132.245;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 145.84.97.213:*}[70.9677%]&lt;BR/&gt;{35.143.225.92:80, *:*}[24.1935%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2414%)&lt;BR/&gt; 443: (2.75862%)&lt;BR/&gt; 2245: (0.689655%)&lt;BR/&gt; 2244: (0.689655%)&lt;BR/&gt; 2224: (0.689655%)&gt;];
}
2217--3011[label="0.0666667;2pkt 2fpkt"];
2217--3282[label="0.0454545;1pkt 1fpkt"];
2217--3635[label="0.0465116;2pkt 2fpkt"];
2217--4765[label="0.0208333;2pkt 2fpkt"];
2217--5277[label="0.0434783;4pkt 4fpkt"];
2217--5990[label="0.25;8pkt 8fpkt"];
2217--7053[label="1;19pkt 19fpkt"];
3011--3726[label="0.0952381;2pkt 2fpkt"];
3011--5510[label="0.333333;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="35.143.225.92" src_port="80"/>
      <filter dst_ip="145.84.97.213" src_port="80"/>
    </slice>
    <from sec="1183784468" usec="0"/>
    <to sec="1183785218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.181.225.245"/>
    </slice>
    <from sec="1183784666" usec="0"/>
    <to sec="1183784727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.216.246.245"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183784698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.99.81.246"/>
    </slice>
    <from sec="1183784862" usec="0"/>
    <to sec="1183785031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.128.24.248"/>
    </slice>
    <from sec="1183784848" usec="0"/>
    <to sec="1183785156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.154.114.248"/>
    </slice>
    <from sec="1183784420" usec="0"/>
    <to sec="1183785288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.7.106.249"/>
    </slice>
    <from sec="1183784854" usec="0"/>
    <to sec="1183784894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.242.175.249"/>
    </slice>
    <from sec="1183784785" usec="0"/>
    <to sec="1183784876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.178.194.251"/>
    </slice>
    <from sec="1183784665" usec="0"/>
    <to sec="1183784836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530338,1.74334,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.105.7.254"/>
    </slice>
    <from sec="1183784604" usec="0"/>
    <to sec="1183784803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
5961[label="210.156.16.0;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7077[label="210.156.16.0;21pkt 21fpkt", shape=invtriangle, color=brown];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.156.16.0:8080, 149.197.213.25:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 63366: (2.38095%)&lt;BR/&gt; 63365: (2.38095%)&lt;BR/&gt; 63363: (2.38095%)&lt;BR/&gt; 63362: (2.38095%)&gt;];
}
5961--7077[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.213.25" src_ip="210.156.16.0" src_port="8080"/>
    </slice>
    <from sec="1183784468" usec="0"/>
    <to sec="1183785216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.19.96.2"/>
    </slice>
    <from sec="1183784810" usec="0"/>
    <to sec="1183784819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.228.97.2"/>
    </slice>
    <from sec="1183784684" usec="0"/>
    <to sec="1183784723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
5986[label="205.156.63.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7090[label="205.156.63.4;2pkt 2fpkt", shape=invtriangle, color=brown];
7490[label="205.156.63.4;1pkt 1fpkt", shape=invhouse, color=bisque];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.156.63.4:80, 165.206.36.118:51815}[50%]&lt;BR/&gt;{205.156.63.4:80, 215.184.42.152:46136}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46136: (30%)&lt;BR/&gt; 51815: (20%)&gt;];
}
5986--7090[label="1;2pkt 2fpkt"];
5986--7490[label="1;1pkt 1fpkt"];
7090--7490[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.42.152" dst_port="46136" src_ip="205.156.63.4" src_port="80"/>
      <filter dst_ip="165.206.36.118" dst_port="51815" src_ip="205.156.63.4" src_port="80"/>
    </slice>
    <from sec="1183785288" usec="0"/>
    <to sec="1183785292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.99.11.10"/>
    </slice>
    <from sec="1183785178" usec="0"/>
    <to sec="1183785191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.116.53.10"/>
    </slice>
    <from sec="1183784655" usec="0"/>
    <to sec="1183784751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
6030[label="217.128.131.11;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7108[label="217.128.131.11;9pkt 9fpkt", shape=invtriangle, color=brown];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.128.131.11:443, 165.206.144.196:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (44.4444%)&lt;BR/&gt; 2534: (5.55556%)&lt;BR/&gt; 2533: (5.55556%)&lt;BR/&gt; 2532: (5.55556%)&lt;BR/&gt; 2531: (5.55556%)&gt;];
}
6030--7108[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.144.196" src_ip="217.128.131.11" src_port="443"/>
    </slice>
    <from sec="1183785291" usec="0"/>
    <to sec="1183785295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
6048[label="206.206.250.13;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7114[label="206.206.250.13;8pkt 8fpkt", shape=invtriangle, color=brown];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.206.250.13:80, 145.84.16.134:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50858: (6.66667%)&lt;BR/&gt; 50857: (6.66667%)&lt;BR/&gt; 50856: (6.66667%)&lt;BR/&gt; 50855: (6.66667%)&gt;];
}
6048--7114[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.16.134" src_ip="206.206.250.13" src_port="80"/>
    </slice>
    <from sec="1183784715" usec="0"/>
    <to sec="1183784809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.149.0.19"/>
    </slice>
    <from sec="1183784806" usec="0"/>
    <to sec="1183784824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.48.7.19"/>
    </slice>
    <from sec="1183784874" usec="0"/>
    <to sec="1183784884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.226.96.24"/>
    </slice>
    <from sec="1183785249" usec="0"/>
    <to sec="1183785263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.66.33.25"/>
    </slice>
    <from sec="1183784640" usec="0"/>
    <to sec="1183784728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
3061[label="169.50.45.205;s;5pkt 5fpkt", shape=diamond, color=yellow];
