<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.112.183.86" dst_port="80" proto="tcp" src_ip="25.3.100.2" src_port="46026"/>
      <filter dst_ip="134.112.183.86" dst_port="80" proto="udp" src_ip="25.3.100.2" src_port="46026"/>
      <filter dst_ip="134.112.183.86" dst_port="53" proto="tcp" src_ip="25.3.100.2" src_port="46026"/>
      <filter dst_ip="134.112.183.86" dst_port="53" proto="udp" src_ip="25.3.100.2" src_port="46026"/>
      <from sec="1189314818" usec="0"/>
      <to sec="1189314822" usec="0"/>
    </slice>
    <from sec="1189314817" usec="0"/>
    <to sec="1189314822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="75.97.181.119" dst_port="80" proto="tcp" src_ip="157.25.78.8" src_port="3460"/>
      <filter dst_ip="75.97.181.119" dst_port="80" proto="udp" src_ip="157.25.78.8" src_port="3460"/>
      <filter dst_ip="75.97.181.119" dst_port="53" proto="tcp" src_ip="157.25.78.8" src_port="3460"/>
      <filter dst_ip="75.97.181.119" dst_port="53" proto="udp" src_ip="157.25.78.8" src_port="3460"/>
      <from sec="1189314847" usec="0"/>
      <to sec="1189314852" usec="0"/>
    </slice>
    <from sec="1189314847" usec="0"/>
    <to sec="1189314852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.78.169.163" dst_port="80" proto="tcp" src_ip="172.223.195.19" src_port="63644"/>
      <filter dst_ip="200.78.169.163" dst_port="80" proto="tcp" src_ip="172.223.195.19" src_port="63713"/>
      <filter dst_ip="200.78.169.163" dst_port="80" proto="tcp" src_ip="172.223.195.19" src_port="63763"/>
      <from sec="1189314762" usec="0"/>
      <to sec="1189314888" usec="0"/>
    </slice>
    <from sec="1189314762" usec="0"/>
    <to sec="1189314888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.185.9.163" dst_port="1098" proto="tcp" src_ip="217.155.108.43" src_port="80"/>
      <from sec="1189314865" usec="0"/>
      <to sec="1189314874" usec="0"/>
    </slice>
    <from sec="1189314865" usec="0"/>
    <to sec="1189314874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.141.214.171" dst_port="53" proto="tcp" src_ip="208.194.233.53" src_port="53"/>
      <filter dst_ip="0.141.214.171" dst_port="53" proto="udp" src_ip="208.194.233.53" src_port="53"/>
      <filter dst_ip="0.141.214.171" dst_port="53" proto="tcp" src_ip="208.194.233.53" src_port="22"/>
      <filter dst_ip="0.141.214.171" dst_port="53" proto="udp" src_ip="208.194.233.53" src_port="22"/>
      <filter dst_ip="0.141.214.171" dst_port="53" proto="tcp" src_ip="208.194.233.53" src_port="25"/>
      <filter dst_ip="0.141.214.171" dst_port="53" proto="udp" src_ip="208.194.233.53" src_port="25"/>
      <from sec="1189314848" usec="0"/>
      <to sec="1189314852" usec="0"/>
    </slice>
    <from sec="1189314848" usec="0"/>
    <to sec="1189314852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.155.101.67" proto="icmp" src_ip="217.155.101.67"/>
      <from sec="1189314322" usec="0"/>
      <to sec="1189314882" usec="0"/>
    </slice>
    <from sec="1189314322" usec="0"/>
    <to sec="1189314882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.155.101.72" proto="icmp" src_ip="217.155.101.72"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314901" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="128.190.69.8" dst_port="80" proto="tcp" src_ip="194.73.98.80" src_port="1606"/>
      <filter dst_ip="128.190.69.8" dst_port="80" proto="tcp" src_ip="194.73.98.80" src_port="1608"/>
      <filter dst_ip="128.190.69.8" dst_port="80" proto="tcp" src_ip="194.73.98.80" src_port="1607"/>
      <filter dst_ip="128.190.69.8" dst_port="80" proto="tcp" src_ip="194.73.98.80" src_port="1609"/>
      <from sec="1189314843" usec="0"/>
      <to sec="1189314875" usec="0"/>
    </slice>
    <from sec="1189314843" usec="0"/>
    <to sec="1189314875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="tcp" src_ip="217.108.238.129" src_port="80"/>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="udp" src_ip="217.108.238.129" src_port="80"/>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="tcp" src_ip="217.108.238.129" src_port="53"/>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="udp" src_ip="217.108.238.129" src_port="53"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="tcp" src_ip="217.108.238.129" src_port="80"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="udp" src_ip="217.108.238.129" src_port="80"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="tcp" src_ip="217.108.238.129" src_port="53"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="udp" src_ip="217.108.238.129" src_port="53"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="tcp" src_ip="217.108.238.129" src_port="80"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="udp" src_ip="217.108.238.129" src_port="80"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="tcp" src_ip="217.108.238.129" src_port="53"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="udp" src_ip="217.108.238.129" src_port="53"/>
      <from sec="1189314848" usec="0"/>
      <to sec="1189314852" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="tcp" src_ip="77.8.235.209" src_port="80"/>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="udp" src_ip="77.8.235.209" src_port="80"/>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="tcp" src_ip="77.8.235.209" src_port="53"/>
      <filter dst_ip="134.100.119.195" dst_port="62739" proto="udp" src_ip="77.8.235.209" src_port="53"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="tcp" src_ip="77.8.235.209" src_port="80"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="udp" src_ip="77.8.235.209" src_port="80"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="tcp" src_ip="77.8.235.209" src_port="53"/>
      <filter dst_ip="168.206.6.66" dst_port="62739" proto="udp" src_ip="77.8.235.209" src_port="53"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="tcp" src_ip="77.8.235.209" src_port="80"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="udp" src_ip="77.8.235.209" src_port="80"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="tcp" src_ip="77.8.235.209" src_port="53"/>
      <filter dst_ip="128.190.86.228" dst_port="62739" proto="udp" src_ip="77.8.235.209" src_port="53"/>
      <from sec="1189314848" usec="0"/>
      <to sec="1189314852" usec="0"/>
    </slice>
    <from sec="1189314848" usec="0"/>
    <to sec="1189314852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.98.214.249" dst_port="53" proto="tcp" src_ip="128.190.80.191" src_port="57454"/>
      <filter dst_ip="216.98.214.249" dst_port="53" proto="udp" src_ip="128.190.80.191" src_port="57454"/>
      <filter dst_ip="216.98.214.249" dst_port="80" proto="tcp" src_ip="128.190.80.191" src_port="57454"/>
      <filter dst_ip="216.98.214.249" dst_port="80" proto="udp" src_ip="128.190.80.191" src_port="57454"/>
      <from sec="1189314116" usec="0"/>
      <to sec="1189314384" usec="0"/>
    </slice>
    <from sec="1189314116" usec="0"/>
    <to sec="1189314384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.237.27.81" dst_port="80" proto="tcp" src_ip="134.99.179.214"/>
      <from sec="1189314829" usec="0"/>
      <to sec="1189314872" usec="0"/>
    </slice>
    <from sec="1189314829" usec="0"/>
    <to sec="1189314875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="tcp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="icmp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="tcp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="icmp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="tcp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="icmp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="tcp" src_ip="134.131.36.236" src_port="5168"/>
      <filter dst_ip="77.5.98.0" dst_port="6000" proto="icmp" src_ip="134.131.36.236" src_port="5168"/>
      <from sec="1189314589" usec="0"/>
      <to sec="1189314592" usec="0"/>
    </slice>
    <from sec="1189314589" usec="0"/>
    <to sec="1189314592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50280"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="53" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="25" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="tcp" src_ip="200.78.217.16" src_port="50258"/>
      <filter dst_ip="200.78.217.16" dst_port="80" proto="udp" src_ip="200.78.217.16" src_port="50258"/>
      <from sec="1189314281" usec="0"/>
      <to sec="1189314814" usec="0"/>
    </slice>
    <from sec="1189314281" usec="0"/>
    <to sec="1189314814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="217.155.105.35" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="59935"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="53" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="25" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="63013"/>
      <filter dst_ip="217.155.105.35" dst_port="22" proto="udp" src_ip="0.141.214.171" src_port="63013"/>
      <from sec="1189314064" usec="0"/>
      <to sec="1189314888" usec="0"/>
    </slice>
    <from sec="1189314064" usec="0"/>
    <to sec="1189314888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="53" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="25" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="udp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="tcp" src_ip="217.155.109.37"/>
      <filter dst_ip="217.155.109.37" dst_port="80" proto="udp" src_ip="217.155.109.37"/>
      <from sec="1189314064" usec="0"/>
      <to sec="1189314620" usec="0"/>
    </slice>
    <from sec="1189314064" usec="0"/>
    <to sec="1189314620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="53" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="udp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="tcp" src_ip="216.98.208.38"/>
      <filter dst_ip="216.98.208.38" dst_port="80" proto="udp" src_ip="216.98.208.38"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314901" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="53" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="udp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="tcp" src_ip="208.194.233.53"/>
      <filter dst_ip="208.194.233.53" dst_port="80" proto="udp" src_ip="208.194.233.53"/>
      <from sec="1189314064" usec="0"/>
      <to sec="1189314896" usec="0"/>
    </slice>
    <from sec="1189314064" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933585,1.52008,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
20[label="201.59.189.51s;1pkt 1fpkt", shape=rectangle, color=red];
94[label="134.168.178.100d;1pkt 1fpkt", shape=rectangle, color=red];
977[label="201.59.189.51;s;2pkt 2fpkt", shape=diamond, color=yellow];
4314[label="201.59.189.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.59.189.51:0, 134.168.153.67:0}[50%]&lt;BR/&gt;{201.59.189.51:80, 134.168.178.100:1731}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1731: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
20--94[label="1;1pkt 1fpkt"];
20--977[label="1;1pkt 1fpkt"];
20--1262[label="1;1pkt 1fpkt"];
20--3103[label="1;1pkt 1fpkt"];
20--4314[label="1;1pkt 1fpkt"];
94--977[label="1;1pkt 1fpkt"];
94--1262[label="1;1pkt 1fpkt"];
94--3103[label="1;1pkt 1fpkt"];
94--4314[label="1;1pkt 1fpkt"];
977--1262[label="0.5;1pkt 1fpkt"];
977--3103[label="0.5;1pkt 1fpkt"];
977--4314[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.168.178.100" dst_port="1731" src_ip="201.59.189.51" src_port="80"/>
      <filter dst_ip="134.168.153.67" src_ip="201.59.189.51"/>
    </slice>
    <from sec="1189314125" usec="0"/>
    <to sec="1189314435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="53" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="udp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="tcp" src_ip="216.98.212.160"/>
      <filter dst_ip="216.98.212.160" dst_port="80" proto="udp" src_ip="216.98.212.160"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314901" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="33.117.130.86" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="1299" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="80" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <filter dst_ip="134.112.226.250" dst_port="53" proto="tcp" src_ip="168.206.7.116" src_port="80"/>
      <from sec="1189314870" usec="0"/>
      <to sec="1189314875" usec="0"/>
    </slice>
    <from sec="1189314870" usec="0"/>
    <to sec="1189314875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.158.194.100" proto="icmp" src_ip="32.235.90.13"/>
      <from sec="1189314235" usec="0"/>
      <to sec="1189314424" usec="0"/>
    </slice>
    <from sec="1189314235" usec="0"/>
    <to sec="1189314424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.228.201.146" dst_port="80" proto="tcp" src_ip="128.190.2.199"/>
      <from sec="1189314883" usec="0"/>
      <to sec="1189314893" usec="0"/>
    </slice>
    <from sec="1189314883" usec="0"/>
    <to sec="1189314893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="tcp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="udp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="tcp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="udp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="tcp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="udp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="tcp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="udp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="tcp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="udp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="tcp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="udp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="tcp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="udp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="tcp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="udp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="tcp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="udp" src_ip="157.25.36.225" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="tcp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="udp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="tcp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="udp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="tcp" src_ip="157.25.36.225" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="udp" src_ip="157.25.36.225" src_port="1353"/>
      <from sec="1189314875" usec="0"/>
      <to sec="1189314879" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="tcp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="udp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="tcp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="udp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="tcp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="udp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="tcp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="80" proto="udp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="tcp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="53" proto="udp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="tcp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="203.43.122.185" dst_port="25" proto="udp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="tcp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="udp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="tcp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="udp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="tcp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="udp" src_ip="128.190.241.194" src_port="1357"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="tcp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="80" proto="udp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="tcp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="53" proto="udp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="tcp" src_ip="128.190.241.194" src_port="1353"/>
      <filter dst_ip="26.30.22.180" dst_port="25" proto="udp" src_ip="128.190.241.194" src_port="1353"/>
      <from sec="1189314874" usec="0"/>
      <to sec="1189314876" usec="0"/>
    </slice>
    <from sec="1189314874" usec="0"/>
    <to sec="1189314879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="0.141.214.171" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="80" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="22" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <filter dst_ip="200.78.173.174" dst_port="25" proto="tcp" src_ip="168.206.27.213" src_port="42582"/>
      <from sec="1189314870" usec="0"/>
      <to sec="1189314875" usec="0"/>
    </slice>
    <from sec="1189314870" usec="0"/>
    <to sec="1189314875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="196.47.169.18" src_port="57792"/>
      <from sec="1189314244" usec="0"/>
      <to sec="1189314247" usec="0"/>
    </slice>
    <from sec="1189314244" usec="0"/>
    <to sec="1189314247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="1026" proto="udp" src_ip="195.75.159.72" src_port="51419"/>
      <filter dst_port="1027" proto="udp" src_ip="195.75.159.72" src_port="51419"/>
      <from sec="1189314865" usec="0"/>
      <to sec="1189314866" usec="0"/>
    </slice>
    <from sec="1189314865" usec="0"/>
    <to sec="1189314867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="77.72.21.115" src_port="17753"/>
      <filter dst_port="137" proto="udp" src_ip="77.72.21.115" src_port="18271"/>
      <from sec="1189314741" usec="0"/>
      <to sec="1189314755" usec="0"/>
    </slice>
    <from sec="1189314741" usec="0"/>
    <to sec="1189314755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.162.77.151" proto="tcp" src_port="445"/>
      <filter dst_ip="77.162.77.151" proto="tcp" src_port="445"/>
      <filter dst_ip="77.162.77.151" proto="tcp" src_port="445"/>
      <filter dst_ip="77.162.77.151" proto="tcp" src_port="445"/>
      <from sec="1189314862" usec="0"/>
      <to sec="1189314864" usec="0"/>
    </slice>
    <from sec="1189314862" usec="0"/>
    <to sec="1189314864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="33.158.194.100" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="53" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="tcp" src_ip="195.74.217.224" src_port="36170"/>
      <filter dst_ip="168.206.4.242" dst_port="25" proto="udp" src_ip="195.74.217.224" src_port="36170"/>
      <from sec="1189314474" usec="0"/>
      <to sec="1189314479" usec="0"/>
    </slice>
    <from sec="1189314474" usec="0"/>
    <to sec="1189314479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314739" usec="0"/>
    </slice>
    <from sec="7536750" usec="0"/>
    <to sec="24842384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
296[label="2.25.178.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
297[label="216.219.229.198;d;1599pkt 1599fpkt", shape=diamond, color=yellow];
422[label="198.238.75.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
423[label="168.206.38.9;d;28pkt 28fpkt", shape=diamond, color=yellow];
635[label="2.25.180.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
1735[label="215.7.76.13;s;3pkt 3fpkt", shape=diamond, color=yellow];
1773[label="210.171.29.7;s;1pkt 1fpkt", shape=diamond, color=yellow];
3990[label="210.171.29.7;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4523[label="210.144.206.84;18pkt 18fpkt", shape=pentagon, color=darkviolet];
4658[label="20.24.170.105;34pkt 34fpkt", shape=pentagon, color=darkviolet];
4786[label="21.38.248.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4946[label="81.231.68.150;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5084[label="9.29.122.175;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5146[label="16.42.49.185;36pkt 36fpkt", shape=pentagon, color=darkviolet];
5229[label="174.171.107.198;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5449[label="20.147.195.234;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5928[label="20.24.170.105;34pkt 34fpkt", shape=invtriangle, color=brown];
5998[label="21.38.248.128;2pkt 2fpkt", shape=invtriangle, color=brown];
6069[label="81.231.68.150;15pkt 15fpkt", shape=invtriangle, color=brown];
6179[label="16.42.49.185;36pkt 36fpkt", shape=invtriangle, color=brown];
6335[label="20.147.195.234;2pkt 2fpkt", shape=invtriangle, color=brown];
6703[label="16.42.49.185;36pkt 36fpkt", shape=invhouse, color=bisque];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.43.241.13:80, 216.219.229.198:*}[34.0705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5514%)&lt;BR/&gt; 33438: (2.55727%)&lt;BR/&gt; 33435: (0.745871%)&lt;BR/&gt; 33437: (0.372936%)&lt;BR/&gt; 33436: (0.372936%)&gt;];
}
296--297[label="1;1pkt 1fpkt"];
297--322[label="1;1pkt 1fpkt"];
297--370[label="1;1pkt 1fpkt"];
297--411[label="1;1pkt 1fpkt"];
297--635[label="1;1pkt 1fpkt"];
297--657[label="1;1pkt 1fpkt"];
297--744[label="1;570pkt 570fpkt"];
297--966[label="1;22pkt 22fpkt"];
297--1038[label="0.0294118;2pkt 2fpkt"];
297--1409[label="0.00649351;1pkt 1fpkt"];
297--1499[label="1;1pkt 1fpkt"];
297--1507[label="0.00510204;1pkt 1fpkt"];
297--1715[label="0.160714;9pkt 9fpkt"];
297--1732[label="0.75;3pkt 3fpkt"];
297--1735[label="0.333333;1pkt 1fpkt"];
297--1773[label="1;1pkt 1fpkt"];
297--1779[label="0.666667;2pkt 2fpkt"];
297--1876[label="1;166pkt 166fpkt"];
297--1911[label="1;159pkt 159fpkt"];
297--2140[label="0.00943396;1pkt 1fpkt"];
297--2920[label="1;1pkt 1fpkt"];
297--3036[label="1;1pkt 1fpkt"];
297--3046[label="1;1pkt 1fpkt"];
297--3294[label="0.666667;2pkt 2fpkt"];
297--3511[label="1;1pkt 1fpkt"];
297--3721[label="0.5;1pkt 1fpkt"];
297--3781[label="0.0719199;115pkt 115fpkt"];
297--3806[label="0.0750469;120pkt 120fpkt"];
297--3852[label="0.0719199;115pkt 115fpkt"];
297--3868[label="0.0750469;120pkt 120fpkt"];
297--3902[label="0.0719199;115pkt 115fpkt"];
297--3923[label="0.0750469;120pkt 120fpkt"];
297--3951[label="0.666667;2pkt 2fpkt"];
297--3990[label="1;2pkt 2fpkt"];
297--4523[label="1;18pkt 18fpkt"];
297--4658[label="0.411765;14pkt 14fpkt"];
297--4786[label="1;2pkt 2fpkt"];
297--4821[label="0.5;1pkt 1fpkt"];
297--4826[label="0.0232558;1pkt 1fpkt"];
297--4946[label="1;15pkt 15fpkt"];
297--5084[label="1;2pkt 2fpkt"];
297--5146[label="0.0555556;2pkt 2fpkt"];
297--5229[label="0.714286;5pkt 5fpkt"];
297--5382[label="0.00692042;2pkt 2fpkt"];
297--5449[label="0.5;1pkt 1fpkt"];
297--5466[label="0.902439;37pkt 37fpkt"];
297--5571[label="1;2pkt 2fpkt"];
297--5928[label="0.411765;14pkt 14fpkt"];
297--5998[label="1;2pkt 2fpkt"];
297--6015[label="0.5;1pkt 1fpkt"];
297--6069[label="1;15pkt 15fpkt"];
297--6179[label="0.0555556;2pkt 2fpkt"];
297--6335[label="0.5;1pkt 1fpkt"];
297--6344[label="0.902439;37pkt 37fpkt"];
297--6397[label="0.666667;2pkt 2fpkt"];
297--6626[label="0.5;1pkt 1fpkt"];
297--6703[label="0.0555556;2pkt 2fpkt"];
422--423[label="1;1pkt 1fpkt"];
423--4658[label="0.464286;13pkt 13fpkt"];
423--5928[label="0.464286;13pkt 13fpkt"];
1773--3990[label="1;1pkt 1fpkt"];
4658--5928[label="1;34pkt 34fpkt"];
4786--5998[label="1;2pkt 2fpkt"];
4946--6069[label="1;15pkt 15fpkt"];
5146--6179[label="1;36pkt 36fpkt"];
5146--6703[label="1;36pkt 36fpkt"];
5449--6335[label="1;2pkt 2fpkt"];
6179--6703[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="216.219.229.198" src_ip="222.43.241.13" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
349[label="202.156.33.37;d;3pkt 3fpkt", shape=diamond, color=yellow];
350[label="157.25.0.61;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.0.61:19101, 202.156.33.37:1813}[33.3333%]&lt;BR/&gt;{157.25.0.61:19101, 202.156.33.37:1815}[33.3333%]&lt;BR/&gt;{157.25.0.61:19101, 202.156.33.37:1819}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (50%)&lt;BR/&gt; 1819: (16.6667%)&lt;BR/&gt; 1815: (16.6667%)&lt;BR/&gt; 1813: (16.6667%)&gt;];
}
349--350[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="202.156.33.37" dst_port="1819" src_ip="157.25.0.61" src_port="19101"/>
      <filter dst_ip="202.156.33.37" dst_port="1815" src_ip="157.25.0.61" src_port="19101"/>
      <filter dst_ip="202.156.33.37" dst_port="1813" src_ip="157.25.0.61" src_port="19101"/>
    </slice>
    <from sec="1189314260" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
2839[label="217.245.67.178;s;2pkt 2fpkt", shape=diamond, color=yellow];
5104[label="217.245.67.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6153[label="217.245.67.178;2pkt 2fpkt", shape=invtriangle, color=brown];
6694[label="217.245.67.178;2pkt 2fpkt", shape=invhouse, color=bisque];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.245.67.178:3612, 217.155.101.67:8080}[50%]&lt;BR/&gt;{217.245.67.178:3623, 217.155.101.67:8080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3623: (25%)&lt;BR/&gt; 3612: (25%)&gt;];
}
2839--5104[label="1;2pkt 2fpkt"];
2839--6153[label="1;2pkt 2fpkt"];
2839--6694[label="1;2pkt 2fpkt"];
5104--6153[label="1;2pkt 2fpkt"];
5104--6694[label="1;2pkt 2fpkt"];
6153--6694[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.101.67" dst_port="8080" src_ip="217.245.67.178" src_port="3623"/>
      <filter dst_ip="217.155.101.67" dst_port="8080" src_ip="217.245.67.178" src_port="3612"/>
    </slice>
    <from sec="1189314796" usec="0"/>
    <to sec="1189314855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00614,1.52978,503,1 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
114[label="134.99.172.248s;4pkt 4fpkt", shape=rectangle, color=red];
420[label="134.99.172.248;s;439pkt 439fpkt", shape=diamond, color=yellow];
6375[label="134.99.172.248;241pkt 241fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.172.248:*, *:80}[97.0387%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3918%)&lt;BR/&gt; 8080: (1.60819%)&lt;BR/&gt; 50098: (0.219298%)&lt;BR/&gt; 50097: (0.219298%)&lt;BR/&gt; 50096: (0.219298%)&gt;];
}
114--420[label="1;4pkt 4fpkt"];
114--6375[label="1;4pkt 4fpkt"];
420--531[label="0.0169492;4pkt 4fpkt"];
420--556[label="0.0121457;3pkt 3fpkt"];
420--918[label="0.00240964;1pkt 1fpkt"];
420--1094[label="0.0033557;1pkt 1fpkt"];
420--2901[label="0.0188679;1pkt 1fpkt"];
420--3252[label="0.0180723;3pkt 3fpkt"];
420--3762[label="0.0660592;29pkt 29fpkt"];
420--3785[label="0.0774487;34pkt 34fpkt"];
420--3807[label="0.0022779;1pkt 1fpkt"];
420--6375[label="1;241pkt 241fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="134.99.172.248"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.118.198.147"/>
      <from sec="1189314575" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314575" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.118.198.147"/>
      <from sec="1189314575" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314575" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
484[label="217.155.109.164;s;529pkt 529fpkt", shape=diamond, color=yellow];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.109.164:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
484--751[label="0.00645161;1pkt 1fpkt"];
484--1022[label="0.00909091;1pkt 1fpkt"];
484--1263[label="0.00534759;1pkt 1fpkt"];
484--1509[label="0.00588235;1pkt 1fpkt"];
484--1575[label="0.00246305;1pkt 1fpkt"];
484--1579[label="0.0125;1pkt 1fpkt"];
484--1586[label="0.00257069;1pkt 1fpkt"];
484--1599[label="0.00260417;1pkt 1fpkt"];
484--1821[label="0.00284091;1pkt 1fpkt"];
484--1842[label="0.00277778;1pkt 1fpkt"];
484--1858[label="0.00189036;1pkt 1fpkt"];
484--2047[label="0.00320513;1pkt 1fpkt"];
484--2055[label="0.00362319;1pkt 1fpkt"];
484--2079[label="0.00330033;1pkt 1fpkt"];
484--2331[label="0.00268097;1pkt 1fpkt"];
484--2347[label="0.00420168;1pkt 1fpkt"];
484--2412[label="0.010101;1pkt 1fpkt"];
484--2586[label="0.00469484;1pkt 1fpkt"];
484--3104[label="0.00534759;1pkt 1fpkt"];
484--3134[label="0.00877193;1pkt 1fpkt"];
484--3229[label="0.00694444;1pkt 1fpkt"];
484--3233[label="0.00288184;1pkt 1fpkt"];
484--3319[label="0.00374532;1pkt 1fpkt"];
484--3640[label="0.00588235;1pkt 1fpkt"];
484--3714[label="0.00381679;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="217.155.109.164"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
607[label="170.233.69.151;s;2pkt 2fpkt", shape=diamond, color=yellow];
610[label="22.76.5.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.233.69.151:80, 22.76.5.27:61056}[50%]&lt;BR/&gt;{170.233.69.151:80, 25.3.99.206:53835}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61056: (33.3333%)&lt;BR/&gt; 53835: (16.6667%)&gt;];
}
607--610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.3.99.206" dst_port="53835" src_ip="170.233.69.151" src_port="80"/>
      <filter dst_ip="22.76.5.27" dst_port="61056" src_ip="170.233.69.151" src_port="80"/>
    </slice>
    <from sec="1189314015" usec="0"/>
    <to sec="1189314081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
384[label="217.171.109.91;d;3pkt 3fpkt", shape=diamond, color=yellow];
738[label="157.25.5.213;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.5.213:47580, 217.171.109.91:22}[33.3333%]&lt;BR/&gt;{157.25.5.213:47622, 217.171.109.91:22}[33.3333%]&lt;BR/&gt;{157.25.5.213:47650, 217.171.109.91:22}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 47650: (16.6667%)&lt;BR/&gt; 47622: (16.6667%)&lt;BR/&gt; 47580: (16.6667%)&gt;];
}
384--738[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="217.171.109.91" dst_port="22" src_ip="157.25.5.213" src_port="47650"/>
      <filter dst_ip="217.171.109.91" dst_port="22" src_ip="157.25.5.213" src_port="47622"/>
      <filter dst_ip="217.171.109.91" dst_port="22" src_ip="157.25.5.213" src_port="47580"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="157.25.5.159"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
269[label="168.206.4.242;d;1245pkt 1245fpkt", shape=diamond, color=yellow];
807[label="202.40.12.43;s;2pkt 2fpkt", shape=diamond, color=yellow];
833[label="197.140.41.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
1098[label="39.164.210.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
1126[label="194.44.216.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
1355[label="193.216.215.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
1364[label="39.69.153.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
1389[label="193.153.97.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
1574[label="36.71.173.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1616[label="32.228.16.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
1653[label="195.70.134.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
1719[label="28.90.50.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
1834[label="36.73.27.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
1846[label="33.164.130.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
1874[label="76.1.168.142;s;7pkt 7fpkt", shape=diamond, color=yellow];
2209[label="195.105.148.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
2762[label="76.20.40.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
4750[label="216.35.38.122;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4937[label="195.75.8.149;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4941[label="195.105.148.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5500[label="195.87.104.245;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5978[label="216.35.38.122;24pkt 24fpkt", shape=invtriangle, color=brown];
6068[label="195.105.148.149;1pkt 1fpkt", shape=invtriangle, color=brown];
6607[label="216.35.38.122;24pkt 24fpkt", shape=invhouse, color=bisque];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.206.4.242:10339}[57.0743%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10339: (26.5405%)&lt;BR/&gt; 0: (7.72086%)&lt;BR/&gt; 7134: (6.68151%)&lt;BR/&gt; 80: (3.37788%)&lt;BR/&gt; 9584: (0.519673%)&gt;];
}
269--807[label="1;2pkt 2fpkt"];
269--833[label="1;1pkt 1fpkt"];
269--1087[label="1;1pkt 1fpkt"];
269--1098[label="1;1pkt 1fpkt"];
269--1126[label="1;1pkt 1fpkt"];
269--1355[label="1;1pkt 1fpkt"];
269--1364[label="1;1pkt 1fpkt"];
269--1389[label="1;1pkt 1fpkt"];
269--1404[label="1;1pkt 1fpkt"];
269--1574[label="1;1pkt 1fpkt"];
269--1616[label="1;1pkt 1fpkt"];
269--1653[label="1;1pkt 1fpkt"];
269--1719[label="1;1pkt 1fpkt"];
269--1834[label="1;1pkt 1fpkt"];
269--1846[label="1;1pkt 1fpkt"];
269--1852[label="1;4pkt 4fpkt"];
269--1874[label="1;7pkt 7fpkt"];
269--1940[label="1;1pkt 1fpkt"];
269--2209[label="1;1pkt 1fpkt"];
269--2762[label="1;2pkt 2fpkt"];
269--3161[label="1;1pkt 1fpkt"];
269--3331[label="1;3pkt 3fpkt"];
269--3372[label="1;1pkt 1fpkt"];
269--3610[label="1;1pkt 1fpkt"];
269--3806[label="0.00240964;3pkt 3fpkt"];
269--3868[label="0.00240964;3pkt 3fpkt"];
269--3923[label="0.00240964;3pkt 3fpkt"];
269--4750[label="0.75;18pkt 18fpkt"];
269--4937[label="1;2pkt 2fpkt"];
269--4941[label="1;1pkt 1fpkt"];
269--5102[label="1;2pkt 2fpkt"];
269--5500[label="1;2pkt 2fpkt"];
269--5978[label="0.75;18pkt 18fpkt"];
269--6068[label="1;1pkt 1fpkt"];
269--6151[label="1;2pkt 2fpkt"];
269--6607[label="0.75;18pkt 18fpkt"];
2209--4941[label="1;1pkt 1fpkt"];
2209--6068[label="1;1pkt 1fpkt"];
4750--5978[label="1;24pkt 24fpkt"];
4750--6607[label="1;24pkt 24fpkt"];
4941--6068[label="1;1pkt 1fpkt"];
5978--6607[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="10339"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
562[label="168.206.6.141;d;28pkt 28fpkt", shape=diamond, color=yellow];
652[label="23.20.217.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
660[label="23.20.217.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
675[label="23.20.217.83;s;1pkt 1fpkt", shape=diamond, color=yellow];
940[label="201.59.188.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
2551[label="33.117.148.63;s;2pkt 2fpkt", shape=diamond, color=yellow];
3174[label="168.206.6.141;d;19pkt 19fpkt", shape=hexagon, color=black];
4514[label="23.20.217.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.252.222.190:80, 168.206.6.141:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0741%)&lt;BR/&gt; 1873: (3.7037%)&lt;BR/&gt; 1868: (2.77778%)&lt;BR/&gt; 1866: (2.77778%)&lt;BR/&gt; 1862: (2.77778%)&gt;];
}
562--652[label="1;1pkt 1fpkt"];
562--660[label="1;1pkt 1fpkt"];
562--675[label="1;1pkt 1fpkt"];
562--892[label="0.0714286;2pkt 2fpkt"];
562--940[label="1;1pkt 1fpkt"];
562--1142[label="0.178571;5pkt 5fpkt"];
562--1408[label="0.214286;6pkt 6fpkt"];
562--1633[label="0.0357143;1pkt 1fpkt"];
562--2551[label="1;2pkt 2fpkt"];
562--3174[label="1;19pkt 19fpkt"];
562--3781[label="0.107143;3pkt 3fpkt"];
562--3806[label="0.142857;4pkt 4fpkt"];
562--3852[label="0.107143;3pkt 3fpkt"];
562--3868[label="0.142857;4pkt 4fpkt"];
562--3902[label="0.107143;3pkt 3fpkt"];
562--3923[label="0.142857;4pkt 4fpkt"];
562--4514[label="1;1pkt 1fpkt"];
562--5177[label="0.178571;5pkt 5fpkt"];
562--6196[label="0.178571;5pkt 5fpkt"];
652--3174[label="1;1pkt 1fpkt"];
660--3174[label="1;1pkt 1fpkt"];
675--3174[label="1;1pkt 1fpkt"];
675--4514[label="1;1pkt 1fpkt"];
940--3174[label="1;1pkt 1fpkt"];
3174--4514[label="1;1pkt 1fpkt"];
3174--5177[label="0.263158;5pkt 5fpkt"];
3174--6196[label="0.263158;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.6.141" src_ip="217.252.222.190" src_port="80"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
580[label="196.248.0.190;d;12pkt 12fpkt", shape=diamond, color=yellow];
894[label="134.99.145.58;s;16pkt 16fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.145.58:80, 196.248.0.190:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4286%)&lt;BR/&gt; 49465: (3.57143%)&lt;BR/&gt; 49461: (3.57143%)&lt;BR/&gt; 49460: (3.57143%)&lt;BR/&gt; 49459: (3.57143%)&gt;];
}
580--894[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="196.248.0.190" src_ip="134.99.145.58" src_port="80"/>
    </slice>
    <from sec="1189314229" usec="0"/>
    <to sec="1189314463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.112.166.142"/>
      <from sec="1189314013" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314013" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
1033[label="170.233.2.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
1034[label="198.26.16.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
3304[label="198.26.16.27;d;1pkt 1fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.233.2.106:1033, 198.26.16.27:20258}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20258: (50%)&lt;BR/&gt; 1033: (50%)&gt;];
}
1033--1034[label="1;1pkt 1fpkt"];
1033--3304[label="1;1pkt 1fpkt"];
1034--3304[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.26.16.27" dst_port="20258" src_ip="170.233.2.106" src_port="1033"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
284[label="134.112.110.99;d;3100pkt 3100fpkt", shape=diamond, color=yellow];
697[label="77.74.137.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
734[label="74.85.114.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
1036[label="32.96.249.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
1099[label="74.84.76.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
2761[label="25.119.179.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
3321[label="74.84.76.123;s;1pkt 1fpkt", shape=hexagon, color=black];
4855[label="32.109.153.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.112.110.99:35801}[91.9355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35801: (45.8642%)&lt;BR/&gt; 4672: (9.07628%)&lt;BR/&gt; 30403: (3.18635%)&lt;BR/&gt; 0: (0.482781%)&lt;BR/&gt; 4671: (0.321854%)&gt;];
}
284--697[label="1;1pkt 1fpkt"];
284--734[label="1;1pkt 1fpkt"];
284--801[label="1;1pkt 1fpkt"];
284--1036[label="1;1pkt 1fpkt"];
284--1099[label="1;1pkt 1fpkt"];
284--2761[label="1;1pkt 1fpkt"];
284--3054[label="1;1pkt 1fpkt"];
284--3321[label="1;1pkt 1fpkt"];
284--4855[label="1;1pkt 1fpkt"];
1099--3321[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.110.99" dst_port="35801"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.168.158.13"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314825" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
421[label="128.190.106.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
1054[label="33.112.244.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.106.132:548, 33.112.244.104:49219}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49219: (50%)&lt;BR/&gt; 548: (50%)&gt;];
}
421--1054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.112.244.104" dst_port="49219" src_ip="128.190.106.132" src_port="548"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
761[label="168.206.38.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.38.9:2594, 33.117.148.88:80}[50%]&lt;BR/&gt;{168.206.38.9:2623, 198.238.75.184:1935}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2623: (25%)&lt;BR/&gt; 2594: (25%)&lt;BR/&gt; 1935: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
761--1055[label="1;1pkt 1fpkt"];
761--3145[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.238.75.184" dst_port="1935" src_ip="168.206.38.9" src_port="2623"/>
      <filter dst_ip="33.117.148.88" dst_port="80" src_ip="168.206.38.9" src_port="2594"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
757[label="134.112.86.225;s;2pkt 2fpkt", shape=diamond, color=yellow];
1050[label="217.234.89.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
1069[label="217.234.89.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
2948[label="134.112.86.225;s;2pkt 2fpkt", shape=hexagon, color=black];
3047[label="217.234.89.212;d;1pkt 1fpkt", shape=hexagon, color=black];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.86.225:2076, 217.234.89.212:13201}[50%]&lt;BR/&gt;{134.112.86.225:2078, 217.234.89.214:16201}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13201: (28.5714%)&lt;BR/&gt; 2076: (28.5714%)&lt;BR/&gt; 16201: (21.4286%)&lt;BR/&gt; 2078: (21.4286%)&gt;];
}
757--1050[label="1;1pkt 1fpkt"];
757--1069[label="1;1pkt 1fpkt"];
757--2948[label="1;2pkt 2fpkt"];
757--3047[label="1;1pkt 1fpkt"];
1050--2948[label="1;1pkt 1fpkt"];
1050--3047[label="1;1pkt 1fpkt"];
1069--2948[label="1;1pkt 1fpkt"];
2948--3047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.234.89.214" dst_port="16201" src_ip="134.112.86.225" src_port="2078"/>
      <filter dst_ip="217.234.89.212" dst_port="13201" src_ip="134.112.86.225" src_port="2076"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="33.225.6.195"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314828" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
1090[label="217.155.110.6;d;425pkt 425fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.155.110.6:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1090--1259[label="0.00235294;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.110.6"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1023[label="168.206.6.61;d;37pkt 37fpkt", shape=diamond, color=yellow];
1128[label="32.116.51.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.206.6.61:46929}[67.5676%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46929: (32.8947%)&lt;BR/&gt; 0: (10.5263%)&lt;BR/&gt; 80: (5.26316%)&lt;BR/&gt; 55186: (2.63158%)&lt;BR/&gt; 32441: (2.63158%)&gt;];
}
1023--1128[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.6.61" dst_port="46929"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
1[label="128.190.216.0s;2pkt 2fpkt", shape=rectangle, color=red];
1316[label="217.108.238.214;d;6pkt 6fpkt", shape=diamond, color=yellow];
1969[label="217.108.238.236;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.216.0:*, 217.108.238.214:554}[60%]&lt;BR/&gt;{128.190.216.0:*, 217.108.238.236:554}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 2169: (8.33333%)&lt;BR/&gt; 2060: (8.33333%)&lt;BR/&gt; 2166: (4.16667%)&lt;BR/&gt; 2162: (4.16667%)&gt;];
}
1--1170[label="1;2pkt 2fpkt"];
1--1316[label="0.5;1pkt 1fpkt"];
1--1969[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.108.238.214" dst_port="554" src_ip="128.190.216.0"/>
      <filter dst_ip="217.108.238.236" dst_port="554" src_ip="128.190.216.0"/>
    </slice>
    <from sec="1189314243" usec="0"/>
    <to sec="1189314612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
241[label="216.212.114.51;d;8784pkt 8784fpkt", shape=diamond, color=yellow];
611[label="197.21.238.77;s;3pkt 3fpkt", shape=diamond, color=yellow];
1971[label="193.182.21.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
1988[label="43.119.154.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
2189[label="75.18.237.165;s;2pkt 2fpkt", shape=diamond, color=yellow];
2777[label="197.25.154.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
2779[label="33.14.184.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
4076[label="193.219.0.18;13pkt 13fpkt", shape=pentagon, color=darkviolet];
4138[label="39.142.168.26;20pkt 20fpkt", shape=pentagon, color=darkviolet];
4160[label="194.59.237.29;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4193[label="33.14.184.34;3pkt 3fpkt", shape=pentagon, color=darkviolet];
4609[label="193.192.168.99;5pkt 5fpkt", shape=pentagon, color=darkviolet];
4620[label="32.141.21.101;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4636[label="196.56.144.103;2pkt 2fpkt", shape=pentagon, color=darkviolet];
4746[label="75.154.222.120;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4890[label="193.195.220.142;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4945[label="74.12.45.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4953[label="195.150.73.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4956[label="33.235.215.151;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5077[label="32.227.182.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5139[label="194.14.117.183;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5248[label="76.161.79.201;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5287[label="195.74.104.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5358[label="195.105.26.221;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5536[label="39.204.130.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5634[label="193.219.0.18;13pkt 13fpkt", shape=invtriangle, color=brown];
5666[label="39.142.168.26;20pkt 20fpkt", shape=invtriangle, color=brown];
5673[label="194.59.237.29;5pkt 5fpkt", shape=invtriangle, color=brown];
5903[label="193.192.168.99;5pkt 5fpkt", shape=invtriangle, color=brown];
5976[label="75.154.222.120;11pkt 11fpkt", shape=invtriangle, color=brown];
6174[label="194.14.117.183;8pkt 8fpkt", shape=invtriangle, color=brown];
6229[label="76.161.79.201;2pkt 2fpkt", shape=invtriangle, color=brown];
6249[label="195.74.104.209;1pkt 1fpkt", shape=invtriangle, color=brown];
6433[label="193.219.0.18;13pkt 13fpkt", shape=invhouse, color=bisque];
6449[label="39.142.168.26;20pkt 20fpkt", shape=invhouse, color=bisque];
6453[label="194.59.237.29;5pkt 5fpkt", shape=invhouse, color=bisque];
6722[label="76.161.79.201;2pkt 2fpkt", shape=invhouse, color=bisque];
6733[label="195.74.104.209;1pkt 1fpkt", shape=invhouse, color=bisque];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.212.114.51:28192}[35.3062%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28192: (17.3147%)&lt;BR/&gt; 80: (4.46617%)&lt;BR/&gt; 0: (0.644373%)&lt;BR/&gt; 6699: (0.522164%)&lt;BR/&gt; 14929: (0.499944%)&gt;];
}
241--547[label="0.00478469;1pkt 1fpkt"];
241--611[label="1;3pkt 3fpkt"];
241--766[label="1;2pkt 2fpkt"];
241--812[label="1;1pkt 1fpkt"];
241--1142[label="0.0125;1pkt 1fpkt"];
241--1205[label="1;12pkt 12fpkt"];
241--1369[label="1;1pkt 1fpkt"];
241--1397[label="1;1pkt 1fpkt"];
241--1402[label="1;10pkt 10fpkt"];
241--1408[label="0.0309278;3pkt 3fpkt"];
241--1438[label="1;4pkt 4fpkt"];
241--1445[label="1;1pkt 1fpkt"];
241--1658[label="1;2pkt 2fpkt"];
241--1668[label="1;6pkt 6fpkt"];
241--1895[label="1;1pkt 1fpkt"];
241--1961[label="1;10pkt 10fpkt"];
241--1971[label="1;1pkt 1fpkt"];
241--1988[label="1;1pkt 1fpkt"];
241--2050[label="1;83pkt 83fpkt"];
241--2189[label="1;2pkt 2fpkt"];
241--2432[label="1;5pkt 5fpkt"];
241--2464[label="1;6pkt 6fpkt"];
241--2601[label="1;1pkt 1fpkt"];
241--2626[label="1;87pkt 87fpkt"];
241--2777[label="1;1pkt 1fpkt"];
241--2779[label="1;1pkt 1fpkt"];
241--2863[label="1;1622pkt 1622fpkt"];
241--3417[label="1;1pkt 1fpkt"];
241--3752[label="1;1010pkt 1010fpkt"];
241--3781[label="0.0316995;119pkt 119fpkt"];
241--3806[label="0.037921;143pkt 143fpkt"];
241--3828[label="1;1011pkt 1011fpkt"];
241--3852[label="0.0316995;119pkt 119fpkt"];
241--3868[label="0.037921;143pkt 143fpkt"];
241--3882[label="1;1010pkt 1010fpkt"];
241--3902[label="0.031708;119pkt 119fpkt"];
241--3923[label="0.037921;143pkt 143fpkt"];
241--4076[label="1;13pkt 13fpkt"];
241--4081[label="1;3pkt 3fpkt"];
241--4092[label="0.00458716;1pkt 1fpkt"];
241--4138[label="1;20pkt 20fpkt"];
241--4160[label="1;5pkt 5fpkt"];
241--4193[label="1;3pkt 3fpkt"];
241--4248[label="1;1pkt 1fpkt"];
241--4278[label="1;1pkt 1fpkt"];
241--4372[label="1;7pkt 7fpkt"];
241--4504[label="0.714286;5pkt 5fpkt"];
241--4580[label="1;2pkt 2fpkt"];
241--4609[label="1;5pkt 5fpkt"];
241--4620[label="1;6pkt 6fpkt"];
241--4636[label="1;2pkt 2fpkt"];
241--4746[label="1;11pkt 11fpkt"];
241--4864[label="1;4pkt 4fpkt"];
241--4890[label="0.75;3pkt 3fpkt"];
241--4945[label="0.75;3pkt 3fpkt"];
241--4953[label="1;1pkt 1fpkt"];
241--4956[label="1;8pkt 8fpkt"];
241--5077[label="1;1pkt 1fpkt"];
241--5137[label="1;8pkt 8fpkt"];
241--5139[label="1;8pkt 8fpkt"];
241--5177[label="0.0121951;1pkt 1fpkt"];
241--5248[label="1;2pkt 2fpkt"];
241--5287[label="1;1pkt 1fpkt"];
241--5329[label="1;1pkt 1fpkt"];
241--5358[label="1;7pkt 7fpkt"];
241--5536[label="1;1pkt 1fpkt"];
241--5634[label="1;13pkt 13fpkt"];
241--5644[label="0.00460829;1pkt 1fpkt"];
241--5666[label="1;20pkt 20fpkt"];
241--5673[label="1;5pkt 5fpkt"];
241--5724[label="1;1pkt 1fpkt"];
241--5745[label="1;1pkt 1fpkt"];
241--5790[label="1;7pkt 7fpkt"];
241--5858[label="0.714286;5pkt 5fpkt"];
241--5903[label="1;5pkt 5fpkt"];
241--5976[label="1;11pkt 11fpkt"];
241--6033[label="1;4pkt 4fpkt"];
241--6174[label="1;8pkt 8fpkt"];
241--6196[label="0.0121951;1pkt 1fpkt"];
241--6229[label="1;2pkt 2fpkt"];
241--6249[label="1;1pkt 1fpkt"];
