<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.92375,3.14204,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.10.213.246" dst_port="80" proto="tcp" src_ip="169.6.70.5" src_port="4065"/>
      <filter dst_ip="201.10.213.246" dst_port="80" proto="tcp" src_ip="169.6.70.5" src_port="4064"/>
      <from sec="1191992644" usec="0"/>
      <to sec="1191992646" usec="0"/>
    </slice>
    <from sec="1191992644" usec="0"/>
    <to sec="1191992646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.178.133.32" dst_port="80" proto="tcp" src_ip="188.104.186.130" src_port="35186"/>
      <from sec="1191993296" usec="0"/>
      <to sec="1191993299" usec="0"/>
    </slice>
    <from sec="1191993296" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.178.132.161" dst_port="80" proto="tcp" src_ip="201.75.50.157" src_port="37236"/>
      <from sec="1191993259" usec="0"/>
      <to sec="1191993300" usec="0"/>
    </slice>
    <from sec="1191993259" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.133.130.9" proto="icmp" src_ip="220.217.250.176"/>
      <filter dst_ip="172.133.130.9" src_ip="220.217.250.176"/>
      <from sec="1191992440" usec="0"/>
      <to sec="1191992512" usec="0"/>
    </slice>
    <from sec="1191992440" usec="0"/>
    <to sec="1191992512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="65026"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="1994"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="65025"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="2000"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="2001"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="65026"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="1994"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="65025"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="2000"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="2001"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="65026"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="1994"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="65025"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="2000"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="172.64.125.220" src_port="2001"/>
      <from sec="1191993255" usec="0"/>
      <to sec="1191993257" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="65026"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="1994"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="65025"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="2000"/>
      <filter dst_ip="211.195.146.76" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="2001"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="65026"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="1994"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="65025"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="2000"/>
      <filter dst_ip="1.178.159.170" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="2001"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="65026"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="1994"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="65025"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="2000"/>
      <filter dst_ip="1.178.159.171" dst_port="80" proto="tcp" src_ip="169.6.5.208" src_port="2001"/>
      <from sec="1191993255" usec="0"/>
      <to sec="1191993257" usec="0"/>
    </slice>
    <from sec="1191993255" usec="0"/>
    <to sec="1191993257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.66.110.50" dst_port="53" proto="tcp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.66.110.50" dst_port="53" proto="udp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.66.110.50" dst_port="25" proto="tcp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.66.110.50" dst_port="25" proto="udp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.124.141" dst_port="53" proto="tcp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.124.141" dst_port="53" proto="udp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.124.141" dst_port="25" proto="tcp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.124.141" dst_port="25" proto="udp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="tcp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="udp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.122.110" dst_port="25" proto="tcp" src_ip="201.67.35.223" src_port="25028"/>
      <filter dst_ip="201.136.122.110" dst_port="25" proto="udp" src_ip="201.67.35.223" src_port="25028"/>
      <from sec="1191993042" usec="0"/>
      <to sec="1191993260" usec="0"/>
    </slice>
    <from sec="1191993042" usec="0"/>
    <to sec="1191993260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="81.89.100.21"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="81.89.100.21"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="81.89.100.21"/>
      <filter dst_ip="81.89.100.21" proto="icmp" src_ip="81.89.100.21"/>
      <from sec="1191992760" usec="0"/>
      <to sec="1191992762" usec="0"/>
    </slice>
    <from sec="1191992760" usec="0"/>
    <to sec="1191992763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="136.132.145.103"/>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="136.132.145.103"/>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="136.132.145.103"/>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="136.132.145.103"/>
      <from sec="1191992402" usec="0"/>
      <to sec="1191993299" usec="0"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="222.25.128.216" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="222.25.128.216" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="222.25.128.216" proto="icmp" src_ip="200.140.10.72"/>
      <filter dst_ip="222.25.128.216" proto="icmp" src_ip="200.140.10.72"/>
      <from sec="1191992965" usec="0"/>
      <to sec="1191993234" usec="0"/>
    </slice>
    <from sec="1191992965" usec="0"/>
    <to sec="1191993234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="200.173.70.10"/>
      <from sec="1191992415" usec="0"/>
      <to sec="1191993282" usec="0"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="200.173.70.16"/>
      <from sec="1191992415" usec="0"/>
      <to sec="1191993281" usec="0"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="201.180.44.206"/>
      <from sec="1191992711" usec="0"/>
      <to sec="1191992921" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="172.159.76.205"/>
      <from sec="1191992711" usec="0"/>
      <to sec="1191992921" usec="0"/>
    </slice>
    <from sec="1191992711" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="53" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="udp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="tcp" src_ip="201.136.122.110"/>
      <filter dst_ip="201.136.122.110" dst_port="80" proto="udp" src_ip="201.136.122.110"/>
      <from sec="1191992524" usec="0"/>
      <to sec="1191992982" usec="0"/>
    </slice>
    <from sec="1191992524" usec="0"/>
    <to sec="1191992982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="37.154.96.69"/>
      <from sec="1191992456" usec="0"/>
      <to sec="1191992771" usec="0"/>
    </slice>
    <from sec="1191992456" usec="0"/>
    <to sec="1191992771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" dst_port="53" proto="udp" src_ip="169.6.198.202" src_port="65486"/>
      <filter dst_ip="136.132.145.103" dst_port="53" proto="icmp" src_ip="169.6.198.202" src_port="65486"/>
      <from sec="1191992574" usec="0"/>
      <to sec="1191993186" usec="0"/>
    </slice>
    <from sec="1191992574" usec="0"/>
    <to sec="1191993186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="222.25.128.216"/>
      <from sec="1191992590" usec="0"/>
      <to sec="1191992921" usec="0"/>
    </slice>
    <from sec="1191992590" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.92375,3.14204,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.132.145.103" proto="icmp" src_ip="180.49.175.204"/>
      <from sec="1191992612" usec="0"/>
      <to sec="1191992996" usec="0"/>
    </slice>
    <from sec="1191992612" usec="0"/>
    <to sec="1191992997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.49223,2.9707,502,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
307[label="200.76.128.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
308[label="172.64.31.165;s;1pkt 1fpkt", shape=diamond, color=yellow];
8677[label="200.76.128.167;d;1pkt 1fpkt", shape=hexagon, color=black];
19177[label="172.64.31.165;1pkt 1fpkt", shape=invtriangle, color=brown];
21922[label="172.64.31.165;1pkt 1fpkt", shape=invhouse, color=bisque];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.64.31.165:32875, 200.76.128.167:22}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32875: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
307--308[label="1;1pkt 1fpkt"];
307--8677[label="1;1pkt 1fpkt"];
307--19177[label="1;1pkt 1fpkt"];
307--21922[label="1;1pkt 1fpkt"];
308--8677[label="1;1pkt 1fpkt"];
308--19177[label="1;1pkt 1fpkt"];
308--21922[label="1;1pkt 1fpkt"];
8677--19177[label="1;1pkt 1fpkt"];
8677--21922[label="1;1pkt 1fpkt"];
19177--21922[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.76.128.167" dst_port="22" src_ip="172.64.31.165" src_port="32875"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44975,2.96647,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
388[label="172.159.122.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
390[label="84.206.222.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
7577[label="84.206.222.199;s;1pkt 1fpkt", shape=hexagon, color=black];
15832[label="84.206.222.199;1pkt 1fpkt", shape=pentagon, color=darkviolet];
22271[label="84.206.222.199;1pkt 1fpkt", shape=invhouse, color=bisque];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.206.222.199:80, 172.159.122.122:59329}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59329: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
388--390[label="1;1pkt 1fpkt"];
388--7577[label="1;1pkt 1fpkt"];
388--15832[label="1;1pkt 1fpkt"];
388--22271[label="1;1pkt 1fpkt"];
390--7577[label="1;1pkt 1fpkt"];
390--15832[label="1;1pkt 1fpkt"];
390--22271[label="1;1pkt 1fpkt"];
7577--15832[label="1;1pkt 1fpkt"];
7577--22271[label="1;1pkt 1fpkt"];
15832--22271[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.122.122" dst_port="59329" src_ip="84.206.222.199" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
441[label="219.1.146.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
442[label="132.188.126.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
7387[label="219.1.146.182;s;1pkt 1fpkt", shape=hexagon, color=black];
7587[label="132.188.126.216;d;1pkt 1fpkt", shape=hexagon, color=black];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.1.146.182:21494, 132.188.126.216:1027}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21494: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
441--442[label="1;1pkt 1fpkt"];
441--7387[label="1;1pkt 1fpkt"];
441--7587[label="1;1pkt 1fpkt"];
442--7387[label="1;1pkt 1fpkt"];
442--7587[label="1;1pkt 1fpkt"];
7387--7587[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.126.216" dst_port="1027" src_ip="219.1.146.182" src_port="21494"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="7602290" usec="0"/>
    <to sec="3801189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
660[label="200.142.125.174;s;2388pkt 2388fpkt", shape=diamond, color=yellow];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.142.125.174:*, *:2968}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2968: (50%)&lt;BR/&gt; 1834: (0.10469%)&lt;BR/&gt; 1244: (0.10469%)&lt;BR/&gt; 3817: (0.0837521%)&lt;BR/&gt; 3761: (0.0837521%)&gt;];
}
660--1993[label="0.000763942;1pkt 1fpkt"];
660--2601[label="0.00595238;1pkt 1fpkt"];
660--7623[label="0.0015015;1pkt 1fpkt"];
660--7747[label="0.00129702;1pkt 1fpkt"];
660--8044[label="0.00595238;1pkt 1fpkt"];
660--11212[label="0.00595238;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="2968" src_ip="200.142.125.174"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
772[label="172.96.24.126;s;443pkt 443fpkt", shape=diamond, color=yellow];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.96.24.126:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
772--1808[label="0.003367;1pkt 1fpkt"];
772--3973[label="0.00263852;1pkt 1fpkt"];
772--3982[label="0.00244499;1pkt 1fpkt"];
772--3986[label="0.003003;1pkt 1fpkt"];
772--4057[label="0.0026738;1pkt 1fpkt"];
772--4065[label="0.00246914;1pkt 1fpkt"];
772--4166[label="0.0105263;1pkt 1fpkt"];
772--4725[label="0.00288184;1pkt 1fpkt"];
772--4728[label="0.00269542;1pkt 1fpkt"];
772--5449[label="0.00350877;1pkt 1fpkt"];
772--5466[label="0.00346021;1pkt 1fpkt"];
772--5498[label="0.00340136;1pkt 1fpkt"];
772--5508[label="0.00343643;1pkt 1fpkt"];
772--7650[label="0.00961538;1pkt 1fpkt"];
772--8253[label="0.00374532;1pkt 1fpkt"];
772--8816[label="0.003125;1pkt 1fpkt"];
772--9263[label="0.00387597;1pkt 1fpkt"];
772--9358[label="0.0108696;1pkt 1fpkt"];
772--9599[label="0.00273224;1pkt 1fpkt"];
772--9639[label="0.00346021;1pkt 1fpkt"];
772--9686[label="0.00384615;1pkt 1fpkt"];
772--10133[label="0.0030303;1pkt 1fpkt"];
772--10528[label="0.00288184;1pkt 1fpkt"];
772--10579[label="0.0026738;1pkt 1fpkt"];
772--11111[label="0.00308642;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.96.24.126"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
657[label="169.6.2.243;s;608pkt 608fpkt", shape=diamond, color=yellow];
658[label="222.33.18.126;d;1pkt 1fpkt", shape=diamond, color=yellow];
706[label="217.185.36.28;d;7pkt 7fpkt", shape=diamond, color=yellow];
1019[label="216.53.139.116;d;1pkt 1fpkt", shape=diamond, color=yellow];
1034[label="85.107.14.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
1051[label="217.17.97.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
1056[label="217.68.141.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1078[label="49.203.130.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
1185[label="0.37.171.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
1341[label="84.68.150.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
1349[label="85.46.202.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
1451[label="81.8.25.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
1569[label="85.106.224.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
1584[label="85.109.127.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
1589[label="217.25.91.79;d;2pkt 2fpkt", shape=diamond, color=yellow];
1611[label="60.71.188.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1634[label="217.30.65.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
1966[label="221.42.94.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
2245[label="55.144.186.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
7415[label="222.33.18.126;d;1pkt 1fpkt", shape=hexagon, color=black];
7508[label="81.8.25.14;d;1pkt 1fpkt", shape=hexagon, color=black];
7520[label="217.25.91.79;d;1pkt 1fpkt", shape=hexagon, color=black];
7649[label="217.185.36.28;d;7pkt 7fpkt", shape=hexagon, color=black];
7722[label="216.53.139.116;d;1pkt 1fpkt", shape=hexagon, color=black];
7726[label="221.42.94.14;d;1pkt 1fpkt", shape=hexagon, color=black];
7767[label="0.37.171.216;d;1pkt 1fpkt", shape=hexagon, color=black];
7894[label="85.106.224.90;d;1pkt 1fpkt", shape=hexagon, color=black];
7903[label="85.109.127.185;d;1pkt 1fpkt", shape=hexagon, color=black];
7908[label="60.71.188.146;d;1pkt 1fpkt", shape=hexagon, color=black];
9580[label="169.6.2.243;s;565pkt 565fpkt", shape=hexagon, color=black];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.2.243:24457, *:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24457: (42.9984%)&lt;BR/&gt; 80: (0.329489%)&lt;BR/&gt; 0: (0.329489%)&lt;BR/&gt; 16001: (0.247117%)&lt;BR/&gt; 3321: (0.247117%)&gt;];
}
657--658[label="1;1pkt 1fpkt"];
657--706[label="1;7pkt 7fpkt"];
657--1019[label="1;1pkt 1fpkt"];
657--1034[label="1;1pkt 1fpkt"];
657--1051[label="1;1pkt 1fpkt"];
657--1056[label="1;1pkt 1fpkt"];
657--1078[label="1;1pkt 1fpkt"];
657--1185[label="1;1pkt 1fpkt"];
657--1341[label="1;1pkt 1fpkt"];
657--1349[label="1;1pkt 1fpkt"];
657--1451[label="1;1pkt 1fpkt"];
657--1569[label="1;1pkt 1fpkt"];
657--1584[label="1;1pkt 1fpkt"];
657--1589[label="1;2pkt 2fpkt"];
657--1611[label="1;1pkt 1fpkt"];
657--1634[label="1;1pkt 1fpkt"];
657--1966[label="1;1pkt 1fpkt"];
657--2245[label="1;1pkt 1fpkt"];
657--2490[label="0.00164474;1pkt 1fpkt"];
657--7415[label="1;1pkt 1fpkt"];
657--7508[label="1;1pkt 1fpkt"];
657--7520[label="1;1pkt 1fpkt"];
657--7561[label="0.00164474;1pkt 1fpkt"];
657--7649[label="1;7pkt 7fpkt"];
657--7722[label="1;1pkt 1fpkt"];
657--7726[label="1;1pkt 1fpkt"];
657--7767[label="1;1pkt 1fpkt"];
657--7894[label="1;1pkt 1fpkt"];
657--7903[label="1;1pkt 1fpkt"];
657--7908[label="1;1pkt 1fpkt"];
657--8000[label="0.00164474;1pkt 1fpkt"];
657--9580[label="1;565pkt 565fpkt"];
657--11265[label="0.00493421;3pkt 3fpkt"];
657--11338[label="0.00493421;3pkt 3fpkt"];
657--11382[label="0.00493421;3pkt 3fpkt"];
658--7415[label="1;1pkt 1fpkt"];
658--9580[label="1;1pkt 1fpkt"];
706--7649[label="1;7pkt 7fpkt"];
706--9580[label="1;7pkt 7fpkt"];
1019--7722[label="1;1pkt 1fpkt"];
1019--9580[label="1;1pkt 1fpkt"];
1034--9580[label="1;1pkt 1fpkt"];
1051--9580[label="1;1pkt 1fpkt"];
1056--9580[label="1;1pkt 1fpkt"];
1078--9580[label="1;1pkt 1fpkt"];
1185--7767[label="1;1pkt 1fpkt"];
1185--9580[label="1;1pkt 1fpkt"];
1341--9580[label="1;1pkt 1fpkt"];
1349--9580[label="1;1pkt 1fpkt"];
1451--7508[label="1;1pkt 1fpkt"];
1451--9580[label="1;1pkt 1fpkt"];
1569--7894[label="1;1pkt 1fpkt"];
1569--9580[label="1;1pkt 1fpkt"];
1584--7903[label="1;1pkt 1fpkt"];
1584--9580[label="1;1pkt 1fpkt"];
1589--7520[label="1;1pkt 1fpkt"];
1589--9580[label="1;2pkt 2fpkt"];
1611--7908[label="1;1pkt 1fpkt"];
1611--9580[label="1;1pkt 1fpkt"];
1634--9580[label="1;1pkt 1fpkt"];
1966--7726[label="1;1pkt 1fpkt"];
1966--9580[label="1;1pkt 1fpkt"];
2245--9580[label="1;1pkt 1fpkt"];
7415--9580[label="1;1pkt 1fpkt"];
7508--9580[label="1;1pkt 1fpkt"];
7520--9580[label="1;1pkt 1fpkt"];
7649--9580[label="1;7pkt 7fpkt"];
7722--9580[label="1;1pkt 1fpkt"];
7726--9580[label="1;1pkt 1fpkt"];
7767--9580[label="1;1pkt 1fpkt"];
7894--9580[label="1;1pkt 1fpkt"];
7903--9580[label="1;1pkt 1fpkt"];
7908--9580[label="1;1pkt 1fpkt"];
9580--11265[label="0.00530973;3pkt 3fpkt"];
9580--11338[label="0.00530973;3pkt 3fpkt"];
9580--11382[label="0.00530973;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.2.243" src_port="24457"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
1092[label="172.64.24.190;d;1pkt 1fpkt", shape=diamond, color=yellow];
1093[label="193.143.83.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
9287[label="172.64.24.190;d;1pkt 1fpkt", shape=hexagon, color=black];
10554[label="193.143.83.255;s;1pkt 1fpkt", shape=hexagon, color=black];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.143.83.255:554, 172.64.24.190:2675}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2675: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1092--1093[label="1;1pkt 1fpkt"];
1092--9287[label="1;1pkt 1fpkt"];
1092--10554[label="1;1pkt 1fpkt"];
1093--9287[label="1;1pkt 1fpkt"];
1093--10554[label="1;1pkt 1fpkt"];
9287--10554[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.24.190" dst_port="2675" src_ip="193.143.83.255" src_port="554"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.177.38.66"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44975,2.96647,901,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
1189[label="39.128.132.111;d;1pkt 1fpkt", shape=diamond, color=yellow];
1190[label="134.71.55.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
7474[label="39.128.132.111;d;1pkt 1fpkt", shape=hexagon, color=black];
13305[label="134.71.55.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21150[label="134.71.55.84;1pkt 1fpkt", shape=invhouse, color=bisque];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.55.84:2353, 39.128.132.111:7590}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7590: (50%)&lt;BR/&gt; 2353: (50%)&gt;];
}
1189--1190[label="1;1pkt 1fpkt"];
1189--7474[label="1;1pkt 1fpkt"];
1189--13305[label="1;1pkt 1fpkt"];
1189--21150[label="1;1pkt 1fpkt"];
1190--7474[label="1;1pkt 1fpkt"];
1190--13305[label="1;1pkt 1fpkt"];
1190--21150[label="1;1pkt 1fpkt"];
7474--13305[label="1;1pkt 1fpkt"];
7474--21150[label="1;1pkt 1fpkt"];
13305--21150[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.128.132.111" dst_port="7590" src_ip="134.71.55.84" src_port="2353"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
722[label="169.6.6.130;d;142pkt 142fpkt", shape=diamond, color=yellow];
1282[label="68.16.54.224;s;30pkt 30fpkt", shape=diamond, color=yellow];
1866[label="54.165.70.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
10591[label="68.16.54.224;s;30pkt 30fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.6.6.130:19712}[56.338%]&lt;BR/&gt;{68.16.54.224:*, 169.6.6.130:*}[21.1268%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19712: (33.4975%)&lt;BR/&gt; 80: (3.20197%)&lt;BR/&gt; 22944: (1.97044%)&lt;BR/&gt; 49556: (1.72414%)&lt;BR/&gt; 26577: (1.72414%)&gt;];
}
722--1282[label="1;30pkt 30fpkt"];
722--1866[label="1;1pkt 1fpkt"];
722--10591[label="1;30pkt 30fpkt"];
722--11348[label="0.00704225;1pkt 1fpkt"];
722--11389[label="0.00704225;1pkt 1fpkt"];
1282--10591[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.6.130" src_ip="68.16.54.224"/>
      <filter dst_ip="169.6.6.130" dst_port="19712"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="219.13.213.77"/>
      <from sec="1191992406" usec="0"/>
      <to sec="1191992484" usec="0"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
1542[label="82.152.90.110;d;16pkt 16fpkt", shape=diamond, color=yellow];
1543[label="188.104.69.134;s;30pkt 30fpkt", shape=diamond, color=yellow];
3283[label="82.152.90.115;d;14pkt 14fpkt", shape=diamond, color=yellow];
8504[label="188.104.69.134;s;30pkt 30fpkt", shape=hexagon, color=black];
8632[label="82.152.90.115;d;14pkt 14fpkt", shape=hexagon, color=black];
14387[label="188.104.69.134;40pkt 40fpkt", shape=pentagon, color=darkviolet];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.69.134:*, 82.152.90.110:80}[65.8537%]&lt;BR/&gt;{188.104.69.134:*, 82.152.90.115:80}[34.1463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36038: (1.73611%)&lt;BR/&gt; 36037: (1.73611%)&lt;BR/&gt; 36033: (1.73611%)&lt;BR/&gt; 36032: (1.73611%)&gt;];
}
1542--1543[label="1;16pkt 16fpkt"];
1542--8504[label="1;16pkt 16fpkt"];
1542--14387[label="0.9375;15pkt 15fpkt"];
1543--3283[label="1;14pkt 14fpkt"];
1543--8504[label="1;30pkt 30fpkt"];
1543--8632[label="1;14pkt 14fpkt"];
1543--11285[label="0.133333;4pkt 4fpkt"];
1543--11351[label="0.133333;4pkt 4fpkt"];
1543--11392[label="0.133333;4pkt 4fpkt"];
1543--14387[label="0.966667;29pkt 29fpkt"];
3283--8504[label="1;14pkt 14fpkt"];
3283--8632[label="1;14pkt 14fpkt"];
3283--11285[label="0.285714;4pkt 4fpkt"];
3283--11351[label="0.285714;4pkt 4fpkt"];
3283--11392[label="0.285714;4pkt 4fpkt"];
3283--14387[label="1;14pkt 14fpkt"];
8504--8632[label="1;14pkt 14fpkt"];
8504--11285[label="0.133333;4pkt 4fpkt"];
8504--11351[label="0.133333;4pkt 4fpkt"];
8504--11392[label="0.133333;4pkt 4fpkt"];
8504--14387[label="0.966667;29pkt 29fpkt"];
8632--11285[label="0.285714;4pkt 4fpkt"];
8632--11351[label="0.285714;4pkt 4fpkt"];
8632--11392[label="0.285714;4pkt 4fpkt"];
8632--14387[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="82.152.90.110" dst_port="80" src_ip="188.104.69.134"/>
      <filter dst_ip="82.152.90.115" dst_port="80" src_ip="188.104.69.134"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="188.104.26.85"/>
      <from sec="1191992447" usec="0"/>
      <to sec="1191992554" usec="0"/>
    </slice>
    <from sec="1191992447" usec="0"/>
    <to sec="1191992554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
1722[label="134.71.89.78;s;5pkt 5fpkt", shape=diamond, color=yellow];
1742[label="57.57.132.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.89.78:80, 4.25.36.16:40151}[20%]&lt;BR/&gt;{134.71.89.78:80, 4.25.36.32:60184}[20%]&lt;BR/&gt;{134.71.89.78:80, 57.57.132.74:1761}[20%]&lt;BR/&gt;{134.71.89.78:80, 54.100.124.138:36546}[20%]&lt;BR/&gt;{134.71.89.78:80, 61.86.169.154:62014}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1761: (16.6667%)&lt;BR/&gt; 62014: (8.33333%)&lt;BR/&gt; 60184: (8.33333%)&lt;BR/&gt; 40151: (8.33333%)&gt;];
}
1722--1742[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.86.169.154" dst_port="62014" src_ip="134.71.89.78" src_port="80"/>
      <filter dst_ip="54.100.124.138" dst_port="36546" src_ip="134.71.89.78" src_port="80"/>
      <filter dst_ip="57.57.132.74" dst_port="1761" src_ip="134.71.89.78" src_port="80"/>
      <filter dst_ip="4.25.36.32" dst_port="60184" src_ip="134.71.89.78" src_port="80"/>
      <filter dst_ip="4.25.36.16" dst_port="40151" src_ip="134.71.89.78" src_port="80"/>
    </slice>
    <from sec="1191992450" usec="0"/>
    <to sec="1191992584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
1859[label="207.38.215.48;d;1pkt 1fpkt", shape=diamond, color=yellow];
1860[label="172.64.28.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
9241[label="207.38.215.48;d;1pkt 1fpkt", shape=hexagon, color=black];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.64.28.40:1221, 207.38.215.48:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 1221: (50%)&gt;];
}
1859--1860[label="1;1pkt 1fpkt"];
1859--9241[label="1;1pkt 1fpkt"];
1860--9241[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="207.38.215.48" dst_port="8000" src_ip="172.64.28.40" src_port="1221"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
1986[label="172.64.24.190;s;1pkt 1fpkt", shape=diamond, color=yellow];
1987[label="193.143.83.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
8106[label="172.64.24.190;s;1pkt 1fpkt", shape=hexagon, color=black];
8364[label="193.143.83.255;d;1pkt 1fpkt", shape=hexagon, color=black];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.64.24.190:2675, 193.143.83.255:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2675: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
1986--1987[label="1;1pkt 1fpkt"];
1986--8106[label="1;1pkt 1fpkt"];
1986--8364[label="1;1pkt 1fpkt"];
1987--8106[label="1;1pkt 1fpkt"];
1987--8364[label="1;1pkt 1fpkt"];
8106--8364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.143.83.255" dst_port="554" src_ip="172.64.24.190" src_port="2675"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
1379[label="169.6.114.189;s;52pkt 52fpkt", shape=diamond, color=yellow];
2165[label="81.50.23.16;d;51pkt 51fpkt", shape=diamond, color=yellow];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.114.189:80, 81.50.23.16:*}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1144: (0.970874%)&lt;BR/&gt; 1143: (0.970874%)&lt;BR/&gt; 1142: (0.970874%)&lt;BR/&gt; 1141: (0.970874%)&gt;];
}
1379--2165[label="0.980392;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="81.50.23.16" src_ip="169.6.114.189" src_port="80"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="134.71.34.145"/>
      <from sec="1191993187" usec="0"/>
      <to sec="1191993200" usec="0"/>
    </slice>
    <from sec="1191993187" usec="0"/>
    <to sec="1191993200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
1631[label="180.49.138.41;s;104pkt 104fpkt", shape=diamond, color=yellow];
2361[label="200.197.74.107;d;68pkt 68fpkt", shape=diamond, color=yellow];
2383[label="8.48.230.217;d;13pkt 13fpkt", shape=diamond, color=yellow];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.138.41:80, 200.197.74.107:*}[62.2642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7297%)&lt;BR/&gt; 60995: (0.540541%)&lt;BR/&gt; 60746: (0.540541%)&lt;BR/&gt; 60467: (0.540541%)&lt;BR/&gt; 58596: (0.540541%)&gt;];
}
1631--2361[label="0.970588;66pkt 66fpkt"];
1631--2383[label="1;13pkt 13fpkt"];
2361--4841[label="0.0147059;1pkt 1fpkt"];
2361--7365[label="0.0147059;1pkt 1fpkt"];
2361--10930[label="0.0147059;1pkt 1fpkt"];
2361--14487[label="0.0147059;1pkt 1fpkt"];
2361--18798[label="0.0147059;1pkt 1fpkt"];
2361--21664[label="0.0147059;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.197.74.107" src_ip="180.49.138.41" src_port="80"/>
    </slice>
    <from sec="1191992426" usec="0"/>
    <to sec="1191992666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="168.53.107.30"/>
      <from sec="1191992513" usec="0"/>
      <to sec="1191992648" usec="0"/>
    </slice>
    <from sec="1191992513" usec="0"/>
    <to sec="1191992648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.28.9.137"/>
      <from sec="1191993140" usec="0"/>
      <to sec="1191993168" usec="0"/>
    </slice>
    <from sec="1191993140" usec="0"/>
    <to sec="1191993168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
2568[label="216.1.165.44;d;3pkt 3fpkt", shape=diamond, color=yellow];
2569[label="188.104.22.8;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.22.8:80, 216.1.165.44:62485}[33.3333%]&lt;BR/&gt;{188.104.22.8:80, 216.1.165.44:62486}[33.3333%]&lt;BR/&gt;{188.104.22.8:80, 216.1.165.44:62487}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62487: (16.6667%)&lt;BR/&gt; 62486: (16.6667%)&lt;BR/&gt; 62485: (16.6667%)&gt;];
}
2568--2569[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.1.165.44" dst_port="62487" src_ip="188.104.22.8" src_port="80"/>
      <filter dst_ip="216.1.165.44" dst_port="62486" src_ip="188.104.22.8" src_port="80"/>
      <filter dst_ip="216.1.165.44" dst_port="62485" src_ip="188.104.22.8" src_port="80"/>
    </slice>
    <from sec="1191992568" usec="0"/>
    <to sec="1191992596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
1826[label="132.188.126.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
2603[label="219.1.146.182;d;1pkt 1fpkt", shape=diamond, color=yellow];
10114[label="132.188.126.216;s;1pkt 1fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.188.126.216:1027, 219.1.146.182:21494}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21494: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
1826--2603[label="1;1pkt 1fpkt"];
1826--10114[label="1;1pkt 1fpkt"];
2603--10114[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.1.146.182" dst_port="21494" src_ip="132.188.126.216" src_port="1027"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
2658[label="201.32.40.77;s;1121pkt 1121fpkt", shape=diamond, color=yellow];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.32.40.77:*, *:2968}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2968: (50%)&lt;BR/&gt; 4013: (0.133809%)&lt;BR/&gt; 3897: (0.133809%)&lt;BR/&gt; 3634: (0.133809%)&lt;BR/&gt; 3596: (0.133809%)&gt;];
}
2658--3448[label="0.00502513;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="2968" src_ip="201.32.40.77"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
2785[label="209.210.80.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
2786[label="201.75.53.102;s;1pkt 1fpkt", shape=diamond, color=yellow];
9683[label="201.75.53.102;s;1pkt 1fpkt", shape=hexagon, color=black];
13722[label="201.75.53.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.53.102:49585, 209.210.80.161:554}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49585: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
2785--2786[label="1;1pkt 1fpkt"];
2785--9683[label="1;1pkt 1fpkt"];
2785--13722[label="1;1pkt 1fpkt"];
2786--9683[label="1;1pkt 1fpkt"];
2786--13722[label="1;1pkt 1fpkt"];
9683--13722[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.210.80.161" dst_port="554" src_ip="201.75.53.102" src_port="49585"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
2800[label="169.6.144.2;d;620pkt 620fpkt", shape=diamond, color=yellow];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.6.144.2:49299}[98.7097%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49299: (49.3548%)&lt;BR/&gt; 443: (0.322581%)&lt;BR/&gt; 80: (0.241935%)&lt;BR/&gt; 65000: (0.16129%)&lt;BR/&gt; 63646: (0.16129%)&gt;];
}
2800--7562[label="0.0016129;1pkt 1fpkt"];
2800--11285[label="0.0016129;1pkt 1fpkt"];
2800--11351[label="0.0016129;1pkt 1fpkt"];
2800--11392[label="0.0016129;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.144.2" dst_port="49299"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
3064[label="132.188.239.155;d;2pkt 2fpkt", shape=diamond, color=yellow];
3065[label="216.138.104.225;s;1pkt 1fpkt", shape=diamond, color=yellow];
9042[label="132.188.239.155;d;2pkt 2fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.105.174.131:49450, 132.188.239.155:3389}[50%]&lt;BR/&gt;{216.138.104.225:0, 132.188.239.155:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (60%)&lt;BR/&gt; 49450: (20%)&lt;BR/&gt; 3389: (20%)&gt;];
}
3064--3065[label="1;1pkt 1fpkt"];
3064--9042[label="1;2pkt 2fpkt"];
3065--9042[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.239.155" src_ip="216.138.104.225"/>
      <filter dst_ip="132.188.239.155" dst_port="3389" src_ip="217.105.174.131" src_port="49450"/>
    </slice>
    <from sec="1191992450" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1888[label="134.71.36.215;d;11pkt 11fpkt", shape=diamond, color=yellow];
3122[label="81.33.82.251;s;8pkt 8fpkt", shape=diamond, color=yellow];
7674[label="134.71.36.215;d;11pkt 11fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.33.82.251:80, 134.71.36.215:*}[72.7273%]&lt;BR/&gt;{209.50.122.13:80, 134.71.36.215:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1212: (5%)&lt;BR/&gt; 1211: (5%)&lt;BR/&gt; 1202: (5%)&lt;BR/&gt; 1201: (5%)&gt;];
}
1888--3122[label="1;8pkt 8fpkt"];
1888--7674[label="1;11pkt 11fpkt"];
3122--7674[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.36.215" src_ip="81.33.82.251" src_port="80"/>
      <filter dst_ip="134.71.36.215" src_ip="209.50.122.13" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="43.199.7.154"/>
      <from sec="1191992630" usec="0"/>
      <to sec="1191992779" usec="0"/>
    </slice>
    <from sec="1191992630" usec="0"/>
    <to sec="1191992779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
3235[label="172.130.78.23;s;192pkt 192fpkt", shape=diamond, color=yellow];
3274[label="210.128.117.65;d;190pkt 190fpkt", shape=diamond, color=yellow];
8613[label="172.130.78.23;s;192pkt 192fpkt", shape=hexagon, color=black];
8629[label="210.128.117.65;d;190pkt 190fpkt", shape=hexagon, color=black];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.78.23:*, 210.128.117.65:80}[49.4792%]&lt;BR/&gt;{172.130.78.23:*, 210.128.117.65:20480}[49.4792%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20480: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 9054: (0.52356%)&lt;BR/&gt; 9046: (0.52356%)&lt;BR/&gt; 9022: (0.52356%)&gt;];
}
3235--3274[label="1;190pkt 190fpkt"];
3235--8613[label="1;192pkt 192fpkt"];
3235--8629[label="1;190pkt 190fpkt"];
3274--8613[label="1;190pkt 190fpkt"];
3274--8629[label="1;190pkt 190fpkt"];
8613--8629[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_ip="210.128.117.65" dst_port="20480" src_ip="172.130.78.23"/>
      <filter dst_ip="210.128.117.65" dst_port="80" src_ip="172.130.78.23"/>
    </slice>
    <from sec="1191992613" usec="0"/>
    <to sec="1191992692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
3238[label="172.159.120.66;s;96pkt 96fpkt", shape=diamond, color=yellow];
3279[label="193.54.99.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.120.66:3054, *:*}[85.4167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3054: (42.268%)&lt;BR/&gt; 12350: (3.09278%)&lt;BR/&gt; 37568: (1.03093%)&lt;BR/&gt; 33033: (1.03093%)&lt;BR/&gt; 15928: (1.03093%)&gt;];
}
3238--3279[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.159.120.66" src_port="3054"/>
    </slice>
    <from sec="1191992615" usec="0"/>
    <to sec="1191993132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
3168[label="172.130.91.99;s;130pkt 130fpkt", shape=diamond, color=yellow];
3826[label="201.179.124.23;d;127pkt 127fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.91.99:*, 201.179.124.23:80}[86.9863%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64023: (0.389105%)&lt;BR/&gt; 63989: (0.389105%)&lt;BR/&gt; 63953: (0.389105%)&lt;BR/&gt; 63945: (0.389105%)&gt;];
}
3168--3826[label="0.874016;111pkt 111fpkt"];
3168--11265[label="0.00769231;1pkt 1fpkt"];
3168--11285[label="0.0307692;4pkt 4fpkt"];
3168--11338[label="0.00769231;1pkt 1fpkt"];
3168--11351[label="0.0307692;4pkt 4fpkt"];
3168--11382[label="0.00769231;1pkt 1fpkt"];
3168--11392[label="0.0307692;4pkt 4fpkt"];
3826--11285[label="0.0314961;4pkt 4fpkt"];
3826--11351[label="0.0314961;4pkt 4fpkt"];
3826--11392[label="0.0314961;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.179.124.23" dst_port="80" src_ip="172.130.91.99"/>
    </slice>
    <from sec="1191992564" usec="0"/>
    <to sec="1191993204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
3860[label="169.6.80.229;s;2pkt 2fpkt", shape=diamond, color=yellow];
3861[label="52.58.162.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
9133[label="169.6.80.229;s;2pkt 2fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.80.229:995, 52.58.162.154:56498}[50%]&lt;BR/&gt;{169.6.80.229:995, 52.58.162.157:56529}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 56529: (30%)&lt;BR/&gt; 56498: (20%)&gt;];
}
3860--3861[label="1;1pkt 1fpkt"];
3860--9133[label="1;2pkt 2fpkt"];
3861--9133[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="52.58.162.157" dst_port="56529" src_ip="169.6.80.229" src_port="995"/>
      <filter dst_ip="52.58.162.154" dst_port="56498" src_ip="169.6.80.229" src_port="995"/>
    </slice>
    <from sec="1191992692" usec="0"/>
    <to sec="1191992714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="1.57.0.50"/>
      <from sec="1191992733" usec="0"/>
      <to sec="1191992773" usec="0"/>
    </slice>
    <from sec="1191992733" usec="0"/>
    <to sec="1191992773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.42146,2.99489,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
1827[label="61.189.44.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
3961[label="134.71.4.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
7588[label="61.189.44.207;d;1pkt 1fpkt", shape=hexagon, color=black];
9563[label="134.71.4.80;s;1pkt 1fpkt", shape=hexagon, color=black];
17978[label="134.71.4.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.4.80:1153, 61.189.44.207:8098}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8098: (50%)&lt;BR/&gt; 1153: (50%)&gt;];
}
1827--3961[label="1;1pkt 1fpkt"];
1827--7588[label="1;1pkt 1fpkt"];
1827--9563[label="1;1pkt 1fpkt"];
1827--17978[label="1;1pkt 1fpkt"];
3961--7588[label="1;1pkt 1fpkt"];
3961--9563[label="1;1pkt 1fpkt"];
3961--17978[label="1;1pkt 1fpkt"];
7588--9563[label="1;1pkt 1fpkt"];
7588--17978[label="1;1pkt 1fpkt"];
9563--17978[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.189.44.207" dst_port="8098" src_ip="134.71.4.80" src_port="1153"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
3384[label="219.1.152.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
4009[label="132.188.126.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
9276[label="219.1.152.3;d;1pkt 1fpkt", shape=hexagon, color=black];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.188.126.195:1027, 219.1.152.3:15072}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15072: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
3384--4009[label="1;1pkt 1fpkt"];
3384--9276[label="1;1pkt 1fpkt"];
4009--9276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.1.152.3" dst_port="15072" src_ip="132.188.126.195" src_port="1027"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
4449[label="193.143.83.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
4450[label="132.188.90.196;s;1pkt 1fpkt", shape=diamond, color=yellow];
9113[label="193.143.83.249;d;1pkt 1fpkt", shape=hexagon, color=black];
9114[label="132.188.90.196;s;1pkt 1fpkt", shape=hexagon, color=black];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.188.90.196:49153, 193.143.83.249:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49153: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
4449--4450[label="1;1pkt 1fpkt"];
4449--9113[label="1;1pkt 1fpkt"];
4449--9114[label="1;1pkt 1fpkt"];
4450--9113[label="1;1pkt 1fpkt"];
4450--9114[label="1;1pkt 1fpkt"];
9113--9114[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.143.83.249" dst_port="1755" src_ip="132.188.90.196" src_port="49153"/>
    </slice>
    <from sec="1191992653" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="62.144.145.48"/>
      <from sec="1191992780" usec="0"/>
      <to sec="1191992832" usec="0"/>
    </slice>
    <from sec="1191992780" usec="0"/>
    <to sec="1191992832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
4632[label="201.179.126.99;d;98pkt 98fpkt", shape=diamond, color=yellow];
4633[label="188.104.231.2;s;98pkt 98fpkt", shape=diamond, color=yellow];
9194[label="201.179.126.99;d;98pkt 98fpkt", shape=hexagon, color=black];
11490[label="188.104.231.2;97pkt 97fpkt", shape=pentagon, color=darkviolet];
16901[label="188.104.231.2;97pkt 97fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.231.2:*, 201.179.126.99:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49251: (0.512295%)&lt;BR/&gt; 49250: (0.512295%)&lt;BR/&gt; 49249: (0.512295%)&lt;BR/&gt; 49248: (0.512295%)&gt;];
}
4632--4633[label="1;98pkt 98fpkt"];
4632--9194[label="1;98pkt 98fpkt"];
4632--11490[label="1;97pkt 97fpkt"];
4632--16901[label="1;97pkt 97fpkt"];
4633--9194[label="1;98pkt 98fpkt"];
4633--11490[label="1;97pkt 97fpkt"];
4633--16901[label="1;97pkt 97fpkt"];
9194--11490[label="1;97pkt 97fpkt"];
9194--16901[label="1;97pkt 97fpkt"];
11490--16901[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="201.179.126.99" dst_port="80" src_ip="188.104.231.2"/>
    </slice>
    <from sec="1191992804" usec="0"/>
    <to sec="1191992809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
4661[label="71.58.74.224;s;10pkt 10fpkt", shape=diamond, color=yellow];
4662[label="134.71.198.196;d;10pkt 10fpkt", shape=diamond, color=yellow];
9978[label="134.71.198.196;d;10pkt 10fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.58.74.224:80, 134.71.198.196:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52968: (5%)&lt;BR/&gt; 52966: (5%)&lt;BR/&gt; 52962: (5%)&lt;BR/&gt; 52958: (5%)&gt;];
}
4661--4662[label="1;10pkt 10fpkt"];
4661--9978[label="1;10pkt 10fpkt"];
4662--9978[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.198.196" src_ip="71.58.74.224" src_port="80"/>
    </slice>
    <from sec="1191992823" usec="0"/>
    <to sec="1191993007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
4511[label="172.130.132.95;s;87pkt 87fpkt", shape=diamond, color=yellow];
4681[label="211.234.24.11;d;55pkt 55fpkt", shape=diamond, color=yellow];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.132.95:*, 211.234.24.11:80}[63.2184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1831%)&lt;BR/&gt; 8080: (2.8169%)&lt;BR/&gt; 2202: (0.704225%)&lt;BR/&gt; 2201: (0.704225%)&lt;BR/&gt; 2200: (0.704225%)&gt;];
}
4511--4681[label="1;55pkt 55fpkt"];
4511--11285[label="0.0114943;1pkt 1fpkt"];
4511--11351[label="0.0114943;1pkt 1fpkt"];
4511--11392[label="0.0114943;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.234.24.11" dst_port="80" src_ip="172.130.132.95"/>
    </slice>
    <from sec="1191992730" usec="0"/>
    <to sec="1191992967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
4801[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
4802[label="169.6.14.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
13150[label="169.6.14.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17941[label="169.6.14.78;1pkt 1fpkt", shape=invtriangle, color=brown];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.14.78:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
4801--4802[label="1;1pkt 1fpkt"];
4801--13150[label="1;1pkt 1fpkt"];
4801--17941[label="1;1pkt 1fpkt"];
4802--13150[label="1;1pkt 1fpkt"];
4802--17941[label="1;1pkt 1fpkt"];
13150--17941[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="169.6.14.78" src_port="4445"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="222.197.82.182"/>
      <from sec="1191992403" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.153.31.245"/>
      <from sec="1191992404" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.179.126.183"/>
      <from sec="1191993197" usec="0"/>
      <to sec="1191993224" usec="0"/>
    </slice>
    <from sec="1191993197" usec="0"/>
    <to sec="1191993224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
5223[label="71.58.74.224;d;10pkt 10fpkt", shape=diamond, color=yellow];
5224[label="134.71.198.196;s;10pkt 10fpkt", shape=diamond, color=yellow];
9514[label="71.58.74.224;d;10pkt 10fpkt", shape=hexagon, color=black];
15785[label="134.71.198.196;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.198.196:*, 71.58.74.224:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52968: (5.12821%)&lt;BR/&gt; 52966: (5.12821%)&lt;BR/&gt; 52962: (5.12821%)&lt;BR/&gt; 52958: (5.12821%)&gt;];
}
5223--5224[label="1;10pkt 10fpkt"];
5223--9514[label="1;10pkt 10fpkt"];
5223--15785[label="1;9pkt 9fpkt"];
5224--9514[label="1;10pkt 10fpkt"];
5224--15785[label="1;9pkt 9fpkt"];
9514--15785[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="71.58.74.224" dst_port="80" src_ip="134.71.198.196"/>
    </slice>
    <from sec="1191992823" usec="0"/>
    <to sec="1191993007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
4687[label="1.178.159.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
5245[label="134.71.4.20;s;2pkt 2fpkt", shape=diamond, color=yellow];
9211[label="1.178.159.12;d;1pkt 1fpkt", shape=hexagon, color=black];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.4.20:1824, 1.178.159.12:80}[50%]&lt;BR/&gt;{134.71.4.20:1825, 196.202.77.121:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1824: (37.5%)&lt;BR/&gt; 1825: (12.5%)&gt;];
}
4687--5245[label="1;1pkt 1fpkt"];
4687--9211[label="1;1pkt 1fpkt"];
5245--9211[label="1;1pkt 1fpkt"];
5245--9320[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.202.77.121" dst_port="80" src_ip="134.71.4.20" src_port="1825"/>
      <filter dst_ip="1.178.159.12" dst_port="80" src_ip="134.71.4.20" src_port="1824"/>
    </slice>
    <from sec="1191992839" usec="0"/>
    <to sec="1191993084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
5288[label="169.6.82.141;s;96pkt 96fpkt", shape=diamond, color=yellow];
5343[label="81.56.189.163;d;96pkt 96fpkt", shape=diamond, color=yellow];
14520[label="169.6.82.141;96pkt 96fpkt", shape=pentagon, color=darkviolet];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.82.141:443, 81.56.189.163:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2645: (0.520833%)&lt;BR/&gt; 2644: (0.520833%)&lt;BR/&gt; 2643: (0.520833%)&lt;BR/&gt; 2642: (0.520833%)&gt;];
}
5288--5343[label="1;96pkt 96fpkt"];
5288--14520[label="1;96pkt 96fpkt"];
5343--14520[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="81.56.189.163" src_ip="169.6.82.141" src_port="443"/>
    </slice>
    <from sec="1191992868" usec="0"/>
    <to sec="1191992902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1968[label="222.144.241.98;d;3pkt 3fpkt", shape=diamond, color=yellow];
5414[label="168.53.107.176;s;3pkt 3fpkt", shape=diamond, color=yellow];
10043[label="222.144.241.98;d;3pkt 3fpkt", shape=hexagon, color=black];
15345[label="168.53.107.176;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.107.176:80, 222.144.241.98:59587}[33.3333%]&lt;BR/&gt;{168.53.107.176:80, 222.144.241.98:59635}[33.3333%]&lt;BR/&gt;{168.53.107.176:80, 222.144.241.98:65375}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65375: (16.6667%)&lt;BR/&gt; 59635: (16.6667%)&lt;BR/&gt; 59587: (16.6667%)&gt;];
}
1968--5414[label="1;3pkt 3fpkt"];
1968--10043[label="1;3pkt 3fpkt"];
1968--15345[label="1;3pkt 3fpkt"];
5414--10043[label="1;3pkt 3fpkt"];
5414--15345[label="1;3pkt 3fpkt"];
10043--15345[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="222.144.241.98" dst_port="65375" src_ip="168.53.107.176" src_port="80"/>
      <filter dst_ip="222.144.241.98" dst_port="59635" src_ip="168.53.107.176" src_port="80"/>
      <filter dst_ip="222.144.241.98" dst_port="59587" src_ip="168.53.107.176" src_port="80"/>
    </slice>
    <from sec="1191992565" usec="0"/>
    <to sec="1191992953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.173.64.65"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993138" usec="0"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
3362[label="200.173.70.211;d;209pkt 209fpkt", shape=diamond, color=yellow];
5528[label="37.39.114.201;s;231pkt 231fpkt", shape=diamond, color=yellow];
8739[label="200.173.70.211;d;209pkt 209fpkt", shape=hexagon, color=black];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.39.114.201:*, 200.173.70.211:445}[45.4545%]&lt;BR/&gt;{37.39.114.201:*, 200.173.70.211:139}[45.0216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.963%)&lt;BR/&gt; 139: (24.037%)&lt;BR/&gt; 3347: (0.46225%)&lt;BR/&gt; 4988: (0.231125%)&lt;BR/&gt; 4987: (0.231125%)&gt;];
}
3362--5528[label="1;209pkt 209fpkt"];
3362--8739[label="1;209pkt 209fpkt"];
5528--8739[label="1;209pkt 209fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.70.211" dst_port="445" src_ip="37.39.114.201"/>
      <filter dst_ip="200.173.70.211" dst_port="139" src_ip="37.39.114.201"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.130.200.120"/>
      <from sec="1191992403" usec="0"/>
      <to sec="1191993137" usec="0"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
5619[label="134.71.152.148;s;1pkt 1fpkt", shape=diamond, color=yellow];
5620[label="80.5.178.35;d;1pkt 1fpkt", shape=diamond, color=yellow];
10286[label="80.5.178.35;d;1pkt 1fpkt", shape=hexagon, color=black];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.152.148:1194, 80.5.178.35:8530}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8530: (50%)&lt;BR/&gt; 1194: (50%)&gt;];
}
5619--5620[label="1;1pkt 1fpkt"];
5619--10286[label="1;1pkt 1fpkt"];
5620--10286[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.5.178.35" dst_port="8530" src_ip="134.71.152.148" src_port="1194"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
5618[label="134.71.152.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
5621[label="80.5.178.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.5.178.35:8530, 134.71.152.148:1194}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8530: (50%)&lt;BR/&gt; 1194: (50%)&gt;];
}
5618--5621[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.152.148" dst_port="1194" src_ip="80.5.178.35" src_port="8530"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.64.34.214"/>
      <from sec="1191992412" usec="0"/>
      <to sec="1191993228" usec="0"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
5911[label="62.132.80.17;s;253pkt 253fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.132.80.17:*, *:41524}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41524: (50%)&lt;BR/&gt; 32857: (0.197628%)&lt;BR/&gt; 32811: (0.197628%)&lt;BR/&gt; 32597: (0.197628%)&lt;BR/&gt; 32573: (0.197628%)&gt;];
}
</description>
    <slice>
      <filter dst_port="41524" src_ip="62.132.80.17"/>
    </slice>
    <from sec="1191992959" usec="0"/>
    <to sec="1191992976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
5914[label="132.188.229.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
5915[label="196.169.90.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
10050[label="132.188.229.38;d;1pkt 1fpkt", shape=hexagon, color=black];
10803[label="196.169.90.155;s;1pkt 1fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.169.90.155:80, 132.188.229.38:1111}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1111: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5914--5915[label="1;1pkt 1fpkt"];
5914--10050[label="1;1pkt 1fpkt"];
5914--10803[label="1;1pkt 1fpkt"];
5915--10050[label="1;1pkt 1fpkt"];
5915--10803[label="1;1pkt 1fpkt"];
10050--10803[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.229.38" dst_port="1111" src_ip="196.169.90.155" src_port="80"/>
    </slice>
    <from sec="1191992960" usec="0"/>
    <to sec="1191993176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="59.4.0.93"/>
      <from sec="1191992982" usec="0"/>
      <to sec="1191993151" usec="0"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191993151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
5703[label="200.173.76.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
6006[label="211.13.215.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
9867[label="200.173.76.160;d;1pkt 1fpkt", shape=hexagon, color=black];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.13.215.98:24490, 200.173.76.160:1755}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24490: (50%)&lt;BR/&gt; 1755: (50%)&gt;];
}
5703--6006[label="1;1pkt 1fpkt"];
5703--9867[label="1;1pkt 1fpkt"];
6006--9867[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.76.160" dst_port="1755" src_ip="211.13.215.98" src_port="24490"/>
    </slice>
    <from sec="1191992453" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
6033[label="201.66.218.161;d;2pkt 2fpkt", shape=diamond, color=yellow];
6034[label="200.173.65.150;s;2pkt 2fpkt", shape=diamond, color=yellow];
10084[label="201.66.218.161;d;2pkt 2fpkt", shape=hexagon, color=black];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.65.150:4439, 201.66.218.161:119}[50%]&lt;BR/&gt;{200.173.65.150:4591, 201.66.218.161:119}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 4591: (25%)&lt;BR/&gt; 4439: (25%)&gt;];
}
6033--6034[label="1;2pkt 2fpkt"];
6033--10084[label="1;2pkt 2fpkt"];
6034--10084[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.66.218.161" dst_port="119" src_ip="200.173.65.150" src_port="4591"/>
      <filter dst_ip="201.66.218.161" dst_port="119" src_ip="200.173.65.150" src_port="4439"/>
    </slice>
    <from sec="1191993001" usec="0"/>
    <to sec="1191993161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
5641[label="81.169.173.227;d;3pkt 3fpkt", shape=diamond, color=yellow];
6071[label="168.53.133.238;s;2pkt 2fpkt", shape=diamond, color=yellow];
10687[label="81.169.173.227;d;3pkt 3fpkt", shape=hexagon, color=black];
16563[label="168.53.133.238;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20132[label="168.53.133.238;2pkt 2fpkt", shape=invtriangle, color=brown];
22612[label="168.53.133.238;2pkt 2fpkt", shape=invhouse, color=bisque];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.133.129:53, 81.169.173.227:53}[33.3333%]&lt;BR/&gt;{168.53.133.238:80, 81.169.173.227:45542}[33.3333%]&lt;BR/&gt;{168.53.133.238:80, 81.169.173.227:45563}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.3077%)&lt;BR/&gt; 45563: (23.0769%)&lt;BR/&gt; 45542: (19.2308%)&lt;BR/&gt; 53: (15.3846%)&gt;];
}
5641--6071[label="1;2pkt 2fpkt"];
5641--10687[label="1;3pkt 3fpkt"];
5641--16563[label="1;1pkt 1fpkt"];
5641--20132[label="1;2pkt 2fpkt"];
5641--22612[label="1;2pkt 2fpkt"];
6071--10687[label="1;2pkt 2fpkt"];
6071--16563[label="1;1pkt 1fpkt"];
6071--20132[label="1;2pkt 2fpkt"];
6071--22612[label="1;2pkt 2fpkt"];
10687--16563[label="1;1pkt 1fpkt"];
10687--20132[label="1;2pkt 2fpkt"];
10687--22612[label="1;2pkt 2fpkt"];
16563--20132[label="1;1pkt 1fpkt"];
16563--22612[label="1;1pkt 1fpkt"];
20132--22612[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="81.169.173.227" dst_port="45563" src_ip="168.53.133.238" src_port="80"/>
      <filter dst_ip="81.169.173.227" dst_port="45542" src_ip="168.53.133.238" src_port="80"/>
      <filter dst_ip="81.169.173.227" dst_port="53" src_ip="168.53.133.129" src_port="53"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,501,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
2781[label="200.173.70.17;d;197pkt 197fpkt", shape=diamond, color=yellow];
4805[label="81.248.37.195;s;21pkt 21fpkt", shape=diamond, color=yellow];
5760[label="211.208.22.174;s;16pkt 16fpkt", shape=diamond, color=yellow];
6207[label="222.174.249.186;s;89pkt 89fpkt", shape=diamond, color=yellow];
6374[label="220.77.177.207;s;47pkt 47fpkt", shape=diamond, color=yellow];
9682[label="200.173.70.17;d;170pkt 170fpkt", shape=hexagon, color=black];
13492[label="49.193.81.92;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15753[label="81.248.37.195;21pkt 21fpkt", shape=pentagon, color=darkviolet];
19611[label="81.248.37.195;20pkt 20fpkt", shape=invtriangle, color=brown];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.174.249.186:*, 200.173.70.17:21}[43.6548%]&lt;BR/&gt;{220.77.177.207:*, 200.173.70.17:21}[21.3198%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (42.9674%)&lt;BR/&gt; 2217: (0.686106%)&lt;BR/&gt; 80: (0.600343%)&lt;BR/&gt; 33485: (0.428816%)&lt;BR/&gt; 27201: (0.428816%)&gt;];
}
2781--4805[label="1;21pkt 21fpkt"];
2781--5760[label="1;16pkt 16fpkt"];
2781--6207[label="1;89pkt 89fpkt"];
2781--6374[label="1;47pkt 47fpkt"];
2781--9682[label="1;170pkt 170fpkt"];
2781--13492[label="1;2pkt 2fpkt"];
2781--15753[label="1;21pkt 21fpkt"];
2781--19611[label="1;20pkt 20fpkt"];
4805--9682[label="1;21pkt 21fpkt"];
4805--15753[label="1;21pkt 21fpkt"];
4805--19611[label="1;20pkt 20fpkt"];
5760--9682[label="1;16pkt 16fpkt"];
6207--9682[label="0.853933;76pkt 76fpkt"];
6374--9682[label="0.851064;40pkt 40fpkt"];
9682--15753[label="1;21pkt 21fpkt"];
9682--19611[label="1;20pkt 20fpkt"];
15753--19611[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.70.17" dst_port="21" src_ip="222.174.249.186"/>
      <filter dst_ip="200.173.70.17" dst_port="21" src_ip="220.77.177.207"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.130.228.32"/>
      <from sec="1191992413" usec="0"/>
      <to sec="1191993222" usec="0"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
6288[label="200.173.69.78;d;103pkt 103fpkt", shape=diamond, color=yellow];
6289[label="200.84.83.69;s;103pkt 103fpkt", shape=diamond, color=yellow];
10705[label="200.173.69.78;d;103pkt 103fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.84.83.69:*, 200.173.69.78:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4903: (0.485437%)&lt;BR/&gt; 4715: (0.485437%)&lt;BR/&gt; 4711: (0.485437%)&lt;BR/&gt; 4710: (0.485437%)&gt;];
}
6288--6289[label="1;103pkt 103fpkt"];
6288--10705[label="1;103pkt 103fpkt"];
6289--10705[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.69.78" dst_port="1433" src_ip="200.84.83.69"/>
    </slice>
    <from sec="1191992420" usec="0"/>
    <to sec="1191993215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,053,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
6005[label="211.13.215.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
6333[label="200.173.76.160;s;10pkt 10fpkt", shape=diamond, color=yellow];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.76.160:80, 71.48.164.33:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 24490: (9.09091%)&lt;BR/&gt; 1755: (9.09091%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 59964: (4.54545%)&gt;];
}
6005--6333[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="71.48.164.33" src_ip="200.173.76.160" src_port="80"/>
    </slice>
    <from sec="1191992453" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
4414[label="188.104.72.63;s;115pkt 115fpkt", shape=diamond, color=yellow];
6376[label="222.2.194.68;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.72.63:*, 80.138.202.191:*}[36.5217%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11273: (8.97436%)&lt;BR/&gt; 7411: (8.97436%)&lt;BR/&gt; 21321: (7.26496%)&lt;BR/&gt; 720: (3.84615%)&lt;BR/&gt; 52300: (3.4188%)&gt;];
}
4414--6376[label="1;2pkt 2fpkt"];
4414--8699[label="0.00869565;1pkt 1fpkt"];
4414--11285[label="0.00869565;1pkt 1fpkt"];
4414--11351[label="0.00869565;1pkt 1fpkt"];
4414--11392[label="0.00869565;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.138.202.191" src_ip="188.104.72.63"/>
    </slice>
    <from sec="1191992608" usec="0"/>
    <to sec="1191993221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="216.218.50.89"/>
      <from sec="1191992753" usec="0"/>
      <to sec="1191993228" usec="0"/>
    </slice>
    <from sec="1191992753" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02666,3.0359,503,0 0 0 1 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
5960[label="206.35.149.162;d;1pkt 1fpkt", shape=diamond, color=yellow];
6514[label="168.79.8.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
15725[label="168.79.8.194;5pkt 5fpkt", shape=pentagon, color=darkviolet];
22221[label="168.79.8.194;4pkt 4fpkt", shape=invhouse, color=bisque];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.79.8.194:53, 206.35.145.1:53}[20%]&lt;BR/&gt;{168.79.8.194:53, 210.91.224.143:32788}[20%]&lt;BR/&gt;{168.79.8.194:80, 206.35.149.162:54227}[20%]&lt;BR/&gt;{168.79.8.194:80, 210.91.224.204:59120}[20%]&lt;BR/&gt;{168.79.8.194:80, 210.91.224.204:59121}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 53: (29.1667%)&lt;BR/&gt; 54227: (16.6667%)&lt;BR/&gt; 59121: (8.33333%)&lt;BR/&gt; 59120: (8.33333%)&gt;];
}
5960--6514[label="1;1pkt 1fpkt"];
5960--15725[label="1;1pkt 1fpkt"];
5960--22221[label="1;1pkt 1fpkt"];
6514--15725[label="1;2pkt 2fpkt"];
6514--22221[label="1;2pkt 2fpkt"];
15725--22221[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="210.91.224.204" dst_port="59121" src_ip="168.79.8.194" src_port="80"/>
      <filter dst_ip="210.91.224.204" dst_port="59120" src_ip="168.79.8.194" src_port="80"/>
      <filter dst_ip="206.35.149.162" dst_port="54227" src_ip="168.79.8.194" src_port="80"/>
      <filter dst_ip="210.91.224.143" dst_port="32788" src_ip="168.79.8.194" src_port="53"/>
      <filter dst_ip="206.35.145.1" dst_port="53" src_ip="168.79.8.194" src_port="53"/>
    </slice>
    <from sec="1191992822" usec="0"/>
    <to sec="1191992986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="221.43.130.192"/>
      <from sec="1191993012" usec="0"/>
      <to sec="1191993139" usec="0"/>
    </slice>
    <from sec="1191993012" usec="0"/>
    <to sec="1191993139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
6605[label="172.130.39.119;s;34pkt 34fpkt", shape=diamond, color=yellow];
6718[label="221.51.224.192;d;29pkt 29fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.39.119:80, 221.51.224.192:*}[85.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4611: (1.5873%)&lt;BR/&gt; 4610: (1.5873%)&lt;BR/&gt; 4602: (1.5873%)&lt;BR/&gt; 4601: (1.5873%)&gt;];
}
6605--6718[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="221.51.224.192" src_ip="172.130.39.119" src_port="80"/>
    </slice>
    <from sec="1191993038" usec="0"/>
    <to sec="1191993132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
6749[label="200.173.77.130;d;91pkt 91fpkt", shape=diamond, color=yellow];
6750[label="36.199.195.250;s;102pkt 102fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.199.195.250:*, 200.173.77.130:445}[46.0784%]&lt;BR/&gt;{36.199.195.250:*, 200.173.77.130:139}[43.1373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.2021%)&lt;BR/&gt; 139: (22.7979%)&lt;BR/&gt; 3511: (0.777202%)&lt;BR/&gt; 4787: (0.518135%)&lt;BR/&gt; 4786: (0.518135%)&gt;];
}
6749--6750[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.130" dst_port="445" src_ip="36.199.195.250"/>
      <filter dst_ip="200.173.77.130" dst_port="139" src_ip="36.199.195.250"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
6781[label="180.49.166.113;s;348pkt 348fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.166.113:20129, *:20129}[61.4943%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (80.7471%)&lt;BR/&gt; 20128: (0.574713%)&lt;BR/&gt; 64751: (0.143678%)&lt;BR/&gt; 64461: (0.143678%)&lt;BR/&gt; 64317: (0.143678%)&gt;];
}
6781--8834[label="0.008;1pkt 1fpkt"];
6781--11046[label="0.00826446;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="180.49.166.113" src_port="20129"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
6631[label="134.71.200.74;d;10pkt 10fpkt", shape=diamond, color=yellow];
6912[label="209.50.37.97;s;10pkt 10fpkt", shape=diamond, color=yellow];
10691[label="209.50.37.97;s;10pkt 10fpkt", shape=hexagon, color=black];
13589[label="209.50.37.97;10pkt 10fpkt", shape=pentagon, color=darkviolet];
18228[label="209.50.37.97;10pkt 10fpkt", shape=invtriangle, color=brown];
21267[label="209.50.37.97;9pkt 9fpkt", shape=invhouse, color=bisque];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.50.37.97:80, 134.71.200.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4189: (5.08475%)&lt;BR/&gt; 4188: (5.08475%)&lt;BR/&gt; 4187: (5.08475%)&lt;BR/&gt; 4186: (5.08475%)&gt;];
}
6631--6912[label="1;10pkt 10fpkt"];
6631--10691[label="1;10pkt 10fpkt"];
6631--13589[label="1;10pkt 10fpkt"];
6631--18228[label="1;10pkt 10fpkt"];
6631--21267[label="1;9pkt 9fpkt"];
6912--10691[label="1;10pkt 10fpkt"];
6912--13589[label="1;10pkt 10fpkt"];
6912--18228[label="1;10pkt 10fpkt"];
6912--21267[label="1;9pkt 9fpkt"];
10691--13589[label="1;10pkt 10fpkt"];
10691--18228[label="1;10pkt 10fpkt"];
10691--21267[label="1;9pkt 9fpkt"];
13589--18228[label="1;10pkt 10fpkt"];
13589--21267[label="1;9pkt 9fpkt"];
18228--21267[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.200.74" src_ip="209.50.37.97" src_port="80"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
5475[label="188.104.214.51;s;122pkt 122fpkt", shape=diamond, color=yellow];
7034[label="61.86.169.35;d;19pkt 19fpkt", shape=diamond, color=yellow];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.214.51:63309, *:53}[71.3115%]&lt;BR/&gt;{188.104.214.51:80, 61.86.169.35:*}[22.1311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63309: (30.8511%)&lt;BR/&gt; 53: (30.8511%)&lt;BR/&gt; 80: (17.0213%)&lt;BR/&gt; 0: (4.25532%)&lt;BR/&gt; 65089: (0.70922%)&gt;];
}
5475--5533[label="0.00909091;1pkt 1fpkt"];
5475--6100[label="0.00819672;1pkt 1fpkt"];
5475--6184[label="0.00819672;1pkt 1fpkt"];
5475--6800[label="0.0111111;1pkt 1fpkt"];
5475--6817[label="0.0163934;2pkt 2fpkt"];
5475--6847[label="0.00819672;1pkt 1fpkt"];
5475--7034[label="1;19pkt 19fpkt"];
5475--7475[label="0.00819672;1pkt 1fpkt"];
5475--8409[label="0.00819672;1pkt 1fpkt"];
5475--9710[label="0.00819672;1pkt 1fpkt"];
5475--10153[label="0.00819672;1pkt 1fpkt"];
5475--10210[label="0.00819672;1pkt 1fpkt"];
5475--10584[label="0.00819672;1pkt 1fpkt"];
5475--11040[label="0.00819672;1pkt 1fpkt"];
5475--11337[label="0.180328;22pkt 22fpkt"];
5475--11381[label="0.180328;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="61.86.169.35" src_ip="188.104.214.51" src_port="80"/>
      <filter dst_port="53" src_ip="188.104.214.51" src_port="63309"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
7072[label="132.188.148.24;d;1pkt 1fpkt", shape=diamond, color=yellow];
7073[label="210.172.208.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.172.208.182:4500, 132.188.148.24:4500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (100%)&gt;];
}
7072--7073[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.148.24" dst_port="4500" src_ip="210.172.208.182" src_port="4500"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="201.75.186.40"/>
      <from sec="1191993018" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="1191993018" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.193.97.147"/>
      <from sec="1191993019" usec="0"/>
      <to sec="1191993214" usec="0"/>
    </slice>
    <from sec="1191993019" usec="0"/>
    <to sec="1191993214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
6669[label="206.35.149.2;d;3pkt 3fpkt", shape=diamond, color=yellow];
7162[label="172.240.230.68;s;2pkt 2fpkt", shape=diamond, color=yellow];
12961[label="172.240.230.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17821[label="172.240.230.68;1pkt 1fpkt", shape=invtriangle, color=brown];
20974[label="172.240.230.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.84.141.97:27481, 206.35.149.2:80}[33.3333%]&lt;BR/&gt;{172.240.230.68:17929, 206.35.149.2:21}[33.3333%]&lt;BR/&gt;{172.240.230.68:54719, 206.35.149.2:47613}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54719: (31.25%)&lt;BR/&gt; 47613: (31.25%)&lt;BR/&gt; 17929: (12.5%)&lt;BR/&gt; 21: (12.5%)&lt;BR/&gt; 27481: (6.25%)&gt;];
}
6669--7162[label="1;2pkt 2fpkt"];
6669--12961[label="1;1pkt 1fpkt"];
6669--17821[label="1;1pkt 1fpkt"];
6669--20974[label="1;1pkt 1fpkt"];
7162--12961[label="1;1pkt 1fpkt"];
7162--17821[label="1;1pkt 1fpkt"];
7162--20974[label="1;1pkt 1fpkt"];
12961--17821[label="1;1pkt 1fpkt"];
12961--20974[label="1;1pkt 1fpkt"];
17821--20974[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.35.149.2" dst_port="47613" src_ip="172.240.230.68" src_port="54719"/>
      <filter dst_ip="206.35.149.2" dst_port="21" src_ip="172.240.230.68" src_port="17929"/>
      <filter dst_ip="206.35.149.2" dst_port="80" src_ip="168.84.141.97" src_port="27481"/>
    </slice>
    <from sec="1191993076" usec="0"/>
    <to sec="1191993120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.162.165.209"/>
      <from sec="1191993086" usec="0"/>
      <to sec="1191993213" usec="0"/>
    </slice>
    <from sec="1191993086" usec="0"/>
    <to sec="1191993213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.163.57.0"/>
      <from sec="1191993103" usec="0"/>
      <to sec="1191993203" usec="0"/>
    </slice>
    <from sec="1191993103" usec="0"/>
    <to sec="1191993203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
7200[label="200.197.147.32;d;3pkt 3fpkt", shape=diamond, color=yellow];
7201[label="188.104.24.146;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.24.146:80, 200.197.147.32:39737}[33.3333%]&lt;BR/&gt;{188.104.24.146:80, 200.197.147.32:39866}[33.3333%]&lt;BR/&gt;{188.104.24.146:80, 200.197.147.32:39916}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39916: (16.6667%)&lt;BR/&gt; 39866: (16.6667%)&lt;BR/&gt; 39737: (16.6667%)&gt;];
}
7200--7201[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.197.147.32" dst_port="39916" src_ip="188.104.24.146" src_port="80"/>
      <filter dst_ip="200.197.147.32" dst_port="39866" src_ip="188.104.24.146" src_port="80"/>
      <filter dst_ip="200.197.147.32" dst_port="39737" src_ip="188.104.24.146" src_port="80"/>
    </slice>
    <from sec="1191993116" usec="0"/>
    <to sec="1191993147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
7071[label="201.75.182.196;s;3pkt 3fpkt", shape=diamond, color=yellow];
7209[label="208.34.66.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
15784[label="201.75.182.196;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.182.196:1037, 208.34.66.109:80}[33.3333%]&lt;BR/&gt;{201.75.182.196:1033, 208.34.66.77:80}[33.3333%]&lt;BR/&gt;{201.75.182.196:1040, 208.34.66.77:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1040: (21.4286%)&lt;BR/&gt; 1037: (14.2857%)&lt;BR/&gt; 1033: (14.2857%)&gt;];
}
7071--7209[label="1;2pkt 2fpkt"];
7071--15784[label="1;2pkt 2fpkt"];
7209--15784[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.34.66.77" dst_port="80" src_ip="201.75.182.196" src_port="1040"/>
      <filter dst_ip="208.34.66.77" dst_port="80" src_ip="201.75.182.196" src_port="1033"/>
      <filter dst_ip="208.34.66.109" dst_port="80" src_ip="201.75.182.196" src_port="1037"/>
    </slice>
    <from sec="1191992981" usec="0"/>
    <to sec="1191993273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.239.76.90"/>
      <from sec="1191993140" usec="0"/>
      <to sec="1191993175" usec="0"/>
    </slice>
    <from sec="1191993140" usec="0"/>
    <to sec="1191993175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="1.178.133.33"/>
      <from sec="1191993148" usec="0"/>
      <to sec="1191993196" usec="0"/>
    </slice>
    <from sec="1191993148" usec="0"/>
    <to sec="1191993196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
488[label="172.159.124.120;s;18pkt 18fpkt", shape=diamond, color=yellow];
7277[label="49.192.204.147;d;18pkt 18fpkt", shape=diamond, color=yellow];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.124.120:*, 49.192.204.147:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2570: (2.77778%)&lt;BR/&gt; 2568: (2.77778%)&lt;BR/&gt; 2566: (2.77778%)&lt;BR/&gt; 2564: (2.77778%)&gt;];
}
488--7277[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="49.192.204.147" dst_port="80" src_ip="172.159.124.120"/>
    </slice>
    <from sec="1191993150" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.121.181.55"/>
      <from sec="1191993153" usec="0"/>
      <to sec="1191993225" usec="0"/>
    </slice>
    <from sec="1191993153" usec="0"/>
    <to sec="1191993225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
7063[label="169.6.66.185;d;936pkt 936fpkt", shape=diamond, color=yellow];
7294[label="201.66.109.170;s;935pkt 935fpkt", shape=diamond, color=yellow];
10807[label="169.6.66.185;d;936pkt 936fpkt", shape=hexagon, color=black];
15209[label="201.66.109.170;934pkt 934fpkt", shape=pentagon, color=darkviolet];
19252[label="201.66.109.170;934pkt 934fpkt", shape=invtriangle, color=brown];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.66.109.170:80, 169.6.66.185:*}[99.8932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53159: (0.0534759%)&lt;BR/&gt; 53157: (0.0534759%)&lt;BR/&gt; 53154: (0.0534759%)&lt;BR/&gt; 53153: (0.0534759%)&gt;];
}
7063--7294[label="1;935pkt 935fpkt"];
7063--10807[label="1;936pkt 936fpkt"];
7063--15209[label="1;934pkt 934fpkt"];
7063--19252[label="1;934pkt 934fpkt"];
7294--10807[label="1;935pkt 935fpkt"];
7294--15209[label="1;934pkt 934fpkt"];
7294--19252[label="1;934pkt 934fpkt"];
10807--15209[label="1;934pkt 934fpkt"];
10807--19252[label="1;934pkt 934fpkt"];
15209--19252[label="1;934pkt 934fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.66.185" src_ip="201.66.109.170" src_port="80"/>
    </slice>
    <from sec="1191992967" usec="0"/>
    <to sec="1191993217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.70.4.124"/>
      <from sec="1191993172" usec="0"/>
      <to sec="1191993194" usec="0"/>
    </slice>
    <from sec="1191993172" usec="0"/>
    <to sec="1191993194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
614[label="200.173.70.203;s;10pkt 10fpkt", shape=diamond, color=yellow];
615[label="146.91.138.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
626[label="61.64.197.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
631[label="61.3.154.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
7410[label="61.3.154.28;d;1pkt 1fpkt", shape=hexagon, color=black];
8064[label="61.64.197.29;d;1pkt 1fpkt", shape=hexagon, color=black];
15906[label="200.173.70.203;10pkt 10fpkt", shape=pentagon, color=darkviolet];
19712[label="200.173.70.203;10pkt 10fpkt", shape=invtriangle, color=brown];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.70.203:80, 0.124.152.50:*}[36.3636%]&lt;BR/&gt;{200.173.70.203:5900, *:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.8571%)&lt;BR/&gt; 5900: (20%)&lt;BR/&gt; 2548: (7.14286%)&lt;BR/&gt; 1749: (7.14286%)&lt;BR/&gt; 1029: (5.71429%)&gt;];
}
614--615[label="1;1pkt 1fpkt"];
614--626[label="1;1pkt 1fpkt"];
614--631[label="1;1pkt 1fpkt"];
614--7410[label="1;1pkt 1fpkt"];
614--8064[label="1;1pkt 1fpkt"];
614--15906[label="0.9;9pkt 9fpkt"];
614--19712[label="0.9;9pkt 9fpkt"];
615--15906[label="1;1pkt 1fpkt"];
615--19712[label="1;1pkt 1fpkt"];
626--8064[label="1;1pkt 1fpkt"];
626--15906[label="1;1pkt 1fpkt"];
626--19712[label="1;1pkt 1fpkt"];
631--7410[label="1;1pkt 1fpkt"];
631--15906[label="1;1pkt 1fpkt"];
631--19712[label="1;1pkt 1fpkt"];
7410--15906[label="1;1pkt 1fpkt"];
7410--19712[label="1;1pkt 1fpkt"];
8064--15906[label="1;1pkt 1fpkt"];
8064--19712[label="1;1pkt 1fpkt"];
15906--19712[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="200.173.70.203" src_port="5900"/>
      <filter dst_ip="0.124.152.50" src_ip="200.173.70.203" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
532[label="220.64.177.146;d;66pkt 66fpkt", shape=diamond, color=yellow];
533[label="180.49.36.47;s;36pkt 36fpkt", shape=diamond, color=yellow];
829[label="180.49.36.34;s;30pkt 30fpkt", shape=diamond, color=yellow];
7431[label="180.49.36.34;s;30pkt 30fpkt", shape=hexagon, color=black];
8694[label="220.64.177.146;d;66pkt 66fpkt", shape=hexagon, color=black];
12237[label="180.49.36.34;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.36.47:*, 220.64.177.146:*}[54.5455%]&lt;BR/&gt;{180.49.36.34:*, 220.64.177.146:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8021: (2.33463%)&lt;BR/&gt; 2491: (1.16732%)&lt;BR/&gt; 4777: (0.972763%)&lt;BR/&gt; 4275: (0.972763%)&lt;BR/&gt; 3906: (0.972763%)&gt;];
}
532--533[label="1;36pkt 36fpkt"];
532--829[label="1;30pkt 30fpkt"];
532--7431[label="1;30pkt 30fpkt"];
532--8694[label="1;66pkt 66fpkt"];
532--12237[label="1;29pkt 29fpkt"];
533--8694[label="1;36pkt 36fpkt"];
829--7431[label="1;30pkt 30fpkt"];
829--8694[label="1;30pkt 30fpkt"];
829--12237[label="1;29pkt 29fpkt"];
7431--8694[label="1;30pkt 30fpkt"];
7431--12237[label="1;29pkt 29fpkt"];
8694--12237[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="220.64.177.146" src_ip="180.49.36.47"/>
      <filter dst_ip="220.64.177.146" src_ip="180.49.36.34"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
1237[label="172.159.76.201;s;243pkt 243fpkt", shape=diamond, color=yellow];
7480[label="172.159.76.201;s;99pkt 99fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.76.201:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1237--1808[label="0.00411523;1pkt 1fpkt"];
1237--3973[label="0.00411523;1pkt 1fpkt"];
1237--3982[label="0.00411523;1pkt 1fpkt"];
1237--3986[label="0.00411523;1pkt 1fpkt"];
1237--4057[label="0.00411523;1pkt 1fpkt"];
1237--4065[label="0.00411523;1pkt 1fpkt"];
1237--4166[label="0.0105263;1pkt 1fpkt"];
1237--4725[label="0.00411523;1pkt 1fpkt"];
1237--4728[label="0.00411523;1pkt 1fpkt"];
1237--4756[label="0.00411523;1pkt 1fpkt"];
1237--5449[label="0.00411523;1pkt 1fpkt"];
1237--5466[label="0.00411523;1pkt 1fpkt"];
1237--5498[label="0.00411523;1pkt 1fpkt"];
1237--7480[label="1;99pkt 99fpkt"];
1237--8253[label="0.00411523;1pkt 1fpkt"];
1237--8816[label="0.00411523;1pkt 1fpkt"];
1237--9263[label="0.00411523;1pkt 1fpkt"];
1237--9358[label="0.0108696;1pkt 1fpkt"];
1237--9599[label="0.00411523;1pkt 1fpkt"];
1237--9639[label="0.00411523;1pkt 1fpkt"];
1237--9686[label="0.00411523;1pkt 1fpkt"];
1237--10133[label="0.00411523;1pkt 1fpkt"];
1237--10528[label="0.00411523;1pkt 1fpkt"];
1237--10579[label="0.00411523;1pkt 1fpkt"];
1237--11111[label="0.00411523;1pkt 1fpkt"];
7480--8253[label="0.010101;1pkt 1fpkt"];
7480--8816[label="0.010101;1pkt 1fpkt"];
7480--9263[label="0.010101;1pkt 1fpkt"];
7480--9358[label="0.0108696;1pkt 1fpkt"];
7480--9599[label="0.010101;1pkt 1fpkt"];
7480--9639[label="0.010101;1pkt 1fpkt"];
7480--9686[label="0.010101;1pkt 1fpkt"];
7480--10133[label="0.010101;1pkt 1fpkt"];
7480--10528[label="0.010101;1pkt 1fpkt"];
7480--10579[label="0.010101;1pkt 1fpkt"];
7480--11111[label="0.010101;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.159.76.201"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
1445[label="134.71.20.35;d;78pkt 78fpkt", shape=diamond, color=yellow];
7507[label="134.71.20.35;d;70pkt 70fpkt", shape=hexagon, color=black];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.179.124.90:80, 134.71.20.35:*}[79.4872%]&lt;BR/&gt;{201.179.126.160:80, 134.71.20.35:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1812: (0.675676%)&lt;BR/&gt; 1811: (0.675676%)&lt;BR/&gt; 1810: (0.675676%)&lt;BR/&gt; 1804: (0.675676%)&gt;];
}
1445--7507[label="1;70pkt 70fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.20.35" src_ip="201.179.124.90" src_port="80"/>
      <filter dst_ip="134.71.20.35" src_ip="201.179.126.160" src_port="80"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
266[label="201.67.2.127;d;7757pkt 7757fpkt", shape=diamond, color=yellow];
1071[label="48.87.109.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
1805[label="52.128.191.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
1820[label="38.124.153.90;s;58pkt 58fpkt", shape=diamond, color=yellow];
1964[label="39.33.145.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
2666[label="144.85.21.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
2780[label="222.133.70.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
3097[label="42.29.118.95;s;1pkt 1fpkt", shape=diamond, color=yellow];
3333[label="48.129.102.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
3524[label="56.229.126.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
4046[label="37.157.77.132;s;3pkt 3fpkt", shape=diamond, color=yellow];
4076[label="56.136.46.96;s;1pkt 1fpkt", shape=diamond, color=yellow];
4290[label="221.94.162.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
4512[label="35.76.160.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
4745[label="34.146.67.82;s;2pkt 2fpkt", shape=diamond, color=yellow];
4903[label="201.230.155.161;s;23pkt 23fpkt", shape=diamond, color=yellow];
5041[label="61.14.1.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
5046[label="37.107.14.95;s;6pkt 6fpkt", shape=diamond, color=yellow];
5764[label="61.18.22.233;s;2pkt 2fpkt", shape=diamond, color=yellow];
6759[label="203.74.129.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
7549[label="201.67.2.127;d;4397pkt 4397fpkt", shape=hexagon, color=black];
7735[label="48.87.109.91;s;1pkt 1fpkt", shape=hexagon, color=black];
8030[label="52.128.191.122;s;1pkt 1fpkt", shape=hexagon, color=black];
9273[label="34.146.67.82;s;2pkt 2fpkt", shape=hexagon, color=black];
9487[label="35.76.160.160;s;1pkt 1fpkt", shape=hexagon, color=black];
9833[label="221.94.162.229;s;1pkt 1fpkt", shape=hexagon, color=black];
10107[label="38.124.153.90;s;58pkt 58fpkt", shape=hexagon, color=black];
10762[label="61.18.22.233;s;2pkt 2fpkt", shape=hexagon, color=black];
11799[label="85.79.226.15;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12103[label="99.128.108.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12185[label="37.220.237.31;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12239[label="112.144.60.34;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12539[label="33.24.230.47;57pkt 57fpkt", shape=pentagon, color=darkviolet];
12552[label="58.223.114.48;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12604[label="43.133.114.50;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12816[label="99.219.36.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13551[label="37.107.14.95;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13842[label="32.68.168.108;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13876[label="202.154.71.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14054[label="1.92.164.119;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14112[label="52.128.191.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14247[label="48.90.47.129;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14304[label="39.142.86.131;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14604[label="63.216.252.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14659[label="220.8.50.147;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14661[label="39.11.57.147;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14752[label="85.203.142.150;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14894[label="144.85.21.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14903[label="146.91.141.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14955[label="50.197.33.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15176[label="146.50.195.168;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15235[label="61.227.104.171;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15476[label="209.152.217.181;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15550[label="55.74.58.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15749[label="120.0.8.195;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15919[label="51.34.189.203;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15971[label="42.182.216.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16066[label="33.92.203.210;32pkt 32fpkt", shape=pentagon, color=darkviolet];
16402[label="222.133.70.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17089[label="85.79.226.15;4pkt 4fpkt", shape=invtriangle, color=brown];
17338[label="37.220.237.31;10pkt 10fpkt", shape=invtriangle, color=brown];
17369[label="112.144.60.34;4pkt 4fpkt", shape=invtriangle, color=brown];
17557[label="33.24.230.47;57pkt 57fpkt", shape=invtriangle, color=brown];
17594[label="43.133.114.50;4pkt 4fpkt", shape=invtriangle, color=brown];
18202[label="37.107.14.95;5pkt 5fpkt", shape=invtriangle, color=brown];
18211[label="42.29.118.95;1pkt 1fpkt", shape=invtriangle, color=brown];
18248[label="39.33.145.98;1pkt 1fpkt", shape=invtriangle, color=brown];
18402[label="202.154.71.110;2pkt 2fpkt", shape=invtriangle, color=brown];
18510[label="1.92.164.119;7pkt 7fpkt", shape=invtriangle, color=brown];
18666[label="39.142.86.131;4pkt 4fpkt", shape=invtriangle, color=brown];
18870[label="63.216.252.144;1pkt 1fpkt", shape=invtriangle, color=brown];
18908[label="220.8.50.147;6pkt 6fpkt", shape=invtriangle, color=brown];
18968[label="85.203.142.150;4pkt 4fpkt", shape=invtriangle, color=brown];
19102[label="50.197.33.160;2pkt 2fpkt", shape=invtriangle, color=brown];
19417[label="209.152.217.181;6pkt 6fpkt", shape=invtriangle, color=brown];
19609[label="120.0.8.195;5pkt 5fpkt", shape=invtriangle, color=brown];
19721[label="51.34.189.203;1pkt 1fpkt", shape=invtriangle, color=brown];
19761[label="42.182.216.205;2pkt 2fpkt", shape=invtriangle, color=brown];
19817[label="33.92.203.210;33pkt 33fpkt", shape=invtriangle, color=brown];
20033[label="222.133.70.228;1pkt 1fpkt", shape=invtriangle, color=brown];
20484[label="85.79.226.15;4pkt 4fpkt", shape=invhouse, color=bisque];
20615[label="99.128.108.28;1pkt 1fpkt", shape=invhouse, color=bisque];
20651[label="37.220.237.31;10pkt 10fpkt", shape=invhouse, color=bisque];
20671[label="112.144.60.34;4pkt 4fpkt", shape=invhouse, color=bisque];
20793[label="33.24.230.47;57pkt 57fpkt", shape=invhouse, color=bisque];
20814[label="43.133.114.50;4pkt 4fpkt", shape=invhouse, color=bisque];
21458[label="1.92.164.119;6pkt 6fpkt", shape=invhouse, color=bisque];
21708[label="63.216.252.144;1pkt 1fpkt", shape=invhouse, color=bisque];
21735[label="220.8.50.147;6pkt 6fpkt", shape=invhouse, color=bisque];
21777[label="85.203.142.150;4pkt 4fpkt", shape=invhouse, color=bisque];
22232[label="120.0.8.195;6pkt 6fpkt", shape=invhouse, color=bisque];
22337[label="42.182.216.205;2pkt 2fpkt", shape=invhouse, color=bisque];
22381[label="33.92.203.210;32pkt 32fpkt", shape=invhouse, color=bisque];
22533[label="222.133.70.228;1pkt 1fpkt", shape=invhouse, color=bisque];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 201.67.2.127:16186}[70.642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16186: (33.6562%)&lt;BR/&gt; 0: (3.49219%)&lt;BR/&gt; 25855: (1.90234%)&lt;BR/&gt; 18147: (1.89062%)&lt;BR/&gt; 24901: (1.42578%)&gt;];
}
266--1071[label="1;1pkt 1fpkt"];
266--1320[label="0.0243161;8pkt 8fpkt"];
266--1382[label="0.0350877;6pkt 6fpkt"];
266--1805[label="1;1pkt 1fpkt"];
266--1820[label="1;58pkt 58fpkt"];
266--1963[label="0.0135135;1pkt 1fpkt"];
266--1964[label="1;1pkt 1fpkt"];
266--2666[label="1;1pkt 1fpkt"];
266--2780[label="1;1pkt 1fpkt"];
266--3097[label="1;1pkt 1fpkt"];
266--3333[label="1;1pkt 1fpkt"];
266--3524[label="1;1pkt 1fpkt"];
266--3778[label="0.000128916;1pkt 1fpkt"];
266--3958[label="0.00330033;1pkt 1fpkt"];
266--4025[label="0.04;1pkt 1fpkt"];
266--4046[label="1;3pkt 3fpkt"];
266--4076[label="1;1pkt 1fpkt"];
266--4290[label="1;1pkt 1fpkt"];
266--4512[label="1;1pkt 1fpkt"];
266--4745[label="1;2pkt 2fpkt"];
266--4903[label="1;23pkt 23fpkt"];
266--5041[label="1;1pkt 1fpkt"];
266--5046[label="1;6pkt 6fpkt"];
266--5683[label="0.0412371;4pkt 4fpkt"];
266--5764[label="1;2pkt 2fpkt"];
266--5833[label="0.00277008;2pkt 2fpkt"];
266--6759[label="1;1pkt 1fpkt"];
266--7549[label="1;4397pkt 4397fpkt"];
266--7725[label="0.0135135;1pkt 1fpkt"];
266--7735[label="1;1pkt 1fpkt"];
266--7829[label="0.0372671;6pkt 6fpkt"];
266--8030[label="1;1pkt 1fpkt"];
266--8615[label="0.000128916;1pkt 1fpkt"];
266--8782[label="0.04;1pkt 1fpkt"];
266--9273[label="1;2pkt 2fpkt"];
266--9487[label="1;1pkt 1fpkt"];
266--9833[label="1;1pkt 1fpkt"];
266--10107[label="1;58pkt 58fpkt"];
266--10223[label="0.0264901;8pkt 8fpkt"];
266--10511[label="0.00330033;1pkt 1fpkt"];
266--10762[label="1;2pkt 2fpkt"];
266--11020[label="0.000128916;1pkt 1fpkt"];
266--11283[label="0.000445236;1pkt 1fpkt"];
266--11297[label="0.000128916;1pkt 1fpkt"];
266--11348[label="0.00128916;10pkt 10fpkt"];
266--11349[label="0.000445236;1pkt 1fpkt"];
266--11356[label="0.000128916;1pkt 1fpkt"];
266--11389[label="0.00128916;10pkt 10fpkt"];
266--11390[label="0.000445236;1pkt 1fpkt"];
266--11396[label="0.000128916;1pkt 1fpkt"];
266--11799[label="1;4pkt 4fpkt"];
266--11961[label="0.000128916;1pkt 1fpkt"];
266--12013[label="0.5;1pkt 1fpkt"];
266--12103[label="1;1pkt 1fpkt"];
266--12185[label="0.9;9pkt 9fpkt"];
266--12239[label="1;3pkt 3fpkt"];
266--12480[label="0.0833333;1pkt 1fpkt"];
266--12539[label="0.894737;51pkt 51fpkt"];
266--12552[label="1;2pkt 2fpkt"];
266--12604[label="1;4pkt 4fpkt"];
266--12816[label="1;2pkt 2fpkt"];
266--13387[label="0.2;1pkt 1fpkt"];
266--13551[label="1;5pkt 5fpkt"];
266--13842[label="1;1pkt 1fpkt"];
266--14054[label="1;6pkt 6fpkt"];
266--14112[label="1;1pkt 1fpkt"];
266--14247[label="1;2pkt 2fpkt"];
266--14304[label="1;4pkt 4fpkt"];
266--14463[label="0.0229226;8pkt 8fpkt"];
266--14479[label="0.03125;1pkt 1fpkt"];
266--14604[label="1;1pkt 1fpkt"];
266--14659[label="1;6pkt 6fpkt"];
266--14661[label="0.8;4pkt 4fpkt"];
266--14752[label="1;3pkt 3fpkt"];
266--14850[label="0.00314465;1pkt 1fpkt"];
266--14894[label="1;1pkt 1fpkt"];
266--14903[label="1;1pkt 1fpkt"];
266--14955[label="0.5;1pkt 1fpkt"];
266--15176[label="1;2pkt 2fpkt"];
266--15235[label="1;2pkt 2fpkt"];
266--15476[label="1;6pkt 6fpkt"];
266--15550[label="1;1pkt 1fpkt"];
266--15618[label="0.5;1pkt 1fpkt"];
266--15721[label="0.00277008;2pkt 2fpkt"];
266--15749[label="0.8;4pkt 4fpkt"];
266--15919[label="1;2pkt 2fpkt"];
266--15971[label="1;2pkt 2fpkt"];
266--16066[label="0.84375;27pkt 27fpkt"];
266--16402[label="1;1pkt 1fpkt"];
266--17089[label="1;4pkt 4fpkt"];
266--17191[label="0.000128916;1pkt 1fpkt"];
266--17338[label="0.9;9pkt 9fpkt"];
266--17369[label="1;4pkt 4fpkt"];
266--17522[label="0.0769231;1pkt 1fpkt"];
266--17557[label="0.894737;51pkt 51fpkt"];
266--17594[label="1;4pkt 4fpkt"];
266--18202[label="1;5pkt 5fpkt"];
266--18211[label="1;1pkt 1fpkt"];
266--18248[label="1;1pkt 1fpkt"];
266--18402[label="0.5;1pkt 1fpkt"];
266--18510[label="1;7pkt 7fpkt"];
266--18666[label="1;4pkt 4fpkt"];
266--18781[label="0.0229226;8pkt 8fpkt"];
266--18793[label="0.03125;1pkt 1fpkt"];
266--18870[label="1;1pkt 1fpkt"];
266--18908[label="1;6pkt 6fpkt"];
266--18968[label="1;4pkt 4fpkt"];
266--19029[label="0.00314465;1pkt 1fpkt"];
266--19102[label="0.5;1pkt 1fpkt"];
266--19417[label="1;6pkt 6fpkt"];
266--19518[label="0.5;1pkt 1fpkt"];
266--19594[label="0.00277008;2pkt 2fpkt"];
266--19609[label="0.8;4pkt 4fpkt"];
266--19721[label="1;1pkt 1fpkt"];
266--19761[label="1;2pkt 2fpkt"];
266--19817[label="0.848485;28pkt 28fpkt"];
266--20033[label="1;1pkt 1fpkt"];
266--20484[label="1;4pkt 4fpkt"];
266--20548[label="0.000128916;1pkt 1fpkt"];
266--20615[label="1;1pkt 1fpkt"];
266--20651[label="0.9;9pkt 9fpkt"];
266--20671[label="1;4pkt 4fpkt"];
266--20793[label="0.894737;51pkt 51fpkt"];
266--20814[label="1;4pkt 4fpkt"];
266--21458[label="1;6pkt 6fpkt"];
266--21650[label="0.0228571;8pkt 8fpkt"];
266--21661[label="0.0322581;1pkt 1fpkt"];
266--21708[label="1;1pkt 1fpkt"];
266--21735[label="1;6pkt 6fpkt"];
266--21777[label="1;4pkt 4fpkt"];
266--21823[label="0.0031348;1pkt 1fpkt"];
266--22219[label="0.00277008;2pkt 2fpkt"];
266--22232[label="0.833333;5pkt 5fpkt"];
266--22337[label="1;2pkt 2fpkt"];
266--22381[label="0.84375;27pkt 27fpkt"];
266--22533[label="1;1pkt 1fpkt"];
1071--7549[label="1;1pkt 1fpkt"];
1071--7735[label="1;1pkt 1fpkt"];
1805--7549[label="1;1pkt 1fpkt"];
1805--8030[label="1;1pkt 1fpkt"];
1805--14112[label="1;1pkt 1fpkt"];
1820--7549[label="0.5;29pkt 29fpkt"];
1820--10107[label="1;58pkt 58fpkt"];
1964--7549[label="1;1pkt 1fpkt"];
1964--18248[label="1;1pkt 1fpkt"];
2666--7549[label="1;1pkt 1fpkt"];
2666--14894[label="1;1pkt 1fpkt"];
2780--7549[label="1;1pkt 1fpkt"];
2780--16402[label="1;1pkt 1fpkt"];
2780--20033[label="1;1pkt 1fpkt"];
2780--22533[label="1;1pkt 1fpkt"];
3097--7549[label="1;1pkt 1fpkt"];
3097--18211[label="1;1pkt 1fpkt"];
3333--7549[label="1;1pkt 1fpkt"];
3524--7549[label="1;1pkt 1fpkt"];
4046--7549[label="1;3pkt 3fpkt"];
4076--7549[label="1;1pkt 1fpkt"];
4290--7549[label="1;1pkt 1fpkt"];
4290--9833[label="1;1pkt 1fpkt"];
4512--7549[label="1;1pkt 1fpkt"];
4512--9487[label="1;1pkt 1fpkt"];
4745--7549[label="1;2pkt 2fpkt"];
4745--9273[label="1;2pkt 2fpkt"];
4903--7549[label="0.608696;14pkt 14fpkt"];
5041--7549[label="1;1pkt 1fpkt"];
5046--7549[label="1;6pkt 6fpkt"];
5046--13551[label="1;5pkt 5fpkt"];
5046--18202[label="1;5pkt 5fpkt"];
5764--7549[label="1;2pkt 2fpkt"];
5764--10762[label="1;2pkt 2fpkt"];
6759--7549[label="1;1pkt 1fpkt"];
7549--7725[label="0.0135135;1pkt 1fpkt"];
7549--7735[label="1;1pkt 1fpkt"];
7549--7829[label="0.0310559;5pkt 5fpkt"];
7549--8030[label="1;1pkt 1fpkt"];
7549--8615[label="0.000227428;1pkt 1fpkt"];
7549--8782[label="0.04;1pkt 1fpkt"];
7549--9273[label="1;2pkt 2fpkt"];
7549--9487[label="1;1pkt 1fpkt"];
7549--9833[label="1;1pkt 1fpkt"];
7549--10107[label="0.5;29pkt 29fpkt"];
7549--10223[label="0.0198675;6pkt 6fpkt"];
7549--10511[label="0.00330033;1pkt 1fpkt"];
7549--10762[label="1;2pkt 2fpkt"];
7549--11020[label="0.000227428;1pkt 1fpkt"];
7549--11283[label="0.000445236;1pkt 1fpkt"];
7549--11297[label="0.000227428;1pkt 1fpkt"];
7549--11348[label="0.00227428;10pkt 10fpkt"];
7549--11349[label="0.000445236;1pkt 1fpkt"];
7549--11356[label="0.000227428;1pkt 1fpkt"];
7549--11389[label="0.00227428;10pkt 10fpkt"];
7549--11390[label="0.000445236;1pkt 1fpkt"];
7549--11396[label="0.000227428;1pkt 1fpkt"];
7549--11799[label="1;4pkt 4fpkt"];
7549--11961[label="0.000227428;1pkt 1fpkt"];
7549--12013[label="0.5;1pkt 1fpkt"];
7549--12103[label="1;1pkt 1fpkt"];
7549--12185[label="0.5;5pkt 5fpkt"];
7549--12239[label="0.333333;1pkt 1fpkt"];
7549--12480[label="0.0833333;1pkt 1fpkt"];
7549--12539[label="0.649123;37pkt 37fpkt"];
7549--12552[label="0.5;1pkt 1fpkt"];
7549--12604[label="0.75;3pkt 3fpkt"];
7549--12816[label="0.5;1pkt 1fpkt"];
7549--13387[label="0.2;1pkt 1fpkt"];
7549--13551[label="1;5pkt 5fpkt"];
7549--14054[label="0.666667;4pkt 4fpkt"];
7549--14112[label="1;1pkt 1fpkt"];
7549--14247[label="0.5;1pkt 1fpkt"];
7549--14304[label="1;4pkt 4fpkt"];
7549--14463[label="0.017192;6pkt 6fpkt"];
7549--14479[label="0.03125;1pkt 1fpkt"];
7549--14659[label="0.333333;2pkt 2fpkt"];
7549--14752[label="0.666667;2pkt 2fpkt"];
7549--14850[label="0.00314465;1pkt 1fpkt"];
7549--14894[label="1;1pkt 1fpkt"];
7549--15176[label="0.5;1pkt 1fpkt"];
7549--15235[label="0.5;1pkt 1fpkt"];
7549--15476[label="0.833333;5pkt 5fpkt"];
7549--15618[label="0.5;1pkt 1fpkt"];
7549--15749[label="0.6;3pkt 3fpkt"];
7549--15919[label="1;2pkt 2fpkt"];
7549--15971[label="0.5;1pkt 1fpkt"];
7549--16066[label="0.625;20pkt 20fpkt"];
7549--16402[label="1;1pkt 1fpkt"];
7549--17089[label="1;4pkt 4fpkt"];
7549--17191[label="0.000227428;1pkt 1fpkt"];
7549--17338[label="0.5;5pkt 5fpkt"];
7549--17369[label="0.5;2pkt 2fpkt"];
7549--17522[label="0.0769231;1pkt 1fpkt"];
7549--17557[label="0.649123;37pkt 37fpkt"];
7549--17594[label="0.75;3pkt 3fpkt"];
7549--18202[label="1;5pkt 5fpkt"];
7549--18211[label="1;1pkt 1fpkt"];
7549--18248[label="1;1pkt 1fpkt"];
7549--18402[label="0.5;1pkt 1fpkt"];
7549--18510[label="0.714286;5pkt 5fpkt"];
7549--18666[label="1;4pkt 4fpkt"];
7549--18781[label="0.017192;6pkt 6fpkt"];
7549--18793[label="0.03125;1pkt 1fpkt"];
7549--18908[label="0.333333;2pkt 2fpkt"];
7549--18968[label="0.75;3pkt 3fpkt"];
7549--19029[label="0.00314465;1pkt 1fpkt"];
7549--19417[label="0.833333;5pkt 5fpkt"];
7549--19518[label="0.5;1pkt 1fpkt"];
7549--19609[label="0.6;3pkt 3fpkt"];
7549--19721[label="1;1pkt 1fpkt"];
7549--19761[label="0.5;1pkt 1fpkt"];
7549--19817[label="0.636364;21pkt 21fpkt"];
7549--20033[label="1;1pkt 1fpkt"];
7549--20484[label="1;4pkt 4fpkt"];
7549--20548[label="0.000227428;1pkt 1fpkt"];
7549--20615[label="1;1pkt 1fpkt"];
7549--20651[label="0.5;5pkt 5fpkt"];
7549--20671[label="0.5;2pkt 2fpkt"];
7549--20793[label="0.649123;37pkt 37fpkt"];
7549--20814[label="0.75;3pkt 3fpkt"];
7549--21458[label="0.666667;4pkt 4fpkt"];
7549--21650[label="0.0171429;6pkt 6fpkt"];
7549--21661[label="0.0322581;1pkt 1fpkt"];
7549--21735[label="0.333333;2pkt 2fpkt"];
7549--21777[label="0.75;3pkt 3fpkt"];
7549--21823[label="0.0031348;1pkt 1fpkt"];
7549--22232[label="0.666667;4pkt 4fpkt"];
7549--22337[label="0.5;1pkt 1fpkt"];
7549--22381[label="0.625;20pkt 20fpkt"];
7549--22533[label="1;1pkt 1fpkt"];
8030--14112[label="1;1pkt 1fpkt"];
11799--17089[label="1;4pkt 4fpkt"];
11799--20484[label="1;4pkt 4fpkt"];
12103--20615[label="1;1pkt 1fpkt"];
12185--17338[label="1;10pkt 10fpkt"];
12185--20651[label="1;10pkt 10fpkt"];
12239--17369[label="1;3pkt 3fpkt"];
12239--20671[label="1;3pkt 3fpkt"];
12539--17557[label="1;57pkt 57fpkt"];
12539--20793[label="1;57pkt 57fpkt"];
12604--17594[label="1;4pkt 4fpkt"];
12604--20814[label="1;4pkt 4fpkt"];
13551--18202[label="1;5pkt 5fpkt"];
13876--18402[label="1;1pkt 1fpkt"];
14054--18510[label="1;6pkt 6fpkt"];
14054--21458[label="1;6pkt 6fpkt"];
14304--18666[label="1;4pkt 4fpkt"];
14604--18870[label="1;1pkt 1fpkt"];
14604--21708[label="1;1pkt 1fpkt"];
14659--18908[label="1;6pkt 6fpkt"];
14659--21735[label="1;6pkt 6fpkt"];
14752--18968[label="1;3pkt 3fpkt"];
14752--21777[label="1;3pkt 3fpkt"];
14955--19102[label="1;2pkt 2fpkt"];
15476--19417[label="1;6pkt 6fpkt"];
15749--19609[label="1;5pkt 5fpkt"];
15749--22232[label="1;5pkt 5fpkt"];
15919--19721[label="1;1pkt 1fpkt"];
15971--19761[label="1;2pkt 2fpkt"];
15971--22337[label="1;2pkt 2fpkt"];
16066--19817[label="1;32pkt 32fpkt"];
16066--22381[label="1;32pkt 32fpkt"];
16402--20033[label="1;1pkt 1fpkt"];
16402--22533[label="1;1pkt 1fpkt"];
17089--20484[label="1;4pkt 4fpkt"];
17338--20651[label="1;10pkt 10fpkt"];
17369--20671[label="1;4pkt 4fpkt"];
17557--20793[label="1;57pkt 57fpkt"];
17594--20814[label="1;4pkt 4fpkt"];
18510--21458[label="1;6pkt 6fpkt"];
18870--21708[label="1;1pkt 1fpkt"];
18908--21735[label="1;6pkt 6fpkt"];
18968--21777[label="1;4pkt 4fpkt"];
19609--22232[label="1;5pkt 5fpkt"];
19761--22337[label="1;2pkt 2fpkt"];
19817--22381[label="1;32pkt 32fpkt"];
20033--22533[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.2.127" dst_port="16186"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
370[label="81.224.114.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1816[label="172.130.87.50;s;18pkt 18fpkt", shape=diamond, color=yellow];
7572[label="81.224.114.184;d;1pkt 1fpkt", shape=hexagon, color=black];
10106[label="172.130.87.50;s;17pkt 17fpkt", shape=hexagon, color=black];
12598[label="172.130.87.50;19pkt 19fpkt", shape=pentagon, color=darkviolet];
17590[label="172.130.87.50;18pkt 18fpkt", shape=invtriangle, color=brown];
20812[label="172.130.87.50;18pkt 18fpkt", shape=invhouse, color=bisque];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.87.50:*, 221.173.32.16:19101}[42.1053%]&lt;BR/&gt;{172.130.87.50:*, 220.115.176.201:19101}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (44.5652%)&lt;BR/&gt; 80: (5.43478%)&lt;BR/&gt; 3898: (2.71739%)&lt;BR/&gt; 3897: (2.71739%)&lt;BR/&gt; 3896: (2.71739%)&gt;];
}
370--1816[label="1;1pkt 1fpkt"];
370--7572[label="1;1pkt 1fpkt"];
370--10106[label="1;1pkt 1fpkt"];
370--12598[label="1;1pkt 1fpkt"];
1816--7572[label="1;1pkt 1fpkt"];
1816--10106[label="1;17pkt 17fpkt"];
1816--12598[label="1;18pkt 18fpkt"];
1816--17590[label="0.944444;17pkt 17fpkt"];
1816--20812[label="0.944444;17pkt 17fpkt"];
7572--10106[label="1;1pkt 1fpkt"];
7572--12598[label="1;1pkt 1fpkt"];
10106--12598[label="1;17pkt 17fpkt"];
10106--17590[label="0.941176;16pkt 16fpkt"];
10106--20812[label="0.941176;16pkt 16fpkt"];
12598--17590[label="1;18pkt 18fpkt"];
12598--20812[label="1;18pkt 18fpkt"];
17590--20812[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="221.173.32.16" dst_port="19101" src_ip="172.130.87.50"/>
      <filter dst_ip="220.115.176.201" dst_port="19101" src_ip="172.130.87.50"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
448[label="201.33.97.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
449[label="172.130.202.2;s;264pkt 264fpkt", shape=diamond, color=yellow];
478[label="84.230.202.112;d;45pkt 45fpkt", shape=diamond, color=yellow];
1001[label="221.96.138.187;d;7pkt 7fpkt", shape=diamond, color=yellow];
1116[label="80.138.27.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
2553[label="201.244.129.53;d;28pkt 28fpkt", shape=diamond, color=yellow];
3568[label="61.86.169.48;d;117pkt 117fpkt", shape=diamond, color=yellow];
7125[label="221.96.133.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
7590[label="201.33.97.79;d;1pkt 1fpkt", shape=hexagon, color=black];
7718[label="221.96.138.187;d;6pkt 6fpkt", shape=hexagon, color=black];
8224[label="201.244.129.53;d;28pkt 28fpkt", shape=hexagon, color=black];
10115[label="172.130.202.2;s;227pkt 227fpkt", shape=hexagon, color=black];
11487[label="172.130.202.2;340pkt 340fpkt", shape=pentagon, color=darkviolet];
16900[label="172.130.202.2;340pkt 340fpkt", shape=invtriangle, color=brown];
20357[label="172.130.202.2;341pkt 341fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.202.2:80, 61.86.169.48:*}[34.8974%]&lt;BR/&gt;{172.130.202.2:80, 81.50.9.119:*}[24.9267%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5404%)&lt;BR/&gt; 21: (0.829994%)&lt;BR/&gt; 0: (0.57241%)&lt;BR/&gt; 61234: (0.372066%)&lt;BR/&gt; 61251: (0.200343%)&gt;];
}
448--449[label="1;1pkt 1fpkt"];
448--7590[label="1;1pkt 1fpkt"];
448--10115[label="1;1pkt 1fpkt"];
448--11487[label="1;1pkt 1fpkt"];
448--16900[label="1;1pkt 1fpkt"];
448--20357[label="1;1pkt 1fpkt"];
449--478[label="1;45pkt 45fpkt"];
449--1001[label="1;7pkt 7fpkt"];
449--1116[label="1;1pkt 1fpkt"];
449--2553[label="1;28pkt 28fpkt"];
449--3568[label="1;117pkt 117fpkt"];
449--7125[label="1;1pkt 1fpkt"];
449--7590[label="1;1pkt 1fpkt"];
449--7718[label="1;6pkt 6fpkt"];
449--8224[label="1;28pkt 28fpkt"];
449--10115[label="1;227pkt 227fpkt"];
449--11348[label="0.0378788;10pkt 10fpkt"];
449--11389[label="0.0378788;10pkt 10fpkt"];
449--11487[label="0.996212;263pkt 263fpkt"];
449--16900[label="0.996212;263pkt 263fpkt"];
449--20357[label="1;264pkt 264fpkt"];
478--10115[label="1;45pkt 45fpkt"];
478--11487[label="1;45pkt 45fpkt"];
478--16900[label="1;45pkt 45fpkt"];
478--20357[label="1;45pkt 45fpkt"];
1001--7718[label="1;6pkt 6fpkt"];
1001--10115[label="1;7pkt 7fpkt"];
1001--11348[label="0.428571;3pkt 3fpkt"];
1001--11389[label="0.428571;3pkt 3fpkt"];
1001--11487[label="0.857143;6pkt 6fpkt"];
1001--16900[label="0.857143;6pkt 6fpkt"];
1001--20357[label="1;7pkt 7fpkt"];
1116--10115[label="1;1pkt 1fpkt"];
1116--11348[label="1;1pkt 1fpkt"];
1116--11389[label="1;1pkt 1fpkt"];
1116--11487[label="1;1pkt 1fpkt"];
1116--16900[label="1;1pkt 1fpkt"];
1116--20357[label="1;1pkt 1fpkt"];
2553--8224[label="1;28pkt 28fpkt"];
2553--10115[label="1;28pkt 28fpkt"];
2553--11487[label="1;28pkt 28fpkt"];
2553--16900[label="1;28pkt 28fpkt"];
2553--20357[label="1;28pkt 28fpkt"];
3568--10115[label="0.880342;103pkt 103fpkt"];
3568--11348[label="0.0512821;6pkt 6fpkt"];
3568--11389[label="0.0512821;6pkt 6fpkt"];
3568--11487[label="1;117pkt 117fpkt"];
3568--16900[label="1;117pkt 117fpkt"];
3568--20357[label="1;117pkt 117fpkt"];
7125--10115[label="1;1pkt 1fpkt"];
7125--11487[label="1;1pkt 1fpkt"];
7125--16900[label="1;1pkt 1fpkt"];
7125--20357[label="1;1pkt 1fpkt"];
7590--10115[label="1;1pkt 1fpkt"];
7590--11487[label="1;1pkt 1fpkt"];
7590--16900[label="1;1pkt 1fpkt"];
7590--20357[label="1;1pkt 1fpkt"];
7718--10115[label="1;6pkt 6fpkt"];
7718--11348[label="0.5;3pkt 3fpkt"];
7718--11389[label="0.5;3pkt 3fpkt"];
7718--11487[label="0.833333;5pkt 5fpkt"];
7718--16900[label="0.833333;5pkt 5fpkt"];
7718--20357[label="1;6pkt 6fpkt"];
8224--10115[label="1;28pkt 28fpkt"];
8224--11487[label="1;28pkt 28fpkt"];
8224--16900[label="1;28pkt 28fpkt"];
8224--20357[label="1;28pkt 28fpkt"];
10115--11348[label="0.0440529;10pkt 10fpkt"];
10115--11389[label="0.0440529;10pkt 10fpkt"];
10115--11487[label="0.995595;226pkt 226fpkt"];
10115--16900[label="0.995595;226pkt 226fpkt"];
10115--20357[label="1;227pkt 227fpkt"];
11487--16900[label="1;340pkt 340fpkt"];
11487--20357[label="1;340pkt 340fpkt"];
16900--20357[label="1;340pkt 340fpkt"];
</description>
    <slice>
      <filter dst_ip="61.86.169.48" src_ip="172.130.202.2" src_port="80"/>
      <filter dst_ip="81.50.9.119" src_ip="172.130.202.2" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1627[label="134.71.34.148;s;130pkt 130fpkt", shape=diamond, color=yellow];
2126[label="220.29.71.174;d;116pkt 116fpkt", shape=diamond, color=yellow];
4712[label="134.71.35.244;s;114pkt 114fpkt", shape=diamond, color=yellow];
5855[label="216.135.40.49;d;20pkt 20fpkt", shape=diamond, color=yellow];
7812[label="220.29.71.174;d;116pkt 116fpkt", shape=hexagon, color=black];
9220[label="134.71.35.244;s;114pkt 114fpkt", shape=hexagon, color=black];
16655[label="134.71.35.244;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.35.244:*, *:80}[46.371%]&lt;BR/&gt;{134.71.34.148:*, 220.29.71.174:80}[30.2419%]&lt;BR/&gt;{*:*, 216.135.40.49:80}[27.0161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50003: (0.344828%)&lt;BR/&gt; 50002: (0.344828%)&lt;BR/&gt; 50001: (0.344828%)&lt;BR/&gt; 49999: (0.344828%)&gt;];
}
1627--2126[label="0.646552;75pkt 75fpkt"];
1627--2996[label="0.0153846;2pkt 2fpkt"];
1627--7812[label="0.646552;75pkt 75fpkt"];
1627--11265[label="0.123077;16pkt 16fpkt"];
1627--11285[label="0.0307692;4pkt 4fpkt"];
1627--11338[label="0.123077;16pkt 16fpkt"];
1627--11351[label="0.0307692;4pkt 4fpkt"];
1627--11382[label="0.123077;16pkt 16fpkt"];
1627--11392[label="0.0307692;4pkt 4fpkt"];
2126--4712[label="0.333333;38pkt 38fpkt"];
2126--7812[label="1;116pkt 116fpkt"];
2126--9220[label="0.333333;38pkt 38fpkt"];
2126--11265[label="0.0948276;11pkt 11fpkt"];
2126--11285[label="0.103448;12pkt 12fpkt"];
2126--11338[label="0.0948276;11pkt 11fpkt"];
2126--11351[label="0.103448;12pkt 12fpkt"];
2126--11382[label="0.0948276;11pkt 11fpkt"];
2126--11392[label="0.103448;12pkt 12fpkt"];
2126--16655[label="0.330435;38pkt 38fpkt"];
4712--5855[label="1;20pkt 20fpkt"];
4712--7812[label="0.333333;38pkt 38fpkt"];
4712--9220[label="1;114pkt 114fpkt"];
4712--11265[label="0.00877193;1pkt 1fpkt"];
4712--11285[label="0.0877193;10pkt 10fpkt"];
4712--11338[label="0.00877193;1pkt 1fpkt"];
4712--11351[label="0.0877193;10pkt 10fpkt"];
4712--11382[label="0.00877193;1pkt 1fpkt"];
4712--11392[label="0.0877193;10pkt 10fpkt"];
4712--16655[label="1;114pkt 114fpkt"];
5855--9220[label="1;20pkt 20fpkt"];
5855--16655[label="1;20pkt 20fpkt"];
7812--9220[label="0.333333;38pkt 38fpkt"];
7812--11265[label="0.0948276;11pkt 11fpkt"];
7812--11285[label="0.103448;12pkt 12fpkt"];
7812--11338[label="0.0948276;11pkt 11fpkt"];
7812--11351[label="0.103448;12pkt 12fpkt"];
7812--11382[label="0.0948276;11pkt 11fpkt"];
7812--11392[label="0.103448;12pkt 12fpkt"];
7812--16655[label="0.330435;38pkt 38fpkt"];
9220--11265[label="0.00877193;1pkt 1fpkt"];
9220--11285[label="0.0877193;10pkt 10fpkt"];
9220--11338[label="0.00877193;1pkt 1fpkt"];
9220--11351[label="0.0877193;10pkt 10fpkt"];
9220--11382[label="0.00877193;1pkt 1fpkt"];
9220--11392[label="0.0877193;10pkt 10fpkt"];
9220--16655[label="1;114pkt 114fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="134.71.35.244"/>
      <filter dst_ip="216.135.40.49" dst_port="80"/>
      <filter dst_ip="220.29.71.174" dst_port="80" src_ip="134.71.34.148"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
2678[label="200.173.66.144;d;355pkt 355fpkt", shape=diamond, color=yellow];
8098[label="200.173.66.144;d;355pkt 355fpkt", shape=hexagon, color=black];
13039[label="206.218.83.72;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 200.173.66.144:0}[95.6873%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2678--8098[label="1;355pkt 355fpkt"];