5452[label="169.50.45.205;s;5pkt 5fpkt", shape=hexagon, color=black];
6905[label="169.50.45.205;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7412[label="169.50.45.205;4pkt 4fpkt", shape=invtriangle, color=brown];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.50.45.205:80, 145.84.218.38:2430}[20%]&lt;BR/&gt;{169.50.45.205:80, 145.84.218.38:2431}[20%]&lt;BR/&gt;{169.50.45.205:80, 145.84.218.38:2432}[20%]&lt;BR/&gt;{169.50.45.205:80, 145.84.218.38:2436}[20%]&lt;BR/&gt;{169.50.45.205:80, 145.84.218.38:2437}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2437: (11.1111%)&lt;BR/&gt; 2436: (11.1111%)&lt;BR/&gt; 2432: (11.1111%)&lt;BR/&gt; 2431: (11.1111%)&gt;];
}
3061--5452[label="1;5pkt 5fpkt"];
3061--6905[label="1;4pkt 4fpkt"];
3061--7412[label="1;4pkt 4fpkt"];
5452--6905[label="1;4pkt 4fpkt"];
5452--7412[label="1;4pkt 4fpkt"];
6905--7412[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.218.38" dst_port="2437" src_ip="169.50.45.205" src_port="80"/>
      <filter dst_ip="145.84.218.38" dst_port="2436" src_ip="169.50.45.205" src_port="80"/>
      <filter dst_ip="145.84.218.38" dst_port="2432" src_ip="169.50.45.205" src_port="80"/>
      <filter dst_ip="145.84.218.38" dst_port="2431" src_ip="169.50.45.205" src_port="80"/>
      <filter dst_ip="145.84.218.38" dst_port="2430" src_ip="169.50.45.205" src_port="80"/>
    </slice>
    <from sec="1183784857" usec="0"/>
    <to sec="1183784893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
6158[label="194.53.30.32;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7141[label="194.53.30.32;2pkt 2fpkt", shape=invtriangle, color=brown];
7511[label="194.53.30.32;1pkt 1fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.53.30.32:80, 214.7.143.2:39496}[50%]&lt;BR/&gt;{194.53.30.32:80, 214.7.143.2:39497}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39497: (30%)&lt;BR/&gt; 39496: (20%)&gt;];
}
6158--7141[label="1;2pkt 2fpkt"];
6158--7511[label="1;1pkt 1fpkt"];
7141--7511[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.143.2" dst_port="39497" src_ip="194.53.30.32" src_port="80"/>
      <filter dst_ip="214.7.143.2" dst_port="39496" src_ip="194.53.30.32" src_port="80"/>
    </slice>
    <from sec="1183784844" usec="0"/>
    <to sec="1183784850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_610{
style=filled;
color=gray75;
2600[label="145.84.21.33;s;70pkt 70fpkt", shape=diamond, color=yellow];
6168[label="145.84.21.33;76pkt 76fpkt", shape=pentagon, color=darkviolet];
7145[label="145.84.21.33;76pkt 76fpkt", shape=invtriangle, color=brown];
stat610[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.21.33:25, *:*}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64455: (0.675676%)&lt;BR/&gt; 63189: (0.675676%)&lt;BR/&gt; 62131: (0.675676%)&lt;BR/&gt; 61220: (0.675676%)&gt;];
}
2600--2970[label="0.0142857;1pkt 1fpkt"];
2600--3279[label="0.0238095;1pkt 1fpkt"];
2600--5908[label="0.0285714;2pkt 2fpkt"];
2600--6168[label="1;70pkt 70fpkt"];
2600--7145[label="1;70pkt 70fpkt"];
6168--7145[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter src_ip="145.84.21.33" src_port="25"/>
    </slice>
    <from sec="1183784414" usec="0"/>
    <to sec="1183785265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.178.197.33"/>
    </slice>
    <from sec="1183785195" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.16.98.34"/>
    </slice>
    <from sec="1183784680" usec="0"/>
    <to sec="1183784744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.51.96.37"/>
    </slice>
    <from sec="1183784891" usec="0"/>
    <to sec="1183784896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.6.215.38"/>
    </slice>
    <from sec="1183785005" usec="0"/>
    <to sec="1183785016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.228.121.40"/>
    </slice>
    <from sec="1183784465" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.48.7.49"/>
    </slice>
    <from sec="1183785252" usec="0"/>
    <to sec="1183785255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.193.33.55"/>
    </slice>
    <from sec="1183784662" usec="0"/>
    <to sec="1183784684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
6284[label="208.199.64.56;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7181[label="208.199.64.56;2pkt 2fpkt", shape=invtriangle, color=brown];
7529[label="208.199.64.56;3pkt 3fpkt", shape=invhouse, color=bisque];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.199.64.56:80, 165.206.203.165:55982}[33.3333%]&lt;BR/&gt;{208.199.64.56:80, 165.206.203.165:55983}[33.3333%]&lt;BR/&gt;{208.199.64.56:80, 165.206.203.165:55984}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55984: (18.75%)&lt;BR/&gt; 55983: (18.75%)&lt;BR/&gt; 55982: (12.5%)&gt;];
}
6284--7181[label="1;2pkt 2fpkt"];
6284--7529[label="1;3pkt 3fpkt"];
7181--7529[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.203.165" dst_port="55984" src_ip="208.199.64.56" src_port="80"/>
      <filter dst_ip="165.206.203.165" dst_port="55983" src_ip="208.199.64.56" src_port="80"/>
      <filter dst_ip="165.206.203.165" dst_port="55982" src_ip="208.199.64.56" src_port="80"/>
    </slice>
    <from sec="1183784725" usec="0"/>
    <to sec="1183784747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.26.26.67"/>
    </slice>
    <from sec="1183784802" usec="0"/>
    <to sec="1183784847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.171.173.68"/>
    </slice>
    <from sec="1183784895" usec="0"/>
    <to sec="1183784915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.72.161.70"/>
    </slice>
    <from sec="1183784605" usec="0"/>
    <to sec="1183784671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.68.87.71"/>
    </slice>
    <from sec="1183784698" usec="0"/>
    <to sec="1183784751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.69.105.72"/>
    </slice>
    <from sec="1183784638" usec="0"/>
    <to sec="1183784699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
1191[label="149.197.209.76;s;253pkt 253fpkt", shape=diamond, color=yellow];
2515[label="210.158.4.160;d;259pkt 259fpkt", shape=diamond, color=yellow];
4979[label="210.158.4.160;d;229pkt 229fpkt", shape=hexagon, color=black];
5246[label="149.197.209.76;s;172pkt 172fpkt", shape=hexagon, color=black];
6399[label="149.197.209.76;273pkt 273fpkt", shape=pentagon, color=darkviolet];