241--6433[label="1;13pkt 13fpkt"];
241--6440[label="0.00458716;1pkt 1fpkt"];
241--6449[label="1;20pkt 20fpkt"];
241--6453[label="1;5pkt 5fpkt"];
241--6512[label="1;7pkt 7fpkt"];
241--6638[label="1;4pkt 4fpkt"];
241--6722[label="1;2pkt 2fpkt"];
241--6733[label="1;1pkt 1fpkt"];
611--2863[label="0.333333;1pkt 1fpkt"];
611--3752[label="0.333333;1pkt 1fpkt"];
611--3828[label="0.333333;1pkt 1fpkt"];
611--3882[label="0.333333;1pkt 1fpkt"];
2779--4193[label="1;1pkt 1fpkt"];
4076--5634[label="1;13pkt 13fpkt"];
4076--6433[label="1;13pkt 13fpkt"];
4138--5666[label="1;20pkt 20fpkt"];
4138--6449[label="1;20pkt 20fpkt"];
4160--5673[label="1;5pkt 5fpkt"];
4160--6453[label="1;5pkt 5fpkt"];
4609--5903[label="1;5pkt 5fpkt"];
4746--5976[label="1;11pkt 11fpkt"];
5139--6174[label="1;8pkt 8fpkt"];
5248--6229[label="1;2pkt 2fpkt"];
5248--6722[label="1;2pkt 2fpkt"];
5287--6249[label="1;1pkt 1fpkt"];
5287--6733[label="1;1pkt 1fpkt"];
5634--6433[label="1;13pkt 13fpkt"];
5666--6449[label="1;20pkt 20fpkt"];
5673--6453[label="1;5pkt 5fpkt"];
6229--6722[label="1;2pkt 2fpkt"];
6249--6733[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.114.51" dst_port="28192"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.86073,1.59396,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
70[label="168.206.6.220s;2pkt 2fpkt", shape=rectangle, color=red];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.220:4530, 23.20.214.15:80}[50%]&lt;BR/&gt;{168.206.6.220:4595, 23.20.215.84:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4595: (25%)&lt;BR/&gt; 4530: (25%)&gt;];
}
70--1294[label="1;2pkt 2fpkt"];
70--1325[label="1;1pkt 1fpkt"];
70--2302[label="1;1pkt 1fpkt"];
70--3807[label="0.5;1pkt 1fpkt"];
70--5351[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="23.20.215.84" dst_port="80" src_ip="168.206.6.220" src_port="4595"/>
      <filter dst_ip="23.20.214.15" dst_port="80" src_ip="168.206.6.220" src_port="4530"/>
    </slice>
    <from sec="1189314291" usec="0"/>
    <to sec="1189314736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.190.23.175"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
552[label="168.206.6.0;d;260pkt 260fpkt", shape=diamond, color=yellow];
572[label="23.228.137.158;s;126pkt 126fpkt", shape=diamond, color=yellow];
4570[label="6.173.110.92;107pkt 107fpkt", shape=pentagon, color=darkviolet];
4969[label="23.137.184.155;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5887[label="6.173.110.92;107pkt 107fpkt", shape=invtriangle, color=brown];
6081[label="23.137.184.155;3pkt 3fpkt", shape=invtriangle, color=brown];
6655[label="23.137.184.155;3pkt 3fpkt", shape=invhouse, color=bisque];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.228.137.158:*, 168.206.6.0:*}[48.2759%]&lt;BR/&gt;{6.173.110.92:*, 168.206.6.0:*}[40.9962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (1.64204%)&lt;BR/&gt; 38884: (0.985222%)&lt;BR/&gt; 29992: (0.985222%)&lt;BR/&gt; 18844: (0.985222%)&lt;BR/&gt; 17771: (0.985222%)&gt;];
}
552--572[label="1;126pkt 126fpkt"];
552--1360[label="0.0212766;1pkt 1fpkt"];
552--3762[label="0.0153846;4pkt 4fpkt"];
552--3806[label="0.0153846;4pkt 4fpkt"];
552--3868[label="0.0153846;4pkt 4fpkt"];
552--3923[label="0.0153846;4pkt 4fpkt"];
552--4570[label="1;107pkt 107fpkt"];
552--4969[label="0.666667;2pkt 2fpkt"];
552--5887[label="1;107pkt 107fpkt"];
552--6081[label="0.666667;2pkt 2fpkt"];
552--6655[label="0.666667;2pkt 2fpkt"];
572--3762[label="0.015873;2pkt 2fpkt"];
4570--5887[label="1;107pkt 107fpkt"];
4969--6081[label="1;3pkt 3fpkt"];
4969--6655[label="1;3pkt 3fpkt"];
6081--6655[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.6.0" src_ip="23.228.137.158"/>
      <filter dst_ip="168.206.6.0" src_ip="6.173.110.92"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
271[label="208.211.146.68;s;383pkt 383fpkt", shape=diamond, color=yellow];
327[label="217.108.239.35;d;9pkt 9fpkt", shape=diamond, color=yellow];
328[label="168.206.6.61;s;76pkt 76fpkt", shape=diamond, color=yellow];
451[label="77.151.96.110;d;2pkt 2fpkt", shape=diamond, color=yellow];
471[label="217.108.239.6;d;6pkt 6fpkt", shape=diamond, color=yellow];
788[label="157.25.87.241;s;58pkt 58fpkt", shape=diamond, color=yellow];
840[label="134.99.176.221;s;45pkt 45fpkt", shape=diamond, color=yellow];
1127[label="32.116.51.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
1382[label="217.108.239.4;d;7pkt 7fpkt", shape=diamond, color=yellow];
1819[label="196.236.16.75;d;159pkt 159fpkt", shape=diamond, color=yellow];
3262[label="200.78.217.78;d;41pkt 41fpkt", shape=hexagon, color=black];
3592[label="217.108.239.6;d;6pkt 6fpkt", shape=hexagon, color=black];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.211.146.68:*, *:*}[58.5949%]&lt;BR/&gt;{*:*, 196.236.16.75:*}[23.7668%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (6.87264%)&lt;BR/&gt; 6667: (6.30517%)&lt;BR/&gt; 32441: (4.47667%)&lt;BR/&gt; 995: (3.40479%)&lt;BR/&gt; 19115: (2.52207%)&gt;];
}
271--1819[label="0.522013;83pkt 83fpkt"];
271--3762[label="0.0078329;3pkt 3fpkt"];
271--3807[label="0.00261097;1pkt 1fpkt"];
327--328[label="0.444444;4pkt 4fpkt"];
327--788[label="0.222222;2pkt 2fpkt"];
327--840[label="0.333333;3pkt 3fpkt"];
328--451[label="0.5;1pkt 1fpkt"];
328--471[label="0.166667;1pkt 1fpkt"];
328--1094[label="0.0131579;1pkt 1fpkt"];
328--1127[label="1;1pkt 1fpkt"];
328--1382[label="0.142857;1pkt 1fpkt"];
328--1819[label="0.0394737;3pkt 3fpkt"];
328--3592[label="0.166667;1pkt 1fpkt"];
328--3762[label="0.0131579;1pkt 1fpkt"];
328--3823[label="0.0131579;1pkt 1fpkt"];
451--788[label="0.5;1pkt 1fpkt"];
471--788[label="0.166667;1pkt 1fpkt"];
471--840[label="0.666667;4pkt 4fpkt"];
471--3592[label="1;6pkt 6fpkt"];
788--1094[label="0.0344828;2pkt 2fpkt"];
788--1382[label="0.571429;4pkt 4fpkt"];
788--1674[label="0.224138;13pkt 13fpkt"];
788--2643[label="0.0172414;1pkt 1fpkt"];
788--3262[label="0.170732;7pkt 7fpkt"];
788--3592[label="0.166667;1pkt 1fpkt"];
788--3785[label="0.0172414;1pkt 1fpkt"];
840--1382[label="0.285714;2pkt 2fpkt"];
840--3592[label="0.666667;4pkt 4fpkt"];
840--3762[label="0.0222222;1pkt 1fpkt"];
1819--1883[label="0.0869565;8pkt 8fpkt"];
1819--2204[label="0.130435;18pkt 18fpkt"];
1819--2979[label="0.0440252;7pkt 7fpkt"];
1819--3244[label="0.0506329;8pkt 8fpkt"];
1819--3344[label="0.0454545;3pkt 3fpkt"];
1819--3762[label="0.00628931;1pkt 1fpkt"];
1819--3781[label="0.0125786;2pkt 2fpkt"];
1819--3806[label="0.0188679;3pkt 3fpkt"];
1819--3807[label="0.00628931;1pkt 1fpkt"];
1819--3823[label="0.00628931;1pkt 1fpkt"];
1819--3852[label="0.0125786;2pkt 2fpkt"];
1819--3868[label="0.0188679;3pkt 3fpkt"];
1819--3902[label="0.0125786;2pkt 2fpkt"];
1819--3923[label="0.0188679;3pkt 3fpkt"];
1819--4049[label="0.0503145;8pkt 8fpkt"];
</description>
    <slice>
      <filter src_ip="208.211.146.68"/>
      <filter dst_ip="196.236.16.75"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.155.109.44"/>
      <from sec="1189314002" usec="0"/>
      <to sec="1189314731" usec="0"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
1415[label="128.190.228.104;s;194pkt 194fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.228.104:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1415--1579[label="0.0125;1pkt 1fpkt"];
1415--1945[label="0.011236;1pkt 1fpkt"];
1415--2412[label="0.010101;1pkt 1fpkt"];
1415--3134[label="0.00877193;1pkt 1fpkt"];
1415--3140[label="0.00869565;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="128.190.228.104"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.249.108.208"/>
      <from sec="1189314011" usec="0"/>
      <to sec="1189314400" usec="0"/>
    </slice>
    <from sec="1189314011" usec="0"/>
    <to sec="1189314400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
437[label="134.112.166.141;d;810pkt 810fpkt", shape=diamond, color=yellow];
650[label="202.123.227.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
4311[label="195.87.34.51;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4996[label="38.25.128.160;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.112.166.141:25}[50.6619%]&lt;BR/&gt;{*:25, 134.112.166.141:*}[44.4043%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.4487%)&lt;BR/&gt; 0: (1.31265%)&lt;BR/&gt; 113: (0.894988%)&lt;BR/&gt; 1911: (0.178998%)&lt;BR/&gt; 55246: (0.119332%)&gt;];
}
437--650[label="1;1pkt 1fpkt"];
437--1471[label="0.0821918;6pkt 6fpkt"];
437--3455[label="0.107143;6pkt 6fpkt"];
437--3761[label="0.0320988;26pkt 26fpkt"];
437--4196[label="0.309524;13pkt 13fpkt"];
437--4311[label="0.181818;2pkt 2fpkt"];
437--4590[label="0.4;8pkt 8fpkt"];
437--4608[label="0.352941;6pkt 6fpkt"];
437--4996[label="0.25;4pkt 4fpkt"];
437--5513[label="0.0769231;1pkt 1fpkt"];
437--5691[label="0.302326;13pkt 13fpkt"];
437--5895[label="0.4;8pkt 8fpkt"];
437--5902[label="0.352941;6pkt 6fpkt"];
437--6371[label="0.0769231;1pkt 1fpkt"];
437--6566[label="0.4;8pkt 8fpkt"];
437--6786[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.166.141" src_port="25"/>
      <filter dst_ip="134.112.166.141" dst_port="25"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
45[label="168.206.6.145s;2pkt 2fpkt", shape=rectangle, color=red];
1517[label="168.206.6.145;s;4pkt 4fpkt", shape=diamond, color=yellow];
1540[label="216.88.184.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.145:1711, 216.88.187.167:80}[25%]&lt;BR/&gt;{168.206.6.145:1685, 200.78.164.229:80}[25%]&lt;BR/&gt;{168.206.6.145:1709, 216.88.184.156:80}[25%]&lt;BR/&gt;{168.206.6.145:1710, 216.88.184.156:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1710: (18.75%)&lt;BR/&gt; 1709: (18.75%)&lt;BR/&gt; 1711: (6.25%)&lt;BR/&gt; 1685: (6.25%)&gt;];
}
45--1517[label="1;2pkt 2fpkt"];
45--1540[label="1;2pkt 2fpkt"];
1517--1540[label="1;2pkt 2fpkt"];
1517--1884[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.88.184.156" dst_port="80" src_ip="168.206.6.145" src_port="1710"/>
      <filter dst_ip="216.88.184.156" dst_port="80" src_ip="168.206.6.145" src_port="1709"/>
      <filter dst_ip="200.78.164.229" dst_port="80" src_ip="168.206.6.145" src_port="1685"/>
      <filter dst_ip="216.88.187.167" dst_port="80" src_ip="168.206.6.145" src_port="1711"/>
    </slice>
    <from sec="1189314267" usec="0"/>
    <to sec="1189314398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1251[label="198.108.34.207;s;47pkt 47fpkt", shape=diamond, color=yellow];
1536[label="168.206.81.38;d;38pkt 38fpkt", shape=diamond, color=yellow];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.108.34.207:80, 168.206.81.38:*}[66.6667%]&lt;BR/&gt;{198.108.34.207:80, 128.190.113.43:*}[25.4902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1750: (1.17647%)&lt;BR/&gt; 1749: (1.17647%)&lt;BR/&gt; 1748: (1.17647%)&lt;BR/&gt; 1747: (1.17647%)&gt;];
}
1251--1536[label="0.894737;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.81.38" src_ip="198.108.34.207" src_port="80"/>
      <filter dst_ip="128.190.113.43" src_ip="198.108.34.207" src_port="80"/>
    </slice>
    <from sec="1189314058" usec="0"/>
    <to sec="1189314382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
72[label="157.25.73.230s;1pkt 1fpkt", shape=rectangle, color=red];
1537[label="75.134.26.170;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.73.230:17356, 75.134.26.170:80}[25%]&lt;BR/&gt;{157.25.73.230:19752, 75.134.26.170:80}[25%]&lt;BR/&gt;{157.25.73.230:30734, 75.134.26.170:80}[25%]&lt;BR/&gt;{157.25.73.230:36232, 75.134.26.170:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 19752: (20%)&lt;BR/&gt; 36232: (10%)&lt;BR/&gt; 30734: (10%)&lt;BR/&gt; 17356: (10%)&gt;];
}
72--830[label="1;1pkt 1fpkt"];
72--1537[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.134.26.170" dst_port="80" src_ip="157.25.73.230" src_port="36232"/>
      <filter dst_ip="75.134.26.170" dst_port="80" src_ip="157.25.73.230" src_port="30734"/>
      <filter dst_ip="75.134.26.170" dst_port="80" src_ip="157.25.73.230" src_port="19752"/>
      <filter dst_ip="75.134.26.170" dst_port="80" src_ip="157.25.73.230" src_port="17356"/>
    </slice>
    <from sec="1189314081" usec="0"/>
    <to sec="1189314686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
1516[label="168.206.6.145;d;4pkt 4fpkt", shape=diamond, color=yellow];
1541[label="216.88.184.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.88.187.167:80, 168.206.6.145:1711}[25%]&lt;BR/&gt;{200.78.164.229:80, 168.206.6.145:1685}[25%]&lt;BR/&gt;{216.88.184.156:80, 168.206.6.145:1709}[25%]&lt;BR/&gt;{216.88.184.156:80, 168.206.6.145:1710}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1710: (16.6667%)&lt;BR/&gt; 1709: (16.6667%)&lt;BR/&gt; 1711: (8.33333%)&lt;BR/&gt; 1685: (8.33333%)&gt;];
}
1516--1541[label="1;2pkt 2fpkt"];
1516--5413[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.6.145" dst_port="1710" src_ip="216.88.184.156" src_port="80"/>
      <filter dst_ip="168.206.6.145" dst_port="1709" src_ip="216.88.184.156" src_port="80"/>
      <filter dst_ip="168.206.6.145" dst_port="1685" src_ip="200.78.164.229" src_port="80"/>
      <filter dst_ip="168.206.6.145" dst_port="1711" src_ip="216.88.187.167" src_port="80"/>
    </slice>
    <from sec="1189314267" usec="0"/>
    <to sec="1189314398" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1550[label="128.190.82.189;s;9pkt 9fpkt", shape=diamond, color=yellow];
1551[label="25.3.105.61;d;3pkt 3fpkt", shape=diamond, color=yellow];
1781[label="25.3.109.202;d;3pkt 3fpkt", shape=diamond, color=yellow];
5174[label="128.190.82.189;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6193[label="128.190.82.189;14pkt 14fpkt", shape=invtriangle, color=brown];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.82.189:80, *:*}[68.75%]&lt;BR/&gt;{*:0, *:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.0465%)&lt;BR/&gt; 0: (27.907%)&lt;BR/&gt; 45899: (4.65116%)&lt;BR/&gt; 33932: (4.65116%)&lt;BR/&gt; 42375: (3.48837%)&gt;];
}
1550--1551[label="0.666667;2pkt 2fpkt"];
1550--1781[label="0.666667;2pkt 2fpkt"];
1550--5174[label="1;9pkt 9fpkt"];
1550--6193[label="1;9pkt 9fpkt"];
1551--5174[label="0.666667;2pkt 2fpkt"];
1551--6193[label="0.666667;2pkt 2fpkt"];
1781--5174[label="0.666667;2pkt 2fpkt"];
1781--6193[label="0.666667;2pkt 2fpkt"];
5174--6193[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="128.190.82.189" src_port="80"/>
    </slice>
    <from sec="1189314319" usec="0"/>
    <to sec="1189314886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="217.155.108.75"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314828" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
1414[label="134.99.142.213;s;21pkt 21fpkt", shape=diamond, color=yellow];
1519[label="75.117.40.145;d;1pkt 1fpkt", shape=diamond, color=yellow];
1603[label="32.43.67.120;d;198pkt 198fpkt", shape=diamond, color=yellow];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.73.230:*, 32.43.67.120:53}[38.5321%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7727%)&lt;BR/&gt; 59492: (4.31818%)&lt;BR/&gt; 32768: (1.13636%)&lt;BR/&gt; 32772: (0.454545%)&lt;BR/&gt; 32769: (0.454545%)&gt;];
}
1414--1519[label="1;1pkt 1fpkt"];
1414--1603[label="0.047619;1pkt 1fpkt"];
1603--1877[label="0.00505051;1pkt 1fpkt"];
1603--1954[label="0.00694444;1pkt 1fpkt"];
1603--2062[label="0.020202;4pkt 4fpkt"];
1603--2155[label="0.00990099;1pkt 1fpkt"];
1603--2350[label="0.0151515;1pkt 1fpkt"];
1603--3018[label="0.00505051;1pkt 1fpkt"];
1603--3416[label="0.0159574;3pkt 3fpkt"];
1603--3783[label="0.010101;2pkt 2fpkt"];
1603--3794[label="0.00505051;1pkt 1fpkt"];
1603--3818[label="0.00505051;1pkt 1fpkt"];
1603--3824[label="0.00505051;1pkt 1fpkt"];
1603--3851[label="0.00505051;1pkt 1fpkt"];
1603--3855[label="0.010101;2pkt 2fpkt"];
1603--3874[label="0.00505051;1pkt 1fpkt"];
1603--3876[label="0.00505051;1pkt 1fpkt"];
1603--3901[label="0.00505051;1pkt 1fpkt"];
1603--3905[label="0.010101;2pkt 2fpkt"];
1603--3922[label="0.00505051;1pkt 1fpkt"];
1603--3924[label="0.00505051;1pkt 1fpkt"];
1603--4319[label="0.00505051;1pkt 1fpkt"];
1603--4749[label="0.0526316;1pkt 1fpkt"];
1603--4757[label="0.00505051;1pkt 1fpkt"];
1603--4844[label="0.00505051;1pkt 1fpkt"];
1603--4917[label="0.00934579;1pkt 1fpkt"];
1603--4938[label="0.00505051;1pkt 1fpkt"];
1603--5171[label="0.0181818;1pkt 1fpkt"];
1603--5189[label="0.00505051;1pkt 1fpkt"];
1603--5766[label="0.00505051;1pkt 1fpkt"];
1603--5982[label="0.00505051;1pkt 1fpkt"];
1603--6026[label="0.00505051;1pkt 1fpkt"];
1603--6500[label="0.00505051;1pkt 1fpkt"];
1603--6633[label="0.00505051;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="32.43.67.120" dst_port="53" src_ip="157.25.73.230"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
1605[label="168.145.134.143;s;343pkt 343fpkt", shape=diamond, color=yellow];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.145.134.143:0, *:0}[99.7085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7085%)&lt;BR/&gt; 6000: (0.145773%)&lt;BR/&gt; 5168: (0.145773%)&gt;];
}
1605--1821[label="0.00291545;1pkt 1fpkt"];
1605--1842[label="0.00291545;1pkt 1fpkt"];
1605--2047[label="0.00320513;1pkt 1fpkt"];
1605--2055[label="0.00362319;1pkt 1fpkt"];
1605--2079[label="0.00330033;1pkt 1fpkt"];
1605--2347[label="0.00420168;1pkt 1fpkt"];
1605--2586[label="0.00469484;1pkt 1fpkt"];
1605--3140[label="0.00869565;1pkt 1fpkt"];
1605--3233[label="0.00291545;1pkt 1fpkt"];
1605--3319[label="0.00374532;1pkt 1fpkt"];
1605--3714[label="0.00381679;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.145.134.143"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.98.208.95"/>
      <from sec="1189314002" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="96.154.188.34"/>
      <from sec="1189314002" usec="0"/>
      <to sec="1189314408" usec="0"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="2.216.97.23"/>
      <from sec="1189314653" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314653" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
696[label="134.112.110.99;s;4299pkt 4299fpkt", shape=diamond, color=yellow];
739[label="32.96.249.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
760[label="77.17.93.136;d;23pkt 23fpkt", shape=diamond, color=yellow];
823[label="74.84.76.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
3227[label="32.96.249.136;d;1pkt 1fpkt", shape=hexagon, color=black];
3320[label="74.84.76.123;d;1pkt 1fpkt", shape=hexagon, color=black];
4607[label="134.112.110.99;4584pkt 4584fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.110.99:35801, *:*}[90.013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35801: (45.0898%)&lt;BR/&gt; 4672: (9.9046%)&lt;BR/&gt; 30403: (3.69248%)&lt;BR/&gt; 4803: (0.617284%)&lt;BR/&gt; 6672: (0.499439%)&gt;];
}
696--739[label="1;1pkt 1fpkt"];
696--760[label="0.0434783;1pkt 1fpkt"];
696--823[label="1;1pkt 1fpkt"];
696--853[label="1;1pkt 1fpkt"];
696--1660[label="0.108108;4pkt 4fpkt"];
696--3048[label="0.0434783;1pkt 1fpkt"];
696--3065[label="1;1pkt 1fpkt"];
696--3227[label="1;1pkt 1fpkt"];
696--3320[label="1;1pkt 1fpkt"];
696--3701[label="1;1pkt 1fpkt"];
696--4607[label="1;4299pkt 4299fpkt"];
739--3227[label="1;1pkt 1fpkt"];
739--4607[label="1;1pkt 1fpkt"];
760--3048[label="1;23pkt 23fpkt"];
760--4607[label="0.0434783;1pkt 1fpkt"];
823--3320[label="1;1pkt 1fpkt"];
823--4607[label="1;1pkt 1fpkt"];
3227--4607[label="1;1pkt 1fpkt"];
3320--4607[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.112.110.99" src_port="35801"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1013[label="157.25.38.224;s;252pkt 252fpkt", shape=diamond, color=yellow];
1697[label="216.108.112.99;d;2pkt 2fpkt", shape=diamond, color=yellow];
2064[label="194.101.155.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.38.224:17346, *:*}[37.3016%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17346: (18.6275%)&lt;BR/&gt; 6346: (1.76471%)&lt;BR/&gt; 8345: (1.56863%)&lt;BR/&gt; 9485: (1.37255%)&lt;BR/&gt; 5797: (1.37255%)&gt;];
}
1013--1697[label="1;2pkt 2fpkt"];
1013--2064[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="157.25.38.224" src_port="17346"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
263[label="129.29.179.42;s;1474pkt 1474fpkt", shape=diamond, color=yellow];
815[label="20.102.170.177;d;182pkt 182fpkt", shape=diamond, color=yellow];
883[label="134.99.172.32;s;113pkt 113fpkt", shape=diamond, color=yellow];
1430[label="194.101.155.192;d;16pkt 16fpkt", shape=diamond, color=yellow];
1752[label="134.99.182.148;s;8pkt 8fpkt", shape=diamond, color=yellow];
1830[label="195.11.157.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
3440[label="194.101.155.192;d;15pkt 15fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.29.179.42:123, *:123}[51.6854%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (66.1692%)&lt;BR/&gt; 80: (5.11332%)&lt;BR/&gt; 995: (2.5152%)&lt;BR/&gt; 1026: (0.829187%)&lt;BR/&gt; 993: (0.801548%)&gt;];
}
263--416[label="0.000678426;1pkt 1fpkt"];
263--449[label="0.000678426;1pkt 1fpkt"];
263--507[label="0.000678426;1pkt 1fpkt"];
263--1362[label="0.5;1pkt 1fpkt"];
263--1430[label="0.0625;1pkt 1fpkt"];
263--1830[label="1;1pkt 1fpkt"];
263--3440[label="0.0666667;1pkt 1fpkt"];
263--3517[label="0.5;1pkt 1fpkt"];
815--1752[label="0.125;1pkt 1fpkt"];
815--3781[label="0.0274725;5pkt 5fpkt"];
815--3806[label="0.0274725;5pkt 5fpkt"];
815--3852[label="0.0274725;5pkt 5fpkt"];
815--3868[label="0.0274725;5pkt 5fpkt"];
815--3902[label="0.0274725;5pkt 5fpkt"];
815--3923[label="0.0274725;5pkt 5fpkt"];
883--1269[label="0.333333;1pkt 1fpkt"];
883--1430[label="0.25;4pkt 4fpkt"];
883--3200[label="0.333333;1pkt 1fpkt"];
883--3440[label="0.2;3pkt 3fpkt"];
1430--1752[label="0.875;7pkt 7fpkt"];
1430--3440[label="1;15pkt 15fpkt"];
1752--3440[label="0.875;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="129.29.179.42" src_port="123"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
376[label="216.212.114.135;s;306pkt 306fpkt", shape=diamond, color=yellow];
1636[label="20.102.172.189;d;39pkt 39fpkt", shape=diamond, color=yellow];
1763[label="22.76.4.96;d;6pkt 6fpkt", shape=diamond, color=yellow];
2741[label="22.76.4.98;d;23pkt 23fpkt", shape=diamond, color=yellow];
4832[label="216.212.114.135;331pkt 331fpkt", shape=pentagon, color=darkviolet];
6020[label="216.212.114.135;331pkt 331fpkt", shape=invtriangle, color=brown];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.114.135:80, 38.16.49.65:*}[46.3557%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62658: (0.289575%)&lt;BR/&gt; 64992: (0.19305%)&lt;BR/&gt; 64928: (0.19305%)&lt;BR/&gt; 64140: (0.19305%)&gt;];
}
376--1048[label="0.811111;146pkt 146fpkt"];
376--1636[label="1;39pkt 39fpkt"];
376--1763[label="0.166667;1pkt 1fpkt"];
376--2741[label="0.695652;16pkt 16fpkt"];
376--3781[label="0.0653595;20pkt 20fpkt"];
376--3806[label="0.0424837;13pkt 13fpkt"];
376--3852[label="0.0653595;20pkt 20fpkt"];
376--3868[label="0.0424837;13pkt 13fpkt"];
376--3902[label="0.0653595;20pkt 20fpkt"];
376--3923[label="0.0424837;13pkt 13fpkt"];
376--4832[label="1;306pkt 306fpkt"];
376--6020[label="1;306pkt 306fpkt"];
1636--3781[label="0.0769231;3pkt 3fpkt"];
1636--3806[label="0.0769231;3pkt 3fpkt"];
1636--3852[label="0.0769231;3pkt 3fpkt"];
1636--3868[label="0.0769231;3pkt 3fpkt"];
1636--3902[label="0.0769231;3pkt 3fpkt"];
1636--3923[label="0.0769231;3pkt 3fpkt"];
1636--4832[label="1;39pkt 39fpkt"];
1636--6020[label="1;39pkt 39fpkt"];
1763--2142[label="0.333333;2pkt 2fpkt"];
1763--4008[label="0.166667;1pkt 1fpkt"];
1763--4832[label="0.166667;1pkt 1fpkt"];
1763--6020[label="0.166667;1pkt 1fpkt"];
2741--3781[label="0.26087;6pkt 6fpkt"];
2741--3852[label="0.26087;6pkt 6fpkt"];
2741--3902[label="0.26087;6pkt 6fpkt"];
2741--4832[label="0.695652;16pkt 16fpkt"];
2741--6020[label="0.695652;16pkt 16fpkt"];
4832--6020[label="1;331pkt 331fpkt"];
</description>
    <slice>
      <filter dst_ip="38.16.49.65" src_ip="216.212.114.135" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
1261[label="168.206.6.238;s;44pkt 44fpkt", shape=diamond, color=yellow];
1789[label="23.20.222.144;d;1pkt 1fpkt", shape=diamond, color=yellow];
2024[label="23.20.213.1;d;2pkt 2fpkt", shape=diamond, color=yellow];
2529[label="23.20.216.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
2788[label="23.20.216.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
2837[label="23.20.216.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.238:*, 200.78.134.123:80}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50287: (2%)&lt;BR/&gt; 50281: (2%)&lt;BR/&gt; 50275: (2%)&lt;BR/&gt; 50262: (2%)&gt;];
}
1261--1336[label="1;1pkt 1fpkt"];
1261--1789[label="1;1pkt 1fpkt"];
1261--2024[label="1;2pkt 2fpkt"];
1261--2263[label="1;1pkt 1fpkt"];
1261--2275[label="1;1pkt 1fpkt"];
1261--2529[label="1;1pkt 1fpkt"];
1261--2788[label="1;1pkt 1fpkt"];
1261--2837[label="1;1pkt 1fpkt"];
1261--3075[label="0.125;4pkt 4fpkt"];
1261--3211[label="1;1pkt 1fpkt"];
1261--3405[label="0.5;22pkt 22fpkt"];
1261--3493[label="1;1pkt 1fpkt"];
1261--3785[label="0.204545;9pkt 9fpkt"];
1261--3807[label="0.159091;7pkt 7fpkt"];
2024--3785[label="0.5;1pkt 1fpkt"];
2529--3807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.78.134.123" dst_port="80" src_ip="168.206.6.238"/>
    </slice>
    <from sec="1189314101" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
1793[label="203.90.8.89;d;2pkt 2fpkt", shape=diamond, color=yellow];
1794[label="129.29.40.10;s;11pkt 11fpkt", shape=diamond, color=yellow];
1994[label="74.45.87.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
3560[label="129.29.40.10;s;11pkt 11fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.29.40.10:*, 202.110.166.116:80}[63.6364%]&lt;BR/&gt;{129.29.40.10:4010, *:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.9231%)&lt;BR/&gt; 4010: (23.0769%)&lt;BR/&gt; 18586: (5.76923%)&lt;BR/&gt; 18584: (5.76923%)&lt;BR/&gt; 17848: (5.76923%)&gt;];
}
1793--1794[label="1;2pkt 2fpkt"];
1793--3560[label="1;2pkt 2fpkt"];
1794--1994[label="1;2pkt 2fpkt"];
1794--3560[label="1;11pkt 11fpkt"];
1994--3560[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="129.29.40.10" src_port="4010"/>
      <filter dst_ip="202.110.166.116" dst_port="80" src_ip="129.29.40.10"/>
    </slice>
    <from sec="1189314437" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
555[label="128.190.247.110;s;332pkt 332fpkt", shape=diamond, color=yellow];
1256[label="193.171.64.67;d;1pkt 1fpkt", shape=diamond, color=yellow];
1804[label="23.20.223.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
1976[label="202.156.218.67;d;6pkt 6fpkt", shape=diamond, color=yellow];
2289[label="201.59.188.169;d;1pkt 1fpkt", shape=diamond, color=yellow];
2548[label="196.228.201.146;d;84pkt 84fpkt", shape=diamond, color=yellow];
3099[label="193.171.64.67;d;1pkt 1fpkt", shape=hexagon, color=black];
3297[label="23.20.223.201;d;1pkt 1fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.247.110:*, 196.228.201.146:80}[24.9249%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5059%)&lt;BR/&gt; 52279: (3.27869%)&lt;BR/&gt; 53: (3.27869%)&lt;BR/&gt; 18012: (1.40515%)&lt;BR/&gt; 1863: (0.702576%)&gt;];
}
555--556[label="0.00404858;1pkt 1fpkt"];
555--790[label="0.0326797;5pkt 5fpkt"];
555--871[label="0.031746;6pkt 6fpkt"];
555--906[label="1;41pkt 41fpkt"];
555--1094[label="0.0033557;1pkt 1fpkt"];
555--1159[label="0.0576923;3pkt 3fpkt"];
555--1217[label="0.0655738;8pkt 8fpkt"];
555--1242[label="0.538462;14pkt 14fpkt"];
555--1256[label="1;1pkt 1fpkt"];
555--1617[label="0.0196078;1pkt 1fpkt"];
555--1804[label="1;1pkt 1fpkt"];
555--1827[label="0.0196078;1pkt 1fpkt"];
555--1907[label="0.0769231;5pkt 5fpkt"];
555--1976[label="1;6pkt 6fpkt"];
555--2247[label="1;1pkt 1fpkt"];
555--2289[label="1;1pkt 1fpkt"];
555--2548[label="0.988095;83pkt 83fpkt"];
555--3071[label="0.031746;6pkt 6fpkt"];
555--3099[label="1;1pkt 1fpkt"];
555--3252[label="0.0361446;6pkt 6fpkt"];
555--3297[label="1;1pkt 1fpkt"];
555--3356[label="0.0925926;5pkt 5fpkt"];
555--3405[label="0.120482;40pkt 40fpkt"];
555--3518[label="0.0196078;1pkt 1fpkt"];
555--3591[label="0.0326797;5pkt 5fpkt"];
555--3762[label="0.0331325;11pkt 11fpkt"];
555--3785[label="0.0512048;17pkt 17fpkt"];
555--3807[label="0.0301205;10pkt 10fpkt"];
1256--3099[label="1;1pkt 1fpkt"];
1804--3297[label="1;1pkt 1fpkt"];
2289--3785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.228.201.146" dst_port="80" src_ip="128.190.247.110"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
1003[label="134.168.199.133;d;70pkt 70fpkt", shape=diamond, color=yellow];
1573[label="221.203.135.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
3301[label="221.203.135.111;s;1pkt 1fpkt", shape=hexagon, color=black];
3343[label="200.78.134.161;s;52pkt 52fpkt", shape=hexagon, color=black];
4693[label="221.203.135.111;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5948[label="221.203.135.111;1pkt 1fpkt", shape=invtriangle, color=brown];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.78.134.161:80, *:*}[50.8333%]&lt;BR/&gt;{200.78.134.219:80, 134.168.199.133:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2063%)&lt;BR/&gt; 41659: (1.98413%)&lt;BR/&gt; 38146: (0.793651%)&lt;BR/&gt; 32888: (0.793651%)&lt;BR/&gt; 110: (0.793651%)&gt;];
}
1003--1573[label="1;1pkt 1fpkt"];
1003--1881[label="0.157143;11pkt 11fpkt"];
1003--2143[label="0.0188679;1pkt 1fpkt"];
1003--3301[label="1;1pkt 1fpkt"];
1003--3343[label="0.0384615;2pkt 2fpkt"];
1003--3781[label="0.114286;8pkt 8fpkt"];
1003--3806[label="0.128571;9pkt 9fpkt"];
1003--3852[label="0.114286;8pkt 8fpkt"];
1003--3868[label="0.128571;9pkt 9fpkt"];
1003--3902[label="0.114286;8pkt 8fpkt"];
1003--3923[label="0.128571;9pkt 9fpkt"];
1003--4693[label="1;1pkt 1fpkt"];
1003--5948[label="1;1pkt 1fpkt"];
1573--3301[label="1;1pkt 1fpkt"];
1573--3781[label="1;1pkt 1fpkt"];
1573--3806[label="1;1pkt 1fpkt"];
1573--3852[label="1;1pkt 1fpkt"];
1573--3868[label="1;1pkt 1fpkt"];
1573--3902[label="1;1pkt 1fpkt"];
1573--3923[label="1;1pkt 1fpkt"];
1573--4693[label="1;1pkt 1fpkt"];
1573--5948[label="1;1pkt 1fpkt"];
3301--3781[label="1;1pkt 1fpkt"];
3301--3806[label="1;1pkt 1fpkt"];
3301--3852[label="1;1pkt 1fpkt"];
3301--3868[label="1;1pkt 1fpkt"];
3301--3902[label="1;1pkt 1fpkt"];
3301--3923[label="1;1pkt 1fpkt"];
3301--4693[label="1;1pkt 1fpkt"];
3301--5948[label="1;1pkt 1fpkt"];
3343--3781[label="0.173077;9pkt 9fpkt"];
3343--3806[label="0.0769231;4pkt 4fpkt"];
3343--3852[label="0.173077;9pkt 9fpkt"];
3343--3868[label="0.0769231;4pkt 4fpkt"];
3343--3902[label="0.173077;9pkt 9fpkt"];
3343--3923[label="0.0769231;4pkt 4fpkt"];
4693--5948[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.78.134.161" src_port="80"/>
      <filter dst_ip="134.168.199.133" src_ip="200.78.134.219" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.176.137.64"/>
      <from sec="1189314019" usec="0"/>
      <to sec="1189314828" usec="0"/>
    </slice>
    <from sec="1189314019" usec="0"/>
    <to sec="1189314828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="128.190.173.244"/>
      <from sec="1189314065" usec="0"/>
      <to sec="1189314779" usec="0"/>
    </slice>
    <from sec="1189314065" usec="0"/>
    <to sec="1189314779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.69.180.187"/>
      <from sec="1189314209" usec="0"/>
      <to sec="1189314776" usec="0"/>
    </slice>
    <from sec="1189314209" usec="0"/>
    <to sec="1189314776" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
687[label="22.76.5.140;d;86pkt 86fpkt", shape=diamond, color=yellow];
1952[label="128.190.82.186;s;7pkt 7fpkt", shape=diamond, color=yellow];
5158[label="128.190.82.186;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6185[label="128.190.82.186;7pkt 7fpkt", shape=invtriangle, color=brown];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 22.76.5.140:*}[90.1099%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.1308%)&lt;BR/&gt; 36525: (1.86916%)&lt;BR/&gt; 34676: (1.86916%)&lt;BR/&gt; 48294: (1.40187%)&lt;BR/&gt; 39394: (1.40187%)&gt;];
}
687--721[label="0.0348837;3pkt 3fpkt"];
687--950[label="0.130435;3pkt 3fpkt"];
687--1177[label="0.097561;4pkt 4fpkt"];
687--1377[label="0.0581395;5pkt 5fpkt"];
687--1425[label="0.0232558;2pkt 2fpkt"];
687--1800[label="1;1pkt 1fpkt"];
687--1883[label="0.0116279;1pkt 1fpkt"];
687--1952[label="0.285714;2pkt 2fpkt"];
687--2147[label="0.0508475;3pkt 3fpkt"];
687--2438[label="0.025;1pkt 1fpkt"];
687--2494[label="0.1;1pkt 1fpkt"];
687--2698[label="0.0217391;1pkt 1fpkt"];
687--2999[label="0.130435;3pkt 3fpkt"];
687--3032[label="0.0153846;1pkt 1fpkt"];
687--3146[label="0.0930233;8pkt 8fpkt"];
687--3344[label="0.0151515;1pkt 1fpkt"];
687--3619[label="0.0232558;2pkt 2fpkt"];
687--3627[label="0.0217391;1pkt 1fpkt"];
687--3781[label="0.395349;34pkt 34fpkt"];
687--3852[label="0.395349;34pkt 34fpkt"];
687--3902[label="0.395349;34pkt 34fpkt"];
687--4037[label="0.25;2pkt 2fpkt"];
687--4139[label="1;1pkt 1fpkt"];
687--5158[label="0.285714;2pkt 2fpkt"];
687--5210[label="0.047619;3pkt 3fpkt"];
687--5470[label="0.0212766;1pkt 1fpkt"];
687--6185[label="0.285714;2pkt 2fpkt"];
687--6209[label="0.047619;3pkt 3fpkt"];
687--6348[label="0.0212766;1pkt 1fpkt"];
687--6711[label="0.047619;3pkt 3fpkt"];
687--6775[label="0.0212766;1pkt 1fpkt"];
1952--3781[label="0.142857;1pkt 1fpkt"];
1952--3852[label="0.142857;1pkt 1fpkt"];
1952--3902[label="0.142857;1pkt 1fpkt"];
1952--5158[label="1;7pkt 7fpkt"];
1952--6185[label="1;7pkt 7fpkt"];
5158--6185[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="22.76.5.140" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
693[label="76.241.117.116;s;3420pkt 3420fpkt", shape=diamond, color=yellow];
1963[label="168.206.78.213;d;72pkt 72fpkt", shape=diamond, color=yellow];
3642[label="168.206.78.213;d;72pkt 72fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.241.117.116:4260, *:1434}[97.9662%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4260: (48.0079%)&lt;BR/&gt; 1434: (48.0079%)&lt;BR/&gt; 80: (1.99214%)&lt;BR/&gt; 1558: (0.0280584%)&lt;BR/&gt; 1557: (0.0280584%)&gt;];
}
693--1963[label="0.0138889;1pkt 1fpkt"];
693--3642[label="0.0138889;1pkt 1fpkt"];
693--3786[label="0.0670315;196pkt 196fpkt"];
1963--3642[label="1;72pkt 72fpkt"];
1963--3781[label="0.0972222;7pkt 7fpkt"];
1963--3806[label="0.125;9pkt 9fpkt"];
1963--3852[label="0.0972222;7pkt 7fpkt"];
1963--3868[label="0.125;9pkt 9fpkt"];
1963--3902[label="0.0972222;7pkt 7fpkt"];
1963--3923[label="0.125;9pkt 9fpkt"];
1963--4274[label="0.986111;71pkt 71fpkt"];
1963--5742[label="0.986111;71pkt 71fpkt"];
3642--3781[label="0.0972222;7pkt 7fpkt"];
3642--3806[label="0.125;9pkt 9fpkt"];
3642--3852[label="0.0972222;7pkt 7fpkt"];
3642--3868[label="0.125;9pkt 9fpkt"];
3642--3902[label="0.0972222;7pkt 7fpkt"];
3642--3923[label="0.125;9pkt 9fpkt"];
3642--4274[label="0.986111;71pkt 71fpkt"];
3642--5742[label="0.986111;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="76.241.117.116" src_port="4260"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
1643[label="168.206.132.176;s;89pkt 89fpkt", shape=diamond, color=yellow];
1985[label="22.77.116.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
3383[label="22.77.116.131;d;1pkt 1fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.132.176:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35622: (1.64835%)&lt;BR/&gt; 62299: (0.549451%)&lt;BR/&gt; 61983: (0.549451%)&lt;BR/&gt; 61744: (0.549451%)&gt;];
}
1643--1985[label="1;1pkt 1fpkt"];
1643--3383[label="1;1pkt 1fpkt"];
1985--3383[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.206.132.176" src_port="25"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
1935[label="128.190.173.244;d;13pkt 13fpkt", shape=diamond, color=yellow];
1992[label="17.177.99.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 128.190.173.244:25}[76.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.4286%)&lt;BR/&gt; 23730: (7.14286%)&lt;BR/&gt; 58720: (3.57143%)&lt;BR/&gt; 47233: (3.57143%)&lt;BR/&gt; 43266: (3.57143%)&gt;];
}
1935--1992[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.173.244" dst_port="25"/>
    </slice>
    <from sec="1189314065" usec="0"/>
    <to sec="1189314779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677558,1.49701,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
2013[label="217.217.68.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
2051[label="128.190.169.176;d;3pkt 3fpkt", shape=diamond, color=yellow];
6263[label="217.217.68.212;1pkt 1fpkt", shape=invtriangle, color=brown];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.217.79.52:19601, 128.190.169.176:4479}[33.3333%]&lt;BR/&gt;{218.117.181.96:0, 128.190.169.176:0}[33.3333%]&lt;BR/&gt;{217.217.68.212:19101, 128.190.169.176:4790}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (30%)&lt;BR/&gt; 4790: (30%)&lt;BR/&gt; 0: (20%)&lt;BR/&gt; 19601: (10%)&lt;BR/&gt; 4479: (10%)&gt;];
}
2013--2051[label="1;1pkt 1fpkt"];
2013--6263[label="1;1pkt 1fpkt"];
2051--6263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.169.176" dst_port="4790" src_ip="217.217.68.212" src_port="19101"/>
      <filter dst_ip="128.190.169.176" src_ip="218.117.181.96"/>
      <filter dst_ip="128.190.169.176" dst_port="4479" src_ip="217.217.79.52" src_port="19601"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.86.144.189"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314722" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.153.136.237"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
351[label="218.157.239.177;d;410pkt 410fpkt", shape=diamond, color=yellow];
567[label="216.212.118.33;s;78pkt 78fpkt", shape=diamond, color=yellow];
605[label="222.202.23.106;d;11pkt 11fpkt", shape=diamond, color=yellow];
645[label="23.20.223.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
1461[label="128.190.206.167;s;30pkt 30fpkt", shape=diamond, color=yellow];
1997[label="23.20.217.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
2019[label="23.20.214.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
2743[label="128.190.7.105;s;12pkt 12fpkt", shape=diamond, color=yellow];
2903[label="201.59.190.44;d;46pkt 46fpkt", shape=hexagon, color=black];
2917[label="23.20.223.187;d;1pkt 1fpkt", shape=hexagon, color=black];
3402[label="218.157.239.177;d;341pkt 341fpkt", shape=hexagon, color=black];
3483[label="23.20.217.197;d;1pkt 1fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 218.157.239.177:0}[69.3103%]&lt;BR/&gt;{*:*, *:80}[27.069%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (78.9925%)&lt;BR/&gt; 80: (8.89603%)&lt;BR/&gt; 443: (0.696677%)&lt;BR/&gt; 445: (0.428725%)&lt;BR/&gt; 139: (0.428725%)&gt;];
}
351--486[label="0.003125;1pkt 1fpkt"];
351--772[label="0.00243902;1pkt 1fpkt"];
351--915[label="0.00862069;1pkt 1fpkt"];
351--1377[label="0.00315457;1pkt 1fpkt"];
351--1461[label="0.0333333;1pkt 1fpkt"];
351--1661[label="0.00588235;1pkt 1fpkt"];
351--2138[label="0.0188679;1pkt 1fpkt"];
351--2388[label="0.00431034;1pkt 1fpkt"];
351--2743[label="0.0833333;1pkt 1fpkt"];
351--3135[label="0.0120482;1pkt 1fpkt"];
351--3349[label="0.00588235;1pkt 1fpkt"];
351--3402[label="1;341pkt 341fpkt"];
351--3782[label="0.00487805;2pkt 2fpkt"];
351--3853[label="0.00487805;2pkt 2fpkt"];
351--3903[label="0.00487805;2pkt 2fpkt"];
351--4484[label="0.333333;1pkt 1fpkt"];
351--4544[label="0.142857;1pkt 1fpkt"];
351--4569[label="0.0769231;1pkt 1fpkt"];
351--4685[label="0.00606061;1pkt 1fpkt"];
351--5850[label="0.333333;1pkt 1fpkt"];
351--5943[label="0.00606061;1pkt 1fpkt"];
351--6547[label="0.333333;1pkt 1fpkt"];
351--6590[label="0.00606061;1pkt 1fpkt"];
567--605[label="0.0909091;1pkt 1fpkt"];
567--624[label="1;1pkt 1fpkt"];
567--645[label="1;1pkt 1fpkt"];
567--681[label="0.025641;2pkt 2fpkt"];
567--887[label="0.0128205;1pkt 1fpkt"];
567--895[label="0.0128205;1pkt 1fpkt"];
567--1159[label="0.0384615;2pkt 2fpkt"];
567--1217[label="0.0384615;3pkt 3fpkt"];
567--1613[label="0.0128205;1pkt 1fpkt"];
567--1997[label="1;1pkt 1fpkt"];
567--2019[label="1;1pkt 1fpkt"];
567--2186[label="0.1;4pkt 4fpkt"];
567--2312[label="1;1pkt 1fpkt"];
567--2903[label="0.0434783;2pkt 2fpkt"];
567--2917[label="1;1pkt 1fpkt"];
567--3075[label="0.0625;2pkt 2fpkt"];
567--3080[label="0.0163934;1pkt 1fpkt"];
567--3085[label="0.0909091;1pkt 1fpkt"];
567--3332[label="0.0128205;1pkt 1fpkt"];
567--3483[label="1;1pkt 1fpkt"];
567--3762[label="0.102564;8pkt 8fpkt"];
567--3785[label="0.0641026;5pkt 5fpkt"];
567--3807[label="0.115385;9pkt 9fpkt"];
605--1238[label="0.181818;2pkt 2fpkt"];
605--1250[label="0.181818;2pkt 2fpkt"];
605--1650[label="0.181818;2pkt 2fpkt"];
605--3085[label="1;11pkt 11fpkt"];
605--3552[label="0.181818;2pkt 2fpkt"];
605--3762[label="0.272727;3pkt 3fpkt"];
645--2917[label="1;1pkt 1fpkt"];
1461--1524[label="1;1pkt 1fpkt"];
1461--2903[label="0.0666667;2pkt 2fpkt"];
1461--3038[label="0.0333333;1pkt 1fpkt"];
1461--3402[label="0.0333333;1pkt 1fpkt"];
1461--3762[label="0.0333333;1pkt 1fpkt"];
1461--3785[label="0.1;3pkt 3fpkt"];
1461--3807[label="0.0666667;2pkt 2fpkt"];
1997--3483[label="1;1pkt 1fpkt"];
1997--3785[label="1;1pkt 1fpkt"];
2019--3785[label="1;1pkt 1fpkt"];
2743--3402[label="0.0833333;1pkt 1fpkt"];
2743--3785[label="0.416667;5pkt 5fpkt"];
2743--3807[label="0.333333;4pkt 4fpkt"];
2903--3131[label="0.0217391;1pkt 1fpkt"];
2903--3762[label="0.0869565;4pkt 4fpkt"];
2903--3785[label="0.108696;5pkt 5fpkt"];
2903--3807[label="0.108696;5pkt 5fpkt"];
3402--3782[label="0.0058651;2pkt 2fpkt"];
3402--3853[label="0.0058651;2pkt 2fpkt"];
3402--3903[label="0.0058651;2pkt 2fpkt"];
3402--4484[label="0.333333;1pkt 1fpkt"];
3402--4544[label="0.142857;1pkt 1fpkt"];
3402--4569[label="0.0769231;1pkt 1fpkt"];
3402--4685[label="0.00606061;1pkt 1fpkt"];
3402--5850[label="0.333333;1pkt 1fpkt"];
3402--5943[label="0.00606061;1pkt 1fpkt"];
3402--6547[label="0.333333;1pkt 1fpkt"];
3402--6590[label="0.00606061;1pkt 1fpkt"];
3483--3785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80"/>
      <filter dst_ip="218.157.239.177"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.122.194.210"/>
      <from sec="1189314212" usec="0"/>
      <to sec="1189314531" usec="0"/>
    </slice>
    <from sec="1189314212" usec="0"/>
    <to sec="1189314531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
569[label="200.78.164.46;d;201pkt 201fpkt", shape=diamond, color=yellow];
1678[label="168.206.38.21;s;85pkt 85fpkt", shape=diamond, color=yellow];
1964[label="168.206.78.213;s;71pkt 71fpkt", shape=diamond, color=yellow];
4095[label="168.206.38.21;85pkt 85fpkt", shape=pentagon, color=darkviolet];
5316[label="168.206.78.213;87pkt 87fpkt", shape=pentagon, color=darkviolet];
5646[label="168.206.38.21;84pkt 84fpkt", shape=invtriangle, color=brown];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.78.213:*, 200.78.164.46:80}[37.5%]&lt;BR/&gt;{168.206.38.21:*, 200.78.164.46:80}[34.0517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5318%)&lt;BR/&gt; 110: (0.978793%)&lt;BR/&gt; 3141: (0.326264%)&lt;BR/&gt; 3140: (0.326264%)&lt;BR/&gt; 3139: (0.326264%)&gt;];
}
569--1426[label="0.28125;9pkt 9fpkt"];
569--1678[label="0.823529;70pkt 70fpkt"];
569--1964[label="1;71pkt 71fpkt"];
569--2196[label="0.2;6pkt 6fpkt"];
569--3785[label="0.079602;16pkt 16fpkt"];
569--3807[label="0.0447761;9pkt 9fpkt"];
569--4095[label="0.823529;70pkt 70fpkt"];
569--5316[label="0.816092;71pkt 71fpkt"];
569--5401[label="0.2;6pkt 6fpkt"];
569--5646[label="0.833333;70pkt 70fpkt"];
1678--3762[label="0.105882;9pkt 9fpkt"];
1678--3785[label="0.105882;9pkt 9fpkt"];
1678--4095[label="1;85pkt 85fpkt"];
1678--5646[label="1;84pkt 84fpkt"];
1964--3785[label="0.0985915;7pkt 7fpkt"];
1964--3807[label="0.126761;9pkt 9fpkt"];
1964--5316[label="1;71pkt 71fpkt"];
4095--5646[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="200.78.164.46" dst_port="80" src_ip="168.206.78.213"/>
      <filter dst_ip="200.78.164.46" dst_port="80" src_ip="168.206.38.21"/>
    </slice>
    <from sec="1189314009" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.228.157.164"/>
      <from sec="1189314306" usec="0"/>
      <to sec="1189314732" usec="0"/>
    </slice>
    <from sec="1189314306" usec="0"/>
    <to sec="1189314732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
2149[label="134.219.32.12;d;229pkt 229fpkt", shape=diamond, color=yellow];
2213[label="197.33.146.6;s;150pkt 150fpkt", shape=diamond, color=yellow];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.33.146.6:9004, 134.219.32.12:*}[57.9167%]&lt;BR/&gt;{77.18.5.198:*, 134.219.32.12:*}[37.0833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9004: (38.1266%)&lt;BR/&gt; 1080: (5.14512%)&lt;BR/&gt; 8000: (3.56201%)&lt;BR/&gt; 81: (3.0343%)&lt;BR/&gt; 65164: (0.395778%)&gt;];
}
2149--2213[label="0.926667;139pkt 139fpkt"];
2149--2288[label="0.00436681;1pkt 1fpkt"];
2149--3499[label="0.00436681;1pkt 1fpkt"];
2149--3734[label="0.00436681;1pkt 1fpkt"];
2149--3797[label="0.00436681;1pkt 1fpkt"];
2149--3854[label="0.00436681;1pkt 1fpkt"];
2149--3904[label="0.00436681;1pkt 1fpkt"];
2149--4470[label="0.00436681;1pkt 1fpkt"];
2149--5846[label="0.00436681;1pkt 1fpkt"];
2149--6543[label="0.00436681;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.219.32.12" src_ip="77.18.5.198"/>
      <filter dst_ip="134.219.32.12" src_ip="197.33.146.6" src_port="9004"/>
    </slice>
    <from sec="1189314013" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
535[label="128.190.69.13;s;285pkt 285fpkt", shape=diamond, color=yellow];
1113[label="128.190.69.8;s;214pkt 214fpkt", shape=diamond, color=yellow];
2221[label="197.6.176.234;d;45pkt 45fpkt", shape=diamond, color=yellow];
2226[label="110.6.9.103;d;9pkt 9fpkt", shape=diamond, color=yellow];
2569[label="77.234.253.51;d;7pkt 7fpkt", shape=diamond, color=yellow];
2578[label="77.66.194.212;d;11pkt 11fpkt", shape=diamond, color=yellow];
2979[label="128.190.69.13;s;285pkt 285fpkt", shape=hexagon, color=black];
3665[label="33.112.214.192;d;12pkt 12fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.69.13:80, *:*}[55.3398%]&lt;BR/&gt;{128.190.69.8:80, *:*}[41.5534%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1782: (0.230415%)&lt;BR/&gt; 1781: (0.230415%)&lt;BR/&gt; 55265: (0.172811%)&lt;BR/&gt; 55264: (0.172811%)&gt;];
}
535--1163[label="0.0416667;2pkt 2fpkt"];
535--1265[label="0.166667;2pkt 2fpkt"];
535--1645[label="0.0138889;2pkt 2fpkt"];
535--1714[label="0.4;20pkt 20fpkt"];
535--1819[label="0.0440252;7pkt 7fpkt"];
535--2221[label="1;45pkt 45fpkt"];
535--2226[label="0.888889;8pkt 8fpkt"];
535--2513[label="0.54;54pkt 54fpkt"];
535--2569[label="0.714286;5pkt 5fpkt"];
535--2802[label="0.333333;4pkt 4fpkt"];
535--2979[label="1;285pkt 285fpkt"];
535--3665[label="0.333333;4pkt 4fpkt"];
535--3781[label="0.157895;45pkt 45fpkt"];
535--3806[label="0.214035;61pkt 61fpkt"];
535--3852[label="0.157895;45pkt 45fpkt"];
535--3868[label="0.214035;61pkt 61fpkt"];
535--3902[label="0.157895;45pkt 45fpkt"];
535--3923[label="0.214035;61pkt 61fpkt"];
1113--1265[label="0.25;3pkt 3fpkt"];
1113--1304[label="1;3pkt 3fpkt"];
1113--1645[label="0.0277778;4pkt 4fpkt"];
1113--1714[label="0.1;5pkt 5fpkt"];
1113--1819[label="0.0251572;4pkt 4fpkt"];
1113--2513[label="0.46;46pkt 46fpkt"];
1113--2578[label="0.181818;2pkt 2fpkt"];
1113--2802[label="0.333333;4pkt 4fpkt"];
1113--3206[label="1;3pkt 3fpkt"];
1113--3665[label="0.333333;4pkt 4fpkt"];
1113--3781[label="0.0327103;7pkt 7fpkt"];
1113--3806[label="0.261682;56pkt 56fpkt"];
1113--3852[label="0.0327103;7pkt 7fpkt"];
1113--3868[label="0.261682;56pkt 56fpkt"];
1113--3902[label="0.0327103;7pkt 7fpkt"];
1113--3923[label="0.261682;56pkt 56fpkt"];
2221--2979[label="1;45pkt 45fpkt"];
2221--3781[label="0.711111;32pkt 32fpkt"];
2221--3806[label="0.0222222;1pkt 1fpkt"];
2221--3852[label="0.711111;32pkt 32fpkt"];
2221--3868[label="0.0222222;1pkt 1fpkt"];
2221--3902[label="0.711111;32pkt 32fpkt"];
2221--3923[label="0.0222222;1pkt 1fpkt"];
2226--2979[label="0.888889;8pkt 8fpkt"];
2226--3781[label="0.111111;1pkt 1fpkt"];
2226--3852[label="0.111111;1pkt 1fpkt"];
2226--3902[label="0.111111;1pkt 1fpkt"];
2569--2979[label="0.714286;5pkt 5fpkt"];
2979--3665[label="0.333333;4pkt 4fpkt"];
2979--3781[label="0.157895;45pkt 45fpkt"];
2979--3806[label="0.214035;61pkt 61fpkt"];
2979--3852[label="0.157895;45pkt 45fpkt"];
2979--3868[label="0.214035;61pkt 61fpkt"];