2678--13039[label="0.0588235;1pkt 1fpkt"];
8098--13039[label="0.0588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.66.144"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
2960[label="218.40.168.164;s;5pkt 5fpkt", shape=diamond, color=yellow];
8173[label="218.40.168.164;s;5pkt 5fpkt", shape=hexagon, color=black];
15079[label="218.40.168.164;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.40.168.164:80, 169.6.78.182:2690}[20%]&lt;BR/&gt;{218.40.168.164:80, 169.6.78.182:2691}[20%]&lt;BR/&gt;{218.40.168.164:80, 169.6.78.182:2692}[20%]&lt;BR/&gt;{218.40.168.164:80, 169.6.78.182:2693}[20%]&lt;BR/&gt;{218.40.168.164:80, 169.6.78.182:2694}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2694: (10.7143%)&lt;BR/&gt; 2693: (10.7143%)&lt;BR/&gt; 2692: (10.7143%)&lt;BR/&gt; 2691: (10.7143%)&gt;];
}
2960--8173[label="1;5pkt 5fpkt"];
2960--15079[label="1;4pkt 4fpkt"];
8173--15079[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.78.182" dst_port="2694" src_ip="218.40.168.164" src_port="80"/>
      <filter dst_ip="169.6.78.182" dst_port="2693" src_ip="218.40.168.164" src_port="80"/>
      <filter dst_ip="169.6.78.182" dst_port="2692" src_ip="218.40.168.164" src_port="80"/>
      <filter dst_ip="169.6.78.182" dst_port="2691" src_ip="218.40.168.164" src_port="80"/>
      <filter dst_ip="169.6.78.182" dst_port="2690" src_ip="218.40.168.164" src_port="80"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191992611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
1699[label="169.6.26.17;d;145pkt 145fpkt", shape=diamond, color=yellow];
5415[label="61.60.98.121;s;143pkt 143fpkt", shape=diamond, color=yellow];
8195[label="169.6.26.17;d;74pkt 74fpkt", shape=hexagon, color=black];
14081[label="61.60.98.121;143pkt 143fpkt", shape=pentagon, color=darkviolet];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.60.98.121:80, 169.6.26.17:*}[98.6207%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55255: (0.39604%)&lt;BR/&gt; 55254: (0.39604%)&lt;BR/&gt; 55253: (0.39604%)&lt;BR/&gt; 55252: (0.39604%)&gt;];
}
1699--5415[label="1;143pkt 143fpkt"];
1699--8195[label="1;74pkt 74fpkt"];
1699--14081[label="1;143pkt 143fpkt"];
5415--8195[label="0.972973;72pkt 72fpkt"];
5415--14081[label="1;143pkt 143fpkt"];
8195--14081[label="0.972973;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.26.17" src_ip="61.60.98.121" src_port="80"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191993056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1990[label="172.159.179.65;d;646pkt 646fpkt", shape=diamond, color=yellow];
8368[label="172.159.179.65;d;414pkt 414fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.159.179.65:43339}[98.7616%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43339: (49.434%)&lt;BR/&gt; 443: (0.424528%)&lt;BR/&gt; 49775: (0.188679%)&lt;BR/&gt; 35227: (0.188679%)&lt;BR/&gt; 20311: (0.188679%)&gt;];
}
1990--8368[label="1;414pkt 414fpkt"];
1990--11265[label="0.00154799;1pkt 1fpkt"];
1990--11338[label="0.00154799;1pkt 1fpkt"];
1990--11382[label="0.00154799;1pkt 1fpkt"];
8368--11265[label="0.00241546;1pkt 1fpkt"];
8368--11338[label="0.00241546;1pkt 1fpkt"];
8368--11382[label="0.00241546;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.179.65" dst_port="43339"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
3427[label="134.3.33.176;s;229pkt 229fpkt", shape=diamond, color=yellow];
8388[label="134.3.33.176;s;139pkt 139fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.3.33.176:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3427--3960[label="0.00436681;1pkt 1fpkt"];
3427--3973[label="0.00436681;1pkt 1fpkt"];
3427--3982[label="0.00436681;1pkt 1fpkt"];
3427--3986[label="0.00436681;1pkt 1fpkt"];
3427--4057[label="0.00436681;1pkt 1fpkt"];
3427--4065[label="0.00436681;1pkt 1fpkt"];
3427--4494[label="0.142857;1pkt 1fpkt"];
3427--4724[label="0.00436681;1pkt 1fpkt"];
3427--4725[label="0.00436681;1pkt 1fpkt"];
3427--4728[label="0.00436681;1pkt 1fpkt"];
3427--4759[label="0.00436681;1pkt 1fpkt"];
3427--4788[label="0.00436681;1pkt 1fpkt"];
3427--5449[label="0.00436681;1pkt 1fpkt"];
3427--5466[label="0.00436681;1pkt 1fpkt"];
3427--5498[label="0.00436681;1pkt 1fpkt"];
3427--5508[label="0.00436681;1pkt 1fpkt"];
3427--7650[label="0.00961538;1pkt 1fpkt"];
3427--8253[label="0.00436681;1pkt 1fpkt"];
3427--8388[label="1;139pkt 139fpkt"];
3427--8816[label="0.00436681;1pkt 1fpkt"];
3427--9263[label="0.00436681;1pkt 1fpkt"];
3427--9477[label="0.166667;1pkt 1fpkt"];
3427--9599[label="0.00436681;1pkt 1fpkt"];
3427--9639[label="0.00436681;1pkt 1fpkt"];
3427--9686[label="0.00436681;1pkt 1fpkt"];
3427--10111[label="0.00436681;1pkt 1fpkt"];
3427--10133[label="0.00436681;1pkt 1fpkt"];
3427--10528[label="0.00436681;1pkt 1fpkt"];
3427--10552[label="0.00436681;1pkt 1fpkt"];
3427--10579[label="0.00436681;1pkt 1fpkt"];
3427--11111[label="0.00436681;1pkt 1fpkt"];
8388--8816[label="0.00719424;1pkt 1fpkt"];
8388--9263[label="0.00719424;1pkt 1fpkt"];
8388--9599[label="0.00719424;1pkt 1fpkt"];
8388--9639[label="0.00719424;1pkt 1fpkt"];
8388--9686[label="0.00719424;1pkt 1fpkt"];
8388--10111[label="0.00719424;1pkt 1fpkt"];
8388--10133[label="0.00719424;1pkt 1fpkt"];
8388--10528[label="0.00719424;1pkt 1fpkt"];
8388--10552[label="0.00719424;1pkt 1fpkt"];
8388--10579[label="0.00719424;1pkt 1fpkt"];
8388--11111[label="0.00719424;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="134.3.33.176"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
1303[label="172.130.230.49;s;142pkt 142fpkt", shape=diamond, color=yellow];
7230[label="216.218.57.48;d;6pkt 6fpkt", shape=diamond, color=yellow];
8423[label="172.130.230.49;s;89pkt 89fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.230.49:*, 216.218.57.51:80}[21.831%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4684%)&lt;BR/&gt; 8080: (0.843882%)&lt;BR/&gt; 5004: (0.843882%)&lt;BR/&gt; 58927: (0.421941%)&lt;BR/&gt; 58886: (0.421941%)&gt;];
}
1303--1902[label="0.00704225;1pkt 1fpkt"];
1303--2604[label="0.00704225;1pkt 1fpkt"];
1303--5546[label="0.00854701;1pkt 1fpkt"];
1303--7230[label="1;6pkt 6fpkt"];
1303--8313[label="0.00704225;1pkt 1fpkt"];
1303--8423[label="1;89pkt 89fpkt"];
1303--9230[label="0.00704225;1pkt 1fpkt"];
1303--9606[label="0.00704225;1pkt 1fpkt"];
1303--11265[label="0.0140845;2pkt 2fpkt"];
1303--11285[label="0.00704225;1pkt 1fpkt"];
1303--11338[label="0.0140845;2pkt 2fpkt"];
1303--11351[label="0.00704225;1pkt 1fpkt"];
1303--11382[label="0.0140845;2pkt 2fpkt"];
1303--11392[label="0.00704225;1pkt 1fpkt"];
8423--9230[label="0.011236;1pkt 1fpkt"];
8423--9606[label="0.011236;1pkt 1fpkt"];
8423--11265[label="0.0224719;2pkt 2fpkt"];
8423--11285[label="0.011236;1pkt 1fpkt"];
8423--11338[label="0.0224719;2pkt 2fpkt"];
8423--11351[label="0.011236;1pkt 1fpkt"];
8423--11382[label="0.0224719;2pkt 2fpkt"];
8423--11392[label="0.011236;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.218.57.51" dst_port="80" src_ip="172.130.230.49"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.44975,2.96647,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
2060[label="200.173.71.117;d;73pkt 73fpkt", shape=diamond, color=yellow];
2763[label="61.86.172.203;s;16pkt 16fpkt", shape=diamond, color=yellow];
8399[label="200.173.71.117;d;30pkt 30fpkt", shape=hexagon, color=black];
13545[label="218.233.171.94;5pkt 5fpkt", shape=pentagon, color=darkviolet];
21588[label="4.158.174.132;1pkt 1fpkt", shape=invhouse, color=bisque];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 200.173.71.117:80}[84.9315%]&lt;BR/&gt;{61.86.172.203:*, 200.173.71.117:*}[24.6575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.8%)&lt;BR/&gt; 443: (4.8%)&lt;BR/&gt; 64237: (1.2%)&lt;BR/&gt; 52425: (1.2%)&lt;BR/&gt; 51056: (1.2%)&gt;];
}
2060--2763[label="1;16pkt 16fpkt"];
2060--8399[label="1;30pkt 30fpkt"];
2060--11265[label="0.0684932;5pkt 5fpkt"];
2060--11285[label="0.0821918;6pkt 6fpkt"];
2060--11338[label="0.0684932;5pkt 5fpkt"];
2060--11348[label="0.0136986;1pkt 1fpkt"];
2060--11351[label="0.0821918;6pkt 6fpkt"];
2060--11382[label="0.0684932;5pkt 5fpkt"];
2060--11389[label="0.0136986;1pkt 1fpkt"];
2060--11392[label="0.0821918;6pkt 6fpkt"];
2060--13545[label="1;5pkt 5fpkt"];
2060--21588[label="1;1pkt 1fpkt"];
2763--8399[label="0.4375;7pkt 7fpkt"];
2763--11265[label="0.0625;1pkt 1fpkt"];
2763--11285[label="0.0625;1pkt 1fpkt"];
2763--11338[label="0.0625;1pkt 1fpkt"];
2763--11351[label="0.0625;1pkt 1fpkt"];
2763--11382[label="0.0625;1pkt 1fpkt"];
2763--11392[label="0.0625;1pkt 1fpkt"];
8399--11265[label="0.166667;5pkt 5fpkt"];
8399--11285[label="0.2;6pkt 6fpkt"];
8399--11338[label="0.166667;5pkt 5fpkt"];
8399--11348[label="0.0333333;1pkt 1fpkt"];
8399--11351[label="0.2;6pkt 6fpkt"];
8399--11382[label="0.166667;5pkt 5fpkt"];
8399--11389[label="0.0333333;1pkt 1fpkt"];
8399--11392[label="0.2;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.71.117" src_ip="61.86.172.203"/>
      <filter dst_ip="200.173.71.117" dst_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
2556[label="62.44.51.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
8588[label="62.44.51.144;s;1pkt 1fpkt", shape=hexagon, color=black];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.44.51.144:80, 172.133.82.182:50255}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50255: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2556--8588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.82.182" dst_port="50255" src_ip="62.44.51.144" src_port="80"/>
    </slice>
    <from sec="1191993221" usec="0"/>
    <to sec="1191993226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
3819[label="210.129.72.90;s;1pkt 1fpkt", shape=diamond, color=yellow];
8643[label="210.129.72.90;s;1pkt 1fpkt", shape=hexagon, color=black];
13453[label="210.129.72.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18138[label="210.129.72.90;1pkt 1fpkt", shape=invtriangle, color=brown];
21207[label="210.129.72.90;2pkt 2fpkt", shape=invhouse, color=bisque];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.129.72.90:0, 200.173.66.46:0}[50%]&lt;BR/&gt;{210.129.72.90:0, 200.173.77.138:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3819--8643[label="1;1pkt 1fpkt"];
3819--13453[label="1;1pkt 1fpkt"];
3819--18138[label="1;1pkt 1fpkt"];
3819--21207[label="1;1pkt 1fpkt"];
8643--13453[label="1;1pkt 1fpkt"];
8643--18138[label="1;1pkt 1fpkt"];
8643--21207[label="1;1pkt 1fpkt"];
13453--18138[label="1;1pkt 1fpkt"];
13453--21207[label="1;2pkt 2fpkt"];
18138--21207[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.138" src_ip="210.129.72.90"/>
      <filter dst_ip="200.173.66.46" src_ip="210.129.72.90"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10602,3.07937,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="37576952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
2653[label="192.2.238.197;s;241pkt 241fpkt", shape=diamond, color=yellow];
8736[label="192.2.238.197;s;116pkt 116fpkt", shape=hexagon, color=black];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.2.238.197:6667, *:*}[36.5145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.3473%)&lt;BR/&gt; 6668: (3.92157%)&lt;BR/&gt; 3128: (3.08123%)&lt;BR/&gt; 6660: (2.80112%)&lt;BR/&gt; 113: (2.80112%)&gt;];
}
2653--8736[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter src_ip="192.2.238.197" src_port="6667"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3768,2.9907,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
4492[label="172.130.30.5;s;72pkt 72fpkt", shape=diamond, color=yellow];
4535[label="210.179.91.128;d;69pkt 69fpkt", shape=diamond, color=yellow];
9169[label="210.179.91.128;d;69pkt 69fpkt", shape=hexagon, color=black];
11546[label="172.130.30.5;71pkt 71fpkt", shape=pentagon, color=darkviolet];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.30.5:*, 210.179.91.128:80}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4508: (0.711744%)&lt;BR/&gt; 4507: (0.711744%)&lt;BR/&gt; 4506: (0.711744%)&lt;BR/&gt; 4505: (0.711744%)&gt;];
}
4492--4535[label="1;69pkt 69fpkt"];
4492--8382[label="0.0416667;3pkt 3fpkt"];
4492--9169[label="1;69pkt 69fpkt"];
4492--11285[label="0.0416667;3pkt 3fpkt"];
4492--11351[label="0.0416667;3pkt 3fpkt"];
4492--11392[label="0.0416667;3pkt 3fpkt"];
4492--11546[label="1;71pkt 71fpkt"];
4535--9169[label="1;69pkt 69fpkt"];
4535--11285[label="0.0144928;1pkt 1fpkt"];
4535--11351[label="0.0144928;1pkt 1fpkt"];
4535--11392[label="0.0144928;1pkt 1fpkt"];
4535--11546[label="1;69pkt 69fpkt"];
9169--11285[label="0.0144928;1pkt 1fpkt"];
9169--11351[label="0.0144928;1pkt 1fpkt"];
9169--11392[label="0.0144928;1pkt 1fpkt"];
9169--11546[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_ip="210.179.91.128" dst_port="80" src_ip="172.130.30.5"/>
    </slice>
    <from sec="1191992708" usec="0"/>
    <to sec="1191992861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
1343[label="81.164.249.10;d;59pkt 59fpkt", shape=diamond, color=yellow];
1344[label="172.130.164.230;s;60pkt 60fpkt", shape=diamond, color=yellow];
8866[label="81.164.249.10;d;59pkt 59fpkt", shape=hexagon, color=black];
16440[label="172.130.164.230;60pkt 60fpkt", shape=pentagon, color=darkviolet];
20057[label="172.130.164.230;60pkt 60fpkt", shape=invtriangle, color=brown];
22552[label="172.130.164.230;60pkt 60fpkt", shape=invhouse, color=bisque];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.164.230:80, 81.164.249.10:*}[91.9355%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58571: (0.837989%)&lt;BR/&gt; 58006: (0.837989%)&lt;BR/&gt; 58003: (0.837989%)&lt;BR/&gt; 57808: (0.837989%)&gt;];
}
1343--1344[label="0.966102;57pkt 57fpkt"];
1343--2175[label="0.0338983;2pkt 2fpkt"];
1343--8866[label="1;59pkt 59fpkt"];
1343--16440[label="0.966102;57pkt 57fpkt"];
1343--20057[label="0.966102;57pkt 57fpkt"];
1343--22552[label="0.966102;57pkt 57fpkt"];
1344--8866[label="0.966102;57pkt 57fpkt"];
1344--16440[label="1;60pkt 60fpkt"];
1344--20057[label="1;60pkt 60fpkt"];
1344--22552[label="1;60pkt 60fpkt"];
8866--16440[label="0.966102;57pkt 57fpkt"];
8866--20057[label="0.966102;57pkt 57fpkt"];
8866--22552[label="0.966102;57pkt 57fpkt"];
16440--20057[label="1;60pkt 60fpkt"];
16440--22552[label="1;60pkt 60fpkt"];
20057--22552[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="81.164.249.10" src_ip="172.130.164.230" src_port="80"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
3544[label="211.131.116.152;d;2pkt 2fpkt", shape=diamond, color=yellow];
8917[label="211.131.116.152;d;2pkt 2fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.34.145:2103, 211.131.116.152:80}[50%]&lt;BR/&gt;{134.71.34.145:2105, 211.131.116.152:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2105: (25%)&lt;BR/&gt; 2103: (25%)&gt;];
}
3544--8917[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.131.116.152" dst_port="80" src_ip="134.71.34.145" src_port="2105"/>
      <filter dst_ip="211.131.116.152" dst_port="80" src_ip="134.71.34.145" src_port="2103"/>
    </slice>
    <from sec="1191993187" usec="0"/>
    <to sec="1191993200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
2818[label="169.6.84.32;s;158pkt 158fpkt", shape=diamond, color=yellow];
4402[label="62.147.226.139;d;38pkt 38fpkt", shape=diamond, color=yellow];
5380[label="58.180.234.136;d;98pkt 98fpkt", shape=diamond, color=yellow];
9083[label="62.147.226.139;d;30pkt 30fpkt", shape=hexagon, color=black];
9334[label="169.6.84.32;s;158pkt 158fpkt", shape=hexagon, color=black];
9542[label="58.180.234.136;d;98pkt 98fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.84.32:*, 58.180.234.136:80}[62.0253%]&lt;BR/&gt;{169.6.84.32:*, 62.147.226.139:80}[24.0506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4828%)&lt;BR/&gt; 0: (1.03448%)&lt;BR/&gt; 39170: (0.344828%)&lt;BR/&gt; 39169: (0.344828%)&lt;BR/&gt; 39166: (0.344828%)&gt;];
}
2818--4402[label="1;38pkt 38fpkt"];
2818--4595[label="0.00632911;1pkt 1fpkt"];
2818--5380[label="1;98pkt 98fpkt"];
2818--7561[label="0.00632911;1pkt 1fpkt"];
2818--8000[label="0.00632911;1pkt 1fpkt"];
2818--9083[label="1;30pkt 30fpkt"];
2818--9334[label="1;158pkt 158fpkt"];
2818--9542[label="1;98pkt 98fpkt"];
2818--9966[label="0.00632911;1pkt 1fpkt"];
2818--11265[label="0.0126582;2pkt 2fpkt"];
2818--11285[label="0.0506329;8pkt 8fpkt"];
2818--11338[label="0.0126582;2pkt 2fpkt"];
2818--11351[label="0.0506329;8pkt 8fpkt"];
2818--11382[label="0.0126582;2pkt 2fpkt"];
2818--11392[label="0.0506329;8pkt 8fpkt"];
4402--9083[label="1;30pkt 30fpkt"];
4402--9334[label="1;38pkt 38fpkt"];
4402--11265[label="0.0263158;1pkt 1fpkt"];
4402--11285[label="0.210526;8pkt 8fpkt"];
4402--11338[label="0.0263158;1pkt 1fpkt"];
4402--11351[label="0.210526;8pkt 8fpkt"];
4402--11382[label="0.0263158;1pkt 1fpkt"];
4402--11392[label="0.210526;8pkt 8fpkt"];
5380--9334[label="1;98pkt 98fpkt"];
5380--9542[label="1;98pkt 98fpkt"];
9083--9334[label="1;30pkt 30fpkt"];
9083--11265[label="0.0333333;1pkt 1fpkt"];
9083--11285[label="0.266667;8pkt 8fpkt"];
9083--11338[label="0.0333333;1pkt 1fpkt"];
9083--11351[label="0.266667;8pkt 8fpkt"];
9083--11382[label="0.0333333;1pkt 1fpkt"];
9083--11392[label="0.266667;8pkt 8fpkt"];
9334--9542[label="1;98pkt 98fpkt"];
9334--9966[label="0.00632911;1pkt 1fpkt"];
9334--11265[label="0.0126582;2pkt 2fpkt"];
9334--11285[label="0.0506329;8pkt 8fpkt"];
9334--11338[label="0.0126582;2pkt 2fpkt"];
9334--11351[label="0.0506329;8pkt 8fpkt"];
9334--11382[label="0.0126582;2pkt 2fpkt"];
9334--11392[label="0.0506329;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="58.180.234.136" dst_port="80" src_ip="169.6.84.32"/>
      <filter dst_ip="62.147.226.139" dst_port="80" src_ip="169.6.84.32"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
3417[label="63.238.86.88;d;396pkt 396fpkt", shape=diamond, color=yellow];
9298[label="63.238.86.88;d;354pkt 354fpkt", shape=hexagon, color=black];
15251[label="172.136.17.172;86pkt 86fpkt", shape=pentagon, color=darkviolet];
19277[label="172.136.17.172;86pkt 86fpkt", shape=invtriangle, color=brown];
21993[label="172.136.17.172;86pkt 86fpkt", shape=invhouse, color=bisque];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.136.17.172:1433, 63.238.86.88:*}[21.5881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 45006: (0.446429%)&lt;BR/&gt; 60435: (0.347222%)&lt;BR/&gt; 59424: (0.347222%)&lt;BR/&gt; 57941: (0.347222%)&gt;];
}
3417--9298[label="1;354pkt 354fpkt"];
3417--15251[label="0.918605;79pkt 79fpkt"];
3417--19277[label="0.918605;79pkt 79fpkt"];
3417--21993[label="0.918605;79pkt 79fpkt"];
9298--15251[label="0.825581;71pkt 71fpkt"];
9298--19277[label="0.825581;71pkt 71fpkt"];
9298--21993[label="0.825581;71pkt 71fpkt"];
15251--19277[label="1;86pkt 86fpkt"];
15251--21993[label="1;86pkt 86fpkt"];
19277--21993[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="63.238.86.88" src_ip="172.136.17.172" src_port="1433"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
4803[label="172.20.32.65;s;371pkt 371fpkt", shape=diamond, color=yellow];
9318[label="172.20.32.65;s;371pkt 371fpkt", shape=hexagon, color=black];
12857[label="172.20.32.65;401pkt 401fpkt", shape=pentagon, color=darkviolet];
17745[label="172.20.32.65;402pkt 402fpkt", shape=invtriangle, color=brown];
20920[label="172.20.32.65;401pkt 401fpkt", shape=invhouse, color=bisque];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.32.65:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (8.47893%)&lt;BR/&gt; 80: (8.40185%)&lt;BR/&gt; 54503: (0.770812%)&lt;BR/&gt; 59296: (0.385406%)&lt;BR/&gt; 45536: (0.385406%)&gt;];
}
4803--9318[label="1;371pkt 371fpkt"];
4803--11265[label="0.0107817;4pkt 4fpkt"];
4803--11285[label="0.0161725;6pkt 6fpkt"];
4803--11338[label="0.0107817;4pkt 4fpkt"];
4803--11351[label="0.0161725;6pkt 6fpkt"];
4803--11382[label="0.0107817;4pkt 4fpkt"];
4803--11392[label="0.0161725;6pkt 6fpkt"];
4803--12857[label="0.997305;370pkt 370fpkt"];
4803--17745[label="1;371pkt 371fpkt"];
4803--20920[label="0.997305;370pkt 370fpkt"];
9318--11265[label="0.0107817;4pkt 4fpkt"];
9318--11285[label="0.0161725;6pkt 6fpkt"];
9318--11338[label="0.0107817;4pkt 4fpkt"];
9318--11351[label="0.0161725;6pkt 6fpkt"];
9318--11382[label="0.0107817;4pkt 4fpkt"];
9318--11392[label="0.0161725;6pkt 6fpkt"];
9318--12857[label="0.997305;370pkt 370fpkt"];
9318--17745[label="1;371pkt 371fpkt"];
9318--20920[label="0.997305;370pkt 370fpkt"];
12857--17745[label="1;401pkt 401fpkt"];
12857--20920[label="1;401pkt 401fpkt"];
17745--20920[label="1;401pkt 401fpkt"];
</description>
    <slice>
      <filter src_ip="172.20.32.65"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
4078[label="54.193.30.185;d;155pkt 155fpkt", shape=diamond, color=yellow];
9321[label="54.193.30.185;d;103pkt 103fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 54.193.30.185:*}[87.7419%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (43.6047%)&lt;BR/&gt; 297: (6.39535%)&lt;BR/&gt; 2248: (0.775194%)&lt;BR/&gt; 1648: (0.775194%)&lt;BR/&gt; 4249: (0.581395%)&gt;];
}
4078--9321[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter dst_ip="54.193.30.185" src_port="445"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
4834[label="200.173.70.32;s;110pkt 110fpkt", shape=diamond, color=yellow];
9335[label="200.173.70.32;s;72pkt 72fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.70.32:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4834--6730[label="0.0212766;1pkt 1fpkt"];
4834--6766[label="0.00909091;1pkt 1fpkt"];
4834--9335[label="1;72pkt 72fpkt"];
4834--10111[label="0.00909091;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="200.173.70.32"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
4166[label="84.68.132.47;d;95pkt 95fpkt", shape=diamond, color=yellow];
4926[label="172.159.178.213;s;87pkt 87fpkt", shape=diamond, color=yellow];
9358[label="84.68.132.47;d;92pkt 92fpkt", shape=hexagon, color=black];
10273[label="172.159.178.213;s;87pkt 87fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.178.213:5900, 84.68.132.47:*}[91.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (47.7839%)&lt;BR/&gt; 0: (4.43213%)&lt;BR/&gt; 4989: (0.554017%)&lt;BR/&gt; 4964: (0.554017%)&lt;BR/&gt; 4671: (0.554017%)&gt;];
}
4166--4926[label="1;87pkt 87fpkt"];
4166--7480[label="0.0105263;1pkt 1fpkt"];
4166--9358[label="1;92pkt 92fpkt"];
4166--10273[label="1;87pkt 87fpkt"];
4166--15962[label="0.0105263;1pkt 1fpkt"];
4166--19754[label="0.0105263;1pkt 1fpkt"];
4926--9358[label="0.965517;84pkt 84fpkt"];
4926--10273[label="1;87pkt 87fpkt"];
9358--10273[label="0.965517;84pkt 84fpkt"];
9358--15962[label="0.0108696;1pkt 1fpkt"];
9358--19754[label="0.0108696;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.68.132.47" src_ip="172.159.178.213" src_port="5900"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
3159[label="172.130.32.0;s;133pkt 133fpkt", shape=diamond, color=yellow];
3302[label="201.146.212.225;d;17pkt 17fpkt", shape=diamond, color=yellow];
3881[label="200.249.132.95;d;2pkt 2fpkt", shape=diamond, color=yellow];
5285[label="222.132.9.92;d;114pkt 114fpkt", shape=diamond, color=yellow];
9462[label="201.146.212.225;d;17pkt 17fpkt", shape=hexagon, color=black];
9529[label="222.132.9.92;d;114pkt 114fpkt", shape=hexagon, color=black];
11403[label="172.130.32.0;132pkt 132fpkt", shape=pentagon, color=darkviolet];
16843[label="172.130.32.0;133pkt 133fpkt", shape=invtriangle, color=brown];
20317[label="172.130.32.0;132pkt 132fpkt", shape=invhouse, color=bisque];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.32.0:*, 222.132.9.92:80}[84.3284%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.2065%)&lt;BR/&gt; 8001: (5.66751%)&lt;BR/&gt; 1198: (0.377834%)&lt;BR/&gt; 1197: (0.377834%)&lt;BR/&gt; 1193: (0.377834%)&gt;];
}
3159--3302[label="1;17pkt 17fpkt"];
3159--3881[label="1;2pkt 2fpkt"];
3159--4970[label="0.01;1pkt 1fpkt"];
3159--5285[label="0.991228;113pkt 113fpkt"];
3159--9462[label="1;17pkt 17fpkt"];
3159--9529[label="0.991228;113pkt 113fpkt"];
3159--10294[label="0.0104167;1pkt 1fpkt"];
3159--11265[label="0.0075188;1pkt 1fpkt"];
3159--11285[label="0.0150376;2pkt 2fpkt"];
3159--11338[label="0.0075188;1pkt 1fpkt"];
3159--11351[label="0.0150376;2pkt 2fpkt"];
3159--11382[label="0.0075188;1pkt 1fpkt"];
3159--11392[label="0.0150376;2pkt 2fpkt"];
3159--11403[label="1;132pkt 132fpkt"];
3159--16843[label="1;133pkt 133fpkt"];
3159--20317[label="1;132pkt 132fpkt"];
3302--9462[label="1;17pkt 17fpkt"];
3302--11403[label="0.941176;16pkt 16fpkt"];
3302--16843[label="1;17pkt 17fpkt"];
3302--20317[label="0.941176;16pkt 16fpkt"];
3881--11285[label="1;2pkt 2fpkt"];
3881--11351[label="1;2pkt 2fpkt"];
3881--11392[label="1;2pkt 2fpkt"];
3881--11403[label="1;2pkt 2fpkt"];
3881--16843[label="1;2pkt 2fpkt"];
3881--20317[label="1;2pkt 2fpkt"];
5285--6175[label="0.0114943;1pkt 1fpkt"];
5285--9529[label="1;114pkt 114fpkt"];
5285--10621[label="0.0114943;1pkt 1fpkt"];
5285--11403[label="0.991228;113pkt 113fpkt"];
5285--14464[label="0.0105263;1pkt 1fpkt"];
5285--16843[label="0.991228;113pkt 113fpkt"];
5285--18782[label="0.0105263;1pkt 1fpkt"];
5285--20317[label="0.991228;113pkt 113fpkt"];
5285--21651[label="0.0104167;1pkt 1fpkt"];
9462--11403[label="0.941176;16pkt 16fpkt"];
9462--16843[label="1;17pkt 17fpkt"];
9462--20317[label="0.941176;16pkt 16fpkt"];
9529--10621[label="0.0114943;1pkt 1fpkt"];
9529--11403[label="0.991228;113pkt 113fpkt"];
9529--14464[label="0.0105263;1pkt 1fpkt"];
9529--16843[label="0.991228;113pkt 113fpkt"];
9529--18782[label="0.0105263;1pkt 1fpkt"];
9529--20317[label="0.991228;113pkt 113fpkt"];
9529--21651[label="0.0104167;1pkt 1fpkt"];
11403--16843[label="1;132pkt 132fpkt"];
11403--20317[label="1;132pkt 132fpkt"];
16843--20317[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_ip="222.132.9.92" dst_port="80" src_ip="172.130.32.0"/>
    </slice>
    <from sec="1191992561" usec="0"/>
    <to sec="1191993076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
267[label="201.67.2.127;s;11615pkt 11615fpkt", shape=diamond, color=yellow];
940[label="57.33.66.137;d;4pkt 4fpkt", shape=diamond, color=yellow];
1070[label="48.87.109.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
1219[label="180.49.164.208;s;79pkt 79fpkt", shape=diamond, color=yellow];
1220[label="80.137.100.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
1230[label="217.140.160.207;d;2pkt 2fpkt", shape=diamond, color=yellow];
1249[label="6.144.151.247;d;2pkt 2fpkt", shape=diamond, color=yellow];
1804[label="52.128.191.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1809[label="48.129.102.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
1819[label="38.124.153.90;d;76pkt 76fpkt", shape=diamond, color=yellow];
1932[label="144.85.21.157;d;1pkt 1fpkt", shape=diamond, color=yellow];
1946[label="201.67.1.115;s;1750pkt 1750fpkt", shape=diamond, color=yellow];
2751[label="220.66.106.68;d;3pkt 3fpkt", shape=diamond, color=yellow];
2760[label="220.66.107.4;d;3pkt 3fpkt", shape=diamond, color=yellow];
2873[label="56.229.126.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
3096[label="42.29.118.95;d;1pkt 1fpkt", shape=diamond, color=yellow];
3370[label="99.128.108.28;d;8pkt 8fpkt", shape=diamond, color=yellow];
3424[label="37.157.77.132;d;3pkt 3fpkt", shape=diamond, color=yellow];
3434[label="220.66.107.41;d;2pkt 2fpkt", shape=diamond, color=yellow];
3679[label="203.22.202.182;d;5pkt 5fpkt", shape=diamond, color=yellow];
4052[label="220.66.107.0;d;4pkt 4fpkt", shape=diamond, color=yellow];
4070[label="222.133.70.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
4075[label="56.136.46.96;d;1pkt 1fpkt", shape=diamond, color=yellow];
4193[label="201.230.155.161;d;22pkt 22fpkt", shape=diamond, color=yellow];
5040[label="61.14.1.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
5045[label="37.107.14.95;d;6pkt 6fpkt", shape=diamond, color=yellow];
5447[label="34.146.67.82;d;2pkt 2fpkt", shape=diamond, color=yellow];
5763[label="61.18.22.233;d;2pkt 2fpkt", shape=diamond, color=yellow];
6102[label="80.189.86.151;d;216pkt 216fpkt", shape=diamond, color=yellow];
6130[label="169.6.152.53;s;177pkt 177fpkt", shape=diamond, color=yellow];
6131[label="52.18.148.198;d;221pkt 221fpkt", shape=diamond, color=yellow];
6133[label="216.193.178.165;d;219pkt 219fpkt", shape=diamond, color=yellow];
6163[label="54.201.190.120;d;3pkt 3fpkt", shape=diamond, color=yellow];
6341[label="50.34.158.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
6788[label="61.97.232.212;d;220pkt 220fpkt", shape=diamond, color=yellow];
6960[label="204.245.9.208;d;2pkt 2fpkt", shape=diamond, color=yellow];
7175[label="0.206.140.114;d;15pkt 15fpkt", shape=diamond, color=yellow];
7178[label="134.71.232.228;s;65pkt 65fpkt", shape=diamond, color=yellow];
7440[label="57.33.66.137;d;1pkt 1fpkt", shape=hexagon, color=black];
7460[label="48.87.109.91;d;1pkt 1fpkt", shape=hexagon, color=black];
7477[label="217.140.160.207;d;2pkt 2fpkt", shape=hexagon, color=black];
8254[label="48.129.102.16;d;1pkt 1fpkt", shape=hexagon, color=black];
8811[label="220.66.107.4;d;3pkt 3fpkt", shape=hexagon, color=black];
8896[label="56.229.126.31;d;1pkt 1fpkt", shape=hexagon, color=black];
8918[label="201.230.155.161;d;14pkt 14fpkt", shape=hexagon, color=black];
9227[label="38.124.153.90;d;44pkt 44fpkt", shape=hexagon, color=black];
9312[label="220.66.107.0;d;3pkt 3fpkt", shape=hexagon, color=black];
9613[label="201.67.1.115;s;1750pkt 1750fpkt", shape=hexagon, color=black];
9653[label="37.157.77.132;d;3pkt 3fpkt", shape=hexagon, color=black];
9858[label="61.14.1.164;d;1pkt 1fpkt", shape=hexagon, color=black];
9863[label="37.107.14.95;d;6pkt 6fpkt", shape=hexagon, color=black];
10148[label="99.128.108.28;d;8pkt 8fpkt", shape=hexagon, color=black];
10190[label="220.66.107.41;d;2pkt 2fpkt", shape=hexagon, color=black];
10196[label="52.18.148.198;d;196pkt 196fpkt", shape=hexagon, color=black];
10575[label="220.66.106.68;d;3pkt 3fpkt", shape=hexagon, color=black];
10585[label="6.144.151.247;d;2pkt 2fpkt", shape=hexagon, color=black];
10719[label="204.245.9.208;d;2pkt 2fpkt", shape=hexagon, color=black];
10877[label="134.71.232.228;s;65pkt 65fpkt", shape=hexagon, color=black];
12671[label="169.6.152.53;185pkt 185fpkt", shape=pentagon, color=darkviolet];
13974[label="201.67.1.115;1877pkt 1877fpkt", shape=pentagon, color=darkviolet];
14193[label="201.67.2.127;13177pkt 13177fpkt", shape=pentagon, color=darkviolet];
17640[label="169.6.152.53;185pkt 185fpkt", shape=invtriangle, color=brown];
18459[label="201.67.1.115;1877pkt 1877fpkt", shape=invtriangle, color=brown];
20848[label="169.6.152.53;184pkt 184fpkt", shape=invhouse, color=bisque];
21423[label="201.67.1.115;1877pkt 1877fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.2.127:16186, *:*}[53.9537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16186: (21.9226%)&lt;BR/&gt; 24217: (11.4895%)&lt;BR/&gt; 0: (5.31389%)&lt;BR/&gt; 28221: (2.04518%)&lt;BR/&gt; 8899: (1.29947%)&gt;];
}
267--301[label="0.000622278;1pkt 1fpkt"];
267--940[label="0.75;3pkt 3fpkt"];
267--1070[label="1;1pkt 1fpkt"];
267--1249[label="1;2pkt 2fpkt"];
267--1319[label="0.0246914;8pkt 8fpkt"];
267--1381[label="0.0340909;6pkt 6fpkt"];
267--1804[label="1;1pkt 1fpkt"];
267--1809[label="1;1pkt 1fpkt"];
267--1819[label="0.855263;65pkt 65fpkt"];
267--1902[label="0.00168634;2pkt 2fpkt"];
267--1932[label="1;1pkt 1fpkt"];
267--2751[label="0.666667;2pkt 2fpkt"];
267--2873[label="1;1pkt 1fpkt"];
267--3096[label="1;1pkt 1fpkt"];
267--3370[label="1;8pkt 8fpkt"];
267--3424[label="1;3pkt 3fpkt"];
267--3679[label="1;5pkt 5fpkt"];
267--3777[label="0.00819672;1pkt 1fpkt"];
267--4012[label="0.00877193;1pkt 1fpkt"];
267--4024[label="0.0175439;1pkt 1fpkt"];
267--4070[label="1;1pkt 1fpkt"];
267--4075[label="1;1pkt 1fpkt"];
267--4087[label="0.012987;1pkt 1fpkt"];
267--4193[label="0.954545;21pkt 21fpkt"];
267--4197[label="0.0113636;1pkt 1fpkt"];
267--5040[label="1;1pkt 1fpkt"];
267--5045[label="1;6pkt 6fpkt"];
267--5447[label="1;2pkt 2fpkt"];
267--5581[label="0.0120482;1pkt 1fpkt"];
267--5763[label="1;2pkt 2fpkt"];
267--6102[label="0.476852;103pkt 103fpkt"];
267--6131[label="0.484163;107pkt 107fpkt"];
267--6133[label="0.488584;107pkt 107fpkt"];
267--6163[label="1;3pkt 3fpkt"];
267--6341[label="1;1pkt 1fpkt"];
267--6788[label="0.477273;105pkt 105fpkt"];
267--6806[label="0.0175439;1pkt 1fpkt"];
267--6959[label="0.0615385;4pkt 4fpkt"];
267--6960[label="1;2pkt 2fpkt"];
267--7440[label="1;1pkt 1fpkt"];
267--7460[label="1;1pkt 1fpkt"];
267--8139[label="0.0307692;4pkt 4fpkt"];
267--8254[label="1;1pkt 1fpkt"];
267--8313[label="0.00168634;2pkt 2fpkt"];
267--8769[label="0.00877193;1pkt 1fpkt"];
267--8781[label="0.0175439;1pkt 1fpkt"];
267--8835[label="0.02;1pkt 1fpkt"];
267--8896[label="1;1pkt 1fpkt"];
267--8918[label="1;14pkt 14fpkt"];
267--9223[label="0.000622278;1pkt 1fpkt"];
267--9227[label="1;44pkt 44fpkt"];
267--9653[label="1;3pkt 3fpkt"];
267--9763[label="0.0120482;1pkt 1fpkt"];
267--9858[label="1;1pkt 1fpkt"];
267--9863[label="1;6pkt 6fpkt"];
267--10148[label="1;8pkt 8fpkt"];
267--10196[label="0.535714;105pkt 105fpkt"];
267--10575[label="0.666667;2pkt 2fpkt"];
267--10585[label="1;2pkt 2fpkt"];
267--10658[label="0.0113636;1pkt 1fpkt"];
267--10718[label="0.0615385;4pkt 4fpkt"];
267--10719[label="1;2pkt 2fpkt"];
267--11161[label="0.000733138;1pkt 1fpkt"];
267--11265[label="0.000947051;11pkt 11fpkt"];
267--11285[label="0.000947051;11pkt 11fpkt"];
267--11337[label="0.000258287;3pkt 3fpkt"];
267--11338[label="0.000947051;11pkt 11fpkt"];
267--11351[label="0.000947051;11pkt 11fpkt"];
267--11381[label="0.000258287;3pkt 3fpkt"];
267--11382[label="0.000947051;11pkt 11fpkt"];
267--11392[label="0.000947051;11pkt 11fpkt"];
267--14193[label="0.999914;11614pkt 11614fpkt"];
940--7440[label="1;1pkt 1fpkt"];
940--14193[label="1;4pkt 4fpkt"];
1070--7460[label="1;1pkt 1fpkt"];
1070--14193[label="1;1pkt 1fpkt"];
1219--1220[label="1;1pkt 1fpkt"];
1219--1230[label="1;2pkt 2fpkt"];
1219--2751[label="0.333333;1pkt 1fpkt"];
1219--2760[label="1;3pkt 3fpkt"];
1219--3434[label="1;2pkt 2fpkt"];
1219--3436[label="0.5;2pkt 2fpkt"];
1219--4052[label="1;4pkt 4fpkt"];
1219--7477[label="1;2pkt 2fpkt"];
1219--8394[label="0.333333;1pkt 1fpkt"];
1219--8811[label="1;3pkt 3fpkt"];
1219--9312[label="1;3pkt 3fpkt"];
1219--10190[label="1;2pkt 2fpkt"];
1219--10575[label="0.333333;1pkt 1fpkt"];
1219--11265[label="0.0126582;1pkt 1fpkt"];
1219--11285[label="0.0126582;1pkt 1fpkt"];
1219--11338[label="0.0126582;1pkt 1fpkt"];
1219--11351[label="0.0126582;1pkt 1fpkt"];
1219--11382[label="0.0126582;1pkt 1fpkt"];
1219--11392[label="0.0126582;1pkt 1fpkt"];
1230--7477[label="1;2pkt 2fpkt"];
1249--10585[label="1;2pkt 2fpkt"];
1249--14193[label="1;2pkt 2fpkt"];
1804--14193[label="1;1pkt 1fpkt"];
1809--8254[label="1;1pkt 1fpkt"];
1809--14193[label="1;1pkt 1fpkt"];
1819--9227[label="1;44pkt 44fpkt"];
1819--14193[label="1;76pkt 76fpkt"];
1932--14193[label="1;1pkt 1fpkt"];
1946--6102[label="0.148148;32pkt 32fpkt"];
1946--6131[label="0.149321;33pkt 33fpkt"];
1946--6133[label="0.146119;32pkt 32fpkt"];
1946--6788[label="0.145455;32pkt 32fpkt"];
1946--9613[label="1;1750pkt 1750fpkt"];
1946--10196[label="0.153061;30pkt 30fpkt"];
1946--13974[label="0.999429;1749pkt 1749fpkt"];
1946--18459[label="0.999429;1749pkt 1749fpkt"];
1946--21423[label="0.999429;1749pkt 1749fpkt"];
2751--10575[label="1;3pkt 3fpkt"];
2751--14193[label="0.666667;2pkt 2fpkt"];
2760--8811[label="1;3pkt 3fpkt"];
2873--8896[label="1;1pkt 1fpkt"];
2873--14193[label="1;1pkt 1fpkt"];
3096--14193[label="1;1pkt 1fpkt"];
3370--10148[label="1;8pkt 8fpkt"];
3370--14193[label="1;8pkt 8fpkt"];
3424--9653[label="1;3pkt 3fpkt"];
3424--14193[label="1;3pkt 3fpkt"];
3434--10190[label="1;2pkt 2fpkt"];
3679--14193[label="1;5pkt 5fpkt"];
4052--9312[label="1;3pkt 3fpkt"];
4070--14193[label="1;1pkt 1fpkt"];
4075--14193[label="1;1pkt 1fpkt"];
4193--8918[label="1;14pkt 14fpkt"];
4193--14193[label="1;22pkt 22fpkt"];
5040--9858[label="1;1pkt 1fpkt"];
5040--14193[label="1;1pkt 1fpkt"];
5045--9863[label="1;6pkt 6fpkt"];
5045--14193[label="1;6pkt 6fpkt"];
5447--14193[label="1;2pkt 2fpkt"];
5763--14193[label="1;2pkt 2fpkt"];
6102--6130[label="0.186441;33pkt 33fpkt"];
6102--7178[label="0.0615385;4pkt 4fpkt"];
6102--9613[label="0.148148;32pkt 32fpkt"];
6102--10877[label="0.0615385;4pkt 4fpkt"];
6102--12671[label="0.178378;33pkt 33fpkt"];
6102--13974[label="0.148148;32pkt 32fpkt"];
6102--14193[label="0.527778;114pkt 114fpkt"];
6102--17640[label="0.178378;33pkt 33fpkt"];
6102--18459[label="0.148148;32pkt 32fpkt"];
6102--20848[label="0.179348;33pkt 33fpkt"];
6102--21423[label="0.148148;32pkt 32fpkt"];
6130--6131[label="0.186441;33pkt 33fpkt"];
6130--6133[label="0.186441;33pkt 33fpkt"];
6130--6788[label="0.19209;34pkt 34fpkt"];
6130--7372[label="0.00564972;1pkt 1fpkt"];
6130--8298[label="0.0112994;2pkt 2fpkt"];
6130--9553[label="0.0112994;2pkt 2fpkt"];
6130--10196[label="0.169492;30pkt 30fpkt"];
6130--11285[label="0.0169492;3pkt 3fpkt"];
6130--11351[label="0.0169492;3pkt 3fpkt"];
6130--11392[label="0.0169492;3pkt 3fpkt"];
6130--12671[label="1;177pkt 177fpkt"];
6130--17640[label="1;177pkt 177fpkt"];
6130--20848[label="0.99435;176pkt 176fpkt"];
6131--7178[label="0.0769231;5pkt 5fpkt"];
6131--9613[label="0.149321;33pkt 33fpkt"];
6131--10196[label="1;196pkt 196fpkt"];
6131--10877[label="0.0769231;5pkt 5fpkt"];
6131--12671[label="0.178378;33pkt 33fpkt"];
6131--13974[label="0.149321;33pkt 33fpkt"];
6131--14193[label="0.529412;117pkt 117fpkt"];
6131--17640[label="0.178378;33pkt 33fpkt"];
6131--18459[label="0.149321;33pkt 33fpkt"];
6131--20848[label="0.179348;33pkt 33fpkt"];
6131--21423[label="0.149321;33pkt 33fpkt"];
6133--7178[label="0.0769231;5pkt 5fpkt"];
6133--9613[label="0.146119;32pkt 32fpkt"];
6133--10877[label="0.0769231;5pkt 5fpkt"];
6133--12671[label="0.178378;33pkt 33fpkt"];
6133--13974[label="0.146119;32pkt 32fpkt"];
6133--14193[label="0.52968;116pkt 116fpkt"];
6133--17640[label="0.178378;33pkt 33fpkt"];
6133--18459[label="0.146119;32pkt 32fpkt"];
6133--20848[label="0.179348;33pkt 33fpkt"];
6133--21423[label="0.146119;32pkt 32fpkt"];
6163--14193[label="1;3pkt 3fpkt"];
6341--14193[label="1;1pkt 1fpkt"];
6788--7178[label="0.0769231;5pkt 5fpkt"];
6788--9613[label="0.145455;32pkt 32fpkt"];
6788--10877[label="0.0769231;5pkt 5fpkt"];
6788--12671[label="0.183784;34pkt 34fpkt"];
6788--13974[label="0.145455;32pkt 32fpkt"];
6788--14193[label="0.527273;116pkt 116fpkt"];
6788--17640[label="0.183784;34pkt 34fpkt"];
6788--18459[label="0.145455;32pkt 32fpkt"];
6788--20848[label="0.184783;34pkt 34fpkt"];
6788--21423[label="0.145455;32pkt 32fpkt"];
6960--10719[label="1;2pkt 2fpkt"];
6960--14193[label="1;2pkt 2fpkt"];
7175--7178[label="1;15pkt 15fpkt"];
7175--10877[label="1;15pkt 15fpkt"];
7178--10196[label="0.0307692;2pkt 2fpkt"];
7178--10604[label="0.0153846;1pkt 1fpkt"];
7178--10877[label="1;65pkt 65fpkt"];
7440--14193[label="1;1pkt 1fpkt"];
7460--14193[label="1;1pkt 1fpkt"];
8254--14193[label="1;1pkt 1fpkt"];
8896--14193[label="1;1pkt 1fpkt"];
8918--14193[label="1;14pkt 14fpkt"];
9227--14193[label="1;44pkt 44fpkt"];
9613--10196[label="0.153061;30pkt 30fpkt"];
9613--13974[label="0.999429;1749pkt 1749fpkt"];
9613--18459[label="0.999429;1749pkt 1749fpkt"];
9613--21423[label="0.999429;1749pkt 1749fpkt"];
9653--14193[label="1;3pkt 3fpkt"];
9858--14193[label="1;1pkt 1fpkt"];
9863--14193[label="1;6pkt 6fpkt"];
10148--14193[label="1;8pkt 8fpkt"];
10196--10877[label="0.0307692;2pkt 2fpkt"];
10196--12671[label="0.162162;30pkt 30fpkt"];
10196--13974[label="0.153061;30pkt 30fpkt"];
10196--14193[label="0.535714;105pkt 105fpkt"];
10196--17640[label="0.162162;30pkt 30fpkt"];
10196--18459[label="0.153061;30pkt 30fpkt"];
10196--20848[label="0.163043;30pkt 30fpkt"];
10196--21423[label="0.153061;30pkt 30fpkt"];
10575--14193[label="0.666667;2pkt 2fpkt"];
10585--14193[label="1;2pkt 2fpkt"];
10719--14193[label="1;2pkt 2fpkt"];
12671--17640[label="1;185pkt 185fpkt"];
12671--20848[label="1;184pkt 184fpkt"];
13974--18459[label="1;1877pkt 1877fpkt"];
13974--21423[label="1;1877pkt 1877fpkt"];
17640--20848[label="1;184pkt 184fpkt"];
18459--21423[label="1;1877pkt 1877fpkt"];
</description>
    <slice>
      <filter src_ip="201.67.2.127" src_port="16186"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
3090[label="172.159.125.182;d;347pkt 347fpkt", shape=diamond, color=yellow];
3124[label="81.166.179.34;s;253pkt 253fpkt", shape=diamond, color=yellow];
9880[label="172.159.125.182;d;338pkt 338fpkt", shape=hexagon, color=black];
12248[label="81.166.179.34;253pkt 253fpkt", shape=pentagon, color=darkviolet];
17373[label="81.166.179.34;253pkt 253fpkt", shape=invtriangle, color=brown];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.166.179.34:80, 172.159.125.182:*}[72.9107%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9307%)&lt;BR/&gt; 2012: (0.17313%)&lt;BR/&gt; 2008: (0.17313%)&lt;BR/&gt; 2005: (0.17313%)&lt;BR/&gt; 2002: (0.17313%)&gt;];
}
3090--3124[label="1;253pkt 253fpkt"];
3090--4026[label="0.037037;1pkt 1fpkt"];
3090--8307[label="0.0128755;3pkt 3fpkt"];
3090--8357[label="0.0172911;6pkt 6fpkt"];
3090--8783[label="0.0384615;1pkt 1fpkt"];
3090--8970[label="0.00576369;2pkt 2fpkt"];
3090--8974[label="0.00775194;1pkt 1fpkt"];
3090--9622[label="0.0432277;15pkt 15fpkt"];
3090--9880[label="1;338pkt 338fpkt"];
3090--10098[label="0.0345821;12pkt 12fpkt"];
3090--10259[label="0.00288184;1pkt 1fpkt"];
3090--11131[label="0.00840336;1pkt 1fpkt"];
3090--11159[label="0.0345821;12pkt 12fpkt"];
3090--11348[label="0.123919;43pkt 43fpkt"];
3090--11389[label="0.123919;43pkt 43fpkt"];
3090--12248[label="1;253pkt 253fpkt"];
3090--12340[label="0.0384615;1pkt 1fpkt"];
3090--14286[label="0.0230548;8pkt 8fpkt"];
3090--14622[label="0.025641;1pkt 1fpkt"];
3090--14777[label="0.0115274;4pkt 4fpkt"];
3090--15719[label="0.00288184;1pkt 1fpkt"];
3090--15889[label="0.0144092;5pkt 5fpkt"];
3090--17373[label="1;253pkt 253fpkt"];
3090--18652[label="0.0230548;8pkt 8fpkt"];
3090--18981[label="0.0115274;4pkt 4fpkt"];
3090--19593[label="0.00288184;1pkt 1fpkt"];
3090--19703[label="0.0144092;5pkt 5fpkt"];
3090--21558[label="0.0230548;8pkt 8fpkt"];
3090--21786[label="0.0115274;4pkt 4fpkt"];
3090--22218[label="0.00288184;1pkt 1fpkt"];
3124--9880[label="1;253pkt 253fpkt"];
3124--11348[label="0.166008;42pkt 42fpkt"];
3124--11389[label="0.166008;42pkt 42fpkt"];
3124--12248[label="1;253pkt 253fpkt"];
3124--17373[label="1;253pkt 253fpkt"];
9880--10098[label="0.035503;12pkt 12fpkt"];
9880--10259[label="0.00295858;1pkt 1fpkt"];
9880--11131[label="0.00840336;1pkt 1fpkt"];
9880--11159[label="0.035503;12pkt 12fpkt"];
9880--11348[label="0.127219;43pkt 43fpkt"];
9880--11389[label="0.127219;43pkt 43fpkt"];
9880--12248[label="1;253pkt 253fpkt"];
9880--12340[label="0.0384615;1pkt 1fpkt"];
9880--14286[label="0.0236686;8pkt 8fpkt"];
9880--14622[label="0.025641;1pkt 1fpkt"];
9880--14777[label="0.0118343;4pkt 4fpkt"];
9880--15719[label="0.00295858;1pkt 1fpkt"];
9880--15889[label="0.0118343;4pkt 4fpkt"];
9880--17373[label="1;253pkt 253fpkt"];
9880--18652[label="0.0236686;8pkt 8fpkt"];
9880--18981[label="0.0118343;4pkt 4fpkt"];
9880--19593[label="0.00295858;1pkt 1fpkt"];
9880--19703[label="0.0118343;4pkt 4fpkt"];
9880--21558[label="0.0236686;8pkt 8fpkt"];
9880--21786[label="0.0118343;4pkt 4fpkt"];
9880--22218[label="0.00295858;1pkt 1fpkt"];
12248--17373[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.125.182" src_ip="81.166.179.34" src_port="80"/>
    </slice>
    <from sec="1191992480" usec="0"/>
    <to sec="1191993215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
2020[label="55.131.129.194;d;485pkt 485fpkt", shape=diamond, color=yellow];
2054[label="200.173.70.107;s;256pkt 256fpkt", shape=diamond, color=yellow];
6791[label="55.132.157.50;d;63pkt 63fpkt", shape=diamond, color=yellow];
8398[label="200.173.70.107;s;136pkt 136fpkt", shape=hexagon, color=black];
9644[label="55.131.129.194;d;377pkt 377fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 55.131.129.194:*}[48.4899%]&lt;BR/&gt;{200.173.70.107:*, 55.131.129.194:1117}[32.8859%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1117: (23.6902%)&lt;BR/&gt; 445: (21.4882%)&lt;BR/&gt; 4897: (3.56872%)&lt;BR/&gt; 3009: (1.17692%)&lt;BR/&gt; 58139: (0.15186%)&gt;];
}
2020--2054[label="0.765625;196pkt 196fpkt"];
2020--8398[label="0.595588;81pkt 81fpkt"];
2020--9644[label="1;377pkt 377fpkt"];
2054--6791[label="0.190476;12pkt 12fpkt"];
2054--8398[label="1;136pkt 136fpkt"];
2054--9644[label="0.589844;151pkt 151fpkt"];
6791--8398[label="0.111111;7pkt 7fpkt"];
8398--9644[label="0.595588;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_ip="55.131.129.194" src_port="445"/>
      <filter dst_ip="55.131.129.194" dst_port="1117" src_ip="200.173.70.107"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
5539[label="132.188.230.223;d;247pkt 247fpkt", shape=diamond, color=yellow];
9722[label="132.188.230.223;d;247pkt 247fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 132.188.230.223:18929}[51.8219%]&lt;BR/&gt;{208.29.72.255:2710, 132.188.230.223:*}[21.4575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18929: (25.9109%)&lt;BR/&gt; 2710: (10.9312%)&lt;BR/&gt; 6969: (9.31174%)&lt;BR/&gt; 8000: (1.82186%)&lt;BR/&gt; 8080: (1.61943%)&gt;];
}
5539--9722[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.230.223" dst_port="18929"/>
      <filter dst_ip="132.188.230.223" src_ip="208.29.72.255" src_port="2710"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
5567[label="81.211.19.55;d;218pkt 218fpkt", shape=diamond, color=yellow];
9747[label="81.211.19.55;d;218pkt 218fpkt", shape=hexagon, color=black];
16211[label="172.136.48.218;86pkt 86fpkt", shape=pentagon, color=darkviolet];
19905[label="172.136.48.218;86pkt 86fpkt", shape=invtriangle, color=brown];
22442[label="172.136.48.218;86pkt 86fpkt", shape=invhouse, color=bisque];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.136.48.218:1433, 81.211.19.55:*}[37.3391%]&lt;BR/&gt;{172.136.67.34:1433, 81.211.19.55:*}[31.3305%]&lt;BR/&gt;{172.136.172.75:1433, 81.211.19.55:*}[31.3305%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 3064: (0.504323%)&lt;BR/&gt; 2637: (0.504323%)&lt;BR/&gt; 1848: (0.504323%)&lt;BR/&gt; 4977: (0.360231%)&gt;];
}
5567--9747[label="1;218pkt 218fpkt"];
5567--16211[label="0.825581;71pkt 71fpkt"];
5567--19905[label="0.825581;71pkt 71fpkt"];
5567--22442[label="0.825581;71pkt 71fpkt"];
9747--16211[label="0.825581;71pkt 71fpkt"];
9747--19905[label="0.825581;71pkt 71fpkt"];
9747--22442[label="0.825581;71pkt 71fpkt"];
16211--19905[label="1;86pkt 86fpkt"];
16211--22442[label="1;86pkt 86fpkt"];
19905--22442[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="81.211.19.55" src_ip="172.136.48.218" src_port="1433"/>
      <filter dst_ip="81.211.19.55" src_ip="172.136.172.75" src_port="1433"/>
      <filter dst_ip="81.211.19.55" src_ip="172.136.67.34" src_port="1433"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
5742[label="210.177.38.6;d;39pkt 39fpkt", shape=diamond, color=yellow];
9915[label="210.177.38.6;d;39pkt 39fpkt", shape=hexagon, color=black];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.36.217.5:*, 210.177.38.6:25}[51.2821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 58250: (1.28205%)&lt;BR/&gt; 57291: (1.28205%)&lt;BR/&gt; 53339: (1.28205%)&lt;BR/&gt; 51163: (1.28205%)&gt;];
}
5742--9915[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="210.177.38.6" dst_port="25" src_ip="222.36.217.5"/>
    </slice>
    <from sec="1191992646" usec="0"/>
    <to sec="1191993043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
4598[label="0.32.80.207;s;508pkt 508fpkt", shape=diamond, color=yellow];
9967[label="0.32.80.207;s;508pkt 508fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.32.80.207:*, *:139}[50%]&lt;BR/&gt;{0.32.80.207:*, *:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&lt;BR/&gt; 2531: (0.19685%)&lt;BR/&gt; 4580: (0.0984252%)&lt;BR/&gt; 4570: (0.0984252%)&gt;];
}
4598--9967[label="1;508pkt 508fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="0.32.80.207"/>
      <filter dst_port="139" src_ip="0.32.80.207"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
5837[label="134.71.228.160;s;6pkt 6fpkt", shape=diamond, color=yellow];
10003[label="134.71.228.160;s;4pkt 4fpkt", shape=hexagon, color=black];
14976[label="134.71.228.160;13pkt 13fpkt", shape=pentagon, color=darkviolet];
19116[label="134.71.228.160;14pkt 14fpkt", shape=invtriangle, color=brown];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.228.160:995, *:*}[71.4286%]&lt;BR/&gt;{134.71.228.160:443, 216.5.210.73:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (37.8378%)&lt;BR/&gt; 443: (6.75676%)&lt;BR/&gt; 51665: (5.40541%)&lt;BR/&gt; 26523: (5.40541%)&lt;BR/&gt; 25820: (5.40541%)&gt;];
}
5837--10003[label="1;4pkt 4fpkt"];
5837--14976[label="1;6pkt 6fpkt"];
5837--19116[label="1;6pkt 6fpkt"];
10003--14976[label="1;4pkt 4fpkt"];
10003--19116[label="1;4pkt 4fpkt"];
14976--19116[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="134.71.228.160" src_port="995"/>
      <filter dst_ip="216.5.210.73" src_ip="134.71.228.160" src_port="443"/>
    </slice>
    <from sec="1191992594" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
5391[label="200.99.80.209;d;5pkt 5fpkt", shape=diamond, color=yellow];
10031[label="200.99.80.209;d;5pkt 5fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.55.131:1380, 200.99.80.209:554}[20%]&lt;BR/&gt;{201.75.55.131:1386, 200.99.80.209:554}[20%]&lt;BR/&gt;{201.75.55.131:1388, 200.99.80.209:554}[20%]&lt;BR/&gt;{201.75.55.131:1390, 200.99.80.209:554}[20%]&lt;BR/&gt;{201.75.55.131:1392, 200.99.80.209:554}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 1392: (10%)&lt;BR/&gt; 1390: (10%)&lt;BR/&gt; 1388: (10%)&lt;BR/&gt; 1386: (10%)&gt;];
}
5391--10031[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.99.80.209" dst_port="554" src_ip="201.75.55.131" src_port="1392"/>
      <filter dst_ip="200.99.80.209" dst_port="554" src_ip="201.75.55.131" src_port="1390"/>
      <filter dst_ip="200.99.80.209" dst_port="554" src_ip="201.75.55.131" src_port="1388"/>
      <filter dst_ip="200.99.80.209" dst_port="554" src_ip="201.75.55.131" src_port="1386"/>
      <filter dst_ip="200.99.80.209" dst_port="554" src_ip="201.75.55.131" src_port="1380"/>
    </slice>
    <from sec="1191992924" usec="0"/>
    <to sec="1191992945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
341[label="168.53.82.127;s;1609pkt 1609fpkt", shape=diamond, color=yellow];
3342[label="81.226.75.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
6078[label="169.6.69.17;s;8pkt 8fpkt", shape=diamond, color=yellow];
8258[label="168.53.82.127;s;1147pkt 1147fpkt", shape=hexagon, color=black];
8282[label="81.226.75.190;d;2pkt 2fpkt", shape=hexagon, color=black];
10124[label="169.6.69.17;s;8pkt 8fpkt", shape=hexagon, color=black];
11842[label="169.6.69.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17116[label="169.6.69.17;1pkt 1fpkt", shape=invtriangle, color=brown];
20500[label="169.6.69.17;1pkt 1fpkt", shape=invhouse, color=bisque];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.82.127:123, *:123}[59.3692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (79.6689%)&lt;BR/&gt; 1026: (0.881612%)&lt;BR/&gt; 1024: (0.215905%)&lt;BR/&gt; 1028: (0.179921%)&lt;BR/&gt; 1031: (0.143937%)&gt;];
}
341--2335[label="0.0588235;2pkt 2fpkt"];
341--3342[label="0.5;1pkt 1fpkt"];
341--5001[label="0.0454545;2pkt 2fpkt"];
341--8258[label="1;1147pkt 1147fpkt"];
341--8282[label="0.5;1pkt 1fpkt"];
341--9018[label="0.03125;1pkt 1fpkt"];
3342--6078[label="0.5;1pkt 1fpkt"];
3342--8258[label="0.5;1pkt 1fpkt"];
3342--8282[label="1;2pkt 2fpkt"];
3342--10124[label="0.5;1pkt 1fpkt"];
3342--11842[label="1;1pkt 1fpkt"];
3342--17116[label="1;1pkt 1fpkt"];
3342--20500[label="1;1pkt 1fpkt"];
6078--7561[label="0.125;1pkt 1fpkt"];
6078--8282[label="0.5;1pkt 1fpkt"];
6078--10124[label="1;8pkt 8fpkt"];
6078--11842[label="1;1pkt 1fpkt"];
6078--17116[label="1;1pkt 1fpkt"];
6078--20500[label="1;1pkt 1fpkt"];
8258--8282[label="0.5;1pkt 1fpkt"];
8258--9018[label="0.03125;1pkt 1fpkt"];
8282--10124[label="0.5;1pkt 1fpkt"];
8282--11842[label="1;1pkt 1fpkt"];
8282--17116[label="1;1pkt 1fpkt"];
8282--20500[label="1;1pkt 1fpkt"];
10124--11842[label="1;1pkt 1fpkt"];
10124--17116[label="1;1pkt 1fpkt"];
10124--20500[label="1;1pkt 1fpkt"];
11842--17116[label="1;1pkt 1fpkt"];
11842--20500[label="1;1pkt 1fpkt"];
17116--20500[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="168.53.82.127" src_port="123"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.93082,3.08696,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
4357[label="188.104.94.176;s;19pkt 19fpkt", shape=diamond, color=yellow];
4562[label="1.181.22.112;d;5pkt 5fpkt", shape=diamond, color=yellow];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.94.176:32768, *:53}[42.1053%]&lt;BR/&gt;{188.104.94.176:80, 1.181.22.112:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (20.8333%)&lt;BR/&gt; 32768: (16.6667%)&lt;BR/&gt; 4835: (4.16667%)&lt;BR/&gt; 4827: (4.16667%)&gt;];
}
4357--4562[label="1;5pkt 5fpkt"];
4357--4842[label="0.0526316;1pkt 1fpkt"];
4357--6100[label="0.0526316;1pkt 1fpkt"];
4357--8837[label="0.0526316;1pkt 1fpkt"];
4357--9348[label="0.0526316;1pkt 1fpkt"];
4357--10153[label="0.0526316;1pkt 1fpkt"];
4357--11337[label="0.0526316;1pkt 1fpkt"];
4357--11381[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.181.22.112" src_ip="188.104.94.176" src_port="80"/>
      <filter dst_port="53" src_ip="188.104.94.176" src_port="32768"/>
    </slice>
    <from sec="1191992480" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1399[label="169.6.91.20;s;274pkt 274fpkt", shape=diamond, color=yellow];
4584[label="35.91.109.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
4879[label="42.253.13.101;d;24pkt 24fpkt", shape=diamond, color=yellow];
5392[label="37.145.10.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
5957[label="37.145.238.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
6188[label="75.2.190.144;d;22pkt 22fpkt", shape=diamond, color=yellow];
7263[label="42.253.12.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
9357[label="42.253.13.101;d;19pkt 19fpkt", shape=hexagon, color=black];
9544[label="37.145.10.168;d;1pkt 1fpkt", shape=hexagon, color=black];
10249[label="75.2.190.144;d;20pkt 20fpkt", shape=hexagon, color=black];
10450[label="37.145.238.139;d;1pkt 1fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.91.20:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1793: (0.410959%)&lt;BR/&gt; 1791: (0.410959%)&lt;BR/&gt; 1789: (0.410959%)&lt;BR/&gt; 1787: (0.410959%)&gt;];
}
1399--1428[label="0.00729927;2pkt 2fpkt"];
1399--1476[label="0.00729927;2pkt 2fpkt"];
1399--1505[label="0.0291971;8pkt 8fpkt"];
1399--1537[label="0.00729927;2pkt 2fpkt"];
1399--1877[label="0.0364964;10pkt 10fpkt"];
1399--2132[label="0.00364964;1pkt 1fpkt"];
1399--2554[label="1;1pkt 1fpkt"];
1399--3839[label="1;1pkt 1fpkt"];
1399--4584[label="1;1pkt 1fpkt"];
1399--4879[label="1;24pkt 24fpkt"];
1399--5392[label="1;1pkt 1fpkt"];
1399--5957[label="1;1pkt 1fpkt"];
1399--6188[label="1;22pkt 22fpkt"];
1399--7263[label="1;1pkt 1fpkt"];
1399--7451[label="0.00729927;2pkt 2fpkt"];
1399--7464[label="0.0328467;9pkt 9fpkt"];
1399--7505[label="0.00729927;2pkt 2fpkt"];
1399--7515[label="0.00729927;2pkt 2fpkt"];
1399--7606[label="0.0255474;7pkt 7fpkt"];
1399--8385[label="0.00729927;2pkt 2fpkt"];
1399--8490[label="0.0291971;8pkt 8fpkt"];
1399--8718[label="0.0364964;10pkt 10fpkt"];
1399--9357[label="1;19pkt 19fpkt"];
1399--9544[label="1;1pkt 1fpkt"];
1399--9776[label="0.00729927;2pkt 2fpkt"];
1399--10249[label="1;20pkt 20fpkt"];
1399--10450[label="1;1pkt 1fpkt"];
1399--10572[label="0.0255474;7pkt 7fpkt"];
1399--11265[label="0.080292;22pkt 22fpkt"];
1399--11285[label="0.0364964;10pkt 10fpkt"];
1399--11338[label="0.080292;22pkt 22fpkt"];
1399--11351[label="0.0364964;10pkt 10fpkt"];
1399--11382[label="0.080292;22pkt 22fpkt"];
1399--11392[label="0.0364964;10pkt 10fpkt"];
4879--9357[label="1;19pkt 19fpkt"];
4879--11265[label="0.0833333;2pkt 2fpkt"];
4879--11285[label="0.0833333;2pkt 2fpkt"];
4879--11338[label="0.0833333;2pkt 2fpkt"];
4879--11351[label="0.0833333;2pkt 2fpkt"];
4879--11382[label="0.0833333;2pkt 2fpkt"];
4879--11392[label="0.0833333;2pkt 2fpkt"];
5392--9544[label="1;1pkt 1fpkt"];
5957--10450[label="1;1pkt 1fpkt"];
6188--10249[label="1;20pkt 20fpkt"];
6188--11265[label="0.0454545;1pkt 1fpkt"];
6188--11285[label="0.0909091;2pkt 2fpkt"];
6188--11338[label="0.0454545;1pkt 1fpkt"];
6188--11351[label="0.0909091;2pkt 2fpkt"];
6188--11382[label="0.0454545;1pkt 1fpkt"];
6188--11392[label="0.0909091;2pkt 2fpkt"];
9357--11265[label="0.105263;2pkt 2fpkt"];
9357--11285[label="0.105263;2pkt 2fpkt"];
9357--11338[label="0.105263;2pkt 2fpkt"];
9357--11351[label="0.105263;2pkt 2fpkt"];
9357--11382[label="0.105263;2pkt 2fpkt"];
9357--11392[label="0.105263;2pkt 2fpkt"];
10249--11265[label="0.05;1pkt 1fpkt"];
10249--11285[label="0.1;2pkt 2fpkt"];
10249--11338[label="0.05;1pkt 1fpkt"];
10249--11351[label="0.1;2pkt 2fpkt"];
10249--11382[label="0.05;1pkt 1fpkt"];
10249--11392[label="0.1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="169.6.91.20"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
6199[label="172.133.16.80;d;30pkt 30fpkt", shape=diamond, color=yellow];
10260[label="172.133.16.80;d;24pkt 24fpkt", shape=hexagon, color=black];
14096[label="0.34.39.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18538[label="0.34.39.122;1pkt 1fpkt", shape=invtriangle, color=brown];
21477[label="0.34.39.122;1pkt 1fpkt", shape=invhouse, color=bisque];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.43.51.212:*, 172.133.16.80:42452}[36.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42452: (50%)&lt;BR/&gt; 20752: (4.31034%)&lt;BR/&gt; 1702: (2.58621%)&lt;BR/&gt; 65385: (1.72414%)&lt;BR/&gt; 51363: (1.72414%)&gt;];
}
6199--10260[label="1;24pkt 24fpkt"];
6199--14096[label="1;2pkt 2fpkt"];
6199--18538[label="1;1pkt 1fpkt"];
6199--21477[label="1;1pkt 1fpkt"];
10260--14096[label="1;2pkt 2fpkt"];
10260--18538[label="1;1pkt 1fpkt"];
10260--21477[label="1;1pkt 1fpkt"];
14096--18538[label="1;1pkt 1fpkt"];
14096--21477[label="1;1pkt 1fpkt"];
18538--21477[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.16.80" dst_port="42452" src_ip="0.43.51.212"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
4186[label="188.104.156.184;s;394pkt 394fpkt", shape=diamond, color=yellow];
10261[label="188.104.156.184;s;394pkt 394fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.156.184:12780, *:*}[97.9695%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12780: (48.9848%)&lt;BR/&gt; 80: (1.14213%)&lt;BR/&gt; 50955: (0.253807%)&lt;BR/&gt; 41026: (0.253807%)&lt;BR/&gt; 32808: (0.253807%)&gt;];
}
4186--10261[label="1;394pkt 394fpkt"];
4186--11265[label="0.00253807;1pkt 1fpkt"];
4186--11285[label="0.00253807;1pkt 1fpkt"];
4186--11338[label="0.00253807;1pkt 1fpkt"];
4186--11351[label="0.00253807;1pkt 1fpkt"];
4186--11382[label="0.00253807;1pkt 1fpkt"];
4186--11392[label="0.00253807;1pkt 1fpkt"];
10261--11265[label="0.00253807;1pkt 1fpkt"];
10261--11285[label="0.00253807;1pkt 1fpkt"];
10261--11338[label="0.00253807;1pkt 1fpkt"];
10261--11351[label="0.00253807;1pkt 1fpkt"];
10261--11382[label="0.00253807;1pkt 1fpkt"];
10261--11392[label="0.00253807;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="188.104.156.184" src_port="12780"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
6328[label="169.6.77.196;s;99pkt 99fpkt", shape=diamond, color=yellow];
10329[label="169.6.77.196;s;98pkt 98fpkt", shape=hexagon, color=black];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.77.196:*, 200.116.138.23:80}[60.6061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4162%)&lt;BR/&gt; 25: (5.58376%)&lt;BR/&gt; 48976: (0.507614%)&lt;BR/&gt; 44801: (0.507614%)&lt;BR/&gt; 44800: (0.507614%)&gt;];
}
6328--9355[label="0.010101;1pkt 1fpkt"];
6328--9603[label="0.010101;1pkt 1fpkt"];
6328--9655[label="0.010101;1pkt 1fpkt"];
6328--10329[label="1;98pkt 98fpkt"];
6328--11282[label="0.010101;1pkt 1fpkt"];
6328--11347[label="0.010101;1pkt 1fpkt"];
6328--11388[label="0.010101;1pkt 1fpkt"];
10329--11282[label="0.0102041;1pkt 1fpkt"];
10329--11347[label="0.0102041;1pkt 1fpkt"];
10329--11388[label="0.0102041;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.116.138.23" dst_port="80" src_ip="169.6.77.196"/>
    </slice>
    <from sec="1191992446" usec="0"/>
    <to sec="1191993215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
912[label="172.64.71.251;s;3133pkt 3133fpkt", shape=diamond, color=yellow];
3509[label="203.209.173.8;d;154pkt 154fpkt", shape=diamond, color=yellow];
5201[label="194.42.200.117;d;15pkt 15fpkt", shape=diamond, color=yellow];
8879[label="203.209.173.8;d;122pkt 122fpkt", shape=hexagon, color=black];
10397[label="194.42.200.117;d;12pkt 12fpkt", shape=hexagon, color=black];
16780[label="172.64.71.251;3900pkt 3900fpkt", shape=pentagon, color=darkviolet];
20277[label="172.64.71.251;3900pkt 3900fpkt", shape=invtriangle, color=brown];
22719[label="172.64.71.251;3899pkt 3899fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.64.71.251:*, *:80}[22.3276%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (11.9227%)&lt;BR/&gt; 8080: (6.12818%)&lt;BR/&gt; 6588: (5.5071%)&lt;BR/&gt; 3128: (2.59663%)&lt;BR/&gt; 7212: (1.88966%)&gt;];
}
912--1216[label="0.00338983;1pkt 1fpkt"];
912--3509[label="0.883117;136pkt 136fpkt"];
912--5201[label="0.8;12pkt 12fpkt"];
912--7578[label="0.0018018;2pkt 2fpkt"];
912--8808[label="0.00540541;1pkt 1fpkt"];
912--8879[label="0.991803;121pkt 121fpkt"];
912--10397[label="1;12pkt 12fpkt"];
912--10951[label="0.0018018;2pkt 2fpkt"];
912--11265[label="0.0175551;55pkt 55fpkt"];
912--11285[label="0.0118098;37pkt 37fpkt"];
912--11338[label="0.0175551;55pkt 55fpkt"];
912--11351[label="0.0118098;37pkt 37fpkt"];
912--11382[label="0.0175551;55pkt 55fpkt"];
912--11392[label="0.0118098;37pkt 37fpkt"];
912--16780[label="1;3133pkt 3133fpkt"];
912--20277[label="1;3133pkt 3133fpkt"];
912--22719[label="0.999681;3132pkt 3132fpkt"];
3509--4068[label="0.00649351;1pkt 1fpkt"];
3509--8879[label="1;122pkt 122fpkt"];
3509--11265[label="0.0584416;9pkt 9fpkt"];
3509--11285[label="0.0584416;9pkt 9fpkt"];
3509--11338[label="0.0584416;9pkt 9fpkt"];
3509--11351[label="0.0584416;9pkt 9fpkt"];
3509--11382[label="0.0584416;9pkt 9fpkt"];
3509--11392[label="0.0584416;9pkt 9fpkt"];
3509--15336[label="0.00649351;1pkt 1fpkt"];
3509--16780[label="0.993506;153pkt 153fpkt"];
3509--20277[label="0.993506;153pkt 153fpkt"];
3509--22719[label="0.993506;153pkt 153fpkt"];
5201--10397[label="1;12pkt 12fpkt"];
5201--16780[label="1;15pkt 15fpkt"];
5201--20277[label="1;15pkt 15fpkt"];
5201--22719[label="1;15pkt 15fpkt"];
8879--11265[label="0.0737705;9pkt 9fpkt"];
8879--11285[label="0.0737705;9pkt 9fpkt"];
8879--11338[label="0.0737705;9pkt 9fpkt"];
8879--11351[label="0.0737705;9pkt 9fpkt"];
8879--11382[label="0.0737705;9pkt 9fpkt"];
8879--11392[label="0.0737705;9pkt 9fpkt"];
8879--15336[label="0.00819672;1pkt 1fpkt"];
8879--16780[label="0.991803;121pkt 121fpkt"];
8879--20277[label="0.991803;121pkt 121fpkt"];
8879--22719[label="0.991803;121pkt 121fpkt"];
10397--16780[label="1;12pkt 12fpkt"];
10397--20277[label="1;12pkt 12fpkt"];
10397--22719[label="1;12pkt 12fpkt"];
16780--20277[label="1;3900pkt 3900fpkt"];
16780--22719[label="1;3899pkt 3899fpkt"];
20277--22719[label="1;3899pkt 3899fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.64.71.251"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
3050[label="169.6.78.132;s;119pkt 119fpkt", shape=diamond, color=yellow];
5313[label="160.170.59.185;d;119pkt 119fpkt", shape=diamond, color=yellow];
10415[label="160.170.59.185;d;117pkt 117fpkt", shape=hexagon, color=black];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.78.132:*, 160.170.59.185:443}[98.3471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.7183%)&lt;BR/&gt; 0: (0.56338%)&lt;BR/&gt; 1446: (0.422535%)&lt;BR/&gt; 1445: (0.422535%)&lt;BR/&gt; 1444: (0.422535%)&gt;];
}
3050--3197[label="0.00840336;1pkt 1fpkt"];
3050--5313[label="0.983193;117pkt 117fpkt"];
3050--8000[label="0.00840336;1pkt 1fpkt"];
3050--9902[label="0.00840336;1pkt 1fpkt"];
3050--10415[label="1;117pkt 117fpkt"];
5313--10415[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_ip="160.170.59.185" dst_port="443" src_ip="169.6.78.132"/>
    </slice>
    <from sec="1191992842" usec="0"/>
    <to sec="1191993222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
522[label="75.7.202.153;d;3pkt 3fpkt", shape=diamond, color=yellow];
525[label="201.75.187.21;s;2pkt 2fpkt", shape=diamond, color=yellow];
8052[label="201.75.187.21;s;2pkt 2fpkt", shape=hexagon, color=black];
11972[label="201.75.187.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17198[label="201.75.187.21;1pkt 1fpkt", shape=invtriangle, color=brown];
20555[label="201.75.187.21;2pkt 2fpkt", shape=invhouse, color=bisque];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.69.24:3903, 75.7.202.153:8045}[33.3333%]&lt;BR/&gt;{201.75.187.21:1783, 75.7.202.153:8045}[33.3333%]&lt;BR/&gt;{201.75.187.21:2088, 75.7.202.153:8045}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8045: (50%)&lt;BR/&gt; 1783: (27.2727%)&lt;BR/&gt; 2088: (18.1818%)&lt;BR/&gt; 3903: (4.54545%)&gt;];
}
522--525[label="1;2pkt 2fpkt"];
522--8052[label="1;2pkt 2fpkt"];
522--11972[label="1;1pkt 1fpkt"];
522--12031[label="0.333333;1pkt 1fpkt"];
522--17198[label="1;1pkt 1fpkt"];
522--17236[label="0.333333;1pkt 1fpkt"];
522--20555[label="1;2pkt 2fpkt"];
525--8052[label="1;2pkt 2fpkt"];
525--11972[label="1;1pkt 1fpkt"];
525--17198[label="1;1pkt 1fpkt"];
525--20555[label="1;2pkt 2fpkt"];
8052--11972[label="1;1pkt 1fpkt"];
8052--17198[label="1;1pkt 1fpkt"];
8052--20555[label="1;2pkt 2fpkt"];
11972--17198[label="1;1pkt 1fpkt"];
11972--20555[label="1;1pkt 1fpkt"];
17198--20555[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="75.7.202.153" dst_port="8045" src_ip="201.75.187.21" src_port="2088"/>
      <filter dst_ip="75.7.202.153" dst_port="8045" src_ip="201.75.187.21" src_port="1783"/>
      <filter dst_ip="75.7.202.153" dst_port="8045" src_ip="169.6.69.24" src_port="3903"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10602,3.07937,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="39923880" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
2703[label="200.173.64.14;d;257pkt 257fpkt", shape=diamond, color=yellow];
10553[label="200.173.64.14;d;257pkt 257fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 200.173.64.14:*}[60.3113%]&lt;BR/&gt;{*:0, 200.173.64.14:0}[39.2996%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.2996%)&lt;BR/&gt; 53: (30.1556%)&lt;BR/&gt; 2167: (0.389105%)&lt;BR/&gt; 2042: (0.389105%)&lt;BR/&gt; 2015: (0.389105%)&gt;];
}
2703--10553[label="1;257pkt 257fpkt"];
2703--11318[label="0.0194553;5pkt 5fpkt"];
2703--11372[label="0.0194553;5pkt 5fpkt"];
2703--11399[label="0.0194553;5pkt 5fpkt"];
10553--11318[label="0.0194553;5pkt 5fpkt"];
10553--11372[label="0.0194553;5pkt 5fpkt"];
10553--11399[label="0.0194553;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.64.14" src_port="53"/>
      <filter dst_ip="200.173.64.14"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
6152[label="172.130.200.113;s;120pkt 120fpkt", shape=diamond, color=yellow];
10601[label="172.130.200.113;s;120pkt 120fpkt", shape=hexagon, color=black];
13948[label="172.130.200.113;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18444[label="172.130.200.113;2pkt 2fpkt", shape=invtriangle, color=brown];
21410[label="172.130.200.113;2pkt 2fpkt", shape=invhouse, color=bisque];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.200.113:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6152--10601[label="1;120pkt 120fpkt"];
6152--13948[label="1;2pkt 2fpkt"];
6152--18444[label="1;2pkt 2fpkt"];
6152--21410[label="1;2pkt 2fpkt"];
10601--13948[label="1;2pkt 2fpkt"];
10601--18444[label="1;2pkt 2fpkt"];
10601--21410[label="1;2pkt 2fpkt"];
13948--18444[label="1;2pkt 2fpkt"];
13948--21410[label="1;2pkt 2fpkt"];
18444--21410[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="172.130.200.113"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
606[label="201.67.2.96;s;1936pkt 1936fpkt", shape=diamond, color=yellow];
2745[label="202.0.226.77;d;16pkt 16fpkt", shape=diamond, color=yellow];
6938[label="202.0.242.13;d;18pkt 18fpkt", shape=diamond, color=yellow];
8390[label="202.0.226.77;d;16pkt 16fpkt", shape=hexagon, color=black];
10707[label="202.0.242.13;d;18pkt 18fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.2.96:2473, *:*}[27.0145%]&lt;BR/&gt;{201.67.2.96:3128, *:*}[21.4876%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2473: (13.0489%)&lt;BR/&gt; 0: (12.6996%)&lt;BR/&gt; 3128: (10.3792%)&lt;BR/&gt; 34486: (2.56986%)&lt;BR/&gt; 40895: (2.39521%)&gt;];
}
606--2125[label="0.00564972;1pkt 1fpkt"];
606--2745[label="1;16pkt 16fpkt"];
606--3777[label="0.00819672;1pkt 1fpkt"];
606--6938[label="1;18pkt 18fpkt"];
606--8390[label="1;16pkt 16fpkt"];
606--8856[label="0.00909091;1pkt 1fpkt"];
606--10707[label="1;18pkt 18fpkt"];
606--11285[label="0.000516529;1pkt 1fpkt"];
606--11351[label="0.000516529;1pkt 1fpkt"];
606--11392[label="0.000516529;1pkt 1fpkt"];
2745--8390[label="1;16pkt 16fpkt"];
6938--10707[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="201.67.2.96" src_port="2473"/>
      <filter src_ip="201.67.2.96" src_port="3128"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
1433[label="134.71.34.220;s;98pkt 98fpkt", shape=diamond, color=yellow];
1518[label="210.87.115.98;d;1797pkt 1797fpkt", shape=diamond, color=yellow];
1522[label="210.87.113.102;d;2418pkt 2418fpkt", shape=diamond, color=yellow];
1577[label="169.6.240.214;s;181pkt 181fpkt", shape=diamond, color=yellow];
1700[label="169.6.26.17;s;32pkt 32fpkt", shape=diamond, color=yellow];
2397[label="169.6.240.55;s;39pkt 39fpkt", shape=diamond, color=yellow];
2969[label="134.71.88.55;s;151pkt 151fpkt", shape=diamond, color=yellow];
2981[label="204.148.103.124;d;606pkt 606fpkt", shape=diamond, color=yellow];
3012[label="1.178.159.41;d;134pkt 134fpkt", shape=diamond, color=yellow];
3017[label="169.6.138.192;s;189pkt 189fpkt", shape=diamond, color=yellow];
3044[label="169.6.70.37;s;233pkt 233fpkt", shape=diamond, color=yellow];
3066[label="169.6.78.134;s;205pkt 205fpkt", shape=diamond, color=yellow];
3129[label="169.6.115.108;s;128pkt 128fpkt", shape=diamond, color=yellow];
3130[label="169.6.70.41;s;43pkt 43fpkt", shape=diamond, color=yellow];
3278[label="200.172.101.221;d;27pkt 27fpkt", shape=diamond, color=yellow];
3591[label="134.71.52.115;s;135pkt 135fpkt", shape=diamond, color=yellow];
3675[label="169.6.0.226;s;96pkt 96fpkt", shape=diamond, color=yellow];
3712[label="134.71.34.10;s;85pkt 85fpkt", shape=diamond, color=yellow];
3781[label="188.104.150.70;s;36pkt 36fpkt", shape=diamond, color=yellow];
4259[label="169.6.77.19;s;98pkt 98fpkt", shape=diamond, color=yellow];
4269[label="169.6.138.5;s;337pkt 337fpkt", shape=diamond, color=yellow];
4425[label="169.6.96.158;s;35pkt 35fpkt", shape=diamond, color=yellow];
5141[label="169.6.70.156;s;103pkt 103fpkt", shape=diamond, color=yellow];
5166[label="99.184.32.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
5377[label="169.6.100.239;s;86pkt 86fpkt", shape=diamond, color=yellow];
5527[label="169.6.70.75;s;172pkt 172fpkt", shape=diamond, color=yellow];
5665[label="172.159.120.26;s;43pkt 43fpkt", shape=diamond, color=yellow];
5730[label="134.71.8.32;s;69pkt 69fpkt", shape=diamond, color=yellow];
5803[label="211.195.142.129;d;21pkt 21fpkt", shape=diamond, color=yellow];
5889[label="169.6.67.102;s;178pkt 178fpkt", shape=diamond, color=yellow];
6377[label="172.159.121.128;s;73pkt 73fpkt", shape=diamond, color=yellow];
6453[label="201.75.187.49;s;85pkt 85fpkt", shape=diamond, color=yellow];
6637[label="169.6.100.229;s;89pkt 89fpkt", shape=diamond, color=yellow];
6879[label="169.6.3.229;s;48pkt 48fpkt", shape=diamond, color=yellow];
7157[label="134.71.66.195;s;31pkt 31fpkt", shape=diamond, color=yellow];
7190[label="169.6.115.65;s;94pkt 94fpkt", shape=diamond, color=yellow];
7533[label="169.6.26.17;s;15pkt 15fpkt", shape=hexagon, color=black];
7877[label="210.87.113.102;d;2418pkt 2418fpkt", shape=hexagon, color=black];
7968[label="169.6.240.55;s;37pkt 37fpkt", shape=hexagon, color=black];
8177[label="134.71.88.55;s;151pkt 151fpkt", shape=hexagon, color=black];
8510[label="204.148.103.124;d;482pkt 482fpkt", shape=hexagon, color=black];
8631[label="200.172.101.221;d;16pkt 16fpkt", shape=hexagon, color=black];
9823[label="169.6.138.5;s;300pkt 300fpkt", shape=hexagon, color=black];
9844[label="172.159.120.26;s;43pkt 43fpkt", shape=hexagon, color=black];
9906[label="188.104.150.70;s;27pkt 27fpkt", shape=hexagon, color=black];
9949[label="99.184.32.133;d;1pkt 1fpkt", shape=hexagon, color=black];
9972[label="211.195.142.129;d;21pkt 21fpkt", shape=hexagon, color=black];
10039[label="169.6.67.102;s;176pkt 176fpkt", shape=hexagon, color=black];
10608[label="169.6.70.75;s;172pkt 172fpkt", shape=hexagon, color=black];
10856[label="169.6.100.229;s;89pkt 89fpkt", shape=hexagon, color=black];
11483[label="172.159.178.2;42pkt 42fpkt", shape=pentagon, color=darkviolet];
11560[label="169.6.138.5;371pkt 371fpkt", shape=pentagon, color=darkviolet];
11835[label="169.6.26.17;34pkt 34fpkt", shape=pentagon, color=darkviolet];
11896[label="169.6.77.19;100pkt 100fpkt", shape=pentagon, color=darkviolet];
12066[label="172.159.120.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12186[label="134.71.8.32;68pkt 68fpkt", shape=pentagon, color=darkviolet];
12362[label="134.71.40.40;17pkt 17fpkt", shape=pentagon, color=darkviolet];
12389[label="169.6.70.41;101pkt 101fpkt", shape=pentagon, color=darkviolet];
12710[label="134.71.156.55;19pkt 19fpkt", shape=pentagon, color=darkviolet];
12713[label="169.6.240.55;42pkt 42fpkt", shape=pentagon, color=darkviolet];
12871[label="169.6.115.65;213pkt 213fpkt", shape=pentagon, color=darkviolet];
12983[label="134.71.196.69;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13097[label="169.6.70.75;173pkt 173fpkt", shape=pentagon, color=darkviolet];
13315[label="172.159.112.84;35pkt 35fpkt", shape=pentagon, color=darkviolet];
13840[label="169.6.115.108;147pkt 147fpkt", shape=pentagon, color=darkviolet];
14389[label="169.6.78.134;204pkt 204fpkt", shape=pentagon, color=darkviolet];
14517[label="169.6.70.141;43pkt 43fpkt", shape=pentagon, color=darkviolet];
14527[label="169.6.186.141;42pkt 42fpkt", shape=pentagon, color=darkviolet];
14874[label="169.6.70.156;103pkt 103fpkt", shape=pentagon, color=darkviolet];
14923[label="169.6.96.158;47pkt 47fpkt", shape=pentagon, color=darkviolet];
14947[label="169.6.138.159;41pkt 41fpkt", shape=pentagon, color=darkviolet];
15257[label="169.6.117.172;46pkt 46fpkt", shape=pentagon, color=darkviolet];
16153[label="169.6.240.214;271pkt 271fpkt", shape=pentagon, color=darkviolet];
16251[label="134.71.34.220;157pkt 157fpkt", shape=pentagon, color=darkviolet];
16288[label="172.130.150.221;8pkt 8fpkt", shape=pentagon, color=darkviolet];
16576[label="169.6.100.239;91pkt 91fpkt", shape=pentagon, color=darkviolet];
16622[label="172.159.250.241;38pkt 38fpkt", shape=pentagon, color=darkviolet];
16639[label="169.6.3.243;18pkt 18fpkt", shape=pentagon, color=darkviolet];
16897[label="172.159.178.2;42pkt 42fpkt", shape=invtriangle, color=brown];
16939[label="169.6.138.5;371pkt 371fpkt", shape=invtriangle, color=brown];
17262[label="172.159.120.26;1pkt 1fpkt", shape=invtriangle, color=brown];
17339[label="134.71.8.32;69pkt 69fpkt", shape=invtriangle, color=brown];
17447[label="134.71.40.40;17pkt 17fpkt", shape=invtriangle, color=brown];
17465[label="169.6.70.41;101pkt 101fpkt", shape=invtriangle, color=brown];
17662[label="134.71.156.55;18pkt 18fpkt", shape=invtriangle, color=brown];
17834[label="134.71.196.69;25pkt 25fpkt", shape=invtriangle, color=brown];
17905[label="169.6.70.75;174pkt 174fpkt", shape=invtriangle, color=brown];
18054[label="172.159.112.84;36pkt 36fpkt", shape=invtriangle, color=brown];
18727[label="169.6.78.134;205pkt 205fpkt", shape=invtriangle, color=brown];
18821[label="169.6.70.141;43pkt 43fpkt", shape=invtriangle, color=brown];
19044[label="169.6.70.156;102pkt 102fpkt", shape=invtriangle, color=brown];
19081[label="169.6.96.158;47pkt 47fpkt", shape=invtriangle, color=brown];
19096[label="169.6.138.159;40pkt 40fpkt", shape=invtriangle, color=brown];
19282[label="169.6.117.172;45pkt 45fpkt", shape=invtriangle, color=brown];
19872[label="169.6.240.214;271pkt 271fpkt", shape=invtriangle, color=brown];
19930[label="134.71.34.220;157pkt 157fpkt", shape=invtriangle, color=brown];
19951[label="172.130.150.221;8pkt 8fpkt", shape=invtriangle, color=brown];
20140[label="169.6.100.239;90pkt 90fpkt", shape=invtriangle, color=brown];
20355[label="172.159.178.2;42pkt 42fpkt", shape=invhouse, color=bisque];
20598[label="172.159.120.26;1pkt 1fpkt", shape=invhouse, color=bisque];
20652[label="134.71.8.32;68pkt 68fpkt", shape=invhouse, color=bisque];
20722[label="134.71.40.40;16pkt 16fpkt", shape=invhouse, color=bisque];
20861[label="134.71.156.55;18pkt 18fpkt", shape=invhouse, color=bisque];
20985[label="134.71.196.69;25pkt 25fpkt", shape=invhouse, color=bisque];
21039[label="169.6.70.75;174pkt 174fpkt", shape=invhouse, color=bisque];
21154[label="172.159.112.84;35pkt 35fpkt", shape=invhouse, color=bisque];
21609[label="169.6.78.134;204pkt 204fpkt", shape=invhouse, color=bisque];
21833[label="169.6.70.156;103pkt 103fpkt", shape=invhouse, color=bisque];
21856[label="169.6.96.158;46pkt 46fpkt", shape=invhouse, color=bisque];
21865[label="169.6.138.159;40pkt 40fpkt", shape=invhouse, color=bisque];
21997[label="169.6.117.172;45pkt 45fpkt", shape=invhouse, color=bisque];
22417[label="169.6.240.214;271pkt 271fpkt", shape=invhouse, color=bisque];
22473[label="172.130.150.221;9pkt 9fpkt", shape=invhouse, color=bisque];
22620[label="169.6.100.239;90pkt 90fpkt", shape=invhouse, color=bisque];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 210.87.113.102:80}[39.704%]&lt;BR/&gt;{*:*, 210.87.115.98:80}[30.8076%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6319%)&lt;BR/&gt; 443: (0.814065%)&lt;BR/&gt; 0: (0.486178%)&lt;BR/&gt; 1145: (0.101758%)&lt;BR/&gt; 1900: (0.0961049%)&gt;];
}
1433--1522[label="0.632653;62pkt 62fpkt"];
1433--1550[label="0.0204082;2pkt 2fpkt"];
1433--2154[label="0.0204082;2pkt 2fpkt"];
1433--2209[label="0.0102041;1pkt 1fpkt"];
1433--2958[label="0.0204082;2pkt 2fpkt"];
1433--7372[label="0.0102041;1pkt 1fpkt"];
1433--7553[label="0.0204082;2pkt 2fpkt"];
1433--7655[label="0.0102041;1pkt 1fpkt"];
1433--7777[label="0.0102041;1pkt 1fpkt"];
1433--7877[label="0.632653;62pkt 62fpkt"];
1433--8295[label="0.0306122;3pkt 3fpkt"];
1433--8508[label="0.0204082;2pkt 2fpkt"];
1433--8855[label="0.0204082;2pkt 2fpkt"];
1433--11160[label="0.0204082;2pkt 2fpkt"];
1433--16251[label="0.989796;97pkt 97fpkt"];
1433--19930[label="0.989796;97pkt 97fpkt"];
1518--1577[label="0.773481;140pkt 140fpkt"];
1518--1579[label="0.00657895;1pkt 1fpkt"];
1518--1776[label="0.0589812;22pkt 22fpkt"];
1518--1807[label="0.00468019;3pkt 3fpkt"];
1518--1837[label="0.0980861;41pkt 41fpkt"];
1518--1957[label="0.14876;18pkt 18fpkt"];
1518--2128[label="0.0042735;1pkt 1fpkt"];
1518--2186[label="0.047619;24pkt 24fpkt"];
1518--2192[label="0.016129;3pkt 3fpkt"];
1518--2590[label="0.141903;255pkt 255fpkt"];
1518--2644[label="0.00492126;5pkt 5fpkt"];
1518--2729[label="0.00317259;5pkt 5fpkt"];
1518--2977[label="0.0123153;5pkt 5fpkt"];
1518--3044[label="0.175966;41pkt 41fpkt"];
1518--3067[label="0.149254;10pkt 10fpkt"];
1518--3130[label="0.604651;26pkt 26fpkt"];
1518--4151[label="0.026178;5pkt 5fpkt"];
1518--4291[label="0.0866426;24pkt 24fpkt"];
1518--4295[label="0.194444;14pkt 14fpkt"];
1518--4301[label="0.0232558;1pkt 1fpkt"];
1518--4362[label="0.277778;15pkt 15fpkt"];
1518--5377[label="0.988372;85pkt 85fpkt"];
1518--5730[label="0.173913;12pkt 12fpkt"];
1518--5889[label="0.994382;177pkt 177fpkt"];
1518--7190[label="0.989362;93pkt 93fpkt"];
1518--7362[label="0.00746269;1pkt 1fpkt"];
1518--7402[label="0.00994644;13pkt 13fpkt"];
1518--7404[label="0.021374;14pkt 14fpkt"];
1518--7548[label="0.264368;23pkt 23fpkt"];
1518--7609[label="0.0980861;41pkt 41fpkt"];
1518--8904[label="0.024;3pkt 3fpkt"];
1518--9548[label="0.126322;227pkt 227fpkt"];
1518--9586[label="0.00502152;7pkt 7fpkt"];
1518--9652[label="0.0022779;1pkt 1fpkt"];
1518--9835[label="0.161074;24pkt 24fpkt"];
1518--10039[label="0.994318;175pkt 175fpkt"];
1518--10512[label="0.0166945;30pkt 30fpkt"];
1518--10534[label="0.00492126;5pkt 5fpkt"];
1518--11211[label="0.0166945;30pkt 30fpkt"];
1518--11265[label="0.0372844;67pkt 67fpkt"];
1518--11285[label="0.0183639;33pkt 33fpkt"];
1518--11338[label="0.0372844;67pkt 67fpkt"];
1518--11351[label="0.0183639;33pkt 33fpkt"];
1518--11382[label="0.0372844;67pkt 67fpkt"];
1518--11392[label="0.0183639;33pkt 33fpkt"];
1518--11518[label="0.197183;14pkt 14fpkt"];
1518--11531[label="0.0211464;38pkt 38fpkt"];
1518--11633[label="0.00625;2pkt 2fpkt"];
1518--12031[label="0.00950119;8pkt 8fpkt"];
1518--12041[label="0.0166945;30pkt 30fpkt"];
1518--12057[label="0.0254777;8pkt 8fpkt"];
1518--12186[label="0.176471;12pkt 12fpkt"];
1518--12389[label="0.811881;82pkt 82fpkt"];
1518--12616[label="0.00306435;3pkt 3fpkt"];
1518--12664[label="0.0410448;22pkt 22fpkt"];
1518--12871[label="0.43662;93pkt 93fpkt"];
1518--13445[label="0.00708215;5pkt 5fpkt"];
1518--14090[label="0.470588;8pkt 8fpkt"];
1518--14882[label="0.247312;23pkt 23fpkt"];
1518--14987[label="0.218182;12pkt 12fpkt"];
1518--15206[label="0.25;2pkt 2fpkt"];
1518--15779[label="0.0169492;1pkt 1fpkt"];
1518--16127[label="0.00793651;1pkt 1fpkt"];
1518--16153[label="0.734317;199pkt 199fpkt"];
1518--16214[label="0.32;16pkt 16fpkt"];
1518--16576[label="0.978022;89pkt 89fpkt"];
1518--16750[label="0.0167866;14pkt 14fpkt"];
1518--16924[label="0.0211464;38pkt 38fpkt"];
1518--17236[label="0.00950119;8pkt 8fpkt"];
1518--17244[label="0.0166945;30pkt 30fpkt"];
1518--17339[label="0.173913;12pkt 12fpkt"];
1518--17465[label="0.811881;82pkt 82fpkt"];
1518--17634[label="0.0411215;22pkt 22fpkt"];
1518--18130[label="0.00707214;5pkt 5fpkt"];
1518--18533[label="0.5;8pkt 8fpkt"];
1518--19857[label="0.00793651;1pkt 1fpkt"];
1518--19872[label="0.734317;199pkt 199fpkt"];
1518--20140[label="0.988889;89pkt 89fpkt"];
1518--20255[label="0.0168067;14pkt 14fpkt"];
1518--20371[label="0.0211464;38pkt 38fpkt"];
1518--20584[label="0.0166945;30pkt 30fpkt"];
1518--20652[label="0.176471;12pkt 12fpkt"];
1518--20845[label="0.0410448;22pkt 22fpkt"];
1518--21202[label="0.00708215;5pkt 5fpkt"];
1518--21474[label="0.5;8pkt 8fpkt"];
1518--22410[label="0.00787402;1pkt 1fpkt"];
1518--22417[label="0.734317;199pkt 199fpkt"];
1518--22444[label="0.0833333;3pkt 3fpkt"];
1518--22620[label="0.988889;89pkt 89fpkt"];
1518--22705[label="0.0168067;14pkt 14fpkt"];
1522--1579[label="0.00657895;1pkt 1fpkt"];
1522--1636[label="0.519231;27pkt 27fpkt"];
1522--1837[label="0.0526316;22pkt 22fpkt"];
1522--1957[label="0.132231;16pkt 16fpkt"];
1522--2128[label="0.0042735;1pkt 1fpkt"];
1522--2192[label="0.0107527;2pkt 2fpkt"];
1522--2205[label="0.091954;8pkt 8fpkt"];
1522--2229[label="0.0454545;7pkt 7fpkt"];
1522--2244[label="0.0290179;13pkt 13fpkt"];
1522--2397[label="0.769231;30pkt 30fpkt"];
1522--2590[label="0.0392887;95pkt 95fpkt"];
1522--2644[label="0.00295276;3pkt 3fpkt"];
1522--2729[label="0.00317259;5pkt 5fpkt"];
1522--2969[label="0.655629;99pkt 99fpkt"];
1522--3017[label="0.78836;149pkt 149fpkt"];
1522--3027[label="0.145161;18pkt 18fpkt"];
1522--3044[label="0.678112;158pkt 158fpkt"];
1522--3066[label="0.990244;203pkt 203fpkt"];
1522--3129[label="0.96875;124pkt 124fpkt"];
1522--3675[label="0.572917;55pkt 55fpkt"];
1522--3696[label="0.204301;19pkt 19fpkt"];
1522--3712[label="1;85pkt 85fpkt"];
1522--4151[label="0.0418848;8pkt 8fpkt"];
1522--4259[label="0.540816;53pkt 53fpkt"];
1522--4269[label="0.403561;136pkt 136fpkt"];
1522--4295[label="0.166667;12pkt 12fpkt"];
1522--4301[label="0.0232558;1pkt 1fpkt"];
1522--4364[label="0.0505051;5pkt 5fpkt"];
1522--4452[label="0.0104167;1pkt 1fpkt"];
1522--5141[label="0.320388;33pkt 33fpkt"];
1522--5527[label="0.837209;144pkt 144fpkt"];
1522--5616[label="0.235294;4pkt 4fpkt"];
1522--5730[label="0.492754;34pkt 34fpkt"];
1522--6453[label="0.447059;38pkt 38fpkt"];
1522--6879[label="0.666667;32pkt 32fpkt"];
1522--7402[label="0.00918133;12pkt 12fpkt"];
1522--7404[label="0.021374;14pkt 14fpkt"];
1522--7609[label="0.0526316;22pkt 22fpkt"];
1522--7776[label="0.156627;52pkt 52fpkt"];
1522--7877[label="1;2418pkt 2418fpkt"];
1522--7968[label="0.810811;30pkt 30fpkt"];
1522--8177[label="0.655629;99pkt 99fpkt"];
1522--8904[label="0.016;2pkt 2fpkt"];
1522--8940[label="0.0322581;13pkt 13fpkt"];
1522--9548[label="0.0392887;95pkt 95fpkt"];
1522--9586[label="0.0071736;10pkt 10fpkt"];
1522--9823[label="0.453333;136pkt 136fpkt"];
1522--10108[label="0.0379747;24pkt 24fpkt"];
1522--10512[label="0.00082713;2pkt 2fpkt"];
1522--10534[label="0.00295276;3pkt 3fpkt"];
1522--10608[label="0.837209;144pkt 144fpkt"];
1522--11211[label="0.00082713;2pkt 2fpkt"];
1522--11265[label="0.0740281;179pkt 179fpkt"];
1522--11285[label="0.0599669;145pkt 145fpkt"];
1522--11338[label="0.0740281;179pkt 179fpkt"];
1522--11351[label="0.0599669;145pkt 145fpkt"];
1522--11382[label="0.0740281;179pkt 179fpkt"];
1522--11392[label="0.0599669;145pkt 145fpkt"];
1522--11518[label="0.169014;12pkt 12fpkt"];
1522--11531[label="0.0124069;30pkt 30fpkt"];
1522--11560[label="0.366577;136pkt 136fpkt"];
1522--11633[label="0.00625;2pkt 2fpkt"];
1522--11896[label="0.53;53pkt 53fpkt"];
1522--12031[label="0.00831354;7pkt 7fpkt"];
1522--12041[label="0.00082713;2pkt 2fpkt"];
1522--12186[label="0.5;34pkt 34fpkt"];
1522--12207[label="0.0752351;24pkt 24fpkt"];
1522--12288[label="0.0451977;8pkt 8fpkt"];
1522--12362[label="0.588235;10pkt 10fpkt"];
1522--12664[label="0.0335821;18pkt 18fpkt"];
1522--12710[label="0.315789;6pkt 6fpkt"];
1522--12713[label="0.714286;30pkt 30fpkt"];
1522--13097[label="0.83237;144pkt 144fpkt"];
1522--13315[label="1;35pkt 35fpkt"];
1522--13445[label="0.00708215;5pkt 5fpkt"];
1522--13840[label="0.92517;136pkt 136fpkt"];
1522--14389[label="0.990196;202pkt 202fpkt"];
1522--14517[label="0.790698;34pkt 34fpkt"];
1522--14527[label="0.928571;39pkt 39fpkt"];
1522--14874[label="0.320388;33pkt 33fpkt"];
1522--14947[label="0.756098;31pkt 31fpkt"];
1522--15257[label="0.869565;40pkt 40fpkt"];
1522--15670[label="0.114286;4pkt 4fpkt"];
1522--16127[label="0.00793651;1pkt 1fpkt"];
1522--16251[label="0.452229;71pkt 71fpkt"];
1522--16437[label="0.00917431;1pkt 1fpkt"];
1522--16639[label="0.833333;15pkt 15fpkt"];
1522--16750[label="0.0167866;14pkt 14fpkt"];
1522--16924[label="0.0124069;30pkt 30fpkt"];
1522--16939[label="0.366577;136pkt 136fpkt"];
1522--17236[label="0.00831354;7pkt 7fpkt"];
1522--17244[label="0.00082713;2pkt 2fpkt"];
1522--17339[label="0.492754;34pkt 34fpkt"];
1522--17396[label="0.0451977;8pkt 8fpkt"];
1522--17447[label="0.588235;10pkt 10fpkt"];
1522--17634[label="0.0336449;18pkt 18fpkt"];
1522--17662[label="0.333333;6pkt 6fpkt"];
1522--17905[label="0.827586;144pkt 144fpkt"];
1522--18054[label="1;36pkt 36fpkt"];
1522--18130[label="0.00707214;5pkt 5fpkt"];
1522--18727[label="0.990244;203pkt 203fpkt"];
1522--18821[label="0.790698;34pkt 34fpkt"];
1522--19044[label="0.323529;33pkt 33fpkt"];
1522--19096[label="0.75;30pkt 30fpkt"];
1522--19282[label="0.888889;40pkt 40fpkt"];
1522--19857[label="0.00793651;1pkt 1fpkt"];
1522--19930[label="0.452229;71pkt 71fpkt"];
1522--20255[label="0.0168067;14pkt 14fpkt"];
1522--20371[label="0.0124069;30pkt 30fpkt"];
1522--20584[label="0.00082713;2pkt 2fpkt"];
1522--20652[label="0.5;34pkt 34fpkt"];
1522--20722[label="0.5625;9pkt 9fpkt"];
1522--20845[label="0.0335821;18pkt 18fpkt"];
1522--20861[label="0.333333;6pkt 6fpkt"];
1522--21039[label="0.827586;144pkt 144fpkt"];
1522--21154[label="1;35pkt 35fpkt"];
1522--21202[label="0.00708215;5pkt 5fpkt"];
1522--21609[label="0.990196;202pkt 202fpkt"];
1522--21833[label="0.320388;33pkt 33fpkt"];
1522--21865[label="0.75;30pkt 30fpkt"];
1522--21997[label="0.888889;40pkt 40fpkt"];
1522--22410[label="0.00787402;1pkt 1fpkt"];
1522--22705[label="0.0168067;14pkt 14fpkt"];
1577--4284[label="0.0153846;2pkt 2fpkt"];
1577--8385[label="0.21547;39pkt 39fpkt"];
1577--8993[label="0.0190476;2pkt 2fpkt"];
1577--16153[label="0.994475;180pkt 180fpkt"];
1577--19872[label="0.994475;180pkt 180fpkt"];
1577--22417[label="0.994475;180pkt 180fpkt"];
1700--2907[label="0.03125;1pkt 1fpkt"];
1700--2981[label="0.25;8pkt 8fpkt"];
1700--7533[label="1;15pkt 15fpkt"];
1700--8510[label="0.25;8pkt 8fpkt"];
1700--8924[label="0.03125;1pkt 1fpkt"];
1700--9655[label="0.0625;2pkt 2fpkt"];
1700--11265[label="0.15625;5pkt 5fpkt"];
1700--11285[label="0.0625;2pkt 2fpkt"];
1700--11338[label="0.15625;5pkt 5fpkt"];
1700--11351[label="0.0625;2pkt 2fpkt"];
1700--11382[label="0.15625;5pkt 5fpkt"];
1700--11392[label="0.0625;2pkt 2fpkt"];
1700--11835[label="0.96875;31pkt 31fpkt"];
2397--7877[label="0.769231;30pkt 30fpkt"];
2397--7884[label="0.102564;4pkt 4fpkt"];
2397--7968[label="1;37pkt 37fpkt"];
2397--8139[label="0.0512821;2pkt 2fpkt"];
2397--11265[label="0.820513;32pkt 32fpkt"];
2397--11338[label="0.820513;32pkt 32fpkt"];
2397--11382[label="0.820513;32pkt 32fpkt"];
2397--12713[label="1;39pkt 39fpkt"];
2969--2981[label="0.0331126;5pkt 5fpkt"];
2969--3012[label="0.0149254;2pkt 2fpkt"];
2969--3553[label="0.00662252;1pkt 1fpkt"];
2969--6822[label="0.0701754;4pkt 4fpkt"];
2969--7822[label="0.0175439;2pkt 2fpkt"];
2969--7877[label="0.655629;99pkt 99fpkt"];
2969--8177[label="1;151pkt 151fpkt"];
2969--8510[label="0.0331126;5pkt 5fpkt"];
2969--8927[label="0.105691;13pkt 13fpkt"];
2969--9376[label="0.139073;21pkt 21fpkt"];
2969--11265[label="0.013245;2pkt 2fpkt"];
2969--11285[label="0.0596026;9pkt 9fpkt"];
2969--11338[label="0.013245;2pkt 2fpkt"];
2969--11351[label="0.0596026;9pkt 9fpkt"];
2969--11382[label="0.013245;2pkt 2fpkt"];
2969--11392[label="0.0596026;9pkt 9fpkt"];
2981--3034[label="0.0047619;1pkt 1fpkt"];
2981--3049[label="0.0298507;2pkt 2fpkt"];
2981--3253[label="0.0948905;13pkt 13fpkt"];
2981--3494[label="0.00684932;1pkt 1fpkt"];
2981--3508[label="0.00564972;1pkt 1fpkt"];
2981--3681[label="0.120482;10pkt 10fpkt"];
2981--3716[label="0.108696;5pkt 5fpkt"];
2981--4098[label="0.0257511;6pkt 6fpkt"];
2981--4151[label="0.0104712;2pkt 2fpkt"];
2981--4259[label="0.0204082;2pkt 2fpkt"];
2981--4301[label="0.0232558;1pkt 1fpkt"];
2981--4399[label="0.0241935;6pkt 6fpkt"];
2981--4425[label="0.628571;22pkt 22fpkt"];
2981--4452[label="0.0104167;1pkt 1fpkt"];
2981--4488[label="0.0123967;3pkt 3fpkt"];
2981--4908[label="0.0428571;6pkt 6fpkt"];
2981--5035[label="0.0168067;2pkt 2fpkt"];
2981--5141[label="0.572816;59pkt 59fpkt"];
2981--5448[label="0.0138889;1pkt 1fpkt"];
2981--5665[label="0.348837;15pkt 15fpkt"];
2981--5749[label="0.016129;1pkt 1fpkt"];
2981--5755[label="0.00925926;1pkt 1fpkt"];
2981--6377[label="0.575342;42pkt 42fpkt"];
2981--6401[label="0.0843373;7pkt 7fpkt"];
2981--6448[label="0.0847458;5pkt 5fpkt"];
2981--6637[label="0.606742;54pkt 54fpkt"];
2981--6842[label="0.0909091;6pkt 6fpkt"];
2981--7002[label="0.108108;4pkt 4fpkt"];
2981--7157[label="0.129032;4pkt 4fpkt"];
2981--7362[label="0.216418;29pkt 29fpkt"];
2981--7402[label="0.00165017;1pkt 1fpkt"];
2981--7405[label="0.0384615;3pkt 3fpkt"];
2981--8033[label="0.0049505;3pkt 3fpkt"];
2981--8162[label="0.0103627;2pkt 2fpkt"];
2981--8177[label="0.0331126;5pkt 5fpkt"];
2981--8193[label="0.0298507;2pkt 2fpkt"];
2981--8510[label="1;482pkt 482fpkt"];
2981--8569[label="0.108696;5pkt 5fpkt"];
2981--8812[label="0.00165017;1pkt 1fpkt"];
2981--8967[label="0.0740741;2pkt 2fpkt"];
2981--9346[label="0.145833;7pkt 7fpkt"];
2981--9424[label="0.120482;10pkt 10fpkt"];
2981--9548[label="0.0049505;3pkt 3fpkt"];
2981--9652[label="0.00455581;2pkt 2fpkt"];
2981--9724[label="0.00684932;1pkt 1fpkt"];
2981--9766[label="0.0441176;6pkt 6fpkt"];
2981--9844[label="0.348837;15pkt 15fpkt"];
2981--9908[label="0.0948905;13pkt 13fpkt"];
2981--9935[label="0.0123967;3pkt 3fpkt"];
2981--10512[label="0.0346535;21pkt 21fpkt"];
2981--10534[label="0.00330033;2pkt 2fpkt"];
2981--10856[label="0.606742;54pkt 54fpkt"];
2981--11211[label="0.0346535;21pkt 21fpkt"];
2981--11265[label="0.0478548;29pkt 29fpkt"];
2981--11285[label="0.0726073;44pkt 44fpkt"];
2981--11338[label="0.0478548;29pkt 29fpkt"];
2981--11351[label="0.0742574;45pkt 45fpkt"];
2981--11382[label="0.0478548;29pkt 29fpkt"];
2981--11392[label="0.0726073;44pkt 44fpkt"];
2981--11455[label="0.00947867;2pkt 2fpkt"];
2981--11483[label="0.142857;6pkt 6fpkt"];
2981--11633[label="0.00625;2pkt 2fpkt"];
2981--11835[label="0.205882;7pkt 7fpkt"];
2981--11874[label="0.0131579;2pkt 2fpkt"];
2981--11896[label="0.01;1pkt 1fpkt"];
2981--12041[label="0.0346535;21pkt 21fpkt"];
2981--12655[label="0.0115512;7pkt 7fpkt"];
2981--12764[label="0.0888889;4pkt 4fpkt"];
2981--12983[label="0.125;3pkt 3fpkt"];
2981--13078[label="0.0359712;5pkt 5fpkt"];
2981--13417[label="0.0882353;12pkt 12fpkt"];
2981--13445[label="0.0363036;22pkt 22fpkt"];
2981--13454[label="0.0465116;2pkt 2fpkt"];
2981--13532[label="0.00330033;2pkt 2fpkt"];
2981--13571[label="0.0231023;14pkt 14fpkt"];
2981--14009[label="0.0123967;3pkt 3fpkt"];
2981--14264[label="0.00165017;1pkt 1fpkt"];
2981--14363[label="0.00704225;1pkt 1fpkt"];
2981--14591[label="0.0909091;9pkt 9fpkt"];
2981--14681[label="0.030303;2pkt 2fpkt"];
2981--14874[label="0.572816;59pkt 59fpkt"];
2981--14923[label="0.468085;22pkt 22fpkt"];
2981--15210[label="0.0642202;7pkt 7fpkt"];
2981--15418[label="0.0769231;3pkt 3fpkt"];
2981--15426[label="0.00452489;1pkt 1fpkt"];
2981--15849[label="0.0084507;3pkt 3fpkt"];
2981--15930[label="0.015625;2pkt 2fpkt"];
2981--16221[label="0.0377358;2pkt 2fpkt"];
2981--16229[label="0.047619;1pkt 1fpkt"];
2981--16262[label="0.027027;1pkt 1fpkt"];
2981--16437[label="0.00917431;1pkt 1fpkt"];
2981--16622[label="0.526316;20pkt 20fpkt"];
2981--16737[label="0.0454545;1pkt 1fpkt"];
2981--16897[label="0.142857;6pkt 6fpkt"];
2981--17138[label="0.0130719;2pkt 2fpkt"];
2981--17244[label="0.0346535;21pkt 21fpkt"];
2981--17627[label="0.0115512;7pkt 7fpkt"];
2981--17834[label="0.16;4pkt 4fpkt"];
2981--18130[label="0.0363036;22pkt 22fpkt"];
2981--18217[label="0.0231023;14pkt 14fpkt"];
2981--18865[label="0.1;10pkt 10fpkt"];
2981--18919[label="0.0153846;1pkt 1fpkt"];
2981--19044[label="0.568627;58pkt 58fpkt"];
2981--19081[label="0.468085;22pkt 22fpkt"];
2981--19253[label="0.0555556;6pkt 6fpkt"];
2981--19392[label="0.00452489;1pkt 1fpkt"];
2981--19912[label="0.0192308;1pkt 1fpkt"];
2981--20355[label="0.142857;6pkt 6fpkt"];
2981--20514[label="0.0130719;2pkt 2fpkt"];
2981--20584[label="0.0346535;21pkt 21fpkt"];
2981--20838[label="0.0115512;7pkt 7fpkt"];
2981--20985[label="0.16;4pkt 4fpkt"];
2981--21202[label="0.0363036;22pkt 22fpkt"];
2981--21261[label="0.0231023;14pkt 14fpkt"];
2981--21743[label="0.0153846;1pkt 1fpkt"];
2981--21833[label="0.572816;59pkt 59fpkt"];
2981--21856[label="0.478261;22pkt 22fpkt"];
2981--21975[label="0.0555556;6pkt 6fpkt"];
2981--22449[label="0.0377358;2pkt 2fpkt"];
3012--3591[label="0.925373;124pkt 124fpkt"];
3012--4949[label="0.012987;1pkt 1fpkt"];
3012--8177[label="0.0149254;2pkt 2fpkt"];
3012--9791[label="0.0144928;1pkt 1fpkt"];
3012--11265[label="0.00746269;1pkt 1fpkt"];
3012--11285[label="0.00746269;1pkt 1fpkt"];
3012--11338[label="0.00746269;1pkt 1fpkt"];
3012--11351[label="0.00746269;1pkt 1fpkt"];
3012--11382[label="0.00746269;1pkt 1fpkt"];
3012--11392[label="0.00746269;1pkt 1fpkt"];
3012--11510[label="0.012987;1pkt 1fpkt"];
3012--12710[label="0.0526316;1pkt 1fpkt"];
3012--13245[label="0.0465116;2pkt 2fpkt"];
3012--16910[label="0.0128205;1pkt 1fpkt"];
3012--17662[label="0.0555556;1pkt 1fpkt"];
3012--18010[label="0.0454545;2pkt 2fpkt"];
3012--20363[label="0.012987;1pkt 1fpkt"];
3012--20861[label="0.0555556;1pkt 1fpkt"];
3012--21123[label="0.0454545;2pkt 2fpkt"];
3017--4284[label="0.00769231;1pkt 1fpkt"];
3017--4904[label="0.0292398;5pkt 5fpkt"];
3017--5325[label="0.00529101;1pkt 1fpkt"];
3017--5327[label="0.047619;9pkt 9fpkt"];
3017--7697[label="0.021164;4pkt 4fpkt"];
3017--7877[label="0.78836;149pkt 149fpkt"];
3017--9535[label="0.00529101;1pkt 1fpkt"];
3044--4284[label="0.0384615;5pkt 5fpkt"];
3044--4595[label="0.00429185;1pkt 1fpkt"];
3044--7561[label="0.00429185;1pkt 1fpkt"];
3044--7877[label="0.678112;158pkt 158fpkt"];
3044--8442[label="0.0163043;3pkt 3fpkt"];
3044--8993[label="0.047619;5pkt 5fpkt"];
3044--11265[label="0.188841;44pkt 44fpkt"];
3044--11285[label="0.154506;36pkt 36fpkt"];
3044--11338[label="0.188841;44pkt 44fpkt"];
3044--11351[label="0.154506;36pkt 36fpkt"];
3044--11382[label="0.188841;44pkt 44fpkt"];
3044--11392[label="0.154506;36pkt 36fpkt"];
3066--3197[label="0.00487805;1pkt 1fpkt"];
3066--7877[label="0.990244;203pkt 203fpkt"];
3066--8000[label="0.00487805;1pkt 1fpkt"];
3066--9902[label="0.00487805;1pkt 1fpkt"];
3066--11265[label="0.0097561;2pkt 2fpkt"];
3066--11285[label="0.0829268;17pkt 17fpkt"];
3066--11338[label="0.0097561;2pkt 2fpkt"];
3066--11351[label="0.0829268;17pkt 17fpkt"];
3066--11382[label="0.0097561;2pkt 2fpkt"];
3066--11392[label="0.0829268;17pkt 17fpkt"];
3066--14389[label="1;204pkt 204fpkt"];
3066--18727[label="1;205pkt 205fpkt"];
3066--21609[label="1;204pkt 204fpkt"];
3129--7877[label="0.96875;124pkt 124fpkt"];
3129--8000[label="0.0078125;1pkt 1fpkt"];
3129--8730[label="0.0234375;3pkt 3fpkt"];
3129--11265[label="0.40625;52pkt 52fpkt"];
3129--11285[label="0.164062;21pkt 21fpkt"];
3129--11338[label="0.40625;52pkt 52fpkt"];
3129--11351[label="0.164062;21pkt 21fpkt"];
3129--11382[label="0.40625;52pkt 52fpkt"];
3129--11392[label="0.164062;21pkt 21fpkt"];
3129--13840[label="1;128pkt 128fpkt"];
3130--3278[label="0.518519;14pkt 14fpkt"];
3130--7561[label="0.0232558;1pkt 1fpkt"];
3130--8631[label="0.3125;5pkt 5fpkt"];
3130--12389[label="0.976744;42pkt 42fpkt"];
3130--17465[label="0.976744;42pkt 42fpkt"];
3278--3781[label="0.407407;11pkt 11fpkt"];
3278--8631[label="1;16pkt 16fpkt"];
3278--9906[label="0.407407;11pkt 11fpkt"];
3278--11285[label="0.222222;6pkt 6fpkt"];
3278--11351[label="0.222222;6pkt 6fpkt"];
3278--11392[label="0.222222;6pkt 6fpkt"];
3278--12389[label="0.592593;16pkt 16fpkt"];
3278--17465[label="0.592593;16pkt 16fpkt"];
3591--4726[label="0.0148148;2pkt 2fpkt"];
3591--6939[label="0.0147059;1pkt 1fpkt"];
3591--7742[label="0.0296296;4pkt 4fpkt"];
3591--8915[label="0.00813008;1pkt 1fpkt"];
3591--10130[label="0.016129;2pkt 2fpkt"];
3591--11115[label="0.0296296;4pkt 4fpkt"];
3675--3983[label="0.0104167;1pkt 1fpkt"];
3675--5711[label="0.0208333;2pkt 2fpkt"];
3675--6903[label="0.0408163;2pkt 2fpkt"];
3675--7451[label="0.0729167;7pkt 7fpkt"];
3675--7561[label="0.0104167;1pkt 1fpkt"];
3675--7877[label="0.572917;55pkt 55fpkt"];
3675--8119[label="0.0104167;1pkt 1fpkt"];
3675--8313[label="0.0104167;1pkt 1fpkt"];
3675--8395[label="0.0104167;1pkt 1fpkt"];
3675--8442[label="0.0208333;2pkt 2fpkt"];
3675--8683[label="0.0104167;1pkt 1fpkt"];
3675--8760[label="0.0625;6pkt 6fpkt"];
3675--8821[label="0.0208333;2pkt 2fpkt"];
3675--9272[label="0.0520833;5pkt 5fpkt"];
3675--9603[label="0.0104167;1pkt 1fpkt"];
3675--9764[label="0.0104167;1pkt 1fpkt"];
3675--10530[label="0.0104167;1pkt 1fpkt"];
3675--11224[label="0.0104167;1pkt 1fpkt"];
3675--11285[label="0.0208333;2pkt 2fpkt"];
3675--11351[label="0.0208333;2pkt 2fpkt"];
3675--11392[label="0.0208333;2pkt 2fpkt"];
3712--7877[label="1;85pkt 85fpkt"];
3712--11265[label="0.364706;31pkt 31fpkt"];
3712--11338[label="0.364706;31pkt 31fpkt"];
3712--11382[label="0.364706;31pkt 31fpkt"];
3781--4241[label="0.0277778;1pkt 1fpkt"];
3781--4727[label="0.0555556;2pkt 2fpkt"];
3781--7513[label="0.0555556;2pkt 2fpkt"];
3781--8171[label="0.0277778;1pkt 1fpkt"];
3781--8298[label="0.0833333;3pkt 3fpkt"];
3781--8459[label="0.0555556;2pkt 2fpkt"];
3781--8631[label="0.6875;11pkt 11fpkt"];
3781--8699[label="0.0555556;2pkt 2fpkt"];
3781--8919[label="0.0277778;1pkt 1fpkt"];
3781--8963[label="0.0277778;1pkt 1fpkt"];
3781--9906[label="1;27pkt 27fpkt"];
3781--11124[label="0.0555556;2pkt 2fpkt"];
3781--11285[label="0.222222;8pkt 8fpkt"];
3781--11351[label="0.222222;8pkt 8fpkt"];
3781--11392[label="0.222222;8pkt 8fpkt"];
4259--4715[label="0.105263;4pkt 4fpkt"];
4259--7561[label="0.0102041;1pkt 1fpkt"];
4259--7877[label="0.540816;53pkt 53fpkt"];
4259--8510[label="0.0204082;2pkt 2fpkt"];
4259--8875[label="0.0102041;1pkt 1fpkt"];
4259--8924[label="0.0121951;1pkt 1fpkt"];
4259--9072[label="0.111111;1pkt 1fpkt"];
4259--9376[label="0.122449;12pkt 12fpkt"];
4259--11896[label="0.989796;97pkt 97fpkt"];
4269--4698[label="0.00909091;1pkt 1fpkt"];
4269--4930[label="0.0131579;2pkt 2fpkt"];
4269--5623[label="0.0163934;1pkt 1fpkt"];
4269--6326[label="0.0425532;2pkt 2fpkt"];
4269--6888[label="0.0222222;1pkt 1fpkt"];
4269--6890[label="0.0212766;1pkt 1fpkt"];
4269--6892[label="0.0238095;1pkt 1fpkt"];
4269--7451[label="0.0148368;5pkt 5fpkt"];
4269--7456[label="0.00296736;1pkt 1fpkt"];
4269--7464[label="0.0712166;24pkt 24fpkt"];
4269--7515[label="0.0178042;6pkt 6fpkt"];
4269--7606[label="0.0118694;4pkt 4fpkt"];
4269--7655[label="0.00593472;2pkt 2fpkt"];
4269--7709[label="0.00296736;1pkt 1fpkt"];
4269--7777[label="0.0148368;5pkt 5fpkt"];
4269--7869[label="0.0237389;8pkt 8fpkt"];
4269--7877[label="0.403561;136pkt 136fpkt"];
4269--8132[label="0.0178042;6pkt 6fpkt"];
4269--8295[label="0.0178042;6pkt 6fpkt"];
4269--8298[label="0.00890208;3pkt 3fpkt"];
4269--8326[label="0.0100503;2pkt 2fpkt"];
4269--8377[label="0.0377358;2pkt 2fpkt"];
4269--8385[label="0.00296736;1pkt 1fpkt"];
4269--8464[label="0.0158103;4pkt 4fpkt"];
4269--8518[label="0.0136986;1pkt 1fpkt"];
4269--8821[label="0.0445104;15pkt 15fpkt"];
4269--8825[label="0.00296736;1pkt 1fpkt"];
4269--8855[label="0.00593472;2pkt 2fpkt"];
4269--8913[label="0.00296736;1pkt 1fpkt"];
4269--9218[label="0.01;1pkt 1fpkt"];
4269--9386[label="0.00434783;1pkt 1fpkt"];
4269--9550[label="0.0118694;4pkt 4fpkt"];
4269--9693[label="0.015873;2pkt 2fpkt"];
4269--9776[label="0.0267062;9pkt 9fpkt"];
4269--9794[label="0.0196078;1pkt 1fpkt"];
4269--9823[label="1;300pkt 300fpkt"];
4269--10307[label="0.0952381;4pkt 4fpkt"];
4269--10510[label="0.00593472;2pkt 2fpkt"];
4269--10572[label="0.00296736;1pkt 1fpkt"];
4269--10662[label="0.0131579;2pkt 2fpkt"];
4269--10674[label="0.0222222;1pkt 1fpkt"];
4269--10675[label="0.0238095;1pkt 1fpkt"];
4269--10724[label="0.0425532;2pkt 2fpkt"];
4269--11095[label="0.01;1pkt 1fpkt"];
4269--11116[label="0.04;2pkt 2fpkt"];
4269--11130[label="0.0196078;1pkt 1fpkt"];
4269--11560[label="0.997033;336pkt 336fpkt"];
4269--16939[label="0.997033;336pkt 336fpkt"];
4425--4595[label="0.0285714;1pkt 1fpkt"];
4425--4715[label="0.171429;6pkt 6fpkt"];
4425--7561[label="0.0285714;1pkt 1fpkt"];
4425--7777[label="0.0285714;1pkt 1fpkt"];
4425--8510[label="0.628571;22pkt 22fpkt"];
4425--8808[label="0.0285714;1pkt 1fpkt"];
4425--8924[label="0.0571429;2pkt 2fpkt"];
4425--9966[label="0.0285714;1pkt 1fpkt"];
4425--11285[label="0.2;7pkt 7fpkt"];
4425--11351[label="0.2;7pkt 7fpkt"];
4425--11392[label="0.2;7pkt 7fpkt"];
4425--14923[label="1;35pkt 35fpkt"];
4425--19081[label="1;35pkt 35fpkt"];
4425--21856[label="0.971429;34pkt 34fpkt"];
5141--7483[label="0.0194175;2pkt 2fpkt"];
5141--7561[label="0.00970874;1pkt 1fpkt"];
5141--7578[label="0.0194175;2pkt 2fpkt"];
5141--7877[label="0.320388;33pkt 33fpkt"];
5141--8000[label="0.00970874;1pkt 1fpkt"];
5141--8510[label="0.572816;59pkt 59fpkt"];
5141--9550[label="0.0194175;2pkt 2fpkt"];
5141--9655[label="0.0194175;2pkt 2fpkt"];
5141--9726[label="0.00970874;1pkt 1fpkt"];
5141--10951[label="0.0194175;2pkt 2fpkt"];
5141--14874[label="1;103pkt 103fpkt"];
5141--19044[label="1;102pkt 102fpkt"];
5141--21833[label="1;103pkt 103fpkt"];
5166--5665[label="1;1pkt 1fpkt"];
5166--9844[label="1;1pkt 1fpkt"];
5166--9949[label="1;1pkt 1fpkt"];
5166--12066[label="1;1pkt 1fpkt"];
5166--17262[label="1;1pkt 1fpkt"];
5166--20598[label="1;1pkt 1fpkt"];
5377--7561[label="0.0116279;1pkt 1fpkt"];
5377--16576[label="1;86pkt 86fpkt"];
5377--20140[label="0.988372;85pkt 85fpkt"];
5377--22620[label="0.988372;85pkt 85fpkt"];
5527--7451[label="0.0639535;11pkt 11fpkt"];
5527--7561[label="0.00581395;1pkt 1fpkt"];
5527--7877[label="0.837209;144pkt 144fpkt"];
5527--8000[label="0.00581395;1pkt 1fpkt"];
5527--8139[label="0.00769231;1pkt 1fpkt"];
5527--8718[label="0.00581395;1pkt 1fpkt"];
5527--8760[label="0.0232558;4pkt 4fpkt"];
5527--9902[label="0.00581395;1pkt 1fpkt"];
5527--10608[label="1;172pkt 172fpkt"];
5527--10629[label="0.0116279;2pkt 2fpkt"];
5527--11285[label="0.0174419;3pkt 3fpkt"];
5527--11351[label="0.0174419;3pkt 3fpkt"];
5527--11392[label="0.0174419;3pkt 3fpkt"];
5527--13097[label="0.994186;171pkt 171fpkt"];
5527--17905[label="1;172pkt 172fpkt"];
5527--21039[label="1;172pkt 172fpkt"];
5665--6866[label="0.0465116;2pkt 2fpkt"];
5665--8134[label="0.0465116;2pkt 2fpkt"];
5665--8285[label="0.0697674;3pkt 3fpkt"];
5665--8464[label="0.116279;5pkt 5fpkt"];
5665--8510[label="0.348837;15pkt 15fpkt"];
5665--9603[label="0.0232558;1pkt 1fpkt"];
5665--9636[label="0.0465116;2pkt 2fpkt"];
5665--9844[label="1;43pkt 43fpkt"];
5665--9949[label="1;1pkt 1fpkt"];
5665--10271[label="0.0465116;2pkt 2fpkt"];
5665--10661[label="0.0465116;2pkt 2fpkt"];
5665--12066[label="1;1pkt 1fpkt"];
5665--17262[label="1;1pkt 1fpkt"];
5665--20598[label="1;1pkt 1fpkt"];
5730--5759[label="0.0666667;1pkt 1fpkt"];
5730--7567[label="0.0289855;2pkt 2fpkt"];
5730--7877[label="0.492754;34pkt 34fpkt"];
5730--8941[label="0.0289855;2pkt 2fpkt"];
5730--10663[label="0.0144928;1pkt 1fpkt"];
5730--10948[label="0.0289855;2pkt 2fpkt"];
5730--11285[label="0.173913;12pkt 12fpkt"];
5730--11351[label="0.173913;12pkt 12fpkt"];
5730--11392[label="0.173913;12pkt 12fpkt"];
5730--12186[label="1;68pkt 68fpkt"];
5730--17339[label="1;69pkt 69fpkt"];
5730--20652[label="1;68pkt 68fpkt"];
5803--7157[label="0.190476;4pkt 4fpkt"];
5803--9972[label="1;21pkt 21fpkt"];
5803--12983[label="0.238095;5pkt 5fpkt"];
5803--16288[label="0.125;1pkt 1fpkt"];
5803--16729[label="0.190476;4pkt 4fpkt"];
5803--17834[label="0.238095;5pkt 5fpkt"];
5803--19951[label="0.125;1pkt 1fpkt"];
5803--20985[label="0.238095;5pkt 5fpkt"];
5803--22473[label="0.222222;2pkt 2fpkt"];
5889--9966[label="0.00561798;1pkt 1fpkt"];
5889--10039[label="1;176pkt 176fpkt"];
6377--7372[label="0.109589;8pkt 8fpkt"];
6377--8510[label="0.328767;24pkt 24fpkt"];
6377--9355[label="0.0273973;2pkt 2fpkt"];
6377--9398[label="0.0136986;1pkt 1fpkt"];
6377--9553[label="0.0136986;1pkt 1fpkt"];
6377--9726[label="0.0547945;4pkt 4fpkt"];
6377--11285[label="0.0821918;6pkt 6fpkt"];
6377--11351[label="0.0821918;6pkt 6fpkt"];
6377--11392[label="0.0821918;6pkt 6fpkt"];
6453--7099[label="0.0285714;1pkt 1fpkt"];
6453--7877[label="0.447059;38pkt 38fpkt"];
6637--7655[label="0.011236;1pkt 1fpkt"];
6637--8295[label="0.0337079;3pkt 3fpkt"];
6637--9355[label="0.0449438;4pkt 4fpkt"];
6637--10510[label="0.0449438;4pkt 4fpkt"];
6637--10856[label="1;89pkt 89fpkt"];
6879--7561[label="0.0208333;1pkt 1fpkt"];
6879--7877[label="0.666667;32pkt 32fpkt"];
6879--8000[label="0.0208333;1pkt 1fpkt"];
6879--11285[label="0.291667;14pkt 14fpkt"];
6879--11351[label="0.291667;14pkt 14fpkt"];
6879--11392[label="0.291667;14pkt 14fpkt"];
7157--9365[label="0.0645161;2pkt 2fpkt"];
7157--9972[label="0.190476;4pkt 4fpkt"];
7157--10817[label="0.0322581;1pkt 1fpkt"];
7190--7561[label="0.0106383;1pkt 1fpkt"];
7190--12871[label="1;94pkt 94fpkt"];
7533--9655[label="0.133333;2pkt 2fpkt"];
7533--11835[label="1;15pkt 15fpkt"];
7877--7968[label="0.810811;30pkt 30fpkt"];
7877--8177[label="0.655629;99pkt 99fpkt"];
7877--8904[label="0.016;2pkt 2fpkt"];
7877--8940[label="0.0322581;13pkt 13fpkt"];
7877--9548[label="0.0392887;95pkt 95fpkt"];
7877--9586[label="0.0071736;10pkt 10fpkt"];
7877--9823[label="0.453333;136pkt 136fpkt"];
7877--10108[label="0.0379747;24pkt 24fpkt"];
7877--10512[label="0.00082713;2pkt 2fpkt"];
7877--10534[label="0.00295276;3pkt 3fpkt"];
7877--10608[label="0.837209;144pkt 144fpkt"];
7877--11211[label="0.00082713;2pkt 2fpkt"];
7877--11265[label="0.0740281;179pkt 179fpkt"];
7877--11285[label="0.0599669;145pkt 145fpkt"];
7877--11338[label="0.0740281;179pkt 179fpkt"];
7877--11351[label="0.0599669;145pkt 145fpkt"];
7877--11382[label="0.0740281;179pkt 179fpkt"];
7877--11392[label="0.0599669;145pkt 145fpkt"];
7877--11518[label="0.169014;12pkt 12fpkt"];
7877--11531[label="0.0124069;30pkt 30fpkt"];
7877--11560[label="0.366577;136pkt 136fpkt"];
7877--11633[label="0.00625;2pkt 2fpkt"];
7877--11896[label="0.53;53pkt 53fpkt"];
7877--12031[label="0.00831354;7pkt 7fpkt"];
7877--12041[label="0.00082713;2pkt 2fpkt"];
7877--12186[label="0.5;34pkt 34fpkt"];
