<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="2" usec="0"/>
    <to sec="18349088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter proto="icmp"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="89.107.172.27" dst_port="1028" proto="tcp" src_ip="144.45.54.134"/>
      <filter dst_ip="89.107.172.27" dst_port="1028" proto="udp" src_ip="144.45.54.134"/>
      <filter dst_ip="89.107.172.27" dst_port="1027" proto="tcp" src_ip="144.45.54.134"/>
      <filter dst_ip="89.107.172.27" dst_port="1027" proto="udp" src_ip="144.45.54.134"/>
      <filter dst_ip="89.107.172.27" dst_port="1026" proto="tcp" src_ip="144.45.54.134"/>
      <filter dst_ip="89.107.172.27" dst_port="1026" proto="udp" src_ip="144.45.54.134"/>
      <from sec="1194757707" usec="0"/>
      <to sec="1194758051" usec="0"/>
    </slice>
    <from sec="1194757707" usec="0"/>
    <to sec="1194758051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.124.82" dst_port="53" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.124.82" dst_port="53" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.124.82" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.124.82" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.124.82" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.124.82" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <from sec="1194757334" usec="0"/>
      <to sec="1194758097" usec="0"/>
    </slice>
    <from sec="1194757334" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="53" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="25" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="21" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="tcp" src_ip="220.218.173.248"/>
      <filter dst_ip="192.188.126.3" dst_port="22" proto="udp" src_ip="220.218.173.248"/>
      <from sec="1194757257" usec="0"/>
      <to sec="1194758050" usec="0"/>
    </slice>
    <from sec="1194757257" usec="0"/>
    <to sec="1194758050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.188.124.82" dst_port="53" proto="udp" src_ip="192.188.124.82"/>
      <filter dst_ip="192.188.124.82" dst_port="53" proto="udp" src_ip="192.188.124.82"/>
      <filter dst_ip="192.188.124.82" dst_port="53" proto="udp" src_ip="192.188.124.82"/>
      <filter dst_ip="192.188.124.82" dst_port="53" proto="udp" src_ip="192.188.124.82"/>
      <from sec="1194757257" usec="0"/>
      <to sec="1194758050" usec="0"/>
    </slice>
    <from sec="1194757257" usec="0"/>
    <to sec="1194758050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3026,2.05483,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="129.60.41.213" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <from sec="1194758059" usec="0"/>
      <to sec="1194758064" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="25" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="21" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="tcp" src_ip="192.30.83.255"/>
      <filter dst_ip="210.32.21.201" dst_port="80" proto="udp" src_ip="192.30.83.255"/>
      <from sec="1194758059" usec="0"/>
      <to sec="1194758064" usec="0"/>
    </slice>
    <from sec="1194758059" usec="0"/>
    <to sec="1194758064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_13{
style=filled;
color=gray75;
111[label="52.148.5.37;s;2511pkt 2511fpkt", shape=diamond, color=yellow];
stat13[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.148.5.37:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
111--906[label="0.000443066;1pkt 1fpkt"];
111--4300[label="0.000733138;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="52.148.5.37"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,901,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_14{
style=filled;
color=gray75;
105[label="129.60.132.20;s;1026pkt 1026fpkt", shape=diamond, color=yellow];
106[label="5.215.62.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
154[label="55.50.121.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
162[label="194.31.97.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
606[label="218.197.136.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
624[label="57.137.249.118;d;2pkt 2fpkt", shape=diamond, color=yellow];
668[label="4.114.61.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
684[label="215.78.125.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1291[label="9.52.241.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
2456[label="219.54.244.160;d;1pkt 1fpkt", shape=diamond, color=yellow];
2803[label="220.173.151.58;d;1pkt 1fpkt", shape=diamond, color=yellow];
2906[label="32.79.151.64;d;2pkt 2fpkt", shape=diamond, color=yellow];
3870[label="129.60.132.20;s;842pkt 842fpkt", shape=hexagon, color=black];
4189[label="9.52.241.37;d;1pkt 1fpkt", shape=hexagon, color=black];
4278[label="194.31.97.105;d;1pkt 1fpkt", shape=hexagon, color=black];
5094[label="4.114.61.68;d;1pkt 1fpkt", shape=hexagon, color=black];
5604[label="5.215.62.180;d;1pkt 1fpkt", shape=hexagon, color=black];
5675[label="218.197.136.212;d;1pkt 1fpkt", shape=hexagon, color=black];
5678[label="57.137.249.118;d;2pkt 2fpkt", shape=hexagon, color=black];
6386[label="129.60.132.20;1052pkt 1052fpkt", shape=pentagon, color=darkviolet];
stat14[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.132.20:61530, *:*}[69.8669%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61530: (36.0544%)&lt;BR/&gt; 80: (1.47959%)&lt;BR/&gt; 16001: (1.32653%)&lt;BR/&gt; 6881: (0.969388%)&lt;BR/&gt; 27011: (0.238095%)&gt;];
}
105--106[label="1;1pkt 1fpkt"];
105--154[label="1;1pkt 1fpkt"];
105--162[label="1;1pkt 1fpkt"];
105--606[label="1;1pkt 1fpkt"];
105--624[label="1;2pkt 2fpkt"];
105--658[label="0.00247525;1pkt 1fpkt"];
105--668[label="1;1pkt 1fpkt"];
105--684[label="1;1pkt 1fpkt"];
105--1291[label="1;1pkt 1fpkt"];
105--2456[label="1;1pkt 1fpkt"];
105--2803[label="1;1pkt 1fpkt"];
105--2906[label="1;2pkt 2fpkt"];
105--3870[label="1;842pkt 842fpkt"];
105--4189[label="1;1pkt 1fpkt"];
105--4278[label="1;1pkt 1fpkt"];
105--5094[label="1;1pkt 1fpkt"];
105--5604[label="1;1pkt 1fpkt"];
105--5675[label="1;1pkt 1fpkt"];
105--5678[label="1;2pkt 2fpkt"];
105--6073[label="0.000974659;1pkt 1fpkt"];
105--6084[label="0.000974659;1pkt 1fpkt"];
105--6094[label="0.00194932;2pkt 2fpkt"];
105--6115[label="0.000974659;1pkt 1fpkt"];
105--6118[label="0.00178253;1pkt 1fpkt"];
105--6125[label="0.000974659;1pkt 1fpkt"];
105--6134[label="0.00194932;2pkt 2fpkt"];
105--6150[label="0.000974659;1pkt 1fpkt"];
105--6160[label="0.000974659;1pkt 1fpkt"];
105--6168[label="0.00194932;2pkt 2fpkt"];
105--6386[label="1;1026pkt 1026fpkt"];
106--3870[label="1;1pkt 1fpkt"];
106--5604[label="1;1pkt 1fpkt"];
106--6386[label="1;1pkt 1fpkt"];
154--3870[label="1;1pkt 1fpkt"];
154--6386[label="1;1pkt 1fpkt"];
162--3870[label="1;1pkt 1fpkt"];
162--4278[label="1;1pkt 1fpkt"];
162--6386[label="1;1pkt 1fpkt"];
606--3870[label="1;1pkt 1fpkt"];
606--5675[label="1;1pkt 1fpkt"];
606--6386[label="1;1pkt 1fpkt"];
624--3870[label="1;2pkt 2fpkt"];
624--5678[label="1;2pkt 2fpkt"];
624--6386[label="1;2pkt 2fpkt"];
668--3870[label="1;1pkt 1fpkt"];
668--5094[label="1;1pkt 1fpkt"];
668--6386[label="1;1pkt 1fpkt"];
684--3870[label="1;1pkt 1fpkt"];
684--6386[label="1;1pkt 1fpkt"];
1291--3870[label="1;1pkt 1fpkt"];
1291--4189[label="1;1pkt 1fpkt"];
1291--6386[label="1;1pkt 1fpkt"];
2456--3870[label="1;1pkt 1fpkt"];
2456--6386[label="1;1pkt 1fpkt"];
2803--3870[label="1;1pkt 1fpkt"];
2803--6386[label="1;1pkt 1fpkt"];
2906--3870[label="1;2pkt 2fpkt"];
2906--6386[label="1;2pkt 2fpkt"];
3870--4189[label="1;1pkt 1fpkt"];
3870--4278[label="1;1pkt 1fpkt"];
3870--5094[label="1;1pkt 1fpkt"];
3870--5604[label="1;1pkt 1fpkt"];
3870--5675[label="1;1pkt 1fpkt"];
3870--5678[label="1;2pkt 2fpkt"];
3870--6118[label="0.00178253;1pkt 1fpkt"];
3870--6386[label="1;842pkt 842fpkt"];
4189--6386[label="1;1pkt 1fpkt"];
4278--6386[label="1;1pkt 1fpkt"];
5094--6386[label="1;1pkt 1fpkt"];
5604--6386[label="1;1pkt 1fpkt"];
5675--6386[label="1;1pkt 1fpkt"];
5678--6386[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="129.60.132.20" src_port="61530"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1194757201" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="19480888" usec="0"/>
    <to sec="19480888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1194757201" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="19480888" usec="0"/>
    <to sec="19480888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_18{
style=filled;
color=gray75;
290[label="193.1.196.134;d;29pkt 29fpkt", shape=diamond, color=yellow];
291[label="57.160.135.223;s;2pkt 2fpkt", shape=diamond, color=yellow];
3911[label="193.1.196.134;d;26pkt 26fpkt", shape=hexagon, color=black];
stat18[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.209.88.179:80, 193.1.196.134:*}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.7018%)&lt;BR/&gt; 6667: (5.26316%)&lt;BR/&gt; 0: (5.26316%)&lt;BR/&gt; 9030: (4.38596%)&lt;BR/&gt; 5190: (3.50877%)&gt;];
}
290--291[label="1;2pkt 2fpkt"];
290--3498[label="0.241379;7pkt 7fpkt"];
290--3911[label="1;26pkt 26fpkt"];
291--3911[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.196.134" src_ip="48.209.88.179" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89341,1.82525,901,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_19{
style=filled;
color=gray75;
124[label="133.224.80.140;d;121pkt 121fpkt", shape=diamond, color=yellow];
256[label="89.72.137.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
348[label="218.162.69.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
749[label="6.144.58.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
1620[label="5.80.193.213;s;6pkt 6fpkt", shape=diamond, color=yellow];
3740[label="222.66.99.153;s;59pkt 59fpkt", shape=diamond, color=yellow];
3832[label="89.79.234.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
3876[label="133.224.80.140;d;121pkt 121fpkt", shape=hexagon, color=black];
5853[label="89.79.234.198;s;1pkt 1fpkt", shape=hexagon, color=black];
7373[label="222.66.99.153;59pkt 59fpkt", shape=pentagon, color=darkviolet];
7568[label="89.72.137.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7746[label="208.129.157.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8618[label="208.129.157.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat19[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.66.99.153:19101, 133.224.80.140:*}[48.7603%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (41.8449%)&lt;BR/&gt; 18486: (2.6738%)&lt;BR/&gt; 80: (1.60428%)&lt;BR/&gt; 29101: (1.06952%)&lt;BR/&gt; 18112: (0.802139%)&gt;];
}
124--256[label="1;1pkt 1fpkt"];
124--348[label="1;1pkt 1fpkt"];
124--749[label="1;1pkt 1fpkt"];
124--993[label="0.00826446;1pkt 1fpkt"];
124--1620[label="1;6pkt 6fpkt"];
124--1701[label="0.00826446;1pkt 1fpkt"];
124--3740[label="1;59pkt 59fpkt"];
124--3832[label="1;1pkt 1fpkt"];
124--3876[label="1;121pkt 121fpkt"];
124--5853[label="1;1pkt 1fpkt"];
124--6065[label="0.00826446;1pkt 1fpkt"];
124--6081[label="0.00826446;1pkt 1fpkt"];
124--6086[label="0.00826446;1pkt 1fpkt"];
124--6107[label="0.00826446;1pkt 1fpkt"];
124--6122[label="0.00826446;1pkt 1fpkt"];
124--6127[label="0.00826446;1pkt 1fpkt"];
124--6144[label="0.00826446;1pkt 1fpkt"];
124--6157[label="0.00826446;1pkt 1fpkt"];
124--6162[label="0.00826446;1pkt 1fpkt"];
124--7373[label="1;59pkt 59fpkt"];
124--7568[label="1;1pkt 1fpkt"];
124--7746[label="1;1pkt 1fpkt"];
124--8618[label="1;1pkt 1fpkt"];
256--3876[label="1;1pkt 1fpkt"];
256--7568[label="1;1pkt 1fpkt"];
348--3876[label="1;1pkt 1fpkt"];
749--3876[label="1;1pkt 1fpkt"];
1620--3876[label="1;6pkt 6fpkt"];
3740--3876[label="1;59pkt 59fpkt"];
3740--7373[label="1;59pkt 59fpkt"];
3832--3876[label="1;1pkt 1fpkt"];
3832--5853[label="1;1pkt 1fpkt"];
3876--5853[label="1;1pkt 1fpkt"];
3876--6065[label="0.00826446;1pkt 1fpkt"];
3876--6081[label="0.00826446;1pkt 1fpkt"];
3876--6086[label="0.00826446;1pkt 1fpkt"];
3876--6107[label="0.00826446;1pkt 1fpkt"];
3876--6122[label="0.00826446;1pkt 1fpkt"];
3876--6127[label="0.00826446;1pkt 1fpkt"];
3876--6144[label="0.00826446;1pkt 1fpkt"];
3876--6157[label="0.00826446;1pkt 1fpkt"];
3876--6162[label="0.00826446;1pkt 1fpkt"];
3876--7373[label="1;59pkt 59fpkt"];
3876--7568[label="1;1pkt 1fpkt"];
3876--7746[label="1;1pkt 1fpkt"];
3876--8618[label="1;1pkt 1fpkt"];
7746--8618[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.80.140" src_ip="222.66.99.153" src_port="19101"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_20{
style=filled;
color=gray75;
420[label="208.197.72.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
421[label="144.45.9.48;s;2pkt 2fpkt", shape=diamond, color=yellow];
550[label="208.197.72.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
3934[label="144.45.9.48;s;2pkt 2fpkt", shape=hexagon, color=black];
4369[label="208.197.72.19;d;1pkt 1fpkt", shape=hexagon, color=black];
stat20[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.9.48:3480, 208.197.72.19:29000}[50%]&lt;BR/&gt;{144.45.9.48:1999, 208.197.72.26:29000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29000: (50%)&lt;BR/&gt; 3480: (28.5714%)&lt;BR/&gt; 1999: (21.4286%)&gt;];
}
420--421[label="1;1pkt 1fpkt"];
420--3934[label="1;1pkt 1fpkt"];
421--550[label="1;1pkt 1fpkt"];
421--3934[label="1;2pkt 2fpkt"];
421--4369[label="1;1pkt 1fpkt"];
550--3934[label="1;1pkt 1fpkt"];
550--4369[label="1;1pkt 1fpkt"];
3934--4369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.197.72.26" dst_port="29000" src_ip="144.45.9.48" src_port="1999"/>
      <filter dst_ip="208.197.72.19" dst_port="29000" src_ip="144.45.9.48" src_port="3480"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_21{
style=filled;
color=gray75;
446[label="220.238.22.104;d;2pkt 2fpkt", shape=diamond, color=yellow];
447[label="129.60.22.149;s;2pkt 2fpkt", shape=diamond, color=yellow];
4338[label="220.238.22.104;d;2pkt 2fpkt", shape=hexagon, color=black];
4584[label="129.60.22.149;s;2pkt 2fpkt", shape=hexagon, color=black];
stat21[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.22.149:8000, 220.238.22.104:2465}[50%]&lt;BR/&gt;{129.60.22.149:8000, 220.238.22.104:2711}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (50%)&lt;BR/&gt; 2711: (25%)&lt;BR/&gt; 2465: (25%)&gt;];
}
446--447[label="1;2pkt 2fpkt"];
446--4338[label="1;2pkt 2fpkt"];
446--4584[label="1;2pkt 2fpkt"];
447--4338[label="1;2pkt 2fpkt"];
447--4584[label="1;2pkt 2fpkt"];
4338--4584[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="220.238.22.104" dst_port="2711" src_ip="129.60.22.149" src_port="8000"/>
      <filter dst_ip="220.238.22.104" dst_port="2465" src_ip="129.60.22.149" src_port="8000"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_22{
style=filled;
color=gray75;
480[label="49.171.24.167;d;2pkt 2fpkt", shape=diamond, color=yellow];
481[label="132.92.30.86;s;6pkt 6fpkt", shape=diamond, color=yellow];
5249[label="132.92.30.86;s;6pkt 6fpkt", shape=hexagon, color=black];
stat22[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.92.30.86:*, 209.1.178.207:80}[66.6667%]&lt;BR/&gt;{132.92.30.86:*, 49.171.24.167:7070}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.5714%)&lt;BR/&gt; 7070: (21.4286%)&lt;BR/&gt; 8206: (10.7143%)&lt;BR/&gt; 8205: (10.7143%)&lt;BR/&gt; 11818: (7.14286%)&gt;];
}
480--481[label="1;2pkt 2fpkt"];
480--5249[label="1;2pkt 2fpkt"];
481--5249[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.1.178.207" dst_port="80" src_ip="132.92.30.86"/>
      <filter dst_ip="49.171.24.167" dst_port="7070" src_ip="132.92.30.86"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758014" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_23{
style=filled;
color=gray75;
493[label="209.241.77.144;d;17pkt 17fpkt", shape=diamond, color=yellow];
494[label="89.2.72.193;s;2pkt 2fpkt", shape=diamond, color=yellow];
3943[label="209.241.77.144;d;10pkt 10fpkt", shape=hexagon, color=black];
5652[label="89.2.72.193;s;2pkt 2fpkt", shape=hexagon, color=black];
stat23[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 209.241.77.144:53436}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53436: (40.3226%)&lt;BR/&gt; 19325: (12.9032%)&lt;BR/&gt; 43736: (6.45161%)&lt;BR/&gt; 1343: (6.45161%)&lt;BR/&gt; 62695: (3.22581%)&gt;];
}
493--494[label="1;2pkt 2fpkt"];
493--3943[label="1;10pkt 10fpkt"];
493--5652[label="1;2pkt 2fpkt"];
494--3943[label="1;2pkt 2fpkt"];
494--5652[label="1;2pkt 2fpkt"];
3943--5652[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="209.241.77.144" dst_port="53436"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
553[label="222.170.139.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
554[label="152.174.157.107;s;20pkt 20fpkt", shape=diamond, color=yellow];
4122[label="152.174.157.107;s;1pkt 1fpkt", shape=hexagon, color=black];
7058[label="152.174.157.107;20pkt 20fpkt", shape=pentagon, color=darkviolet];
8354[label="152.174.157.107;20pkt 20fpkt", shape=invtriangle, color=brown];
8934[label="152.174.157.107;20pkt 20fpkt", shape=invhouse, color=bisque];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.157.107:*, 222.170.139.72:80}[70%]&lt;BR/&gt;{152.174.157.107:*, 222.170.139.202:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49259: (3.65854%)&lt;BR/&gt; 49911: (2.43902%)&lt;BR/&gt; 49910: (2.43902%)&lt;BR/&gt; 49909: (2.43902%)&gt;];
}
553--554[label="1;1pkt 1fpkt"];
553--4122[label="1;1pkt 1fpkt"];
553--7058[label="1;1pkt 1fpkt"];
553--8354[label="1;1pkt 1fpkt"];
553--8934[label="1;1pkt 1fpkt"];
554--4122[label="1;1pkt 1fpkt"];
554--7058[label="1;20pkt 20fpkt"];
554--8354[label="1;20pkt 20fpkt"];
554--8934[label="1;20pkt 20fpkt"];
4122--7058[label="1;1pkt 1fpkt"];
4122--8354[label="1;1pkt 1fpkt"];
4122--8934[label="1;1pkt 1fpkt"];
7058--8354[label="1;20pkt 20fpkt"];
7058--8934[label="1;20pkt 20fpkt"];
8354--8934[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="222.170.139.72" dst_port="80" src_ip="152.174.157.107"/>
      <filter dst_ip="222.170.139.202" dst_port="80" src_ip="152.174.157.107"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_26{
style=filled;
color=gray75;
638[label="193.1.202.199;s;287pkt 287fpkt", shape=diamond, color=yellow];
stat26[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.202.199:0, *:0}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.561%)&lt;BR/&gt; 3932: (1.0453%)&lt;BR/&gt; 8291: (0.522648%)&lt;BR/&gt; 1723: (0.522648%)&lt;BR/&gt; 6000: (0.174216%)&gt;];
}
638--961[label="0.00348432;1pkt 1fpkt"];
638--964[label="0.00473934;1pkt 1fpkt"];
638--1648[label="0.0075188;1pkt 1fpkt"];
638--1695[label="0.00452489;1pkt 1fpkt"];
638--1726[label="0.00740741;1pkt 1fpkt"];
638--2104[label="0.00689655;1pkt 1fpkt"];
638--2234[label="0.00740741;2pkt 2fpkt"];
638--2238[label="0.00877193;2pkt 2fpkt"];
638--2240[label="0.00938967;2pkt 2fpkt"];