2979--3902[label="0.157895;45pkt 45fpkt"];
2979--3923[label="0.214035;61pkt 61fpkt"];
3665--4049[label="0.25;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="128.190.69.13" src_port="80"/>
      <filter src_ip="128.190.69.8" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.49.31.141"/>
      <from sec="1189314475" usec="0"/>
      <to sec="1189314626" usec="0"/>
    </slice>
    <from sec="1189314475" usec="0"/>
    <to sec="1189314626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
2028[label="128.190.71.102;s;2pkt 2fpkt", shape=diamond, color=yellow];
2252[label="26.30.0.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.71.102:995, 26.30.0.19:15156}[50%]&lt;BR/&gt;{128.190.71.102:995, 26.30.0.20:16028}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 15156: (33.3333%)&lt;BR/&gt; 16028: (16.6667%)&gt;];
}
2028--2252[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.30.0.20" dst_port="16028" src_ip="128.190.71.102" src_port="995"/>
      <filter dst_ip="26.30.0.19" dst_port="15156" src_ip="128.190.71.102" src_port="995"/>
    </slice>
    <from sec="1189314522" usec="0"/>
    <to sec="1189314537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
2256[label="202.123.227.169;d;8pkt 8fpkt", shape=diamond, color=yellow];
2257[label="134.99.11.29;s;8pkt 8fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.11.29:*, 202.123.227.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2409: (6.25%)&lt;BR/&gt; 2408: (6.25%)&lt;BR/&gt; 2407: (6.25%)&lt;BR/&gt; 2406: (6.25%)&gt;];
}
2256--2257[label="1;8pkt 8fpkt"];
2256--3785[label="0.625;5pkt 5fpkt"];
2256--4156[label="1;8pkt 8fpkt"];
2257--3785[label="0.625;5pkt 5fpkt"];
2257--4156[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="202.123.227.169" dst_port="80" src_ip="134.99.11.29"/>
    </slice>
    <from sec="1189314531" usec="0"/>
    <to sec="1189314612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="203.42.6.80"/>
      <from sec="1189314538" usec="0"/>
      <to sec="1189314649" usec="0"/>
    </slice>
    <from sec="1189314538" usec="0"/>
    <to sec="1189314649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
2270[label="194.101.155.238;d;3pkt 3fpkt", shape=diamond, color=yellow];
2271[label="134.112.166.138;s;12pkt 12fpkt", shape=diamond, color=yellow];
4856[label="134.112.166.138;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.138:110, *:*}[34.2857%]&lt;BR/&gt;{134.112.166.138:995, 21.64.193.209:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (29.5918%)&lt;BR/&gt; 110: (14.2857%)&lt;BR/&gt; 8301: (3.06122%)&lt;BR/&gt; 6924: (3.06122%)&lt;BR/&gt; 1341: (3.06122%)&gt;];
}
2270--2271[label="0.666667;2pkt 2fpkt"];
2270--4856[label="0.666667;2pkt 2fpkt"];
2271--2850[label="0.0833333;1pkt 1fpkt"];
2271--3676[label="0.0833333;1pkt 1fpkt"];
2271--4856[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="134.112.166.138" src_port="110"/>
      <filter dst_ip="21.64.193.209" src_ip="134.112.166.138" src_port="995"/>
    </slice>
    <from sec="1189314042" usec="0"/>
    <to sec="1189314886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
2281[label="33.117.130.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
2282[label="134.112.226.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
3496[label="134.112.226.250;d;1pkt 1fpkt", shape=hexagon, color=black];
4446[label="33.117.130.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5828[label="33.117.130.72;1pkt 1fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.117.130.72:80, 134.112.226.250:1244}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1244: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2281--2282[label="1;1pkt 1fpkt"];
2281--3496[label="1;1pkt 1fpkt"];
2281--3781[label="1;1pkt 1fpkt"];
2281--3852[label="1;1pkt 1fpkt"];
2281--3902[label="1;1pkt 1fpkt"];
2281--4446[label="1;1pkt 1fpkt"];
2281--5828[label="1;1pkt 1fpkt"];
2282--3496[label="1;1pkt 1fpkt"];
2282--3781[label="1;1pkt 1fpkt"];
2282--3852[label="1;1pkt 1fpkt"];
2282--3902[label="1;1pkt 1fpkt"];
2282--4446[label="1;1pkt 1fpkt"];
2282--5828[label="1;1pkt 1fpkt"];
3496--3781[label="1;1pkt 1fpkt"];
3496--3852[label="1;1pkt 1fpkt"];
3496--3902[label="1;1pkt 1fpkt"];
3496--4446[label="1;1pkt 1fpkt"];
3496--5828[label="1;1pkt 1fpkt"];
4446--5828[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.226.250" dst_port="1244" src_ip="33.117.130.72" src_port="80"/>
    </slice>
    <from sec="1189314578" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
2280[label="33.117.130.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
2283[label="134.112.226.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
3495[label="33.117.130.72;d;1pkt 1fpkt", shape=hexagon, color=black];
3497[label="134.112.226.250;s;1pkt 1fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.226.250:1244, 33.117.130.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1244: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2280--2283[label="1;1pkt 1fpkt"];
2280--3495[label="1;1pkt 1fpkt"];
2280--3497[label="1;1pkt 1fpkt"];
2280--3785[label="1;1pkt 1fpkt"];
2283--3495[label="1;1pkt 1fpkt"];
2283--3497[label="1;1pkt 1fpkt"];
2283--3785[label="1;1pkt 1fpkt"];
3495--3497[label="1;1pkt 1fpkt"];
3495--3785[label="1;1pkt 1fpkt"];
3497--3785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.117.130.72" dst_port="80" src_ip="134.112.226.250" src_port="1244"/>
    </slice>
    <from sec="1189314578" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
11[label="216.212.118.33s;1pkt 1fpkt", shape=rectangle, color=red];
2312[label="23.20.210.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.118.33:61311, 23.20.210.130:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61311: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11--567[label="1;1pkt 1fpkt"];
11--2312[label="1;1pkt 1fpkt"];
11--3807[label="1;1pkt 1fpkt"];
2312--3807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.20.210.130" dst_port="80" src_ip="216.212.118.33" src_port="61311"/>
    </slice>
    <from sec="1189314113" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.832594,1.46015,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1362[label="38.26.73.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
2339[label="128.190.80.137;s;6pkt 6fpkt", shape=diamond, color=yellow];
3517[label="38.26.73.141;d;2pkt 2fpkt", shape=hexagon, color=black];
6024[label="128.190.80.137;1pkt 1fpkt", shape=invtriangle, color=brown];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.80.137:123, *:123}[42.8571%]&lt;BR/&gt;{*:123, 38.26.73.141:123}[28.5714%]&lt;BR/&gt;{128.190.80.137:123, 8.27.22.208:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (86.3636%)&lt;BR/&gt; 3748: (4.54545%)&lt;BR/&gt; 3747: (4.54545%)&lt;BR/&gt; 1036: (4.54545%)&gt;];
}
1362--2339[label="0.5;1pkt 1fpkt"];
1362--3517[label="1;2pkt 2fpkt"];
2339--3517[label="0.5;1pkt 1fpkt"];
2339--6024[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.27.22.208" src_ip="128.190.80.137" src_port="123"/>
      <filter dst_port="123" src_ip="128.190.80.137" src_port="123"/>
      <filter dst_ip="38.26.73.141" dst_port="123" src_port="123"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
2358[label="170.233.181.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
2359[label="25.38.159.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.38.159.45:2379, 170.233.181.139:1089}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2379: (50%)&lt;BR/&gt; 1089: (50%)&gt;];
}
2358--2359[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.233.181.139" dst_port="1089" src_ip="25.38.159.45" src_port="2379"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.206.134.21"/>
      <from sec="1189314007" usec="0"/>
      <to sec="1189314827" usec="0"/>
    </slice>
    <from sec="1189314007" usec="0"/>
    <to sec="1189314827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
821[label="196.51.188.209;s;3190pkt 3190fpkt", shape=diamond, color=yellow];
5292[label="196.51.188.209;3469pkt 3469fpkt", shape=pentagon, color=darkviolet];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.51.188.209:1086, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1086: (50%)&gt;];
}
821--2428[label="0.0222222;1pkt 1fpkt"];
821--2855[label="0.000314268;1pkt 1fpkt"];
821--3685[label="0.000425351;1pkt 1fpkt"];
821--3786[label="0.0632695;185pkt 185fpkt"];
821--5292[label="1;3190pkt 3190fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="196.51.188.209" src_port="1086"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.832594,1.46015,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
424[label="134.112.166.196;s;1638pkt 1638fpkt", shape=diamond, color=yellow];
641[label="210.73.120.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
912[label="217.155.96.68;s;210pkt 210fpkt", shape=diamond, color=yellow];
972[label="210.73.120.37;d;8pkt 8fpkt", shape=diamond, color=yellow];
1158[label="128.190.128.146;s;194pkt 194fpkt", shape=diamond, color=yellow];
1247[label="22.76.5.152;d;438pkt 438fpkt", shape=diamond, color=yellow];
1688[label="25.3.110.9;d;8pkt 8fpkt", shape=diamond, color=yellow];
1769[label="210.73.120.8;d;9pkt 9fpkt", shape=diamond, color=yellow];
2198[label="200.28.55.76;d;6pkt 6fpkt", shape=diamond, color=yellow];
2462[label="217.70.174.117;d;66pkt 66fpkt", shape=diamond, color=yellow];
2812[label="43.116.32.227;d;2pkt 2fpkt", shape=diamond, color=yellow];
3214[label="210.73.120.37;d;8pkt 8fpkt", shape=hexagon, color=black];
6148[label="128.190.169.177;126pkt 126fpkt", shape=invtriangle, color=brown];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.196:80, *:*}[62.1965%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5506%)&lt;BR/&gt; 53: (1.27072%)&lt;BR/&gt; 2372: (0.92081%)&lt;BR/&gt; 0: (0.92081%)&lt;BR/&gt; 25: (0.626151%)&gt;];
}
424--575[label="0.0895522;12pkt 12fpkt"];
424--600[label="0.0733945;8pkt 8fpkt"];
424--618[label="0.0114943;1pkt 1fpkt"];
424--641[label="1;2pkt 2fpkt"];
424--666[label="1;15pkt 15fpkt"];
424--680[label="1;1pkt 1fpkt"];
424--687[label="0.0930233;8pkt 8fpkt"];
424--865[label="0.00204082;1pkt 1fpkt"];
424--884[label="0.027027;3pkt 3fpkt"];
424--945[label="0.210526;8pkt 8fpkt"];
424--972[label="1;8pkt 8fpkt"];
424--978[label="0.571429;8pkt 8fpkt"];
424--992[label="0.177215;28pkt 28fpkt"];
424--1247[label="0.171233;75pkt 75fpkt"];
424--1272[label="1;1pkt 1fpkt"];
424--1309[label="1;6pkt 6fpkt"];
424--1312[label="1;4pkt 4fpkt"];
424--1441[label="0.0625;1pkt 1fpkt"];
424--1595[label="0.277778;5pkt 5fpkt"];
424--1645[label="0.0902778;13pkt 13fpkt"];
424--1688[label="0.375;3pkt 3fpkt"];
424--1727[label="0.142857;1pkt 1fpkt"];
424--1733[label="1;17pkt 17fpkt"];
424--1769[label="1;9pkt 9fpkt"];
424--2198[label="0.5;3pkt 3fpkt"];
424--2205[label="0.0555556;2pkt 2fpkt"];
424--2218[label="0.25;1pkt 1fpkt"];
424--2277[label="1;1pkt 1fpkt"];
424--2462[label="0.0757576;5pkt 5fpkt"];
424--2469[label="0.272727;3pkt 3fpkt"];
424--2705[label="0.1;2pkt 2fpkt"];
424--2713[label="0.112676;8pkt 8fpkt"];
424--2734[label="0.0212766;1pkt 1fpkt"];
424--2812[label="1;2pkt 2fpkt"];
424--2985[label="0.027027;3pkt 3fpkt"];
424--2996[label="0.0114943;1pkt 1fpkt"];
424--3097[label="1;15pkt 15fpkt"];
424--3107[label="1;1pkt 1fpkt"];
424--3108[label="0.185185;25pkt 25fpkt"];
424--3146[label="1;755pkt 755fpkt"];
424--3207[label="1;4pkt 4fpkt"];
424--3214[label="1;8pkt 8fpkt"];
424--3238[label="0.357143;5pkt 5fpkt"];
424--3494[label="1;1pkt 1fpkt"];
424--3559[label="0.25;1pkt 1fpkt"];
424--3632[label="0.1;2pkt 2fpkt"];
424--3725[label="0.037037;3pkt 3fpkt"];
424--3781[label="0.0750916;123pkt 123fpkt"];
424--3806[label="0.0604396;99pkt 99fpkt"];
424--3852[label="0.0750916;123pkt 123fpkt"];
424--3868[label="0.0604396;99pkt 99fpkt"];
424--3902[label="0.0750916;123pkt 123fpkt"];
424--3923[label="0.0604396;99pkt 99fpkt"];
641--3146[label="1;2pkt 2fpkt"];
912--1688[label="0.125;1pkt 1fpkt"];
912--3781[label="0.204762;43pkt 43fpkt"];
912--3806[label="0.0380952;8pkt 8fpkt"];
912--3852[label="0.204762;43pkt 43fpkt"];
912--3868[label="0.0380952;8pkt 8fpkt"];
912--3902[label="0.204762;43pkt 43fpkt"];
912--3923[label="0.0380952;8pkt 8fpkt"];
972--3146[label="1;8pkt 8fpkt"];
972--3214[label="1;8pkt 8fpkt"];
1158--1163[label="0.0625;3pkt 3fpkt"];
1158--1619[label="0.00925926;1pkt 1fpkt"];
1158--1645[label="0.00694444;1pkt 1fpkt"];
1158--2071[label="0.00934579;1pkt 1fpkt"];
1158--2205[label="0.222222;8pkt 8fpkt"];
1158--2462[label="0.030303;2pkt 2fpkt"];
1158--2713[label="0.0140845;1pkt 1fpkt"];
1158--2899[label="0.0125;1pkt 1fpkt"];
1158--2988[label="0.0294118;2pkt 2fpkt"];
1158--3071[label="0.021164;4pkt 4fpkt"];
1158--3694[label="0.0769231;2pkt 2fpkt"];
1158--3761[label="0.00515464;1pkt 1fpkt"];
1158--3762[label="0.00515464;1pkt 1fpkt"];
1158--3781[label="0.0154639;3pkt 3fpkt"];
1158--3785[label="0.00515464;1pkt 1fpkt"];
1158--3806[label="0.0154639;3pkt 3fpkt"];
1158--3852[label="0.0154639;3pkt 3fpkt"];
1158--3868[label="0.0154639;3pkt 3fpkt"];
1158--3876[label="0.00515464;1pkt 1fpkt"];
1158--3902[label="0.0154639;3pkt 3fpkt"];
1158--3922[label="0.0103093;2pkt 2fpkt"];
1158--3923[label="0.0154639;3pkt 3fpkt"];
1158--3924[label="0.00515464;1pkt 1fpkt"];
1247--2098[label="0.0181818;2pkt 2fpkt"];
1247--3146[label="0.0684932;30pkt 30fpkt"];
1247--3235[label="0.00851064;2pkt 2fpkt"];
1247--3534[label="0.020202;2pkt 2fpkt"];
1247--3781[label="0.0958904;42pkt 42fpkt"];
1247--3806[label="0.0958904;42pkt 42fpkt"];
1247--3852[label="0.0958904;42pkt 42fpkt"];
1247--3868[label="0.0958904;42pkt 42fpkt"];
1247--3902[label="0.0958904;42pkt 42fpkt"];
1247--3923[label="0.0958904;42pkt 42fpkt"];
1247--4413[label="0.133333;2pkt 2fpkt"];
1247--5098[label="0.015873;2pkt 2fpkt"];
1247--6148[label="0.015873;2pkt 2fpkt"];
1688--2715[label="0.125;1pkt 1fpkt"];
1688--3146[label="0.375;3pkt 3fpkt"];
1688--3239[label="0.125;1pkt 1fpkt"];
1688--4416[label="0.125;1pkt 1fpkt"];
1688--5815[label="0.125;1pkt 1fpkt"];
1688--6526[label="0.125;1pkt 1fpkt"];
1769--3806[label="0.777778;7pkt 7fpkt"];
1769--3868[label="0.777778;7pkt 7fpkt"];
1769--3923[label="0.777778;7pkt 7fpkt"];
2198--3146[label="0.166667;1pkt 1fpkt"];
2198--3781[label="0.166667;1pkt 1fpkt"];
2198--3806[label="0.166667;1pkt 1fpkt"];
2198--3852[label="0.166667;1pkt 1fpkt"];
2198--3868[label="0.166667;1pkt 1fpkt"];
2198--3902[label="0.166667;1pkt 1fpkt"];
2198--3923[label="0.166667;1pkt 1fpkt"];
2462--2658[label="0.263158;15pkt 15fpkt"];
2462--3235[label="0.0151515;1pkt 1fpkt"];
2462--3240[label="0.0606061;4pkt 4fpkt"];
2462--3781[label="0.0606061;4pkt 4fpkt"];
2462--3806[label="0.0909091;6pkt 6fpkt"];
2462--3852[label="0.0606061;4pkt 4fpkt"];
2462--3868[label="0.0909091;6pkt 6fpkt"];
2462--3902[label="0.0606061;4pkt 4fpkt"];
2462--3923[label="0.0909091;6pkt 6fpkt"];
2462--4094[label="0.166667;11pkt 11fpkt"];
2462--4234[label="0.0909091;6pkt 6fpkt"];
2462--5645[label="0.166667;11pkt 11fpkt"];
2462--5715[label="0.0909091;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="134.112.166.196" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1472[label="134.99.32.171;s;220pkt 220fpkt", shape=diamond, color=yellow];
1549[label="77.151.72.167;d;48pkt 48fpkt", shape=diamond, color=yellow];
1754[label="202.51.1.45;d;2pkt 2fpkt", shape=diamond, color=yellow];
1760[label="88.245.216.184;d;16pkt 16fpkt", shape=diamond, color=yellow];
1784[label="203.25.21.206;d;26pkt 26fpkt", shape=diamond, color=yellow];
2369[label="134.99.35.231;s;101pkt 101fpkt", shape=diamond, color=yellow];
2370[label="134.99.35.225;s;101pkt 101fpkt", shape=diamond, color=yellow];
2474[label="217.149.224.28;d;5pkt 5fpkt", shape=diamond, color=yellow];
3190[label="134.99.32.171;s;50pkt 50fpkt", shape=hexagon, color=black];
3217[label="77.151.72.167;d;32pkt 32fpkt", shape=hexagon, color=black];
3290[label="88.245.216.184;d;16pkt 16fpkt", shape=hexagon, color=black];
3296[label="203.25.21.206;d;5pkt 5fpkt", shape=hexagon, color=black];
3532[label="134.99.35.231;s;100pkt 100fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.32.171:80, *:*}[46.934%]&lt;BR/&gt;{134.99.35.225:0, *:0}[23.8208%]&lt;BR/&gt;{134.99.35.231:0, *:0}[23.8208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (43.4903%)&lt;BR/&gt; 80: (26.8698%)&lt;BR/&gt; 21: (0.692521%)&lt;BR/&gt; 60835: (0.277008%)&lt;BR/&gt; 60247: (0.277008%)&gt;];
}
1472--1549[label="1;48pkt 48fpkt"];
1472--1754[label="1;2pkt 2fpkt"];
1472--1760[label="1;16pkt 16fpkt"];
1472--1784[label="1;26pkt 26fpkt"];
1472--2474[label="0.2;1pkt 1fpkt"];
1472--3190[label="1;50pkt 50fpkt"];
1472--3217[label="1;32pkt 32fpkt"];
1472--3290[label="1;16pkt 16fpkt"];
1472--3296[label="1;5pkt 5fpkt"];
1472--3781[label="0.0409091;9pkt 9fpkt"];
1472--3806[label="0.00454545;1pkt 1fpkt"];
1472--3852[label="0.0409091;9pkt 9fpkt"];
1472--3868[label="0.00454545;1pkt 1fpkt"];
1472--3902[label="0.0409091;9pkt 9fpkt"];
1472--3923[label="0.00454545;1pkt 1fpkt"];
1549--3190[label="0.666667;32pkt 32fpkt"];
1549--3217[label="1;32pkt 32fpkt"];
1754--3190[label="1;2pkt 2fpkt"];
1760--3190[label="0.1875;3pkt 3fpkt"];
1760--3290[label="1;16pkt 16fpkt"];
1784--3296[label="1;5pkt 5fpkt"];
1784--3781[label="0.346154;9pkt 9fpkt"];
1784--3806[label="0.0384615;1pkt 1fpkt"];
1784--3852[label="0.346154;9pkt 9fpkt"];
1784--3868[label="0.0384615;1pkt 1fpkt"];
1784--3902[label="0.346154;9pkt 9fpkt"];
1784--3923[label="0.0384615;1pkt 1fpkt"];
2369--2474[label="0.2;1pkt 1fpkt"];
2369--3532[label="1;100pkt 100fpkt"];
2370--2474[label="0.2;1pkt 1fpkt"];
2474--3532[label="0.2;1pkt 1fpkt"];
3190--3217[label="1;32pkt 32fpkt"];
3190--3290[label="0.1875;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="134.99.32.171" src_port="80"/>
      <filter src_ip="134.99.35.231"/>
      <filter src_ip="134.99.35.225"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1025[label="168.206.6.66;s;43pkt 43fpkt", shape=diamond, color=yellow];
2017[label="201.59.191.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
2556[label="201.59.190.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
2567[label="23.20.222.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.66:*, 200.78.134.123:80}[55.814%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50571: (2.17391%)&lt;BR/&gt; 50563: (2.17391%)&lt;BR/&gt; 50549: (2.17391%)&lt;BR/&gt; 50586: (1.08696%)&gt;];
}
1025--2017[label="1;1pkt 1fpkt"];
1025--2526[label="1;1pkt 1fpkt"];
1025--2556[label="1;1pkt 1fpkt"];
1025--2567[label="1;1pkt 1fpkt"];
1025--2785[label="1;2pkt 2fpkt"];
1025--2903[label="0.116279;5pkt 5fpkt"];
1025--3405[label="0.27907;12pkt 12fpkt"];
1025--3762[label="0.0232558;1pkt 1fpkt"];
1025--3785[label="0.0697674;3pkt 3fpkt"];
1025--3807[label="0.116279;5pkt 5fpkt"];
2017--3785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.78.134.123" dst_port="80" src_ip="168.206.6.66"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
2531[label="217.155.96.82;d;3pkt 3fpkt", shape=diamond, color=yellow];
2535[label="174.5.13.24;s;1pkt 1fpkt", shape=diamond, color=yellow];
3655[label="217.155.96.82;d;3pkt 3fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.5.13.24:64626, 217.155.96.82:80}[33.3333%]&lt;BR/&gt;{174.5.13.29:10511, 217.155.96.82:80}[33.3333%]&lt;BR/&gt;{174.5.12.71:1093, 217.155.96.82:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64626: (21.4286%)&lt;BR/&gt; 10511: (14.2857%)&lt;BR/&gt; 1093: (14.2857%)&gt;];
}
2531--2535[label="1;1pkt 1fpkt"];
2531--3655[label="1;3pkt 3fpkt"];
2531--3807[label="0.666667;2pkt 2fpkt"];
2535--3655[label="1;1pkt 1fpkt"];
2535--3807[label="1;1pkt 1fpkt"];
3655--3807[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.96.82" dst_port="80" src_ip="174.5.12.71" src_port="1093"/>
      <filter dst_ip="217.155.96.82" dst_port="80" src_ip="174.5.13.29" src_port="10511"/>
      <filter dst_ip="217.155.96.82" dst_port="80" src_ip="174.5.13.24" src_port="64626"/>
    </slice>
    <from sec="1189314660" usec="0"/>
    <to sec="1189314696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
2540[label="134.112.84.41;s;3pkt 3fpkt", shape=diamond, color=yellow];
2541[label="200.78.154.69;d;2pkt 2fpkt", shape=diamond, color=yellow];
3657[label="134.112.84.41;s;3pkt 3fpkt", shape=hexagon, color=black];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.84.41:25, 21.130.0.135:2801}[33.3333%]&lt;BR/&gt;{134.112.84.41:110, 200.78.154.69:52242}[33.3333%]&lt;BR/&gt;{134.112.84.41:110, 200.78.154.69:52244}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (37.5%)&lt;BR/&gt; 52244: (18.75%)&lt;BR/&gt; 52242: (18.75%)&lt;BR/&gt; 2801: (12.5%)&lt;BR/&gt; 25: (12.5%)&gt;];
}
2540--2541[label="1;2pkt 2fpkt"];
2540--3657[label="1;3pkt 3fpkt"];
2541--3657[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.78.154.69" dst_port="52244" src_ip="134.112.84.41" src_port="110"/>
      <filter dst_ip="200.78.154.69" dst_port="52242" src_ip="134.112.84.41" src_port="110"/>
      <filter dst_ip="21.130.0.135" dst_port="2801" src_ip="134.112.84.41" src_port="25"/>
    </slice>
    <from sec="1189314671" usec="0"/>
    <to sec="1189314761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
2539[label="134.112.84.41;d;3pkt 3fpkt", shape=diamond, color=yellow];
2542[label="200.78.154.69;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.130.0.135:2801, 134.112.84.41:25}[33.3333%]&lt;BR/&gt;{200.78.154.69:52242, 134.112.84.41:110}[33.3333%]&lt;BR/&gt;{200.78.154.69:52244, 134.112.84.41:110}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (40%)&lt;BR/&gt; 52244: (20%)&lt;BR/&gt; 52242: (20%)&lt;BR/&gt; 2801: (10%)&lt;BR/&gt; 25: (10%)&gt;];
}
2539--2542[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.84.41" dst_port="110" src_ip="200.78.154.69" src_port="52244"/>
      <filter dst_ip="134.112.84.41" dst_port="110" src_ip="200.78.154.69" src_port="52242"/>
      <filter dst_ip="134.112.84.41" dst_port="25" src_ip="21.130.0.135" src_port="2801"/>
    </slice>
    <from sec="1189314671" usec="0"/>
    <to sec="1189314761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.933585,1.52008,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
12[label="157.25.11.35s;2pkt 2fpkt", shape=rectangle, color=red];
1651[label="157.25.11.35;s;286pkt 286fpkt", shape=diamond, color=yellow];
2485[label="202.130.34.240;d;12pkt 12fpkt", shape=diamond, color=yellow];
2554[label="202.113.86.122;d;35pkt 35fpkt", shape=diamond, color=yellow];
4195[label="157.25.11.35;351pkt 351fpkt", shape=pentagon, color=darkviolet];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.11.35:*, 36.210.61.124:80}[32.3864%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8338%)&lt;BR/&gt; 8080: (0.874636%)&lt;BR/&gt; 1237: (0.291545%)&lt;BR/&gt; 1234: (0.291545%)&lt;BR/&gt; 4994: (0.218659%)&gt;];
}
12--1651[label="1;2pkt 2fpkt"];
12--2554[label="1;2pkt 2fpkt"];
12--4195[label="1;2pkt 2fpkt"];
1651--1827[label="0.0196078;1pkt 1fpkt"];
1651--2485[label="1;12pkt 12fpkt"];
1651--2554[label="1;35pkt 35fpkt"];
1651--3518[label="0.0196078;1pkt 1fpkt"];
1651--3762[label="0.0034965;1pkt 1fpkt"];
1651--3785[label="0.0454545;13pkt 13fpkt"];
1651--3807[label="0.00699301;2pkt 2fpkt"];
1651--4195[label="0.996503;285pkt 285fpkt"];
2485--3785[label="0.166667;2pkt 2fpkt"];
2485--3807[label="0.166667;2pkt 2fpkt"];
2485--4195[label="1;12pkt 12fpkt"];
2554--4195[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="36.210.61.124" dst_port="80" src_ip="157.25.11.35"/>
    </slice>
    <from sec="1189314004" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
2543[label="217.65.71.38;d;93pkt 93fpkt", shape=diamond, color=yellow];
2557[label="134.99.136.151;s;92pkt 92fpkt", shape=diamond, color=yellow];
3578[label="134.99.136.151;s;92pkt 92fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.136.151:80, 217.65.71.38:*}[98.9247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3346: (0.541516%)&lt;BR/&gt; 3345: (0.541516%)&lt;BR/&gt; 3344: (0.541516%)&lt;BR/&gt; 3343: (0.541516%)&gt;];
}
2543--2557[label="1;92pkt 92fpkt"];
2543--3578[label="1;92pkt 92fpkt"];
2543--3806[label="0.0107527;1pkt 1fpkt"];
2543--3868[label="0.0107527;1pkt 1fpkt"];
2543--3923[label="0.0107527;1pkt 1fpkt"];
2557--3578[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter dst_ip="217.65.71.38" src_ip="134.99.136.151" src_port="80"/>
    </slice>
    <from sec="1189314674" usec="0"/>
    <to sec="1189314736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
1191[label="128.190.181.132;s;5pkt 5fpkt", shape=diamond, color=yellow];
2560[label="196.236.212.78;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.181.132:80, 196.236.212.78:49365}[20%]&lt;BR/&gt;{128.190.181.132:80, 196.236.212.78:49369}[20%]&lt;BR/&gt;{128.190.181.132:80, 196.236.212.78:49371}[20%]&lt;BR/&gt;{128.190.181.132:80, 196.236.212.78:49373}[20%]&lt;BR/&gt;{128.190.181.132:80, 196.236.212.78:49375}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49375: (10%)&lt;BR/&gt; 49373: (10%)&lt;BR/&gt; 49371: (10%)&lt;BR/&gt; 49369: (10%)&gt;];
}
1191--2560[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="196.236.212.78" dst_port="49375" src_ip="128.190.181.132" src_port="80"/>
      <filter dst_ip="196.236.212.78" dst_port="49373" src_ip="128.190.181.132" src_port="80"/>
      <filter dst_ip="196.236.212.78" dst_port="49371" src_ip="128.190.181.132" src_port="80"/>
      <filter dst_ip="196.236.212.78" dst_port="49369" src_ip="128.190.181.132" src_port="80"/>
      <filter dst_ip="196.236.212.78" dst_port="49365" src_ip="128.190.181.132" src_port="80"/>
    </slice>
    <from sec="1189314688" usec="0"/>
    <to sec="1189314757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
2525[label="134.100.119.199;d;142pkt 142fpkt", shape=diamond, color=yellow];
2562[label="195.116.131.242;s;131pkt 131fpkt", shape=diamond, color=yellow];
3579[label="195.116.131.242;s;131pkt 131fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.116.131.242:80, 134.100.119.199:*}[92.2535%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62457: (0.371287%)&lt;BR/&gt; 62456: (0.371287%)&lt;BR/&gt; 62455: (0.371287%)&lt;BR/&gt; 62454: (0.371287%)&gt;];
}
2525--2562[label="1;131pkt 131fpkt"];
2525--3579[label="1;131pkt 131fpkt"];
2525--3806[label="0.0774648;11pkt 11fpkt"];
2525--3868[label="0.0774648;11pkt 11fpkt"];
2525--3923[label="0.0774648;11pkt 11fpkt"];
2525--4954[label="0.00704225;1pkt 1fpkt"];
2525--6073[label="0.00704225;1pkt 1fpkt"];
2562--3579[label="1;131pkt 131fpkt"];
</description>
    <slice>
      <filter dst_ip="134.100.119.199" src_ip="195.116.131.242" src_port="80"/>
    </slice>
    <from sec="1189314654" usec="0"/>
    <to sec="1189314717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
712[label="168.206.6.66;d;34pkt 34fpkt", shape=diamond, color=yellow];
1543[label="23.20.216.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
2563[label="23.20.223.34;s;2pkt 2fpkt", shape=diamond, color=yellow];
2568[label="23.20.222.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
3580[label="23.20.223.34;s;1pkt 1fpkt", shape=hexagon, color=black];
4083[label="23.20.222.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.78.134.123:80, 168.206.6.66:*}[70.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50571: (3.75%)&lt;BR/&gt; 50569: (3.75%)&lt;BR/&gt; 50578: (2.5%)&lt;BR/&gt; 50573: (2.5%)&gt;];
}
712--1543[label="1;1pkt 1fpkt"];
712--2527[label="1;1pkt 1fpkt"];
712--2563[label="1;2pkt 2fpkt"];
712--2568[label="1;1pkt 1fpkt"];
712--3225[label="1;13pkt 13fpkt"];
712--3580[label="1;1pkt 1fpkt"];
712--3806[label="0.117647;4pkt 4fpkt"];
712--3868[label="0.117647;4pkt 4fpkt"];
712--3923[label="0.117647;4pkt 4fpkt"];
712--4083[label="1;1pkt 1fpkt"];
2563--3580[label="1;1pkt 1fpkt"];
2568--4083[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.6.66" src_ip="200.78.134.123" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
2574[label="38.111.65.144;d;6pkt 6fpkt", shape=diamond, color=yellow];
2575[label="157.25.105.3;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.105.3:*, 38.111.65.144:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1054: (8.33333%)&lt;BR/&gt; 1053: (8.33333%)&lt;BR/&gt; 1052: (8.33333%)&lt;BR/&gt; 1050: (8.33333%)&gt;];
}
2574--2575[label="1;6pkt 6fpkt"];
2574--3960[label="1;6pkt 6fpkt"];
2575--3960[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="38.111.65.144" dst_port="80" src_ip="157.25.105.3"/>
    </slice>
    <from sec="1189314713" usec="0"/>
    <to sec="1189314823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
323[label="168.206.4.231;d;26pkt 26fpkt", shape=diamond, color=yellow];
326[label="32.116.50.12;s;2pkt 2fpkt", shape=diamond, color=yellow];
1532[label="32.116.50.14;s;2pkt 2fpkt", shape=diamond, color=yellow];
3029[label="168.206.4.231;d;20pkt 20fpkt", shape=hexagon, color=black];
3937[label="196.248.182.0;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 168.206.4.231:*}[64.5161%]&lt;BR/&gt;{196.248.182.0:80, *:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.9649%)&lt;BR/&gt; 21092: (5.26316%)&lt;BR/&gt; 21059: (5.26316%)&lt;BR/&gt; 10102: (3.50877%)&lt;BR/&gt; 64977: (2.63158%)&gt;];
}
323--326[label="1;2pkt 2fpkt"];
323--1532[label="1;2pkt 2fpkt"];
323--2624[label="0.0384615;1pkt 1fpkt"];
323--3029[label="1;20pkt 20fpkt"];
323--3781[label="0.115385;3pkt 3fpkt"];
323--3806[label="0.0769231;2pkt 2fpkt"];
323--3852[label="0.115385;3pkt 3fpkt"];
323--3868[label="0.0769231;2pkt 2fpkt"];
323--3902[label="0.115385;3pkt 3fpkt"];
323--3923[label="0.0769231;2pkt 2fpkt"];
323--3937[label="0.285714;2pkt 2fpkt"];
323--4455[label="0.0384615;1pkt 1fpkt"];
326--3029[label="1;2pkt 2fpkt"];
1532--3029[label="1;2pkt 2fpkt"];
3029--3781[label="0.05;1pkt 1fpkt"];
3029--3806[label="0.05;1pkt 1fpkt"];
3029--3852[label="0.05;1pkt 1fpkt"];
3029--3868[label="0.05;1pkt 1fpkt"];
3029--3902[label="0.05;1pkt 1fpkt"];
3029--3923[label="0.05;1pkt 1fpkt"];
3029--3937[label="0.285714;2pkt 2fpkt"];
3029--4455[label="0.05;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="196.248.182.0" src_port="80"/>
      <filter dst_ip="168.206.4.231" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="134.99.208.82"/>
      <from sec="1189314005" usec="0"/>
      <to sec="1189314828" usec="0"/>
    </slice>
    <from sec="1189314005" usec="0"/>
    <to sec="1189314828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.78.217.78"/>
      <from sec="1189314008" usec="0"/>
      <to sec="1189314827" usec="0"/>
    </slice>
    <from sec="1189314008" usec="0"/>
    <to sec="1189314827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.86.144.168"/>
      <from sec="1189314009" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314009" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
240[label="134.131.36.212;d;911pkt 911fpkt", shape=diamond, color=yellow];
1241[label="3.74.134.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
1642[label="2.216.97.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
2718[label="7.128.150.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
2862[label="134.131.36.212;d;406pkt 406fpkt", shape=hexagon, color=black];
3342[label="2.216.97.23;s;1pkt 1fpkt", shape=hexagon, color=black];
4496[label="218.65.20.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.131.36.212:6881}[94.7311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 0: (3.63086%)&lt;BR/&gt; 52525: (0.340393%)&lt;BR/&gt; 50000: (0.340393%)&lt;BR/&gt; 49152: (0.302572%)&gt;];
}
240--1241[label="1;1pkt 1fpkt"];
240--1642[label="1;1pkt 1fpkt"];
240--2297[label="0.00109769;1pkt 1fpkt"];
240--2718[label="1;1pkt 1fpkt"];
240--2862[label="1;406pkt 406fpkt"];
240--3342[label="1;1pkt 1fpkt"];
240--3502[label="0.00109769;1pkt 1fpkt"];
240--3798[label="0.00109769;1pkt 1fpkt"];
240--3857[label="0.00109769;1pkt 1fpkt"];
240--3907[label="0.00109769;1pkt 1fpkt"];
240--3930[label="0.00109769;1pkt 1fpkt"];
240--4496[label="1;1pkt 1fpkt"];
240--5561[label="0.00109769;1pkt 1fpkt"];
240--6391[label="0.00109769;1pkt 1fpkt"];
1241--2862[label="1;1pkt 1fpkt"];
1642--2862[label="1;1pkt 1fpkt"];
1642--3342[label="1;1pkt 1fpkt"];
2718--2862[label="1;1pkt 1fpkt"];
2862--3342[label="1;1pkt 1fpkt"];
2862--4496[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.131.36.212" dst_port="6881"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="19.36.10.160"/>
      <from sec="1189314306" usec="0"/>
      <to sec="1189314806" usec="0"/>
    </slice>
    <from sec="1189314306" usec="0"/>
    <to sec="1189314806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
55[label="128.190.139.169s;2pkt 2fpkt", shape=rectangle, color=red];
2733[label="128.190.139.169;s;33pkt 33fpkt", shape=diamond, color=yellow];
2785[label="23.20.223.34;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.139.169:*, 128.168.130.119:80}[51.4286%]&lt;BR/&gt;{128.190.139.169:*, 33.117.131.20:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2973%)&lt;BR/&gt; 50569: (2.7027%)&lt;BR/&gt; 49220: (2.7027%)&lt;BR/&gt; 123: (2.7027%)&lt;BR/&gt; 50578: (1.35135%)&gt;];
}
55--1025[label="0.5;1pkt 1fpkt"];
55--2733[label="0.5;1pkt 1fpkt"];
55--2785[label="0.5;1pkt 1fpkt"];
2733--3071[label="0.030303;1pkt 1fpkt"];
2733--3807[label="0.030303;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.168.130.119" dst_port="80" src_ip="128.190.139.169"/>
      <filter dst_ip="33.117.131.20" dst_port="80" src_ip="128.190.139.169"/>
    </slice>
    <from sec="1189314324" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="1.49.31.141"/>
      <from sec="1189314475" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314475" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
857[label="216.219.192.26;d;1076pkt 1076fpkt", shape=diamond, color=yellow];
951[label="168.206.7.198;d;22pkt 22fpkt", shape=diamond, color=yellow];
2210[label="130.52.144.104;s;131pkt 131fpkt", shape=diamond, color=yellow];
2483[label="17.111.85.56;s;2pkt 2fpkt", shape=diamond, color=yellow];
2744[label="7.30.141.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
2753[label="20.236.222.253;s;2pkt 2fpkt", shape=diamond, color=yellow];
4274[label="200.78.164.46;182pkt 182fpkt", shape=pentagon, color=darkviolet];
4353[label="17.111.85.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
4646[label="130.52.144.104;130pkt 130fpkt", shape=pentagon, color=darkviolet];
5134[label="26.30.37.183;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5190[label="7.30.141.191;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5275[label="130.52.145.206;23pkt 23fpkt", shape=pentagon, color=darkviolet];
5391[label="200.124.234.225;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6242[label="130.52.145.206;23pkt 23fpkt", shape=invtriangle, color=brown];
6729[label="130.52.145.206;23pkt 23fpkt", shape=invhouse, color=bisque];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 216.219.192.26:*}[39.2941%]&lt;BR/&gt;{*:53, 216.219.192.26:64785}[21.1765%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.1297%)&lt;BR/&gt; 53: (8.90453%)&lt;BR/&gt; 64785: (8.26193%)&lt;BR/&gt; 0: (2.57038%)&lt;BR/&gt; 65176: (1.62179%)&gt;];
}
857--1142[label="0.025;2pkt 2fpkt"];
857--1192[label="0.0294118;2pkt 2fpkt"];
857--1219[label="0.0620155;8pkt 8fpkt"];
857--1268[label="0.0666667;3pkt 3fpkt"];
857--1408[label="0.0309278;3pkt 3fpkt"];
857--1478[label="1;97pkt 97fpkt"];
857--1514[label="0.101911;16pkt 16fpkt"];
857--1618[label="0.15;3pkt 3fpkt"];
857--1620[label="0.00909091;1pkt 1fpkt"];
857--1622[label="0.015625;1pkt 1fpkt"];
857--1656[label="0.0789474;3pkt 3fpkt"];
857--1924[label="0.0769231;2pkt 2fpkt"];
857--2072[label="0.00925926;1pkt 1fpkt"];
857--2170[label="0.0222222;1pkt 1fpkt"];
857--2210[label="1;131pkt 131fpkt"];
857--2356[label="0.00813008;1pkt 1fpkt"];
857--2398[label="0.00961538;1pkt 1fpkt"];
857--2483[label="1;2pkt 2fpkt"];
857--2606[label="0.00952381;1pkt 1fpkt"];
857--2744[label="1;2pkt 2fpkt"];
857--2753[label="1;2pkt 2fpkt"];
857--2900[label="0.00900901;1pkt 1fpkt"];
857--3072[label="0.00714286;1pkt 1fpkt"];
857--3248[label="1;389pkt 389fpkt"];
857--3325[label="0.0181818;2pkt 2fpkt"];
857--3453[label="0.0769231;2pkt 2fpkt"];
857--3607[label="0.00813008;1pkt 1fpkt"];
857--3681[label="0.0116279;1pkt 1fpkt"];
857--3781[label="0.0260223;28pkt 28fpkt"];
857--3806[label="0.0120818;13pkt 13fpkt"];
857--3851[label="0.0362454;39pkt 39fpkt"];
857--3852[label="0.0260223;28pkt 28fpkt"];
857--3868[label="0.0120818;13pkt 13fpkt"];
857--3876[label="0.143123;154pkt 154fpkt"];
857--3901[label="0.0362454;39pkt 39fpkt"];
857--3902[label="0.0260223;28pkt 28fpkt"];
857--3922[label="0.0325279;35pkt 35fpkt"];
857--3923[label="0.0120818;13pkt 13fpkt"];
857--3924[label="0.143123;154pkt 154fpkt"];
857--3937[label="0.142857;1pkt 1fpkt"];
857--4092[label="0.00458716;1pkt 1fpkt"];
857--4146[label="0.0333333;1pkt 1fpkt"];
857--4274[label="0.0879121;16pkt 16fpkt"];
857--4353[label="1;1pkt 1fpkt"];
857--4428[label="0.047619;1pkt 1fpkt"];
857--4646[label="1;130pkt 130fpkt"];
857--5116[label="0.025641;1pkt 1fpkt"];
857--5134[label="0.0666667;1pkt 1fpkt"];
857--5177[label="0.0243902;2pkt 2fpkt"];
857--5190[label="1;1pkt 1fpkt"];
857--5275[label="1;23pkt 23fpkt"];
857--5391[label="1;1pkt 1fpkt"];
857--5402[label="0.0185185;1pkt 1fpkt"];
857--5644[label="0.00460829;1pkt 1fpkt"];
857--5742[label="0.0879121;16pkt 16fpkt"];
857--5817[label="0.047619;1pkt 1fpkt"];
857--6160[label="0.025641;1pkt 1fpkt"];
857--6196[label="0.0243902;2pkt 2fpkt"];
857--6242[label="1;23pkt 23fpkt"];
857--6440[label="0.00458716;1pkt 1fpkt"];
857--6729[label="1;23pkt 23fpkt"];
951--1222[label="0.363636;8pkt 8fpkt"];
951--3000[label="1;22pkt 22fpkt"];
951--5134[label="0.2;3pkt 3fpkt"];
2210--3248[label="0.0839695;11pkt 11fpkt"];
2210--3781[label="0.167939;22pkt 22fpkt"];
2210--3806[label="0.0305344;4pkt 4fpkt"];
2210--3852[label="0.167939;22pkt 22fpkt"];
2210--3868[label="0.0305344;4pkt 4fpkt"];
2210--3902[label="0.167939;22pkt 22fpkt"];
2210--3923[label="0.0305344;4pkt 4fpkt"];
2210--4646[label="1;130pkt 130fpkt"];
2483--4353[label="1;1pkt 1fpkt"];
2744--5190[label="1;1pkt 1fpkt"];
4274--5742[label="1;182pkt 182fpkt"];
5275--6242[label="1;23pkt 23fpkt"];
5275--6729[label="1;23pkt 23fpkt"];
6242--6729[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="216.219.192.26" src_port="80"/>
      <filter dst_ip="216.219.192.26" dst_port="64785" src_port="53"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="20.40.163.107"/>
      <from sec="1189314597" usec="0"/>
      <to sec="1189314819" usec="0"/>
    </slice>
    <from sec="1189314597" usec="0"/>
    <to sec="1189314819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
0[label="168.206.6.0s;1pkt 1fpkt", shape=rectangle, color=red];
140[label="134.112.166.197d;1pkt 1fpkt", shape=rectangle, color=red];
2793[label="201.59.190.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.0:49233, 201.59.190.202:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49233: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
0--140[label="1;1pkt 1fpkt"];
0--553[label="1;1pkt 1fpkt"];
0--2793[label="1;1pkt 1fpkt"];
140--553[label="1;1pkt 1fpkt"];
140--2793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.59.190.202" dst_port="80" src_ip="168.206.6.0" src_port="49233"/>
    </slice>
    <from sec="1189314711" usec="0"/>
    <to sec="1189314879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.914168,1.53594,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
133[label="75.152.181.140s;62pkt 62fpkt", shape=rectangle, color=red];
2800[label="75.152.181.140;s;342pkt 342fpkt", shape=diamond, color=yellow];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.152.181.140:*, *:139}[73.3918%]&lt;BR/&gt;{75.152.181.140:*, *:445}[26.6082%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (38.7376%)&lt;BR/&gt; 445: (11.2624%)&lt;BR/&gt; 37683: (0.247525%)&lt;BR/&gt; 37682: (0.247525%)&lt;BR/&gt; 37681: (0.247525%)&gt;];
}
133--2800[label="1;62pkt 62fpkt"];
133--3822[label="1;62pkt 62fpkt"];
2800--3822[label="0.508772;174pkt 174fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="75.152.181.140"/>
      <filter dst_port="445" src_ip="75.152.181.140"/>
    </slice>
    <from sec="1189314729" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.209.211.129"/>
      <from sec="1189314761" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314761" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.45.54.66"/>
      <from sec="1189314772" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314772" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
2006[label="5.120.220.69;s;3pkt 3fpkt", shape=diamond, color=yellow];
2293[label="137.84.238.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
4434[label="5.120.220.69;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5440[label="137.84.238.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5820[label="5.120.220.69;3pkt 3fpkt", shape=invtriangle, color=brown];
6329[label="137.84.238.233;1pkt 1fpkt", shape=invtriangle, color=brown];
6527[label="5.120.220.69;2pkt 2fpkt", shape=invhouse, color=bisque];
6764[label="137.84.238.233;1pkt 1fpkt", shape=invhouse, color=bisque];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{137.84.238.233:2859, 217.155.101.66:8080}[25%]&lt;BR/&gt;{5.120.220.69:2941, 217.155.101.66:8080}[25%]&lt;BR/&gt;{5.120.220.69:2942, 217.155.101.66:8080}[25%]&lt;BR/&gt;{5.120.220.69:2943, 217.155.101.66:8080}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2943: (13.3333%)&lt;BR/&gt; 2941: (13.3333%)&lt;BR/&gt; 2859: (13.3333%)&lt;BR/&gt; 2942: (10%)&gt;];
}
2006--4434[label="1;3pkt 3fpkt"];
2006--5820[label="1;3pkt 3fpkt"];
2006--6527[label="1;2pkt 2fpkt"];
2293--5440[label="1;1pkt 1fpkt"];
2293--6329[label="1;1pkt 1fpkt"];
2293--6764[label="1;1pkt 1fpkt"];
4434--5820[label="1;3pkt 3fpkt"];
4434--6527[label="1;2pkt 2fpkt"];
5440--6329[label="1;1pkt 1fpkt"];
5440--6764[label="1;1pkt 1fpkt"];
5820--6527[label="1;2pkt 2fpkt"];
6329--6764[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.101.66" dst_port="8080" src_ip="5.120.220.69" src_port="2943"/>
      <filter dst_ip="217.155.101.66" dst_port="8080" src_ip="5.120.220.69" src_port="2942"/>
      <filter dst_ip="217.155.101.66" dst_port="8080" src_ip="5.120.220.69" src_port="2941"/>
      <filter dst_ip="217.155.101.66" dst_port="8080" src_ip="137.84.238.233" src_port="2859"/>
    </slice>
    <from sec="1189314497" usec="0"/>
    <to sec="1189314619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="36.103.111.99"/>
      <from sec="1189314788" usec="0"/>
      <to sec="1189314810" usec="0"/>
    </slice>
    <from sec="1189314788" usec="0"/>
    <to sec="1189314810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="217.245.67.178"/>
      <from sec="1189314796" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314796" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
2844[label="196.236.143.6;d;2pkt 2fpkt", shape=diamond, color=yellow];
2845[label="134.99.75.17;s;2pkt 2fpkt", shape=diamond, color=yellow];
4070[label="134.99.75.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5629[label="134.99.75.17;2pkt 2fpkt", shape=invtriangle, color=brown];
6431[label="134.99.75.17;2pkt 2fpkt", shape=invhouse, color=bisque];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.75.17:80, 196.236.143.6:4177}[50%]&lt;BR/&gt;{134.99.75.17:80, 196.236.143.6:4181}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4181: (27.7778%)&lt;BR/&gt; 4177: (22.2222%)&gt;];
}
2844--2845[label="1;2pkt 2fpkt"];
2844--4070[label="1;1pkt 1fpkt"];
2844--5629[label="1;2pkt 2fpkt"];
2844--6431[label="1;2pkt 2fpkt"];
2845--4070[label="1;1pkt 1fpkt"];
2845--5629[label="1;2pkt 2fpkt"];
2845--6431[label="1;2pkt 2fpkt"];
4070--5629[label="1;1pkt 1fpkt"];
4070--6431[label="1;1pkt 1fpkt"];
5629--6431[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="196.236.143.6" dst_port="4181" src_ip="134.99.75.17" src_port="80"/>
      <filter dst_ip="196.236.143.6" dst_port="4177" src_ip="134.99.75.17" src_port="80"/>
    </slice>
    <from sec="1189314804" usec="0"/>
    <to sec="1189314837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
2846[label="195.216.135.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
2847[label="157.25.242.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.242.47:995, 195.216.135.82:33047}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33047: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
2846--2847[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.216.135.82" dst_port="33047" src_ip="157.25.242.47" src_port="995"/>
    </slice>
    <from sec="1189314804" usec="0"/>
    <to sec="1189314812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
325[label="32.116.50.12;d;2pkt 2fpkt", shape=diamond, color=yellow];
2868[label="168.206.4.231;s;7pkt 7fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.4.231:*, *:80}[42.8571%]&lt;BR/&gt;{168.206.4.231:*, 32.116.50.12:21059}[28.5714%]&lt;BR/&gt;{168.206.4.231:*, 32.116.50.116:10102}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21059: (22.2222%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 64977: (11.1111%)&lt;BR/&gt; 62327: (11.1111%)&lt;BR/&gt; 10102: (11.1111%)&gt;];
}
325--2868[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.206.4.231"/>
      <filter dst_ip="32.116.50.116" dst_port="10102" src_ip="168.206.4.231"/>
      <filter dst_ip="32.116.50.12" dst_port="21059" src_ip="168.206.4.231"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
399[label="16.37.242.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
401[label="216.212.184.91;s;5550pkt 5550fpkt", shape=diamond, color=yellow];
2876[label="16.37.242.57;d;1pkt 1fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.184.91:15621, *:*}[99.982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15621: (49.973%)&lt;BR/&gt; 6881: (0.720461%)&lt;BR/&gt; 16001: (0.648415%)&lt;BR/&gt; 1501: (0.441282%)&lt;BR/&gt; 23076: (0.135086%)&gt;];
}
399--401[label="1;1pkt 1fpkt"];
399--2876[label="1;1pkt 1fpkt"];
401--2876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="216.212.184.91" src_port="15621"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649419,1.52726,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.118.198.147"/>
      <from sec="1189314575" usec="0"/>
      <to sec="1189314649" usec="0"/>
    </slice>
    <from sec="1189314575" usec="0"/>
    <to sec="1189314649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
4066[label="199.84.184.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5628[label="199.84.184.16;1pkt 1fpkt", shape=invtriangle, color=brown];
6430[label="199.84.184.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.84.184.16:32768, 134.112.2.141:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32768: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
4066--5628[label="1;1pkt 1fpkt"];
4066--6430[label="1;1pkt 1fpkt"];
5628--6430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.2.141" dst_port="53" src_ip="199.84.184.16" src_port="32768"/>
    </slice>
    <from sec="1189314040" usec="0"/>
    <to sec="1189314893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
501[label="33.117.131.78;s;126pkt 126fpkt", shape=diamond, color=yellow];
2892[label="33.117.131.78;s;126pkt 126fpkt", shape=hexagon, color=black];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.117.131.78:80, 128.190.65.180:*}[99.2063%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50211: (0.396825%)&lt;BR/&gt; 50210: (0.396825%)&lt;BR/&gt; 50191: (0.396825%)&lt;BR/&gt; 50190: (0.396825%)&gt;];
}
501--2892[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.65.180" src_ip="33.117.131.78" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
543[label="128.190.192.81;s;253pkt 253fpkt", shape=diamond, color=yellow];
544[label="220.81.217.29;d;122pkt 122fpkt", shape=diamond, color=yellow];
2898[label="128.190.192.81;s;33pkt 33fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.192.81:25, 220.81.217.29:*}[48.2213%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7549%)&lt;BR/&gt; 4286: (0.490196%)&lt;BR/&gt; 2201: (0.490196%)&lt;BR/&gt; 4462: (0.367647%)&lt;BR/&gt; 4422: (0.367647%)&gt;];
}
543--544[label="1;122pkt 122fpkt"];
543--2898[label="1;33pkt 33fpkt"];
543--3762[label="0.00395257;1pkt 1fpkt"];
543--3786[label="0.00395257;1pkt 1fpkt"];
544--2898[label="0.333333;11pkt 11fpkt"];