7877--12207[label="0.0752351;24pkt 24fpkt"];
7877--12288[label="0.0451977;8pkt 8fpkt"];
7877--12362[label="0.588235;10pkt 10fpkt"];
7877--12664[label="0.0335821;18pkt 18fpkt"];
7877--12710[label="0.315789;6pkt 6fpkt"];
7877--12713[label="0.714286;30pkt 30fpkt"];
7877--13097[label="0.83237;144pkt 144fpkt"];
7877--13315[label="1;35pkt 35fpkt"];
7877--13445[label="0.00708215;5pkt 5fpkt"];
7877--13840[label="0.92517;136pkt 136fpkt"];
7877--14389[label="0.990196;202pkt 202fpkt"];
7877--14517[label="0.790698;34pkt 34fpkt"];
7877--14527[label="0.928571;39pkt 39fpkt"];
7877--14874[label="0.320388;33pkt 33fpkt"];
7877--14947[label="0.756098;31pkt 31fpkt"];
7877--15257[label="0.869565;40pkt 40fpkt"];
7877--15670[label="0.114286;4pkt 4fpkt"];
7877--16127[label="0.00793651;1pkt 1fpkt"];
7877--16251[label="0.452229;71pkt 71fpkt"];
7877--16437[label="0.00917431;1pkt 1fpkt"];
7877--16639[label="0.833333;15pkt 15fpkt"];
7877--16750[label="0.0167866;14pkt 14fpkt"];
7877--16924[label="0.0124069;30pkt 30fpkt"];
7877--16939[label="0.366577;136pkt 136fpkt"];
7877--17236[label="0.00831354;7pkt 7fpkt"];
7877--17244[label="0.00082713;2pkt 2fpkt"];
7877--17339[label="0.492754;34pkt 34fpkt"];
7877--17396[label="0.0451977;8pkt 8fpkt"];
7877--17447[label="0.588235;10pkt 10fpkt"];
7877--17634[label="0.0336449;18pkt 18fpkt"];
7877--17662[label="0.333333;6pkt 6fpkt"];
7877--17905[label="0.827586;144pkt 144fpkt"];
7877--18054[label="1;36pkt 36fpkt"];
7877--18130[label="0.00707214;5pkt 5fpkt"];
7877--18727[label="0.990244;203pkt 203fpkt"];
7877--18821[label="0.790698;34pkt 34fpkt"];
7877--19044[label="0.323529;33pkt 33fpkt"];
7877--19096[label="0.75;30pkt 30fpkt"];
7877--19282[label="0.888889;40pkt 40fpkt"];
7877--19857[label="0.00793651;1pkt 1fpkt"];
7877--19930[label="0.452229;71pkt 71fpkt"];
7877--20255[label="0.0168067;14pkt 14fpkt"];
7877--20371[label="0.0124069;30pkt 30fpkt"];
7877--20584[label="0.00082713;2pkt 2fpkt"];
7877--20652[label="0.5;34pkt 34fpkt"];
7877--20722[label="0.5625;9pkt 9fpkt"];
7877--20845[label="0.0335821;18pkt 18fpkt"];
7877--20861[label="0.333333;6pkt 6fpkt"];
7877--21039[label="0.827586;144pkt 144fpkt"];
7877--21154[label="1;35pkt 35fpkt"];
7877--21202[label="0.00708215;5pkt 5fpkt"];
7877--21609[label="0.990196;202pkt 202fpkt"];
7877--21833[label="0.320388;33pkt 33fpkt"];
7877--21865[label="0.75;30pkt 30fpkt"];
7877--21997[label="0.888889;40pkt 40fpkt"];
7877--22410[label="0.00787402;1pkt 1fpkt"];
7877--22705[label="0.0168067;14pkt 14fpkt"];
7968--8139[label="0.027027;1pkt 1fpkt"];
7968--11265[label="0.864865;32pkt 32fpkt"];
7968--11338[label="0.864865;32pkt 32fpkt"];
7968--11382[label="0.864865;32pkt 32fpkt"];
7968--12713[label="1;37pkt 37fpkt"];
8177--8510[label="0.0331126;5pkt 5fpkt"];
8177--8927[label="0.105691;13pkt 13fpkt"];
8177--9376[label="0.139073;21pkt 21fpkt"];
8177--11265[label="0.013245;2pkt 2fpkt"];
8177--11285[label="0.0596026;9pkt 9fpkt"];
8177--11338[label="0.013245;2pkt 2fpkt"];
8177--11351[label="0.0596026;9pkt 9fpkt"];
8177--11382[label="0.013245;2pkt 2fpkt"];
8177--11392[label="0.0596026;9pkt 9fpkt"];
8510--8569[label="0.108696;5pkt 5fpkt"];
8510--8812[label="0.00207469;1pkt 1fpkt"];
8510--8967[label="0.0740741;2pkt 2fpkt"];
8510--9346[label="0.145833;7pkt 7fpkt"];
8510--9424[label="0.120482;10pkt 10fpkt"];
8510--9548[label="0.00622407;3pkt 3fpkt"];
8510--9652[label="0.00455581;2pkt 2fpkt"];
8510--9724[label="0.00684932;1pkt 1fpkt"];
8510--9766[label="0.0441176;6pkt 6fpkt"];
8510--9844[label="0.348837;15pkt 15fpkt"];
8510--9908[label="0.0948905;13pkt 13fpkt"];
8510--9935[label="0.0123967;3pkt 3fpkt"];
8510--10512[label="0.033195;16pkt 16fpkt"];
8510--10534[label="0.00414938;2pkt 2fpkt"];
8510--11211[label="0.033195;16pkt 16fpkt"];
8510--11265[label="0.060166;29pkt 29fpkt"];
8510--11285[label="0.0912863;44pkt 44fpkt"];
8510--11338[label="0.060166;29pkt 29fpkt"];
8510--11351[label="0.093361;45pkt 45fpkt"];
8510--11382[label="0.060166;29pkt 29fpkt"];
8510--11392[label="0.0912863;44pkt 44fpkt"];
8510--11455[label="0.00947867;2pkt 2fpkt"];
8510--11633[label="0.00625;2pkt 2fpkt"];
8510--11835[label="0.205882;7pkt 7fpkt"];
8510--11874[label="0.0131579;2pkt 2fpkt"];
8510--11896[label="0.01;1pkt 1fpkt"];
8510--12041[label="0.033195;16pkt 16fpkt"];
8510--12655[label="0.0145228;7pkt 7fpkt"];
8510--12764[label="0.0888889;4pkt 4fpkt"];
8510--12983[label="0.125;3pkt 3fpkt"];
8510--13078[label="0.0359712;5pkt 5fpkt"];
8510--13417[label="0.0882353;12pkt 12fpkt"];
8510--13445[label="0.033195;16pkt 16fpkt"];
8510--13454[label="0.0465116;2pkt 2fpkt"];
8510--13532[label="0.00414938;2pkt 2fpkt"];
8510--13571[label="0.0290456;14pkt 14fpkt"];
8510--14009[label="0.0123967;3pkt 3fpkt"];
8510--14264[label="0.00207469;1pkt 1fpkt"];
8510--14363[label="0.00704225;1pkt 1fpkt"];
8510--14591[label="0.0909091;9pkt 9fpkt"];
8510--14681[label="0.030303;2pkt 2fpkt"];
8510--14874[label="0.572816;59pkt 59fpkt"];
8510--14923[label="0.468085;22pkt 22fpkt"];
8510--15210[label="0.0642202;7pkt 7fpkt"];
8510--15418[label="0.0769231;3pkt 3fpkt"];
8510--15426[label="0.00452489;1pkt 1fpkt"];
8510--15849[label="0.0084507;3pkt 3fpkt"];
8510--15930[label="0.015625;2pkt 2fpkt"];
8510--16221[label="0.0377358;2pkt 2fpkt"];
8510--16229[label="0.047619;1pkt 1fpkt"];
8510--16622[label="0.526316;20pkt 20fpkt"];
8510--16737[label="0.0454545;1pkt 1fpkt"];
8510--17138[label="0.0130719;2pkt 2fpkt"];
8510--17244[label="0.033195;16pkt 16fpkt"];
8510--17627[label="0.0145228;7pkt 7fpkt"];
8510--17834[label="0.16;4pkt 4fpkt"];
8510--18130[label="0.033195;16pkt 16fpkt"];
8510--18217[label="0.0290456;14pkt 14fpkt"];
8510--18865[label="0.1;10pkt 10fpkt"];
8510--18919[label="0.0153846;1pkt 1fpkt"];
8510--19044[label="0.568627;58pkt 58fpkt"];
8510--19081[label="0.468085;22pkt 22fpkt"];
8510--19253[label="0.0555556;6pkt 6fpkt"];
8510--19392[label="0.00452489;1pkt 1fpkt"];
8510--19912[label="0.0192308;1pkt 1fpkt"];
8510--20514[label="0.0130719;2pkt 2fpkt"];
8510--20584[label="0.033195;16pkt 16fpkt"];
8510--20838[label="0.0145228;7pkt 7fpkt"];
8510--20985[label="0.16;4pkt 4fpkt"];
8510--21202[label="0.033195;16pkt 16fpkt"];
8510--21261[label="0.0290456;14pkt 14fpkt"];
8510--21743[label="0.0153846;1pkt 1fpkt"];
8510--21833[label="0.572816;59pkt 59fpkt"];
8510--21856[label="0.478261;22pkt 22fpkt"];
8510--21975[label="0.0555556;6pkt 6fpkt"];
8510--22449[label="0.0377358;2pkt 2fpkt"];
8631--9906[label="0.6875;11pkt 11fpkt"];
8631--11285[label="0.375;6pkt 6fpkt"];
8631--11351[label="0.375;6pkt 6fpkt"];
8631--11392[label="0.375;6pkt 6fpkt"];
8631--12389[label="0.3125;5pkt 5fpkt"];
8631--17465[label="0.3125;5pkt 5fpkt"];
9823--10307[label="0.0952381;4pkt 4fpkt"];
9823--10572[label="0.00333333;1pkt 1fpkt"];
9823--10662[label="0.0131579;2pkt 2fpkt"];
9823--10674[label="0.0222222;1pkt 1fpkt"];
9823--10675[label="0.0238095;1pkt 1fpkt"];
9823--10724[label="0.0425532;2pkt 2fpkt"];
9823--11095[label="0.01;1pkt 1fpkt"];
9823--11116[label="0.04;2pkt 2fpkt"];
9823--11130[label="0.0196078;1pkt 1fpkt"];
9823--11560[label="0.996667;299pkt 299fpkt"];
9823--16939[label="0.996667;299pkt 299fpkt"];
9844--9949[label="1;1pkt 1fpkt"];
9844--10271[label="0.0465116;2pkt 2fpkt"];
9844--10661[label="0.0465116;2pkt 2fpkt"];
9844--12066[label="1;1pkt 1fpkt"];
9844--17262[label="1;1pkt 1fpkt"];
9844--20598[label="1;1pkt 1fpkt"];
9906--11124[label="0.0740741;2pkt 2fpkt"];
9906--11285[label="0.296296;8pkt 8fpkt"];
9906--11351[label="0.296296;8pkt 8fpkt"];
9906--11392[label="0.296296;8pkt 8fpkt"];
9949--12066[label="1;1pkt 1fpkt"];
9949--17262[label="1;1pkt 1fpkt"];
9949--20598[label="1;1pkt 1fpkt"];
9972--12983[label="0.238095;5pkt 5fpkt"];
9972--16288[label="0.125;1pkt 1fpkt"];
9972--16729[label="0.190476;4pkt 4fpkt"];
9972--17834[label="0.238095;5pkt 5fpkt"];
9972--19951[label="0.125;1pkt 1fpkt"];
9972--20985[label="0.238095;5pkt 5fpkt"];
9972--22473[label="0.222222;2pkt 2fpkt"];
10608--10629[label="0.0116279;2pkt 2fpkt"];
10608--11285[label="0.0174419;3pkt 3fpkt"];
10608--11351[label="0.0174419;3pkt 3fpkt"];
10608--11392[label="0.0174419;3pkt 3fpkt"];
10608--13097[label="0.994186;171pkt 171fpkt"];
10608--17905[label="1;172pkt 172fpkt"];
10608--21039[label="1;172pkt 172fpkt"];
11483--16897[label="1;42pkt 42fpkt"];
11483--20355[label="1;42pkt 42fpkt"];
11560--16939[label="1;371pkt 371fpkt"];
12066--17262[label="1;1pkt 1fpkt"];
12066--20598[label="1;1pkt 1fpkt"];
12186--17339[label="1;68pkt 68fpkt"];
12186--20652[label="1;68pkt 68fpkt"];
12362--17447[label="1;17pkt 17fpkt"];
12362--20722[label="1;16pkt 16fpkt"];
12389--17465[label="1;101pkt 101fpkt"];
12710--17662[label="1;18pkt 18fpkt"];
12710--20861[label="1;18pkt 18fpkt"];
12983--17834[label="1;24pkt 24fpkt"];
12983--20985[label="1;24pkt 24fpkt"];
13097--17905[label="1;173pkt 173fpkt"];
13097--21039[label="1;173pkt 173fpkt"];
13315--18054[label="1;35pkt 35fpkt"];
13315--21154[label="1;35pkt 35fpkt"];
14389--18727[label="1;204pkt 204fpkt"];
14389--21609[label="1;204pkt 204fpkt"];
14517--18821[label="1;43pkt 43fpkt"];
14874--19044[label="1;102pkt 102fpkt"];
14874--21833[label="1;103pkt 103fpkt"];
14923--19081[label="1;47pkt 47fpkt"];
14923--21856[label="1;46pkt 46fpkt"];
14947--19096[label="1;40pkt 40fpkt"];
14947--21865[label="1;40pkt 40fpkt"];
15257--19282[label="1;45pkt 45fpkt"];
15257--21997[label="1;45pkt 45fpkt"];
16153--19872[label="1;271pkt 271fpkt"];
16153--22417[label="1;271pkt 271fpkt"];
16251--19930[label="1;157pkt 157fpkt"];
16288--19951[label="1;8pkt 8fpkt"];
16288--22473[label="1;8pkt 8fpkt"];
16576--20140[label="1;90pkt 90fpkt"];
16576--22620[label="1;90pkt 90fpkt"];
16897--20355[label="1;42pkt 42fpkt"];
17262--20598[label="1;1pkt 1fpkt"];
17339--20652[label="1;68pkt 68fpkt"];
17447--20722[label="1;16pkt 16fpkt"];
17662--20861[label="1;18pkt 18fpkt"];
17834--20985[label="1;25pkt 25fpkt"];
17905--21039[label="1;174pkt 174fpkt"];
18054--21154[label="1;35pkt 35fpkt"];
18727--21609[label="1;204pkt 204fpkt"];
19044--21833[label="1;102pkt 102fpkt"];
19081--21856[label="1;46pkt 46fpkt"];
19096--21865[label="1;40pkt 40fpkt"];
19282--21997[label="1;45pkt 45fpkt"];
19872--22417[label="1;271pkt 271fpkt"];
19951--22473[label="1;8pkt 8fpkt"];
20140--22620[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="210.87.113.102" dst_port="80"/>
      <filter dst_ip="210.87.115.98" dst_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
7062[label="169.6.177.130;d;157pkt 157fpkt", shape=diamond, color=yellow];
7330[label="201.66.228.107;s;152pkt 152fpkt", shape=diamond, color=yellow];
10806[label="169.6.177.130;d;157pkt 157fpkt", shape=hexagon, color=black];
10917[label="201.66.228.107;s;152pkt 152fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.66.228.107:*, 169.6.177.130:80}[94.3396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1909%)&lt;BR/&gt; 0: (0.647249%)&lt;BR/&gt; 11023: (0.323625%)&lt;BR/&gt; 11022: (0.323625%)&lt;BR/&gt; 11021: (0.323625%)&gt;];
}
7062--7330[label="0.986842;150pkt 150fpkt"];
7062--9584[label="0.00636943;1pkt 1fpkt"];
7062--9887[label="0.00636943;1pkt 1fpkt"];
7062--10806[label="1;157pkt 157fpkt"];
7062--10917[label="0.986842;150pkt 150fpkt"];
7330--10806[label="0.986842;150pkt 150fpkt"];
7330--10917[label="1;152pkt 152fpkt"];
10806--10917[label="0.986842;150pkt 150fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.177.130" dst_port="80" src_ip="201.66.228.107"/>
    </slice>
    <from sec="1191992966" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
7182[label="216.5.149.2;d;74pkt 74fpkt", shape=diamond, color=yellow];
10879[label="216.5.149.2;d;74pkt 74fpkt", shape=hexagon, color=black];
15548[label="172.130.240.184;96pkt 96fpkt", shape=pentagon, color=darkviolet];
19473[label="172.130.240.184;96pkt 96fpkt", shape=invtriangle, color=brown];
22131[label="172.130.240.184;97pkt 97fpkt", shape=invhouse, color=bisque];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.240.184:443, 216.5.149.2:*}[81.4433%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (44.0503%)&lt;BR/&gt; 80: (5.94966%)&lt;BR/&gt; 1890: (0.572082%)&lt;BR/&gt; 1889: (0.572082%)&lt;BR/&gt; 1888: (0.572082%)&gt;];
}
7182--10879[label="1;74pkt 74fpkt"];
7182--15548[label="1;74pkt 74fpkt"];
7182--19473[label="1;74pkt 74fpkt"];
7182--22131[label="1;74pkt 74fpkt"];
10879--15548[label="1;74pkt 74fpkt"];
10879--19473[label="1;74pkt 74fpkt"];
10879--22131[label="1;74pkt 74fpkt"];
15548--19473[label="1;96pkt 96fpkt"];
15548--22131[label="1;96pkt 96fpkt"];
19473--22131[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="216.5.149.2" src_ip="172.130.240.184" src_port="443"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
7252[label="32.131.33.3;d;18pkt 18fpkt", shape=diamond, color=yellow];
10896[label="32.131.33.3;d;18pkt 18fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.160.203:25, 32.131.33.3:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 13929: (2.77778%)&lt;BR/&gt; 13825: (2.77778%)&lt;BR/&gt; 13773: (2.77778%)&lt;BR/&gt; 13709: (2.77778%)&gt;];
}
7252--10896[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="32.131.33.3" src_ip="169.6.160.203" src_port="25"/>
    </slice>
    <from sec="1191993143" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
7329[label="201.66.228.107;d;152pkt 152fpkt", shape=diamond, color=yellow];
10916[label="201.66.228.107;d;152pkt 152fpkt", shape=hexagon, color=black];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.177.130:80, 201.66.228.107:*}[98.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3421%)&lt;BR/&gt; 53: (0.657895%)&lt;BR/&gt; 11023: (0.328947%)&lt;BR/&gt; 11022: (0.328947%)&lt;BR/&gt; 11021: (0.328947%)&gt;];
}
7329--10916[label="1;152pkt 152fpkt"];
7329--11318[label="0.0131579;2pkt 2fpkt"];
7329--11372[label="0.0131579;2pkt 2fpkt"];
7329--11399[label="0.0131579;2pkt 2fpkt"];
7329--12217[label="0.00657895;1pkt 1fpkt"];
7329--17356[label="0.00657895;1pkt 1fpkt"];
7329--20662[label="0.00657895;1pkt 1fpkt"];
10916--11318[label="0.0131579;2pkt 2fpkt"];
10916--11372[label="0.0131579;2pkt 2fpkt"];
10916--11399[label="0.0131579;2pkt 2fpkt"];
10916--12217[label="0.00657895;1pkt 1fpkt"];
10916--17356[label="0.00657895;1pkt 1fpkt"];
10916--20662[label="0.00657895;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.66.228.107" src_ip="169.6.177.130" src_port="80"/>
    </slice>
    <from sec="1191993190" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
7342[label="222.157.107.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
10920[label="222.157.107.23;d;1pkt 1fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.132.202:29101, 222.157.107.23:1583}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29101: (50%)&lt;BR/&gt; 1583: (50%)&gt;];
}
7342--10920[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.157.107.23" dst_port="1583" src_ip="172.130.132.202" src_port="29101"/>
    </slice>
    <from sec="1191993195" usec="0"/>
    <to sec="1191993203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.77697,3.16541,901,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="53759384" usec="0"/>
    <to sec="51908088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.77697,3.16541,901,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1191992401" usec="0"/>
      <to sec="1191993229" usec="0"/>
    </slice>
    <from sec="1905424272" usec="0"/>
    <to sec="52364312" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.78.35.0"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.57.39.0"/>
    </slice>
    <from sec="1191992417" usec="0"/>
    <to sec="1191993277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,004,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
4204[label="201.39.224.185;d;188pkt 188fpkt", shape=diamond, color=yellow];
4929[label="200.173.77.132;s;209pkt 209fpkt", shape=diamond, color=yellow];
9374[label="201.39.224.185;d;147pkt 147fpkt", shape=hexagon, color=black];
14334[label="200.173.77.132;226pkt 226fpkt", shape=pentagon, color=darkviolet];
18689[label="200.173.77.132;226pkt 226fpkt", shape=invtriangle, color=brown];
21581[label="200.173.77.132;227pkt 227fpkt", shape=invhouse, color=bisque];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.77.132:445, 201.39.224.185:*}[44.3478%]&lt;BR/&gt;{200.173.77.132:139, 201.39.224.185:*}[43.0435%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.3066%)&lt;BR/&gt; 139: (24.2845%)&lt;BR/&gt; 0: (0.817661%)&lt;BR/&gt; 2792: (0.490597%)&lt;BR/&gt; 2695: (0.490597%)&gt;];
}
4204--4929[label="0.984043;185pkt 185fpkt"];
4204--9374[label="1;147pkt 147fpkt"];
4204--10143[label="0.00531915;1pkt 1fpkt"];
4204--11406[label="0.0185185;1pkt 1fpkt"];
4204--11699[label="0.00531915;1pkt 1fpkt"];
4204--14334[label="0.984043;185pkt 185fpkt"];
4204--16844[label="0.0185185;1pkt 1fpkt"];
4204--18689[label="0.984043;185pkt 185fpkt"];
4204--21581[label="0.984043;185pkt 185fpkt"];
4929--7045[label="0.00492611;1pkt 1fpkt"];
4929--9374[label="0.979592;144pkt 144fpkt"];
4929--10796[label="0.00492611;1pkt 1fpkt"];
4929--14334[label="0.995215;208pkt 208fpkt"];
4929--18689[label="0.995215;208pkt 208fpkt"];
4929--21581[label="1;209pkt 209fpkt"];
9374--10143[label="0.00680272;1pkt 1fpkt"];
9374--11406[label="0.0185185;1pkt 1fpkt"];
9374--11699[label="0.00680272;1pkt 1fpkt"];
9374--14334[label="0.979592;144pkt 144fpkt"];
9374--16844[label="0.0185185;1pkt 1fpkt"];
9374--18689[label="0.979592;144pkt 144fpkt"];
9374--21581[label="0.979592;144pkt 144fpkt"];
14334--18689[label="1;226pkt 226fpkt"];
14334--21581[label="1;226pkt 226fpkt"];
18689--21581[label="1;226pkt 226fpkt"];
</description>
    <slice>
      <filter dst_ip="201.39.224.185" src_ip="200.173.77.132" src_port="445"/>
      <filter dst_ip="201.39.224.185" src_ip="200.173.77.132" src_port="139"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.199.70.0"/>
    </slice>
    <from sec="1191992700" usec="0"/>
    <to sec="1191992733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.16.91.0"/>
    </slice>
    <from sec="1191992979" usec="0"/>
    <to sec="1191993132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.232.101.0"/>
    </slice>
    <from sec="1191992720" usec="0"/>
    <to sec="1191992813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.39.235.0"/>
    </slice>
    <from sec="1191993008" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.38.219.1"/>
    </slice>
    <from sec="1191992488" usec="0"/>
    <to sec="1191992522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.133.74.2"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.143.164.2"/>
    </slice>
    <from sec="1191992514" usec="0"/>
    <to sec="1191992778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.94.194.2"/>
    </slice>
    <from sec="1191993042" usec="0"/>
    <to sec="1191993064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
6257[label="169.6.196.2;s;142pkt 142fpkt", shape=diamond, color=yellow];
11486[label="169.6.196.2;148pkt 148fpkt", shape=pentagon, color=darkviolet];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.196.2:0, *:0}[99.3289%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6552%)&lt;BR/&gt; 52552: (0.172414%)&lt;BR/&gt; 80: (0.172414%)&gt;];
}
6257--6817[label="0.00704225;1pkt 1fpkt"];
6257--7443[label="0.00729927;1pkt 1fpkt"];
6257--7561[label="0.00704225;1pkt 1fpkt"];
6257--8000[label="0.00704225;1pkt 1fpkt"];
6257--8145[label="0.00877193;1pkt 1fpkt"];
6257--9271[label="0.011236;1pkt 1fpkt"];
6257--9902[label="0.00704225;1pkt 1fpkt"];
6257--9966[label="0.00704225;1pkt 1fpkt"];
6257--10243[label="0.00819672;1pkt 1fpkt"];
6257--10979[label="0.00704225;1pkt 1fpkt"];
6257--11486[label="0.992958;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.196.2"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.205.2"/>
    </slice>
    <from sec="1191993239" usec="0"/>
    <to sec="1191993257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.1.3"/>
    </slice>
    <from sec="1191992665" usec="0"/>
    <to sec="1191992785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.169.156.3"/>
    </slice>
    <from sec="1191993241" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.236.208.3"/>
    </slice>
    <from sec="1191993015" usec="0"/>
    <to sec="1191993035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.125.223.3"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.64.74.4"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.213.76.4"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.174.103.4"/>
    </slice>
    <from sec="1191992866" usec="0"/>
    <to sec="1191992908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.114.4"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.53.157.4"/>
    </slice>
    <from sec="1191993265" usec="0"/>
    <to sec="1191993284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.0.235.4"/>
    </slice>
    <from sec="1191992591" usec="0"/>
    <to sec="1191992624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.167.42.5"/>
    </slice>
    <from sec="1191992748" usec="0"/>
    <to sec="1191992808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.85.45.5"/>
    </slice>
    <from sec="1191992527" usec="0"/>
    <to sec="1191992568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.34.66.5"/>
    </slice>
    <from sec="1191992883" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.210.84.5"/>
    </slice>
    <from sec="1191992870" usec="0"/>
    <to sec="1191992920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.71.112.5"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.140.130.5"/>
    </slice>
    <from sec="1191992996" usec="0"/>
    <to sec="1191993019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.108.151.5"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.197.166.5"/>
    </slice>
    <from sec="1191992824" usec="0"/>
    <to sec="1191992870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.208.198.5"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.121.3.6"/>
    </slice>
    <from sec="1191993008" usec="0"/>
    <to sec="1191993108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.74.49.6"/>
    </slice>
    <from sec="1191992433" usec="0"/>
    <to sec="1191992497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.76.50.6"/>
    </slice>
    <from sec="1191992561" usec="0"/>
    <to sec="1191992568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.152.80.6"/>
    </slice>
    <from sec="1191992792" usec="0"/>
    <to sec="1191992803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.124.82.6"/>
    </slice>
    <from sec="1191992850" usec="0"/>
    <to sec="1191992984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.91.6"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.52.101.6"/>
    </slice>
    <from sec="1191992990" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.104.117.6"/>
    </slice>
    <from sec="1191993139" usec="0"/>
    <to sec="1191993239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.53.134.6"/>
    </slice>
    <from sec="1191992962" usec="0"/>
    <to sec="1191993037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.49.161.6"/>
    </slice>
    <from sec="1191992421" usec="0"/>
    <to sec="1191993291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.236.212.6"/>
    </slice>
    <from sec="1191993016" usec="0"/>
    <to sec="1191993039" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.189.9.7"/>
    </slice>
    <from sec="1191992567" usec="0"/>
    <to sec="1191992692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.78.35.7"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.57.39.7"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.64.59.7"/>
    </slice>
    <from sec="1191992671" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.118.65.7"/>
    </slice>
    <from sec="1191992468" usec="0"/>
    <to sec="1191993164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.174.88.7"/>
    </slice>
    <from sec="1191992938" usec="0"/>
    <to sec="1191992965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.215.165.7"/>
    </slice>
    <from sec="1191993175" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.78.169.7"/>
    </slice>
    <from sec="1191992824" usec="0"/>
    <to sec="1191992856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.131.172.7"/>
    </slice>
    <from sec="1191992755" usec="0"/>
    <to sec="1191992782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.194.23.8"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.229.50.8"/>
    </slice>
    <from sec="1191992504" usec="0"/>
    <to sec="1191992517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.215.68.8"/>
    </slice>
    <from sec="1191992527" usec="0"/>
    <to sec="1191992547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.34.88.8"/>
    </slice>
    <from sec="1191992735" usec="0"/>
    <to sec="1191992770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.60.98.8"/>
    </slice>
    <from sec="1191993161" usec="0"/>
    <to sec="1191993246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.215.122.8"/>
    </slice>
    <from sec="1191992938" usec="0"/>
    <to sec="1191993207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.23.128.8"/>
    </slice>
    <from sec="1191992632" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.98.216.8"/>
    </slice>
    <from sec="1191992860" usec="0"/>
    <to sec="1191992869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.168.111.9"/>
    </slice>
    <from sec="1191992793" usec="0"/>
    <to sec="1191992827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.144.9"/>
    </slice>
    <from sec="1191993003" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.138.195.9"/>
    </slice>
    <from sec="1191992682" usec="0"/>
    <to sec="1191992830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.132.217.9"/>
    </slice>
    <from sec="1191993162" usec="0"/>
    <to sec="1191993193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.82.225.9"/>
    </slice>
    <from sec="1191992559" usec="0"/>
    <to sec="1191992626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.78.166.10"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.90.206.10"/>
    </slice>
    <from sec="1191993137" usec="0"/>
    <to sec="1191993168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.220.33.11"/>
    </slice>
    <from sec="1191992579" usec="0"/>
    <to sec="1191992943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.48.11"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.105.69.11"/>
    </slice>
    <from sec="1191992985" usec="0"/>
    <to sec="1191993017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.235.73.11"/>
    </slice>
    <from sec="1191992780" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.223.109.11"/>
    </slice>
    <from sec="1191992924" usec="0"/>
    <to sec="1191993063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.210.149.11"/>
    </slice>
    <from sec="1191993037" usec="0"/>
    <to sec="1191993040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.106.152.11"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.168.156.11"/>
    </slice>
    <from sec="1191992747" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.176.11"/>
    </slice>
    <from sec="1191992424" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.40.214.11"/>
    </slice>
    <from sec="1191992706" usec="0"/>
    <to sec="1191992745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.39.247.11"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.167.53.12"/>
    </slice>
    <from sec="1191993169" usec="0"/>
    <to sec="1191993195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.199.80.12"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.213.92.12"/>
    </slice>
    <from sec="1191992888" usec="0"/>
    <to sec="1191992917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.94.103.12"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.39.190.12"/>
    </slice>
    <from sec="1191993160" usec="0"/>
    <to sec="1191993280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.140.194.12"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.84.9.13"/>
    </slice>
    <from sec="1191992410" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.175.85.13"/>
    </slice>
    <from sec="1191993254" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.240.88.13"/>
    </slice>
    <from sec="1191993216" usec="0"/>
    <to sec="1191993245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.11.136.13"/>
    </slice>
    <from sec="1191992887" usec="0"/>
    <to sec="1191992904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.178.159.13"/>
    </slice>
    <from sec="1191992795" usec="0"/>
    <to sec="1191993161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.214.178.13"/>
    </slice>
    <from sec="1191993132" usec="0"/>
    <to sec="1191993182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.80.2.14"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1984[label="200.173.64.14;s;552pkt 552fpkt", shape=diamond, color=yellow];
6230[label="206.35.146.188;d;75pkt 75fpkt", shape=diamond, color=yellow];
11774[label="200.173.64.14;593pkt 593fpkt", shape=pentagon, color=darkviolet];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.64.14:*, *:53}[45.5312%]&lt;BR/&gt;{200.173.64.14:0, *:0}[29.3423%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (28.5246%)&lt;BR/&gt; 53: (21.1475%)&lt;BR/&gt; 5667: (9.09836%)&lt;BR/&gt; 88: (5.32787%)&lt;BR/&gt; 4669: (0.204918%)&gt;];
}
1984--6230[label="0.906667;68pkt 68fpkt"];
1984--11337[label="0.0380435;21pkt 21fpkt"];
1984--11381[label="0.0380435;21pkt 21fpkt"];
1984--11774[label="1;552pkt 552fpkt"];
6230--11774[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="200.173.64.14"/>
      <filter src_ip="200.173.64.14"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.94.192.14"/>
    </slice>
    <from sec="1191992964" usec="0"/>
    <to sec="1191993000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.140.11.16"/>
    </slice>
    <from sec="1191992785" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.197.11.16"/>
    </slice>
    <from sec="1191993238" usec="0"/>
    <to sec="1191993271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.42.49.16"/>
    </slice>
    <from sec="1191992981" usec="0"/>
    <to sec="1191993001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.169.69.16"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.207.88.16"/>
    </slice>
    <from sec="1191992940" usec="0"/>
    <to sec="1191992975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.90.16"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.129.102.16"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.85.189.16"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.15.40.17"/>
    </slice>
    <from sec="1191992877" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.49.17"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.130.59.17"/>
    </slice>
    <from sec="1191992917" usec="0"/>
    <to sec="1191992953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.38.67.17"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191992993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.105.85.17"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.128.105.17"/>
    </slice>
    <from sec="1191992687" usec="0"/>
    <to sec="1191992704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.70.182.17"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.112.203.17"/>
    </slice>
    <from sec="1191992812" usec="0"/>
    <to sec="1191992822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.200.211.17"/>
    </slice>
    <from sec="1191993079" usec="0"/>
    <to sec="1191993123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.160.244.17"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.201.19.18"/>
    </slice>
    <from sec="1191992577" usec="0"/>
    <to sec="1191992695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.35.18"/>
    </slice>
    <from sec="1191992795" usec="0"/>
    <to sec="1191992840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.54.43.18"/>
    </slice>
    <from sec="1191993064" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.18"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.37.155.18"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.2.174.18"/>
    </slice>
    <from sec="1191992560" usec="0"/>
    <to sec="1191992588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.104.180.18"/>
    </slice>
    <from sec="1191992425" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.227.219.18"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.185.5.19"/>
    </slice>
    <from sec="1191992588" usec="0"/>
    <to sec="1191992952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.98.19"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.64.101.19"/>
    </slice>
    <from sec="1191993231" usec="0"/>
    <to sec="1191993246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.171.105.19"/>
    </slice>
    <from sec="1191992917" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.178.133.19"/>
    </slice>
    <from sec="1191993008" usec="0"/>
    <to sec="1191993044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.146.19"/>
    </slice>
    <from sec="1191992875" usec="0"/>
    <to sec="1191992890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.108.147.19"/>
    </slice>
    <from sec="1191993135" usec="0"/>
    <to sec="1191993203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.19"/>
    </slice>
    <from sec="1191992758" usec="0"/>
    <to sec="1191992777" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.71.190.19"/>
    </slice>
    <from sec="1191993112" usec="0"/>
    <to sec="1191993140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.53.20"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.23.118.20"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.219.133.20"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.155.20"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.173.162.20"/>
    </slice>
    <from sec="1191993087" usec="0"/>
    <to sec="1191993118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.149.24.21"/>
    </slice>
    <from sec="1191993241" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.58.56.21"/>
    </slice>
    <from sec="1191992958" usec="0"/>
    <to sec="1191992995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.17.92.21"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.75.97.21"/>
    </slice>
    <from sec="1191993069" usec="0"/>
    <to sec="1191993072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.71.179.21"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.136.191.21"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.70.233.21"/>
    </slice>
    <from sec="1191993124" usec="0"/>
    <to sec="1191993189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.68.2.22"/>
    </slice>
    <from sec="1191992587" usec="0"/>
    <to sec="1191992624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.107.22"/>
    </slice>
    <from sec="1191992421" usec="0"/>
    <to sec="1191993061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.17.242.22"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.41.23"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.150.165.23"/>
    </slice>
    <from sec="1191992757" usec="0"/>
    <to sec="1191992806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.18.177.23"/>
    </slice>
    <from sec="1191992424" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.157.23.24"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.248.24"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.51.91.25"/>
    </slice>
    <from sec="1191992849" usec="0"/>
    <to sec="1191992895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.193.192.25"/>
    </slice>
    <from sec="1191992949" usec="0"/>
    <to sec="1191992988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.157.235.25"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.127.244.25"/>
    </slice>
    <from sec="1191992817" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.50.28.26"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.26"/>
    </slice>
    <from sec="1191992507" usec="0"/>
    <to sec="1191992579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.22.160.27"/>
    </slice>
    <from sec="1191993225" usec="0"/>
    <to sec="1191993268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.52.249.27"/>
    </slice>
    <from sec="1191992988" usec="0"/>
    <to sec="1191992996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.197.40.28"/>
    </slice>
    <from sec="1191992730" usec="0"/>
    <to sec="1191992772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.8.104.28"/>
    </slice>
    <from sec="1191993278" usec="0"/>
    <to sec="1191993291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.100.124.28"/>
    </slice>
    <from sec="1191992815" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.50.158.28"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.147.244.28"/>
    </slice>
    <from sec="1191992918" usec="0"/>
    <to sec="1191992941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.219.250.28"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.47.29"/>
    </slice>
    <from sec="1191992796" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.28.71.29"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.202.83.29"/>
    </slice>
    <from sec="1191993012" usec="0"/>
    <to sec="1191993082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.34.105.29"/>
    </slice>
    <from sec="1191992636" usec="0"/>
    <to sec="1191992684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.91.226.29"/>
    </slice>
    <from sec="1191992864" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.222.139.30"/>
    </slice>
    <from sec="1191992743" usec="0"/>
    <to sec="1191992757" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.51.156.30"/>
    </slice>
    <from sec="1191993053" usec="0"/>
    <to sec="1191993057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.46.3.31"/>
    </slice>
    <from sec="1191992950" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.180.16.31"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.150.26.31"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.129.64.31"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.230.74.31"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.225.123.31"/>
    </slice>
    <from sec="1191992849" usec="0"/>
    <to sec="1191992893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.229.126.31"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.208.185.31"/>
    </slice>
    <from sec="1191993031" usec="0"/>
    <to sec="1191993057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.44.230.31"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.10.32"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.80.49.32"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191992500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.152.32"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.177.166.32"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.232.208.32"/>
    </slice>
    <from sec="1191992663" usec="0"/>
    <to sec="1191992713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.209.234.32"/>
    </slice>
    <from sec="1191992718" usec="0"/>
    <to sec="1191992761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.49.141.33"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.69.191.33"/>
    </slice>
    <from sec="1191993019" usec="0"/>
    <to sec="1191993109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.124.194.33"/>
    </slice>
    <from sec="1191993261" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.11.225.33"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.90.9.34"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.32.199.34"/>
    </slice>
    <from sec="1191992829" usec="0"/>
    <to sec="1191992878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.243.209.34"/>
    </slice>
    <from sec="1191992718" usec="0"/>
    <to sec="1191992752" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.37.24.35"/>
    </slice>
    <from sec="1191992948" usec="0"/>
    <to sec="1191993011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.105.69.35"/>
    </slice>
    <from sec="1191993141" usec="0"/>
    <to sec="1191993193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.24.105.35"/>
    </slice>
    <from sec="1191992965" usec="0"/>
    <to sec="1191992995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.67.121.35"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.210.195.35"/>
    </slice>
    <from sec="1191992879" usec="0"/>
    <to sec="1191992924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.17.36"/>
    </slice>
    <from sec="1191992694" usec="0"/>
    <to sec="1191992733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.151.42.36"/>
    </slice>
    <from sec="1191992933" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.134.109.36"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.169.118.36"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.73.210.36"/>
    </slice>
    <from sec="1191992831" usec="0"/>
    <to sec="1191992865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.80.216.36"/>
    </slice>
    <from sec="1191993113" usec="0"/>
    <to sec="1191993160" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.37.37"/>
    </slice>
    <from sec="1191993258" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.54.99.37"/>
    </slice>
    <from sec="1191992641" usec="0"/>
    <to sec="1191992702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.164.104.37"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.14.148.37"/>
    </slice>
    <from sec="1191993005" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.29.196.37"/>
    </slice>
    <from sec="1191993092" usec="0"/>
    <to sec="1191993119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.179.244.37"/>
    </slice>
    <from sec="1191992471" usec="0"/>
    <to sec="1191992502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.9.38"/>
    </slice>
    <from sec="1191993069" usec="0"/>
    <to sec="1191993121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.40.17.38"/>
    </slice>
    <from sec="1191992905" usec="0"/>
    <to sec="1191992936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.171.43.38"/>
    </slice>
    <from sec="1191992804" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.15.69.38"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.181.115.38"/>
    </slice>
    <from sec="1191992828" usec="0"/>
    <to sec="1191992858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.165.182.38"/>
    </slice>
    <from sec="1191992739" usec="0"/>
    <to sec="1191992766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.168.16.39"/>
    </slice>
    <from sec="1191993191" usec="0"/>
    <to sec="1191993242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.210.81.39"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191992763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.124.150.39"/>
    </slice>
    <from sec="1191992584" usec="0"/>
    <to sec="1191992749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.158.110.40"/>
    </slice>
    <from sec="1191993074" usec="0"/>
    <to sec="1191993216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.228.183.40"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.158.110.41"/>
    </slice>
    <from sec="1191993088" usec="0"/>
    <to sec="1191993095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.203.120.41"/>
    </slice>
    <from sec="1191992779" usec="0"/>
    <to sec="1191992830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.150.41"/>
    </slice>
    <from sec="1191992430" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.237.5.42"/>
    </slice>
    <from sec="1191993110" usec="0"/>
    <to sec="1191993182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.59.19.42"/>
    </slice>
    <from sec="1191993031" usec="0"/>
    <to sec="1191993065" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.125.96.42"/>
    </slice>
    <from sec="1191993109" usec="0"/>
    <to sec="1191993223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.100.211.42"/>
    </slice>
    <from sec="1191992810" usec="0"/>
    <to sec="1191992840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.136.226.42"/>
    </slice>
    <from sec="1191992574" usec="0"/>
    <to sec="1191992631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.53.41.43"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.152.43"/>
    </slice>
    <from sec="1191992985" usec="0"/>
    <to sec="1191993024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.46.44"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.25.91.44"/>
    </slice>
    <from sec="1191993258" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.192.100.44"/>
    </slice>
    <from sec="1191992899" usec="0"/>
    <to sec="1191992926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.38.138.44"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.153.141.44"/>
    </slice>
    <from sec="1191992698" usec="0"/>
    <to sec="1191992743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.77.230.44"/>
    </slice>
    <from sec="1191992743" usec="0"/>
    <to sec="1191992816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.76.20.45"/>
    </slice>
    <from sec="1191992891" usec="0"/>
    <to sec="1191992932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.30.90.45"/>
    </slice>
    <from sec="1191992940" usec="0"/>
    <to sec="1191992973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.200.158.45"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.214.85.46"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.213.102.46"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.194.4.47"/>
    </slice>
    <from sec="1191992835" usec="0"/>
    <to sec="1191992930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.90.35.47"/>
    </slice>
    <from sec="1191992839" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.231.180.47"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.124.196.47"/>
    </slice>
    <from sec="1191992946" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.179.218.47"/>
    </slice>
    <from sec="1191993117" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.84.48"/>
    </slice>
    <from sec="1191992800" usec="0"/>
    <to sec="1191992989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.40.100.48"/>
    </slice>
    <from sec="1191992640" usec="0"/>
    <to sec="1191993277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.152.210.48"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.240.252.48"/>
    </slice>
    <from sec="1191993252" usec="0"/>
    <to sec="1191993267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.152.40.49"/>
    </slice>
    <from sec="1191993162" usec="0"/>
    <to sec="1191993180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.218.140.49"/>
    </slice>
    <from sec="1191992939" usec="0"/>
    <to sec="1191992981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.130.187.49"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.124.7.50"/>
    </slice>
    <from sec="1191992922" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.71.10.50"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.135.40.50"/>
    </slice>
    <from sec="1191993261" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.81.115.50"/>
    </slice>
    <from sec="1191992694" usec="0"/>
    <to sec="1191992725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.230.157.51"/>
    </slice>
    <from sec="1191992681" usec="0"/>
    <to sec="1191992743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.230.53.52"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.89.145.52"/>
    </slice>
    <from sec="1191992753" usec="0"/>
    <to sec="1191992779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.157.243.52"/>
    </slice>
    <from sec="1191992730" usec="0"/>
    <to sec="1191992894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.14.251.52"/>
    </slice>
    <from sec="1191992867" usec="0"/>
    <to sec="1191992895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.38.4.53"/>
    </slice>
    <from sec="1191993174" usec="0"/>
    <to sec="1191993190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.182.48.53"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.244.90.53"/>
    </slice>
    <from sec="1191992960" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.206.146.53"/>
    </slice>
    <from sec="1191993179" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.2.1.54"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.109.100.54"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.145.54"/>
    </slice>
    <from sec="1191992530" usec="0"/>
    <to sec="1191992658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.211.55.55"/>
    </slice>
    <from sec="1191992475" usec="0"/>
    <to sec="1191992860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.144.76.55"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.148.55"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.25.11.56"/>
    </slice>
    <from sec="1191992416" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.68.29.56"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.108.40.56"/>
    </slice>
    <from sec="1191992454" usec="0"/>
    <to sec="1191992457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.79.50.56"/>
    </slice>
    <from sec="1191993285" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.200.113.56"/>
    </slice>
    <from sec="1191992991" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.5.219.56"/>
    </slice>
    <from sec="1191992913" usec="0"/>
    <to sec="1191992939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.104.7.57"/>
    </slice>
    <from sec="1191992562" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.86.59.58"/>
    </slice>
    <from sec="1191993217" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.153.58"/>
    </slice>
    <from sec="1191993099" usec="0"/>
    <to sec="1191993255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.115.59"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.37.228.59"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.229.233.59"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.176.108.60"/>
    </slice>
    <from sec="1191993230" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.89.156.60"/>
    </slice>
    <from sec="1191993079" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.109.197.60"/>
    </slice>
    <from sec="1191993069" usec="0"/>
    <to sec="1191993113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.122.61"/>
    </slice>
    <from sec="1191992791" usec="0"/>
    <to sec="1191993279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.54.147.61"/>
    </slice>
    <from sec="1191993144" usec="0"/>
    <to sec="1191993159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.59.234.61"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.69.243.61"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.204.91.62"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.142.62"/>
    </slice>
    <from sec="1191992577" usec="0"/>
    <to sec="1191992660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.222.0.63"/>
    </slice>
    <from sec="1191993103" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="164.48.25.63"/>
    </slice>
    <from sec="1191992825" usec="0"/>
    <to sec="1191992835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.152.65.63"/>
    </slice>
    <from sec="1191992911" usec="0"/>
    <to sec="1191992951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.133.116.63"/>
    </slice>
    <from sec="1191992952" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.77.187.63"/>
    </slice>
    <from sec="1191993127" usec="0"/>
    <to sec="1191993149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.27.130.64"/>
    </slice>
    <from sec="1191992671" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.10.136.64"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191992976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.125.194.64"/>
    </slice>
    <from sec="1191992949" usec="0"/>
    <to sec="1191992995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.140.111.65"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
6790[label="172.159.125.65;s;41pkt 41fpkt", shape=diamond, color=yellow];
12873[label="172.159.125.65;43pkt 43fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.125.65:19992, *:*}[84.0909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19992: (42.2619%)&lt;BR/&gt; 443: (5.35714%)&lt;BR/&gt; 80: (2.38095%)&lt;BR/&gt; 65214: (1.19048%)&lt;BR/&gt; 61191: (1.19048%)&gt;];
}
6790--12873[label="0.97561;40pkt 40fpkt"];
</description>
    <slice>
      <filter src_ip="172.159.125.65" src_port="19992"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.127.65"/>
    </slice>
    <from sec="1191993241" usec="0"/>
    <to sec="1191993266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.153.162.65"/>
    </slice>
    <from sec="1191992972" usec="0"/>
    <to sec="1191992999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.50.195.65"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.4.212.65"/>
    </slice>
    <from sec="1191992837" usec="0"/>
    <to sec="1191992857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.228.57.66"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.84.84.66"/>
    </slice>
    <from sec="1191992970" usec="0"/>
    <to sec="1191993058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.133.66"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.124.205.66"/>
    </slice>
    <from sec="1191992918" usec="0"/>
    <to sec="1191992960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.114.245.66"/>
    </slice>
    <from sec="1191992894" usec="0"/>
    <to sec="1191992928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.15.3.67"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191993194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.0.76.67"/>
    </slice>
    <from sec="1191992993" usec="0"/>
    <to sec="1191993015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.208.128.67"/>
    </slice>
    <from sec="1191992991" usec="0"/>
    <to sec="1191993013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.204.67"/>
    </slice>
    <from sec="1191993121" usec="0"/>
    <to sec="1191993138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.209.209.67"/>
    </slice>
    <from sec="1191992509" usec="0"/>
    <to sec="1191992540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.213.67"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.140.111.68"/>
    </slice>
    <from sec="1191992449" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.108.154.68"/>
    </slice>
    <from sec="1191993017" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.162.236.68"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.17.69"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.162.127.69"/>
    </slice>
    <from sec="1191992779" usec="0"/>
    <to sec="1191992797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.155.69"/>
    </slice>
    <from sec="1191993098" usec="0"/>
    <to sec="1191993113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.106.164.69"/>
    </slice>
    <from sec="1191992993" usec="0"/>
    <to sec="1191993014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.148.179.69"/>
    </slice>
    <from sec="1191992751" usec="0"/>
    <to sec="1191992785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.43.202.69"/>
    </slice>
    <from sec="1191992960" usec="0"/>
    <to sec="1191993008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.244.224.69"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.49.16.70"/>
    </slice>
    <from sec="1191992805" usec="0"/>
    <to sec="1191992811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.218.99.70"/>
    </slice>
    <from sec="1191992686" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.192.181.70"/>
    </slice>
    <from sec="1191993104" usec="0"/>
    <to sec="1191993138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.208.17.71"/>
    </slice>
    <from sec="1191992692" usec="0"/>
    <to sec="1191992751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.7.35.71"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.32.197.71"/>
    </slice>
    <from sec="1191992722" usec="0"/>
    <to sec="1191992742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.10.184.72"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.112.42.73"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.179.73"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.50.207.73"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.33.221.73"/>
    </slice>
    <from sec="1191992453" usec="0"/>
    <to sec="1191992464" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.0.225.73"/>
    </slice>
    <from sec="1191993115" usec="0"/>
    <to sec="1191993145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.43.74"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.181.193.74"/>
    </slice>
    <from sec="1191993044" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.183.219.74"/>
    </slice>
    <from sec="1191992964" usec="0"/>
    <to sec="1191993003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.158.224.74"/>
    </slice>
    <from sec="1191992569" usec="0"/>
    <to sec="1191992585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.88.17.75"/>
    </slice>
    <from sec="1191993273" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.161.116.75"/>
    </slice>
    <from sec="1191992550" usec="0"/>
    <to sec="1191992593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.113.160.75"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.79.204.75"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.227.231.75"/>
    </slice>
    <from sec="1191992808" usec="0"/>
    <to sec="1191992889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.202.32.76"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.170.49.76"/>
    </slice>
    <from sec="1191993257" usec="0"/>
    <to sec="1191993286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.58.130.76"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.138.77"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.72.189.77"/>
    </slice>
    <from sec="1191992669" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.146.189.77"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
1483[label="219.13.213.77;s;4pkt 4fpkt", shape=diamond, color=yellow];
13145[label="219.13.213.77;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17936[label="219.13.213.77;3pkt 3fpkt", shape=invtriangle, color=brown];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.13.213.77:80, 201.75.184.12:2087}[25%]&lt;BR/&gt;{219.13.213.77:80, 201.75.184.12:2088}[25%]&lt;BR/&gt;{219.13.213.77:80, 169.6.115.87:2204}[25%]&lt;BR/&gt;{219.13.213.77:80, 169.6.115.87:2205}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2205: (15%)&lt;BR/&gt; 2204: (15%)&lt;BR/&gt; 2088: (15%)&lt;BR/&gt; 2087: (5%)&gt;];
}
1483--13145[label="1;3pkt 3fpkt"];
1483--17936[label="1;3pkt 3fpkt"];
13145--17936[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.115.87" dst_port="2205" src_ip="219.13.213.77" src_port="80"/>
      <filter dst_ip="169.6.115.87" dst_port="2204" src_ip="219.13.213.77" src_port="80"/>
      <filter dst_ip="201.75.184.12" dst_port="2088" src_ip="219.13.213.77" src_port="80"/>
      <filter dst_ip="201.75.184.12" dst_port="2087" src_ip="219.13.213.77" src_port="80"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.146.219.77"/>
    </slice>
    <from sec="1191993027" usec="0"/>
    <to sec="1191993090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.194.227.77"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.50.48.78"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.169.88.78"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.211.93.78"/>
    </slice>
    <from sec="1191992499" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.18.147.78"/>
    </slice>
    <from sec="1191993144" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.85.47.79"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.46.91.79"/>
    </slice>
    <from sec="1191992548" usec="0"/>
    <to sec="1191992832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
3397[label="210.177.38.66;d;185pkt 185fpkt", shape=diamond, color=yellow];
8775[label="210.177.38.66;d;152pkt 152fpkt", shape=hexagon, color=black];
13186[label="61.211.133.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17970[label="61.211.133.79;2pkt 2fpkt", shape=invtriangle, color=brown];
18102[label="209.166.52.88;1pkt 1fpkt", shape=invtriangle, color=brown];
21089[label="61.211.133.79;2pkt 2fpkt", shape=invhouse, color=bisque];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 210.177.38.66:*}[86.4865%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (42.7114%)&lt;BR/&gt; 0: (14.5773%)&lt;BR/&gt; 1702: (0.728863%)&lt;BR/&gt; 4930: (0.291545%)&lt;BR/&gt; 4928: (0.291545%)&gt;];
}
3397--8775[label="1;152pkt 152fpkt"];
3397--13186[label="1;1pkt 1fpkt"];
3397--17970[label="1;2pkt 2fpkt"];
3397--18102[label="1;1pkt 1fpkt"];
3397--21089[label="1;2pkt 2fpkt"];
8775--13186[label="1;1pkt 1fpkt"];
8775--17970[label="1;2pkt 2fpkt"];
8775--18102[label="1;1pkt 1fpkt"];
8775--21089[label="1;2pkt 2fpkt"];
13186--17970[label="1;1pkt 1fpkt"];
13186--21089[label="1;1pkt 1fpkt"];
17970--21089[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.177.38.66" src_port="445"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.4.80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.55.80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.152.80"/>
    </slice>
    <from sec="1191992799" usec="0"/>
    <to sec="1191992840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.84.194.80"/>
    </slice>
    <from sec="1191993136" usec="0"/>
    <to sec="1191993194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.125.112.81"/>
    </slice>
    <from sec="1191992800" usec="0"/>
    <to sec="1191992821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.81"/>
    </slice>
    <from sec="1191992762" usec="0"/>
    <to sec="1191992825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.217.241.81"/>
    </slice>
    <from sec="1191992948" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.208.73.82"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.42.199.82"/>
    </slice>
    <from sec="1191993024" usec="0"/>
    <to sec="1191993041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.41.83"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.197.93.83"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.227.111.83"/>
    </slice>
    <from sec="1191992605" usec="0"/>
    <to sec="1191992681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.170.203.83"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
7069[label="180.49.1.84;s;6pkt 6fpkt", shape=diamond, color=yellow];
13298[label="180.49.1.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.1.84:4565, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4565: (50%)&lt;BR/&gt; 4386: (14.2857%)&lt;BR/&gt; 50324: (7.14286%)&lt;BR/&gt; 2322: (7.14286%)&lt;BR/&gt; 2210: (7.14286%)&gt;];
}
7069--13298[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="180.49.1.84" src_port="4565"/>
    </slice>
    <from sec="1191992980" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.199.26.84"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.27.43.84"/>
    </slice>
    <from sec="1191992599" usec="0"/>
    <to sec="1191992603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.80.71.84"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.41.81.84"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.127.84"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
1998[label="169.6.74.135;d;372pkt 372fpkt", shape=diamond, color=yellow];
13323[label="213.1.151.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.6.74.135:30903}[75.2688%]&lt;BR/&gt;{*:0, 169.6.74.135:0}[23.6559%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30903: (37.6676%)&lt;BR/&gt; 0: (23.5925%)&lt;BR/&gt; 16275: (1.07239%)&lt;BR/&gt; 11275: (0.670241%)&lt;BR/&gt; 23676: (0.536193%)&gt;];
}
1998--13323[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.74.135" dst_port="30903"/>
      <filter dst_ip="169.6.74.135"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.44.161.84"/>
    </slice>
    <from sec="1191992497" usec="0"/>
    <to sec="1191993004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.85"/>
    </slice>
    <from sec="1191993031" usec="0"/>
    <to sec="1191993044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.220.85"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.5.78.86"/>
    </slice>
    <from sec="1191992568" usec="0"/>
    <to sec="1191992634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.227.89.86"/>
    </slice>
    <from sec="1191992990" usec="0"/>
    <to sec="1191993020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.183.97.86"/>
    </slice>
    <from sec="1191992423" usec="0"/>
    <to sec="1191992465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.115.86"/>
    </slice>
    <from sec="1191992979" usec="0"/>
    <to sec="1191992982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.170.177.86"/>
    </slice>
    <from sec="1191992421" usec="0"/>
    <to sec="1191992457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.96.32.87"/>
    </slice>
    <from sec="1191992822" usec="0"/>
    <to sec="1191992865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.106.54.87"/>
    </slice>
    <from sec="1191993007" usec="0"/>
    <to sec="1191993009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.144.87"/>
    </slice>
    <from sec="1191992449" usec="0"/>
    <to sec="1191992696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.67.242.87"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.180.244.87"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.166.52.88"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.153.83.88"/>
    </slice>
    <from sec="1191992984" usec="0"/>
    <to sec="1191992996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.127.145.88"/>
    </slice>
    <from sec="1191993260" usec="0"/>
    <to sec="1191993277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.75.183.88"/>
    </slice>
    <from sec="1191992661" usec="0"/>
    <to sec="1191993255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.184.211.88"/>
    </slice>
    <from sec="1191993007" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.66.107.89"/>
    </slice>
    <from sec="1191992773" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.144.89"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.177.152.89"/>
    </slice>
    <from sec="1191992613" usec="0"/>
    <to sec="1191992631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.106.178.89"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.78.6.90"/>
    </slice>
    <from sec="1191992854" usec="0"/>
    <to sec="1191992893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.9.38.90"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.171.88.90"/>
    </slice>
    <from sec="1191992769" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.106.224.90"/>
    </slice>
    <from sec="1191992419" usec="0"/>
    <to sec="1191992533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.83.240.90"/>
    </slice>
    <from sec="1191992921" usec="0"/>
    <to sec="1191992959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.244.24.91"/>
    </slice>
    <from sec="1191993155" usec="0"/>
    <to sec="1191993184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.72.55.91"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.27.87.91"/>
    </slice>
    <from sec="1191993228" usec="0"/>
    <to sec="1191993244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.87.109.91"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.163.144.91"/>
    </slice>
    <from sec="1191992997" usec="0"/>
    <to sec="1191993026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.244.91"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.124.183.92"/>
    </slice>
    <from sec="1191992686" usec="0"/>
    <to sec="1191992813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.46.93"/>
    </slice>
    <from sec="1191992672" usec="0"/>
    <to sec="1191992702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.167.196.93"/>
    </slice>
    <from sec="1191993105" usec="0"/>
    <to sec="1191993153" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.146.210.93"/>
    </slice>
    <from sec="1191993123" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.165.70.94"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.96.99.94"/>
    </slice>
    <from sec="1191992547" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.90.123.94"/>
    </slice>
    <from sec="1191993024" usec="0"/>
    <to sec="1191993097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.39.204.94"/>
    </slice>
    <from sec="1191992669" usec="0"/>
    <to sec="1191993051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.29.118.95"/>
    </slice>
    <from sec="1191992488" usec="0"/>
    <to sec="1191993234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.244.141.95"/>
    </slice>
    <from sec="1191992804" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.46.80.96"/>
    </slice>
    <from sec="1191992553" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.105.88.96"/>
    </slice>
    <from sec="1191992793" usec="0"/>
    <to sec="1191992822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.25.147.96"/>
    </slice>
    <from sec="1191992867" usec="0"/>
    <to sec="1191992937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.78.231.96"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.11.98"/>
    </slice>
    <from sec="1191992761" usec="0"/>
    <to sec="1191992822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_645{
style=filled;
color=gray75;
3229[label="62.36.36.26;d;2pkt 2fpkt", shape=diamond, color=yellow];
13610[label="172.130.34.98;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat645[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.34.98:25, *:*}[88.8889%]&lt;BR/&gt;{*:*, 62.36.36.26:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (45%)&lt;BR/&gt; 54489: (10%)&lt;BR/&gt; 60282: (5%)&lt;BR/&gt; 54452: (5%)&lt;BR/&gt; 53556: (5%)&gt;];
}
3229--13610[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="62.36.36.26"/>
      <filter src_ip="172.130.34.98" src_port="25"/>
    </slice>
    <from sec="1191992609" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.10.74.98"/>
    </slice>
    <from sec="1191992961" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.33.145.98"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.155.98"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.123.160.98"/>
    </slice>
    <from sec="1191992664" usec="0"/>
    <to sec="1191992694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.107.167.98"/>
    </slice>
    <from sec="1191993072" usec="0"/>
    <to sec="1191993114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_651{
style=filled;
color=gray75;
1127[label="200.173.77.168;d;910pkt 910fpkt", shape=diamond, color=yellow];
1256[label="172.159.192.68;d;297pkt 297fpkt", shape=diamond, color=yellow];
1799[label="170.36.139.106;s;8pkt 8fpkt", shape=diamond, color=yellow];
1832[label="209.50.120.148;s;141pkt 141fpkt", shape=diamond, color=yellow];
1867[label="209.50.28.103;s;94pkt 94fpkt", shape=diamond, color=yellow];
1879[label="52.58.130.81;s;77pkt 77fpkt", shape=diamond, color=yellow];
2820[label="52.58.130.101;s;135pkt 135fpkt", shape=diamond, color=yellow];
3117[label="211.162.167.98;s;54pkt 54fpkt", shape=diamond, color=yellow];
3364[label="209.50.28.100;s;78pkt 78fpkt", shape=diamond, color=yellow];
3630[label="4.34.1.24;s;6pkt 6fpkt", shape=diamond, color=yellow];
4153[label="210.203.141.138;s;2pkt 2fpkt", shape=diamond, color=yellow];
4234[label="39.134.95.230;s;6pkt 6fpkt", shape=diamond, color=yellow];
4600[label="206.2.202.197;s;1pkt 1fpkt", shape=diamond, color=yellow];
5031[label="200.173.70.174;d;5pkt 5fpkt", shape=diamond, color=yellow];
5200[label="210.203.144.144;s;8pkt 8fpkt", shape=diamond, color=yellow];
5355[label="60.57.62.2;s;5pkt 5fpkt", shape=diamond, color=yellow];
5451[label="200.173.71.71;d;87pkt 87fpkt", shape=diamond, color=yellow];
5465[label="220.70.181.252;s;7pkt 7fpkt", shape=diamond, color=yellow];
5680[label="172.64.85.154;d;38pkt 38fpkt", shape=diamond, color=yellow];
5686[label="210.176.195.117;s;105pkt 105fpkt", shape=diamond, color=yellow];
6518[label="201.202.177.144;s;113pkt 113fpkt", shape=diamond, color=yellow];
7091[label="200.162.237.214;s;68pkt 68fpkt", shape=diamond, color=yellow];
7173[label="201.3.112.136;s;108pkt 108fpkt", shape=diamond, color=yellow];
7481[label="172.159.192.68;d;26pkt 26fpkt", shape=hexagon, color=black];
7749[label="200.173.77.168;d;723pkt 723fpkt", shape=hexagon, color=black];
9231[label="209.50.120.148;s;105pkt 105fpkt", shape=hexagon, color=black];
9267[label="209.50.28.100;s;78pkt 78fpkt", shape=hexagon, color=black];
9419[label="200.173.70.174;d;5pkt 5fpkt", shape=hexagon, color=black];
9630[label="200.173.71.71;d;70pkt 70fpkt", shape=hexagon, color=black];
10129[label="209.50.28.103;s;94pkt 94fpkt", shape=hexagon, color=black];
10171[label="220.70.181.252;s;7pkt 7fpkt", shape=hexagon, color=black];
10309[label="4.34.1.24;s;6pkt 6fpkt", shape=hexagon, color=black];
10324[label="210.176.195.117;s;100pkt 100fpkt", shape=hexagon, color=black];
10453[label="201.202.177.144;s;62pkt 62fpkt", shape=hexagon, color=black];
10827[label="200.162.237.214;s;68pkt 68fpkt", shape=hexagon, color=black];
11465[label="60.57.62.2;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11862[label="201.193.12.18;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12021[label="4.34.1.24;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12204[label="213.156.208.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12503[label="38.125.42.46;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12898[label="62.183.63.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13238[label="52.58.130.81;77pkt 77fpkt", shape=pentagon, color=darkviolet];
13628[label="211.162.167.98;88pkt 88fpkt", shape=pentagon, color=darkviolet];
13666[label="209.50.28.100;85pkt 85fpkt", shape=pentagon, color=darkviolet];
13740[label="209.50.28.103;108pkt 108fpkt", shape=pentagon, color=darkviolet];
14225[label="219.69.137.128;3pkt 3fpkt", shape=pentagon, color=darkviolet];
16071[label="62.102.15.211;23pkt 23fpkt", shape=pentagon, color=darkviolet];
16152[label="200.162.237.214;72pkt 72fpkt", shape=pentagon, color=darkviolet];
16482[label="219.143.167.233;32pkt 32fpkt", shape=pentagon, color=darkviolet];
16491[label="210.129.74.234;4pkt 4fpkt", shape=pentagon, color=darkviolet];
16658[label="43.4.66.244;8pkt 8fpkt", shape=pentagon, color=darkviolet];
17130[label="201.193.12.18;6pkt 6fpkt", shape=invtriangle, color=brown];
17537[label="38.125.42.46;4pkt 4fpkt", shape=invtriangle, color=brown];
17776[label="62.183.63.66;2pkt 2fpkt", shape=invtriangle, color=brown];
18005[label="52.58.130.81;76pkt 76fpkt", shape=invtriangle, color=brown];
18253[label="211.162.167.98;87pkt 87fpkt", shape=invtriangle, color=brown];
18273[label="209.50.28.100;85pkt 85fpkt", shape=invtriangle, color=brown];
18317[label="209.50.28.103;107pkt 107fpkt", shape=invtriangle, color=brown];
18611[label="219.69.137.128;2pkt 2fpkt", shape=invtriangle, color=brown];
19821[label="62.102.15.211;22pkt 22fpkt", shape=invtriangle, color=brown];
20189[label="43.4.66.244;9pkt 9fpkt", shape=invtriangle, color=brown];
20509[label="201.193.12.18;5pkt 5fpkt", shape=invhouse, color=bisque];
20778[label="38.125.42.46;3pkt 3fpkt", shape=invhouse, color=bisque];
20940[label="62.183.63.66;2pkt 2fpkt", shape=invhouse, color=bisque];
21119[label="52.58.130.81;77pkt 77fpkt", shape=invhouse, color=bisque];
21286[label="211.162.167.98;88pkt 88fpkt", shape=invhouse, color=bisque];
21298[label="209.50.28.100;84pkt 84fpkt", shape=invhouse, color=bisque];
21323[label="209.50.28.103;107pkt 107fpkt", shape=invhouse, color=bisque];
21527[label="219.69.137.128;2pkt 2fpkt", shape=invhouse, color=bisque];
22383[label="62.102.15.211;23pkt 23fpkt", shape=invhouse, color=bisque];
stat651[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 200.173.77.168:*}[28.1879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.6438%)&lt;BR/&gt; 995: (12.3877%)&lt;BR/&gt; 5222: (2.8349%)&lt;BR/&gt; 30363: (1.0581%)&lt;BR/&gt; 9864: (0.519066%)&gt;];
}
1127--1206[label="0.0010989;1pkt 1fpkt"];
1127--1320[label="0.00303951;1pkt 1fpkt"];
1127--1477[label="0.00348432;2pkt 2fpkt"];
1127--1506[label="0.0010989;1pkt 1fpkt"];
1127--1765[label="0.0175439;1pkt 1fpkt"];
1127--1867[label="0.0638298;6pkt 6fpkt"];
1127--1879[label="0.0649351;5pkt 5fpkt"];
1127--1963[label="0.0135135;1pkt 1fpkt"];
1127--2042[label="0.00236407;1pkt 1fpkt"];
1127--2075[label="0.00114286;1pkt 1fpkt"];
1127--2284[label="0.00666667;1pkt 1fpkt"];
1127--2746[label="0.00277778;1pkt 1fpkt"];
1127--2783[label="0.0031348;1pkt 1fpkt"];
1127--2857[label="0.0294118;4pkt 4fpkt"];
1127--3038[label="0.027027;1pkt 1fpkt"];
1127--3543[label="0.00398406;1pkt 1fpkt"];
1127--3630[label="1;6pkt 6fpkt"];
1127--3958[label="0.00330033;1pkt 1fpkt"];
1127--4153[label="1;2pkt 2fpkt"];
1127--4234[label="1;6pkt 6fpkt"];
1127--4714[label="0.0142857;1pkt 1fpkt"];
1127--5200[label="1;8pkt 8fpkt"];
1127--5465[label="1;7pkt 7fpkt"];
1127--5572[label="0.0465116;6pkt 6fpkt"];
1127--5686[label="1;105pkt 105fpkt"];
1127--6317[label="0.00990099;1pkt 1fpkt"];
1127--6518[label="0.477876;54pkt 54fpkt"];
1127--7091[label="0.455882;31pkt 31fpkt"];
1127--7173[label="1;108pkt 108fpkt"];
1127--7423[label="0.00228571;2pkt 2fpkt"];
1127--7725[label="0.0135135;1pkt 1fpkt"];
1127--7749[label="1;723pkt 723fpkt"];
1127--8404[label="0.0060241;1pkt 1fpkt"];
1127--8880[label="0.0294118;4pkt 4fpkt"];
1127--8974[label="0.00775194;1pkt 1fpkt"];
1127--9622[label="0.0021978;2pkt 2fpkt"];
1127--9777[label="0.00402414;2pkt 2fpkt"];
1127--10129[label="0.0638298;6pkt 6fpkt"];
1127--10171[label="1;7pkt 7fpkt"];
1127--10309[label="1;6pkt 6fpkt"];
1127--10324[label="1;100pkt 100fpkt"];
1127--10453[label="0.451613;28pkt 28fpkt"];
1127--10511[label="0.00330033;1pkt 1fpkt"];
1127--10644[label="0.0465116;6pkt 6fpkt"];
1127--10827[label="0.455882;31pkt 31fpkt"];
1127--11129[label="0.00402414;2pkt 2fpkt"];
1127--11348[label="0.00879121;8pkt 8fpkt"];
1127--11389[label="0.00879121;8pkt 8fpkt"];
1127--11584[label="0.0285714;1pkt 1fpkt"];
1127--11869[label="0.0384615;2pkt 2fpkt"];
1127--12021[label="1;5pkt 5fpkt"];
1127--12076[label="0.011236;1pkt 1fpkt"];
1127--12204[label="1;1pkt 1fpkt"];
1127--12503[label="0.75;3pkt 3fpkt"];
1127--12674[label="0.0039604;2pkt 2fpkt"];
1127--12867[label="0.00990099;1pkt 1fpkt"];
1127--13238[label="0.0649351;5pkt 5fpkt"];
1127--13543[label="0.0147059;1pkt 1fpkt"];
1127--13740[label="0.0555556;6pkt 6fpkt"];
1127--14225[label="0.333333;1pkt 1fpkt"];
1127--14433[label="0.0714286;1pkt 1fpkt"];
1127--14448[label="0.0010989;1pkt 1fpkt"];
1127--14463[label="0.00286533;1pkt 1fpkt"];
1127--14508[label="0.0263158;1pkt 1fpkt"];
1127--14777[label="0.0010989;1pkt 1fpkt"];
1127--14797[label="0.002331;1pkt 1fpkt"];
1127--14850[label="0.00314465;1pkt 1fpkt"];
1127--15523[label="0.125;2pkt 2fpkt"];
1127--15647[label="0.0447761;6pkt 6fpkt"];
1127--16152[label="0.430556;31pkt 31fpkt"];
1127--16155[label="0.16;4pkt 4fpkt"];
1127--16197[label="0.0425532;2pkt 2fpkt"];
1127--16491[label="1;4pkt 4fpkt"];
1127--16658[label="1;8pkt 8fpkt"];
1127--17134[label="0.0384615;2pkt 2fpkt"];
1127--17269[label="0.011236;1pkt 1fpkt"];
1127--17537[label="0.75;3pkt 3fpkt"];
1127--17642[label="0.00396825;2pkt 2fpkt"];
1127--18005[label="0.0657895;5pkt 5fpkt"];
1127--18196[label="0.0144928;1pkt 1fpkt"];
1127--18317[label="0.0560748;6pkt 6fpkt"];
1127--18611[label="0.5;1pkt 1fpkt"];
1127--18769[label="0.0010989;1pkt 1fpkt"];
1127--18781[label="0.00286533;1pkt 1fpkt"];
1127--18813[label="0.0263158;1pkt 1fpkt"];
1127--18981[label="0.0010989;1pkt 1fpkt"];
1127--18994[label="0.00232558;1pkt 1fpkt"];
1127--19029[label="0.00314465;1pkt 1fpkt"];
1127--19536[label="0.0444444;6pkt 6fpkt"];
1127--19894[label="0.0434783;2pkt 2fpkt"];
1127--20189[label="1;9pkt 9fpkt"];
1127--20511[label="0.0384615;2pkt 2fpkt"];
1127--20778[label="0.666667;2pkt 2fpkt"];
1127--20849[label="0.00396825;2pkt 2fpkt"];
1127--21119[label="0.0649351;5pkt 5fpkt"];
1127--21245[label="0.0147059;1pkt 1fpkt"];
1127--21323[label="0.0560748;6pkt 6fpkt"];
1127--21527[label="0.5;1pkt 1fpkt"];
1127--21650[label="0.00285714;1pkt 1fpkt"];
1127--21674[label="0.025641;1pkt 1fpkt"];
1127--21786[label="0.0010989;1pkt 1fpkt"];
1127--21795[label="0.00232558;1pkt 1fpkt"];
1127--21823[label="0.0031348;1pkt 1fpkt"];
1127--22180[label="0.0447761;6pkt 6fpkt"];
1127--22434[label="0.0434783;2pkt 2fpkt"];
1256--1388[label="0.023569;7pkt 7fpkt"];
1256--1435[label="0.0217391;3pkt 3fpkt"];
1256--1799[label="1;8pkt 8fpkt"];
1256--1806[label="0.003367;1pkt 1fpkt"];
1256--1815[label="0.011194;3pkt 3fpkt"];
1256--1867[label="0.12766;12pkt 12fpkt"];
1256--1887[label="0.0238908;7pkt 7fpkt"];
1256--2042[label="0.003367;1pkt 1fpkt"];
1256--2075[label="0.013468;4pkt 4fpkt"];
1256--2746[label="0.016835;5pkt 5fpkt"];
1256--2902[label="0.0441176;3pkt 3fpkt"];
1256--3038[label="0.027027;1pkt 1fpkt"];
1256--3117[label="0.981481;53pkt 53fpkt"];
1256--3312[label="0.0147059;1pkt 1fpkt"];
1256--3364[label="0.102564;8pkt 8fpkt"];
1256--3581[label="0.0135135;1pkt 1fpkt"];
1256--4600[label="1;1pkt 1fpkt"];
1256--5355[label="1;5pkt 5fpkt"];
1256--6898[label="0.0120482;1pkt 1fpkt"];
1256--7481[label="1;26pkt 26fpkt"];
1256--8640[label="0.04;1pkt 1fpkt"];
1256--9029[label="0.0555556;1pkt 1fpkt"];
1256--9267[label="0.102564;8pkt 8fpkt"];
1256--10098[label="0.003367;1pkt 1fpkt"];
1256--10129[label="0.12766;12pkt 12fpkt"];
1256--10134[label="0.026616;7pkt 7fpkt"];
1256--10174[label="0.026936;8pkt 8fpkt"];
1256--10241[label="0.023569;7pkt 7fpkt"];
1256--10289[label="0.0208333;1pkt 1fpkt"];
1256--11159[label="0.003367;1pkt 1fpkt"];
1256--11348[label="0.0606061;18pkt 18fpkt"];
1256--11389[label="0.0606061;18pkt 18fpkt"];
1256--11465[label="1;5pkt 5fpkt"];
1256--11532[label="0.0140845;1pkt 1fpkt"];
1256--11584[label="0.0285714;1pkt 1fpkt"];
1256--11659[label="0.0909091;1pkt 1fpkt"];
1256--11768[label="0.0202703;3pkt 3fpkt"];
1256--12820[label="0.010101;3pkt 3fpkt"];
1256--12898[label="1;1pkt 1fpkt"];
1256--13628[label="0.977273;86pkt 86fpkt"];
1256--13666[label="0.0941176;8pkt 8fpkt"];
1256--13740[label="0.111111;12pkt 12fpkt"];
1256--14510[label="0.0113636;1pkt 1fpkt"];
1256--14797[label="0.003367;1pkt 1fpkt"];
1256--15272[label="0.023569;7pkt 7fpkt"];
1256--15889[label="0.003367;1pkt 1fpkt"];
1256--16039[label="0.105263;2pkt 2fpkt"];
1256--16071[label="0.0869565;2pkt 2fpkt"];
1256--16155[label="0.16;4pkt 4fpkt"];
1256--16466[label="0.003367;1pkt 1fpkt"];
1256--17006[label="0.1;1pkt 1fpkt"];
1256--17069[label="0.0202703;3pkt 3fpkt"];
1256--17776[label="1;2pkt 2fpkt"];
1256--18253[label="0.988506;86pkt 86fpkt"];
1256--18273[label="0.0941176;8pkt 8fpkt"];
1256--18317[label="0.11215;12pkt 12fpkt"];
1256--18815[label="0.0113636;1pkt 1fpkt"];
1256--18994[label="0.003367;1pkt 1fpkt"];
1256--19291[label="0.023569;7pkt 7fpkt"];
1256--19703[label="0.003367;1pkt 1fpkt"];
1256--19800[label="0.105263;2pkt 2fpkt"];
1256--19821[label="0.0909091;2pkt 2fpkt"];
1256--20074[label="0.003367;1pkt 1fpkt"];
1256--20467[label="0.0202703;3pkt 3fpkt"];
1256--20940[label="1;2pkt 2fpkt"];
1256--21286[label="0.977273;86pkt 86fpkt"];
1256--21298[label="0.0952381;8pkt 8fpkt"];
1256--21323[label="0.11215;12pkt 12fpkt"];
1256--21795[label="0.003367;1pkt 1fpkt"];
1256--22003[label="0.023569;7pkt 7fpkt"];
1256--22383[label="0.0869565;2pkt 2fpkt"];
1256--22566[label="0.003367;1pkt 1fpkt"];
1799--7481[label="1;8pkt 8fpkt"];
1832--1840[label="0.0141844;2pkt 2fpkt"];
1832--1885[label="0.04;1pkt 1fpkt"];
1832--2318[label="0.0714286;1pkt 1fpkt"];
1832--2769[label="0.0070922;1pkt 1fpkt"];
1832--3474[label="0.0461538;3pkt 3fpkt"];
1832--3583[label="0.0212766;3pkt 3fpkt"];
1832--4272[label="0.0141844;2pkt 2fpkt"];
1832--5031[label="0.4;2pkt 2fpkt"];
1832--5418[label="0.00917431;1pkt 1fpkt"];
1832--5451[label="0.0114943;1pkt 1fpkt"];
1832--5604[label="0.0238095;1pkt 1fpkt"];
1832--7374[label="0.0212766;3pkt 3fpkt"];
1832--7390[label="0.0152672;2pkt 2fpkt"];
1832--7403[label="0.0070922;1pkt 1fpkt"];
1832--7490[label="0.0272727;3pkt 3fpkt"];
1832--7612[label="0.0526316;3pkt 3fpkt"];
1832--7614[label="0.0070922;1pkt 1fpkt"];
1832--8494[label="0.0141844;2pkt 2fpkt"];
1832--8817[label="0.0070922;1pkt 1fpkt"];
1832--8854[label="0.0188679;1pkt 1fpkt"];
1832--8936[label="0.111111;1pkt 1fpkt"];
1832--9231[label="1;105pkt 105fpkt"];
1832--9419[label="0.4;2pkt 2fpkt"];
1832--9630[label="0.0142857;1pkt 1fpkt"];
1832--10513[label="0.00917431;1pkt 1fpkt"];
1832--10516[label="0.0070922;1pkt 1fpkt"];
1832--11027[label="0.0238095;2pkt 2fpkt"];
1832--11043[label="0.0070922;1pkt 1fpkt"];
1832--11119[label="0.0188679;1pkt 1fpkt"];
1867--2598[label="0.0212766;2pkt 2fpkt"];
1867--4327[label="0.0394737;3pkt 3fpkt"];
1867--5451[label="0.0344828;3pkt 3fpkt"];
1867--5680[label="0.473684;18pkt 18fpkt"];
1867--6984[label="0.0126582;1pkt 1fpkt"];
1867--7481[label="0.153846;4pkt 4fpkt"];
1867--7557[label="0.0106383;1pkt 1fpkt"];
1867--7749[label="0.0638298;6pkt 6fpkt"];
1867--9559[label="0.0212766;2pkt 2fpkt"];
1867--9630[label="0.0428571;3pkt 3fpkt"];
1867--10129[label="1;94pkt 94fpkt"];
1867--13740[label="0.989362;93pkt 93fpkt"];
1867--18317[label="0.978723;92pkt 92fpkt"];
1867--21323[label="0.978723;92pkt 92fpkt"];
1879--1930[label="0.012987;1pkt 1fpkt"];
1879--2598[label="0.012987;1pkt 1fpkt"];
1879--2629[label="0.025974;2pkt 2fpkt"];
1879--3583[label="0.012987;1pkt 1fpkt"];
1879--3970[label="0.038961;3pkt 3fpkt"];
1879--4092[label="0.012987;1pkt 1fpkt"];
1879--4152[label="0.012987;1pkt 1fpkt"];
1879--4327[label="0.0263158;2pkt 2fpkt"];
1879--5031[label="0.2;1pkt 1fpkt"];
1879--5418[label="0.012987;1pkt 1fpkt"];
1879--5451[label="0.038961;3pkt 3fpkt"];
1879--5604[label="0.0238095;1pkt 1fpkt"];
1879--6124[label="0.012987;1pkt 1fpkt"];
1879--6210[label="0.025641;1pkt 1fpkt"];
1879--7374[label="0.025974;2pkt 2fpkt"];
1879--7386[label="0.012987;1pkt 1fpkt"];
1879--7478[label="0.025974;2pkt 2fpkt"];
1879--7490[label="0.012987;1pkt 1fpkt"];
1879--7582[label="0.012987;1pkt 1fpkt"];
1879--7647[label="0.025974;2pkt 2fpkt"];
1879--7749[label="0.0519481;4pkt 4fpkt"];
1879--7878[label="0.012987;1pkt 1fpkt"];
1879--8333[label="0.012987;1pkt 1fpkt"];
1879--8494[label="0.012987;1pkt 1fpkt"];
1879--8719[label="0.025974;2pkt 2fpkt"];
1879--8881[label="0.012987;1pkt 1fpkt"];
1879--9419[label="0.2;1pkt 1fpkt"];
1879--9559[label="0.012987;1pkt 1fpkt"];
1879--9630[label="0.0428571;3pkt 3fpkt"];
1879--10146[label="0.0408163;2pkt 2fpkt"];
1879--10513[label="0.012987;1pkt 1fpkt"];
1879--10577[label="0.012987;1pkt 1fpkt"];
1879--10659[label="0.025641;1pkt 1fpkt"];
1879--13238[label="1;77pkt 77fpkt"];
1879--18005[label="1;76pkt 76fpkt"];
1879--21119[label="1;77pkt 77fpkt"];
2820--3120[label="0.0909091;1pkt 1fpkt"];
2820--3448[label="0.00740741;1pkt 1fpkt"];
2820--3792[label="0.0188679;2pkt 2fpkt"];
2820--4327[label="0.0394737;3pkt 3fpkt"];
2820--5031[label="0.4;2pkt 2fpkt"];
2820--5128[label="0.030303;1pkt 1fpkt"];
2820--5680[label="0.0263158;1pkt 1fpkt"];
2820--5897[label="0.0625;2pkt 2fpkt"];
2820--6105[label="0.0117647;1pkt 1fpkt"];
2820--6226[label="0.011236;1pkt 1fpkt"];
2820--6235[label="0.0125;1pkt 1fpkt"];
2820--6426[label="0.0454545;1pkt 1fpkt"];
2820--7012[label="0.0416667;1pkt 1fpkt"];
2820--7478[label="0.0148148;2pkt 2fpkt"];
2820--7952[label="0.0147059;1pkt 1fpkt"];
2820--8141[label="0.0740741;10pkt 10fpkt"];
2820--8283[label="0.00740741;1pkt 1fpkt"];
2820--9419[label="0.4;2pkt 2fpkt"];
2820--10160[label="0.012987;1pkt 1fpkt"];
2820--11348[label="0.0666667;9pkt 9fpkt"];
2820--11389[label="0.0666667;9pkt 9fpkt"];
3117--7559[label="0.0185185;1pkt 1fpkt"];
3117--11337[label="0.0185185;1pkt 1fpkt"];
3117--11381[label="0.0185185;1pkt 1fpkt"];
3117--13628[label="1;54pkt 54fpkt"];
3117--18253[label="1;54pkt 54fpkt"];
3117--21286[label="1;54pkt 54fpkt"];
3364--5451[label="0.0128205;1pkt 1fpkt"];
3364--5680[label="0.263158;10pkt 10fpkt"];
3364--6424[label="0.0222222;1pkt 1fpkt"];
3364--6984[label="0.025641;2pkt 2fpkt"];
3364--7557[label="0.0128205;1pkt 1fpkt"];
3364--7833[label="0.0769231;1pkt 1fpkt"];
3364--9267[label="1;78pkt 78fpkt"];
3364--9630[label="0.0142857;1pkt 1fpkt"];
3364--10992[label="0.0128205;1pkt 1fpkt"];
3364--13666[label="1;78pkt 78fpkt"];
3364--18273[label="1;78pkt 78fpkt"];
3364--21298[label="0.987179;77pkt 77fpkt"];
3630--7749[label="1;6pkt 6fpkt"];
3630--10309[label="1;6pkt 6fpkt"];
3630--12021[label="1;5pkt 5fpkt"];
4153--7749[label="1;2pkt 2fpkt"];
4153--11348[label="1;2pkt 2fpkt"];
4153--11389[label="1;2pkt 2fpkt"];
4234--7749[label="0.833333;5pkt 5fpkt"];
5031--9231[label="0.4;2pkt 2fpkt"];
5031--9419[label="1;5pkt 5fpkt"];
5031--13238[label="0.2;1pkt 1fpkt"];
5031--18005[label="0.2;1pkt 1fpkt"];
5031--21119[label="0.2;1pkt 1fpkt"];
5200--7749[label="1;8pkt 8fpkt"];
5355--11465[label="1;5pkt 5fpkt"];
5451--9231[label="0.0114943;1pkt 1fpkt"];
5451--9267[label="0.0128205;1pkt 1fpkt"];
5451--9630[label="1;70pkt 70fpkt"];
5451--10129[label="0.0344828;3pkt 3fpkt"];
5451--10233[label="0.05;1pkt 1fpkt"];
5451--11337[label="0.0114943;1pkt 1fpkt"];
5451--11381[label="0.0114943;1pkt 1fpkt"];
5451--11862[label="1;5pkt 5fpkt"];
5451--13238[label="0.038961;3pkt 3fpkt"];
5451--13666[label="0.0117647;1pkt 1fpkt"];
5451--13740[label="0.045977;4pkt 4fpkt"];
5451--16482[label="1;32pkt 32fpkt"];
5451--17130[label="1;6pkt 6fpkt"];
5451--18005[label="0.0394737;3pkt 3fpkt"];
5451--18273[label="0.0117647;1pkt 1fpkt"];
5451--18317[label="0.045977;4pkt 4fpkt"];
5451--20509[label="1;5pkt 5fpkt"];
5451--21119[label="0.038961;3pkt 3fpkt"];
5451--21298[label="0.0119048;1pkt 1fpkt"];
5451--21323[label="0.045977;4pkt 4fpkt"];
5465--7749[label="0.857143;6pkt 6fpkt"];
5465--10171[label="1;7pkt 7fpkt"];
5680--9267[label="0.263158;10pkt 10fpkt"];
5680--10129[label="0.473684;18pkt 18fpkt"];
5680--13259[label="0.0263158;1pkt 1fpkt"];
5680--13666[label="0.263158;10pkt 10fpkt"];
5680--13740[label="0.473684;18pkt 18fpkt"];
5680--18021[label="0.0263158;1pkt 1fpkt"];
5680--18273[label="0.263158;10pkt 10fpkt"];
5680--18317[label="0.473684;18pkt 18fpkt"];
5680--21298[label="0.263158;10pkt 10fpkt"];
5680--21323[label="0.473684;18pkt 18fpkt"];
5686--7749[label="0.952381;100pkt 100fpkt"];
5686--10324[label="1;100pkt 100fpkt"];
6518--6984[label="0.0126582;1pkt 1fpkt"];
6518--7130[label="0.142857;2pkt 2fpkt"];
6518--7749[label="0.247788;28pkt 28fpkt"];
6518--9847[label="0.0652174;6pkt 6fpkt"];
6518--10453[label="0.983871;61pkt 61fpkt"];
7091--7403[label="0.0147059;1pkt 1fpkt"];
7091--7582[label="0.0147059;1pkt 1fpkt"];
7091--7749[label="0.441176;30pkt 30fpkt"];
7091--8268[label="0.0294118;2pkt 2fpkt"];
7091--10827[label="1;68pkt 68fpkt"];
7091--16152[label="0.985294;67pkt 67fpkt"];
7173--7749[label="0.268519;29pkt 29fpkt"];
7481--10129[label="0.153846;4pkt 4fpkt"];
7481--10134[label="0.0384615;1pkt 1fpkt"];
7481--10241[label="0.192308;5pkt 5fpkt"];
7481--13740[label="0.115385;3pkt 3fpkt"];
7481--14797[label="0.0384615;1pkt 1fpkt"];
7481--15272[label="0.0384615;1pkt 1fpkt"];
7481--16466[label="0.0384615;1pkt 1fpkt"];
7481--17776[label="0.5;1pkt 1fpkt"];
7481--18317[label="0.115385;3pkt 3fpkt"];
7481--18994[label="0.0384615;1pkt 1fpkt"];
7481--19291[label="0.0384615;1pkt 1fpkt"];
7481--20074[label="0.0384615;1pkt 1fpkt"];
7481--20940[label="0.5;1pkt 1fpkt"];
7481--21323[label="0.115385;3pkt 3fpkt"];
7481--21795[label="0.0384615;1pkt 1fpkt"];
7481--22003[label="0.0384615;1pkt 1fpkt"];
7481--22566[label="0.0384615;1pkt 1fpkt"];
7749--8404[label="0.0060241;1pkt 1fpkt"];
7749--8880[label="0.0294118;4pkt 4fpkt"];
7749--8974[label="0.00775194;1pkt 1fpkt"];
7749--9622[label="0.00276625;2pkt 2fpkt"];
7749--9777[label="0.00402414;2pkt 2fpkt"];
7749--10129[label="0.0638298;6pkt 6fpkt"];
7749--10171[label="0.857143;6pkt 6fpkt"];
7749--10309[label="1;6pkt 6fpkt"];
7749--10324[label="1;100pkt 100fpkt"];
7749--10453[label="0.451613;28pkt 28fpkt"];
7749--10511[label="0.00330033;1pkt 1fpkt"];
7749--10644[label="0.0465116;6pkt 6fpkt"];
7749--10827[label="0.441176;30pkt 30fpkt"];
7749--11129[label="0.00402414;2pkt 2fpkt"];
7749--11348[label="0.011065;8pkt 8fpkt"];
7749--11389[label="0.011065;8pkt 8fpkt"];
7749--11869[label="0.0384615;2pkt 2fpkt"];
7749--12021[label="1;5pkt 5fpkt"];
7749--12076[label="0.011236;1pkt 1fpkt"];
7749--12204[label="1;1pkt 1fpkt"];
7749--12503[label="0.75;3pkt 3fpkt"];
7749--12674[label="0.0019802;1pkt 1fpkt"];
7749--13238[label="0.0519481;4pkt 4fpkt"];
7749--13543[label="0.0147059;1pkt 1fpkt"];
7749--13740[label="0.0555556;6pkt 6fpkt"];
7749--14225[label="0.333333;1pkt 1fpkt"];
7749--14433[label="0.0714286;1pkt 1fpkt"];
7749--14448[label="0.00138313;1pkt 1fpkt"];
7749--14777[label="0.00138313;1pkt 1fpkt"];
7749--14797[label="0.002331;1pkt 1fpkt"];
7749--14850[label="0.00314465;1pkt 1fpkt"];
7749--15647[label="0.0447761;6pkt 6fpkt"];
7749--16152[label="0.416667;30pkt 30fpkt"];
7749--16197[label="0.0425532;2pkt 2fpkt"];
7749--16491[label="1;4pkt 4fpkt"];
7749--16658[label="1;8pkt 8fpkt"];
7749--17134[label="0.0384615;2pkt 2fpkt"];
7749--17269[label="0.011236;1pkt 1fpkt"];
7749--17537[label="0.75;3pkt 3fpkt"];
7749--17642[label="0.00198413;1pkt 1fpkt"];
7749--18005[label="0.0526316;4pkt 4fpkt"];
7749--18196[label="0.0144928;1pkt 1fpkt"];
7749--18317[label="0.0560748;6pkt 6fpkt"];
7749--18611[label="0.5;1pkt 1fpkt"];
7749--18769[label="0.00138313;1pkt 1fpkt"];
7749--18981[label="0.00138313;1pkt 1fpkt"];
7749--18994[label="0.00232558;1pkt 1fpkt"];
7749--19029[label="0.00314465;1pkt 1fpkt"];
7749--19536[label="0.0444444;6pkt 6fpkt"];
7749--19894[label="0.0434783;2pkt 2fpkt"];
7749--20189[label="1;9pkt 9fpkt"];
7749--20511[label="0.0384615;2pkt 2fpkt"];
7749--20778[label="0.666667;2pkt 2fpkt"];
7749--20849[label="0.00198413;1pkt 1fpkt"];
7749--21119[label="0.0519481;4pkt 4fpkt"];
7749--21245[label="0.0147059;1pkt 1fpkt"];
7749--21323[label="0.0560748;6pkt 6fpkt"];
7749--21527[label="0.5;1pkt 1fpkt"];
7749--21786[label="0.00138313;1pkt 1fpkt"];
7749--21795[label="0.00232558;1pkt 1fpkt"];
7749--21823[label="0.0031348;1pkt 1fpkt"];
7749--22180[label="0.0447761;6pkt 6fpkt"];
7749--22434[label="0.0434783;2pkt 2fpkt"];
9231--9419[label="0.4;2pkt 2fpkt"];
9231--9630[label="0.0142857;1pkt 1fpkt"];
9231--10513[label="0.00952381;1pkt 1fpkt"];
9231--10516[label="0.00952381;1pkt 1fpkt"];
9231--11027[label="0.0238095;2pkt 2fpkt"];
9231--11043[label="0.00952381;1pkt 1fpkt"];
9231--11119[label="0.0188679;1pkt 1fpkt"];
9267--9630[label="0.0142857;1pkt 1fpkt"];
9267--10992[label="0.0128205;1pkt 1fpkt"];
9267--13666[label="1;78pkt 78fpkt"];
9267--18273[label="1;78pkt 78fpkt"];
9267--21298[label="0.987179;77pkt 77fpkt"];
9419--13238[label="0.2;1pkt 1fpkt"];
9419--18005[label="0.2;1pkt 1fpkt"];
9419--21119[label="0.2;1pkt 1fpkt"];
9630--10129[label="0.0428571;3pkt 3fpkt"];
9630--10233[label="0.05;1pkt 1fpkt"];
9630--11337[label="0.0142857;1pkt 1fpkt"];
9630--11381[label="0.0142857;1pkt 1fpkt"];
9630--13238[label="0.0428571;3pkt 3fpkt"];
9630--13666[label="0.0142857;1pkt 1fpkt"];
9630--13740[label="0.0428571;3pkt 3fpkt"];
9630--16482[label="1;32pkt 32fpkt"];
9630--18005[label="0.0428571;3pkt 3fpkt"];
9630--18273[label="0.0142857;1pkt 1fpkt"];
9630--18317[label="0.0428571;3pkt 3fpkt"];
9630--21119[label="0.0428571;3pkt 3fpkt"];
9630--21298[label="0.0142857;1pkt 1fpkt"];
9630--21323[label="0.0428571;3pkt 3fpkt"];
10129--13740[label="0.989362;93pkt 93fpkt"];
10129--18317[label="0.978723;92pkt 92fpkt"];
10129--21323[label="0.978723;92pkt 92fpkt"];
10309--12021[label="1;5pkt 5fpkt"];
10827--16152[label="0.985294;67pkt 67fpkt"];
11862--17130[label="1;5pkt 5fpkt"];
11862--20509[label="1;5pkt 5fpkt"];
12503--17537[label="1;4pkt 4fpkt"];
12503--20778[label="1;3pkt 3fpkt"];
12898--17776[label="1;1pkt 1fpkt"];
12898--20940[label="1;1pkt 1fpkt"];
13238--18005[label="1;76pkt 76fpkt"];
13238--21119[label="1;77pkt 77fpkt"];
13628--18253[label="1;87pkt 87fpkt"];
13628--21286[label="1;88pkt 88fpkt"];
13666--18273[label="1;85pkt 85fpkt"];
13666--21298[label="1;84pkt 84fpkt"];
13740--18317[label="1;107pkt 107fpkt"];
13740--21323[label="1;107pkt 107fpkt"];
14225--18611[label="1;2pkt 2fpkt"];
14225--21527[label="1;2pkt 2fpkt"];
16071--19821[label="1;22pkt 22fpkt"];
16071--22383[label="1;23pkt 23fpkt"];
16658--20189[label="1;8pkt 8fpkt"];
17130--20509[label="1;5pkt 5fpkt"];
17537--20778[label="1;3pkt 3fpkt"];
17776--20940[label="1;2pkt 2fpkt"];
18005--21119[label="1;76pkt 76fpkt"];
18253--21286[label="1;87pkt 87fpkt"];
18273--21298[label="1;84pkt 84fpkt"];
18317--21323[label="1;107pkt 107fpkt"];
18611--21527[label="1;2pkt 2fpkt"];
19821--22383[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.168" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.21.202.98"/>
    </slice>
    <from sec="1191992967" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.13.215.98"/>
    </slice>
    <from sec="1191992987" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.51.4.99"/>
    </slice>
    <from sec="1191992844" usec="0"/>
    <to sec="1191992879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.62.13.99"/>
    </slice>
    <from sec="1191992778" usec="0"/>
    <to sec="1191992807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.31.99"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.72.63.99"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.89.89.99"/>
    </slice>
    <from sec="1191992816" usec="0"/>
    <to sec="1191992837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.237.151.99"/>
    </slice>
    <from sec="1191992867" usec="0"/>
    <to sec="1191992904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.86.162.99"/>
    </slice>
    <from sec="1191992480" usec="0"/>
    <to sec="1191993100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.227.182.99"/>
    </slice>
    <from sec="1191992476" usec="0"/>
    <to sec="1191992492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.127.209.99"/>
    </slice>
    <from sec="1191992832" usec="0"/>
    <to sec="1191992936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.18.100.100"/>
    </slice>
    <from sec="1191993006" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.96.144.100"/>
    </slice>
    <from sec="1191993018" usec="0"/>
    <to sec="1191993048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.155.100"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191992990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.77.223.100"/>
    </slice>
    <from sec="1191992827" usec="0"/>
    <to sec="1191992838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.20.236.100"/>
    </slice>
    <from sec="1191993274" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.160.101.101"/>
    </slice>
    <from sec="1191993005" usec="0"/>
    <to sec="1191993018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.30.176.101"/>
    </slice>
    <from sec="1191992475" usec="0"/>
    <to sec="1191992514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
6812[label="218.44.216.101;s;130pkt 130fpkt", shape=diamond, color=yellow];
13714[label="218.44.216.101;145pkt 145fpkt", shape=pentagon, color=darkviolet];
18303[label="218.44.216.101;144pkt 144fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.44.216.101:80, 169.6.229.54:*}[51.7241%]&lt;BR/&gt;{218.44.216.101:80, 172.64.24.195:*}[48.2759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34702: (0.357995%)&lt;BR/&gt; 34698: (0.357995%)&lt;BR/&gt; 34674: (0.357995%)&lt;BR/&gt; 34550: (0.357995%)&gt;];
}
6812--11348[label="0.0769231;10pkt 10fpkt"];
6812--11389[label="0.0769231;10pkt 10fpkt"];
6812--13714[label="1;130pkt 130fpkt"];
6812--18303[label="0.992308;129pkt 129fpkt"];
13714--18303[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.229.54" src_ip="218.44.216.101" src_port="80"/>
      <filter dst_ip="172.64.24.195" src_ip="218.44.216.101" src_port="80"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.218.101"/>
    </slice>
    <from sec="1191993230" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.155.23.102"/>
    </slice>
    <from sec="1191993158" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.75.172.102"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.41.178.102"/>
    </slice>
    <from sec="1191992466" usec="0"/>
    <to sec="1191992611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.212.40.103"/>
    </slice>
    <from sec="1191993112" usec="0"/>
    <to sec="1191993140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.172.142.103"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.25.203.103"/>
    </slice>
    <from sec="1191993174" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.163.37.104"/>
    </slice>
    <from sec="1191992661" usec="0"/>
    <to sec="1191992687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.73.104"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.137.78.104"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
461[label="200.173.70.132;d;49pkt 49fpkt", shape=diamond, color=yellow];
463[label="112.108.247.196;s;3pkt 3fpkt", shape=diamond, color=yellow];
2667[label="201.67.0.159;d;2009pkt 2009fpkt", shape=diamond, color=yellow];
7394[label="200.173.70.132;d;37pkt 37fpkt", shape=hexagon, color=black];
7593[label="112.108.247.196;s;2pkt 2fpkt", shape=hexagon, color=black];
12151[label="81.122.138.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12523[label="6.98.1.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13763[label="6.34.80.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18331[label="6.34.80.104;1pkt 1fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 201.67.0.159:20129}[52.5498%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (73.1244%)&lt;BR/&gt; 20128: (2.849%)&lt;BR/&gt; 20190: (2.16049%)&lt;BR/&gt; 0: (0.332384%)&lt;BR/&gt; 10000: (0.213675%)&gt;];
}
461--463[label="0.666667;2pkt 2fpkt"];
461--7394[label="1;37pkt 37fpkt"];
461--7593[label="1;2pkt 2fpkt"];
461--13763[label="1;2pkt 2fpkt"];
461--18331[label="1;1pkt 1fpkt"];
463--2667[label="0.333333;1pkt 1fpkt"];
463--7394[label="0.666667;2pkt 2fpkt"];
463--7593[label="1;2pkt 2fpkt"];
2667--3778[label="0.00049776;1pkt 1fpkt"];
2667--4121[label="0.00214133;1pkt 1fpkt"];
2667--8615[label="0.00049776;1pkt 1fpkt"];
2667--11020[label="0.00049776;1pkt 1fpkt"];
2667--11297[label="0.00049776;1pkt 1fpkt"];
2667--11356[label="0.00049776;1pkt 1fpkt"];
2667--11396[label="0.00049776;1pkt 1fpkt"];
2667--11961[label="0.00049776;1pkt 1fpkt"];
2667--12151[label="1;1pkt 1fpkt"];
2667--12523[label="0.5;1pkt 1fpkt"];
2667--17191[label="0.00049776;1pkt 1fpkt"];
2667--20548[label="0.00049776;1pkt 1fpkt"];
7394--7593[label="1;2pkt 2fpkt"];
7394--13763[label="1;2pkt 2fpkt"];
7394--18331[label="1;1pkt 1fpkt"];
13763--18331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.0.159" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.222.235.104"/>
    </slice>
    <from sec="1191992850" usec="0"/>
    <to sec="1191993251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.59.58.105"/>
    </slice>
    <from sec="1191992933" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.132.80.105"/>
    </slice>
    <from sec="1191992743" usec="0"/>
    <to sec="1191992790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.172.133.105"/>
    </slice>
    <from sec="1191992875" usec="0"/>
    <to sec="1191992910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.75.164.105"/>
    </slice>
    <from sec="1191992895" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.2.106"/>
    </slice>
    <from sec="1191992688" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.229.106"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.60.98.107"/>
    </slice>
    <from sec="1191993245" usec="0"/>
    <to sec="1191993249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.107"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.150.189.107"/>
    </slice>
    <from sec="1191993222" usec="0"/>
    <to sec="1191993241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.15.249.107"/>
    </slice>
    <from sec="1191992827" usec="0"/>
    <to sec="1191993167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.210.106.108"/>
    </slice>
    <from sec="1191992835" usec="0"/>
    <to sec="1191992886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.53.1.109"/>
    </slice>
    <from sec="1191993085" usec="0"/>
    <to sec="1191993150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.182.23.109"/>
    </slice>
    <from sec="1191992697" usec="0"/>
    <to sec="1191992717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.138.143.109"/>
    </slice>
    <from sec="1191992817" usec="0"/>
    <to sec="1191992857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.229.26.110"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.115.33.110"/>
    </slice>
    <from sec="1191992841" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.173.66.110"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.221.110.110"/>
    </slice>
    <from sec="1191992928" usec="0"/>
    <to sec="1191992969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
1039[label="172.130.128.110;s;415pkt 415fpkt", shape=diamond, color=yellow];
1965[label="210.130.121.188;d;2pkt 2fpkt", shape=diamond, color=yellow];
2157[label="210.130.121.143;d;416pkt 416fpkt", shape=diamond, color=yellow];
8441[label="210.130.121.143;d;416pkt 416fpkt", shape=hexagon, color=black];
10155[label="172.130.128.110;s;372pkt 372fpkt", shape=hexagon, color=black];
13883[label="172.130.128.110;452pkt 452fpkt", shape=pentagon, color=darkviolet];
18408[label="172.130.128.110;452pkt 452fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.128.110:*, 210.130.121.143:80}[98.9011%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.802%)&lt;BR/&gt; 443: (0.19802%)&lt;BR/&gt; 60527: (0.118812%)&lt;BR/&gt; 60524: (0.118812%)&lt;BR/&gt; 60521: (0.118812%)&gt;];
}
1039--1965[label="1;2pkt 2fpkt"];
1039--2157[label="0.995181;413pkt 413fpkt"];
1039--8441[label="0.995181;413pkt 413fpkt"];
1039--10155[label="1;372pkt 372fpkt"];
1039--11265[label="0.0578313;24pkt 24fpkt"];
1039--11285[label="0.0578313;24pkt 24fpkt"];
1039--11338[label="0.0578313;24pkt 24fpkt"];
1039--11351[label="0.0578313;24pkt 24fpkt"];
1039--11382[label="0.0578313;24pkt 24fpkt"];
1039--11392[label="0.0578313;24pkt 24fpkt"];
1039--13883[label="1;415pkt 415fpkt"];
1039--18408[label="1;415pkt 415fpkt"];
1965--10155[label="1;2pkt 2fpkt"];
1965--13883[label="1;2pkt 2fpkt"];
1965--18408[label="1;2pkt 2fpkt"];
2157--8441[label="1;416pkt 416fpkt"];
2157--10155[label="0.994624;370pkt 370fpkt"];
2157--11265[label="0.0576923;24pkt 24fpkt"];
2157--11285[label="0.0576923;24pkt 24fpkt"];
2157--11338[label="0.0576923;24pkt 24fpkt"];
2157--11351[label="0.0576923;24pkt 24fpkt"];
2157--11382[label="0.0576923;24pkt 24fpkt"];
2157--11392[label="0.0576923;24pkt 24fpkt"];
2157--13883[label="0.992788;413pkt 413fpkt"];
2157--18408[label="0.992788;413pkt 413fpkt"];
8441--10155[label="0.994624;370pkt 370fpkt"];
8441--11265[label="0.0576923;24pkt 24fpkt"];
8441--11285[label="0.0576923;24pkt 24fpkt"];
8441--11338[label="0.0576923;24pkt 24fpkt"];
8441--11351[label="0.0576923;24pkt 24fpkt"];
8441--11382[label="0.0576923;24pkt 24fpkt"];
8441--11392[label="0.0576923;24pkt 24fpkt"];
8441--13883[label="0.992788;413pkt 413fpkt"];
8441--18408[label="0.992788;413pkt 413fpkt"];
10155--11265[label="0.0645161;24pkt 24fpkt"];
10155--11285[label="0.0645161;24pkt 24fpkt"];
10155--11338[label="0.0645161;24pkt 24fpkt"];
10155--11351[label="0.0645161;24pkt 24fpkt"];
10155--11382[label="0.0645161;24pkt 24fpkt"];
10155--11392[label="0.0645161;24pkt 24fpkt"];
10155--13883[label="1;372pkt 372fpkt"];
10155--18408[label="1;372pkt 372fpkt"];
13883--18408[label="1;452pkt 452fpkt"];
</description>
    <slice>
      <filter dst_ip="210.130.121.143" dst_port="80" src_ip="172.130.128.110"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.140.110"/>