638--2434[label="0.00348432;1pkt 1fpkt"];
638--2761[label="0.00348432;1pkt 1fpkt"];
638--2765[label="0.00348432;1pkt 1fpkt"];
638--2768[label="0.00348432;1pkt 1fpkt"];
638--2780[label="0.00348432;1pkt 1fpkt"];
638--2797[label="0.00348432;1pkt 1fpkt"];
638--3087[label="0.00352113;1pkt 1fpkt"];
638--3369[label="0.00348432;1pkt 1fpkt"];
638--3372[label="0.00934579;1pkt 1fpkt"];
638--3517[label="0.00641026;1pkt 1fpkt"];
638--4324[label="0.00617284;1pkt 1fpkt"];
638--4448[label="0.00740741;1pkt 1fpkt"];
638--4571[label="0.00348432;1pkt 1fpkt"];
638--5070[label="0.00348432;1pkt 1fpkt"];
638--5084[label="0.00348432;1pkt 1fpkt"];
638--5098[label="0.00775194;1pkt 1fpkt"];
638--5399[label="0.00772201;2pkt 2fpkt"];
638--5653[label="0.00348432;1pkt 1fpkt"];
638--6036[label="0.00348432;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="193.1.202.199"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
713[label="173.144.89.141;s;2pkt 2fpkt", shape=diamond, color=yellow];
746[label="214.154.170.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
3983[label="173.144.89.141;s;2pkt 2fpkt", shape=hexagon, color=black];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.89.141:52291, 40.57.113.73:80}[50%]&lt;BR/&gt;{173.144.89.141:37494, 214.154.170.236:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37494: (30%)&lt;BR/&gt; 52291: (20%)&gt;];
}
713--746[label="1;1pkt 1fpkt"];
713--3983[label="1;2pkt 2fpkt"];
746--3983[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.154.170.236" dst_port="80" src_ip="173.144.89.141" src_port="37494"/>
      <filter dst_ip="40.57.113.73" dst_port="80" src_ip="173.144.89.141" src_port="52291"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709223,1.87872,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_28{
style=filled;
color=gray75;
712[label="173.144.89.141;d;1pkt 1fpkt", shape=diamond, color=yellow];
747[label="214.154.170.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
7898[label="214.154.170.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8681[label="214.154.170.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat28[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.154.170.236:80, 173.144.89.141:37494}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37494: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
712--747[label="1;1pkt 1fpkt"];
712--7898[label="1;1pkt 1fpkt"];
712--8681[label="1;1pkt 1fpkt"];
747--7898[label="1;1pkt 1fpkt"];
747--8681[label="1;1pkt 1fpkt"];
7898--8681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.89.141" dst_port="37494" src_ip="214.154.170.236" src_port="80"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757306" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_29{
style=filled;
color=gray75;
714[label="133.224.129.154;d;35pkt 35fpkt", shape=diamond, color=yellow];
785[label="57.49.8.109;s;18pkt 18fpkt", shape=diamond, color=yellow];
stat29[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.49.8.109:80, 133.224.129.154:*}[47.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.3962%)&lt;BR/&gt; 33436: (1.88679%)&lt;BR/&gt; 33435: (1.88679%)&lt;BR/&gt; 11498: (1.88679%)&lt;BR/&gt; 10341: (1.88679%)&gt;];
}
714--785[label="0.944444;17pkt 17fpkt"];
714--3498[label="0.0285714;1pkt 1fpkt"];
785--1049[label="0.0555556;1pkt 1fpkt"];
785--4360[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.129.154" src_ip="57.49.8.109" src_port="80"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_31{
style=filled;
color=gray75;
120[label="221.77.27.17;d;45pkt 45fpkt", shape=diamond, color=yellow];
859[label="144.45.136.57;s;45pkt 45fpkt", shape=diamond, color=yellow];
3875[label="221.77.27.17;d;43pkt 43fpkt", shape=hexagon, color=black];
5881[label="221.77.27.17;d;36pkt 36fpkt", shape=polygon, color=gold];
stat31[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.136.57:*, 221.77.27.17:8021}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8021: (9.76331%)&lt;BR/&gt; 3784: (2.07101%)&lt;BR/&gt; 4990: (1.18343%)&lt;BR/&gt; 4445: (1.18343%)&lt;BR/&gt; 4173: (1.18343%)&gt;];
}
120--859[label="1;45pkt 45fpkt"];
120--3875[label="1;43pkt 43fpkt"];
120--5881[label="1;36pkt 36fpkt"];
859--3875[label="1;43pkt 43fpkt"];
859--5881[label="1;36pkt 36fpkt"];
3875--5881[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="221.77.27.17" dst_port="8021" src_ip="144.45.136.57"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_32{
style=filled;
color=gray75;
877[label="201.145.102.224;s;122pkt 122fpkt", shape=diamond, color=yellow];
stat32[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.145.102.224:6667, *:*}[36.0656%]&lt;BR/&gt;{201.145.102.224:*, 218.182.130.74:*}[22.1311%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.0328%)&lt;BR/&gt; 6668: (4.91803%)&lt;BR/&gt; 6664: (3.68852%)&lt;BR/&gt; 6662: (3.68852%)&lt;BR/&gt; 3128: (3.68852%)&gt;];
}
877--6075[label="0.00819672;1pkt 1fpkt"];
877--6117[label="0.00819672;1pkt 1fpkt"];
877--6152[label="0.00819672;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.182.130.74" src_ip="201.145.102.224"/>
      <filter src_ip="201.145.102.224" src_port="6667"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_33{
style=filled;
color=gray75;
1100[label="193.1.201.101;s;1464pkt 1464fpkt", shape=diamond, color=yellow];
stat33[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.201.101:20129, *:20129}[61.0656%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (80.4986%)&lt;BR/&gt; 20128: (1.36612%)&lt;BR/&gt; 10000: (0.239071%)&lt;BR/&gt; 41282: (0.136612%)&lt;BR/&gt; 59317: (0.102459%)&gt;];
}
1100--6062[label="0.00109769;1pkt 1fpkt"];
1100--6075[label="0.00131234;1pkt 1fpkt"];
1100--6117[label="0.00131234;1pkt 1fpkt"];
1100--6152[label="0.00131234;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="193.1.201.101" src_port="20129"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="218.91.98.152"/>
      <from sec="1194757202" usec="0"/>
      <to sec="1194757849" usec="0"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="89.89.147.166"/>
      <from sec="1194757692" usec="0"/>
      <to sec="1194757849" usec="0"/>
    </slice>
    <from sec="1194757692" usec="0"/>
    <to sec="1194757849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_36{
style=filled;
color=gray75;
1388[label="57.8.173.238;d;13pkt 13fpkt", shape=diamond, color=yellow];
1389[label="132.19.125.4;s;13pkt 13fpkt", shape=diamond, color=yellow];
4231[label="57.8.173.238;d;13pkt 13fpkt", shape=hexagon, color=black];
stat36[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.125.4:80, 57.8.173.238:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65029: (3.84615%)&lt;BR/&gt; 65027: (3.84615%)&lt;BR/&gt; 64575: (3.84615%)&lt;BR/&gt; 62917: (3.84615%)&gt;];
}
1388--1389[label="1;13pkt 13fpkt"];
1388--4231[label="1;13pkt 13fpkt"];
1389--4231[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="57.8.173.238" src_ip="132.19.125.4" src_port="80"/>
    </slice>
    <from sec="1194757241" usec="0"/>
    <to sec="1194757397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
1344[label="144.45.136.34;s;17pkt 17fpkt", shape=diamond, color=yellow];
1434[label="193.24.28.132;d;6pkt 6fpkt", shape=diamond, color=yellow];
4251[label="193.24.28.132;d;6pkt 6fpkt", shape=hexagon, color=black];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.136.34:*, 209.186.206.222:80}[52.9412%]&lt;BR/&gt;{144.45.136.34:*, 193.24.28.132:80}[35.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1203: (5.17241%)&lt;BR/&gt; 1202: (5.17241%)&lt;BR/&gt; 1201: (5.17241%)&lt;BR/&gt; 1197: (5.17241%)&gt;];
}
1344--1434[label="1;6pkt 6fpkt"];
1344--4251[label="1;6pkt 6fpkt"];
1434--4251[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="209.186.206.222" dst_port="80" src_ip="144.45.136.34"/>
      <filter dst_ip="193.24.28.132" dst_port="80" src_ip="144.45.136.34"/>
    </slice>
    <from sec="1194757209" usec="0"/>
    <to sec="1194757385" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
1489[label="93.144.56.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
1490[label="129.33.52.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
4506[label="129.33.52.2;s;1pkt 1fpkt", shape=hexagon, color=black];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.52.2:80, 93.144.56.80:1049}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1049: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1489--1490[label="1;1pkt 1fpkt"];
1489--4506[label="1;1pkt 1fpkt"];
1490--4506[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="93.144.56.80" dst_port="1049" src_ip="129.33.52.2" src_port="80"/>
    </slice>
    <from sec="1194757355" usec="0"/>
    <to sec="1194757368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.177.138.9"/>
      <from sec="1194757369" usec="0"/>
      <to sec="1194757387" usec="0"/>
    </slice>
    <from sec="1194757369" usec="0"/>
    <to sec="1194757387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_41{
style=filled;
color=gray75;
1596[label="192.128.90.186;d;2pkt 2fpkt", shape=diamond, color=yellow];
1597[label="129.33.17.167;s;2pkt 2fpkt", shape=diamond, color=yellow];
5660[label="129.33.17.167;s;2pkt 2fpkt", shape=hexagon, color=black];
stat41[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.17.167:60043, 192.128.90.186:443}[50%]&lt;BR/&gt;{129.33.17.167:60049, 192.128.90.186:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 60049: (25%)&lt;BR/&gt; 60043: (25%)&gt;];
}
1596--1597[label="1;2pkt 2fpkt"];
1596--5660[label="1;2pkt 2fpkt"];
1597--5660[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="192.128.90.186" dst_port="443" src_ip="129.33.17.167" src_port="60049"/>
      <filter dst_ip="192.128.90.186" dst_port="443" src_ip="129.33.17.167" src_port="60043"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
1650[label="218.177.223.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
1651[label="129.33.56.60;s;1pkt 1fpkt", shape=diamond, color=yellow];
4635[label="218.177.223.55;d;1pkt 1fpkt", shape=hexagon, color=black];
4636[label="129.33.56.60;s;1pkt 1fpkt", shape=hexagon, color=black];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.56.60:22, 218.177.223.55:43585}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43585: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
1650--1651[label="1;1pkt 1fpkt"];
1650--4635[label="1;1pkt 1fpkt"];
1650--4636[label="1;1pkt 1fpkt"];
1651--4635[label="1;1pkt 1fpkt"];
1651--4636[label="1;1pkt 1fpkt"];
4635--4636[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.177.223.55" dst_port="43585" src_ip="129.33.56.60" src_port="22"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
1654[label="133.224.112.47;s;539pkt 539fpkt", shape=diamond, color=yellow];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.112.47:0, *:0}[99.8145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8145%)&lt;BR/&gt; 14623: (0.0927644%)&lt;BR/&gt; 80: (0.0927644%)&gt;];
}
1654--1695[label="0.00452489;1pkt 1fpkt"];
1654--2104[label="0.00689655;1pkt 1fpkt"];
1654--2849[label="0.00943396;1pkt 1fpkt"];
1654--3277[label="0.002331;1pkt 1fpkt"];
1654--4036[label="0.00289017;1pkt 1fpkt"];
1654--4324[label="0.00617284;1pkt 1fpkt"];
1654--5098[label="0.00775194;1pkt 1fpkt"];
1654--5122[label="0.0120482;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.224.112.47"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
1737[label="93.221.121.22;d;39pkt 39fpkt", shape=diamond, color=yellow];
1738[label="129.33.224.72;s;39pkt 39fpkt", shape=diamond, color=yellow];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.224.72:443, 93.221.121.22:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3313: (1.28205%)&lt;BR/&gt; 3312: (1.28205%)&lt;BR/&gt; 3311: (1.28205%)&lt;BR/&gt; 3310: (1.28205%)&gt;];
}
1737--1738[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="93.221.121.22" src_ip="129.33.224.72" src_port="443"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
1756[label="216.128.146.91;s;330pkt 330fpkt", shape=diamond, color=yellow];
1757[label="173.144.71.85;d;330pkt 330fpkt", shape=diamond, color=yellow];
4704[label="173.144.71.85;d;258pkt 258fpkt", shape=hexagon, color=black];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.128.146.91:80, 173.144.71.85:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 40002: (0.163399%)&lt;BR/&gt; 40001: (0.163399%)&lt;BR/&gt; 40000: (0.163399%)&lt;BR/&gt; 39999: (0.163399%)&gt;];
}
1756--1757[label="1;330pkt 330fpkt"];
1756--4704[label="1;258pkt 258fpkt"];
1756--6065[label="0.0545455;18pkt 18fpkt"];
1756--6081[label="0.0545455;18pkt 18fpkt"];
1756--6086[label="0.0181818;6pkt 6fpkt"];
1756--6107[label="0.0545455;18pkt 18fpkt"];
1756--6122[label="0.0545455;18pkt 18fpkt"];
1756--6127[label="0.0181818;6pkt 6fpkt"];
1756--6144[label="0.0545455;18pkt 18fpkt"];
1756--6157[label="0.0545455;18pkt 18fpkt"];
1756--6162[label="0.0181818;6pkt 6fpkt"];
1757--4704[label="1;258pkt 258fpkt"];
1757--6065[label="0.0545455;18pkt 18fpkt"];
1757--6081[label="0.0545455;18pkt 18fpkt"];
1757--6086[label="0.0181818;6pkt 6fpkt"];
1757--6107[label="0.0545455;18pkt 18fpkt"];
1757--6122[label="0.0545455;18pkt 18fpkt"];
1757--6127[label="0.0181818;6pkt 6fpkt"];
1757--6144[label="0.0545455;18pkt 18fpkt"];
1757--6157[label="0.0545455;18pkt 18fpkt"];
1757--6162[label="0.0181818;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.71.85" src_ip="216.128.146.91" src_port="80"/>
    </slice>
    <from sec="1194757206" usec="0"/>
    <to sec="1194758021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="49.152.70.203"/>
      <from sec="1194757754" usec="0"/>
      <to sec="1194757953" usec="0"/>
    </slice>
    <from sec="1194757754" usec="0"/>
    <to sec="1194757953" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
1898[label="48.50.119.144;d;44pkt 44fpkt", shape=diamond, color=yellow];
1899[label="133.224.54.152;s;44pkt 44fpkt", shape=diamond, color=yellow];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.54.152:80, 48.50.119.144:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33753: (1.13636%)&lt;BR/&gt; 33752: (1.13636%)&lt;BR/&gt; 33751: (1.13636%)&lt;BR/&gt; 33750: (1.13636%)&gt;];
}
1898--1899[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="48.50.119.144" src_ip="133.224.54.152" src_port="80"/>
    </slice>
    <from sec="1194757408" usec="0"/>
    <to sec="1194757511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.144.12.93"/>
      <from sec="1194757201" usec="0"/>
      <to sec="1194758028" usec="0"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
304[label="6.196.181.135;s;3637pkt 3637fpkt", shape=diamond, color=yellow];
1988[label="129.216.0.82;d;1234pkt 1234fpkt", shape=diamond, color=yellow];
2109[label="129.137.202.48;d;1078pkt 1078fpkt", shape=diamond, color=yellow];
2157[label="129.216.64.21;d;1237pkt 1237fpkt", shape=diamond, color=yellow];
3916[label="6.196.181.135;s;2109pkt 2109fpkt", shape=hexagon, color=black];
4664[label="129.137.202.48;d;830pkt 830fpkt", shape=hexagon, color=black];
5116[label="129.216.64.21;d;1098pkt 1098fpkt", shape=hexagon, color=black];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.196.181.135:1005, *:*}[25.7456%]&lt;BR/&gt;{6.196.181.135:10005, 129.216.0.82:*}[25.0889%]&lt;BR/&gt;{6.196.181.135:10005, 129.216.64.21:*}[25.0342%]&lt;BR/&gt;{6.196.181.135:10005, 129.137.202.48:*}[23.6389%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10005: (36.9865%)&lt;BR/&gt; 1005: (12.8753%)&lt;BR/&gt; 80: (0.133654%)&lt;BR/&gt; 33500: (0.0623719%)&lt;BR/&gt; 13412: (0.0623719%)&gt;];
}
304--1988[label="0.996759;1230pkt 1230fpkt"];
304--2109[label="0.994434;1072pkt 1072fpkt"];
304--2157[label="0.993533;1229pkt 1229fpkt"];
304--3916[label="1;2109pkt 2109fpkt"];
304--4664[label="0.993976;825pkt 825fpkt"];
304--5116[label="0.992714;1090pkt 1090fpkt"];
1988--3916[label="0.589951;728pkt 728fpkt"];
2109--3916[label="0.655844;707pkt 707fpkt"];
2109--4664[label="1;830pkt 830fpkt"];
2109--6074[label="0.000927644;1pkt 1fpkt"];
2109--6116[label="0.000927644;1pkt 1fpkt"];
2109--6151[label="0.000927644;1pkt 1fpkt"];
2157--3916[label="0.544867;674pkt 674fpkt"];
2157--5116[label="1;1098pkt 1098fpkt"];
3916--4664[label="0.851807;707pkt 707fpkt"];
3916--5116[label="0.613843;674pkt 674fpkt"];
</description>
    <slice>
      <filter src_ip="6.196.181.135" src_port="1005"/>
      <filter dst_ip="129.216.64.21" src_ip="6.196.181.135" src_port="10005"/>
      <filter dst_ip="129.216.0.82" src_ip="6.196.181.135" src_port="10005"/>
      <filter dst_ip="129.137.202.48" src_ip="6.196.181.135" src_port="10005"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
2036[label="192.218.241.113;d;6pkt 6fpkt", shape=diamond, color=yellow];
2037[label="129.33.160.246;s;8pkt 8fpkt", shape=diamond, color=yellow];
5273[label="129.33.160.246;s;8pkt 8fpkt", shape=hexagon, color=black];
5994[label="129.33.160.246;s;8pkt 8fpkt", shape=polygon, color=gold];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.160.246:80, 220.236.20.191:*}[25%]&lt;BR/&gt;{129.33.160.246:*, 192.218.241.113:6970}[25%]&lt;BR/&gt;{129.33.160.246:554, 192.218.241.113:*}[25%]&lt;BR/&gt;{129.33.160.246:80, 192.218.241.113:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.3333%)&lt;BR/&gt; 6970: (13.3333%)&lt;BR/&gt; 554: (13.3333%)&lt;BR/&gt; 35327: (6.66667%)&lt;BR/&gt; 30170: (6.66667%)&gt;];
}
2036--2037[label="1;6pkt 6fpkt"];
2036--5273[label="1;6pkt 6fpkt"];
2036--5994[label="1;6pkt 6fpkt"];
2037--5273[label="1;8pkt 8fpkt"];
2037--5994[label="1;8pkt 8fpkt"];
5273--5994[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="192.218.241.113" src_ip="129.33.160.246" src_port="80"/>
      <filter dst_ip="192.218.241.113" src_ip="129.33.160.246" src_port="554"/>
      <filter dst_ip="192.218.241.113" dst_port="6970" src_ip="129.33.160.246"/>
      <filter dst_ip="220.236.20.191" src_ip="129.33.160.246" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
2054[label="133.224.112.47;d;224pkt 224fpkt", shape=diamond, color=yellow];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 133.224.112.47:0}[99.5536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5536%)&lt;BR/&gt; 14623: (0.223214%)&lt;BR/&gt; 80: (0.223214%)&gt;];
}
2054--2425[label="0.00446429;1pkt 1fpkt"];
2054--5040[label="0.00446429;1pkt 1fpkt"];
2054--7382[label="0.00446429;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.112.47"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.1.203.76"/>
      <from sec="1194757201" usec="0"/>
      <to sec="1194757939" usec="0"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.21.74.175"/>
      <from sec="1194757375" usec="0"/>
      <to sec="1194757542" usec="0"/>
    </slice>
    <from sec="1194757375" usec="0"/>
    <to sec="1194757542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.223.200.192"/>
      <from sec="1194757402" usec="0"/>