7215[label="149.197.209.76;270pkt 270fpkt", shape=invtriangle, color=brown];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.197.209.76:*, 210.158.4.160:80}[90.3448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8626%)&lt;BR/&gt; 2958: (0.240385%)&lt;BR/&gt; 2943: (0.240385%)&lt;BR/&gt; 2914: (0.206044%)&lt;BR/&gt; 2913: (0.206044%)&gt;];
}
1191--2515[label="0.956522;242pkt 242fpkt"];
1191--4979[label="0.943231;216pkt 216fpkt"];
1191--5132[label="0.0197628;5pkt 5fpkt"];
1191--5246[label="1;172pkt 172fpkt"];
1191--5891[label="0.055336;14pkt 14fpkt"];
1191--5910[label="0.0474308;12pkt 12fpkt"];
1191--5913[label="0.055336;14pkt 14fpkt"];
1191--5924[label="0.055336;14pkt 14fpkt"];
1191--5939[label="0.0474308;12pkt 12fpkt"];
1191--5945[label="0.055336;14pkt 14fpkt"];
1191--5960[label="0.0474308;12pkt 12fpkt"];
1191--6399[label="1;253pkt 253fpkt"];
1191--7215[label="0.988142;250pkt 250fpkt"];
2515--3590[label="0.0103093;1pkt 1fpkt"];
2515--3722[label="0.0125;1pkt 1fpkt"];
2515--4624[label="0.003861;1pkt 1fpkt"];
2515--4979[label="1;229pkt 229fpkt"];
2515--5093[label="0.00772201;2pkt 2fpkt"];
2515--5107[label="0.003861;1pkt 1fpkt"];
2515--5156[label="0.003861;1pkt 1fpkt"];
2515--5246[label="0.94186;162pkt 162fpkt"];
2515--5660[label="0.0119048;1pkt 1fpkt"];
2515--5891[label="0.0617761;16pkt 16fpkt"];
2515--5910[label="0.0617761;16pkt 16fpkt"];
2515--5913[label="0.0694981;18pkt 18fpkt"];
2515--5915[label="0.011583;3pkt 3fpkt"];
2515--5924[label="0.0617761;16pkt 16fpkt"];
2515--5939[label="0.0617761;16pkt 16fpkt"];
2515--5945[label="0.0617761;16pkt 16fpkt"];
2515--5960[label="0.0617761;16pkt 16fpkt"];
2515--6064[label="0.0183486;2pkt 2fpkt"];
2515--6399[label="0.934363;242pkt 242fpkt"];
2515--6453[label="0.0196078;2pkt 2fpkt"];
2515--7004[label="0.003861;1pkt 1fpkt"];
2515--7215[label="0.926641;240pkt 240fpkt"];
2515--7226[label="0.00772201;2pkt 2fpkt"];
4979--5093[label="0.00873362;2pkt 2fpkt"];
4979--5156[label="0.00436681;1pkt 1fpkt"];
4979--5246[label="0.94186;162pkt 162fpkt"];
4979--5660[label="0.0119048;1pkt 1fpkt"];
4979--5891[label="0.069869;16pkt 16fpkt"];
4979--5910[label="0.069869;16pkt 16fpkt"];
4979--5913[label="0.0786026;18pkt 18fpkt"];
4979--5924[label="0.069869;16pkt 16fpkt"];
4979--5939[label="0.069869;16pkt 16fpkt"];
4979--5945[label="0.069869;16pkt 16fpkt"];
4979--5960[label="0.069869;16pkt 16fpkt"];
4979--6064[label="0.0183486;2pkt 2fpkt"];
4979--6399[label="0.943231;216pkt 216fpkt"];
4979--7215[label="0.934498;214pkt 214fpkt"];
4979--7226[label="0.00873362;2pkt 2fpkt"];
5246--5891[label="0.0813953;14pkt 14fpkt"];
5246--5910[label="0.0697674;12pkt 12fpkt"];
5246--5913[label="0.0813953;14pkt 14fpkt"];
5246--5924[label="0.0813953;14pkt 14fpkt"];
5246--5939[label="0.0697674;12pkt 12fpkt"];
5246--5945[label="0.0813953;14pkt 14fpkt"];
5246--5960[label="0.0697674;12pkt 12fpkt"];
5246--6399[label="1;172pkt 172fpkt"];
5246--7215[label="0.982558;169pkt 169fpkt"];
6399--7215[label="1;270pkt 270fpkt"];
</description>
    <slice>
      <filter dst_ip="210.158.4.160" dst_port="80" src_ip="149.197.209.76"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
6402[label="38.178.204.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7216[label="38.178.204.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.178.204.77:80, 214.7.138.164:50410}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50410: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6402--7216[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.138.164" dst_port="50410" src_ip="38.178.204.77" src_port="80"/>
    </slice>
    <from sec="1183785282" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.178.206.79"/>
    </slice>
    <from sec="1183785285" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
2210[label="72.214.180.199;d;83pkt 83fpkt", shape=diamond, color=yellow];
6410[label="134.201.14.80;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7219[label="134.201.14.80;12pkt 12fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 72.214.180.199:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1293: (1.38889%)&lt;BR/&gt; 1292: (1.38889%)&lt;BR/&gt; 1291: (1.38889%)&lt;BR/&gt; 1289: (1.38889%)&gt;];
}
2210--3664[label="0.190476;12pkt 12fpkt"];
2210--6410[label="1;13pkt 13fpkt"];
2210--7219[label="1;12pkt 12fpkt"];
6410--7219[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="72.214.180.199" dst_port="443"/>
    </slice>
    <from sec="1183784452" usec="0"/>
    <to sec="1183784739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08658,1.77736,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
2340[label="1.216.54.80;s;6pkt 6fpkt", shape=diamond, color=yellow];
2635[label="145.84.104.33;d;18pkt 18fpkt", shape=diamond, color=yellow];
7220[label="1.216.54.80;6pkt 6fpkt", shape=invtriangle, color=brown];
7543[label="1.216.54.80;5pkt 5fpkt", shape=invhouse, color=bisque];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.182.186.210:80, 145.84.104.33:*}[50%]&lt;BR/&gt;{1.216.54.80:80, 145.84.104.33:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1221: (5.71429%)&lt;BR/&gt; 1220: (5.71429%)&lt;BR/&gt; 1213: (5.71429%)&lt;BR/&gt; 1212: (5.71429%)&gt;];
}
2340--2635[label="1;6pkt 6fpkt"];
2340--7220[label="1;6pkt 6fpkt"];
2340--7543[label="1;5pkt 5fpkt"];
2635--4948[label="0.111111;2pkt 2fpkt"];
2635--7220[label="1;6pkt 6fpkt"];
2635--7543[label="1;5pkt 5fpkt"];
7220--7543[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.104.33" src_ip="206.182.186.210" src_port="80"/>
      <filter dst_ip="145.84.104.33" src_ip="1.216.54.80" src_port="80"/>
    </slice>
    <from sec="1183784455" usec="0"/>
    <to sec="1183784829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
3599[label="161.203.231.82;s;157pkt 157fpkt", shape=diamond, color=yellow];
6421[label="161.203.231.82;168pkt 168fpkt", shape=pentagon, color=darkviolet];
7224[label="161.203.231.82;168pkt 168fpkt", shape=invtriangle, color=brown];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.231.82:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3599--6421[label="0.993631;156pkt 156fpkt"];
3599--7224[label="0.993631;156pkt 156fpkt"];
6421--7224[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter src_ip="161.203.231.82"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