    </slice>
    <from sec="1191992802" usec="0"/>
    <to sec="1191992838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.64.20.111"/>
    </slice>
    <from sec="1191992670" usec="0"/>
    <to sec="1191992700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.123.142.111"/>
    </slice>
    <from sec="1191992923" usec="0"/>
    <to sec="1191992953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.89.149.111"/>
    </slice>
    <from sec="1191992881" usec="0"/>
    <to sec="1191992912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.98.39.112"/>
    </slice>
    <from sec="1191992948" usec="0"/>
    <to sec="1191992972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.209.102.112"/>
    </slice>
    <from sec="1191992580" usec="0"/>
    <to sec="1191992662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.179.124.112"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.109.146.113"/>
    </slice>
    <from sec="1191992886" usec="0"/>
    <to sec="1191993011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.104.210.114"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191992682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.69.222.114"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.36.106.115"/>
    </slice>
    <from sec="1191992854" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.128.224.115"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191992531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_716{
style=filled;
color=gray75;
5609[label="188.104.147.116;s;102pkt 102fpkt", shape=diamond, color=yellow];
14001[label="188.104.147.116;108pkt 108fpkt", shape=pentagon, color=darkviolet];
18479[label="188.104.147.116;108pkt 108fpkt", shape=invtriangle, color=brown];
21438[label="188.104.147.116;108pkt 108fpkt", shape=invhouse, color=bisque];
stat716[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.147.116:*, *:6346}[46.2963%]&lt;BR/&gt;{188.104.147.116:1226, *:*}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (23.1221%)&lt;BR/&gt; 1226: (19.7183%)&lt;BR/&gt; 16066: (4.69484%)&lt;BR/&gt; 25074: (1.40845%)&lt;BR/&gt; 42865: (1.29108%)&gt;];
}
5609--14001[label="1;102pkt 102fpkt"];
5609--18479[label="1;102pkt 102fpkt"];
5609--21438[label="1;102pkt 102fpkt"];
14001--18479[label="1;108pkt 108fpkt"];
14001--21438[label="1;108pkt 108fpkt"];
18479--21438[label="1;108pkt 108fpkt"];
</description>
    <slice>
      <filter src_ip="188.104.147.116" src_port="1226"/>
      <filter dst_port="6346" src_ip="188.104.147.116"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.109.11.118"/>
    </slice>
    <from sec="1191993099" usec="0"/>
    <to sec="1191993141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.177.23.118"/>
    </slice>
    <from sec="1191992418" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.225.186.118"/>
    </slice>
    <from sec="1191992463" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.120.2.119"/>
    </slice>
    <from sec="1191992868" usec="0"/>
    <to sec="1191992893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.177.23.119"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.97.100.120"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.68.192.120"/>
    </slice>
    <from sec="1191992607" usec="0"/>
    <to sec="1191992639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.162.232.120"/>
    </slice>
    <from sec="1191993064" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.38.121"/>
    </slice>
    <from sec="1191992818" usec="0"/>
    <to sec="1191992889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.41.34.122"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.95.106.122"/>
    </slice>
    <from sec="1191992624" usec="0"/>
    <to sec="1191992714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.169.106.122"/>
    </slice>
    <from sec="1191993032" usec="0"/>
    <to sec="1191993071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.236.162.122"/>
    </slice>
    <from sec="1191992876" usec="0"/>
    <to sec="1191992920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.208.122"/>
    </slice>
    <from sec="1191992606" usec="0"/>
    <to sec="1191992958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.20.73.123"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_732{
style=filled;
color=gray75;
7019[label="168.53.106.123;s;32pkt 32fpkt", shape=diamond, color=yellow];
14125[label="168.53.106.123;36pkt 36fpkt", shape=pentagon, color=darkviolet];
18552[label="168.53.106.123;36pkt 36fpkt", shape=invtriangle, color=brown];
21484[label="168.53.106.123;35pkt 35fpkt", shape=invhouse, color=bisque];
stat732[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.106.123:25, 1.143.59.54:*}[61.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50336: (1.43885%)&lt;BR/&gt; 44111: (1.43885%)&lt;BR/&gt; 37118: (1.43885%)&lt;BR/&gt; 33175: (1.43885%)&gt;];
}
7019--14125[label="1;32pkt 32fpkt"];
7019--18552[label="1;32pkt 32fpkt"];
7019--21484[label="1;32pkt 32fpkt"];
14125--18552[label="1;36pkt 36fpkt"];
14125--21484[label="1;35pkt 35fpkt"];
18552--21484[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="1.143.59.54" src_ip="168.53.106.123" src_port="25"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.66.130.123"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.34.167.123"/>
    </slice>
    <from sec="1191993277" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.213.123"/>
    </slice>
    <from sec="1191992416" usec="0"/>
    <to sec="1191993279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.37.230.123"/>
    </slice>
    <from sec="1191992721" usec="0"/>
    <to sec="1191992750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.207.244.123"/>
    </slice>
    <from sec="1191992776" usec="0"/>
    <to sec="1191992820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.164.2.124"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.34.72.124"/>
    </slice>
    <from sec="1191992711" usec="0"/>
    <to sec="1191992727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.156.77.124"/>
    </slice>
    <from sec="1191993016" usec="0"/>
    <to sec="1191993105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.122.85.124"/>
    </slice>
    <from sec="1191992626" usec="0"/>
    <to sec="1191992635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.204.197.124"/>
    </slice>
    <from sec="1191992557" usec="0"/>
    <to sec="1191992588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.22.228.124"/>
    </slice>
    <from sec="1191993215" usec="0"/>
    <to sec="1191993228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.71.65.125"/>
    </slice>
    <from sec="1191992655" usec="0"/>
    <to sec="1191992738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.58.96.125"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.165.99.125"/>
    </slice>
    <from sec="1191993001" usec="0"/>
    <to sec="1191993037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.32.137.125"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.19.233.125"/>
    </slice>
    <from sec="1191993105" usec="0"/>
    <to sec="1191993123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.59.19.126"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.182.54.126"/>
    </slice>
    <from sec="1191992703" usec="0"/>
    <to sec="1191992751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.148.103.126"/>
    </slice>
    <from sec="1191992895" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.69.212.126"/>
    </slice>
    <from sec="1191992668" usec="0"/>
    <to sec="1191992857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.18.238.126"/>
    </slice>
    <from sec="1191992873" usec="0"/>
    <to sec="1191992955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.45.17.127"/>
    </slice>
    <from sec="1191992694" usec="0"/>
    <to sec="1191992731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.18.32.127"/>
    </slice>
    <from sec="1191992973" usec="0"/>
    <to sec="1191992999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.79.64.127"/>
    </slice>
    <from sec="1191993074" usec="0"/>
    <to sec="1191993076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.169.97.127"/>
    </slice>
    <from sec="1191992656" usec="0"/>
    <to sec="1191992766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.212.188.127"/>
    </slice>
    <from sec="1191993159" usec="0"/>
    <to sec="1191993205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.9.17.128"/>
    </slice>
    <from sec="1191992728" usec="0"/>
    <to sec="1191992771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.64.32.128"/>
    </slice>
    <from sec="1191992418" usec="0"/>
    <to sec="1191992476" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.112.104.128"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.152.128"/>
    </slice>
    <from sec="1191993141" usec="0"/>
    <to sec="1191993161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.239.173.128"/>
    </slice>
    <from sec="1191992898" usec="0"/>
    <to sec="1191992932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.52.214.128"/>
    </slice>
    <from sec="1191992969" usec="0"/>
    <to sec="1191993024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.38.20.129"/>
    </slice>
    <from sec="1191992450" usec="0"/>
    <to sec="1191993291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
831[label="220.74.227.233;d;712pkt 712fpkt", shape=diamond, color=yellow];
1575[label="180.49.166.235;s;280pkt 280fpkt", shape=diamond, color=yellow];
1900[label="172.130.72.43;s;786pkt 786fpkt", shape=diamond, color=yellow];
3006[label="211.116.87.70;d;42pkt 42fpkt", shape=diamond, color=yellow];
3633[label="220.74.227.200;d;95pkt 95fpkt", shape=diamond, color=yellow];
4279[label="220.74.227.138;d;10pkt 10fpkt", shape=diamond, color=yellow];
5407[label="5.2.239.195;d;68pkt 68fpkt", shape=diamond, color=yellow];
5629[label="180.49.166.218;s;21pkt 21fpkt", shape=diamond, color=yellow];
7432[label="220.74.227.233;d;419pkt 419fpkt", shape=hexagon, color=black];
8521[label="211.116.87.70;d;42pkt 42fpkt", shape=hexagon, color=black];
10035[label="5.2.239.195;d;66pkt 66fpkt", shape=hexagon, color=black];
10302[label="220.74.227.138;d;10pkt 10fpkt", shape=hexagon, color=black];
12437[label="172.130.72.43;906pkt 906fpkt", shape=pentagon, color=darkviolet];
16228[label="180.49.166.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16518[label="180.49.166.235;279pkt 279fpkt", shape=pentagon, color=darkviolet];
19917[label="180.49.166.218;2pkt 2fpkt", shape=invtriangle, color=brown];
20101[label="180.49.166.235;279pkt 279fpkt", shape=invtriangle, color=brown];
22588[label="180.49.166.235;280pkt 280fpkt", shape=invhouse, color=bisque];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.72.43:*, 220.74.227.233:80}[62.2424%]&lt;BR/&gt;{180.49.166.235:*, *:*}[23.0833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.799%)&lt;BR/&gt; 8080: (5.54909%)&lt;BR/&gt; 443: (0.674732%)&lt;BR/&gt; 995: (0.116333%)&lt;BR/&gt; 1501: (0.1047%)&gt;];
}
831--1900[label="0.926966;660pkt 660fpkt"];
831--7432[label="1;419pkt 419fpkt"];
831--11265[label="0.103933;74pkt 74fpkt"];
831--11285[label="0.0828652;59pkt 59fpkt"];
831--11338[label="0.103933;74pkt 74fpkt"];
831--11351[label="0.0828652;59pkt 59fpkt"];
831--11382[label="0.103933;74pkt 74fpkt"];
831--11392[label="0.0828652;59pkt 59fpkt"];
831--12437[label="1;712pkt 712fpkt"];
1575--3006[label="1;42pkt 42fpkt"];
1575--3633[label="1;95pkt 95fpkt"];
1575--4279[label="0.5;5pkt 5fpkt"];
1575--5407[label="0.941176;64pkt 64fpkt"];
1575--8521[label="1;42pkt 42fpkt"];
1575--10035[label="0.969697;64pkt 64fpkt"];
1575--10302[label="0.5;5pkt 5fpkt"];
1575--11265[label="0.0607143;17pkt 17fpkt"];
1575--11285[label="0.107143;30pkt 30fpkt"];
1575--11338[label="0.0607143;17pkt 17fpkt"];
1575--11351[label="0.107143;30pkt 30fpkt"];
1575--11382[label="0.0607143;17pkt 17fpkt"];
1575--11392[label="0.107143;30pkt 30fpkt"];
1575--16518[label="1;279pkt 279fpkt"];
1575--20101[label="1;279pkt 279fpkt"];
1575--22588[label="1;280pkt 280fpkt"];
1900--2876[label="0.0212766;5pkt 5fpkt"];
1900--3404[label="0.0188679;1pkt 1fpkt"];
1900--3539[label="0.0147059;1pkt 1fpkt"];
1900--4279[label="0.1;1pkt 1fpkt"];
1900--5959[label="0.00199601;1pkt 1fpkt"];
1900--6516[label="0.00896861;2pkt 2fpkt"];
1900--6878[label="0.021978;2pkt 2fpkt"];
1900--7432[label="1;419pkt 419fpkt"];
1900--7575[label="0.00254453;2pkt 2fpkt"];
1900--7696[label="0.00508906;4pkt 4fpkt"];
1900--8054[label="0.00381679;3pkt 3fpkt"];
1900--8080[label="0.00460829;1pkt 1fpkt"];
1900--8267[label="0.0160643;4pkt 4fpkt"];
1900--8377[label="0.0188679;1pkt 1fpkt"];
1900--9660[label="0.00157978;1pkt 1fpkt"];
1900--9756[label="0.0196078;1pkt 1fpkt"];
1900--10302[label="0.1;1pkt 1fpkt"];
1900--10451[label="0.0152672;2pkt 2fpkt"];
1900--10634[label="0.0212766;5pkt 5fpkt"];
1900--10670[label="0.021978;2pkt 2fpkt"];
1900--11116[label="0.02;1pkt 1fpkt"];
1900--11265[label="0.0954198;75pkt 75fpkt"];
1900--11285[label="0.0801527;63pkt 63fpkt"];
1900--11338[label="0.0954198;75pkt 75fpkt"];
1900--11351[label="0.0801527;63pkt 63fpkt"];
1900--11382[label="0.0954198;75pkt 75fpkt"];
1900--11392[label="0.0801527;63pkt 63fpkt"];
1900--12437[label="0.998728;785pkt 785fpkt"];
3006--8521[label="1;42pkt 42fpkt"];
3006--11265[label="0.380952;16pkt 16fpkt"];
3006--11285[label="0.47619;20pkt 20fpkt"];
3006--11338[label="0.380952;16pkt 16fpkt"];
3006--11351[label="0.47619;20pkt 20fpkt"];
3006--11382[label="0.380952;16pkt 16fpkt"];
3006--11392[label="0.47619;20pkt 20fpkt"];
3006--16518[label="1;42pkt 42fpkt"];
3006--20101[label="1;42pkt 42fpkt"];
3006--22588[label="1;42pkt 42fpkt"];
3633--16518[label="1;95pkt 95fpkt"];
3633--20101[label="1;95pkt 95fpkt"];
3633--22588[label="1;95pkt 95fpkt"];
4279--10302[label="1;10pkt 10fpkt"];
4279--11285[label="0.2;2pkt 2fpkt"];
4279--11351[label="0.2;2pkt 2fpkt"];
4279--11392[label="0.2;2pkt 2fpkt"];
4279--12437[label="0.1;1pkt 1fpkt"];
4279--16518[label="0.4;4pkt 4fpkt"];
4279--20101[label="0.4;4pkt 4fpkt"];
4279--22588[label="0.5;5pkt 5fpkt"];
5407--5629[label="0.190476;4pkt 4fpkt"];
5407--10035[label="1;66pkt 66fpkt"];
5407--16518[label="0.941176;64pkt 64fpkt"];
5407--20101[label="0.941176;64pkt 64fpkt"];
5407--22588[label="0.941176;64pkt 64fpkt"];
5629--9230[label="0.0952381;2pkt 2fpkt"];
5629--10035[label="0.0952381;2pkt 2fpkt"];
5629--19917[label="0.5;1pkt 1fpkt"];
7432--11265[label="0.176611;74pkt 74fpkt"];
7432--11285[label="0.140811;59pkt 59fpkt"];
7432--11338[label="0.176611;74pkt 74fpkt"];
7432--11351[label="0.140811;59pkt 59fpkt"];
7432--11382[label="0.176611;74pkt 74fpkt"];
7432--11392[label="0.140811;59pkt 59fpkt"];
7432--12437[label="1;419pkt 419fpkt"];
8521--11265[label="0.380952;16pkt 16fpkt"];
8521--11285[label="0.47619;20pkt 20fpkt"];
8521--11338[label="0.380952;16pkt 16fpkt"];
8521--11351[label="0.47619;20pkt 20fpkt"];
8521--11382[label="0.380952;16pkt 16fpkt"];
8521--11392[label="0.47619;20pkt 20fpkt"];
8521--16518[label="1;42pkt 42fpkt"];
8521--20101[label="1;42pkt 42fpkt"];
8521--22588[label="1;42pkt 42fpkt"];
10035--16518[label="0.969697;64pkt 64fpkt"];
10035--20101[label="0.969697;64pkt 64fpkt"];
10035--22588[label="0.969697;64pkt 64fpkt"];
10302--11285[label="0.2;2pkt 2fpkt"];
10302--11351[label="0.2;2pkt 2fpkt"];
10302--11392[label="0.2;2pkt 2fpkt"];
10302--12437[label="0.1;1pkt 1fpkt"];
10302--16518[label="0.4;4pkt 4fpkt"];
10302--20101[label="0.4;4pkt 4fpkt"];
10302--22588[label="0.5;5pkt 5fpkt"];
16228--19917[label="1;1pkt 1fpkt"];
16518--20101[label="1;279pkt 279fpkt"];
16518--22588[label="1;279pkt 279fpkt"];
20101--22588[label="1;279pkt 279fpkt"];
</description>
    <slice>
      <filter src_ip="180.49.166.235"/>
      <filter dst_ip="220.74.227.233" dst_port="80" src_ip="172.130.72.43"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.71.46.129"/>
    </slice>
    <from sec="1191992749" usec="0"/>
    <to sec="1191992783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.70.72.129"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.127.241.129"/>
    </slice>
    <from sec="1191992976" usec="0"/>
    <to sec="1191993143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.106.42.130"/>
    </slice>
    <from sec="1191992916" usec="0"/>
    <to sec="1191992953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.138.61.130"/>
    </slice>
    <from sec="1191992771" usec="0"/>
    <to sec="1191992791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.226.66.130"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.81.188.131"/>
    </slice>
    <from sec="1191993000" usec="0"/>
    <to sec="1191993147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.33.33.132"/>
    </slice>
    <from sec="1191993072" usec="0"/>
    <to sec="1191993094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.128.100.132"/>
    </slice>
    <from sec="1191993229" usec="0"/>
    <to sec="1191993267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.158.174.132"/>
    </slice>
    <from sec="1191993161" usec="0"/>
    <to sec="1191993169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.236.198.132"/>
    </slice>
    <from sec="1191992831" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.154.133"/>
    </slice>
    <from sec="1191993150" usec="0"/>
    <to sec="1191993180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.21.161.133"/>
    </slice>
    <from sec="1191992428" usec="0"/>
    <to sec="1191993067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.219.247.133"/>
    </slice>
    <from sec="1191992821" usec="0"/>
    <to sec="1191993012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.53.48.134"/>
    </slice>
    <from sec="1191992885" usec="0"/>
    <to sec="1191992902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_784{
style=filled;
color=gray75;
1129[label="169.6.74.135;s;1443pkt 1443fpkt", shape=diamond, color=yellow];
14404[label="169.6.74.135;1454pkt 1454fpkt", shape=pentagon, color=darkviolet];
18738[label="169.6.74.135;1453pkt 1453fpkt", shape=invtriangle, color=brown];
stat784[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.74.135:30903, *:*}[98.2806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30903: (49.1379%)&lt;BR/&gt; 16275: (1.50575%)&lt;BR/&gt; 11275: (1.24138%)&lt;BR/&gt; 23676: (0.551724%)&lt;BR/&gt; 7871: (0.367816%)&gt;];
}
1129--4595[label="0.000882613;1pkt 1fpkt"];
1129--7561[label="0.000693001;1pkt 1fpkt"];
1129--14404[label="1;1443pkt 1443fpkt"];
1129--18738[label="0.999307;1442pkt 1442fpkt"];
14404--18738[label="1;1453pkt 1453fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.74.135" src_port="30903"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.43.169.135"/>
    </slice>
    <from sec="1191993238" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.162.190.135"/>
    </slice>
    <from sec="1191993097" usec="0"/>
    <to sec="1191993102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.146.84.136"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.9.129.136"/>
    </slice>
    <from sec="1191992828" usec="0"/>
    <to sec="1191992873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
14432[label="172.130.189.136;19pkt 19fpkt", shape=pentagon, color=darkviolet];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.189.136:80, 61.86.169.195:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65032: (2.63158%)&lt;BR/&gt; 64539: (2.63158%)&lt;BR/&gt; 64256: (2.63158%)&lt;BR/&gt; 62260: (2.63158%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="61.86.169.195" src_ip="172.130.189.136" src_port="80"/>
    </slice>
    <from sec="1191992453" usec="0"/>
    <to sec="1191993271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.41.233.136"/>
    </slice>
    <from sec="1191992797" usec="0"/>
    <to sec="1191992873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.228.32.137"/>
    </slice>
    <from sec="1191992584" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.177.174.137"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.12.209.137"/>
    </slice>
    <from sec="1191992942" usec="0"/>
    <to sec="1191992961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.252.251.137"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.152.164.138"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.52.0.139"/>
    </slice>
    <from sec="1191992924" usec="0"/>
    <to sec="1191992952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.69.139"/>
    </slice>
    <from sec="1191993105" usec="0"/>
    <to sec="1191993123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
14484[label="188.104.113.139;51pkt 51fpkt", shape=pentagon, color=darkviolet];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.113.139:*, 200.151.195.4:80}[52.9412%]&lt;BR/&gt;{188.104.113.139:*, 81.224.151.251:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1436: (0.980392%)&lt;BR/&gt; 1435: (0.980392%)&lt;BR/&gt; 1434: (0.980392%)&lt;BR/&gt; 1433: (0.980392%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="200.151.195.4" dst_port="80" src_ip="188.104.113.139"/>
      <filter dst_ip="81.224.151.251" dst_port="80" src_ip="188.104.113.139"/>
    </slice>
    <from sec="1191992433" usec="0"/>
    <to sec="1191992675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.124.114.139"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.0.148.139"/>
    </slice>
    <from sec="1191993057" usec="0"/>
    <to sec="1191993084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.137.54.140"/>
    </slice>
    <from sec="1191992650" usec="0"/>
    <to sec="1191992817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.203.114.140"/>
    </slice>
    <from sec="1191992757" usec="0"/>
    <to sec="1191992787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.176.0.141"/>
    </slice>
    <from sec="1191992969" usec="0"/>
    <to sec="1191993021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.230.33.141"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.140.34.141"/>
    </slice>
    <from sec="1191992524" usec="0"/>
    <to sec="1191993020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.253.125.141"/>
    </slice>
    <from sec="1191992860" usec="0"/>
    <to sec="1191992903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.141.141"/>
    </slice>
    <from sec="1191992882" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.0.175.141"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.197.212.141"/>
    </slice>
    <from sec="1191993284" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.18.96.142"/>
    </slice>
    <from sec="1191992466" usec="0"/>
    <to sec="1191992482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="171.57.172.142"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.83.21.143"/>
    </slice>
    <from sec="1191992410" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.5.41.143"/>
    </slice>
    <from sec="1191992426" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.79.90.143"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.78.144.143"/>
    </slice>
    <from sec="1191992896" usec="0"/>
    <to sec="1191992916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.98.152.143"/>
    </slice>
    <from sec="1191992852" usec="0"/>
    <to sec="1191992877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.80.155.143"/>
    </slice>
    <from sec="1191992728" usec="0"/>
    <to sec="1191992760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.2.160.143"/>
    </slice>
    <from sec="1191992446" usec="0"/>
    <to sec="1191992525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.18.47.144"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.243.101.144"/>
    </slice>
    <from sec="1191993296" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.104.144"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.127.17.145"/>
    </slice>
    <from sec="1191993147" usec="0"/>
    <to sec="1191993233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.920771,3.05958,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_824{
style=filled;
color=gray75;
3473[label="188.104.20.145;s;262pkt 262fpkt", shape=diamond, color=yellow];
14607[label="188.104.20.145;279pkt 279fpkt", shape=pentagon, color=darkviolet];
stat824[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.20.145:53230, *:53}[70.6093%]&lt;BR/&gt;{188.104.20.145:53, *:*}[25.448%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.3364%)&lt;BR/&gt; 53230: (35.305%)&lt;BR/&gt; 0: (4.06654%)&lt;BR/&gt; 10053: (0.369686%)&lt;BR/&gt; 65215: (0.184843%)&gt;];
}
3473--4062[label="0.0175439;1pkt 1fpkt"];
3473--4066[label="0.00381679;1pkt 1fpkt"];
3473--4136[label="0.008;1pkt 1fpkt"];
3473--4737[label="0.0104167;1pkt 1fpkt"];
3473--4752[label="0.00574713;1pkt 1fpkt"];
3473--4820[label="0.00552486;1pkt 1fpkt"];
3473--4832[label="0.00564972;1pkt 1fpkt"];
3473--4842[label="0.00787402;1pkt 1fpkt"];
3473--4850[label="0.00657895;1pkt 1fpkt"];
3473--4863[label="0.00558659;1pkt 1fpkt"];
3473--4883[label="0.00515464;1pkt 1fpkt"];
3473--5075[label="0.01;1pkt 1fpkt"];
3473--5444[label="0.0105263;1pkt 1fpkt"];
3473--5533[label="0.00909091;1pkt 1fpkt"];
3473--5560[label="0.00381679;1pkt 1fpkt"];
3473--6094[label="0.00833333;1pkt 1fpkt"];
3473--6100[label="0.00641026;1pkt 1fpkt"];
3473--6139[label="0.010989;1pkt 1fpkt"];
3473--6184[label="0.00641026;1pkt 1fpkt"];
3473--6241[label="0.00404858;1pkt 1fpkt"];
3473--6763[label="0.0151515;1pkt 1fpkt"];
3473--6800[label="0.0111111;1pkt 1fpkt"];
3473--6817[label="0.0111111;2pkt 2fpkt"];
3473--7475[label="0.00381679;1pkt 1fpkt"];
3473--8136[label="0.00381679;1pkt 1fpkt"];
3473--8147[label="0.00381679;1pkt 1fpkt"];
3473--8409[label="0.00568182;1pkt 1fpkt"];
3473--8478[label="0.00666667;1pkt 1fpkt"];
3473--8815[label="0.0227273;1pkt 1fpkt"];
3473--9348[label="0.00909091;1pkt 1fpkt"];
3473--9445[label="0.02;1pkt 1fpkt"];
3473--9619[label="0.0119048;1pkt 1fpkt"];
3473--9627[label="0.00574713;1pkt 1fpkt"];
3473--9710[label="0.00564972;1pkt 1fpkt"];
3473--10149[label="0.00833333;1pkt 1fpkt"];
3473--10153[label="0.00666667;1pkt 1fpkt"];
3473--10208[label="0.0114943;1pkt 1fpkt"];
3473--10210[label="0.00578035;1pkt 1fpkt"];
3473--10584[label="0.00381679;1pkt 1fpkt"];
3473--11040[label="0.00381679;1pkt 1fpkt"];
3473--11052[label="0.01;1pkt 1fpkt"];
3473--11215[label="0.00833333;1pkt 1fpkt"];
3473--11311[label="0.0114504;3pkt 3fpkt"];
3473--11318[label="0.00381679;1pkt 1fpkt"];
3473--11337[label="0.179389;47pkt 47fpkt"];
3473--11370[label="0.0114504;3pkt 3fpkt"];
3473--11372[label="0.00381679;1pkt 1fpkt"];
3473--11381[label="0.179389;47pkt 47fpkt"];
3473--11397[label="0.0114504;3pkt 3fpkt"];
3473--11399[label="0.00381679;1pkt 1fpkt"];
3473--14607[label="1;262pkt 262fpkt"];
</description>
    <slice>
      <filter src_ip="188.104.20.145" src_port="53"/>
      <filter dst_port="53" src_ip="188.104.20.145" src_port="53230"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.58.35.145"/>
    </slice>
    <from sec="1191992600" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.18.47.145"/>
    </slice>
    <from sec="1191992439" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.152.56.145"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.203.144.145"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.145"/>
    </slice>
    <from sec="1191993041" usec="0"/>
    <to sec="1191993075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.164.33.146"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.90.167.146"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191992485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.217.216.146"/>
    </slice>
    <from sec="1191993008" usec="0"/>
    <to sec="1191993034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.101.147"/>
    </slice>
    <from sec="1191992936" usec="0"/>
    <to sec="1191993196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.116.147"/>
    </slice>
    <from sec="1191992425" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.20.122.147"/>
    </slice>
    <from sec="1191992437" usec="0"/>
    <to sec="1191992470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.195.176.147"/>
    </slice>
    <from sec="1191992896" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.68.225.147"/>
    </slice>
    <from sec="1191992700" usec="0"/>
    <to sec="1191992729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.8.98.148"/>
    </slice>
    <from sec="1191992856" usec="0"/>
    <to sec="1191992893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.125.194.148"/>
    </slice>
    <from sec="1191992908" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.86.210.148"/>
    </slice>
    <from sec="1191992713" usec="0"/>
    <to sec="1191992753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.105.24.149"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.220.26.149"/>
    </slice>
    <from sec="1191992991" usec="0"/>
    <to sec="1191993036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.193.85.149"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.214.99.149"/>
    </slice>
    <from sec="1191992410" usec="0"/>
    <to sec="1191992430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.209.250.149"/>
    </slice>
    <from sec="1191992996" usec="0"/>
    <to sec="1191993019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.156.122.150"/>
    </slice>
    <from sec="1191993038" usec="0"/>
    <to sec="1191993136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.204.166.150"/>
    </slice>
    <from sec="1191993209" usec="0"/>
    <to sec="1191993247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.162.17.151"/>
    </slice>
    <from sec="1191993000" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.210.29.151"/>
    </slice>
    <from sec="1191992809" usec="0"/>
    <to sec="1191992861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.126.68.151"/>
    </slice>
    <from sec="1191993163" usec="0"/>
    <to sec="1191993192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.78.72.151"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.20.122.151"/>
    </slice>
    <from sec="1191992546" usec="0"/>
    <to sec="1191992692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.153.0.152"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.152.164.152"/>
    </slice>
    <from sec="1191992659" usec="0"/>
    <to sec="1191992683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.11.240.152"/>
    </slice>
    <from sec="1191992719" usec="0"/>
    <to sec="1191992746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.68.153"/>
    </slice>
    <from sec="1191993261" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.232.90.153"/>
    </slice>
    <from sec="1191992739" usec="0"/>
    <to sec="1191992775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.242.109.153"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.227.162.153"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.188.0.154"/>
    </slice>
    <from sec="1191992878" usec="0"/>
    <to sec="1191992955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.176.104.154"/>
    </slice>
    <from sec="1191993248" usec="0"/>
    <to sec="1191993279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.20.122.154"/>
    </slice>
    <from sec="1191992744" usec="0"/>
    <to sec="1191992787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.178.132.154"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.13.173.154"/>
    </slice>
    <from sec="1191992716" usec="0"/>
    <to sec="1191992774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.237.232.154"/>
    </slice>
    <from sec="1191992512" usec="0"/>
    <to sec="1191992543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.218.16.155"/>
    </slice>
    <from sec="1191993205" usec="0"/>
    <to sec="1191993265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.37.171.155"/>
    </slice>
    <from sec="1191992920" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.124.183.155"/>
    </slice>
    <from sec="1191992962" usec="0"/>
    <to sec="1191993073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.66.213.155"/>
    </slice>
    <from sec="1191993030" usec="0"/>
    <to sec="1191993049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.127.240.155"/>
    </slice>
    <from sec="1191993073" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.152.218.156"/>
    </slice>
    <from sec="1191992802" usec="0"/>
    <to sec="1191992820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.157.219.156"/>
    </slice>
    <from sec="1191992902" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.207.232.156"/>
    </slice>
    <from sec="1191993078" usec="0"/>
    <to sec="1191993115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.77.27.157"/>
    </slice>
    <from sec="1191993062" usec="0"/>
    <to sec="1191993106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.112.151.157"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.101.218.157"/>
    </slice>
    <from sec="1191992878" usec="0"/>
    <to sec="1191992903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.55.170.158"/>
    </slice>
    <from sec="1191992806" usec="0"/>
    <to sec="1191992852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.192.201.158"/>
    </slice>
    <from sec="1191992865" usec="0"/>
    <to sec="1191992914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.40.205.158"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_882{
style=filled;
color=gray75;
462[label="200.173.70.132;s;64pkt 64fpkt", shape=diamond, color=yellow];
484[label="221.51.215.23;d;2pkt 2fpkt", shape=diamond, color=yellow];
2668[label="201.67.0.159;s;2403pkt 2403fpkt", shape=diamond, color=yellow];
6073[label="112.108.247.196;d;3pkt 3fpkt", shape=diamond, color=yellow];
7597[label="221.51.215.23;d;2pkt 2fpkt", shape=hexagon, color=black];
14333[label="200.173.70.132;80pkt 80fpkt", shape=pentagon, color=darkviolet];
14940[label="201.67.0.159;2580pkt 2580fpkt", shape=pentagon, color=darkviolet];
18688[label="200.173.70.132;81pkt 81fpkt", shape=invtriangle, color=brown];
21580[label="200.173.70.132;80pkt 80fpkt", shape=invhouse, color=bisque];
stat882[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.0.159:20129, *:20129}[54.3576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (73.56%)&lt;BR/&gt; 20190: (2.9084%)&lt;BR/&gt; 20128: (2.21907%)&lt;BR/&gt; 10000: (0.1322%)&lt;BR/&gt; 41281: (0.0849858%)&gt;];
}
462--484[label="1;2pkt 2fpkt"];
462--6073[label="0.666667;2pkt 2fpkt"];
462--7597[label="1;2pkt 2fpkt"];
462--14333[label="1;64pkt 64fpkt"];
462--18688[label="1;64pkt 64fpkt"];
462--21580[label="1;64pkt 64fpkt"];
484--7597[label="1;2pkt 2fpkt"];
484--14333[label="1;2pkt 2fpkt"];
484--18688[label="1;2pkt 2fpkt"];
484--21580[label="1;2pkt 2fpkt"];
2668--6073[label="0.333333;1pkt 1fpkt"];
2668--14940[label="0.999584;2402pkt 2402fpkt"];
6073--14333[label="0.666667;2pkt 2fpkt"];
6073--14940[label="0.333333;1pkt 1fpkt"];
6073--18688[label="0.666667;2pkt 2fpkt"];
6073--21580[label="0.666667;2pkt 2fpkt"];
7597--14333[label="1;2pkt 2fpkt"];
7597--18688[label="1;2pkt 2fpkt"];
7597--21580[label="1;2pkt 2fpkt"];
14333--18688[label="1;80pkt 80fpkt"];
14333--21580[label="1;80pkt 80fpkt"];
18688--21580[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="201.67.0.159" src_port="20129"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_883{
style=filled;
color=gray75;
4569[label="169.6.156.159;s;9pkt 9fpkt", shape=diamond, color=yellow];
14949[label="169.6.156.159;9pkt 9fpkt", shape=pentagon, color=darkviolet];
19098[label="169.6.156.159;9pkt 9fpkt", shape=invtriangle, color=brown];
stat883[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.156.159:*, 62.227.33.129:80}[33.3333%]&lt;BR/&gt;{169.6.156.159:*, 62.227.33.184:80}[33.3333%]&lt;BR/&gt;{169.6.156.159:*, 182.218.111.139:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1272: (5.55556%)&lt;BR/&gt; 1269: (5.55556%)&lt;BR/&gt; 1268: (5.55556%)&lt;BR/&gt; 1267: (5.55556%)&gt;];
}
4569--14949[label="1;9pkt 9fpkt"];
4569--19098[label="1;9pkt 9fpkt"];
14949--19098[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="62.227.33.184" dst_port="80" src_ip="169.6.156.159"/>
      <filter dst_ip="62.227.33.129" dst_port="80" src_ip="169.6.156.159"/>
      <filter dst_ip="182.218.111.139" dst_port="80" src_ip="169.6.156.159"/>
    </slice>
    <from sec="1191992774" usec="0"/>
    <to sec="1191992874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.236.238.159"/>
    </slice>
    <from sec="1191993262" usec="0"/>
    <to sec="1191993274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.96.7.160"/>
    </slice>
    <from sec="1191992716" usec="0"/>
    <to sec="1191992738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.171.128.160"/>
    </slice>
    <from sec="1191992534" usec="0"/>
    <to sec="1191992639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.121.2.161"/>
    </slice>
    <from sec="1191992956" usec="0"/>
    <to sec="1191993029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.38.161"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.143.183.161"/>
    </slice>
    <from sec="1191992977" usec="0"/>
    <to sec="1191993035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.219.215.161"/>
    </slice>
    <from sec="1191992903" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.124.225.161"/>
    </slice>
    <from sec="1191992754" usec="0"/>
    <to sec="1191992799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.234.161"/>
    </slice>
    <from sec="1191992523" usec="0"/>
    <to sec="1191992785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.117.36.162"/>
    </slice>
    <from sec="1191992871" usec="0"/>
    <to sec="1191992937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.23.44.162"/>
    </slice>
    <from sec="1191992564" usec="0"/>
    <to sec="1191992606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.70.104.162"/>
    </slice>
    <from sec="1191992752" usec="0"/>
    <to sec="1191992806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.23.106.162"/>
    </slice>
    <from sec="1191992926" usec="0"/>
    <to sec="1191992952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.135.146.162"/>
    </slice>
    <from sec="1191993168" usec="0"/>
    <to sec="1191993253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.81.149.162"/>
    </slice>
    <from sec="1191992766" usec="0"/>
    <to sec="1191992794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.83.163"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.100.147.163"/>
    </slice>
    <from sec="1191992621" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.206.160.163"/>
    </slice>
    <from sec="1191992759" usec="0"/>
    <to sec="1191992779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.87.207.163"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.72.8.164"/>
    </slice>
    <from sec="1191992690" usec="0"/>
    <to sec="1191992718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.79.121.164"/>
    </slice>
    <from sec="1191992839" usec="0"/>
    <to sec="1191992895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.164"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.121.156.164"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.136.253.164"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.64.31.165"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.193.163.165"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.47.1.166"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.61.137.166"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.56.212.166"/>
    </slice>
    <from sec="1191992693" usec="0"/>
    <to sec="1191992735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.226.166"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.92.249.166"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_915{
style=filled;
color=gray75;
15134[label="201.67.5.167;143pkt 143fpkt", shape=pentagon, color=darkviolet];
stat915[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.5.167:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="201.67.5.167"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.32.30.167"/>
    </slice>
    <from sec="1191992721" usec="0"/>
    <to sec="1191992761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.167"/>
    </slice>
    <from sec="1191992574" usec="0"/>
    <to sec="1191992587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.125.77.168"/>
    </slice>
    <from sec="1191992739" usec="0"/>
    <to sec="1191992795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.125.85.168"/>
    </slice>
    <from sec="1191992643" usec="0"/>
    <to sec="1191992724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.188.135.168"/>
    </slice>
    <from sec="1191992448" usec="0"/>
    <to sec="1191992593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.32.20.169"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.185.56.169"/>
    </slice>
    <from sec="1191992550" usec="0"/>
    <to sec="1191992562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.197.112.169"/>
    </slice>
    <from sec="1191992757" usec="0"/>
    <to sec="1191992785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.100.148.169"/>
    </slice>
    <from sec="1191992816" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.144.9.170"/>
    </slice>
    <from sec="1191993018" usec="0"/>
    <to sec="1191993062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.179.124.170"/>
    </slice>
    <from sec="1191993268" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.224.149.170"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.76.236.170"/>
    </slice>
    <from sec="1191992888" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.226.66.171"/>
    </slice>
    <from sec="1191992750" usec="0"/>
    <to sec="1191992774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.81.171"/>
    </slice>
    <from sec="1191992481" usec="0"/>
    <to sec="1191993243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.76.96.171"/>
    </slice>
    <from sec="1191992429" usec="0"/>
    <to sec="1191992442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.22.108.171"/>
    </slice>
    <from sec="1191993033" usec="0"/>
    <to sec="1191993038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.203.173.171"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.171.26.172"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.7.129.172"/>
    </slice>
    <from sec="1191992997" usec="0"/>
    <to sec="1191993024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.82.205.172"/>
    </slice>
    <from sec="1191992930" usec="0"/>
    <to sec="1191992954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.71.233.172"/>
    </slice>
    <from sec="1191992602" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.10.9.173"/>
    </slice>
    <from sec="1191992899" usec="0"/>
    <to sec="1191992951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.161.82.173"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.41.122.173"/>
    </slice>
    <from sec="1191992961" usec="0"/>
    <to sec="1191992976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.173"/>
    </slice>
    <from sec="1191993011" usec="0"/>
    <to sec="1191993033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.52.22.174"/>
    </slice>
    <from sec="1191993090" usec="0"/>
    <to sec="1191993120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.229.115.174"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_944{
style=filled;
color=gray75;
250[label="180.49.251.174;s;1164pkt 1164fpkt", shape=diamond, color=yellow];
15312[label="180.49.251.174;1242pkt 1242fpkt", shape=pentagon, color=darkviolet];
19320[label="180.49.251.174;1241pkt 1241fpkt", shape=invtriangle, color=brown];
stat944[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.251.174:47799, *:*}[99.7585%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47799: (49.8766%)&lt;BR/&gt; 4825: (0.123389%)&lt;BR/&gt; 50955: (0.0822594%)&lt;BR/&gt; 50798: (0.0822594%)&lt;BR/&gt; 50563: (0.0822594%)&gt;];
}
250--15312[label="1;1164pkt 1164fpkt"];
250--19320[label="0.999141;1163pkt 1163fpkt"];
15312--19320[label="1;1241pkt 1241fpkt"];
</description>
    <slice>
      <filter src_ip="180.49.251.174" src_port="47799"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.171.101.175"/>
    </slice>
    <from sec="1191993231" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.110.129.175"/>
    </slice>
    <from sec="1191992683" usec="0"/>
    <to sec="1191992714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.88.161.175"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.126.172.175"/>
    </slice>
    <from sec="1191993078" usec="0"/>
    <to sec="1191993143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.90.196.175"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191993015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.212.211.175"/>
    </slice>
    <from sec="1191992522" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.136.226.175"/>
    </slice>
    <from sec="1191992528" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.8.17.176"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.13.119.176"/>
    </slice>
    <from sec="1191993058" usec="0"/>
    <to sec="1191993087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.75.185.176"/>
    </slice>
    <from sec="1191992724" usec="0"/>
    <to sec="1191992761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.22.50.177"/>
    </slice>
    <from sec="1191992978" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.20.53.177"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.96.177"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.131.213.177"/>
    </slice>
    <from sec="1191992895" usec="0"/>
    <to sec="1191992954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.222.226.177"/>
    </slice>
    <from sec="1191992715" usec="0"/>
    <to sec="1191993090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.209.12.178"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.160.96.178"/>
    </slice>
    <from sec="1191992605" usec="0"/>
    <to sec="1191992610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.203.134.178"/>
    </slice>
    <from sec="1191992983" usec="0"/>
    <to sec="1191993045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.109.49.179"/>
    </slice>
    <from sec="1191992898" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.76.71.179"/>
    </slice>
    <from sec="1191992971" usec="0"/>
    <to sec="1191993055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.23.75.179"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.81.105.179"/>
    </slice>
    <from sec="1191992887" usec="0"/>
    <to sec="1191992966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.69.134.179"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.198.169.179"/>
    </slice>
    <from sec="1191992644" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.120.233.179"/>
    </slice>
    <from sec="1191992749" usec="0"/>
    <to sec="1191992792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.125.72.180"/>
    </slice>
    <from sec="1191992587" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.109.168.180"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.197.10.181"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191992960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.124.37.181"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.104.93.181"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.58.213.181"/>
    </slice>
    <from sec="1191992712" usec="0"/>
    <to sec="1191992737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.220.233.181"/>
    </slice>
    <from sec="1191992844" usec="0"/>
    <to sec="1191992934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
5845[label="62.183.61.182;s;3pkt 3fpkt", shape=diamond, color=yellow];
15481[label="62.183.61.182;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19421[label="62.183.61.182;3pkt 3fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.183.61.182:80, 172.159.120.192:2476}[33.3333%]&lt;BR/&gt;{62.183.61.182:80, 172.159.120.192:2478}[33.3333%]&lt;BR/&gt;{62.183.61.182:80, 172.159.120.192:2480}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2480: (16.6667%)&lt;BR/&gt; 2478: (16.6667%)&lt;BR/&gt; 2476: (16.6667%)&gt;];
}
5845--15481[label="1;3pkt 3fpkt"];
5845--19421[label="1;3pkt 3fpkt"];
15481--19421[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.120.192" dst_port="2480" src_ip="62.183.61.182" src_port="80"/>
      <filter dst_ip="172.159.120.192" dst_port="2478" src_ip="62.183.61.182" src_port="80"/>
      <filter dst_ip="172.159.120.192" dst_port="2476" src_ip="62.183.61.182" src_port="80"/>
    </slice>
    <from sec="1191992452" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.1.146.182"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.93.161.182"/>
    </slice>
    <from sec="1191992904" usec="0"/>
    <to sec="1191992949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.172.208.182"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.184.227.182"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.206.253.182"/>
    </slice>
    <from sec="1191992919" usec="0"/>
    <to sec="1191992948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.208.32.183"/>
    </slice>
    <from sec="1191992917" usec="0"/>
    <to sec="1191992938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.104.34.183"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.1.101.183"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.210.138.183"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.118.177.183"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191992541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.151.13.184"/>
    </slice>
    <from sec="1191992613" usec="0"/>
    <to sec="1191992663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.124.29.184"/>
    </slice>
    <from sec="1191992808" usec="0"/>
    <to sec="1191992843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.199.41.184"/>
    </slice>
    <from sec="1191992786" usec="0"/>
    <to sec="1191992799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.74.115.184"/>
    </slice>
    <from sec="1191993128" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.237.188.184"/>
    </slice>
    <from sec="1191993185" usec="0"/>
    <to sec="1191993212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.149.183.185"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.156.0.186"/>
    </slice>
    <from sec="1191992735" usec="0"/>
    <to sec="1191992869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.7.186"/>
    </slice>
    <from sec="1191992825" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.212.25.186"/>
    </slice>
    <from sec="1191992612" usec="0"/>
    <to sec="1191993277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.22.26.186"/>
    </slice>
    <from sec="1191992625" usec="0"/>
    <to sec="1191992726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.125.58.186"/>
    </slice>
    <from sec="1191992721" usec="0"/>
    <to sec="1191993098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.202.177.186"/>
    </slice>
    <from sec="1191993099" usec="0"/>
    <to sec="1191993278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.174.249.186"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.45.5.187"/>
    </slice>
    <from sec="1191993273" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.173.96.187"/>
    </slice>
    <from sec="1191992832" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.64.224.187"/>
    </slice>
    <from sec="1191993283" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.69.137.188"/>
    </slice>
    <from sec="1191992421" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.193.24.189"/>
    </slice>
    <from sec="1191992775" usec="0"/>
    <to sec="1191992852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.39.189"/>
    </slice>
    <from sec="1191992458" usec="0"/>
    <to sec="1191992459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.75.48.189"/>
    </slice>
    <from sec="1191992544" usec="0"/>
    <to sec="1191992565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.246.190"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.218.3.191"/>
    </slice>
    <from sec="1191992431" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.252.17.191"/>
    </slice>
    <from sec="1191992932" usec="0"/>
    <to sec="1191992949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.144.42.191"/>
    </slice>
    <from sec="1191992773" usec="0"/>
    <to sec="1191992817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.127.74.191"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.51.14.192"/>
    </slice>
    <from sec="1191993023" usec="0"/>
    <to sec="1191993050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.32.76.192"/>
    </slice>
    <from sec="1191992910" usec="0"/>
    <to sec="1191992957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.133.136.192"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191992446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.185.237.192"/>
    </slice>
    <from sec="1191992471" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.97.88.193"/>
    </slice>
    <from sec="1191992609" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.179.195.193"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.72.105.194"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.194"/>
    </slice>
    <from sec="1191993177" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.213.200.194"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.16.22.195"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.176.32.195"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.133.122.195"/>
    </slice>
    <from sec="1191992956" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.146.195"/>
    </slice>
    <from sec="1191993148" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.117.213.195"/>
    </slice>
    <from sec="1191992976" usec="0"/>
    <to sec="1191993031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.194.5.196"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.139.25.196"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.79.196"/>
    </slice>
    <from sec="1191992990" usec="0"/>
    <to sec="1191993273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.188.90.196"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.218.47.197"/>
    </slice>
    <from sec="1191992950" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.221.58.197"/>
    </slice>
    <from sec="1191992552" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.86.115.197"/>
    </slice>
    <from sec="1191993221" usec="0"/>
    <to sec="1191993257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.138.137.197"/>
    </slice>
    <from sec="1191992848" usec="0"/>
    <to sec="1191992859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.2.202.197"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.226.16.198"/>
    </slice>
    <from sec="1191992733" usec="0"/>
    <to sec="1191992758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.52.17.198"/>
    </slice>
    <from sec="1191992875" usec="0"/>
    <to sec="1191992963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.75.55.198"/>
    </slice>
    <from sec="1191992968" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1041{
style=filled;
color=gray75;
5939[label="192.2.238.198;s;461pkt 461fpkt", shape=diamond, color=yellow];
15822[label="192.2.238.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19659[label="192.2.238.198;2pkt 2fpkt", shape=invtriangle, color=brown];
22263[label="192.2.238.198;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1041[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.2.238.198:6667, *:*}[44.0347%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (22.0557%)&lt;BR/&gt; 6668: (4.38972%)&lt;BR/&gt; 6665: (4.06852%)&lt;BR/&gt; 6663: (3.42612%)&lt;BR/&gt; 6664: (3.21199%)&gt;];
}
5939--15822[label="1;2pkt 2fpkt"];
5939--19659[label="1;2pkt 2fpkt"];
5939--22263[label="1;2pkt 2fpkt"];
15822--19659[label="1;2pkt 2fpkt"];
15822--22263[label="1;2pkt 2fpkt"];
19659--22263[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="192.2.238.198" src_port="6667"/>
    </slice>
    <from sec="1191992976" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="168.79.231.199"/>
    </slice>
    <from sec="1191993039" usec="0"/>
    <to sec="1191993120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.194.13.200"/>
    </slice>
    <from sec="1191993127" usec="0"/>
    <to sec="1191993208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.147.65.200"/>
    </slice>
    <from sec="1191992417" usec="0"/>
    <to sec="1191993288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.37.98.201"/>
    </slice>
    <from sec="1191992957" usec="0"/>
    <to sec="1191992986" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.84.109.201"/>
    </slice>
    <from sec="1191992670" usec="0"/>
    <to sec="1191992723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.93.140.201"/>
    </slice>
    <from sec="1191992731" usec="0"/>
    <to sec="1191992891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.141.7.202"/>
    </slice>
    <from sec="1191992983" usec="0"/>
    <to sec="1191993013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.35.44.202"/>
    </slice>
    <from sec="1191992965" usec="0"/>
    <to sec="1191992978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.210.46.202"/>
    </slice>
    <from sec="1191992993" usec="0"/>
    <to sec="1191993052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.24.65.202"/>
    </slice>
    <from sec="1191992935" usec="0"/>
    <to sec="1191992961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.21.89.202"/>
    </slice>
    <from sec="1191992834" usec="0"/>
    <to sec="1191992961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.168.100.202"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.146.202"/>
    </slice>
    <from sec="1191992879" usec="0"/>
    <to sec="1191992968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.88.133.203"/>
    </slice>
    <from sec="1191993135" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="83.97.139.203"/>
    </slice>
    <from sec="1191992558" usec="0"/>
    <to sec="1191992584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.212.227.203"/>
    </slice>
    <from sec="1191993227" usec="0"/>
    <to sec="1191993252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.86.233.203"/>
    </slice>
    <from sec="1191992719" usec="0"/>
    <to sec="1191992794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.8.8.204"/>
    </slice>
    <from sec="1191992967" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.157.36.204"/>
    </slice>
    <from sec="1191992866" usec="0"/>
    <to sec="1191992906" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.118.42.204"/>
    </slice>
    <from sec="1191992443" usec="0"/>
    <to sec="1191992458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.86.74.204"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.246.75.204"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="82.202.185.204"/>
    </slice>
    <from sec="1191992956" usec="0"/>
    <to sec="1191993001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.112.206.204"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.145.1.205"/>
    </slice>
    <from sec="1191992546" usec="0"/>
    <to sec="1191992558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.165.48.205"/>
    </slice>
    <from sec="1191992414" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.200.74.205"/>
    </slice>
    <from sec="1191992645" usec="0"/>
    <to sec="1191992658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.154.205"/>
    </slice>
    <from sec="1191992525" usec="0"/>
    <to sec="1191992652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.22.192.205"/>
    </slice>
    <from sec="1191992725" usec="0"/>
    <to sec="1191992783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
3609[label="172.130.114.206;s;22pkt 22fpkt", shape=diamond, color=yellow];
6096[label="211.0.245.97;d;354pkt 354fpkt", shape=diamond, color=yellow];
9815[label="172.130.114.206;s;20pkt 20fpkt", shape=hexagon, color=black];
10150[label="211.0.245.97;d;317pkt 317fpkt", shape=hexagon, color=black];
15978[label="172.130.114.206;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19767[label="172.130.114.206;4pkt 4fpkt", shape=invtriangle, color=brown];
22343[label="172.130.114.206;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 211.0.245.97:0}[94.4%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3609--6096[label="0.0454545;1pkt 1fpkt"];
3609--9815[label="1;20pkt 20fpkt"];
3609--10150[label="0.0454545;1pkt 1fpkt"];
3609--15978[label="1;3pkt 3fpkt"];
3609--19767[label="1;4pkt 4fpkt"];
3609--22343[label="1;3pkt 3fpkt"];
6096--6902[label="0.00421941;1pkt 1fpkt"];
6096--6928[label="0.0232558;1pkt 1fpkt"];
6096--9815[label="0.05;1pkt 1fpkt"];
6096--10143[label="0.00282486;1pkt 1fpkt"];
6096--10150[label="1;317pkt 317fpkt"];
6096--11699[label="0.00282486;1pkt 1fpkt"];
6096--14301[label="0.0227273;1pkt 1fpkt"];
6096--14417[label="0.0105263;1pkt 1fpkt"];
6096--15134[label="0.00699301;1pkt 1fpkt"];
6096--15962[label="0.00383142;1pkt 1fpkt"];
6096--18746[label="0.0104167;1pkt 1fpkt"];
6096--19754[label="0.00383142;1pkt 1fpkt"];
6096--21620[label="0.0104167;1pkt 1fpkt"];
9815--10150[label="0.05;1pkt 1fpkt"];
9815--15978[label="1;3pkt 3fpkt"];
9815--19767[label="1;4pkt 4fpkt"];
9815--22343[label="1;3pkt 3fpkt"];
10150--11699[label="0.00315457;1pkt 1fpkt"];
10150--14301[label="0.0227273;1pkt 1fpkt"];
10150--14417[label="0.0105263;1pkt 1fpkt"];
10150--15134[label="0.00699301;1pkt 1fpkt"];
10150--15962[label="0.00383142;1pkt 1fpkt"];
10150--18746[label="0.0104167;1pkt 1fpkt"];
10150--19754[label="0.00383142;1pkt 1fpkt"];
10150--21620[label="0.0104167;1pkt 1fpkt"];
15978--19767[label="1;3pkt 3fpkt"];
15978--22343[label="1;3pkt 3fpkt"];
19767--22343[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="211.0.245.97"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.71.27.207"/>
    </slice>
    <from sec="1191992893" usec="0"/>
    <to sec="1191992962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.233.28.207"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191993263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.240.38.207"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.209.42.207"/>
    </slice>
    <from sec="1191992678" usec="0"/>
    <to sec="1191993008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.32.123.207"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.144.180.207"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.208.13.208"/>
    </slice>
    <from sec="1191992664" usec="0"/>
    <to sec="1191992671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.206.100.208"/>
    </slice>
    <from sec="1191992710" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.65.104.208"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.19.171.208"/>
    </slice>
    <from sec="1191992763" usec="0"/>
    <to sec="1191992821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.35.228.208"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.81.32.209"/>
    </slice>
    <from sec="1191992881" usec="0"/>
    <to sec="1191992926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.196.35.209"/>
    </slice>
    <from sec="1191993228" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.16.83.209"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.236.162.209"/>
    </slice>
    <from sec="1191992972" usec="0"/>
    <to sec="1191993040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.78.208.209"/>
    </slice>
    <from sec="1191992539" usec="0"/>
    <to sec="1191992572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.125.77.210"/>
    </slice>
    <from sec="1191992754" usec="0"/>
    <to sec="1191993095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.123.120.210"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.238.132.210"/>
    </slice>
    <from sec="1191992915" usec="0"/>
    <to sec="1191992925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.225.21.211"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.193.32.211"/>
    </slice>
    <from sec="1191992634" usec="0"/>
    <to sec="1191992668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.67.35.211"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.148.211"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.41.192.211"/>
    </slice>
    <from sec="1191992515" usec="0"/>
    <to sec="1191992566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.66.202.211"/>
    </slice>
    <from sec="1191992950" usec="0"/>
    <to sec="1191992988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.72.209.211"/>
    </slice>
    <from sec="1191992595" usec="0"/>
    <to sec="1191992618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.102.242.211"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.36.8.212"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191992437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.29.46.212"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.65.230.212"/>
    </slice>
    <from sec="1191992746" usec="0"/>
    <to sec="1191993008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.150.247.212"/>
    </slice>
    <from sec="1191992691" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.85.213"/>
    </slice>
    <from sec="1191992627" usec="0"/>
    <to sec="1191992705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.101.213"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.183.116.213"/>
    </slice>
    <from sec="1191992737" usec="0"/>
    <to sec="1191992756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.137.53.214"/>
    </slice>
    <from sec="1191993190" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.155.60.214"/>
    </slice>
    <from sec="1191992440" usec="0"/>
    <to sec="1191992463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.44.86.214"/>
    </slice>
    <from sec="1191992417" usec="0"/>
    <to sec="1191992690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.2.120.214"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191992965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.76.150.214"/>
    </slice>
    <from sec="1191993131" usec="0"/>
    <to sec="1191993145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="132.144.33.215"/>
    </slice>
    <from sec="1191992433" usec="0"/>
    <to sec="1191993225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.6.100.215"/>
    </slice>
    <from sec="1191993231" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.234.132.215"/>
    </slice>
    <from sec="1191992824" usec="0"/>
    <to sec="1191992991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.111.44.216"/>
    </slice>
    <from sec="1191992937" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.203.45.216"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.173.216"/>
    </slice>
    <from sec="1191992702" usec="0"/>
    <to sec="1191992781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.193.0.217"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.124.13.217"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.177.68.217"/>
    </slice>
    <from sec="1191992601" usec="0"/>
    <to sec="1191993262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.21.80.217"/>
    </slice>
    <from sec="1191992459" usec="0"/>
    <to sec="1191992545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.11.139.217"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.153.217"/>
    </slice>
    <from sec="1191992977" usec="0"/>
    <to sec="1191993009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.247.130.218"/>
    </slice>
    <from sec="1191992465" usec="0"/>
    <to sec="1191992834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.126.0.219"/>
    </slice>
    <from sec="1191992656" usec="0"/>
    <to sec="1191992692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1126{
style=filled;
color=gray75;
2671[label="201.136.124.219;s;108pkt 108fpkt", shape=diamond, color=yellow];
16240[label="201.136.124.219;122pkt 122fpkt", shape=pentagon, color=darkviolet];
19922[label="201.136.124.219;122pkt 122fpkt", shape=invtriangle, color=brown];
stat1126[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.136.124.219:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2671--16240[label="1;108pkt 108fpkt"];
2671--19922[label="1;108pkt 108fpkt"];
16240--19922[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter src_ip="201.136.124.219"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.102.147.219"/>
    </slice>
    <from sec="1191992620" usec="0"/>
    <to sec="1191992652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.173.64.220"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.67.151.220"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.230.181.220"/>
    </slice>
    <from sec="1191992776" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.145.233.220"/>
    </slice>
    <from sec="1191992901" usec="0"/>
    <to sec="1191992976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.210.9.221"/>
    </slice>
    <from sec="1191992749" usec="0"/>
    <to sec="1191992783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.94.11.221"/>
    </slice>
    <from sec="1191993019" usec="0"/>
    <to sec="1191993023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.175.20.221"/>
    </slice>
    <from sec="1191993268" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.225.25.221"/>
    </slice>
    <from sec="1191992768" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.26.26.221"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.12.135.221"/>
    </slice>
    <from sec="1191992446" usec="0"/>
    <to sec="1191992478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.158.224.221"/>
    </slice>
    <from sec="1191993151" usec="0"/>
    <to sec="1191993181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.155.8.222"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.105.42.222"/>
    </slice>
    <from sec="1191992752" usec="0"/>
    <to sec="1191992764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.180.19.223"/>
    </slice>
    <from sec="1191992832" usec="0"/>
    <to sec="1191992903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.120.196.223"/>
    </slice>
    <from sec="1191993168" usec="0"/>
    <to sec="1191993244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.51.156.224"/>
    </slice>
    <from sec="1191992785" usec="0"/>
    <to sec="1191993128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.145.177.224"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.43.210.224"/>
    </slice>
    <from sec="1191993049" usec="0"/>
    <to sec="1191993131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.82.75.225"/>
    </slice>
    <from sec="1191992946" usec="0"/>
    <to sec="1191992981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.148.86.225"/>
    </slice>
    <from sec="1191992631" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.129.105.225"/>
    </slice>
    <from sec="1191992838" usec="0"/>
    <to sec="1191992856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.185.192.225"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.11.6.226"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.82.226"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.8.139.226"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.227.161.226"/>
    </slice>
    <from sec="1191992546" usec="0"/>
    <to sec="1191992575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.21.212.226"/>
    </slice>
    <from sec="1191992836" usec="0"/>
    <to sec="1191992852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.78.64.227"/>
    </slice>
    <from sec="1191992949" usec="0"/>
    <to sec="1191992984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.49.72.227"/>
    </slice>
    <from sec="1191992984" usec="0"/>
    <to sec="1191993008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.30.213.227"/>
    </slice>
    <from sec="1191993000" usec="0"/>
    <to sec="1191993071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.195.55.228"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.218.57.228"/>
    </slice>
    <from sec="1191993045" usec="0"/>
    <to sec="1191993083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.197.242.228"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.61.39.229"/>
    </slice>
    <from sec="1191992470" usec="0"/>
    <to sec="1191992500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.94.162.229"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191993237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.9.49.230"/>
    </slice>
    <from sec="1191992902" usec="0"/>
    <to sec="1191992926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.138.167.230"/>
    </slice>
    <from sec="1191993250" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.36.220.230"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.87.232"/>
    </slice>
    <from sec="1191993271" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.19.128.232"/>
    </slice>
    <from sec="1191992492" usec="0"/>
    <to sec="1191992517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.130.132.232"/>
    </slice>
    <from sec="1191992439" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.145.232"/>
    </slice>
    <from sec="1191992569" usec="0"/>
    <to sec="1191992704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.63.153.232"/>
    </slice>
    <from sec="1191992589" usec="0"/>
    <to sec="1191992621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.89.175.232"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1172{
style=filled;
color=gray75;
7059[label="172.159.125.7;d;18pkt 18fpkt", shape=diamond, color=yellow];
10804[label="172.159.125.7;d;18pkt 18fpkt", shape=hexagon, color=black];
13114[label="206.68.3.76;12pkt 12fpkt", shape=pentagon, color=darkviolet];
17919[label="206.68.3.76;13pkt 13fpkt", shape=invtriangle, color=brown];
21052[label="206.68.3.76;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1172[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.68.3.76:80, 172.159.125.7:*}[72.2222%]&lt;BR/&gt;{210.176.197.74:80, 172.159.125.7:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59505: (3.37838%)&lt;BR/&gt; 59491: (3.37838%)&lt;BR/&gt; 59490: (3.37838%)&lt;BR/&gt; 59489: (3.37838%)&gt;];
}
7059--10804[label="1;18pkt 18fpkt"];
7059--12820[label="0.0555556;1pkt 1fpkt"];
7059--13114[label="1;12pkt 12fpkt"];
7059--17919[label="1;13pkt 13fpkt"];
7059--21052[label="1;13pkt 13fpkt"];
10804--12820[label="0.0555556;1pkt 1fpkt"];
10804--13114[label="1;12pkt 12fpkt"];
10804--17919[label="1;13pkt 13fpkt"];
10804--21052[label="1;13pkt 13fpkt"];
13114--17919[label="1;12pkt 12fpkt"];
13114--21052[label="1;12pkt 12fpkt"];
17919--21052[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.125.7" src_ip="206.68.3.76" src_port="80"/>
      <filter dst_ip="172.159.125.7" src_ip="210.176.197.74" src_port="80"/>
    </slice>
    <from sec="1191992961" usec="0"/>
    <to sec="1191993202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.124.226.232"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.132.13.233"/>
    </slice>
    <from sec="1191992746" usec="0"/>
    <to sec="1191992800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.217.43.233"/>
    </slice>
    <from sec="1191992426" usec="0"/>
    <to sec="1191992456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.100.125.233"/>
    </slice>
    <from sec="1191992498" usec="0"/>
    <to sec="1191992504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.146.233"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.193.239.233"/>
    </slice>
    <from sec="1191992870" usec="0"/>
    <to sec="1191992912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.18.249.233"/>
    </slice>
    <from sec="1191992853" usec="0"/>
    <to sec="1191992917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.206.112.234"/>
    </slice>
    <from sec="1191992554" usec="0"/>
    <to sec="1191992607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.201.142.234"/>
    </slice>
    <from sec="1191992727" usec="0"/>
    <to sec="1191992770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.149.192.234"/>
    </slice>
    <from sec="1191993003" usec="0"/>
    <to sec="1191993106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.82.194.234"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.195.29.235"/>
    </slice>
    <from sec="1191992835" usec="0"/>
    <to sec="1191993139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.152.235"/>
    </slice>
    <from sec="1191992931" usec="0"/>
    <to sec="1191993121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.165.160.235"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.52.16.236"/>
    </slice>
    <from sec="1191992652" usec="0"/>
    <to sec="1191992680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.143.135.236"/>
    </slice>
    <from sec="1191992706" usec="0"/>
    <to sec="1191992897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.104.222.236"/>
    </slice>
    <from sec="1191992981" usec="0"/>
    <to sec="1191993033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.119.233.236"/>
    </slice>
    <from sec="1191992423" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.16.106.237"/>
    </slice>
    <from sec="1191992602" usec="0"/>
    <to sec="1191992769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.213.123.237"/>
    </slice>
    <from sec="1191992898" usec="0"/>
    <to sec="1191992918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.116.157.237"/>
    </slice>
    <from sec="1191992868" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.136.82.238"/>
    </slice>
    <from sec="1191993090" usec="0"/>
    <to sec="1191993111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.68.111.239"/>
    </slice>
    <from sec="1191992712" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="135.64.136.239"/>
    </slice>
    <from sec="1191992453" usec="0"/>
    <to sec="1191992514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.250.142.240"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.206.172.240"/>
    </slice>
    <from sec="1191992614" usec="0"/>
    <to sec="1191992718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.193.196.240"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.116.16.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.230.140.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.20.214.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.69.73.242"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.34.132.242"/>
    </slice>
    <from sec="1191992912" usec="0"/>
    <to sec="1191992923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.56.146.242"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.189.156.242"/>
    </slice>
    <from sec="1191992592" usec="0"/>
    <to sec="1191992616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="80.34.162.243"/>
    </slice>
    <from sec="1191992642" usec="0"/>
    <to sec="1191992653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.167.222.243"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.125.243.243"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="134.71.20.244"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.232.157.244"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.199.33.245"/>
    </slice>
    <from sec="1191992585" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.144.55.245"/>
    </slice>
    <from sec="1191992710" usec="0"/>
    <to sec="1191992724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.182.89.245"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191992533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.100.114.245"/>
    </slice>
    <from sec="1191992866" usec="0"/>
    <to sec="1191992872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.113.118.245"/>
    </slice>
    <from sec="1191992602" usec="0"/>
    <to sec="1191992831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.206.141.245"/>
    </slice>
    <from sec="1191993270" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.189.107.246"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.144.146.246"/>
    </slice>
    <from sec="1191992890" usec="0"/>
    <to sec="1191992982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.158.200.246"/>
    </slice>
    <from sec="1191993201" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.104.106.247"/>
    </slice>
    <from sec="1191992684" usec="0"/>
    <to sec="1191992717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.159.178.247"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.158.197.247"/>
    </slice>
    <from sec="1191992960" usec="0"/>
    <to sec="1191992985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="60.96.223.247"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.64.8.248"/>
    </slice>
    <from sec="1191993253" usec="0"/>
    <to sec="1191993274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.176.41.248"/>
    </slice>
    <from sec="1191992928" usec="0"/>
    <to sec="1191992981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.32.43.248"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.144.140.248"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.82.242.248"/>
    </slice>
    <from sec="1191992855" usec="0"/>
    <to sec="1191992910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.157.10.249"/>
    </slice>
    <from sec="1191992460" usec="0"/>
    <to sec="1191993092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.164.37.250"/>
    </slice>
    <from sec="1191993205" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="84.154.88.250"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.160.107.250"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.177.151.250"/>
    </slice>
    <from sec="1191993019" usec="0"/>
    <to sec="1191993092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.34.26.251"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.116.78.251"/>
    </slice>
    <from sec="1191992872" usec="0"/>
    <to sec="1191992913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.14.101.252"/>
    </slice>
    <from sec="1191992609" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.107.9.253"/>
    </slice>
    <from sec="1191992998" usec="0"/>
    <to sec="1191993029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.13.212.253"/>
    </slice>
    <from sec="1191992762" usec="0"/>
    <to sec="1191992786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.62.85.254"/>
    </slice>
    <from sec="1191992953" usec="0"/>
    <to sec="1191993015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.41.160.254"/>
    </slice>
    <from sec="1191992894" usec="0"/>
    <to sec="1191992933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.5.197.254"/>
    </slice>
    <from sec="1191993102" usec="0"/>
    <to sec="1191993248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.396118,3.11945,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.63.132.255"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1245{
style=filled;
color=gray75;
11400[label="201.67.0.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16840[label="201.67.0.0;2pkt 2fpkt", shape=invtriangle, color=brown];
20315[label="201.67.0.0;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1245[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.0.0:0, 10.1.2.6:0}[50%]&lt;BR/&gt;{201.67.0.0:0, 14.156.202.193:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11400--16840[label="1;2pkt 2fpkt"];
11400--20315[label="1;2pkt 2fpkt"];
16840--20315[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="14.156.202.193" src_ip="201.67.0.0"/>
      <filter dst_ip="10.1.2.6" src_ip="201.67.0.0"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.199.70.0"/>
    </slice>
    <from sec="1191992700" usec="0"/>
    <to sec="1191992733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.46.80.0"/>
    </slice>
    <from sec="1191992883" usec="0"/>
    <to sec="1191992894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.232.101.0"/>
    </slice>
    <from sec="1191992720" usec="0"/>
    <to sec="1191992813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1249{
style=filled;
color=gray75;
11418[label="204.133.140.0;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16856[label="204.133.140.0;3pkt 3fpkt", shape=invtriangle, color=brown];
20325[label="204.133.140.0;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1249[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.133.140.0:63930, 192.27.51.21:53}[33.3333%]&lt;BR/&gt;{204.133.140.0:34427, 201.136.121.209:53}[33.3333%]&lt;BR/&gt;{204.133.140.0:38516, 201.136.121.222:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 38516: (21.4286%)&lt;BR/&gt; 34427: (21.4286%)&lt;BR/&gt; 63930: (7.14286%)&gt;];
}
11418--16856[label="1;2pkt 2fpkt"];
11418--20325[label="1;2pkt 2fpkt"];
16856--20325[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.121.222" dst_port="53" src_ip="204.133.140.0" src_port="38516"/>
      <filter dst_ip="201.136.121.209" dst_port="53" src_ip="204.133.140.0" src_port="34427"/>
      <filter dst_ip="192.27.51.21" dst_port="53" src_ip="204.133.140.0" src_port="63930"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.127.67.2"/>
    </slice>
    <from sec="1191992725" usec="0"/>
    <to sec="1191992807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.133.74.2"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.26.116.2"/>
    </slice>
    <from sec="1191992983" usec="0"/>
    <to sec="1191993004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.32.138.2"/>
    </slice>
    <from sec="1191992487" usec="0"/>
    <to sec="1191992504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.94.194.2"/>
    </slice>
    <from sec="1191993042" usec="0"/>
    <to sec="1191993064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1255{
style=filled;
color=gray75;
11499[label="172.159.84.3;35pkt 35fpkt", shape=pentagon, color=darkviolet];
16905[label="172.159.84.3;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1255[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.84.3:5900, 1.107.32.12:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 4935: (1.40845%)&lt;BR/&gt; 4706: (1.40845%)&lt;BR/&gt; 4494: (1.40845%)&lt;BR/&gt; 4318: (1.40845%)&gt;];
}
11499--16905[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="1.107.32.12" src_ip="172.159.84.3" src_port="5900"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.236.208.3"/>
    </slice>
    <from sec="1191993015" usec="0"/>
    <to sec="1191993035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.213.76.4"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.174.103.4"/>
    </slice>
    <from sec="1191992866" usec="0"/>
    <to sec="1191992908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.61.5.5"/>
    </slice>
    <from sec="1191992847" usec="0"/>
    <to sec="1191992873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.85.45.5"/>
    </slice>
    <from sec="1191992527" usec="0"/>
    <to sec="1191992568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.197.166.5"/>
    </slice>
    <from sec="1191992824" usec="0"/>
    <to sec="1191992870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1262{
style=filled;
color=gray75;
11564[label="169.6.173.5;28pkt 28fpkt", shape=pentagon, color=darkviolet];
16943[label="169.6.173.5;28pkt 28fpkt", shape=invtriangle, color=brown];
20381[label="169.6.173.5;29pkt 29fpkt", shape=invhouse, color=bisque];
stat1262[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.173.5:*, 212.162.19.38:80}[55.1724%]&lt;BR/&gt;{169.6.173.5:*, 212.162.19.38:443}[41.3793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.8235%)&lt;BR/&gt; 443: (21.1765%)&lt;BR/&gt; 49553: (1.76471%)&lt;BR/&gt; 49552: (1.76471%)&lt;BR/&gt; 49549: (1.76471%)&gt;];
}
11564--16943[label="1;28pkt 28fpkt"];
11564--20381[label="1;28pkt 28fpkt"];
16943--20381[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="212.162.19.38" dst_port="80" src_ip="169.6.173.5"/>
      <filter dst_ip="212.162.19.38" dst_port="443" src_ip="169.6.173.5"/>
    </slice>
    <from sec="1191992468" usec="0"/>
    <to sec="1191992778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.208.198.5"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.194.242.5"/>
    </slice>
    <from sec="1191992721" usec="0"/>
    <to sec="1191992785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.121.3.6"/>
    </slice>
    <from sec="1191993008" usec="0"/>
    <to sec="1191993108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.14.36.6"/>
    </slice>
    <from sec="1191993271" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.76.50.6"/>
    </slice>
    <from sec="1191992561" usec="0"/>
    <to sec="1191992568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.152.80.6"/>
    </slice>
    <from sec="1191992792" usec="0"/>
    <to sec="1191992803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.52.101.6"/>
    </slice>
    <from sec="1191992990" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.104.117.6"/>
    </slice>
    <from sec="1191993139" usec="0"/>
    <to sec="1191993239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1271{
style=filled;
color=gray75;
11598[label="132.188.20.7;65pkt 65fpkt", shape=pentagon, color=darkviolet];
16965[label="132.188.20.7;66pkt 66fpkt", shape=invtriangle, color=brown];
stat1271[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.188.20.7:46886, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46886: (50%)&lt;BR/&gt; 65479: (0.763359%)&lt;BR/&gt; 65313: (0.763359%)&lt;BR/&gt; 63254: (0.763359%)&lt;BR/&gt; 62277: (0.763359%)&gt;];
}
11598--16965[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter src_ip="132.188.20.7" src_port="46886"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.57.39.7"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.64.59.7"/>
    </slice>
    <from sec="1191992671" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.174.88.7"/>
    </slice>
    <from sec="1191992938" usec="0"/>
    <to sec="1191992965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1275{
style=filled;
color=gray75;
11611[label="42.165.103.7;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16974[label="42.165.103.7;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1275[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.165.103.7:80, 200.173.77.168:49319}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49319: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11611--16974[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.168" dst_port="49319" src_ip="42.165.103.7" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.215.165.7"/>
    </slice>
    <from sec="1191993175" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.78.169.7"/>
    </slice>
    <from sec="1191992824" usec="0"/>
    <to sec="1191992856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.131.172.7"/>
    </slice>
    <from sec="1191992755" usec="0"/>
    <to sec="1191992782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1279{
style=filled;
color=gray75;
11622[label="172.130.2.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16983[label="172.130.2.8;1pkt 1fpkt", shape=invtriangle, color=brown];
20407[label="172.130.2.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1279[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.2.8:3275, 211.11.125.242:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3275: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11622--16983[label="1;1pkt 1fpkt"];
11622--20407[label="1;1pkt 1fpkt"];
16983--20407[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.11.125.242" dst_port="80" src_ip="172.130.2.8" src_port="3275"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.194.23.8"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.229.50.8"/>
    </slice>
    <from sec="1191992504" usec="0"/>
    <to sec="1191992517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.215.68.8"/>
    </slice>
    <from sec="1191992527" usec="0"/>
    <to sec="1191992547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.34.88.8"/>
    </slice>
    <from sec="1191992735" usec="0"/>
    <to sec="1191992770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.215.122.8"/>
    </slice>
    <from sec="1191992938" usec="0"/>
    <to sec="1191993207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1285{
style=filled;
color=gray75;
11656[label="218.211.58.9;21pkt 21fpkt", shape=pentagon, color=darkviolet];
17004[label="218.211.58.9;21pkt 21fpkt", shape=invtriangle, color=brown];
20422[label="218.211.58.9;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1285[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.211.58.9:80, 201.75.165.40:*}[63.6364%]&lt;BR/&gt;{218.211.58.9:80, 201.67.0.11:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3249: (2.34375%)&lt;BR/&gt; 3246: (2.34375%)&lt;BR/&gt; 3244: (2.34375%)&lt;BR/&gt; 3243: (2.34375%)&gt;];
}
11656--17004[label="1;21pkt 21fpkt"];
11656--20422[label="1;21pkt 21fpkt"];
17004--20422[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.165.40" src_ip="218.211.58.9" src_port="80"/>
      <filter dst_ip="201.67.0.11" src_ip="218.211.58.9" src_port="80"/>
    </slice>
    <from sec="1191992526" usec="0"/>
    <to sec="1191993291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1286{
style=filled;
color=gray75;
11662[label="172.159.120.9;59pkt 59fpkt", shape=pentagon, color=darkviolet];
17007[label="172.159.120.9;59pkt 59fpkt", shape=invtriangle, color=brown];
20424[label="172.159.120.9;60pkt 60fpkt", shape=invhouse, color=bisque];
stat1286[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.120.9:32048, *:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32048: (46.6292%)&lt;BR/&gt; 24646: (1.68539%)&lt;BR/&gt; 6160: (1.68539%)&lt;BR/&gt; 65514: (0.842697%)&lt;BR/&gt; 65491: (0.842697%)&gt;];
}
11662--17007[label="1;59pkt 59fpkt"];
11662--20424[label="1;59pkt 59fpkt"];
17007--20424[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="172.159.120.9" src_port="32048"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.144.9"/>
    </slice>
    <from sec="1191993003" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.78.166.10"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1289{
style=filled;
color=gray75;
11689[label="62.227.220.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17025[label="62.227.220.10;1pkt 1fpkt", shape=invtriangle, color=brown];
20437[label="62.227.220.10;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1289[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.227.220.10:18920, 200.173.65.158:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18920: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11689--17025[label="1;1pkt 1fpkt"];
11689--20437[label="1;1pkt 1fpkt"];
17025--20437[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.65.158" dst_port="80" src_ip="62.227.220.10" src_port="18920"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1290{
style=filled;
color=gray75;
11691[label="222.168.247.10;13pkt 13fpkt", shape=pentagon, color=darkviolet];
17027[label="222.168.247.10;13pkt 13fpkt", shape=invtriangle, color=brown];
20439[label="222.168.247.10;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1290[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.168.247.10:*, 169.6.110.183:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4701: (3.84615%)&lt;BR/&gt; 4696: (3.84615%)&lt;BR/&gt; 4695: (3.84615%)&lt;BR/&gt; 4694: (3.84615%)&gt;];
}
11691--17027[label="1;13pkt 13fpkt"];
11691--20439[label="1;13pkt 13fpkt"];
17027--20439[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.110.183" dst_port="80" src_ip="222.168.247.10"/>
    </slice>
    <from sec="1191993278" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.220.33.11"/>
    </slice>
    <from sec="1191992579" usec="0"/>
    <to sec="1191992943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1292{
style=filled;
color=gray75;
11698[label="201.75.53.11;12pkt 12fpkt", shape=pentagon, color=darkviolet];
17032[label="201.75.53.11;12pkt 12fpkt", shape=invtriangle, color=brown];
20442[label="201.75.53.11;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1292[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.53.11:*, 210.87.115.121:80}[58.3333%]&lt;BR/&gt;{201.75.53.11:*, 1.178.132.174:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4956: (4.16667%)&lt;BR/&gt; 1210: (4.16667%)&lt;BR/&gt; 1201: (4.16667%)&lt;BR/&gt; 1194: (4.16667%)&gt;];
}
11698--17032[label="1;12pkt 12fpkt"];
11698--20442[label="1;12pkt 12fpkt"];
17032--20442[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="210.87.115.121" dst_port="80" src_ip="201.75.53.11"/>
      <filter dst_ip="1.178.132.174" dst_port="80" src_ip="201.75.53.11"/>
    </slice>
    <from sec="1191992848" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.235.73.11"/>
    </slice>
    <from sec="1191992780" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.210.149.11"/>
    </slice>
    <from sec="1191993037" usec="0"/>
    <to sec="1191993040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.167.53.12"/>
    </slice>
    <from sec="1191993169" usec="0"/>
    <to sec="1191993195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.199.80.12"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.94.103.12"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1298{
style=filled;
color=gray75;
11733[label="188.104.156.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17050[label="188.104.156.12;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1298[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.156.12:2271, 209.50.43.115:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2271: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11733--17050[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.43.115" dst_port="80" src_ip="188.104.156.12" src_port="2271"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1299{
style=filled;
color=gray75;
11737[label="81.64.186.12;7pkt 7fpkt", shape=pentagon, color=darkviolet];
17052[label="81.64.186.12;7pkt 7fpkt", shape=invtriangle, color=brown];
20454[label="81.64.186.12;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1299[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.64.186.12:80, 172.64.11.151:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4078: (7.14286%)&lt;BR/&gt; 4076: (7.14286%)&lt;BR/&gt; 4037: (7.14286%)&lt;BR/&gt; 4033: (7.14286%)&gt;];
}
11737--17052[label="1;7pkt 7fpkt"];
11737--20454[label="1;7pkt 7fpkt"];
17052--20454[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.11.151" src_ip="81.64.186.12" src_port="80"/>
    </slice>
    <from sec="1191992483" usec="0"/>
    <to sec="1191993077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.39.190.12"/>
    </slice>
    <from sec="1191993160" usec="0"/>
    <to sec="1191993280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.34.222.12"/>
    </slice>
    <from sec="1191992865" usec="0"/>
    <to sec="1191992917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.16.8.13"/>
    </slice>
    <from sec="1191992876" usec="0"/>
    <to sec="1191992918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.201.19.13"/>
    </slice>
    <from sec="1191992962" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="174.172.82.13"/>
    </slice>
    <from sec="1191993002" usec="0"/>
    <to sec="1191993052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.240.88.13"/>
    </slice>
    <from sec="1191993216" usec="0"/>
    <to sec="1191993245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.11.136.13"/>
    </slice>
    <from sec="1191992887" usec="0"/>
    <to sec="1191992904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.214.178.13"/>
    </slice>
    <from sec="1191993132" usec="0"/>
    <to sec="1191993182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1308{
style=filled;
color=gray75;
11775[label="201.6.70.14;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17073[label="201.6.70.14;1pkt 1fpkt", shape=invtriangle, color=brown];
20470[label="201.6.70.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1308[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.6.70.14:80, 134.71.53.43:4164}[50%]&lt;BR/&gt;{201.6.70.14:80, 134.71.53.43:4165}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4165: (37.5%)&lt;BR/&gt; 4164: (12.5%)&gt;];
}
11775--17073[label="1;1pkt 1fpkt"];
11775--20470[label="1;1pkt 1fpkt"];
17073--20470[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.53.43" dst_port="4165" src_ip="201.6.70.14" src_port="80"/>
      <filter dst_ip="134.71.53.43" dst_port="4164" src_ip="201.6.70.14" src_port="80"/>
    </slice>
    <from sec="1191993261" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.94.192.14"/>
    </slice>
    <from sec="1191992964" usec="0"/>
    <to sec="1191993000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1310{
style=filled;
color=gray75;
11792[label="35.160.144.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17085[label="35.160.144.15;1pkt 1fpkt", shape=invtriangle, color=brown];
20481[label="35.160.144.15;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1310[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.160.144.15:49250, 172.133.184.135:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49250: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11792--17085[label="1;1pkt 1fpkt"];
11792--20481[label="1;1pkt 1fpkt"];
17085--20481[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.184.135" dst_port="80" src_ip="35.160.144.15" src_port="49250"/>
    </slice>
    <from sec="1191993065" usec="0"/>
    <to sec="1191993077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.140.11.16"/>
    </slice>
    <from sec="1191992785" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.169.69.16"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1313{
style=filled;
color=gray75;
11821[label="222.44.160.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17102[label="222.44.160.16;1pkt 1fpkt", shape=invtriangle, color=brown];
20492[label="222.44.160.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1313[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.44.160.16:1786, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1786: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11821--17102[label="1;1pkt 1fpkt"];
11821--20492[label="1;1pkt 1fpkt"];
17102--20492[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="222.44.160.16" src_port="1786"/>
    </slice>
    <from sec="1191992652" usec="0"/>
    <to sec="1191993284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1314{
style=filled;
color=gray75;
11826[label="172.130.198.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
17106[label="172.130.198.16;6pkt 6fpkt", shape=invtriangle, color=brown];
20495[label="172.130.198.16;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1314[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.198.16:*, 200.162.237.212:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1880: (9.375%)&lt;BR/&gt; 1878: (9.375%)&lt;BR/&gt; 1877: (9.375%)&lt;BR/&gt; 1876: (9.375%)&gt;];
}
11826--17106[label="1;5pkt 5fpkt"];
11826--20495[label="1;5pkt 5fpkt"];
17106--20495[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.162.237.212" dst_port="80" src_ip="172.130.198.16"/>
    </slice>
    <from sec="1191993012" usec="0"/>
    <to sec="1191993274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.49.17"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="144.105.85.17"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.160.244.17"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.201.19.18"/>
    </slice>
    <from sec="1191992577" usec="0"/>
    <to sec="1191992695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1319{
style=filled;
color=gray75;
11864[label="49.224.22.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17132[label="49.224.22.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1319[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.224.22.18:58811, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58811: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11864--17132[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="49.224.22.18" src_port="58811"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.158.141.18"/>
    </slice>
    <from sec="1191992884" usec="0"/>
    <to sec="1191992917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="132.37.155.18"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.2.174.18"/>
    </slice>
    <from sec="1191992560" usec="0"/>
    <to sec="1191992588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.104.180.18"/>
    </slice>
    <from sec="1191992425" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.64.101.19"/>
    </slice>
    <from sec="1191993231" usec="0"/>
    <to sec="1191993246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.108.147.19"/>
    </slice>
    <from sec="1191993135" usec="0"/>
    <to sec="1191993203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1326{
style=filled;
color=gray75;
1304[label="206.35.146.54;d;117pkt 117fpkt", shape=diamond, color=yellow];
6040[label="174.172.82.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
6850[label="172.131.126.113;s;14pkt 14fpkt", shape=diamond, color=yellow];
11439[label="201.64.9.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11755[label="174.172.82.13;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11908[label="134.177.152.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12635[label="172.242.80.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13292[label="172.130.150.83;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13425[label="210.177.12.89;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14113[label="201.85.197.122;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14910[label="172.137.209.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15534[label="172.156.40.184;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15722[label="201.115.216.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16057[label="201.112.91.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16198[label="188.69.134.217;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16713[label="172.220.27.247;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16736[label="172.166.94.248;15pkt 15fpkt", shape=pentagon, color=darkviolet];
17159[label="134.177.152.19;1pkt 1fpkt", shape=invtriangle, color=brown];
17613[label="172.242.80.52;1pkt 1fpkt", shape=invtriangle, color=brown];
18545[label="201.85.197.122;2pkt 2fpkt", shape=invtriangle, color=brown];
19595[label="201.115.216.193;1pkt 1fpkt", shape=invtriangle, color=brown];
19895[label="188.69.134.217;2pkt 2fpkt", shape=invtriangle, color=brown];
20227[label="172.220.27.247;2pkt 2fpkt", shape=invtriangle, color=brown];
20527[label="134.177.152.19;1pkt 1fpkt", shape=invhouse, color=bisque];
21480[label="201.85.197.122;1pkt 1fpkt", shape=invhouse, color=bisque];
22220[label="201.115.216.193;1pkt 1fpkt", shape=invhouse, color=bisque];
22435[label="188.69.134.217;1pkt 1fpkt", shape=invhouse, color=bisque];
22680[label="172.220.27.247;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1326[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 206.35.146.54:80}[98.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7207%)&lt;BR/&gt; 53528: (1.11732%)&lt;BR/&gt; 37411: (1.11732%)&lt;BR/&gt; 33528: (1.11732%)&lt;BR/&gt; 33492: (1.11732%)&gt;];
}
1304--2446[label="1;2pkt 2fpkt"];
1304--2871[label="0.0350877;2pkt 2fpkt"];
1304--6040[label="1;1pkt 1fpkt"];
1304--6245[label="0.0181818;1pkt 1fpkt"];
1304--6850[label="1;14pkt 14fpkt"];
1304--9586[label="0.00854701;1pkt 1fpkt"];
1304--9741[label="0.0192308;1pkt 1fpkt"];
1304--10295[label="0.0222222;1pkt 1fpkt"];
1304--11265[label="0.119658;14pkt 14fpkt"];
1304--11285[label="0.0854701;10pkt 10fpkt"];
1304--11338[label="0.119658;14pkt 14fpkt"];
1304--11351[label="0.0854701;10pkt 10fpkt"];
1304--11382[label="0.119658;14pkt 14fpkt"];