      <to sec="1194757847" usec="0"/>
    </slice>
    <from sec="1194757402" usec="0"/>
    <to sec="1194757847" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.33.140.215"/>
      <from sec="1194757405" usec="0"/>
      <to sec="1194757536" usec="0"/>
    </slice>
    <from sec="1194757405" usec="0"/>
    <to sec="1194757536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
2297[label="209.130.170.142;d;77pkt 77fpkt", shape=diamond, color=yellow];
2298[label="152.174.117.108;s;78pkt 78fpkt", shape=diamond, color=yellow];
4988[label="152.174.117.108;s;78pkt 78fpkt", shape=hexagon, color=black];
5168[label="209.130.170.142;d;77pkt 77fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.117.108:80, 209.130.170.142:*}[98.7179%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6774%)&lt;BR/&gt; 1215: (0.645161%)&lt;BR/&gt; 1214: (0.645161%)&lt;BR/&gt; 1213: (0.645161%)&lt;BR/&gt; 1212: (0.645161%)&gt;];
}
2297--2298[label="1;77pkt 77fpkt"];
2297--4988[label="1;77pkt 77fpkt"];
2297--5168[label="1;77pkt 77fpkt"];
2298--4988[label="1;78pkt 78fpkt"];
2298--5168[label="1;77pkt 77fpkt"];
4988--5168[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="209.130.170.142" src_ip="152.174.117.108" src_port="80"/>
    </slice>
    <from sec="1194757473" usec="0"/>
    <to sec="1194757639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="51.197.237.21"/>
      <from sec="1194757488" usec="0"/>
      <to sec="1194757544" usec="0"/>
    </slice>
    <from sec="1194757488" usec="0"/>
    <to sec="1194757544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
2321[label="2.122.224.137;d;2pkt 2fpkt", shape=diamond, color=yellow];
2322[label="129.33.26.72;s;2pkt 2fpkt", shape=diamond, color=yellow];
4779[label="2.122.224.137;d;2pkt 2fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.26.72:2405, 2.122.224.137:80}[50%]&lt;BR/&gt;{129.33.26.72:2419, 2.122.224.137:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2419: (25%)&lt;BR/&gt; 2405: (25%)&gt;];
}
2321--2322[label="1;2pkt 2fpkt"];
2321--4779[label="1;2pkt 2fpkt"];
2322--4779[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="2.122.224.137" dst_port="80" src_ip="129.33.26.72" src_port="2419"/>
      <filter dst_ip="2.122.224.137" dst_port="80" src_ip="129.33.26.72" src_port="2405"/>
    </slice>
    <from sec="1194757490" usec="0"/>
    <to sec="1194757517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
2326[label="129.37.236.136;d;132pkt 132fpkt", shape=diamond, color=yellow];
2327[label="221.48.65.1;s;132pkt 132fpkt", shape=diamond, color=yellow];
4780[label="221.48.65.1;s;132pkt 132fpkt", shape=hexagon, color=black];
4994[label="129.37.236.136;d;132pkt 132fpkt", shape=hexagon, color=black];
6197[label="221.48.65.1;133pkt 133fpkt", shape=pentagon, color=darkviolet];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.48.65.1:*, 129.37.236.136:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1188: (0.378215%)&lt;BR/&gt; 1176: (0.378215%)&lt;BR/&gt; 1175: (0.378215%)&lt;BR/&gt; 1174: (0.378215%)&gt;];
}
2326--2327[label="1;132pkt 132fpkt"];
2326--4780[label="1;132pkt 132fpkt"];
2326--4994[label="1;132pkt 132fpkt"];
2326--6197[label="1;132pkt 132fpkt"];
2327--4780[label="1;132pkt 132fpkt"];
2327--4994[label="1;132pkt 132fpkt"];
2327--6197[label="1;132pkt 132fpkt"];
4780--4994[label="1;132pkt 132fpkt"];
4780--6197[label="1;132pkt 132fpkt"];
4994--6197[label="1;132pkt 132fpkt"];
</description>
    <slice>
      <filter dst_ip="129.37.236.136" dst_port="443" src_ip="221.48.65.1"/>
    </slice>
    <from sec="1194757492" usec="0"/>
    <to sec="1194757814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
2363[label="222.66.96.88;d;3pkt 3fpkt", shape=diamond, color=yellow];
2364[label="144.45.164.160;s;3pkt 3fpkt", shape=diamond, color=yellow];
4793[label="144.45.164.160;s;3pkt 3fpkt", shape=hexagon, color=black];
7424[label="144.45.164.160;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.164.160:1268, 209.186.205.51:80}[25%]&lt;BR/&gt;{144.45.164.160:1816, 222.66.96.88:80}[25%]&lt;BR/&gt;{144.45.164.160:1820, 222.66.96.88:80}[25%]&lt;BR/&gt;{144.45.164.160:1822, 222.66.96.88:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1822: (15.3846%)&lt;BR/&gt; 1820: (15.3846%)&lt;BR/&gt; 1816: (15.3846%)&lt;BR/&gt; 1268: (3.84615%)&gt;];
}
2363--2364[label="1;3pkt 3fpkt"];
2363--4793[label="1;3pkt 3fpkt"];
2363--7424[label="1;3pkt 3fpkt"];
2364--4793[label="1;3pkt 3fpkt"];
2364--7424[label="1;3pkt 3fpkt"];
4793--7424[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="222.66.96.88" dst_port="80" src_ip="144.45.164.160" src_port="1822"/>
      <filter dst_ip="222.66.96.88" dst_port="80" src_ip="144.45.164.160" src_port="1820"/>
      <filter dst_ip="222.66.96.88" dst_port="80" src_ip="144.45.164.160" src_port="1816"/>
      <filter dst_ip="209.186.205.51" dst_port="80" src_ip="144.45.164.160" src_port="1268"/>
    </slice>
    <from sec="1194757369" usec="0"/>
    <to sec="1194757571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.139.24.193"/>
      <from sec="1194757555" usec="0"/>
      <to sec="1194757645" usec="0"/>
    </slice>
    <from sec="1194757555" usec="0"/>
    <to sec="1194757645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="192.188.121.92"/>
      <from sec="1194757202" usec="0"/>
      <to sec="1194758018" usec="0"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.223.200.192"/>
      <from sec="1194757402" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="1194757402" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
2659[label="133.224.156.1;s;8pkt 8fpkt", shape=diamond, color=yellow];
2691[label="51.118.133.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
3003[label="51.118.133.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
3312[label="51.118.133.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
3793[label="51.118.133.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.156.1:22, *:*}[62.5%]&lt;BR/&gt;{133.224.156.1:80, *:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (37.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 47574: (8.33333%)&lt;BR/&gt; 30901: (8.33333%)&lt;BR/&gt; 22018: (8.33333%)&gt;];
}
2659--2691[label="1;1pkt 1fpkt"];
2659--3003[label="1;1pkt 1fpkt"];
2659--3312[label="1;1pkt 1fpkt"];
2659--3793[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.224.156.1" src_port="22"/>
      <filter src_ip="133.224.156.1" src_port="80"/>
    </slice>
    <from sec="1194757516" usec="0"/>
    <to sec="1194757950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709223,1.87872,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
2695[label="209.192.32.23;s;179pkt 179fpkt", shape=diamond, color=yellow];
2696[label="133.224.139.122;d;179pkt 179fpkt", shape=diamond, color=yellow];
6404[label="209.192.32.23;179pkt 179fpkt", shape=pentagon, color=darkviolet];
8091[label="209.192.32.23;178pkt 178fpkt", shape=invtriangle, color=brown];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.192.32.23:80, 133.224.139.122:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3340: (0.27972%)&lt;BR/&gt; 3338: (0.27972%)&lt;BR/&gt; 3337: (0.27972%)&lt;BR/&gt; 3336: (0.27972%)&gt;];
}
2695--2696[label="1;179pkt 179fpkt"];
2695--6404[label="1;179pkt 179fpkt"];
2695--8091[label="1;178pkt 178fpkt"];
2696--6404[label="1;179pkt 179fpkt"];
2696--8091[label="1;178pkt 178fpkt"];
6404--8091[label="1;178pkt 178fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.139.122" src_ip="209.192.32.23" src_port="80"/>
    </slice>
    <from sec="1194757590" usec="0"/>
    <to sec="1194757859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709223,1.87872,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
2694[label="209.192.32.23;d;179pkt 179fpkt", shape=diamond, color=yellow];
2697[label="133.224.139.122;s;182pkt 182fpkt", shape=diamond, color=yellow];
2992[label="93.170.22.163;d;3pkt 3fpkt", shape=diamond, color=yellow];
7146[label="133.224.139.122;182pkt 182fpkt", shape=pentagon, color=darkviolet];
8390[label="133.224.139.122;182pkt 182fpkt", shape=invtriangle, color=brown];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.139.122:*, 209.192.32.23:80}[98.3516%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1758%)&lt;BR/&gt; 554: (0.824176%)&lt;BR/&gt; 3375: (0.274725%)&lt;BR/&gt; 3362: (0.274725%)&lt;BR/&gt; 3361: (0.274725%)&gt;];
}
2694--2697[label="1;179pkt 179fpkt"];
2694--7146[label="1;179pkt 179fpkt"];
2694--8390[label="1;179pkt 179fpkt"];
2697--2992[label="1;3pkt 3fpkt"];
2697--7146[label="1;182pkt 182fpkt"];
2697--8390[label="1;182pkt 182fpkt"];
2992--7146[label="1;3pkt 3fpkt"];
2992--8390[label="1;3pkt 3fpkt"];
7146--8390[label="1;182pkt 182fpkt"];
</description>
    <slice>
      <filter dst_ip="209.192.32.23" dst_port="80" src_ip="133.224.139.122"/>
    </slice>
    <from sec="1194757590" usec="0"/>
    <to sec="1194757859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="129.33.50.68"/>
      <from sec="1194757594" usec="0"/>
      <to sec="1194757610" usec="0"/>
    </slice>
    <from sec="1194757594" usec="0"/>
    <to sec="1194757610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="117.235.160.184"/>
      <from sec="1194757595" usec="0"/>
      <to sec="1194757600" usec="0"/>
    </slice>
    <from sec="1194757595" usec="0"/>
    <to sec="1194757600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.177.138.47"/>
      <from sec="1194757601" usec="0"/>
      <to sec="1194757636" usec="0"/>
    </slice>
    <from sec="1194757601" usec="0"/>
    <to sec="1194757636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
2722[label="93.221.111.124;d;17pkt 17fpkt", shape=diamond, color=yellow];
2723[label="129.33.209.66;s;17pkt 17fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.209.66:80, 93.221.111.124:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49644: (2.94118%)&lt;BR/&gt; 49643: (2.94118%)&lt;BR/&gt; 49642: (2.94118%)&lt;BR/&gt; 49641: (2.94118%)&gt;];
}
2722--2723[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="93.221.111.124" src_ip="129.33.209.66" src_port="80"/>
    </slice>
    <from sec="1194757610" usec="0"/>
    <to sec="1194757726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709223,1.87872,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
2579[label="133.224.40.164;d;2pkt 2fpkt", shape=diamond, color=yellow];
2730[label="68.27.37.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
6736[label="68.27.37.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8217[label="68.27.37.66;1pkt 1fpkt", shape=invtriangle, color=brown];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.27.37.66:80, 133.224.40.164:4431}[50%]&lt;BR/&gt;{211.29.22.72:2025, 133.224.40.164:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4431: (40%)&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 2025: (10%)&lt;BR/&gt; 25: (10%)&gt;];
}
2579--2730[label="1;1pkt 1fpkt"];
2579--6736[label="1;1pkt 1fpkt"];
2579--8217[label="1;1pkt 1fpkt"];
2730--6736[label="1;1pkt 1fpkt"];
2730--8217[label="1;1pkt 1fpkt"];
6736--8217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.40.164" dst_port="25" src_ip="211.29.22.72" src_port="2025"/>
      <filter dst_ip="133.224.40.164" dst_port="4431" src_ip="68.27.37.66" src_port="80"/>
    </slice>
    <from sec="1194757212" usec="0"/>
    <to sec="1194758013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="35.71.88.86"/>
      <from sec="1194757640" usec="0"/>
      <to sec="1194757667" usec="0"/>
    </slice>
    <from sec="1194757640" usec="0"/>
    <to sec="1194757667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.144.12.93"/>
      <from sec="1194757201" usec="0"/>
      <to sec="1194758028" usec="0"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_74{
style=filled;
color=gray75;
2765[label="2.237.229.156;d;319pkt 319fpkt", shape=diamond, color=yellow];
stat74[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 2.237.229.156:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2765--3159[label="0.0106383;1pkt 1fpkt"];
2765--3927[label="0.0031348;1pkt 1fpkt"];
2765--3967[label="0.00775194;1pkt 1fpkt"];
2765--5345[label="0.0106383;1pkt 1fpkt"];
2765--5870[label="0.00917431;1pkt 1fpkt"];
2765--7003[label="0.0104167;1pkt 1fpkt"];
2765--8332[label="0.0104167;1pkt 1fpkt"];
2765--8920[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.237.229.156"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
2797[label="89.45.182.52;d;311pkt 311fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 89.45.182.52:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2797--3159[label="0.0106383;1pkt 1fpkt"];
2797--3927[label="0.00321543;1pkt 1fpkt"];
2797--3967[label="0.00775194;1pkt 1fpkt"];
2797--4383[label="0.00632911;1pkt 1fpkt"];
2797--5345[label="0.0106383;1pkt 1fpkt"];
2797--5870[label="0.00917431;1pkt 1fpkt"];
2797--7003[label="0.0104167;1pkt 1fpkt"];
2797--7346[label="0.00321543;1pkt 1fpkt"];
2797--8332[label="0.0104167;1pkt 1fpkt"];
2797--8920[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="89.45.182.52"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
2076[label="144.45.10.22;s;103pkt 103fpkt", shape=diamond, color=yellow];
2798[label="92.42.138.47;d;1pkt 1fpkt", shape=diamond, color=yellow];
4651[label="144.45.10.22;s;48pkt 48fpkt", shape=hexagon, color=black];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.10.22:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (6.57895%)&lt;BR/&gt; 21867: (5.59211%)&lt;BR/&gt; 8208: (3.28947%)&lt;BR/&gt; 16881: (2.96053%)&lt;BR/&gt; 10525: (2.96053%)&gt;];
}
2076--2798[label="1;1pkt 1fpkt"];
2076--4651[label="1;48pkt 48fpkt"];
2076--6073[label="0.0194175;2pkt 2fpkt"];
2076--6084[label="0.0194175;2pkt 2fpkt"];
2076--6115[label="0.0194175;2pkt 2fpkt"];
2076--6125[label="0.0194175;2pkt 2fpkt"];
2076--6150[label="0.0194175;2pkt 2fpkt"];
2076--6160[label="0.0194175;2pkt 2fpkt"];
2798--4651[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="144.45.10.22"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
1471[label="144.45.9.185;s;318pkt 318fpkt", shape=diamond, color=yellow];
2911[label="93.139.146.214;d;229pkt 229fpkt", shape=diamond, color=yellow];
5154[label="93.139.146.214;d;229pkt 229fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.9.185:*, 93.139.146.214:80}[72.0126%]&lt;BR/&gt;{144.45.9.185:*, 93.139.146.197:80}[25.4717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9356%)&lt;BR/&gt; 2589: (0.193299%)&lt;BR/&gt; 2580: (0.193299%)&lt;BR/&gt; 2579: (0.193299%)&lt;BR/&gt; 2578: (0.193299%)&gt;];
}
1471--2911[label="1;229pkt 229fpkt"];
1471--5154[label="1;229pkt 229fpkt"];
2911--5154[label="1;229pkt 229fpkt"];
</description>
    <slice>
      <filter dst_ip="93.139.146.214" dst_port="80" src_ip="144.45.9.185"/>
      <filter dst_ip="93.139.146.197" dst_port="80" src_ip="144.45.9.185"/>
    </slice>
    <from sec="1194757327" usec="0"/>
    <to sec="1194757875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592345,1.89745,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
2999[label="48.164.136.20;d;1pkt 1fpkt", shape=diamond, color=yellow];
3000[label="129.33.227.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
7142[label="129.33.227.121;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.227.121:80, 48.164.136.20:41902}[20%]&lt;BR/&gt;{129.33.227.121:80, 48.164.136.20:47267}[20%]&lt;BR/&gt;{129.33.227.121:80, 48.164.136.20:54874}[20%]&lt;BR/&gt;{129.33.227.121:80, 48.164.136.20:56080}[20%]&lt;BR/&gt;{129.33.227.121:80, 48.164.136.20:65456}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54874: (21.4286%)&lt;BR/&gt; 65456: (7.14286%)&lt;BR/&gt; 56080: (7.14286%)&lt;BR/&gt; 47267: (7.14286%)&gt;];
}
2999--3000[label="1;1pkt 1fpkt"];
2999--7142[label="1;1pkt 1fpkt"];
3000--7142[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="48.164.136.20" dst_port="65456" src_ip="129.33.227.121" src_port="80"/>
      <filter dst_ip="48.164.136.20" dst_port="56080" src_ip="129.33.227.121" src_port="80"/>
      <filter dst_ip="48.164.136.20" dst_port="54874" src_ip="129.33.227.121" src_port="80"/>
      <filter dst_ip="48.164.136.20" dst_port="47267" src_ip="129.33.227.121" src_port="80"/>
      <filter dst_ip="48.164.136.20" dst_port="41902" src_ip="129.33.227.121" src_port="80"/>
    </slice>
    <from sec="1194757363" usec="0"/>
    <to sec="1194758095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
2346[label="2.122.209.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
3005[label="129.33.86.64;s;2pkt 2fpkt", shape=diamond, color=yellow];
3020[label="2.122.209.10;d;3pkt 3fpkt", shape=diamond, color=yellow];
5199[label="129.33.86.64;s;2pkt 2fpkt", shape=hexagon, color=black];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.86.64:1196, 2.122.209.0:80}[25%]&lt;BR/&gt;{129.33.86.64:1223, 2.122.209.10:80}[25%]&lt;BR/&gt;{129.33.149.162:3597, 2.122.209.10:80}[25%]&lt;BR/&gt;{129.33.149.162:3608, 2.122.209.10:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1223: (18.75%)&lt;BR/&gt; 1196: (18.75%)&lt;BR/&gt; 3608: (6.25%)&lt;BR/&gt; 3597: (6.25%)&gt;];
}
2346--3005[label="1;1pkt 1fpkt"];
2346--5199[label="1;1pkt 1fpkt"];
3005--3020[label="0.5;1pkt 1fpkt"];
3005--5199[label="1;2pkt 2fpkt"];
3020--5199[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="2.122.209.10" dst_port="80" src_ip="129.33.149.162" src_port="3608"/>
      <filter dst_ip="2.122.209.10" dst_port="80" src_ip="129.33.149.162" src_port="3597"/>
      <filter dst_ip="2.122.209.10" dst_port="80" src_ip="129.33.86.64" src_port="1223"/>
      <filter dst_ip="2.122.209.0" dst_port="80" src_ip="129.33.86.64" src_port="1196"/>
    </slice>
    <from sec="1194757678" usec="0"/>
    <to sec="1194757797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
2835[label="144.45.9.178;s;39pkt 39fpkt", shape=diamond, color=yellow];
3025[label="221.203.76.151;d;2pkt 2fpkt", shape=diamond, color=yellow];
5329[label="144.45.9.178;s;34pkt 34fpkt", shape=hexagon, color=black];
5580[label="221.203.76.151;d;2pkt 2fpkt", shape=hexagon, color=black];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.9.178:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12346: (5.84416%)&lt;BR/&gt; 14166: (5.19481%)&lt;BR/&gt; 9118: (5.19481%)&lt;BR/&gt; 13802: (3.24675%)&lt;BR/&gt; 16860: (2.5974%)&gt;];
}
2835--3025[label="1;2pkt 2fpkt"];
2835--5329[label="1;34pkt 34fpkt"];
2835--5580[label="1;2pkt 2fpkt"];
3025--5329[label="1;2pkt 2fpkt"];
3025--5580[label="1;2pkt 2fpkt"];
5329--5580[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="144.45.9.178"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
2771[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
3082[label="133.224.213.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.213.124:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