6437[label="1.177.2.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7230[label="1.177.2.87;1pkt 1fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.177.2.87:11869, 165.206.146.147:3211}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11869: (50%)&lt;BR/&gt; 3211: (50%)&gt;];
}
6437--7230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.146.147" dst_port="3211" src_ip="1.177.2.87" src_port="11869"/>
    </slice>
    <from sec="1183785257" usec="0"/>
    <to sec="1183785295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791535,1.65573,020,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_632{
style=filled;
color=gray75;
2053[label="214.162.6.88;s;86pkt 86fpkt", shape=diamond, color=yellow];
5640[label="214.162.6.88;s;86pkt 86fpkt", shape=hexagon, color=black];
7232[label="214.162.6.88;101pkt 101fpkt", shape=invtriangle, color=brown];
stat632[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.162.6.88:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2053--5640[label="1;86pkt 86fpkt"];
2053--7232[label="1;86pkt 86fpkt"];
5640--7232[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="214.162.6.88"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.121.239.88"/>
    </slice>
    <from sec="1183784752" usec="0"/>
    <to sec="1183785301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.193.104.92"/>
    </slice>
    <from sec="1183785160" usec="0"/>
    <to sec="1183785179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.32.216.92"/>
    </slice>
    <from sec="1183784978" usec="0"/>
    <to sec="1183785028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.131.223.94"/>
    </slice>
    <from sec="1183784643" usec="0"/>
    <to sec="1183784657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.216.112.103"/>
    </slice>
    <from sec="1183784622" usec="0"/>
    <to sec="1183784635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
6529[label="136.119.211.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7264[label="136.119.211.107;1pkt 1fpkt", shape=invtriangle, color=brown];
7554[label="136.119.211.107;2pkt 2fpkt", shape=invhouse, color=bisque];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.119.211.107:25, 214.20.180.77:50872}[50%]&lt;BR/&gt;{136.119.211.107:52584, 163.171.255.104:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 52584: (37.5%)&lt;BR/&gt; 50872: (12.5%)&gt;];
}
6529--7264[label="1;1pkt 1fpkt"];
6529--7554[label="1;1pkt 1fpkt"];
7264--7554[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="163.171.255.104" dst_port="25" src_ip="136.119.211.107" src_port="52584"/>
      <filter dst_ip="214.20.180.77" dst_port="50872" src_ip="136.119.211.107" src_port="25"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
6530[label="144.46.11.108;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7265[label="144.46.11.108;6pkt 6fpkt", shape=invtriangle, color=brown];
7555[label="144.46.11.108;6pkt 6fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.46.11.108:25, 193.50.211.44:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3432: (8.33333%)&lt;BR/&gt; 2164: (8.33333%)&lt;BR/&gt; 1896: (8.33333%)&lt;BR/&gt; 1507: (8.33333%)&gt;];
}
6530--7265[label="1;6pkt 6fpkt"];
6530--7555[label="1;6pkt 6fpkt"];
7265--7555[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="193.50.211.44" src_ip="144.46.11.108" src_port="25"/>
    </slice>
    <from sec="1183784677" usec="0"/>
    <to sec="1183785282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.209.155.108"/>
    </slice>
    <from sec="1183784649" usec="0"/>
    <to sec="1183784687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.47.53.112"/>
    </slice>
    <from sec="1183784925" usec="0"/>
    <to sec="1183784928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.10.65.114"/>
    </slice>
    <from sec="1183784407" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.21.48.115"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.104.204.123"/>
    </slice>
    <from sec="1183784869" usec="0"/>
    <to sec="1183784893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
6614[label="72.196.83.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7296[label="72.196.83.130;1pkt 1fpkt", shape=invtriangle, color=brown];
7570[label="72.196.83.130;1pkt 1fpkt", shape=invhouse, color=bisque];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.196.83.130:80, 145.84.97.202:3751}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3751: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6614--7296[label="1;1pkt 1fpkt"];
6614--7570[label="1;1pkt 1fpkt"];
7296--7570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.97.202" dst_port="3751" src_ip="72.196.83.130" src_port="80"/>
    </slice>
    <from sec="1183785298" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
6615[label="149.216.136.130;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7297[label="149.216.136.130;1pkt 1fpkt", shape=invtriangle, color=brown];
7571[label="149.216.136.130;1pkt 1fpkt", shape=invhouse, color=bisque];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.136.130:1044, 207.166.147.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1044: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6615--7297[label="1;1pkt 1fpkt"];
6615--7571[label="1;1pkt 1fpkt"];
7297--7571[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.166.147.139" dst_port="80" src_ip="149.216.136.130" src_port="1044"/>
    </slice>
    <from sec="1183784683" usec="0"/>
    <to sec="1183784701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.91.179.132"/>
    </slice>
    <from sec="1183784802" usec="0"/>
    <to sec="1183784931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
6640[label="215.48.7.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7310[label="215.48.7.136;1pkt 1fpkt", shape=invtriangle, color=brown];
7574[label="215.48.7.136;1pkt 1fpkt", shape=invhouse, color=bisque];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.48.7.136:80, 214.7.140.101:57435}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57435: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6640--7310[label="1;1pkt 1fpkt"];
6640--7574[label="1;1pkt 1fpkt"];
7310--7574[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.7.140.101" dst_port="57435" src_ip="215.48.7.136" src_port="80"/>
    </slice>