544--3786[label="0.00819672;1pkt 1fpkt"];
2898--3762[label="0.030303;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.81.217.29" src_ip="128.190.192.81" src_port="25"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
570[label="20.102.170.81;d;15pkt 15fpkt", shape=diamond, color=yellow];
571[label="157.25.67.107;s;20pkt 20fpkt", shape=diamond, color=yellow];
2905[label="20.102.170.81;d;4pkt 4fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.67.107:80, 20.102.170.81:*}[75%]&lt;BR/&gt;{157.25.67.107:53, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5897%)&lt;BR/&gt; 53: (6.41026%)&lt;BR/&gt; 59504: (3.84615%)&lt;BR/&gt; 58259: (3.84615%)&lt;BR/&gt; 57049: (3.84615%)&gt;];
}
570--571[label="1;15pkt 15fpkt"];
570--2905[label="1;4pkt 4fpkt"];
571--2905[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="157.25.67.107" src_port="53"/>
      <filter dst_ip="20.102.170.81" src_ip="157.25.67.107" src_port="80"/>
    </slice>
    <from sec="1189314004" usec="0"/>
    <to sec="1189314479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649419,1.52726,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="196.248.0.190"/>
      <from sec="1189314006" usec="0"/>
      <to sec="1189314072" usec="0"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
639[label="194.101.155.228;d;107pkt 107fpkt", shape=diamond, color=yellow];
640[label="134.99.21.155;s;107pkt 107fpkt", shape=diamond, color=yellow];
2916[label="194.101.155.228;d;107pkt 107fpkt", shape=hexagon, color=black];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.21.155:443, 194.101.155.228:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49970: (0.46729%)&lt;BR/&gt; 49969: (0.46729%)&lt;BR/&gt; 49450: (0.46729%)&lt;BR/&gt; 49445: (0.46729%)&gt;];
}
639--640[label="1;107pkt 107fpkt"];
639--2916[label="1;107pkt 107fpkt"];
640--2916[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="194.101.155.228" src_ip="134.99.21.155" src_port="443"/>
    </slice>
    <from sec="1189314044" usec="0"/>
    <to sec="1189314159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
657[label="210.103.132.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
2920[label="210.103.132.91;s;1pkt 1fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.103.132.91:80, 216.219.229.198:2339}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2339: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
657--2920[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.219.229.198" dst_port="2339" src_ip="210.103.132.91" src_port="80"/>
    </slice>
    <from sec="1189314060" usec="0"/>
    <to sec="1189314118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
280[label="32.116.50.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
2931[label="128.190.192.68;d;3pkt 3fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.116.50.99:12250, 128.190.192.68:1573}[33.3333%]&lt;BR/&gt;{77.29.78.140:44519, 128.190.192.68:1028}[33.3333%]&lt;BR/&gt;{77.29.78.140:44522, 128.190.192.68:1029}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12250: (25%)&lt;BR/&gt; 1573: (25%)&lt;BR/&gt; 44522: (12.5%)&lt;BR/&gt; 44519: (12.5%)&lt;BR/&gt; 1029: (12.5%)&gt;];
}
280--2931[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.192.68" dst_port="1029" src_ip="77.29.78.140" src_port="44522"/>
      <filter dst_ip="128.190.192.68" dst_port="1028" src_ip="77.29.78.140" src_port="44519"/>
      <filter dst_ip="128.190.192.68" dst_port="1573" src_ip="32.116.50.99" src_port="12250"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649419,1.52726,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="202.156.33.37"/>
      <from sec="1189314001" usec="0"/>
      <to sec="1189314031" usec="0"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
718[label="128.190.160.79;d;349pkt 349fpkt", shape=diamond, color=yellow];
2937[label="128.190.160.79;d;294pkt 294fpkt", shape=hexagon, color=black];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 128.190.160.79:*}[54.7278%]&lt;BR/&gt;{*:*, 128.190.160.79:25}[40.4011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.6672%)&lt;BR/&gt; 0: (1.39969%)&lt;BR/&gt; 10618: (0.622084%)&lt;BR/&gt; 113: (0.544323%)&lt;BR/&gt; 110: (0.466563%)&gt;];
}
718--2937[label="1;294pkt 294fpkt"];
718--3761[label="0.0401146;14pkt 14fpkt"];
718--4196[label="0.142857;6pkt 6fpkt"];
718--5058[label="0.125;1pkt 1fpkt"];
718--5691[label="0.139535;6pkt 6fpkt"];
718--6128[label="0.125;1pkt 1fpkt"];
2937--3761[label="0.047619;14pkt 14fpkt"];
2937--4196[label="0.0714286;3pkt 3fpkt"];
2937--5058[label="0.125;1pkt 1fpkt"];
2937--5691[label="0.0697674;3pkt 3fpkt"];
2937--6128[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.160.79" src_port="25"/>
      <filter dst_ip="128.190.160.79" dst_port="25"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
400[label="216.212.184.91;d;4178pkt 4178fpkt", shape=diamond, color=yellow];
2946[label="216.212.184.91;d;956pkt 956fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 216.212.184.91:15621}[98.516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15621: (49.3864%)&lt;BR/&gt; 0: (1.11025%)&lt;BR/&gt; 16001: (0.749903%)&lt;BR/&gt; 6881: (0.701208%)&lt;BR/&gt; 1501: (0.662252%)&gt;];
}
400--1318[label="0.000239349;1pkt 1fpkt"];
400--2946[label="1;956pkt 956fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.184.91" dst_port="15621"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649419,1.52726,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.118.198.147"/>
      <from sec="1189314575" usec="0"/>
      <to sec="1189314829" usec="0"/>
    </slice>
    <from sec="1189314575" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
1291[label="25.3.102.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
4225[label="25.3.102.39;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5708[label="25.3.102.39;1pkt 1fpkt", shape=invtriangle, color=brown];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.3.102.39:41402, 168.206.54.126:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41402: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1291--4225[label="1;1pkt 1fpkt"];
1291--5708[label="1;1pkt 1fpkt"];
4225--5708[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.54.126" dst_port="80" src_ip="25.3.102.39" src_port="41402"/>
    </slice>
    <from sec="1189314199" usec="0"/>
    <to sec="1189314210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
863[label="77.17.93.130;d;10pkt 10fpkt", shape=diamond, color=yellow];
2977[label="77.17.93.130;d;10pkt 10fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.101.66:3127, 77.17.93.130:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 1654: (5%)&lt;BR/&gt; 1641: (5%)&lt;BR/&gt; 1575: (5%)&lt;BR/&gt; 1567: (5%)&gt;];
}
863--2977[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="77.17.93.130" src_ip="217.155.101.66" src_port="3127"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
560[label="128.190.29.66;d;65pkt 65fpkt", shape=diamond, color=yellow];
633[label="23.20.213.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
1409[label="26.30.38.6;s;154pkt 154fpkt", shape=diamond, color=yellow];
1504[label="128.190.2.199;d;69pkt 69fpkt", shape=diamond, color=yellow];
2015[label="23.20.222.68;s;1pkt 1fpkt", shape=diamond, color=yellow];
2983[label="128.190.29.66;d;60pkt 60fpkt", shape=hexagon, color=black];
3281[label="128.190.2.199;d;37pkt 37fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.30.38.6:80, *:*}[58.3333%]&lt;BR/&gt;{*:80, 128.190.2.199:*}[26.1364%]&lt;BR/&gt;{*:*, 128.190.29.66:*}[24.6212%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8992%)&lt;BR/&gt; 44982: (1.67959%)&lt;BR/&gt; 143: (1.16279%)&lt;BR/&gt; 43661: (0.387597%)&lt;BR/&gt; 43657: (0.387597%)&gt;];
}
560--633[label="1;1pkt 1fpkt"];
560--1409[label="0.276923;18pkt 18fpkt"];
560--2015[label="1;1pkt 1fpkt"];
560--2036[label="1;1pkt 1fpkt"];
560--2983[label="1;60pkt 60fpkt"];
560--3781[label="0.0615385;4pkt 4fpkt"];
560--3806[label="0.0769231;5pkt 5fpkt"];
560--3852[label="0.0615385;4pkt 4fpkt"];
560--3868[label="0.0769231;5pkt 5fpkt"];
560--3902[label="0.0615385;4pkt 4fpkt"];
560--3923[label="0.0769231;5pkt 5fpkt"];
633--2983[label="1;1pkt 1fpkt"];
1409--1424[label="0.171429;12pkt 12fpkt"];
1409--1427[label="0.52;26pkt 26fpkt"];
1409--1460[label="0.413793;12pkt 12fpkt"];
1409--1504[label="0.0869565;6pkt 6fpkt"];
1409--2238[label="0.777778;7pkt 7fpkt"];
1409--2983[label="0.266667;16pkt 16fpkt"];
1409--3103[label="0.0487805;2pkt 2fpkt"];
1409--3177[label="0.321429;9pkt 9fpkt"];
1409--3276[label="0.511628;22pkt 22fpkt"];
1409--3281[label="0.108108;4pkt 4fpkt"];
1409--3709[label="0.321429;9pkt 9fpkt"];
1409--3781[label="0.0519481;8pkt 8fpkt"];
1409--3806[label="0.0324675;5pkt 5fpkt"];
1409--3852[label="0.0519481;8pkt 8fpkt"];
1409--3868[label="0.0324675;5pkt 5fpkt"];
1409--3902[label="0.0519481;8pkt 8fpkt"];
1409--3923[label="0.0324675;5pkt 5fpkt"];
1504--3281[label="1;37pkt 37fpkt"];
1504--3781[label="0.0144928;1pkt 1fpkt"];
1504--3806[label="0.0289855;2pkt 2fpkt"];
1504--3852[label="0.0144928;1pkt 1fpkt"];
1504--3868[label="0.0289855;2pkt 2fpkt"];
1504--3902[label="0.0144928;1pkt 1fpkt"];
1504--3923[label="0.0289855;2pkt 2fpkt"];
2015--2983[label="1;1pkt 1fpkt"];
2983--3781[label="0.0666667;4pkt 4fpkt"];
2983--3806[label="0.0333333;2pkt 2fpkt"];
2983--3852[label="0.0666667;4pkt 4fpkt"];
2983--3868[label="0.0333333;2pkt 2fpkt"];
2983--3902[label="0.0666667;4pkt 4fpkt"];
2983--3923[label="0.0333333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.29.66"/>
      <filter src_ip="26.30.38.6" src_port="80"/>
      <filter dst_ip="128.190.2.199" src_port="80"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
434[label="217.155.105.72;d;375pkt 375fpkt", shape=diamond, color=yellow];
888[label="128.190.69.48;d;43pkt 43fpkt", shape=diamond, color=yellow];
1168[label="200.239.44.128;s;252pkt 252fpkt", shape=diamond, color=yellow];
1182[label="170.233.130.112;d;122pkt 122fpkt", shape=diamond, color=yellow];
1646[label="38.16.49.107;s;148pkt 148fpkt", shape=diamond, color=yellow];
2141[label="168.206.134.95;d;16pkt 16fpkt", shape=diamond, color=yellow];
2219[label="26.0.162.47;s;4pkt 4fpkt", shape=diamond, color=yellow];
2712[label="168.206.134.96;d;25pkt 25fpkt", shape=diamond, color=yellow];
2880[label="217.155.105.72;d;338pkt 338fpkt", shape=hexagon, color=black];
4253[label="20.102.172.43;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4306[label="26.0.68.50;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4903[label="25.3.102.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5016[label="25.3.102.163;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5178[label="77.8.236.189;42pkt 42fpkt", shape=pentagon, color=darkviolet];
5528[label="218.40.243.249;60pkt 60fpkt", shape=pentagon, color=darkviolet];
5729[label="20.102.172.43;6pkt 6fpkt", shape=invtriangle, color=brown];
6197[label="77.8.236.189;42pkt 42fpkt", shape=invtriangle, color=brown];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[44.6729%]&lt;BR/&gt;{*:*, 217.155.105.72:*}[35.1402%]&lt;BR/&gt;{200.239.44.128:2703, *:*}[23.7383%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (21.419%)&lt;BR/&gt; 2703: (11.3788%)&lt;BR/&gt; 53: (10.743%)&lt;BR/&gt; 54379: (8.23293%)&lt;BR/&gt; 25: (4.75234%)&gt;];
}
434--813[label="0.00671141;1pkt 1fpkt"];
434--837[label="0.00714286;1pkt 1fpkt"];
434--885[label="0.0163934;2pkt 2fpkt"];
434--1168[label="0.031746;8pkt 8fpkt"];
434--1176[label="0.0492958;14pkt 14fpkt"];
434--1259[label="0.00266667;1pkt 1fpkt"];
434--1620[label="0.00909091;1pkt 1fpkt"];
434--1622[label="0.015625;1pkt 1fpkt"];
434--1646[label="0.0135135;2pkt 2fpkt"];
434--2356[label="0.00813008;1pkt 1fpkt"];
434--2606[label="0.00952381;1pkt 1fpkt"];
434--2880[label="1;338pkt 338fpkt"];
434--2986[label="0.0224719;2pkt 2fpkt"];
434--3079[label="0.0661157;8pkt 8fpkt"];
434--3325[label="0.00909091;1pkt 1fpkt"];
434--3607[label="0.00813008;1pkt 1fpkt"];
434--3761[label="0.0106667;4pkt 4fpkt"];
434--3762[label="0.008;3pkt 3fpkt"];
434--3785[label="0.032;12pkt 12fpkt"];
434--3807[label="0.008;3pkt 3fpkt"];
434--3851[label="0.0826667;31pkt 31fpkt"];
434--3876[label="0.0773333;29pkt 29fpkt"];
434--3901[label="0.0826667;31pkt 31fpkt"];
434--3922[label="0.0773333;29pkt 29fpkt"];
434--3924[label="0.0773333;29pkt 29fpkt"];
434--3985[label="0.1;1pkt 1fpkt"];
434--4206[label="0.2;1pkt 1fpkt"];
434--4253[label="0.833333;5pkt 5fpkt"];
434--4306[label="0.181818;2pkt 2fpkt"];
434--4903[label="1;1pkt 1fpkt"];
434--5016[label="0.333333;1pkt 1fpkt"];
434--5178[label="0.0238095;1pkt 1fpkt"];
434--5528[label="0.0333333;2pkt 2fpkt"];
434--5729[label="0.833333;5pkt 5fpkt"];
434--6197[label="0.0238095;1pkt 1fpkt"];
888--931[label="0.0232558;1pkt 1fpkt"];
888--1422[label="0.142857;5pkt 5fpkt"];
888--1495[label="1;9pkt 9fpkt"];
888--1646[label="0.0930233;4pkt 4fpkt"];
888--3443[label="1;42pkt 42fpkt"];
888--3762[label="0.139535;6pkt 6fpkt"];
888--3774[label="0.0232558;1pkt 1fpkt"];
888--3807[label="0.0930233;4pkt 4fpkt"];
1168--1197[label="0.127962;27pkt 27fpkt"];
1168--1230[label="0.0729927;10pkt 10fpkt"];
1168--1590[label="0.232258;36pkt 36fpkt"];
1168--2670[label="0.011976;2pkt 2fpkt"];
1168--2880[label="0.031746;8pkt 8fpkt"];
1168--3082[label="0.147059;20pkt 20fpkt"];
1168--3152[label="0.0238095;6pkt 6fpkt"];
1168--3457[label="0.0729927;10pkt 10fpkt"];
1182--1422[label="0.4;14pkt 14fpkt"];
1182--1646[label="0.0245902;3pkt 3fpkt"];
1182--1663[label="0.720588;49pkt 49fpkt"];
1182--3762[label="0.0819672;10pkt 10fpkt"];
1182--3785[label="0.057377;7pkt 7fpkt"];
1182--3807[label="0.0327869;4pkt 4fpkt"];
1182--4115[label="0.037037;1pkt 1fpkt"];
1182--4964[label="0.15;6pkt 6fpkt"];
1182--5178[label="0.0238095;1pkt 1fpkt"];
1182--6078[label="0.15;6pkt 6fpkt"];
1182--6197[label="0.0238095;1pkt 1fpkt"];
1646--1965[label="0.2;1pkt 1fpkt"];
1646--2101[label="0.0121951;1pkt 1fpkt"];
1646--2141[label="0.125;2pkt 2fpkt"];
1646--2154[label="0.031746;2pkt 2fpkt"];
1646--2180[label="0.0666667;2pkt 2fpkt"];
1646--2631[label="0.0106383;1pkt 1fpkt"];
1646--2712[label="0.12;3pkt 3fpkt"];
1646--2755[label="0.222222;2pkt 2fpkt"];
1646--2880[label="0.0135135;2pkt 2fpkt"];
1646--2950[label="0.0405405;6pkt 6fpkt"];
1646--2976[label="0.0135135;2pkt 2fpkt"];
1646--3169[label="0.0208333;2pkt 2fpkt"];
1646--3443[label="0.0952381;4pkt 4fpkt"];
1646--3549[label="0.0350877;2pkt 2fpkt"];
1646--3594[label="0.0190476;2pkt 2fpkt"];
1646--3614[label="0.0106383;1pkt 1fpkt"];
1646--3706[label="0.0405405;6pkt 6fpkt"];
1646--3762[label="0.00675676;1pkt 1fpkt"];
1646--3785[label="0.0743243;11pkt 11fpkt"];
1646--3807[label="0.101351;15pkt 15fpkt"];
2141--2219[label="0.25;1pkt 1fpkt"];
2141--3762[label="0.0625;1pkt 1fpkt"];
2141--3785[label="0.0625;1pkt 1fpkt"];
2141--3807[label="0.25;4pkt 4fpkt"];
2141--5178[label="0.0625;1pkt 1fpkt"];
2141--6197[label="0.0625;1pkt 1fpkt"];
2219--3785[label="0.25;1pkt 1fpkt"];
2219--3807[label="0.25;1pkt 1fpkt"];
2712--4099[label="0.333333;1pkt 1fpkt"];
2712--5178[label="0.04;1pkt 1fpkt"];
2712--5649[label="0.333333;1pkt 1fpkt"];
2712--6197[label="0.04;1pkt 1fpkt"];
2880--2986[label="0.0224719;2pkt 2fpkt"];
2880--3079[label="0.0661157;8pkt 8fpkt"];
2880--3325[label="0.00909091;1pkt 1fpkt"];
2880--3607[label="0.00813008;1pkt 1fpkt"];
2880--3761[label="0.0118343;4pkt 4fpkt"];
2880--3762[label="0.00887574;3pkt 3fpkt"];
2880--3785[label="0.035503;12pkt 12fpkt"];
2880--3807[label="0.00887574;3pkt 3fpkt"];
2880--3851[label="0.091716;31pkt 31fpkt"];
2880--3876[label="0.0710059;24pkt 24fpkt"];
2880--3901[label="0.091716;31pkt 31fpkt"];
2880--3922[label="0.0857988;29pkt 29fpkt"];
2880--3924[label="0.0710059;24pkt 24fpkt"];
2880--3985[label="0.1;1pkt 1fpkt"];
2880--4253[label="0.833333;5pkt 5fpkt"];
2880--4306[label="0.181818;2pkt 2fpkt"];
2880--4903[label="1;1pkt 1fpkt"];
2880--5016[label="0.333333;1pkt 1fpkt"];
2880--5178[label="0.0238095;1pkt 1fpkt"];
2880--5528[label="0.0333333;2pkt 2fpkt"];
2880--5729[label="0.833333;5pkt 5fpkt"];
2880--6197[label="0.0238095;1pkt 1fpkt"];
4253--5729[label="1;6pkt 6fpkt"];
5178--6197[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.105.72"/>
      <filter dst_port="80"/>
      <filter src_ip="200.239.44.128" src_port="2703"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
1237[label="168.206.7.121;s;106pkt 106fpkt", shape=diamond, color=yellow];
1334[label="23.20.220.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2990[label="33.117.148.193;d;38pkt 38fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.7.121:*, *:80}[74.2857%]&lt;BR/&gt;{*:*, 33.117.148.193:80}[27.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3103%)&lt;BR/&gt; 3047: (0.689655%)&lt;BR/&gt; 2854: (0.689655%)&lt;BR/&gt; 2821: (0.689655%)&lt;BR/&gt; 2820: (0.689655%)&gt;];
}
1237--1248[label="0.00943396;1pkt 1fpkt"];
1237--1334[label="1;1pkt 1fpkt"];
1237--1506[label="0.00943396;1pkt 1fpkt"];
1237--2990[label="0.105263;4pkt 4fpkt"];
1237--3137[label="0.247619;26pkt 26fpkt"];
1237--3405[label="0.0471698;5pkt 5fpkt"];
1237--3785[label="0.0188679;2pkt 2fpkt"];
1237--3807[label="0.0660377;7pkt 7fpkt"];
2990--3261[label="0.105263;4pkt 4fpkt"];
2990--3552[label="0.394737;15pkt 15fpkt"];
2990--3762[label="0.0789474;3pkt 3fpkt"];
2990--3785[label="0.131579;5pkt 5fpkt"];
2990--3807[label="0.0789474;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="168.206.7.121"/>
      <filter dst_ip="33.117.148.193" dst_port="80"/>
    </slice>
    <from sec="1189314007" usec="0"/>
    <to sec="1189314817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
627[label="218.106.77.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
2998[label="218.106.77.215;d;1pkt 1fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.101.73:8080, 218.106.77.215:2314}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2314: (50%)&gt;];
}
627--2998[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.106.77.215" dst_port="2314" src_ip="217.155.101.73" src_port="8080"/>
    </slice>
    <from sec="1189314031" usec="0"/>
    <to sec="1189314147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_253{
style=filled;
color=gray75;
513[label="134.112.166.197;s;353pkt 353fpkt", shape=diamond, color=yellow];
938[label="134.168.153.47;s;3pkt 3fpkt", shape=diamond, color=yellow];
955[label="25.3.105.241;d;5pkt 5fpkt", shape=diamond, color=yellow];
1265[label="218.120.99.241;d;12pkt 12fpkt", shape=diamond, color=yellow];
3003[label="25.3.105.241;d;5pkt 5fpkt", shape=hexagon, color=black];
stat253[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.197:80, *:*}[95.4054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59940: (0.396825%)&lt;BR/&gt; 33789: (0.396825%)&lt;BR/&gt; 62501: (0.26455%)&lt;BR/&gt; 60944: (0.26455%)&gt;];
}
513--536[label="0.00283286;1pkt 1fpkt"];
513--575[label="0.0597015;8pkt 8fpkt"];
513--600[label="0.0550459;6pkt 6fpkt"];
513--687[label="0.116279;10pkt 10fpkt"];
513--945[label="0.263158;10pkt 10fpkt"];
513--955[label="0.2;1pkt 1fpkt"];
513--992[label="0.056962;9pkt 9fpkt"];
513--1247[label="0.0424929;15pkt 15fpkt"];
513--1265[label="0.0833333;1pkt 1fpkt"];
513--1645[label="0.0208333;3pkt 3fpkt"];
513--1714[label="0.04;2pkt 2fpkt"];
513--1781[label="0.333333;1pkt 1fpkt"];
513--1910[label="0.0606061;2pkt 2fpkt"];
513--2114[label="0.0425532;2pkt 2fpkt"];
513--2205[label="0.0555556;2pkt 2fpkt"];
513--2469[label="0.545455;6pkt 6fpkt"];
513--2734[label="0.0212766;1pkt 1fpkt"];
513--2745[label="0.8;12pkt 12fpkt"];
513--3003[label="0.2;1pkt 1fpkt"];
513--3108[label="0.0518519;7pkt 7fpkt"];
513--3645[label="0.8;12pkt 12fpkt"];
513--3781[label="0.0651558;23pkt 23fpkt"];
513--3806[label="0.0849858;30pkt 30fpkt"];
513--3852[label="0.0651558;23pkt 23fpkt"];
513--3868[label="0.0849858;30pkt 30fpkt"];
513--3902[label="0.0651558;23pkt 23fpkt"];
513--3923[label="0.0849858;30pkt 30fpkt"];
938--955[label="0.333333;1pkt 1fpkt"];
938--3003[label="0.333333;1pkt 1fpkt"];
955--3003[label="1;5pkt 5fpkt"];
1265--2979[label="0.166667;2pkt 2fpkt"];
1265--4037[label="0.125;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.112.166.197" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
968[label="201.59.188.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
3007[label="201.59.188.222;s;1pkt 1fpkt", shape=hexagon, color=black];
5368[label="201.59.188.222;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6294[label="201.59.188.222;1pkt 1fpkt", shape=invtriangle, color=brown];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.59.188.222:80, 168.206.76.131:59478}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59478: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
968--3007[label="1;1pkt 1fpkt"];
968--5368[label="1;1pkt 1fpkt"];
968--6294[label="1;1pkt 1fpkt"];
3007--5368[label="1;1pkt 1fpkt"];
3007--6294[label="1;1pkt 1fpkt"];
5368--6294[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.76.131" dst_port="59478" src_ip="201.59.188.222" src_port="80"/>
    </slice>
    <from sec="1189314106" usec="0"/>
    <to sec="1189314160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
370[label="201.0.128.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
3036[label="201.0.128.47;s;1pkt 1fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.0.128.47:80, 216.219.229.198:4164}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4164: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
370--3036[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.219.229.198" dst_port="4164" src_ip="201.0.128.47" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
1059[label="168.206.6.51;d;249pkt 249fpkt", shape=diamond, color=yellow];
1584[label="32.116.50.74;s;2pkt 2fpkt", shape=diamond, color=yellow];
1775[label="217.234.81.149;s;6pkt 6fpkt", shape=diamond, color=yellow];
3050[label="168.206.6.51;d;249pkt 249fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.234.81.53:80, 168.206.6.51:*}[25.7028%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.2253%)&lt;BR/&gt; 8080: (8.3004%)&lt;BR/&gt; 443: (8.3004%)&lt;BR/&gt; 10099: (1.18577%)&lt;BR/&gt; 10124: (0.592885%)&gt;];
}
1059--1584[label="1;2pkt 2fpkt"];
1059--1775[label="1;6pkt 6fpkt"];
1059--2411[label="0.0168067;2pkt 2fpkt"];
1059--3050[label="1;249pkt 249fpkt"];
1584--3050[label="1;2pkt 2fpkt"];
1775--3050[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.6.51" src_ip="217.234.81.53" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
801[label="1.4.34.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
3054[label="1.4.34.174;s;1pkt 1fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.4.34.174:4662, 134.112.110.99:4271}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 4271: (50%)&gt;];
}
801--3054[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.110.99" dst_port="4271" src_ip="1.4.34.174" src_port="4662"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
1078[label="197.199.171.217;s;1747pkt 1747fpkt", shape=diamond, color=yellow];
3056[label="197.199.171.217;s;619pkt 619fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.199.171.217:3664, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3664: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1078--3056[label="1;619pkt 619fpkt"];
1078--3786[label="0.0589582;103pkt 103fpkt"];
3056--3786[label="0.00161551;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="197.199.171.217" src_port="3664"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
1062[label="25.99.210.235;s;3383pkt 3383fpkt", shape=diamond, color=yellow];
5456[label="25.99.210.235;3657pkt 3657fpkt", shape=pentagon, color=darkviolet];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.99.210.235:33445, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33445: (50%)&lt;BR/&gt; 28063: (0.0426136%)&lt;BR/&gt; 21779: (0.0426136%)&lt;BR/&gt; 8895: (0.0426136%)&lt;BR/&gt; 7010: (0.0426136%)&gt;];
}
1062--3084[label="0.0163934;1pkt 1fpkt"];
1062--5456[label="1;3383pkt 3383fpkt"];
</description>
    <slice>
      <filter src_ip="25.99.210.235" src_port="33445"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
1116[label="134.168.153.67;s;1420pkt 1420fpkt", shape=diamond, color=yellow];
3061[label="134.168.153.67;s;1420pkt 1420fpkt", shape=hexagon, color=black];
3087[label="200.176.137.64;d;47pkt 47fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.168.153.67:0, *:0}[94.0655%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (95.5663%)&lt;BR/&gt; 53: (1.42016%)&lt;BR/&gt; 443: (0.796675%)&lt;BR/&gt; 64380: (0.034638%)&lt;BR/&gt; 64304: (0.034638%)&gt;];
}
1116--1175[label="0.00348432;1pkt 1fpkt"];
1116--1218[label="0.00775194;1pkt 1fpkt"];
1116--1267[label="0.5;1pkt 1fpkt"];
1116--2093[label="0.00877193;1pkt 1fpkt"];
1116--3059[label="0.0116279;1pkt 1fpkt"];
1116--3061[label="1;1420pkt 1420fpkt"];
1116--3087[label="0.0212766;1pkt 1fpkt"];
1116--3347[label="0.00378788;1pkt 1fpkt"];
1116--3851[label="0.0056338;8pkt 8fpkt"];
1116--3876[label="0.00422535;6pkt 6fpkt"];
1116--3901[label="0.0056338;8pkt 8fpkt"];
1116--3922[label="0.00774648;11pkt 11fpkt"];
1116--3924[label="0.00422535;6pkt 6fpkt"];
3061--3087[label="0.0212766;1pkt 1fpkt"];
3061--3347[label="0.00378788;1pkt 1fpkt"];
3061--3851[label="0.0056338;8pkt 8fpkt"];
3061--3876[label="0.00422535;6pkt 6fpkt"];
3061--3901[label="0.0056338;8pkt 8fpkt"];
3061--3922[label="0.00774648;11pkt 11fpkt"];
3061--3924[label="0.00422535;6pkt 6fpkt"];
3087--5320[label="0.0909091;1pkt 1fpkt"];
3087--5502[label="0.266667;8pkt 8fpkt"];
3087--6268[label="0.0909091;1pkt 1fpkt"];
3087--6740[label="0.0909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.168.153.67"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_267{
style=filled;
color=gray75;
666[label="20.178.88.62;d;15pkt 15fpkt", shape=diamond, color=yellow];
3097[label="20.178.88.62;d;15pkt 15fpkt", shape=hexagon, color=black];
stat267[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.196:80, 20.178.88.62:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58695: (3.33333%)&lt;BR/&gt; 58457: (3.33333%)&lt;BR/&gt; 58259: (3.33333%)&lt;BR/&gt; 58064: (3.33333%)&gt;];
}
666--3097[label="1;15pkt 15fpkt"];
666--3146[label="1;15pkt 15fpkt"];
3097--3146[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="20.178.88.62" src_ip="134.112.166.196" src_port="80"/>
    </slice>
    <from sec="1189314073" usec="0"/>
    <to sec="1189314114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
674[label="23.20.217.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
3098[label="23.20.217.83;d;1pkt 1fpkt", shape=hexagon, color=black];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.141:1873, 23.20.217.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1873: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
674--3098[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.20.217.83" dst_port="80" src_ip="168.206.6.141" src_port="1873"/>
    </slice>
    <from sec="1189314079" usec="0"/>
    <to sec="1189314119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
1272[label="25.3.110.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
3107[label="25.3.110.52;d;1pkt 1fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.196:80, 25.3.110.52:47439}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47439: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1272--3107[label="1;1pkt 1fpkt"];
1272--3146[label="1;1pkt 1fpkt"];
3107--3146[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.3.110.52" dst_port="47439" src_ip="134.112.166.196" src_port="80"/>
    </slice>
    <from sec="1189314153" usec="0"/>
    <to sec="1189314157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1290[label="25.3.102.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
3112[label="25.3.102.39;d;1pkt 1fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.54.126:80, 25.3.102.39:41402}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41402: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1290--3112[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.3.102.39" dst_port="41402" src_ip="168.206.54.126" src_port="80"/>
    </slice>
    <from sec="1189314199" usec="0"/>
    <to sec="1189314210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1307[label="221.207.112.203;s;2pkt 2fpkt", shape=diamond, color=yellow];
3117[label="221.207.112.203;s;2pkt 2fpkt", shape=hexagon, color=black];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.207.112.203:80, 128.190.65.180:50044}[50%]&lt;BR/&gt;{221.207.112.203:80, 128.190.65.180:50078}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50078: (25%)&lt;BR/&gt; 50044: (25%)&gt;];
}
1307--3117[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.65.180" dst_port="50078" src_ip="221.207.112.203" src_port="80"/>
      <filter dst_ip="128.190.65.180" dst_port="50044" src_ip="221.207.112.203" src_port="80"/>
    </slice>
    <from sec="1189314224" usec="0"/>
    <to sec="1189314327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
1322[label="23.20.216.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
3119[label="23.20.216.4;s;1pkt 1fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.20.216.4:80, 168.206.76.131:59523}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59523: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1322--3119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.76.131" dst_port="59523" src_ip="23.20.216.4" src_port="80"/>
    </slice>
    <from sec="1189314259" usec="0"/>
    <to sec="1189314271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
549[label="134.131.37.68;s;406pkt 406fpkt", shape=diamond, color=yellow];
1044[label="25.99.216.23;d;133pkt 133fpkt", shape=diamond, color=yellow];
1673[label="168.206.208.150;s;67pkt 67fpkt", shape=diamond, color=yellow];
2079[label="75.37.174.78;d;303pkt 303fpkt", shape=diamond, color=yellow];
2509[label="134.112.233.228;s;33pkt 33fpkt", shape=diamond, color=yellow];
2544[label="17.177.100.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
2982[label="134.131.37.68;s;142pkt 142fpkt", shape=hexagon, color=black];
3140[label="25.99.216.23;d;115pkt 115fpkt", shape=hexagon, color=black];
4418[label="134.131.37.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.131.37.68:0, *:0}[43.1163%]&lt;BR/&gt;{*:0, 75.37.174.78:0}[32.3372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (78.619%)&lt;BR/&gt; 80: (3.95175%)&lt;BR/&gt; 44405: (3.57737%)&lt;BR/&gt; 55901: (2.95341%)&lt;BR/&gt; 17972: (0.166389%)&gt;];
}
549--1022[label="0.00909091;1pkt 1fpkt"];
549--1044[label="0.0150376;2pkt 2fpkt"];
549--1356[label="0.0121951;1pkt 1fpkt"];
549--1575[label="0.00246305;1pkt 1fpkt"];
549--1579[label="0.0125;1pkt 1fpkt"];
549--1821[label="0.00284091;1pkt 1fpkt"];
549--2055[label="0.00362319;1pkt 1fpkt"];
549--2079[label="0.00330033;1pkt 1fpkt"];
549--2296[label="0.00492611;2pkt 2fpkt"];
549--2347[label="0.00420168;1pkt 1fpkt"];
549--2412[label="0.010101;1pkt 1fpkt"];
549--2586[label="0.00469484;1pkt 1fpkt"];
549--2982[label="1;142pkt 142fpkt"];
549--3134[label="0.00877193;1pkt 1fpkt"];
549--3140[label="0.0173913;2pkt 2fpkt"];
549--3501[label="0.00492611;2pkt 2fpkt"];
549--4418[label="1;2pkt 2fpkt"];
1044--1122[label="0.0075188;1pkt 1fpkt"];
1044--1415[label="0.0075188;1pkt 1fpkt"];
1044--1605[label="0.0075188;1pkt 1fpkt"];
1044--1673[label="0.0149254;1pkt 1fpkt"];
1044--1762[label="0.333333;1pkt 1fpkt"];
1044--2509[label="0.030303;1pkt 1fpkt"];
1044--2663[label="0.0120482;1pkt 1fpkt"];
1044--2982[label="0.0150376;2pkt 2fpkt"];
1044--3140[label="1;115pkt 115fpkt"];
1044--3292[label="0.333333;1pkt 1fpkt"];
1044--4044[label="0.0222222;1pkt 1fpkt"];
1044--4418[label="0.5;1pkt 1fpkt"];
1044--4544[label="0.142857;1pkt 1fpkt"];
1044--4844[label="0.0075188;1pkt 1fpkt"];
1044--4950[label="0.0147059;1pkt 1fpkt"];
1044--6026[label="0.0075188;1pkt 1fpkt"];
1044--6633[label="0.0075188;1pkt 1fpkt"];
1673--2227[label="1;10pkt 10fpkt"];
1673--3140[label="0.0149254;1pkt 1fpkt"];
1673--3762[label="0.0597015;4pkt 4fpkt"];
1673--3785[label="0.119403;8pkt 8fpkt"];
1673--3807[label="0.119403;8pkt 8fpkt"];
1673--4950[label="1;67pkt 67fpkt"];
2079--2663[label="0.0120482;1pkt 1fpkt"];
2079--2982[label="0.00704225;1pkt 1fpkt"];
2079--4418[label="0.5;1pkt 1fpkt"];
2509--2544[label="1;1pkt 1fpkt"];
2509--2747[label="0.25;1pkt 1fpkt"];
2509--3807[label="0.848485;28pkt 28fpkt"];
2544--3807[label="1;1pkt 1fpkt"];
2982--3134[label="0.00877193;1pkt 1fpkt"];
2982--3140[label="0.0173913;2pkt 2fpkt"];
2982--4418[label="1;2pkt 2fpkt"];
3140--3292[label="0.333333;1pkt 1fpkt"];
3140--4044[label="0.0222222;1pkt 1fpkt"];
3140--4418[label="0.5;1pkt 1fpkt"];
3140--4544[label="0.142857;1pkt 1fpkt"];
3140--4844[label="0.00869565;1pkt 1fpkt"];
3140--4950[label="0.0147059;1pkt 1fpkt"];
3140--6026[label="0.00869565;1pkt 1fpkt"];
3140--6633[label="0.00869565;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.131.37.68"/>
      <filter dst_ip="75.37.174.78"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1051[label="217.234.89.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
1070[label="217.234.89.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
3142[label="134.112.86.225;d;2pkt 2fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.234.89.212:13201, 134.112.86.225:2076}[50%]&lt;BR/&gt;{217.234.89.214:16201, 134.112.86.225:2078}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16201: (25%)&lt;BR/&gt; 13201: (25%)&lt;BR/&gt; 2078: (25%)&lt;BR/&gt; 2076: (25%)&gt;];
}
1051--3142[label="1;1pkt 1fpkt"];
1070--3142[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.86.225" dst_port="2078" src_ip="217.234.89.214" src_port="16201"/>
      <filter dst_ip="134.112.86.225" dst_port="2076" src_ip="217.234.89.212" src_port="13201"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
1053[label="4.23.167.14;d;250pkt 250fpkt", shape=diamond, color=yellow];
3144[label="4.23.167.14;d;181pkt 181fpkt", shape=hexagon, color=black];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.101.73:3124, 4.23.167.14:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 2448: (0.232019%)&lt;BR/&gt; 2447: (0.232019%)&lt;BR/&gt; 2446: (0.232019%)&lt;BR/&gt; 2445: (0.232019%)&gt;];
}
1053--3144[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_ip="4.23.167.14" src_ip="217.155.101.73" src_port="3124"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1353[label="32.116.50.74;d;2pkt 2fpkt", shape=diamond, color=yellow];
3148[label="32.116.50.74;d;2pkt 2fpkt", shape=hexagon, color=black];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.51:2270, 32.116.50.74:10124}[50%]&lt;BR/&gt;{168.206.6.51:2492, 32.116.50.74:10124}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10124: (50%)&lt;BR/&gt; 2492: (25%)&lt;BR/&gt; 2270: (25%)&gt;];
}
1353--3148[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="32.116.50.74" dst_port="10124" src_ip="168.206.6.51" src_port="2492"/>
      <filter dst_ip="32.116.50.74" dst_port="10124" src_ip="168.206.6.51" src_port="2270"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
774[label="215.185.123.44;d;45pkt 45fpkt", shape=diamond, color=yellow];
3149[label="215.185.123.44;d;19pkt 19fpkt", shape=hexagon, color=black];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.65.177:*, 215.185.123.44:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42470: (1.5625%)&lt;BR/&gt; 42449: (1.5625%)&lt;BR/&gt; 42331: (1.5625%)&lt;BR/&gt; 42255: (1.5625%)&gt;];
}
774--1006[label="1;45pkt 45fpkt"];
774--3149[label="1;19pkt 19fpkt"];
774--3762[label="0.0666667;3pkt 3fpkt"];
774--3785[label="0.0888889;4pkt 4fpkt"];
774--3807[label="0.0222222;1pkt 1fpkt"];
3149--3762[label="0.157895;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="215.185.123.44" dst_port="80" src_ip="128.190.65.177"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
1087[label="38.3.16.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
3161[label="38.3.16.127;s;1pkt 1fpkt", shape=hexagon, color=black];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.3.16.127:13704, 168.206.4.242:2005}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13704: (50%)&lt;BR/&gt; 2005: (50%)&gt;];
}
1087--3161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="2005" src_ip="38.3.16.127" src_port="13704"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_281{
style=filled;
color=gray75;
1411[label="134.112.133.157;d;46pkt 46fpkt", shape=diamond, color=yellow];
1694[label="81.230.142.20;s;33pkt 33fpkt", shape=diamond, color=yellow];
3172[label="134.112.133.157;d;29pkt 29fpkt", shape=hexagon, color=black];
stat281[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.230.142.20:*, 134.112.133.157:80}[71.7391%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 143: (1.85185%)&lt;BR/&gt; 59646: (1.38889%)&lt;BR/&gt; 59073: (1.38889%)&lt;BR/&gt; 55097: (1.38889%)&gt;];
}
1411--1694[label="1;33pkt 33fpkt"];
1411--3172[label="1;29pkt 29fpkt"];
1411--3762[label="0.0434783;2pkt 2fpkt"];
1411--3785[label="0.0869565;4pkt 4fpkt"];
1411--3807[label="0.0217391;1pkt 1fpkt"];
1694--3172[label="0.655172;19pkt 19fpkt"];
1694--3762[label="0.0606061;2pkt 2fpkt"];
1694--3785[label="0.0909091;3pkt 3fpkt"];
1694--3807[label="0.030303;1pkt 1fpkt"];
3172--3762[label="0.0689655;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.133.157" dst_port="80" src_ip="81.230.142.20"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1419[label="17.1.200.147;d;1pkt 1fpkt", shape=diamond, color=yellow];
3176[label="17.1.200.147;d;1pkt 1fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.131.36.212:6881, 17.1.200.147:4424}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6881: (50%)&lt;BR/&gt; 4424: (50%)&gt;];
}
1419--3176[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="17.1.200.147" dst_port="4424" src_ip="134.131.36.212" src_port="6881"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
941[label="33.225.152.220;d;319pkt 319fpkt", shape=diamond, color=yellow];
3194[label="33.225.152.220;d;55pkt 55fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.101.73:3128, 33.225.152.220:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 1307: (0.26738%)&lt;BR/&gt; 1306: (0.26738%)&lt;BR/&gt; 1305: (0.26738%)&lt;BR/&gt; 1304: (0.26738%)&gt;];
}
941--3194[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_ip="33.225.152.220" src_ip="217.155.101.73" src_port="3128"/>
    </slice>
    <from sec="1189314044" usec="0"/>
    <to sec="1189314769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1253[label="221.250.81.231;d;48pkt 48fpkt", shape=diamond, color=yellow];
3198[label="221.250.81.231;d;20pkt 20fpkt", shape=hexagon, color=black];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.65.177:*, 221.250.81.231:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42485: (1.47059%)&lt;BR/&gt; 42450: (1.47059%)&lt;BR/&gt; 42409: (1.47059%)&lt;BR/&gt; 42287: (1.47059%)&gt;];
}
1253--3198[label="1;20pkt 20fpkt"];
1253--3785[label="0.104167;5pkt 5fpkt"];
1253--3807[label="0.0833333;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="221.250.81.231" dst_port="80" src_ip="128.190.65.177"/>
    </slice>
    <from sec="1189314068" usec="0"/>
    <to sec="1189314827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
538[label="129.29.6.82;s;356pkt 356fpkt", shape=diamond, color=yellow];
1269[label="23.227.52.50;d;3pkt 3fpkt", shape=diamond, color=yellow];
3200[label="23.227.52.50;d;3pkt 3fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.29.6.82:25, *:*}[72.067%]&lt;BR/&gt;{129.29.6.82:995, *:*}[22.067%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (35.9116%)&lt;BR/&gt; 995: (11.4641%)&lt;BR/&gt; 110: (1.79558%)&lt;BR/&gt; 80: (0.828729%)&lt;BR/&gt; 10109: (0.414365%)&gt;];
}
538--1269[label="0.333333;1pkt 1fpkt"];
538--3200[label="0.333333;1pkt 1fpkt"];
538--3806[label="0.00280899;1pkt 1fpkt"];
538--3868[label="0.00280899;1pkt 1fpkt"];
538--3923[label="0.00280899;1pkt 1fpkt"];
1269--3200[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="129.29.6.82" src_port="25"/>
      <filter src_ip="129.29.6.82" src_port="995"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1312[label="196.248.55.51;d;4pkt 4fpkt", shape=diamond, color=yellow];
3207[label="196.248.55.51;d;4pkt 4fpkt", shape=hexagon, color=black];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.196:80, 196.248.55.51:49445}[25%]&lt;BR/&gt;{134.112.166.196:80, 196.248.55.51:49447}[25%]&lt;BR/&gt;{134.112.166.196:80, 196.248.55.51:49448}[25%]&lt;BR/&gt;{134.112.166.196:80, 196.248.55.51:49451}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49451: (12.5%)&lt;BR/&gt; 49448: (12.5%)&lt;BR/&gt; 49447: (12.5%)&lt;BR/&gt; 49445: (12.5%)&gt;];
}
1312--3146[label="1;4pkt 4fpkt"];
1312--3207[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="196.248.55.51" dst_port="49451" src_ip="134.112.166.196" src_port="80"/>
      <filter dst_ip="196.248.55.51" dst_port="49448" src_ip="134.112.166.196" src_port="80"/>
      <filter dst_ip="196.248.55.51" dst_port="49447" src_ip="134.112.166.196" src_port="80"/>
      <filter dst_ip="196.248.55.51" dst_port="49445" src_ip="134.112.166.196" src_port="80"/>
    </slice>
    <from sec="1189314238" usec="0"/>
    <to sec="1189314400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
1547[label="23.20.221.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
3216[label="23.20.221.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.86.228:46193, 23.20.221.15:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46193: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1547--3216[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.20.221.15" dst_port="80" src_ip="128.190.86.228" src_port="46193"/>
    </slice>
    <from sec="1189314316" usec="0"/>
    <to sec="1189314338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
329[label="26.196.160.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
3224[label="26.196.160.86;d;1pkt 1fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.86.228:2223, 26.196.160.86:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2223: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
329--3224[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.196.160.86" dst_port="443" src_ip="128.190.86.228" src_port="2223"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
751[label="74.7.221.14;d;155pkt 155fpkt", shape=diamond, color=yellow];
3229[label="74.7.221.14;d;144pkt 144fpkt", shape=hexagon, color=black];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 74.7.221.14:0}[96.129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.3211%)&lt;BR/&gt; 139: (1.17057%)&lt;BR/&gt; 445: (0.668896%)&lt;BR/&gt; 4845: (0.334448%)&lt;BR/&gt; 3514: (0.334448%)&gt;];
}
751--1866[label="0.00645161;1pkt 1fpkt"];
751--3229[label="1;144pkt 144fpkt"];
751--3340[label="0.00645161;1pkt 1fpkt"];
3229--3340[label="0.00694444;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.7.221.14"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
427[label="129.110.173.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
3230[label="129.110.173.45;d;1pkt 1fpkt", shape=hexagon, color=black];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.86.144.161:11291, 129.110.173.45:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11291: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
427--763[label="1;1pkt 1fpkt"];
427--3230[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.110.173.45" dst_port="443" src_ip="129.86.144.161" src_port="11291"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
2333[label="168.206.7.28;s;27pkt 27fpkt", shape=diamond, color=yellow];
4150[label="168.206.7.28;27pkt 27fpkt", shape=pentagon, color=darkviolet];
5668[label="168.206.7.28;26pkt 26fpkt", shape=invtriangle, color=brown];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.7.28:*, 33.117.148.29:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1402: (1.875%)&lt;BR/&gt; 1401: (1.875%)&lt;BR/&gt; 1400: (1.875%)&lt;BR/&gt; 1399: (1.875%)&gt;];
}
2333--4150[label="1;27pkt 27fpkt"];
2333--5668[label="1;26pkt 26fpkt"];
4150--5668[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="33.117.148.29" dst_port="443" src_ip="168.206.7.28"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
531[label="217.252.222.189;d;236pkt 236fpkt", shape=diamond, color=yellow];
1731[label="128.190.16.10;s;15pkt 15fpkt", shape=diamond, color=yellow];
1742[label="157.25.43.108;s;24pkt 24fpkt", shape=diamond, color=yellow];
4143[label="157.25.15.27;25pkt 25fpkt", shape=pentagon, color=darkviolet];
4172[label="168.206.16.32;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4622[label="134.99.133.101;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4673[label="157.25.43.108;24pkt 24fpkt", shape=pentagon, color=darkviolet];
4987[label="134.99.75.159;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5409[label="168.206.7.229;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5679[label="168.206.16.32;25pkt 25fpkt", shape=invtriangle, color=brown];
5937[label="157.25.43.108;24pkt 24fpkt", shape=invtriangle, color=brown];
6091[label="134.99.75.159;8pkt 8fpkt", shape=invtriangle, color=brown];
6311[label="168.206.7.229;8pkt 8fpkt", shape=invtriangle, color=brown];
6662[label="134.99.75.159;8pkt 8fpkt", shape=invhouse, color=bisque];
6752[label="168.206.7.229;8pkt 8fpkt", shape=invhouse, color=bisque];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 217.252.222.189:80}[70.0906%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6616%)&lt;BR/&gt; 443: (3.47072%)&lt;BR/&gt; 20480: (0.650759%)&lt;BR/&gt; 1124: (0.542299%)&lt;BR/&gt; 32787: (0.433839%)&gt;];
}
531--555[label="0.029661;7pkt 7fpkt"];
531--563[label="0.0847458;5pkt 5fpkt"];
531--830[label="0.00423729;1pkt 1fpkt"];
531--842[label="0.00423729;1pkt 1fpkt"];
531--926[label="0.129032;8pkt 8fpkt"];
531--933[label="0.0227273;3pkt 3fpkt"];
531--1006[label="0.00423729;1pkt 1fpkt"];
531--1083[label="0.153846;2pkt 2fpkt"];
531--1211[label="0.0144928;2pkt 2fpkt"];
531--1214[label="0.0833333;4pkt 4fpkt"];
531--1234[label="0.0338983;2pkt 2fpkt"];
531--1294[label="0.0178571;1pkt 1fpkt"];
531--1416[label="0.0392157;2pkt 2fpkt"];
531--1497[label="0.00478469;1pkt 1fpkt"];
531--1498[label="0.0508475;6pkt 6fpkt"];
531--1685[label="0.0172414;1pkt 1fpkt"];
531--1704[label="0.0714286;8pkt 8fpkt"];
531--1731[label="0.333333;5pkt 5fpkt"];
531--1742[label="0.375;9pkt 9fpkt"];
531--1931[label="0.0322581;2pkt 2fpkt"];
531--2160[label="0.0526316;1pkt 1fpkt"];
531--2196[label="0.0666667;2pkt 2fpkt"];
531--2250[label="0.0769231;1pkt 1fpkt"];
531--3168[label="0.0169492;4pkt 4fpkt"];
531--3252[label="1;166pkt 166fpkt"];
531--3269[label="0.142857;4pkt 4fpkt"];
531--3270[label="0.129032;8pkt 8fpkt"];
531--3316[label="0.2;2pkt 2fpkt"];
531--3459[label="0.0227273;3pkt 3fpkt"];
531--3545[label="0.0175439;1pkt 1fpkt"];
531--3555[label="0.0350877;2pkt 2fpkt"];
531--3639[label="0.0508475;6pkt 6fpkt"];
531--3644[label="0.0769231;1pkt 1fpkt"];
531--3762[label="0.114407;27pkt 27fpkt"];
531--3785[label="0.0635593;15pkt 15fpkt"];
531--3807[label="0.0932203;22pkt 22fpkt"];
531--4143[label="0.04;1pkt 1fpkt"];
531--4172[label="0.0416667;1pkt 1fpkt"];
531--4500[label="0.111111;4pkt 4fpkt"];
531--4622[label="0.25;4pkt 4fpkt"];
531--4673[label="0.375;9pkt 9fpkt"];
531--4987[label="0.5;4pkt 4fpkt"];
531--5001[label="0.037037;2pkt 2fpkt"];
531--5079[label="0.030303;2pkt 2fpkt"];
531--5259[label="0.047619;2pkt 2fpkt"];
531--5351[label="0.0178571;1pkt 1fpkt"];
531--5401[label="0.0666667;2pkt 2fpkt"];
531--5409[label="0.25;2pkt 2fpkt"];
531--5679[label="0.04;1pkt 1fpkt"];
531--5856[label="0.111111;4pkt 4fpkt"];
531--5937[label="0.375;9pkt 9fpkt"];
531--6091[label="0.5;4pkt 4fpkt"];
531--6140[label="0.030303;2pkt 2fpkt"];
531--6166[label="0.00423729;1pkt 1fpkt"];
531--6232[label="0.047619;2pkt 2fpkt"];
531--6311[label="0.25;2pkt 2fpkt"];
531--6375[label="0.0127119;3pkt 3fpkt"];
531--6549[label="0.111111;4pkt 4fpkt"];
531--6662[label="0.5;4pkt 4fpkt"];
531--6686[label="0.030303;2pkt 2fpkt"];
531--6752[label="0.25;2pkt 2fpkt"];
1731--3252[label="0.333333;5pkt 5fpkt"];
1731--3785[label="0.133333;2pkt 2fpkt"];
1742--1884[label="0.125;3pkt 3fpkt"];
1742--3252[label="0.375;9pkt 9fpkt"];
1742--3591[label="0.0833333;2pkt 2fpkt"];
1742--3785[label="0.0416667;1pkt 1fpkt"];