1304--11392[label="0.0854701;10pkt 10fpkt"];
1304--11439[label="1;1pkt 1fpkt"];
1304--11450[label="0.0555556;1pkt 1fpkt"];
1304--11732[label="0.4;2pkt 2fpkt"];
1304--11755[label="1;1pkt 1fpkt"];
1304--11797[label="1;2pkt 2fpkt"];
1304--11908[label="1;1pkt 1fpkt"];
1304--12062[label="0.0350877;2pkt 2fpkt"];
1304--12635[label="1;1pkt 1fpkt"];
1304--13292[label="0.333333;1pkt 1fpkt"];
1304--13425[label="1;2pkt 2fpkt"];
1304--13478[label="0.0163934;1pkt 1fpkt"];
1304--13572[label="1;1pkt 1fpkt"];
1304--13769[label="0.0545455;3pkt 3fpkt"];
1304--14113[label="1;1pkt 1fpkt"];
1304--14910[label="1;1pkt 1fpkt"];
1304--15534[label="1;1pkt 1fpkt"];
1304--15722[label="1;1pkt 1fpkt"];
1304--15939[label="0.25;1pkt 1fpkt"];
1304--16057[label="1;1pkt 1fpkt"];
1304--16125[label="1;1pkt 1fpkt"];
1304--16198[label="1;2pkt 2fpkt"];
1304--16339[label="0.25;1pkt 1fpkt"];
1304--16713[label="1;2pkt 2fpkt"];
1304--16736[label="0.933333;14pkt 14fpkt"];
1304--16876[label="0.0555556;1pkt 1fpkt"];
1304--17087[label="1;2pkt 2fpkt"];
1304--17159[label="1;1pkt 1fpkt"];
1304--17259[label="0.0350877;2pkt 2fpkt"];
1304--17613[label="1;1pkt 1fpkt"];
1304--18156[label="0.0163934;1pkt 1fpkt"];
1304--18218[label="1;2pkt 2fpkt"];
1304--18545[label="1;2pkt 2fpkt"];
1304--19595[label="1;1pkt 1fpkt"];
1304--19734[label="0.25;1pkt 1fpkt"];
1304--19856[label="1;1pkt 1fpkt"];
1304--19895[label="1;2pkt 2fpkt"];
1304--19992[label="0.25;1pkt 1fpkt"];
1304--20227[label="1;2pkt 2fpkt"];
1304--20340[label="0.0555556;1pkt 1fpkt"];
1304--20482[label="1;1pkt 1fpkt"];
1304--20527[label="1;1pkt 1fpkt"];
1304--20596[label="0.0344828;2pkt 2fpkt"];
1304--21218[label="0.0166667;1pkt 1fpkt"];
1304--21480[label="1;1pkt 1fpkt"];
1304--22220[label="1;1pkt 1fpkt"];
1304--22435[label="1;1pkt 1fpkt"];
1304--22505[label="0.333333;1pkt 1fpkt"];
1304--22680[label="1;1pkt 1fpkt"];
6040--11755[label="1;1pkt 1fpkt"];
6850--11265[label="0.0714286;1pkt 1fpkt"];
6850--11285[label="0.0714286;1pkt 1fpkt"];
6850--11338[label="0.0714286;1pkt 1fpkt"];
6850--11351[label="0.0714286;1pkt 1fpkt"];
6850--11382[label="0.0714286;1pkt 1fpkt"];
6850--11392[label="0.0714286;1pkt 1fpkt"];
11908--17159[label="1;1pkt 1fpkt"];
11908--20527[label="1;1pkt 1fpkt"];
12635--17613[label="1;1pkt 1fpkt"];
14113--18545[label="1;1pkt 1fpkt"];
14113--21480[label="1;1pkt 1fpkt"];
15722--19595[label="1;1pkt 1fpkt"];
15722--22220[label="1;1pkt 1fpkt"];
16198--19895[label="1;2pkt 2fpkt"];
16198--22435[label="1;1pkt 1fpkt"];
16713--20227[label="1;2pkt 2fpkt"];
16713--22680[label="1;1pkt 1fpkt"];
17159--20527[label="1;1pkt 1fpkt"];
18545--21480[label="1;1pkt 1fpkt"];
19595--22220[label="1;1pkt 1fpkt"];
19895--22435[label="1;1pkt 1fpkt"];
20227--22680[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.35.146.54" dst_port="80"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1327{
style=filled;
color=gray75;
11935[label="172.130.136.20;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17176[label="172.130.136.20;2pkt 2fpkt", shape=invtriangle, color=brown];
20538[label="172.130.136.20;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1327[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.136.20:52555, 201.197.58.102:80}[50%]&lt;BR/&gt;{172.130.136.20:52556, 201.197.58.102:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52556: (37.5%)&lt;BR/&gt; 52555: (12.5%)&gt;];
}
11935--17176[label="1;1pkt 1fpkt"];
11935--20538[label="1;1pkt 1fpkt"];
17176--20538[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.197.58.102" dst_port="80" src_ip="172.130.136.20" src_port="52556"/>
      <filter dst_ip="201.197.58.102" dst_port="80" src_ip="172.130.136.20" src_port="52555"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191992444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.149.24.21"/>
    </slice>
    <from sec="1191993241" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1329{
style=filled;
color=gray75;
11950[label="188.104.52.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17182[label="188.104.52.21;1pkt 1fpkt", shape=invtriangle, color=brown];
20541[label="188.104.52.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1329[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.52.21:34113, 209.50.2.173:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34113: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11950--17182[label="1;1pkt 1fpkt"];
11950--20541[label="1;1pkt 1fpkt"];
17182--20541[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.2.173" dst_port="80" src_ip="188.104.52.21" src_port="34113"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.58.56.21"/>
    </slice>
    <from sec="1191992958" usec="0"/>
    <to sec="1191992995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1331{
style=filled;
color=gray75;
11953[label="200.173.71.21;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17185[label="200.173.71.21;3pkt 3fpkt", shape=invtriangle, color=brown];
20544[label="200.173.71.21;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1331[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.71.21:37701, 55.49.84.41:25}[33.3333%]&lt;BR/&gt;{200.173.71.21:37699, 57.133.100.97:25}[33.3333%]&lt;BR/&gt;{200.173.71.21:37702, 219.161.186.112:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 37702: (16.6667%)&lt;BR/&gt; 37701: (16.6667%)&lt;BR/&gt; 37699: (16.6667%)&gt;];
}
11953--17185[label="1;3pkt 3fpkt"];
11953--20544[label="1;3pkt 3fpkt"];
17185--20544[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="219.161.186.112" dst_port="25" src_ip="200.173.71.21" src_port="37702"/>
      <filter dst_ip="57.133.100.97" dst_port="25" src_ip="200.173.71.21" src_port="37699"/>
      <filter dst_ip="55.49.84.41" dst_port="25" src_ip="200.173.71.21" src_port="37701"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.16.72.21"/>
    </slice>
    <from sec="1191992632" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.75.97.21"/>
    </slice>
    <from sec="1191993069" usec="0"/>
    <to sec="1191993072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.71.179.21"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.136.191.21"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.228.68.22"/>
    </slice>
    <from sec="1191992806" usec="0"/>
    <to sec="1191992849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1337{
style=filled;
color=gray75;
11994[label="201.214.154.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17212[label="201.214.154.22;2pkt 2fpkt", shape=invtriangle, color=brown];
20564[label="201.214.154.22;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1337[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.214.154.22:80, 132.188.219.208:1253}[50%]&lt;BR/&gt;{201.214.154.22:80, 132.188.219.208:1254}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1254: (30%)&lt;BR/&gt; 1253: (20%)&gt;];
}
11994--17212[label="1;2pkt 2fpkt"];
11994--20564[label="1;1pkt 1fpkt"];
17212--20564[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.219.208" dst_port="1254" src_ip="201.214.154.22" src_port="80"/>
      <filter dst_ip="132.188.219.208" dst_port="1253" src_ip="201.214.154.22" src_port="80"/>
    </slice>
    <from sec="1191992586" usec="0"/>
    <to sec="1191992600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1338{
style=filled;
color=gray75;
11997[label="81.127.170.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17215[label="81.127.170.22;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1338[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.127.170.22:63393, 201.67.0.159:20129}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63393: (50%)&lt;BR/&gt; 20129: (50%)&gt;];
}
11997--17215[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.0.159" dst_port="20129" src_ip="81.127.170.22" src_port="63393"/>
    </slice>
    <from sec="1191992924" usec="0"/>
    <to sec="1191993257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1339{
style=filled;
color=gray75;
12007[label="211.28.47.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17222[label="211.28.47.23;2pkt 2fpkt", shape=invtriangle, color=brown];
20571[label="211.28.47.23;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1339[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.28.47.23:80, 134.71.58.170:3747}[50%]&lt;BR/&gt;{211.28.47.23:80, 134.71.58.170:3748}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3748: (37.5%)&lt;BR/&gt; 3747: (12.5%)&gt;];
}
12007--17222[label="1;1pkt 1fpkt"];
12007--20571[label="1;1pkt 1fpkt"];
17222--20571[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.58.170" dst_port="3748" src_ip="211.28.47.23" src_port="80"/>
      <filter dst_ip="134.71.58.170" dst_port="3747" src_ip="211.28.47.23" src_port="80"/>
    </slice>
    <from sec="1191992638" usec="0"/>
    <to sec="1191992668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1340{
style=filled;
color=gray75;
12029[label="43.32.51.24;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17234[label="43.32.51.24;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1340[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.32.51.24:3814, 200.173.78.158:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3814: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
12029--17234[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.78.158" dst_port="3127" src_ip="43.32.51.24" src_port="3814"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.49.167.24"/>
    </slice>
    <from sec="1191992703" usec="0"/>
    <to sec="1191992901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1342{
style=filled;
color=gray75;
12038[label="201.75.184.24;7pkt 7fpkt", shape=pentagon, color=darkviolet];
17241[label="201.75.184.24;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1342[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.184.24:*, 218.38.81.235:80}[57.1429%]&lt;BR/&gt;{201.75.184.24:*, 209.50.37.135:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63393: (7.14286%)&lt;BR/&gt; 62848: (7.14286%)&lt;BR/&gt; 61715: (7.14286%)&lt;BR/&gt; 61365: (7.14286%)&gt;];
}
12038--17241[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="218.38.81.235" dst_port="80" src_ip="201.75.184.24"/>
      <filter dst_ip="209.50.37.135" dst_port="80" src_ip="201.75.184.24"/>
    </slice>
    <from sec="1191993259" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.6.248.24"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1344{
style=filled;
color=gray75;
12044[label="172.136.2.25;86pkt 86fpkt", shape=pentagon, color=darkviolet];
17247[label="172.136.2.25;86pkt 86fpkt", shape=invtriangle, color=brown];
20587[label="172.136.2.25;86pkt 86fpkt", shape=invhouse, color=bisque];
stat1344[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.136.2.25:1433, 222.2.162.249:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4962: (0.581395%)&lt;BR/&gt; 4939: (0.581395%)&lt;BR/&gt; 4878: (0.581395%)&lt;BR/&gt; 4844: (0.581395%)&gt;];
}
12044--17247[label="1;86pkt 86fpkt"];
12044--20587[label="1;86pkt 86fpkt"];
17247--20587[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter dst_ip="222.2.162.249" src_ip="172.136.2.25" src_port="1433"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.119.212.25"/>
    </slice>
    <from sec="1191992810" usec="0"/>
    <to sec="1191992841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.157.235.25"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1347{
style=filled;
color=gray75;
12065[label="0.125.104.26;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17261[label="0.125.104.26;4pkt 4fpkt", shape=invtriangle, color=brown];
20597[label="0.125.104.26;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1347[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.125.104.26:1395, 172.159.178.81:60877}[25%]&lt;BR/&gt;{0.125.104.26:1399, 172.159.178.81:60877}[25%]&lt;BR/&gt;{0.125.104.26:1401, 172.159.178.81:60877}[25%]&lt;BR/&gt;{0.125.104.26:5185, 172.159.178.81:60877}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60877: (50%)&lt;BR/&gt; 5185: (12.5%)&lt;BR/&gt; 1401: (12.5%)&lt;BR/&gt; 1399: (12.5%)&lt;BR/&gt; 1395: (12.5%)&gt;];
}
12065--17261[label="1;4pkt 4fpkt"];
12065--20597[label="1;4pkt 4fpkt"];
17261--20597[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.178.81" dst_port="60877" src_ip="0.125.104.26" src_port="5185"/>
      <filter dst_ip="172.159.178.81" dst_port="60877" src_ip="0.125.104.26" src_port="1401"/>
      <filter dst_ip="172.159.178.81" dst_port="60877" src_ip="0.125.104.26" src_port="1399"/>
      <filter dst_ip="172.159.178.81" dst_port="60877" src_ip="0.125.104.26" src_port="1395"/>
    </slice>
    <from sec="1191993183" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.26"/>
    </slice>
    <from sec="1191992507" usec="0"/>
    <to sec="1191992579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1349{
style=filled;
color=gray75;
12078[label="134.71.64.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17270[label="134.71.64.27;1pkt 1fpkt", shape=invtriangle, color=brown];
20602[label="134.71.64.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1349[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.64.27:54381, 201.125.140.215:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54381: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12078--17270[label="1;1pkt 1fpkt"];
12078--20602[label="1;1pkt 1fpkt"];
17270--20602[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.125.140.215" dst_port="80" src_ip="134.71.64.27" src_port="54381"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1350{
style=filled;
color=gray75;
12079[label="42.165.103.27;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17271[label="42.165.103.27;1pkt 1fpkt", shape=invtriangle, color=brown];
20603[label="42.165.103.27;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1350[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.165.103.27:80, 201.67.35.223:25938}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25938: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12079--17271[label="1;1pkt 1fpkt"];
12079--20603[label="1;1pkt 1fpkt"];
17271--20603[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.35.223" dst_port="25938" src_ip="42.165.103.27" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.22.160.27"/>
    </slice>
    <from sec="1191993225" usec="0"/>
    <to sec="1191993268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.52.249.27"/>
    </slice>
    <from sec="1191992988" usec="0"/>
    <to sec="1191992996" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1353{
style=filled;
color=gray75;
12095[label="217.18.72.28;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17280[label="217.18.72.28;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1353[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.18.72.28:50145, 169.6.110.183:80}[50%]&lt;BR/&gt;{217.18.72.28:50210, 169.6.110.183:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50210: (33.3333%)&lt;BR/&gt; 50145: (16.6667%)&gt;];
}
12095--17280[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.110.183" dst_port="80" src_ip="217.18.72.28" src_port="50210"/>
      <filter dst_ip="169.6.110.183" dst_port="80" src_ip="217.18.72.28" src_port="50145"/>
    </slice>
    <from sec="1191992499" usec="0"/>
    <to sec="1191992611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.2.74.28"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.119.96.28"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.49.103.28"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191992510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.8.104.28"/>
    </slice>
    <from sec="1191993278" usec="0"/>
    <to sec="1191993291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.128.108.28"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.169.113.28"/>
    </slice>
    <from sec="1191992807" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.100.124.28"/>
    </slice>
    <from sec="1191992815" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.50.158.28"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1362{
style=filled;
color=gray75;
12115[label="99.23.236.28;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17298[label="99.23.236.28;1pkt 1fpkt", shape=invtriangle, color=brown];
20622[label="99.23.236.28;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1362[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.23.236.28:3701, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3701: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12115--17298[label="1;1pkt 1fpkt"];
12115--20622[label="1;1pkt 1fpkt"];
17298--20622[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="99.23.236.28" src_port="3701"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.147.244.28"/>
    </slice>
    <from sec="1191992918" usec="0"/>
    <to sec="1191992941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1364{
style=filled;
color=gray75;
12118[label="213.134.6.29;7pkt 7fpkt", shape=pentagon, color=darkviolet];
17300[label="213.134.6.29;6pkt 6fpkt", shape=invtriangle, color=brown];
20623[label="213.134.6.29;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1364[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.134.6.29:80, 172.64.74.193:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1273: (7.89474%)&lt;BR/&gt; 1272: (7.89474%)&lt;BR/&gt; 1271: (7.89474%)&lt;BR/&gt; 1270: (7.89474%)&gt;];
}
12118--17300[label="1;6pkt 6fpkt"];
12118--20623[label="1;6pkt 6fpkt"];
17300--20623[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.74.193" src_ip="213.134.6.29" src_port="80"/>
    </slice>
    <from sec="1191992639" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.202.83.29"/>
    </slice>
    <from sec="1191993012" usec="0"/>
    <to sec="1191993082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1366{
style=filled;
color=gray75;
12146[label="209.185.65.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17316[label="209.185.65.30;1pkt 1fpkt", shape=invtriangle, color=brown];
20631[label="209.185.65.30;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1366[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.185.65.30:80, 172.133.82.182:51590}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51590: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12146--17316[label="1;1pkt 1fpkt"];
12146--20631[label="1;1pkt 1fpkt"];
17316--20631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.82.182" dst_port="51590" src_ip="209.185.65.30" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.180.16.31"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.150.26.31"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.230.74.31"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
12168[label="180.1.82.31;38pkt 38fpkt", shape=pentagon, color=darkviolet];
17329[label="180.1.82.31;38pkt 38fpkt", shape=invtriangle, color=brown];
20642[label="180.1.82.31;37pkt 37fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.1.82.31:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12168--17329[label="1;38pkt 38fpkt"];
12168--20642[label="1;37pkt 37fpkt"];
17329--20642[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter src_ip="180.1.82.31"/>
    </slice>
    <from sec="1191992459" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.127.113.31"/>
    </slice>
    <from sec="1191993015" usec="0"/>
    <to sec="1191993044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.208.185.31"/>
    </slice>
    <from sec="1191993031" usec="0"/>
    <to sec="1191993057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1373{
style=filled;
color=gray75;
12193[label="211.22.53.32;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17340[label="211.22.53.32;3pkt 3fpkt", shape=invtriangle, color=brown];
20653[label="211.22.53.32;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1373[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.22.53.32:1146, 132.188.101.20:1434}[25%]&lt;BR/&gt;{211.22.53.32:1146, 172.159.148.42:1434}[25%]&lt;BR/&gt;{211.22.53.32:1146, 180.93.9.101:1434}[25%]&lt;BR/&gt;{211.22.53.32:1146, 200.173.125.123:1434}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1146: (50%)&gt;];
}
12193--17340[label="1;3pkt 3fpkt"];
12193--20653[label="1;3pkt 3fpkt"];
17340--20653[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.125.123" dst_port="1434" src_ip="211.22.53.32" src_port="1146"/>
      <filter dst_ip="180.93.9.101" dst_port="1434" src_ip="211.22.53.32" src_port="1146"/>
      <filter dst_ip="172.159.148.42" dst_port="1434" src_ip="211.22.53.32" src_port="1146"/>
      <filter dst_ip="132.188.101.20" dst_port="1434" src_ip="211.22.53.32" src_port="1146"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1374{
style=filled;
color=gray75;
7163[label="209.50.29.41;d;4pkt 4fpkt", shape=diamond, color=yellow];
7164[label="172.130.86.170;s;2pkt 2fpkt", shape=diamond, color=yellow];
12196[label="172.159.72.32;25pkt 25fpkt", shape=pentagon, color=darkviolet];
15205[label="172.130.86.170;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17341[label="172.159.72.32;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1374[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.72.32:995, *:*}[72.4138%]&lt;BR/&gt;{*:110, *:*}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (36.6667%)&lt;BR/&gt; 110: (12.5%)&lt;BR/&gt; 22339: (2.5%)&lt;BR/&gt; 22338: (2.5%)&lt;BR/&gt; 21741: (2.5%)&gt;];
}
7163--7164[label="1;2pkt 2fpkt"];
7163--12196[label="0.5;2pkt 2fpkt"];
7163--15205[label="0.5;2pkt 2fpkt"];
7163--17341[label="0.5;2pkt 2fpkt"];
7164--15205[label="1;2pkt 2fpkt"];
12196--17341[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter src_port="110"/>
      <filter src_ip="172.159.72.32" src_port="995"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1375{
style=filled;
color=gray75;
12197[label="172.130.142.32;5pkt 5fpkt", shape=pentagon, color=darkviolet];
17342[label="172.130.142.32;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1375[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.142.32:49694, 211.162.179.82:80}[20%]&lt;BR/&gt;{172.130.142.32:49699, 211.162.179.82:80}[20%]&lt;BR/&gt;{172.130.142.32:49700, 211.162.179.82:80}[20%]&lt;BR/&gt;{172.130.142.32:49703, 211.162.179.82:80}[20%]&lt;BR/&gt;{172.130.142.32:49706, 211.162.179.82:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49706: (10%)&lt;BR/&gt; 49703: (10%)&lt;BR/&gt; 49700: (10%)&lt;BR/&gt; 49699: (10%)&gt;];
}
12197--17342[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.162.179.82" dst_port="80" src_ip="172.130.142.32" src_port="49706"/>
      <filter dst_ip="211.162.179.82" dst_port="80" src_ip="172.130.142.32" src_port="49703"/>
      <filter dst_ip="211.162.179.82" dst_port="80" src_ip="172.130.142.32" src_port="49700"/>
      <filter dst_ip="211.162.179.82" dst_port="80" src_ip="172.130.142.32" src_port="49699"/>
      <filter dst_ip="211.162.179.82" dst_port="80" src_ip="172.130.142.32" src_port="49694"/>
    </slice>
    <from sec="1191992920" usec="0"/>
    <to sec="1191992967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.177.166.32"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.106.195.32"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.156.208.32"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1379{
style=filled;
color=gray75;
12209[label="212.16.4.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17351[label="212.16.4.33;1pkt 1fpkt", shape=invtriangle, color=brown];
20658[label="212.16.4.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1379[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.16.4.33:80, 172.159.73.104:38015}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38015: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12209--17351[label="1;1pkt 1fpkt"];
12209--20658[label="1;1pkt 1fpkt"];
17351--20658[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.73.104" dst_port="38015" src_ip="212.16.4.33" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.49.141.33"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.69.191.33"/>
    </slice>
    <from sec="1191993019" usec="0"/>
    <to sec="1191993109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.124.194.33"/>
    </slice>
    <from sec="1191993261" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1383{
style=filled;
color=gray75;
12234[label="201.67.1.34;7pkt 7fpkt", shape=pentagon, color=darkviolet];
17366[label="201.67.1.34;6pkt 6fpkt", shape=invtriangle, color=brown];
20670[label="201.67.1.34;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1383[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.1.34:53, *:32768}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32768: (12.5%)&lt;BR/&gt; 46007: (7.5%)&lt;BR/&gt; 34850: (7.5%)&lt;BR/&gt; 32776: (7.5%)&gt;];
}
12234--17366[label="1;6pkt 6fpkt"];
12234--20670[label="1;7pkt 7fpkt"];
17366--20670[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="32768" src_ip="201.67.1.34" src_port="53"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.90.9.34"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.32.199.34"/>
    </slice>
    <from sec="1191992829" usec="0"/>
    <to sec="1191992878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.170.247.34"/>
    </slice>
    <from sec="1191992863" usec="0"/>
    <to sec="1191992924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1387{
style=filled;
color=gray75;
12257[label="211.114.20.35;161pkt 161fpkt", shape=pentagon, color=darkviolet];
17378[label="211.114.20.35;161pkt 161fpkt", shape=invtriangle, color=brown];
20675[label="211.114.20.35;161pkt 161fpkt", shape=invhouse, color=bisque];
stat1387[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.114.20.35:1032, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1032: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
12257--17378[label="1;161pkt 161fpkt"];
12257--20675[label="1;161pkt 161fpkt"];
17378--20675[label="1;161pkt 161fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="211.114.20.35" src_port="1032"/>
    </slice>
    <from sec="1191993076" usec="0"/>
    <to sec="1191993104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1388{
style=filled;
color=gray75;
2076[label="172.159.194.22;s;247pkt 247fpkt", shape=diamond, color=yellow];
2211[label="172.64.36.187;s;687pkt 687fpkt", shape=diamond, color=yellow];
2282[label="62.146.142.184;d;4pkt 4fpkt", shape=diamond, color=yellow];
3963[label="172.64.36.186;s;572pkt 572fpkt", shape=diamond, color=yellow];
4761[label="57.145.64.105;d;1315pkt 1315fpkt", shape=diamond, color=yellow];
6150[label="132.188.114.235;s;544pkt 544fpkt", shape=diamond, color=yellow];
8129[label="172.159.194.22;s;247pkt 247fpkt", shape=hexagon, color=black];
9288[label="57.145.64.105;d;654pkt 654fpkt", shape=hexagon, color=black];
10120[label="172.64.36.186;s;572pkt 572fpkt", shape=hexagon, color=black];
10598[label="132.188.114.235;s;544pkt 544fpkt", shape=hexagon, color=black];
10652[label="172.64.36.187;s;687pkt 687fpkt", shape=hexagon, color=black];
11437[label="169.6.247.0;68pkt 68fpkt", shape=pentagon, color=darkviolet];
11999[label="172.159.194.22;253pkt 253fpkt", shape=pentagon, color=darkviolet];
15597[label="172.64.36.187;725pkt 725fpkt", shape=pentagon, color=darkviolet];
17216[label="172.159.194.22;253pkt 253fpkt", shape=invtriangle, color=brown];
19502[label="172.64.36.187;726pkt 726fpkt", shape=invtriangle, color=brown];
20567[label="172.159.194.22;252pkt 252fpkt", shape=invhouse, color=bisque];
22149[label="172.64.36.187;726pkt 726fpkt", shape=invhouse, color=bisque];
stat1388[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 57.145.64.105:*}[46.5817%]&lt;BR/&gt;{172.64.36.187:*, *:*}[25.7527%]&lt;BR/&gt;{*:*, *:53}[20.8643%]&lt;BR/&gt;{172.64.36.186:*, *:*}[20.2621%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.1108%)&lt;BR/&gt; 32787: (7.46474%)&lt;BR/&gt; 25: (6.64941%)&lt;BR/&gt; 49534: (2.30829%)&lt;BR/&gt; 53202: (1.37726%)&gt;];
}
2076--2282[label="0.5;2pkt 2fpkt"];
2076--2795[label="0.00404858;1pkt 1fpkt"];
2076--3980[label="0.00684932;1pkt 1fpkt"];
2076--4071[label="0.0136986;1pkt 1fpkt"];
2076--4794[label="0.00617284;1pkt 1fpkt"];
2076--4951[label="0.00934579;1pkt 1fpkt"];
2076--5444[label="0.0105263;1pkt 1fpkt"];
2076--5661[label="0.00847458;1pkt 1fpkt"];
2076--6103[label="0.0322581;1pkt 1fpkt"];
2076--6141[label="0.008;1pkt 1fpkt"];
2076--6149[label="0.0142857;1pkt 1fpkt"];
2076--6738[label="0.037037;1pkt 1fpkt"];
2076--6742[label="0.0344828;1pkt 1fpkt"];
2076--6755[label="0.0357143;1pkt 1fpkt"];
2076--7392[label="0.0357143;1pkt 1fpkt"];
2076--7475[label="0.00404858;1pkt 1fpkt"];
2076--7617[label="0.00809717;2pkt 2fpkt"];
2076--8067[label="0.00404858;1pkt 1fpkt"];
2076--8129[label="1;247pkt 247fpkt"];
2076--8745[label="0.0384615;1pkt 1fpkt"];
2076--8751[label="0.0202429;5pkt 5fpkt"];
2076--8824[label="0.0136986;1pkt 1fpkt"];
2076--10218[label="0.0175439;1pkt 1fpkt"];
2076--10563[label="0.0357143;1pkt 1fpkt"];
2076--10589[label="0.008;1pkt 1fpkt"];
2076--10673[label="0.00934579;1pkt 1fpkt"];
2076--11040[label="0.00404858;1pkt 1fpkt"];
2076--11282[label="0.0121457;3pkt 3fpkt"];
2076--11311[label="0.00404858;1pkt 1fpkt"];
2076--11337[label="0.0931174;23pkt 23fpkt"];
2076--11347[label="0.0121457;3pkt 3fpkt"];
2076--11370[label="0.00404858;1pkt 1fpkt"];
2076--11381[label="0.0931174;23pkt 23fpkt"];
2076--11388[label="0.0121457;3pkt 3fpkt"];
2076--11397[label="0.00404858;1pkt 1fpkt"];
2076--11999[label="1;247pkt 247fpkt"];
2076--17216[label="1;247pkt 247fpkt"];
2076--20567[label="0.995951;246pkt 246fpkt"];
2211--2282[label="0.25;1pkt 1fpkt"];
2211--2335[label="0.0882353;3pkt 3fpkt"];
2211--2699[label="0.00478469;1pkt 1fpkt"];
2211--2795[label="0.00204918;1pkt 1fpkt"];
2211--3421[label="0.00502513;1pkt 1fpkt"];
2211--3422[label="0.00452489;1pkt 1fpkt"];
2211--4011[label="0.00531915;1pkt 1fpkt"];
2211--4066[label="0.003367;1pkt 1fpkt"];
2211--4071[label="0.0136986;1pkt 1fpkt"];
2211--4118[label="0.0136986;1pkt 1fpkt"];
2211--4139[label="0.00735294;1pkt 1fpkt"];
2211--4172[label="0.00555556;1pkt 1fpkt"];
2211--4761[label="0.333333;229pkt 229fpkt"];
2211--4813[label="0.00552486;1pkt 1fpkt"];
2211--4820[label="0.00552486;1pkt 1fpkt"];
2211--4828[label="0.0060241;1pkt 1fpkt"];
2211--4842[label="0.00787402;1pkt 1fpkt"];
2211--5560[label="0.00269542;1pkt 1fpkt"];
2211--5569[label="0.00558659;1pkt 1fpkt"];
2211--5701[label="0.00212314;1pkt 1fpkt"];
2211--6103[label="0.0322581;1pkt 1fpkt"];
2211--6136[label="0.00833333;1pkt 1fpkt"];
2211--6184[label="0.00641026;1pkt 1fpkt"];
2211--6742[label="0.0344828;1pkt 1fpkt"];
2211--6755[label="0.0357143;1pkt 1fpkt"];
2211--6855[label="0.0555556;1pkt 1fpkt"];
2211--7475[label="0.0014556;1pkt 1fpkt"];
2211--8067[label="0.00377358;1pkt 1fpkt"];
2211--8147[label="0.0014556;1pkt 1fpkt"];
2211--8384[label="0.00502513;1pkt 1fpkt"];
2211--8767[label="0.00552486;1pkt 1fpkt"];
2211--8824[label="0.0136986;1pkt 1fpkt"];
2211--8860[label="0.0149254;1pkt 1fpkt"];
2211--8874[label="0.0151515;1pkt 1fpkt"];
2211--8902[label="0.00555556;1pkt 1fpkt"];
2211--9018[label="0.09375;3pkt 3fpkt"];
2211--9283[label="0.00531915;1pkt 1fpkt"];
2211--9288[label="0.350153;229pkt 229fpkt"];
2211--9310[label="0.00729927;3pkt 3fpkt"];
2211--9648[label="0.00452489;1pkt 1fpkt"];
2211--10210[label="0.00578035;1pkt 1fpkt"];
2211--10563[label="0.0357143;1pkt 1fpkt"];
2211--10584[label="0.003367;1pkt 1fpkt"];
2211--10599[label="0.0060241;1pkt 1fpkt"];
2211--10652[label="1;687pkt 687fpkt"];
2211--11040[label="0.0014556;1pkt 1fpkt"];
2211--11274[label="0.0014556;1pkt 1fpkt"];
2211--11282[label="0.0116448;8pkt 8fpkt"];
2211--11311[label="0.0232897;16pkt 16fpkt"];
2211--11318[label="0.0189229;13pkt 13fpkt"];
2211--11337[label="0.0494905;34pkt 34fpkt"];
2211--11347[label="0.0116448;8pkt 8fpkt"];
2211--11370[label="0.0232897;16pkt 16fpkt"];
2211--11372[label="0.0189229;13pkt 13fpkt"];
2211--11381[label="0.0494905;34pkt 34fpkt"];
2211--11388[label="0.0116448;8pkt 8fpkt"];
2211--11397[label="0.0232897;16pkt 16fpkt"];
2211--11399[label="0.0189229;13pkt 13fpkt"];
2211--15597[label="0.997089;685pkt 685fpkt"];
2211--19502[label="0.998544;686pkt 686fpkt"];
2211--22149[label="0.998544;686pkt 686fpkt"];
2282--8129[label="0.5;2pkt 2fpkt"];
2282--10652[label="0.25;1pkt 1fpkt"];
2282--11437[label="0.25;1pkt 1fpkt"];
2282--11999[label="0.5;2pkt 2fpkt"];
2282--15597[label="0.25;1pkt 1fpkt"];
2282--17216[label="0.5;2pkt 2fpkt"];
2282--19502[label="0.25;1pkt 1fpkt"];
2282--20567[label="0.5;2pkt 2fpkt"];
2282--22149[label="0.25;1pkt 1fpkt"];
3963--4011[label="0.00531915;1pkt 1fpkt"];
3963--4066[label="0.003367;1pkt 1fpkt"];
3963--4071[label="0.0136986;1pkt 1fpkt"];
3963--4118[label="0.0136986;1pkt 1fpkt"];
3963--4136[label="0.008;1pkt 1fpkt"];
3963--4172[label="0.00555556;1pkt 1fpkt"];
3963--4761[label="0.491259;281pkt 281fpkt"];
3963--4813[label="0.00552486;1pkt 1fpkt"];
3963--4828[label="0.0060241;1pkt 1fpkt"];
3963--5560[label="0.00269542;1pkt 1fpkt"];
3963--5569[label="0.00558659;1pkt 1fpkt"];
3963--6136[label="0.00833333;1pkt 1fpkt"];
3963--6855[label="0.0555556;1pkt 1fpkt"];
3963--7475[label="0.00174825;1pkt 1fpkt"];
3963--8067[label="0.00377358;1pkt 1fpkt"];
3963--8384[label="0.00502513;1pkt 1fpkt"];
3963--8767[label="0.00552486;1pkt 1fpkt"];
3963--8824[label="0.0136986;1pkt 1fpkt"];
3963--8860[label="0.0149254;1pkt 1fpkt"];
3963--8902[label="0.00555556;1pkt 1fpkt"];
3963--9018[label="0.0625;2pkt 2fpkt"];
3963--9283[label="0.00531915;1pkt 1fpkt"];
3963--9288[label="0.491259;281pkt 281fpkt"];
3963--9648[label="0.00452489;1pkt 1fpkt"];
3963--10120[label="1;572pkt 572fpkt"];
3963--10584[label="0.003367;1pkt 1fpkt"];
3963--10599[label="0.0060241;1pkt 1fpkt"];
3963--11040[label="0.00174825;1pkt 1fpkt"];
3963--11274[label="0.00174825;1pkt 1fpkt"];
3963--11282[label="0.00174825;1pkt 1fpkt"];
3963--11296[label="0.00174825;1pkt 1fpkt"];
3963--11311[label="0.0804196;46pkt 46fpkt"];
3963--11318[label="0.013986;8pkt 8fpkt"];
3963--11337[label="0.0402098;23pkt 23fpkt"];
3963--11347[label="0.00174825;1pkt 1fpkt"];
3963--11355[label="0.00174825;1pkt 1fpkt"];
3963--11370[label="0.0804196;46pkt 46fpkt"];
3963--11372[label="0.013986;8pkt 8fpkt"];
3963--11381[label="0.0402098;23pkt 23fpkt"];
3963--11388[label="0.00174825;1pkt 1fpkt"];
3963--11395[label="0.00174825;1pkt 1fpkt"];
3963--11397[label="0.0804196;46pkt 46fpkt"];
3963--11399[label="0.013986;8pkt 8fpkt"];
4761--5463[label="0.0046729;1pkt 1fpkt"];
4761--6150[label="0.268382;146pkt 146fpkt"];
4761--7409[label="0.00836502;11pkt 11fpkt"];
4761--9246[label="0.00304183;4pkt 4fpkt"];
4761--9288[label="1;654pkt 654fpkt"];
4761--9634[label="0.00529101;1pkt 1fpkt"];
4761--10101[label="0.00152091;2pkt 2fpkt"];
4761--10120[label="0.491259;281pkt 281fpkt"];
4761--10167[label="0.0532688;22pkt 22fpkt"];
4761--10598[label="0.268382;146pkt 146fpkt"];
4761--10652[label="0.333333;229pkt 229fpkt"];
4761--11311[label="0.034981;46pkt 46fpkt"];
4761--11318[label="0.11711;154pkt 154fpkt"];
4761--11370[label="0.034981;46pkt 46fpkt"];
4761--11372[label="0.11711;154pkt 154fpkt"];
4761--11397[label="0.034981;46pkt 46fpkt"];
4761--11399[label="0.11711;154pkt 154fpkt"];
4761--11805[label="0.00152091;2pkt 2fpkt"];
4761--14831[label="0.0692015;91pkt 91fpkt"];
4761--15597[label="0.315862;229pkt 229fpkt"];
4761--17091[label="0.00152091;2pkt 2fpkt"];
4761--19018[label="0.0692015;91pkt 91fpkt"];
4761--19502[label="0.315427;229pkt 229fpkt"];
4761--20486[label="0.00152091;2pkt 2fpkt"];
4761--21813[label="0.0692015;91pkt 91fpkt"];
4761--22149[label="0.315427;229pkt 229fpkt"];
6150--6730[label="0.0212766;1pkt 1fpkt"];
6150--8806[label="0.00877193;1pkt 1fpkt"];
6150--10211[label="0.0263158;1pkt 1fpkt"];
6150--10598[label="1;544pkt 544fpkt"];
6150--11178[label="0.0263158;1pkt 1fpkt"];
6150--11274[label="0.00735294;4pkt 4fpkt"];
6150--11296[label="0.00735294;4pkt 4fpkt"];
6150--11311[label="0.0441176;24pkt 24fpkt"];
6150--11318[label="0.0422794;23pkt 23fpkt"];
6150--11337[label="0.00735294;4pkt 4fpkt"];
6150--11355[label="0.00735294;4pkt 4fpkt"];
6150--11370[label="0.0441176;24pkt 24fpkt"];
6150--11372[label="0.0422794;23pkt 23fpkt"];
6150--11381[label="0.00735294;4pkt 4fpkt"];
6150--11395[label="0.00735294;4pkt 4fpkt"];
6150--11397[label="0.0441176;24pkt 24fpkt"];
6150--11399[label="0.0422794;23pkt 23fpkt"];
8129--8745[label="0.0384615;1pkt 1fpkt"];
8129--8751[label="0.0202429;5pkt 5fpkt"];
8129--8824[label="0.0136986;1pkt 1fpkt"];
8129--10218[label="0.0175439;1pkt 1fpkt"];
8129--10563[label="0.0357143;1pkt 1fpkt"];
8129--10589[label="0.008;1pkt 1fpkt"];
8129--10673[label="0.00934579;1pkt 1fpkt"];
8129--11040[label="0.00404858;1pkt 1fpkt"];
8129--11282[label="0.0121457;3pkt 3fpkt"];
8129--11311[label="0.00404858;1pkt 1fpkt"];
8129--11337[label="0.0931174;23pkt 23fpkt"];
8129--11347[label="0.0121457;3pkt 3fpkt"];
8129--11370[label="0.00404858;1pkt 1fpkt"];
8129--11381[label="0.0931174;23pkt 23fpkt"];
8129--11388[label="0.0121457;3pkt 3fpkt"];
8129--11397[label="0.00404858;1pkt 1fpkt"];
8129--11999[label="1;247pkt 247fpkt"];
8129--17216[label="1;247pkt 247fpkt"];
8129--20567[label="0.995951;246pkt 246fpkt"];
9288--10101[label="0.00152905;1pkt 1fpkt"];
9288--10120[label="0.491259;281pkt 281fpkt"];
9288--10167[label="0.0532688;22pkt 22fpkt"];
9288--10652[label="0.350153;229pkt 229fpkt"];
9288--11311[label="0.0703364;46pkt 46fpkt"];
9288--11370[label="0.0703364;46pkt 46fpkt"];
9288--11397[label="0.0703364;46pkt 46fpkt"];
9288--11805[label="0.00152905;1pkt 1fpkt"];
9288--15597[label="0.350153;229pkt 229fpkt"];
9288--17091[label="0.00152905;1pkt 1fpkt"];
9288--19502[label="0.350153;229pkt 229fpkt"];
9288--20486[label="0.00152905;1pkt 1fpkt"];
9288--22149[label="0.350153;229pkt 229fpkt"];
10120--10584[label="0.003367;1pkt 1fpkt"];
10120--10599[label="0.0060241;1pkt 1fpkt"];
10120--11040[label="0.00174825;1pkt 1fpkt"];
10120--11274[label="0.00174825;1pkt 1fpkt"];
10120--11282[label="0.00174825;1pkt 1fpkt"];
10120--11296[label="0.00174825;1pkt 1fpkt"];
10120--11311[label="0.0804196;46pkt 46fpkt"];
10120--11318[label="0.013986;8pkt 8fpkt"];
10120--11337[label="0.0402098;23pkt 23fpkt"];
10120--11347[label="0.00174825;1pkt 1fpkt"];
10120--11355[label="0.00174825;1pkt 1fpkt"];
10120--11370[label="0.0804196;46pkt 46fpkt"];
10120--11372[label="0.013986;8pkt 8fpkt"];
10120--11381[label="0.0402098;23pkt 23fpkt"];
10120--11388[label="0.00174825;1pkt 1fpkt"];
10120--11395[label="0.00174825;1pkt 1fpkt"];
10120--11397[label="0.0804196;46pkt 46fpkt"];
10120--11399[label="0.013986;8pkt 8fpkt"];
10598--11178[label="0.0263158;1pkt 1fpkt"];
10598--11274[label="0.00735294;4pkt 4fpkt"];
10598--11296[label="0.00735294;4pkt 4fpkt"];
10598--11311[label="0.0441176;24pkt 24fpkt"];
10598--11318[label="0.0422794;23pkt 23fpkt"];
10598--11337[label="0.00735294;4pkt 4fpkt"];
10598--11355[label="0.00735294;4pkt 4fpkt"];
10598--11370[label="0.0441176;24pkt 24fpkt"];
10598--11372[label="0.0422794;23pkt 23fpkt"];
10598--11381[label="0.00735294;4pkt 4fpkt"];
10598--11395[label="0.00735294;4pkt 4fpkt"];
10598--11397[label="0.0441176;24pkt 24fpkt"];
10598--11399[label="0.0422794;23pkt 23fpkt"];
10652--11040[label="0.0014556;1pkt 1fpkt"];
10652--11274[label="0.0014556;1pkt 1fpkt"];
10652--11282[label="0.0116448;8pkt 8fpkt"];
10652--11311[label="0.0232897;16pkt 16fpkt"];
10652--11318[label="0.0189229;13pkt 13fpkt"];
10652--11337[label="0.0494905;34pkt 34fpkt"];
10652--11347[label="0.0116448;8pkt 8fpkt"];
10652--11370[label="0.0232897;16pkt 16fpkt"];
10652--11372[label="0.0189229;13pkt 13fpkt"];
10652--11381[label="0.0494905;34pkt 34fpkt"];
10652--11388[label="0.0116448;8pkt 8fpkt"];
10652--11397[label="0.0232897;16pkt 16fpkt"];
10652--11399[label="0.0189229;13pkt 13fpkt"];
10652--15597[label="0.997089;685pkt 685fpkt"];
10652--19502[label="0.998544;686pkt 686fpkt"];
10652--22149[label="0.998544;686pkt 686fpkt"];
11999--17216[label="1;253pkt 253fpkt"];
11999--20567[label="1;252pkt 252fpkt"];
15597--19502[label="1;725pkt 725fpkt"];
15597--22149[label="1;725pkt 725fpkt"];
17216--20567[label="1;252pkt 252fpkt"];
19502--22149[label="1;726pkt 726fpkt"];
</description>
    <slice>
      <filter src_ip="172.64.36.187"/>
      <filter src_ip="172.64.36.186"/>
      <filter dst_port="53"/>
      <filter dst_ip="57.145.64.105" src_port="53"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.67.121.35"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1390{
style=filled;
color=gray75;
12279[label="217.178.26.36;100pkt 100fpkt", shape=pentagon, color=darkviolet];
17389[label="217.178.26.36;99pkt 99fpkt", shape=invtriangle, color=brown];
stat1390[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.178.26.36:*, *:445}[52%]&lt;BR/&gt;{217.178.26.36:*, *:139}[48%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.1307%)&lt;BR/&gt; 139: (23.8693%)&lt;BR/&gt; 43584: (0.502513%)&lt;BR/&gt; 43547: (0.502513%)&lt;BR/&gt; 43475: (0.502513%)&gt;];
}
12279--17389[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="217.178.26.36"/>
      <filter dst_port="139" src_ip="217.178.26.36"/>
    </slice>
    <from sec="1191992728" usec="0"/>
    <to sec="1191992778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.213.38.36"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.151.42.36"/>
    </slice>
    <from sec="1191992933" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.134.109.36"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.169.118.36"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1395{
style=filled;
color=gray75;
12309[label="120.31.94.37;45pkt 45fpkt", shape=pentagon, color=darkviolet];
17408[label="120.31.94.37;44pkt 44fpkt", shape=invtriangle, color=brown];
20693[label="120.31.94.37;44pkt 44fpkt", shape=invhouse, color=bisque];
stat1395[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.31.94.37:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4918: (1.12782%)&lt;BR/&gt; 4814: (1.12782%)&lt;BR/&gt; 4793: (1.12782%)&lt;BR/&gt; 4748: (1.12782%)&gt;];
}
12309--17408[label="1;44pkt 44fpkt"];
12309--20693[label="1;44pkt 44fpkt"];
17408--20693[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="120.31.94.37"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.54.99.37"/>
    </slice>
    <from sec="1191992641" usec="0"/>
    <to sec="1191992702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.40.110.37"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.14.148.37"/>
    </slice>
    <from sec="1191993005" usec="0"/>
    <to sec="1191993053" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.29.196.37"/>
    </slice>
    <from sec="1191993092" usec="0"/>
    <to sec="1191993119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.179.244.37"/>
    </slice>
    <from sec="1191992471" usec="0"/>
    <to sec="1191992502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.9.38"/>
    </slice>
    <from sec="1191993069" usec="0"/>
    <to sec="1191993121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.222.12.38"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.171.43.38"/>
    </slice>
    <from sec="1191992804" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1404{
style=filled;
color=gray75;
12333[label="174.172.82.38;38pkt 38fpkt", shape=pentagon, color=darkviolet];
17429[label="174.172.82.38;38pkt 38fpkt", shape=invtriangle, color=brown];
20709[label="174.172.82.38;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1404[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.172.82.38:*, 206.35.146.138:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57644: (1.30435%)&lt;BR/&gt; 57642: (1.30435%)&lt;BR/&gt; 57637: (1.30435%)&lt;BR/&gt; 57636: (1.30435%)&gt;];
}
12333--17429[label="1;38pkt 38fpkt"];
12333--20709[label="1;38pkt 38fpkt"];
17429--20709[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="206.35.146.138" dst_port="80" src_ip="174.172.82.38"/>
    </slice>
    <from sec="1191993233" usec="0"/>
    <to sec="1191993262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.181.115.38"/>
    </slice>
    <from sec="1191992828" usec="0"/>
    <to sec="1191992858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.165.182.38"/>
    </slice>
    <from sec="1191992739" usec="0"/>
    <to sec="1191992766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.167.9.39"/>
    </slice>
    <from sec="1191992692" usec="0"/>
    <to sec="1191992736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.210.81.39"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191992763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1409{
style=filled;
color=gray75;
12359[label="84.140.13.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17446[label="84.140.13.40;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1409[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.140.13.40:41709, 172.133.49.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41709: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12359--17446[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.49.56" dst_port="80" src_ip="84.140.13.40" src_port="41709"/>
    </slice>
    <from sec="1191993113" usec="0"/>
    <to sec="1191993132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.179.73.40"/>
    </slice>
    <from sec="1191992834" usec="0"/>
    <to sec="1191992868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1411{
style=filled;
color=gray75;
12369[label="71.58.76.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17452[label="71.58.76.40;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1411[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.58.76.40:80, 169.6.117.160:3479}[33.3333%]&lt;BR/&gt;{71.58.76.40:80, 169.6.117.160:3480}[33.3333%]&lt;BR/&gt;{71.58.76.40:80, 169.6.117.160:3481}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3481: (20%)&lt;BR/&gt; 3480: (20%)&lt;BR/&gt; 3479: (10%)&gt;];
}
12369--17452[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.117.160" dst_port="3481" src_ip="71.58.76.40" src_port="80"/>
      <filter dst_ip="169.6.117.160" dst_port="3480" src_ip="71.58.76.40" src_port="80"/>
      <filter dst_ip="169.6.117.160" dst_port="3479" src_ip="71.58.76.40" src_port="80"/>
    </slice>
    <from sec="1191992786" usec="0"/>
    <to sec="1191992836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.151.75.41"/>
    </slice>
    <from sec="1191992604" usec="0"/>
    <to sec="1191992700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.203.120.41"/>
    </slice>
    <from sec="1191992779" usec="0"/>
    <to sec="1191992830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.93.144.41"/>
    </slice>
    <from sec="1191992466" usec="0"/>
    <to sec="1191992473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.150.41"/>
    </slice>
    <from sec="1191992430" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.237.5.42"/>
    </slice>
    <from sec="1191993110" usec="0"/>
    <to sec="1191993182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.100.211.42"/>
    </slice>
    <from sec="1191992810" usec="0"/>
    <to sec="1191992840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.163.225.42"/>
    </slice>
    <from sec="1191992798" usec="0"/>
    <to sec="1191992936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1419{
style=filled;
color=gray75;
12424[label="219.85.4.43;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17489[label="219.85.4.43;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1419[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.85.4.43:80, 134.71.53.20:1249}[33.3333%]&lt;BR/&gt;{219.85.4.43:80, 169.6.217.24:1157}[33.3333%]&lt;BR/&gt;{219.85.4.43:80, 169.6.217.24:1161}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1249: (16.6667%)&lt;BR/&gt; 1161: (16.6667%)&lt;BR/&gt; 1157: (16.6667%)&gt;];
}
12424--17489[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.217.24" dst_port="1161" src_ip="219.85.4.43" src_port="80"/>
      <filter dst_ip="169.6.217.24" dst_port="1157" src_ip="219.85.4.43" src_port="80"/>
      <filter dst_ip="134.71.53.20" dst_port="1249" src_ip="219.85.4.43" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
12431[label="134.71.53.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17493[label="134.71.53.43;4pkt 4fpkt", shape=invtriangle, color=brown];
20752[label="134.71.53.43;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.53.43:4175, 1.178.159.154:80}[25%]&lt;BR/&gt;{134.71.53.43:4174, 62.102.90.180:80}[25%]&lt;BR/&gt;{134.71.53.43:4169, 61.225.55.90:80}[25%]&lt;BR/&gt;{134.71.53.43:4170, 61.225.55.90:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4175: (12.5%)&lt;BR/&gt; 4174: (12.5%)&lt;BR/&gt; 4170: (12.5%)&lt;BR/&gt; 4169: (12.5%)&gt;];
}
12431--17493[label="1;4pkt 4fpkt"];
12431--20752[label="1;4pkt 4fpkt"];
17493--20752[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="61.225.55.90" dst_port="80" src_ip="134.71.53.43" src_port="4170"/>
      <filter dst_ip="61.225.55.90" dst_port="80" src_ip="134.71.53.43" src_port="4169"/>
      <filter dst_ip="62.102.90.180" dst_port="80" src_ip="134.71.53.43" src_port="4174"/>
      <filter dst_ip="1.178.159.154" dst_port="80" src_ip="134.71.53.43" src_port="4175"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1421{
style=filled;
color=gray75;
12444[label="201.75.184.43;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17502[label="201.75.184.43;3pkt 3fpkt", shape=invtriangle, color=brown];
20757[label="201.75.184.43;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1421[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.184.43:1034, 56.76.48.65:80}[25%]&lt;BR/&gt;{201.75.184.43:1041, 56.76.48.65:80}[25%]&lt;BR/&gt;{201.75.184.43:1027, 1.178.159.104:80}[25%]&lt;BR/&gt;{201.75.184.43:1031, 1.178.159.104:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1041: (13.6364%)&lt;BR/&gt; 1034: (13.6364%)&lt;BR/&gt; 1031: (13.6364%)&lt;BR/&gt; 1027: (9.09091%)&gt;];
}
12444--17502[label="1;3pkt 3fpkt"];
12444--20757[label="1;4pkt 4fpkt"];
17502--20757[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="1.178.159.104" dst_port="80" src_ip="201.75.184.43" src_port="1031"/>
      <filter dst_ip="1.178.159.104" dst_port="80" src_ip="201.75.184.43" src_port="1027"/>
      <filter dst_ip="56.76.48.65" dst_port="80" src_ip="201.75.184.43" src_port="1041"/>
      <filter dst_ip="56.76.48.65" dst_port="80" src_ip="201.75.184.43" src_port="1034"/>
    </slice>
    <from sec="1191993233" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1422{
style=filled;
color=gray75;
12446[label="172.136.246.43;85pkt 85fpkt", shape=pentagon, color=darkviolet];
17504[label="172.136.246.43;85pkt 85fpkt", shape=invtriangle, color=brown];
20759[label="172.136.246.43;85pkt 85fpkt", shape=invhouse, color=bisque];
stat1422[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.136.246.43:1433, 222.2.55.245:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 65345: (0.588235%)&lt;BR/&gt; 65269: (0.588235%)&lt;BR/&gt; 65225: (0.588235%)&lt;BR/&gt; 65139: (0.588235%)&gt;];
}
12446--17504[label="1;85pkt 85fpkt"];
12446--20759[label="1;85pkt 85fpkt"];
17504--20759[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="222.2.55.245" src_ip="172.136.246.43" src_port="1433"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.76.20.45"/>
    </slice>
    <from sec="1191992891" usec="0"/>
    <to sec="1191992932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.142.168.45"/>
    </slice>
    <from sec="1191992544" usec="0"/>
    <to sec="1191992587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1425{
style=filled;
color=gray75;
2191[label="169.6.104.248;d;229pkt 229fpkt", shape=diamond, color=yellow];
2471[label="80.84.91.75;s;6pkt 6fpkt", shape=diamond, color=yellow];
3290[label="4.86.22.203;s;8pkt 8fpkt", shape=diamond, color=yellow];
6025[label="217.186.6.201;s;8pkt 8fpkt", shape=diamond, color=yellow];
7993[label="80.84.91.75;s;6pkt 6fpkt", shape=hexagon, color=black];
8153[label="169.6.104.248;d;229pkt 229fpkt", shape=hexagon, color=black];
10835[label="217.186.6.201;s;8pkt 8fpkt", shape=hexagon, color=black];
12495[label="211.21.197.45;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13098[label="80.84.91.75;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14082[label="220.0.102.121;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15207[label="216.144.93.170;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15752[label="201.226.32.195;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17533[label="211.21.197.45;7pkt 7fpkt", shape=invtriangle, color=brown];
17906[label="80.84.91.75;6pkt 6fpkt", shape=invtriangle, color=brown];
18526[label="220.0.102.121;4pkt 4fpkt", shape=invtriangle, color=brown];
19251[label="216.144.93.170;2pkt 2fpkt", shape=invtriangle, color=brown];
20775[label="211.21.197.45;7pkt 7fpkt", shape=invhouse, color=bisque];
21040[label="80.84.91.75;6pkt 6fpkt", shape=invhouse, color=bisque];
21468[label="220.0.102.121;4pkt 4fpkt", shape=invhouse, color=bisque];
21974[label="216.144.93.170;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1425[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 169.6.104.248:*}[68.1223%]&lt;BR/&gt;{*:*, 169.6.104.248:23985}[29.6943%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.2568%)&lt;BR/&gt; 23985: (12.2966%)&lt;BR/&gt; 57641: (0.904159%)&lt;BR/&gt; 0: (0.723327%)&lt;BR/&gt; 58393: (0.632911%)&gt;];
}
2191--2204[label="0.00436681;1pkt 1fpkt"];
2191--2471[label="1;6pkt 6fpkt"];
2191--2491[label="0.00436681;1pkt 1fpkt"];
2191--3242[label="1;1pkt 1fpkt"];
2191--3290[label="1;8pkt 8fpkt"];
2191--6025[label="1;8pkt 8fpkt"];
2191--6898[label="0.0120482;1pkt 1fpkt"];
2191--7423[label="0.0131004;3pkt 3fpkt"];
2191--7745[label="0.00436681;1pkt 1fpkt"];
2191--7993[label="1;6pkt 6fpkt"];
2191--8153[label="1;229pkt 229fpkt"];
2191--8241[label="1;1pkt 1fpkt"];
2191--9661[label="0.00436681;1pkt 1fpkt"];
2191--9787[label="0.00436681;1pkt 1fpkt"];
2191--9887[label="0.00436681;1pkt 1fpkt"];
2191--10241[label="0.00436681;1pkt 1fpkt"];
2191--10259[label="0.00436681;1pkt 1fpkt"];
2191--10835[label="1;8pkt 8fpkt"];
2191--11348[label="0.135371;31pkt 31fpkt"];
2191--11389[label="0.135371;31pkt 31fpkt"];
2191--12495[label="1;7pkt 7fpkt"];
2191--13098[label="1;5pkt 5fpkt"];
2191--14082[label="1;4pkt 4fpkt"];
2191--14286[label="0.00436681;1pkt 1fpkt"];
2191--14448[label="0.00436681;1pkt 1fpkt"];
2191--14510[label="0.0113636;1pkt 1fpkt"];
2191--15207[label="1;2pkt 2fpkt"];
2191--15719[label="0.00436681;1pkt 1fpkt"];
2191--15752[label="1;3pkt 3fpkt"];
2191--15889[label="0.0131004;3pkt 3fpkt"];
2191--17533[label="1;7pkt 7fpkt"];
2191--17906[label="1;6pkt 6fpkt"];
2191--18526[label="1;4pkt 4fpkt"];
2191--18652[label="0.00436681;1pkt 1fpkt"];
2191--18769[label="0.00436681;1pkt 1fpkt"];
2191--18815[label="0.0113636;1pkt 1fpkt"];
2191--19251[label="1;2pkt 2fpkt"];
2191--19593[label="0.00436681;1pkt 1fpkt"];
2191--19703[label="0.0131004;3pkt 3fpkt"];
2191--20775[label="1;7pkt 7fpkt"];
2191--21040[label="1;6pkt 6fpkt"];
2191--21468[label="1;4pkt 4fpkt"];
2191--21558[label="0.00436681;1pkt 1fpkt"];
2191--21974[label="1;2pkt 2fpkt"];
2191--22218[label="0.00436681;1pkt 1fpkt"];
2471--7993[label="1;6pkt 6fpkt"];
2471--8153[label="1;6pkt 6fpkt"];
2471--13098[label="1;5pkt 5fpkt"];
2471--17906[label="1;6pkt 6fpkt"];
2471--21040[label="1;6pkt 6fpkt"];
3290--8153[label="1;8pkt 8fpkt"];
3290--11348[label="0.875;7pkt 7fpkt"];
3290--11389[label="0.875;7pkt 7fpkt"];
6025--8153[label="1;8pkt 8fpkt"];
6025--10835[label="1;8pkt 8fpkt"];
7993--8153[label="1;6pkt 6fpkt"];
7993--13098[label="1;5pkt 5fpkt"];
7993--17906[label="1;6pkt 6fpkt"];
7993--21040[label="1;6pkt 6fpkt"];
8153--8241[label="1;1pkt 1fpkt"];
8153--9661[label="0.00436681;1pkt 1fpkt"];
8153--9787[label="0.00436681;1pkt 1fpkt"];
8153--9887[label="0.00436681;1pkt 1fpkt"];
8153--10241[label="0.00436681;1pkt 1fpkt"];
8153--10259[label="0.00436681;1pkt 1fpkt"];
8153--10835[label="1;8pkt 8fpkt"];
8153--11348[label="0.135371;31pkt 31fpkt"];
8153--11389[label="0.135371;31pkt 31fpkt"];
8153--12495[label="1;7pkt 7fpkt"];
8153--13098[label="1;5pkt 5fpkt"];
8153--14082[label="1;4pkt 4fpkt"];
8153--14286[label="0.00436681;1pkt 1fpkt"];
8153--14448[label="0.00436681;1pkt 1fpkt"];
8153--14510[label="0.0113636;1pkt 1fpkt"];
8153--15207[label="1;2pkt 2fpkt"];
8153--15719[label="0.00436681;1pkt 1fpkt"];
8153--15752[label="1;3pkt 3fpkt"];
8153--15889[label="0.0131004;3pkt 3fpkt"];
8153--17533[label="1;7pkt 7fpkt"];
8153--17906[label="1;6pkt 6fpkt"];
8153--18526[label="1;4pkt 4fpkt"];
8153--18652[label="0.00436681;1pkt 1fpkt"];
8153--18769[label="0.00436681;1pkt 1fpkt"];
8153--18815[label="0.0113636;1pkt 1fpkt"];
8153--19251[label="1;2pkt 2fpkt"];
8153--19593[label="0.00436681;1pkt 1fpkt"];
8153--19703[label="0.0131004;3pkt 3fpkt"];
8153--20775[label="1;7pkt 7fpkt"];
8153--21040[label="1;6pkt 6fpkt"];
8153--21468[label="1;4pkt 4fpkt"];
8153--21558[label="0.00436681;1pkt 1fpkt"];
8153--21974[label="1;2pkt 2fpkt"];
8153--22218[label="0.00436681;1pkt 1fpkt"];
12495--17533[label="1;7pkt 7fpkt"];
12495--20775[label="1;7pkt 7fpkt"];
13098--17906[label="1;5pkt 5fpkt"];
13098--21040[label="1;5pkt 5fpkt"];
14082--18526[label="1;4pkt 4fpkt"];
14082--21468[label="1;4pkt 4fpkt"];
15207--19251[label="1;2pkt 2fpkt"];
15207--21974[label="1;2pkt 2fpkt"];
17533--20775[label="1;7pkt 7fpkt"];
17906--21040[label="1;6pkt 6fpkt"];
18526--21468[label="1;4pkt 4fpkt"];
19251--21974[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.104.248" src_port="80"/>
      <filter dst_ip="169.6.104.248" dst_port="23985"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1426{
style=filled;
color=gray75;
12502[label="172.130.36.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17536[label="172.130.36.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1426[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.36.46:32955, 209.50.2.130:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32955: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12502--17536[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.2.130" dst_port="80" src_ip="172.130.36.46" src_port="32955"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.8.46.46"/>
    </slice>
    <from sec="1191992891" usec="0"/>
    <to sec="1191992924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.214.85.46"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.83.138.46"/>
    </slice>
    <from sec="1191992768" usec="0"/>
    <to sec="1191992841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.120.172.46"/>
    </slice>
    <from sec="1191992920" usec="0"/>
    <to sec="1191992951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.125.212.46"/>
    </slice>
    <from sec="1191992939" usec="0"/>
    <to sec="1191992983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.125.73.47"/>
    </slice>
    <from sec="1191992669" usec="0"/>
    <to sec="1191992718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.34.154.47"/>
    </slice>
    <from sec="1191992952" usec="0"/>
    <to sec="1191992971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1434{
style=filled;
color=gray75;
12575[label="35.107.80.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17578[label="35.107.80.49;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1434[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.107.80.49:8390, 169.6.168.57:4358}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8390: (50%)&lt;BR/&gt; 4358: (50%)&gt;];
}
12575--17578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.168.57" dst_port="4358" src_ip="35.107.80.49" src_port="8390"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.218.140.49"/>
    </slice>
    <from sec="1191992939" usec="0"/>
    <to sec="1191992981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1436{
style=filled;
color=gray75;
12586[label="201.75.187.49;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17585[label="201.75.187.49;2pkt 2fpkt", shape=invtriangle, color=brown];
20810[label="201.75.187.49;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1436[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.187.49:44195, 204.39.0.84:80}[50%]&lt;BR/&gt;{201.75.187.49:44157, 84.134.145.171:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44195: (25%)&lt;BR/&gt; 44157: (25%)&gt;];
}
12586--17585[label="1;2pkt 2fpkt"];
12586--20810[label="1;2pkt 2fpkt"];
17585--20810[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="84.134.145.171" dst_port="80" src_ip="201.75.187.49" src_port="44157"/>
      <filter dst_ip="204.39.0.84" dst_port="80" src_ip="201.75.187.49" src_port="44195"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.130.187.49"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.71.10.50"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1440{
style=filled;
color=gray75;
12602[label="61.60.98.50;16pkt 16fpkt", shape=pentagon, color=darkviolet];
17593[label="61.60.98.50;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1440[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.60.98.50:80, 132.188.153.124:*}[52.9412%]&lt;BR/&gt;{61.60.98.50:80, 172.64.85.148:*}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1488: (3.0303%)&lt;BR/&gt; 1484: (3.0303%)&lt;BR/&gt; 1481: (3.0303%)&lt;BR/&gt; 1480: (3.0303%)&gt;];
}
12602--17593[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="132.188.153.124" src_ip="61.60.98.50" src_port="80"/>
      <filter dst_ip="172.64.85.148" src_ip="61.60.98.50" src_port="80"/>
    </slice>
    <from sec="1191993132" usec="0"/>
    <to sec="1191993196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.81.115.50"/>
    </slice>
    <from sec="1191992694" usec="0"/>
    <to sec="1191992725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1442{
style=filled;
color=gray75;
12613[label="85.98.41.51;5pkt 5fpkt", shape=pentagon, color=darkviolet];
17600[label="85.98.41.51;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1442[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.98.41.51:2230, 172.96.8.21:139}[20%]&lt;BR/&gt;{85.98.41.51:1799, 172.96.8.135:139}[20%]&lt;BR/&gt;{85.98.41.51:2219, 172.96.8.180:139}[20%]&lt;BR/&gt;{85.98.41.51:2225, 172.96.8.181:139}[20%]&lt;BR/&gt;{85.98.41.51:4509, 172.96.8.233:139}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 2230: (11.1111%)&lt;BR/&gt; 2225: (11.1111%)&lt;BR/&gt; 2219: (11.1111%)&lt;BR/&gt; 1799: (11.1111%)&gt;];
}
12613--17600[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="172.96.8.233" dst_port="139" src_ip="85.98.41.51" src_port="4509"/>
      <filter dst_ip="172.96.8.181" dst_port="139" src_ip="85.98.41.51" src_port="2225"/>
      <filter dst_ip="172.96.8.180" dst_port="139" src_ip="85.98.41.51" src_port="2219"/>
      <filter dst_ip="172.96.8.135" dst_port="139" src_ip="85.98.41.51" src_port="1799"/>
      <filter dst_ip="172.96.8.21" dst_port="139" src_ip="85.98.41.51" src_port="2230"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.128.76.51"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.230.157.51"/>
    </slice>
    <from sec="1191992681" usec="0"/>
    <to sec="1191992743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.225.209.51"/>
    </slice>
    <from sec="1191993118" usec="0"/>
    <to sec="1191993131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.230.53.52"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1447{
style=filled;
color=gray75;
12637[label="168.53.104.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17614[label="168.53.104.52;2pkt 2fpkt", shape=invtriangle, color=brown];
20828[label="168.53.104.52;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1447[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.104.52:80, 200.145.233.178:60774}[50%]&lt;BR/&gt;{168.53.104.52:80, 200.145.233.178:62627}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62627: (30%)&lt;BR/&gt; 60774: (20%)&gt;];
}
12637--17614[label="1;1pkt 1fpkt"];
12637--20828[label="1;1pkt 1fpkt"];
17614--20828[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.145.233.178" dst_port="62627" src_ip="168.53.104.52" src_port="80"/>
      <filter dst_ip="200.145.233.178" dst_port="60774" src_ip="168.53.104.52" src_port="80"/>
    </slice>
    <from sec="1191993159" usec="0"/>
    <to sec="1191993177" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.199.170.52"/>
    </slice>
    <from sec="1191993032" usec="0"/>
    <to sec="1191993055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1449{
style=filled;
color=gray75;
12652[label="80.21.39.53;5pkt 5fpkt", shape=pentagon, color=darkviolet];
17624[label="80.21.39.53;5pkt 5fpkt", shape=invtriangle, color=brown];
20835[label="80.21.39.53;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1449[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.21.39.53:22716, 169.6.94.154:37103}[20%]&lt;BR/&gt;{80.21.39.53:22726, 169.6.94.154:37103}[20%]&lt;BR/&gt;{80.21.39.53:22736, 169.6.94.154:37103}[20%]&lt;BR/&gt;{80.21.39.53:22781, 169.6.94.154:443}[20%]&lt;BR/&gt;{80.21.39.53:22798, 169.6.94.154:37103}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37103: (40%)&lt;BR/&gt; 22798: (10%)&lt;BR/&gt; 22781: (10%)&lt;BR/&gt; 22736: (10%)&lt;BR/&gt; 22726: (10%)&gt;];
}
12652--17624[label="1;5pkt 5fpkt"];
12652--20835[label="1;5pkt 5fpkt"];
17624--20835[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.94.154" dst_port="37103" src_ip="80.21.39.53" src_port="22798"/>
      <filter dst_ip="169.6.94.154" dst_port="443" src_ip="80.21.39.53" src_port="22781"/>
      <filter dst_ip="169.6.94.154" dst_port="37103" src_ip="80.21.39.53" src_port="22736"/>
      <filter dst_ip="169.6.94.154" dst_port="37103" src_ip="80.21.39.53" src_port="22726"/>
      <filter dst_ip="169.6.94.154" dst_port="37103" src_ip="80.21.39.53" src_port="22716"/>
    </slice>
    <from sec="1191992445" usec="0"/>
    <to sec="1191992860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.182.48.53"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1451{
style=filled;
color=gray75;
12667[label="201.179.124.53;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17636[label="201.179.124.53;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1451[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.179.124.53:80, 134.71.18.245:2832}[50%]&lt;BR/&gt;{201.179.124.53:80, 134.71.18.245:2834}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2834: (25%)&lt;BR/&gt; 2832: (25%)&gt;];
}
12667--17636[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.18.245" dst_port="2834" src_ip="201.179.124.53" src_port="80"/>
      <filter dst_ip="134.71.18.245" dst_port="2832" src_ip="201.179.124.53" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.206.146.53"/>
    </slice>
    <from sec="1191993179" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.174.205.53"/>
    </slice>
    <from sec="1191992685" usec="0"/>
    <to sec="1191992717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.43.174.54"/>
    </slice>
    <from sec="1191993181" usec="0"/>
    <to sec="1191993195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.211.55.55"/>
    </slice>
    <from sec="1191992475" usec="0"/>
    <to sec="1191992860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.6.148.55"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.79.50.56"/>
    </slice>
    <from sec="1191993285" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.33.238.56"/>
    </slice>
    <from sec="1191992745" usec="0"/>
    <to sec="1191992768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.104.7.57"/>
    </slice>
    <from sec="1191992562" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.153.58"/>
    </slice>
    <from sec="1191993099" usec="0"/>
    <to sec="1191993255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1461{
style=filled;
color=gray75;
12758[label="221.3.199.58;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17691[label="221.3.199.58;1pkt 1fpkt", shape=invtriangle, color=brown];
20881[label="221.3.199.58;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1461[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.3.199.58:64669, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64669: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12758--17691[label="1;1pkt 1fpkt"];
12758--20881[label="1;1pkt 1fpkt"];
17691--20881[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="221.3.199.58" src_port="64669"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1462{
style=filled;
color=gray75;
12762[label="85.77.46.59;254pkt 254fpkt", shape=pentagon, color=darkviolet];
17693[label="85.77.46.59;254pkt 254fpkt", shape=invtriangle, color=brown];
20882[label="85.77.46.59;254pkt 254fpkt", shape=invhouse, color=bisque];
stat1462[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.77.46.59:63849, *:137}[30.315%]&lt;BR/&gt;{85.77.46.59:63894, *:137}[28.3465%]&lt;BR/&gt;{85.77.46.59:63890, *:137}[27.9528%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 63849: (15.1575%)&lt;BR/&gt; 63894: (14.1732%)&lt;BR/&gt; 63890: (13.9764%)&lt;BR/&gt; 63879: (6.69291%)&gt;];
}
12762--17693[label="1;254pkt 254fpkt"];
12762--20882[label="1;254pkt 254fpkt"];
17693--20882[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.77.46.59" src_port="63849"/>
      <filter dst_port="137" src_ip="85.77.46.59" src_port="63894"/>
      <filter dst_port="137" src_ip="85.77.46.59" src_port="63890"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.229.233.59"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.176.57.60"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1465{
style=filled;
color=gray75;
12785[label="217.129.128.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17707[label="217.129.128.60;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1465[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.129.128.60:50948, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50948: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12785--17707[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="217.129.128.60" src_port="50948"/>
    </slice>
    <from sec="1191993257" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.89.156.60"/>
    </slice>
    <from sec="1191993079" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
12799[label="4.154.88.61;11pkt 11fpkt", shape=pentagon, color=darkviolet];
17715[label="4.154.88.61;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.154.88.61:*, 200.173.78.145:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3159: (4.54545%)&lt;BR/&gt; 3158: (4.54545%)&lt;BR/&gt; 3157: (4.54545%)&lt;BR/&gt; 3156: (4.54545%)&gt;];
}
12799--17715[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.78.145" dst_port="80" src_ip="4.154.88.61"/>
    </slice>
    <from sec="1191993286" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1468{
style=filled;
color=gray75;
12804[label="201.214.154.61;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17717[label="201.214.154.61;2pkt 2fpkt", shape=invtriangle, color=brown];
20900[label="201.214.154.61;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1468[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.214.154.61:80, 169.6.65.165:51150}[50%]&lt;BR/&gt;{201.214.154.61:80, 169.6.65.165:51164}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51164: (25%)&lt;BR/&gt; 51150: (25%)&gt;];
}
12804--17717[label="1;2pkt 2fpkt"];
12804--20900[label="1;2pkt 2fpkt"];
17717--20900[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.65.165" dst_port="51164" src_ip="201.214.154.61" src_port="80"/>
      <filter dst_ip="169.6.65.165" dst_port="51150" src_ip="201.214.154.61" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.69.243.61"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.204.91.62"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.133.116.63"/>
    </slice>
    <from sec="1191992952" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1472{
style=filled;
color=gray75;
12832[label="211.99.206.63;9pkt 9fpkt", shape=pentagon, color=darkviolet];
17731[label="211.99.206.63;8pkt 8fpkt", shape=invtriangle, color=brown];
20909[label="211.99.206.63;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1472[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.99.206.63:80, 169.6.84.37:*}[77.7778%]&lt;BR/&gt;{211.99.206.63:8080, 169.6.84.37:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.4615%)&lt;BR/&gt; 8080: (11.5385%)&lt;BR/&gt; 44028: (5.76923%)&lt;BR/&gt; 43979: (5.76923%)&lt;BR/&gt; 43950: (5.76923%)&gt;];
}
12832--17731[label="1;8pkt 8fpkt"];
12832--20909[label="1;9pkt 9fpkt"];
17731--20909[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.84.37" src_ip="211.99.206.63" src_port="80"/>
      <filter dst_ip="169.6.84.37" src_ip="211.99.206.63" src_port="8080"/>
    </slice>
    <from sec="1191993246" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.4149,2.96665,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1473{
style=filled;
color=gray75;
1355[label="172.130.187.97;s;136pkt 136fpkt", shape=diamond, color=yellow];
2311[label="61.86.169.13;d;13pkt 13fpkt", shape=diamond, color=yellow];
2418[label="217.112.33.26;d;14pkt 14fpkt", shape=diamond, color=yellow];
3109[label="168.53.105.148;s;2pkt 2fpkt", shape=diamond, color=yellow];
5884[label="210.107.57.52;d;98pkt 98fpkt", shape=diamond, color=yellow];
6048[label="172.130.67.147;s;67pkt 67fpkt", shape=diamond, color=yellow];
7131[label="81.33.84.67;d;7pkt 7fpkt", shape=diamond, color=yellow];
8560[label="217.112.33.26;d;14pkt 14fpkt", shape=hexagon, color=black];
9403[label="61.86.169.13;d;9pkt 9fpkt", shape=hexagon, color=black];
10088[label="172.130.67.147;s;29pkt 29fpkt", shape=hexagon, color=black];
10437[label="210.107.57.52;d;98pkt 98fpkt", shape=hexagon, color=black];
12245[label="168.53.128.34;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14664[label="172.130.67.147;73pkt 73fpkt", shape=pentagon, color=darkviolet];
14699[label="168.53.105.148;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17371[label="168.53.128.34;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1473[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.187.97:80, *:*}[50.8%]&lt;BR/&gt;{172.130.67.147:80, 210.107.57.52:*}[25.6%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0486%)&lt;BR/&gt; 0: (2.95139%)&lt;BR/&gt; 53: (0.78125%)&lt;BR/&gt; 443: (0.694444%)&lt;BR/&gt; 2624: (0.434028%)&gt;];
}
1355--2311[label="0.846154;11pkt 11fpkt"];
1355--2418[label="0.142857;2pkt 2fpkt"];
1355--5884[label="0.153061;15pkt 15fpkt"];
1355--7131[label="0.285714;2pkt 2fpkt"];
1355--8560[label="0.142857;2pkt 2fpkt"];
1355--9403[label="1;9pkt 9fpkt"];
1355--10437[label="0.153061;15pkt 15fpkt"];
1355--11348[label="0.0735294;10pkt 10fpkt"];
1355--11389[label="0.0735294;10pkt 10fpkt"];
2311--9403[label="1;9pkt 9fpkt"];
2311--11348[label="0.0769231;1pkt 1fpkt"];
2311--11389[label="0.0769231;1pkt 1fpkt"];
2418--3109[label="1;2pkt 2fpkt"];
2418--8560[label="1;14pkt 14fpkt"];
2418--12245[label="1;6pkt 6fpkt"];
2418--14699[label="0.5;2pkt 2fpkt"];
2418--17371[label="1;6pkt 6fpkt"];
3109--8560[label="1;2pkt 2fpkt"];
3109--14699[label="1;2pkt 2fpkt"];
5884--6048[label="0.955224;64pkt 64fpkt"];
5884--10088[label="0.931034;27pkt 27fpkt"];
5884--10437[label="1;98pkt 98fpkt"];
5884--14664[label="0.876712;64pkt 64fpkt"];
6048--10088[label="1;29pkt 29fpkt"];
6048--10437[label="0.955224;64pkt 64fpkt"];
6048--14664[label="0.985075;66pkt 66fpkt"];
8560--12245[label="1;6pkt 6fpkt"];
8560--14699[label="0.5;2pkt 2fpkt"];
8560--17371[label="1;6pkt 6fpkt"];
9403--11348[label="0.111111;1pkt 1fpkt"];
9403--11389[label="0.111111;1pkt 1fpkt"];
10088--10437[label="0.931034;27pkt 27fpkt"];
10088--14664[label="1;29pkt 29fpkt"];
10437--14664[label="0.876712;64pkt 64fpkt"];
12245--17371[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter src_ip="172.130.187.97" src_port="80"/>
      <filter dst_ip="210.107.57.52" src_ip="172.130.67.147" src_port="80"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1474{
style=filled;
color=gray75;
12841[label="172.159.73.64;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17738[label="172.159.73.64;3pkt 3fpkt", shape=invtriangle, color=brown];
20915[label="172.159.73.64;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1474[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.73.64:54963, 61.86.179.20:25}[33.3333%]&lt;BR/&gt;{172.159.73.64:54962, 61.86.179.68:25}[33.3333%]&lt;BR/&gt;{172.159.73.64:54960, 62.36.50.74:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 54963: (16.6667%)&lt;BR/&gt; 54962: (16.6667%)&lt;BR/&gt; 54960: (16.6667%)&gt;];
}
12841--17738[label="1;3pkt 3fpkt"];
12841--20915[label="1;3pkt 3fpkt"];
17738--20915[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="62.36.50.74" dst_port="25" src_ip="172.159.73.64" src_port="54960"/>
      <filter dst_ip="61.86.179.68" dst_port="25" src_ip="172.159.73.64" src_port="54962"/>
      <filter dst_ip="61.86.179.20" dst_port="25" src_ip="172.159.73.64" src_port="54963"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.27.130.64"/>
    </slice>
    <from sec="1191992671" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.10.136.64"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191992976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1477{
style=filled;
color=gray75;
12862[label="80.65.59.65;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17750[label="80.65.59.65;4pkt 4fpkt", shape=invtriangle, color=brown];
20923[label="80.65.59.65;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1477[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.65.59.65:1044, 134.71.143.214:3124}[25%]&lt;BR/&gt;{80.65.59.65:4688, 134.71.143.214:3128}[25%]&lt;BR/&gt;{80.65.59.65:4994, 134.71.143.215:3124}[25%]&lt;BR/&gt;{80.65.59.65:4996, 134.71.143.215:3128}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (25%)&lt;BR/&gt; 3124: (25%)&lt;BR/&gt; 4996: (12.5%)&lt;BR/&gt; 4994: (12.5%)&lt;BR/&gt; 4688: (12.5%)&gt;];
}
12862--17750[label="1;4pkt 4fpkt"];
12862--20923[label="1;4pkt 4fpkt"];
17750--20923[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.215" dst_port="3128" src_ip="80.65.59.65" src_port="4996"/>
      <filter dst_ip="134.71.143.215" dst_port="3124" src_ip="80.65.59.65" src_port="4994"/>
      <filter dst_ip="134.71.143.214" dst_port="3128" src_ip="80.65.59.65" src_port="4688"/>
      <filter dst_ip="134.71.143.214" dst_port="3124" src_ip="80.65.59.65" src_port="1044"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.153.162.65"/>
    </slice>
    <from sec="1191992972" usec="0"/>
    <to sec="1191992999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.35.208.65"/>
    </slice>
    <from sec="1191992420" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.4.212.65"/>
    </slice>
    <from sec="1191992837" usec="0"/>
    <to sec="1191992857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1481{
style=filled;
color=gray75;
12893[label="210.177.38.66;25pkt 25fpkt", shape=pentagon, color=darkviolet];
17771[label="210.177.38.66;25pkt 25fpkt", shape=invtriangle, color=brown];
20936[label="210.177.38.66;25pkt 25fpkt", shape=invhouse, color=bisque];
stat1481[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.177.38.66:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4300: (2%)&lt;BR/&gt; 4299: (2%)&lt;BR/&gt; 4298: (2%)&lt;BR/&gt; 4297: (2%)&gt;];
}
12893--17771[label="1;25pkt 25fpkt"];
12893--20936[label="1;25pkt 25fpkt"];
17771--20936[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="210.177.38.66"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.84.84.66"/>
    </slice>
    <from sec="1191992970" usec="0"/>
    <to sec="1191993058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.15.3.67"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191993194" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.67"/>
    </slice>
    <from sec="1191992568" usec="0"/>
    <to sec="1191992635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.204.67"/>
    </slice>
    <from sec="1191993121" usec="0"/>
    <to sec="1191993138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.209.209.67"/>
    </slice>
    <from sec="1191992509" usec="0"/>
    <to sec="1191992540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.159.213.67"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1488{
style=filled;
color=gray75;
12945[label="210.128.81.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17806[label="210.128.81.68;1pkt 1fpkt", shape=invtriangle, color=brown];
20961[label="210.128.81.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1488[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.81.68:80, 169.6.72.123:1997}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1997: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12945--17806[label="1;1pkt 1fpkt"];
12945--20961[label="1;1pkt 1fpkt"];
17806--20961[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.72.123" dst_port="1997" src_ip="210.128.81.68" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1489{
style=filled;
color=gray75;
4163[label="172.159.83.68;s;231pkt 231fpkt", shape=diamond, color=yellow];
12946[label="172.159.83.68;246pkt 246fpkt", shape=pentagon, color=darkviolet];
17807[label="172.159.83.68;245pkt 245fpkt", shape=invtriangle, color=brown];
20962[label="172.159.83.68;245pkt 245fpkt", shape=invhouse, color=bisque];
stat1489[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.83.68:32770, *:53}[86.1789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.0341%)&lt;BR/&gt; 32770: (42.9679%)&lt;BR/&gt; 32768: (0.41365%)&lt;BR/&gt; 62167: (0.206825%)&lt;BR/&gt; 61062: (0.206825%)&gt;];
}
4163--4172[label="0.00555556;1pkt 1fpkt"];
4163--4813[label="0.00552486;1pkt 1fpkt"];
4163--4828[label="0.0060241;1pkt 1fpkt"];
4163--4842[label="0.00787402;1pkt 1fpkt"];
4163--4883[label="0.00515464;1pkt 1fpkt"];
4163--5569[label="0.00558659;1pkt 1fpkt"];
4163--6238[label="0.0416667;1pkt 1fpkt"];
4163--6800[label="0.0111111;1pkt 1fpkt"];
4163--6893[label="0.0434783;1pkt 1fpkt"];
4163--8067[label="0.004329;1pkt 1fpkt"];
4163--8384[label="0.00502513;1pkt 1fpkt"];
4163--8409[label="0.00568182;1pkt 1fpkt"];
4163--8767[label="0.00552486;1pkt 1fpkt"];
4163--8902[label="0.00555556;1pkt 1fpkt"];
4163--9283[label="0.00531915;1pkt 1fpkt"];
4163--9648[label="0.00452489;1pkt 1fpkt"];
4163--10599[label="0.0060241;1pkt 1fpkt"];
4163--11274[label="0.004329;1pkt 1fpkt"];
4163--11296[label="0.00865801;2pkt 2fpkt"];
4163--11311[label="0.004329;1pkt 1fpkt"];
4163--11318[label="0.004329;1pkt 1fpkt"];
4163--11337[label="0.121212;28pkt 28fpkt"];
4163--11355[label="0.00865801;2pkt 2fpkt"];
4163--11370[label="0.004329;1pkt 1fpkt"];
4163--11372[label="0.004329;1pkt 1fpkt"];
4163--11381[label="0.121212;28pkt 28fpkt"];
4163--11395[label="0.00865801;2pkt 2fpkt"];
4163--11397[label="0.004329;1pkt 1fpkt"];
4163--11399[label="0.004329;1pkt 1fpkt"];
4163--12946[label="1;231pkt 231fpkt"];
4163--17807[label="0.995671;230pkt 230fpkt"];
4163--20962[label="0.995671;230pkt 230fpkt"];
12946--17807[label="1;245pkt 245fpkt"];
12946--20962[label="1;245pkt 245fpkt"];
17807--20962[label="1;245pkt 245fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="172.159.83.68" src_port="32770"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.140.111.68"/>
    </slice>
    <from sec="1191992449" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.81.117.68"/>
    </slice>
    <from sec="1191992923" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1492{
style=filled;
color=gray75;
12956[label="172.159.192.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17816[label="172.159.192.68;2pkt 2fpkt", shape=invtriangle, color=brown];
20969[label="172.159.192.68;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1492[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.192.68:53875, 56.76.220.107:80}[50%]&lt;BR/&gt;{172.159.192.68:53867, 57.57.138.113:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53875: (25%)&lt;BR/&gt; 53867: (25%)&gt;];
}
12956--17816[label="1;2pkt 2fpkt"];
12956--20969[label="1;2pkt 2fpkt"];
17816--20969[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="57.57.138.113" dst_port="80" src_ip="172.159.192.68" src_port="53867"/>
      <filter dst_ip="56.76.220.107" dst_port="80" src_ip="172.159.192.68" src_port="53875"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1493{
style=filled;
color=gray75;
12957[label="172.130.205.68;15pkt 15fpkt", shape=pentagon, color=darkviolet];
17817[label="172.130.205.68;15pkt 15fpkt", shape=invtriangle, color=brown];
20970[label="172.130.205.68;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1493[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.205.68:*, 81.33.68.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49451: (3.33333%)&lt;BR/&gt; 49450: (3.33333%)&lt;BR/&gt; 49445: (3.33333%)&lt;BR/&gt; 49444: (3.33333%)&gt;];
}
12957--17817[label="1;15pkt 15fpkt"];
12957--20970[label="1;15pkt 15fpkt"];
17817--20970[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="81.33.68.72" dst_port="80" src_ip="172.130.205.68"/>
    </slice>
    <from sec="1191992441" usec="0"/>
    <to sec="1191993000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1494{
style=filled;
color=gray75;
12959[label="193.181.219.68;90pkt 90fpkt", shape=pentagon, color=darkviolet];
17819[label="193.181.219.68;91pkt 91fpkt", shape=invtriangle, color=brown];
20972[label="193.181.219.68;90pkt 90fpkt", shape=invhouse, color=bisque];
stat1494[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.181.219.68:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 63019: (0.553506%)&lt;BR/&gt; 62955: (0.553506%)&lt;BR/&gt; 62891: (0.553506%)&lt;BR/&gt; 62823: (0.553506%)&gt;];
}
12959--17819[label="1;90pkt 90fpkt"];
12959--20972[label="1;90pkt 90fpkt"];
17819--20972[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="193.181.219.68"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.126.17.69"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.59.149.69"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.244.224.69"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="131.49.16.70"/>
    </slice>
    <from sec="1191992805" usec="0"/>
    <to sec="1191992811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.32.197.71"/>
    </slice>
    <from sec="1191992722" usec="0"/>
    <to sec="1191992742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1500{
style=filled;
color=gray75;
13025[label="128.247.214.71;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17862[label="128.247.214.71;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1500[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.247.214.71:53, 61.38.83.36:39443}[50%]&lt;BR/&gt;{128.247.214.71:53, 211.173.27.77:35821}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 39443: (25%)&lt;BR/&gt; 35821: (25%)&gt;];
}
13025--17862[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="211.173.27.77" dst_port="35821" src_ip="128.247.214.71" src_port="53"/>
      <filter dst_ip="61.38.83.36" dst_port="39443" src_ip="128.247.214.71" src_port="53"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.10.184.72"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1502{
style=filled;
color=gray75;
13050[label="172.64.11.73;10pkt 10fpkt", shape=pentagon, color=darkviolet];
17877[label="172.64.11.73;10pkt 10fpkt", shape=invtriangle, color=brown];
21019[label="172.64.11.73;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1502[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.64.11.73:*, 209.50.2.161:80}[40%]&lt;BR/&gt;{172.64.11.73:*, 201.48.14.67:80}[30%]&lt;BR/&gt;{172.64.11.73:*, 200.172.96.154:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2347: (5%)&lt;BR/&gt; 2346: (5%)&lt;BR/&gt; 2345: (5%)&lt;BR/&gt; 2344: (5%)&gt;];
}
13050--17877[label="1;10pkt 10fpkt"];
13050--21019[label="1;10pkt 10fpkt"];
17877--21019[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.2.161" dst_port="80" src_ip="172.64.11.73"/>
      <filter dst_ip="201.48.14.67" dst_port="80" src_ip="172.64.11.73"/>
      <filter dst_ip="200.172.96.154" dst_port="80" src_ip="172.64.11.73"/>
    </slice>
    <from sec="1191992839" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1503{
style=filled;
color=gray75;
13051[label="188.104.17.73;20pkt 20fpkt", shape=pentagon, color=darkviolet];
17878[label="188.104.17.73;19pkt 19fpkt", shape=invtriangle, color=brown];
21020[label="188.104.17.73;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1503[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.17.73:*, 222.132.214.94:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1568: (2.58621%)&lt;BR/&gt; 1563: (2.58621%)&lt;BR/&gt; 1559: (2.58621%)&lt;BR/&gt; 1558: (2.58621%)&gt;];
}
13051--17878[label="1;19pkt 19fpkt"];
13051--21020[label="1;19pkt 19fpkt"];
17878--21020[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="222.132.214.94" dst_port="80" src_ip="188.104.17.73"/>
    </slice>
    <from sec="1191993265" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1504{
style=filled;
color=gray75;
13053[label="180.49.48.73;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17880[label="180.49.48.73;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1504[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.48.73:1781, 80.43.169.81:443}[33.3333%]&lt;BR/&gt;{180.49.48.73:1782, 80.43.169.81:443}[33.3333%]&lt;BR/&gt;{180.49.48.73:1783, 80.43.169.81:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1783: (20%)&lt;BR/&gt; 1782: (20%)&lt;BR/&gt; 1781: (10%)&gt;];
}
13053--17880[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="80.43.169.81" dst_port="443" src_ip="180.49.48.73" src_port="1783"/>
      <filter dst_ip="80.43.169.81" dst_port="443" src_ip="180.49.48.73" src_port="1782"/>
      <filter dst_ip="80.43.169.81" dst_port="443" src_ip="180.49.48.73" src_port="1781"/>
    </slice>
    <from sec="1191993237" usec="0"/>
    <to sec="1191993265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1505{
style=filled;
color=gray75;
13064[label="201.75.187.73;9pkt 9fpkt", shape=pentagon, color=darkviolet];
17887[label="201.75.187.73;10pkt 10fpkt", shape=invtriangle, color=brown];
21027[label="201.75.187.73;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1505[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.75.187.73:41386, *:*}[40%]&lt;BR/&gt;{201.75.187.73:6346, *:6346}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6346: (39.2857%)&lt;BR/&gt; 41386: (21.4286%)&lt;BR/&gt; 39885: (5.35714%)&lt;BR/&gt; 18997: (5.35714%)&lt;BR/&gt; 15822: (5.35714%)&gt;];
}
13064--17887[label="1;9pkt 9fpkt"];
13064--21027[label="1;9pkt 9fpkt"];
17887--21027[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter src_ip="201.75.187.73" src_port="41386"/>
      <filter dst_port="6346" src_ip="201.75.187.73" src_port="6346"/>
    </slice>
    <from sec="1191992419" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1507{
style=filled;
color=gray75;
13084[label="216.9.155.74;22pkt 22fpkt", shape=pentagon, color=darkviolet];
17899[label="216.9.155.74;23pkt 23fpkt", shape=invtriangle, color=brown];
21034[label="216.9.155.74;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1507[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.9.155.74:*, 169.6.91.241:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63986: (2.20588%)&lt;BR/&gt; 63809: (2.20588%)&lt;BR/&gt; 63008: (2.20588%)&lt;BR/&gt; 63005: (2.20588%)&gt;];
}
13084--17899[label="1;22pkt 22fpkt"];
13084--21034[label="1;22pkt 22fpkt"];
17899--21034[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.91.241" dst_port="80" src_ip="216.9.155.74"/>
    </slice>
    <from sec="1191992521" usec="0"/>
    <to sec="1191992522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.181.193.74"/>
    </slice>
    <from sec="1191993044" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.158.224.74"/>
    </slice>
    <from sec="1191992569" usec="0"/>
    <to sec="1191992585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.113.160.75"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.79.204.75"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.170.49.76"/>
    </slice>
    <from sec="1191993257" usec="0"/>
    <to sec="1191993286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.74.54.76"/>
    </slice>
    <from sec="1191993082" usec="0"/>
    <to sec="1191993261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.161.66.76"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="184.2.152.76"/>
    </slice>
    <from sec="1191992655" usec="0"/>
    <to sec="1191992685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1517{
style=filled;
color=gray75;
13131[label="172.130.18.77;10pkt 10fpkt", shape=pentagon, color=darkviolet];
17928[label="172.130.18.77;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1517[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.18.77:*, 61.72.89.2:25}[60%]&lt;BR/&gt;{172.130.18.77:*, *:113}[20%]&lt;BR/&gt;{172.130.18.77:995, *:*}[20%]&lt;BR/&gt;{172.130.18.77:*, 209.50.29.10:*}[20%]&lt;BR/&gt;{172.130.18.77:*, 209.50.29.12:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (30%)&lt;BR/&gt; 995: (10%)&lt;BR/&gt; 113: (10%)&lt;BR/&gt; 57960: (5%)&lt;BR/&gt; 57653: (5%)&gt;];
}
13131--17928[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.29.12" src_ip="172.130.18.77"/>
      <filter dst_ip="209.50.29.10" src_ip="172.130.18.77"/>
      <filter src_ip="172.130.18.77" src_port="995"/>
      <filter dst_port="113" src_ip="172.130.18.77"/>
      <filter dst_ip="61.72.89.2" dst_port="25" src_ip="172.130.18.77"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1518{
style=filled;
color=gray75;
13132[label="85.215.24.77;230pkt 230fpkt", shape=pentagon, color=darkviolet];
17929[label="85.215.24.77;230pkt 230fpkt", shape=invtriangle, color=brown];
21060[label="85.215.24.77;230pkt 230fpkt", shape=invhouse, color=bisque];
stat1518[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.215.24.77:10037, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10037: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
13132--17929[label="1;230pkt 230fpkt"];
13132--21060[label="1;230pkt 230fpkt"];
17929--21060[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="85.215.24.77" src_port="10037"/>
    </slice>
    <from sec="1191993134" usec="0"/>
    <to sec="1191993147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1519{
style=filled;
color=gray75;
13134[label="134.71.64.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17931[label="134.71.64.77;1pkt 1fpkt", shape=invtriangle, color=brown];
21061[label="134.71.64.77;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1519[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.64.77:1635, 208.24.46.40:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1635: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13134--17931[label="1;1pkt 1fpkt"];
13134--21061[label="1;1pkt 1fpkt"];
17931--21061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.24.46.40" dst_port="80" src_ip="134.71.64.77" src_port="1635"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
13140[label="112.230.173.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
17933[label="112.230.173.77;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.230.173.77:80, 201.67.35.223:25539}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25539: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13140--17933[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.35.223" dst_port="25539" src_ip="112.230.173.77" src_port="80"/>
    </slice>
    <from sec="1191993276" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.74.198.77"/>
    </slice>
    <from sec="1191992626" usec="0"/>
    <to sec="1191992648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.146.219.77"/>
    </slice>
    <from sec="1191993027" usec="0"/>
    <to sec="1191993090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.194.227.77"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.211.93.78"/>
    </slice>
    <from sec="1191992499" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.56.111.78"/>
    </slice>
    <from sec="1191992626" usec="0"/>
    <to sec="1191992710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.115.113.78"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1528{
style=filled;
color=gray75;
13168[label="216.150.152.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17953[label="216.150.152.78;2pkt 2fpkt", shape=invtriangle, color=brown];
21076[label="216.150.152.78;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1528[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.150.152.78:1326, 132.188.255.20:1434}[50%]&lt;BR/&gt;{216.150.152.78:1326, 172.87.115.65:1434}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1326: (50%)&gt;];
}
13168--17953[label="1;2pkt 2fpkt"];
13168--21076[label="1;2pkt 2fpkt"];
17953--21076[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.87.115.65" dst_port="1434" src_ip="216.150.152.78" src_port="1326"/>
      <filter dst_ip="132.188.255.20" dst_port="1434" src_ip="216.150.152.78" src_port="1326"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1529{
style=filled;
color=gray75;
13173[label="169.6.216.78;10pkt 10fpkt", shape=pentagon, color=darkviolet];
17958[label="169.6.216.78;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1529[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.216.78:*, *:25}[80%]&lt;BR/&gt;{169.6.216.78:50555, *:53}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.4737%)&lt;BR/&gt; 50555: (10.5263%)&lt;BR/&gt; 53: (10.5263%)&lt;BR/&gt; 62445: (5.26316%)&lt;BR/&gt; 62434: (5.26316%)&gt;];
}
13173--17958[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="169.6.216.78"/>
      <filter dst_port="53" src_ip="169.6.216.78" src_port="50555"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.46.91.79"/>
    </slice>
    <from sec="1191992548" usec="0"/>
    <to sec="1191992832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1532{
style=filled;
color=gray75;
13196[label="212.114.215.79;178pkt 178fpkt", shape=pentagon, color=darkviolet];
17977[label="212.114.215.79;178pkt 178fpkt", shape=invtriangle, color=brown];
21094[label="212.114.215.79;178pkt 178fpkt", shape=invhouse, color=bisque];
stat1532[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.114.215.79:1027, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
13196--17977[label="1;178pkt 178fpkt"];
13196--21094[label="1;178pkt 178fpkt"];
17977--21094[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="212.114.215.79" src_port="1027"/>
    </slice>
    <from sec="1191992962" usec="0"/>
    <to sec="1191992982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.152.80"/>
    </slice>
    <from sec="1191992799" usec="0"/>
    <to sec="1191992840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1535{
style=filled;
color=gray75;
13227[label="81.36.30.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
17996[label="81.36.30.81;3pkt 3fpkt", shape=invtriangle, color=brown];
21111[label="81.36.30.81;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1535[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.36.30.81:51165, 200.173.66.8:80}[33.3333%]&lt;BR/&gt;{81.36.30.81:51166, 200.173.66.8:80}[33.3333%]&lt;BR/&gt;{81.36.30.81:51167, 200.173.66.8:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51167: (18.75%)&lt;BR/&gt; 51166: (18.75%)&lt;BR/&gt; 51165: (12.5%)&gt;];
}
13227--17996[label="1;2pkt 2fpkt"];
13227--21111[label="1;2pkt 2fpkt"];
17996--21111[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.66.8" dst_port="80" src_ip="81.36.30.81" src_port="51167"/>
      <filter dst_ip="200.173.66.8" dst_port="80" src_ip="81.36.30.81" src_port="51166"/>
      <filter dst_ip="200.173.66.8" dst_port="80" src_ip="81.36.30.81" src_port="51165"/>
    </slice>
    <from sec="1191993256" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1536{
style=filled;
color=gray75;
13230[label="57.214.72.81;3pkt 3fpkt", shape=pentagon, color=darkviolet];
17999[label="57.214.72.81;2pkt 2fpkt", shape=invtriangle, color=brown];
21114[label="57.214.72.81;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1536[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.214.72.81:57688, 192.27.51.21:53}[33.3333%]&lt;BR/&gt;{57.214.72.81:17088, 201.136.122.110:53}[33.3333%]&lt;BR/&gt;{57.214.72.81:28424, 201.136.122.110:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 28424: (18.75%)&lt;BR/&gt; 17088: (18.75%)&lt;BR/&gt; 57688: (12.5%)&gt;];
}
13230--17999[label="1;2pkt 2fpkt"];
13230--21114[label="1;3pkt 3fpkt"];
17999--21114[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.122.110" dst_port="53" src_ip="57.214.72.81" src_port="28424"/>
      <filter dst_ip="201.136.122.110" dst_port="53" src_ip="57.214.72.81" src_port="17088"/>
      <filter dst_ip="192.27.51.21" dst_port="53" src_ip="57.214.72.81" src_port="57688"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.125.112.81"/>
    </slice>
    <from sec="1191992800" usec="0"/>
    <to sec="1191992821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.184.119.81"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.81"/>
    </slice>
    <from sec="1191992762" usec="0"/>
    <to sec="1191992825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1541{
style=filled;
color=gray75;
13246[label="172.159.178.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18011[label="172.159.178.81;2pkt 2fpkt", shape=invtriangle, color=brown];
21124[label="172.159.178.81;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1541[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.178.81:60877, 0.125.104.26:1395}[50%]&lt;BR/&gt;{172.159.178.81:60877, 0.126.220.85:1384}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60877: (50%)&lt;BR/&gt; 1395: (25%)&lt;BR/&gt; 1384: (25%)&gt;];
}
13246--18011[label="1;2pkt 2fpkt"];
13246--21124[label="1;2pkt 2fpkt"];
18011--21124[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="0.126.220.85" dst_port="1384" src_ip="172.159.178.81" src_port="60877"/>
      <filter dst_ip="0.125.104.26" dst_port="1395" src_ip="172.159.178.81" src_port="60877"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.208.73.82"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1543{
style=filled;
color=gray75;
13261[label="188.104.84.82;37pkt 37fpkt", shape=pentagon, color=darkviolet];
18023[label="188.104.84.82;36pkt 36fpkt", shape=invtriangle, color=brown];
21130[label="188.104.84.82;36pkt 36fpkt", shape=invhouse, color=bisque];
stat1543[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.84.82:80, 99.204.154.230:*}[83.7838%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45067: (1.37615%)&lt;BR/&gt; 41367: (1.37615%)&lt;BR/&gt; 33097: (1.37615%)&lt;BR/&gt; 4591: (1.37615%)&gt;];
}
13261--18023[label="1;36pkt 36fpkt"];
13261--21130[label="1;36pkt 36fpkt"];
18023--21130[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="99.204.154.230" src_ip="188.104.84.82" src_port="80"/>
    </slice>
    <from sec="1191992856" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1544{
style=filled;
color=gray75;
13267[label="172.130.132.82;5pkt 5fpkt", shape=pentagon, color=darkviolet];
18028[label="172.130.132.82;5pkt 5fpkt", shape=invtriangle, color=brown];
21134[label="172.130.132.82;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1544[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.132.82:*, 201.179.125.133:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33699: (9.375%)&lt;BR/&gt; 33456: (9.375%)&lt;BR/&gt; 33285: (9.375%)&lt;BR/&gt; 33033: (9.375%)&gt;];
}
13267--18028[label="1;5pkt 5fpkt"];
13267--21134[label="1;5pkt 5fpkt"];
18028--21134[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.179.125.133" dst_port="80" src_ip="172.130.132.82"/>
    </slice>
    <from sec="1191992787" usec="0"/>
    <to sec="1191993280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1546{
style=filled;
color=gray75;
13281[label="201.197.59.83;42pkt 42fpkt", shape=pentagon, color=darkviolet];
18036[label="201.197.59.83;43pkt 43fpkt", shape=invtriangle, color=brown];
21141[label="201.197.59.83;43pkt 43fpkt", shape=invhouse, color=bisque];
stat1546[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.197.59.83:80, 172.159.124.234:*}[93.0233%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56486: (1.17188%)&lt;BR/&gt; 56483: (1.17188%)&lt;BR/&gt; 54665: (1.17188%)&lt;BR/&gt; 54664: (1.17188%)&gt;];
}
13281--18036[label="1;42pkt 42fpkt"];
13281--21141[label="1;42pkt 42fpkt"];
18036--21141[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.124.234" src_ip="201.197.59.83" src_port="80"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.197.93.83"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1548{
style=filled;
color=gray75;
13286[label="201.193.101.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18041[label="201.193.101.83;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1548[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.193.101.83:3531, 201.136.124.141:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3531: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
13286--18041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.124.141" dst_port="53" src_ip="201.193.101.83" src_port="3531"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="134.71.55.84"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1550{
style=filled;
color=gray75;
2098[label="169.6.70.9;s;154pkt 154fpkt", shape=diamond, color=yellow];
5995[label="201.66.227.55;d;672pkt 672fpkt", shape=diamond, color=yellow];
5998[label="169.6.115.34;s;295pkt 295fpkt", shape=diamond, color=yellow];
6028[label="169.6.67.84;s;154pkt 154fpkt", shape=diamond, color=yellow];
10458[label="169.6.115.34;s;127pkt 127fpkt", shape=hexagon, color=black];
11658[label="169.6.70.9;334pkt 334fpkt", shape=pentagon, color=darkviolet];
12244[label="169.6.115.34;517pkt 517fpkt", shape=pentagon, color=darkviolet];
13307[label="169.6.67.84;157pkt 157fpkt", shape=pentagon, color=darkviolet];
17005[label="169.6.70.9;333pkt 333fpkt", shape=invtriangle, color=brown];
18049[label="169.6.67.84;157pkt 157fpkt", shape=invtriangle, color=brown];
20423[label="169.6.70.9;334pkt 334fpkt", shape=invhouse, color=bisque];
21151[label="169.6.67.84;157pkt 157fpkt", shape=invhouse, color=bisque];
stat1550[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.115.34:*, 201.66.227.55:80}[47.8704%]&lt;BR/&gt;{169.6.70.9:*, 201.66.227.55:80}[25.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7641%)&lt;BR/&gt; 0: (0.471837%)&lt;BR/&gt; 2843: (0.117959%)&lt;BR/&gt; 2842: (0.117959%)&lt;BR/&gt; 2838: (0.117959%)&gt;];
}
2098--3197[label="0.00649351;1pkt 1fpkt"];
2098--5995[label="0.993506;153pkt 153fpkt"];
2098--9902[label="0.00649351;1pkt 1fpkt"];
2098--11658[label="1;154pkt 154fpkt"];
2098--17005[label="1;154pkt 154fpkt"];
2098--20423[label="1;154pkt 154fpkt"];
5995--5998[label="0.99661;294pkt 294fpkt"];
5995--6028[label="1;154pkt 154fpkt"];
5995--10458[label="0.992126;126pkt 126fpkt"];
5995--11658[label="0.458084;153pkt 153fpkt"];
5995--12244[label="0.566731;293pkt 293fpkt"];
5995--13307[label="0.980892;154pkt 154fpkt"];
5995--17005[label="0.459459;153pkt 153fpkt"];
5995--18049[label="0.980892;154pkt 154fpkt"];
5995--20423[label="0.458084;153pkt 153fpkt"];
5995--21151[label="0.980892;154pkt 154fpkt"];
5998--7561[label="0.00338983;1pkt 1fpkt"];
5998--10458[label="1;127pkt 127fpkt"];
5998--12244[label="0.99661;294pkt 294fpkt"];
6028--13307[label="1;154pkt 154fpkt"];
6028--18049[label="1;154pkt 154fpkt"];
6028--21151[label="1;154pkt 154fpkt"];
10458--12244[label="0.992126;126pkt 126fpkt"];
11658--17005[label="1;333pkt 333fpkt"];
11658--20423[label="1;334pkt 334fpkt"];
13307--18049[label="1;157pkt 157fpkt"];
13307--21151[label="1;157pkt 157fpkt"];
17005--20423[label="1;333pkt 333fpkt"];
18049--21151[label="1;157pkt 157fpkt"];
</description>
    <slice>
      <filter dst_ip="201.66.227.55" dst_port="80" src_ip="169.6.115.34"/>
      <filter dst_ip="201.66.227.55" dst_port="80" src_ip="169.6.70.9"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.80.71.84"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.159.127.84"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.181.149.84"/>
    </slice>
    <from sec="1191992963" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.157.160.84"/>
    </slice>
    <from sec="1191993132" usec="0"/>
    <to sec="1191993162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1556{
style=filled;
color=gray75;
13329[label="201.151.173.84;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18060[label="201.151.173.84;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1556[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.151.173.84:80, 172.64.80.229:2363}[33.3333%]&lt;BR/&gt;{201.151.173.84:80, 172.64.80.229:2364}[33.3333%]&lt;BR/&gt;{201.151.173.84:80, 172.64.80.229:2372}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2372: (16.6667%)&lt;BR/&gt; 2364: (16.6667%)&lt;BR/&gt; 2363: (16.6667%)&gt;];