2771--3082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="133.224.213.124" src_port="4445"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1741[label="132.19.139.3;s;144pkt 144fpkt", shape=diamond, color=yellow];
3206[label="220.17.196.146;d;19pkt 19fpkt", shape=diamond, color=yellow];
5344[label="132.19.139.3;s;144pkt 144fpkt", shape=hexagon, color=black];
6221[label="132.19.139.3;144pkt 144fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.139.3:*, *:80}[99.3056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6674%)&lt;BR/&gt; 1914: (0.443459%)&lt;BR/&gt; 1895: (0.443459%)&lt;BR/&gt; 1882: (0.443459%)&lt;BR/&gt; 1877: (0.443459%)&gt;];
}
1741--3206[label="1;19pkt 19fpkt"];
1741--5344[label="1;144pkt 144fpkt"];
1741--6221[label="1;144pkt 144fpkt"];
3206--5344[label="1;19pkt 19fpkt"];
3206--6221[label="1;19pkt 19fpkt"];
5344--6221[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="132.19.139.3"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.5.48.252"/>
      <from sec="1194757503" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="1194757503" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="93.5.48.252"/>
      <from sec="1194757503" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="1194757503" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
3295[label="6.107.85.107;d;1pkt 1fpkt", shape=diamond, color=yellow];
3296[label="129.33.38.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.38.104:15000, 6.107.85.107:3549}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15000: (50%)&lt;BR/&gt; 3549: (50%)&gt;];
}
3295--3296[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.107.85.107" dst_port="3549" src_ip="129.33.38.104" src_port="15000"/>
    </slice>
    <from sec="1194757746" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
3251[label="173.144.71.28;d;32pkt 32fpkt", shape=diamond, color=yellow];
3314[label="93.20.51.100;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 173.144.71.28:*}[96.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6111%)&lt;BR/&gt; 1081: (2.77778%)&lt;BR/&gt; 1076: (2.77778%)&lt;BR/&gt; 1071: (2.77778%)&lt;BR/&gt; 1070: (2.77778%)&gt;];
}
3251--3314[label="1;4pkt 4fpkt"];
3251--6086[label="0.15625;5pkt 5fpkt"];
3251--6127[label="0.15625;5pkt 5fpkt"];
3251--6162[label="0.15625;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.71.28" src_port="80"/>
    </slice>
    <from sec="1194757581" usec="0"/>
    <to sec="1194758021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="222.33.55.40"/>
      <from sec="1194757399" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="1194757399" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.25.73.251"/>
      <from sec="1194757901" usec="0"/>
      <to sec="1194757939" usec="0"/>
    </slice>
    <from sec="1194757901" usec="0"/>
    <to sec="1194757939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.68.166.211"/>
      <from sec="1194757915" usec="0"/>
      <to sec="1194757932" usec="0"/>
    </slice>
    <from sec="1194757915" usec="0"/>
    <to sec="1194757932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
3653[label="192.30.82.67;s;328pkt 328fpkt", shape=diamond, color=yellow];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.30.82.67:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (54.4207%)&lt;BR/&gt; 32768: (3.20122%)&lt;BR/&gt; 32769: (0.914634%)&lt;BR/&gt; 32771: (0.762195%)&lt;BR/&gt; 32772: (0.609756%)&gt;];
}
3653--6061[label="0.00304878;1pkt 1fpkt"];
3653--6078[label="0.00304878;1pkt 1fpkt"];
3653--6119[label="0.00304878;1pkt 1fpkt"];
3653--6154[label="0.00304878;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="192.30.82.67" src_port="53"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="219.176.48.29"/>
      <from sec="1194757202" usec="0"/>
      <to sec="1194758028" usec="0"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.69.108.109"/>
      <from sec="1194757638" usec="0"/>
      <to sec="1194758027" usec="0"/>
    </slice>
    <from sec="1194757638" usec="0"/>
    <to sec="1194758027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
3539[label="129.33.56.85;s;32pkt 32fpkt", shape=diamond, color=yellow];
3795[label="209.182.58.123;d;16pkt 16fpkt", shape=diamond, color=yellow];
5572[label="129.33.56.85;s;16pkt 16fpkt", shape=hexagon, color=black];
6896[label="129.33.56.85;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.56.85:443, 209.182.58.123:*}[51.8519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 52435: (1.69492%)&lt;BR/&gt; 46169: (1.69492%)&lt;BR/&gt; 36655: (1.69492%)&lt;BR/&gt; 24528: (1.69492%)&gt;];
}
3539--3795[label="1;16pkt 16fpkt"];
3539--5572[label="1;16pkt 16fpkt"];
3539--6896[label="1;32pkt 32fpkt"];
3795--5572[label="0.375;6pkt 6fpkt"];
3795--6896[label="1;16pkt 16fpkt"];
5572--6896[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="209.182.58.123" src_ip="129.33.56.85" src_port="443"/>
    </slice>
    <from sec="1194757289" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
3825[label="129.60.41.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
3826[label="220.135.7.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
5849[label="129.60.41.11;s;1pkt 1fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.41.11:22, 220.135.7.27:52151}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52151: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
3825--3826[label="1;1pkt 1fpkt"];
3825--5849[label="1;1pkt 1fpkt"];
3826--5849[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.135.7.27" dst_port="52151" src_ip="129.60.41.11" src_port="22"/>
    </slice>
    <from sec="1194757960" usec="0"/>
    <to sec="1194758026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698991,1.9524,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1194757201" usec="0"/>
      <to sec="1194757579" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02358,1.88957,999,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
198[label="215.72.123.163;d;1pkt 1fpkt", shape=diamond, color=yellow];
201[label="129.60.168.86;s;102pkt 102fpkt", shape=diamond, color=yellow];
383[label="36.121.194.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
1030[label="33.169.54.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
3894[label="215.72.123.163;d;1pkt 1fpkt", shape=hexagon, color=black];
4576[label="36.121.194.255;d;1pkt 1fpkt", shape=hexagon, color=black];
4598[label="33.169.54.193;d;1pkt 1fpkt", shape=hexagon, color=black];
8892[label="129.60.168.86;98pkt 98fpkt", shape=invhouse, color=bisque];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.168.86:61745, *:*}[60.3774%]&lt;BR/&gt;{129.60.168.86:2212, *:*}[34.9057%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61745: (28.1553%)&lt;BR/&gt; 2212: (17.9612%)&lt;BR/&gt; 4672: (7.76699%)&lt;BR/&gt; 4335: (3.8835%)&lt;BR/&gt; 4256: (2.42718%)&gt;];
}
198--201[label="1;1pkt 1fpkt"];
198--3894[label="1;1pkt 1fpkt"];
198--8892[label="1;1pkt 1fpkt"];
201--383[label="1;1pkt 1fpkt"];
201--1030[label="1;1pkt 1fpkt"];
201--3894[label="1;1pkt 1fpkt"];
201--4576[label="1;1pkt 1fpkt"];
201--4598[label="1;1pkt 1fpkt"];
201--8892[label="0.959184;94pkt 94fpkt"];
383--4576[label="1;1pkt 1fpkt"];
383--8892[label="1;1pkt 1fpkt"];
1030--4598[label="1;1pkt 1fpkt"];
1030--8892[label="1;1pkt 1fpkt"];
3894--8892[label="1;1pkt 1fpkt"];
4576--8892[label="1;1pkt 1fpkt"];
4598--8892[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="129.60.168.86" src_port="61745"/>
      <filter src_ip="129.60.168.86" src_port="2212"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
302[label="208.148.60.203;d;11pkt 11fpkt", shape=diamond, color=yellow];
303[label="144.45.222.183;s;19pkt 19fpkt", shape=diamond, color=yellow];
650[label="208.128.239.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
3914[label="208.148.60.203;d;11pkt 11fpkt", shape=hexagon, color=black];
3915[label="144.45.222.183;s;17pkt 17fpkt", shape=hexagon, color=black];
4642[label="208.128.239.9;d;1pkt 1fpkt", shape=hexagon, color=black];
6034[label="208.148.60.203;d;11pkt 11fpkt", shape=polygon, color=gold];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.222.183:18009, 208.148.60.203:*}[57.8947%]&lt;BR/&gt;{144.45.222.183:18009, 221.70.7.95:*}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18009: (47.1831%)&lt;BR/&gt; 4174: (3.52113%)&lt;BR/&gt; 4147: (3.52113%)&lt;BR/&gt; 4103: (3.52113%)&lt;BR/&gt; 3889: (3.52113%)&gt;];
}
302--303[label="1;11pkt 11fpkt"];
302--3914[label="1;11pkt 11fpkt"];
302--3915[label="0.909091;10pkt 10fpkt"];
302--6034[label="1;11pkt 11fpkt"];
303--650[label="1;1pkt 1fpkt"];
303--3914[label="1;11pkt 11fpkt"];
303--3915[label="1;17pkt 17fpkt"];
303--4642[label="1;1pkt 1fpkt"];
303--6034[label="1;11pkt 11fpkt"];
650--3915[label="1;1pkt 1fpkt"];
650--4642[label="1;1pkt 1fpkt"];
3914--3915[label="0.909091;10pkt 10fpkt"];
3914--6034[label="1;11pkt 11fpkt"];
3915--4642[label="1;1pkt 1fpkt"];
3915--6034[label="0.909091;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="208.148.60.203" src_ip="144.45.222.183" src_port="18009"/>
      <filter dst_ip="221.70.7.95" src_ip="144.45.222.183" src_port="18009"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
386[label="193.99.53.125;d;277pkt 277fpkt", shape=diamond, color=yellow];
387[label="152.174.32.157;s;354pkt 354fpkt", shape=diamond, color=yellow];
3510[label="48.164.129.81;d;21pkt 21fpkt", shape=diamond, color=yellow];
3929[label="193.99.53.125;d;172pkt 172fpkt", shape=hexagon, color=black];
4327[label="152.174.32.157;s;313pkt 313fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.32.157:80, 193.99.53.125:*}[78.2486%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4909: (0.219877%)&lt;BR/&gt; 4892: (0.219877%)&lt;BR/&gt; 4878: (0.219877%)&lt;BR/&gt; 4950: (0.175901%)&gt;];
}
386--387[label="1;277pkt 277fpkt"];
386--3929[label="1;172pkt 172fpkt"];
386--4327[label="1;277pkt 277fpkt"];
387--3510[label="1;21pkt 21fpkt"];
387--3929[label="1;172pkt 172fpkt"];
387--4327[label="1;313pkt 313fpkt"];
387--6065[label="0.00282486;1pkt 1fpkt"];
387--6081[label="0.0282486;10pkt 10fpkt"];
387--6086[label="0.0112994;4pkt 4fpkt"];
387--6107[label="0.00282486;1pkt 1fpkt"];
387--6122[label="0.0282486;10pkt 10fpkt"];
387--6127[label="0.0112994;4pkt 4fpkt"];
387--6144[label="0.00282486;1pkt 1fpkt"];
387--6157[label="0.0282486;10pkt 10fpkt"];
387--6162[label="0.0112994;4pkt 4fpkt"];
3510--4327[label="0.47619;10pkt 10fpkt"];
3510--6065[label="0.047619;1pkt 1fpkt"];
3510--6081[label="0.0952381;2pkt 2fpkt"];
3510--6086[label="0.047619;1pkt 1fpkt"];
3510--6107[label="0.047619;1pkt 1fpkt"];
3510--6122[label="0.0952381;2pkt 2fpkt"];
3510--6127[label="0.047619;1pkt 1fpkt"];
3510--6144[label="0.047619;1pkt 1fpkt"];
3510--6157[label="0.0952381;2pkt 2fpkt"];
3510--6162[label="0.047619;1pkt 1fpkt"];
3929--4327[label="1;172pkt 172fpkt"];
</description>
    <slice>
      <filter dst_ip="193.99.53.125" src_ip="152.174.32.157" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
468[label="55.194.62.71;d;4pkt 4fpkt", shape=diamond, color=yellow];
470[label="129.60.208.215;s;5050pkt 5050fpkt", shape=diamond, color=yellow];
575[label="93.133.118.117;d;8pkt 8fpkt", shape=diamond, color=yellow];
637[label="16.210.12.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
1790[label="63.150.3.130;d;3pkt 3fpkt", shape=diamond, color=yellow];
3512[label="39.93.146.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
3700[label="215.49.204.180;d;18pkt 18fpkt", shape=diamond, color=yellow];
3941[label="55.194.62.71;d;1pkt 1fpkt", shape=hexagon, color=black];
4092[label="129.60.208.215;s;4080pkt 4080fpkt", shape=hexagon, color=black];
4610[label="93.133.118.117;d;3pkt 3fpkt", shape=hexagon, color=black];
4718[label="63.150.3.130;d;3pkt 3fpkt", shape=hexagon, color=black];
4725[label="89.89.147.166;d;1pkt 1fpkt", shape=hexagon, color=black];
5742[label="215.49.204.180;d;18pkt 18fpkt", shape=hexagon, color=black];
5934[label="89.89.147.166;d;1pkt 1fpkt", shape=polygon, color=gold];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.208.215:48662, *:*}[66.7723%]&lt;BR/&gt;{129.60.208.215:10364, *:*}[27.9604%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48662: (32.9998%)&lt;BR/&gt; 10364: (14.1342%)&lt;BR/&gt; 6881: (1.07679%)&lt;BR/&gt; 16001: (0.815749%)&lt;BR/&gt; 1501: (0.505765%)&gt;];
}
468--470[label="1;4pkt 4fpkt"];
468--3941[label="1;1pkt 1fpkt"];
468--4092[label="0.75;3pkt 3fpkt"];
470--575[label="1;8pkt 8fpkt"];
470--637[label="1;2pkt 2fpkt"];
470--1790[label="1;3pkt 3fpkt"];
470--3512[label="1;2pkt 2fpkt"];
470--3700[label="1;18pkt 18fpkt"];
470--3941[label="1;1pkt 1fpkt"];
470--4092[label="1;4080pkt 4080fpkt"];
470--4610[label="1;3pkt 3fpkt"];
470--4718[label="1;3pkt 3fpkt"];
470--4725[label="1;1pkt 1fpkt"];
470--5742[label="1;18pkt 18fpkt"];
470--5934[label="1;1pkt 1fpkt"];
575--4092[label="0.875;7pkt 7fpkt"];
575--4610[label="1;3pkt 3fpkt"];
637--4092[label="1;2pkt 2fpkt"];
1790--4092[label="1;3pkt 3fpkt"];
1790--4718[label="1;3pkt 3fpkt"];
3512--4092[label="1;2pkt 2fpkt"];
3700--4092[label="0.722222;13pkt 13fpkt"];
3700--5742[label="1;18pkt 18fpkt"];
3941--4092[label="1;1pkt 1fpkt"];
4092--4610[label="1;3pkt 3fpkt"];
4092--4718[label="1;3pkt 3fpkt"];
4092--4725[label="1;1pkt 1fpkt"];
4092--5742[label="0.722222;13pkt 13fpkt"];
4092--5934[label="1;1pkt 1fpkt"];
4725--5934[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="129.60.208.215" src_port="48662"/>
      <filter src_ip="129.60.208.215" src_port="10364"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.617166,1.94928,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
3380[label="133.224.131.1;d;4pkt 4fpkt", shape=diamond, color=yellow];
3382[label="93.236.19.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.147.136.12:2918, 133.224.131.1:123}[25%]&lt;BR/&gt;{93.162.21.86:123, 133.224.131.1:123}[25%]&lt;BR/&gt;{93.26.29.105:80, 133.224.131.1:12598}[25%]&lt;BR/&gt;{93.236.19.135:123, 133.224.131.1:123}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (70%)&lt;BR/&gt; 12598: (10%)&lt;BR/&gt; 2918: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
3380--3382[label="1;1pkt 1fpkt"];
3380--4048[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.131.1" dst_port="123" src_ip="93.236.19.135" src_port="123"/>
      <filter dst_ip="133.224.131.1" dst_port="12598" src_ip="93.26.29.105" src_port="80"/>
      <filter dst_ip="133.224.131.1" dst_port="123" src_ip="93.162.21.86" src_port="123"/>
      <filter dst_ip="133.224.131.1" dst_port="123" src_ip="74.147.136.12" src_port="2918"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
425[label="173.144.71.189;s;46pkt 46fpkt", shape=diamond, color=yellow];
2004[label="3.112.78.65;d;5pkt 5fpkt", shape=diamond, color=yellow];
4080[label="173.144.71.189;s;40pkt 40fpkt", shape=hexagon, color=black];
5237[label="3.112.78.65;d;5pkt 5fpkt", shape=hexagon, color=black];
7622[label="173.144.71.189;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.71.189:*, 193.74.21.204:80}[31.25%]&lt;BR/&gt;{173.144.71.189:*, 193.74.21.233:80}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.2361%)&lt;BR/&gt; 10198: (5.20833%)&lt;BR/&gt; 10202: (3.47222%)&lt;BR/&gt; 2136: (1.73611%)&lt;BR/&gt; 2131: (1.73611%)&gt;];
}
425--2004[label="1;5pkt 5fpkt"];
425--4080[label="1;40pkt 40fpkt"];
425--5237[label="1;5pkt 5fpkt"];
425--6073[label="0.0217391;1pkt 1fpkt"];
425--6084[label="0.0217391;1pkt 1fpkt"];
425--6115[label="0.0217391;1pkt 1fpkt"];
425--6125[label="0.0217391;1pkt 1fpkt"];
425--6150[label="0.0217391;1pkt 1fpkt"];
425--6160[label="0.0217391;1pkt 1fpkt"];
425--7622[label="1;46pkt 46fpkt"];
2004--4080[label="1;5pkt 5fpkt"];
2004--5237[label="1;5pkt 5fpkt"];
2004--7622[label="1;5pkt 5fpkt"];
4080--5237[label="1;5pkt 5fpkt"];
4080--7622[label="1;40pkt 40fpkt"];
5237--7622[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="193.74.21.233" dst_port="80" src_ip="173.144.71.189"/>
      <filter dst_ip="193.74.21.204" dst_port="80" src_ip="173.144.71.189"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89341,1.82525,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
486[label="93.82.144.227;d;22pkt 22fpkt", shape=diamond, color=yellow];
1022[label="129.33.3.52;s;26pkt 26fpkt", shape=diamond, color=yellow];
4101[label="93.82.144.227;d;5pkt 5fpkt", shape=hexagon, color=black];
6627[label="129.33.3.52;27pkt 27fpkt", shape=pentagon, color=darkviolet];
8174[label="129.33.3.52;27pkt 27fpkt", shape=invtriangle, color=brown];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.3.52:80, 93.82.144.227:*}[81.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50565: (2.33645%)&lt;BR/&gt; 50371: (2.33645%)&lt;BR/&gt; 50090: (2.33645%)&lt;BR/&gt; 50063: (2.33645%)&gt;];
}
486--1022[label="1;22pkt 22fpkt"];
486--4101[label="1;5pkt 5fpkt"];
486--6065[label="0.0454545;1pkt 1fpkt"];
486--6081[label="0.0454545;1pkt 1fpkt"];
486--6086[label="0.0454545;1pkt 1fpkt"];
486--6107[label="0.0454545;1pkt 1fpkt"];
486--6122[label="0.0454545;1pkt 1fpkt"];
486--6127[label="0.0454545;1pkt 1fpkt"];
486--6144[label="0.0454545;1pkt 1fpkt"];
486--6157[label="0.0454545;1pkt 1fpkt"];
486--6162[label="0.0454545;1pkt 1fpkt"];
486--6627[label="1;22pkt 22fpkt"];
486--8174[label="1;22pkt 22fpkt"];
1022--4101[label="1;5pkt 5fpkt"];
1022--6065[label="0.0384615;1pkt 1fpkt"];
1022--6081[label="0.0384615;1pkt 1fpkt"];
1022--6086[label="0.0384615;1pkt 1fpkt"];
1022--6107[label="0.0384615;1pkt 1fpkt"];
1022--6122[label="0.0384615;1pkt 1fpkt"];
1022--6127[label="0.0384615;1pkt 1fpkt"];
1022--6144[label="0.0384615;1pkt 1fpkt"];
1022--6157[label="0.0384615;1pkt 1fpkt"];
1022--6162[label="0.0384615;1pkt 1fpkt"];
1022--6627[label="1;26pkt 26fpkt"];
1022--8174[label="1;26pkt 26fpkt"];
4101--6627[label="1;5pkt 5fpkt"];
4101--8174[label="1;5pkt 5fpkt"];
6627--8174[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_ip="93.82.144.227" src_ip="129.33.3.52" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
569[label="129.60.48.78;s;6140pkt 6140fpkt", shape=diamond, color=yellow];
4124[label="129.60.48.78;s;4739pkt 4739fpkt", shape=hexagon, color=black];
6833[label="129.60.48.78;6432pkt 6432fpkt", shape=pentagon, color=darkviolet];
8254[label="129.60.48.78;6431pkt 6431fpkt", shape=invtriangle, color=brown];
8870[label="129.60.48.78;6432pkt 6432fpkt", shape=invhouse, color=bisque];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.48.78:61364, *:*}[98.6474%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61364: (49.319%)&lt;BR/&gt; 443: (0.520316%)&lt;BR/&gt; 80: (0.188904%)&lt;BR/&gt; 54045: (0.0381123%)&lt;BR/&gt; 49389: (0.0364552%)&gt;];
}
569--4124[label="1;4739pkt 4739fpkt"];
569--6065[label="0.000651466;4pkt 4fpkt"];
569--6073[label="0.000191644;1pkt 1fpkt"];
569--6076[label="0.00178571;1pkt 1fpkt"];
569--6081[label="0.000651466;4pkt 4fpkt"];
569--6084[label="0.000211282;1pkt 1fpkt"];