1742--3807[label="0.0833333;2pkt 2fpkt"];
1742--4673[label="1;24pkt 24fpkt"];
1742--5937[label="1;24pkt 24fpkt"];
4172--5679[label="1;24pkt 24fpkt"];
4673--5937[label="1;24pkt 24fpkt"];
4987--6091[label="1;8pkt 8fpkt"];
4987--6662[label="1;8pkt 8fpkt"];
5409--6311[label="1;8pkt 8fpkt"];
5409--6752[label="1;8pkt 8fpkt"];
6091--6662[label="1;8pkt 8fpkt"];
6311--6752[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="217.252.222.189" dst_port="80"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
1010[label="134.131.37.71;s;351pkt 351fpkt", shape=diamond, color=yellow];
3302[label="134.131.37.71;s;351pkt 351fpkt", shape=hexagon, color=black];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.131.37.71:0, *:0}[99.7151%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7151%)&lt;BR/&gt; 6000: (0.14245%)&lt;BR/&gt; 5168: (0.14245%)&gt;];
}
1010--1575[label="0.002849;1pkt 1fpkt"];
1010--1586[label="0.002849;1pkt 1fpkt"];
1010--1599[label="0.002849;1pkt 1fpkt"];
1010--1821[label="0.002849;1pkt 1fpkt"];
1010--1842[label="0.002849;1pkt 1fpkt"];
1010--2047[label="0.00320513;1pkt 1fpkt"];
1010--2055[label="0.00362319;1pkt 1fpkt"];
1010--2296[label="0.00569801;2pkt 2fpkt"];
1010--2347[label="0.00420168;1pkt 1fpkt"];
1010--2586[label="0.00469484;1pkt 1fpkt"];
1010--3233[label="0.00288184;1pkt 1fpkt"];
1010--3302[label="1;351pkt 351fpkt"];
1010--3319[label="0.00374532;1pkt 1fpkt"];
1010--3501[label="0.00569801;2pkt 2fpkt"];
1010--3714[label="0.00381679;1pkt 1fpkt"];
3302--3319[label="0.00374532;1pkt 1fpkt"];
3302--3501[label="0.00569801;2pkt 2fpkt"];
3302--3714[label="0.00381679;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.131.37.71"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
1066[label="128.190.80.41;s;862pkt 862fpkt", shape=diamond, color=yellow];
1076[label="218.40.243.249;d;114pkt 114fpkt", shape=diamond, color=yellow];
1215[label="223.69.176.218;d;220pkt 220fpkt", shape=diamond, color=yellow];
3086[label="223.69.176.218;d;205pkt 205fpkt", shape=hexagon, color=black];
3150[label="128.190.80.41;s;657pkt 657fpkt", shape=hexagon, color=black];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.80.41:25, *:*}[36.2269%]&lt;BR/&gt;{128.190.80.41:*, *:113}[34.838%]&lt;BR/&gt;{128.190.80.41:*, *:25}[28.3565%]&lt;BR/&gt;{128.190.80.41:*, 223.69.176.218:*}[25.463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30.0777%)&lt;BR/&gt; 113: (19.9223%)&lt;BR/&gt; 3557: (0.170068%)&lt;BR/&gt; 4605: (0.145773%)&lt;BR/&gt; 4126: (0.145773%)&gt;];
}
1066--1076[label="0.982456;112pkt 112fpkt"];
1066--1150[label="0.168269;35pkt 35fpkt"];
1066--1215[label="1;220pkt 220fpkt"];
1066--2706[label="0.0434783;2pkt 2fpkt"];
1066--3086[label="1;205pkt 205fpkt"];
1066--3150[label="1;657pkt 657fpkt"];
1066--3761[label="0.0232019;20pkt 20fpkt"];
1076--3150[label="0.982456;112pkt 112fpkt"];
1076--3309[label="0.0175439;2pkt 2fpkt"];
1215--3086[label="1;205pkt 205fpkt"];
1215--3150[label="0.931818;205pkt 205fpkt"];
3086--3150[label="1;205pkt 205fpkt"];
3150--3761[label="0.0304414;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="223.69.176.218" src_ip="128.190.80.41"/>
      <filter src_ip="128.190.80.41" src_port="25"/>
      <filter dst_port="113" src_ip="128.190.80.41"/>
      <filter dst_port="25" src_ip="128.190.80.41"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
1843[label="193.81.165.155;s;75pkt 75fpkt", shape=diamond, color=yellow];
3326[label="193.81.165.155;s;61pkt 61fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.81.165.155:*, 217.155.106.239:21}[85.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (43.0147%)&lt;BR/&gt; 63376: (0.735294%)&lt;BR/&gt; 63026: (0.735294%)&lt;BR/&gt; 62843: (0.735294%)&lt;BR/&gt; 62696: (0.735294%)&gt;];
}
1843--3326[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.106.239" dst_port="21" src_ip="193.81.165.155"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
1379[label="134.100.218.223;d;229pkt 229fpkt", shape=diamond, color=yellow];
3328[label="134.100.218.223;d;161pkt 161fpkt", shape=hexagon, color=black];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 134.100.218.223:*}[55.8952%]&lt;BR/&gt;{*:*, 134.100.218.223:16338}[32.3144%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.6667%)&lt;BR/&gt; 16338: (17.5641%)&lt;BR/&gt; 0: (8.71795%)&lt;BR/&gt; 113: (0.897436%)&lt;BR/&gt; 22292: (0.512821%)&gt;];
}
1379--3279[label="0.00436681;1pkt 1fpkt"];
1379--3328[label="1;161pkt 161fpkt"];
1379--5361[label="0.00436681;1pkt 1fpkt"];
1379--6291[label="0.00436681;1pkt 1fpkt"];
1379--6746[label="0.00436681;1pkt 1fpkt"];
3328--5361[label="0.00621118;1pkt 1fpkt"];
3328--6291[label="0.00621118;1pkt 1fpkt"];
3328--6746[label="0.00621118;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.100.218.223" src_port="25"/>
      <filter dst_ip="134.100.218.223" dst_port="16338"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
1852[label="194.10.154.27;s;4pkt 4fpkt", shape=diamond, color=yellow];
3331[label="194.10.154.27;s;3pkt 3fpkt", shape=hexagon, color=black];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.10.154.27:1554, 168.206.4.242:10339}[25%]&lt;BR/&gt;{194.10.154.27:2445, 168.206.4.242:10339}[25%]&lt;BR/&gt;{194.10.154.27:2568, 168.206.4.242:10339}[25%]&lt;BR/&gt;{194.10.154.27:19024, 168.206.4.242:3807}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10339: (35.7143%)&lt;BR/&gt; 19024: (14.2857%)&lt;BR/&gt; 3807: (14.2857%)&lt;BR/&gt; 2445: (14.2857%)&lt;BR/&gt; 1554: (14.2857%)&gt;];
}
1852--3331[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="3807" src_ip="194.10.154.27" src_port="19024"/>
      <filter dst_ip="168.206.4.242" dst_port="10339" src_ip="194.10.154.27" src_port="2568"/>
      <filter dst_ip="168.206.4.242" dst_port="10339" src_ip="194.10.154.27" src_port="2445"/>
      <filter dst_ip="168.206.4.242" dst_port="10339" src_ip="194.10.154.27" src_port="1554"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
539[label="168.206.117.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
540[label="200.51.36.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
3338[label="200.51.36.135;s;1pkt 1fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.51.36.135:9416, 168.206.117.14:2503}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9416: (50%)&lt;BR/&gt; 2503: (50%)&gt;];
}
539--540[label="1;1pkt 1fpkt"];
539--3338[label="1;1pkt 1fpkt"];
540--3338[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.117.14" dst_port="2503" src_ip="200.51.36.135" src_port="9416"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
775[label="217.155.105.72;s;444pkt 444fpkt", shape=diamond, color=yellow];
898[label="128.190.196.203;s;329pkt 329fpkt", shape=diamond, color=yellow];
980[label="194.101.155.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
1067[label="128.190.204.52;s;306pkt 306fpkt", shape=diamond, color=yellow];
1167[label="200.239.44.128;d;252pkt 252fpkt", shape=diamond, color=yellow];
1175[label="200.239.44.129;d;287pkt 287fpkt", shape=diamond, color=yellow];
1198[label="134.112.72.2;s;275pkt 275fpkt", shape=diamond, color=yellow];
2134[label="128.190.218.89;s;276pkt 276fpkt", shape=diamond, color=yellow];
3009[label="194.101.155.197;d;1pkt 1fpkt", shape=hexagon, color=black];
3083[label="128.190.196.203;s;175pkt 175fpkt", shape=hexagon, color=black];
3345[label="20.24.97.51;d;169pkt 169fpkt", shape=hexagon, color=black];
3347[label="200.239.44.129;d;264pkt 264fpkt", shape=hexagon, color=black];
5363[label="217.155.110.221;72pkt 72fpkt", shape=pentagon, color=darkviolet];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:2703}[38.8235%]&lt;BR/&gt;{*:*, *:53}[25.5392%]&lt;BR/&gt;{217.155.105.72:*, *:*}[21.7647%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (26.5345%)&lt;BR/&gt; 53: (12.9078%)&lt;BR/&gt; 25: (7.68152%)&lt;BR/&gt; 62980: (3.13925%)&lt;BR/&gt; 54379: (2.77096%)&gt;];
}
775--836[label="0.00813008;1pkt 1fpkt"];
775--884[label="0.018018;2pkt 2fpkt"];
775--1045[label="0.00225225;1pkt 1fpkt"];
775--1076[label="0.0175439;2pkt 2fpkt"];
775--1121[label="0.00225225;1pkt 1fpkt"];
775--1167[label="0.031746;8pkt 8fpkt"];
775--1175[label="0.0487805;14pkt 14fpkt"];
775--1619[label="0.00925926;1pkt 1fpkt"];
775--1645[label="0.0138889;2pkt 2fpkt"];
775--2085[label="0.0169492;1pkt 1fpkt"];
775--2093[label="0.00877193;1pkt 1fpkt"];
775--2985[label="0.018018;2pkt 2fpkt"];
775--3042[label="0.00225225;1pkt 1fpkt"];
775--3309[label="1;288pkt 288fpkt"];
775--3347[label="0.0454545;12pkt 12fpkt"];
775--3725[label="0.0246914;2pkt 2fpkt"];
775--3781[label="0.027027;12pkt 12fpkt"];
775--3806[label="0.0135135;6pkt 6fpkt"];
775--3851[label="0.018018;8pkt 8fpkt"];
775--3852[label="0.027027;12pkt 12fpkt"];
775--3868[label="0.0135135;6pkt 6fpkt"];
775--3876[label="0.0045045;2pkt 2fpkt"];
775--3901[label="0.018018;8pkt 8fpkt"];
775--3902[label="0.027027;12pkt 12fpkt"];
775--3922[label="0.018018;8pkt 8fpkt"];
775--3923[label="0.0135135;6pkt 6fpkt"];
775--3924[label="0.0045045;2pkt 2fpkt"];
898--980[label="1;1pkt 1fpkt"];
898--1167[label="0.0873016;22pkt 22fpkt"];
898--1175[label="0.146341;42pkt 42fpkt"];
898--1619[label="0.00925926;1pkt 1fpkt"];
898--1649[label="0.189349;32pkt 32fpkt"];
898--1698[label="0.0285714;2pkt 2fpkt"];
898--1900[label="0.0172414;1pkt 1fpkt"];
898--2071[label="0.00934579;1pkt 1fpkt"];
898--2085[label="0.0169492;1pkt 1fpkt"];
898--2397[label="0.00980392;1pkt 1fpkt"];
898--3009[label="1;1pkt 1fpkt"];
898--3083[label="1;175pkt 175fpkt"];
898--3345[label="0.189349;32pkt 32fpkt"];
898--3347[label="0.159091;42pkt 42fpkt"];
898--3352[label="0.0172414;1pkt 1fpkt"];
898--3361[label="0.0454545;2pkt 2fpkt"];
898--3851[label="0.00911854;3pkt 3fpkt"];
898--3876[label="0.00303951;1pkt 1fpkt"];
898--3901[label="0.00911854;3pkt 3fpkt"];
898--3924[label="0.00303951;1pkt 1fpkt"];
980--3009[label="1;1pkt 1fpkt"];
980--3083[label="1;1pkt 1fpkt"];
1067--1167[label="0.142857;36pkt 36fpkt"];
1067--1175[label="0.118467;34pkt 34fpkt"];
1067--1649[label="0.390533;66pkt 66fpkt"];
1067--1869[label="0.00694444;1pkt 1fpkt"];
1067--2706[label="0.0434783;2pkt 2fpkt"];
1067--3345[label="0.390533;66pkt 66fpkt"];
1067--3347[label="0.113636;30pkt 30fpkt"];
1067--3761[label="0.0294118;9pkt 9fpkt"];
1167--1198[label="0.107143;27pkt 27fpkt"];
1167--1231[label="0.0699301;10pkt 10fpkt"];
1167--2134[label="0.00793651;2pkt 2fpkt"];
1167--3083[label="0.102857;18pkt 18fpkt"];
1167--3309[label="0.0238095;6pkt 6fpkt"];
1167--3778[label="0.0436508;11pkt 11fpkt"];
1167--4129[label="0.0396825;10pkt 10fpkt"];
1167--5363[label="0.0277778;2pkt 2fpkt"];
1175--1198[label="0.08;22pkt 22fpkt"];
1175--1231[label="0.125874;18pkt 18fpkt"];
1175--2134[label="0.0217391;6pkt 6fpkt"];
1175--3061[label="0.00348432;1pkt 1fpkt"];
1175--3083[label="0.148571;26pkt 26fpkt"];
1175--3309[label="0.0348432;10pkt 10fpkt"];
1175--3347[label="1;264pkt 264fpkt"];
1175--3778[label="0.0278746;8pkt 8fpkt"];
1175--4129[label="0.0418118;12pkt 12fpkt"];
1175--4947[label="0.0555556;2pkt 2fpkt"];
1175--5363[label="0.0277778;2pkt 2fpkt"];
1198--1619[label="0.00925926;1pkt 1fpkt"];
1198--1649[label="0.272189;46pkt 46fpkt"];
1198--2071[label="0.00934579;1pkt 1fpkt"];
1198--2085[label="0.0169492;1pkt 1fpkt"];
1198--2130[label="0.0185185;1pkt 1fpkt"];
1198--2397[label="0.00980392;1pkt 1fpkt"];
1198--3345[label="0.272189;46pkt 46fpkt"];
1198--3347[label="0.0681818;18pkt 18fpkt"];
1198--3761[label="0.00363636;1pkt 1fpkt"];
1198--3851[label="0.00727273;2pkt 2fpkt"];
1198--3901[label="0.00727273;2pkt 2fpkt"];
1198--3922[label="0.00363636;1pkt 1fpkt"];
2134--2397[label="0.00980392;1pkt 1fpkt"];
2134--3345[label="0.0473373;8pkt 8fpkt"];
2134--3347[label="0.0227273;6pkt 6fpkt"];
2134--3761[label="0.00724638;2pkt 2fpkt"];
2134--3876[label="0.0108696;3pkt 3fpkt"];
2134--3922[label="0.00362319;1pkt 1fpkt"];
2134--3924[label="0.0108696;3pkt 3fpkt"];
3009--3083[label="1;1pkt 1fpkt"];
3083--3345[label="0.130178;22pkt 22fpkt"];
3083--3347[label="0.148571;26pkt 26fpkt"];
3083--3352[label="0.0172414;1pkt 1fpkt"];
3083--3361[label="0.0454545;2pkt 2fpkt"];
3345--4129[label="0.0591716;10pkt 10fpkt"];
3345--4947[label="0.0277778;1pkt 1fpkt"];
3345--5363[label="0.0138889;1pkt 1fpkt"];
3347--3778[label="0.030303;8pkt 8fpkt"];
3347--4129[label="0.0378788;10pkt 10fpkt"];
3347--4947[label="0.0555556;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="217.155.105.72"/>
      <filter dst_port="2703"/>
      <filter dst_port="53"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
1320[label="74.36.219.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
1442[label="134.99.179.39;s;7pkt 7fpkt", shape=diamond, color=yellow];
1914[label="26.30.37.5;d;72pkt 72fpkt", shape=diamond, color=yellow];
3351[label="134.99.179.39;s;7pkt 7fpkt", shape=hexagon, color=black];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 26.30.37.5:80}[93.5065%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8276%)&lt;BR/&gt; 1175: (3.44828%)&lt;BR/&gt; 19101: (1.72414%)&lt;BR/&gt; 4509: (1.72414%)&lt;BR/&gt; 4435: (1.72414%)&gt;];
}
1320--1442[label="1;1pkt 1fpkt"];
1320--3351[label="1;1pkt 1fpkt"];
1442--1914[label="0.285714;2pkt 2fpkt"];
1442--3351[label="1;7pkt 7fpkt"];
1914--3351[label="0.285714;2pkt 2fpkt"];
1914--3762[label="0.0555556;4pkt 4fpkt"];
1914--3785[label="0.0694444;5pkt 5fpkt"];
1914--3807[label="0.0555556;4pkt 4fpkt"];
1914--4431[label="0.037037;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="26.30.37.5" dst_port="80"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
1488[label="157.25.37.104;s;27pkt 27fpkt", shape=diamond, color=yellow];
1587[label="168.206.1.194;s;28pkt 28fpkt", shape=diamond, color=yellow];
1907[label="26.30.38.160;d;65pkt 65fpkt", shape=diamond, color=yellow];
2195[label="197.169.32.17;d;31pkt 31fpkt", shape=diamond, color=yellow];
3269[label="134.99.14.155;s;28pkt 28fpkt", shape=hexagon, color=black];
3364[label="134.112.98.5;s;51pkt 51fpkt", shape=hexagon, color=black];
3545[label="128.190.198.246;s;57pkt 57fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 26.30.38.160:80}[23.1047%]&lt;BR/&gt;{128.190.198.246:*, *:*}[20.5776%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8188%)&lt;BR/&gt; 1863: (1.0453%)&lt;BR/&gt; 53: (1.0453%)&lt;BR/&gt; 58259: (0.696864%)&lt;BR/&gt; 33171: (0.348432%)&gt;];
}
1488--1907[label="0.037037;1pkt 1fpkt"];
1488--2195[label="0.0740741;2pkt 2fpkt"];
1488--2909[label="0.148148;4pkt 4fpkt"];
1488--3356[label="0.037037;1pkt 1fpkt"];
1587--1822[label="1;1pkt 1fpkt"];
1587--1907[label="0.0357143;1pkt 1fpkt"];
1587--2444[label="0.0714286;2pkt 2fpkt"];
1587--2703[label="0.0714286;2pkt 2fpkt"];
1587--2990[label="0.0714286;2pkt 2fpkt"];
1587--3310[label="1;1pkt 1fpkt"];
1587--3356[label="0.0357143;1pkt 1fpkt"];
1587--3762[label="0.107143;3pkt 3fpkt"];
1587--3785[label="0.178571;5pkt 5fpkt"];
1587--3807[label="0.214286;6pkt 6fpkt"];
1907--1931[label="0.0806452;5pkt 5fpkt"];
1907--1967[label="0.4375;7pkt 7fpkt"];
1907--2689[label="0.0350877;2pkt 2fpkt"];
1907--3168[label="0.0153846;1pkt 1fpkt"];
1907--3269[label="0.0714286;2pkt 2fpkt"];
1907--3356[label="1;54pkt 54fpkt"];
1907--3364[label="0.0392157;2pkt 2fpkt"];
1907--3510[label="0.0153846;1pkt 1fpkt"];
1907--3545[label="0.0350877;2pkt 2fpkt"];
1907--3555[label="0.0877193;5pkt 5fpkt"];
1907--3639[label="0.0153846;1pkt 1fpkt"];
1907--3762[label="0.0923077;6pkt 6fpkt"];
1907--3785[label="0.184615;12pkt 12fpkt"];
1907--3807[label="0.184615;12pkt 12fpkt"];
1907--4302[label="0.0222222;1pkt 1fpkt"];
1907--4622[label="0.0625;1pkt 1fpkt"];
1907--5079[label="0.0769231;5pkt 5fpkt"];
1907--5259[label="0.0714286;3pkt 3fpkt"];
1907--5351[label="0.0357143;2pkt 2fpkt"];
1907--5759[label="0.0222222;1pkt 1fpkt"];
1907--6140[label="0.0769231;5pkt 5fpkt"];
1907--6232[label="0.0714286;3pkt 3fpkt"];
1907--6686[label="0.0769231;5pkt 5fpkt"];
2195--3785[label="0.0645161;2pkt 2fpkt"];
2195--3807[label="0.0967742;3pkt 3fpkt"];
3269--3356[label="0.0714286;2pkt 2fpkt"];
3269--3762[label="0.107143;3pkt 3fpkt"];
3269--3785[label="0.357143;10pkt 10fpkt"];
3269--3807[label="0.178571;5pkt 5fpkt"];
3364--3785[label="0.137255;7pkt 7fpkt"];
3364--3807[label="0.137255;7pkt 7fpkt"];
3545--3620[label="0.0606061;2pkt 2fpkt"];
3545--3781[label="0.0175439;1pkt 1fpkt"];
3545--3785[label="0.0701754;4pkt 4fpkt"];
3545--3806[label="0.0526316;3pkt 3fpkt"];
3545--3807[label="0.0877193;5pkt 5fpkt"];
3545--3852[label="0.0175439;1pkt 1fpkt"];
3545--3868[label="0.0526316;3pkt 3fpkt"];
3545--3902[label="0.0175439;1pkt 1fpkt"];
3545--3923[label="0.0526316;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="128.190.198.246"/>
      <filter dst_ip="26.30.38.160" dst_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1934[label="134.168.153.5;s;66pkt 66fpkt", shape=diamond, color=yellow];
3366[label="134.168.153.5;s;40pkt 40fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.168.153.5:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58231: (0.943396%)&lt;BR/&gt; 55681: (0.943396%)&lt;BR/&gt; 55333: (0.943396%)&lt;BR/&gt; 54525: (0.943396%)&gt;];
}
1934--3366[label="1;40pkt 40fpkt"];
1934--3781[label="0.030303;2pkt 2fpkt"];
1934--3806[label="0.0757576;5pkt 5fpkt"];
1934--3852[label="0.030303;2pkt 2fpkt"];
1934--3868[label="0.0757576;5pkt 5fpkt"];
1934--3902[label="0.030303;2pkt 2fpkt"];
1934--3923[label="0.0757576;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="134.168.153.5" src_port="80"/>
    </slice>
    <from sec="1189314059" usec="0"/>
    <to sec="1189314827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1940[label="76.18.29.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
3372[label="76.18.29.45;s;1pkt 1fpkt", shape=hexagon, color=black];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.18.29.45:12728, 168.206.4.242:1452}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12728: (50%)&lt;BR/&gt; 1452: (50%)&gt;];
}
1940--3372[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="1452" src_ip="76.18.29.45" src_port="12728"/>
    </slice>
    <from sec="1189314154" usec="0"/>
    <to sec="1189314605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.832594,1.46015,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1523[label="23.20.217.156;s;2pkt 2fpkt", shape=diamond, color=yellow];
3374[label="23.20.217.156;s;2pkt 2fpkt", shape=hexagon, color=black];
6085[label="23.20.217.156;2pkt 2fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.20.217.156:80, 128.190.86.228:46034}[50%]&lt;BR/&gt;{23.20.217.156:80, 128.190.86.228:46727}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46727: (25%)&lt;BR/&gt; 46034: (25%)&gt;];
}
1523--3374[label="1;2pkt 2fpkt"];
1523--3781[label="0.5;1pkt 1fpkt"];
1523--3852[label="0.5;1pkt 1fpkt"];
1523--3902[label="0.5;1pkt 1fpkt"];
1523--4976[label="1;2pkt 2fpkt"];
1523--6085[label="1;2pkt 2fpkt"];
3374--3781[label="0.5;1pkt 1fpkt"];
3374--3852[label="0.5;1pkt 1fpkt"];
3374--3902[label="0.5;1pkt 1fpkt"];
3374--4976[label="1;2pkt 2fpkt"];
3374--6085[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.86.228" dst_port="46727" src_ip="23.20.217.156" src_port="80"/>
      <filter dst_ip="128.190.86.228" dst_port="46034" src_ip="23.20.217.156" src_port="80"/>
    </slice>
    <from sec="1189314280" usec="0"/>
    <to sec="1189314595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
1807[label="157.25.78.8;s;25pkt 25fpkt", shape=diamond, color=yellow];
1989[label="75.97.181.119;d;2pkt 2fpkt", shape=diamond, color=yellow];
3386[label="75.97.181.119;d;2pkt 2fpkt", shape=hexagon, color=black];
3387[label="157.25.78.8;s;25pkt 25fpkt", shape=hexagon, color=black];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.78.8:*, 200.189.126.167:80}[68%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2041: (3.7037%)&lt;BR/&gt; 1997: (3.7037%)&lt;BR/&gt; 2841: (1.85185%)&lt;BR/&gt; 2838: (1.85185%)&gt;];
}
1807--1989[label="1;2pkt 2fpkt"];
1807--3386[label="1;2pkt 2fpkt"];
1807--3387[label="1;25pkt 25fpkt"];
1807--3785[label="0.6;15pkt 15fpkt"];
1989--3386[label="1;2pkt 2fpkt"];
1989--3387[label="1;2pkt 2fpkt"];
3386--3387[label="1;2pkt 2fpkt"];
3387--3785[label="0.6;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="200.189.126.167" dst_port="80" src_ip="157.25.78.8"/>
    </slice>
    <from sec="1189314461" usec="0"/>
    <to sec="1189314568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
1024[label="32.178.98.69;s;1718pkt 1718fpkt", shape=diamond, color=yellow];
3397[label="32.178.98.69;s;1350pkt 1350fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.178.98.69:1799, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1799: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
1024--3397[label="1;1350pkt 1350fpkt"];
1024--3786[label="0.0558789;96pkt 96fpkt"];
3397--3786[label="0.0711111;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="32.178.98.69" src_port="1799"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
485[label="128.190.125.97;d;244pkt 244fpkt", shape=diamond, color=yellow];
512[label="134.112.166.197;d;204pkt 204fpkt", shape=diamond, color=yellow];
601[label="26.25.189.122;s;109pkt 109fpkt", shape=diamond, color=yellow];
937[label="134.168.153.47;d;3pkt 3fpkt", shape=diamond, color=yellow];
956[label="25.3.105.241;s;5pkt 5fpkt", shape=diamond, color=yellow];
2735[label="76.240.161.84;s;47pkt 47fpkt", shape=diamond, color=yellow];
2911[label="26.25.189.122;s;22pkt 22fpkt", shape=hexagon, color=black];
3169[label="134.112.166.197;d;96pkt 96fpkt", shape=hexagon, color=black];
4203[label="223.187.40.36;11pkt 11fpkt", shape=pentagon, color=darkviolet];
4493[label="199.12.224.79;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.112.166.197:80}[39.1892%]&lt;BR/&gt;{26.25.189.122:*, 128.190.125.97:80}[25.6757%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7158%)&lt;BR/&gt; 808: (2.88204%)&lt;BR/&gt; 64403: (0.201072%)&lt;BR/&gt; 64320: (0.201072%)&lt;BR/&gt; 60476: (0.201072%)&gt;];
}
485--601[label="0.862385;94pkt 94fpkt"];
485--1646[label="0.0608108;9pkt 9fpkt"];
485--2911[label="0.636364;14pkt 14fpkt"];
485--3156[label="1;67pkt 67fpkt"];
485--3762[label="0.0491803;12pkt 12fpkt"];
485--3785[label="0.22541;55pkt 55fpkt"];
485--3807[label="0.0409836;10pkt 10fpkt"];
485--4493[label="0.6;3pkt 3fpkt"];
485--4668[label="0.142857;2pkt 2fpkt"];
512--601[label="0.0550459;6pkt 6fpkt"];
512--956[label="0.2;1pkt 1fpkt"];
512--1646[label="0.0202703;3pkt 3fpkt"];
512--1829[label="0.0526316;1pkt 1fpkt"];
512--2470[label="0.545455;6pkt 6fpkt"];
512--2735[label="0.0212766;1pkt 1fpkt"];
512--2851[label="0.00490196;1pkt 1fpkt"];
512--2911[label="0.363636;8pkt 8fpkt"];
512--3169[label="1;96pkt 96fpkt"];
512--3400[label="0.0686275;14pkt 14fpkt"];
512--3762[label="0.0735294;15pkt 15fpkt"];
512--3785[label="0.0441176;9pkt 9fpkt"];
512--3807[label="0.117647;24pkt 24fpkt"];
512--4115[label="0.148148;4pkt 4fpkt"];
512--4203[label="0.363636;4pkt 4fpkt"];
512--4289[label="0.132075;7pkt 7fpkt"];
512--4308[label="0.047619;2pkt 2fpkt"];
512--4668[label="0.285714;4pkt 4fpkt"];
512--5178[label="0.0238095;1pkt 1fpkt"];
512--5531[label="0.0454545;1pkt 1fpkt"];
512--5752[label="0.132075;7pkt 7fpkt"];
512--5760[label="0.047619;2pkt 2fpkt"];
512--6197[label="0.0238095;1pkt 1fpkt"];
512--6380[label="0.0454545;1pkt 1fpkt"];
512--6497[label="0.0487805;2pkt 2fpkt"];
512--6791[label="0.0454545;1pkt 1fpkt"];
601--762[label="0.0733945;8pkt 8fpkt"];
601--3401[label="0.00917431;1pkt 1fpkt"];
601--3785[label="0.431193;47pkt 47fpkt"];
601--3807[label="0.0366972;4pkt 4fpkt"];
937--956[label="0.333333;1pkt 1fpkt"];
937--3762[label="0.333333;1pkt 1fpkt"];
956--1206[label="0.4;2pkt 2fpkt"];
956--3169[label="0.2;1pkt 1fpkt"];
956--3185[label="0.4;2pkt 2fpkt"];
2735--2965[label="0.0212766;1pkt 1fpkt"];
2735--3514[label="0.723404;34pkt 34fpkt"];
2735--3723[label="0.0212766;1pkt 1fpkt"];
2911--3156[label="0.636364;14pkt 14fpkt"];
2911--3169[label="0.363636;8pkt 8fpkt"];
2911--3762[label="0.5;11pkt 11fpkt"];
3169--3400[label="0.0729167;7pkt 7fpkt"];
3169--3762[label="0.15625;15pkt 15fpkt"];
3169--4203[label="0.363636;4pkt 4fpkt"];
3169--4289[label="0.0566038;3pkt 3fpkt"];
3169--4308[label="0.0238095;1pkt 1fpkt"];
3169--4668[label="0.142857;2pkt 2fpkt"];
3169--5178[label="0.0238095;1pkt 1fpkt"];
3169--5752[label="0.0566038;3pkt 3fpkt"];
3169--5760[label="0.0238095;1pkt 1fpkt"];
3169--6197[label="0.0238095;1pkt 1fpkt"];
3169--6497[label="0.0243902;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.166.197" dst_port="80"/>
      <filter dst_ip="128.190.125.97" dst_port="80" src_ip="26.25.189.122"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
380[label="198.26.16.27;s;1pkt 1fpkt", shape=diamond, color=yellow];
736[label="170.233.2.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
3406[label="198.26.16.27;s;1pkt 1fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.26.16.27:20258, 170.233.2.106:1033}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20258: (50%)&lt;BR/&gt; 1033: (50%)&gt;];
}
380--736[label="1;1pkt 1fpkt"];
380--3406[label="1;1pkt 1fpkt"];
736--3406[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.233.2.106" dst_port="1033" src_ip="198.26.16.27" src_port="20258"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
747[label="202.217.71.0;d;4pkt 4fpkt", shape=diamond, color=yellow];
3408[label="202.217.71.0;d;4pkt 4fpkt", shape=hexagon, color=black];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.166.14:554, 202.217.71.0:3957}[25%]&lt;BR/&gt;{134.112.166.14:19846, 202.217.71.0:6972}[25%]&lt;BR/&gt;{134.112.166.14:23524, 202.217.71.0:6970}[25%]&lt;BR/&gt;{134.112.166.14:28042, 202.217.71.0:6976}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28042: (12.5%)&lt;BR/&gt; 23524: (12.5%)&lt;BR/&gt; 19846: (12.5%)&lt;BR/&gt; 6976: (12.5%)&lt;BR/&gt; 6972: (12.5%)&gt;];
}
747--3408[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="202.217.71.0" dst_port="6976" src_ip="134.112.166.14" src_port="28042"/>
      <filter dst_ip="202.217.71.0" dst_port="6970" src_ip="134.112.166.14" src_port="23524"/>
      <filter dst_ip="202.217.71.0" dst_port="6972" src_ip="134.112.166.14" src_port="19846"/>
      <filter dst_ip="202.217.71.0" dst_port="3957" src_ip="134.112.166.14" src_port="554"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
787[label="168.206.6.87;s;379pkt 379fpkt", shape=diamond, color=yellow];
3411[label="168.206.6.87;s;333pkt 333fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.87:5367, *:*}[34.0369%]&lt;BR/&gt;{168.206.6.87:5363, *:*}[29.2876%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5367: (16.5028%)&lt;BR/&gt; 5363: (15.2388%)&lt;BR/&gt; 3953: (9.83146%)&lt;BR/&gt; 0: (9.41011%)&lt;BR/&gt; 3912: (1.89607%)&gt;];
}
787--3411[label="1;333pkt 333fpkt"];
787--3762[label="0.00263852;1pkt 1fpkt"];
787--3807[label="0.00527704;2pkt 2fpkt"];
3411--3762[label="0.003003;1pkt 1fpkt"];
3411--3807[label="0.003003;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.206.6.87" src_port="5367"/>
      <filter src_ip="168.206.6.87" src_port="5363"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,501,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
1604[label="193.81.165.155;d;75pkt 75fpkt", shape=diamond, color=yellow];
3423[label="193.81.165.155;d;67pkt 67fpkt", shape=hexagon, color=black];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.106.239:21, 193.81.165.155:*}[85.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (42.6056%)&lt;BR/&gt; 63376: (0.704225%)&lt;BR/&gt; 63026: (0.704225%)&lt;BR/&gt; 62843: (0.704225%)&lt;BR/&gt; 62696: (0.704225%)&gt;];
}
1604--3423[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="193.81.165.155" src_ip="217.155.106.239" src_port="21"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
1849[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
1850[label="128.190.17.116;s;1pkt 1fpkt", shape=diamond, color=yellow];
3329[label="128.190.17.116;s;1pkt 1fpkt", shape=hexagon, color=black];
3425[label="192.168.128.255;d;1pkt 1fpkt", shape=hexagon, color=black];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.17.116:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
1849--1850[label="1;1pkt 1fpkt"];
1849--3329[label="1;1pkt 1fpkt"];
1849--3425[label="1;1pkt 1fpkt"];
1850--3329[label="1;1pkt 1fpkt"];
1850--3425[label="1;1pkt 1fpkt"];
3329--3425[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="128.190.17.116" src_port="4445"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
1854[label="33.117.150.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
1855[label="134.99.225.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
3427[label="33.117.150.58;d;1pkt 1fpkt", shape=hexagon, color=black];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.225.92:1068, 33.117.150.58:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1068: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1854--1855[label="1;1pkt 1fpkt"];
1854--3427[label="1;1pkt 1fpkt"];
1855--3427[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.117.150.58" dst_port="554" src_ip="134.99.225.92" src_port="1068"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
381[label="134.112.166.34;d;617pkt 617fpkt", shape=diamond, color=yellow];
742[label="216.219.192.86;d;395pkt 395fpkt", shape=diamond, color=yellow];
786[label="128.190.80.41;d;238pkt 238fpkt", shape=diamond, color=yellow];
2873[label="134.112.166.34;d;77pkt 77fpkt", shape=hexagon, color=black];
3976[label="217.135.9.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
4196[label="200.147.22.35;42pkt 42fpkt", shape=pentagon, color=darkviolet];
4252[label="77.128.159.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
4754[label="76.0.133.122;10pkt 10fpkt", shape=pentagon, color=darkviolet];
4866[label="195.87.155.139;8pkt 8fpkt", shape=pentagon, color=darkviolet];
5348[label="195.87.56.219;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5447[label="79.6.163.234;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5584[label="217.135.9.5;5pkt 5fpkt", shape=invtriangle, color=brown];
5691[label="200.147.22.35;43pkt 43fpkt", shape=invtriangle, color=brown];
6284[label="195.87.56.219;7pkt 7fpkt", shape=invtriangle, color=brown];
6333[label="79.6.163.234;6pkt 6fpkt", shape=invtriangle, color=brown];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 134.112.166.34:25}[27.735%]&lt;BR/&gt;{*:25, 216.219.192.86:*}[20.2619%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.4167%)&lt;BR/&gt; 113: (1.8015%)&lt;BR/&gt; 0: (1.0877%)&lt;BR/&gt; 38955: (0.135962%)&lt;BR/&gt; 33966: (0.135962%)&gt;];
}
381--1471[label="0.0547945;4pkt 4fpkt"];
381--2851[label="0.00162075;1pkt 1fpkt"];
381--2873[label="1;77pkt 77fpkt"];
381--3455[label="0.0535714;3pkt 3fpkt"];
381--3761[label="0.0275527;17pkt 17fpkt"];
381--3976[label="1;6pkt 6fpkt"];
381--4196[label="0.0714286;3pkt 3fpkt"];
381--4590[label="0.4;8pkt 8fpkt"];
381--4608[label="0.529412;9pkt 9fpkt"];
381--4754[label="0.4;4pkt 4fpkt"];
381--4866[label="0.25;2pkt 2fpkt"];
381--5348[label="0.428571;3pkt 3fpkt"];
381--5447[label="1;6pkt 6fpkt"];
381--5584[label="1;5pkt 5fpkt"];
381--5691[label="0.0697674;3pkt 3fpkt"];
381--5895[label="0.4;8pkt 8fpkt"];
381--5902[label="0.529412;9pkt 9fpkt"];
381--6284[label="0.428571;3pkt 3fpkt"];
381--6333[label="1;6pkt 6fpkt"];
381--6566[label="0.4;8pkt 8fpkt"];
742--2900[label="0.036036;4pkt 4fpkt"];
742--3681[label="0.0465116;4pkt 4fpkt"];
742--3761[label="0.0151899;6pkt 6fpkt"];
742--4092[label="0.0183486;4pkt 4fpkt"];
742--4196[label="0.119048;5pkt 5fpkt"];
742--4252[label="0.5;2pkt 2fpkt"];
742--4866[label="0.125;1pkt 1fpkt"];
742--4996[label="0.0625;1pkt 1fpkt"];
742--5348[label="0.285714;2pkt 2fpkt"];
742--5644[label="0.0184332;4pkt 4fpkt"];
742--5691[label="0.116279;5pkt 5fpkt"];
742--6284[label="0.285714;2pkt 2fpkt"];
742--6440[label="0.0183486;4pkt 4fpkt"];
786--3761[label="0.0588235;14pkt 14fpkt"];
786--4196[label="0.047619;2pkt 2fpkt"];
786--5033[label="0.666667;6pkt 6fpkt"];
786--5528[label="0.966667;58pkt 58fpkt"];
786--5691[label="0.0465116;2pkt 2fpkt"];
786--6112[label="0.666667;6pkt 6fpkt"];
786--6673[label="0.666667;6pkt 6fpkt"];
2873--3455[label="0.0178571;1pkt 1fpkt"];
2873--3761[label="0.220779;17pkt 17fpkt"];
2873--4196[label="0.0714286;3pkt 3fpkt"];
2873--4866[label="0.125;1pkt 1fpkt"];
2873--5348[label="0.142857;1pkt 1fpkt"];
2873--5691[label="0.0697674;3pkt 3fpkt"];
2873--6284[label="0.142857;1pkt 1fpkt"];
3976--5584[label="1;5pkt 5fpkt"];
4196--5691[label="1;42pkt 42fpkt"];
5348--6284[label="1;7pkt 7fpkt"];
5447--6333[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.166.34" dst_port="25"/>
      <filter dst_ip="216.219.192.86" src_port="25"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1707[label="21.153.39.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
3460[label="21.153.39.208;d;1pkt 1fpkt", shape=hexagon, color=black];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.131.36.212:6881, 21.153.39.208:63659}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63659: (50%)&lt;BR/&gt; 6881: (50%)&gt;];
}
1707--3460[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="21.153.39.208" dst_port="63659" src_ip="134.131.36.212" src_port="6881"/>
    </slice>
    <from sec="1189314034" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.649419,1.52726,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.69.180.187"/>
      <from sec="1189314209" usec="0"/>
      <to sec="1189314647" usec="0"/>
    </slice>
    <from sec="1189314209" usec="0"/>
    <to sec="1189314647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
2197[label="134.112.218.124;d;54pkt 54fpkt", shape=diamond, color=yellow];
3471[label="134.112.218.124;d;54pkt 54fpkt", shape=hexagon, color=black];
5062[label="202.123.247.170;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6130[label="202.123.247.170;41pkt 41fpkt", shape=invtriangle, color=brown];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.123.247.170:80, 134.112.218.124:*}[75.9259%]&lt;BR/&gt;{202.123.227.192:80, 134.112.218.124:*}[24.0741%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65497: (1.05263%)&lt;BR/&gt; 64898: (1.05263%)&lt;BR/&gt; 64649: (1.05263%)&lt;BR/&gt; 64127: (1.05263%)&gt;];
}
2197--3471[label="1;54pkt 54fpkt"];
2197--3781[label="0.111111;6pkt 6fpkt"];
2197--3806[label="0.0925926;5pkt 5fpkt"];
2197--3852[label="0.111111;6pkt 6fpkt"];
2197--3868[label="0.0925926;5pkt 5fpkt"];
2197--3902[label="0.111111;6pkt 6fpkt"];
2197--3923[label="0.0925926;5pkt 5fpkt"];
2197--5062[label="1;41pkt 41fpkt"];
2197--6130[label="1;41pkt 41fpkt"];
3471--3781[label="0.111111;6pkt 6fpkt"];
3471--3806[label="0.0925926;5pkt 5fpkt"];
3471--3852[label="0.111111;6pkt 6fpkt"];
3471--3868[label="0.0925926;5pkt 5fpkt"];
3471--3902[label="0.111111;6pkt 6fpkt"];
3471--3923[label="0.0925926;5pkt 5fpkt"];
3471--5062[label="1;41pkt 41fpkt"];
3471--6130[label="1;41pkt 41fpkt"];
5062--6130[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.218.124" src_ip="202.123.247.170" src_port="80"/>
      <filter dst_ip="134.112.218.124" src_ip="202.123.227.192" src_port="80"/>
    </slice>
    <from sec="1189314287" usec="0"/>
    <to sec="1189314764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
2199[label="134.100.169.168;d;76pkt 76fpkt", shape=diamond, color=yellow];
2200[label="75.52.164.144;s;74pkt 74fpkt", shape=diamond, color=yellow];
3472[label="134.100.169.168;d;40pkt 40fpkt", shape=hexagon, color=black];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.52.164.144:*, 134.100.169.168:80}[97.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2105%)&lt;BR/&gt; 1943: (0.789474%)&lt;BR/&gt; 1927: (0.789474%)&lt;BR/&gt; 1912: (0.789474%)&lt;BR/&gt; 1854: (0.789474%)&gt;];
}
2199--2200[label="1;74pkt 74fpkt"];
2199--3472[label="1;40pkt 40fpkt"];
2199--3785[label="0.302632;23pkt 23fpkt"];
2199--3807[label="0.0394737;3pkt 3fpkt"];
2200--3472[label="0.975;39pkt 39fpkt"];
2200--3785[label="0.310811;23pkt 23fpkt"];
2200--3807[label="0.0405405;3pkt 3fpkt"];
3472--3785[label="0.575;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="134.100.169.168" dst_port="80" src_ip="75.52.164.144"/>
    </slice>
    <from sec="1189314297" usec="0"/>
    <to sec="1189314820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
1968[label="195.45.144.163;d;96pkt 96fpkt", shape=diamond, color=yellow];
3479[label="195.45.144.163;d;96pkt 96fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.69.39:*, 195.45.144.163:113}[50%]&lt;BR/&gt;{128.190.69.39:25, 195.45.144.163:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&lt;BR/&gt; 3936: (0.520833%)&lt;BR/&gt; 3935: (0.520833%)&lt;BR/&gt; 3838: (0.520833%)&gt;];
}
1968--3479[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="195.45.144.163" src_ip="128.190.69.39" src_port="25"/>
      <filter dst_ip="195.45.144.163" dst_port="113" src_ip="128.190.69.39"/>
    </slice>
    <from sec="1189314386" usec="0"/>
    <to sec="1189314479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
1990[label="202.219.178.6;d;2pkt 2fpkt", shape=diamond, color=yellow];
2187[label="134.99.50.176;s;19pkt 19fpkt", shape=diamond, color=yellow];
2222[label="193.40.151.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
3482[label="193.40.151.135;d;2pkt 2fpkt", shape=hexagon, color=black];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.50.176:*, 193.40.151.39:80}[21.0526%]&lt;BR/&gt;{134.99.50.176:*, 217.252.192.84:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (18%)&lt;BR/&gt; 8685: (6%)&lt;BR/&gt; 8682: (6%)&lt;BR/&gt; 1427: (6%)&lt;BR/&gt; 1426: (6%)&gt;];
}
1990--2187[label="1;2pkt 2fpkt"];
2187--2222[label="1;2pkt 2fpkt"];
2187--3482[label="1;2pkt 2fpkt"];
2187--3785[label="0.0526316;1pkt 1fpkt"];
2222--3482[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.252.192.84" dst_port="80" src_ip="134.99.50.176"/>
      <filter dst_ip="193.40.151.39" dst_port="80" src_ip="134.99.50.176"/>
    </slice>
    <from sec="1189314082" usec="0"/>
    <to sec="1189314683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
2021[label="7.125.212.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
3487[label="7.125.212.3;d;1pkt 1fpkt", shape=hexagon, color=black];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.106.238:8080, 7.125.212.3:2926}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2926: (50%)&gt;];
}
2021--3487[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="7.125.212.3" dst_port="2926" src_ip="217.155.106.238" src_port="8080"/>
    </slice>
    <from sec="1189314512" usec="0"/>
    <to sec="1189314536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
2275[label="23.20.223.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
3493[label="23.20.223.14;d;1pkt 1fpkt", shape=hexagon, color=black];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.6.238:50269, 23.20.223.14:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50269: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2275--3493[label="1;1pkt 1fpkt"];
2275--3785[label="1;1pkt 1fpkt"];
3493--3785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.20.223.14" dst_port="80" src_ip="168.206.6.238" src_port="50269"/>
    </slice>
    <from sec="1189314568" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
771[label="217.155.108.152;d;418pkt 418fpkt", shape=diamond, color=yellow];
3513[label="217.155.108.152;d;417pkt 417fpkt", shape=hexagon, color=black];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 217.155.108.152:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
771--1259[label="0.00239234;1pkt 1fpkt"];
771--3513[label="1;417pkt 417fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.108.152"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
2338[label="128.190.80.137;d;5pkt 5fpkt", shape=diamond, color=yellow];
2340[label="38.26.73.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
3516[label="128.190.80.137;d;5pkt 5fpkt", shape=hexagon, color=black];
3593[label="38.26.73.141;s;1pkt 1fpkt", shape=hexagon, color=black];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.237.17.65:123, 128.190.80.137:123}[20%]&lt;BR/&gt;{218.117.181.96:0, 128.190.80.137:0}[20%]&lt;BR/&gt;{38.26.73.141:123, 128.190.80.137:123}[20%]&lt;BR/&gt;{8.27.22.208:3747, 128.190.80.137:123}[20%]&lt;BR/&gt;{8.27.22.208:3748, 128.190.80.137:123}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (66.6667%)&lt;BR/&gt; 0: (16.6667%)&lt;BR/&gt; 3748: (8.33333%)&lt;BR/&gt; 3747: (8.33333%)&gt;];
}
2338--2340[label="1;1pkt 1fpkt"];
2338--3516[label="1;5pkt 5fpkt"];
2338--3593[label="1;1pkt 1fpkt"];
2340--3516[label="1;1pkt 1fpkt"];
2340--3593[label="1;1pkt 1fpkt"];
3516--3593[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.80.137" dst_port="123" src_ip="8.27.22.208" src_port="3748"/>
      <filter dst_ip="128.190.80.137" dst_port="123" src_ip="8.27.22.208" src_port="3747"/>
      <filter dst_ip="128.190.80.137" dst_port="123" src_ip="38.26.73.141" src_port="123"/>
      <filter dst_ip="128.190.80.137" src_ip="218.117.181.96"/>
      <filter dst_ip="128.190.80.137" dst_port="123" src_ip="77.237.17.65" src_port="123"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
2284[label="203.213.124.41;d;52pkt 52fpkt", shape=diamond, color=yellow];
3569[label="203.213.124.41;d;43pkt 43fpkt", shape=hexagon, color=black];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.86.144.71:*, 203.213.124.41:80}[88.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 443: (5.26316%)&lt;BR/&gt; 9288: (1.05263%)&lt;BR/&gt; 9287: (1.05263%)&lt;BR/&gt; 9286: (1.05263%)&gt;];
}
2284--3569[label="1;43pkt 43fpkt"];
2284--3785[label="0.192308;10pkt 10fpkt"];
2284--3807[label="0.25;13pkt 13fpkt"];
3569--3785[label="0.232558;10pkt 10fpkt"];
3569--3807[label="0.302326;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="203.213.124.41" dst_port="80" src_ip="129.86.144.71"/>
    </slice>
    <from sec="1189314578" usec="0"/>
    <to sec="1189314765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2314[label="36.210.99.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
3573[label="36.210.99.193;d;1pkt 1fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.86.144.65:8192, 36.210.99.193:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8192: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2314--3573[label="1;1pkt 1fpkt"];
2314--3807[label="1;1pkt 1fpkt"];
3573--3807[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="36.210.99.193" dst_port="80" src_ip="129.86.144.65" src_port="8192"/>
    </slice>
    <from sec="1189314615" usec="0"/>
    <to sec="1189314809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2354[label="134.99.208.80;s;95pkt 95fpkt", shape=diamond, color=yellow];
3605[label="134.99.208.80;s;95pkt 95fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.208.80:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2354--3605[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter src_ip="134.99.208.80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
1404[label="193.226.141.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
3610[label="193.226.141.64;s;1pkt 1fpkt", shape=hexagon, color=black];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.226.141.64:15698, 168.206.4.242:4811}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15698: (50%)&lt;BR/&gt; 4811: (50%)&gt;];
}
1404--3610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="4811" src_ip="193.226.141.64" src_port="15698"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
1635[label="217.155.108.54;s;27pkt 27fpkt", shape=diamond, color=yellow];
3612[label="217.155.108.54;s;27pkt 27fpkt", shape=hexagon, color=black];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.155.108.54:0, *:0}[51.8519%]&lt;BR/&gt;{217.155.108.54:22, 217.217.102.93:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (51.8519%)&lt;BR/&gt; 22: (20.3704%)&lt;BR/&gt; 80: (3.7037%)&lt;BR/&gt; 53020: (1.85185%)&lt;BR/&gt; 53019: (1.85185%)&gt;];
}
1635--3612[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="217.217.102.93" src_ip="217.155.108.54" src_port="22"/>
      <filter src_ip="217.155.108.54"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
1509[label="20.17.18.238;d;170pkt 170fpkt", shape=diamond, color=yellow];
3640[label="20.17.18.238;d;170pkt 170fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 20.17.18.238:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1509--3640[label="1;170pkt 170fpkt"];
</description>
    <slice>
      <filter dst_ip="20.17.18.238"/>
    </slice>
    <from sec="1189314246" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
1563[label="193.223.149.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
1564[label="157.25.187.76;s;7pkt 7fpkt", shape=diamond, color=yellow];
2481[label="202.165.167.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
3643[label="202.165.167.104;d;1pkt 1fpkt", shape=hexagon, color=black];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.187.76:13322, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13322: (45%)&lt;BR/&gt; 13559: (15%)&lt;BR/&gt; 13880: (10%)&lt;BR/&gt; 47798: (5%)&lt;BR/&gt; 45306: (5%)&gt;];
}
1563--1564[label="1;1pkt 1fpkt"];
1564--2481[label="1;1pkt 1fpkt"];
1564--3643[label="1;1pkt 1fpkt"];
2481--3643[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="157.25.187.76" src_port="13322"/>
    </slice>
    <from sec="1189314335" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
2286[label="23.227.52.49;d;2pkt 2fpkt", shape=diamond, color=yellow];
3648[label="23.227.52.49;d;2pkt 2fpkt", shape=hexagon, color=black];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.76.4:25, 23.227.52.49:14228}[50%]&lt;BR/&gt;{172.223.27.170:25, 23.227.52.49:35168}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 35168: (25%)&lt;BR/&gt; 14228: (25%)&gt;];
}
2286--3648[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="23.227.52.49" dst_port="35168" src_ip="172.223.27.170" src_port="25"/>
      <filter dst_ip="23.227.52.49" dst_port="14228" src_ip="134.99.76.4" src_port="25"/>
    </slice>
    <from sec="1189314579" usec="0"/>
    <to sec="1189314732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
2497[label="20.40.163.107;s;508pkt 508fpkt", shape=diamond, color=yellow];
3649[label="20.40.163.107;s;508pkt 508fpkt", shape=hexagon, color=black];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.40.163.107:*, *:139}[50%]&lt;BR/&gt;{20.40.163.107:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 4386: (0.0984252%)&lt;BR/&gt; 4380: (0.0984252%)&lt;BR/&gt; 4374: (0.0984252%)&gt;];
}
2497--3649[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="20.40.163.107"/>
      <filter dst_port="139" src_ip="20.40.163.107"/>
    </slice>
    <from sec="1189314597" usec="0"/>
    <to sec="1189314819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
557[label="96.154.188.5;d;316pkt 316fpkt", shape=diamond, color=yellow];
643[label="128.190.7.10;s;168pkt 168fpkt", shape=diamond, color=yellow];
874[label="134.112.133.157;s;47pkt 47fpkt", shape=diamond, color=yellow];
914[label="134.112.77.244;s;84pkt 84fpkt", shape=diamond, color=yellow];
2108[label="128.190.16.8;s;115pkt 115fpkt", shape=diamond, color=yellow];
2693[label="38.16.58.205;d;18pkt 18fpkt", shape=diamond, color=yellow];
2770[label="216.156.80.42;d;31pkt 31fpkt", shape=diamond, color=yellow];
3255[label="96.154.188.5;d;198pkt 198fpkt", shape=hexagon, color=black];
3538[label="128.190.16.8;s;109pkt 109fpkt", shape=hexagon, color=black];
3656[label="216.156.80.42;d;31pkt 31fpkt", shape=hexagon, color=black];
4900[label="134.112.21.144;24pkt 24fpkt", shape=pentagon, color=darkviolet];
5331[label="128.190.17.216;25pkt 25fpkt", shape=pentagon, color=darkviolet];
6275[label="128.190.17.216;25pkt 25fpkt", shape=invtriangle, color=brown];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.7.10:*, 96.154.188.5:80}[27.972%]&lt;BR/&gt;{128.190.16.8:*, *:*}[20.1049%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.9395%)&lt;BR/&gt; 443: (6.84299%)&lt;BR/&gt; 8297: (0.839631%)&lt;BR/&gt; 0: (0.419815%)&lt;BR/&gt; 55502: (0.251889%)&gt;];
}
557--643[label="0.952381;160pkt 160fpkt"];
557--842[label="0.056962;18pkt 18fpkt"];
557--874[label="0.0212766;1pkt 1fpkt"];
557--914[label="0.0357143;3pkt 3fpkt"];
557--1153[label="0.333333;26pkt 26fpkt"];