    <from sec="1183785265" usec="0"/>
    <to sec="1183785284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11143,1.8219,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
6646[label="72.12.64.137;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7314[label="72.12.64.137;5pkt 5fpkt", shape=invtriangle, color=brown];
7575[label="72.12.64.137;4pkt 4fpkt", shape=invhouse, color=bisque];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.12.64.137:80, 165.206.203.38:1111}[20%]&lt;BR/&gt;{72.12.64.137:80, 165.206.203.38:1112}[20%]&lt;BR/&gt;{72.12.64.137:80, 165.206.203.38:1113}[20%]&lt;BR/&gt;{72.12.64.137:80, 165.206.203.38:1114}[20%]&lt;BR/&gt;{72.12.64.137:80, 165.206.203.38:1117}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1117: (10.7143%)&lt;BR/&gt; 1114: (10.7143%)&lt;BR/&gt; 1113: (10.7143%)&lt;BR/&gt; 1112: (10.7143%)&gt;];
}
6646--7314[label="1;5pkt 5fpkt"];
6646--7575[label="1;4pkt 4fpkt"];
7314--7575[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.203.38" dst_port="1117" src_ip="72.12.64.137" src_port="80"/>
      <filter dst_ip="165.206.203.38" dst_port="1114" src_ip="72.12.64.137" src_port="80"/>
      <filter dst_ip="165.206.203.38" dst_port="1113" src_ip="72.12.64.137" src_port="80"/>
      <filter dst_ip="165.206.203.38" dst_port="1112" src_ip="72.12.64.137" src_port="80"/>
      <filter dst_ip="165.206.203.38" dst_port="1111" src_ip="72.12.64.137" src_port="80"/>
    </slice>
    <from sec="1183785285" usec="0"/>
    <to sec="1183785295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.829531,1.64634,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
1946[label="165.206.148.140;s;97pkt 97fpkt", shape=diamond, color=yellow];
3229[label="210.158.110.67;d;2pkt 2fpkt", shape=diamond, color=yellow];
5612[label="165.206.148.140;s;90pkt 90fpkt", shape=hexagon, color=black];
6658[label="165.206.148.140;105pkt 105fpkt", shape=pentagon, color=darkviolet];
7320[label="165.206.148.140;105pkt 105fpkt", shape=invtriangle, color=brown];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.206.148.140:4019, *:*}[48.1132%]&lt;BR/&gt;{165.206.148.140:*, 90.112.35.56:80}[26.4151%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4019: (24.0602%)&lt;BR/&gt; 80: (15.6642%)&lt;BR/&gt; 443: (7.01754%)&lt;BR/&gt; 123: (3.00752%)&lt;BR/&gt; 28805: (0.75188%)&gt;];
}
1946--3229[label="0.5;1pkt 1fpkt"];
1946--3609[label="0.0103093;1pkt 1fpkt"];
1946--5612[label="1;90pkt 90fpkt"];
1946--5891[label="0.0309278;3pkt 3fpkt"];
1946--5910[label="0.0206186;2pkt 2fpkt"];
1946--5913[label="0.0206186;2pkt 2fpkt"];
1946--5915[label="0.0103093;1pkt 1fpkt"];
1946--5924[label="0.0309278;3pkt 3fpkt"];
1946--5939[label="0.0206186;2pkt 2fpkt"];
1946--5945[label="0.0309278;3pkt 3fpkt"];
1946--5960[label="0.0206186;2pkt 2fpkt"];
1946--6658[label="1;97pkt 97fpkt"];
1946--7320[label="1;97pkt 97fpkt"];
3229--5612[label="0.5;1pkt 1fpkt"];
3229--6658[label="0.5;1pkt 1fpkt"];
3229--7320[label="0.5;1pkt 1fpkt"];
5612--5891[label="0.0333333;3pkt 3fpkt"];
5612--5910[label="0.0222222;2pkt 2fpkt"];
5612--5913[label="0.0222222;2pkt 2fpkt"];
5612--5924[label="0.0333333;3pkt 3fpkt"];
5612--5939[label="0.0222222;2pkt 2fpkt"];
5612--5945[label="0.0333333;3pkt 3fpkt"];
5612--5960[label="0.0222222;2pkt 2fpkt"];
5612--6658[label="1;90pkt 90fpkt"];
5612--7320[label="1;90pkt 90fpkt"];
6658--7320[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="165.206.148.140" src_port="4019"/>
      <filter dst_ip="90.112.35.56" dst_port="80" src_ip="165.206.148.140"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.791535,1.65573,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
2970[label="214.119.162.69;d;81pkt 81fpkt", shape=diamond, color=yellow];
3948[label="214.7.143.38;s;98pkt 98fpkt", shape=diamond, color=yellow];
4635[label="149.216.147.157;s;323pkt 323fpkt", shape=hexagon, color=black];
7321[label="136.119.154.140;51pkt 51fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.147.157:25, *:*}[59.2661%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45.5696%)&lt;BR/&gt; 53: (3.9783%)&lt;BR/&gt; 113: (0.45208%)&lt;BR/&gt; 3275: (0.271248%)&lt;BR/&gt; 58380: (0.180832%)&gt;];
}
2970--3165[label="0.0740741;6pkt 6fpkt"];
2970--3592[label="0.0227273;1pkt 1fpkt"];
2970--3948[label="0.0246914;2pkt 2fpkt"];
2970--4175[label="0.0123457;1pkt 1fpkt"];
2970--4635[label="0.0617284;5pkt 5fpkt"];
2970--4982[label="0.0123457;1pkt 1fpkt"];
2970--5180[label="0.0246914;2pkt 2fpkt"];
2970--5199[label="0.0123457;1pkt 1fpkt"];
2970--5253[label="0.030303;2pkt 2fpkt"];
2970--5270[label="0.0123457;1pkt 1fpkt"];
2970--6168[label="0.0131579;1pkt 1fpkt"];
2970--6199[label="0.0123457;1pkt 1fpkt"];
2970--6521[label="0.0740741;6pkt 6fpkt"];
2970--6659[label="0.0196078;1pkt 1fpkt"];
2970--6722[label="0.0246914;2pkt 2fpkt"];
2970--7145[label="0.0131579;1pkt 1fpkt"];
2970--7156[label="0.0123457;1pkt 1fpkt"];
2970--7305[label="0.0123457;1pkt 1fpkt"];
2970--7321[label="0.0196078;1pkt 1fpkt"];
2970--7347[label="0.0246914;2pkt 2fpkt"];
2970--7573[label="0.0123457;1pkt 1fpkt"];
2970--7589[label="0.0246914;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="149.216.147.157" src_port="25"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.178.195.144"/>
    </slice>
    <from sec="1183785078" usec="0"/>
    <to sec="1183785081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.127.34.145"/>
    </slice>
    <from sec="1183784845" usec="0"/>
    <to sec="1183784868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.76459,1.69299,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
3712[label="192.179.101.65;d;11pkt 11fpkt", shape=diamond, color=yellow];
3713[label="149.216.67.151;s;10pkt 10fpkt", shape=diamond, color=yellow];
6702[label="149.216.67.151;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7336[label="149.216.67.151;8pkt 8fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.67.151:*, 192.179.101.65:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1262: (5.12821%)&lt;BR/&gt; 1261: (5.12821%)&lt;BR/&gt; 1255: (5.12821%)&lt;BR/&gt; 1254: (5.12821%)&gt;];
}
3712--3713[label="1;10pkt 10fpkt"];
3712--5915[label="0.0909091;1pkt 1fpkt"];
3712--6535[label="0.0909091;1pkt 1fpkt"];
3712--6702[label="1;10pkt 10fpkt"];
3712--7336[label="1;8pkt 8fpkt"];
3713--6702[label="1;10pkt 10fpkt"];
3713--7336[label="1;8pkt 8fpkt"];