569--6086[label="0.000651466;4pkt 4fpkt"];
569--6107[label="0.000651466;4pkt 4fpkt"];
569--6115[label="0.000191681;1pkt 1fpkt"];
569--6118[label="0.00178253;1pkt 1fpkt"];
569--6122[label="0.000651466;4pkt 4fpkt"];
569--6125[label="0.000211282;1pkt 1fpkt"];
569--6127[label="0.000651466;4pkt 4fpkt"];
569--6144[label="0.000651466;4pkt 4fpkt"];
569--6150[label="0.000191681;1pkt 1fpkt"];
569--6153[label="0.00178571;1pkt 1fpkt"];
569--6157[label="0.000651466;4pkt 4fpkt"];
569--6160[label="0.000211238;1pkt 1fpkt"];
569--6162[label="0.000651466;4pkt 4fpkt"];
569--6833[label="1;6140pkt 6140fpkt"];
569--8254[label="0.999837;6139pkt 6139fpkt"];
569--8870[label="1;6140pkt 6140fpkt"];
4124--6065[label="0.000633045;3pkt 3fpkt"];
4124--6073[label="0.000211015;1pkt 1fpkt"];
4124--6076[label="0.00178571;1pkt 1fpkt"];
4124--6081[label="0.000633045;3pkt 3fpkt"];
4124--6084[label="0.000211282;1pkt 1fpkt"];
4124--6086[label="0.000633045;3pkt 3fpkt"];
4124--6107[label="0.000633045;3pkt 3fpkt"];
4124--6115[label="0.000211015;1pkt 1fpkt"];
4124--6118[label="0.00178253;1pkt 1fpkt"];
4124--6122[label="0.000633045;3pkt 3fpkt"];
4124--6125[label="0.000211282;1pkt 1fpkt"];
4124--6127[label="0.000633045;3pkt 3fpkt"];
4124--6144[label="0.000633045;3pkt 3fpkt"];
4124--6150[label="0.000211015;1pkt 1fpkt"];
4124--6153[label="0.00178571;1pkt 1fpkt"];
4124--6157[label="0.000633045;3pkt 3fpkt"];
4124--6160[label="0.000211238;1pkt 1fpkt"];
4124--6162[label="0.000633045;3pkt 3fpkt"];
4124--6833[label="1;4739pkt 4739fpkt"];
4124--8254[label="0.999789;4738pkt 4738fpkt"];
4124--8870[label="1;4739pkt 4739fpkt"];
6833--8254[label="1;6431pkt 6431fpkt"];
6833--8870[label="1;6432pkt 6432fpkt"];
8254--8870[label="1;6431pkt 6431fpkt"];
</description>
    <slice>
      <filter src_ip="129.60.48.78" src_port="61364"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
1109[label="129.37.39.130;d;2459pkt 2459fpkt", shape=diamond, color=yellow];
4131[label="129.37.39.130;d;1371pkt 1371fpkt", shape=hexagon, color=black];
7666[label="89.114.127.197;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.37.39.130:41214}[99.3087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41214: (49.6346%)&lt;BR/&gt; 0: (0.208823%)&lt;BR/&gt; 443: (0.169668%)&lt;BR/&gt; 80: (0.104411%)&lt;BR/&gt; 1081: (0.0652571%)&gt;];
}
1109--4131[label="1;1371pkt 1371fpkt"];
1109--6081[label="0.000406669;1pkt 1fpkt"];
1109--6122[label="0.000406669;1pkt 1fpkt"];
1109--6157[label="0.000406669;1pkt 1fpkt"];
1109--7666[label="1;1pkt 1fpkt"];
4131--7666[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.37.39.130" dst_port="41214"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
640[label="209.241.77.198;s;3494pkt 3494fpkt", shape=diamond, color=yellow];
4162[label="209.241.77.198;s;836pkt 836fpkt", shape=hexagon, color=black];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.241.77.198:*, *:445}[98.7407%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (49.3649%)&lt;BR/&gt; 56498: (0.612009%)&lt;BR/&gt; 3656: (0.0230947%)&lt;BR/&gt; 3655: (0.0230947%)&lt;BR/&gt; 3654: (0.0230947%)&gt;];
}
640--4162[label="1;836pkt 836fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="209.241.77.198"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1424[label="129.180.93.37;d;7pkt 7fpkt", shape=diamond, color=yellow];
1453[label="214.54.21.29;s;3pkt 3fpkt", shape=diamond, color=yellow];
4245[label="129.180.93.37;d;7pkt 7fpkt", shape=hexagon, color=black];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.54.20.86:80, 129.180.93.37:*}[50%]&lt;BR/&gt;{214.54.21.29:*, 129.180.93.37:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (23.5294%)&lt;BR/&gt; 35888: (8.82353%)&lt;BR/&gt; 16994: (8.82353%)&lt;BR/&gt; 6970: (8.82353%)&lt;BR/&gt; 554: (8.82353%)&gt;];
}
1424--1453[label="0.666667;2pkt 2fpkt"];
1424--4245[label="1;7pkt 7fpkt"];
1453--4245[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.180.93.37" src_ip="214.54.21.29"/>
      <filter dst_ip="129.180.93.37" src_ip="214.54.20.86" src_port="80"/>
    </slice>
    <from sec="1194757291" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
906[label="192.30.83.63;d;2257pkt 2257fpkt", shape=diamond, color=yellow];
4300[label="192.30.83.63;d;1364pkt 1364fpkt", shape=hexagon, color=black];
7426[label="218.87.196.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 192.30.83.63:20129}[59.876%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (79.5611%)&lt;BR/&gt; 20128: (2.07011%)&lt;BR/&gt; 0: (0.441623%)&lt;BR/&gt; 10000: (0.165609%)&lt;BR/&gt; 11994: (0.096605%)&gt;];
}
906--1817[label="0.0232558;1pkt 1fpkt"];
906--4300[label="1;1364pkt 1364fpkt"];
906--6070[label="0.000809061;1pkt 1fpkt"];
906--6112[label="0.000809061;1pkt 1fpkt"];
906--7426[label="0.5;1pkt 1fpkt"];
4300--6070[label="0.000809061;1pkt 1fpkt"];
4300--6112[label="0.000809061;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.30.83.63" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698991,1.9524,010,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
4312[label="218.149.168.108;s;739pkt 739fpkt", shape=hexagon, color=black];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.149.168.108:8291, *:*}[34.1001%]&lt;BR/&gt;{218.149.168.108:10000, *:*}[33.8295%]&lt;BR/&gt;{218.149.168.108:1723, *:*}[32.0704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8291: (17.0501%)&lt;BR/&gt; 10000: (16.9147%)&lt;BR/&gt; 1723: (16.0352%)&lt;BR/&gt; 2323: (0.270636%)&lt;BR/&gt; 1794: (0.270636%)&gt;];
}
4312--4546[label="0.00775194;1pkt 1fpkt"];
4312--6029[label="0.00775194;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="218.149.168.108" src_port="8291"/>
      <filter src_ip="218.149.168.108" src_port="10000"/>
      <filter src_ip="218.149.168.108" src_port="1723"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
356[label="144.45.8.239;s;23pkt 23fpkt", shape=diamond, color=yellow];
669[label="2.250.122.160;d;2pkt 2fpkt", shape=diamond, color=yellow];
672[label="192.71.106.100;d;2pkt 2fpkt", shape=diamond, color=yellow];
677[label="2.250.17.69;d;2pkt 2fpkt", shape=diamond, color=yellow];
4318[label="144.45.8.239;s;22pkt 22fpkt", shape=hexagon, color=black];
4431[label="192.71.106.100;d;2pkt 2fpkt", shape=hexagon, color=black];
7914[label="144.45.8.239;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.8.239:6319, *:*}[56.5217%]&lt;BR/&gt;{144.45.8.239:0, *:0}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (32.8947%)&lt;BR/&gt; 6319: (28.2895%)&lt;BR/&gt; 80: (5.26316%)&lt;BR/&gt; 4325: (3.28947%)&lt;BR/&gt; 7166: (2.63158%)&gt;];
}
356--363[label="0.0434783;1pkt 1fpkt"];
356--669[label="1;2pkt 2fpkt"];
356--672[label="1;2pkt 2fpkt"];
356--677[label="1;2pkt 2fpkt"];
356--3925[label="0.0434783;1pkt 1fpkt"];
356--4318[label="1;22pkt 22fpkt"];
356--4431[label="1;2pkt 2fpkt"];
356--6035[label="0.0434783;1pkt 1fpkt"];
356--7914[label="1;23pkt 23fpkt"];
669--4318[label="1;2pkt 2fpkt"];
669--7914[label="1;2pkt 2fpkt"];
672--4318[label="1;2pkt 2fpkt"];
672--4431[label="1;2pkt 2fpkt"];
672--7914[label="1;2pkt 2fpkt"];
677--4318[label="1;2pkt 2fpkt"];
677--7914[label="1;2pkt 2fpkt"];
4318--4431[label="1;2pkt 2fpkt"];
4318--6035[label="0.0454545;1pkt 1fpkt"];
4318--7914[label="1;22pkt 22fpkt"];
4431--7914[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="144.45.8.239" src_port="6319"/>
      <filter src_ip="144.45.8.239"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
1405[label="197.37.107.198;s;9pkt 9fpkt", shape=diamond, color=yellow];
1419[label="192.19.41.74;d;19pkt 19fpkt", shape=diamond, color=yellow];
4483[label="197.37.107.198;s;9pkt 9fpkt", shape=hexagon, color=black];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.37.107.198:80, 192.19.41.74:*}[40%]&lt;BR/&gt;{197.37.107.196:80, 192.19.41.74:*}[30%]&lt;BR/&gt;{57.8.132.161:80, 192.19.41.74:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2544: (4.05405%)&lt;BR/&gt; 2543: (4.05405%)&lt;BR/&gt; 2540: (4.05405%)&lt;BR/&gt; 2538: (4.05405%)&gt;];
}
1405--1419[label="0.888889;8pkt 8fpkt"];
1405--4483[label="1;9pkt 9fpkt"];
1419--4483[label="0.888889;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="192.19.41.74" src_ip="197.37.107.198" src_port="80"/>
      <filter dst_ip="192.19.41.74" src_ip="197.37.107.196" src_port="80"/>
      <filter dst_ip="192.19.41.74" src_ip="57.8.132.161" src_port="80"/>
    </slice>
    <from sec="1194757265" usec="0"/>
    <to sec="1194757387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1841[label="133.224.139.231;s;52pkt 52fpkt", shape=diamond, color=yellow];
2618[label="51.26.162.155;d;14pkt 14fpkt", shape=diamond, color=yellow];
4494[label="133.224.139.231;s;45pkt 45fpkt", shape=hexagon, color=black];
4967[label="51.26.162.155;d;14pkt 14fpkt", shape=hexagon, color=black];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.139.231:*, 51.26.162.154:80}[32.6923%]&lt;BR/&gt;{133.224.139.231:*, 51.26.162.155:80}[26.9231%]&lt;BR/&gt;{133.224.139.231:*, 48.208.227.37:80}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3132: (1.6%)&lt;BR/&gt; 3131: (1.6%)&lt;BR/&gt; 3105: (1.6%)&lt;BR/&gt; 3102: (1.6%)&gt;];
}
1841--2485[label="0.133333;6pkt 6fpkt"];
1841--2618[label="1;14pkt 14fpkt"];
1841--4494[label="1;45pkt 45fpkt"];
1841--4967[label="1;14pkt 14fpkt"];
1841--6073[label="0.0576923;3pkt 3fpkt"];
1841--6084[label="0.0576923;3pkt 3fpkt"];
1841--6115[label="0.0576923;3pkt 3fpkt"];
1841--6125[label="0.0576923;3pkt 3fpkt"];
1841--6150[label="0.0576923;3pkt 3fpkt"];
1841--6160[label="0.0576923;3pkt 3fpkt"];
2618--4494[label="1;14pkt 14fpkt"];
2618--4967[label="1;14pkt 14fpkt"];
4494--4967[label="1;14pkt 14fpkt"];
4494--6073[label="0.0222222;1pkt 1fpkt"];
4494--6084[label="0.0222222;1pkt 1fpkt"];
4494--6115[label="0.0222222;1pkt 1fpkt"];
4494--6125[label="0.0222222;1pkt 1fpkt"];
4494--6150[label="0.0222222;1pkt 1fpkt"];
4494--6160[label="0.0222222;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="51.26.162.154" dst_port="80" src_ip="133.224.139.231"/>
      <filter dst_ip="51.26.162.155" dst_port="80" src_ip="133.224.139.231"/>
      <filter dst_ip="48.208.227.37" dst_port="80" src_ip="133.224.139.231"/>
    </slice>
    <from sec="1194757303" usec="0"/>
    <to sec="1194757990" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
94[label="193.1.203.18;d;925pkt 925fpkt", shape=diamond, color=yellow];
197[label="208.83.246.208;s;2pkt 2fpkt", shape=diamond, color=yellow];
283[label="51.176.213.25;s;1pkt 1fpkt", shape=diamond, color=yellow];
333[label="218.28.173.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
424[label="192.204.229.42;s;2pkt 2fpkt", shape=diamond, color=yellow];
535[label="51.235.163.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
732[label="193.202.83.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
780[label="93.152.162.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
891[label="8.128.140.19;s;29pkt 29fpkt", shape=diamond, color=yellow];
963[label="221.39.235.231;s;24pkt 24fpkt", shape=diamond, color=yellow];
1157[label="194.168.235.45;s;2pkt 2fpkt", shape=diamond, color=yellow];
1670[label="8.169.74.157;s;31pkt 31fpkt", shape=diamond, color=yellow];
1683[label="218.136.93.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
1707[label="93.19.73.224;s;117pkt 117fpkt", shape=diamond, color=yellow];
1869[label="3.247.3.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
2348[label="88.11.58.249;s;14pkt 14fpkt", shape=diamond, color=yellow];
2359[label="6.198.217.47;s;1pkt 1fpkt", shape=diamond, color=yellow];
2650[label="217.88.194.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
2658[label="88.2.19.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
2679[label="94.200.150.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
3262[label="2.58.97.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
3304[label="89.110.35.181;s;2pkt 2fpkt", shape=diamond, color=yellow];
3378[label="3.219.64.196;s;38pkt 38fpkt", shape=diamond, color=yellow];
3859[label="4.26.150.29;s;2pkt 2fpkt", shape=diamond, color=yellow];
3867[label="193.1.203.18;d;925pkt 925fpkt", shape=hexagon, color=black];
3909[label="51.176.213.25;s;1pkt 1fpkt", shape=hexagon, color=black];
3995[label="93.152.162.229;s;1pkt 1fpkt", shape=hexagon, color=black];
4552[label="8.128.140.19;s;29pkt 29fpkt", shape=hexagon, color=black];
4619[label="194.168.235.45;s;2pkt 2fpkt", shape=hexagon, color=black];
4677[label="93.19.73.224;s;117pkt 117fpkt", shape=hexagon, color=black];
5172[label="88.11.58.249;s;14pkt 14fpkt", shape=hexagon, color=black];
5444[label="2.58.97.187;s;1pkt 1fpkt", shape=hexagon, color=black];
5465[label="89.110.35.181;s;2pkt 2fpkt", shape=hexagon, color=black];
5626[label="218.28.173.122;s;1pkt 1fpkt", shape=hexagon, color=black];
5695[label="8.169.74.157;s;31pkt 31fpkt", shape=hexagon, color=black];
5859[label="4.26.150.29;s;2pkt 2fpkt", shape=hexagon, color=black];
6459[label="4.26.150.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6581[label="194.168.235.45;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6591[label="6.199.16.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6599[label="6.198.217.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6884[label="88.84.196.83;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7106[label="93.17.251.115;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7213[label="217.237.146.132;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7385[label="221.19.152.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7420[label="8.9.29.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7576[label="89.110.35.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7657[label="3.219.64.196;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7751[label="94.200.150.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7760[label="51.235.163.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7838[label="221.19.146.226;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7870[label="221.39.235.231;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7974[label="193.239.147.250;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8158[label="194.168.235.45;2pkt 2fpkt", shape=invtriangle, color=brown];
8162[label="6.199.16.47;1pkt 1fpkt", shape=invtriangle, color=brown];
8374[label="93.17.251.115;6pkt 6fpkt", shape=invtriangle, color=brown];
8495[label="8.9.29.160;2pkt 2fpkt", shape=invtriangle, color=brown];
8583[label="3.219.64.196;40pkt 40fpkt", shape=invtriangle, color=brown];
8624[label="51.235.163.213;1pkt 1fpkt", shape=invtriangle, color=brown];
8672[label="221.39.235.231;23pkt 23fpkt", shape=invtriangle, color=brown];
8815[label="194.168.235.45;1pkt 1fpkt", shape=invhouse, color=bisque];
8819[label="6.198.217.47;1pkt 1fpkt", shape=invhouse, color=bisque];
9015[label="8.9.29.160;2pkt 2fpkt", shape=invhouse, color=bisque];
9070[label="3.219.64.196;40pkt 40fpkt", shape=invhouse, color=bisque];
9092[label="51.235.163.213;1pkt 1fpkt", shape=invhouse, color=bisque];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.1.203.18:80}[42.1791%]&lt;BR/&gt;{220.218.173.248:*, 193.1.203.18:22}[25.4585%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.6934%)&lt;BR/&gt; 21: (11.5234%)&lt;BR/&gt; 22: (9.30506%)&lt;BR/&gt; 0: (6.36042%)&lt;BR/&gt; 873: (0.196309%)&gt;];
}
94--115[label="0.255135;236pkt 236fpkt"];
94--184[label="1;12pkt 12fpkt"];
94--197[label="1;2pkt 2fpkt"];
94--268[label="1;1pkt 1fpkt"];
94--283[label="1;1pkt 1fpkt"];
94--333[label="1;1pkt 1fpkt"];
94--424[label="1;2pkt 2fpkt"];
94--522[label="1;2pkt 2fpkt"];
94--535[label="1;1pkt 1fpkt"];
94--732[label="1;1pkt 1fpkt"];
94--780[label="1;1pkt 1fpkt"];
94--891[label="1;29pkt 29fpkt"];
94--963[label="1;24pkt 24fpkt"];
94--1057[label="0.0909091;2pkt 2fpkt"];
94--1157[label="1;2pkt 2fpkt"];
94--1670[label="1;31pkt 31fpkt"];
94--1683[label="1;1pkt 1fpkt"];
94--1707[label="1;117pkt 117fpkt"];
94--1869[label="1;1pkt 1fpkt"];
94--2057[label="1;1pkt 1fpkt"];
94--2348[label="1;14pkt 14fpkt"];
94--2359[label="1;1pkt 1fpkt"];
94--2650[label="1;1pkt 1fpkt"];
94--2658[label="1;1pkt 1fpkt"];
94--2675[label="1;1pkt 1fpkt"];
94--2679[label="1;1pkt 1fpkt"];
94--3262[label="1;1pkt 1fpkt"];
94--3304[label="1;2pkt 2fpkt"];
94--3355[label="1;4pkt 4fpkt"];
94--3378[label="1;38pkt 38fpkt"];
94--3562[label="1;1pkt 1fpkt"];
94--3782[label="1;1pkt 1fpkt"];
94--3859[label="1;2pkt 2fpkt"];
94--3867[label="1;925pkt 925fpkt"];
94--3909[label="1;1pkt 1fpkt"];
94--3995[label="1;1pkt 1fpkt"];
94--4540[label="0.255135;236pkt 236fpkt"];
94--4552[label="1;29pkt 29fpkt"];
94--4619[label="1;2pkt 2fpkt"];
94--4677[label="1;117pkt 117fpkt"];
94--4818[label="1;1pkt 1fpkt"];
94--5172[label="1;14pkt 14fpkt"];
94--5209[label="1;1pkt 1fpkt"];
94--5255[label="1;2pkt 2fpkt"];
94--5256[label="0.333333;2pkt 2fpkt"];
94--5444[label="1;1pkt 1fpkt"];
94--5465[label="1;2pkt 2fpkt"];
94--5626[label="1;1pkt 1fpkt"];
94--5695[label="1;31pkt 31fpkt"];
94--5859[label="1;2pkt 2fpkt"];
94--5958[label="0.198919;184pkt 184fpkt"];
94--6071[label="0.0162162;15pkt 15fpkt"];
94--6073[label="0.0356757;33pkt 33fpkt"];
94--6084[label="0.0486486;45pkt 45fpkt"];
94--6092[label="0.00756757;7pkt 7fpkt"];
94--6094[label="0.04;37pkt 37fpkt"];
94--6100[label="0.0227027;21pkt 21fpkt"];
94--6113[label="0.0162162;15pkt 15fpkt"];
94--6115[label="0.0356757;33pkt 33fpkt"];
94--6125[label="0.0486486;45pkt 45fpkt"];
94--6132[label="0.00756757;7pkt 7fpkt"];
94--6134[label="0.04;37pkt 37fpkt"];
94--6140[label="0.0227027;21pkt 21fpkt"];
94--6148[label="0.0162162;15pkt 15fpkt"];
94--6150[label="0.0356757;33pkt 33fpkt"];
94--6160[label="0.0486486;45pkt 45fpkt"];
94--6166[label="0.00756757;7pkt 7fpkt"];
94--6168[label="0.04;37pkt 37fpkt"];
94--6174[label="0.0227027;21pkt 21fpkt"];
94--6459[label="1;2pkt 2fpkt"];
94--6581[label="1;2pkt 2fpkt"];
94--6591[label="1;2pkt 2fpkt"];
94--6599[label="1;1pkt 1fpkt"];
94--6884[label="1;3pkt 3fpkt"];
94--7106[label="1;6pkt 6fpkt"];
94--7213[label="1;9pkt 9fpkt"];
94--7385[label="1;1pkt 1fpkt"];
94--7420[label="1;2pkt 2fpkt"];
94--7576[label="1;2pkt 2fpkt"];
94--7657[label="0.95;38pkt 38fpkt"];
94--7660[label="0.1;1pkt 1fpkt"];
94--7681[label="0.142857;1pkt 1fpkt"];
94--7751[label="1;1pkt 1fpkt"];
94--7760[label="1;1pkt 1fpkt"];
94--7836[label="1;1pkt 1fpkt"];
94--7838[label="1;4pkt 4fpkt"];
94--7870[label="1;23pkt 23fpkt"];
94--7974[label="1;2pkt 2fpkt"];
94--8158[label="1;2pkt 2fpkt"];
94--8162[label="1;1pkt 1fpkt"];
94--8374[label="1;6pkt 6fpkt"];
94--8495[label="1;2pkt 2fpkt"];
94--8583[label="0.95;38pkt 38fpkt"];
94--8592[label="0.142857;1pkt 1fpkt"];
94--8624[label="1;1pkt 1fpkt"];
94--8672[label="1;23pkt 23fpkt"];
94--8815[label="1;1pkt 1fpkt"];
94--8819[label="1;1pkt 1fpkt"];
94--9015[label="1;2pkt 2fpkt"];
94--9070[label="0.95;38pkt 38fpkt"];
94--9092[label="1;1pkt 1fpkt"];
197--3867[label="1;2pkt 2fpkt"];