557--1677[label="0.111111;6pkt 6fpkt"];
557--2108[label="0.426087;49pkt 49fpkt"];
557--2885[label="0.00316456;1pkt 1fpkt"];
557--3168[label="0.00949367;3pkt 3fpkt"];
557--3255[label="1;198pkt 198fpkt"];
557--3538[label="0.449541;49pkt 49fpkt"];
557--3762[label="0.00949367;3pkt 3fpkt"];
557--3785[label="0.155063;49pkt 49fpkt"];
557--3807[label="0.0601266;19pkt 19fpkt"];
557--4176[label="0.111111;6pkt 6fpkt"];
557--4900[label="0.291667;7pkt 7fpkt"];
557--5331[label="0.04;1pkt 1fpkt"];
557--5492[label="0.0333333;3pkt 3fpkt"];
557--5680[label="0.111111;6pkt 6fpkt"];
557--6275[label="0.04;1pkt 1fpkt"];
557--6458[label="0.111111;6pkt 6fpkt"];
643--2597[label="0.0126582;1pkt 1fpkt"];
643--3255[label="0.434524;73pkt 73fpkt"];
643--3785[label="0.27381;46pkt 46fpkt"];
643--3807[label="0.077381;13pkt 13fpkt"];
874--1457[label="1;33pkt 33fpkt"];
874--2693[label="0.222222;4pkt 4fpkt"];
874--3255[label="0.0212766;1pkt 1fpkt"];
874--3762[label="0.0212766;1pkt 1fpkt"];
874--3781[label="0.0851064;4pkt 4fpkt"];
874--3806[label="0.0212766;1pkt 1fpkt"];
874--3852[label="0.0851064;4pkt 4fpkt"];
874--3868[label="0.0212766;1pkt 1fpkt"];
874--3902[label="0.0851064;4pkt 4fpkt"];
874--3923[label="0.0212766;1pkt 1fpkt"];
914--1151[label="0.380952;32pkt 32fpkt"];
914--3038[label="0.0119048;1pkt 1fpkt"];
914--3255[label="0.0357143;3pkt 3fpkt"];
914--3762[label="0.0119048;1pkt 1fpkt"];
914--5492[label="1;84pkt 84fpkt"];
2108--2770[label="1;31pkt 31fpkt"];
2108--2899[label="0.0125;1pkt 1fpkt"];
2108--3071[label="0.00869565;1pkt 1fpkt"];
2108--3139[label="0.0222222;1pkt 1fpkt"];
2108--3255[label="0.417391;48pkt 48fpkt"];
2108--3538[label="1;109pkt 109fpkt"];
2108--3656[label="1;31pkt 31fpkt"];
2108--3762[label="0.0173913;2pkt 2fpkt"];
2108--3785[label="0.0956522;11pkt 11fpkt"];
2108--3807[label="0.0956522;11pkt 11fpkt"];
2693--3362[label="0.5;9pkt 9fpkt"];
2693--3781[label="0.111111;2pkt 2fpkt"];
2693--3806[label="0.0555556;1pkt 1fpkt"];
2693--3852[label="0.111111;2pkt 2fpkt"];
2693--3868[label="0.0555556;1pkt 1fpkt"];
2693--3902[label="0.111111;2pkt 2fpkt"];
2693--3923[label="0.0555556;1pkt 1fpkt"];
2693--4727[label="0.777778;14pkt 14fpkt"];
2770--3538[label="0.806452;25pkt 25fpkt"];
2770--3656[label="1;31pkt 31fpkt"];
2770--3807[label="0.290323;9pkt 9fpkt"];
3255--3538[label="0.440367;48pkt 48fpkt"];
3255--3762[label="0.0151515;3pkt 3fpkt"];
3255--3785[label="0.010101;2pkt 2fpkt"];
3255--3807[label="0.00505051;1pkt 1fpkt"];
3255--4176[label="0.111111;6pkt 6fpkt"];
3255--4900[label="0.166667;4pkt 4fpkt"];
3255--5331[label="0.04;1pkt 1fpkt"];
3255--5492[label="0.0333333;3pkt 3fpkt"];
3255--5680[label="0.111111;6pkt 6fpkt"];
3255--6275[label="0.04;1pkt 1fpkt"];
3255--6458[label="0.111111;6pkt 6fpkt"];
3538--3656[label="0.806452;25pkt 25fpkt"];
3538--3762[label="0.0183486;2pkt 2fpkt"];
3538--3785[label="0.100917;11pkt 11fpkt"];
3538--3807[label="0.100917;11pkt 11fpkt"];
3656--3807[label="0.290323;9pkt 9fpkt"];
5331--6275[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_ip="128.190.16.8"/>
      <filter dst_ip="96.154.188.5" dst_port="80" src_ip="128.190.7.10"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
827[label="168.206.244.244;d;388pkt 388fpkt", shape=diamond, color=yellow];
2582[label="77.150.58.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
3666[label="77.150.58.131;s;2pkt 2fpkt", shape=hexagon, color=black];
4450[label="25.3.110.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 168.206.244.244:80}[98.4576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3655%)&lt;BR/&gt; 33434: (0.380711%)&lt;BR/&gt; 29912: (0.380711%)&lt;BR/&gt; 2540: (0.380711%)&lt;BR/&gt; 2539: (0.380711%)&gt;];
}
827--1562[label="0.00393701;1pkt 1fpkt"];
827--1646[label="0.101351;15pkt 15fpkt"];
827--2133[label="0.010989;1pkt 1fpkt"];
827--2582[label="1;2pkt 2fpkt"];
827--3666[label="1;2pkt 2fpkt"];
827--3762[label="0.064433;25pkt 25fpkt"];
827--3785[label="0.0541237;21pkt 21fpkt"];
827--3807[label="0.0798969;31pkt 31fpkt"];
827--3995[label="0.1;1pkt 1fpkt"];
827--4450[label="0.5;1pkt 1fpkt"];
827--4838[label="1;3pkt 3fpkt"];
827--5178[label="0.0238095;1pkt 1fpkt"];
827--6197[label="0.0238095;1pkt 1fpkt"];
2582--3666[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.244.244" dst_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
2826[label="204.199.149.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
3671[label="204.199.149.96;s;1pkt 1fpkt", shape=hexagon, color=black];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.199.149.96:20751, 217.155.106.246:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20751: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
2826--3671[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.106.246" dst_port="8080" src_ip="204.199.149.96" src_port="20751"/>
    </slice>
    <from sec="1189314772" usec="0"/>
    <to sec="1189314800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.718743,1.46661,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
2840[label="23.20.220.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
3674[label="23.20.220.134;d;1pkt 1fpkt", shape=hexagon, color=black];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.86.228:47897, 23.20.220.134:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47897: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2840--3674[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="23.20.220.134" dst_port="80" src_ip="128.190.86.228" src_port="47897"/>
    </slice>
    <from sec="1189314799" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_352{
style=filled;
color=gray75;
1286[label="39.40.97.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
3111[label="39.40.97.58;s;1pkt 1fpkt", shape=hexagon, color=black];
4363[label="39.40.97.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5785[label="39.40.97.58;1pkt 1fpkt", shape=invtriangle, color=brown];
stat352[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.40.97.58:1076, 168.206.244.245:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1076: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1286--2855[label="1;1pkt 1fpkt"];
1286--3111[label="1;1pkt 1fpkt"];
1286--3685[label="1;1pkt 1fpkt"];
1286--4363[label="1;1pkt 1fpkt"];
1286--5785[label="1;1pkt 1fpkt"];
3111--3685[label="1;1pkt 1fpkt"];
3111--4363[label="1;1pkt 1fpkt"];
3111--5785[label="1;1pkt 1fpkt"];
4363--5785[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.244.245" dst_port="80" src_ip="39.40.97.58" src_port="1076"/>
    </slice>
    <from sec="1189314183" usec="0"/>
    <to sec="1189314341" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_366{
style=filled;
color=gray75;
1045[label="23.115.123.124;d;1531pkt 1531fpkt", shape=diamond, color=yellow];
1691[label="36.107.222.240;d;79pkt 79fpkt", shape=diamond, color=yellow];
3042[label="23.115.123.124;d;566pkt 566fpkt", shape=hexagon, color=black];
3266[label="36.107.222.240;d;79pkt 79fpkt", shape=hexagon, color=black];
4947[label="170.233.69.150;36pkt 36fpkt", shape=pentagon, color=darkviolet];
stat366[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.2.179:*, 23.115.123.124:53}[91.6109%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.399%)&lt;BR/&gt; 25: (1.92056%)&lt;BR/&gt; 113: (1.61502%)&lt;BR/&gt; 58000: (0.611087%)&lt;BR/&gt; 2703: (0.0872981%)&gt;];
}
1045--1134[label="0.00243902;1pkt 1fpkt"];
1045--1178[label="0.00362319;1pkt 1fpkt"];
1045--1231[label="0.00699301;1pkt 1fpkt"];
1045--1838[label="0.0030581;1pkt 1fpkt"];
1045--2054[label="0.00862069;1pkt 1fpkt"];
1045--2137[label="0.00342466;1pkt 1fpkt"];
1045--2679[label="0.00483092;1pkt 1fpkt"];
1045--2701[label="0.00531915;1pkt 1fpkt"];
1045--3042[label="1;566pkt 566fpkt"];
1045--3309[label="0.00347222;1pkt 1fpkt"];
1045--3410[label="0.0103093;1pkt 1fpkt"];
1045--3582[label="0.000775194;1pkt 1fpkt"];
1045--3778[label="0.176768;105pkt 105fpkt"];
1045--3794[label="0.00130634;2pkt 2fpkt"];
1045--3818[label="0.00130634;2pkt 2fpkt"];
1045--3851[label="0.00130634;2pkt 2fpkt"];
1045--3874[label="0.00130634;2pkt 2fpkt"];
1045--3901[label="0.00130634;2pkt 2fpkt"];
1045--3922[label="0.00130634;2pkt 2fpkt"];
1045--4129[label="0.00143885;1pkt 1fpkt"];
1045--4319[label="0.000653168;1pkt 1fpkt"];
1045--4485[label="0.000745712;1pkt 1fpkt"];
1045--4807[label="0.00434783;1pkt 1fpkt"];
1045--4844[label="0.000653168;1pkt 1fpkt"];
1045--4947[label="0.0277778;1pkt 1fpkt"];
1045--5189[label="0.000653168;1pkt 1fpkt"];
1045--5761[label="0.0126582;1pkt 1fpkt"];
1045--5766[label="0.000653168;1pkt 1fpkt"];
1045--6009[label="0.00434783;1pkt 1fpkt"];
1045--6026[label="0.000653168;1pkt 1fpkt"];
1045--6111[label="0.0131579;1pkt 1fpkt"];
1045--6500[label="0.000653168;1pkt 1fpkt"];
1045--6633[label="0.000653168;1pkt 1fpkt"];
1691--3266[label="1;79pkt 79fpkt"];
1691--3420[label="0.0126582;1pkt 1fpkt"];
1691--3778[label="0.0632911;5pkt 5fpkt"];
3042--3309[label="0.00347222;1pkt 1fpkt"];
3042--3582[label="0.00176678;1pkt 1fpkt"];
3042--3778[label="0.0176678;10pkt 10fpkt"];
3042--4129[label="0.00176678;1pkt 1fpkt"];
3042--4319[label="0.00176678;1pkt 1fpkt"];
3042--4485[label="0.00176678;1pkt 1fpkt"];
3042--4807[label="0.00434783;1pkt 1fpkt"];
3042--4844[label="0.00176678;1pkt 1fpkt"];
3042--5189[label="0.00176678;1pkt 1fpkt"];
3042--5761[label="0.0126582;1pkt 1fpkt"];
3042--5766[label="0.00176678;1pkt 1fpkt"];
3042--6009[label="0.00434783;1pkt 1fpkt"];
3042--6026[label="0.00176678;1pkt 1fpkt"];
3042--6500[label="0.00176678;1pkt 1fpkt"];
3042--6633[label="0.00176678;1pkt 1fpkt"];
3266--3420[label="0.0126582;1pkt 1fpkt"];
3266--3778[label="0.0632911;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="23.115.123.124" dst_port="53" src_ip="134.112.2.179"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.531473,1.50331,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
1837[label="193.40.212.250;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.11.14:1719, 193.40.212.250:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1719: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="193.40.212.250" dst_port="554" src_ip="157.25.11.14" src_port="1719"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
1120[label="134.99.100.14;s;158pkt 158fpkt", shape=diamond, color=yellow];
1984[label="216.182.140.192;d;6pkt 6fpkt", shape=diamond, color=yellow];
2523[label="196.244.131.50;d;59pkt 59fpkt", shape=diamond, color=yellow];
2802[label="33.112.214.192;d;12pkt 12fpkt", shape=diamond, color=yellow];
3244[label="134.99.100.14;s;158pkt 158fpkt", shape=hexagon, color=black];
4049[label="134.99.100.14;186pkt 186fpkt", shape=pentagon, color=darkviolet];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.100.14:80, *:*}[71.0744%]&lt;BR/&gt;{*:80, 196.244.131.50:*}[25.6198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4594%)&lt;BR/&gt; 0: (7.08117%)&lt;BR/&gt; 63332: (0.345423%)&lt;BR/&gt; 63329: (0.345423%)&lt;BR/&gt; 63286: (0.345423%)&gt;];
}
1120--1819[label="0.0506329;8pkt 8fpkt"];
1120--1984[label="1;6pkt 6fpkt"];
1120--2523[label="0.20339;12pkt 12fpkt"];
1120--2802[label="0.333333;4pkt 4fpkt"];
1120--3244[label="1;158pkt 158fpkt"];
1120--3665[label="0.333333;4pkt 4fpkt"];
1120--3781[label="0.056962;9pkt 9fpkt"];
1120--3806[label="0.120253;19pkt 19fpkt"];
1120--3852[label="0.056962;9pkt 9fpkt"];
1120--3868[label="0.120253;19pkt 19fpkt"];
1120--3902[label="0.056962;9pkt 9fpkt"];
1120--3923[label="0.120253;19pkt 19fpkt"];
1120--4049[label="0.993671;157pkt 157fpkt"];
1984--3244[label="1;6pkt 6fpkt"];
1984--4049[label="1;6pkt 6fpkt"];
2523--3244[label="0.20339;12pkt 12fpkt"];
2523--3806[label="0.932203;55pkt 55fpkt"];
2523--3868[label="0.932203;55pkt 55fpkt"];
2523--3923[label="0.932203;55pkt 55fpkt"];
2523--4049[label="0.20339;12pkt 12fpkt"];
2802--2979[label="0.333333;4pkt 4fpkt"];
2802--3244[label="0.333333;4pkt 4fpkt"];
2802--3665[label="1;12pkt 12fpkt"];
2802--4049[label="0.25;3pkt 3fpkt"];
3244--3665[label="0.333333;4pkt 4fpkt"];
3244--3781[label="0.056962;9pkt 9fpkt"];
3244--3806[label="0.120253;19pkt 19fpkt"];
3244--3852[label="0.056962;9pkt 9fpkt"];
3244--3868[label="0.120253;19pkt 19fpkt"];
3244--3902[label="0.056962;9pkt 9fpkt"];
3244--3923[label="0.120253;19pkt 19fpkt"];
3244--4049[label="0.993671;157pkt 157fpkt"];
</description>
    <slice>
      <filter src_ip="134.99.100.14" src_port="80"/>
      <filter dst_ip="196.244.131.50" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.87.34.0"/>
    </slice>
    <from sec="1189314127" usec="0"/>
    <to sec="1189314157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.3.105.0"/>
    </slice>
    <from sec="1189314513" usec="0"/>
    <to sec="1189314517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.172.107.0"/>
    </slice>
    <from sec="1189314392" usec="0"/>
    <to sec="1189314411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.96.186.1"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.37.226.1"/>
    </slice>
    <from sec="1189314536" usec="0"/>
    <to sec="1189314610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.39.250.1"/>
    </slice>
    <from sec="1189314564" usec="0"/>
    <to sec="1189314661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.170.168.2"/>
    </slice>
    <from sec="1189314591" usec="0"/>
    <to sec="1189314636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881325,1.57868,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_383{
style=filled;
color=gray75;
3[label="157.25.105.3s;2pkt 2fpkt", shape=rectangle, color=red];
3960[label="157.25.105.3;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat383[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.105.3:*, 38.111.65.144:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1056: (10%)&lt;BR/&gt; 1055: (10%)&lt;BR/&gt; 1054: (5%)&lt;BR/&gt; 1053: (5%)&gt;];
}
3--3960[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="38.111.65.144" dst_port="80" src_ip="157.25.105.3"/>
    </slice>
    <from sec="1189314713" usec="0"/>
    <to sec="1189314894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.217.3"/>
    </slice>
    <from sec="1189314826" usec="0"/>
    <to sec="1189314834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.16.226.3"/>
    </slice>
    <from sec="1189314472" usec="0"/>
    <to sec="1189314508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.74.244.3"/>
    </slice>
    <from sec="1189314251" usec="0"/>
    <to sec="1189314269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.99.73.4"/>
    </slice>
    <from sec="1189314336" usec="0"/>
    <to sec="1189314366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.146.81.4"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.23.229.6"/>
    </slice>
    <from sec="1189314416" usec="0"/>
    <to sec="1189314457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.3.9.7"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.3.161.7"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.77.108.8"/>
    </slice>
    <from sec="1189314462" usec="0"/>
    <to sec="1189314494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.172.0.9"/>
    </slice>
    <from sec="1189314401" usec="0"/>
    <to sec="1189314463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.71.130.9"/>
    </slice>
    <from sec="1189314526" usec="0"/>
    <to sec="1189314552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.845611,1.50694,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_397{
style=filled;
color=gray75;
1743[label="128.190.82.189;d;4pkt 4fpkt", shape=diamond, color=yellow];
4019[label="25.3.102.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6597[label="25.3.103.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat397[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.3.102.10:39411, 128.190.82.189:80}[25%]&lt;BR/&gt;{25.3.105.61:33932, 128.190.82.189:80}[25%]&lt;BR/&gt;{25.3.103.112:42375, 128.190.82.189:80}[25%]&lt;BR/&gt;{25.3.109.202:45899, 128.190.82.189:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42375: (16.6667%)&lt;BR/&gt; 39411: (16.6667%)&lt;BR/&gt; 45899: (8.33333%)&lt;BR/&gt; 33932: (8.33333%)&gt;];
}
1743--4019[label="1;1pkt 1fpkt"];
1743--6597[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.82.189" dst_port="80" src_ip="25.3.109.202" src_port="45899"/>
      <filter dst_ip="128.190.82.189" dst_port="80" src_ip="25.3.103.112" src_port="42375"/>
      <filter dst_ip="128.190.82.189" dst_port="80" src_ip="25.3.105.61" src_port="33932"/>
      <filter dst_ip="128.190.82.189" dst_port="80" src_ip="25.3.102.10" src_port="39411"/>
    </slice>
    <from sec="1189314234" usec="0"/>
    <to sec="1189314418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.174.24.11"/>
    </slice>
    <from sec="1189314480" usec="0"/>
    <to sec="1189314509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.30.18.12"/>
    </slice>
    <from sec="1189314010" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.220.237.12"/>
    </slice>
    <from sec="1189314418" usec="0"/>
    <to sec="1189314421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.93.99.13"/>
    </slice>
    <from sec="1189314304" usec="0"/>
    <to sec="1189314310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.21.174.13"/>
    </slice>
    <from sec="1189314116" usec="0"/>
    <to sec="1189314161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.68.78.14"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.13.136.14"/>
    </slice>
    <from sec="1189314429" usec="0"/>
    <to sec="1189314493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.223.14"/>
    </slice>
    <from sec="1189314568" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.206.51.15"/>
    </slice>
    <from sec="1189314538" usec="0"/>
    <to sec="1189314541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.210.149.15"/>
    </slice>
    <from sec="1189314085" usec="0"/>
    <to sec="1189314089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.214.15"/>
    </slice>
    <from sec="1189314264" usec="0"/>
    <to sec="1189314350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
1030[label="128.190.53.132;d;239pkt 239fpkt", shape=diamond, color=yellow];
4067[label="200.78.217.16;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.35.93.77:*, 128.190.53.132:25}[28.2443%]&lt;BR/&gt;{*:25, *:*}[26.7176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.6198%)&lt;BR/&gt; 0: (0.760456%)&lt;BR/&gt; 48372: (0.380228%)&lt;BR/&gt; 2839: (0.380228%)&lt;BR/&gt; 2767: (0.380228%)&gt;];
}
1030--3761[label="0.0711297;17pkt 17fpkt"];
1030--4067[label="0.0416667;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_port="25"/>
      <filter dst_ip="128.190.53.132" dst_port="25" src_ip="196.35.93.77"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.222.16"/>
    </slice>
    <from sec="1189314363" usec="0"/>
    <to sec="1189314418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.222.17"/>
    </slice>
    <from sec="1189314535" usec="0"/>
    <to sec="1189314626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.151.19"/>
    </slice>
    <from sec="1189314020" usec="0"/>
    <to sec="1189314878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.99.75.20"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.122.171.20"/>
    </slice>
    <from sec="1189314574" usec="0"/>
    <to sec="1189314589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.190.151.21"/>
    </slice>
    <from sec="1189314009" usec="0"/>
    <to sec="1189314893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.132.167.21"/>
    </slice>
    <from sec="1189314111" usec="0"/>
    <to sec="1189314142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.5.0.22"/>
    </slice>
    <from sec="1189314411" usec="0"/>
    <to sec="1189314524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.75.89.22"/>
    </slice>
    <from sec="1189314314" usec="0"/>
    <to sec="1189314563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.216.97.23"/>
    </slice>
    <from sec="1189314004" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.91.132.23"/>
    </slice>
    <from sec="1189314011" usec="0"/>
    <to sec="1189314881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.75.162.23"/>
    </slice>
    <from sec="1189314019" usec="0"/>
    <to sec="1189314058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.92.1.24"/>
    </slice>
    <from sec="1189314062" usec="0"/>
    <to sec="1189314090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
644[label="81.242.37.24;s;3pkt 3fpkt", shape=diamond, color=yellow];
849[label="128.190.26.74;d;106pkt 106fpkt", shape=diamond, color=yellow];
4118[label="81.242.37.24;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5040[label="222.113.162.167;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6116[label="222.113.162.167;5pkt 5fpkt", shape=invtriangle, color=brown];
6676[label="222.113.162.167;5pkt 5fpkt", shape=invhouse, color=bisque];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.113.162.112:80, 128.190.26.74:*}[38.3178%]&lt;BR/&gt;{222.113.162.114:80, 128.190.26.74:*}[27.1028%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2046: (1.5748%)&lt;BR/&gt; 2045: (1.5748%)&lt;BR/&gt; 2037: (1.5748%)&lt;BR/&gt; 2036: (1.5748%)&gt;];
}
644--849[label="1;3pkt 3fpkt"];
644--4118[label="1;3pkt 3fpkt"];
849--2991[label="0.00943396;1pkt 1fpkt"];
849--4118[label="1;3pkt 3fpkt"];
849--4954[label="0.00943396;1pkt 1fpkt"];
849--5040[label="0.8;4pkt 4fpkt"];
849--6073[label="0.00943396;1pkt 1fpkt"];
849--6116[label="0.8;4pkt 4fpkt"];
849--6676[label="0.8;4pkt 4fpkt"];
5040--6116[label="1;5pkt 5fpkt"];
5040--6676[label="1;5pkt 5fpkt"];
6116--6676[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.26.74" src_ip="222.113.162.112" src_port="80"/>
      <filter dst_ip="128.190.26.74" src_ip="222.113.162.114" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.84.24"/>
    </slice>
    <from sec="1189314581" usec="0"/>
    <to sec="1189314688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.23.51.26"/>
    </slice>
    <from sec="1189314579" usec="0"/>
    <to sec="1189314589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.110.137.26"/>
    </slice>
    <from sec="1189314460" usec="0"/>
    <to sec="1189314467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
1800[label="128.190.224.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
4139[label="128.190.224.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.224.26:80, 22.76.5.140:34033}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34033: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1800--4139[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="22.76.5.140" dst_port="34033" src_ip="128.190.224.26" src_port="80"/>
    </slice>
    <from sec="1189314445" usec="0"/>
    <to sec="1189314546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.111.57.27"/>
    </slice>
    <from sec="1189314690" usec="0"/>
    <to sec="1189314888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.111.72.31"/>
    </slice>
    <from sec="1189314442" usec="0"/>
    <to sec="1189314448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.98.228.31"/>
    </slice>
    <from sec="1189314639" usec="0"/>
    <to sec="1189314644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.48.74.32"/>
    </slice>
    <from sec="1189314605" usec="0"/>
    <to sec="1189314622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.87.240.32"/>
    </slice>
    <from sec="1189314503" usec="0"/>
    <to sec="1189314514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.40.221.33"/>
    </slice>
    <from sec="1189314419" usec="0"/>
    <to sec="1189314431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.134.202.34"/>
    </slice>
    <from sec="1189314296" usec="0"/>
    <to sec="1189314311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.189.88.35"/>
    </slice>
    <from sec="1189314469" usec="0"/>
    <to sec="1189314481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.81.171.36"/>
    </slice>
    <from sec="1189314214" usec="0"/>
    <to sec="1189314257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.80.26.37"/>
    </slice>
    <from sec="1189314817" usec="0"/>
    <to sec="1189314851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.111.87.37"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.206.128.37"/>
    </slice>
    <from sec="1189314144" usec="0"/>
    <to sec="1189314148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.46.216.39"/>
    </slice>
    <from sec="1189314172" usec="0"/>
    <to sec="1189314187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.138.0.40"/>
    </slice>
    <from sec="1189314551" usec="0"/>
    <to sec="1189314576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.16.112.42"/>
    </slice>
    <from sec="1189314274" usec="0"/>
    <to sec="1189314346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
879[label="134.99.172.44;s;312pkt 312fpkt", shape=diamond, color=yellow];
2984[label="134.99.172.44;s;73pkt 73fpkt", shape=hexagon, color=black];
4262[label="134.99.172.44;341pkt 341fpkt", shape=pentagon, color=darkviolet];
5734[label="134.99.172.44;341pkt 341fpkt", shape=invtriangle, color=brown];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.172.44:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 49232: (0.328022%)&lt;BR/&gt; 3859: (0.328022%)&lt;BR/&gt; 1709: (0.328022%)&lt;BR/&gt; 4407: (0.281162%)&gt;];
}
879--2984[label="1;73pkt 73fpkt"];
879--4262[label="1;312pkt 312fpkt"];
879--5734[label="1;312pkt 312fpkt"];
2984--4262[label="1;73pkt 73fpkt"];
2984--5734[label="1;73pkt 73fpkt"];
4262--5734[label="1;341pkt 341fpkt"];
</description>
    <slice>
      <filter src_ip="134.99.172.44" src_port="25"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.111.100.45"/>
    </slice>
    <from sec="1189314196" usec="0"/>
    <to sec="1189314214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.38.159.45"/>
    </slice>
    <from sec="1189314004" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.23.177.46"/>
    </slice>
    <from sec="1189314427" usec="0"/>
    <to sec="1189314480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="79.80.97.48"/>
    </slice>
    <from sec="1189314503" usec="0"/>
    <to sec="1189314569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.117.148.49"/>
    </slice>
    <from sec="1189314144" usec="0"/>
    <to sec="1189314821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.30.112.52"/>
    </slice>
    <from sec="1189314311" usec="0"/>
    <to sec="1189314371" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.1.115.52"/>
    </slice>
    <from sec="1189314586" usec="0"/>
    <to sec="1189314642" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.231.20.53"/>
    </slice>
    <from sec="1189314438" usec="0"/>
    <to sec="1189314446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.190.74.53"/>
    </slice>
    <from sec="1189314223" usec="0"/>
    <to sec="1189314242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.176.75.53"/>
    </slice>
    <from sec="1189314309" usec="0"/>
    <to sec="1189314323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.167.137.53"/>
    </slice>
    <from sec="1189314319" usec="0"/>
    <to sec="1189314351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.194.233.53"/>
    </slice>
    <from sec="1189314393" usec="0"/>
    <to sec="1189314415" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.145.100.54"/>
    </slice>
    <from sec="1189314014" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.110.130.54"/>
    </slice>
    <from sec="1189314495" usec="0"/>
    <to sec="1189314504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.49.170.55"/>
    </slice>
    <from sec="1189314610" usec="0"/>
    <to sec="1189314631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.27.151.57"/>
    </slice>
    <from sec="1189314155" usec="0"/>
    <to sec="1189314344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.110.225.57"/>
    </slice>
    <from sec="1189314368" usec="0"/>
    <to sec="1189314377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.154.101.58"/>
    </slice>
    <from sec="1189314482" usec="0"/>
    <to sec="1189314511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.206.162.58"/>
    </slice>
    <from sec="1189314738" usec="0"/>
    <to sec="1189314745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.194.164.58"/>
    </slice>
    <from sec="1189314545" usec="0"/>
    <to sec="1189314549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.70.215.58"/>
    </slice>
    <from sec="1189314346" usec="0"/>
    <to sec="1189314476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.177.89.59"/>
    </slice>
    <from sec="1189314261" usec="0"/>
    <to sec="1189314268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.52.151.59"/>
    </slice>
    <from sec="1189314443" usec="0"/>
    <to sec="1189314505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.111.181.61"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.134.53.62"/>
    </slice>
    <from sec="1189314574" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.190.52.64"/>
    </slice>
    <from sec="1189314658" usec="0"/>
    <to sec="1189314732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.75.159.64"/>
    </slice>
    <from sec="1189314780" usec="0"/>
    <to sec="1189314781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.252.9.65"/>
    </slice>
    <from sec="1189314551" usec="0"/>
    <to sec="1189314556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.31.148.68"/>
    </slice>
    <from sec="1189314230" usec="0"/>
    <to sec="1189314317" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.212.165.68"/>
    </slice>
    <from sec="1189314229" usec="0"/>
    <to sec="1189314823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.108.216.68"/>
    </slice>
    <from sec="1189314300" usec="0"/>
    <to sec="1189314312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.222.68"/>
    </slice>
    <from sec="1189314508" usec="0"/>
    <to sec="1189314533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.243.35.71"/>
    </slice>
    <from sec="1189314849" usec="0"/>
    <to sec="1189314873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.238.132.72"/>
    </slice>
    <from sec="1189314528" usec="0"/>
    <to sec="1189314565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.178.218.73"/>
    </slice>
    <from sec="1189314456" usec="0"/>
    <to sec="1189314482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.125.23.76"/>
    </slice>
    <from sec="1189314533" usec="0"/>
    <to sec="1189314577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_482{
style=filled;
color=gray75;
1186[label="33.117.148.89;d;73pkt 73fpkt", shape=diamond, color=yellow];
1315[label="168.206.34.128;s;2pkt 2fpkt", shape=diamond, color=yellow];
1978[label="168.206.113.76;s;9pkt 9fpkt", shape=diamond, color=yellow];
4465[label="168.206.113.76;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5843[label="168.206.113.76;10pkt 10fpkt", shape=invtriangle, color=brown];
6541[label="168.206.113.76;10pkt 10fpkt", shape=invhouse, color=bisque];
stat482[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.7.210:*, 33.117.148.89:80}[20.5479%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1674: (2.19298%)&lt;BR/&gt; 1673: (2.19298%)&lt;BR/&gt; 1672: (2.19298%)&lt;BR/&gt; 1671: (2.19298%)&gt;];
}
1186--1315[label="1;2pkt 2fpkt"];
1186--1701[label="0.109589;8pkt 8fpkt"];
1186--1978[label="1;9pkt 9fpkt"];
1186--3762[label="0.164384;12pkt 12fpkt"];
1186--3785[label="0.0410959;3pkt 3fpkt"];
1186--3807[label="0.0410959;3pkt 3fpkt"];
1186--4465[label="1;10pkt 10fpkt"];
1186--5843[label="1;10pkt 10fpkt"];
1186--6541[label="1;10pkt 10fpkt"];
1978--4465[label="1;9pkt 9fpkt"];
1978--5843[label="1;9pkt 9fpkt"];
1978--6541[label="1;9pkt 9fpkt"];
4465--5843[label="1;10pkt 10fpkt"];
4465--6541[label="1;10pkt 10fpkt"];
5843--6541[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="33.117.148.89" dst_port="80" src_ip="168.206.7.210"/>
    </slice>
    <from sec="1189314005" usec="0"/>
    <to sec="1189314829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.203.242.76"/>
    </slice>
    <from sec="1189314481" usec="0"/>
    <to sec="1189314500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.150.34.77"/>
    </slice>
    <from sec="1189314432" usec="0"/>
    <to sec="1189314484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.102.163.78"/>
    </slice>
    <from sec="1189314157" usec="0"/>
    <to sec="1189314182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.37.174.78"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.25.73.79"/>
    </slice>
    <from sec="1189314202" usec="0"/>
    <to sec="1189314303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.192.212.80"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.118.231.80"/>
    </slice>
    <from sec="1189314473" usec="0"/>
    <to sec="1189314510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.156.107.81"/>
    </slice>
    <from sec="1189314247" usec="0"/>
    <to sec="1189314253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.207.173.81"/>
    </slice>
    <from sec="1189314143" usec="0"/>
    <to sec="1189314219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.206.7.83"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.43.138.83"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.155.106.84"/>
    </slice>
    <from sec="1189314037" usec="0"/>
    <to sec="1189314893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.20.17.86"/>
    </slice>
    <from sec="1189314509" usec="0"/>
    <to sec="1189314547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.23.173.86"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.146.16.91"/>
    </slice>
    <from sec="1189314321" usec="0"/>
    <to sec="1189314379" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.141.46.94"/>
    </slice>
    <from sec="1189314563" usec="0"/>
    <to sec="1189314652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.84.69.96"/>
    </slice>
    <from sec="1189314416" usec="0"/>
    <to sec="1189314424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.99.168.96"/>
    </slice>
    <from sec="1189314031" usec="0"/>
    <to sec="1189314876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
470[label="170.233.181.86;d;1758pkt 1758fpkt", shape=diamond, color=yellow];
2390[label="4.26.148.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
4593[label="77.101.155.97;12pkt 12fpkt", shape=pentagon, color=darkviolet];
5165[label="197.122.176.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5898[label="77.101.155.97;12pkt 12fpkt", shape=invtriangle, color=brown];
6188[label="197.122.176.188;3pkt 3fpkt", shape=invtriangle, color=brown];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.233.181.86:13113}[34.7159%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13113: (17.384%)&lt;BR/&gt; 6969: (1.45333%)&lt;BR/&gt; 14775: (0.726663%)&lt;BR/&gt; 25129: (0.698714%)&lt;BR/&gt; 17891: (0.614869%)&gt;];
}
470--2390[label="1;1pkt 1fpkt"];
470--3781[label="0.00170648;3pkt 3fpkt"];
470--3806[label="0.000568828;1pkt 1fpkt"];
470--3852[label="0.00170648;3pkt 3fpkt"];
470--3868[label="0.000568828;1pkt 1fpkt"];
470--3902[label="0.00170648;3pkt 3fpkt"];
470--3923[label="0.000568828;1pkt 1fpkt"];
470--4593[label="0.833333;10pkt 10fpkt"];
470--5165[label="1;3pkt 3fpkt"];
470--5898[label="0.833333;10pkt 10fpkt"];
470--6188[label="1;3pkt 3fpkt"];
4593--5898[label="1;12pkt 12fpkt"];
5165--6188[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="170.233.181.86" dst_port="13113"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.152.130.98"/>
    </slice>
    <from sec="1189314431" usec="0"/>
    <to sec="1189314441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.14.96.99"/>
    </slice>
    <from sec="1189314398" usec="0"/>
    <to sec="1189314420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976399,1.57268,999,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
142[label="134.112.166.141d;12pkt 12fpkt", shape=rectangle, color=red];
4608[label="74.11.134.99;17pkt 17fpkt", shape=pentagon, color=darkviolet];
5902[label="74.11.134.99;17pkt 17fpkt", shape=invtriangle, color=brown];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.11.134.99:*, 134.112.166.34:25}[32.1429%]&lt;BR/&gt;{74.11.134.99:*, 134.112.166.141:25}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2226: (3.26087%)&lt;BR/&gt; 4791: (2.17391%)&lt;BR/&gt; 4584: (2.17391%)&lt;BR/&gt; 4381: (2.17391%)&gt;];
}
142--437[label="1;12pkt 12fpkt"];
142--4608[label="0.0833333;1pkt 1fpkt"];
142--5902[label="0.0833333;1pkt 1fpkt"];
4608--5902[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.166.141" dst_port="25" src_ip="74.11.134.99"/>
      <filter dst_ip="134.112.166.34" dst_port="25" src_ip="74.11.134.99"/>
    </slice>
    <from sec="1189314357" usec="0"/>
    <to sec="1189314769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.23.69.103"/>
    </slice>
    <from sec="1189314599" usec="0"/>
    <to sec="1189314607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.101.154.104"/>
    </slice>
    <from sec="1189314453" usec="0"/>
    <to sec="1189314458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.129.115.105"/>
    </slice>
    <from sec="1189314298" usec="0"/>
    <to sec="1189314310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.116.180.105"/>
    </slice>
    <from sec="1189314595" usec="0"/>
    <to sec="1189314608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.149.75.106"/>
    </slice>
    <from sec="1189314010" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.132.3.108"/>
    </slice>
    <from sec="1189314840" usec="0"/>
    <to sec="1189314844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.149.75.108"/>
    </slice>
    <from sec="1189314045" usec="0"/>
    <to sec="1189314897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.107.23.112"/>
    </slice>
    <from sec="1189314619" usec="0"/>
    <to sec="1189314625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.217.112"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.22.199.113"/>
    </slice>
    <from sec="1189314399" usec="0"/>
    <to sec="1189314437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.172.2.116"/>
    </slice>
    <from sec="1189314556" usec="0"/>
    <to sec="1189314569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.79.45.117"/>
    </slice>
    <from sec="1189314130" usec="0"/>
    <to sec="1189314187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.66.96.117"/>
    </slice>
    <from sec="1189314542" usec="0"/>
    <to sec="1189314568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.29.83.118"/>
    </slice>
    <from sec="1189314143" usec="0"/>
    <to sec="1189314417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.194.6.121"/>
    </slice>
    <from sec="1189314470" usec="0"/>
    <to sec="1189314521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.51.173.122"/>
    </slice>
    <from sec="1189314382" usec="0"/>
    <to sec="1189314417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.148.21.125"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.246.75.127"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.138.84.128"/>
    </slice>
    <from sec="1189314475" usec="0"/>
    <to sec="1189314485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.16.232.129"/>
    </slice>
    <from sec="1189314751" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.1.138.130"/>
    </slice>
    <from sec="1189314010" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
2374[label="217.155.108.146;d;59pkt 59fpkt", shape=diamond, color=yellow];
4809[label="26.30.25.133;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.30.25.215:25, 217.155.108.146:*}[24.2424%]&lt;BR/&gt;{26.30.25.133:25, 217.155.108.146:*}[24.2424%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.125%)&lt;BR/&gt; 113: (1.875%)&lt;BR/&gt; 58791: (1.25%)&lt;BR/&gt; 58759: (1.25%)&lt;BR/&gt; 58663: (1.25%)&gt;];
}
2374--4809[label="0.666667;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.108.146" src_ip="26.30.25.133" src_port="25"/>
      <filter dst_ip="217.155.108.146" src_ip="26.30.25.215" src_port="25"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.23.227.137"/>
    </slice>
    <from sec="1189314331" usec="0"/>
    <to sec="1189314345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.25.86.138"/>
    </slice>
    <from sec="1189314406" usec="0"/>
    <to sec="1189314507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.224.116.138"/>
    </slice>
    <from sec="1189314580" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="176.101.163.139"/>
    </slice>
    <from sec="1189314288" usec="0"/>
    <to sec="1189314318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.5.164.140"/>
    </slice>
    <from sec="1189314421" usec="0"/>
    <to sec="1189314668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.26.73.141"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.6.65.144"/>
    </slice>
    <from sec="1189314409" usec="0"/>
    <to sec="1189314440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.29.137.146"/>
    </slice>
    <from sec="1189314211" usec="0"/>
    <to sec="1189314627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.99.32.148"/>
    </slice>
    <from sec="1189314713" usec="0"/>
    <to sec="1189314716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.233.21.150"/>
    </slice>
    <from sec="1189314482" usec="0"/>
    <to sec="1189314521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
1142[label="217.252.222.189;s;80pkt 80fpkt", shape=diamond, color=yellow];
1239[label="128.190.94.24;d;122pkt 122fpkt", shape=diamond, color=yellow];
1408[label="217.252.222.190;s;97pkt 97fpkt", shape=diamond, color=yellow];
1695[label="128.190.173.224;d;96pkt 96fpkt", shape=diamond, color=yellow];
3272[label="128.190.94.24;d;120pkt 120fpkt", shape=hexagon, color=black];
5177[label="217.252.222.189;82pkt 82fpkt", shape=pentagon, color=darkviolet];
6196[label="217.252.222.189;82pkt 82fpkt", shape=invtriangle, color=brown];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 128.190.94.24:*}[31.7585%]&lt;BR/&gt;{217.252.222.190:80, *:*}[25.4593%]&lt;BR/&gt;{*:*, 128.190.173.224:*}[25.1969%]&lt;BR/&gt;{217.252.222.189:80, *:*}[21.5223%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0118%)&lt;BR/&gt; 36412: (1.25184%)&lt;BR/&gt; 2123: (0.441826%)&lt;BR/&gt; 1060: (0.441826%)&lt;BR/&gt; 0: (0.441826%)&gt;];
}
1142--1239[label="0.0375;3pkt 3fpkt"];
1142--1293[label="0.025641;1pkt 1fpkt"];
1142--1496[label="0.0125;1pkt 1fpkt"];
1142--1518[label="0.333333;5pkt 5fpkt"];
1142--1695[label="0.025;2pkt 2fpkt"];
1142--1703[label="0.102564;8pkt 8fpkt"];
1142--2417[label="0.0238095;1pkt 1fpkt"];
1142--2722[label="0.105263;6pkt 6fpkt"];
1142--2972[label="0.05;4pkt 4fpkt"];
1142--3174[label="0.263158;5pkt 5fpkt"];
1142--3272[label="0.025;2pkt 2fpkt"];
1142--3458[label="0.285714;8pkt 8fpkt"];
1142--3691[label="0.05;4pkt 4fpkt"];
1142--3781[label="0.075;6pkt 6fpkt"];
1142--3806[label="0.1;8pkt 8fpkt"];
1142--3852[label="0.075;6pkt 6fpkt"];
1142--3868[label="0.1;8pkt 8fpkt"];
1142--3902[label="0.075;6pkt 6fpkt"];
1142--3923[label="0.1;8pkt 8fpkt"];
1142--5177[label="1;80pkt 80fpkt"];
1142--6196[label="1;80pkt 80fpkt"];
1239--1408[label="0.0618557;6pkt 6fpkt"];
1239--2177[label="0.222222;14pkt 14fpkt"];
1239--2991[label="0.42623;52pkt 52fpkt"];
1239--3272[label="1;120pkt 120fpkt"];
1239--4954[label="0.42623;52pkt 52fpkt"];
1239--5177[label="0.0365854;3pkt 3fpkt"];
1239--6073[label="0.42623;52pkt 52fpkt"];
1239--6196[label="0.0365854;3pkt 3fpkt"];
1408--1496[label="0.0412371;4pkt 4fpkt"];
1408--1518[label="0.533333;8pkt 8fpkt"];
1408--1695[label="0.0520833;5pkt 5fpkt"];
1408--1703[label="0.025641;2pkt 2fpkt"];
1408--2417[label="0.047619;2pkt 2fpkt"];
1408--2585[label="0.0103093;1pkt 1fpkt"];
1408--2722[label="0.0877193;5pkt 5fpkt"];
1408--2972[label="0.0103093;1pkt 1fpkt"];
1408--3174[label="0.315789;6pkt 6fpkt"];
1408--3272[label="0.0515464;5pkt 5fpkt"];
1408--3458[label="0.0714286;2pkt 2fpkt"];
1408--3584[label="0.0103093;1pkt 1fpkt"];
1408--3691[label="0.0103093;1pkt 1fpkt"];
1408--3781[label="0.0515464;5pkt 5fpkt"];
1408--3806[label="0.103093;10pkt 10fpkt"];
1408--3852[label="0.0515464;5pkt 5fpkt"];
1408--3868[label="0.103093;10pkt 10fpkt"];
1408--3902[label="0.0515464;5pkt 5fpkt"];
1408--3923[label="0.103093;10pkt 10fpkt"];
1695--3072[label="0.0520833;5pkt 5fpkt"];
1695--3781[label="0.0416667;4pkt 4fpkt"];
1695--3806[label="0.0104167;1pkt 1fpkt"];
1695--3852[label="0.0416667;4pkt 4fpkt"];
1695--3868[label="0.0104167;1pkt 1fpkt"];
1695--3902[label="0.0416667;4pkt 4fpkt"];
1695--3923[label="0.0104167;1pkt 1fpkt"];
1695--4092[label="0.0104167;1pkt 1fpkt"];
1695--4247[label="0.153846;2pkt 2fpkt"];
1695--5177[label="0.0243902;2pkt 2fpkt"];
1695--5644[label="0.0104167;1pkt 1fpkt"];
1695--5723[label="0.153846;2pkt 2fpkt"];
1695--6196[label="0.0243902;2pkt 2fpkt"];
1695--6440[label="0.0104167;1pkt 1fpkt"];
1695--6481[label="0.153846;2pkt 2fpkt"];
3272--4954[label="0.433333;52pkt 52fpkt"];
3272--5177[label="0.0243902;2pkt 2fpkt"];
3272--6073[label="0.433333;52pkt 52fpkt"];
3272--6196[label="0.0243902;2pkt 2fpkt"];
5177--6196[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.173.224"/>
      <filter src_ip="217.252.222.190" src_port="80"/>
      <filter src_ip="217.252.222.189" src_port="80"/>
      <filter dst_ip="128.190.94.24" src_port="80"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.160.206.152"/>
    </slice>
    <from sec="1189314141" usec="0"/>
    <to sec="1189314168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.71.133.154"/>
    </slice>
    <from sec="1189314318" usec="0"/>
    <to sec="1189314333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.44.144.156"/>
    </slice>
    <from sec="1189314343" usec="0"/>
    <to sec="1189314347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.7.36.159"/>
    </slice>
    <from sec="1189314366" usec="0"/>
    <to sec="1189314387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.37.208.159"/>
    </slice>
    <from sec="1189314366" usec="0"/>
    <to sec="1189314427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.235.106.160"/>
    </slice>
    <from sec="1189314507" usec="0"/>
    <to sec="1189314523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.107.128.161"/>
    </slice>
    <from sec="1189314130" usec="0"/>
    <to sec="1189314148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.221.161"/>
    </slice>
    <from sec="1189314361" usec="0"/>
    <to sec="1189314373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.32.16.162"/>
    </slice>
    <from sec="1189314263" usec="0"/>
    <to sec="1189314344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.153.20.162"/>
    </slice>
    <from sec="1189314463" usec="0"/>
    <to sec="1189314517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.170.167.162"/>
    </slice>
    <from sec="1189314163" usec="0"/>
    <to sec="1189314183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.193.69.163"/>
    </slice>
    <from sec="1189314140" usec="0"/>
    <to sec="1189314168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.17.177.163"/>
    </slice>
    <from sec="1189314719" usec="0"/>
    <to sec="1189314733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.20.220.164"/>
    </slice>
    <from sec="1189314540" usec="0"/>
    <to sec="1189314566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.150.45.165"/>
    </slice>
    <from sec="1189314051" usec="0"/>
    <to sec="1189314198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.43.143.166"/>
    </slice>
    <from sec="1189314581" usec="0"/>
    <to sec="1189314589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.5.24.171"/>
    </slice>
    <from sec="1189314032" usec="0"/>
    <to sec="1189314635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.137.135.172"/>
    </slice>
    <from sec="1189314719" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.21.179.173"/>