}
13329--18060[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.80.229" dst_port="2372" src_ip="201.151.173.84" src_port="80"/>
      <filter dst_ip="172.64.80.229" dst_port="2364" src_ip="201.151.173.84" src_port="80"/>
      <filter dst_ip="172.64.80.229" dst_port="2363" src_ip="201.151.173.84" src_port="80"/>
    </slice>
    <from sec="1191992934" usec="0"/>
    <to sec="1191992953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1557{
style=filled;
color=gray75;
13331[label="211.162.179.84;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18061[label="211.162.179.84;3pkt 3fpkt", shape=invtriangle, color=brown];
21157[label="211.162.179.84;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1557[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.162.179.84:80, 172.159.122.208:56578}[25%]&lt;BR/&gt;{211.162.179.84:80, 172.159.122.208:56579}[25%]&lt;BR/&gt;{211.162.179.84:80, 172.159.122.208:56580}[25%]&lt;BR/&gt;{211.162.179.84:80, 172.159.122.208:56581}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56581: (13.6364%)&lt;BR/&gt; 56580: (13.6364%)&lt;BR/&gt; 56579: (13.6364%)&lt;BR/&gt; 56578: (9.09091%)&gt;];
}
13331--18061[label="1;3pkt 3fpkt"];
13331--21157[label="1;4pkt 4fpkt"];
18061--21157[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.122.208" dst_port="56581" src_ip="211.162.179.84" src_port="80"/>
      <filter dst_ip="172.159.122.208" dst_port="56580" src_ip="211.162.179.84" src_port="80"/>
      <filter dst_ip="172.159.122.208" dst_port="56579" src_ip="211.162.179.84" src_port="80"/>
      <filter dst_ip="172.159.122.208" dst_port="56578" src_ip="211.162.179.84" src_port="80"/>
    </slice>
    <from sec="1191993215" usec="0"/>
    <to sec="1191993222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.5.78.86"/>
    </slice>
    <from sec="1191992568" usec="0"/>
    <to sec="1191992634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.183.97.86"/>
    </slice>
    <from sec="1191992423" usec="0"/>
    <to sec="1191992465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1560{
style=filled;
color=gray75;
13373[label="213.38.161.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18087[label="213.38.161.86;1pkt 1fpkt", shape=invtriangle, color=brown];
21174[label="213.38.161.86;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1560[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.38.161.86:21007, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21007: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13373--18087[label="1;1pkt 1fpkt"];
13373--21174[label="1;1pkt 1fpkt"];
18087--21174[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="213.38.161.86" src_port="21007"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.96.32.87"/>
    </slice>
    <from sec="1191992822" usec="0"/>
    <to sec="1191992865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.106.54.87"/>
    </slice>
    <from sec="1191993007" usec="0"/>
    <to sec="1191993009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="169.67.242.87"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.180.244.87"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.56.112.88"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.81.166.88"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1567{
style=filled;
color=gray75;
269[label="5.156.169.88;s;3462pkt 3462fpkt", shape=diamond, color=yellow];
13412[label="5.156.169.88;3755pkt 3755fpkt", shape=pentagon, color=darkviolet];
18110[label="5.156.169.88;3756pkt 3756fpkt", shape=invtriangle, color=brown];
21187[label="5.156.169.88;3755pkt 3755fpkt", shape=invhouse, color=bisque];
stat1567[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.156.169.88:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50.0102%)&lt;BR/&gt; 137: (0.156165%)&lt;BR/&gt; 504: (0.142586%)&lt;BR/&gt; 459: (0.142586%)&lt;BR/&gt; 406: (0.142586%)&gt;];
}
269--1930[label="0.00226757;1pkt 1fpkt"];
269--2100[label="0.00925926;1pkt 1fpkt"];
269--5521[label="0.0131579;1pkt 1fpkt"];
269--8840[label="0.00925926;1pkt 1fpkt"];
269--9713[label="0.016129;1pkt 1fpkt"];
269--11348[label="0.0673021;233pkt 233fpkt"];
269--11389[label="0.0673021;233pkt 233fpkt"];
269--13412[label="0.999711;3461pkt 3461fpkt"];
269--18110[label="1;3462pkt 3462fpkt"];
269--21187[label="0.999711;3461pkt 3461fpkt"];
13412--18110[label="1;3755pkt 3755fpkt"];
13412--21187[label="1;3755pkt 3755fpkt"];
18110--21187[label="1;3755pkt 3755fpkt"];
</description>
    <slice>
      <filter src_ip="5.156.169.88" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.184.211.88"/>
    </slice>
    <from sec="1191993007" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1569{
style=filled;
color=gray75;
13427[label="220.2.31.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18121[label="220.2.31.89;1pkt 1fpkt", shape=invtriangle, color=brown];
21196[label="220.2.31.89;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1569[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.2.31.89:2193, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2193: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13427--18121[label="1;1pkt 1fpkt"];
13427--21196[label="1;1pkt 1fpkt"];
18121--21196[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="220.2.31.89" src_port="2193"/>
    </slice>
    <from sec="1191992585" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.66.107.89"/>
    </slice>
    <from sec="1191992773" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.144.89"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1572{
style=filled;
color=gray75;
13449[label="9.252.24.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18134[label="9.252.24.90;1pkt 1fpkt", shape=invtriangle, color=brown];
21205[label="9.252.24.90;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1572[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.252.24.90:32817, 172.159.181.11:161}[50%]&lt;BR/&gt;{9.252.24.90:33150, 172.159.72.32:995}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33150: (37.5%)&lt;BR/&gt; 995: (37.5%)&lt;BR/&gt; 32817: (12.5%)&lt;BR/&gt; 161: (12.5%)&gt;];
}
13449--18134[label="1;1pkt 1fpkt"];
13449--21205[label="1;1pkt 1fpkt"];
18134--21205[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.72.32" dst_port="995" src_ip="9.252.24.90" src_port="33150"/>
      <filter dst_ip="172.159.181.11" dst_port="161" src_ip="9.252.24.90" src_port="32817"/>
    </slice>
    <from sec="1191993062" usec="0"/>
    <to sec="1191993112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1573{
style=filled;
color=gray75;
13451[label="4.34.32.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18136[label="4.34.32.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1573[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.34.32.90:1279, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1279: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13451--18136[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="4.34.32.90" src_port="1279"/>
    </slice>
    <from sec="1191992627" usec="0"/>
    <to sec="1191993259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.165.87.90"/>
    </slice>
    <from sec="1191992842" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.171.88.90"/>
    </slice>
    <from sec="1191992769" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1576{
style=filled;
color=gray75;
13460[label="210.128.115.90;20pkt 20fpkt", shape=pentagon, color=darkviolet];
18143[label="210.128.115.90;20pkt 20fpkt", shape=invtriangle, color=brown];
21210[label="210.128.115.90;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1576[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.115.90:80, 169.6.70.200:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3709: (2.54237%)&lt;BR/&gt; 3708: (2.54237%)&lt;BR/&gt; 3707: (2.54237%)&lt;BR/&gt; 3706: (2.54237%)&gt;];
}
13460--18143[label="1;20pkt 20fpkt"];
13460--21210[label="1;19pkt 19fpkt"];
18143--21210[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.70.200" src_ip="210.128.115.90" src_port="80"/>
    </slice>
    <from sec="1191992643" usec="0"/>
    <to sec="1191992653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.106.224.90"/>
    </slice>
    <from sec="1191992419" usec="0"/>
    <to sec="1191992533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.193.10.91"/>
    </slice>
    <from sec="1191992819" usec="0"/>
    <to sec="1191992821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.72.55.91"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1580{
style=filled;
color=gray75;
13476[label="201.0.78.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18154[label="201.0.78.91;1pkt 1fpkt", shape=invtriangle, color=brown];
21217[label="201.0.78.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1580[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.0.78.91:24681, 201.136.121.209:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24681: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
13476--18154[label="1;1pkt 1fpkt"];
13476--21217[label="1;1pkt 1fpkt"];
18154--21217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.121.209" dst_port="53" src_ip="201.0.78.91" src_port="24681"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.27.87.91"/>
    </slice>
    <from sec="1191993228" usec="0"/>
    <to sec="1191993244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1582{
style=filled;
color=gray75;
13480[label="81.216.118.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18157[label="81.216.118.91;1pkt 1fpkt", shape=invtriangle, color=brown];
21219[label="81.216.118.91;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1582[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.216.118.91:3131, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3131: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13480--18157[label="1;1pkt 1fpkt"];
13480--21219[label="1;1pkt 1fpkt"];
18157--21219[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="81.216.118.91" src_port="3131"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.244.91"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1584{
style=filled;
color=gray75;
13487[label="169.6.3.92;60pkt 60fpkt", shape=pentagon, color=darkviolet];
18161[label="169.6.3.92;60pkt 60fpkt", shape=invtriangle, color=brown];
21221[label="169.6.3.92;61pkt 61fpkt", shape=invhouse, color=bisque];
stat1584[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.3.92:1034, *:*}[27.8689%]&lt;BR/&gt;{169.6.3.92:443, *:*}[22.9508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1034: (14.0884%)&lt;BR/&gt; 443: (11.6022%)&lt;BR/&gt; 12351: (8.28729%)&lt;BR/&gt; 12350: (7.45856%)&lt;BR/&gt; 80: (4.41989%)&gt;];
}
13487--18161[label="1;60pkt 60fpkt"];
13487--21221[label="1;60pkt 60fpkt"];
18161--21221[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.3.92" src_port="1034"/>
      <filter src_ip="169.6.3.92" src_port="443"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.46.93"/>
    </slice>
    <from sec="1191992672" usec="0"/>
    <to sec="1191992702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.36.67.93"/>
    </slice>
    <from sec="1191992531" usec="0"/>
    <to sec="1191992545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1587{
style=filled;
color=gray75;
13531[label="180.49.38.94;5pkt 5fpkt", shape=pentagon, color=darkviolet];
18189[label="180.49.38.94;5pkt 5fpkt", shape=invtriangle, color=brown];
21240[label="180.49.38.94;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1587[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.38.94:5101, *:*}[50%]&lt;BR/&gt;{180.49.38.94:*, 210.203.141.141:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.125%)&lt;BR/&gt; 5101: (21.875%)&lt;BR/&gt; 20771: (9.375%)&lt;BR/&gt; 16015: (9.375%)&lt;BR/&gt; 2263: (9.375%)&gt;];
}
13531--18189[label="1;5pkt 5fpkt"];
13531--21240[label="1;5pkt 5fpkt"];
18189--21240[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="180.49.38.94" src_port="5101"/>
      <filter dst_ip="210.203.141.141" dst_port="80" src_ip="180.49.38.94"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.165.70.94"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.39.204.94"/>
    </slice>
    <from sec="1191992669" usec="0"/>
    <to sec="1191993051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1590{
style=filled;
color=gray75;
13548[label="210.172.212.94;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18199[label="210.172.212.94;3pkt 3fpkt", shape=invtriangle, color=brown];
21248[label="210.172.212.94;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1590[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.172.212.94:443, 169.6.128.75:1266}[33.3333%]&lt;BR/&gt;{210.172.212.94:443, 169.6.128.75:1277}[33.3333%]&lt;BR/&gt;{210.172.212.94:443, 169.6.128.75:1278}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1278: (21.4286%)&lt;BR/&gt; 1277: (21.4286%)&lt;BR/&gt; 1266: (7.14286%)&gt;];
}
13548--18199[label="1;2pkt 2fpkt"];
13548--21248[label="1;2pkt 2fpkt"];
18199--21248[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.128.75" dst_port="1278" src_ip="210.172.212.94" src_port="443"/>
      <filter dst_ip="169.6.128.75" dst_port="1277" src_ip="210.172.212.94" src_port="443"/>
      <filter dst_ip="169.6.128.75" dst_port="1266" src_ip="210.172.212.94" src_port="443"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.21.232.94"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1592{
style=filled;
color=gray75;
13552[label="32.128.22.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18203[label="32.128.22.95;1pkt 1fpkt", shape=invtriangle, color=brown];
21250[label="32.128.22.95;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1592[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.128.22.95:38506, 201.136.121.209:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38506: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
13552--18203[label="1;1pkt 1fpkt"];
13552--21250[label="1;1pkt 1fpkt"];
18203--21250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.121.209" dst_port="53" src_ip="32.128.22.95" src_port="38506"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.43.49.95"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="185.0.79.95"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.224.109.95"/>
    </slice>
    <from sec="1191992973" usec="0"/>
    <to sec="1191993066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.105.88.96"/>
    </slice>
    <from sec="1191992793" usec="0"/>
    <to sec="1191992822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.25.147.96"/>
    </slice>
    <from sec="1191992867" usec="0"/>
    <to sec="1191992937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1599{
style=filled;
color=gray75;
13595[label="169.6.100.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18233[label="169.6.100.97;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1599[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.100.97:1350, 209.50.43.115:80}[50%]&lt;BR/&gt;{169.6.100.97:1349, 62.144.154.164:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1350: (25%)&lt;BR/&gt; 1349: (25%)&gt;];
}
13595--18233[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="62.144.154.164" dst_port="80" src_ip="169.6.100.97" src_port="1349"/>
      <filter dst_ip="209.50.43.115" dst_port="80" src_ip="169.6.100.97" src_port="1350"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.7.139.97"/>
    </slice>
    <from sec="1191993125" usec="0"/>
    <to sec="1191993127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1601{
style=filled;
color=gray75;
4159[label="132.188.115.98;s;365pkt 365fpkt", shape=diamond, color=yellow];
13619[label="132.188.115.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18245[label="132.188.115.98;1pkt 1fpkt", shape=invtriangle, color=brown];
21279[label="132.188.115.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1601[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.188.115.98:55246, *:53}[96.1644%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55246: (48.0978%)&lt;BR/&gt; 53: (48.0978%)&lt;BR/&gt; 0: (3.80435%)&gt;];
}
4159--4172[label="0.00555556;1pkt 1fpkt"];
4159--4813[label="0.00552486;1pkt 1fpkt"];
4159--4828[label="0.0060241;1pkt 1fpkt"];
4159--5569[label="0.00558659;1pkt 1fpkt"];
4159--6136[label="0.00833333;1pkt 1fpkt"];
4159--6202[label="0.0138889;1pkt 1fpkt"];
4159--6817[label="0.0111111;2pkt 2fpkt"];
4159--7392[label="0.0357143;1pkt 1fpkt"];
4159--7443[label="0.00729927;1pkt 1fpkt"];
4159--7475[label="0.00273973;1pkt 1fpkt"];
4159--8067[label="0.00377358;1pkt 1fpkt"];
4159--8140[label="0.0322581;1pkt 1fpkt"];
4159--8145[label="0.00877193;1pkt 1fpkt"];
4159--8147[label="0.00273973;1pkt 1fpkt"];
4159--8384[label="0.00502513;1pkt 1fpkt"];
4159--8729[label="0.025;1pkt 1fpkt"];
4159--8745[label="0.0384615;1pkt 1fpkt"];
4159--8767[label="0.00552486;1pkt 1fpkt"];
4159--8824[label="0.0136986;1pkt 1fpkt"];
4159--8860[label="0.0149254;1pkt 1fpkt"];
4159--8902[label="0.00555556;1pkt 1fpkt"];
4159--9271[label="0.011236;1pkt 1fpkt"];
4159--9283[label="0.00531915;1pkt 1fpkt"];
4159--9648[label="0.00452489;1pkt 1fpkt"];
4159--10243[label="0.00819672;1pkt 1fpkt"];
4159--10593[label="0.0294118;1pkt 1fpkt"];
4159--10599[label="0.0060241;1pkt 1fpkt"];
4159--11009[label="0.0357143;1pkt 1fpkt"];
4159--11040[label="0.00273973;1pkt 1fpkt"];
4159--11337[label="0.167123;61pkt 61fpkt"];
4159--11381[label="0.167123;61pkt 61fpkt"];
4159--13619[label="1;1pkt 1fpkt"];
4159--18245[label="1;1pkt 1fpkt"];
4159--21279[label="1;1pkt 1fpkt"];
13619--18245[label="1;1pkt 1fpkt"];
13619--21279[label="1;1pkt 1fpkt"];
18245--21279[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="132.188.115.98" src_port="55246"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.155.98"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.123.160.98"/>
    </slice>
    <from sec="1191992664" usec="0"/>
    <to sec="1191992694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.13.215.98"/>
    </slice>
    <from sec="1191992987" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.62.13.99"/>
    </slice>
    <from sec="1191992778" usec="0"/>
    <to sec="1191992807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.72.63.99"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.90.138.99"/>
    </slice>
    <from sec="1191992964" usec="0"/>
    <to sec="1191993012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.227.182.99"/>
    </slice>
    <from sec="1191992476" usec="0"/>
    <to sec="1191992492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.177.88.100"/>
    </slice>
    <from sec="1191992873" usec="0"/>
    <to sec="1191992926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1610{
style=filled;
color=gray75;
13681[label="203.245.109.100;31pkt 31fpkt", shape=pentagon, color=darkviolet];
18278[label="203.245.109.100;30pkt 30fpkt", shape=invtriangle, color=brown];
21302[label="203.245.109.100;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1610[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.245.109.100:0, *:0}[96.7742%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.7033%)&lt;BR/&gt; 3658: (1.64835%)&lt;BR/&gt; 139: (1.64835%)&gt;];
}
13681--18278[label="1;30pkt 30fpkt"];
13681--21302[label="1;30pkt 30fpkt"];
18278--21302[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter src_ip="203.245.109.100"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1611{
style=filled;
color=gray75;
13687[label="201.202.177.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18281[label="201.202.177.100;2pkt 2fpkt", shape=invtriangle, color=brown];
21305[label="201.202.177.100;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1611[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.202.177.100:80, 134.71.55.80:3647}[50%]&lt;BR/&gt;{201.202.177.100:80, 134.71.55.80:3648}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3648: (25%)&lt;BR/&gt; 3647: (25%)&gt;];
}
13687--18281[label="1;2pkt 2fpkt"];
13687--21305[label="1;2pkt 2fpkt"];
18281--21305[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.55.80" dst_port="3648" src_ip="201.202.177.100" src_port="80"/>
      <filter dst_ip="134.71.55.80" dst_port="3647" src_ip="201.202.177.100" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1612{
style=filled;
color=gray75;
13688[label="172.130.180.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18282[label="172.130.180.100;2pkt 2fpkt", shape=invtriangle, color=brown];
21306[label="172.130.180.100;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1612[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.180.100:25, 211.169.31.15:2018}[50%]&lt;BR/&gt;{172.130.180.100:80, 216.29.42.144:30552}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30552: (25%)&lt;BR/&gt; 2018: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
13688--18282[label="1;2pkt 2fpkt"];
13688--21306[label="1;2pkt 2fpkt"];
18282--21306[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="216.29.42.144" dst_port="30552" src_ip="172.130.180.100" src_port="80"/>
      <filter dst_ip="211.169.31.15" dst_port="2018" src_ip="172.130.180.100" src_port="25"/>
    </slice>
    <from sec="1191993203" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.20.236.100"/>
    </slice>
    <from sec="1191993274" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1614{
style=filled;
color=gray75;
13695[label="201.67.2.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18289[label="201.67.2.101;1pkt 1fpkt", shape=invtriangle, color=brown];
21312[label="201.67.2.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1614[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.2.101:4734, 34.147.92.28:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 4734: (50%)&gt;];
}
13695--18289[label="1;1pkt 1fpkt"];
13695--21312[label="1;1pkt 1fpkt"];
18289--21312[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.147.92.28" dst_port="5900" src_ip="201.67.2.101" src_port="4734"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.132.29.101"/>
    </slice>
    <from sec="1191992755" usec="0"/>
    <to sec="1191993026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1616{
style=filled;
color=gray75;
13704[label="52.58.130.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18297[label="52.58.130.101;1pkt 1fpkt", shape=invtriangle, color=brown];
21316[label="52.58.130.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1616[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.58.130.101:80, 172.64.13.173:1642}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1642: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13704--18297[label="1;1pkt 1fpkt"];
13704--21316[label="1;1pkt 1fpkt"];
18297--21316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.13.173" dst_port="1642" src_ip="52.58.130.101" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.193.172.101"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1618{
style=filled;
color=gray75;
13717[label="58.2.0.102;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18304[label="58.2.0.102;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1618[shape=component, label=&lt;Rules:&lt;BR/&gt;{58.2.0.102:2997, 200.173.78.145:8080}[50%]&lt;BR/&gt;{58.2.0.102:2998, 200.173.78.145:8080}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2998: (33.3333%)&lt;BR/&gt; 2997: (16.6667%)&gt;];
}
13717--18304[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.78.145" dst_port="8080" src_ip="58.2.0.102" src_port="2998"/>
      <filter dst_ip="200.173.78.145" dst_port="8080" src_ip="58.2.0.102" src_port="2997"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.172.142.103"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.100.147.103"/>
    </slice>
    <from sec="1191992899" usec="0"/>
    <to sec="1191992923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.25.203.103"/>
    </slice>
    <from sec="1191993174" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.163.37.104"/>
    </slice>
    <from sec="1191992661" usec="0"/>
    <to sec="1191992687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1623{
style=filled;
color=gray75;
13774[label="221.13.222.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18335[label="221.13.222.104;1pkt 1fpkt", shape=invtriangle, color=brown];
21338[label="221.13.222.104;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1623[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.13.222.104:1637, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1637: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13774--18335[label="1;1pkt 1fpkt"];
13774--21338[label="1;1pkt 1fpkt"];
18335--21338[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="221.13.222.104" src_port="1637"/>
    </slice>
    <from sec="1191992631" usec="0"/>
    <to sec="1191993280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1624{
style=filled;
color=gray75;
13782[label="201.239.41.105;49pkt 49fpkt", shape=pentagon, color=darkviolet];
18339[label="201.239.41.105;49pkt 49fpkt", shape=invtriangle, color=brown];
stat1624[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.239.41.105:*, *:445}[55.102%]&lt;BR/&gt;{201.239.41.105:*, *:139}[44.898%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.551%)&lt;BR/&gt; 139: (22.449%)&lt;BR/&gt; 4911: (1.02041%)&lt;BR/&gt; 4704: (1.02041%)&lt;BR/&gt; 4583: (1.02041%)&gt;];
}
13782--18339[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="201.239.41.105"/>
      <filter dst_port="139" src_ip="201.239.41.105"/>
    </slice>
    <from sec="1191992452" usec="0"/>
    <to sec="1191992505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.2.106"/>
    </slice>
    <from sec="1191992688" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1627{
style=filled;
color=gray75;
13819[label="180.1.82.107;16pkt 16fpkt", shape=pentagon, color=darkviolet];
18366[label="180.1.82.107;15pkt 15fpkt", shape=invtriangle, color=brown];
21358[label="180.1.82.107;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1627[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.1.82.107:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
13819--18366[label="1;15pkt 15fpkt"];
13819--21358[label="1;15pkt 15fpkt"];
18366--21358[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="180.1.82.107"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.150.189.107"/>
    </slice>
    <from sec="1191993222" usec="0"/>
    <to sec="1191993241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.182.23.109"/>
    </slice>
    <from sec="1191992697" usec="0"/>
    <to sec="1191992717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.229.26.110"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1632{
style=filled;
color=gray75;
13871[label="188.104.31.110;6pkt 6fpkt", shape=pentagon, color=darkviolet];
18398[label="188.104.31.110;6pkt 6fpkt", shape=invtriangle, color=brown];
21376[label="188.104.31.110;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1632[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.31.110:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55628: (8.33333%)&lt;BR/&gt; 55624: (8.33333%)&lt;BR/&gt; 55622: (8.33333%)&lt;BR/&gt; 55617: (8.33333%)&gt;];
}
13871--18398[label="1;6pkt 6fpkt"];
13871--21376[label="1;6pkt 6fpkt"];
18398--21376[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="188.104.31.110"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1633{
style=filled;
color=gray75;
13877[label="201.161.74.110;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18403[label="201.161.74.110;2pkt 2fpkt", shape=invtriangle, color=brown];
21379[label="201.161.74.110;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1633[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.161.74.110:32778, 203.10.77.189:53}[33.3333%]&lt;BR/&gt;{201.161.74.110:32778, 58.193.80.216:53}[33.3333%]&lt;BR/&gt;{201.161.74.110:32778, 58.193.80.221:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32778: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
13877--18403[label="1;2pkt 2fpkt"];
13877--21379[label="1;2pkt 2fpkt"];
18403--21379[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="58.193.80.221" dst_port="53" src_ip="201.161.74.110" src_port="32778"/>
      <filter dst_ip="58.193.80.216" dst_port="53" src_ip="201.161.74.110" src_port="32778"/>
      <filter dst_ip="203.10.77.189" dst_port="53" src_ip="201.161.74.110" src_port="32778"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.100.128.110"/>
    </slice>
    <from sec="1191992722" usec="0"/>
    <to sec="1191992730" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.89.149.111"/>
    </slice>
    <from sec="1191992881" usec="0"/>
    <to sec="1191992912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1636{
style=filled;
color=gray75;
13907[label="212.16.2.112;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18418[label="212.16.2.112;3pkt 3fpkt", shape=invtriangle, color=brown];
21390[label="212.16.2.112;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1636[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.16.2.112:7304, 201.136.121.209:53}[33.3333%]&lt;BR/&gt;{212.16.2.112:26367, 201.136.121.209:53}[33.3333%]&lt;BR/&gt;{212.16.2.112:63391, 201.136.121.209:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 63391: (16.6667%)&lt;BR/&gt; 26367: (16.6667%)&lt;BR/&gt; 7304: (16.6667%)&gt;];
}
13907--18418[label="1;3pkt 3fpkt"];
13907--21390[label="1;3pkt 3fpkt"];
18418--21390[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.121.209" dst_port="53" src_ip="212.16.2.112" src_port="63391"/>
      <filter dst_ip="201.136.121.209" dst_port="53" src_ip="212.16.2.112" src_port="26367"/>
      <filter dst_ip="201.136.121.209" dst_port="53" src_ip="212.16.2.112" src_port="7304"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1637{
style=filled;
color=gray75;
13911[label="32.134.40.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18420[label="32.134.40.112;1pkt 1fpkt", shape=invtriangle, color=brown];
21391[label="32.134.40.112;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1637[shape=component, label=&lt;Rules:&lt;BR/&gt;{32.134.40.112:80, 172.133.82.183:56862}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56862: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13911--18420[label="1;1pkt 1fpkt"];
13911--21391[label="1;1pkt 1fpkt"];
18420--21391[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.82.183" dst_port="56862" src_ip="32.134.40.112" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.209.102.112"/>
    </slice>
    <from sec="1191992580" usec="0"/>
    <to sec="1191992662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1639{
style=filled;
color=gray75;
13926[label="172.130.169.112;156pkt 156fpkt", shape=pentagon, color=darkviolet];
18427[label="172.130.169.112;156pkt 156fpkt", shape=invtriangle, color=brown];
stat1639[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.169.112:*, 1.178.191.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3126: (0.320513%)&lt;BR/&gt; 3124: (0.320513%)&lt;BR/&gt; 3123: (0.320513%)&lt;BR/&gt; 3121: (0.320513%)&gt;];
}
13926--18427[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="1.178.191.65" dst_port="80" src_ip="172.130.169.112"/>
    </slice>
    <from sec="1191992784" usec="0"/>
    <to sec="1191993105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1640{
style=filled;
color=gray75;
13931[label="188.104.184.112;78pkt 78fpkt", shape=pentagon, color=darkviolet];
18430[label="188.104.184.112;79pkt 79fpkt", shape=invtriangle, color=brown];
stat1640[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.184.112:32788, *:53}[91.1392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32788: (45.5414%)&lt;BR/&gt; 58217: (0.636943%)&lt;BR/&gt; 52355: (0.636943%)&lt;BR/&gt; 47016: (0.636943%)&gt;];
}
13931--18430[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="188.104.184.112" src_port="32788"/>
    </slice>
    <from sec="1191992418" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1641{
style=filled;
color=gray75;
13936[label="83.176.39.113;70pkt 70fpkt", shape=pentagon, color=darkviolet];
18434[label="83.176.39.113;69pkt 69fpkt", shape=invtriangle, color=brown];
stat1641[shape=component, label=&lt;Rules:&lt;BR/&gt;{83.176.39.113:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3359: (1.43885%)&lt;BR/&gt; 1135: (1.43885%)&lt;BR/&gt; 4953: (0.719424%)&lt;BR/&gt; 4823: (0.719424%)&gt;];
}
13936--18434[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="83.176.39.113"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.104.210.114"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191992682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.206.11.115"/>
    </slice>
    <from sec="1191992936" usec="0"/>
    <to sec="1191992961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.30.40.115"/>
    </slice>
    <from sec="1191992951" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.36.106.115"/>
    </slice>
    <from sec="1191992854" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1646{
style=filled;
color=gray75;
13992[label="204.247.75.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18473[label="204.247.75.116;1pkt 1fpkt", shape=invtriangle, color=brown];
21432[label="204.247.75.116;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1646[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.247.75.116:27744, 201.136.122.110:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27744: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
13992--18473[label="1;1pkt 1fpkt"];
13992--21432[label="1;1pkt 1fpkt"];
18473--21432[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.122.110" dst_port="53" src_ip="204.247.75.116" src_port="27744"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1647{
style=filled;
color=gray75;
6611[label="200.180.70.184;d;144pkt 144fpkt", shape=diamond, color=yellow];
13995[label="180.49.103.116;74pkt 74fpkt", shape=pentagon, color=darkviolet];
18475[label="180.49.103.116;74pkt 74fpkt", shape=invtriangle, color=brown];
21434[label="180.49.103.116;75pkt 75fpkt", shape=invhouse, color=bisque];
stat1647[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.36.46:*, 200.180.70.184:80}[48.9796%]&lt;BR/&gt;{180.49.103.116:*, 200.180.70.184:80}[48.9796%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1152: (0.544959%)&lt;BR/&gt; 1151: (0.544959%)&lt;BR/&gt; 1149: (0.544959%)&lt;BR/&gt; 1148: (0.544959%)&gt;];
}
6611--13995[label="0.959459;71pkt 71fpkt"];
6611--18475[label="0.959459;71pkt 71fpkt"];
6611--21434[label="0.96;72pkt 72fpkt"];
13995--18475[label="1;74pkt 74fpkt"];
13995--21434[label="1;74pkt 74fpkt"];
18475--21434[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.70.184" dst_port="80" src_ip="180.49.103.116"/>
      <filter dst_ip="200.180.70.184" dst_port="80" src_ip="172.130.36.46"/>
    </slice>
    <from sec="1191993042" usec="0"/>
    <to sec="1191993111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1648{
style=filled;
color=gray75;
14007[label="169.6.230.116;9pkt 9fpkt", shape=pentagon, color=darkviolet];
18482[label="169.6.230.116;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1648[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.230.116:*, 171.161.47.85:80}[66.6667%]&lt;BR/&gt;{169.6.230.116:*, 219.200.13.67:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1585: (5.55556%)&lt;BR/&gt; 1583: (5.55556%)&lt;BR/&gt; 1582: (5.55556%)&lt;BR/&gt; 1570: (5.55556%)&gt;];
}
14007--18482[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="171.161.47.85" dst_port="80" src_ip="169.6.230.116"/>
      <filter dst_ip="219.200.13.67" dst_port="80" src_ip="169.6.230.116"/>
    </slice>
    <from sec="1191992441" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1649{
style=filled;
color=gray75;
14010[label="188.104.19.117;11pkt 11fpkt", shape=pentagon, color=darkviolet];
18484[label="188.104.19.117;11pkt 11fpkt", shape=invtriangle, color=brown];
stat1649[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.19.117:*, 216.10.237.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1256: (4.54545%)&lt;BR/&gt; 1255: (4.54545%)&lt;BR/&gt; 1254: (4.54545%)&lt;BR/&gt; 1253: (4.54545%)&gt;];
}
14010--18484[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="216.10.237.139" dst_port="80" src_ip="188.104.19.117"/>
    </slice>
    <from sec="1191993079" usec="0"/>
    <to sec="1191993144" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1650{
style=filled;
color=gray75;
14011[label="188.104.28.117;7pkt 7fpkt", shape=pentagon, color=darkviolet];
18485[label="188.104.28.117;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1650[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.28.117:*, 200.216.201.102:110}[75%]&lt;BR/&gt;{188.104.28.117:*, 52.58.128.147:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (40%)&lt;BR/&gt; 80: (10%)&lt;BR/&gt; 1156: (6.66667%)&lt;BR/&gt; 1150: (6.66667%)&lt;BR/&gt; 1144: (6.66667%)&gt;];
}
14011--18485[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="200.216.201.102" dst_port="110" src_ip="188.104.28.117"/>
      <filter dst_ip="52.58.128.147" dst_port="80" src_ip="188.104.28.117"/>
    </slice>
    <from sec="1191992602" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1651{
style=filled;
color=gray75;
14020[label="222.25.1.118;178pkt 178fpkt", shape=pentagon, color=darkviolet];
18490[label="222.25.1.118;177pkt 177fpkt", shape=invtriangle, color=brown];
21444[label="222.25.1.118;177pkt 177fpkt", shape=invhouse, color=bisque];
stat1651[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.25.1.118:*, *:5900}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5900: (50%)&lt;BR/&gt; 3073: (0.56391%)&lt;BR/&gt; 2271: (0.56391%)&lt;BR/&gt; 2015: (0.56391%)&lt;BR/&gt; 1635: (0.56391%)&gt;];
}
14020--18490[label="1;177pkt 177fpkt"];
14020--21444[label="1;177pkt 177fpkt"];
18490--21444[label="1;177pkt 177fpkt"];
</description>
    <slice>
      <filter dst_port="5900" src_ip="222.25.1.118"/>
    </slice>
    <from sec="1191992758" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.177.23.118"/>
    </slice>
    <from sec="1191992418" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.177.23.119"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1654{
style=filled;
color=gray75;
14045[label="172.90.62.119;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18503[label="172.90.62.119;4pkt 4fpkt", shape=invtriangle, color=brown];
21454[label="172.90.62.119;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1654[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.90.62.119:80, 169.6.78.195:3603}[25%]&lt;BR/&gt;{172.90.62.119:80, 169.6.78.195:3604}[25%]&lt;BR/&gt;{172.90.62.119:80, 169.6.78.195:3625}[25%]&lt;BR/&gt;{172.90.62.119:80, 169.6.78.195:3626}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3626: (15%)&lt;BR/&gt; 3625: (15%)&lt;BR/&gt; 3604: (15%)&lt;BR/&gt; 3603: (5%)&gt;];
}
14045--18503[label="1;3pkt 3fpkt"];
14045--21454[label="1;3pkt 3fpkt"];
18503--21454[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.78.195" dst_port="3626" src_ip="172.90.62.119" src_port="80"/>
      <filter dst_ip="169.6.78.195" dst_port="3625" src_ip="172.90.62.119" src_port="80"/>
      <filter dst_ip="169.6.78.195" dst_port="3604" src_ip="172.90.62.119" src_port="80"/>
      <filter dst_ip="169.6.78.195" dst_port="3603" src_ip="172.90.62.119" src_port="80"/>
    </slice>
    <from sec="1191993247" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.75.203.119"/>
    </slice>
    <from sec="1191992553" usec="0"/>
    <to sec="1191992598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.97.100.120"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.38.121"/>
    </slice>
    <from sec="1191992818" usec="0"/>
    <to sec="1191992889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.59.128.121"/>
    </slice>
    <from sec="1191993144" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.41.34.122"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.110.228.122"/>
    </slice>
    <from sec="1191992755" usec="0"/>
    <to sec="1191992847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.9.92.123"/>
    </slice>
    <from sec="1191992437" usec="0"/>
    <to sec="1191992758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.41.166.123"/>
    </slice>
    <from sec="1191992968" usec="0"/>
    <to sec="1191993055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.164.2.124"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1664{
style=filled;
color=gray75;
14141[label="116.170.3.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18559[label="116.170.3.124;1pkt 1fpkt", shape=invtriangle, color=brown];
21489[label="116.170.3.124;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1664[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.170.3.124:13006, 172.159.122.8:55781}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55781: (50%)&lt;BR/&gt; 13006: (50%)&gt;];
}
14141--18559[label="1;1pkt 1fpkt"];
14141--21489[label="1;1pkt 1fpkt"];
18559--21489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.122.8" dst_port="55781" src_ip="116.170.3.124" src_port="13006"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1665{
style=filled;
color=gray75;
14149[label="168.79.61.124;17pkt 17fpkt", shape=pentagon, color=darkviolet];
18563[label="168.79.61.124;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1665[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.79.61.124:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
14149--18563[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="168.79.61.124"/>
    </slice>
    <from sec="1191992420" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.34.72.124"/>
    </slice>
    <from sec="1191992711" usec="0"/>
    <to sec="1191992727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.122.85.124"/>
    </slice>
    <from sec="1191992626" usec="0"/>
    <to sec="1191992635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.147.167.124"/>
    </slice>
    <from sec="1191992973" usec="0"/>
    <to sec="1191992991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1669{
style=filled;
color=gray75;
14159[label="35.213.192.124;103pkt 103fpkt", shape=pentagon, color=darkviolet];
18569[label="35.213.192.124;102pkt 102fpkt", shape=invtriangle, color=brown];
stat1669[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.213.192.124:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
14159--18569[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="35.213.192.124" src_port="1026"/>
    </slice>
    <from sec="1191992590" usec="0"/>
    <to sec="1191992607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.71.65.125"/>
    </slice>
    <from sec="1191992655" usec="0"/>
    <to sec="1191992738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.165.99.125"/>
    </slice>
    <from sec="1191993001" usec="0"/>
    <to sec="1191993037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.203.207.125"/>
    </slice>
    <from sec="1191992648" usec="0"/>
    <to sec="1191992670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1673{
style=filled;
color=gray75;
14177[label="206.68.215.125;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18584[label="206.68.215.125;1pkt 1fpkt", shape=invtriangle, color=brown];
21507[label="206.68.215.125;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1673[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.68.215.125:41623, 201.136.121.222:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41623: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
14177--18584[label="1;1pkt 1fpkt"];
14177--21507[label="1;1pkt 1fpkt"];
18584--21507[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.121.222" dst_port="53" src_ip="206.68.215.125" src_port="41623"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1674{
style=filled;
color=gray75;
14185[label="208.29.95.126;77pkt 77fpkt", shape=pentagon, color=darkviolet];
18589[label="208.29.95.126;77pkt 77fpkt", shape=invtriangle, color=brown];
21509[label="208.29.95.126;78pkt 78fpkt", shape=invhouse, color=bisque];
stat1674[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.29.95.126:80, 169.6.96.182:*}[97.4359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3902: (0.646552%)&lt;BR/&gt; 3899: (0.646552%)&lt;BR/&gt; 3898: (0.646552%)&lt;BR/&gt; 3887: (0.646552%)&gt;];
}
14185--18589[label="1;77pkt 77fpkt"];
14185--21509[label="1;77pkt 77fpkt"];
18589--21509[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.96.182" src_ip="208.29.95.126" src_port="80"/>
    </slice>
    <from sec="1191992416" usec="0"/>
    <to sec="1191993211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.148.103.126"/>
    </slice>
    <from sec="1191992895" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.18.32.127"/>
    </slice>
    <from sec="1191992973" usec="0"/>
    <to sec="1191992999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.79.64.127"/>
    </slice>
    <from sec="1191993074" usec="0"/>
    <to sec="1191993076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1678{
style=filled;
color=gray75;
14211[label="201.67.35.128;9pkt 9fpkt", shape=pentagon, color=darkviolet];
18599[label="201.67.35.128;8pkt 8fpkt", shape=invtriangle, color=brown];
21517[label="201.67.35.128;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1678[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.35.128:16080, 4.25.36.20:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16080: (50%)&lt;BR/&gt; 60680: (5.76923%)&lt;BR/&gt; 60654: (5.76923%)&lt;BR/&gt; 53108: (5.76923%)&lt;BR/&gt; 53080: (5.76923%)&gt;];
}
14211--18599[label="1;8pkt 8fpkt"];
14211--21517[label="1;9pkt 9fpkt"];
18599--21517[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="4.25.36.20" src_ip="201.67.35.128" src_port="16080"/>
    </slice>
    <from sec="1191992487" usec="0"/>
    <to sec="1191993215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1679{
style=filled;
color=gray75;
14215[label="222.184.48.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18603[label="222.184.48.128;1pkt 1fpkt", shape=invtriangle, color=brown];
21520[label="222.184.48.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1679[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.184.48.128:47665, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47665: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14215--18603[label="1;1pkt 1fpkt"];
14215--21520[label="1;1pkt 1fpkt"];
18603--21520[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="222.184.48.128" src_port="47665"/>
    </slice>
    <from sec="1191992645" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.154.96.128"/>
    </slice>
    <from sec="1191992448" usec="0"/>
    <to sec="1191992466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.112.104.128"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.65.188.128"/>
    </slice>
    <from sec="1191992662" usec="0"/>
    <to sec="1191992682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1684{
style=filled;
color=gray75;
14235[label="82.138.198.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18618[label="82.138.198.128;1pkt 1fpkt", shape=invtriangle, color=brown];
21533[label="82.138.198.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1684[shape=component, label=&lt;Rules:&lt;BR/&gt;{82.138.198.128:37815, 201.136.121.222:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37815: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
14235--18618[label="1;1pkt 1fpkt"];
14235--21533[label="1;1pkt 1fpkt"];
18618--21533[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.121.222" dst_port="53" src_ip="82.138.198.128" src_port="37815"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.53.219.128"/>
    </slice>
    <from sec="1191993158" usec="0"/>
    <to sec="1191993193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.70.72.129"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1687{
style=filled;
color=gray75;
14256[label="84.96.99.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18631[label="84.96.99.129;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1687[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.96.99.129:34837, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34837: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14256--18631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="84.96.99.129" src_port="34837"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.127.241.129"/>
    </slice>
    <from sec="1191992976" usec="0"/>
    <to sec="1191993143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1689{
style=filled;
color=gray75;
14271[label="209.50.2.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18642[label="209.50.2.130;2pkt 2fpkt", shape=invtriangle, color=brown];
21550[label="209.50.2.130;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1689[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.50.2.130:80, 172.159.73.96:50664}[50%]&lt;BR/&gt;{209.50.2.130:80, 172.159.73.96:50667}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50667: (25%)&lt;BR/&gt; 50664: (25%)&gt;];
}
14271--18642[label="1;2pkt 2fpkt"];
14271--21550[label="1;2pkt 2fpkt"];
18642--21550[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.73.96" dst_port="50667" src_ip="209.50.2.130" src_port="80"/>
      <filter dst_ip="172.159.73.96" dst_port="50664" src_ip="209.50.2.130" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1690{
style=filled;
color=gray75;
14272[label="33.210.5.130;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18643[label="33.210.5.130;2pkt 2fpkt", shape=invtriangle, color=brown];
21551[label="33.210.5.130;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1690[shape=component, label=&lt;Rules:&lt;BR/&gt;{33.210.5.130:1397, 192.27.51.16:53}[50%]&lt;BR/&gt;{33.210.5.130:1399, 192.27.51.16:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 1399: (25%)&lt;BR/&gt; 1397: (25%)&gt;];
}
14272--18643[label="1;2pkt 2fpkt"];
14272--21551[label="1;2pkt 2fpkt"];
18643--21551[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.27.51.16" dst_port="53" src_ip="33.210.5.130" src_port="1399"/>
      <filter dst_ip="192.27.51.16" dst_port="53" src_ip="33.210.5.130" src_port="1397"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.153.130"/>
    </slice>
    <from sec="1191992582" usec="0"/>
    <to sec="1191992604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1692{
style=filled;
color=gray75;
14297[label="172.130.38.131;21pkt 21fpkt", shape=pentagon, color=darkviolet];
18661[label="172.130.38.131;20pkt 20fpkt", shape=invtriangle, color=brown];
stat1692[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.38.131:80, 210.203.138.118:*}[66.6667%]&lt;BR/&gt;{172.130.38.131:80, 81.50.3.212:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54295: (2.43902%)&lt;BR/&gt; 54294: (2.43902%)&lt;BR/&gt; 54292: (2.43902%)&lt;BR/&gt; 54286: (2.43902%)&gt;];
}
14297--18661[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="210.203.138.118" src_ip="172.130.38.131" src_port="80"/>
      <filter dst_ip="81.50.3.212" src_ip="172.130.38.131" src_port="80"/>
    </slice>
    <from sec="1191992623" usec="0"/>
    <to sec="1191993102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.83.53.131"/>
    </slice>
    <from sec="1191993182" usec="0"/>
    <to sec="1191993214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.205.128.131"/>
    </slice>
    <from sec="1191992845" usec="0"/>
    <to sec="1191992889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1695{
style=filled;
color=gray75;
14317[label="168.225.168.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18676[label="168.225.168.131;1pkt 1fpkt", shape=invtriangle, color=brown];
21570[label="168.225.168.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1695[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.225.168.131:4215, 206.35.149.49:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4215: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14317--18676[label="1;1pkt 1fpkt"];
14317--21570[label="1;1pkt 1fpkt"];
18676--21570[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.35.149.49" dst_port="80" src_ip="168.225.168.131" src_port="4215"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.136.10.132"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.34.11.132"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191992463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.28.145.132"/>
    </slice>
    <from sec="1191992618" usec="0"/>
    <to sec="1191992737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.158.174.132"/>
    </slice>
    <from sec="1191993161" usec="0"/>
    <to sec="1191993169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.236.198.132"/>
    </slice>
    <from sec="1191992831" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.31.210.132"/>
    </slice>
    <from sec="1191992605" usec="0"/>
    <to sec="1191992634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1702{
style=filled;
color=gray75;
14372[label="188.104.220.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18715[label="188.104.220.133;3pkt 3fpkt", shape=invtriangle, color=brown];
21601[label="188.104.220.133;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1702[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.220.133:80, 172.99.172.236:37755}[33.3333%]&lt;BR/&gt;{188.104.220.133:80, 172.99.172.236:37756}[33.3333%]&lt;BR/&gt;{188.104.220.133:80, 172.99.172.236:37757}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37757: (16.6667%)&lt;BR/&gt; 37756: (16.6667%)&lt;BR/&gt; 37755: (16.6667%)&gt;];
}
14372--18715[label="1;3pkt 3fpkt"];
14372--21601[label="1;3pkt 3fpkt"];
18715--21601[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.99.172.236" dst_port="37757" src_ip="188.104.220.133" src_port="80"/>
      <filter dst_ip="172.99.172.236" dst_port="37756" src_ip="188.104.220.133" src_port="80"/>
      <filter dst_ip="172.99.172.236" dst_port="37755" src_ip="188.104.220.133" src_port="80"/>
    </slice>
    <from sec="1191993232" usec="0"/>
    <to sec="1191993250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1703{
style=filled;
color=gray75;
14381[label="188.104.28.134;5pkt 5fpkt", shape=pentagon, color=darkviolet];
18722[label="188.104.28.134;6pkt 6fpkt", shape=invtriangle, color=brown];
21605[label="188.104.28.134;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1703[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.28.134:*, 200.210.20.252:80}[66.6667%]&lt;BR/&gt;{188.104.28.134:*, 200.210.20.255:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2660: (9.375%)&lt;BR/&gt; 2659: (9.375%)&lt;BR/&gt; 2658: (9.375%)&lt;BR/&gt; 2657: (9.375%)&gt;];
}
14381--18722[label="1;5pkt 5fpkt"];
14381--21605[label="1;5pkt 5fpkt"];
18722--21605[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="200.210.20.252" dst_port="80" src_ip="188.104.28.134"/>
      <filter dst_ip="200.210.20.255" dst_port="80" src_ip="188.104.28.134"/>
    </slice>
    <from sec="1191993272" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.53.48.134"/>
    </slice>
    <from sec="1191992885" usec="0"/>
    <to sec="1191992902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.160.112.134"/>
    </slice>
    <from sec="1191993180" usec="0"/>
    <to sec="1191993239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.35.65.135"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1707{
style=filled;
color=gray75;
14417[label="201.67.26.136;95pkt 95fpkt", shape=pentagon, color=darkviolet];
18746[label="201.67.26.136;96pkt 96fpkt", shape=invtriangle, color=brown];
21620[label="201.67.26.136;96pkt 96fpkt", shape=invhouse, color=bisque];
stat1707[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.26.136:0, *:0}[98.9583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.9547%)&lt;BR/&gt; 6000: (0.522648%)&lt;BR/&gt; 135: (0.522648%)&gt;];
}
14417--18746[label="1;95pkt 95fpkt"];
14417--21620[label="1;95pkt 95fpkt"];
18746--21620[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter src_ip="201.67.26.136"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.41.233.136"/>
    </slice>
    <from sec="1191992797" usec="0"/>
    <to sec="1191992873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.228.32.137"/>
    </slice>
    <from sec="1191992584" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1710{
style=filled;
color=gray75;
14445[label="210.128.115.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
18766[label="210.128.115.137;12pkt 12fpkt", shape=invtriangle, color=brown];
21636[label="210.128.115.137;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1710[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.115.137:80, 172.159.120.155:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54421: (4.28571%)&lt;BR/&gt; 50591: (4.28571%)&lt;BR/&gt; 50588: (4.28571%)&lt;BR/&gt; 50587: (4.28571%)&gt;];
}
14445--18766[label="1;12pkt 12fpkt"];
14445--21636[label="1;11pkt 11fpkt"];
18766--21636[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.120.155" src_ip="210.128.115.137" src_port="80"/>
    </slice>
    <from sec="1191992445" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.252.251.137"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.151.50.138"/>
    </slice>
    <from sec="1191992652" usec="0"/>
    <to sec="1191992667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1713{
style=filled;
color=gray75;
14465[label="134.71.143.138;5pkt 5fpkt", shape=pentagon, color=darkviolet];
18783[label="134.71.143.138;5pkt 5fpkt", shape=invtriangle, color=brown];
21652[label="134.71.143.138;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1713[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.143.138:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62100: (9.375%)&lt;BR/&gt; 32333: (9.375%)&lt;BR/&gt; 3630: (9.375%)&lt;BR/&gt; 2671: (9.375%)&gt;];
}
14465--18783[label="1;5pkt 5fpkt"];
14465--21652[label="1;5pkt 5fpkt"];
18783--21652[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="134.71.143.138" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1714{
style=filled;
color=gray75;
14469[label="1.178.159.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18786[label="1.178.159.138;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1714[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.178.159.138:80, 134.71.172.232:1611}[50%]&lt;BR/&gt;{1.178.159.138:80, 134.71.172.232:1614}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1614: (33.3333%)&lt;BR/&gt; 1611: (16.6667%)&gt;];
}
14469--18786[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.172.232" dst_port="1614" src_ip="1.178.159.138" src_port="80"/>
      <filter dst_ip="134.71.172.232" dst_port="1611" src_ip="1.178.159.138" src_port="80"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993113" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.124.114.139"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.137.54.140"/>
    </slice>
    <from sec="1191992650" usec="0"/>
    <to sec="1191992817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.173.246.140"/>
    </slice>
    <from sec="1191992583" usec="0"/>
    <to sec="1191992611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.176.0.141"/>
    </slice>
    <from sec="1191992969" usec="0"/>
    <to sec="1191993021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.230.33.141"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.140.34.141"/>
    </slice>
    <from sec="1191992524" usec="0"/>
    <to sec="1191993020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.0.175.141"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.132.20.142"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1723{
style=filled;
color=gray75;
14540[label="172.130.66.142;45pkt 45fpkt", shape=pentagon, color=darkviolet];
18831[label="172.130.66.142;44pkt 44fpkt", shape=invtriangle, color=brown];
21686[label="172.130.66.142;45pkt 45fpkt", shape=invhouse, color=bisque];
stat1723[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.66.142:*, *:80}[62.2222%]&lt;BR/&gt;{172.130.66.142:*, 200.210.5.4:443}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.9701%)&lt;BR/&gt; 443: (19.0299%)&lt;BR/&gt; 50156: (1.1194%)&lt;BR/&gt; 50154: (1.1194%)&lt;BR/&gt; 50153: (1.1194%)&gt;];
}
14540--18831[label="1;44pkt 44fpkt"];
14540--21686[label="1;45pkt 45fpkt"];
18831--21686[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="172.130.66.142"/>
      <filter dst_ip="200.210.5.4" dst_port="443" src_ip="172.130.66.142"/>
    </slice>
    <from sec="1191993238" usec="0"/>
    <to sec="1191993288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.24.92.142"/>
    </slice>
    <from sec="1191993087" usec="0"/>
    <to sec="1191993117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.100.126.142"/>
    </slice>
    <from sec="1191993154" usec="0"/>
    <to sec="1191993162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1726{
style=filled;
color=gray75;
14561[label="172.159.121.143;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18843[label="172.159.121.143;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1726[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.121.143:56664, 61.30.164.62:80}[25%]&lt;BR/&gt;{172.159.121.143:56657, 210.176.195.98:80}[25%]&lt;BR/&gt;{172.159.121.143:56666, 201.66.130.123:80}[25%]&lt;BR/&gt;{172.159.121.143:56658, 54.87.188.136:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56666: (12.5%)&lt;BR/&gt; 56664: (12.5%)&lt;BR/&gt; 56658: (12.5%)&lt;BR/&gt; 56657: (12.5%)&gt;];
}
14561--18843[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="54.87.188.136" dst_port="80" src_ip="172.159.121.143" src_port="56658"/>
      <filter dst_ip="201.66.130.123" dst_port="80" src_ip="172.159.121.143" src_port="56666"/>
      <filter dst_ip="210.176.195.98" dst_port="80" src_ip="172.159.121.143" src_port="56657"/>
      <filter dst_ip="61.30.164.62" dst_port="80" src_ip="172.159.121.143" src_port="56664"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.78.144.143"/>
    </slice>
    <from sec="1191992896" usec="0"/>
    <to sec="1191992916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.80.155.143"/>
    </slice>
    <from sec="1191992728" usec="0"/>
    <to sec="1191992760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.2.160.143"/>
    </slice>
    <from sec="1191992446" usec="0"/>
    <to sec="1191992525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.105.168.143"/>
    </slice>
    <from sec="1191992624" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.18.47.144"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1732{
style=filled;
color=gray75;
14584[label="172.130.84.144;90pkt 90fpkt", shape=pentagon, color=darkviolet];
18861[label="172.130.84.144;90pkt 90fpkt", shape=invtriangle, color=brown];
stat1732[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.84.144:*, 6.149.20.78:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1583: (0.555556%)&lt;BR/&gt; 1580: (0.555556%)&lt;BR/&gt; 1579: (0.555556%)&lt;BR/&gt; 1576: (0.555556%)&gt;];
}
14584--18861[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="6.149.20.78" dst_port="80" src_ip="172.130.84.144"/>
    </slice>
    <from sec="1191992503" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.127.17.145"/>
    </slice>
    <from sec="1191993147" usec="0"/>
    <to sec="1191993233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1734{
style=filled;
color=gray75;
14610[label="134.71.34.145;5pkt 5fpkt", shape=pentagon, color=darkviolet];
18874[label="134.71.34.145;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1734[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.34.145:2143, 209.50.122.13:80}[20%]&lt;BR/&gt;{134.71.34.145:2146, 211.131.116.153:80}[20%]&lt;BR/&gt;{134.71.34.145:2144, 211.131.116.156:80}[20%]&lt;BR/&gt;{134.71.34.145:2145, 211.131.116.152:80}[20%]&lt;BR/&gt;{134.71.34.145:2147, 211.131.116.152:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2147: (10%)&lt;BR/&gt; 2146: (10%)&lt;BR/&gt; 2145: (10%)&lt;BR/&gt; 2144: (10%)&gt;];
}
14610--18874[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="211.131.116.152" dst_port="80" src_ip="134.71.34.145" src_port="2147"/>
      <filter dst_ip="211.131.116.152" dst_port="80" src_ip="134.71.34.145" src_port="2145"/>
      <filter dst_ip="211.131.116.156" dst_port="80" src_ip="134.71.34.145" src_port="2144"/>
      <filter dst_ip="211.131.116.153" dst_port="80" src_ip="134.71.34.145" src_port="2146"/>
      <filter dst_ip="209.50.122.13" dst_port="80" src_ip="134.71.34.145" src_port="2143"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1735{
style=filled;
color=gray75;
14614[label="81.216.73.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18876[label="81.216.73.145;1pkt 1fpkt", shape=invtriangle, color=brown];
21711[label="81.216.73.145;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1735[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.216.73.145:1444, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1444: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14614--18876[label="1;1pkt 1fpkt"];
14614--21711[label="1;1pkt 1fpkt"];
18876--21711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="81.216.73.145" src_port="1444"/>
    </slice>
    <from sec="1191992420" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.117.137.145"/>
    </slice>
    <from sec="1191992611" usec="0"/>
    <to sec="1191992622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1737{
style=filled;
color=gray75;
14633[label="222.54.0.146;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18888[label="222.54.0.146;2pkt 2fpkt", shape=invtriangle, color=brown];
21720[label="222.54.0.146;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1737[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.54.0.146:5001, 134.71.198.24:37364}[50%]&lt;BR/&gt;{222.54.0.146:5002, 134.71.200.85:5002}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5002: (40%)&lt;BR/&gt; 37364: (30%)&lt;BR/&gt; 5001: (30%)&gt;];
}
14633--18888[label="1;1pkt 1fpkt"];
14633--21720[label="1;1pkt 1fpkt"];
18888--21720[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.200.85" dst_port="5002" src_ip="222.54.0.146" src_port="5002"/>
      <filter dst_ip="134.71.198.24" dst_port="37364" src_ip="222.54.0.146" src_port="5001"/>
    </slice>
    <from sec="1191993012" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.20.122.146"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.45.172.146"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1740{
style=filled;
color=gray75;
14650[label="200.0.218.146;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18901[label="200.0.218.146;3pkt 3fpkt", shape=invtriangle, color=brown];
21730[label="200.0.218.146;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1740[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.0.218.146:47661, 201.136.121.222:53}[33.3333%]&lt;BR/&gt;{200.0.218.146:40495, 201.136.124.141:53}[33.3333%]&lt;BR/&gt;{200.0.218.146:50098, 201.136.124.141:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 50098: (16.6667%)&lt;BR/&gt; 47661: (16.6667%)&lt;BR/&gt; 40495: (16.6667%)&gt;];
}
14650--18901[label="1;3pkt 3fpkt"];
14650--21730[label="1;3pkt 3fpkt"];
18901--21730[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.124.141" dst_port="53" src_ip="200.0.218.146" src_port="50098"/>
      <filter dst_ip="201.136.124.141" dst_port="53" src_ip="200.0.218.146" src_port="40495"/>
      <filter dst_ip="201.136.121.222" dst_port="53" src_ip="200.0.218.146" src_port="47661"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1741{
style=filled;
color=gray75;
14668[label="200.173.77.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18913[label="200.173.77.147;1pkt 1fpkt", shape=invtriangle, color=brown];
21740[label="200.173.77.147;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1741[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.77.147:50047, 209.50.120.133:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50047: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
14668--18913[label="1;1pkt 1fpkt"];
14668--21740[label="1;1pkt 1fpkt"];
18913--21740[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.120.133" dst_port="25" src_ip="200.173.77.147" src_port="50047"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.129.101.147"/>
    </slice>
    <from sec="1191992643" usec="0"/>
    <to sec="1191993028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.116.147"/>
    </slice>
    <from sec="1191992425" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.68.225.147"/>
    </slice>
    <from sec="1191992700" usec="0"/>
    <to sec="1191992729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1745{
style=filled;
color=gray75;
14689[label="172.130.32.148;22pkt 22fpkt", shape=pentagon, color=darkviolet];
18925[label="172.130.32.148;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1745[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.32.148:*, 210.128.81.126:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1859: (2.27273%)&lt;BR/&gt; 1858: (2.27273%)&lt;BR/&gt; 1857: (2.27273%)&lt;BR/&gt; 1856: (2.27273%)&gt;];
}
14689--18925[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="210.128.81.126" dst_port="80" src_ip="172.130.32.148"/>
    </slice>
    <from sec="1191993043" usec="0"/>
    <to sec="1191993045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1746{
style=filled;
color=gray75;
14690[label="134.71.34.148;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18926[label="134.71.34.148;2pkt 2fpkt", shape=invtriangle, color=brown];
21748[label="134.71.34.148;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1746[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.34.148:2664, 85.59.234.61:80}[50%]&lt;BR/&gt;{134.71.34.148:2666, 85.59.234.61:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2666: (25%)&lt;BR/&gt; 2664: (25%)&gt;];
}
14690--18926[label="1;2pkt 2fpkt"];
14690--21748[label="1;2pkt 2fpkt"];
18926--21748[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="85.59.234.61" dst_port="80" src_ip="134.71.34.148" src_port="2666"/>
      <filter dst_ip="85.59.234.61" dst_port="80" src_ip="134.71.34.148" src_port="2664"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.139.158.148"/>
    </slice>
    <from sec="1191992863" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1748{
style=filled;
color=gray75;
14708[label="180.49.166.148;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18936[label="180.49.166.148;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1748[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.166.148:1543, 200.180.70.187:80}[25%]&lt;BR/&gt;{180.49.166.148:1545, 200.180.70.187:80}[25%]&lt;BR/&gt;{180.49.166.148:1547, 200.180.70.187:80}[25%]&lt;BR/&gt;{180.49.166.148:1549, 200.180.70.187:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1549: (12.5%)&lt;BR/&gt; 1547: (12.5%)&lt;BR/&gt; 1545: (12.5%)&lt;BR/&gt; 1543: (12.5%)&gt;];
}
14708--18936[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="200.180.70.187" dst_port="80" src_ip="180.49.166.148" src_port="1549"/>
      <filter dst_ip="200.180.70.187" dst_port="80" src_ip="180.49.166.148" src_port="1547"/>
      <filter dst_ip="200.180.70.187" dst_port="80" src_ip="180.49.166.148" src_port="1545"/>
      <filter dst_ip="200.180.70.187" dst_port="80" src_ip="180.49.166.148" src_port="1543"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.125.194.148"/>
    </slice>
    <from sec="1191992908" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.165.195.148"/>
    </slice>
    <from sec="1191992723" usec="0"/>
    <to sec="1191992793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.105.24.149"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.193.85.149"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1753{
style=filled;
color=gray75;
14728[label="172.130.129.149;4pkt 4fpkt", shape=pentagon, color=darkviolet];
18949[label="172.130.129.149;5pkt 5fpkt", shape=invtriangle, color=brown];
21762[label="172.130.129.149;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1753[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.129.149:50551, 1.178.182.26:80}[20%]&lt;BR/&gt;{172.130.129.149:50552, 1.178.182.26:80}[20%]&lt;BR/&gt;{172.130.129.149:50556, 1.178.182.26:80}[20%]&lt;BR/&gt;{172.130.129.149:50567, 1.178.182.26:80}[20%]&lt;BR/&gt;{172.130.129.149:50574, 1.178.182.26:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50574: (10.7143%)&lt;BR/&gt; 50567: (10.7143%)&lt;BR/&gt; 50556: (10.7143%)&lt;BR/&gt; 50552: (10.7143%)&gt;];
}
14728--18949[label="1;4pkt 4fpkt"];
14728--21762[label="1;4pkt 4fpkt"];
18949--21762[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="1.178.182.26" dst_port="80" src_ip="172.130.129.149" src_port="50574"/>
      <filter dst_ip="1.178.182.26" dst_port="80" src_ip="172.130.129.149" src_port="50567"/>
      <filter dst_ip="1.178.182.26" dst_port="80" src_ip="172.130.129.149" src_port="50556"/>
      <filter dst_ip="1.178.182.26" dst_port="80" src_ip="172.130.129.149" src_port="50552"/>
      <filter dst_ip="1.178.182.26" dst_port="80" src_ip="172.130.129.149" src_port="50551"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191992472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.43.242.149"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.209.250.149"/>
    </slice>
    <from sec="1191992996" usec="0"/>
    <to sec="1191993019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.134.7.150"/>
    </slice>
    <from sec="1191992934" usec="0"/>
    <to sec="1191992955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.144.87.150"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1759{
style=filled;
color=gray75;
14748[label="168.210.112.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18964[label="168.210.112.150;2pkt 2fpkt", shape=invtriangle, color=brown];
21774[label="168.210.112.150;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1759[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.210.112.150:443, 169.6.148.200:1122}[50%]&lt;BR/&gt;{168.210.112.150:443, 169.6.148.200:1123}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1123: (37.5%)&lt;BR/&gt; 1122: (12.5%)&gt;];
}
14748--18964[label="1;1pkt 1fpkt"];
14748--21774[label="1;1pkt 1fpkt"];
18964--21774[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.148.200" dst_port="1123" src_ip="168.210.112.150" src_port="443"/>
      <filter dst_ip="169.6.148.200" dst_port="1122" src_ip="168.210.112.150" src_port="443"/>
    </slice>
    <from sec="1191993262" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1760{
style=filled;
color=gray75;
14749[label="209.50.120.150;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18965[label="209.50.120.150;2pkt 2fpkt", shape=invtriangle, color=brown];
21775[label="209.50.120.150;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1760[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.50.120.150:995, 169.6.155.130:50951}[50%]&lt;BR/&gt;{209.50.120.150:995, 169.6.155.130:51397}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 51397: (25%)&lt;BR/&gt; 50951: (25%)&gt;];
}
14749--18965[label="1;2pkt 2fpkt"];
14749--21775[label="1;2pkt 2fpkt"];
18965--21775[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.155.130" dst_port="51397" src_ip="209.50.120.150" src_port="995"/>
      <filter dst_ip="169.6.155.130" dst_port="50951" src_ip="209.50.120.150" src_port="995"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1761{
style=filled;
color=gray75;
14750[label="80.71.121.150;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18966[label="80.71.121.150;1pkt 1fpkt", shape=invtriangle, color=brown];
21776[label="80.71.121.150;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1761[shape=component, label=&lt;Rules:&lt;BR/&gt;{80.71.121.150:4490, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4490: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14750--18966[label="1;1pkt 1fpkt"];
14750--21776[label="1;1pkt 1fpkt"];
18966--21776[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="80.71.121.150" src_port="4490"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.162.17.151"/>
    </slice>
    <from sec="1191993000" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.78.72.151"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1764{
style=filled;
color=gray75;
14776[label="52.58.128.151;3pkt 3fpkt", shape=pentagon, color=darkviolet];
18980[label="52.58.128.151;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1764[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.58.128.151:80, 201.75.49.53:61297}[33.3333%]&lt;BR/&gt;{52.58.128.151:80, 172.159.124.102:1296}[33.3333%]&lt;BR/&gt;{52.58.128.151:80, 169.6.78.194:3580}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61297: (16.6667%)&lt;BR/&gt; 3580: (16.6667%)&lt;BR/&gt; 1296: (16.6667%)&gt;];
}
14776--18980[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.78.194" dst_port="3580" src_ip="52.58.128.151" src_port="80"/>
      <filter dst_ip="172.159.124.102" dst_port="1296" src_ip="52.58.128.151" src_port="80"/>
      <filter dst_ip="201.75.49.53" dst_port="61297" src_ip="52.58.128.151" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1766{
style=filled;
color=gray75;
14793[label="172.159.104.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18991[label="172.159.104.152;1pkt 1fpkt", shape=invtriangle, color=brown];
21792[label="172.159.104.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1766[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.104.152:80, 4.25.36.19:41668}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41668: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14793--18991[label="1;1pkt 1fpkt"];
14793--21792[label="1;1pkt 1fpkt"];
18991--21792[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="4.25.36.19" dst_port="41668" src_ip="172.159.104.152" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1767{
style=filled;
color=gray75;
14794[label="211.131.116.152;2pkt 2fpkt", shape=pentagon, color=darkviolet];
18992[label="211.131.116.152;2pkt 2fpkt", shape=invtriangle, color=brown];
21793[label="211.131.116.152;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1767[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.131.116.152:80, 134.71.34.145:2145}[50%]&lt;BR/&gt;{211.131.116.152:80, 134.71.34.145:2147}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2147: (25%)&lt;BR/&gt; 2145: (25%)&gt;];
}
14794--18992[label="1;2pkt 2fpkt"];
14794--21793[label="1;2pkt 2fpkt"];
18992--21793[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.34.145" dst_port="2147" src_ip="211.131.116.152" src_port="80"/>
      <filter dst_ip="134.71.34.145" dst_port="2145" src_ip="211.131.116.152" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1768{
style=filled;
color=gray75;
14795[label="216.138.120.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18993[label="216.138.120.152;1pkt 1fpkt", shape=invtriangle, color=brown];
21794[label="216.138.120.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1768[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.138.120.152:1597, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1597: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14795--18993[label="1;1pkt 1fpkt"];
14795--21794[label="1;1pkt 1fpkt"];
18993--21794[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="216.138.120.152" src_port="1597"/>
    </slice>
    <from sec="1191993277" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.116.138.152"/>
    </slice>
    <from sec="1191993178" usec="0"/>
    <to sec="1191993183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1770{
style=filled;
color=gray75;
14802[label="134.71.196.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
18998[label="134.71.196.152;1pkt 1fpkt", shape=invtriangle, color=brown];
21799[label="134.71.196.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1770[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.196.152:50084, 204.17.92.21:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50084: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
14802--18998[label="1;1pkt 1fpkt"];
14802--21799[label="1;1pkt 1fpkt"];
18998--21799[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.17.92.21" dst_port="443" src_ip="134.71.196.152" src_port="50084"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.242.109.153"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.20.122.153"/>
    </slice>
    <from sec="1191992695" usec="0"/>
    <to sec="1191992741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1773{
style=filled;
color=gray75;
14823[label="172.130.208.153;8pkt 8fpkt", shape=pentagon, color=darkviolet];
19013[label="172.130.208.153;8pkt 8fpkt", shape=invtriangle, color=brown];
21808[label="172.130.208.153;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1773[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.208.153:*, 201.202.177.204:80}[50%]&lt;BR/&gt;{172.130.208.153:*, 201.202.176.52:80}[25%]&lt;BR/&gt;{172.130.208.153:*, 201.202.177.116:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2309: (6.25%)&lt;BR/&gt; 2308: (6.25%)&lt;BR/&gt; 2307: (6.25%)&lt;BR/&gt; 2306: (6.25%)&gt;];
}
14823--19013[label="1;8pkt 8fpkt"];
14823--21808[label="1;8pkt 8fpkt"];
19013--21808[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="201.202.177.204" dst_port="80" src_ip="172.130.208.153"/>
      <filter dst_ip="201.202.177.116" dst_port="80" src_ip="172.130.208.153"/>
      <filter dst_ip="201.202.176.52" dst_port="80" src_ip="172.130.208.153"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.32.38.154"/>
    </slice>
    <from sec="1191992834" usec="0"/>
    <to sec="1191992883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.37.171.155"/>
    </slice>
    <from sec="1191992920" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.124.183.155"/>
    </slice>
    <from sec="1191992962" usec="0"/>
    <to sec="1191993073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.127.240.155"/>
    </slice>
    <from sec="1191993073" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1778{
style=filled;
color=gray75;
14880[label="211.131.116.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19048[label="211.131.116.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1778[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.131.116.156:80, 134.71.34.145:2144}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2144: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14880--19048[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.34.145" dst_port="2144" src_ip="211.131.116.156" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.157.219.156"/>
    </slice>
    <from sec="1191992902" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="144.85.21.157"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.175.70.157"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191992975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1783{
style=filled;
color=gray75;
14908[label="217.78.193.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19067[label="217.78.193.157;1pkt 1fpkt", shape=invtriangle, color=brown];
21845[label="217.78.193.157;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1783[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.78.193.157:1436, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1436: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14908--19067[label="1;1pkt 1fpkt"];
14908--21845[label="1;1pkt 1fpkt"];
19067--21845[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="217.78.193.157" src_port="1436"/>
    </slice>
    <from sec="1191992615" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.137.209.157"/>
    </slice>
    <from sec="1191992848" usec="0"/>
    <to sec="1191992859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1785{
style=filled;
color=gray75;
14915[label="6.49.30.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19073[label="6.49.30.158;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1785[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.49.30.158:0, 200.173.64.148:0}[50%]&lt;BR/&gt;{6.49.30.158:63189, 200.173.64.148:20200}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63189: (33.3333%)&lt;BR/&gt; 20200: (33.3333%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
14915--19073[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.64.148" dst_port="20200" src_ip="6.49.30.158" src_port="63189"/>
      <filter dst_ip="200.173.64.148" src_ip="6.49.30.158"/>
    </slice>
    <from sec="1191992987" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1786{
style=filled;
color=gray75;
14917[label="200.173.65.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19075[label="200.173.65.158;1pkt 1fpkt", shape=invtriangle, color=brown];
21852[label="200.173.65.158;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1786[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.65.158:80, 62.227.220.10:18920}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18920: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14917--19075[label="1;1pkt 1fpkt"];
14917--21852[label="1;1pkt 1fpkt"];
19075--21852[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="62.227.220.10" dst_port="18920" src_ip="200.173.65.158" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1787{
style=filled;
color=gray75;
14919[label="201.37.69.158;4pkt 4fpkt", shape=pentagon, color=darkviolet];
19077[label="201.37.69.158;3pkt 3fpkt", shape=invtriangle, color=brown];
21854[label="201.37.69.158;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1787[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.37.69.158:80, 201.67.5.82:13849}[25%]&lt;BR/&gt;{201.37.69.158:80, 201.67.10.127:9362}[25%]&lt;BR/&gt;{201.37.69.158:80, 201.67.33.134:15158}[25%]&lt;BR/&gt;{201.37.69.158:80, 201.67.5.211:62}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13849: (15%)&lt;BR/&gt; 9362: (15%)&lt;BR/&gt; 62: (15%)&lt;BR/&gt; 15158: (5%)&gt;];
}
14919--19077[label="1;3pkt 3fpkt"];
14919--21854[label="1;3pkt 3fpkt"];
19077--21854[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.5.211" dst_port="62" src_ip="201.37.69.158" src_port="80"/>
      <filter dst_ip="201.67.33.134" dst_port="15158" src_ip="201.37.69.158" src_port="80"/>
      <filter dst_ip="201.67.10.127" dst_port="9362" src_ip="201.37.69.158" src_port="80"/>
      <filter dst_ip="201.67.5.82" dst_port="13849" src_ip="201.37.69.158" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.130.79.158"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.20.122.158"/>
    </slice>
    <from sec="1191992892" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1790{
style=filled;
color=gray75;
14928[label="5.0.144.158;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19085[label="5.0.144.158;1pkt 1fpkt", shape=invtriangle, color=brown];
21857[label="5.0.144.158;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1790[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.0.144.158:3739, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3739: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14928--19085[label="1;1pkt 1fpkt"];
14928--21857[label="1;1pkt 1fpkt"];
19085--21857[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="5.0.144.158" src_port="3739"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.17.159"/>
    </slice>
    <from sec="1191992799" usec="0"/>
    <to sec="1191992945" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1792{
style=filled;
color=gray75;
14942[label="172.130.58.159;33pkt 33fpkt", shape=pentagon, color=darkviolet];
19092[label="172.130.58.159;32pkt 32fpkt", shape=invtriangle, color=brown];
21861[label="172.130.58.159;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1792[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.58.159:*, 201.168.58.62:80}[54.5455%]&lt;BR/&gt;{172.130.58.159:*, 201.168.58.60:80}[42.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59562: (1.54639%)&lt;BR/&gt; 59458: (1.54639%)&lt;BR/&gt; 59457: (1.54639%)&lt;BR/&gt; 56350: (1.54639%)&gt;];
}
14942--19092[label="1;32pkt 32fpkt"];
14942--21861[label="1;32pkt 32fpkt"];
19092--21861[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="201.168.58.62" dst_port="80" src_ip="172.130.58.159"/>
      <filter dst_ip="201.168.58.60" dst_port="80" src_ip="172.130.58.159"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1793{
style=filled;
color=gray75;
14943[label="200.202.66.159;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19093[label="200.202.66.159;2pkt 2fpkt", shape=invtriangle, color=brown];
21862[label="200.202.66.159;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1793[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.202.66.159:35537, 200.173.77.250:80}[50%]&lt;BR/&gt;{200.202.66.159:35538, 200.173.77.250:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35538: (25%)&lt;BR/&gt; 35537: (25%)&gt;];
}
14943--19093[label="1;2pkt 2fpkt"];
14943--21862[label="1;2pkt 2fpkt"];
19093--21862[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="200.202.66.159" src_port="35538"/>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="200.202.66.159" src_port="35537"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1794{
style=filled;
color=gray75;
14963[label="169.6.94.160;4pkt 4fpkt", shape=pentagon, color=darkviolet];
19108[label="169.6.94.160;4pkt 4fpkt", shape=invtriangle, color=brown];
21871[label="169.6.94.160;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1794[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.94.160:2024, 1.178.132.202:80}[25%]&lt;BR/&gt;{169.6.94.160:2025, 1.178.132.202:80}[25%]&lt;BR/&gt;{169.6.94.160:2022, 1.178.132.213:80}[25%]&lt;BR/&gt;{169.6.94.160:2023, 1.178.132.213:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2025: (12.5%)&lt;BR/&gt; 2024: (12.5%)&lt;BR/&gt; 2023: (12.5%)&lt;BR/&gt; 2022: (12.5%)&gt;];
}
14963--19108[label="1;4pkt 4fpkt"];
14963--21871[label="1;4pkt 4fpkt"];
19108--21871[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="1.178.132.213" dst_port="80" src_ip="169.6.94.160" src_port="2023"/>
      <filter dst_ip="1.178.132.213" dst_port="80" src_ip="169.6.94.160" src_port="2022"/>
      <filter dst_ip="1.178.132.202" dst_port="80" src_ip="169.6.94.160" src_port="2025"/>
      <filter dst_ip="1.178.132.202" dst_port="80" src_ip="169.6.94.160" src_port="2024"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1795{
style=filled;
color=gray75;
14982[label="170.36.26.161;7pkt 7fpkt", shape=pentagon, color=darkviolet];
19121[label="170.36.26.161;6pkt 6fpkt", shape=invtriangle, color=brown];
21881[label="170.36.26.161;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1795[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.36.26.161:80, 169.6.27.227:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1672: (7.89474%)&lt;BR/&gt; 1671: (7.89474%)&lt;BR/&gt; 1670: (7.89474%)&lt;BR/&gt; 1669: (7.89474%)&gt;];
}
14982--19121[label="1;6pkt 6fpkt"];
14982--21881[label="1;6pkt 6fpkt"];
19121--21881[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.27.227" src_ip="170.36.26.161" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1796{
style=filled;
color=gray75;
14993[label="221.82.102.161;29pkt 29fpkt", shape=pentagon, color=darkviolet];
19126[label="221.82.102.161;30pkt 30fpkt", shape=invtriangle, color=brown];
21886[label="221.82.102.161;30pkt 30fpkt", shape=invhouse, color=bisque];
stat1796[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.82.102.161:80, 172.64.11.79:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4899: (1.68539%)&lt;BR/&gt; 4898: (1.68539%)&lt;BR/&gt; 4890: (1.68539%)&lt;BR/&gt; 4889: (1.68539%)&gt;];
}
14993--19126[label="1;29pkt 29fpkt"];
14993--21886[label="1;29pkt 29fpkt"];
19126--21886[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.11.79" src_ip="221.82.102.161" src_port="80"/>
    </slice>
    <from sec="1191992423" usec="0"/>
    <to sec="1191993284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1797{
style=filled;
color=gray75;
15000[label="1.178.132.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19129[label="1.178.132.161;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1797[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.178.132.161:80, 201.75.50.157:37236}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37236: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15000--19129[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.50.157" dst_port="37236" src_ip="1.178.132.161" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1798{
style=filled;
color=gray75;
15005[label="201.66.218.161;5pkt 5fpkt", shape=pentagon, color=darkviolet];
19132[label="201.66.218.161;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1798[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.66.218.161:119, 200.173.65.150:4439}[20%]&lt;BR/&gt;{201.66.218.161:58948, 201.67.16.220:119}[20%]&lt;BR/&gt;{201.66.218.161:58949, 201.67.16.220:119}[20%]&lt;BR/&gt;{201.66.218.161:58950, 201.67.16.220:119}[20%]&lt;BR/&gt;{201.66.218.161:58951, 201.67.16.220:119}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 119: (50%)&lt;BR/&gt; 58951: (10%)&lt;BR/&gt; 58950: (10%)&lt;BR/&gt; 58949: (10%)&lt;BR/&gt; 58948: (10%)&gt;];
}
15005--19132[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.16.220" dst_port="119" src_ip="201.66.218.161" src_port="58951"/>
      <filter dst_ip="201.67.16.220" dst_port="119" src_ip="201.66.218.161" src_port="58950"/>
      <filter dst_ip="201.67.16.220" dst_port="119" src_ip="201.66.218.161" src_port="58949"/>
      <filter dst_ip="201.67.16.220" dst_port="119" src_ip="201.66.218.161" src_port="58948"/>
      <filter dst_ip="200.173.65.150" dst_port="4439" src_ip="201.66.218.161" src_port="119"/>
    </slice>
    <from sec="1191993001" usec="0"/>
    <to sec="1191993261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.124.225.161"/>
    </slice>
    <from sec="1191992754" usec="0"/>
    <to sec="1191992799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.23.44.162"/>
    </slice>
    <from sec="1191992564" usec="0"/>
    <to sec="1191992606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1801{
style=filled;
color=gray75;
15019[label="134.71.47.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19141[label="134.71.47.162;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1801[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.47.162:41745, 34.237.129.155:3552}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41745: (50%)&lt;BR/&gt; 3552: (50%)&gt;];
}
15019--19141[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.237.129.155" dst_port="3552" src_ip="134.71.47.162" src_port="41745"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.23.106.162"/>
    </slice>
    <from sec="1191992926" usec="0"/>
    <to sec="1191992952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1803{
style=filled;
color=gray75;
15027[label="220.78.108.162;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19146[label="220.78.108.162;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1803[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.78.108.162:80, 169.6.31.135:1128}[33.3333%]&lt;BR/&gt;{220.78.108.162:80, 169.6.31.135:1129}[33.3333%]&lt;BR/&gt;{220.78.108.162:80, 169.6.31.135:1130}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1130: (16.6667%)&lt;BR/&gt; 1129: (16.6667%)&lt;BR/&gt; 1128: (16.6667%)&gt;];
}
15027--19146[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.31.135" dst_port="1130" src_ip="220.78.108.162" src_port="80"/>
      <filter dst_ip="169.6.31.135" dst_port="1129" src_ip="220.78.108.162" src_port="80"/>
      <filter dst_ip="169.6.31.135" dst_port="1128" src_ip="220.78.108.162" src_port="80"/>
    </slice>
    <from sec="1191992611" usec="0"/>
    <to sec="1191992613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.81.149.162"/>
    </slice>
    <from sec="1191992766" usec="0"/>
    <to sec="1191992794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.100.147.163"/>
    </slice>
    <from sec="1191992621" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.164"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.121.156.164"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.47.1.166"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.213.105.166"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.155.166"/>
    </slice>
    <from sec="1191993191" usec="0"/>
    <to sec="1191993204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1813{
style=filled;
color=gray75;
15125[label="213.161.171.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19204[label="213.161.171.166;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1813[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.161.171.166:1076, 172.133.16.160:48257}[50%]&lt;BR/&gt;{213.161.171.166:4632, 172.133.16.160:48257}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48257: (50%)&lt;BR/&gt; 4632: (25%)&lt;BR/&gt; 1076: (25%)&gt;];
}
15125--19204[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.16.160" dst_port="48257" src_ip="213.161.171.166" src_port="4632"/>
      <filter dst_ip="172.133.16.160" dst_port="48257" src_ip="213.161.171.166" src_port="1076"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.10.244.166"/>
    </slice>
    <from sec="1191992776" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1815{
style=filled;
color=gray75;
15140[label="200.173.68.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19211[label="200.173.68.167;2pkt 2fpkt", shape=invtriangle, color=brown];
21944[label="200.173.68.167;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1815[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.68.167:4000, 57.36.65.56:22252}[50%]&lt;BR/&gt;{200.173.68.167:4000, 38.120.212.124:3345}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4000: (50%)&lt;BR/&gt; 22252: (25%)&lt;BR/&gt; 3345: (25%)&gt;];
}
15140--19211[label="1;2pkt 2fpkt"];
15140--21944[label="1;2pkt 2fpkt"];
19211--21944[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="38.120.212.124" dst_port="3345" src_ip="200.173.68.167" src_port="4000"/>
      <filter dst_ip="57.36.65.56" dst_port="22252" src_ip="200.173.68.167" src_port="4000"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1816{
style=filled;
color=gray75;
15142[label="172.130.72.167;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19213[label="172.130.72.167;1pkt 1fpkt", shape=invtriangle, color=brown];
21945[label="172.130.72.167;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1816[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.72.167:80, 80.36.85.145:49201}[50%]&lt;BR/&gt;{172.130.72.167:80, 80.36.85.145:49223}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49223: (37.5%)&lt;BR/&gt; 49201: (12.5%)&gt;];
}
15142--19213[label="1;1pkt 1fpkt"];
15142--21945[label="1;1pkt 1fpkt"];
19213--21945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="80.36.85.145" dst_port="49223" src_ip="172.130.72.167" src_port="80"/>
      <filter dst_ip="80.36.85.145" dst_port="49201" src_ip="172.130.72.167" src_port="80"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191992423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.167"/>
    </slice>
    <from sec="1191992574" usec="0"/>
    <to sec="1191992587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.34.43.168"/>
    </slice>
    <from sec="1191992775" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.188.135.168"/>
    </slice>
    <from sec="1191992448" usec="0"/>
    <to sec="1191992593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.34.35.169"/>
    </slice>
    <from sec="1191992729" usec="0"/>
    <to sec="1191992895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.197.112.169"/>
    </slice>
    <from sec="1191992757" usec="0"/>
    <to sec="1191992785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1822{
style=filled;
color=gray75;
15218[label="169.6.178.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19258[label="169.6.178.170;1pkt 1fpkt", shape=invtriangle, color=brown];
21981[label="169.6.178.170;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1822[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.178.170:53, 63.138.237.16:44540}[50%]&lt;BR/&gt;{169.6.178.170:53, 206.119.212.183:32999}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32999: (37.5%)&lt;BR/&gt; 44540: (12.5%)&gt;];
}
15218--19258[label="1;1pkt 1fpkt"];
15218--21981[label="1;1pkt 1fpkt"];
19258--21981[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.119.212.183" dst_port="32999" src_ip="169.6.178.170" src_port="53"/>
      <filter dst_ip="63.138.237.16" dst_port="44540" src_ip="169.6.178.170" src_port="53"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1823{
style=filled;
color=gray75;
15220[label="1.178.182.170;21pkt 21fpkt", shape=pentagon, color=darkviolet];
19260[label="1.178.182.170;22pkt 22fpkt", shape=invtriangle, color=brown];
21982[label="1.178.182.170;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1823[shape=component, label=&lt;Rules:&lt;BR/&gt;{1.178.182.170:80, 172.159.125.251:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4755: (2.30769%)&lt;BR/&gt; 4753: (2.30769%)&lt;BR/&gt; 4752: (2.30769%)&lt;BR/&gt; 4751: (2.30769%)&gt;];
}
15220--19260[label="1;21pkt 21fpkt"];
15220--21982[label="1;21pkt 21fpkt"];
19260--21982[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.125.251" src_ip="1.178.182.170" src_port="80"/>
    </slice>
    <from sec="1191992456" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.76.236.170"/>
    </slice>
    <from sec="1191992888" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.76.96.171"/>
    </slice>
    <from sec="1191992429" usec="0"/>
    <to sec="1191992442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.175.105.171"/>
    </slice>
    <from sec="1191992842" usec="0"/>
    <to sec="1191992878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.203.173.171"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1828{
style=filled;
color=gray75;
15249[label="200.222.225.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19275[label="200.222.225.171;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1828[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.222.225.171:63440, 192.27.51.16:53}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63440: (50%)&lt;BR/&gt; 53: (50%)&gt;];
}
15249--19275[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.27.51.16" dst_port="53" src_ip="200.222.225.171" src_port="63440"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.171.26.172"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1830{
style=filled;
color=gray75;
15256[label="169.6.104.172;28pkt 28fpkt", shape=pentagon, color=darkviolet];
19281[label="169.6.104.172;28pkt 28fpkt", shape=invtriangle, color=brown];
21996[label="169.6.104.172;28pkt 28fpkt", shape=invhouse, color=bisque];
stat1830[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.104.172:995, 216.10.102.97:*}[53.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 60403: (1.78571%)&lt;BR/&gt; 59275: (1.78571%)&lt;BR/&gt; 54800: (1.78571%)&lt;BR/&gt; 54793: (1.78571%)&gt;];
}
15256--19281[label="1;28pkt 28fpkt"];
15256--21996[label="1;28pkt 28fpkt"];
19281--21996[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="216.10.102.97" src_ip="169.6.104.172" src_port="995"/>
    </slice>
    <from sec="1191992427" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.7.129.172"/>
    </slice>
    <from sec="1191992997" usec="0"/>
    <to sec="1191993024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.82.205.172"/>
    </slice>
    <from sec="1191992930" usec="0"/>
    <to sec="1191992954" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.71.233.172"/>
    </slice>
    <from sec="1191992602" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.10.9.173"/>
    </slice>
    <from sec="1191992899" usec="0"/>
    <to sec="1191992951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.161.82.173"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1836{
style=filled;
color=gray75;
15289[label="68.6.146.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19302[label="68.6.146.173;1pkt 1fpkt", shape=invtriangle, color=brown];
22010[label="68.6.146.173;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1836[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.6.146.173:60111, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60111: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15289--19302[label="1;1pkt 1fpkt"];
15289--22010[label="1;1pkt 1fpkt"];
19302--22010[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="68.6.146.173" src_port="60111"/>
    </slice>
    <from sec="1191992646" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.153.173"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.173"/>
    </slice>
    <from sec="1191993011" usec="0"/>
    <to sec="1191993033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.171.101.175"/>
    </slice>
    <from sec="1191993231" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.88.161.175"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.126.172.175"/>
    </slice>
    <from sec="1191993078" usec="0"/>
    <to sec="1191993143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.212.211.175"/>
    </slice>
    <from sec="1191992522" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.8.17.176"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.201.38.176"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191992474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.13.119.176"/>
    </slice>
    <from sec="1191993058" usec="0"/>
    <to sec="1191993087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.136.197.176"/>
    </slice>
    <from sec="1191993031" usec="0"/>
    <to sec="1191993050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1850{
style=filled;
color=gray75;
15359[label="200.84.223.176;89pkt 89fpkt", shape=pentagon, color=darkviolet];
19351[label="200.84.223.176;89pkt 89fpkt", shape=invtriangle, color=brown];
stat1850[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.84.223.176:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4996: (0.561798%)&lt;BR/&gt; 4954: (0.561798%)&lt;BR/&gt; 4819: (0.561798%)&lt;BR/&gt; 4750: (0.561798%)&gt;];
}
15359--19351[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="200.84.223.176"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1851{
style=filled;
color=gray75;
15360[label="85.51.7.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19352[label="85.51.7.177;2pkt 2fpkt", shape=invtriangle, color=brown];
22041[label="85.51.7.177;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1851[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.51.7.177:29288, 201.75.182.182:26301}[50%]&lt;BR/&gt;{85.51.7.177:29753, 201.75.182.182:26746}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29753: (25%)&lt;BR/&gt; 29288: (25%)&lt;BR/&gt; 26746: (25%)&lt;BR/&gt; 26301: (25%)&gt;];
}
15360--19352[label="1;2pkt 2fpkt"];
15360--22041[label="1;2pkt 2fpkt"];
19352--22041[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.182.182" dst_port="26746" src_ip="85.51.7.177" src_port="29753"/>
      <filter dst_ip="201.75.182.182" dst_port="26301" src_ip="85.51.7.177" src_port="29288"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.22.50.177"/>
    </slice>
    <from sec="1191992978" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.20.53.177"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1854{
style=filled;
color=gray75;
15367[label="193.66.57.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19357[label="193.66.57.177;1pkt 1fpkt", shape=invtriangle, color=brown];
22045[label="193.66.57.177;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1854[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.66.57.177:53, 172.64.129.40:53}[50%]&lt;BR/&gt;{193.66.57.177:53, 172.64.36.186:53202}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (62.5%)&lt;BR/&gt; 53202: (37.5%)&gt;];
}
15367--19357[label="1;1pkt 1fpkt"];
15367--22045[label="1;1pkt 1fpkt"];
19357--22045[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.36.186" dst_port="53202" src_ip="193.66.57.177" src_port="53"/>
      <filter dst_ip="172.64.129.40" dst_port="53" src_ip="193.66.57.177" src_port="53"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1855{
style=filled;
color=gray75;
15380[label="202.201.212.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19363[label="202.201.212.177;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1855[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.201.212.177:1243, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1243: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15380--19363[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="202.201.212.177" src_port="1243"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.222.226.177"/>