6702--7336[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="192.179.101.65" dst_port="80" src_ip="149.216.67.151"/>
    </slice>
    <from sec="1183784954" usec="0"/>
    <to sec="1183785222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.91.146.162"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.117.149.176"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.208.178.192"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
6872[label="149.216.241.196;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7397[label="149.216.241.196;3pkt 3fpkt", shape=invtriangle, color=brown];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.216.241.196:29304, 1.216.40.198:80}[33.3333%]&lt;BR/&gt;{149.216.241.196:29306, 72.196.83.150:80}[33.3333%]&lt;BR/&gt;{149.216.241.196:29310, 72.196.83.150:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29310: (16.6667%)&lt;BR/&gt; 29306: (16.6667%)&lt;BR/&gt; 29304: (16.6667%)&gt;];
}
6872--7397[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="72.196.83.150" dst_port="80" src_ip="149.216.241.196" src_port="29310"/>
      <filter dst_ip="72.196.83.150" dst_port="80" src_ip="149.216.241.196" src_port="29306"/>
      <filter dst_ip="1.216.40.198" dst_port="80" src_ip="149.216.241.196" src_port="29304"/>
    </slice>
    <from sec="1183784409" usec="0"/>
    <to sec="1183784443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
6873[label="134.201.4.197;47pkt 47fpkt", shape=pentagon, color=darkviolet];
7398[label="134.201.4.197;47pkt 47fpkt", shape=invtriangle, color=brown];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.201.4.197:*, 215.170.13.137:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4936: (1.06383%)&lt;BR/&gt; 4935: (1.06383%)&lt;BR/&gt; 4934: (1.06383%)&lt;BR/&gt; 4933: (1.06383%)&gt;];
}
6873--7398[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="215.170.13.137" dst_port="80" src_ip="134.201.4.197"/>
    </slice>
    <from sec="1183784868" usec="0"/>
    <to sec="1183784883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.132.79.200"/>
    </slice>
    <from sec="1183784635" usec="0"/>
    <to sec="1183784662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.178.206.202"/>
    </slice>
    <from sec="1183785177" usec="0"/>
    <to sec="1183785186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.107.22.203"/>
    </slice>
    <from sec="1183784787" usec="0"/>
    <to sec="1183784799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
6911[label="161.203.232.206;247pkt 247fpkt", shape=pentagon, color=darkviolet];
7414[label="161.203.232.206;247pkt 247fpkt", shape=invtriangle, color=brown];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{161.203.232.206:*, 122.30.89.76:123}[25.5061%]&lt;BR/&gt;{161.203.232.206:*, 122.30.89.74:123}[25.1012%]&lt;BR/&gt;{161.203.232.206:*, 122.30.89.72:123}[24.6964%]&lt;BR/&gt;{161.203.232.206:*, 122.30.89.77:123}[24.6964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (50%)&lt;BR/&gt; 3172: (0.202429%)&lt;BR/&gt; 3171: (0.202429%)&lt;BR/&gt; 3170: (0.202429%)&lt;BR/&gt; 3169: (0.202429%)&gt;];
}
6911--7414[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_ip="122.30.89.76" dst_port="123" src_ip="161.203.232.206"/>
      <filter dst_ip="122.30.89.74" dst_port="123" src_ip="161.203.232.206"/>
      <filter dst_ip="122.30.89.77" dst_port="123" src_ip="161.203.232.206"/>
      <filter dst_ip="122.30.89.72" dst_port="123" src_ip="161.203.232.206"/>
    </slice>
    <from sec="1183784407" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="7.174.137.208"/>
    </slice>
    <from sec="1183784682" usec="0"/>
    <to sec="1183784767" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
6929[label="215.184.40.212;84pkt 84fpkt", shape=pentagon, color=darkviolet];
7423[label="215.184.40.212;84pkt 84fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.40.212:80, 207.233.163.48:*}[84.5238%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4048%)&lt;BR/&gt; 0: (1.19048%)&lt;BR/&gt; 5000: (0.595238%)&lt;BR/&gt; 4999: (0.595238%)&lt;BR/&gt; 4998: (0.595238%)&gt;];
}
6929--7423[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="207.233.163.48" src_ip="215.184.40.212" src_port="80"/>
    </slice>
    <from sec="1183784404" usec="0"/>
    <to sec="1183785285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.30.197.212"/>
    </slice>
    <from sec="1183784741" usec="0"/>
    <to sec="1183785142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_669{
style=filled;
color=gray75;
6941[label="145.84.97.214;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7427[label="145.84.97.214;8pkt 8fpkt", shape=invtriangle, color=brown];
stat669[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.84.97.214:*, 214.20.161.225:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3635: (6.25%)&lt;BR/&gt; 3632: (6.25%)&lt;BR/&gt; 3631: (6.25%)&lt;BR/&gt; 3630: (6.25%)&gt;];
}
6941--7427[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="214.20.161.225" dst_port="443" src_ip="145.84.97.214"/>
    </slice>
    <from sec="1183784421" usec="0"/>
    <to sec="1183785233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.16.190.217"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.249.15.220"/>
    </slice>
    <from sec="1183784768" usec="0"/>
    <to sec="1183784878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.176.88.222"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.224.70.224"/>
    </slice>
    <from sec="1183784413" usec="0"/>
    <to sec="1183785298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
6991[label="207.88.33.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7445[label="207.88.33.227;1pkt 1fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.88.33.227:18248, 145.84.136.74:3279}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18248: (50%)&lt;BR/&gt; 3279: (50%)&gt;];
}
6991--7445[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.136.74" dst_port="3279" src_ip="207.88.33.227" src_port="18248"/>
    </slice>
    <from sec="1183785240" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
7001[label="149.208.136.230;86pkt 86fpkt", shape=pentagon, color=darkviolet];