    </slice>
    <from sec="1189314769" usec="0"/>
    <to sec="1189314797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.146.226.175"/>
    </slice>
    <from sec="1189314391" usec="0"/>
    <to sec="1189314451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.169.68.178"/>
    </slice>
    <from sec="1189314695" usec="0"/>
    <to sec="1189314718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.46.98.183"/>
    </slice>
    <from sec="1189314143" usec="0"/>
    <to sec="1189314556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.21.208.183"/>
    </slice>
    <from sec="1189314456" usec="0"/>
    <to sec="1189314494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.111.116.184"/>
    </slice>
    <from sec="1189314399" usec="0"/>
    <to sec="1189314404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.104.64.185"/>
    </slice>
    <from sec="1189314415" usec="0"/>
    <to sec="1189314477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.79.71.185"/>
    </slice>
    <from sec="1189314121" usec="0"/>
    <to sec="1189314179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.12.246.186"/>
    </slice>
    <from sec="1189314595" usec="0"/>
    <to sec="1189314633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.219.238.188"/>
    </slice>
    <from sec="1189314171" usec="0"/>
    <to sec="1189314477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
872[label="134.100.229.104;d;121pkt 121fpkt", shape=diamond, color=yellow];
2784[label="75.66.158.149;s;18pkt 18fpkt", shape=diamond, color=yellow];
3073[label="134.100.229.104;d;58pkt 58fpkt", shape=hexagon, color=black];
4478[label="20.24.17.78;16pkt 16fpkt", shape=pentagon, color=darkviolet];
4942[label="75.66.158.149;15pkt 15fpkt", shape=pentagon, color=darkviolet];
5046[label="195.112.66.168;16pkt 16fpkt", shape=pentagon, color=darkviolet];
5170[label="194.104.10.189;18pkt 18fpkt", shape=pentagon, color=darkviolet];
6191[label="194.104.10.189;18pkt 18fpkt", shape=invtriangle, color=brown];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.121.13.58:*, 134.100.229.104:80}[27.4648%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8929%)&lt;BR/&gt; 33437: (4.10714%)&lt;BR/&gt; 1504: (0.714286%)&lt;BR/&gt; 56664: (0.535714%)&lt;BR/&gt; 56661: (0.535714%)&gt;];
}
872--2784[label="0.944444;17pkt 17fpkt"];
872--3073[label="1;58pkt 58fpkt"];
872--3762[label="0.115702;14pkt 14fpkt"];
872--3785[label="0.107438;13pkt 13fpkt"];
872--3807[label="0.0909091;11pkt 11fpkt"];
872--4478[label="0.375;6pkt 6fpkt"];
872--4942[label="0.933333;14pkt 14fpkt"];
872--5046[label="1;16pkt 16fpkt"];
872--5170[label="0.444444;8pkt 8fpkt"];
872--5178[label="0.0238095;1pkt 1fpkt"];
872--6191[label="0.444444;8pkt 8fpkt"];
872--6197[label="0.0238095;1pkt 1fpkt"];
2784--4942[label="1;15pkt 15fpkt"];
3073--3762[label="0.241379;14pkt 14fpkt"];
3073--4478[label="0.0625;1pkt 1fpkt"];
3073--5046[label="0.9375;15pkt 15fpkt"];
3073--5170[label="0.0555556;1pkt 1fpkt"];
3073--6191[label="0.0555556;1pkt 1fpkt"];
5170--6191[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="134.100.229.104" dst_port="80" src_ip="33.121.13.58"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.65.22.190"/>
    </slice>
    <from sec="1189314521" usec="0"/>
    <to sec="1189314536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.15.170.190"/>
    </slice>
    <from sec="1189314869" usec="0"/>
    <to sec="1189314878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.22.80.191"/>
    </slice>
    <from sec="1189314379" usec="0"/>
    <to sec="1189314401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.126.153.191"/>
    </slice>
    <from sec="1189314519" usec="0"/>
    <to sec="1189314534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.224.0.192"/>
    </slice>
    <from sec="1189314407" usec="0"/>
    <to sec="1189314433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.216.60.192"/>
    </slice>
    <from sec="1189314306" usec="0"/>
    <to sec="1189314470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.239.133.193"/>
    </slice>
    <from sec="1189314555" usec="0"/>
    <to sec="1189314575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.32.196"/>
    </slice>
    <from sec="1189314145" usec="0"/>
    <to sec="1189314766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.881325,1.57868,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
98[label="200.78.169.163d;1pkt 1fpkt", shape=rectangle, color=red];
5218[label="157.25.53.196;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.53.196:*, 200.78.169.163:80}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2717: (8.33333%)&lt;BR/&gt; 2736: (4.16667%)&lt;BR/&gt; 2735: (4.16667%)&lt;BR/&gt; 2734: (4.16667%)&gt;];
}
98--5218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.78.169.163" dst_port="80" src_ip="157.25.53.196"/>
    </slice>
    <from sec="1189314539" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.136.34.197"/>
    </slice>
    <from sec="1189314584" usec="0"/>
    <to sec="1189314630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
1145[label="128.190.69.13;d;104pkt 104fpkt", shape=diamond, color=yellow];
5186[label="39.167.41.191;7pkt 7fpkt", shape=pentagon, color=darkviolet];
5448[label="197.6.176.234;44pkt 44fpkt", shape=pentagon, color=darkviolet];
6200[label="39.167.41.191;7pkt 7fpkt", shape=invtriangle, color=brown];
6281[label="22.47.73.218;3pkt 3fpkt", shape=invtriangle, color=brown];
6334[label="197.6.176.234;44pkt 44fpkt", shape=invtriangle, color=brown];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.6.176.234:*, 128.190.69.13:80}[43.2692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5215%)&lt;BR/&gt; 3119: (0.717703%)&lt;BR/&gt; 3118: (0.717703%)&lt;BR/&gt; 3117: (0.717703%)&lt;BR/&gt; 3116: (0.717703%)&gt;];
}
1145--1422[label="0.0571429;2pkt 2fpkt"];
1145--1646[label="0.0192308;2pkt 2fpkt"];
1145--1825[label="0.00961538;1pkt 1fpkt"];
1145--3762[label="0.0288462;3pkt 3fpkt"];
1145--3785[label="0.346154;36pkt 36fpkt"];
1145--3807[label="0.125;13pkt 13fpkt"];
1145--5186[label="1;7pkt 7fpkt"];
1145--5223[label="0.2;1pkt 1fpkt"];
1145--5448[label="1;44pkt 44fpkt"];
1145--6200[label="1;7pkt 7fpkt"];
1145--6281[label="1;3pkt 3fpkt"];
1145--6334[label="1;44pkt 44fpkt"];
5186--6200[label="1;7pkt 7fpkt"];
5448--6334[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.69.13" dst_port="80" src_ip="197.6.176.234"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.212.116.198"/>
    </slice>
    <from sec="1189314104" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.164.130.198"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="7.243.2.199"/>
    </slice>
    <from sec="1189314501" usec="0"/>
    <to sec="1189314510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.33.31.200"/>
    </slice>
    <from sec="1189314514" usec="0"/>
    <to sec="1189314546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.127.74.200"/>
    </slice>
    <from sec="1189314028" usec="0"/>
    <to sec="1189314877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.21.206.201"/>
    </slice>
    <from sec="1189314012" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.99.54.202"/>
    </slice>
    <from sec="1189314699" usec="0"/>
    <to sec="1189314825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.18.149.202"/>
    </slice>
    <from sec="1189314513" usec="0"/>
    <to sec="1189314520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.246.113.205"/>
    </slice>
    <from sec="1189314562" usec="0"/>
    <to sec="1189314568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="79.176.33.209"/>
    </slice>
    <from sec="1189314546" usec="0"/>
    <to sec="1189314559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.106.104.209"/>
    </slice>
    <from sec="1189314763" usec="0"/>
    <to sec="1189314889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
2587[label="74.76.135.210;s;278pkt 278fpkt", shape=diamond, color=yellow];
5299[label="74.76.135.210;302pkt 302fpkt", shape=pentagon, color=darkviolet];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.76.135.210:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 52602: (0.344828%)&lt;BR/&gt; 60916: (0.172414%)&lt;BR/&gt; 60901: (0.172414%)&lt;BR/&gt; 60770: (0.172414%)&gt;];
}
2587--3761[label="0.0647482;18pkt 18fpkt"];
2587--5299[label="1;278pkt 278fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="74.76.135.210"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.182.46.211"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.0.141.214"/>
    </slice>
    <from sec="1189314592" usec="0"/>
    <to sec="1189314594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.12.207.214"/>
    </slice>
    <from sec="1189314371" usec="0"/>
    <to sec="1189314445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.206.56.215"/>
    </slice>
    <from sec="1189314612" usec="0"/>
    <to sec="1189314746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.22.192.218"/>
    </slice>
    <from sec="1189314372" usec="0"/>
    <to sec="1189314381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.238.35.220"/>
    </slice>
    <from sec="1189314492" usec="0"/>
    <to sec="1189314502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.205.192.220"/>
    </slice>
    <from sec="1189314454" usec="0"/>
    <to sec="1189314466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.104.217.223"/>
    </slice>
    <from sec="1189314016" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.70.224"/>
    </slice>
    <from sec="1189314866" usec="0"/>
    <to sec="1189314887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
2188[label="157.25.73.224;s;43pkt 43fpkt", shape=diamond, color=yellow];
5380[label="157.25.73.224;46pkt 46fpkt", shape=pentagon, color=darkviolet];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{157.25.73.224:25, *:*}[65.2174%]&lt;BR/&gt;{157.25.73.224:110, *:*}[34.7826%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.1461%)&lt;BR/&gt; 110: (16.8539%)&lt;BR/&gt; 61281: (1.1236%)&lt;BR/&gt; 60412: (1.1236%)&lt;BR/&gt; 56164: (1.1236%)&gt;];
}
2188--5380[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter src_ip="157.25.73.224" src_port="25"/>
      <filter src_ip="157.25.73.224" src_port="110"/>
    </slice>
    <from sec="1189314083" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.213.87.225"/>
    </slice>
    <from sec="1189314577" usec="0"/>
    <to sec="1189314667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.59.173.226"/>
    </slice>
    <from sec="1189314190" usec="0"/>
    <to sec="1189314424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.202.167.228"/>
    </slice>
    <from sec="1189314385" usec="0"/>
    <to sec="1189314467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.123.187.229"/>
    </slice>
    <from sec="1189314549" usec="0"/>
    <to sec="1189314564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="157.25.156.231"/>
    </slice>
    <from sec="1189314115" usec="0"/>
    <to sec="1189314161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.3.109.233"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.23.65.234"/>
    </slice>
    <from sec="1189314512" usec="0"/>
    <to sec="1189314528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.90.70.237"/>
    </slice>
    <from sec="1189314195" usec="0"/>
    <to sec="1189314492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.743282,1.44999,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_613{
style=filled;
color=gray75;
270[label="168.206.4.242;s;1157pkt 1157fpkt", shape=diamond, color=yellow];
806[label="202.40.12.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
819[label="18.79.45.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
850[label="194.44.216.94;d;1pkt 1fpkt", shape=diamond, color=yellow];
1086[label="38.3.16.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
1097[label="39.164.210.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
1136[label="193.153.97.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
1342[label="36.71.173.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1354[label="193.216.215.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
1363[label="39.69.153.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
1378[label="33.164.130.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
1384[label="194.10.154.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
1388[label="32.228.16.217;d;1pkt 1fpkt", shape=diamond, color=yellow];
1403[label="193.226.141.64;d;1pkt 1fpkt", shape=diamond, color=yellow];
1597[label="36.73.27.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
1638[label="76.1.168.142;d;7pkt 7fpkt", shape=diamond, color=yellow];
1718[label="28.90.50.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
1720[label="76.18.29.45;d;2pkt 2fpkt", shape=diamond, color=yellow];
2207[label="195.83.200.177;d;2pkt 2fpkt", shape=diamond, color=yellow];
2973[label="194.44.216.94;d;1pkt 1fpkt", shape=hexagon, color=black];
3067[label="193.153.97.166;d;1pkt 1fpkt", shape=hexagon, color=black];
3160[label="38.3.16.127;d;1pkt 1fpkt", shape=hexagon, color=black];
3170[label="33.164.130.198;d;1pkt 1fpkt", shape=hexagon, color=black];
3314[label="39.69.153.228;d;1pkt 1fpkt", shape=hexagon, color=black];
3330[label="194.10.154.27;d;1pkt 1fpkt", shape=hexagon, color=black];
3334[label="32.228.16.217;d;1pkt 1fpkt", shape=hexagon, color=black];
3369[label="28.90.50.14;d;1pkt 1fpkt", shape=hexagon, color=black];
3371[label="76.18.29.45;d;2pkt 2fpkt", shape=hexagon, color=black];
3508[label="36.71.173.122;d;1pkt 1fpkt", shape=hexagon, color=black];
3597[label="39.164.210.182;d;1pkt 1fpkt", shape=hexagon, color=black];
5478[label="168.206.4.242;1245pkt 1245fpkt", shape=pentagon, color=darkviolet];
stat613[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.4.242:7134, *:*}[69.4779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7134: (33.982%)&lt;BR/&gt; 10339: (0.450635%)&lt;BR/&gt; 8000: (0.450635%)&lt;BR/&gt; 9584: (0.430152%)&lt;BR/&gt; 5836: (0.368701%)&gt;];
}
270--806[label="1;2pkt 2fpkt"];
270--819[label="1;1pkt 1fpkt"];
270--850[label="1;1pkt 1fpkt"];
270--1086[label="1;1pkt 1fpkt"];
270--1097[label="1;1pkt 1fpkt"];
270--1136[label="1;1pkt 1fpkt"];
270--1342[label="1;1pkt 1fpkt"];
270--1354[label="1;1pkt 1fpkt"];
270--1363[label="1;1pkt 1fpkt"];
270--1378[label="1;1pkt 1fpkt"];
270--1384[label="1;1pkt 1fpkt"];
270--1388[label="1;1pkt 1fpkt"];
270--1403[label="1;1pkt 1fpkt"];
270--1597[label="1;1pkt 1fpkt"];
270--1638[label="1;7pkt 7fpkt"];
270--1718[label="1;1pkt 1fpkt"];
270--1720[label="1;2pkt 2fpkt"];
270--2207[label="1;2pkt 2fpkt"];
270--2973[label="1;1pkt 1fpkt"];
270--3067[label="1;1pkt 1fpkt"];
270--3160[label="1;1pkt 1fpkt"];
270--3170[label="1;1pkt 1fpkt"];
270--3314[label="1;1pkt 1fpkt"];
270--3330[label="1;1pkt 1fpkt"];
270--3334[label="1;1pkt 1fpkt"];
270--3369[label="1;1pkt 1fpkt"];
270--3371[label="1;2pkt 2fpkt"];
270--3508[label="1;1pkt 1fpkt"];
270--3597[label="1;1pkt 1fpkt"];
270--5478[label="1;1157pkt 1157fpkt"];
806--5478[label="1;2pkt 2fpkt"];
819--5478[label="1;1pkt 1fpkt"];
850--2973[label="1;1pkt 1fpkt"];
850--5478[label="1;1pkt 1fpkt"];
1086--3160[label="1;1pkt 1fpkt"];
1086--5478[label="1;1pkt 1fpkt"];
1097--3597[label="1;1pkt 1fpkt"];
1097--5478[label="1;1pkt 1fpkt"];
1136--3067[label="1;1pkt 1fpkt"];
1136--5478[label="1;1pkt 1fpkt"];
1342--3508[label="1;1pkt 1fpkt"];
1342--5478[label="1;1pkt 1fpkt"];
1354--5478[label="1;1pkt 1fpkt"];
1363--3314[label="1;1pkt 1fpkt"];
1363--5478[label="1;1pkt 1fpkt"];
1378--3170[label="1;1pkt 1fpkt"];
1378--5478[label="1;1pkt 1fpkt"];
1384--3330[label="1;1pkt 1fpkt"];
1384--5478[label="1;1pkt 1fpkt"];
1388--3334[label="1;1pkt 1fpkt"];
1388--5478[label="1;1pkt 1fpkt"];
1403--5478[label="1;1pkt 1fpkt"];
1597--5478[label="1;1pkt 1fpkt"];
1638--5478[label="1;7pkt 7fpkt"];
1718--3369[label="1;1pkt 1fpkt"];
1718--5478[label="1;1pkt 1fpkt"];
1720--3371[label="1;2pkt 2fpkt"];
1720--5478[label="1;2pkt 2fpkt"];
2207--5478[label="1;2pkt 2fpkt"];
2973--5478[label="1;1pkt 1fpkt"];
3067--5478[label="1;1pkt 1fpkt"];
3160--5478[label="1;1pkt 1fpkt"];
3170--5478[label="1;1pkt 1fpkt"];
3314--5478[label="1;1pkt 1fpkt"];
3330--5478[label="1;1pkt 1fpkt"];
3334--5478[label="1;1pkt 1fpkt"];
3369--5478[label="1;1pkt 1fpkt"];
3371--5478[label="1;2pkt 2fpkt"];
3508--5478[label="1;1pkt 1fpkt"];
3597--5478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="168.206.4.242" src_port="7134"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.50.97.242"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.68.147.244"/>
    </slice>
    <from sec="1189314714" usec="0"/>
    <to sec="1189314780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.193.242.244"/>
    </slice>
    <from sec="1189314479" usec="0"/>
    <to sec="1189314492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.28.47.246"/>
    </slice>
    <from sec="1189314020" usec="0"/>
    <to sec="1189314893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.69.9.247"/>
    </slice>
    <from sec="1189314746" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.91.21.247"/>
    </slice>
    <from sec="1189314418" usec="0"/>
    <to sec="1189314473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.198.103.247"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.7.56.248"/>
    </slice>
    <from sec="1189314697" usec="0"/>
    <to sec="1189314724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.166.85.248"/>
    </slice>
    <from sec="1189314185" usec="0"/>
    <to sec="1189314207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.14.130.248"/>
    </slice>
    <from sec="1189314342" usec="0"/>
    <to sec="1189314361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.20.222.248"/>
    </slice>
    <from sec="1189314678" usec="0"/>
    <to sec="1189314691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.131.49.253"/>
    </slice>
    <from sec="1189314560" usec="0"/>
    <to sec="1189314620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.203.145.254"/>
    </slice>
    <from sec="1189314747" usec="0"/>
    <to sec="1189314754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.472752,1.54694,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.206.224.254"/>
    </slice>
    <from sec="1189314013" usec="0"/>
    <to sec="1189314898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.172.107.0"/>
    </slice>
    <from sec="1189314392" usec="0"/>
    <to sec="1189314411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.96.186.1"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.37.226.1"/>
    </slice>
    <from sec="1189314536" usec="0"/>
    <to sec="1189314610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
3952[label="197.6.91.2;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5572[label="197.6.91.2;3pkt 3fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.6.91.2:80, 128.190.65.180:50423}[33.3333%]&lt;BR/&gt;{197.6.91.2:80, 128.190.65.180:50474}[33.3333%]&lt;BR/&gt;{197.6.91.2:80, 128.190.65.180:50531}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50531: (16.6667%)&lt;BR/&gt; 50474: (16.6667%)&lt;BR/&gt; 50423: (16.6667%)&gt;];
}
3952--5572[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.65.180" dst_port="50531" src_ip="197.6.91.2" src_port="80"/>
      <filter dst_ip="128.190.65.180" dst_port="50474" src_ip="197.6.91.2" src_port="80"/>
      <filter dst_ip="128.190.65.180" dst_port="50423" src_ip="197.6.91.2" src_port="80"/>
    </slice>
    <from sec="1189314690" usec="0"/>
    <to sec="1189314819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.16.226.3"/>
    </slice>
    <from sec="1189314472" usec="0"/>
    <to sec="1189314508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.99.73.4"/>
    </slice>
    <from sec="1189314336" usec="0"/>
    <to sec="1189314366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.146.81.4"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
3982[label="129.29.6.6;31pkt 31fpkt", shape=pentagon, color=darkviolet];
5589[label="129.29.6.6;30pkt 30fpkt", shape=invtriangle, color=brown];
6406[label="129.29.6.6;31pkt 31fpkt", shape=invhouse, color=bisque];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.29.6.6:995, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 60851: (1.63043%)&lt;BR/&gt; 60837: (1.63043%)&lt;BR/&gt; 59091: (1.63043%)&lt;BR/&gt; 55151: (1.63043%)&gt;];
}
3982--5589[label="1;30pkt 30fpkt"];
3982--6406[label="1;31pkt 31fpkt"];
5589--6406[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="129.29.6.6" src_port="995"/>
    </slice>
    <from sec="1189314070" usec="0"/>
    <to sec="1189314872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.3.9.7"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.225.88.7"/>
    </slice>
    <from sec="1189314569" usec="0"/>
    <to sec="1189314573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.53.10.8"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
4010[label="134.112.17.9;11pkt 11fpkt", shape=pentagon, color=darkviolet];
5600[label="134.112.17.9;11pkt 11fpkt", shape=invtriangle, color=brown];
6414[label="134.112.17.9;11pkt 11fpkt", shape=invhouse, color=bisque];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.17.9:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4010--5600[label="1;11pkt 11fpkt"];
4010--6414[label="1;11pkt 11fpkt"];
5600--6414[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="134.112.17.9"/>
    </slice>
    <from sec="1189314059" usec="0"/>
    <to sec="1189314839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.71.130.9"/>
    </slice>
    <from sec="1189314526" usec="0"/>
    <to sec="1189314552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
4023[label="217.72.226.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5608[label="217.72.226.10;3pkt 3fpkt", shape=invtriangle, color=brown];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.72.226.10:80, 128.190.65.180:50270}[33.3333%]&lt;BR/&gt;{217.72.226.10:80, 128.190.65.180:50284}[33.3333%]&lt;BR/&gt;{217.72.226.10:80, 128.190.65.180:50293}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50293: (20%)&lt;BR/&gt; 50284: (20%)&lt;BR/&gt; 50270: (10%)&gt;];
}
4023--5608[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.65.180" dst_port="50293" src_ip="217.72.226.10" src_port="80"/>
      <filter dst_ip="128.190.65.180" dst_port="50284" src_ip="217.72.226.10" src_port="80"/>
      <filter dst_ip="128.190.65.180" dst_port="50270" src_ip="217.72.226.10" src_port="80"/>
    </slice>
    <from sec="1189314515" usec="0"/>
    <to sec="1189314539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.21.174.13"/>
    </slice>
    <from sec="1189314116" usec="0"/>
    <to sec="1189314161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
1675[label="217.155.97.17;d;51pkt 51fpkt", shape=diamond, color=yellow];
4047[label="203.43.72.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5616[label="203.43.72.14;2pkt 2fpkt", shape=invtriangle, color=brown];
6422[label="203.43.72.14;2pkt 2fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.248.182.39:80, 217.155.97.17:*}[56.8627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32823: (3.57143%)&lt;BR/&gt; 32822: (2.67857%)&lt;BR/&gt; 59309: (0.892857%)&lt;BR/&gt; 59301: (0.892857%)&gt;];
}
1675--2170[label="0.222222;10pkt 10fpkt"];
1675--2177[label="0.0392157;2pkt 2fpkt"];
1675--3781[label="0.0980392;5pkt 5fpkt"];
1675--3806[label="0.0588235;3pkt 3fpkt"];
1675--3852[label="0.0980392;5pkt 5fpkt"];
1675--3868[label="0.0588235;3pkt 3fpkt"];
1675--3902[label="0.0980392;5pkt 5fpkt"];
1675--3923[label="0.0588235;3pkt 3fpkt"];
1675--4047[label="1;1pkt 1fpkt"];
1675--5616[label="1;2pkt 2fpkt"];
1675--6422[label="1;2pkt 2fpkt"];
4047--5616[label="1;1pkt 1fpkt"];
4047--6422[label="1;1pkt 1fpkt"];
5616--6422[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.97.17" src_ip="196.248.182.39" src_port="80"/>
    </slice>
    <from sec="1189314008" usec="0"/>
    <to sec="1189314819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.68.78.14"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.206.51.15"/>
    </slice>
    <from sec="1189314538" usec="0"/>
    <to sec="1189314541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.140.230.15"/>
    </slice>
    <from sec="1189314566" usec="0"/>
    <to sec="1189314789" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.74.244.15"/>
    </slice>
    <from sec="1189314682" usec="0"/>
    <to sec="1189314738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.20.222.17"/>
    </slice>
    <from sec="1189314535" usec="0"/>
    <to sec="1189314626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.151.19"/>
    </slice>
    <from sec="1189314020" usec="0"/>
    <to sec="1189314878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.132.167.21"/>
    </slice>
    <from sec="1189314111" usec="0"/>
    <to sec="1189314142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
4106[label="128.190.70.22;82pkt 82fpkt", shape=pentagon, color=darkviolet];
5653[label="128.190.70.22;83pkt 83fpkt", shape=invtriangle, color=brown];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.70.22:2048, 197.201.74.112:*}[53.012%]&lt;BR/&gt;{128.190.70.22:*, 197.58.209.89:80}[31.3253%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2048: (27.2727%)&lt;BR/&gt; 80: (15.7576%)&lt;BR/&gt; 443: (5.75758%)&lt;BR/&gt; 2443: (1.21212%)&lt;BR/&gt; 60817: (0.606061%)&gt;];
}
4106--5653[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="197.201.74.112" src_ip="128.190.70.22" src_port="2048"/>
      <filter dst_ip="197.58.209.89" dst_port="80" src_ip="128.190.70.22"/>
    </slice>
    <from sec="1189314055" usec="0"/>
    <to sec="1189314875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.122.84.24"/>
    </slice>
    <from sec="1189314581" usec="0"/>
    <to sec="1189314688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.110.137.26"/>
    </slice>
    <from sec="1189314460" usec="0"/>
    <to sec="1189314467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.190.224.26"/>
    </slice>
    <from sec="1189314446" usec="0"/>
    <to sec="1189314453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_655{
style=filled;
color=gray75;
4153[label="148.213.74.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5670[label="148.213.74.28;1pkt 1fpkt", shape=invtriangle, color=brown];
stat655[shape=component, label=&lt;Rules:&lt;BR/&gt;{148.213.74.28:46697, 217.155.105.11:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46697: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4153--5670[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.105.11" dst_port="80" src_ip="148.213.74.28" src_port="46697"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.111.72.31"/>
    </slice>
    <from sec="1189314442" usec="0"/>
    <to sec="1189314448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.217.84.31"/>
    </slice>
    <from sec="1189314564" usec="0"/>
    <to sec="1189314591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
1965[label="128.190.104.26;d;5pkt 5fpkt", shape=diamond, color=yellow];
2044[label="77.150.50.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
4181[label="77.150.50.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5684[label="77.150.50.33;2pkt 2fpkt", shape=invtriangle, color=brown];
6461[label="77.150.50.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.3.102.102:48358, 128.190.104.26:80}[20%]&lt;BR/&gt;{38.16.49.107:39723, 128.190.104.26:80}[20%]&lt;BR/&gt;{25.3.110.192:34936, 128.190.104.26:80}[20%]&lt;BR/&gt;{77.150.50.33:1633, 128.190.104.26:80}[20%]&lt;BR/&gt;{77.150.50.33:1635, 128.190.104.26:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1635: (20.8333%)&lt;BR/&gt; 1633: (16.6667%)&lt;BR/&gt; 48358: (4.16667%)&lt;BR/&gt; 39723: (4.16667%)&gt;];
}
1965--2044[label="1;2pkt 2fpkt"];
1965--3785[label="0.6;3pkt 3fpkt"];
1965--4181[label="1;1pkt 1fpkt"];
1965--5684[label="1;2pkt 2fpkt"];
1965--6461[label="1;2pkt 2fpkt"];
2044--3785[label="1;2pkt 2fpkt"];
2044--4181[label="1;1pkt 1fpkt"];
2044--5684[label="1;2pkt 2fpkt"];
2044--6461[label="1;2pkt 2fpkt"];
4181--5684[label="1;1pkt 1fpkt"];
4181--6461[label="1;1pkt 1fpkt"];
5684--6461[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.104.26" dst_port="80" src_ip="77.150.50.33" src_port="1635"/>
      <filter dst_ip="128.190.104.26" dst_port="80" src_ip="77.150.50.33" src_port="1633"/>
      <filter dst_ip="128.190.104.26" dst_port="80" src_ip="25.3.110.192" src_port="34936"/>
      <filter dst_ip="128.190.104.26" dst_port="80" src_ip="38.16.49.107" src_port="39723"/>
      <filter dst_ip="128.190.104.26" dst_port="80" src_ip="25.3.102.102" src_port="48358"/>
    </slice>
    <from sec="1189314381" usec="0"/>
    <to sec="1189314565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_659{
style=filled;
color=gray75;
4184[label="28.93.116.33;20pkt 20fpkt", shape=pentagon, color=darkviolet];
5687[label="28.93.116.33;20pkt 20fpkt", shape=invtriangle, color=brown];
6463[label="28.93.116.33;20pkt 20fpkt", shape=invhouse, color=bisque];
stat659[shape=component, label=&lt;Rules:&lt;BR/&gt;{28.93.116.33:*, 128.190.92.118:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 61838: (2.5%)&lt;BR/&gt; 61707: (2.5%)&lt;BR/&gt; 61706: (2.5%)&lt;BR/&gt; 61642: (2.5%)&gt;];
}
4184--5687[label="1;20pkt 20fpkt"];
4184--6463[label="1;20pkt 20fpkt"];
5687--6463[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.92.118" dst_port="25" src_ip="28.93.116.33"/>
    </slice>
    <from sec="1189314712" usec="0"/>
    <to sec="1189314755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
4185[label="134.99.130.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5688[label="134.99.130.33;1pkt 1fpkt", shape=invtriangle, color=brown];
6464[label="134.99.130.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.130.33:1226, 217.161.15.225:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1226: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4185--5688[label="1;1pkt 1fpkt"];
4185--6464[label="1;1pkt 1fpkt"];
5688--6464[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.161.15.225" dst_port="80" src_ip="134.99.130.33" src_port="1226"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
4204[label="7.119.52.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5694[label="7.119.52.36;3pkt 3fpkt", shape=invtriangle, color=brown];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{7.119.52.36:51021, 128.190.82.211:80}[33.3333%]&lt;BR/&gt;{7.119.52.36:51022, 128.190.82.211:80}[33.3333%]&lt;BR/&gt;{7.119.52.36:51023, 128.190.82.211:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51023: (16.6667%)&lt;BR/&gt; 51022: (16.6667%)&lt;BR/&gt; 51021: (16.6667%)&gt;];
}
4204--5694[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.82.211" dst_port="80" src_ip="7.119.52.36" src_port="51023"/>
      <filter dst_ip="128.190.82.211" dst_port="80" src_ip="7.119.52.36" src_port="51022"/>
      <filter dst_ip="128.190.82.211" dst_port="80" src_ip="7.119.52.36" src_port="51021"/>
    </slice>
    <from sec="1189314746" usec="0"/>
    <to sec="1189314784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_662{
style=filled;
color=gray75;
4209[label="134.99.170.36;9pkt 9fpkt", shape=pentagon, color=darkviolet];
5697[label="134.99.170.36;9pkt 9fpkt", shape=invtriangle, color=brown];
stat662[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.170.36:80, 196.249.112.128:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63534: (5.55556%)&lt;BR/&gt; 2102: (5.55556%)&lt;BR/&gt; 2101: (5.55556%)&lt;BR/&gt; 2096: (5.55556%)&gt;];
}
4209--5697[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="196.249.112.128" src_ip="134.99.170.36" src_port="80"/>
    </slice>
    <from sec="1189314198" usec="0"/>
    <to sec="1189314500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.81.171.36"/>
    </slice>
    <from sec="1189314214" usec="0"/>
    <to sec="1189314257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.80.26.37"/>
    </slice>
    <from sec="1189314817" usec="0"/>
    <to sec="1189314851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.111.87.37"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.169.9.38"/>
    </slice>
    <from sec="1189314481" usec="0"/>
    <to sec="1189314511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.46.216.39"/>
    </slice>
    <from sec="1189314172" usec="0"/>
    <to sec="1189314187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.138.0.40"/>
    </slice>
    <from sec="1189314551" usec="0"/>
    <to sec="1189314576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
498[label="216.212.117.40;s;194pkt 194fpkt", shape=diamond, color=yellow];
1048[label="38.16.49.65;d;180pkt 180fpkt", shape=diamond, color=yellow];
1441[label="20.122.184.190;d;16pkt 16fpkt", shape=diamond, color=yellow];
2246[label="26.51.114.122;d;12pkt 12fpkt", shape=diamond, color=yellow];
3240[label="216.212.117.40;s;148pkt 148fpkt", shape=hexagon, color=black];
3362[label="134.112.83.117;s;57pkt 57fpkt", shape=hexagon, color=black];
4234[label="216.212.117.40;212pkt 212fpkt", shape=pentagon, color=darkviolet];
5715[label="216.212.117.40;212pkt 212fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.212.117.40:80, *:*}[46.3087%]&lt;BR/&gt;{216.212.114.135:80, 38.16.49.65:*}[32.6622%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9331%)&lt;BR/&gt; 8080: (0.921435%)&lt;BR/&gt; 59483: (0.242483%)&lt;BR/&gt; 57218: (0.242483%)&lt;BR/&gt; 54878: (0.242483%)&gt;];
}
498--1048[label="0.0777778;14pkt 14fpkt"];
498--1441[label="0.125;2pkt 2fpkt"];
498--1645[label="0.0138889;2pkt 2fpkt"];
498--1910[label="0.0606061;2pkt 2fpkt"];
498--2246[label="0.333333;4pkt 4fpkt"];
498--2462[label="0.0909091;6pkt 6fpkt"];
498--2713[label="0.0422535;3pkt 3fpkt"];
498--3240[label="1;148pkt 148fpkt"];
498--3781[label="0.108247;21pkt 21fpkt"];
498--3806[label="0.0360825;7pkt 7fpkt"];
498--3852[label="0.108247;21pkt 21fpkt"];
498--3868[label="0.0360825;7pkt 7fpkt"];
498--3902[label="0.108247;21pkt 21fpkt"];
498--3923[label="0.0360825;7pkt 7fpkt"];
498--4234[label="1;194pkt 194fpkt"];
498--5715[label="1;194pkt 194fpkt"];
1048--1413[label="0.65;13pkt 13fpkt"];
1048--3021[label="0.00555556;1pkt 1fpkt"];
1048--3240[label="0.0675676;10pkt 10fpkt"];
1048--3415[label="0.00555556;1pkt 1fpkt"];
1048--3781[label="0.0555556;10pkt 10fpkt"];
1048--3806[label="0.0555556;10pkt 10fpkt"];
1048--3852[label="0.0555556;10pkt 10fpkt"];
1048--3868[label="0.0555556;10pkt 10fpkt"];
1048--3902[label="0.0555556;10pkt 10fpkt"];
1048--3922[label="0.00555556;1pkt 1fpkt"];
1048--3923[label="0.0555556;10pkt 10fpkt"];
1048--4234[label="0.0777778;14pkt 14fpkt"];
1048--4832[label="0.811111;146pkt 146fpkt"];
1048--5715[label="0.0777778;14pkt 14fpkt"];
1048--6020[label="0.811111;146pkt 146fpkt"];
1441--2715[label="0.0625;1pkt 1fpkt"];
1441--3146[label="0.0625;1pkt 1fpkt"];
1441--3240[label="0.125;2pkt 2fpkt"];
1441--3362[label="0.625;10pkt 10fpkt"];
1441--4234[label="0.125;2pkt 2fpkt"];
1441--4727[label="0.625;10pkt 10fpkt"];
1441--5715[label="0.125;2pkt 2fpkt"];
2246--3240[label="0.333333;4pkt 4fpkt"];
2246--3634[label="0.333333;4pkt 4fpkt"];
2246--3781[label="0.583333;7pkt 7fpkt"];
2246--3852[label="0.583333;7pkt 7fpkt"];
2246--3902[label="0.583333;7pkt 7fpkt"];
2246--4234[label="0.333333;4pkt 4fpkt"];
2246--5715[label="0.333333;4pkt 4fpkt"];
3240--3781[label="0.0810811;12pkt 12fpkt"];
3240--3806[label="0.00675676;1pkt 1fpkt"];
3240--3852[label="0.0810811;12pkt 12fpkt"];
3240--3868[label="0.00675676;1pkt 1fpkt"];
3240--3902[label="0.0810811;12pkt 12fpkt"];
3240--3923[label="0.00675676;1pkt 1fpkt"];
3240--4234[label="1;148pkt 148fpkt"];
3240--5715[label="1;148pkt 148fpkt"];
3362--3465[label="0.0175439;1pkt 1fpkt"];
3362--3632[label="0.1;2pkt 2fpkt"];
3362--3781[label="0.0175439;1pkt 1fpkt"];
3362--3852[label="0.0175439;1pkt 1fpkt"];
3362--3902[label="0.0175439;1pkt 1fpkt"];
3362--4727[label="1;57pkt 57fpkt"];
4234--5715[label="1;212pkt 212fpkt"];
</description>
    <slice>
      <filter src_ip="216.212.117.40" src_port="80"/>
      <filter dst_ip="38.16.49.65" src_ip="216.212.114.135" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
4243[label="26.0.162.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5720[label="26.0.162.41;2pkt 2fpkt", shape=invtriangle, color=brown];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.0.162.41:52430, 128.190.125.97:80}[50%]&lt;BR/&gt;{26.0.162.41:50674, 217.155.112.120:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52430: (25%)&lt;BR/&gt; 50674: (25%)&gt;];
}
4243--5720[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.112.120" dst_port="80" src_ip="26.0.162.41" src_port="50674"/>
      <filter dst_ip="128.190.125.97" dst_port="80" src_ip="26.0.162.41" src_port="52430"/>
    </slice>
    <from sec="1189314822" usec="0"/>
    <to sec="1189314876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.16.112.42"/>
    </slice>
    <from sec="1189314274" usec="0"/>
    <to sec="1189314346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
776[label="77.26.46.43;s;2258pkt 2258fpkt", shape=diamond, color=yellow];
4249[label="77.26.46.43;2455pkt 2455fpkt", shape=pentagon, color=darkviolet];
5726[label="77.26.46.43;2455pkt 2455fpkt", shape=invtriangle, color=brown];
6483[label="77.26.46.43;2455pkt 2455fpkt", shape=invhouse, color=bisque];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.26.46.43:3687, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3687: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
776--3786[label="0.0540301;122pkt 122fpkt"];
776--4249[label="1;2258pkt 2258fpkt"];
776--5726[label="1;2258pkt 2258fpkt"];
776--6483[label="1;2258pkt 2258fpkt"];
4249--5726[label="1;2455pkt 2455fpkt"];
4249--6483[label="1;2455pkt 2455fpkt"];
5726--6483[label="1;2455pkt 2455fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="77.26.46.43" src_port="3687"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_674{
style=filled;
color=gray75;
4261[label="210.36.108.44;51pkt 51fpkt", shape=pentagon, color=darkviolet];
5733[label="210.36.108.44;51pkt 51fpkt", shape=invtriangle, color=brown];
stat674[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.36.108.44:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4966: (0.980392%)&lt;BR/&gt; 4942: (0.980392%)&lt;BR/&gt; 4842: (0.980392%)&lt;BR/&gt; 4701: (0.980392%)&gt;];
}
4261--5733[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="210.36.108.44"/>
    </slice>
    <from sec="1189314019" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.38.159.45"/>
    </slice>
    <from sec="1189314004" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.677558,1.49701,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_676{
style=filled;
color=gray75;
1450[label="168.206.38.21;d;31pkt 31fpkt", shape=diamond, color=yellow];
1514[label="200.78.164.46;s;157pkt 157fpkt", shape=diamond, color=yellow];
5742[label="200.78.164.46;182pkt 182fpkt", shape=invtriangle, color=brown];
stat676[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.78.164.46:80, 168.206.78.213:*}[47.8022%]&lt;BR/&gt;{200.78.164.46:80, 168.206.38.21:*}[43.4066%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3047: (0.405405%)&lt;BR/&gt; 3039: (0.405405%)&lt;BR/&gt; 3038: (0.405405%)&lt;BR/&gt; 3037: (0.405405%)&gt;];
}
1450--1514[label="0.709677;22pkt 22fpkt"];
1450--4274[label="1;31pkt 31fpkt"];
1450--5742[label="1;31pkt 31fpkt"];
1514--1963[label="0.986111;71pkt 71fpkt"];
1514--3248[label="0.101911;16pkt 16fpkt"];
1514--3642[label="0.986111;71pkt 71fpkt"];
1514--3781[label="0.101911;16pkt 16fpkt"];
1514--3806[label="0.0573248;9pkt 9fpkt"];
1514--3852[label="0.101911;16pkt 16fpkt"];
1514--3868[label="0.0573248;9pkt 9fpkt"];
1514--3902[label="0.101911;16pkt 16fpkt"];
1514--3923[label="0.0573248;9pkt 9fpkt"];
1514--4274[label="1;157pkt 157fpkt"];
1514--5742[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.78.213" src_ip="200.78.164.46" src_port="80"/>
      <filter dst_ip="168.206.38.21" src_ip="200.78.164.46" src_port="80"/>
    </slice>
    <from sec="1189314009" usec="0"/>
    <to sec="1189314897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.23.177.46"/>
    </slice>
    <from sec="1189314427" usec="0"/>
    <to sec="1189314480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="79.80.97.48"/>
    </slice>
    <from sec="1189314503" usec="0"/>
    <to sec="1189314569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.176.75.53"/>
    </slice>
    <from sec="1189314309" usec="0"/>
    <to sec="1189314323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.167.137.53"/>
    </slice>
    <from sec="1189314319" usec="0"/>
    <to sec="1189314351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.110.130.54"/>
    </slice>
    <from sec="1189314495" usec="0"/>
    <to sec="1189314504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.49.170.55"/>
    </slice>
    <from sec="1189314610" usec="0"/>
    <to sec="1189314631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.206.162.58"/>
    </slice>
    <from sec="1189314738" usec="0"/>
    <to sec="1189314745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.194.164.58"/>
    </slice>
    <from sec="1189314545" usec="0"/>
    <to sec="1189314549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.70.215.58"/>
    </slice>
    <from sec="1189314346" usec="0"/>
    <to sec="1189314476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.52.151.59"/>
    </slice>
    <from sec="1189314443" usec="0"/>
    <to sec="1189314505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,020,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
1891[label="134.99.210.60;s;33pkt 33fpkt", shape=diamond, color=yellow];
2331[label="197.66.219.234;d;373pkt 373fpkt", shape=diamond, color=yellow];
4381[label="134.99.210.60;35pkt 35fpkt", shape=pentagon, color=darkviolet];
5795[label="134.99.210.60;35pkt 35fpkt", shape=invtriangle, color=brown];
6515[label="134.99.210.60;34pkt 34fpkt", shape=invhouse, color=bisque];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 197.66.219.234:0}[91.6462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1891--2331[label="0.030303;1pkt 1fpkt"];
1891--4381[label="1;33pkt 33fpkt"];
1891--5795[label="1;33pkt 33fpkt"];
1891--6515[label="0.969697;32pkt 32fpkt"];
2331--4381[label="0.0285714;1pkt 1fpkt"];
2331--5327[label="0.00662252;1pkt 1fpkt"];
2331--5795[label="0.0285714;1pkt 1fpkt"];
2331--6272[label="0.00662252;1pkt 1fpkt"];
2331--6515[label="0.0294118;1pkt 1fpkt"];
2331--6741[label="0.00662252;1pkt 1fpkt"];
4381--5795[label="1;35pkt 35fpkt"];
4381--6515[label="1;34pkt 34fpkt"];
5795--6515[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="197.66.219.234"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.134.53.62"/>
    </slice>
    <from sec="1189314574" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_691{
style=filled;
color=gray75;
835[label="208.211.146.65;s;140pkt 140fpkt", shape=diamond, color=yellow];
4403[label="208.211.146.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5809[label="208.211.146.65;1pkt 1fpkt", shape=invtriangle, color=brown];
6524[label="208.211.146.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat691[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.211.146.65:6667, *:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.5315%)&lt;BR/&gt; 6662: (3.4965%)&lt;BR/&gt; 6665: (3.14685%)&lt;BR/&gt; 6664: (3.14685%)&lt;BR/&gt; 6668: (2.7972%)&gt;];
}
835--3807[label="0.00714286;1pkt 1fpkt"];
835--4403[label="1;1pkt 1fpkt"];
835--5809[label="1;1pkt 1fpkt"];
835--6524[label="1;1pkt 1fpkt"];
4403--5809[label="1;1pkt 1fpkt"];
4403--6524[label="1;1pkt 1fpkt"];
5809--6524[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="208.211.146.65" src_port="6667"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976399,1.57268,999,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
27[label="200.78.216.66s;1pkt 1fpkt", shape=rectangle, color=red];
4408[label="200.78.216.66;5pkt 5fpkt", shape=pentagon, color=darkviolet];
5812[label="200.78.216.66;5pkt 5fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.78.216.66:25657, 216.212.117.44:110}[20%]&lt;BR/&gt;{200.78.216.66:24079, 128.190.52.53:995}[20%]&lt;BR/&gt;{200.78.216.66:34346, 134.112.166.142:995}[20%]&lt;BR/&gt;{200.78.216.66:28195, 134.112.77.131:25}[20%]&lt;BR/&gt;{200.78.216.66:31784, 134.112.77.131:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (18.1818%)&lt;BR/&gt; 25: (18.1818%)&lt;BR/&gt; 25657: (13.6364%)&lt;BR/&gt; 110: (13.6364%)&lt;BR/&gt; 34346: (9.09091%)&gt;];
}
27--4408[label="1;1pkt 1fpkt"];
27--5812[label="1;1pkt 1fpkt"];
4408--5812[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.77.131" dst_port="25" src_ip="200.78.216.66" src_port="31784"/>
      <filter dst_ip="134.112.77.131" dst_port="25" src_ip="200.78.216.66" src_port="28195"/>
      <filter dst_ip="134.112.166.142" dst_port="995" src_ip="200.78.216.66" src_port="34346"/>
      <filter dst_ip="128.190.52.53" dst_port="995" src_ip="200.78.216.66" src_port="24079"/>
      <filter dst_ip="216.212.117.44" dst_port="110" src_ip="200.78.216.66" src_port="25657"/>
    </slice>
    <from sec="1189314034" usec="0"/>
    <to sec="1189314712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
1634[label="197.196.125.20;d;369pkt 369fpkt", shape=diamond, color=yellow];
4409[label="134.111.217.66;77pkt 77fpkt", shape=pentagon, color=darkviolet];
5813[label="134.111.217.66;77pkt 77fpkt", shape=invtriangle, color=brown];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.111.217.66:1433, 197.196.125.20:*}[20.8%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 3690: (0.382409%)&lt;BR/&gt; 2874: (0.382409%)&lt;BR/&gt; 2702: (0.382409%)&lt;BR/&gt; 2623: (0.382409%)&gt;];
}
1634--4409[label="0.922078;71pkt 71fpkt"];
1634--5813[label="0.922078;71pkt 71fpkt"];
4409--5813[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="197.196.125.20" src_ip="134.111.217.66" src_port="1433"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.108.216.68"/>
    </slice>
    <from sec="1189314300" usec="0"/>
    <to sec="1189314312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
4438[label="26.0.162.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5823[label="26.0.162.70;1pkt 1fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.0.162.70:43768, 134.112.166.196:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43768: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4438--5823[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.166.196" dst_port="80" src_ip="26.0.162.70" src_port="43768"/>
    </slice>
    <from sec="1189314771" usec="0"/>
    <to sec="1189314774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.238.132.72"/>
    </slice>
    <from sec="1189314528" usec="0"/>
    <to sec="1189314565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_697{
style=filled;
color=gray75;
4452[label="26.11.181.73;251pkt 251fpkt", shape=pentagon, color=darkviolet];
5833[label="26.11.181.73;251pkt 251fpkt", shape=invtriangle, color=brown];
stat697[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.11.181.73:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4452--5833[label="1;251pkt 251fpkt"];
</description>
    <slice>
      <filter src_ip="26.11.181.73"/>
    </slice>
    <from sec="1189314537" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.178.218.73"/>
    </slice>
    <from sec="1189314456" usec="0"/>
    <to sec="1189314482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_699{
style=filled;
color=gray75;
1196[label="128.190.173.75;s;235pkt 235fpkt", shape=diamond, color=yellow];
2452[label="16.42.42.34;d;56pkt 56fpkt", shape=diamond, color=yellow];
4459[label="128.190.173.75;236pkt 236fpkt", shape=pentagon, color=darkviolet];
5839[label="128.190.173.75;236pkt 236fpkt", shape=invtriangle, color=brown];
stat699[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.173.75:*, *:80}[77.3196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8375%)&lt;BR/&gt; 17771: (0.78637%)&lt;BR/&gt; 33176: (0.589777%)&lt;BR/&gt; 33666: (0.393185%)&lt;BR/&gt; 33602: (0.393185%)&gt;];