    </slice>
    <from sec="1191992715" usec="0"/>
    <to sec="1191993090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.160.96.178"/>
    </slice>
    <from sec="1191992605" usec="0"/>
    <to sec="1191992610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1859{
style=filled;
color=gray75;
15407[label="85.42.10.179;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19380[label="85.42.10.179;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1859[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.42.10.179:2375, 134.71.229.92:1434}[33.3333%]&lt;BR/&gt;{85.42.10.179:2375, 172.87.208.164:1434}[33.3333%]&lt;BR/&gt;{85.42.10.179:2375, 180.93.81.251:1434}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2375: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
15407--19380[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="180.93.81.251" dst_port="1434" src_ip="85.42.10.179" src_port="2375"/>
      <filter dst_ip="172.87.208.164" dst_port="1434" src_ip="85.42.10.179" src_port="2375"/>
      <filter dst_ip="134.71.229.92" dst_port="1434" src_ip="85.42.10.179" src_port="2375"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.109.49.179"/>
    </slice>
    <from sec="1191992898" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.23.75.179"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1862{
style=filled;
color=gray75;
15416[label="169.6.83.179;8pkt 8fpkt", shape=pentagon, color=darkviolet];
19388[label="169.6.83.179;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1862[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.83.179:80, 201.41.40.104:*}[37.5%]&lt;BR/&gt;{169.6.83.179:80, 52.171.213.67:*}[25%]&lt;BR/&gt;{169.6.83.179:80, 52.226.26.73:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62290: (6.25%)&lt;BR/&gt; 62289: (6.25%)&lt;BR/&gt; 60724: (6.25%)&lt;BR/&gt; 60622: (6.25%)&gt;];
}
15416--19388[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="201.41.40.104" src_ip="169.6.83.179" src_port="80"/>
      <filter dst_ip="52.226.26.73" src_ip="169.6.83.179" src_port="80"/>
      <filter dst_ip="52.171.213.67" src_ip="169.6.83.179" src_port="80"/>
    </slice>
    <from sec="1191992449" usec="0"/>
    <to sec="1191993241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.195.108.179"/>
    </slice>
    <from sec="1191992616" usec="0"/>
    <to sec="1191992658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1864{
style=filled;
color=gray75;
4238[label="61.86.172.231;d;64pkt 64fpkt", shape=diamond, color=yellow];
4954[label="172.130.51.84;s;60pkt 60fpkt", shape=diamond, color=yellow];
9797[label="61.86.172.231;d;51pkt 51fpkt", shape=hexagon, color=black];
15424[label="134.71.143.179;13pkt 13fpkt", shape=pentagon, color=darkviolet];
19391[label="134.71.143.179;12pkt 12fpkt", shape=invtriangle, color=brown];
22066[label="134.71.143.179;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1864[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.51.84:80, 61.86.172.231:*}[82.1918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5849%)&lt;BR/&gt; 2641: (1.41509%)&lt;BR/&gt; 64205: (1.17925%)&lt;BR/&gt; 58524: (1.17925%)&lt;BR/&gt; 40770: (1.17925%)&gt;];
}
4238--4954[label="1;60pkt 60fpkt"];
4238--9797[label="1;51pkt 51fpkt"];
4238--11348[label="0.0625;4pkt 4fpkt"];
4238--11389[label="0.0625;4pkt 4fpkt"];
4238--15424[label="0.307692;4pkt 4fpkt"];
4238--19391[label="0.25;3pkt 3fpkt"];
4238--22066[label="0.25;3pkt 3fpkt"];
4954--9797[label="0.921569;47pkt 47fpkt"];
4954--11348[label="0.0666667;4pkt 4fpkt"];
4954--11389[label="0.0666667;4pkt 4fpkt"];
9797--11348[label="0.0784314;4pkt 4fpkt"];
9797--11389[label="0.0784314;4pkt 4fpkt"];
9797--15424[label="0.307692;4pkt 4fpkt"];
9797--19391[label="0.25;3pkt 3fpkt"];
9797--22066[label="0.25;3pkt 3fpkt"];
15424--19391[label="1;12pkt 12fpkt"];
15424--22066[label="1;12pkt 12fpkt"];
19391--22066[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="61.86.172.231" src_ip="172.130.51.84" src_port="80"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="41.175.23.180"/>
    </slice>
    <from sec="1191992792" usec="0"/>
    <to sec="1191992824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.147.92.180"/>
    </slice>
    <from sec="1191992946" usec="0"/>
    <to sec="1191992971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1867{
style=filled;
color=gray75;
15444[label="172.130.149.180;178pkt 178fpkt", shape=pentagon, color=darkviolet];
19402[label="172.130.149.180;178pkt 178fpkt", shape=invtriangle, color=brown];
22075[label="172.130.149.180;178pkt 178fpkt", shape=invhouse, color=bisque];
stat1867[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.149.180:25613, *:*}[99.4382%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25613: (49.7191%)&lt;BR/&gt; 65139: (0.280899%)&lt;BR/&gt; 64611: (0.280899%)&lt;BR/&gt; 63347: (0.280899%)&lt;BR/&gt; 63239: (0.280899%)&gt;];
}
15444--19402[label="1;178pkt 178fpkt"];
15444--22075[label="1;178pkt 178fpkt"];
19402--22075[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter src_ip="172.130.149.180" src_port="25613"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1868{
style=filled;
color=gray75;
747[label="61.86.169.11;d;4pkt 4fpkt", shape=diamond, color=yellow];
748[label="172.130.18.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
954[label="169.6.70.138;s;116pkt 116fpkt", shape=diamond, color=yellow];
1622[label="39.128.186.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
2309[label="201.179.125.5;d;15pkt 15fpkt", shape=diamond, color=yellow];
3786[label="39.128.186.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
4151[label="169.6.21.133;s;191pkt 191fpkt", shape=diamond, color=yellow];
4888[label="169.6.226.222;s;86pkt 86fpkt", shape=diamond, color=yellow];
5267[label="39.128.186.36;d;1pkt 1fpkt", shape=diamond, color=yellow];
5605[label="39.128.186.56;d;36pkt 36fpkt", shape=diamond, color=yellow];
6675[label="188.104.211.86;s;8pkt 8fpkt", shape=diamond, color=yellow];
7658[label="61.86.169.11;d;4pkt 4fpkt", shape=hexagon, color=black];
8095[label="169.6.70.138;s;116pkt 116fpkt", shape=hexagon, color=black];
9000[label="201.179.125.5;d;11pkt 11fpkt", shape=hexagon, color=black];
9460[label="39.128.186.62;d;2pkt 2fpkt", shape=hexagon, color=black];
9525[label="39.128.186.36;d;1pkt 1fpkt", shape=hexagon, color=black];
9751[label="169.6.226.222;s;63pkt 63fpkt", shape=hexagon, color=black];
13381[label="188.104.211.86;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14458[label="169.6.70.138;121pkt 121fpkt", shape=pentagon, color=darkviolet];
18091[label="188.104.211.86;11pkt 11fpkt", shape=invtriangle, color=brown];
18776[label="169.6.70.138;122pkt 122fpkt", shape=invtriangle, color=brown];
21645[label="169.6.70.138;121pkt 121fpkt", shape=invhouse, color=bisque];
stat1868[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.21.133:*, *:80}[45.1074%]&lt;BR/&gt;{169.6.70.138:*, *:80}[28.8783%]&lt;BR/&gt;{169.6.226.222:*, *:*}[20.5251%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6644%)&lt;BR/&gt; 0: (0.671141%)&lt;BR/&gt; 3810: (0.33557%)&lt;BR/&gt; 3792: (0.33557%)&lt;BR/&gt; 3943: (0.287632%)&gt;];
}
747--748[label="1;1pkt 1fpkt"];
747--4888[label="0.25;1pkt 1fpkt"];
747--7658[label="1;4pkt 4fpkt"];
747--9751[label="0.25;1pkt 1fpkt"];
747--11348[label="0.25;1pkt 1fpkt"];
747--11389[label="0.25;1pkt 1fpkt"];
748--7658[label="1;1pkt 1fpkt"];
954--1024[label="0.00862069;1pkt 1fpkt"];
954--1026[label="0.00862069;1pkt 1fpkt"];
954--1094[label="0.00862069;1pkt 1fpkt"];
954--1119[label="0.0258621;3pkt 3fpkt"];
954--1175[label="0.0540541;6pkt 6fpkt"];
954--1194[label="0.0172414;2pkt 2fpkt"];
954--1261[label="0.0258621;3pkt 3fpkt"];
954--1319[label="0.0258621;3pkt 3fpkt"];
954--1372[label="0.00862069;1pkt 1fpkt"];
954--1381[label="0.00862069;1pkt 1fpkt"];
954--1387[label="0.0172414;2pkt 2fpkt"];
954--1428[label="0.0172414;2pkt 2fpkt"];
954--1476[label="0.0344828;4pkt 4fpkt"];
954--1622[label="1;1pkt 1fpkt"];
954--1803[label="0.0258621;3pkt 3fpkt"];
954--2074[label="0.0172414;2pkt 2fpkt"];
954--2079[label="0.00862069;1pkt 1fpkt"];
954--2309[label="0.133333;2pkt 2fpkt"];
954--2647[label="0.00862069;1pkt 1fpkt"];
954--2937[label="0.0172414;2pkt 2fpkt"];
954--3786[label="1;1pkt 1fpkt"];
954--4871[label="0.0258621;3pkt 3fpkt"];
954--5267[label="1;1pkt 1fpkt"];
954--5605[label="0.305556;11pkt 11fpkt"];
954--7451[label="0.00862069;1pkt 1fpkt"];
954--7505[label="0.0172414;2pkt 2fpkt"];
954--7561[label="0.00862069;1pkt 1fpkt"];
954--8095[label="1;116pkt 116fpkt"];
954--8139[label="0.00862069;1pkt 1fpkt"];
954--8298[label="0.0258621;3pkt 3fpkt"];
954--8326[label="0.00862069;1pkt 1fpkt"];
954--8760[label="0.00862069;1pkt 1fpkt"];
954--8825[label="0.00862069;1pkt 1fpkt"];
954--9355[label="0.0172414;2pkt 2fpkt"];
954--9460[label="1;2pkt 2fpkt"];
954--9525[label="1;1pkt 1fpkt"];
954--9550[label="0.0258621;3pkt 3fpkt"];
954--9636[label="0.0258621;3pkt 3fpkt"];
954--9776[label="0.0344828;4pkt 4fpkt"];
954--10629[label="0.0258621;3pkt 3fpkt"];
954--10942[label="0.0102041;1pkt 1fpkt"];
954--11265[label="0.0172414;2pkt 2fpkt"];
954--11285[label="0.0517241;6pkt 6fpkt"];
954--11338[label="0.0172414;2pkt 2fpkt"];
954--11351[label="0.0517241;6pkt 6fpkt"];
954--11382[label="0.0172414;2pkt 2fpkt"];
954--11392[label="0.0517241;6pkt 6fpkt"];
954--14458[label="0.991379;115pkt 115fpkt"];
954--18776[label="1;116pkt 116fpkt"];
954--21645[label="0.991379;115pkt 115fpkt"];
1622--8095[label="1;1pkt 1fpkt"];
1622--11265[label="1;1pkt 1fpkt"];
1622--11338[label="1;1pkt 1fpkt"];
1622--11382[label="1;1pkt 1fpkt"];
1622--14458[label="1;1pkt 1fpkt"];
1622--18776[label="1;1pkt 1fpkt"];
1622--21645[label="1;1pkt 1fpkt"];
2309--4151[label="0.266667;4pkt 4fpkt"];
2309--6378[label="0.0666667;1pkt 1fpkt"];
2309--6675[label="0.75;6pkt 6fpkt"];
2309--8095[label="0.133333;2pkt 2fpkt"];
2309--9000[label="1;11pkt 11fpkt"];
2309--13381[label="0.545455;6pkt 6fpkt"];
2309--14458[label="0.133333;2pkt 2fpkt"];
2309--18091[label="0.545455;6pkt 6fpkt"];
2309--18776[label="0.133333;2pkt 2fpkt"];
2309--21645[label="0.133333;2pkt 2fpkt"];
3786--8095[label="1;1pkt 1fpkt"];
3786--9460[label="1;1pkt 1fpkt"];
3786--11285[label="1;1pkt 1fpkt"];
3786--11351[label="1;1pkt 1fpkt"];
3786--11392[label="1;1pkt 1fpkt"];
3786--14458[label="1;1pkt 1fpkt"];
3786--18776[label="1;1pkt 1fpkt"];
3786--21645[label="1;1pkt 1fpkt"];
4151--4201[label="0.0188679;1pkt 1fpkt"];
4151--4961[label="0.0277778;2pkt 2fpkt"];
4151--5711[label="0.0252101;3pkt 3fpkt"];
4151--7411[label="0.0052356;1pkt 1fpkt"];
4151--7456[label="0.0052356;1pkt 1fpkt"];
4151--7561[label="0.0052356;1pkt 1fpkt"];
4151--7650[label="0.00961538;1pkt 1fpkt"];
4151--7655[label="0.0104712;2pkt 2fpkt"];
4151--7818[label="0.0318471;5pkt 5fpkt"];
4151--7869[label="0.0209424;4pkt 4fpkt"];
4151--7877[label="0.0418848;8pkt 8fpkt"];
4151--7882[label="0.00531915;1pkt 1fpkt"];
4151--8171[label="0.0104712;2pkt 2fpkt"];
4151--8313[label="0.0052356;1pkt 1fpkt"];
4151--8325[label="0.0052356;1pkt 1fpkt"];
4151--8365[label="0.0052356;1pkt 1fpkt"];
4151--8459[label="0.0707965;8pkt 8fpkt"];
4151--8470[label="0.0289855;2pkt 2fpkt"];
4151--8510[label="0.0104712;2pkt 2fpkt"];
4151--8760[label="0.0157068;3pkt 3fpkt"];
4151--8825[label="0.0052356;1pkt 1fpkt"];
4151--8875[label="0.0052356;1pkt 1fpkt"];
4151--9000[label="0.363636;4pkt 4fpkt"];
4151--9355[label="0.0052356;1pkt 1fpkt"];
4151--9376[label="0.0628272;12pkt 12fpkt"];
4151--9611[label="0.00925926;1pkt 1fpkt"];
4151--9660[label="0.0104712;2pkt 2fpkt"];
4151--9705[label="0.0110497;2pkt 2fpkt"];
4151--9726[label="0.0052356;1pkt 1fpkt"];
4151--9735[label="0.0784314;8pkt 8fpkt"];
4151--10117[label="0.0233918;4pkt 4fpkt"];
4151--10618[label="0.0392157;4pkt 4fpkt"];
4151--10968[label="0.0104712;2pkt 2fpkt"];
4151--10979[label="0.0052356;1pkt 1fpkt"];
4151--11124[label="0.0705882;6pkt 6fpkt"];
4151--11169[label="0.00925926;1pkt 1fpkt"];
4151--11265[label="0.0314136;6pkt 6fpkt"];
4151--11285[label="0.0209424;4pkt 4fpkt"];
4151--11338[label="0.0314136;6pkt 6fpkt"];
4151--11351[label="0.0209424;4pkt 4fpkt"];
4151--11382[label="0.0314136;6pkt 6fpkt"];
4151--11392[label="0.0209424;4pkt 4fpkt"];
4888--5605[label="0.611111;22pkt 22fpkt"];
4888--7483[label="0.209302;18pkt 18fpkt"];
4888--7658[label="0.25;1pkt 1fpkt"];
4888--8457[label="0.0697674;6pkt 6fpkt"];
4888--9751[label="1;63pkt 63fpkt"];
4888--10572[label="0.0116279;1pkt 1fpkt"];
4888--11265[label="0.0116279;1pkt 1fpkt"];
4888--11285[label="0.0813953;7pkt 7fpkt"];
4888--11338[label="0.0116279;1pkt 1fpkt"];
4888--11348[label="0.0116279;1pkt 1fpkt"];
4888--11351[label="0.0813953;7pkt 7fpkt"];
4888--11382[label="0.0116279;1pkt 1fpkt"];
4888--11389[label="0.0116279;1pkt 1fpkt"];
4888--11392[label="0.0813953;7pkt 7fpkt"];
5267--8095[label="1;1pkt 1fpkt"];
5267--9525[label="1;1pkt 1fpkt"];
5267--14458[label="1;1pkt 1fpkt"];
5267--18776[label="1;1pkt 1fpkt"];
5267--21645[label="1;1pkt 1fpkt"];
5605--5782[label="0.0277778;1pkt 1fpkt"];
5605--8095[label="0.305556;11pkt 11fpkt"];
5605--9238[label="0.0277778;1pkt 1fpkt"];
5605--9751[label="0.444444;16pkt 16fpkt"];
5605--11265[label="0.0277778;1pkt 1fpkt"];
5605--11285[label="0.0833333;3pkt 3fpkt"];
5605--11338[label="0.0277778;1pkt 1fpkt"];
5605--11351[label="0.0833333;3pkt 3fpkt"];
5605--11382[label="0.0277778;1pkt 1fpkt"];
5605--11392[label="0.0833333;3pkt 3fpkt"];
5605--12307[label="0.0277778;1pkt 1fpkt"];
5605--14033[label="0.0277778;1pkt 1fpkt"];
5605--14458[label="0.305556;11pkt 11fpkt"];
5605--17406[label="0.0277778;1pkt 1fpkt"];
5605--18776[label="0.305556;11pkt 11fpkt"];
5605--21645[label="0.305556;11pkt 11fpkt"];
6675--8313[label="0.125;1pkt 1fpkt"];
6675--9000[label="0.75;6pkt 6fpkt"];
6675--13381[label="1;8pkt 8fpkt"];
6675--18091[label="1;8pkt 8fpkt"];
7658--9751[label="0.25;1pkt 1fpkt"];
7658--11348[label="0.25;1pkt 1fpkt"];
7658--11389[label="0.25;1pkt 1fpkt"];
8095--8139[label="0.00862069;1pkt 1fpkt"];
8095--8298[label="0.0258621;3pkt 3fpkt"];
8095--8326[label="0.00862069;1pkt 1fpkt"];
8095--8760[label="0.00862069;1pkt 1fpkt"];
8095--8825[label="0.00862069;1pkt 1fpkt"];
8095--9355[label="0.0172414;2pkt 2fpkt"];
8095--9460[label="1;2pkt 2fpkt"];
8095--9525[label="1;1pkt 1fpkt"];
8095--9550[label="0.0258621;3pkt 3fpkt"];
8095--9636[label="0.0258621;3pkt 3fpkt"];
8095--9776[label="0.0344828;4pkt 4fpkt"];
8095--10629[label="0.0258621;3pkt 3fpkt"];
8095--10942[label="0.0102041;1pkt 1fpkt"];
8095--11265[label="0.0172414;2pkt 2fpkt"];
8095--11285[label="0.0517241;6pkt 6fpkt"];
8095--11338[label="0.0172414;2pkt 2fpkt"];
8095--11351[label="0.0517241;6pkt 6fpkt"];
8095--11382[label="0.0172414;2pkt 2fpkt"];
8095--11392[label="0.0517241;6pkt 6fpkt"];
8095--14458[label="0.991379;115pkt 115fpkt"];
8095--18776[label="1;116pkt 116fpkt"];
8095--21645[label="0.991379;115pkt 115fpkt"];
9000--13381[label="0.545455;6pkt 6fpkt"];
9000--18091[label="0.545455;6pkt 6fpkt"];
9460--11285[label="0.5;1pkt 1fpkt"];
9460--11351[label="0.5;1pkt 1fpkt"];
9460--11392[label="0.5;1pkt 1fpkt"];
9460--14458[label="1;2pkt 2fpkt"];
9460--18776[label="1;2pkt 2fpkt"];
9460--21645[label="1;2pkt 2fpkt"];
9525--14458[label="1;1pkt 1fpkt"];
9525--18776[label="1;1pkt 1fpkt"];
9525--21645[label="1;1pkt 1fpkt"];
9751--10572[label="0.015873;1pkt 1fpkt"];
9751--11265[label="0.015873;1pkt 1fpkt"];
9751--11285[label="0.111111;7pkt 7fpkt"];
9751--11338[label="0.015873;1pkt 1fpkt"];
9751--11348[label="0.015873;1pkt 1fpkt"];
9751--11351[label="0.111111;7pkt 7fpkt"];
9751--11382[label="0.015873;1pkt 1fpkt"];
9751--11389[label="0.015873;1pkt 1fpkt"];
9751--11392[label="0.111111;7pkt 7fpkt"];
13381--18091[label="1;11pkt 11fpkt"];
14458--18776[label="1;121pkt 121fpkt"];
14458--21645[label="1;121pkt 121fpkt"];
18776--21645[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.226.222"/>
      <filter dst_port="80" src_ip="169.6.21.133"/>
      <filter dst_port="80" src_ip="169.6.70.138"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.124.37.181"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.230.135.181"/>
    </slice>
    <from sec="1191993009" usec="0"/>
    <to sec="1191993055" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1871{
style=filled;
color=gray75;
15474[label="172.226.213.181;6pkt 6fpkt", shape=pentagon, color=darkviolet];
19415[label="172.226.213.181;6pkt 6fpkt", shape=invtriangle, color=brown];
22086[label="172.226.213.181;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1871[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.226.213.181:*, 206.35.146.16:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (16.6667%)&lt;BR/&gt; 65525: (8.33333%)&lt;BR/&gt; 54058: (8.33333%)&lt;BR/&gt; 54022: (8.33333%)&lt;BR/&gt; 54013: (8.33333%)&gt;];
}
15474--19415[label="1;6pkt 6fpkt"];
15474--22086[label="1;6pkt 6fpkt"];
19415--22086[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="206.35.146.16" dst_port="21" src_ip="172.226.213.181"/>
    </slice>
    <from sec="1191992597" usec="0"/>
    <to sec="1191992907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.116.216.181"/>
    </slice>
    <from sec="1191992915" usec="0"/>
    <to sec="1191992947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.170.91.182"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.1.146.182"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.121.156.182"/>
    </slice>
    <from sec="1191992885" usec="0"/>
    <to sec="1191992934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1876{
style=filled;
color=gray75;
15497[label="201.233.200.182;142pkt 142fpkt", shape=pentagon, color=darkviolet];
19432[label="201.233.200.182;142pkt 142fpkt", shape=invtriangle, color=brown];
22098[label="201.233.200.182;142pkt 142fpkt", shape=invhouse, color=bisque];
stat1876[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.233.200.182:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
15497--19432[label="1;142pkt 142fpkt"];
15497--22098[label="1;142pkt 142fpkt"];
19432--22098[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter src_ip="201.233.200.182"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.172.208.182"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.206.253.182"/>
    </slice>
    <from sec="1191992919" usec="0"/>
    <to sec="1191992948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.104.34.183"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1880{
style=filled;
color=gray75;
5602[label="169.6.66.183;s;89pkt 89fpkt", shape=diamond, color=yellow];
15512[label="169.6.66.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19445[label="169.6.66.183;1pkt 1fpkt", shape=invtriangle, color=brown];
22108[label="169.6.66.183;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1880[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.66.183:25, *:*}[70%]&lt;BR/&gt;{169.6.66.183:*, *:25}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.9247%)&lt;BR/&gt; 0: (2.15054%)&lt;BR/&gt; 2813: (1.6129%)&lt;BR/&gt; 33779: (1.07527%)&lt;BR/&gt; 65075: (0.537634%)&gt;];
}
5602--6149[label="0.0142857;1pkt 1fpkt"];
5602--7561[label="0.011236;1pkt 1fpkt"];
5602--8000[label="0.011236;1pkt 1fpkt"];
5602--11282[label="0.0224719;2pkt 2fpkt"];
5602--11347[label="0.0224719;2pkt 2fpkt"];
5602--11388[label="0.0224719;2pkt 2fpkt"];
5602--22108[label="0.5;1pkt 1fpkt"];
15512--19445[label="1;1pkt 1fpkt"];
15512--22108[label="1;1pkt 1fpkt"];
19445--22108[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.66.183" src_port="25"/>
      <filter dst_port="25" src_ip="169.6.66.183"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.1.101.183"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.210.138.183"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.156.40.184"/>
    </slice>
    <from sec="1191993227" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.74.115.184"/>
    </slice>
    <from sec="1191993128" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1885{
style=filled;
color=gray75;
15539[label="172.159.121.184;5pkt 5fpkt", shape=pentagon, color=darkviolet];
19466[label="172.159.121.184;4pkt 4fpkt", shape=invtriangle, color=brown];
22123[label="172.159.121.184;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1885[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.159.121.184:49835, 207.38.76.189:80}[20%]&lt;BR/&gt;{172.159.121.184:49847, 137.10.83.151:2869}[20%]&lt;BR/&gt;{172.159.121.184:49858, 137.10.83.151:2869}[20%]&lt;BR/&gt;{172.159.121.184:49852, 137.10.83.230:51250}[20%]&lt;BR/&gt;{172.159.121.184:49853, 137.10.83.230:51250}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51250: (23.0769%)&lt;BR/&gt; 2869: (15.3846%)&lt;BR/&gt; 49858: (11.5385%)&lt;BR/&gt; 49853: (11.5385%)&lt;BR/&gt; 49852: (11.5385%)&gt;];
}
15539--19466[label="1;4pkt 4fpkt"];
15539--22123[label="1;4pkt 4fpkt"];
19466--22123[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="137.10.83.230" dst_port="51250" src_ip="172.159.121.184" src_port="49853"/>
      <filter dst_ip="137.10.83.230" dst_port="51250" src_ip="172.159.121.184" src_port="49852"/>
      <filter dst_ip="137.10.83.151" dst_port="2869" src_ip="172.159.121.184" src_port="49858"/>
      <filter dst_ip="137.10.83.151" dst_port="2869" src_ip="172.159.121.184" src_port="49847"/>
      <filter dst_ip="207.38.76.189" dst_port="80" src_ip="172.159.121.184" src_port="49835"/>
    </slice>
    <from sec="1191992478" usec="0"/>
    <to sec="1191992654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.237.188.184"/>
    </slice>
    <from sec="1191993185" usec="0"/>
    <to sec="1191993212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="56.149.183.185"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.26.244.185"/>
    </slice>
    <from sec="1191992702" usec="0"/>
    <to sec="1191992739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.126.7.186"/>
    </slice>
    <from sec="1191992825" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1890{
style=filled;
color=gray75;
15583[label="208.58.114.186;349pkt 349fpkt", shape=pentagon, color=darkviolet];
19496[label="208.58.114.186;349pkt 349fpkt", shape=invtriangle, color=brown];
stat1890[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.58.114.186:0, *:0}[98.8539%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.8539%)&lt;BR/&gt; 80: (0.573066%)&lt;BR/&gt; 57551: (0.143266%)&lt;BR/&gt; 48266: (0.143266%)&lt;BR/&gt; 34460: (0.143266%)&gt;];
}
15583--19496[label="1;349pkt 349fpkt"];
</description>
    <slice>
      <filter src_ip="208.58.114.186"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1891{
style=filled;
color=gray75;
15593[label="172.130.240.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19499[label="172.130.240.186;1pkt 1fpkt", shape=invtriangle, color=brown];
22147[label="172.130.240.186;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1891[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.240.186:80, 201.33.97.78:32470}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32470: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15593--19499[label="1;1pkt 1fpkt"];
15593--22147[label="1;1pkt 1fpkt"];
19499--22147[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.33.97.78" dst_port="32470" src_ip="172.130.240.186" src_port="80"/>
    </slice>
    <from sec="1191992504" usec="0"/>
    <to sec="1191992541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.175.189.187"/>
    </slice>
    <from sec="1191993198" usec="0"/>
    <to sec="1191993288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.64.224.187"/>
    </slice>
    <from sec="1191993283" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.26.22.190"/>
    </slice>
    <from sec="1191993238" usec="0"/>
    <to sec="1191993262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.252.17.191"/>
    </slice>
    <from sec="1191992932" usec="0"/>
    <to sec="1191992949" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.127.74.191"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.51.14.192"/>
    </slice>
    <from sec="1191993023" usec="0"/>
    <to sec="1191993050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1899{
style=filled;
color=gray75;
15683[label="201.165.34.192;240pkt 240fpkt", shape=pentagon, color=darkviolet];
19565[label="201.165.34.192;240pkt 240fpkt", shape=invtriangle, color=brown];
22201[label="201.165.34.192;240pkt 240fpkt", shape=invhouse, color=bisque];
stat1899[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.165.34.192:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 28547: (0.208333%)&lt;BR/&gt; 28546: (0.208333%)&lt;BR/&gt; 28545: (0.208333%)&lt;BR/&gt; 28544: (0.208333%)&gt;];
}
15683--19565[label="1;240pkt 240fpkt"];
15683--22201[label="1;240pkt 240fpkt"];
19565--22201[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="201.165.34.192"/>
    </slice>
    <from sec="1191992784" usec="0"/>
    <to sec="1191992795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.32.76.192"/>
    </slice>
    <from sec="1191992910" usec="0"/>
    <to sec="1191992957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.18.81.192"/>
    </slice>
    <from sec="1191993081" usec="0"/>
    <to sec="1191993107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1902{
style=filled;
color=gray75;
15689[label="169.6.100.192;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19569[label="169.6.100.192;3pkt 3fpkt", shape=invtriangle, color=brown];
22203[label="169.6.100.192;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1902[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.100.192:3012, 1.178.132.182:80}[33.3333%]&lt;BR/&gt;{169.6.100.192:3010, 216.28.10.71:80}[33.3333%]&lt;BR/&gt;{169.6.100.192:3011, 216.28.10.71:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3012: (16.6667%)&lt;BR/&gt; 3011: (16.6667%)&lt;BR/&gt; 3010: (16.6667%)&gt;];
}
15689--19569[label="1;3pkt 3fpkt"];
15689--22203[label="1;3pkt 3fpkt"];
19569--22203[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.28.10.71" dst_port="80" src_ip="169.6.100.192" src_port="3011"/>
      <filter dst_ip="216.28.10.71" dst_port="80" src_ip="169.6.100.192" src_port="3010"/>
      <filter dst_ip="1.178.132.182" dst_port="80" src_ip="169.6.100.192" src_port="3012"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1904{
style=filled;
color=gray75;
15693[label="188.104.128.192;52pkt 52fpkt", shape=pentagon, color=darkviolet];
19572[label="188.104.128.192;52pkt 52fpkt", shape=invtriangle, color=brown];
stat1904[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.128.192:*, 81.169.70.91:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65407: (0.961538%)&lt;BR/&gt; 65343: (0.961538%)&lt;BR/&gt; 65017: (0.961538%)&lt;BR/&gt; 63587: (0.961538%)&gt;];
}
15693--19572[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="81.169.70.91" dst_port="80" src_ip="188.104.128.192"/>
    </slice>
    <from sec="1191993231" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.191.130.192"/>
    </slice>
    <from sec="1191992410" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.133.136.192"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191992446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.33.166.192"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191992436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1908{
style=filled;
color=gray75;
15700[label="205.18.189.192;22pkt 22fpkt", shape=pentagon, color=darkviolet];
19579[label="205.18.189.192;22pkt 22fpkt", shape=invtriangle, color=brown];
22210[label="205.18.189.192;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1908[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.18.189.192:80, 169.6.96.224:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1868: (2.27273%)&lt;BR/&gt; 1867: (2.27273%)&lt;BR/&gt; 1866: (2.27273%)&lt;BR/&gt; 1865: (2.27273%)&gt;];
}
15700--19579[label="1;22pkt 22fpkt"];
15700--22210[label="1;22pkt 22fpkt"];
19579--22210[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.96.224" src_ip="205.18.189.192" src_port="80"/>
    </slice>
    <from sec="1191992439" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1909{
style=filled;
color=gray75;
15727[label="172.96.25.194;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19596[label="172.96.25.194;1pkt 1fpkt", shape=invtriangle, color=brown];
22222[label="172.96.25.194;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1909[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.96.25.194:0, 194.128.168.146:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
15727--19596[label="1;1pkt 1fpkt"];
15727--22222[label="1;1pkt 1fpkt"];
19596--22222[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.128.168.146" src_ip="172.96.25.194"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1910{
style=filled;
color=gray75;
6159[label="201.67.35.194;s;150pkt 150fpkt", shape=diamond, color=yellow];
15729[label="201.67.35.194;159pkt 159fpkt", shape=pentagon, color=darkviolet];
19597[label="201.67.35.194;160pkt 160fpkt", shape=invtriangle, color=brown];
22223[label="201.67.35.194;160pkt 160fpkt", shape=invhouse, color=bisque];
stat1910[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.67.35.194:8198, *:53}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8198: (46.8203%)&lt;BR/&gt; 53: (46.8203%)&lt;BR/&gt; 80: (3.17965%)&lt;BR/&gt; 54882: (0.317965%)&lt;BR/&gt; 48407: (0.317965%)&gt;];
}
6159--8067[label="0.00666667;1pkt 1fpkt"];
6159--8384[label="0.00666667;1pkt 1fpkt"];
6159--8729[label="0.025;1pkt 1fpkt"];
6159--8767[label="0.00666667;1pkt 1fpkt"];
6159--8902[label="0.00666667;1pkt 1fpkt"];
6159--9283[label="0.00666667;1pkt 1fpkt"];
6159--9648[label="0.00666667;1pkt 1fpkt"];
6159--10599[label="0.00666667;1pkt 1fpkt"];
6159--11337[label="0.206667;31pkt 31fpkt"];
6159--11381[label="0.206667;31pkt 31fpkt"];
6159--15729[label="0.993333;149pkt 149fpkt"];
6159--19597[label="1;150pkt 150fpkt"];
6159--22223[label="1;150pkt 150fpkt"];
15729--19597[label="1;159pkt 159fpkt"];
15729--22223[label="1;159pkt 159fpkt"];
19597--22223[label="1;160pkt 160fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="201.67.35.194" src_port="8198"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1911{
style=filled;
color=gray75;
15735[label="34.155.99.194;15pkt 15fpkt", shape=pentagon, color=darkviolet];
19600[label="34.155.99.194;15pkt 15fpkt", shape=invtriangle, color=brown];
22226[label="34.155.99.194;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1911[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.155.99.194:*, 172.159.168.144:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64449: (3.33333%)&lt;BR/&gt; 64447: (3.33333%)&lt;BR/&gt; 64445: (3.33333%)&lt;BR/&gt; 64435: (3.33333%)&gt;];
}
15735--19600[label="1;15pkt 15fpkt"];
15735--22226[label="1;15pkt 15fpkt"];
19600--22226[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.168.144" dst_port="80" src_ip="34.155.99.194"/>
    </slice>
    <from sec="1191993113" usec="0"/>
    <to sec="1191993132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.72.105.194"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.154.194"/>
    </slice>
    <from sec="1191993177" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.213.200.194"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.176.32.195"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.233.185.195"/>
    </slice>
    <from sec="1191992655" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.117.213.195"/>
    </slice>
    <from sec="1191992976" usec="0"/>
    <to sec="1191993031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.237.67.196"/>
    </slice>
    <from sec="1191992628" usec="0"/>
    <to sec="1191992655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="132.188.90.196"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1921{
style=filled;
color=gray75;
15782[label="188.104.154.196;14pkt 14fpkt", shape=pentagon, color=darkviolet];
19630[label="188.104.154.196;14pkt 14fpkt", shape=invtriangle, color=brown];
22244[label="188.104.154.196;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1921[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.154.196:*, 200.162.237.134:80}[53.3333%]&lt;BR/&gt;{188.104.154.196:*, 201.202.177.82:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3482: (3.48837%)&lt;BR/&gt; 3480: (3.48837%)&lt;BR/&gt; 3475: (3.48837%)&lt;BR/&gt; 3468: (3.48837%)&gt;];
}
15782--19630[label="1;14pkt 14fpkt"];
15782--22244[label="1;14pkt 14fpkt"];
19630--22244[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="200.162.237.134" dst_port="80" src_ip="188.104.154.196"/>
      <filter dst_ip="201.202.177.82" dst_port="80" src_ip="188.104.154.196"/>
    </slice>
    <from sec="1191993268" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.976816,3.03608,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1922{
style=filled;
color=gray75;
3053[label="172.64.36.197;s;31pkt 31fpkt", shape=diamond, color=yellow];
15787[label="172.64.36.197;32pkt 32fpkt", shape=pentagon, color=darkviolet];
19632[label="172.64.36.197;32pkt 32fpkt", shape=invtriangle, color=brown];
stat1922[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.64.36.197:80, 61.86.172.72:*}[30.303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63703: (1.57895%)&lt;BR/&gt; 62769: (1.57895%)&lt;BR/&gt; 59388: (1.57895%)&lt;BR/&gt; 58808: (1.57895%)&gt;];
}
3053--11348[label="0.0322581;1pkt 1fpkt"];
3053--11389[label="0.0322581;1pkt 1fpkt"];
3053--15787[label="0.967742;30pkt 30fpkt"];
3053--19632[label="0.967742;30pkt 30fpkt"];
15787--19632[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="61.86.172.72" src_ip="172.64.36.197" src_port="80"/>
    </slice>
    <from sec="1191992442" usec="0"/>
    <to sec="1191993238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.221.58.197"/>
    </slice>
    <from sec="1191992552" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1924{
style=filled;
color=gray75;
15792[label="61.30.78.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19637[label="61.30.78.197;1pkt 1fpkt", shape=invtriangle, color=brown];
22248[label="61.30.78.197;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1924[shape=component, label=&lt;Rules:&lt;BR/&gt;{61.30.78.197:80, 169.6.246.12:50722}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50722: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15792--19637[label="1;1pkt 1fpkt"];
15792--22248[label="1;1pkt 1fpkt"];
19637--22248[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.246.12" dst_port="50722" src_ip="61.30.78.197" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.181.192.197"/>
    </slice>
    <from sec="1191992682" usec="0"/>
    <to sec="1191992714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.2.202.197"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1927{
style=filled;
color=gray75;
15806[label="134.71.18.198;5pkt 5fpkt", shape=pentagon, color=darkviolet];
19647[label="134.71.18.198;5pkt 5fpkt", shape=invtriangle, color=brown];
22254[label="134.71.18.198;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1927[shape=component, label=&lt;Rules:&lt;BR/&gt;{134.71.18.198:3541, 81.167.130.168:80}[20%]&lt;BR/&gt;{134.71.18.198:3543, 81.167.130.168:80}[20%]&lt;BR/&gt;{134.71.18.198:3544, 81.167.130.168:80}[20%]&lt;BR/&gt;{134.71.18.198:3545, 81.167.130.168:80}[20%]&lt;BR/&gt;{134.71.18.198:3546, 81.167.130.168:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3546: (10%)&lt;BR/&gt; 3545: (10%)&lt;BR/&gt; 3544: (10%)&lt;BR/&gt; 3543: (10%)&gt;];
}
15806--19647[label="1;5pkt 5fpkt"];
15806--22254[label="1;5pkt 5fpkt"];
19647--22254[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="81.167.130.168" dst_port="80" src_ip="134.71.18.198" src_port="3546"/>
      <filter dst_ip="81.167.130.168" dst_port="80" src_ip="134.71.18.198" src_port="3545"/>
      <filter dst_ip="81.167.130.168" dst_port="80" src_ip="134.71.18.198" src_port="3544"/>
      <filter dst_ip="81.167.130.168" dst_port="80" src_ip="134.71.18.198" src_port="3543"/>
      <filter dst_ip="81.167.130.168" dst_port="80" src_ip="134.71.18.198" src_port="3541"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.75.55.198"/>
    </slice>
    <from sec="1191992968" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1930{
style=filled;
color=gray75;
15831[label="81.95.191.199;7pkt 7fpkt", shape=pentagon, color=darkviolet];
19667[label="81.95.191.199;7pkt 7fpkt", shape=invtriangle, color=brown];
22270[label="81.95.191.199;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1930[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.95.191.199:80, 169.6.252.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2630: (7.14286%)&lt;BR/&gt; 2616: (7.14286%)&lt;BR/&gt; 2587: (7.14286%)&lt;BR/&gt; 2569: (7.14286%)&gt;];
}
15831--19667[label="1;7pkt 7fpkt"];
15831--22270[label="1;7pkt 7fpkt"];
19667--22270[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.252.177" src_ip="81.95.191.199" src_port="80"/>
    </slice>
    <from sec="1191992958" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.206.222.199"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1934{
style=filled;
color=gray75;
5431[label="169.6.66.182;d;26pkt 26fpkt", shape=diamond, color=yellow];
5689[label="169.6.82.53;d;37pkt 37fpkt", shape=diamond, color=yellow];
9857[label="169.6.82.53;d;21pkt 21fpkt", shape=hexagon, color=black];
12238[label="221.51.48.34;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12896[label="201.66.52.66;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14460[label="32.212.78.138;2pkt 2fpkt", shape=pentagon, color=darkviolet];
16007[label="32.212.78.208;4pkt 4fpkt", shape=pentagon, color=darkviolet];
17368[label="221.51.48.34;4pkt 4fpkt", shape=invtriangle, color=brown];
17774[label="201.66.52.66;14pkt 14fpkt", shape=invtriangle, color=brown];
18778[label="32.212.78.138;2pkt 2fpkt", shape=invtriangle, color=brown];
19783[label="32.212.78.208;4pkt 4fpkt", shape=invtriangle, color=brown];
20938[label="201.66.52.66;14pkt 14fpkt", shape=invhouse, color=bisque];
21647[label="32.212.78.138;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1934[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.66.52.66:*, 169.6.82.53:80}[22.2222%]&lt;BR/&gt;{*:*, 169.6.66.182:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.2703%)&lt;BR/&gt; 32785: (2.7027%)&lt;BR/&gt; 53: (2.7027%)&lt;BR/&gt; 0: (2.7027%)&lt;BR/&gt; 59400: (1.68919%)&gt;];
}
5431--6739[label="0.0384615;1pkt 1fpkt"];
5431--6756[label="0.0384615;1pkt 1fpkt"];
5431--6885[label="0.0769231;2pkt 2fpkt"];
5431--11285[label="0.0384615;1pkt 1fpkt"];
5431--11311[label="0.0769231;2pkt 2fpkt"];
5431--11318[label="0.0769231;2pkt 2fpkt"];
5431--11351[label="0.0384615;1pkt 1fpkt"];
5431--11370[label="0.0769231;2pkt 2fpkt"];
5431--11372[label="0.0769231;2pkt 2fpkt"];
5431--11392[label="0.0384615;1pkt 1fpkt"];
5431--11397[label="0.0769231;2pkt 2fpkt"];
5431--11399[label="0.0769231;2pkt 2fpkt"];
5431--12532[label="0.0384615;1pkt 1fpkt"];
5431--14460[label="1;2pkt 2fpkt"];
5431--16007[label="1;4pkt 4fpkt"];
5431--18778[label="1;2pkt 2fpkt"];
5431--19783[label="1;4pkt 4fpkt"];
5431--21647[label="1;2pkt 2fpkt"];
5689--6885[label="0.0555556;2pkt 2fpkt"];
5689--9857[label="1;21pkt 21fpkt"];
5689--11265[label="0.027027;1pkt 1fpkt"];
5689--11285[label="0.0540541;2pkt 2fpkt"];
5689--11338[label="0.027027;1pkt 1fpkt"];
5689--11351[label="0.0540541;2pkt 2fpkt"];
5689--11382[label="0.027027;1pkt 1fpkt"];
5689--11392[label="0.0540541;2pkt 2fpkt"];
5689--12238[label="1;5pkt 5fpkt"];
5689--12896[label="1;13pkt 13fpkt"];
5689--17368[label="1;4pkt 4fpkt"];
5689--17774[label="1;14pkt 14fpkt"];
5689--20938[label="1;14pkt 14fpkt"];
9857--11265[label="0.047619;1pkt 1fpkt"];
9857--11285[label="0.0952381;2pkt 2fpkt"];
9857--11338[label="0.047619;1pkt 1fpkt"];
9857--11351[label="0.0952381;2pkt 2fpkt"];
9857--11382[label="0.047619;1pkt 1fpkt"];
9857--11392[label="0.0952381;2pkt 2fpkt"];
9857--12896[label="0.230769;3pkt 3fpkt"];
9857--17774[label="0.285714;4pkt 4fpkt"];
9857--20938[label="0.285714;4pkt 4fpkt"];
12238--17368[label="1;4pkt 4fpkt"];
12896--17774[label="1;13pkt 13fpkt"];
12896--20938[label="1;13pkt 13fpkt"];
14460--18778[label="1;2pkt 2fpkt"];
14460--21647[label="1;2pkt 2fpkt"];
16007--19783[label="1;4pkt 4fpkt"];
17774--20938[label="1;14pkt 14fpkt"];
18778--21647[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.66.182" dst_port="80"/>
      <filter dst_ip="169.6.82.53" dst_port="80" src_ip="201.66.52.66"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.48598,2.94223,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1935{
style=filled;
color=gray75;
252[label="201.67.35.223;d;4039pkt 4039fpkt", shape=diamond, color=yellow];
1324[label="201.67.26.163;d;546pkt 546fpkt", shape=diamond, color=yellow];
1402[label="172.159.122.44;d;608pkt 608fpkt", shape=diamond, color=yellow];
1519[label="210.87.115.98;s;261pkt 261fpkt", shape=diamond, color=yellow];
1751[label="61.60.98.21;s;10pkt 10fpkt", shape=diamond, color=yellow];
1912[label="134.71.200.107;d;134pkt 134fpkt", shape=diamond, color=yellow];
2594[label="210.129.66.105;s;39pkt 39fpkt", shape=diamond, color=yellow];
2640[label="206.209.100.162;s;90pkt 90fpkt", shape=diamond, color=yellow];
2817[label="209.50.120.150;s;163pkt 163fpkt", shape=diamond, color=yellow];
2903[label="201.176.129.53;s;15pkt 15fpkt", shape=diamond, color=yellow];
3047[label="134.71.64.42;d;150pkt 150fpkt", shape=diamond, color=yellow];
3262[label="81.58.181.112;s;2pkt 2fpkt", shape=diamond, color=yellow];
3760[label="169.6.115.9;d;59pkt 59fpkt", shape=diamond, color=yellow];
4047[label="62.146.7.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
4170[label="210.128.92.143;s;15pkt 15fpkt", shape=diamond, color=yellow];
4366[label="200.173.67.72;d;45pkt 45fpkt", shape=diamond, color=yellow];
4411[label="169.6.70.154;d;19pkt 19fpkt", shape=diamond, color=yellow];
4556[label="169.6.70.162;d;182pkt 182fpkt", shape=diamond, color=yellow];
4591[label="58.181.233.144;s;32pkt 32fpkt", shape=diamond, color=yellow];
4853[label="112.228.145.214;s;34pkt 34fpkt", shape=diamond, color=yellow];
5144[label="201.197.55.226;s;12pkt 12fpkt", shape=diamond, color=yellow];
5276[label="61.60.98.12;s;56pkt 56fpkt", shape=diamond, color=yellow];
5341[label="62.27.179.139;s;9pkt 9fpkt", shape=diamond, color=yellow];
5351[label="62.102.15.192;s;7pkt 7fpkt", shape=diamond, color=yellow];
5490[label="169.6.128.161;d;41pkt 41fpkt", shape=diamond, color=yellow];
5630[label="169.6.155.130;d;63pkt 63fpkt", shape=diamond, color=yellow];
5933[label="75.7.129.168;s;5pkt 5fpkt", shape=diamond, color=yellow];
6024[label="75.7.129.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
6233[label="210.87.113.102;s;234pkt 234fpkt", shape=diamond, color=yellow];
6532[label="81.167.130.155;s;15pkt 15fpkt", shape=diamond, color=yellow];
7161[label="169.6.186.75;d;5pkt 5fpkt", shape=diamond, color=yellow];
7180[label="175.61.111.28;s;16pkt 16fpkt", shape=diamond, color=yellow];
7215[label="201.66.109.52;s;8pkt 8fpkt", shape=diamond, color=yellow];
7216[label="201.75.164.96;d;9pkt 9fpkt", shape=diamond, color=yellow];
7229[label="201.148.66.6;s;19pkt 19fpkt", shape=diamond, color=yellow];
7231[label="201.75.184.190;d;17pkt 17fpkt", shape=diamond, color=yellow];
7876[label="210.87.115.98;s;261pkt 261fpkt", shape=hexagon, color=black];
8032[label="210.129.66.105;s;38pkt 38fpkt", shape=hexagon, color=black];
8138[label="209.50.120.150;s;60pkt 60fpkt", shape=hexagon, color=black];
8141[label="201.67.26.163;d;478pkt 478fpkt", shape=hexagon, color=black];
8151[label="172.159.122.44;d;346pkt 346fpkt", shape=hexagon, color=black];
9060[label="200.173.67.72;d;45pkt 45fpkt", shape=hexagon, color=black];
9604[label="134.71.200.107;d;133pkt 133fpkt", shape=hexagon, color=black];
9964[label="58.181.233.144;s;31pkt 31fpkt", shape=hexagon, color=black];
10381[label="201.197.55.226;s;12pkt 12fpkt", shape=hexagon, color=black];
10392[label="169.6.70.162;d;164pkt 164fpkt", shape=hexagon, color=black];
10455[label="81.167.130.155;s;15pkt 15fpkt", shape=hexagon, color=black];
10808[label="169.6.115.9;d;59pkt 59fpkt", shape=hexagon, color=black];
10878[label="175.61.111.28;s;17pkt 17fpkt", shape=hexagon, color=black];
10892[label="201.148.66.6;s;19pkt 19fpkt", shape=hexagon, color=black];
12104[label="175.61.111.28;43pkt 43fpkt", shape=pentagon, color=darkviolet];
12305[label="108.153.67.37;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12323[label="212.16.13.38;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12509[label="61.60.98.46;36pkt 36fpkt", shape=pentagon, color=darkviolet];
12641[label="201.202.182.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12842[label="172.90.83.64;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12844[label="204.148.112.64;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12915[label="209.50.37.67;65pkt 65fpkt", shape=pentagon, color=darkviolet];
12975[label="210.87.115.69;44pkt 44fpkt", shape=pentagon, color=darkviolet];
12999[label="210.87.115.70;50pkt 50fpkt", shape=pentagon, color=darkviolet];
13278[label="82.169.199.82;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13608[label="82.132.20.98;53pkt 53fpkt", shape=pentagon, color=darkviolet];
13724[label="212.85.72.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13760[label="210.129.66.104;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13766[label="201.2.95.104;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13783[label="209.50.43.105;75pkt 75fpkt", shape=pentagon, color=darkviolet];
13808[label="210.176.195.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13929[label="81.58.181.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13963[label="204.148.103.114;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13996[label="213.154.113.116;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14239[label="192.104.226.128;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14295[label="62.146.7.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14479[label="209.50.43.139;32pkt 32fpkt", shape=pentagon, color=darkviolet];
14516[label="212.56.43.141;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14628[label="219.13.212.145;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14858[label="81.167.130.155;27pkt 27fpkt", shape=pentagon, color=darkviolet];
14907[label="213.160.166.157;60pkt 60fpkt", shape=pentagon, color=darkviolet];
14966[label="206.209.100.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15102[label="201.202.178.165;32pkt 32fpkt", shape=pentagon, color=darkviolet];
15171[label="75.7.129.168;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15310[label="197.253.218.174;5pkt 5fpkt", shape=pentagon, color=darkviolet];
15411[label="210.129.66.179;30pkt 30fpkt", shape=pentagon, color=darkviolet];
15617[label="212.16.3.188;19pkt 19fpkt", shape=pentagon, color=darkviolet];
15679[label="62.102.15.192;7pkt 7fpkt", shape=pentagon, color=darkviolet];
15796[label="171.168.133.197;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15847[label="209.50.120.200;15pkt 15fpkt", shape=pentagon, color=darkviolet];
15871[label="116.167.222.201;13pkt 13fpkt", shape=pentagon, color=darkviolet];
16067[label="1.80.210.210;3pkt 3fpkt", shape=pentagon, color=darkviolet];
16147[label="112.228.145.214;40pkt 40fpkt", shape=pentagon, color=darkviolet];
16162[label="197.108.165.215;12pkt 12fpkt", shape=pentagon, color=darkviolet];
16197[label="136.101.132.217;47pkt 47fpkt", shape=pentagon, color=darkviolet];
16284[label="208.29.94.221;27pkt 27fpkt", shape=pentagon, color=darkviolet];
16590[label="165.88.38.240;50pkt 50fpkt", shape=pentagon, color=darkviolet];
17289[label="175.61.111.28;42pkt 42fpkt", shape=invtriangle, color=brown];
17404[label="108.153.67.37;6pkt 6fpkt", shape=invtriangle, color=brown];
17421[label="212.16.13.38;3pkt 3fpkt", shape=invtriangle, color=brown];
17541[label="61.60.98.46;37pkt 37fpkt", shape=invtriangle, color=brown];
17618[label="201.202.182.52;2pkt 2fpkt", shape=invtriangle, color=brown];
17739[label="172.90.83.64;10pkt 10fpkt", shape=invtriangle, color=brown];
17741[label="204.148.112.64;4pkt 4fpkt", shape=invtriangle, color=brown];
17785[label="209.50.37.67;64pkt 64fpkt", shape=invtriangle, color=brown];
17829[label="210.87.115.69;44pkt 44fpkt", shape=invtriangle, color=brown];
18241[label="82.132.20.98;54pkt 54fpkt", shape=invtriangle, color=brown];
18332[label="201.2.95.104;20pkt 20fpkt", shape=invtriangle, color=brown];
18340[label="209.50.43.105;75pkt 75fpkt", shape=invtriangle, color=brown];
18356[label="210.176.195.106;1pkt 1fpkt", shape=invtriangle, color=brown];
18428[label="81.58.181.112;1pkt 1fpkt", shape=invtriangle, color=brown];
18454[label="204.148.103.114;11pkt 11fpkt", shape=invtriangle, color=brown];
18793[label="209.50.43.139;32pkt 32fpkt", shape=invtriangle, color=brown];
18820[label="212.56.43.141;4pkt 4fpkt", shape=invtriangle, color=brown];
18883[label="219.13.212.145;2pkt 2fpkt", shape=invtriangle, color=brown];
19035[label="81.167.130.155;26pkt 26fpkt", shape=invtriangle, color=brown];
19066[label="213.160.166.157;59pkt 59fpkt", shape=invtriangle, color=brown];
19111[label="206.209.100.160;1pkt 1fpkt", shape=invtriangle, color=brown];
19318[label="197.253.218.174;5pkt 5fpkt", shape=invtriangle, color=brown];
19384[label="210.129.66.179;30pkt 30fpkt", shape=invtriangle, color=brown];
19517[label="212.16.3.188;19pkt 19fpkt", shape=invtriangle, color=brown];
19640[label="171.168.133.197;4pkt 4fpkt", shape=invtriangle, color=brown];
19676[label="209.50.120.200;15pkt 15fpkt", shape=invtriangle, color=brown];
19692[label="116.167.222.201;13pkt 13fpkt", shape=invtriangle, color=brown];
19818[label="1.80.210.210;3pkt 3fpkt", shape=invtriangle, color=brown];
19870[label="112.228.145.214;40pkt 40fpkt", shape=invtriangle, color=brown];
19894[label="136.101.132.217;46pkt 46fpkt", shape=invtriangle, color=brown];
19950[label="208.29.94.221;28pkt 28fpkt", shape=invtriangle, color=brown];
20149[label="165.88.38.240;49pkt 49fpkt", shape=invtriangle, color=brown];
20691[label="108.153.67.37;5pkt 5fpkt", shape=invhouse, color=bisque];
20703[label="212.16.13.38;3pkt 3fpkt", shape=invhouse, color=bisque];
20781[label="61.60.98.46;36pkt 36fpkt", shape=invhouse, color=bisque];
20916[label="204.148.112.64;5pkt 5fpkt", shape=invhouse, color=bisque];
20945[label="209.50.37.67;65pkt 65fpkt", shape=invhouse, color=bisque];
20981[label="210.87.115.69;43pkt 43fpkt", shape=invhouse, color=bisque];
21277[label="82.132.20.98;53pkt 53fpkt", shape=invhouse, color=bisque];
21335[label="201.2.95.104;20pkt 20fpkt", shape=invhouse, color=bisque];
21397[label="81.58.181.112;2pkt 2fpkt", shape=invhouse, color=bisque];
21419[label="204.148.103.114;11pkt 11fpkt", shape=invhouse, color=bisque];
21661[label="209.50.43.139;31pkt 31fpkt", shape=invhouse, color=bisque];
21679[label="212.56.43.141;5pkt 5fpkt", shape=invhouse, color=bisque];
21717[label="219.13.212.145;1pkt 1fpkt", shape=invhouse, color=bisque];
21827[label="81.167.130.155;27pkt 27fpkt", shape=invhouse, color=bisque];
21844[label="213.160.166.157;60pkt 60fpkt", shape=invhouse, color=bisque];
21874[label="206.209.100.160;1pkt 1fpkt", shape=invhouse, color=bisque];
22164[label="212.16.3.188;19pkt 19fpkt", shape=invhouse, color=bisque];
22277[label="209.50.120.200;16pkt 16fpkt", shape=invhouse, color=bisque];
22292[label="116.167.222.201;13pkt 13fpkt", shape=invhouse, color=bisque];
22415[label="112.228.145.214;39pkt 39fpkt", shape=invhouse, color=bisque];
22434[label="136.101.132.217;46pkt 46fpkt", shape=invhouse, color=bisque];
22627[label="165.88.38.240;49pkt 49fpkt", shape=invhouse, color=bisque];
stat1935[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 201.67.35.223:*}[47.7104%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5502%)&lt;BR/&gt; 53: (2.93196%)&lt;BR/&gt; 0: (2.1206%)&lt;BR/&gt; 36906: (2.11599%)&lt;BR/&gt; 443: (1.34151%)&gt;];
}
252--256[label="0.0438871;14pkt 14fpkt"];
252--259[label="0.0178138;22pkt 22fpkt"];
252--264[label="0.101833;50pkt 50fpkt"];
252--293[label="0.0376106;34pkt 34fpkt"];
252--298[label="0.0486258;46pkt 46fpkt"];
252--352[label="0.00689655;1pkt 1fpkt"];
252--379[label="0.00949367;3pkt 3fpkt"];
252--397[label="0.0118577;3pkt 3fpkt"];
252--415[label="0.0803571;9pkt 9fpkt"];
252--517[label="0.0101095;12pkt 12fpkt"];
252--633[label="0.00653595;2pkt 2fpkt"];
252--655[label="0.011194;3pkt 3fpkt"];
252--703[label="0.0261248;36pkt 36fpkt"];
252--734[label="0.0270506;31pkt 31fpkt"];
252--753[label="0.020202;2pkt 2fpkt"];
252--791[label="0.0603015;12pkt 12fpkt"];
252--902[label="0.0972222;70pkt 70fpkt"];
252--963[label="0.00954654;8pkt 8fpkt"];
252--979[label="0.0252294;11pkt 11fpkt"];
252--981[label="0.0767932;91pkt 91fpkt"];
252--1025[label="0.0428287;43pkt 43fpkt"];
252--1027[label="0.00581395;8pkt 8fpkt"];
252--1055[label="0.0237581;33pkt 33fpkt"];
252--1095[label="0.00873999;12pkt 12fpkt"];
252--1120[label="0.0113636;8pkt 8fpkt"];
252--1134[label="0.0307287;35pkt 35fpkt"];
252--1173[label="0.0257511;42pkt 42fpkt"];
252--1176[label="0.00925926;1pkt 1fpkt"];
252--1202[label="0.046595;13pkt 13fpkt"];
252--1206[label="0.0441542;71pkt 71fpkt"];
252--1211[label="0.0124224;2pkt 2fpkt"];
252--1224[label="0.017673;12pkt 12fpkt"];
252--1233[label="0.0784314;8pkt 8fpkt"];
252--1262[label="0.00560748;3pkt 3fpkt"];
252--1271[label="0.0392157;4pkt 4fpkt"];
252--1296[label="0.0719844;37pkt 37fpkt"];
252--1316[label="0.00526316;1pkt 1fpkt"];
252--1320[label="0.00911854;3pkt 3fpkt"];
252--1331[label="0.0333333;4pkt 4fpkt"];
252--1335[label="0.0129032;4pkt 4fpkt"];
252--1339[label="0.0278405;37pkt 37fpkt"];
252--1367[label="0.0196721;24pkt 24fpkt"];
252--1373[label="0.0351351;13pkt 13fpkt"];
252--1388[label="0.0288714;11pkt 11fpkt"];
252--1410[label="0.00431034;1pkt 1fpkt"];
252--1435[label="0.0507246;7pkt 7fpkt"];
252--1440[label="0.147903;67pkt 67fpkt"];
252--1441[label="0.108333;26pkt 26fpkt"];
252--1466[label="0.0663265;13pkt 13fpkt"];
252--1477[label="0.0156794;9pkt 9fpkt"];
252--1501[label="0.0372439;20pkt 20fpkt"];
252--1506[label="0.0205479;27pkt 27fpkt"];
252--1509[label="0.0385396;19pkt 19fpkt"];
252--1519[label="0.977011;255pkt 255fpkt"];
252--1538[label="0.0204082;27pkt 27fpkt"];
252--1655[label="0.25;1pkt 1fpkt"];
252--1751[label="0.4;4pkt 4fpkt"];
252--1765[label="0.0350877;2pkt 2fpkt"];
252--1770[label="0.0526316;1pkt 1fpkt"];
252--1801[label="0.0357143;1pkt 1fpkt"];
252--1806[label="0.0108588;11pkt 11fpkt"];
252--1815[label="0.0597015;16pkt 16fpkt"];
252--1832[label="0.0921986;13pkt 13fpkt"];
252--1874[label="0.00220264;1pkt 1fpkt"];
252--1878[label="0.01;3pkt 3fpkt"];
252--1887[label="0.00341297;1pkt 1fpkt"];
252--1963[label="0.0135135;1pkt 1fpkt"];
252--1977[label="0.25;1pkt 1fpkt"];
252--2042[label="0.0307329;13pkt 13fpkt"];
252--2052[label="0.0127389;4pkt 4fpkt"];
252--2075[label="0.032;28pkt 28fpkt"];
252--2204[label="0.0140704;14pkt 14fpkt"];
252--2247[label="0.0135135;4pkt 4fpkt"];
252--2284[label="0.02;3pkt 3fpkt"];
252--2306[label="0.0375;3pkt 3fpkt"];
252--2396[label="0.0526316;2pkt 2fpkt"];
252--2505[label="0.388889;14pkt 14fpkt"];
252--2594[label="1;39pkt 39fpkt"];
252--2621[label="0.00796813;2pkt 2fpkt"];
252--2632[label="0.00795756;3pkt 3fpkt"];
252--2637[label="0.0102389;3pkt 3fpkt"];
252--2649[label="0.000354862;1pkt 1fpkt"];
252--2700[label="0.014218;3pkt 3fpkt"];
252--2706[label="0.0186047;4pkt 4fpkt"];
252--2746[label="0.0222222;8pkt 8fpkt"];
252--2783[label="0.031348;10pkt 10fpkt"];
252--2817[label="0.0920245;15pkt 15fpkt"];
252--2848[label="0.139344;17pkt 17fpkt"];
252--2857[label="0.0514706;7pkt 7fpkt"];
252--2895[label="0.129032;28pkt 28fpkt"];
252--2902[label="0.0735294;5pkt 5fpkt"];
252--2903[label="1;15pkt 15fpkt"];
252--2916[label="0.0793651;5pkt 5fpkt"];
252--2921[label="0.0185185;1pkt 1fpkt"];
252--2938[label="0.047619;2pkt 2fpkt"];
252--3038[label="0.108108;4pkt 4fpkt"];
252--3262[label="1;2pkt 2fpkt"];
252--3282[label="0.0357143;1pkt 1fpkt"];
252--3298[label="0.0454545;1pkt 1fpkt"];
252--3312[label="0.0441176;3pkt 3fpkt"];
252--3331[label="0.282609;13pkt 13fpkt"];
252--3358[label="0.0139535;3pkt 3fpkt"];
252--3391[label="0.015544;3pkt 3fpkt"];
252--3463[label="0.0391459;11pkt 11fpkt"];
252--3497[label="0.040201;16pkt 16fpkt"];
252--3543[label="0.00796813;2pkt 2fpkt"];
252--3625[label="0.138462;9pkt 9fpkt"];
252--3632[label="0.181818;14pkt 14fpkt"];
252--3639[label="0.00847458;1pkt 1fpkt"];
252--3778[label="0.000247586;1pkt 1fpkt"];
252--3956[label="0.0277778;1pkt 1fpkt"];
252--4026[label="0.259259;7pkt 7fpkt"];
252--4034[label="0.00995025;2pkt 2fpkt"];
252--4047[label="1;1pkt 1fpkt"];
252--4072[label="0.0128205;1pkt 1fpkt"];
252--4085[label="0.0117647;1pkt 1fpkt"];
252--4123[label="0.0909091;16pkt 16fpkt"];
252--4148[label="0.0344828;1pkt 1fpkt"];
252--4173[label="0.0175439;3pkt 3fpkt"];
252--4177[label="0.047619;2pkt 2fpkt"];
252--4276[label="0.0813953;7pkt 7fpkt"];
252--4714[label="0.0285714;2pkt 2fpkt"];
252--4755[label="0.0206897;3pkt 3fpkt"];
252--4809[label="0.222798;43pkt 43fpkt"];
252--4814[label="0.0441176;3pkt 3fpkt"];
252--4853[label="0.352941;12pkt 12fpkt"];
252--4869[label="0.0909091;1pkt 1fpkt"];
252--4897[label="0.0875;14pkt 14fpkt"];
252--4934[label="0.0136986;1pkt 1fpkt"];
252--5061[label="0.0769231;4pkt 4fpkt"];
252--5144[label="1;12pkt 12fpkt"];
252--5326[label="0.0462185;11pkt 11fpkt"];
252--5328[label="0.036036;8pkt 8fpkt"];
252--5341[label="1;9pkt 9fpkt"];
252--5351[label="0.285714;2pkt 2fpkt"];
252--5434[label="0.027933;5pkt 5fpkt"];
252--5457[label="0.253731;17pkt 17fpkt"];
252--5548[label="0.0740741;4pkt 4fpkt"];
252--5572[label="0.00775194;1pkt 1fpkt"];
252--5625[label="0.180556;13pkt 13fpkt"];
252--5715[label="0.0540541;2pkt 2fpkt"];
252--5784[label="0.125;1pkt 1fpkt"];
252--5933[label="0.2;1pkt 1fpkt"];
252--5952[label="0.0102389;3pkt 3fpkt"];
252--5964[label="0.00787402;1pkt 1fpkt"];
252--5983[label="0.0288509;59pkt 59fpkt"];
252--6024[label="1;1pkt 1fpkt"];
252--6122[label="0.142857;3pkt 3fpkt"];
252--6137[label="0.00819672;1pkt 1fpkt"];
252--6203[label="0.0125;1pkt 1fpkt"];
252--6233[label="0.957265;224pkt 224fpkt"];
252--6244[label="0.583333;14pkt 14fpkt"];
252--6305[label="0.1875;6pkt 6fpkt"];
252--6515[label="0.0280374;6pkt 6fpkt"];
252--6520[label="0.0465116;2pkt 2fpkt"];
252--6526[label="0.0116822;10pkt 10fpkt"];
252--6532[label="0.133333;2pkt 2fpkt"];
252--6554[label="0.0625;2pkt 2fpkt"];
252--6555[label="0.0285714;1pkt 1fpkt"];
252--6767[label="0.0909091;1pkt 1fpkt"];
252--6809[label="0.0119048;1pkt 1fpkt"];
252--6868[label="0.076087;7pkt 7fpkt"];
252--6881[label="0.010989;1pkt 1fpkt"];
252--6898[label="0.0120482;1pkt 1fpkt"];
252--7180[label="0.1875;3pkt 3fpkt"];
252--7229[label="1;19pkt 19fpkt"];
252--7373[label="0.0723684;11pkt 11fpkt"];
252--7423[label="0.0205714;18pkt 18fpkt"];
252--7438[label="0.020202;2pkt 2fpkt"];
252--7568[label="0.00757576;1pkt 1fpkt"];
252--7725[label="0.0135135;1pkt 1fpkt"];
252--7745[label="0.00985222;8pkt 8fpkt"];
252--7778[label="0.0242424;4pkt 4fpkt"];
252--7824[label="0.0322581;6pkt 6fpkt"];
252--7876[label="0.977011;255pkt 255fpkt"];
252--7966[label="0.0740741;2pkt 2fpkt"];
252--8028[label="0.0357143;1pkt 1fpkt"];
252--8032[label="1;38pkt 38fpkt"];
252--8079[label="0.01;3pkt 3fpkt"];
252--8138[label="0.1;6pkt 6fpkt"];
252--8142[label="0.0350877;4pkt 4fpkt"];
252--8143[label="0.0215054;4pkt 4fpkt"];
252--8245[label="0.05;1pkt 1fpkt"];
252--8302[label="0.0124224;2pkt 2fpkt"];
252--8357[label="0.0269504;19pkt 19fpkt"];
252--8375[label="0.0307287;35pkt 35fpkt"];
252--8396[label="0.020202;2pkt 2fpkt"];
252--8404[label="0.0180723;3pkt 3fpkt"];
252--8473[label="0.0793651;5pkt 5fpkt"];
252--8615[label="0.000247586;1pkt 1fpkt"];
252--8640[label="0.08;2pkt 2fpkt"];
252--8783[label="0.269231;7pkt 7fpkt"];
252--8880[label="0.0514706;7pkt 7fpkt"];
252--8970[label="0.0211864;15pkt 15fpkt"];
252--8974[label="0.0232558;3pkt 3fpkt"];
252--8999[label="0.0375;3pkt 3fpkt"];
252--9029[label="0.166667;3pkt 3fpkt"];
252--9229[label="0.0865385;9pkt 9fpkt"];
252--9231[label="0.0952381;10pkt 10fpkt"];
252--9233[label="0.0108588;11pkt 11fpkt"];
252--9259[label="0.0102389;3pkt 3fpkt"];
252--9284[label="0.0184049;3pkt 3fpkt"];
252--9285[label="0.0163934;3pkt 3fpkt"];
252--9300[label="0.0070922;1pkt 1fpkt"];
252--9326[label="0.0238095;2pkt 2fpkt"];
252--9338[label="0.0280269;25pkt 25fpkt"];
252--9404[label="0.181818;14pkt 14fpkt"];
252--9471[label="0.565217;13pkt 13fpkt"];
252--9588[label="0.0298507;2pkt 2fpkt"];
252--9592[label="0.00795756;3pkt 3fpkt"];
252--9622[label="0.00173913;2pkt 2fpkt"];
252--9656[label="0.045045;10pkt 10fpkt"];
252--9661[label="0.0488189;62pkt 62fpkt"];
252--9666[label="0.00636943;1pkt 1fpkt"];
252--9692[label="0.0391459;11pkt 11fpkt"];
252--9760[label="0.0555556;8pkt 8fpkt"];
252--9765[label="0.120879;22pkt 22fpkt"];
252--9777[label="0.00804829;4pkt 4fpkt"];
252--9784[label="0.047619;2pkt 2fpkt"];
252--9787[label="0.0386847;20pkt 20fpkt"];
252--10060[label="0.0102389;3pkt 3fpkt"];
252--10098[label="0.0108588;11pkt 11fpkt"];
252--10131[label="0.0603015;12pkt 12fpkt"];
252--10134[label="0.00380228;1pkt 1fpkt"];
252--10164[label="0.293103;17pkt 17fpkt"];
252--10205[label="0.0119048;1pkt 1fpkt"];
252--10213[label="0.0719844;37pkt 37fpkt"];
252--10223[label="0.00993377;3pkt 3fpkt"];
252--10239[label="0.0344828;1pkt 1fpkt"];
252--10241[label="0.0268657;9pkt 9fpkt"];
252--10254[label="0.0175439;3pkt 3fpkt"];
252--10259[label="0.0140704;14pkt 14fpkt"];
252--10292[label="0.180556;13pkt 13fpkt"];
252--10293[label="0.583333;14pkt 14fpkt"];
252--10321[label="0.1875;6pkt 6fpkt"];
252--10381[label="1;12pkt 12fpkt"];
252--10452[label="0.00787402;1pkt 1fpkt"];
252--10455[label="0.133333;2pkt 2fpkt"];
252--10508[label="0.0277778;1pkt 1fpkt"];
252--10574[label="0.142857;3pkt 3fpkt"];
252--10606[label="0.0909091;16pkt 16fpkt"];
252--10619[label="0.139344;17pkt 17fpkt"];
252--10644[label="0.00775194;1pkt 1fpkt"];
252--10653[label="0.0125;1pkt 1fpkt"];
252--10735[label="0.0769231;4pkt 4fpkt"];
252--10816[label="0.0280374;6pkt 6fpkt"];
252--10832[label="0.0625;2pkt 2fpkt"];
252--10878[label="0.176471;3pkt 3fpkt"];
252--10892[label="1;19pkt 19fpkt"];
252--10949[label="0.0217391;1pkt 1fpkt"];
252--11020[label="0.000247586;1pkt 1fpkt"];
252--11129[label="0.00804829;4pkt 4fpkt"];
252--11131[label="0.0252101;3pkt 3fpkt"];
252--11159[label="0.0108588;11pkt 11fpkt"];
252--11297[label="0.000247586;1pkt 1fpkt"];
252--11311[label="0.0349096;141pkt 141fpkt"];
252--11318[label="0.0235207;95pkt 95fpkt"];
252--11348[label="0.0482793;195pkt 195fpkt"];
252--11356[label="0.000247586;1pkt 1fpkt"];
252--11370[label="0.0349096;141pkt 141fpkt"];
252--11372[label="0.0235207;95pkt 95fpkt"];
252--11389[label="0.0482793;195pkt 195fpkt"];
252--11396[label="0.000247586;1pkt 1fpkt"];
252--11397[label="0.0349096;141pkt 141fpkt"];
252--11399[label="0.0235207;95pkt 95fpkt"];
252--11532[label="0.0422535;3pkt 3fpkt"];
252--11537[label="0.0111421;4pkt 4fpkt"];
252--11543[label="0.0833333;3pkt 3fpkt"];
252--11565[label="0.0350877;2pkt 2fpkt"];
252--11584[label="0.114286;4pkt 4fpkt"];
252--11615[label="0.00507614;1pkt 1fpkt"];
252--11683[label="0.193548;6pkt 6fpkt"];
252--11768[label="0.0472973;7pkt 7fpkt"];
252--11770[label="0.0131579;1pkt 1fpkt"];
252--11869[label="0.0769231;4pkt 4fpkt"];
252--11961[label="0.000247586;1pkt 1fpkt"];
252--11970[label="0.0153846;1pkt 1fpkt"];
252--12009[label="0.0344828;1pkt 1fpkt"];
252--12104[label="0.0697674;3pkt 3fpkt"];
252--12131[label="0.0512821;2pkt 2fpkt"];
252--12305[label="0.6;3pkt 3fpkt"];
252--12340[label="0.269231;7pkt 7fpkt"];
252--12470[label="0.0677966;4pkt 4fpkt"];
252--12614[label="0.0416667;1pkt 1fpkt"];
252--12641[label="1;1pkt 1fpkt"];
252--12666[label="0.04;1pkt 1fpkt"];
252--12674[label="0.0217822;11pkt 11fpkt"];
252--12742[label="0.0263158;1pkt 1fpkt"];
252--12808[label="0.025641;1pkt 1fpkt"];
252--12820[label="0.0529595;17pkt 17fpkt"];
252--12842[label="0.777778;7pkt 7fpkt"];
252--12844[label="0.5;2pkt 2fpkt"];
252--12970[label="0.0224719;2pkt 2fpkt"];
252--12975[label="0.727273;32pkt 32fpkt"];
252--12996[label="0.0428571;3pkt 3fpkt"];
252--12999[label="0.98;49pkt 49fpkt"];
252--13112[label="0.03125;1pkt 1fpkt"];
252--13122[label="0.0172414;2pkt 2fpkt"];
252--13369[label="0.0175439;1pkt 1fpkt"];
252--13409[label="0.0365854;3pkt 3fpkt"];
252--13520[label="0.0733945;8pkt 8fpkt"];
252--13541[label="0.0615385;4pkt 4fpkt"];
252--13543[label="0.0294118;2pkt 2fpkt"];
252--13608[label="0.150943;8pkt 8fpkt"];
252--13634[label="0.0227273;2pkt 2fpkt"];
252--13755[label="0.00869565;1pkt 1fpkt"];
252--13760[label="1;14pkt 14fpkt"];
252--13766[label="0.947368;18pkt 18fpkt"];
252--13770[label="0.0465116;2pkt 2fpkt"];
252--13791[label="0.0373832;4pkt 4fpkt"];
252--13808[label="1;1pkt 1fpkt"];
252--13885[label="0.00653595;1pkt 1fpkt"];
252--13897[label="0.00666667;1pkt 1fpkt"];
252--13929[label="1;2pkt 2fpkt"];
252--13963[label="0.909091;10pkt 10fpkt"];
252--13981[label="0.0526316;2pkt 2fpkt"];
252--13996[label="0.0714286;1pkt 1fpkt"];
252--14019[label="0.03125;1pkt 1fpkt"];
252--14021[label="0.037037;1pkt 1fpkt"];
252--14023[label="0.0980392;5pkt 5fpkt"];
252--14103[label="0.0106383;8pkt 8fpkt"];
252--14148[label="0.0526316;1pkt 1fpkt"];
252--14205[label="0.0909091;1pkt 1fpkt"];
252--14239[label="0.625;5pkt 5fpkt"];
252--14260[label="0.0594059;12pkt 12fpkt"];
252--14286[label="0.00929152;8pkt 8fpkt"];
252--14295[label="1;1pkt 1fpkt"];
252--14399[label="0.0309278;3pkt 3fpkt"];
252--14448[label="0.0420865;71pkt 71fpkt"];
252--14463[label="0.00859599;3pkt 3fpkt"];
252--14508[label="0.0263158;1pkt 1fpkt"];
252--14510[label="0.0113636;1pkt 1fpkt"];
252--14516[label="1;5pkt 5fpkt"];
252--14536[label="0.03125;1pkt 1fpkt"];
252--14592[label="0.0181818;1pkt 1fpkt"];
252--14622[label="0.0769231;3pkt 3fpkt"];
252--14628[label="1;1pkt 1fpkt"];
252--14675[label="0.136364;6pkt 6fpkt"];
252--14777[label="0.0164179;22pkt 22fpkt"];
252--14797[label="0.030303;13pkt 13fpkt"];
252--14815[label="0.101167;26pkt 26fpkt"];
252--14858[label="0.111111;3pkt 3fpkt"];
252--14878[label="0.0280374;3pkt 3fpkt"];
252--14918[label="0.208333;10pkt 10fpkt"];
252--14958[label="0.294118;5pkt 5fpkt"];
252--14984[label="0.0238095;2pkt 2fpkt"];
252--15102[label="0.0625;2pkt 2fpkt"];
252--15106[label="0.0357143;2pkt 2fpkt"];
252--15171[label="0.2;1pkt 1fpkt"];
252--15262[label="0.01;12pkt 12fpkt"];
252--15272[label="0.00304878;1pkt 1fpkt"];
252--15297[label="0.5;1pkt 1fpkt"];
252--15309[label="0.00662252;1pkt 1fpkt"];
252--15310[label="1;5pkt 5fpkt"];
252--15325[label="0.0322581;13pkt 13fpkt"];
252--15364[label="0.117647;2pkt 2fpkt"];
252--15394[label="0.0864865;16pkt 16fpkt"];
252--15411[label="0.633333;19pkt 19fpkt"];
252--15422[label="0.1;1pkt 1fpkt"];
252--15465[label="0.0124224;2pkt 2fpkt"];
252--15556[label="0.030303;1pkt 1fpkt"];
252--15631[label="0.0117647;1pkt 1fpkt"];
252--15647[label="0.00746269;1pkt 1fpkt"];
252--15679[label="0.285714;2pkt 2fpkt"];
252--15695[label="0.0300429;35pkt 35fpkt"];
252--15704[label="0.047619;1pkt 1fpkt"];
252--15719[label="0.0123131;14pkt 14fpkt"];
252--15740[label="0.00724638;3pkt 3fpkt"];
252--15796[label="0.75;3pkt 3fpkt"];
252--15815[label="0.0129032;4pkt 4fpkt"];
252--15863[label="0.129771;17pkt 17fpkt"];
252--15889[label="0.0245614;42pkt 42fpkt"];
252--15986[label="0.0137615;3pkt 3fpkt"];
252--16030[label="0.010989;1pkt 1fpkt"];
252--16071[label="0.0869565;2pkt 2fpkt"];
252--16131[label="0.0371353;14pkt 14fpkt"];
252--16147[label="0.3;12pkt 12fpkt"];
252--16160[label="0.0431894;13pkt 13fpkt"];
252--16162[label="0.333333;4pkt 4fpkt"];
252--16197[label="0.659574;31pkt 31fpkt"];
252--16225[label="0.0555556;1pkt 1fpkt"];
252--16242[label="0.0121951;4pkt 4fpkt"];
252--16243[label="0.138462;9pkt 9fpkt"];
252--16309[label="0.034632;8pkt 8fpkt"];
252--16404[label="0.0322581;2pkt 2fpkt"];
252--16408[label="0.0810811;3pkt 3fpkt"];
252--16466[label="0.10142;50pkt 50fpkt"];
252--16524[label="0.0075188;1pkt 1fpkt"];
252--16530[label="0.0227273;1pkt 1fpkt"];
252--16590[label="0.98;49pkt 49fpkt"];
252--16624[label="0.133333;2pkt 2fpkt"];
252--16809[label="0.0222222;1pkt 1fpkt"];
252--16928[label="0.0111421;4pkt 4fpkt"];
252--16944[label="0.0350877;2pkt 2fpkt"];
252--17022[label="0.193548;6pkt 6fpkt"];
252--17069[label="0.0472973;7pkt 7fpkt"];
252--17070[label="0.0133333;1pkt 1fpkt"];
252--17134[label="0.0769231;4pkt 4fpkt"];
252--17191[label="0.000247586;1pkt 1fpkt"];
252--17223[label="0.0344828;1pkt 1fpkt"];
252--17289[label="0.0714286;3pkt 3fpkt"];
252--17404[label="0.666667;4pkt 4fpkt"];
252--17618[label="1;2pkt 2fpkt"];
252--17635[label="0.04;1pkt 1fpkt"];
252--17642[label="0.0218254;11pkt 11fpkt"];
252--17739[label="0.8;8pkt 8fpkt"];
252--17741[label="0.5;2pkt 2fpkt"];
252--17827[label="0.0224719;2pkt 2fpkt"];
252--17829[label="0.727273;32pkt 32fpkt"];
252--17844[label="0.0422535;3pkt 3fpkt"];
252--17918[label="0.030303;1pkt 1fpkt"];
252--18083[label="0.0175439;1pkt 1fpkt"];
252--18107[label="0.0365854;3pkt 3fpkt"];
252--18183[label="0.0740741;8pkt 8fpkt"];
252--18196[label="0.0289855;2pkt 2fpkt"];
252--18241[label="0.148148;8pkt 8fpkt"];
252--18257[label="0.0227273;2pkt 2fpkt"];
252--18326[label="0.00862069;1pkt 1fpkt"];
252--18332[label="0.9;18pkt 18fpkt"];
252--18334[label="0.0465116;2pkt 2fpkt"];
252--18343[label="0.037037;4pkt 4fpkt"];
252--18356[label="1;1pkt 1fpkt"];
252--18428[label="1;1pkt 1fpkt"];
252--18454[label="0.909091;10pkt 10fpkt"];
252--18466[label="0.0526316;2pkt 2fpkt"];
252--18541[label="0.0106383;8pkt 8fpkt"];
252--18634[label="0.03125;6pkt 6fpkt"];
252--18652[label="0.00929152;8pkt 8fpkt"];
252--18769[label="0.0420865;71pkt 71fpkt"];
252--18781[label="0.00859599;3pkt 3fpkt"];
252--18813[label="0.0263158;1pkt 1fpkt"];
252--18815[label="0.0113636;1pkt 1fpkt"];
252--18820[label="1;4pkt 4fpkt"];
252--18883[label="1;2pkt 2fpkt"];
252--18981[label="0.0164179;22pkt 22fpkt"];
252--18994[label="0.0302326;13pkt 13fpkt"];
252--19009[label="0.101562;26pkt 26fpkt"];
252--19035[label="0.115385;3pkt 3fpkt"];
252--19076[label="0.208333;10pkt 10fpkt"];
252--19192[label="0.0357143;2pkt 2fpkt"];
252--19291[label="0.0030581;1pkt 1fpkt"];
252--19317[label="0.00657895;1pkt 1fpkt"];
252--19318[label="1;5pkt 5fpkt"];
252--19329[label="0.0321782;13pkt 13fpkt"];
252--19384[label="0.633333;19pkt 19fpkt"];
252--19390[label="0.1;1pkt 1fpkt"];
252--19479[label="0.030303;1pkt 1fpkt"];
252--19536[label="0.00740741;1pkt 1fpkt"];
252--19574[label="0.0300429;35pkt 35fpkt"];
252--19581[label="0.0454545;1pkt 1fpkt"];
252--19593[label="0.0123131;14pkt 14fpkt"];
252--19604[label="0.00726392;3pkt 3fpkt"];
252--19640[label="0.75;3pkt 3fpkt"];
252--19654[label="0.0129032;4pkt 4fpkt"];
252--19687[label="0.130769;17pkt 17fpkt"];
252--19703[label="0.0245614;42pkt 42fpkt"];
252--19821[label="0.0909091;2pkt 2fpkt"];
252--19859[label="0.037037;14pkt 14fpkt"];
252--19870[label="0.3;12pkt 12fpkt"];
252--19894[label="0.673913;31pkt 31fpkt"];
252--19914[label="0.0526316;1pkt 1fpkt"];
252--19923[label="0.138462;9pkt 9fpkt"];
252--19968[label="0.034632;8pkt 8fpkt"];
252--20034[label="0.031746;2pkt 2fpkt"];
252--20074[label="0.101626;50pkt 50fpkt"];
252--20110[label="0.0227273;1pkt 1fpkt"];
252--20149[label="0.979592;48pkt 48fpkt"];
252--20170[label="0.133333;2pkt 2fpkt"];
252--20296[label="0.0227273;1pkt 1fpkt"];
252--20434[label="0.193548;6pkt 6fpkt"];
252--20467[label="0.0472973;7pkt 7fpkt"];
252--20468[label="0.0133333;1pkt 1fpkt"];
252--20511[label="0.0769231;4pkt 4fpkt"];
252--20548[label="0.000247586;1pkt 1fpkt"];
252--20691[label="0.6;3pkt 3fpkt"];
252--20849[label="0.0218254;11pkt 11fpkt"];
252--20916[label="0.4;2pkt 2fpkt"];
252--20979[label="0.0227273;2pkt 2fpkt"];
252--20981[label="0.744186;32pkt 32fpkt"];
252--20994[label="0.0428571;3pkt 3fpkt"];
252--21051[label="0.030303;1pkt 1fpkt"];
252--21171[label="0.0175439;1pkt 1fpkt"];
252--21237[label="0.0740741;8pkt 8fpkt"];
252--21245[label="0.0294118;2pkt 2fpkt"];
252--21277[label="0.150943;8pkt 8fpkt"];
252--21288[label="0.0224719;2pkt 2fpkt"];
252--21332[label="0.00869565;1pkt 1fpkt"];
252--21335[label="0.9;18pkt 18fpkt"];
252--21337[label="0.0465116;2pkt 2fpkt"];
252--21397[label="1;2pkt 2fpkt"];
252--21419[label="0.909091;10pkt 10fpkt"];
252--21558[label="0.00929152;8pkt 8fpkt"];
252--21650[label="0.00857143;3pkt 3fpkt"];
252--21674[label="0.025641;1pkt 1fpkt"];
252--21679[label="1;5pkt 5fpkt"];
252--21717[label="1;1pkt 1fpkt"];
252--21786[label="0.0164302;22pkt 22fpkt"];
252--21795[label="0.0302326;13pkt 13fpkt"];
252--21806[label="0.101167;26pkt 26fpkt"];
252--21827[label="0.111111;3pkt 3fpkt"];
252--21853[label="0.212766;10pkt 10fpkt"];
252--21934[label="0.0350877;2pkt 2fpkt"];
252--22003[label="0.00304878;1pkt 1fpkt"];
252--22021[label="0.00662252;1pkt 1fpkt"];
252--22028[label="0.0321782;13pkt 13fpkt"];
252--22065[label="0.0909091;1pkt 1fpkt"];
252--22136[label="0.030303;1pkt 1fpkt"];
252--22180[label="0.00746269;1pkt 1fpkt"];
252--22207[label="0.0300687;35pkt 35fpkt"];
252--22218[label="0.0123023;14pkt 14fpkt"];
252--22258[label="0.0129032;4pkt 4fpkt"];
252--22288[label="0.130769;17pkt 17fpkt"];
252--22383[label="0.0869565;2pkt 2fpkt"];
252--22415[label="0.307692;12pkt 12fpkt"];
252--22434[label="0.673913;31pkt 31fpkt"];
252--22451[label="0.0555556;1pkt 1fpkt"];
252--22457[label="0.136364;9pkt 9fpkt"];
252--22534[label="0.031746;2pkt 2fpkt"];
252--22566[label="0.10142;50pkt 50fpkt"];
252--22627[label="0.979592;48pkt 48fpkt"];
252--22733[label="0.0222222;1pkt 1fpkt"];
1324--1382[label="0.0175439;3pkt 3fpkt"];
1324--1501[label="0.0018622;1pkt 1fpkt"];
1324--1509[label="0.00608519;3pkt 3fpkt"];
1324--1538[label="0.0018315;1pkt 1fpkt"];
1324--1806[label="0.003663;2pkt 2fpkt"];
1324--1815[label="0.0186567;5pkt 5fpkt"];
1324--1878[label="0.00333333;1pkt 1fpkt"];
1324--1887[label="0.0170648;5pkt 5fpkt"];
1324--2042[label="0.00236407;1pkt 1fpkt"];
1324--2052[label="0.00636943;2pkt 2fpkt"];
1324--2190[label="0.0564103;11pkt 11fpkt"];
1324--2303[label="0.0360825;7pkt 7fpkt"];
1324--2306[label="0.0125;1pkt 1fpkt"];
1324--2746[label="0.00555556;2pkt 2fpkt"];
1324--2755[label="0.0474138;11pkt 11fpkt"];
1324--2783[label="0.00626959;2pkt 2fpkt"];
1324--2820[label="0.103704;14pkt 14fpkt"];
1324--2857[label="0.0220588;3pkt 3fpkt"];
1324--2895[label="0.0138249;3pkt 3fpkt"];
1324--2973[label="0.0555556;5pkt 5fpkt"];
1324--3463[label="0.00355872;1pkt 1fpkt"];
1324--3597[label="0.0833333;4pkt 4fpkt"];
1324--3625[label="0.0153846;1pkt 1fpkt"];
1324--3747[label="0.00662252;1pkt 1fpkt"];
1324--3778[label="0.0018315;1pkt 1fpkt"];
1324--4755[label="0.00689655;1pkt 1fpkt"];
1324--4853[label="0.0294118;1pkt 1fpkt"];
1324--4934[label="0.0136986;1pkt 1fpkt"];
1324--5434[label="0.00558659;1pkt 1fpkt"];
1324--5572[label="0.00775194;1pkt 1fpkt"];
1324--5743[label="0.0810811;3pkt 3fpkt"];
1324--6122[label="0.047619;1pkt 1fpkt"];
1324--6223[label="0.0810811;3pkt 3fpkt"];
1324--6868[label="0.0434783;4pkt 4fpkt"];
1324--6881[label="0.021978;2pkt 2fpkt"];
1324--6898[label="0.0481928;4pkt 4fpkt"];
1324--6951[label="0.0666667;3pkt 3fpkt"];
1324--7013[label="0.0434783;1pkt 1fpkt"];
1324--7031[label="0.0526316;1pkt 1fpkt"];
1324--7383[label="0.0566038;3pkt 3fpkt"];
1324--7423[label="0.0238095;13pkt 13fpkt"];
1324--7435[label="0.0018315;1pkt 1fpkt"];
1324--7789[label="0.043956;4pkt 4fpkt"];
1324--7829[label="0.0186335;3pkt 3fpkt"];
1324--7901[label="0.1;7pkt 7fpkt"];
1324--8079[label="0.00333333;1pkt 1fpkt"];
1324--8141[label="1;478pkt 478fpkt"];
1324--8357[label="0.0018315;1pkt 1fpkt"];
1324--8375[label="0.003663;2pkt 2fpkt"];
1324--8404[label="0.0060241;1pkt 1fpkt"];
1324--8455[label="0.111111;9pkt 9fpkt"];
1324--8506[label="0.0888889;4pkt 4fpkt"];
1324--8615[label="0.0018315;1pkt 1fpkt"];
1324--8880[label="0.0220588;3pkt 3fpkt"];
1324--8970[label="0.0018315;1pkt 1fpkt"];
1324--8999[label="0.0125;1pkt 1fpkt"];
1324--9656[label="0.00900901;2pkt 2fpkt"];
1324--9661[label="0.003663;2pkt 2fpkt"];
1324--9692[label="0.00355872;1pkt 1fpkt"];
1324--9787[label="0.00193424;1pkt 1fpkt"];
1324--10098[label="0.003663;2pkt 2fpkt"];
1324--10134[label="0.0190114;5pkt 5fpkt"];
1324--10213[label="0.00389105;2pkt 2fpkt"];
1324--10223[label="0.00331126;1pkt 1fpkt"];
1324--10279[label="0.0285714;1pkt 1fpkt"];
1324--10574[label="0.047619;1pkt 1fpkt"];
1324--10644[label="0.00775194;1pkt 1fpkt"];
1324--11020[label="0.0018315;1pkt 1fpkt"];
1324--11159[label="0.003663;2pkt 2fpkt"];
1324--11297[label="0.0018315;1pkt 1fpkt"];
1324--11348[label="0.0989011;54pkt 54fpkt"];
1324--11356[label="0.0018315;1pkt 1fpkt"];
1324--11389[label="0.0989011;54pkt 54fpkt"];
1324--11396[label="0.0018315;1pkt 1fpkt"];
1324--11543[label="0.0277778;1pkt 1fpkt"];
1324--11615[label="0.00507614;1pkt 1fpkt"];
1324--11770[label="0.0394737;3pkt 3fpkt"];
1324--11808[label="0.0263158;1pkt 1fpkt"];
1324--11869[label="0.0192308;1pkt 1fpkt"];
1324--11961[label="0.0018315;1pkt 1fpkt"];
1324--12560[label="0.0531915;5pkt 5fpkt"];
1324--12820[label="0.0155763;5pkt 5fpkt"];
1324--12972[label="0.0018315;1pkt 1fpkt"];
1324--12999[label="0.02;1pkt 1fpkt"];
1324--13278[label="0.916667;11pkt 11fpkt"];
1324--13409[label="0.0121951;1pkt 1fpkt"];
1324--13783[label="0.0533333;4pkt 4fpkt"];
1324--13935[label="0.0336538;7pkt 7fpkt"];
1324--14448[label="0.003663;2pkt 2fpkt"];
1324--14463[label="0.00286533;1pkt 1fpkt"];
1324--14479[label="0.15625;5pkt 5fpkt"];
1324--14510[label="0.0454545;4pkt 4fpkt"];
1324--14675[label="0.0227273;1pkt 1fpkt"];
1324--14680[label="0.0714286;3pkt 3fpkt"];
1324--14777[label="0.003663;2pkt 2fpkt"];
1324--14797[label="0.002331;1pkt 1fpkt"];
1324--14958[label="0.176471;3pkt 3fpkt"];
1324--15106[label="0.0178571;1pkt 1fpkt"];
1324--15153[label="0.0652174;3pkt 3fpkt"];
1324--15272[label="0.0152439;5pkt 5fpkt"];
1324--15364[label="0.117647;2pkt 2fpkt"];
1324--15442[label="0.0769231;4pkt 4fpkt"];
1324--15647[label="0.00746269;1pkt 1fpkt"];
1324--15695[label="0.003663;2pkt 2fpkt"];
1324--15740[label="0.00241546;1pkt 1fpkt"];
1324--15847[label="1;15pkt 15fpkt"];
1324--15871[label="0.230769;3pkt 3fpkt"];
1324--16131[label="0.00265252;1pkt 1fpkt"];
1324--16147[label="0.025;1pkt 1fpkt"];
1324--16160[label="0.00664452;2pkt 2fpkt"];
1324--16197[label="0.170213;8pkt 8fpkt"];
1324--16242[label="0.00609756;2pkt 2fpkt"];
1324--16243[label="0.0153846;1pkt 1fpkt"];
1324--17070[label="0.04;3pkt 3fpkt"];
1324--17094[label="0.0263158;1pkt 1fpkt"];
1324--17134[label="0.0192308;1pkt 1fpkt"];
1324--17191[label="0.0018315;1pkt 1fpkt"];
1324--17569[label="0.0526316;5pkt 5fpkt"];
1324--18107[label="0.0121951;1pkt 1fpkt"];
1324--18340[label="0.0533333;4pkt 4fpkt"];
1324--18433[label="0.0334928;7pkt 7fpkt"];
1324--18769[label="0.003663;2pkt 2fpkt"];
1324--18781[label="0.00286533;1pkt 1fpkt"];
1324--18793[label="0.15625;5pkt 5fpkt"];
1324--18815[label="0.0454545;4pkt 4fpkt"];
1324--18918[label="0.0714286;3pkt 3fpkt"];
1324--18981[label="0.003663;2pkt 2fpkt"];
1324--18994[label="0.00232558;1pkt 1fpkt"];
1324--19192[label="0.0178571;1pkt 1fpkt"];
1324--19264[label="0.0526316;3pkt 3fpkt"];
1324--19291[label="0.0152905;5pkt 5fpkt"];
1324--19536[label="0.00740741;1pkt 1fpkt"];
1324--19574[label="0.003663;2pkt 2fpkt"];
1324--19604[label="0.00242131;1pkt 1fpkt"];
1324--19676[label="1;15pkt 15fpkt"];
1324--19692[label="0.230769;3pkt 3fpkt"];
1324--19859[label="0.0026455;1pkt 1fpkt"];
1324--19870[label="0.025;1pkt 1fpkt"];
1324--19894[label="0.173913;8pkt 8fpkt"];
1324--19923[label="0.0153846;1pkt 1fpkt"];
1324--20468[label="0.04;3pkt 3fpkt"];
1324--20511[label="0.0192308;1pkt 1fpkt"];
1324--20548[label="0.0018315;1pkt 1fpkt"];
1324--20801[label="0.0526316;5pkt 5fpkt"];
1324--21401[label="0.0336538;7pkt 7fpkt"];
1324--21650[label="0.00285714;1pkt 1fpkt"];
1324--21661[label="0.16129;5pkt 5fpkt"];
1324--21786[label="0.003663;2pkt 2fpkt"];
1324--21795[label="0.00232558;1pkt 1fpkt"];
1324--21934[label="0.0175439;1pkt 1fpkt"];
1324--22003[label="0.0152439;5pkt 5fpkt"];
1324--22180[label="0.00746269;1pkt 1fpkt"];
1324--22207[label="0.003663;2pkt 2fpkt"];
1324--22277[label="0.9375;15pkt 15fpkt"];
1324--22292[label="0.230769;3pkt 3fpkt"];
1324--22415[label="0.025641;1pkt 1fpkt"];
1324--22434[label="0.173913;8pkt 8fpkt"];
1324--22457[label="0.0151515;1pkt 1fpkt"];
1402--1509[label="0.0243408;12pkt 12fpkt"];
1402--1548[label="0.00884956;2pkt 2fpkt"];
1402--1806[label="0.00328947;2pkt 2fpkt"];
1402--1874[label="0.0176211;8pkt 8fpkt"];
1402--1878[label="0.0266667;8pkt 8fpkt"];
1402--2042[label="0.0141844;6pkt 6fpkt"];
1402--2052[label="0.00636943;2pkt 2fpkt"];
1402--2075[label="0.00986842;6pkt 6fpkt"];
1402--2284[label="0.0266667;4pkt 4fpkt"];
1402--2706[label="0.00930233;2pkt 2fpkt"];
1402--2746[label="0.00833333;3pkt 3fpkt"];
1402--2857[label="0.213235;29pkt 29fpkt"];
1402--2916[label="0.0634921;4pkt 4fpkt"];
1402--2993[label="0.0232558;1pkt 1fpkt"];
1402--3158[label="0.25;3pkt 3fpkt"];
1402--3211[label="0.0234375;3pkt 3fpkt"];
1402--3463[label="0.00711744;2pkt 2fpkt"];
1402--3497[label="0.0251256;10pkt 10fpkt"];
1402--3543[label="0.00398406;1pkt 1fpkt"];
1402--4814[label="0.0588235;4pkt 4fpkt"];
1402--5276[label="1;56pkt 56fpkt"];
1402--5471[label="0.0666667;3pkt 3fpkt"];
1402--5967[label="0.12;3pkt 3fpkt"];
1402--5974[label="0.0235294;2pkt 2fpkt"];
1402--6515[label="0.046729;10pkt 10fpkt"];
1402--6519[label="0.136364;3pkt 3fpkt"];
1402--6520[label="0.0232558;1pkt 1fpkt"];
1402--6526[label="0.00986842;6pkt 6fpkt"];
1402--6550[label="0.368421;7pkt 7fpkt"];
1402--6555[label="0.0285714;1pkt 1fpkt"];
1402--7091[label="0.0588235;4pkt 4fpkt"];
1402--7423[label="0.00328947;2pkt 2fpkt"];
1402--7829[label="0.136646;22pkt 22fpkt"];
1402--7885[label="0.0105263;2pkt 2fpkt"];
1402--8079[label="0.0266667;8pkt 8fpkt"];
1402--8151[label="1;346pkt 346fpkt"];
1402--8357[label="0.00493421;3pkt 3fpkt"];
1402--8473[label="0.0634921;4pkt 4fpkt"];
1402--8880[label="0.213235;29pkt 29fpkt"];
1402--8974[label="0.0310078;4pkt 4fpkt"];
1402--9622[label="0.00164474;1pkt 1fpkt"];
1402--9656[label="0.0045045;1pkt 1fpkt"];
1402--9692[label="0.00711744;2pkt 2fpkt"];
1402--10098[label="0.00328947;2pkt 2fpkt"];
1402--10177[label="0.0681818;3pkt 3fpkt"];
1402--10241[label="0.0626866;21pkt 21fpkt"];
1402--10357[label="0.25;3pkt 3fpkt"];
1402--10463[label="0.166667;2pkt 2fpkt"];
1402--10816[label="0.046729;10pkt 10fpkt"];
1402--10827[label="0.0588235;4pkt 4fpkt"];
1402--11131[label="0.0336134;4pkt 4fpkt"];
1402--11159[label="0.00328947;2pkt 2fpkt"];
1402--11348[label="0.0378289;23pkt 23fpkt"];
1402--11389[label="0.0378289;23pkt 23fpkt"];
1402--11702[label="0.0384615;2pkt 2fpkt"];
1402--12509[label="0.583333;21pkt 21fpkt"];
1402--12996[label="0.0571429;4pkt 4fpkt"];
1402--13634[label="0.0909091;8pkt 8fpkt"];
1402--13770[label="0.162791;7pkt 7fpkt"];
1402--14003[label="0.0909091;2pkt 2fpkt"];
1402--14273[label="0.153846;2pkt 2fpkt"];
1402--14286[label="0.00328947;2pkt 2fpkt"];
1402--14399[label="0.0103093;1pkt 1fpkt"];
1402--14777[label="0.00657895;4pkt 4fpkt"];
1402--14797[label="0.013986;6pkt 6fpkt"];
1402--15102[label="0.03125;1pkt 1fpkt"];
1402--15248[label="0.130435;3pkt 3fpkt"];
1402--15352[label="0.0235294;2pkt 2fpkt"];
1402--15450[label="0.166667;2pkt 2fpkt"];
1402--15732[label="0.181818;2pkt 2fpkt"];
1402--15740[label="0.0193237;8pkt 8fpkt"];
1402--15871[label="0.230769;3pkt 3fpkt"];
1402--15925[label="0.0238095;1pkt 1fpkt"];
1402--16131[label="0.00795756;3pkt 3fpkt"];
1402--16152[label="0.0416667;3pkt 3fpkt"];
1402--16160[label="0.00664452;2pkt 2fpkt"];
1402--16242[label="0.00609756;2pkt 2fpkt"];
1402--16284[label="0.814815;22pkt 22fpkt"];
1402--16466[label="0.0020284;1pkt 1fpkt"];
1402--17034[label="0.0384615;2pkt 2fpkt"];
1402--17541[label="0.594595;22pkt 22fpkt"];
1402--17844[label="0.056338;4pkt 4fpkt"];
1402--18257[label="0.0909091;8pkt 8fpkt"];
1402--18334[label="0.162791;7pkt 7fpkt"];
1402--18480[label="0.0869565;2pkt 2fpkt"];
1402--18644[label="0.142857;2pkt 2fpkt"];
1402--18652[label="0.00328947;2pkt 2fpkt"];
1402--18981[label="0.00657895;4pkt 4fpkt"];
1402--18994[label="0.0139535;6pkt 6fpkt"];
1402--19346[label="0.0232558;2pkt 2fpkt"];
1402--19604[label="0.0193705;8pkt 8fpkt"];
1402--19692[label="0.230769;3pkt 3fpkt"];
1402--19727[label="0.0232558;1pkt 1fpkt"];
1402--19859[label="0.00793651;3pkt 3fpkt"];
1402--19950[label="0.785714;22pkt 22fpkt"];
1402--20074[label="0.00203252;1pkt 1fpkt"];
1402--20781[label="0.583333;21pkt 21fpkt"];
1402--20994[label="0.0571429;4pkt 4fpkt"];
1402--21288[label="0.0898876;8pkt 8fpkt"];
1402--21337[label="0.162791;7pkt 7fpkt"];
1402--21439[label="0.0869565;2pkt 2fpkt"];
1402--21552[label="0.142857;2pkt 2fpkt"];
1402--21558[label="0.00328947;2pkt 2fpkt"];
1402--21786[label="0.00657895;4pkt 4fpkt"];
1402--21795[label="0.0139535;6pkt 6fpkt"];
1402--22040[label="0.0235294;2pkt 2fpkt"];
1402--22292[label="0.230769;3pkt 3fpkt"];
1402--22315[label="0.0238095;1pkt 1fpkt"];
1402--22566[label="0.0020284;1pkt 1fpkt"];
1519--3959[label="0.00865801;2pkt 2fpkt"];
1519--7876[label="1;261pkt 261fpkt"];
1519--9224[label="0.00865801;2pkt 2fpkt"];
1912--2640[label="0.988889;89pkt 89fpkt"];
1912--9604[label="1;133pkt 133fpkt"];
1912--11348[label="0.0223881;3pkt 3fpkt"];
1912--11389[label="0.0223881;3pkt 3fpkt"];
2594--8032[label="1;38pkt 38fpkt"];
2640--3760[label="0.0169492;1pkt 1fpkt"];
2640--9604[label="0.977778;88pkt 88fpkt"];
2640--10808[label="0.0169492;1pkt 1fpkt"];
2640--11348[label="0.0333333;3pkt 3fpkt"];
2640--11389[label="0.0333333;3pkt 3fpkt"];
2817--3474[label="0.0153846;1pkt 1fpkt"];
2817--5418[label="0.00917431;1pkt 1fpkt"];
2817--5604[label="0.119048;5pkt 5fpkt"];
2817--5630[label="0.460317;29pkt 29fpkt"];
2817--6922[label="0.025641;1pkt 1fpkt"];
2817--6958[label="0.00787402;1pkt 1fpkt"];
2817--7403[label="0.0122699;2pkt 2fpkt"];
2817--8138[label="1;60pkt 60fpkt"];
2817--8333[label="0.0122699;2pkt 2fpkt"];
2817--8719[label="0.0393701;5pkt 5fpkt"];
2817--8854[label="0.0188679;1pkt 1fpkt"];
2817--10112[label="0.0245399;4pkt 4fpkt"];
2817--10513[label="0.00917431;1pkt 1fpkt"];
2817--10516[label="0.0122699;2pkt 2fpkt"];
2817--11119[label="0.0188679;1pkt 1fpkt"];
2903--11348[label="0.2;3pkt 3fpkt"];
2903--11389[label="0.2;3pkt 3fpkt"];
3047--3211[label="0.453125;58pkt 58fpkt"];
3047--4226[label="0.0155039;2pkt 2fpkt"];
3047--4591[label="1;32pkt 32fpkt"];
3047--6085[label="0.0196078;2pkt 2fpkt"];
3047--6317[label="0.00990099;1pkt 1fpkt"];
3047--9964[label="1;31pkt 31fpkt"];
3047--11348[label="0.18;27pkt 27fpkt"];
3047--11389[label="0.18;27pkt 27fpkt"];
3047--12867[label="0.00990099;1pkt 1fpkt"];
3047--13726[label="0.027027;1pkt 1fpkt"];
3047--14707[label="0.00689655;1pkt 1fpkt"];
3047--15584[label="0.0183486;2pkt 2fpkt"];
3047--16067[label="1;3pkt 3fpkt"];
3047--16162[label="0.166667;2pkt 2fpkt"];
3047--18935[label="0.00689655;1pkt 1fpkt"];
3047--19818[label="1;3pkt 3fpkt"];
3262--13929[label="1;2pkt 2fpkt"];
3262--18428[label="1;1pkt 1fpkt"];
3262--21397[label="1;2pkt 2fpkt"];
3760--5471[label="0.0222222;1pkt 1fpkt"];
3760--6555[label="0.0285714;1pkt 1fpkt"];
3760--8880[label="0.0338983;2pkt 2fpkt"];
3760--9887[label="0.0169492;1pkt 1fpkt"];
3760--10177[label="0.0227273;1pkt 1fpkt"];
3760--10808[label="1;59pkt 59fpkt"];
3760--11537[label="0.0338983;2pkt 2fpkt"];
3760--11702[label="0.0192308;1pkt 1fpkt"];
3760--13521[label="0.0508475;3pkt 3fpkt"];
3760--13541[label="0.0338983;2pkt 2fpkt"];
3760--14966[label="1;1pkt 1fpkt"];
3760--16162[label="0.166667;2pkt 2fpkt"];
3760--16928[label="0.0338983;2pkt 2fpkt"];
3760--17034[label="0.0192308;1pkt 1fpkt"];
3760--19111[label="1;1pkt 1fpkt"];
3760--21874[label="1;1pkt 1fpkt"];
4047--14295[label="1;1pkt 1fpkt"];
4170--4366[label="0.733333;11pkt 11fpkt"];
4170--7775[label="0.133333;2pkt 2fpkt"];
4170--9060[label="0.733333;11pkt 11fpkt"];
4366--6868[label="0.0222222;1pkt 1fpkt"];
4366--7423[label="0.0222222;1pkt 1fpkt"];
4366--9060[label="1;45pkt 45fpkt"];
4366--11348[label="0.0222222;1pkt 1fpkt"];
4366--11389[label="0.0222222;1pkt 1fpkt"];
4366--14777[label="0.0222222;1pkt 1fpkt"];
4366--15411[label="0.266667;8pkt 8fpkt"];
4366--18981[label="0.0222222;1pkt 1fpkt"];
4366--19384[label="0.266667;8pkt 8fpkt"];
4366--21786[label="0.0222222;1pkt 1fpkt"];
4411--8135[label="0.0526316;1pkt 1fpkt"];
4411--8473[label="0.0526316;1pkt 1fpkt"];
4411--10357[label="0.166667;2pkt 2fpkt"];
4411--12844[label="0.25;1pkt 1fpkt"];
4411--13724[label="1;2pkt 2fpkt"];
4411--15732[label="0.181818;2pkt 2fpkt"];
4411--16131[label="0.105263;2pkt 2fpkt"];
4411--16466[label="0.105263;2pkt 2fpkt"];
4411--17741[label="0.25;1pkt 1fpkt"];
4411--19859[label="0.105263;2pkt 2fpkt"];
4411--20074[label="0.105263;2pkt 2fpkt"];
4411--20916[label="0.2;1pkt 1fpkt"];
4411--22566[label="0.105263;2pkt 2fpkt"];
4556--7829[label="0.00621118;1pkt 1fpkt"];
4556--9622[label="0.043956;8pkt 8fpkt"];
4556--10213[label="0.010989;2pkt 2fpkt"];
4556--10223[label="0.010989;2pkt 2fpkt"];
4556--10392[label="1;164pkt 164fpkt"];
4556--11348[label="0.010989;2pkt 2fpkt"];
4556--11389[label="0.010989;2pkt 2fpkt"];
4556--12323[label="1;3pkt 3fpkt"];
4556--12674[label="0.0164835;3pkt 3fpkt"];
4556--13777[label="0.0133333;2pkt 2fpkt"];
4556--14032[label="0.04;1pkt 1fpkt"];
4556--14286[label="0.010989;2pkt 2fpkt"];
4556--14463[label="0.010989;2pkt 2fpkt"];
4556--14907[label="1;60pkt 60fpkt"];
4556--15617[label="1;19pkt 19fpkt"];
4556--15871[label="0.153846;2pkt 2fpkt"];
4556--17421[label="1;3pkt 3fpkt"];
4556--17642[label="0.0164835;3pkt 3fpkt"];
4556--18433[label="0.00549451;1pkt 1fpkt"];
4556--18652[label="0.010989;2pkt 2fpkt"];
4556--18781[label="0.010989;2pkt 2fpkt"];
4556--19066[label="1;59pkt 59fpkt"];
4556--19517[label="1;19pkt 19fpkt"];
4556--19692[label="0.153846;2pkt 2fpkt"];
4556--20703[label="1;3pkt 3fpkt"];
4556--20849[label="0.0164835;3pkt 3fpkt"];
4556--21558[label="0.010989;2pkt 2fpkt"];
4556--21650[label="0.010989;2pkt 2fpkt"];
4556--21844[label="1;60pkt 60fpkt"];
4556--22164[label="1;19pkt 19fpkt"];
4556--22292[label="0.153846;2pkt 2fpkt"];
4591--9964[label="1;31pkt 31fpkt"];
4853--6342[label="0.117647;4pkt 4fpkt"];
4853--8141[label="0.0294118;1pkt 1fpkt"];
4853--10344[label="0.117647;4pkt 4fpkt"];
4853--11348[label="0.0588235;2pkt 2fpkt"];
4853--11389[label="0.0588235;2pkt 2fpkt"];
4853--16147[label="1;34pkt 34fpkt"];
4853--19870[label="1;34pkt 34fpkt"];
4853--22415[label="0.970588;33pkt 33fpkt"];
5144--10381[label="1;12pkt 12fpkt"];
5144--11348[label="0.166667;2pkt 2fpkt"];
5144--11389[label="0.166667;2pkt 2fpkt"];
5276--8151[label="1;56pkt 56fpkt"];
5351--15679[label="1;7pkt 7fpkt"];
5490--5933[label="0.6;3pkt 3fpkt"];
5490--8375[label="0.0243902;1pkt 1fpkt"];
5490--9233[label="0.0243902;1pkt 1fpkt"];
5490--9887[label="0.0243902;1pkt 1fpkt"];
5490--14777[label="0.0243902;1pkt 1fpkt"];
5490--15171[label="0.6;3pkt 3fpkt"];
5490--15262[label="0.0243902;1pkt 1fpkt"];
5490--15695[label="0.0243902;1pkt 1fpkt"];
5490--16243[label="0.0487805;2pkt 2fpkt"];
5490--18981[label="0.0243902;1pkt 1fpkt"];
5490--19574[label="0.0243902;1pkt 1fpkt"];
5490--19923[label="0.0487805;2pkt 2fpkt"];
5490--21786[label="0.0243902;1pkt 1fpkt"];
5490--22207[label="0.0243902;1pkt 1fpkt"];
5490--22457[label="0.0487805;2pkt 2fpkt"];
5630--8138[label="0.183333;11pkt 11fpkt"];
5630--8307[label="0.015873;1pkt 1fpkt"];
5630--10213[label="0.015873;1pkt 1fpkt"];
5630--11768[label="0.031746;2pkt 2fpkt"];
5630--11770[label="0.015873;1pkt 1fpkt"];
5630--15889[label="0.031746;2pkt 2fpkt"];
5630--16131[label="0.031746;2pkt 2fpkt"];
5630--17069[label="0.031746;2pkt 2fpkt"];
5630--17070[label="0.015873;1pkt 1fpkt"];
5630--19703[label="0.031746;2pkt 2fpkt"];
5630--19859[label="0.031746;2pkt 2fpkt"];
5630--20467[label="0.031746;2pkt 2fpkt"];
5630--20468[label="0.015873;1pkt 1fpkt"];
5933--15171[label="1;5pkt 5fpkt"];
6233--9224[label="0.00865801;2pkt 2fpkt"];
6233--11348[label="0.0042735;1pkt 1fpkt"];
6233--11389[label="0.0042735;1pkt 1fpkt"];
6532--7216[label="0.111111;1pkt 1fpkt"];
6532--7582[label="0.0666667;1pkt 1fpkt"];
6532--10455[label="1;15pkt 15fpkt"];
6532--14858[label="1;15pkt 15fpkt"];
6532--19035[label="1;15pkt 15fpkt"];
6532--21827[label="1;15pkt 15fpkt"];
7161--14858[label="0.4;2pkt 2fpkt"];
7161--19035[label="0.4;2pkt 2fpkt"];
7161--21827[label="0.4;2pkt 2fpkt"];
7180--7231[label="0.375;6pkt 6fpkt"];
7180--10878[label="1;16pkt 16fpkt"];
7180--12104[label="1;16pkt 16fpkt"];
7180--17289[label="1;16pkt 16fpkt"];
7215--7216[label="0.75;6pkt 6fpkt"];
7216--10455[label="0.111111;1pkt 1fpkt"];
7216--14858[label="0.111111;1pkt 1fpkt"];
7216--14861[label="0.111111;1pkt 1fpkt"];
7216--16284[label="0.111111;1pkt 1fpkt"];
7216--19035[label="0.111111;1pkt 1fpkt"];
7216--19950[label="0.111111;1pkt 1fpkt"];
7216--21827[label="0.111111;1pkt 1fpkt"];
7229--10892[label="1;19pkt 19fpkt"];
7231--10878[label="0.352941;6pkt 6fpkt"];
7231--12104[label="0.352941;6pkt 6fpkt"];
7231--12915[label="0.411765;7pkt 7fpkt"];
7231--14707[label="0.235294;4pkt 4fpkt"];
7231--17289[label="0.352941;6pkt 6fpkt"];
7231--17785[label="0.411765;7pkt 7fpkt"];
7231--18935[label="0.235294;4pkt 4fpkt"];
7231--20945[label="0.411765;7pkt 7fpkt"];
7876--9224[label="0.00865801;2pkt 2fpkt"];
8138--8719[label="0.0333333;2pkt 2fpkt"];
8138--10112[label="0.0333333;2pkt 2fpkt"];
8138--10516[label="0.0166667;1pkt 1fpkt"];
8141--8357[label="0.00209205;1pkt 1fpkt"];
8141--8375[label="0.0041841;2pkt 2fpkt"];
8141--8404[label="0.0060241;1pkt 1fpkt"];
8141--8455[label="0.111111;9pkt 9fpkt"];
8141--8506[label="0.0888889;4pkt 4fpkt"];
8141--8615[label="0.00209205;1pkt 1fpkt"];
8141--8880[label="0.0220588;3pkt 3fpkt"];
8141--8970[label="0.00209205;1pkt 1fpkt"];
8141--8999[label="0.0125;1pkt 1fpkt"];
8141--9656[label="0.00900901;2pkt 2fpkt"];
8141--9661[label="0.0041841;2pkt 2fpkt"];
8141--9692[label="0.00355872;1pkt 1fpkt"];
8141--9787[label="0.00209205;1pkt 1fpkt"];
8141--10098[label="0.0041841;2pkt 2fpkt"];
8141--10134[label="0.0190114;5pkt 5fpkt"];
8141--10213[label="0.0041841;2pkt 2fpkt"];
8141--10223[label="0.00331126;1pkt 1fpkt"];
8141--10574[label="0.047619;1pkt 1fpkt"];
8141--10644[label="0.00775194;1pkt 1fpkt"];
8141--11020[label="0.00209205;1pkt 1fpkt"];
8141--11159[label="0.0041841;2pkt 2fpkt"];
8141--11297[label="0.00209205;1pkt 1fpkt"];
8141--11348[label="0.112971;54pkt 54fpkt"];
8141--11356[label="0.00209205;1pkt 1fpkt"];
8141--11389[label="0.112971;54pkt 54fpkt"];
8141--11396[label="0.00209205;1pkt 1fpkt"];
8141--11543[label="0.0277778;1pkt 1fpkt"];
8141--11615[label="0.00507614;1pkt 1fpkt"];
8141--11770[label="0.0394737;3pkt 3fpkt"];
8141--11808[label="0.0263158;1pkt 1fpkt"];
8141--11869[label="0.0192308;1pkt 1fpkt"];
8141--11961[label="0.00209205;1pkt 1fpkt"];
8141--12560[label="0.0531915;5pkt 5fpkt"];
8141--12820[label="0.0124611;4pkt 4fpkt"];
8141--12972[label="0.00209205;1pkt 1fpkt"];
8141--12999[label="0.02;1pkt 1fpkt"];
8141--13278[label="0.416667;5pkt 5fpkt"];
8141--13409[label="0.0121951;1pkt 1fpkt"];
8141--13783[label="0.04;3pkt 3fpkt"];
8141--13935[label="0.0336538;7pkt 7fpkt"];
8141--14448[label="0.0041841;2pkt 2fpkt"];
8141--14463[label="0.00286533;1pkt 1fpkt"];
8141--14479[label="0.15625;5pkt 5fpkt"];
8141--14510[label="0.0454545;4pkt 4fpkt"];
8141--14675[label="0.0227273;1pkt 1fpkt"];
8141--14777[label="0.0041841;2pkt 2fpkt"];
8141--14797[label="0.002331;1pkt 1fpkt"];
8141--14958[label="0.176471;3pkt 3fpkt"];
8141--15106[label="0.0178571;1pkt 1fpkt"];
8141--15153[label="0.0652174;3pkt 3fpkt"];
8141--15272[label="0.0152439;5pkt 5fpkt"];
8141--15364[label="0.117647;2pkt 2fpkt"];
8141--15442[label="0.0769231;4pkt 4fpkt"];
8141--15647[label="0.00746269;1pkt 1fpkt"];
8141--15695[label="0.0041841;2pkt 2fpkt"];
8141--15740[label="0.00241546;1pkt 1fpkt"];
8141--15847[label="0.8;12pkt 12fpkt"];
8141--15871[label="0.230769;3pkt 3fpkt"];
8141--16131[label="0.00265252;1pkt 1fpkt"];
8141--16147[label="0.025;1pkt 1fpkt"];
8141--16160[label="0.00664452;2pkt 2fpkt"];
8141--16197[label="0.170213;8pkt 8fpkt"];
8141--16242[label="0.00609756;2pkt 2fpkt"];
8141--16243[label="0.0153846;1pkt 1fpkt"];
8141--17070[label="0.04;3pkt 3fpkt"];
8141--17094[label="0.0263158;1pkt 1fpkt"];
8141--17134[label="0.0192308;1pkt 1fpkt"];
8141--17191[label="0.00209205;1pkt 1fpkt"];
8141--17569[label="0.0526316;5pkt 5fpkt"];
8141--18107[label="0.0121951;1pkt 1fpkt"];
8141--18340[label="0.04;3pkt 3fpkt"];
8141--18433[label="0.0334928;7pkt 7fpkt"];
8141--18769[label="0.0041841;2pkt 2fpkt"];
8141--18781[label="0.00286533;1pkt 1fpkt"];
8141--18793[label="0.15625;5pkt 5fpkt"];
8141--18815[label="0.0454545;4pkt 4fpkt"];
8141--18981[label="0.0041841;2pkt 2fpkt"];
8141--18994[label="0.00232558;1pkt 1fpkt"];
8141--19192[label="0.0178571;1pkt 1fpkt"];
8141--19264[label="0.0526316;3pkt 3fpkt"];
8141--19291[label="0.0152905;5pkt 5fpkt"];
8141--19536[label="0.00740741;1pkt 1fpkt"];
8141--19574[label="0.0041841;2pkt 2fpkt"];
8141--19604[label="0.00242131;1pkt 1fpkt"];
8141--19676[label="0.8;12pkt 12fpkt"];
8141--19692[label="0.230769;3pkt 3fpkt"];
8141--19859[label="0.0026455;1pkt 1fpkt"];
8141--19870[label="0.025;1pkt 1fpkt"];
8141--19894[label="0.173913;8pkt 8fpkt"];
8141--19923[label="0.0153846;1pkt 1fpkt"];
8141--20468[label="0.04;3pkt 3fpkt"];
8141--20511[label="0.0192308;1pkt 1fpkt"];
8141--20548[label="0.00209205;1pkt 1fpkt"];
8141--20801[label="0.0526316;5pkt 5fpkt"];
8141--21401[label="0.0336538;7pkt 7fpkt"];
8141--21650[label="0.00285714;1pkt 1fpkt"];
8141--21661[label="0.16129;5pkt 5fpkt"];
8141--21786[label="0.0041841;2pkt 2fpkt"];
8141--21795[label="0.00232558;1pkt 1fpkt"];
8141--21934[label="0.0175439;1pkt 1fpkt"];
8141--22003[label="0.0152439;5pkt 5fpkt"];
8141--22180[label="0.00746269;1pkt 1fpkt"];
8141--22207[label="0.0041841;2pkt 2fpkt"];
8141--22277[label="0.75;12pkt 12fpkt"];
8141--22292[label="0.230769;3pkt 3fpkt"];
8141--22415[label="0.025641;1pkt 1fpkt"];
8141--22434[label="0.173913;8pkt 8fpkt"];
8141--22457[label="0.0151515;1pkt 1fpkt"];
8151--8357[label="0.00867052;3pkt 3fpkt"];
8151--8473[label="0.0634921;4pkt 4fpkt"];
8151--8880[label="0.125;17pkt 17fpkt"];
8151--8974[label="0.0310078;4pkt 4fpkt"];
8151--9622[label="0.00289017;1pkt 1fpkt"];
8151--9656[label="0.0045045;1pkt 1fpkt"];
8151--10241[label="0.041791;14pkt 14fpkt"];
8151--11131[label="0.0336134;4pkt 4fpkt"];
8151--11348[label="0.066474;23pkt 23fpkt"];
8151--11389[label="0.066474;23pkt 23fpkt"];
8151--12509[label="0.277778;10pkt 10fpkt"];
8151--12996[label="0.0285714;2pkt 2fpkt"];
8151--13770[label="0.0930233;4pkt 4fpkt"];
8151--14777[label="0.00289017;1pkt 1fpkt"];
8151--14797[label="0.00867052;3pkt 3fpkt"];
8151--15871[label="0.230769;3pkt 3fpkt"];
8151--15925[label="0.0238095;1pkt 1fpkt"];
8151--16131[label="0.00578035;2pkt 2fpkt"];
8151--16160[label="0.00332226;1pkt 1fpkt"];
8151--16284[label="0.333333;9pkt 9fpkt"];
8151--16466[label="0.00289017;1pkt 1fpkt"];
8151--17541[label="0.297297;11pkt 11fpkt"];
8151--17844[label="0.028169;2pkt 2fpkt"];
8151--18334[label="0.0930233;4pkt 4fpkt"];
8151--18981[label="0.00289017;1pkt 1fpkt"];
8151--18994[label="0.00867052;3pkt 3fpkt"];
8151--19692[label="0.230769;3pkt 3fpkt"];
8151--19727[label="0.0232558;1pkt 1fpkt"];
8151--19859[label="0.00578035;2pkt 2fpkt"];
8151--19950[label="0.321429;9pkt 9fpkt"];
8151--20074[label="0.00289017;1pkt 1fpkt"];
8151--20781[label="0.277778;10pkt 10fpkt"];
8151--20994[label="0.0285714;2pkt 2fpkt"];
8151--21337[label="0.0930233;4pkt 4fpkt"];
8151--21786[label="0.00289017;1pkt 1fpkt"];
8151--21795[label="0.00867052;3pkt 3fpkt"];
8151--22292[label="0.230769;3pkt 3fpkt"];
8151--22315[label="0.0238095;1pkt 1fpkt"];
8151--22566[label="0.00289017;1pkt 1fpkt"];
9060--11348[label="0.0222222;1pkt 1fpkt"];
9060--11389[label="0.0222222;1pkt 1fpkt"];
9060--14777[label="0.0222222;1pkt 1fpkt"];
9060--15411[label="0.266667;8pkt 8fpkt"];
9060--18981[label="0.0222222;1pkt 1fpkt"];
9060--19384[label="0.266667;8pkt 8fpkt"];
9060--21786[label="0.0222222;1pkt 1fpkt"];
9604--11348[label="0.0225564;3pkt 3fpkt"];
9604--11389[label="0.0225564;3pkt 3fpkt"];
10381--11348[label="0.166667;2pkt 2fpkt"];
10381--11389[label="0.166667;2pkt 2fpkt"];
10392--11348[label="0.0121951;2pkt 2fpkt"];
10392--11389[label="0.0121951;2pkt 2fpkt"];
10392--12323[label="1;3pkt 3fpkt"];
10392--12674[label="0.0182927;3pkt 3fpkt"];
10392--13777[label="0.0133333;2pkt 2fpkt"];
10392--14032[label="0.04;1pkt 1fpkt"];
10392--14463[label="0.0121951;2pkt 2fpkt"];
10392--14907[label="1;60pkt 60fpkt"];
10392--15617[label="1;19pkt 19fpkt"];
10392--15871[label="0.153846;2pkt 2fpkt"];
10392--17421[label="1;3pkt 3fpkt"];
10392--17642[label="0.0182927;3pkt 3fpkt"];
10392--18433[label="0.00609756;1pkt 1fpkt"];
10392--18781[label="0.0121951;2pkt 2fpkt"];
10392--19066[label="1;59pkt 59fpkt"];
10392--19517[label="1;19pkt 19fpkt"];
10392--19692[label="0.153846;2pkt 2fpkt"];
10392--20703[label="1;3pkt 3fpkt"];
10392--20849[label="0.0182927;3pkt 3fpkt"];
10392--21650[label="0.0121951;2pkt 2fpkt"];
10392--21844[label="1;60pkt 60fpkt"];
10392--22164[label="1;19pkt 19fpkt"];
10392--22292[label="0.153846;2pkt 2fpkt"];
10455--14858[label="1;15pkt 15fpkt"];
10455--19035[label="1;15pkt 15fpkt"];
10455--21827[label="1;15pkt 15fpkt"];
10808--11537[label="0.0338983;2pkt 2fpkt"];
10808--11702[label="0.0192308;1pkt 1fpkt"];
10808--13521[label="0.0508475;3pkt 3fpkt"];
10808--13541[label="0.0338983;2pkt 2fpkt"];
10808--14966[label="1;1pkt 1fpkt"];
10808--16162[label="0.166667;2pkt 2fpkt"];
10808--16928[label="0.0338983;2pkt 2fpkt"];
10808--17034[label="0.0192308;1pkt 1fpkt"];
10808--19111[label="1;1pkt 1fpkt"];
10808--21874[label="1;1pkt 1fpkt"];
10878--12104[label="1;17pkt 17fpkt"];
10878--17289[label="0.941176;16pkt 16fpkt"];
12104--17289[label="1;42pkt 42fpkt"];
12305--17404[label="1;5pkt 5fpkt"];
12305--20691[label="1;5pkt 5fpkt"];
12323--17421[label="1;3pkt 3fpkt"];
12323--20703[label="1;3pkt 3fpkt"];
12509--17541[label="1;36pkt 36fpkt"];
12509--20781[label="1;36pkt 36fpkt"];
12641--17618[label="1;1pkt 1fpkt"];
12842--17739[label="1;9pkt 9fpkt"];
12844--17741[label="1;4pkt 4fpkt"];
12844--20916[label="1;4pkt 4fpkt"];
12915--17785[label="1;64pkt 64fpkt"];
12915--20945[label="1;65pkt 65fpkt"];
12975--17829[label="1;44pkt 44fpkt"];
12975--20981[label="1;43pkt 43fpkt"];
13608--18241[label="1;53pkt 53fpkt"];
13608--21277[label="1;53pkt 53fpkt"];
13766--18332[label="1;19pkt 19fpkt"];
13766--21335[label="1;19pkt 19fpkt"];
13783--18340[label="1;75pkt 75fpkt"];
13808--18356[label="1;1pkt 1fpkt"];
13929--18428[label="1;1pkt 1fpkt"];
13929--21397[label="1;2pkt 2fpkt"];
13963--18454[label="1;11pkt 11fpkt"];
13963--21419[label="1;11pkt 11fpkt"];
14479--18793[label="1;32pkt 32fpkt"];
14479--21661[label="1;31pkt 31fpkt"];
14516--18820[label="1;4pkt 4fpkt"];
14516--21679[label="1;5pkt 5fpkt"];
14628--18883[label="1;1pkt 1fpkt"];
14628--21717[label="1;1pkt 1fpkt"];
14858--19035[label="1;26pkt 26fpkt"];
14858--21827[label="1;27pkt 27fpkt"];
14907--19066[label="1;59pkt 59fpkt"];
14907--21844[label="1;60pkt 60fpkt"];
14966--19111[label="1;1pkt 1fpkt"];
14966--21874[label="1;1pkt 1fpkt"];
15310--19318[label="1;5pkt 5fpkt"];
15411--19384[label="1;30pkt 30fpkt"];
15617--19517[label="1;19pkt 19fpkt"];
15617--22164[label="1;19pkt 19fpkt"];
15796--19640[label="1;4pkt 4fpkt"];
15847--19676[label="1;15pkt 15fpkt"];
15847--22277[label="1;15pkt 15fpkt"];
15871--19692[label="1;13pkt 13fpkt"];
15871--22292[label="1;13pkt 13fpkt"];
16067--19818[label="1;3pkt 3fpkt"];
16147--19870[label="1;40pkt 40fpkt"];
16147--22415[label="1;39pkt 39fpkt"];
16197--19894[label="1;46pkt 46fpkt"];
16197--22434[label="1;46pkt 46fpkt"];
16284--19950[label="1;27pkt 27fpkt"];
16590--20149[label="1;49pkt 49fpkt"];
16590--22627[label="1;49pkt 49fpkt"];
17404--20691[label="1;5pkt 5fpkt"];
17421--20703[label="1;3pkt 3fpkt"];
17541--20781[label="1;36pkt 36fpkt"];
17741--20916[label="1;4pkt 4fpkt"];
17785--20945[label="1;64pkt 64fpkt"];
17829--20981[label="1;43pkt 43fpkt"];
18241--21277[label="1;53pkt 53fpkt"];
18332--21335[label="1;20pkt 20fpkt"];
18428--21397[label="1;1pkt 1fpkt"];
18454--21419[label="1;11pkt 11fpkt"];
18793--21661[label="1;31pkt 31fpkt"];
18820--21679[label="1;4pkt 4fpkt"];
18883--21717[label="1;1pkt 1fpkt"];
19035--21827[label="1;26pkt 26fpkt"];
19066--21844[label="1;59pkt 59fpkt"];
19111--21874[label="1;1pkt 1fpkt"];
19517--22164[label="1;19pkt 19fpkt"];
19676--22277[label="1;15pkt 15fpkt"];
19692--22292[label="1;13pkt 13fpkt"];
19870--22415[label="1;39pkt 39fpkt"];
19894--22434[label="1;46pkt 46fpkt"];
20149--22627[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="201.67.35.223" src_port="80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.106.13.202"/>
    </slice>
    <from sec="1191993127" usec="0"/>
    <to sec="1191993224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.21.89.202"/>
    </slice>
    <from sec="1191992834" usec="0"/>
    <to sec="1191992961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.168.100.202"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1939{
style=filled;
color=gray75;
15905[label="201.55.41.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19711[label="201.55.41.203;1pkt 1fpkt", shape=invtriangle, color=brown];
22306[label="201.55.41.203;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1939[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.55.41.203:48391, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48391: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
15905--19711[label="1;1pkt 1fpkt"];
15905--22306[label="1;1pkt 1fpkt"];
19711--22306[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="201.55.41.203" src_port="48391"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.74.100.203"/>
    </slice>
    <from sec="1191992791" usec="0"/>
    <to sec="1191992825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="168.41.192.203"/>
    </slice>
    <from sec="1191992699" usec="0"/>
    <to sec="1191992722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.212.227.203"/>
    </slice>
    <from sec="1191993227" usec="0"/>
    <to sec="1191993252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.8.8.204"/>
    </slice>
    <from sec="1191992967" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.86.74.204"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.246.75.204"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,502,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1946{
style=filled;
color=gray75;
15941[label="168.53.83.204;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19736[label="168.53.83.204;4pkt 4fpkt", shape=invtriangle, color=brown];
22318[label="168.53.83.204;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1946[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.83.204:35784, 201.15.116.30:22}[25%]&lt;BR/&gt;{168.53.83.204:35834, 201.15.116.30:22}[25%]&lt;BR/&gt;{168.53.83.204:35882, 201.15.116.30:22}[25%]&lt;BR/&gt;{168.53.83.204:35930, 201.15.116.30:22}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 35930: (15%)&lt;BR/&gt; 35882: (15%)&lt;BR/&gt; 35834: (15%)&lt;BR/&gt; 35784: (5%)&gt;];
}
15941--19736[label="1;3pkt 3fpkt"];
15941--22318[label="1;3pkt 3fpkt"];
19736--22318[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.15.116.30" dst_port="22" src_ip="168.53.83.204" src_port="35930"/>
      <filter dst_ip="201.15.116.30" dst_port="22" src_ip="168.53.83.204" src_port="35882"/>
      <filter dst_ip="201.15.116.30" dst_port="22" src_ip="168.53.83.204" src_port="35834"/>
      <filter dst_ip="201.15.116.30" dst_port="22" src_ip="168.53.83.204" src_port="35784"/>
    </slice>
    <from sec="1191992569" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.19.137.204"/>
    </slice>
    <from sec="1191992434" usec="0"/>
    <to sec="1191992469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="82.202.185.204"/>
    </slice>
    <from sec="1191992956" usec="0"/>
    <to sec="1191993001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.112.206.204"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.165.48.205"/>
    </slice>
    <from sec="1191992414" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1951{
style=filled;
color=gray75;
15959[label="43.112.61.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19751[label="43.112.61.205;2pkt 2fpkt", shape=invtriangle, color=brown];
22331[label="43.112.61.205;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1951[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.112.61.205:44373, 192.27.51.16:53}[50%]&lt;BR/&gt;{43.112.61.205:64055, 192.27.51.16:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 64055: (25%)&lt;BR/&gt; 44373: (25%)&gt;];
}
15959--19751[label="1;2pkt 2fpkt"];
15959--22331[label="1;2pkt 2fpkt"];
19751--22331[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.27.51.16" dst_port="53" src_ip="43.112.61.205" src_port="64055"/>