283--3867[label="1;1pkt 1fpkt"];
283--3909[label="1;1pkt 1fpkt"];
333--3867[label="1;1pkt 1fpkt"];
333--5626[label="1;1pkt 1fpkt"];
424--3867[label="1;2pkt 2fpkt"];
535--3867[label="1;1pkt 1fpkt"];
535--7760[label="1;1pkt 1fpkt"];
535--8624[label="1;1pkt 1fpkt"];
535--9092[label="1;1pkt 1fpkt"];
732--3867[label="1;1pkt 1fpkt"];
780--3867[label="1;1pkt 1fpkt"];
780--3995[label="1;1pkt 1fpkt"];
891--3867[label="1;29pkt 29fpkt"];
891--4552[label="1;29pkt 29fpkt"];
963--3867[label="1;24pkt 24fpkt"];
963--7870[label="1;23pkt 23fpkt"];
963--8672[label="1;23pkt 23fpkt"];
1157--3867[label="1;2pkt 2fpkt"];
1157--4619[label="1;2pkt 2fpkt"];
1157--6581[label="1;2pkt 2fpkt"];
1157--8158[label="1;2pkt 2fpkt"];
1157--8815[label="1;1pkt 1fpkt"];
1670--3867[label="1;31pkt 31fpkt"];
1670--5695[label="1;31pkt 31fpkt"];
1683--3867[label="1;1pkt 1fpkt"];
1707--3867[label="1;117pkt 117fpkt"];
1707--4677[label="1;117pkt 117fpkt"];
1707--6073[label="0.034188;4pkt 4fpkt"];
1707--6084[label="0.0769231;9pkt 9fpkt"];
1707--6094[label="0.0512821;6pkt 6fpkt"];
1707--6115[label="0.034188;4pkt 4fpkt"];
1707--6125[label="0.0769231;9pkt 9fpkt"];
1707--6134[label="0.0512821;6pkt 6fpkt"];
1707--6150[label="0.034188;4pkt 4fpkt"];
1707--6160[label="0.0769231;9pkt 9fpkt"];
1707--6168[label="0.0512821;6pkt 6fpkt"];
1869--3867[label="1;1pkt 1fpkt"];
2348--3867[label="1;14pkt 14fpkt"];
2348--5172[label="1;14pkt 14fpkt"];
2348--6073[label="0.0714286;1pkt 1fpkt"];
2348--6084[label="0.214286;3pkt 3fpkt"];
2348--6094[label="0.142857;2pkt 2fpkt"];
2348--6115[label="0.0714286;1pkt 1fpkt"];
2348--6125[label="0.214286;3pkt 3fpkt"];
2348--6134[label="0.142857;2pkt 2fpkt"];
2348--6150[label="0.0714286;1pkt 1fpkt"];
2348--6160[label="0.214286;3pkt 3fpkt"];
2348--6168[label="0.142857;2pkt 2fpkt"];
2359--3867[label="1;1pkt 1fpkt"];
2359--6599[label="1;1pkt 1fpkt"];
2359--8819[label="1;1pkt 1fpkt"];
2650--3867[label="1;1pkt 1fpkt"];
2658--3867[label="1;1pkt 1fpkt"];
2679--3867[label="1;1pkt 1fpkt"];
2679--7751[label="1;1pkt 1fpkt"];
3262--3867[label="1;1pkt 1fpkt"];
3262--5444[label="1;1pkt 1fpkt"];
3304--3867[label="1;2pkt 2fpkt"];
3304--5465[label="1;2pkt 2fpkt"];
3304--7576[label="1;2pkt 2fpkt"];
3378--3867[label="1;38pkt 38fpkt"];
3378--7657[label="1;38pkt 38fpkt"];
3378--8583[label="1;38pkt 38fpkt"];
3378--9070[label="1;38pkt 38fpkt"];
3859--3867[label="1;2pkt 2fpkt"];
3859--5859[label="1;2pkt 2fpkt"];
3859--6094[label="0.5;1pkt 1fpkt"];
3859--6134[label="0.5;1pkt 1fpkt"];
3859--6168[label="0.5;1pkt 1fpkt"];
3859--6459[label="1;2pkt 2fpkt"];
3867--3909[label="1;1pkt 1fpkt"];
3867--3995[label="1;1pkt 1fpkt"];
3867--4540[label="0.255135;236pkt 236fpkt"];
3867--4552[label="1;29pkt 29fpkt"];
3867--4619[label="1;2pkt 2fpkt"];
3867--4677[label="1;117pkt 117fpkt"];
3867--4818[label="1;1pkt 1fpkt"];
3867--5172[label="1;14pkt 14fpkt"];
3867--5209[label="1;1pkt 1fpkt"];
3867--5255[label="1;2pkt 2fpkt"];
3867--5256[label="0.333333;2pkt 2fpkt"];
3867--5444[label="1;1pkt 1fpkt"];
3867--5465[label="1;2pkt 2fpkt"];
3867--5626[label="1;1pkt 1fpkt"];
3867--5695[label="1;31pkt 31fpkt"];
3867--5859[label="1;2pkt 2fpkt"];
3867--5958[label="0.198919;184pkt 184fpkt"];
3867--6071[label="0.0162162;15pkt 15fpkt"];
3867--6073[label="0.0356757;33pkt 33fpkt"];
3867--6084[label="0.0486486;45pkt 45fpkt"];
3867--6092[label="0.00756757;7pkt 7fpkt"];
3867--6094[label="0.04;37pkt 37fpkt"];
3867--6100[label="0.0227027;21pkt 21fpkt"];
3867--6113[label="0.0162162;15pkt 15fpkt"];
3867--6115[label="0.0356757;33pkt 33fpkt"];
3867--6125[label="0.0486486;45pkt 45fpkt"];
3867--6132[label="0.00756757;7pkt 7fpkt"];
3867--6134[label="0.04;37pkt 37fpkt"];
3867--6140[label="0.0227027;21pkt 21fpkt"];
3867--6148[label="0.0162162;15pkt 15fpkt"];
3867--6150[label="0.0356757;33pkt 33fpkt"];
3867--6160[label="0.0486486;45pkt 45fpkt"];
3867--6166[label="0.00756757;7pkt 7fpkt"];
3867--6168[label="0.04;37pkt 37fpkt"];
3867--6174[label="0.0227027;21pkt 21fpkt"];
3867--6459[label="1;2pkt 2fpkt"];
3867--6581[label="1;2pkt 2fpkt"];
3867--6591[label="1;2pkt 2fpkt"];
3867--6599[label="1;1pkt 1fpkt"];
3867--6884[label="1;3pkt 3fpkt"];
3867--7106[label="1;6pkt 6fpkt"];
3867--7213[label="1;9pkt 9fpkt"];
3867--7385[label="1;1pkt 1fpkt"];
3867--7420[label="1;2pkt 2fpkt"];
3867--7576[label="1;2pkt 2fpkt"];
3867--7657[label="0.95;38pkt 38fpkt"];
3867--7660[label="0.1;1pkt 1fpkt"];
3867--7681[label="0.142857;1pkt 1fpkt"];
3867--7751[label="1;1pkt 1fpkt"];
3867--7760[label="1;1pkt 1fpkt"];
3867--7836[label="1;1pkt 1fpkt"];
3867--7838[label="1;4pkt 4fpkt"];
3867--7870[label="1;23pkt 23fpkt"];
3867--7974[label="1;2pkt 2fpkt"];
3867--8158[label="1;2pkt 2fpkt"];
3867--8162[label="1;1pkt 1fpkt"];
3867--8374[label="1;6pkt 6fpkt"];
3867--8495[label="1;2pkt 2fpkt"];
3867--8583[label="0.95;38pkt 38fpkt"];
3867--8592[label="0.142857;1pkt 1fpkt"];
3867--8624[label="1;1pkt 1fpkt"];
3867--8672[label="1;23pkt 23fpkt"];
3867--8815[label="1;1pkt 1fpkt"];
3867--8819[label="1;1pkt 1fpkt"];
3867--9015[label="1;2pkt 2fpkt"];
3867--9070[label="0.95;38pkt 38fpkt"];
3867--9092[label="1;1pkt 1fpkt"];
4619--6581[label="1;2pkt 2fpkt"];
4619--8158[label="1;2pkt 2fpkt"];
4619--8815[label="1;1pkt 1fpkt"];
4677--6073[label="0.034188;4pkt 4fpkt"];
4677--6084[label="0.0769231;9pkt 9fpkt"];
4677--6094[label="0.0512821;6pkt 6fpkt"];
4677--6115[label="0.034188;4pkt 4fpkt"];
4677--6125[label="0.0769231;9pkt 9fpkt"];
4677--6134[label="0.0512821;6pkt 6fpkt"];
4677--6150[label="0.034188;4pkt 4fpkt"];
4677--6160[label="0.0769231;9pkt 9fpkt"];
4677--6168[label="0.0512821;6pkt 6fpkt"];
5172--6073[label="0.0714286;1pkt 1fpkt"];
5172--6084[label="0.214286;3pkt 3fpkt"];
5172--6094[label="0.142857;2pkt 2fpkt"];
5172--6115[label="0.0714286;1pkt 1fpkt"];
5172--6125[label="0.214286;3pkt 3fpkt"];
5172--6134[label="0.142857;2pkt 2fpkt"];
5172--6150[label="0.0714286;1pkt 1fpkt"];
5172--6160[label="0.214286;3pkt 3fpkt"];
5172--6168[label="0.142857;2pkt 2fpkt"];
5465--7576[label="1;2pkt 2fpkt"];
5859--6094[label="0.5;1pkt 1fpkt"];
5859--6134[label="0.5;1pkt 1fpkt"];
5859--6168[label="0.5;1pkt 1fpkt"];
5859--6459[label="1;2pkt 2fpkt"];
6581--8158[label="1;2pkt 2fpkt"];
6581--8815[label="1;1pkt 1fpkt"];
6591--8162[label="1;1pkt 1fpkt"];
6599--8819[label="1;1pkt 1fpkt"];
7106--8374[label="1;6pkt 6fpkt"];
7420--8495[label="1;2pkt 2fpkt"];
7420--9015[label="1;2pkt 2fpkt"];
7657--8583[label="1;40pkt 40fpkt"];
7657--9070[label="1;40pkt 40fpkt"];
7760--8624[label="1;1pkt 1fpkt"];
7760--9092[label="1;1pkt 1fpkt"];
7870--8672[label="1;23pkt 23fpkt"];
8158--8815[label="1;1pkt 1fpkt"];
8495--9015[label="1;2pkt 2fpkt"];
8583--9070[label="1;40pkt 40fpkt"];
8624--9092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.203.18" dst_port="80"/>
      <filter dst_ip="193.1.203.18" dst_port="22" src_ip="220.218.173.248"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
654[label="208.181.137.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
655[label="152.174.153.30;s;20pkt 20fpkt", shape=diamond, color=yellow];
3863[label="222.185.9.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
4646[label="152.174.153.30;s;9pkt 9fpkt", shape=hexagon, color=black];
6464[label="152.174.153.30;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8112[label="152.174.153.30;22pkt 22fpkt", shape=invtriangle, color=brown];
8786[label="152.174.153.30;22pkt 22fpkt", shape=invhouse, color=bisque];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.153.30:18355, 221.101.162.12:*}[36.3636%]&lt;BR/&gt;{152.174.153.30:*, 208.151.67.152:19101}[31.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (25.7732%)&lt;BR/&gt; 18355: (17.5258%)&lt;BR/&gt; 4281: (4.63918%)&lt;BR/&gt; 80: (4.12371%)&lt;BR/&gt; 4291: (3.60825%)&gt;];
}
654--655[label="1;1pkt 1fpkt"];
654--4646[label="1;1pkt 1fpkt"];
654--6464[label="1;1pkt 1fpkt"];
654--8112[label="1;1pkt 1fpkt"];
654--8786[label="1;1pkt 1fpkt"];
655--3863[label="1;1pkt 1fpkt"];
655--4646[label="1;9pkt 9fpkt"];
655--6073[label="0.05;1pkt 1fpkt"];
655--6084[label="0.05;1pkt 1fpkt"];
655--6115[label="0.05;1pkt 1fpkt"];
655--6125[label="0.05;1pkt 1fpkt"];
655--6150[label="0.05;1pkt 1fpkt"];
655--6160[label="0.05;1pkt 1fpkt"];
655--6464[label="1;20pkt 20fpkt"];
655--8112[label="1;20pkt 20fpkt"];
655--8786[label="1;20pkt 20fpkt"];
3863--6464[label="1;1pkt 1fpkt"];
3863--8112[label="1;1pkt 1fpkt"];
3863--8786[label="1;1pkt 1fpkt"];
4646--6464[label="1;9pkt 9fpkt"];
4646--8112[label="1;9pkt 9fpkt"];
4646--8786[label="1;9pkt 9fpkt"];
6464--8112[label="1;22pkt 22fpkt"];
6464--8786[label="1;22pkt 22fpkt"];
8112--8786[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="221.101.162.12" src_ip="152.174.153.30" src_port="18355"/>
      <filter dst_ip="208.151.67.152" dst_port="19101" src_ip="152.174.153.30"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
2078[label="193.1.203.76;s;350pkt 350fpkt", shape=diamond, color=yellow];
4652[label="193.1.203.76;s;305pkt 305fpkt", shape=hexagon, color=black];
6826[label="193.1.203.76;367pkt 367fpkt", shape=pentagon, color=darkviolet];
8251[label="193.1.203.76;366pkt 366fpkt", shape=invtriangle, color=brown];
8868[label="193.1.203.76;367pkt 367fpkt", shape=invhouse, color=bisque];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.203.76:*, *:53}[62.3978%]&lt;BR/&gt;{193.1.203.76:0, *:0}[37.3297%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.9744%)&lt;BR/&gt; 53: (30.3704%)&lt;BR/&gt; 4791: (0.2849%)&lt;BR/&gt; 3774: (0.2849%)&lt;BR/&gt; 2768: (0.2849%)&gt;];
}
2078--4652[label="1;305pkt 305fpkt"];
2078--6083[label="0.0714286;25pkt 25fpkt"];
2078--6124[label="0.0714286;25pkt 25fpkt"];
2078--6159[label="0.0714286;25pkt 25fpkt"];
2078--6826[label="1;350pkt 350fpkt"];
2078--8251[label="0.997143;349pkt 349fpkt"];
2078--8868[label="1;350pkt 350fpkt"];
4652--6826[label="1;305pkt 305fpkt"];
4652--8251[label="0.996721;304pkt 304fpkt"];
4652--8868[label="1;305pkt 305fpkt"];
6826--8251[label="1;366pkt 366fpkt"];
6826--8868[label="1;367pkt 367fpkt"];
8251--8868[label="1;366pkt 366fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="193.1.203.76"/>
      <filter src_ip="193.1.203.76"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
188[label="129.60.48.28;s;8459pkt 8459fpkt", shape=diamond, color=yellow];
204[label="193.1.194.6;s;1231pkt 1231fpkt", shape=diamond, color=yellow];
1236[label="2.237.207.161;d;1pkt 1fpkt", shape=diamond, color=yellow];
1554[label="88.19.161.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
1624[label="37.216.212.101;d;1pkt 1fpkt", shape=diamond, color=yellow];
1643[label="88.27.5.240;d;1pkt 1fpkt", shape=diamond, color=yellow];
1673[label="2.62.198.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
1674[label="2.228.7.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
2082[label="92.128.14.92;d;1pkt 1fpkt", shape=diamond, color=yellow];
2083[label="89.152.50.162;d;3pkt 3fpkt", shape=diamond, color=yellow];
2085[label="2.238.154.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
2088[label="218.171.89.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
2211[label="221.15.117.194;d;2pkt 2fpkt", shape=diamond, color=yellow];
2212[label="222.102.42.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
2418[label="218.221.77.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
2431[label="222.141.87.178;d;4pkt 4fpkt", shape=diamond, color=yellow];
2474[label="5.214.102.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
2475[label="222.100.0.62;d;1pkt 1fpkt", shape=diamond, color=yellow];
2476[label="222.102.227.50;d;5pkt 5fpkt", shape=diamond, color=yellow];
2637[label="3.231.181.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
2826[label="88.11.60.142;d;4pkt 4fpkt", shape=diamond, color=yellow];
2910[label="221.183.34.170;d;3pkt 3fpkt", shape=diamond, color=yellow];
3111[label="93.52.58.163;d;6pkt 6fpkt", shape=diamond, color=yellow];
3532[label="222.149.229.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
4654[label="2.62.198.203;d;1pkt 1fpkt", shape=hexagon, color=black];
4656[label="218.171.89.63;d;1pkt 1fpkt", shape=hexagon, color=black];
4813[label="218.221.77.91;d;1pkt 1fpkt", shape=hexagon, color=black];
4870[label="88.27.5.240;d;1pkt 1fpkt", shape=hexagon, color=black];
4883[label="89.152.50.162;d;3pkt 3fpkt", shape=hexagon, color=black];
4884[label="2.237.207.161;d;1pkt 1fpkt", shape=hexagon, color=black];
5044[label="88.19.161.232;d;1pkt 1fpkt", shape=hexagon, color=black];
5274[label="37.216.212.101;d;1pkt 1fpkt", shape=hexagon, color=black];
5298[label="93.52.58.163;d;4pkt 4fpkt", shape=hexagon, color=black];
5487[label="222.141.87.178;d;3pkt 3fpkt", shape=hexagon, color=black];
5701[label="2.228.7.78;d;1pkt 1fpkt", shape=hexagon, color=black];
5778[label="222.102.42.242;d;1pkt 1fpkt", shape=hexagon, color=black];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.48.28:14918, *:*}[82.7451%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14918: (41.1342%)&lt;BR/&gt; 80: (2.90227%)&lt;BR/&gt; 0: (1.30243%)&lt;BR/&gt; 443: (0.230746%)&lt;BR/&gt; 53: (0.164086%)&gt;];
}
188--1297[label="0.333333;1pkt 1fpkt"];
188--2083[label="0.666667;2pkt 2fpkt"];
188--4883[label="0.666667;2pkt 2fpkt"];
188--6061[label="0.000236435;2pkt 2fpkt"];
188--6064[label="0.000668896;1pkt 1fpkt"];
188--6065[label="0.00177326;15pkt 15fpkt"];
188--6072[label="0.000515198;1pkt 1fpkt"];
188--6073[label="0.000191644;1pkt 1fpkt"];
188--6081[label="0.00130039;11pkt 11fpkt"];
188--6083[label="0.000118217;1pkt 1fpkt"];
188--6084[label="0.000422565;2pkt 2fpkt"];
188--6086[label="0.000880282;6pkt 6fpkt"];
188--6094[label="0.000427168;2pkt 2fpkt"];
188--6098[label="0.000122055;1pkt 1fpkt"];
188--6106[label="0.000668896;1pkt 1fpkt"];
188--6107[label="0.00177326;15pkt 15fpkt"];
188--6114[label="0.000515198;1pkt 1fpkt"];
188--6115[label="0.000191681;1pkt 1fpkt"];
188--6122[label="0.00130039;11pkt 11fpkt"];
188--6124[label="0.000118217;1pkt 1fpkt"];
188--6125[label="0.000422565;2pkt 2fpkt"];
188--6127[label="0.000880282;6pkt 6fpkt"];
188--6134[label="0.000427168;2pkt 2fpkt"];
188--6137[label="0.000122055;1pkt 1fpkt"];
188--6144[label="0.00177326;15pkt 15fpkt"];
188--6149[label="0.000515198;1pkt 1fpkt"];
188--6150[label="0.000191681;1pkt 1fpkt"];
188--6157[label="0.00130039;11pkt 11fpkt"];
188--6159[label="0.000118217;1pkt 1fpkt"];
188--6160[label="0.000422476;2pkt 2fpkt"];
188--6162[label="0.000880282;6pkt 6fpkt"];
188--6168[label="0.000427168;2pkt 2fpkt"];
188--6171[label="0.000122055;1pkt 1fpkt"];
204--658[label="0.00247525;1pkt 1fpkt"];
204--1236[label="1;1pkt 1fpkt"];
204--1554[label="1;1pkt 1fpkt"];
204--1624[label="1;1pkt 1fpkt"];
204--1643[label="1;1pkt 1fpkt"];
204--1673[label="1;1pkt 1fpkt"];
204--1674[label="1;1pkt 1fpkt"];
204--2082[label="1;1pkt 1fpkt"];
204--2083[label="0.333333;1pkt 1fpkt"];
204--2085[label="1;1pkt 1fpkt"];
204--2088[label="1;1pkt 1fpkt"];
204--2211[label="1;2pkt 2fpkt"];
204--2212[label="1;1pkt 1fpkt"];
204--2418[label="1;1pkt 1fpkt"];
204--2431[label="1;4pkt 4fpkt"];
204--2472[label="1;1pkt 1fpkt"];
204--2474[label="1;1pkt 1fpkt"];
204--2475[label="1;1pkt 1fpkt"];
204--2476[label="1;5pkt 5fpkt"];
204--2637[label="1;1pkt 1fpkt"];
204--2826[label="1;4pkt 4fpkt"];
204--2910[label="1;3pkt 3fpkt"];
204--3111[label="1;6pkt 6fpkt"];
204--3532[label="1;1pkt 1fpkt"];
204--3704[label="0.0181818;1pkt 1fpkt"];
204--4654[label="1;1pkt 1fpkt"];
204--4656[label="1;1pkt 1fpkt"];
204--4813[label="1;1pkt 1fpkt"];
204--4870[label="1;1pkt 1fpkt"];
204--4883[label="0.333333;1pkt 1fpkt"];
204--4884[label="1;1pkt 1fpkt"];
204--5044[label="1;1pkt 1fpkt"];
204--5274[label="1;1pkt 1fpkt"];
204--5298[label="1;4pkt 4fpkt"];
204--5487[label="1;3pkt 3fpkt"];
204--5701[label="1;1pkt 1fpkt"];
204--5778[label="1;1pkt 1fpkt"];
204--6073[label="0.0300569;37pkt 37fpkt"];
204--6084[label="0.0284322;35pkt 35fpkt"];
204--6094[label="0.0259951;32pkt 32fpkt"];
204--6100[label="0.0129976;16pkt 16fpkt"];
204--6115[label="0.0300569;37pkt 37fpkt"];
204--6125[label="0.0284322;35pkt 35fpkt"];
204--6134[label="0.0259951;32pkt 32fpkt"];
204--6140[label="0.0129976;16pkt 16fpkt"];
204--6150[label="0.0300569;37pkt 37fpkt"];
204--6160[label="0.0284322;35pkt 35fpkt"];
204--6168[label="0.0259951;32pkt 32fpkt"];
204--6174[label="0.0129976;16pkt 16fpkt"];
1236--4884[label="1;1pkt 1fpkt"];
1554--5044[label="1;1pkt 1fpkt"];
1624--5274[label="1;1pkt 1fpkt"];
1643--4870[label="1;1pkt 1fpkt"];
1673--4654[label="1;1pkt 1fpkt"];
1674--5701[label="1;1pkt 1fpkt"];
2083--4883[label="1;3pkt 3fpkt"];
2088--4656[label="1;1pkt 1fpkt"];
2212--5778[label="1;1pkt 1fpkt"];
2418--4813[label="1;1pkt 1fpkt"];
2431--5487[label="1;3pkt 3fpkt"];
3111--5298[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="129.60.48.28" src_port="14918"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
918[label="193.1.200.61;s;158pkt 158fpkt", shape=diamond, color=yellow];
5620[label="193.1.200.61;s;158pkt 158fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.200.61:0, *:0}[99.3671%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3671%)&lt;BR/&gt; 6000: (0.316456%)&lt;BR/&gt; 135: (0.316456%)&gt;];
}
918--964[label="0.00632911;1pkt 1fpkt"];
918--1648[label="0.0075188;1pkt 1fpkt"];
918--1692[label="0.00990099;1pkt 1fpkt"];
918--1695[label="0.00632911;1pkt 1fpkt"];
918--2104[label="0.00689655;1pkt 1fpkt"];
918--2234[label="0.00632911;1pkt 1fpkt"];
918--2238[label="0.00632911;1pkt 1fpkt"];
918--2240[label="0.00632911;1pkt 1fpkt"];
918--3517[label="0.00641026;1pkt 1fpkt"];
918--3704[label="0.0181818;1pkt 1fpkt"];
918--4324[label="0.00632911;1pkt 1fpkt"];
918--4671[label="0.00787402;1pkt 1fpkt"];
918--5098[label="0.00775194;1pkt 1fpkt"];
918--5399[label="0.00632911;1pkt 1fpkt"];
918--5620[label="1;158pkt 158fpkt"];
</description>
    <slice>
      <filter src_ip="193.1.200.61"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
2160[label="173.144.16.67;d;26pkt 26fpkt", shape=diamond, color=yellow];
4685[label="173.144.16.67;d;26pkt 26fpkt", shape=hexagon, color=black];
6735[label="2.122.194.65;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6824[label="2.122.194.76;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.122.194.65:80, 173.144.16.67:*}[29.0323%]&lt;BR/&gt;{2.122.194.76:80, 173.144.16.67:*}[29.0323%]&lt;BR/&gt;{2.122.194.97:80, 173.144.16.67:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4623: (2.02703%)&lt;BR/&gt; 4609: (2.02703%)&lt;BR/&gt; 4608: (2.02703%)&lt;BR/&gt; 4607: (2.02703%)&gt;];
}
2160--4685[label="1;26pkt 26fpkt"];
2160--4829[label="0.0384615;1pkt 1fpkt"];
2160--6735[label="0.8;8pkt 8fpkt"];
2160--6758[label="0.0384615;1pkt 1fpkt"];
2160--6824[label="0.75;9pkt 9fpkt"];
2160--8226[label="0.0384615;1pkt 1fpkt"];
2160--8851[label="0.0384615;1pkt 1fpkt"];
4685--4829[label="0.0384615;1pkt 1fpkt"];
4685--6735[label="0.8;8pkt 8fpkt"];
4685--6758[label="0.0384615;1pkt 1fpkt"];
4685--6824[label="0.75;9pkt 9fpkt"];