}
1196--2169[label="0.0444444;2pkt 2fpkt"];
1196--2420[label="0.0366972;4pkt 4fpkt"];
1196--2452[label="0.0178571;1pkt 1fpkt"];
1196--3623[label="0.0366972;4pkt 4fpkt"];
1196--3762[label="0.012766;3pkt 3fpkt"];
1196--3785[label="0.13617;32pkt 32fpkt"];
1196--3807[label="0.00425532;1pkt 1fpkt"];
1196--4459[label="1;235pkt 235fpkt"];
1196--5839[label="1;235pkt 235fpkt"];
2452--3131[label="0.160714;9pkt 9fpkt"];
2452--3785[label="0.0178571;1pkt 1fpkt"];
2452--3807[label="0.0892857;5pkt 5fpkt"];
2452--4459[label="0.0178571;1pkt 1fpkt"];
2452--5839[label="0.0178571;1pkt 1fpkt"];
4459--5839[label="1;236pkt 236fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="128.190.173.75"/>
    </slice>
    <from sec="1189314008" usec="0"/>
    <to sec="1189314891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.125.23.76"/>
    </slice>
    <from sec="1189314533" usec="0"/>
    <to sec="1189314577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.203.242.76"/>
    </slice>
    <from sec="1189314481" usec="0"/>
    <to sec="1189314500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.102.163.78"/>
    </slice>
    <from sec="1189314157" usec="0"/>
    <to sec="1189314182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_703{
style=filled;
color=gray75;
353[label="128.190.160.79;s;677pkt 677fpkt", shape=diamond, color=yellow];
4492[label="128.190.160.79;712pkt 712fpkt", shape=pentagon, color=darkviolet];
5853[label="128.190.160.79;712pkt 712fpkt", shape=invtriangle, color=brown];
stat703[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.160.79:*, *:25}[75.8427%]&lt;BR/&gt;{128.190.160.79:25, *:*}[22.7528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2861%)&lt;BR/&gt; 110: (0.428367%)&lt;BR/&gt; 113: (0.285578%)&lt;BR/&gt; 3421: (0.142789%)&lt;BR/&gt; 2094: (0.142789%)&gt;];
}
353--1150[label="0.0961538;20pkt 20fpkt"];
353--1869[label="0.00694444;1pkt 1fpkt"];
353--2706[label="0.26087;12pkt 12fpkt"];
353--3761[label="0.0516987;35pkt 35fpkt"];
353--4492[label="1;677pkt 677fpkt"];
353--5853[label="1;677pkt 677fpkt"];
4492--5853[label="1;712pkt 712fpkt"];
</description>
    <slice>
      <filter src_ip="128.190.160.79" src_port="25"/>
      <filter dst_port="25" src_ip="128.190.160.79"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.207.173.81"/>
    </slice>
    <from sec="1189314143" usec="0"/>
    <to sec="1189314219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.43.138.83"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
4525[label="208.68.96.85;37pkt 37fpkt", shape=pentagon, color=darkviolet];
5867[label="208.68.96.85;37pkt 37fpkt", shape=invtriangle, color=brown];
6554[label="208.68.96.85;37pkt 37fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.68.96.85:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63973: (1.35135%)&lt;BR/&gt; 53846: (1.35135%)&lt;BR/&gt; 35548: (1.35135%)&lt;BR/&gt; 34682: (1.35135%)&gt;];
}
4525--5867[label="1;37pkt 37fpkt"];
4525--6554[label="1;37pkt 37fpkt"];
5867--6554[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="208.68.96.85" src_port="25"/>
    </slice>
    <from sec="1189314011" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_708{
style=filled;
color=gray75;
4539[label="172.223.71.88;2pkt 2fpkt", shape=pentagon, color=darkviolet];
5871[label="172.223.71.88;2pkt 2fpkt", shape=invtriangle, color=brown];
6555[label="172.223.71.88;2pkt 2fpkt", shape=invhouse, color=bisque];
stat708[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.223.71.88:80, 20.102.161.180:34833}[50%]&lt;BR/&gt;{172.223.71.88:80, 20.102.161.180:38102}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38102: (25%)&lt;BR/&gt; 34833: (25%)&gt;];
}
4539--5871[label="1;2pkt 2fpkt"];
4539--6555[label="1;2pkt 2fpkt"];
5871--6555[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.102.161.180" dst_port="38102" src_ip="172.223.71.88" src_port="80"/>
      <filter dst_ip="20.102.161.180" dst_port="34833" src_ip="172.223.71.88" src_port="80"/>
    </slice>
    <from sec="1189314120" usec="0"/>
    <to sec="1189314727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
4549[label="129.29.36.89;6pkt 6fpkt", shape=pentagon, color=darkviolet];
5876[label="129.29.36.89;6pkt 6fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.29.36.89:*, 130.54.41.248:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 57206: (8.33333%)&lt;BR/&gt; 57205: (8.33333%)&lt;BR/&gt; 57204: (8.33333%)&lt;BR/&gt; 35353: (8.33333%)&gt;];
}
4549--5876[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="130.54.41.248" dst_port="443" src_ip="129.29.36.89"/>
    </slice>
    <from sec="1189314813" usec="0"/>
    <to sec="1189314838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.141.46.94"/>
    </slice>
    <from sec="1189314563" usec="0"/>
    <to sec="1189314652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.152.130.98"/>
    </slice>
    <from sec="1189314431" usec="0"/>
    <to sec="1189314441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
4641[label="134.112.73.104;30pkt 30fpkt", shape=pentagon, color=darkviolet];
5918[label="134.112.73.104;30pkt 30fpkt", shape=invtriangle, color=brown];
6578[label="134.112.73.104;30pkt 30fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.73.104:*, 197.194.233.53:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44836: (1.66667%)&lt;BR/&gt; 44835: (1.66667%)&lt;BR/&gt; 44834: (1.66667%)&lt;BR/&gt; 44833: (1.66667%)&gt;];
}
4641--5918[label="1;30pkt 30fpkt"];
4641--6578[label="1;30pkt 30fpkt"];
5918--6578[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="197.194.233.53" dst_port="80" src_ip="134.112.73.104"/>
    </slice>
    <from sec="1189314393" usec="0"/>
    <to sec="1189314414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.101.154.104"/>
    </slice>
    <from sec="1189314453" usec="0"/>
    <to sec="1189314458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.129.115.105"/>
    </slice>
    <from sec="1189314298" usec="0"/>
    <to sec="1189314310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="198.149.75.106"/>
    </slice>
    <from sec="1189314010" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="16.132.3.108"/>
    </slice>
    <from sec="1189314840" usec="0"/>
    <to sec="1189314844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.107.23.112"/>
    </slice>
    <from sec="1189314619" usec="0"/>
    <to sec="1189314625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.20.217.112"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.22.199.113"/>
    </slice>
    <from sec="1189314399" usec="0"/>
    <to sec="1189314437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.172.2.116"/>
    </slice>
    <from sec="1189314556" usec="0"/>
    <to sec="1189314569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.66.96.117"/>
    </slice>
    <from sec="1189314542" usec="0"/>
    <to sec="1189314568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.194.6.121"/>
    </slice>
    <from sec="1189314470" usec="0"/>
    <to sec="1189314521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.148.21.125"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.246.75.127"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
4774[label="75.146.120.127;248pkt 248fpkt", shape=pentagon, color=darkviolet];
5992[label="75.146.120.127;248pkt 248fpkt", shape=invtriangle, color=brown];
6613[label="75.146.120.127;248pkt 248fpkt", shape=invhouse, color=bisque];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.146.120.127:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4774--5992[label="1;248pkt 248fpkt"];
4774--6613[label="1;248pkt 248fpkt"];
5992--6613[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="75.146.120.127" src_port="1032"/>
    </slice>
    <from sec="1189314844" usec="0"/>
    <to sec="1189314858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.16.232.129"/>
    </slice>
    <from sec="1189314751" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
4825[label="222.242.164.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6018[label="222.242.164.134;1pkt 1fpkt", shape=invtriangle, color=brown];
6629[label="222.242.164.134;1pkt 1fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.242.164.134:80, 134.168.202.108:57368}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57368: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4825--6018[label="1;1pkt 1fpkt"];
4825--6629[label="1;1pkt 1fpkt"];
6018--6629[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.168.202.108" dst_port="57368" src_ip="222.242.164.134" src_port="80"/>
    </slice>
    <from sec="1189314461" usec="0"/>
    <to sec="1189314471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.224.116.138"/>
    </slice>
    <from sec="1189314580" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.5.164.140"/>
    </slice>
    <from sec="1189314421" usec="0"/>
    <to sec="1189314668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
4881[label="134.112.21.142;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6039[label="134.112.21.142;9pkt 9fpkt", shape=invtriangle, color=brown];
6639[label="134.112.21.142;9pkt 9fpkt", shape=invhouse, color=bisque];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.21.142:*, 222.202.174.17:7001}[22.2222%]&lt;BR/&gt;{134.112.21.142:*, 222.202.219.156:443}[22.2222%]&lt;BR/&gt;{134.112.21.142:*, *:80}[22.2222%]&lt;BR/&gt;{134.112.21.142:*, *:1863}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (16.6667%)&lt;BR/&gt; 7001: (11.1111%)&lt;BR/&gt; 1863: (11.1111%)&lt;BR/&gt; 80: (11.1111%)&lt;BR/&gt; 2250: (5.55556%)&gt;];
}
4881--6039[label="1;9pkt 9fpkt"];
4881--6639[label="1;9pkt 9fpkt"];
6039--6639[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="1863" src_ip="134.112.21.142"/>
      <filter dst_port="80" src_ip="134.112.21.142"/>
      <filter dst_ip="222.202.219.156" dst_port="443" src_ip="134.112.21.142"/>
      <filter dst_ip="222.202.174.17" dst_port="7001" src_ip="134.112.21.142"/>
    </slice>
    <from sec="1189314845" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
4905[label="134.99.136.144;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6046[label="134.99.136.144;3pkt 3fpkt", shape=invtriangle, color=brown];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.99.136.144:80, 20.102.170.84:55555}[33.3333%]&lt;BR/&gt;{134.99.136.144:80, 74.32.192.24:1349}[33.3333%]&lt;BR/&gt;{134.99.136.144:80, 74.32.192.24:1350}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55555: (16.6667%)&lt;BR/&gt; 1350: (16.6667%)&lt;BR/&gt; 1349: (16.6667%)&gt;];
}
4905--6046[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="74.32.192.24" dst_port="1350" src_ip="134.99.136.144" src_port="80"/>
      <filter dst_ip="74.32.192.24" dst_port="1349" src_ip="134.99.136.144" src_port="80"/>
      <filter dst_ip="20.102.170.84" dst_port="55555" src_ip="134.99.136.144" src_port="80"/>
    </slice>
    <from sec="1189314739" usec="0"/>
    <to sec="1189314805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
4912[label="128.190.53.145;23pkt 23fpkt", shape=pentagon, color=darkviolet];
6050[label="128.190.53.145;23pkt 23fpkt", shape=invtriangle, color=brown];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.53.145:110, 217.150.14.168:*}[65.2174%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 63876: (2.17391%)&lt;BR/&gt; 60260: (2.17391%)&lt;BR/&gt; 55904: (2.17391%)&lt;BR/&gt; 54887: (2.17391%)&gt;];
}
4912--6050[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="217.150.14.168" src_ip="128.190.53.145" src_port="110"/>
    </slice>
    <from sec="1189314019" usec="0"/>
    <to sec="1189314884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.118.198.147"/>
    </slice>
    <from sec="1189314079" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
4931[label="196.74.16.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6064[label="196.74.16.148;2pkt 2fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.74.16.148:4328, 217.155.101.72:3128}[50%]&lt;BR/&gt;{196.74.16.148:137, 217.155.101.73:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 4328: (25%)&lt;BR/&gt; 3128: (25%)&gt;];
}
4931--6064[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.101.73" dst_port="137" src_ip="196.74.16.148" src_port="137"/>
      <filter dst_ip="217.155.101.72" dst_port="3128" src_ip="196.74.16.148" src_port="4328"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.564217,1.4871,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
1826[label="128.190.141.36;d;203pkt 203fpkt", shape=diamond, color=yellow];
2566[label="200.189.126.160;s;95pkt 95fpkt", shape=diamond, color=yellow];
2778[label="20.42.232.106;s;61pkt 61fpkt", shape=diamond, color=yellow];
4995[label="200.189.126.160;95pkt 95fpkt", shape=pentagon, color=darkviolet];
5039[label="200.189.126.167;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.189.126.160:80, 128.190.141.36:*}[35.4478%]&lt;BR/&gt;{20.42.232.106:80, 128.190.141.36:*}[22.7612%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9083%)&lt;BR/&gt; 33443: (0.639659%)&lt;BR/&gt; 33442: (0.639659%)&lt;BR/&gt; 33441: (0.533049%)&lt;BR/&gt; 33438: (0.533049%)&gt;];
}
1826--2566[label="0.936842;89pkt 89fpkt"];
1826--2778[label="0.0327869;2pkt 2fpkt"];
1826--2991[label="0.026738;5pkt 5fpkt"];
1826--3781[label="0.0738916;15pkt 15fpkt"];
1826--3806[label="0.0295567;6pkt 6fpkt"];
1826--3852[label="0.0738916;15pkt 15fpkt"];
1826--3868[label="0.0295567;6pkt 6fpkt"];
1826--3902[label="0.0738916;15pkt 15fpkt"];
1826--3923[label="0.0295567;6pkt 6fpkt"];
1826--4954[label="0.0246305;5pkt 5fpkt"];
1826--4995[label="0.936842;89pkt 89fpkt"];
1826--5039[label="1;15pkt 15fpkt"];
1826--6073[label="0.0246305;5pkt 5fpkt"];
2566--4995[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.141.36" src_ip="200.189.126.160" src_port="80"/>
      <filter dst_ip="128.190.141.36" src_ip="20.42.232.106" src_port="80"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.71.133.154"/>
    </slice>
    <from sec="1189314318" usec="0"/>
    <to sec="1189314333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.7.36.159"/>
    </slice>
    <from sec="1189314366" usec="0"/>
    <to sec="1189314387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.107.128.161"/>
    </slice>
    <from sec="1189314130" usec="0"/>
    <to sec="1189314148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
5004[label="134.112.181.161;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6098[label="134.112.181.161;9pkt 9fpkt", shape=invtriangle, color=brown];
6665[label="134.112.181.161;9pkt 9fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.181.161:*, 216.178.17.104:80}[44.4444%]&lt;BR/&gt;{134.112.181.161:*, 144.156.5.81:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2511: (5.55556%)&lt;BR/&gt; 2510: (5.55556%)&lt;BR/&gt; 2509: (5.55556%)&lt;BR/&gt; 2508: (5.55556%)&gt;];
}
5004--6098[label="1;9pkt 9fpkt"];
5004--6665[label="1;9pkt 9fpkt"];
6098--6665[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.178.17.104" dst_port="80" src_ip="134.112.181.161"/>
      <filter dst_ip="144.156.5.81" dst_port="80" src_ip="134.112.181.161"/>
    </slice>
    <from sec="1189314844" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.20.221.161"/>
    </slice>
    <from sec="1189314361" usec="0"/>
    <to sec="1189314373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.153.20.162"/>
    </slice>
    <from sec="1189314463" usec="0"/>
    <to sec="1189314517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.170.167.162"/>
    </slice>
    <from sec="1189314163" usec="0"/>
    <to sec="1189314183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.193.69.163"/>
    </slice>
    <from sec="1189314140" usec="0"/>
    <to sec="1189314168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.17.177.163"/>
    </slice>
    <from sec="1189314719" usec="0"/>
    <to sec="1189314733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.9.128.164"/>
    </slice>
    <from sec="1189314079" usec="0"/>
    <to sec="1189314581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.20.220.164"/>
    </slice>
    <from sec="1189314540" usec="0"/>
    <to sec="1189314566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.853868,1.44346,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
1746[label="117.40.165.165;s;77pkt 77fpkt", shape=diamond, color=yellow];
3558[label="117.40.165.165;s;75pkt 75fpkt", shape=hexagon, color=black];
5028[label="117.40.165.165;84pkt 84fpkt", shape=pentagon, color=darkviolet];
6108[label="117.40.165.165;84pkt 84fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{117.40.165.165:80, 128.190.80.128:*}[53.5714%]&lt;BR/&gt;{117.40.165.165:80, 128.190.16.45:*}[45.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47217: (0.625%)&lt;BR/&gt; 4928: (0.625%)&lt;BR/&gt; 4747: (0.625%)&lt;BR/&gt; 4633: (0.625%)&gt;];
}
1746--3558[label="1;75pkt 75fpkt"];
1746--3806[label="0.012987;1pkt 1fpkt"];
1746--3868[label="0.012987;1pkt 1fpkt"];
1746--3923[label="0.012987;1pkt 1fpkt"];
1746--5028[label="1;77pkt 77fpkt"];
1746--6108[label="1;77pkt 77fpkt"];
3558--3806[label="0.0133333;1pkt 1fpkt"];
3558--3868[label="0.0133333;1pkt 1fpkt"];
3558--3923[label="0.0133333;1pkt 1fpkt"];
3558--5028[label="1;75pkt 75fpkt"];
3558--6108[label="1;75pkt 75fpkt"];
5028--6108[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.80.128" src_ip="117.40.165.165" src_port="80"/>
      <filter dst_ip="128.190.16.45" src_ip="117.40.165.165" src_port="80"/>
    </slice>
    <from sec="1189314329" usec="0"/>
    <to sec="1189314891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
5057[label="172.223.217.169;40pkt 40fpkt", shape=pentagon, color=darkviolet];
6127[label="172.223.217.169;40pkt 40fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.223.217.169:25, 24.128.157.230:*}[72.5%]&lt;BR/&gt;{172.223.217.169:25, 198.244.154.57:*}[27.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4826: (1.25%)&lt;BR/&gt; 4799: (1.25%)&lt;BR/&gt; 4798: (1.25%)&lt;BR/&gt; 4486: (1.25%)&gt;];
}
5057--6127[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="24.128.157.230" src_ip="172.223.217.169" src_port="25"/>
      <filter dst_ip="198.244.154.57" src_ip="172.223.217.169" src_port="25"/>
    </slice>
    <from sec="1189314011" usec="0"/>
    <to sec="1189314476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
5059[label="199.91.133.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6129[label="199.91.133.170;2pkt 2fpkt", shape=invtriangle, color=brown];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.91.133.170:3204, 145.38.134.12:1434}[50%]&lt;BR/&gt;{199.91.133.170:3204, 134.112.34.195:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3204: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5059--6129[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.34.195" dst_port="1434" src_ip="199.91.133.170" src_port="3204"/>
      <filter dst_ip="145.38.134.12" dst_port="1434" src_ip="199.91.133.170" src_port="3204"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.21.179.173"/>
    </slice>
    <from sec="1189314769" usec="0"/>
    <to sec="1189314797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.146.226.175"/>
    </slice>
    <from sec="1189314391" usec="0"/>
    <to sec="1189314451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
5102[label="193.18.243.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6151[label="193.18.243.177;2pkt 2fpkt", shape=invtriangle, color=brown];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.18.243.177:8153, 168.206.4.242:1588}[50%]&lt;BR/&gt;{193.18.243.177:8153, 168.206.4.242:1594}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8153: (50%)&lt;BR/&gt; 1594: (25%)&lt;BR/&gt; 1588: (25%)&gt;];
}
5102--6151[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.4.242" dst_port="1594" src_ip="193.18.243.177" src_port="8153"/>
      <filter dst_ip="168.206.4.242" dst_port="1588" src_ip="193.18.243.177" src_port="8153"/>
    </slice>
    <from sec="1189314429" usec="0"/>
    <to sec="1189314510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.46.98.183"/>
    </slice>
    <from sec="1189314143" usec="0"/>
    <to sec="1189314556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.21.208.183"/>
    </slice>
    <from sec="1189314456" usec="0"/>
    <to sec="1189314494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
5437[label="168.206.7.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6328[label="168.206.7.233;1pkt 1fpkt", shape=invtriangle, color=brown];
6763[label="168.206.7.233;1pkt 1fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.206.7.233:1600, 33.117.148.243:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1600: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5437--6328[label="1;1pkt 1fpkt"];
5437--6763[label="1;1pkt 1fpkt"];
6328--6763[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.117.148.243" dst_port="80" src_ip="168.206.7.233" src_port="1600"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.111.116.184"/>
    </slice>
    <from sec="1189314399" usec="0"/>
    <to sec="1189314404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.104.64.185"/>
    </slice>
    <from sec="1189314415" usec="0"/>
    <to sec="1189314477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.79.71.185"/>
    </slice>
    <from sec="1189314121" usec="0"/>
    <to sec="1189314179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_759{
style=filled;
color=gray75;
516[label="208.68.116.185;s;2097pkt 2097fpkt", shape=diamond, color=yellow];
5150[label="208.68.116.185;2256pkt 2256fpkt", shape=pentagon, color=darkviolet];
6182[label="208.68.116.185;2256pkt 2256fpkt", shape=invtriangle, color=brown];
stat759[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.68.116.185:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.291%)&lt;BR/&gt; 32768: (2.09563%)&lt;BR/&gt; 32769: (0.665759%)&lt;BR/&gt; 32772: (0.385837%)&lt;BR/&gt; 9253: (0.363141%)&gt;];
}
516--2592[label="0.0588235;1pkt 1fpkt"];
516--2613[label="0.0555556;1pkt 1fpkt"];
516--3794[label="0.00810682;17pkt 17fpkt"];
516--3818[label="0.0033381;7pkt 7fpkt"];
516--3824[label="0.00925926;18pkt 18fpkt"];
516--3851[label="0.09299;195pkt 195fpkt"];
516--3874[label="0.0033381;7pkt 7fpkt"];
516--3876[label="0.0858369;180pkt 180fpkt"];
516--3901[label="0.09299;195pkt 195fpkt"];
516--3922[label="0.0886981;186pkt 186fpkt"];
516--3924[label="0.0858369;180pkt 180fpkt"];
516--5150[label="1;2097pkt 2097fpkt"];
516--6182[label="1;2097pkt 2097fpkt"];
5150--6182[label="1;2256pkt 2256fpkt"];
</description>
    <slice>
      <filter src_ip="208.68.116.185" src_port="53"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="122.219.238.188"/>
    </slice>
    <from sec="1189314171" usec="0"/>
    <to sec="1189314477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.15.170.190"/>
    </slice>
    <from sec="1189314869" usec="0"/>
    <to sec="1189314878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.126.153.191"/>
    </slice>
    <from sec="1189314519" usec="0"/>
    <to sec="1189314534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
5199[label="33.117.148.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6203[label="33.117.148.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.117.148.192:80, 216.212.164.109:1826}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1826: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5199--6203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.212.164.109" dst_port="1826" src_ip="33.117.148.192" src_port="80"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.239.133.193"/>
    </slice>
    <from sec="1189314555" usec="0"/>
    <to sec="1189314575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.136.34.197"/>
    </slice>
    <from sec="1189314584" usec="0"/>
    <to sec="1189314630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.164.130.198"/>
    </slice>
    <from sec="1189314002" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.33.31.200"/>
    </slice>
    <from sec="1189314514" usec="0"/>
    <to sec="1189314546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
5250[label="6.130.179.201;59pkt 59fpkt", shape=pentagon, color=darkviolet];
6230[label="6.130.179.201;59pkt 59fpkt", shape=invtriangle, color=brown];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.130.179.201:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4180: (1.69492%)&lt;BR/&gt; 3374: (1.69492%)&lt;BR/&gt; 4940: (0.847458%)&lt;BR/&gt; 4910: (0.847458%)&gt;];
}
5250--6230[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="6.130.179.201"/>
    </slice>
    <from sec="1189314031" usec="0"/>
    <to sec="1189314880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.18.149.202"/>
    </slice>
    <from sec="1189314513" usec="0"/>
    <to sec="1189314520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.246.113.205"/>
    </slice>
    <from sec="1189314562" usec="0"/>
    <to sec="1189314568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="79.176.33.209"/>
    </slice>
    <from sec="1189314546" usec="0"/>
    <to sec="1189314559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.106.104.209"/>
    </slice>
    <from sec="1189314763" usec="0"/>
    <to sec="1189314889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.182.46.211"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
5313[label="77.66.194.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6264[label="77.66.194.212;2pkt 2fpkt", shape=invtriangle, color=brown];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.66.194.212:50016, 128.190.82.211:80}[50%]&lt;BR/&gt;{77.66.194.212:50017, 128.190.82.211:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50017: (25%)&lt;BR/&gt; 50016: (25%)&gt;];
}
5313--6264[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.82.211" dst_port="80" src_ip="77.66.194.212" src_port="50017"/>
      <filter dst_ip="128.190.82.211" dst_port="80" src_ip="77.66.194.212" src_port="50016"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.0.141.214"/>
    </slice>
    <from sec="1189314592" usec="0"/>
    <to sec="1189314594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
5327[label="216.219.229.214;151pkt 151fpkt", shape=pentagon, color=darkviolet];
6272[label="216.219.229.214;151pkt 151fpkt", shape=invtriangle, color=brown];
6741[label="216.219.229.214;151pkt 151fpkt", shape=invhouse, color=bisque];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.219.229.214:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5327--6272[label="1;151pkt 151fpkt"];
5327--6741[label="1;151pkt 151fpkt"];
6272--6741[label="1;151pkt 151fpkt"];
</description>
    <slice>
      <filter src_ip="216.219.229.214"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.206.56.215"/>
    </slice>
    <from sec="1189314612" usec="0"/>
    <to sec="1189314746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
5338[label="197.199.171.217;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6280[label="197.199.171.217;1pkt 1fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.199.171.217:3664, 145.38.63.116:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3664: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5338--6280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.38.63.116" dst_port="1434" src_ip="197.199.171.217" src_port="3664"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.238.35.220"/>
    </slice>
    <from sec="1189314492" usec="0"/>
    <to sec="1189314502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.122.70.224"/>
    </slice>
    <from sec="1189314866" usec="0"/>
    <to sec="1189314887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
5387[label="197.20.86.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6302[label="197.20.86.225;2pkt 2fpkt", shape=invtriangle, color=brown];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.20.86.225:1841, 134.100.249.106:1434}[50%]&lt;BR/&gt;{197.20.86.225:1841, 128.190.155.182:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1841: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
5387--6302[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.155.182" dst_port="1434" src_ip="197.20.86.225" src_port="1841"/>
      <filter dst_ip="134.100.249.106" dst_port="1434" src_ip="197.20.86.225" src_port="1841"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
1687[label="33.117.131.88;d;108pkt 108fpkt", shape=diamond, color=yellow];
5392[label="128.190.28.226;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6305[label="128.190.28.226;19pkt 19fpkt", shape=invtriangle, color=brown];
6749[label="128.190.28.226;19pkt 19fpkt", shape=invhouse, color=bisque];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.190.80.128:*, 33.117.131.88:80}[60.1852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3461: (1.21212%)&lt;BR/&gt; 3459: (1.21212%)&lt;BR/&gt; 3457: (1.21212%)&lt;BR/&gt; 3455: (1.21212%)&gt;];
}
1687--2509[label="0.030303;1pkt 1fpkt"];
1687--3131[label="0.00925926;1pkt 1fpkt"];
1687--3762[label="0.00925926;1pkt 1fpkt"];
1687--3785[label="0.111111;12pkt 12fpkt"];
1687--3807[label="0.037037;4pkt 4fpkt"];
1687--5198[label="0.027027;1pkt 1fpkt"];
1687--5392[label="1;19pkt 19fpkt"];
1687--6166[label="0.00925926;1pkt 1fpkt"];
1687--6305[label="1;19pkt 19fpkt"];
1687--6749[label="1;19pkt 19fpkt"];
5392--6305[label="1;19pkt 19fpkt"];
5392--6749[label="1;19pkt 19fpkt"];
6305--6749[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="33.117.131.88" dst_port="80" src_ip="128.190.80.128"/>
    </slice>
    <from sec="1189314010" usec="0"/>
    <to sec="1189314814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
5415[label="193.166.185.229;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6315[label="193.166.185.229;2pkt 2fpkt", shape=invtriangle, color=brown];
6755[label="193.166.185.229;2pkt 2fpkt", shape=invhouse, color=bisque];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.166.185.229:80, 134.168.243.150:52661}[50%]&lt;BR/&gt;{193.166.185.229:80, 134.168.243.150:52680}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52680: (25%)&lt;BR/&gt; 52661: (25%)&gt;];
}
5415--6315[label="1;2pkt 2fpkt"];
5415--6755[label="1;2pkt 2fpkt"];
6315--6755[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.168.243.150" dst_port="52680" src_ip="193.166.185.229" src_port="80"/>
      <filter dst_ip="134.168.243.150" dst_port="52661" src_ip="193.166.185.229" src_port="80"/>
    </slice>
    <from sec="1189314860" usec="0"/>
    <to sec="1189314877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.123.187.229"/>
    </slice>
    <from sec="1189314549" usec="0"/>
    <to sec="1189314564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
5433[label="77.3.138.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6324[label="77.3.138.232;2pkt 2fpkt", shape=invtriangle, color=brown];
6762[label="77.3.138.232;2pkt 2fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.3.138.232:62150, 217.155.101.72:3128}[50%]&lt;BR/&gt;{77.3.138.232:62174, 217.155.101.73:3124}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62174: (25%)&lt;BR/&gt; 62150: (25%)&lt;BR/&gt; 3128: (25%)&lt;BR/&gt; 3124: (25%)&gt;];
}
5433--6324[label="1;2pkt 2fpkt"];
5433--6762[label="1;2pkt 2fpkt"];
6324--6762[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.101.73" dst_port="3124" src_ip="77.3.138.232" src_port="62174"/>
      <filter dst_ip="217.155.101.72" dst_port="3128" src_ip="77.3.138.232" src_port="62150"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.23.65.234"/>
    </slice>
    <from sec="1189314512" usec="0"/>
    <to sec="1189314528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.892655,1.55999,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
5457[label="23.20.220.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6338[label="23.20.220.235;1pkt 1fpkt", shape=invtriangle, color=brown];
6768[label="23.20.220.235;1pkt 1fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.20.220.235:80, 128.190.198.240:61611}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61611: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5457--6338[label="1;1pkt 1fpkt"];
5457--6768[label="1;1pkt 1fpkt"];
6338--6768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.190.198.240" dst_port="61611" src_ip="23.20.220.235" src_port="80"/>
    </slice>
    <from sec="1189314831" usec="0"/>
    <to sec="1189314842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.90.70.237"/>
    </slice>
    <from sec="1189314195" usec="0"/>
    <to sec="1189314492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
5476[label="18.44.40.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6352[label="18.44.40.241;2pkt 2fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.44.40.241:80, 217.155.101.67:60933}[50%]&lt;BR/&gt;{18.44.40.241:80, 217.155.101.67:60949}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60949: (25%)&lt;BR/&gt; 60933: (25%)&gt;];
}
5476--6352[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.101.67" dst_port="60949" src_ip="18.44.40.241" src_port="80"/>
      <filter dst_ip="217.155.101.67" dst_port="60933" src_ip="18.44.40.241" src_port="80"/>
    </slice>
    <from sec="1189314894" usec="0"/>
    <to sec="1189314899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
5477[label="216.220.164.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6353[label="216.220.164.241;1pkt 1fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.220.164.241:25, 77.219.175.164:3529}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3529: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5477--6353[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="77.219.175.164" dst_port="3529" src_ip="216.220.164.241" src_port="25"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.50.97.242"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.68.147.244"/>
    </slice>
    <from sec="1189314714" usec="0"/>
    <to sec="1189314780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.193.242.244"/>
    </slice>
    <from sec="1189314479" usec="0"/>
    <to sec="1189314492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.703536,1.48073,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
911[label="217.155.96.68;d;167pkt 167fpkt", shape=diamond, color=yellow];
5512[label="20.39.44.247;38pkt 38fpkt", shape=pentagon, color=darkviolet];
6370[label="20.39.44.247;38pkt 38fpkt", shape=invtriangle, color=brown];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.39.44.247:*, 217.155.96.68:80}[22.7545%]&lt;BR/&gt;{219.72.164.137:*, 217.155.96.68:80}[21.5569%]&lt;BR/&gt;{219.52.71.226:*, 217.155.96.68:80}[20.9581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3047: (0.617284%)&lt;BR/&gt; 3046: (0.617284%)&lt;BR/&gt; 3044: (0.617284%)&lt;BR/&gt; 3043: (0.617284%)&gt;];
}
911--1689[label="0.125;1pkt 1fpkt"];
911--3762[label="0.0359281;6pkt 6fpkt"];
911--3785[label="0.275449;46pkt 46fpkt"];
911--3807[label="0.0479042;8pkt 8fpkt"];
911--4013[label="0.125;1pkt 1fpkt"];
911--5512[label="1;38pkt 38fpkt"];
911--6370[label="1;38pkt 38fpkt"];
5512--6370[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="217.155.96.68" dst_port="80" src_ip="20.39.44.247"/>
      <filter dst_ip="217.155.96.68" dst_port="80" src_ip="219.72.164.137"/>
      <filter dst_ip="217.155.96.68" dst_port="80" src_ip="219.52.71.226"/>
    </slice>
    <from sec="1189314009" usec="0"/>
    <to sec="1189314739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.7.56.248"/>
    </slice>
    <from sec="1189314697" usec="0"/>
    <to sec="1189314724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.14.130.248"/>
    </slice>
    <from sec="1189314342" usec="0"/>
    <to sec="1189314361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.632548,1.54082,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
5526[label="36.69.200.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6377[label="36.69.200.249;1pkt 1fpkt", shape=invtriangle, color=brown];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.69.200.249:2070, 168.206.244.245:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2070: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5526--6377[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="168.206.244.245" dst_port="80" src_ip="36.69.200.249" src_port="2070"/>
    </slice>
    <from sec="1189314859" usec="0"/>
    <to sec="1189314881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.603522,1.55648,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.131.49.253"/>
    </slice>
    <from sec="1189314560" usec="0"/>
    <to sec="1189314620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.172.107.0"/>
    </slice>
    <from sec="1189314392" usec="0"/>
    <to sec="1189314411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.16.226.3"/>
    </slice>
    <from sec="1189314472" usec="0"/>
    <to sec="1189314508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.99.73.4"/>
    </slice>
    <from sec="1189314336" usec="0"/>
    <to sec="1189314366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.53.10.8"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.21.174.13"/>
    </slice>
    <from sec="1189314116" usec="0"/>
    <to sec="1189314161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.206.51.15"/>
    </slice>
    <from sec="1189314538" usec="0"/>
    <to sec="1189314541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.74.244.15"/>
    </slice>
    <from sec="1189314682" usec="0"/>
    <to sec="1189314738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.925095,1.51673,503,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
2635[label="134.112.12.19;s;31pkt 31fpkt", shape=diamond, color=yellow];
5638[label="134.112.12.19;18pkt 18fpkt", shape=invtriangle, color=brown];
6435[label="134.112.12.19;19pkt 19fpkt", shape=invhouse, color=bisque];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.112.12.19:80, *:*}[93.5484%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7941%)&lt;BR/&gt; 123: (4.41176%)&lt;BR/&gt; 58122: (2.20588%)&lt;BR/&gt; 58028: (2.20588%)&lt;BR/&gt; 52440: (2.20588%)&gt;];
}
2635--3781[label="0.129032;4pkt 4fpkt"];
2635--3806[label="0.0322581;1pkt 1fpkt"];
2635--3852[label="0.129032;4pkt 4fpkt"];
2635--3868[label="0.0322581;1pkt 1fpkt"];
2635--3902[label="0.129032;4pkt 4fpkt"];
2635--3923[label="0.0322581;1pkt 1fpkt"];
2635--5638[label="1;18pkt 18fpkt"];
2635--6435[label="1;19pkt 19fpkt"];
5638--6435[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="134.112.12.19" src_port="80"/>
    </slice>
    <from sec="1189314003" usec="0"/>
    <to sec="1189314798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="176.171.117.21"/>
    </slice>
    <from sec="1189314077" usec="0"/>
    <to sec="1189314105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.75.162.23"/>
    </slice>
    <from sec="1189314019" usec="0"/>
    <to sec="1189314058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.43.101.24"/>
    </slice>
    <from sec="1189314352" usec="0"/>
    <to sec="1189314355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.108.238.24"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="128.190.224.26"/>
    </slice>
    <from sec="1189314446" usec="0"/>
    <to sec="1189314453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.111.72.31"/>
    </slice>
    <from sec="1189314442" usec="0"/>
    <to sec="1189314448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.81.171.36"/>
    </slice>
    <from sec="1189314214" usec="0"/>
    <to sec="1189314257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.80.26.37"/>
    </slice>
    <from sec="1189314817" usec="0"/>
    <to sec="1189314851" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.111.87.37"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.944288,1.50066,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
1058[label="170.233.9.39;s;121pkt 121fpkt", shape=diamond, color=yellow];
4224[label="170.233.9.39;126pkt 126fpkt", shape=pentagon, color=darkviolet];
5707[label="170.233.9.39;127pkt 127fpkt", shape=invtriangle, color=brown];
6472[label="170.233.9.39;127pkt 127fpkt", shape=invhouse, color=bisque];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.233.9.39:*, *:25}[59.0551%]&lt;BR/&gt;{170.233.9.39:25, *:*}[39.3701%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.2016%)&lt;BR/&gt; 113: (0.798403%)&lt;BR/&gt; 64728: (0.399202%)&lt;BR/&gt; 61781: (0.399202%)&lt;BR/&gt; 60805: (0.399202%)&gt;];
}
1058--2630[label="0.011236;1pkt 1fpkt"];
1058--4224[label="0.991736;120pkt 120fpkt"];
1058--5707[label="1;121pkt 121fpkt"];
1058--6472[label="1;121pkt 121fpkt"];
4224--5707[label="1;126pkt 126fpkt"];
4224--6472[label="1;126pkt 126fpkt"];
5707--6472[label="1;127pkt 127fpkt"];
</description>
    <slice>
      <filter src_ip="170.233.9.39" src_port="25"/>
      <filter dst_port="25" src_ip="170.233.9.39"/>
    </slice>
    <from sec="1189314001" usec="0"/>
    <to sec="1189314894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.3.102.39"/>
    </slice>
    <from sec="1189314199" usec="0"/>
    <to sec="1189314210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.46.216.39"/>
    </slice>
    <from sec="1189314172" usec="0"/>
    <to sec="1189314187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787535,1.56603,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_820{
style=filled;
color=gray75;
4240[label="77.115.38.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6479[label="77.115.38.41;1pkt 1fpkt", shape=invhouse, color=bisque];
stat820[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.115.38.41:56979, 134.112.166.14:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56979: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4240--5719[label="1;1pkt 1fpkt"];
4240--6479[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.112.166.14" dst_port="80" src_ip="77.115.38.41" src_port="56979"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.16.112.42"/>
    </slice>
    <from sec="1189314274" usec="0"/>
    <to sec="1189314346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.176.75.53"/>
    </slice>
    <from sec="1189314309" usec="0"/>
    <to sec="1189314323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.167.137.53"/>
    </slice>
    <from sec="1189314319" usec="0"/>
    <to sec="1189314351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.76.77.54"/>
    </slice>
    <from sec="1189314803" usec="0"/>
    <to sec="1189314858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.206.162.58"/>
    </slice>
    <from sec="1189314738" usec="0"/>
    <to sec="1189314745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.194.164.58"/>
    </slice>
    <from sec="1189314545" usec="0"/>
    <to sec="1189314549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.70.215.58"/>
    </slice>
    <from sec="1189314346" usec="0"/>
    <to sec="1189314476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.26.140.59"/>
    </slice>
    <from sec="1189314571" usec="0"/>
    <to sec="1189314573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.46.217.71"/>
    </slice>
    <from sec="1189314178" usec="0"/>
    <to sec="1189314193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.117.130.72"/>
    </slice>
    <from sec="1189314578" usec="0"/>
    <to sec="1189314583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.238.132.72"/>
    </slice>
    <from sec="1189314528" usec="0"/>
    <to sec="1189314565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.178.218.73"/>
    </slice>
    <from sec="1189314456" usec="0"/>
    <to sec="1189314482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.203.242.76"/>
    </slice>
    <from sec="1189314481" usec="0"/>
    <to sec="1189314500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="198.152.130.98"/>
    </slice>
    <from sec="1189314431" usec="0"/>
    <to sec="1189314441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.132.3.108"/>
    </slice>
    <from sec="1189314840" usec="0"/>
    <to sec="1189314844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.107.23.112"/>
    </slice>
    <from sec="1189314619" usec="0"/>
    <to sec="1189314625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.20.217.112"/>
    </slice>
    <from sec="1189314900" usec="0"/>
    <to sec="1189314901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.22.199.113"/>
    </slice>
    <from sec="1189314399" usec="0"/>
    <to sec="1189314437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.194.6.121"/>
    </slice>
    <from sec="1189314470" usec="0"/>
    <to sec="1189314521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.246.75.127"/>
    </slice>
    <from sec="1189314006" usec="0"/>
    <to sec="1189314067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.16.232.129"/>
    </slice>
    <from sec="1189314751" usec="0"/>
    <to sec="1189314900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.7.36.159"/>
    </slice>
    <from sec="1189314366" usec="0"/>
    <to sec="1189314387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.107.128.161"/>
    </slice>
    <from sec="1189314130" usec="0"/>
    <to sec="1189314148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.153.20.162"/>
    </slice>
    <from sec="1189314463" usec="0"/>
    <to sec="1189314517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.170.167.162"/>
    </slice>
    <from sec="1189314163" usec="0"/>
    <to sec="1189314183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.20.220.164"/>
    </slice>
    <from sec="1189314540" usec="0"/>
    <to sec="1189314566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.146.226.175"/>
    </slice>
    <from sec="1189314391" usec="0"/>
    <to sec="1189314451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.46.98.183"/>
    </slice>
    <from sec="1189314143" usec="0"/>
    <to sec="1189314556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.104.64.185"/>
    </slice>
    <from sec="1189314415" usec="0"/>
    <to sec="1189314477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.33.31.200"/>
    </slice>
    <from sec="1189314514" usec="0"/>
    <to sec="1189314546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.20.223.201"/>
    </slice>
    <from sec="1189314457" usec="0"/>
    <to sec="1189314460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.18.149.202"/>
    </slice>
    <from sec="1189314513" usec="0"/>
    <to sec="1189314520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.246.113.205"/>
    </slice>
    <from sec="1189314562" usec="0"/>
    <to sec="1189314568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="79.176.33.209"/>
    </slice>
    <from sec="1189314546" usec="0"/>
    <to sec="1189314559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.106.104.209"/>
    </slice>
    <from sec="1189314763" usec="0"/>
    <to sec="1189314889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.182.46.211"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.206.56.215"/>
    </slice>
    <from sec="1189314612" usec="0"/>
    <to sec="1189314746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.238.35.220"/>
    </slice>
    <from sec="1189314492" usec="0"/>
    <to sec="1189314502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.123.187.229"/>
    </slice>
    <from sec="1189314549" usec="0"/>
    <to sec="1189314564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="199.90.70.237"/>
    </slice>
    <from sec="1189314195" usec="0"/>
    <to sec="1189314492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.50.97.242"/>
    </slice>
    <from sec="1189314373" usec="0"/>
    <to sec="1189314410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.68.147.244"/>
    </slice>
    <from sec="1189314714" usec="0"/>
    <to sec="1189314780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.764417,1.58143,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="29.193.242.244"/>
    </slice>
    <from sec="1189314479" usec="0"/>
    <to sec="1189314492" usec="0"/>
  </anomaly>

</admd:annotation>