      <filter dst_ip="192.27.51.16" dst_port="53" src_ip="43.112.61.205" src_port="44373"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.200.74.205"/>
    </slice>
    <from sec="1191992645" usec="0"/>
    <to sec="1191992658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1953{
style=filled;
color=gray75;
15975[label="201.180.44.206;52pkt 52fpkt", shape=pentagon, color=darkviolet];
19764[label="201.180.44.206;52pkt 52fpkt", shape=invtriangle, color=brown];
22340[label="201.180.44.206;52pkt 52fpkt", shape=invhouse, color=bisque];
stat1953[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.180.44.206:0, *:0}[94.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (94.2308%)&lt;BR/&gt; 139: (2.88462%)&lt;BR/&gt; 3846: (0.961538%)&lt;BR/&gt; 3795: (0.961538%)&lt;BR/&gt; 3625: (0.961538%)&gt;];
}
15975--19764[label="1;52pkt 52fpkt"];
15975--22340[label="1;52pkt 52fpkt"];
19764--22340[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="201.180.44.206"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.180.76.206"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1955{
style=filled;
color=gray75;
15977[label="209.90.83.206;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19766[label="209.90.83.206;2pkt 2fpkt", shape=invtriangle, color=brown];
22342[label="209.90.83.206;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1955[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.90.83.206:38165, 201.136.122.110:53}[50%]&lt;BR/&gt;{209.90.83.206:64829, 201.136.122.110:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 64829: (25%)&lt;BR/&gt; 38165: (25%)&gt;];
}
15977--19766[label="1;2pkt 2fpkt"];
15977--22342[label="1;2pkt 2fpkt"];
19766--22342[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.136.122.110" dst_port="53" src_ip="209.90.83.206" src_port="64829"/>
      <filter dst_ip="201.136.122.110" dst_port="53" src_ip="209.90.83.206" src_port="38165"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.178.217.206"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.240.38.207"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.154.200.207"/>
    </slice>
    <from sec="1191992682" usec="0"/>
    <to sec="1191992706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.206.100.208"/>
    </slice>
    <from sec="1191992710" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.196.35.209"/>
    </slice>
    <from sec="1191993228" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.78.208.209"/>
    </slice>
    <from sec="1191992539" usec="0"/>
    <to sec="1191992572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,011,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1964{
style=filled;
color=gray75;
6798[label="180.49.248.209;s;123pkt 123fpkt", shape=diamond, color=yellow];
16047[label="180.49.248.209;133pkt 133fpkt", shape=pentagon, color=darkviolet];
19805[label="180.49.248.209;134pkt 134fpkt", shape=invtriangle, color=brown];
22373[label="180.49.248.209;134pkt 134fpkt", shape=invhouse, color=bisque];
stat1964[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.49.248.209:*, 217.180.90.38:*}[39.2593%]&lt;BR/&gt;{180.49.248.209:*, 217.180.90.36:80}[34.8148%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.2481%)&lt;BR/&gt; 1668: (1.14504%)&lt;BR/&gt; 1562: (1.14504%)&lt;BR/&gt; 1308: (1.14504%)&lt;BR/&gt; 1663: (0.763359%)&gt;];
}
6798--11265[label="0.0487805;6pkt 6fpkt"];
6798--11285[label="0.0487805;6pkt 6fpkt"];
6798--11338[label="0.0487805;6pkt 6fpkt"];
6798--11351[label="0.0487805;6pkt 6fpkt"];
6798--11382[label="0.0487805;6pkt 6fpkt"];
6798--11392[label="0.0487805;6pkt 6fpkt"];
6798--16047[label="0.98374;121pkt 121fpkt"];
6798--19805[label="0.99187;122pkt 122fpkt"];
6798--22373[label="0.99187;122pkt 122fpkt"];
16047--19805[label="1;133pkt 133fpkt"];
16047--22373[label="1;133pkt 133fpkt"];
19805--22373[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="217.180.90.38" src_ip="180.49.248.209"/>
      <filter dst_ip="217.180.90.36" dst_port="80" src_ip="180.49.248.209"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1965{
style=filled;
color=gray75;
16053[label="35.222.50.210;52pkt 52fpkt", shape=pentagon, color=darkviolet];
19809[label="35.222.50.210;52pkt 52fpkt", shape=invtriangle, color=brown];
stat1965[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.222.50.210:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4982: (0.961538%)&lt;BR/&gt; 4921: (0.961538%)&lt;BR/&gt; 4878: (0.961538%)&lt;BR/&gt; 4831: (0.961538%)&gt;];
}
16053--19809[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="35.222.50.210"/>
    </slice>
    <from sec="1191992439" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.125.77.210"/>
    </slice>
    <from sec="1191992754" usec="0"/>
    <to sec="1191993095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.112.91.210"/>
    </slice>
    <from sec="1191992703" usec="0"/>
    <to sec="1191992707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1968{
style=filled;
color=gray75;
16058[label="200.173.92.210;79pkt 79fpkt", shape=pentagon, color=darkviolet];
19812[label="200.173.92.210;78pkt 78fpkt", shape=invtriangle, color=brown];
22377[label="200.173.92.210;79pkt 79fpkt", shape=invhouse, color=bisque];
stat1968[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.173.92.210:38767, *:53}[91.1392%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38767: (45.5508%)&lt;BR/&gt; 53: (45.5508%)&lt;BR/&gt; 0: (3.81356%)&lt;BR/&gt; 135: (1.27119%)&lt;BR/&gt; 25: (1.27119%)&gt;];
}
16058--19812[label="1;78pkt 78fpkt"];
16058--22377[label="1;79pkt 79fpkt"];
19812--22377[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="200.173.92.210" src_port="38767"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.116.156.210"/>
    </slice>
    <from sec="1191992701" usec="0"/>
    <to sec="1191992732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1970{
style=filled;
color=gray75;
16068[label="62.161.213.210;19pkt 19fpkt", shape=pentagon, color=darkviolet];
19819[label="62.161.213.210;19pkt 19fpkt", shape=invtriangle, color=brown];
22382[label="62.161.213.210;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1970[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.161.213.210:80, 172.133.82.176:*}[94.7368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.3684%)&lt;BR/&gt; 53492: (2.63158%)&lt;BR/&gt; 53491: (2.63158%)&lt;BR/&gt; 53461: (2.63158%)&lt;BR/&gt; 53455: (2.63158%)&gt;];
}
16068--19819[label="1;19pkt 19fpkt"];
16068--22382[label="1;19pkt 19fpkt"];
19819--22382[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.82.176" src_ip="62.161.213.210" src_port="80"/>
    </slice>
    <from sec="1191993274" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.193.32.211"/>
    </slice>
    <from sec="1191992634" usec="0"/>
    <to sec="1191992668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.179.86.211"/>
    </slice>
    <from sec="1191992926" usec="0"/>
    <to sec="1191992969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.148.211"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.41.192.211"/>
    </slice>
    <from sec="1191992515" usec="0"/>
    <to sec="1191992566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.36.8.212"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191992437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.179.48.212"/>
    </slice>
    <from sec="1191992933" usec="0"/>
    <to sec="1191992972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.219.168.212"/>
    </slice>
    <from sec="1191992814" usec="0"/>
    <to sec="1191993116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1978{
style=filled;
color=gray75;
16108[label="210.172.176.212;2pkt 2fpkt", shape=pentagon, color=darkviolet];
19846[label="210.172.176.212;2pkt 2fpkt", shape=invtriangle, color=brown];
22403[label="210.172.176.212;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1978[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.172.176.212:80, 169.6.70.91:2913}[50%]&lt;BR/&gt;{210.172.176.212:80, 169.6.70.91:2914}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2914: (30%)&lt;BR/&gt; 2913: (20%)&gt;];
}
16108--19846[label="1;2pkt 2fpkt"];
16108--22403[label="1;1pkt 1fpkt"];
19846--22403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.70.91" dst_port="2914" src_ip="210.172.176.212" src_port="80"/>
      <filter dst_ip="169.6.70.91" dst_port="2913" src_ip="210.172.176.212" src_port="80"/>
    </slice>
    <from sec="1191993029" usec="0"/>
    <to sec="1191993046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1979{
style=filled;
color=gray75;
16118[label="188.104.22.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19850[label="188.104.22.213;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1979[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.22.213:44385, 222.116.93.84:21081}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44385: (50%)&lt;BR/&gt; 21081: (50%)&gt;];
}
16118--19850[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.116.93.84" dst_port="21081" src_ip="188.104.22.213" src_port="44385"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.126.85.213"/>
    </slice>
    <from sec="1191992627" usec="0"/>
    <to sec="1191992705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.145.149.213"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.137.53.214"/>
    </slice>
    <from sec="1191993190" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="181.155.60.214"/>
    </slice>
    <from sec="1191992440" usec="0"/>
    <to sec="1191992463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.44.86.214"/>
    </slice>
    <from sec="1191992417" usec="0"/>
    <to sec="1191992690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1985{
style=filled;
color=gray75;
16156[label="169.6.94.215;7pkt 7fpkt", shape=pentagon, color=darkviolet];
19873[label="169.6.94.215;7pkt 7fpkt", shape=invtriangle, color=brown];
22418[label="169.6.94.215;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1985[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.94.215:*, *:80}[42.8571%]&lt;BR/&gt;{169.6.94.215:*, 209.50.112.162:443}[28.5714%]&lt;BR/&gt;{169.6.94.215:*, 1.178.132.200:443}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (28.5714%)&lt;BR/&gt; 80: (21.4286%)&lt;BR/&gt; 4008: (7.14286%)&lt;BR/&gt; 4007: (7.14286%)&lt;BR/&gt; 3994: (7.14286%)&gt;];
}
16156--19873[label="1;7pkt 7fpkt"];
16156--22418[label="1;7pkt 7fpkt"];
19873--22418[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="169.6.94.215"/>
      <filter dst_ip="1.178.132.200" dst_port="443" src_ip="169.6.94.215"/>
      <filter dst_ip="209.50.112.162" dst_port="443" src_ip="169.6.94.215"/>
    </slice>
    <from sec="1191993236" usec="0"/>
    <to sec="1191993288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.173.216"/>
    </slice>
    <from sec="1191992702" usec="0"/>
    <to sec="1191992781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1987{
style=filled;
color=gray75;
16182[label="188.104.210.216;6pkt 6fpkt", shape=pentagon, color=darkviolet];
19884[label="188.104.210.216;6pkt 6fpkt", shape=invtriangle, color=brown];
22425[label="188.104.210.216;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1987[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.210.216:*, *:80}[66.6667%]&lt;BR/&gt;{188.104.210.216:*, 211.13.38.94:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 443: (16.6667%)&lt;BR/&gt; 62903: (8.33333%)&lt;BR/&gt; 62378: (8.33333%)&lt;BR/&gt; 62207: (8.33333%)&gt;];
}
16182--19884[label="1;6pkt 6fpkt"];
16182--22425[label="1;6pkt 6fpkt"];
19884--22425[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="188.104.210.216"/>
      <filter dst_ip="211.13.38.94" dst_port="443" src_ip="188.104.210.216"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.193.0.217"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.124.13.217"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.21.80.217"/>
    </slice>
    <from sec="1191992459" usec="0"/>
    <to sec="1191992545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.11.139.217"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1992{
style=filled;
color=gray75;
16202[label="169.6.168.217;77pkt 77fpkt", shape=pentagon, color=darkviolet];
19898[label="169.6.168.217;76pkt 76fpkt", shape=invtriangle, color=brown];
22438[label="169.6.168.217;76pkt 76fpkt", shape=invhouse, color=bisque];
stat1992[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.168.217:53, *:*}[96.1039%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.345%)&lt;BR/&gt; 32768: (5.24017%)&lt;BR/&gt; 0: (3.93013%)&lt;BR/&gt; 32784: (1.31004%)&lt;BR/&gt; 5353: (1.31004%)&gt;];
}
16202--19898[label="1;76pkt 76fpkt"];
16202--22438[label="1;76pkt 76fpkt"];
19898--22438[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter src_ip="169.6.168.217" src_port="53"/>
    </slice>
    <from sec="1191992430" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="80.23.44.218"/>
    </slice>
    <from sec="1191992573" usec="0"/>
    <to sec="1191992577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.96.65.218"/>
    </slice>
    <from sec="1191992817" usec="0"/>
    <to sec="1191992831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1996{
style=filled;
color=gray75;
5573[label="200.173.72.2;d;289pkt 289fpkt", shape=diamond, color=yellow];
7195[label="4.37.154.220;s;100pkt 100fpkt", shape=diamond, color=yellow];
16227[label="84.225.160.218;65pkt 65fpkt", shape=pentagon, color=darkviolet];
16266[label="4.37.154.220;99pkt 99fpkt", shape=pentagon, color=darkviolet];
19916[label="84.225.160.218;65pkt 65fpkt", shape=invtriangle, color=brown];
19940[label="4.37.154.220;100pkt 100fpkt", shape=invtriangle, color=brown];
22467[label="4.37.154.220;100pkt 100fpkt", shape=invhouse, color=bisque];
stat1996[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 200.173.72.2:64857}[37.0717%]&lt;BR/&gt;{4.37.154.220:*, 200.173.72.2:25}[31.1526%]&lt;BR/&gt;{84.225.160.218:*, 200.173.72.2:25}[20.2492%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (42.1149%)&lt;BR/&gt; 53: (7.70171%)&lt;BR/&gt; 64857: (7.27384%)&lt;BR/&gt; 3263: (0.366748%)&lt;BR/&gt; 3298: (0.305623%)&gt;];
}
5573--6137[label="0.00819672;1pkt 1fpkt"];
5573--6203[label="0.0125;1pkt 1fpkt"];
5573--7195[label="1;100pkt 100fpkt"];
5573--9284[label="0.00613497;1pkt 1fpkt"];
5573--9285[label="0.00546448;1pkt 1fpkt"];
5573--9617[label="0.05;5pkt 5fpkt"];
5573--10254[label="0.00584795;1pkt 1fpkt"];
5573--10653[label="0.0125;1pkt 1fpkt"];
5573--11282[label="0.00346021;1pkt 1fpkt"];
5573--11311[label="0.0415225;12pkt 12fpkt"];
5573--11318[label="0.0311419;9pkt 9fpkt"];
5573--11337[label="0.00346021;1pkt 1fpkt"];
5573--11347[label="0.00346021;1pkt 1fpkt"];
5573--11370[label="0.0415225;12pkt 12fpkt"];
5573--11372[label="0.0311419;9pkt 9fpkt"];
5573--11381[label="0.00346021;1pkt 1fpkt"];
5573--11388[label="0.00346021;1pkt 1fpkt"];
5573--11397[label="0.0415225;12pkt 12fpkt"];
5573--11399[label="0.0311419;9pkt 9fpkt"];
5573--12532[label="0.0185185;1pkt 1fpkt"];
5573--13755[label="0.00869565;1pkt 1fpkt"];
5573--14038[label="0.111111;1pkt 1fpkt"];
5573--14148[label="0.0526316;1pkt 1fpkt"];
5573--14449[label="0.0166667;1pkt 1fpkt"];
5573--14878[label="0.00934579;1pkt 1fpkt"];
5573--15155[label="0.0277778;1pkt 1fpkt"];
5573--15986[label="0.00458716;1pkt 1fpkt"];
5573--16013[label="0.0416667;1pkt 1fpkt"];
5573--16227[label="0.507692;33pkt 33fpkt"];
5573--16266[label="1;99pkt 99fpkt"];
5573--16524[label="0.0075188;1pkt 1fpkt"];
5573--18326[label="0.00862069;1pkt 1fpkt"];
5573--18770[label="0.0163934;1pkt 1fpkt"];
5573--19219[label="0.027027;1pkt 1fpkt"];
5573--19786[label="0.0434783;1pkt 1fpkt"];
5573--19916[label="0.507692;33pkt 33fpkt"];
5573--19940[label="1;100pkt 100fpkt"];
5573--21332[label="0.00869565;1pkt 1fpkt"];
5573--21639[label="0.0163934;1pkt 1fpkt"];
5573--22356[label="0.0416667;1pkt 1fpkt"];
5573--22467[label="1;100pkt 100fpkt"];
7195--16266[label="1;99pkt 99fpkt"];
7195--19940[label="1;100pkt 100fpkt"];
7195--22467[label="1;100pkt 100fpkt"];
16227--19916[label="1;65pkt 65fpkt"];
16266--19940[label="1;99pkt 99fpkt"];
16266--22467[label="1;99pkt 99fpkt"];
19940--22467[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.72.2" dst_port="25" src_ip="4.37.154.220"/>
      <filter dst_ip="200.173.72.2" dst_port="25" src_ip="84.225.160.218"/>
      <filter dst_ip="200.173.72.2" dst_port="64857" src_port="53"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.38354,3.0187,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1997{
style=filled;
color=gray75;
4344[label="169.6.96.177;s;54pkt 54fpkt", shape=diamond, color=yellow];
5786[label="213.2.69.97;d;7pkt 7fpkt", shape=diamond, color=yellow];
9871[label="169.6.96.177;s;52pkt 52fpkt", shape=hexagon, color=black];
9952[label="213.2.69.97;d;5pkt 5fpkt", shape=hexagon, color=black];
stat1997[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.96.177:*, 62.241.69.133:80}[57.4074%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3051%)&lt;BR/&gt; 0: (3.38983%)&lt;BR/&gt; 1256: (1.69492%)&lt;BR/&gt; 1254: (1.69492%)&lt;BR/&gt; 1253: (1.69492%)&gt;];
}
4344--5786[label="1;7pkt 7fpkt"];
4344--7561[label="0.0185185;1pkt 1fpkt"];
4344--8000[label="0.0185185;1pkt 1fpkt"];
4344--8442[label="0.0185185;1pkt 1fpkt"];
4344--9871[label="1;52pkt 52fpkt"];
4344--9952[label="1;5pkt 5fpkt"];
4344--11265[label="0.0925926;5pkt 5fpkt"];
4344--11285[label="0.12963;7pkt 7fpkt"];
4344--11338[label="0.0925926;5pkt 5fpkt"];
4344--11351[label="0.12963;7pkt 7fpkt"];
4344--11382[label="0.0925926;5pkt 5fpkt"];
4344--11392[label="0.12963;7pkt 7fpkt"];
5786--9871[label="0.714286;5pkt 5fpkt"];
5786--9952[label="1;5pkt 5fpkt"];
9871--9952[label="1;5pkt 5fpkt"];
9871--11265[label="0.0961538;5pkt 5fpkt"];
9871--11285[label="0.134615;7pkt 7fpkt"];
9871--11338[label="0.0961538;5pkt 5fpkt"];
9871--11351[label="0.134615;7pkt 7fpkt"];
9871--11382[label="0.0961538;5pkt 5fpkt"];
9871--11392[label="0.134615;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="62.241.69.133" dst_port="80" src_ip="169.6.96.177"/>
    </slice>
    <from sec="1191992457" usec="0"/>
    <to sec="1191993229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.102.147.219"/>
    </slice>
    <from sec="1191992620" usec="0"/>
    <to sec="1191992652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.173.64.220"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="83.22.74.220"/>
    </slice>
    <from sec="1191992708" usec="0"/>
    <to sec="1191993272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.67.151.220"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.230.181.220"/>
    </slice>
    <from sec="1191992776" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.210.9.221"/>
    </slice>
    <from sec="1191992749" usec="0"/>
    <to sec="1191992783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.94.11.221"/>
    </slice>
    <from sec="1191993019" usec="0"/>
    <to sec="1191993023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.175.20.221"/>
    </slice>
    <from sec="1191993268" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.26.26.221"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2007{
style=filled;
color=gray75;
16282[label="210.128.82.221;3pkt 3fpkt", shape=pentagon, color=darkviolet];
19949[label="210.128.82.221;3pkt 3fpkt", shape=invtriangle, color=brown];
22472[label="210.128.82.221;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2007[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.82.221:80, 169.6.100.251:1150}[33.3333%]&lt;BR/&gt;{210.128.82.221:80, 169.6.100.251:1151}[33.3333%]&lt;BR/&gt;{210.128.82.221:80, 169.6.100.251:1152}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1152: (18.75%)&lt;BR/&gt; 1151: (18.75%)&lt;BR/&gt; 1150: (12.5%)&gt;];
}
16282--19949[label="1;3pkt 3fpkt"];
16282--22472[label="1;2pkt 2fpkt"];
19949--22472[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.100.251" dst_port="1152" src_ip="210.128.82.221" src_port="80"/>
      <filter dst_ip="169.6.100.251" dst_port="1151" src_ip="210.128.82.221" src_port="80"/>
      <filter dst_ip="169.6.100.251" dst_port="1150" src_ip="210.128.82.221" src_port="80"/>
    </slice>
    <from sec="1191993274" usec="0"/>
    <to sec="1191993277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2008{
style=filled;
color=gray75;
16307[label="169.6.226.222;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19966[label="169.6.226.222;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2008[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.226.222:1686, 39.128.186.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1686: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16307--19966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="39.128.186.56" dst_port="80" src_ip="169.6.226.222" src_port="1686"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2009{
style=filled;
color=gray75;
16316[label="128.247.152.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
19974[label="128.247.152.223;1pkt 1fpkt", shape=invtriangle, color=brown];
22489[label="128.247.152.223;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2009[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.247.152.223:81, 61.86.172.170:36277}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36277: (50%)&lt;BR/&gt; 81: (50%)&gt;];
}
16316--19974[label="1;1pkt 1fpkt"];
16316--22489[label="1;1pkt 1fpkt"];
19974--22489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="61.86.172.170" dst_port="36277" src_ip="128.247.152.223" src_port="81"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.103.14.224"/>
    </slice>
    <from sec="1191993105" usec="0"/>
    <to sec="1191993136" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.238.20.224"/>
    </slice>
    <from sec="1191992950" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2012{
style=filled;
color=gray75;
3368[label="172.130.117.224;s;267pkt 267fpkt", shape=diamond, color=yellow];
16325[label="172.130.117.224;287pkt 287fpkt", shape=pentagon, color=darkviolet];
19980[label="172.130.117.224;286pkt 286fpkt", shape=invtriangle, color=brown];
22494[label="172.130.117.224;286pkt 286fpkt", shape=invhouse, color=bisque];
stat2012[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.117.224:55339, *:53}[92.6829%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.0462%)&lt;BR/&gt; 55339: (46.27%)&lt;BR/&gt; 0: (3.90764%)&lt;BR/&gt; 58909: (0.17762%)&lt;BR/&gt; 50582: (0.17762%)&gt;];
}
3368--4062[label="0.0175439;1pkt 1fpkt"];
3368--4066[label="0.00374532;1pkt 1fpkt"];
3368--4136[label="0.008;1pkt 1fpkt"];
3368--4737[label="0.0104167;1pkt 1fpkt"];
3368--4752[label="0.00574713;1pkt 1fpkt"];
3368--4820[label="0.00552486;1pkt 1fpkt"];
3368--4832[label="0.00564972;1pkt 1fpkt"];
3368--4842[label="0.00787402;1pkt 1fpkt"];
3368--4850[label="0.00657895;1pkt 1fpkt"];
3368--4863[label="0.00558659;1pkt 1fpkt"];
3368--4883[label="0.00515464;1pkt 1fpkt"];
3368--5444[label="0.0105263;1pkt 1fpkt"];
3368--5445[label="0.011236;1pkt 1fpkt"];
3368--5560[label="0.00374532;1pkt 1fpkt"];
3368--5570[label="0.0588235;1pkt 1fpkt"];
3368--6094[label="0.00833333;1pkt 1fpkt"];
3368--6100[label="0.00641026;1pkt 1fpkt"];
3368--6139[label="0.010989;1pkt 1fpkt"];
3368--6184[label="0.00641026;1pkt 1fpkt"];
3368--6763[label="0.0151515;1pkt 1fpkt"];
3368--6800[label="0.0111111;1pkt 1fpkt"];
3368--6817[label="0.0111111;2pkt 2fpkt"];
3368--6847[label="0.00641026;1pkt 1fpkt"];
3368--7475[label="0.00374532;1pkt 1fpkt"];
3368--8136[label="0.00374532;1pkt 1fpkt"];
3368--8147[label="0.00374532;1pkt 1fpkt"];
3368--8409[label="0.00568182;1pkt 1fpkt"];
3368--8815[label="0.0227273;1pkt 1fpkt"];
3368--9619[label="0.0119048;1pkt 1fpkt"];
3368--9627[label="0.00574713;1pkt 1fpkt"];
3368--9710[label="0.00564972;1pkt 1fpkt"];
3368--9743[label="0.00374532;1pkt 1fpkt"];
3368--9749[label="0.0666667;1pkt 1fpkt"];
3368--10149[label="0.00833333;1pkt 1fpkt"];
3368--10153[label="0.00666667;1pkt 1fpkt"];
3368--10208[label="0.0114943;1pkt 1fpkt"];
3368--10210[label="0.00578035;1pkt 1fpkt"];
3368--10584[label="0.00374532;1pkt 1fpkt"];
3368--11040[label="0.00374532;1pkt 1fpkt"];
3368--11215[label="0.00833333;1pkt 1fpkt"];
3368--11337[label="0.250936;67pkt 67fpkt"];
3368--11381[label="0.250936;67pkt 67fpkt"];
3368--16325[label="1;267pkt 267fpkt"];
3368--19980[label="0.996255;266pkt 266fpkt"];
3368--22494[label="0.996255;266pkt 266fpkt"];
16325--19980[label="1;286pkt 286fpkt"];
16325--22494[label="1;286pkt 286fpkt"];
19980--22494[label="1;286pkt 286fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="172.130.117.224" src_port="55339"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.100.126.224"/>
    </slice>
    <from sec="1191992590" usec="0"/>
    <to sec="1191992594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.43.210.224"/>
    </slice>
    <from sec="1191993049" usec="0"/>
    <to sec="1191993131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.74.16.225"/>
    </slice>
    <from sec="1191992504" usec="0"/>
    <to sec="1191992537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.131.102.225"/>
    </slice>
    <from sec="1191992491" usec="0"/>
    <to sec="1191992539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2017{
style=filled;
color=gray75;
16355[label="172.130.147.225;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20002[label="172.130.147.225;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2017[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.147.225:37152, 209.50.2.173:80}[50%]&lt;BR/&gt;{172.130.147.225:37153, 209.50.2.173:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37153: (25%)&lt;BR/&gt; 37152: (25%)&gt;];
}
16355--20002[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.50.2.173" dst_port="80" src_ip="172.130.147.225" src_port="37153"/>
      <filter dst_ip="209.50.2.173" dst_port="80" src_ip="172.130.147.225" src_port="37152"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.11.6.226"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.8.139.226"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.21.212.226"/>
    </slice>
    <from sec="1191992836" usec="0"/>
    <to sec="1191992852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2021{
style=filled;
color=gray75;
16378[label="219.164.234.226;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20018[label="219.164.234.226;2pkt 2fpkt", shape=invtriangle, color=brown];
22520[label="219.164.234.226;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2021[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.164.234.226:80, 169.6.217.81:52004}[50%]&lt;BR/&gt;{219.164.234.226:80, 169.6.217.81:52017}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52017: (25%)&lt;BR/&gt; 52004: (25%)&gt;];
}
16378--20018[label="1;2pkt 2fpkt"];
16378--22520[label="1;2pkt 2fpkt"];
20018--22520[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.217.81" dst_port="52017" src_ip="219.164.234.226" src_port="80"/>
      <filter dst_ip="169.6.217.81" dst_port="52004" src_ip="219.164.234.226" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.78.64.227"/>
    </slice>
    <from sec="1191992949" usec="0"/>
    <to sec="1191992984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.134.66.227"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2024{
style=filled;
color=gray75;
16388[label="9.228.140.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20026[label="9.228.140.227;1pkt 1fpkt", shape=invtriangle, color=brown];
22527[label="9.228.140.227;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2024[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.228.140.227:62038, 134.71.143.139:80}[50%]&lt;BR/&gt;{9.228.140.227:62387, 134.71.143.139:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62387: (37.5%)&lt;BR/&gt; 62038: (12.5%)&gt;];
}
16388--20026[label="1;1pkt 1fpkt"];
16388--22527[label="1;1pkt 1fpkt"];
20026--22527[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="9.228.140.227" src_port="62387"/>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="9.228.140.227" src_port="62038"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2025{
style=filled;
color=gray75;
16396[label="169.6.240.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20030[label="169.6.240.227;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2025[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.6.240.227:24784, 1.178.132.195:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24784: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16396--20030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.178.132.195" dst_port="80" src_ip="169.6.240.227" src_port="24784"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.195.55.228"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.203.167.228"/>
    </slice>
    <from sec="1191992786" usec="0"/>
    <to sec="1191992826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.169.209.228"/>
    </slice>
    <from sec="1191993132" usec="0"/>
    <to sec="1191993158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.220.36.229"/>
    </slice>
    <from sec="1191993000" usec="0"/>
    <to sec="1191993251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2030{
style=filled;
color=gray75;
16427[label="220.72.6.230;3pkt 3fpkt", shape=pentagon, color=darkviolet];
20048[label="220.72.6.230;2pkt 2fpkt", shape=invtriangle, color=brown];
22546[label="220.72.6.230;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2030[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.72.6.230:80, 134.71.37.37:2525}[33.3333%]&lt;BR/&gt;{220.72.6.230:80, 134.71.37.37:2526}[33.3333%]&lt;BR/&gt;{220.72.6.230:80, 134.71.37.37:2529}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2529: (21.4286%)&lt;BR/&gt; 2526: (21.4286%)&lt;BR/&gt; 2525: (7.14286%)&gt;];
}
16427--20048[label="1;2pkt 2fpkt"];
16427--22546[label="1;2pkt 2fpkt"];
20048--22546[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.37.37" dst_port="2529" src_ip="220.72.6.230" src_port="80"/>
      <filter dst_ip="134.71.37.37" dst_port="2526" src_ip="220.72.6.230" src_port="80"/>
      <filter dst_ip="134.71.37.37" dst_port="2525" src_ip="220.72.6.230" src_port="80"/>
    </slice>
    <from sec="1191993258" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.9.49.230"/>
    </slice>
    <from sec="1191992902" usec="0"/>
    <to sec="1191992926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.157.52.230"/>
    </slice>
    <from sec="1191992417" usec="0"/>
    <to sec="1191993248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.250.80.230"/>
    </slice>
    <from sec="1191992463" usec="0"/>
    <to sec="1191992493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.147.116.230"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2036{
style=filled;
color=gray75;
16446[label="43.3.100.231;108pkt 108fpkt", shape=pentagon, color=darkviolet];
20061[label="43.3.100.231;109pkt 109fpkt", shape=invtriangle, color=brown];
22556[label="43.3.100.231;109pkt 109fpkt", shape=invhouse, color=bisque];
stat2036[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.3.100.231:1030, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1030: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
16446--20061[label="1;108pkt 108fpkt"];
16446--22556[label="1;108pkt 108fpkt"];
20061--22556[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="43.3.100.231" src_port="1030"/>
    </slice>
    <from sec="1191993140" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.19.128.232"/>
    </slice>
    <from sec="1191992492" usec="0"/>
    <to sec="1191992517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.63.153.232"/>
    </slice>
    <from sec="1191992589" usec="0"/>
    <to sec="1191992621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.89.175.232"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2040{
style=filled;
color=gray75;
16465[label="75.2.185.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20073[label="75.2.185.232;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2040[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.2.185.232:80, 200.173.67.0:53003}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53003: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16465--20073[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.67.0" dst_port="53003" src_ip="75.2.185.232" src_port="80"/>
    </slice>
    <from sec="1191992583" usec="0"/>
    <to sec="1191992590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.124.226.232"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2042{
style=filled;
color=gray75;
16471[label="172.130.52.233;14pkt 14fpkt", shape=pentagon, color=darkviolet];
20078[label="172.130.52.233;14pkt 14fpkt", shape=invtriangle, color=brown];
22570[label="172.130.52.233;13pkt 13fpkt", shape=invhouse, color=bisque];
stat2042[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.52.233:*, 201.179.127.171:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1255: (3.65854%)&lt;BR/&gt; 1253: (3.65854%)&lt;BR/&gt; 1252: (3.65854%)&lt;BR/&gt; 1251: (3.65854%)&gt;];
}
16471--20078[label="1;14pkt 14fpkt"];
16471--22570[label="1;13pkt 13fpkt"];
20078--22570[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="201.179.127.171" dst_port="80" src_ip="172.130.52.233"/>
    </slice>
    <from sec="1191993294" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2043{
style=filled;
color=gray75;
16492[label="217.119.90.234;130pkt 130fpkt", shape=pentagon, color=darkviolet];
20089[label="217.119.90.234;130pkt 130fpkt", shape=invtriangle, color=brown];
stat2043[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.119.90.234:80, 172.159.178.3:*}[96.9231%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4615%)&lt;BR/&gt; 53: (1.53846%)&lt;BR/&gt; 50365: (1.15385%)&lt;BR/&gt; 55774: (0.384615%)&lt;BR/&gt; 55772: (0.384615%)&gt;];
}
16492--20089[label="1;130pkt 130fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.178.3" src_ip="217.119.90.234" src_port="80"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.149.192.234"/>
    </slice>
    <from sec="1191993003" usec="0"/>
    <to sec="1191993106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2045{
style=filled;
color=gray75;
16510[label="218.38.81.235;3pkt 3fpkt", shape=pentagon, color=darkviolet];
20096[label="218.38.81.235;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2045[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.38.81.235:80, 201.75.184.24:60105}[33.3333%]&lt;BR/&gt;{218.38.81.235:80, 201.75.184.24:61365}[33.3333%]&lt;BR/&gt;{218.38.81.235:80, 201.75.184.24:62848}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62848: (16.6667%)&lt;BR/&gt; 61365: (16.6667%)&lt;BR/&gt; 60105: (16.6667%)&gt;];
}
16510--20096[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.184.24" dst_port="62848" src_ip="218.38.81.235" src_port="80"/>
      <filter dst_ip="201.75.184.24" dst_port="61365" src_ip="218.38.81.235" src_port="80"/>
      <filter dst_ip="201.75.184.24" dst_port="60105" src_ip="218.38.81.235" src_port="80"/>
    </slice>
    <from sec="1191993259" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.152.235"/>
    </slice>
    <from sec="1191992931" usec="0"/>
    <to sec="1191993121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.165.160.235"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.16.177.235"/>
    </slice>
    <from sec="1191993080" usec="0"/>
    <to sec="1191993095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.2.236.235"/>
    </slice>
    <from sec="1191992780" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.143.135.236"/>
    </slice>
    <from sec="1191992706" usec="0"/>
    <to sec="1191992897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.119.233.236"/>
    </slice>
    <from sec="1191992423" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.16.106.237"/>
    </slice>
    <from sec="1191992602" usec="0"/>
    <to sec="1191992769" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2054{
style=filled;
color=gray75;
16549[label="201.125.140.237;22pkt 22fpkt", shape=pentagon, color=darkviolet];
20123[label="201.125.140.237;22pkt 22fpkt", shape=invtriangle, color=brown];
22603[label="201.125.140.237;22pkt 22fpkt", shape=invhouse, color=bisque];
stat2054[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.125.140.237:80, 201.75.53.218:*}[54.5455%]&lt;BR/&gt;{201.125.140.237:80, 169.6.138.200:*}[45.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2975: (2.27273%)&lt;BR/&gt; 2973: (2.27273%)&lt;BR/&gt; 2971: (2.27273%)&lt;BR/&gt; 2969: (2.27273%)&gt;];
}
16549--20123[label="1;22pkt 22fpkt"];
16549--22603[label="1;22pkt 22fpkt"];
20123--22603[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.53.218" src_ip="201.125.140.237" src_port="80"/>
      <filter dst_ip="169.6.138.200" src_ip="201.125.140.237" src_port="80"/>
    </slice>
    <from sec="1191993044" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2055{
style=filled;
color=gray75;
16552[label="201.66.166.237;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20125[label="201.66.166.237;2pkt 2fpkt", shape=invtriangle, color=brown];
22605[label="201.66.166.237;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2055[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.66.166.237:80, 169.6.221.166:46506}[50%]&lt;BR/&gt;{201.66.166.237:80, 169.6.221.166:46507}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46507: (25%)&lt;BR/&gt; 46506: (25%)&gt;];
}
16552--20125[label="1;2pkt 2fpkt"];
16552--22605[label="1;2pkt 2fpkt"];
20125--22605[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.221.166" dst_port="46507" src_ip="201.66.166.237" src_port="80"/>
      <filter dst_ip="169.6.221.166" dst_port="46506" src_ip="201.66.166.237" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2056{
style=filled;
color=gray75;
16555[label="220.221.255.237;32pkt 32fpkt", shape=pentagon, color=darkviolet];
20127[label="220.221.255.237;33pkt 33fpkt", shape=invtriangle, color=brown];
22607[label="220.221.255.237;32pkt 32fpkt", shape=invhouse, color=bisque];
stat2056[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.221.255.237:*, 172.133.136.225:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4527: (1.54639%)&lt;BR/&gt; 4526: (1.54639%)&lt;BR/&gt; 4524: (1.54639%)&lt;BR/&gt; 4520: (1.54639%)&gt;];
}
16555--20127[label="1;32pkt 32fpkt"];
16555--22607[label="1;32pkt 32fpkt"];
20127--22607[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="172.133.136.225" dst_port="80" src_ip="220.221.255.237"/>
    </slice>
    <from sec="1191992821" usec="0"/>
    <to sec="1191993162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.136.82.238"/>
    </slice>
    <from sec="1191993090" usec="0"/>
    <to sec="1191993111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.220.35.239"/>
    </slice>
    <from sec="1191992519" usec="0"/>
    <to sec="1191992562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.124.3.240"/>
    </slice>
    <from sec="1191993176" usec="0"/>
    <to sec="1191993245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2060{
style=filled;
color=gray75;
16594[label="216.221.118.240;4pkt 4fpkt", shape=pentagon, color=darkviolet];
20152[label="216.221.118.240;4pkt 4fpkt", shape=invtriangle, color=brown];
22630[label="216.221.118.240;3pkt 3fpkt", shape=invhouse, color=bisque];
stat2060[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.221.118.240:2279, 172.159.210.177:80}[25%]&lt;BR/&gt;{216.221.118.240:2134, 172.159.161.127:80}[25%]&lt;BR/&gt;{216.221.118.240:2175, 172.159.161.127:80}[25%]&lt;BR/&gt;{216.221.118.240:2184, 172.159.161.127:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2184: (13.6364%)&lt;BR/&gt; 2175: (13.6364%)&lt;BR/&gt; 2134: (13.6364%)&lt;BR/&gt; 2279: (9.09091%)&gt;];
}
16594--20152[label="1;4pkt 4fpkt"];
16594--22630[label="1;3pkt 3fpkt"];
20152--22630[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.159.161.127" dst_port="80" src_ip="216.221.118.240" src_port="2184"/>
      <filter dst_ip="172.159.161.127" dst_port="80" src_ip="216.221.118.240" src_port="2175"/>
      <filter dst_ip="172.159.161.127" dst_port="80" src_ip="216.221.118.240" src_port="2134"/>
      <filter dst_ip="172.159.210.177" dst_port="80" src_ip="216.221.118.240" src_port="2279"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191992479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.206.172.240"/>
    </slice>
    <from sec="1191992614" usec="0"/>
    <to sec="1191992718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2062{
style=filled;
color=gray75;
16602[label="116.167.222.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20155[label="116.167.222.240;2pkt 2fpkt", shape=invtriangle, color=brown];
22633[label="116.167.222.240;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2062[shape=component, label=&lt;Rules:&lt;BR/&gt;{116.167.222.240:80, 169.6.72.123:1995}[50%]&lt;BR/&gt;{116.167.222.240:80, 169.6.72.123:1998}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1998: (25%)&lt;BR/&gt; 1995: (25%)&gt;];
}
16602--20155[label="1;2pkt 2fpkt"];
16602--22633[label="1;2pkt 2fpkt"];
20155--22633[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.72.123" dst_port="1998" src_ip="116.167.222.240" src_port="80"/>
      <filter dst_ip="169.6.72.123" dst_port="1995" src_ip="116.167.222.240" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.116.16.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.230.140.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.69.73.242"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2067{
style=filled;
color=gray75;
16637[label="201.202.182.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20177[label="201.202.182.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat2067[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.202.182.242:80, 201.75.50.157:37504}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37504: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16637--20177[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.50.157" dst_port="37504" src_ip="201.202.182.242" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.150.22.243"/>
    </slice>
    <from sec="1191992946" usec="0"/>
    <to sec="1191993007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2069{
style=filled;
color=gray75;
16646[label="136.211.171.243;25pkt 25fpkt", shape=pentagon, color=darkviolet];
20183[label="136.211.171.243;25pkt 25fpkt", shape=invtriangle, color=brown];
stat2069[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.211.171.243:80, 169.6.100.124:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1319: (2%)&lt;BR/&gt; 1318: (2%)&lt;BR/&gt; 1317: (2%)&lt;BR/&gt; 1316: (2%)&gt;];
}
16646--20183[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.100.124" src_ip="136.211.171.243" src_port="80"/>
    </slice>
    <from sec="1191992439" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.125.243.243"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2071{
style=filled;
color=gray75;
14428[label="168.53.147.136;48pkt 48fpkt", shape=pentagon, color=darkviolet];
18753[label="168.53.147.136;47pkt 47fpkt", shape=invtriangle, color=brown];
21626[label="168.53.147.136;48pkt 48fpkt", shape=invhouse, color=bisque];
stat2071[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.53.147.136:32816, *:53}[77.0833%]&lt;BR/&gt;{168.53.147.136:53, *:*}[22.9167%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32816: (38.4615%)&lt;BR/&gt; 32768: (2.0979%)&lt;BR/&gt; 52712: (1.04895%)&lt;BR/&gt; 43807: (1.04895%)&gt;];
}
14428--18753[label="1;47pkt 47fpkt"];
14428--21626[label="1;48pkt 48fpkt"];
18753--21626[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter src_ip="168.53.147.136" src_port="53"/>
      <filter dst_port="53" src_ip="168.53.147.136" src_port="32816"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.43.85.244"/>
    </slice>
    <from sec="1191992734" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.203.148.244"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.22.209.244"/>
    </slice>
    <from sec="1191992884" usec="0"/>
    <to sec="1191992918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.155.27.245"/>
    </slice>
    <from sec="1191993215" usec="0"/>
    <to sec="1191993222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.513087,3.09641,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_2076{
style=filled;
color=gray75;
16676[label="201.153.31.245;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20201[label="201.153.31.245;2pkt 2fpkt", shape=invtriangle, color=brown];
stat2076[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.153.31.245:3269, 201.161.66.82:1433}[50%]&lt;BR/&gt;{201.153.31.245:3294, 201.161.76.101:1433}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 3294: (25%)&lt;BR/&gt; 3269: (25%)&gt;];
}
16676--20201[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="201.161.76.101" dst_port="1433" src_ip="201.153.31.245" src_port="3294"/>
      <filter dst_ip="201.161.66.82" dst_port="1433" src_ip="201.153.31.245" src_port="3269"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.199.33.245"/>
    </slice>
    <from sec="1191992585" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.182.89.245"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191992533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.206.141.245"/>
    </slice>
    <from sec="1191993270" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2080{
style=filled;
color=gray75;
16689[label="172.130.155.245;7pkt 7fpkt", shape=pentagon, color=darkviolet];
20211[label="172.130.155.245;7pkt 7fpkt", shape=invtriangle, color=brown];
22665[label="172.130.155.245;6pkt 6fpkt", shape=invhouse, color=bisque];
stat2080[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.130.155.245:*, 200.210.20.252:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33037: (7.5%)&lt;BR/&gt; 33036: (7.5%)&lt;BR/&gt; 33035: (7.5%)&lt;BR/&gt; 33034: (7.5%)&gt;];
}
16689--20211[label="1;7pkt 7fpkt"];
16689--22665[label="1;6pkt 6fpkt"];
20211--22665[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="200.210.20.252" dst_port="80" src_ip="172.130.155.245"/>
    </slice>
    <from sec="1191993241" usec="0"/>
    <to sec="1191993250" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2081{
style=filled;
color=gray75;
16693[label="201.152.213.245;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20213[label="201.152.213.245;1pkt 1fpkt", shape=invtriangle, color=brown];
22666[label="201.152.213.245;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2081[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.152.213.245:3279, 201.75.161.226:2968}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3279: (50%)&lt;BR/&gt; 2968: (50%)&gt;];
}
16693--20213[label="1;1pkt 1fpkt"];
16693--22666[label="1;1pkt 1fpkt"];
20213--22666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.161.226" dst_port="2968" src_ip="201.152.213.245" src_port="3279"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.189.107.246"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.24.123.246"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.144.146.246"/>
    </slice>
    <from sec="1191992890" usec="0"/>
    <to sec="1191992982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.158.200.246"/>
    </slice>
    <from sec="1191993201" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2086{
style=filled;
color=gray75;
16715[label="201.197.54.247;6pkt 6fpkt", shape=pentagon, color=darkviolet];
20229[label="201.197.54.247;6pkt 6fpkt", shape=invtriangle, color=brown];
22681[label="201.197.54.247;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2086[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.197.54.247:80, 172.64.81.0:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4868: (8.82353%)&lt;BR/&gt; 4867: (8.82353%)&lt;BR/&gt; 4866: (8.82353%)&lt;BR/&gt; 4865: (8.82353%)&gt;];
}
16715--20229[label="1;6pkt 6fpkt"];
16715--22681[label="1;5pkt 5fpkt"];
20229--22681[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="172.64.81.0" src_ip="201.197.54.247" src_port="80"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="60.96.223.247"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.64.8.248"/>
    </slice>
    <from sec="1191993253" usec="0"/>
    <to sec="1191993274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="84.176.41.248"/>
    </slice>
    <from sec="1191992928" usec="0"/>
    <to sec="1191992981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.32.43.248"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.144.140.248"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.41.92.249"/>
    </slice>
    <from sec="1191992594" usec="0"/>
    <to sec="1191992673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2093{
style=filled;
color=gray75;
16751[label="188.104.105.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20256[label="188.104.105.249;2pkt 2fpkt", shape=invtriangle, color=brown];
22706[label="188.104.105.249;2pkt 2fpkt", shape=invhouse, color=bisque];
stat2093[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.104.105.249:54167, 217.36.147.6:8080}[50%]&lt;BR/&gt;{188.104.105.249:54150, 217.36.147.116:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54167: (25%)&lt;BR/&gt; 54150: (25%)&lt;BR/&gt; 8080: (25%)&lt;BR/&gt; 80: (25%)&gt;];
}
16751--20256[label="1;2pkt 2fpkt"];
16751--22706[label="1;2pkt 2fpkt"];
20256--22706[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.36.147.116" dst_port="80" src_ip="188.104.105.249" src_port="54150"/>
      <filter dst_ip="217.36.147.6" dst_port="8080" src_ip="188.104.105.249" src_port="54167"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.26.195.249"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.164.37.250"/>
    </slice>
    <from sec="1191993205" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2096{
style=filled;
color=gray75;
16762[label="210.128.97.250;4pkt 4fpkt", shape=pentagon, color=darkviolet];
20264[label="210.128.97.250;4pkt 4fpkt", shape=invtriangle, color=brown];
22713[label="210.128.97.250;4pkt 4fpkt", shape=invhouse, color=bisque];
stat2096[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.97.250:80, 201.75.50.157:37321}[25%]&lt;BR/&gt;{210.128.97.250:80, 201.75.50.157:37330}[25%]&lt;BR/&gt;{210.128.97.250:80, 201.75.50.157:37344}[25%]&lt;BR/&gt;{210.128.97.250:80, 201.75.50.157:37347}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37347: (12.5%)&lt;BR/&gt; 37344: (12.5%)&lt;BR/&gt; 37330: (12.5%)&lt;BR/&gt; 37321: (12.5%)&gt;];
}
16762--20264[label="1;4pkt 4fpkt"];
16762--22713[label="1;4pkt 4fpkt"];
20264--22713[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="201.75.50.157" dst_port="37347" src_ip="210.128.97.250" src_port="80"/>
      <filter dst_ip="201.75.50.157" dst_port="37344" src_ip="210.128.97.250" src_port="80"/>
      <filter dst_ip="201.75.50.157" dst_port="37330" src_ip="210.128.97.250" src_port="80"/>
      <filter dst_ip="201.75.50.157" dst_port="37321" src_ip="210.128.97.250" src_port="80"/>
    </slice>
    <from sec="1191993263" usec="0"/>
    <to sec="1191993273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.160.107.250"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.176.150.250"/>
    </slice>
    <from sec="1191992900" usec="0"/>
    <to sec="1191993014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2099{
style=filled;
color=gray75;
16771[label="217.138.167.250;11pkt 11fpkt", shape=pentagon, color=darkviolet];
20270[label="217.138.167.250;11pkt 11fpkt", shape=invtriangle, color=brown];
22715[label="217.138.167.250;11pkt 11fpkt", shape=invhouse, color=bisque];
stat2099[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.138.167.250:80, 169.6.224.12:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4107: (4.54545%)&lt;BR/&gt; 4005: (4.54545%)&lt;BR/&gt; 3346: (4.54545%)&lt;BR/&gt; 2800: (4.54545%)&gt;];
}
16771--20270[label="1;11pkt 11fpkt"];
16771--22715[label="1;11pkt 11fpkt"];
20270--22715[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="169.6.224.12" src_ip="217.138.167.250" src_port="80"/>
    </slice>
    <from sec="1191993250" usec="0"/>
    <to sec="1191993268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.34.26.251"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.167.90.252"/>
    </slice>
    <from sec="1191992617" usec="0"/>
    <to sec="1191992712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2102{
style=filled;
color=gray75;
16800[label="41.149.166.252;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20289[label="41.149.166.252;1pkt 1fpkt", shape=invtriangle, color=brown];
22728[label="41.149.166.252;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2102[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.149.166.252:3340, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3340: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16800--20289[label="1;1pkt 1fpkt"];
16800--22728[label="1;1pkt 1fpkt"];
20289--22728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="41.149.166.252" src_port="3340"/>
    </slice>
    <from sec="1191992537" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.107.9.253"/>
    </slice>
    <from sec="1191992998" usec="0"/>
    <to sec="1191993029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2104{
style=filled;
color=gray75;
16820[label="85.193.186.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20301[label="85.193.186.253;1pkt 1fpkt", shape=invtriangle, color=brown];
22737[label="85.193.186.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2104[shape=component, label=&lt;Rules:&lt;BR/&gt;{85.193.186.253:1285, 134.71.143.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1285: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
16820--20301[label="1;1pkt 1fpkt"];
16820--22737[label="1;1pkt 1fpkt"];
20301--22737[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="85.193.186.253" src_port="1285"/>
    </slice>
    <from sec="1191992640" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2105{
style=filled;
color=gray75;
16821[label="39.154.193.253;15pkt 15fpkt", shape=pentagon, color=darkviolet];
20302[label="39.154.193.253;15pkt 15fpkt", shape=invtriangle, color=brown];
22738[label="39.154.193.253;16pkt 16fpkt", shape=invhouse, color=bisque];
stat2105[shape=component, label=&lt;Rules:&lt;BR/&gt;{39.154.193.253:80, 134.71.58.81:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4125: (3.26087%)&lt;BR/&gt; 4124: (3.26087%)&lt;BR/&gt; 4123: (3.26087%)&lt;BR/&gt; 4122: (3.26087%)&gt;];
}
16821--20302[label="1;15pkt 15fpkt"];
16821--22738[label="1;15pkt 15fpkt"];
20302--22738[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.58.81" src_ip="39.154.193.253" src_port="80"/>
    </slice>
    <from sec="1191993271" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.530909,3.12347,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.13.212.253"/>
    </slice>
    <from sec="1191992762" usec="0"/>
    <to sec="1191992786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.685175,3.07302,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2107{
style=filled;
color=gray75;
16825[label="38.26.28.254;2pkt 2fpkt", shape=pentagon, color=darkviolet];
20305[label="38.26.28.254;1pkt 1fpkt", shape=invtriangle, color=brown];
22741[label="38.26.28.254;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2107[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.26.28.254:1059, 134.71.143.139:80}[50%]&lt;BR/&gt;{38.26.28.254:1205, 134.71.143.139:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1205: (37.5%)&lt;BR/&gt; 1059: (12.5%)&gt;];
}
16825--20305[label="1;1pkt 1fpkt"];
16825--22741[label="1;1pkt 1fpkt"];
20305--22741[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="38.26.28.254" src_port="1205"/>
      <filter dst_ip="134.71.143.139" dst_port="80" src_ip="38.26.28.254" src_port="1059"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="129.199.70.0"/>
    </slice>
    <from sec="1191992700" usec="0"/>
    <to sec="1191992733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.46.80.0"/>
    </slice>
    <from sec="1191992883" usec="0"/>
    <to sec="1191992894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.133.74.2"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.155.115.3"/>
    </slice>
    <from sec="1191992667" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.236.208.3"/>
    </slice>
    <from sec="1191993015" usec="0"/>
    <to sec="1191993035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.174.103.4"/>
    </slice>
    <from sec="1191992866" usec="0"/>
    <to sec="1191992908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.42.240.4"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.85.45.5"/>
    </slice>
    <from sec="1191992527" usec="0"/>
    <to sec="1191992568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.208.198.5"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602591,3.09624,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_2117{
style=filled;
color=gray75;
11574[label="84.14.36.6;1pkt 1fpkt", shape=pentagon, color=darkviolet];
20387[label="84.14.36.6;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2117[shape=component, label=&lt;Rules:&lt;BR/&gt;{84.14.36.6:34999, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34999: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11574--20387[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="84.14.36.6" src_port="34999"/>
    </slice>
    <from sec="1191993271" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.76.50.6"/>
    </slice>
    <from sec="1191992561" usec="0"/>
    <to sec="1191992568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.78.35.7"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.57.39.7"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.64.59.7"/>
    </slice>
    <from sec="1191992671" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.174.88.7"/>
    </slice>
    <from sec="1191992938" usec="0"/>
    <to sec="1191992965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.194.23.8"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.215.68.8"/>
    </slice>
    <from sec="1191992527" usec="0"/>
    <to sec="1191992547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="146.34.88.8"/>
    </slice>
    <from sec="1191992735" usec="0"/>
    <to sec="1191992770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.215.122.8"/>
    </slice>
    <from sec="1191992938" usec="0"/>
    <to sec="1191993207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.78.166.10"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.235.73.11"/>
    </slice>
    <from sec="1191992780" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.210.149.11"/>
    </slice>
    <from sec="1191993037" usec="0"/>
    <to sec="1191993040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.199.80.12"/>
    </slice>
    <from sec="1191992944" usec="0"/>
    <to sec="1191992970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.39.190.12"/>
    </slice>
    <from sec="1191993160" usec="0"/>
    <to sec="1191993280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="190.34.222.12"/>
    </slice>
    <from sec="1191992865" usec="0"/>
    <to sec="1191992917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.201.19.13"/>
    </slice>
    <from sec="1191992962" usec="0"/>
    <to sec="1191992992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.240.88.13"/>
    </slice>
    <from sec="1191993216" usec="0"/>
    <to sec="1191993245" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.11.136.13"/>
    </slice>
    <from sec="1191992887" usec="0"/>
    <to sec="1191992904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.214.178.13"/>
    </slice>
    <from sec="1191993132" usec="0"/>
    <to sec="1191993182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.210.76.14"/>
    </slice>
    <from sec="1191992590" usec="0"/>
    <to sec="1191992617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.232.102.15"/>
    </slice>
    <from sec="1191992943" usec="0"/>
    <to sec="1191992958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.140.11.16"/>
    </slice>
    <from sec="1191992785" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.169.69.16"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698621,3.10028,901,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2141{
style=filled;
color=gray75;
17098[label="210.128.90.16;1pkt 1fpkt", shape=invtriangle, color=brown];
20489[label="210.128.90.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2141[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.128.90.16:80, 134.71.67.48:1663}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1663: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
17098--20489[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.67.48" dst_port="1663" src_ip="210.128.90.16" src_port="80"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="144.105.85.17"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.128.105.17"/>
    </slice>
    <from sec="1191992687" usec="0"/>
    <to sec="1191992704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.53.209.17"/>
    </slice>
    <from sec="1191992770" usec="0"/>
    <to sec="1191992783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.160.244.17"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.50.134.18"/>
    </slice>
    <from sec="1191992496" usec="0"/>
    <to sec="1191992537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.2.174.18"/>
    </slice>
    <from sec="1191992560" usec="0"/>
    <to sec="1191992588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.104.180.18"/>
    </slice>
    <from sec="1191992425" usec="0"/>
    <to sec="1191993281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.171.105.19"/>
    </slice>
    <from sec="1191992917" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.108.147.19"/>
    </slice>
    <from sec="1191993135" usec="0"/>
    <to sec="1191993203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.23.118.20"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="146.58.56.21"/>
    </slice>
    <from sec="1191992958" usec="0"/>
    <to sec="1191992995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.16.72.21"/>
    </slice>
    <from sec="1191992632" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.70.233.21"/>
    </slice>
    <from sec="1191993124" usec="0"/>
    <to sec="1191993189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.17.242.22"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.157.23.24"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="169.6.248.24"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.51.91.25"/>
    </slice>
    <from sec="1191992849" usec="0"/>
    <to sec="1191992895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.119.212.25"/>
    </slice>
    <from sec="1191992810" usec="0"/>
    <to sec="1191992841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.157.235.25"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.22.160.27"/>
    </slice>
    <from sec="1191993225" usec="0"/>
    <to sec="1191993268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.119.96.28"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191993005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.169.113.28"/>
    </slice>
    <from sec="1191992807" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.100.124.28"/>
    </slice>
    <from sec="1191992815" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.50.158.28"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.202.83.29"/>
    </slice>
    <from sec="1191993012" usec="0"/>
    <to sec="1191993082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.150.26.31"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.208.185.31"/>
    </slice>
    <from sec="1191993031" usec="0"/>
    <to sec="1191993057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.177.166.32"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.106.195.32"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.156.208.32"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.232.208.32"/>
    </slice>
    <from sec="1191992663" usec="0"/>
    <to sec="1191992713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.49.141.33"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.124.194.33"/>
    </slice>
    <from sec="1191993261" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.170.247.34"/>
    </slice>
    <from sec="1191992863" usec="0"/>
    <to sec="1191992924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.37.24.35"/>
    </slice>
    <from sec="1191992948" usec="0"/>
    <to sec="1191993011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.151.42.36"/>
    </slice>
    <from sec="1191992933" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.54.99.37"/>
    </slice>
    <from sec="1191992641" usec="0"/>
    <to sec="1191992702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.179.244.37"/>
    </slice>
    <from sec="1191992471" usec="0"/>
    <to sec="1191992502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.128.9.38"/>
    </slice>
    <from sec="1191993069" usec="0"/>
    <to sec="1191993121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.222.12.38"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.181.115.38"/>
    </slice>
    <from sec="1191992828" usec="0"/>
    <to sec="1191992858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.167.9.39"/>
    </slice>
    <from sec="1191992692" usec="0"/>
    <to sec="1191992736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.210.81.39"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191992763" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.158.110.40"/>
    </slice>
    <from sec="1191993074" usec="0"/>
    <to sec="1191993216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.151.75.41"/>
    </slice>
    <from sec="1191992604" usec="0"/>
    <to sec="1191992700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.93.144.41"/>
    </slice>
    <from sec="1191992466" usec="0"/>
    <to sec="1191992473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.237.5.42"/>
    </slice>
    <from sec="1191993110" usec="0"/>
    <to sec="1191993182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.76.20.45"/>
    </slice>
    <from sec="1191992891" usec="0"/>
    <to sec="1191992932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.142.168.45"/>
    </slice>
    <from sec="1191992544" usec="0"/>
    <to sec="1191992587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.194.233.45"/>
    </slice>
    <from sec="1191992996" usec="0"/>
    <to sec="1191993041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.214.85.46"/>
    </slice>
    <from sec="1191992947" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.83.138.46"/>
    </slice>
    <from sec="1191992768" usec="0"/>
    <to sec="1191992841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.120.172.46"/>
    </slice>
    <from sec="1191992920" usec="0"/>
    <to sec="1191992951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.125.73.47"/>
    </slice>
    <from sec="1191992669" usec="0"/>
    <to sec="1191992718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.71.10.50"/>
    </slice>
    <from sec="1191993013" usec="0"/>
    <to sec="1191993071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.128.76.51"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.206.146.53"/>
    </slice>
    <from sec="1191993179" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.172.147.53"/>
    </slice>
    <from sec="1191993142" usec="0"/>
    <to sec="1191993192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.174.205.53"/>
    </slice>
    <from sec="1191992685" usec="0"/>
    <to sec="1191992717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.43.174.54"/>
    </slice>
    <from sec="1191993181" usec="0"/>
    <to sec="1191993195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="169.6.148.55"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.25.11.56"/>
    </slice>
    <from sec="1191992416" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.79.50.56"/>
    </slice>
    <from sec="1191993285" usec="0"/>
    <to sec="1191993290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.33.238.56"/>
    </slice>
    <from sec="1191992745" usec="0"/>
    <to sec="1191992768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.104.7.57"/>
    </slice>
    <from sec="1191992562" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.155.170.57"/>
    </slice>
    <from sec="1191992747" usec="0"/>
    <to sec="1191992778" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.154.20.58"/>
    </slice>
    <from sec="1191992850" usec="0"/>
    <to sec="1191992901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.153.58"/>
    </slice>
    <from sec="1191993099" usec="0"/>
    <to sec="1191993255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.37.228.59"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.229.233.59"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.176.57.60"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.129.128.60"/>
    </slice>
    <from sec="1191993257" usec="0"/>
    <to sec="1191993296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.69.243.61"/>
    </slice>
    <from sec="1191992788" usec="0"/>
    <to sec="1191992809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.204.91.62"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.222.0.63"/>
    </slice>
    <from sec="1191993103" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.133.116.63"/>
    </slice>
    <from sec="1191992952" usec="0"/>
    <to sec="1191992974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.27.130.64"/>
    </slice>
    <from sec="1191992671" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.35.208.65"/>
    </slice>
    <from sec="1191992420" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.228.57.66"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.0.76.67"/>
    </slice>
    <from sec="1191992993" usec="0"/>
    <to sec="1191993015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.154.67"/>
    </slice>
    <from sec="1191992568" usec="0"/>
    <to sec="1191992635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.130.204.67"/>
    </slice>
    <from sec="1191993121" usec="0"/>
    <to sec="1191993138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.209.209.67"/>
    </slice>
    <from sec="1191992509" usec="0"/>
    <to sec="1191992540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.159.213.67"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.140.111.68"/>
    </slice>
    <from sec="1191992449" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.81.117.68"/>
    </slice>
    <from sec="1191992923" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.126.17.69"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.59.149.69"/>
    </slice>
    <from sec="1191993111" usec="0"/>
    <to sec="1191993146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.244.224.69"/>
    </slice>
    <from sec="1191992945" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.208.17.71"/>
    </slice>
    <from sec="1191992692" usec="0"/>
    <to sec="1191992751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.140.10.72"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.181.193.74"/>
    </slice>
    <from sec="1191993044" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.113.160.75"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.79.204.75"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.170.49.76"/>
    </slice>
    <from sec="1191993257" usec="0"/>
    <to sec="1191993286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.74.54.76"/>
    </slice>
    <from sec="1191993082" usec="0"/>
    <to sec="1191993261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.161.66.76"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.230.173.77"/>
    </slice>
    <from sec="1191993276" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.194.227.77"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.211.93.78"/>
    </slice>
    <from sec="1191992499" usec="0"/>
    <to sec="1191992819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.115.113.78"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.18.147.78"/>
    </slice>
    <from sec="1191993144" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="134.71.4.80"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.152.80"/>
    </slice>
    <from sec="1191992799" usec="0"/>
    <to sec="1191992840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.184.119.81"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.154.81"/>
    </slice>
    <from sec="1191992762" usec="0"/>
    <to sec="1191992825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.112.205.81"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.5.65.83"/>
    </slice>
    <from sec="1191993074" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.197.93.83"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="41.170.203.83"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.96.32.87"/>
    </slice>
    <from sec="1191992822" usec="0"/>
    <to sec="1191992865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="169.67.242.87"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.180.244.87"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="209.166.52.88"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.81.166.88"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.66.107.89"/>
    </slice>
    <from sec="1191992773" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.144.89"/>
    </slice>
    <from sec="1191993243" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.177.152.89"/>
    </slice>
    <from sec="1191992614" usec="0"/>
    <to sec="1191992631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.78.6.90"/>
    </slice>
    <from sec="1191992854" usec="0"/>
    <to sec="1191992893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.171.88.90"/>
    </slice>
    <from sec="1191992769" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.72.55.91"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191992436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.130.46.93"/>
    </slice>
    <from sec="1191992672" usec="0"/>
    <to sec="1191992702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.39.204.94"/>
    </slice>
    <from sec="1191992669" usec="0"/>
    <to sec="1191993051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.29.118.95"/>
    </slice>
    <from sec="1191992488" usec="0"/>
    <to sec="1191993234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.244.141.95"/>
    </slice>
    <from sec="1191992804" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.25.147.96"/>
    </slice>
    <from sec="1191992867" usec="0"/>
    <to sec="1191992937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.33.145.98"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.72.63.99"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.227.182.99"/>
    </slice>
    <from sec="1191992476" usec="0"/>
    <to sec="1191992492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.77.223.100"/>
    </slice>
    <from sec="1191992827" usec="0"/>
    <to sec="1191992838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.20.236.100"/>
    </slice>
    <from sec="1191993274" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.172.142.103"/>
    </slice>
    <from sec="1191992777" usec="0"/>
    <to sec="1191992915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.100.147.103"/>
    </slice>
    <from sec="1191992899" usec="0"/>
    <to sec="1191992923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.25.203.103"/>
    </slice>
    <from sec="1191993174" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.163.37.104"/>
    </slice>
    <from sec="1191992661" usec="0"/>
    <to sec="1191992687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="83.18.255.107"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.229.26.110"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.221.110.110"/>
    </slice>
    <from sec="1191992928" usec="0"/>
    <to sec="1191992969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.212.83.111"/>
    </slice>
    <from sec="1191992577" usec="0"/>
    <to sec="1191993031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.89.149.111"/>
    </slice>
    <from sec="1191992881" usec="0"/>
    <to sec="1191992912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.209.102.112"/>
    </slice>
    <from sec="1191992580" usec="0"/>
    <to sec="1191992662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.80.168.112"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993294" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.104.210.114"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191992682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.36.106.115"/>
    </slice>
    <from sec="1191992854" usec="0"/>
    <to sec="1191992899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.109.11.118"/>
    </slice>
    <from sec="1191993099" usec="0"/>
    <to sec="1191993141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.177.23.118"/>
    </slice>
    <from sec="1191992418" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.177.23.119"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.75.203.119"/>
    </slice>
    <from sec="1191992553" usec="0"/>
    <to sec="1191992598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.59.128.121"/>
    </slice>
    <from sec="1191993144" usec="0"/>
    <to sec="1191993206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.133.111.122"/>
    </slice>
    <from sec="1191992805" usec="0"/>
    <to sec="1191992838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.164.2.124"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.122.85.124"/>
    </slice>
    <from sec="1191992626" usec="0"/>
    <to sec="1191992635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.58.96.125"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.165.99.125"/>
    </slice>
    <from sec="1191993001" usec="0"/>
    <to sec="1191993037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.203.207.125"/>
    </slice>
    <from sec="1191992648" usec="0"/>
    <to sec="1191992670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.148.103.126"/>
    </slice>
    <from sec="1191992895" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.228.111.127"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.5.218.127"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.154.96.128"/>
    </slice>
    <from sec="1191992448" usec="0"/>
    <to sec="1191992466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.112.104.128"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.152.128"/>
    </slice>
    <from sec="1191993141" usec="0"/>
    <to sec="1191993161" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.70.72.129"/>
    </slice>
    <from sec="1191992929" usec="0"/>
    <to sec="1191993087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.226.66.130"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.83.53.131"/>
    </slice>
    <from sec="1191993182" usec="0"/>
    <to sec="1191993214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.136.10.132"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.236.198.132"/>
    </slice>
    <from sec="1191992831" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.21.161.133"/>
    </slice>
    <from sec="1191992428" usec="0"/>
    <to sec="1191993067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.9.129.136"/>
    </slice>
    <from sec="1191992828" usec="0"/>
    <to sec="1191992873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.41.233.136"/>
    </slice>
    <from sec="1191992797" usec="0"/>
    <to sec="1191992873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.228.32.137"/>
    </slice>
    <from sec="1191992584" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.151.50.138"/>
    </slice>
    <from sec="1191992652" usec="0"/>
    <to sec="1191992667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.152.164.138"/>
    </slice>
    <from sec="1191993196" usec="0"/>
    <to sec="1191993222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.124.114.139"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.230.33.141"/>
    </slice>
    <from sec="1191992767" usec="0"/>
    <to sec="1191992818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.140.34.141"/>
    </slice>
    <from sec="1191992524" usec="0"/>
    <to sec="1191993020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.0.175.141"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.152.40.142"/>
    </slice>
    <from sec="1191992434" usec="0"/>
    <to sec="1191992450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.24.92.142"/>
    </slice>
    <from sec="1191993087" usec="0"/>
    <to sec="1191993117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.602591,3.09624,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_2321{
style=filled;
color=gray75;
14547[label="54.100.126.142;1pkt 1fpkt", shape=pentagon, color=darkviolet];
21688[label="54.100.126.142;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2321[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.100.126.142:41630, 200.173.72.32:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41630: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
14547--21688[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.72.32" dst_port="80" src_ip="54.100.126.142" src_port="41630"/>
    </slice>
    <from sec="1191993154" usec="0"/>
    <to sec="1191993162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.78.144.143"/>
    </slice>
    <from sec="1191992896" usec="0"/>
    <to sec="1191992916" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.80.155.143"/>
    </slice>
    <from sec="1191992728" usec="0"/>
    <to sec="1191992760" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.105.168.143"/>
    </slice>
    <from sec="1191992624" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.18.47.144"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191993287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.90.167.146"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191992485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.45.172.146"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.128.116.147"/>
    </slice>
    <from sec="1191992425" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.76.194.147"/>
    </slice>
    <from sec="1191993121" usec="0"/>
    <to sec="1191993179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.68.225.147"/>
    </slice>
    <from sec="1191992700" usec="0"/>
    <to sec="1191992729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2331{
style=filled;
color=gray75;
2414[label="134.71.219.209;d;27pkt 27fpkt", shape=diamond, color=yellow];
2430[label="207.117.161.18;s;21pkt 21fpkt", shape=diamond, color=yellow];
4670[label="32.66.229.6;s;3pkt 3fpkt", shape=diamond, color=yellow];
11595[label="32.66.229.6;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14706[label="32.139.158.148;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16963[label="32.66.229.6;3pkt 3fpkt", shape=invtriangle, color=brown];
20396[label="32.66.229.6;2pkt 2fpkt", shape=invhouse, color=bisque];
21752[label="32.139.158.148;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2331[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.117.161.18:80, 134.71.219.209:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1667%)&lt;BR/&gt; 62845: (4.16667%)&lt;BR/&gt; 62843: (4.16667%)&lt;BR/&gt; 62849: (2.5%)&lt;BR/&gt; 62839: (2.5%)&gt;];
}
2414--2430[label="1;21pkt 21fpkt"];
2414--4670[label="1;3pkt 3fpkt"];
2414--9560[label="0.037037;1pkt 1fpkt"];
2414--11348[label="0.111111;3pkt 3fpkt"];
2414--11389[label="0.111111;3pkt 3fpkt"];
2414--11595[label="1;2pkt 2fpkt"];
2414--13144[label="0.037037;1pkt 1fpkt"];
2414--14706[label="1;1pkt 1fpkt"];
2414--16963[label="1;3pkt 3fpkt"];
2414--17935[label="0.037037;1pkt 1fpkt"];
2414--20396[label="1;2pkt 2fpkt"];
2414--21063[label="0.037037;1pkt 1fpkt"];
2414--21752[label="1;1pkt 1fpkt"];
2430--11348[label="0.142857;3pkt 3fpkt"];
2430--11389[label="0.142857;3pkt 3fpkt"];
4670--11595[label="1;2pkt 2fpkt"];
4670--16963[label="1;3pkt 3fpkt"];
4670--20396[label="1;2pkt 2fpkt"];
11595--16963[label="1;2pkt 2fpkt"];
11595--20396[label="1;2pkt 2fpkt"];
14706--21752[label="1;1pkt 1fpkt"];
16963--20396[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.219.209" src_ip="207.117.161.18" src_port="80"/>
    </slice>
    <from sec="1191992489" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.125.194.148"/>
    </slice>
    <from sec="1191992908" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.86.210.148"/>
    </slice>
    <from sec="1191992713" usec="0"/>
    <to sec="1191992753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.105.24.149"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.214.99.149"/>
    </slice>
    <from sec="1191992410" usec="0"/>
    <to sec="1191992430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.111.218.149"/>
    </slice>
    <from sec="1191992718" usec="0"/>
    <to sec="1191992753" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.209.250.149"/>
    </slice>
    <from sec="1191992996" usec="0"/>
    <to sec="1191993019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.162.17.151"/>
    </slice>
    <from sec="1191993000" usec="0"/>
    <to sec="1191993201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.210.29.151"/>
    </slice>
    <from sec="1191992809" usec="0"/>
    <to sec="1191992861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.78.72.151"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.152.164.152"/>
    </slice>
    <from sec="1191992659" usec="0"/>
    <to sec="1191992683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.232.90.153"/>
    </slice>
    <from sec="1191992739" usec="0"/>
    <to sec="1191992775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="146.108.227.154"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.37.171.155"/>
    </slice>
    <from sec="1191992920" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.157.219.156"/>
    </slice>
    <from sec="1191992902" usec="0"/>
    <to sec="1191992921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="144.85.21.157"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.176.193.157"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.137.209.157"/>
    </slice>
    <from sec="1191992848" usec="0"/>
    <to sec="1191992859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.40.205.158"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.96.7.160"/>
    </slice>
    <from sec="1191992716" usec="0"/>
    <to sec="1191992738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.219.215.161"/>
    </slice>
    <from sec="1191992903" usec="0"/>
    <to sec="1191992942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.124.225.161"/>
    </slice>
    <from sec="1191992754" usec="0"/>
    <to sec="1191992799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.23.44.162"/>
    </slice>
    <from sec="1191992564" usec="0"/>
    <to sec="1191992606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.23.106.162"/>
    </slice>
    <from sec="1191992926" usec="0"/>
    <to sec="1191992952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.81.149.162"/>
    </slice>
    <from sec="1191992766" usec="0"/>
    <to sec="1191992794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.100.147.163"/>
    </slice>
    <from sec="1191992621" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.154.164"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.121.156.164"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.47.1.166"/>
    </slice>
    <from sec="1191992790" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.213.105.166"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.31.115.166"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.56.212.166"/>
    </slice>
    <from sec="1191992693" usec="0"/>
    <to sec="1191992735" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.10.244.166"/>
    </slice>
    <from sec="1191992776" usec="0"/>
    <to sec="1191992833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.34.43.168"/>
    </slice>
    <from sec="1191992775" usec="0"/>
    <to sec="1191992814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.188.135.168"/>
    </slice>
    <from sec="1191992448" usec="0"/>
    <to sec="1191992593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.100.148.169"/>
    </slice>
    <from sec="1191992816" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.15.44.170"/>
    </slice>
    <from sec="1191992446" usec="0"/>
    <to sec="1191992459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.224.149.170"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="63.175.153.170"/>
    </slice>
    <from sec="1191992734" usec="0"/>
    <to sec="1191993028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07721,3.01222,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2370{
style=filled;
color=gray75;
3248[label="206.68.10.190;s;5pkt 5fpkt", shape=diamond, color=yellow];
3249[label="134.71.89.40;d;10pkt 10fpkt", shape=diamond, color=yellow];
15645[label="206.68.10.190;5pkt 5fpkt", shape=pentagon, color=darkviolet];
19534[label="206.68.10.190;4pkt 4fpkt", shape=invtriangle, color=brown];
22178[label="206.68.10.190;5pkt 5fpkt", shape=invhouse, color=bisque];
stat2370[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.68.10.190:80, 134.71.89.40:*}[30%]&lt;BR/&gt;{219.96.120.23:443, 134.71.89.40:*}[20%]&lt;BR/&gt;{209.50.122.182:443, 134.71.89.40:*}[20%]&lt;BR/&gt;{206.68.10.190:443, 134.71.89.40:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.8621%)&lt;BR/&gt; 443: (24.1379%)&lt;BR/&gt; 2894: (8.62069%)&lt;BR/&gt; 2893: (8.62069%)&lt;BR/&gt; 2892: (8.62069%)&gt;];
}
3248--3249[label="1;5pkt 5fpkt"];
3248--15645[label="1;5pkt 5fpkt"];
3248--19534[label="1;4pkt 4fpkt"];
3248--22178[label="1;5pkt 5fpkt"];
3249--6869[label="0.1;1pkt 1fpkt"];
3249--8974[label="0.2;2pkt 2fpkt"];
3249--11131[label="0.2;2pkt 2fpkt"];
3249--15645[label="1;5pkt 5fpkt"];
3249--19534[label="1;4pkt 4fpkt"];
3249--22178[label="1;5pkt 5fpkt"];
15645--19534[label="1;4pkt 4fpkt"];
15645--22178[label="1;5pkt 5fpkt"];
19534--22178[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="134.71.89.40" src_ip="206.68.10.190" src_port="443"/>
      <filter dst_ip="134.71.89.40" src_ip="206.68.10.190" src_port="80"/>
      <filter dst_ip="134.71.89.40" src_ip="209.50.122.182" src_port="443"/>
      <filter dst_ip="134.71.89.40" src_ip="219.96.120.23" src_port="443"/>
    </slice>
    <from sec="1191992622" usec="0"/>
    <to sec="1191992681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.203.173.171"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.132.129.173"/>
    </slice>
    <from sec="1191992829" usec="0"/>
    <to sec="1191992872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.52.22.174"/>
    </slice>
    <from sec="1191993090" usec="0"/>
    <to sec="1191993120" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.78.140.174"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.126.172.175"/>
    </slice>
    <from sec="1191993078" usec="0"/>
    <to sec="1191993143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.212.211.175"/>
    </slice>
    <from sec="1191992522" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.8.17.176"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191992537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.20.66.176"/>
    </slice>
    <from sec="1191992698" usec="0"/>
    <to sec="1191992729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.203.73.176"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.22.50.177"/>
    </slice>
    <from sec="1191992978" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.20.53.177"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.222.226.177"/>
    </slice>
    <from sec="1191992715" usec="0"/>
    <to sec="1191993090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.23.75.179"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.120.233.179"/>
    </slice>
    <from sec="1191992749" usec="0"/>
    <to sec="1191992792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.124.37.181"/>
    </slice>
    <from sec="1191992422" usec="0"/>
    <to sec="1191993246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.116.216.181"/>
    </slice>
    <from sec="1191992915" usec="0"/>
    <to sec="1191992947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.1.146.182"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.121.156.182"/>
    </slice>
    <from sec="1191992885" usec="0"/>
    <to sec="1191992934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.172.208.182"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.104.34.183"/>
    </slice>
    <from sec="1191992982" usec="0"/>
    <to sec="1191993002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.1.101.183"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.210.138.183"/>
    </slice>
    <from sec="1191992657" usec="0"/>
    <to sec="1191992708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.118.177.183"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191992541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.84.208.183"/>
    </slice>
    <from sec="1191992960" usec="0"/>
    <to sec="1191992987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.121.208.183"/>
    </slice>
    <from sec="1191992526" usec="0"/>
    <to sec="1191992556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="9.151.13.184"/>
    </slice>
    <from sec="1191992613" usec="0"/>
    <to sec="1191992663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.74.115.184"/>
    </slice>
    <from sec="1191993128" usec="0"/>
    <to sec="1191993157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="61.237.188.184"/>
    </slice>
    <from sec="1191993185" usec="0"/>
    <to sec="1191993212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.213.204.184"/>
    </slice>
    <from sec="1191992699" usec="0"/>
    <to sec="1191992725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.126.7.186"/>
    </slice>
    <from sec="1191992825" usec="0"/>
    <to sec="1191992867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698621,3.10028,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_2402{
style=filled;
color=gray75;
19500[label="59.45.5.187;1pkt 1fpkt", shape=invtriangle, color=brown];
22148[label="59.45.5.187;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2402[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.45.5.187:1244, 200.173.77.250:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1244: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19500--22148[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.173.77.250" dst_port="80" src_ip="59.45.5.187" src_port="1244"/>
    </slice>
    <from sec="1191993273" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="167.64.224.187"/>
    </slice>
    <from sec="1191993283" usec="0"/>
    <to sec="1191993297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.193.24.189"/>
    </slice>
    <from sec="1191992775" usec="0"/>
    <to sec="1191992852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="33.26.22.190"/>
    </slice>
    <from sec="1191993238" usec="0"/>
    <to sec="1191993262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.214.132.190"/>
    </slice>
    <from sec="1191992744" usec="0"/>
    <to sec="1191992818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.176.14.191"/>
    </slice>
    <from sec="1191992406" usec="0"/>
    <to sec="1191992438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.127.74.191"/>
    </slice>
    <from sec="1191992826" usec="0"/>
    <to sec="1191992890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.18.81.192"/>
    </slice>
    <from sec="1191993081" usec="0"/>
    <to sec="1191993107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.191.130.192"/>
    </slice>
    <from sec="1191992410" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.133.136.192"/>
    </slice>
    <from sec="1191992413" usec="0"/>
    <to sec="1191992446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.97.88.193"/>
    </slice>
    <from sec="1191992609" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.154.194"/>
    </slice>
    <from sec="1191993177" usec="0"/>
    <to sec="1191993198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.213.200.194"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.176.32.195"/>
    </slice>
    <from sec="1191992407" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.233.185.195"/>
    </slice>
    <from sec="1191992655" usec="0"/>
    <to sec="1191992689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.139.25.196"/>
    </slice>
    <from sec="1191993020" usec="0"/>
    <to sec="1191993038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.237.67.196"/>
    </slice>
    <from sec="1191992628" usec="0"/>
    <to sec="1191992655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.218.47.197"/>
    </slice>
    <from sec="1191992950" usec="0"/>
    <to sec="1191992994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.106.13.202"/>
    </slice>
    <from sec="1191993127" usec="0"/>
    <to sec="1191993224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.70.54.202"/>
    </slice>
    <from sec="1191992532" usec="0"/>
    <to sec="1191992540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.21.89.202"/>
    </slice>
    <from sec="1191992834" usec="0"/>
    <to sec="1191992961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="168.41.192.203"/>
    </slice>
    <from sec="1191992699" usec="0"/>
    <to sec="1191992722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.86.74.204"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="82.202.185.204"/>
    </slice>
    <from sec="1191992956" usec="0"/>
    <to sec="1191993001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.112.206.204"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.165.48.205"/>
    </slice>
    <from sec="1191992414" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.22.192.205"/>
    </slice>
    <from sec="1191992725" usec="0"/>
    <to sec="1191992783" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.206.100.208"/>
    </slice>
    <from sec="1191992710" usec="0"/>
    <to sec="1191992740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.196.35.209"/>
    </slice>
    <from sec="1191993228" usec="0"/>
    <to sec="1191993270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.127.53.209"/>
    </slice>
    <from sec="1191992812" usec="0"/>
    <to sec="1191992959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.112.91.210"/>
    </slice>
    <from sec="1191992703" usec="0"/>
    <to sec="1191992707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.193.32.211"/>
    </slice>
    <from sec="1191992634" usec="0"/>
    <to sec="1191992668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.128.148.211"/>
    </slice>
    <from sec="1191992840" usec="0"/>
    <to sec="1191992914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.102.242.211"/>
    </slice>
    <from sec="1191992415" usec="0"/>
    <to sec="1191993298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.179.48.212"/>
    </slice>
    <from sec="1191992933" usec="0"/>
    <to sec="1191992972" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.126.85.213"/>
    </slice>
    <from sec="1191992627" usec="0"/>
    <to sec="1191992705" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.128.173.216"/>
    </slice>
    <from sec="1191992702" usec="0"/>
    <to sec="1191992781" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.193.0.217"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.124.13.217"/>
    </slice>
    <from sec="1191992789" usec="0"/>
    <to sec="1191992863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.21.80.217"/>
    </slice>
    <from sec="1191992459" usec="0"/>
    <to sec="1191992545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.11.139.217"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191992521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.18.230.217"/>
    </slice>
    <from sec="1191992820" usec="0"/>
    <to sec="1191992923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.1.106.218"/>
    </slice>
    <from sec="1191993051" usec="0"/>
    <to sec="1191993057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.20.200.218"/>
    </slice>
    <from sec="1191993152" usec="0"/>
    <to sec="1191993167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.126.0.219"/>
    </slice>
    <from sec="1191992656" usec="0"/>
    <to sec="1191992683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.173.64.220"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.67.151.220"/>
    </slice>
    <from sec="1191992518" usec="0"/>
    <to sec="1191992527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.230.181.220"/>
    </slice>
    <from sec="1191992776" usec="0"/>
    <to sec="1191992848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.175.20.221"/>
    </slice>
    <from sec="1191993268" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.26.26.221"/>
    </slice>
    <from sec="1191992404" usec="0"/>
    <to sec="1191992479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.105.42.222"/>
    </slice>
    <from sec="1191992752" usec="0"/>
    <to sec="1191992764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.180.19.223"/>
    </slice>
    <from sec="1191992832" usec="0"/>
    <to sec="1191992903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.100.126.224"/>
    </slice>
    <from sec="1191992590" usec="0"/>
    <to sec="1191992594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.43.210.224"/>
    </slice>
    <from sec="1191993049" usec="0"/>
    <to sec="1191993131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.82.75.225"/>
    </slice>
    <from sec="1191992946" usec="0"/>
    <to sec="1191992981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.11.6.226"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.21.212.226"/>
    </slice>
    <from sec="1191992836" usec="0"/>
    <to sec="1191992852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.195.55.228"/>
    </slice>
    <from sec="1191992412" usec="0"/>
    <to sec="1191993299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.197.242.228"/>
    </slice>
    <from sec="1191992571" usec="0"/>
    <to sec="1191992619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.61.39.229"/>
    </slice>
    <from sec="1191992470" usec="0"/>
    <to sec="1191992500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.94.162.229"/>
    </slice>
    <from sec="1191992451" usec="0"/>
    <to sec="1191993231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="4.157.52.230"/>
    </slice>
    <from sec="1191992417" usec="0"/>
    <to sec="1191993248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.147.116.230"/>
    </slice>
    <from sec="1191992408" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="170.36.220.230"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.129.100.231"/>
    </slice>
    <from sec="1191992931" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="146.19.128.232"/>
    </slice>
    <from sec="1191992492" usec="0"/>
    <to sec="1191992517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.122.14.233"/>
    </slice>
    <from sec="1191992455" usec="0"/>
    <to sec="1191992722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.217.43.233"/>
    </slice>
    <from sec="1191992426" usec="0"/>
    <to sec="1191992456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.100.125.233"/>
    </slice>
    <from sec="1191992498" usec="0"/>
    <to sec="1191992504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.18.249.233"/>
    </slice>
    <from sec="1191992853" usec="0"/>
    <to sec="1191992917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.165.160.235"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.181.162.235"/>
    </slice>
    <from sec="1191992997" usec="0"/>
    <to sec="1191993071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.2.236.235"/>
    </slice>
    <from sec="1191992780" usec="0"/>
    <to sec="1191993293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.143.135.236"/>
    </slice>
    <from sec="1191992706" usec="0"/>
    <to sec="1191992897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.119.233.236"/>
    </slice>
    <from sec="1191992423" usec="0"/>
    <to sec="1191992551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.213.123.237"/>
    </slice>
    <from sec="1191992898" usec="0"/>
    <to sec="1191992918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.136.82.238"/>
    </slice>
    <from sec="1191993090" usec="0"/>
    <to sec="1191993111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.123.173.238"/>
    </slice>
    <from sec="1191992535" usec="0"/>
    <to sec="1191992544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.116.16.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.230.140.241"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.69.73.242"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.131.24.244"/>
    </slice>
    <from sec="1191992416" usec="0"/>
    <to sec="1191992470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.203.148.244"/>
    </slice>
    <from sec="1191992403" usec="0"/>
    <to sec="1191993300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.22.209.244"/>
    </slice>
    <from sec="1191992884" usec="0"/>
    <to sec="1191992918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.199.33.245"/>
    </slice>
    <from sec="1191992585" usec="0"/>
    <to sec="1191992620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.144.55.245"/>
    </slice>
    <from sec="1191992710" usec="0"/>
    <to sec="1191992724" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.182.89.245"/>
    </slice>
    <from sec="1191992411" usec="0"/>
    <to sec="1191992533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.189.107.246"/>
    </slice>
    <from sec="1191992409" usec="0"/>
    <to sec="1191993283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.24.123.246"/>
    </slice>
    <from sec="1191993300" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.144.146.246"/>
    </slice>
    <from sec="1191992890" usec="0"/>
    <to sec="1191992982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.158.200.246"/>
    </slice>
    <from sec="1191993201" usec="0"/>
    <to sec="1191993282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="80.93.208.247"/>
    </slice>
    <from sec="1191992811" usec="0"/>
    <to sec="1191992879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="60.96.223.247"/>
    </slice>
    <from sec="1191992401" usec="0"/>
    <to sec="1191993301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="172.64.8.248"/>
    </slice>
    <from sec="1191993253" usec="0"/>
    <to sec="1191993274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="0.32.43.248"/>
    </slice>
    <from sec="1191992405" usec="0"/>
    <to sec="1191993289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.144.140.248"/>
    </slice>
    <from sec="1191993070" usec="0"/>
    <to sec="1191993244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="85.41.92.249"/>
    </slice>
    <from sec="1191992594" usec="0"/>
    <to sec="1191992673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.164.37.250"/>
    </slice>
    <from sec="1191993205" usec="0"/>
    <to sec="1191993220" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="84.154.88.250"/>
    </slice>
    <from sec="1191992851" usec="0"/>
    <to sec="1191992909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.34.26.251"/>
    </slice>
    <from sec="1191992402" usec="0"/>
    <to sec="1191993227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.116.78.251"/>
    </slice>
    <from sec="1191992872" usec="0"/>
    <to sec="1191992913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="56.16.172.252"/>
    </slice>
    <from sec="1191992622" usec="0"/>
    <to sec="1191992652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617837,3.1233,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="37.107.9.253"/>
    </slice>
    <from sec="1191992998" usec="0"/>
    <to sec="1191993029" usec="0"/>
  </anomaly>

</admd:annotation>