7449[label="149.208.136.230;86pkt 86fpkt", shape=invtriangle, color=brown];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.208.136.230:1433, 6.207.247.110:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 42782: (0.581395%)&lt;BR/&gt; 42440: (0.581395%)&lt;BR/&gt; 42183: (0.581395%)&lt;BR/&gt; 41928: (0.581395%)&gt;];
}
7001--7449[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="6.207.247.110" src_ip="149.208.136.230" src_port="1433"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.131.19.232"/>
    </slice>
    <from sec="1183785261" usec="0"/>
    <to sec="1183785263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
7033[label="218.22.142.238;254pkt 254fpkt", shape=pentagon, color=darkviolet];
7462[label="218.22.142.238;254pkt 254fpkt", shape=invtriangle, color=brown];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.22.142.238:1029, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1029: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
7033--7462[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="218.22.142.238" src_port="1029"/>
    </slice>
    <from sec="1183784472" usec="0"/>
    <to sec="1183784508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
7049[label="38.97.132.244;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7470[label="38.97.132.244;4pkt 4fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.97.132.244:6667, 149.197.227.17:40197}[25%]&lt;BR/&gt;{38.97.132.244:6667, 149.197.174.140:36312}[25%]&lt;BR/&gt;{38.97.132.244:7000, 145.84.228.104:4724}[25%]&lt;BR/&gt;{38.97.132.244:6667, 145.84.228.104:4574}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (37.5%)&lt;BR/&gt; 40197: (12.5%)&lt;BR/&gt; 36312: (12.5%)&lt;BR/&gt; 7000: (12.5%)&lt;BR/&gt; 4724: (12.5%)&gt;];
}
7049--7470[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.228.104" dst_port="4574" src_ip="38.97.132.244" src_port="6667"/>
      <filter dst_ip="145.84.228.104" dst_port="4724" src_ip="38.97.132.244" src_port="7000"/>
      <filter dst_ip="149.197.174.140" dst_port="36312" src_ip="38.97.132.244" src_port="6667"/>
      <filter dst_ip="149.197.227.17" dst_port="40197" src_ip="38.97.132.244" src_port="6667"/>
    </slice>
    <from sec="1183784401" usec="0"/>
    <to sec="1183785294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
7052[label="38.97.132.245;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7472[label="38.97.132.245;5pkt 5fpkt", shape=invtriangle, color=brown];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.97.132.245:6667, 145.84.228.104:4580}[20%]&lt;BR/&gt;{38.97.132.245:6667, 167.82.197.179:2365}[20%]&lt;BR/&gt;{38.97.132.245:6667, 145.84.242.208:32878}[20%]&lt;BR/&gt;{38.97.132.245:6667, 149.197.174.140:36372}[20%]&lt;BR/&gt;{38.97.132.245:6667, 149.197.174.140:40204}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 40204: (10%)&lt;BR/&gt; 36372: (10%)&lt;BR/&gt; 32878: (10%)&lt;BR/&gt; 4580: (10%)&gt;];
}
7052--7472[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.197.174.140" dst_port="40204" src_ip="38.97.132.245" src_port="6667"/>
      <filter dst_ip="149.197.174.140" dst_port="36372" src_ip="38.97.132.245" src_port="6667"/>
      <filter dst_ip="145.84.242.208" dst_port="32878" src_ip="38.97.132.245" src_port="6667"/>
      <filter dst_ip="167.82.197.179" dst_port="2365" src_ip="38.97.132.245" src_port="6667"/>
      <filter dst_ip="145.84.228.104" dst_port="4580" src_ip="38.97.132.245" src_port="6667"/>
    </slice>
    <from sec="1183784407" usec="0"/>
    <to sec="1183785299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.181.225.245"/>
    </slice>
    <from sec="1183784666" usec="0"/>
    <to sec="1183784727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.99.81.246"/>
    </slice>
    <from sec="1183784862" usec="0"/>
    <to sec="1183785031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.760005,1.74856,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
7061[label="215.145.176.247;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7476[label="215.145.176.247;1pkt 1fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.145.176.247:41121, 215.184.18.159:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41121: (50%)&lt;BR/&gt; 5900: (50%)&gt;];
}
7061--7476[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="215.184.18.159" dst_port="5900" src_ip="215.145.176.247" src_port="41121"/>
    </slice>
    <from sec="1183784700" usec="0"/>
    <to sec="1183784927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.178.194.251"/>
    </slice>
    <from sec="1183784665" usec="0"/>
    <to sec="1183784836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718341,1.7574,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.105.7.254"/>
    </slice>
    <from sec="1183784604" usec="0"/>
    <to sec="1183784803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.19.96.2"/>
    </slice>
    <from sec="1183784810" usec="0"/>
    <to sec="1183784819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.205.3"/>
    </slice>
    <from sec="1183785165" usec="0"/>
    <to sec="1183785225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.50.185.5"/>
    </slice>
    <from sec="1183784553" usec="0"/>
    <to sec="1183784674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.12.227.5"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183784436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.116.53.10"/>
    </slice>
    <from sec="1183784655" usec="0"/>
    <to sec="1183784751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.204.10"/>
    </slice>
    <from sec="1183785216" usec="0"/>
    <to sec="1183785289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.48.7.19"/>
    </slice>
    <from sec="1183784874" usec="0"/>
    <to sec="1183784884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="11.99.233.21"/>
    </slice>
    <from sec="1183784751" usec="0"/>
    <to sec="1183784811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.51.96.37"/>
    </slice>
    <from sec="1183784891" usec="0"/>
    <to sec="1183784896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.48.7.49"/>
    </slice>
    <from sec="1183785252" usec="0"/>
    <to sec="1183785255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.33.47.49"/>
    </slice>
    <from sec="1183784753" usec="0"/>
    <to sec="1183784778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.193.33.55"/>
    </slice>
    <from sec="1183784662" usec="0"/>