4685--8226[label="0.0384615;1pkt 1fpkt"];
4685--8851[label="0.0384615;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.16.67" src_ip="2.122.194.76" src_port="80"/>
      <filter dst_ip="173.144.16.67" src_ip="2.122.194.65" src_port="80"/>
      <filter dst_ip="173.144.16.67" src_ip="2.122.194.97" src_port="80"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1837[label="144.45.22.33;s;20pkt 20fpkt", shape=diamond, color=yellow];
2357[label="209.186.142.16;d;6pkt 6fpkt", shape=diamond, color=yellow];
4734[label="144.45.22.33;s;15pkt 15fpkt", shape=hexagon, color=black];
4791[label="209.186.142.16;d;2pkt 2fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.22.33:*, *:80}[90.9091%]&lt;BR/&gt;{*:*, 209.186.142.16:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2524: (4.65116%)&lt;BR/&gt; 2522: (4.65116%)&lt;BR/&gt; 2534: (2.32558%)&lt;BR/&gt; 2530: (2.32558%)&gt;];
}
1837--2357[label="0.666667;4pkt 4fpkt"];
1837--2497[label="0.1;2pkt 2fpkt"];
1837--4734[label="1;15pkt 15fpkt"];
1837--4791[label="1;2pkt 2fpkt"];
2357--4734[label="0.333333;2pkt 2fpkt"];
2357--4791[label="1;2pkt 2fpkt"];
4734--4791[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="144.45.22.33"/>
      <filter dst_ip="209.186.142.16" dst_port="80"/>
    </slice>
    <from sec="1194757296" usec="0"/>
    <to sec="1194757663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
675[label="173.144.68.15;d;99pkt 99fpkt", shape=diamond, color=yellow];
717[label="54.164.177.243;s;8pkt 8fpkt", shape=diamond, color=yellow];
1454[label="52.220.33.182;s;4pkt 4fpkt", shape=diamond, color=yellow];
1491[label="51.179.92.235;s;10pkt 10fpkt", shape=diamond, color=yellow];
4195[label="54.164.177.243;s;8pkt 8fpkt", shape=hexagon, color=black];
4500[label="52.220.33.182;s;4pkt 4fpkt", shape=hexagon, color=black];
4745[label="51.179.92.235;s;10pkt 10fpkt", shape=hexagon, color=black];
7022[label="52.220.32.102;23pkt 23fpkt", shape=pentagon, color=darkviolet];
7889[label="51.179.92.235;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8342[label="52.220.32.102;23pkt 23fpkt", shape=invtriangle, color=brown];
8677[label="51.179.92.235;10pkt 10fpkt", shape=invtriangle, color=brown];
8926[label="52.220.32.102;23pkt 23fpkt", shape=invhouse, color=bisque];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{52.220.32.102:80, 173.144.68.15:*}[23.2323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.3966%)&lt;BR/&gt; 58654: (1.2931%)&lt;BR/&gt; 52967: (1.2931%)&lt;BR/&gt; 52966: (1.2931%)&lt;BR/&gt; 52965: (1.2931%)&gt;];
}
675--717[label="1;8pkt 8fpkt"];
675--1454[label="1;4pkt 4fpkt"];
675--1491[label="1;10pkt 10fpkt"];
675--3140[label="0.03125;1pkt 1fpkt"];
675--4195[label="1;8pkt 8fpkt"];
675--4500[label="1;4pkt 4fpkt"];
675--4745[label="1;10pkt 10fpkt"];
675--5331[label="0.03125;1pkt 1fpkt"];
675--6065[label="0.040404;4pkt 4fpkt"];
675--6081[label="0.010101;1pkt 1fpkt"];
675--6107[label="0.040404;4pkt 4fpkt"];
675--6122[label="0.010101;1pkt 1fpkt"];
675--6144[label="0.040404;4pkt 4fpkt"];
675--6157[label="0.010101;1pkt 1fpkt"];
675--6461[label="0.142857;1pkt 1fpkt"];
675--7022[label="1;23pkt 23fpkt"];
675--7889[label="1;10pkt 10fpkt"];
675--8111[label="0.142857;1pkt 1fpkt"];
675--8342[label="1;23pkt 23fpkt"];
675--8677[label="1;10pkt 10fpkt"];
675--8785[label="0.142857;1pkt 1fpkt"];
675--8926[label="1;23pkt 23fpkt"];
717--4195[label="1;8pkt 8fpkt"];
1454--4500[label="1;4pkt 4fpkt"];
1491--4745[label="1;10pkt 10fpkt"];
1491--7889[label="1;10pkt 10fpkt"];
1491--8677[label="1;10pkt 10fpkt"];
4745--7889[label="1;10pkt 10fpkt"];
4745--8677[label="1;10pkt 10fpkt"];
7022--8342[label="1;23pkt 23fpkt"];
7022--8926[label="1;23pkt 23fpkt"];
7889--8677[label="1;10pkt 10fpkt"];
8342--8926[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.68.15" src_ip="52.220.32.102" src_port="80"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
759[label="129.33.88.132;s;153pkt 153fpkt", shape=diamond, color=yellow];
818[label="218.46.16.154;d;119pkt 119fpkt", shape=diamond, color=yellow];
1477[label="220.29.108.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
1867[label="218.46.16.135;d;22pkt 22fpkt", shape=diamond, color=yellow];
4748[label="218.46.16.135;d;22pkt 22fpkt", shape=hexagon, color=black];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.88.132:*, 218.46.16.154:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8423%)&lt;BR/&gt; 1653: (0.473186%)&lt;BR/&gt; 1652: (0.473186%)&lt;BR/&gt; 1649: (0.473186%)&lt;BR/&gt; 1648: (0.473186%)&gt;];
}
759--818[label="1;119pkt 119fpkt"];
759--1477[label="1;1pkt 1fpkt"];
759--1867[label="1;22pkt 22fpkt"];
759--4748[label="1;22pkt 22fpkt"];
1867--4748[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="218.46.16.154" dst_port="80" src_ip="129.33.88.132"/>
    </slice>
    <from sec="1194757209" usec="0"/>
    <to sec="1194757437" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,011,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
360[label="53.108.58.22;d;6pkt 6fpkt", shape=diamond, color=yellow];
528[label="58.130.69.237;d;6pkt 6fpkt", shape=diamond, color=yellow];
957[label="193.1.194.84;s;94pkt 94fpkt", shape=diamond, color=yellow];
2308[label="2.122.209.18;d;6pkt 6fpkt", shape=diamond, color=yellow];
2319[label="210.177.245.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
3950[label="58.130.69.237;d;4pkt 4fpkt", shape=hexagon, color=black];
4320[label="53.108.58.22;d;3pkt 3fpkt", shape=hexagon, color=black];
4776[label="2.122.209.18;d;6pkt 6fpkt", shape=hexagon, color=black];
4993[label="210.177.245.30;d;1pkt 1fpkt", shape=hexagon, color=black];
5910[label="58.130.69.237;d;3pkt 3fpkt", shape=polygon, color=gold];
5972[label="2.122.209.18;d;6pkt 6fpkt", shape=polygon, color=gold];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.194.84:9903, *:*}[20%]&lt;BR/&gt;{193.1.194.84:*, 193.79.66.195:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (11.7647%)&lt;BR/&gt; 33715: (6.98529%)&lt;BR/&gt; 9903: (6.98529%)&lt;BR/&gt; 13808: (5.51471%)&lt;BR/&gt; 50001: (2.20588%)&gt;];
}
360--957[label="1;6pkt 6fpkt"];
360--4320[label="1;3pkt 3fpkt"];
528--957[label="1;6pkt 6fpkt"];
528--3950[label="1;4pkt 4fpkt"];
528--5910[label="1;3pkt 3fpkt"];
957--2308[label="0.833333;5pkt 5fpkt"];
957--2319[label="1;1pkt 1fpkt"];
957--3950[label="1;4pkt 4fpkt"];
957--4320[label="1;3pkt 3fpkt"];
957--4776[label="0.833333;5pkt 5fpkt"];
957--4993[label="1;1pkt 1fpkt"];
957--5704[label="0.0851064;8pkt 8fpkt"];
957--5910[label="1;3pkt 3fpkt"];
957--5972[label="0.833333;5pkt 5fpkt"];
2308--4776[label="1;6pkt 6fpkt"];
2308--5972[label="1;6pkt 6fpkt"];
2319--4993[label="1;1pkt 1fpkt"];
3950--5910[label="1;3pkt 3fpkt"];
4776--5972[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="193.79.66.195" src_ip="193.1.194.84"/>
      <filter src_ip="193.1.194.84" src_port="9903"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
2316[label="51.197.237.21;d;1pkt 1fpkt", shape=diamond, color=yellow];
4778[label="51.197.237.21;d;1pkt 1fpkt", shape=hexagon, color=black];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.64.33:49748, 51.197.237.21:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49748: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2316--4778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="51.197.237.21" dst_port="80" src_ip="173.144.64.33" src_port="49748"/>
    </slice>
    <from sec="1194757488" usec="0"/>
    <to sec="1194757544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
2396[label="129.33.146.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
4802[label="129.33.146.149;s;1pkt 1fpkt", shape=hexagon, color=black];
7350[label="129.33.146.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8465[label="129.33.146.149;1pkt 1fpkt", shape=invtriangle, color=brown];
9000[label="129.33.146.149;1pkt 1fpkt", shape=invhouse, color=bisque];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.146.149:58147, 93.139.24.203:12340}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58147: (50%)&lt;BR/&gt; 12340: (50%)&gt;];
}
2396--4802[label="1;1pkt 1fpkt"];
2396--7350[label="1;1pkt 1fpkt"];
2396--8465[label="1;1pkt 1fpkt"];
2396--9000[label="1;1pkt 1fpkt"];
4802--7350[label="1;1pkt 1fpkt"];
4802--8465[label="1;1pkt 1fpkt"];
4802--9000[label="1;1pkt 1fpkt"];
7350--8465[label="1;1pkt 1fpkt"];
7350--9000[label="1;1pkt 1fpkt"];
8465--9000[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="93.139.24.203" dst_port="12340" src_ip="129.33.146.149" src_port="58147"/>
    </slice>
    <from sec="1194758009" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
1549[label="218.91.98.130;s;1139pkt 1139fpkt", shape=diamond, color=yellow];
4825[label="218.91.98.130;s;622pkt 622fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.91.98.130:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 24438: (0.113572%)&lt;BR/&gt; 21601: (0.113572%)&lt;BR/&gt; 21126: (0.113572%)&lt;BR/&gt; 1973: (0.113572%)&gt;];
}
1549--1571[label="0.00153139;1pkt 1fpkt"];
1549--4825[label="1;622pkt 622fpkt"];
1549--5055[label="0.00194553;1pkt 1fpkt"];
1549--6065[label="0.0623354;71pkt 71fpkt"];
1549--6081[label="0.0597015;68pkt 68fpkt"];
1549--6086[label="0.0210711;24pkt 24fpkt"];
1549--6107[label="0.0623354;71pkt 71fpkt"];
1549--6122[label="0.0597015;68pkt 68fpkt"];
1549--6127[label="0.0210711;24pkt 24fpkt"];
1549--6144[label="0.0623354;71pkt 71fpkt"];
1549--6157[label="0.0597015;68pkt 68fpkt"];
1549--6162[label="0.0210711;24pkt 24fpkt"];
</description>
    <slice>
      <filter src_ip="218.91.98.130" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
422[label="221.203.70.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
423[label="144.45.8.246;s;34pkt 34fpkt", shape=diamond, color=yellow];
1033[label="221.203.9.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
1065[label="92.147.137.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
1647[label="222.59.37.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
4367[label="92.147.137.243;d;1pkt 1fpkt", shape=hexagon, color=black];
4833[label="221.203.70.237;d;1pkt 1fpkt", shape=hexagon, color=black];
4845[label="221.203.9.19;d;1pkt 1fpkt", shape=hexagon, color=black];
5506[label="222.59.37.57;d;1pkt 1fpkt", shape=hexagon, color=black];
7954[label="144.45.8.246;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.8.246:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18506: (2.38095%)&lt;BR/&gt; 13475: (2.38095%)&lt;BR/&gt; 13449: (2.38095%)&lt;BR/&gt; 9390: (2.38095%)&lt;BR/&gt; 9093: (2.38095%)&gt;];
}
422--423[label="1;1pkt 1fpkt"];
422--4833[label="1;1pkt 1fpkt"];
422--7954[label="1;1pkt 1fpkt"];
423--1033[label="1;1pkt 1fpkt"];
423--1065[label="1;1pkt 1fpkt"];
423--1647[label="1;1pkt 1fpkt"];
423--4367[label="1;1pkt 1fpkt"];
423--4833[label="1;1pkt 1fpkt"];
423--4845[label="1;1pkt 1fpkt"];
423--5506[label="1;1pkt 1fpkt"];
423--7954[label="1;34pkt 34fpkt"];
1033--4845[label="1;1pkt 1fpkt"];
1033--7954[label="1;1pkt 1fpkt"];
1065--4367[label="1;1pkt 1fpkt"];
1065--7954[label="1;1pkt 1fpkt"];
1647--5506[label="1;1pkt 1fpkt"];
1647--7954[label="1;1pkt 1fpkt"];
4367--7954[label="1;1pkt 1fpkt"];
4833--7954[label="1;1pkt 1fpkt"];
4845--7954[label="1;1pkt 1fpkt"];
5506--7954[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="144.45.8.246"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
2014[label="192.238.167.9;s;1274pkt 1274fpkt", shape=diamond, color=yellow];
4844[label="192.238.167.9;s;1095pkt 1095fpkt", shape=hexagon, color=black];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.238.167.9:1510, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1510: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
2014--4844[label="1;1095pkt 1095fpkt"];
2014--5639[label="0.00409836;1pkt 1fpkt"];
4844--5639[label="0.00409836;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="192.238.167.9" src_port="1510"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_137{
style=filled;
color=gray75;
2049[label="10.0.0.1;d;5pkt 5fpkt", shape=diamond, color=yellow];
4876[label="10.0.0.1;d;5pkt 5fpkt", shape=hexagon, color=black];
stat137[shape=component, label=&lt;Rules:&lt;BR/&gt;{10.15.0.190:4097, 10.0.0.1:123}[20%]&lt;BR/&gt;{10.15.0.192:4097, 10.0.0.1:123}[20%]&lt;BR/&gt;{10.15.0.197:4097, 10.0.0.1:123}[20%]&lt;BR/&gt;{10.15.1.231:4097, 10.0.0.1:123}[20%]&lt;BR/&gt;{10.15.1.232:4097, 10.0.0.1:123}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4097: (50%)&lt;BR/&gt; 123: (50%)&gt;];
}
2049--4876[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="10.0.0.1" dst_port="123" src_ip="10.15.1.232" src_port="4097"/>
      <filter dst_ip="10.0.0.1" dst_port="123" src_ip="10.15.1.231" src_port="4097"/>
      <filter dst_ip="10.0.0.1" dst_port="123" src_ip="10.15.0.197" src_port="4097"/>
      <filter dst_ip="10.0.0.1" dst_port="123" src_ip="10.15.0.192" src_port="4097"/>
      <filter dst_ip="10.0.0.1" dst_port="123" src_ip="10.15.0.190" src_port="4097"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_139{
style=filled;
color=gray75;
2138[label="144.45.168.69;s;336pkt 336fpkt", shape=diamond, color=yellow];
4903[label="144.45.168.69;s;336pkt 336fpkt", shape=hexagon, color=black];
6768[label="144.45.168.69;355pkt 355fpkt", shape=pentagon, color=darkviolet];
stat139[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.168.69:41281, *:*}[99.4382%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41281: (49.7079%)&lt;BR/&gt; 17125: (0.292113%)&lt;BR/&gt; 13018: (0.292113%)&lt;BR/&gt; 10000: (0.292113%)&lt;BR/&gt; 1873: (0.292113%)&gt;];
}
2138--4903[label="1;336pkt 336fpkt"];
2138--6065[label="0.00297619;1pkt 1fpkt"];
2138--6107[label="0.00297619;1pkt 1fpkt"];
2138--6144[label="0.00297619;1pkt 1fpkt"];
2138--6768[label="0.997024;335pkt 335fpkt"];
4903--6065[label="0.00297619;1pkt 1fpkt"];
4903--6107[label="0.00297619;1pkt 1fpkt"];
4903--6144[label="0.00297619;1pkt 1fpkt"];
4903--6768[label="0.997024;335pkt 335fpkt"];
</description>
    <slice>
      <filter src_ip="144.45.168.69" src_port="41281"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698991,1.9524,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.223.200.192"/>
      <from sec="1194757402" usec="0"/>
      <to sec="1194757667" usec="0"/>
    </slice>
    <from sec="1194757402" usec="0"/>
    <to sec="1194757667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
2665[label="152.174.244.16;s;27pkt 27fpkt", shape=diamond, color=yellow];
2727[label="51.179.89.177;d;1pkt 1fpkt", shape=diamond, color=yellow];
5018[label="51.179.89.177;d;1pkt 1fpkt", shape=hexagon, color=black];
5174[label="152.174.244.16;s;26pkt 26fpkt", shape=hexagon, color=black];
6342[label="152.174.244.16;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.244.16:*, 51.179.89.12:80}[81.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55157: (3.04878%)&lt;BR/&gt; 55156: (1.82927%)&lt;BR/&gt; 55155: (1.82927%)&lt;BR/&gt; 55148: (1.82927%)&gt;];
}
2665--2727[label="1;1pkt 1fpkt"];
2665--4891[label="0.037037;1pkt 1fpkt"];
2665--5018[label="1;1pkt 1fpkt"];
2665--5174[label="1;26pkt 26fpkt"];
2665--6342[label="1;27pkt 27fpkt"];
2727--5018[label="1;1pkt 1fpkt"];
2727--5174[label="1;1pkt 1fpkt"];
2727--6342[label="1;1pkt 1fpkt"];
5018--5174[label="1;1pkt 1fpkt"];
5018--6342[label="1;1pkt 1fpkt"];
5174--6342[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="51.179.89.12" dst_port="80" src_ip="152.174.244.16"/>
    </slice>
    <from sec="1194757545" usec="0"/>
    <to sec="1194757848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_143{
style=filled;
color=gray75;
2425[label="218.91.98.154;s;1002pkt 1002fpkt", shape=diamond, color=yellow];
5040[label="218.91.98.154;s;687pkt 687fpkt", shape=hexagon, color=black];
7382[label="218.91.98.154;1085pkt 1085fpkt", shape=pentagon, color=darkviolet];
stat143[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.91.98.154:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 29307: (0.126172%)&lt;BR/&gt; 29514: (0.108147%)&lt;BR/&gt; 28682: (0.108147%)&lt;BR/&gt; 13229: (0.108147%)&gt;];
}
2425--5040[label="1;687pkt 687fpkt"];
2425--6065[label="0.0678643;68pkt 68fpkt"];
2425--6081[label="0.0538922;54pkt 54fpkt"];
2425--6086[label="0.00998004;10pkt 10fpkt"];
2425--6107[label="0.0678643;68pkt 68fpkt"];
2425--6122[label="0.0538922;54pkt 54fpkt"];
2425--6127[label="0.00998004;10pkt 10fpkt"];
2425--6144[label="0.0678643;68pkt 68fpkt"];
2425--6157[label="0.0538922;54pkt 54fpkt"];
2425--6162[label="0.00998004;10pkt 10fpkt"];
2425--7382[label="1;1002pkt 1002fpkt"];
5040--7382[label="1;687pkt 687fpkt"];
</description>
    <slice>
      <filter src_ip="218.91.98.154" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,501,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
2759[label="89.25.248.185;d;85pkt 85fpkt", shape=diamond, color=yellow];
3067[label="173.144.137.19;s;85pkt 85fpkt", shape=diamond, color=yellow];
3315[label="192.65.209.212;d;14pkt 14fpkt", shape=diamond, color=yellow];
5054[label="89.25.248.185;d;85pkt 85fpkt", shape=hexagon, color=black];
5239[label="173.144.137.19;s;85pkt 85fpkt", shape=hexagon, color=black];
6021[label="173.144.137.19;s;84pkt 84fpkt", shape=polygon, color=gold];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.137.19:21, 89.25.248.185:*}[62.1359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (41.0959%)&lt;BR/&gt; 20: (5.93607%)&lt;BR/&gt; 0: (1.36986%)&lt;BR/&gt; 56390: (0.570776%)&lt;BR/&gt; 42785: (0.570776%)&gt;];
}
2759--3067[label="0.788235;67pkt 67fpkt"];
2759--3874[label="0.211765;18pkt 18fpkt"];
2759--5054[label="1;85pkt 85fpkt"];
2759--5239[label="0.788235;67pkt 67fpkt"];
2759--5863[label="0.211765;18pkt 18fpkt"];
2759--6021[label="0.797619;67pkt 67fpkt"];
2759--7235[label="0.211765;18pkt 18fpkt"];
2759--8420[label="0.211765;18pkt 18fpkt"];
2759--8968[label="0.211765;18pkt 18fpkt"];
3067--3315[label="1;14pkt 14fpkt"];
3067--5054[label="0.788235;67pkt 67fpkt"];
3067--5239[label="1;85pkt 85fpkt"];
3067--6021[label="1;84pkt 84fpkt"];
3067--6089[label="0.0117647;1pkt 1fpkt"];
3315--5239[label="1;14pkt 14fpkt"];
3315--6021[label="1;14pkt 14fpkt"];
5054--5239[label="0.788235;67pkt 67fpkt"];
5054--5863[label="0.211765;18pkt 18fpkt"];
5054--6021[label="0.797619;67pkt 67fpkt"];
5054--7235[label="0.211765;18pkt 18fpkt"];
5054--8420[label="0.211765;18pkt 18fpkt"];
5054--8968[label="0.211765;18pkt 18fpkt"];
5239--6021[label="1;84pkt 84fpkt"];
5239--6089[label="0.0117647;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="89.25.248.185" src_ip="173.144.137.19" src_port="21"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1614[label="193.1.203.148;d;378pkt 378fpkt", shape=diamond, color=yellow];