    <to sec="1183784684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.153.107.55"/>
    </slice>
    <from sec="1183784795" usec="0"/>
    <to sec="1183784820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.72.161.70"/>
    </slice>
    <from sec="1183784605" usec="0"/>
    <to sec="1183784671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.68.87.71"/>
    </slice>
    <from sec="1183784698" usec="0"/>
    <to sec="1183784751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.206.79"/>
    </slice>
    <from sec="1183785285" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.94038,1.77222,020,0 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
1067[label="215.184.35.88;s;468pkt 468fpkt", shape=diamond, color=yellow];
7547[label="215.184.35.88;469pkt 469fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.184.35.88:0, *:0}[99.7872%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7866%)&lt;BR/&gt; 8080: (0.106724%)&lt;BR/&gt; 6000: (0.106724%)&gt;];
}
1067--1276[label="0.00714286;1pkt 1fpkt"];
1067--1577[label="0.00546448;1pkt 1fpkt"];
1067--1581[label="0.00540541;1pkt 1fpkt"];
1067--1619[label="0.00322581;1pkt 1fpkt"];
1067--1627[label="0.00934579;1pkt 1fpkt"];
1067--1634[label="0.00675676;1pkt 1fpkt"];
1067--1655[label="0.00518135;1pkt 1fpkt"];
1067--2382[label="0.00213675;1pkt 1fpkt"];
1067--3607[label="0.00833333;1pkt 1fpkt"];
1067--4234[label="0.00337838;1pkt 1fpkt"];
1067--4243[label="0.00621118;1pkt 1fpkt"];
1067--4387[label="0.00714286;1pkt 1fpkt"];
1067--4677[label="0.00537634;1pkt 1fpkt"];
1067--4695[label="0.0107527;1pkt 1fpkt"];
1067--4698[label="0.0108696;1pkt 1fpkt"];
1067--4699[label="0.0125;1pkt 1fpkt"];
1067--4703[label="1;464pkt 464fpkt"];
1067--4958[label="0.00465116;1pkt 1fpkt"];
1067--5409[label="0.00213675;1pkt 1fpkt"];
1067--5495[label="0.00694444;1pkt 1fpkt"];
1067--7547[label="0.997863;467pkt 467fpkt"];
</description>
    <slice>
      <filter src_ip="215.184.35.88"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.204.100"/>
    </slice>
    <from sec="1183784502" usec="0"/>
    <to sec="1183784511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08336,1.83038,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
7273[label="40.232.24.113;1pkt 1fpkt", shape=invtriangle, color=brown];
7557[label="40.232.24.113;1pkt 1fpkt", shape=invhouse, color=bisque];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.232.24.113:37719, 165.206.108.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37719: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7273--7557[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="165.206.108.161" dst_port="80" src_ip="40.232.24.113" src_port="37719"/>
    </slice>
    <from sec="1183784670" usec="0"/>
    <to sec="1183784674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.10.65.114"/>
    </slice>
    <from sec="1183784411" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.21.48.115"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="206.104.204.123"/>
    </slice>
    <from sec="1183784869" usec="0"/>
    <to sec="1183784893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.146.5.124"/>
    </slice>
    <from sec="1183784814" usec="0"/>
    <to sec="1183784823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.157.25.124"/>
    </slice>
    <from sec="1183784858" usec="0"/>
    <to sec="1183784874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.116.200.124"/>
    </slice>
    <from sec="1183784403" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.173.25.125"/>
    </slice>
    <from sec="1183784896" usec="0"/>
    <to sec="1183784911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.204.138.126"/>
    </slice>
    <from sec="1183784675" usec="0"/>
    <to sec="1183784693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.205.138"/>
    </slice>
    <from sec="1183785294" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.195.144"/>
    </slice>
    <from sec="1183785078" usec="0"/>
    <to sec="1183785081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.127.34.145"/>
    </slice>
    <from sec="1183784845" usec="0"/>
    <to sec="1183784868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.116.52.152"/>
    </slice>
    <from sec="1183784658" usec="0"/>
    <to sec="1183784756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.91.146.162"/>
    </slice>
    <from sec="1183785301" usec="0"/>
    <to sec="1183785302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="50.147.211.170"/>
    </slice>
    <from sec="1183785195" usec="0"/>
    <to sec="1183785288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.208.178.192"/>
    </slice>
    <from sec="1183784405" usec="0"/>
    <to sec="1183785297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.206.202"/>
    </slice>
    <from sec="1183785177" usec="0"/>
    <to sec="1183785186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.936656,1.82539,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.178.206.204"/>
    </slice>
    <from sec="1183785283" usec="0"/>
    <to sec="1183785300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08658,1.77736,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_721{
style=filled;
color=gray75;
3851[label="145.84.164.35;d;13pkt 13fpkt", shape=diamond, color=yellow];
7453[label="42.131.80.234;1pkt 1fpkt", shape=invtriangle, color=brown];
7619[label="42.131.80.234;1pkt 1fpkt", shape=invhouse, color=bisque];
stat721[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.84.164.35:80}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 46030: (10%)&lt;BR/&gt; 60922: (3.33333%)&lt;BR/&gt; 60765: (3.33333%)&lt;BR/&gt; 56990: (3.33333%)&gt;];
}
3851--5292[label="0.153846;2pkt 2fpkt"];
3851--5891[label="0.0769231;1pkt 1fpkt"];
3851--5910[label="0.0769231;1pkt 1fpkt"];
3851--5913[label="0.0769231;1pkt 1fpkt"];
3851--5924[label="0.0769231;1pkt 1fpkt"];
3851--5939[label="0.0769231;1pkt 1fpkt"];
3851--5945[label="0.0769231;1pkt 1fpkt"];
3851--5960[label="0.0769231;1pkt 1fpkt"];
3851--7453[label="1;1pkt 1fpkt"];
3851--7619[label="1;1pkt 1fpkt"];
7453--7619[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.84.164.35" dst_port="80"/>
    </slice>
    <from sec="1183784400" usec="0"/>
    <to sec="1183785219" usec="0"/>
  </anomaly>

</admd:annotation>