5074[label="193.1.203.148;d;367pkt 367fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 193.1.203.148:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1614--5074[label="1;367pkt 367fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.203.148"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1225[label="152.174.98.2;s;563pkt 563fpkt", shape=diamond, color=yellow];
5090[label="152.174.98.2;s;563pkt 563fpkt", shape=hexagon, color=black];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.98.2:61726, *:*}[98.579%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61726: (49.2895%)&lt;BR/&gt; 443: (0.62167%)&lt;BR/&gt; 27459: (0.26643%)&lt;BR/&gt; 45043: (0.17762%)&lt;BR/&gt; 40184: (0.17762%)&gt;];
}
1225--5090[label="1;563pkt 563fpkt"];
</description>
    <slice>
      <filter src_ip="152.174.98.2" src_port="61726"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27153,1.91897,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
157[label="173.144.70.11;s;330pkt 330fpkt", shape=diamond, color=yellow];
317[label="49.152.68.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
683[label="89.196.118.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
701[label="152.174.146.117;s;115pkt 115fpkt", shape=diamond, color=yellow];
720[label="93.138.0.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
809[label="218.26.81.241;d;1pkt 1fpkt", shape=diamond, color=yellow];
1229[label="93.70.154.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
1308[label="220.154.132.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
1403[label="2.73.41.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
1423[label="209.26.168.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1679[label="93.137.40.54;d;2pkt 2fpkt", shape=diamond, color=yellow];
1772[label="218.17.71.6;d;1pkt 1fpkt", shape=diamond, color=yellow];
1795[label="17.64.81.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
1866[label="93.3.55.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
1895[label="93.69.118.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
1907[label="5.78.161.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
1933[label="17.76.116.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1935[label="92.161.73.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
2250[label="17.67.99.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
2251[label="48.168.66.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
2286[label="92.168.224.77;d;1pkt 1fpkt", shape=diamond, color=yellow];
2289[label="218.21.62.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
2292[label="55.27.111.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
2294[label="2.73.145.57;d;1pkt 1fpkt", shape=diamond, color=yellow];
2646[label="209.26.0.213;d;1pkt 1fpkt", shape=diamond, color=yellow];
2647[label="218.97.171.91;d;1pkt 1fpkt", shape=diamond, color=yellow];
2655[label="180.161.105.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
2717[label="218.26.144.132;d;1pkt 1fpkt", shape=diamond, color=yellow];
2930[label="53.211.82.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
2940[label="55.30.95.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
2946[label="55.72.35.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
2965[label="3.99.132.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
2968[label="88.121.220.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
3017[label="209.153.10.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
3282[label="89.197.169.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
3291[label="192.246.113.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
3293[label="220.152.138.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
3322[label="59.20.42.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
3538[label="222.86.0.221;d;1pkt 1fpkt", shape=diamond, color=yellow];
3612[label="219.34.84.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
3623[label="49.137.128.27;d;1pkt 1fpkt", shape=diamond, color=yellow];
3772[label="3.96.170.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
3808[label="55.68.41.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
3815[label="93.69.23.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
4452[label="93.138.0.114;d;1pkt 1fpkt", shape=hexagon, color=black];
4481[label="2.73.41.0;d;1pkt 1fpkt", shape=hexagon, color=black];
4515[label="93.69.118.8;d;1pkt 1fpkt", shape=hexagon, color=black];
4737[label="17.67.99.102;d;1pkt 1fpkt", shape=hexagon, color=black];
4768[label="17.76.116.146;d;1pkt 1fpkt", shape=hexagon, color=black];
4985[label="218.21.62.119;d;1pkt 1fpkt", shape=hexagon, color=black];
4987[label="2.73.145.57;d;1pkt 1fpkt", shape=hexagon, color=black];
4995[label="180.161.105.79;d;1pkt 1fpkt", shape=hexagon, color=black];
5016[label="218.26.144.132;d;1pkt 1fpkt", shape=hexagon, color=black];
5167[label="55.27.111.103;d;1pkt 1fpkt", shape=hexagon, color=black];
5459[label="89.197.169.172;d;1pkt 1fpkt", shape=hexagon, color=black];
5462[label="192.246.113.56;d;1pkt 1fpkt", shape=hexagon, color=black];
5818[label="220.152.138.103;d;1pkt 1fpkt", shape=hexagon, color=black];
5838[label="219.34.84.139;d;1pkt 1fpkt", shape=hexagon, color=black];
5971[label="55.27.111.103;d;1pkt 1fpkt", shape=polygon, color=gold];
6027[label="192.246.113.56;d;1pkt 1fpkt", shape=polygon, color=gold];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.70.11:2069, *:*}[66.9663%]&lt;BR/&gt;{152.174.146.117:*, *:*}[25.8427%]&lt;BR/&gt;{*:*, *:80}[25.618%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2069: (34.6838%)&lt;BR/&gt; 80: (11.2648%)&lt;BR/&gt; 2566: (2.27273%)&lt;BR/&gt; 443: (1.87747%)&lt;BR/&gt; 1116: (0.790514%)&gt;];
}
157--317[label="1;1pkt 1fpkt"];
157--683[label="1;1pkt 1fpkt"];
157--809[label="1;1pkt 1fpkt"];
157--1229[label="1;1pkt 1fpkt"];
157--1308[label="1;1pkt 1fpkt"];
157--1403[label="1;2pkt 2fpkt"];
157--1423[label="1;1pkt 1fpkt"];
157--1679[label="0.5;1pkt 1fpkt"];
157--1772[label="1;1pkt 1fpkt"];
157--1795[label="1;2pkt 2fpkt"];
157--1866[label="1;1pkt 1fpkt"];
157--1895[label="1;1pkt 1fpkt"];
157--1933[label="1;1pkt 1fpkt"];
157--1935[label="1;1pkt 1fpkt"];
157--2250[label="1;1pkt 1fpkt"];
157--2251[label="1;1pkt 1fpkt"];
157--2286[label="1;1pkt 1fpkt"];
157--2289[label="1;1pkt 1fpkt"];
157--2292[label="1;1pkt 1fpkt"];
157--2294[label="1;1pkt 1fpkt"];
157--2646[label="1;1pkt 1fpkt"];
157--2655[label="1;1pkt 1fpkt"];
157--2717[label="1;1pkt 1fpkt"];
157--2930[label="1;1pkt 1fpkt"];
157--2940[label="1;1pkt 1fpkt"];
157--2946[label="1;1pkt 1fpkt"];
157--2965[label="1;1pkt 1fpkt"];
157--2968[label="1;1pkt 1fpkt"];
157--3017[label="1;1pkt 1fpkt"];
157--3189[label="0.0103093;1pkt 1fpkt"];
157--3282[label="1;1pkt 1fpkt"];
157--3291[label="1;1pkt 1fpkt"];
157--3293[label="1;1pkt 1fpkt"];
157--3322[label="1;1pkt 1fpkt"];
157--3623[label="1;1pkt 1fpkt"];
157--3772[label="1;1pkt 1fpkt"];
157--3808[label="1;1pkt 1fpkt"];
157--3815[label="1;1pkt 1fpkt"];
157--4481[label="1;1pkt 1fpkt"];
157--4515[label="1;1pkt 1fpkt"];
157--4737[label="1;1pkt 1fpkt"];
157--4768[label="1;1pkt 1fpkt"];
157--4985[label="1;1pkt 1fpkt"];
157--4987[label="1;1pkt 1fpkt"];
157--4995[label="1;1pkt 1fpkt"];
157--5016[label="1;1pkt 1fpkt"];
157--5167[label="1;1pkt 1fpkt"];
157--5459[label="1;1pkt 1fpkt"];
157--5462[label="1;1pkt 1fpkt"];
157--5818[label="1;1pkt 1fpkt"];
157--5971[label="1;1pkt 1fpkt"];
157--6027[label="1;1pkt 1fpkt"];
157--6084[label="0.00606061;2pkt 2fpkt"];
157--6125[label="0.00606061;2pkt 2fpkt"];
157--6160[label="0.00606061;2pkt 2fpkt"];
701--720[label="1;1pkt 1fpkt"];
701--1290[label="0.0608696;7pkt 7fpkt"];
701--1679[label="0.5;1pkt 1fpkt"];
701--1907[label="1;1pkt 1fpkt"];
701--2647[label="1;1pkt 1fpkt"];
701--3533[label="0.548387;17pkt 17fpkt"];
701--3538[label="1;1pkt 1fpkt"];
701--3612[label="1;1pkt 1fpkt"];
701--4188[label="0.07;7pkt 7fpkt"];
701--4452[label="1;1pkt 1fpkt"];
701--5800[label="0.548387;17pkt 17fpkt"];
701--5838[label="1;1pkt 1fpkt"];
701--6073[label="0.0521739;6pkt 6fpkt"];
701--6084[label="0.0608696;7pkt 7fpkt"];
701--6115[label="0.0521739;6pkt 6fpkt"];
701--6125[label="0.0608696;7pkt 7fpkt"];
701--6150[label="0.0521739;6pkt 6fpkt"];
701--6160[label="0.0608696;7pkt 7fpkt"];
720--4452[label="1;1pkt 1fpkt"];
1403--4481[label="1;1pkt 1fpkt"];
1895--4515[label="1;1pkt 1fpkt"];
1933--4768[label="1;1pkt 1fpkt"];
2250--4737[label="1;1pkt 1fpkt"];
2289--4985[label="1;1pkt 1fpkt"];
2292--5167[label="1;1pkt 1fpkt"];
2292--5971[label="1;1pkt 1fpkt"];
2294--4987[label="1;1pkt 1fpkt"];
2655--4995[label="1;1pkt 1fpkt"];
2717--5016[label="1;1pkt 1fpkt"];
3282--5459[label="1;1pkt 1fpkt"];
3291--5462[label="1;1pkt 1fpkt"];
3291--6027[label="1;1pkt 1fpkt"];
3293--5818[label="1;1pkt 1fpkt"];
3612--5838[label="1;1pkt 1fpkt"];
5167--5971[label="1;1pkt 1fpkt"];
5462--6027[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="152.174.146.117"/>
      <filter dst_port="80"/>
      <filter src_ip="173.144.70.11" src_port="2069"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
2668[label="173.144.19.235;d;37pkt 37fpkt", shape=diamond, color=yellow];
2693[label="88.136.131.11;s;20pkt 20fpkt", shape=diamond, color=yellow];
5182[label="88.136.131.11;s;20pkt 20fpkt", shape=hexagon, color=black];
6299[label="88.136.131.11;27pkt 27fpkt", shape=pentagon, color=darkviolet];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.136.131.11:80, 173.144.19.235:*}[72.973%]&lt;BR/&gt;{48.208.227.37:80, 173.144.19.235:*}[24.3243%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1538: (1.92308%)&lt;BR/&gt; 1537: (1.92308%)&lt;BR/&gt; 1529: (1.92308%)&lt;BR/&gt; 1522: (1.92308%)&gt;];
}
2668--2693[label="1;20pkt 20fpkt"];
2668--5182[label="1;20pkt 20fpkt"];
2668--6065[label="0.189189;7pkt 7fpkt"];
2668--6081[label="0.108108;4pkt 4fpkt"];
2668--6107[label="0.189189;7pkt 7fpkt"];
2668--6122[label="0.108108;4pkt 4fpkt"];
2668--6144[label="0.189189;7pkt 7fpkt"];
2668--6157[label="0.108108;4pkt 4fpkt"];
2668--6299[label="1;27pkt 27fpkt"];
2693--5182[label="1;20pkt 20fpkt"];
2693--6299[label="1;20pkt 20fpkt"];
5182--6299[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.19.235" src_ip="88.136.131.11" src_port="80"/>
      <filter dst_ip="173.144.19.235" src_ip="48.208.227.37" src_port="80"/>
    </slice>
    <from sec="1194757551" usec="0"/>
    <to sec="1194758008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89341,1.82525,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
2657[label="129.60.133.16;d;3pkt 3fpkt", shape=diamond, color=yellow];
2751[label="143.2.64.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
3394[label="210.177.231.107;s;37pkt 37fpkt", shape=diamond, color=yellow];
5195[label="143.2.64.70;s;1pkt 1fpkt", shape=hexagon, color=black];
5797[label="129.60.133.16;d;3pkt 3fpkt", shape=hexagon, color=black];
6773[label="143.2.64.70;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8233[label="143.2.64.70;1pkt 1fpkt", shape=invtriangle, color=brown];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.177.231.107:995, 129.60.129.54:*}[42.1053%]&lt;BR/&gt;{210.177.231.107:995, 129.180.9.214:*}[36.8421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (43.617%)&lt;BR/&gt; 64348: (6.38298%)&lt;BR/&gt; 80: (6.38298%)&lt;BR/&gt; 59587: (3.19149%)&lt;BR/&gt; 53905: (3.19149%)&gt;];
}
2657--2751[label="1;1pkt 1fpkt"];
2657--3394[label="0.666667;2pkt 2fpkt"];
2657--5195[label="1;1pkt 1fpkt"];
2657--5797[label="1;3pkt 3fpkt"];
2657--6773[label="1;1pkt 1fpkt"];
2657--8233[label="1;1pkt 1fpkt"];
2751--5195[label="1;1pkt 1fpkt"];
2751--5797[label="1;1pkt 1fpkt"];
2751--6773[label="1;1pkt 1fpkt"];
2751--8233[label="1;1pkt 1fpkt"];
3394--5797[label="0.666667;2pkt 2fpkt"];
5195--5797[label="1;1pkt 1fpkt"];
5195--6773[label="1;1pkt 1fpkt"];
5195--8233[label="1;1pkt 1fpkt"];
5797--6773[label="1;1pkt 1fpkt"];
5797--8233[label="1;1pkt 1fpkt"];
6773--8233[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.60.129.54" src_ip="210.177.231.107" src_port="995"/>
      <filter dst_ip="129.180.9.214" src_ip="210.177.231.107" src_port="995"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
2030[label="144.45.130.127;s;364pkt 364fpkt", shape=diamond, color=yellow];
5268[label="144.45.130.127;s;326pkt 326fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.130.127:18752, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18752: (50%)&lt;BR/&gt; 48529: (0.289855%)&lt;BR/&gt; 24632: (0.289855%)&lt;BR/&gt; 10004: (0.289855%)&lt;BR/&gt; 54424: (0.217391%)&gt;];
}
2030--5268[label="1;326pkt 326fpkt"];
</description>
    <slice>
      <filter src_ip="144.45.130.127" src_port="18752"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
1268[label="133.224.235.97;d;8pkt 8fpkt", shape=diamond, color=yellow];
1324[label="133.224.157.101;d;167pkt 167fpkt", shape=diamond, color=yellow];
1352[label="221.192.237.27;s;12pkt 12fpkt", shape=diamond, color=yellow];
4182[label="133.224.235.97;d;8pkt 8fpkt", shape=hexagon, color=black];
4464[label="221.192.237.27;s;8pkt 8fpkt", shape=hexagon, color=black];
5352[label="133.224.157.101;d;131pkt 131fpkt", shape=hexagon, color=black];
6445[label="221.192.237.27;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6594[label="204.140.82.47;8pkt 8fpkt", shape=pentagon, color=darkviolet];
6619[label="210.177.250.50;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.185.89.223:*, 133.224.157.101:80}[32.7957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.75%)&lt;BR/&gt; 443: (6.25%)&lt;BR/&gt; 1266: (0.694444%)&lt;BR/&gt; 1265: (0.694444%)&lt;BR/&gt; 1264: (0.694444%)&gt;];
}
1268--1352[label="1;8pkt 8fpkt"];
1268--4182[label="1;8pkt 8fpkt"];
1268--4464[label="0.5;4pkt 4fpkt"];
1268--6445[label="1;8pkt 8fpkt"];
1324--1352[label="0.0833333;1pkt 1fpkt"];
1324--2921[label="0.0119048;1pkt 1fpkt"];
1324--3209[label="0.564815;61pkt 61fpkt"];
1324--4464[label="0.125;1pkt 1fpkt"];
1324--5165[label="0.0136986;1pkt 1fpkt"];
1324--5352[label="1;131pkt 131fpkt"];
1324--6073[label="0.185629;31pkt 31fpkt"];
1324--6084[label="0.0838323;14pkt 14fpkt"];
1324--6115[label="0.185629;31pkt 31fpkt"];
1324--6125[label="0.0838323;14pkt 14fpkt"];
1324--6150[label="0.185629;31pkt 31fpkt"];
1324--6160[label="0.0838323;14pkt 14fpkt"];
1324--6445[label="0.0833333;1pkt 1fpkt"];
1324--6507[label="0.0119048;1pkt 1fpkt"];
1324--6594[label="0.25;2pkt 2fpkt"];
1324--6619[label="0.666667;4pkt 4fpkt"];
1324--7821[label="0.488;61pkt 61fpkt"];
1324--8127[label="0.0120482;1pkt 1fpkt"];
1352--4182[label="1;8pkt 8fpkt"];
1352--4464[label="1;8pkt 8fpkt"];
1352--5352[label="0.0833333;1pkt 1fpkt"];
1352--6445[label="1;12pkt 12fpkt"];
4182--4464[label="0.5;4pkt 4fpkt"];
4182--6445[label="1;8pkt 8fpkt"];
4464--5352[label="0.125;1pkt 1fpkt"];
4464--6445[label="1;8pkt 8fpkt"];
5352--6445[label="0.0833333;1pkt 1fpkt"];
5352--6507[label="0.0119048;1pkt 1fpkt"];
5352--6594[label="0.25;2pkt 2fpkt"];
5352--6619[label="0.666667;4pkt 4fpkt"];
5352--7821[label="0.24;30pkt 30fpkt"];
5352--8127[label="0.0120482;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.157.101" dst_port="80" src_ip="216.185.89.223"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
2863[label="48.78.90.247;d;126pkt 126fpkt", shape=diamond, color=yellow];
2864[label="173.144.98.150;s;112pkt 112fpkt", shape=diamond, color=yellow];
5359[label="48.78.90.247;d;99pkt 99fpkt", shape=hexagon, color=black];
5360[label="173.144.98.150;s;100pkt 100fpkt", shape=hexagon, color=black];
7356[label="173.144.98.150;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.98.150:*, 48.78.90.247:80}[89.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3162: (0.447227%)&lt;BR/&gt; 3161: (0.447227%)&lt;BR/&gt; 3156: (0.447227%)&lt;BR/&gt; 3155: (0.447227%)&gt;];
}
2863--2864[label="1;112pkt 112fpkt"];
2863--5359[label="1;99pkt 99fpkt"];
2863--5360[label="1;100pkt 100fpkt"];
2863--6073[label="0.0714286;9pkt 9fpkt"];
2863--6084[label="0.0714286;9pkt 9fpkt"];
2863--6094[label="0.031746;4pkt 4fpkt"];
2863--6115[label="0.0714286;9pkt 9fpkt"];
2863--6125[label="0.0714286;9pkt 9fpkt"];
2863--6134[label="0.031746;4pkt 4fpkt"];
2863--6150[label="0.0714286;9pkt 9fpkt"];
2863--6160[label="0.0714286;9pkt 9fpkt"];
2863--6168[label="0.031746;4pkt 4fpkt"];
2863--7356[label="0.918033;112pkt 112fpkt"];
2864--5359[label="0.888889;88pkt 88fpkt"];
2864--5360[label="1;100pkt 100fpkt"];
2864--6073[label="0.0714286;8pkt 8fpkt"];
2864--6084[label="0.0714286;8pkt 8fpkt"];
2864--6094[label="0.0357143;4pkt 4fpkt"];
2864--6115[label="0.0714286;8pkt 8fpkt"];
2864--6125[label="0.0714286;8pkt 8fpkt"];
2864--6134[label="0.0357143;4pkt 4fpkt"];
2864--6150[label="0.0714286;8pkt 8fpkt"];
2864--6160[label="0.0714286;8pkt 8fpkt"];
2864--6168[label="0.0357143;4pkt 4fpkt"];
2864--7356[label="1;112pkt 112fpkt"];
5359--5360[label="0.888889;88pkt 88fpkt"];
5359--7356[label="0.888889;88pkt 88fpkt"];
5360--6073[label="0.08;8pkt 8fpkt"];
5360--6084[label="0.04;4pkt 4fpkt"];
5360--6115[label="0.08;8pkt 8fpkt"];
5360--6125[label="0.04;4pkt 4fpkt"];
5360--6150[label="0.08;8pkt 8fpkt"];
5360--6160[label="0.04;4pkt 4fpkt"];
5360--7356[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="48.78.90.247" dst_port="80" src_ip="173.144.98.150"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194758096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1764[label="129.33.86.114;s;99pkt 99fpkt", shape=diamond, color=yellow];
5361[label="129.33.86.114;s;99pkt 99fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.86.114:*, 6.104.144.248:80}[28.2828%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4949%)&lt;BR/&gt; 2857: (0.505051%)&lt;BR/&gt; 2238: (0.505051%)&lt;BR/&gt; 2237: (0.505051%)&lt;BR/&gt; 2236: (0.505051%)&gt;];
}
1764--5361[label="1;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="6.104.144.248" dst_port="80" src_ip="129.33.86.114"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194758022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
2081[label="129.180.105.58;s;1209pkt 1209fpkt", shape=diamond, color=yellow];
2241[label="129.180.93.37;s;8pkt 8fpkt", shape=diamond, color=yellow];
3223[label="214.54.21.29;d;3pkt 3fpkt", shape=diamond, color=yellow];
4882[label="129.180.105.58;s;1079pkt 1079fpkt", shape=hexagon, color=black];
5408[label="214.54.21.29;d;3pkt 3fpkt", shape=hexagon, color=black];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.180.105.58:0, *:0}[97.2884%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.3501%)&lt;BR/&gt; 53: (1.23805%)&lt;BR/&gt; 80: (0.108601%)&lt;BR/&gt; 9253: (0.086881%)&lt;BR/&gt; 35888: (0.0651607%)&gt;];
}
2081--2565[label="0.0454545;1pkt 1fpkt"];
2081--3223[label="0.333333;1pkt 1fpkt"];
2081--3369[label="0.00301205;1pkt 1fpkt"];
2081--4589[label="0.00273224;1pkt 1fpkt"];
2081--4882[label="1;1079pkt 1079fpkt"];
2081--4930[label="0.05;1pkt 1fpkt"];
2081--5408[label="0.333333;1pkt 1fpkt"];
2241--3223[label="0.666667;2pkt 2fpkt"];
2241--5408[label="0.666667;2pkt 2fpkt"];
3223--4882[label="0.333333;1pkt 1fpkt"];
3223--5408[label="1;3pkt 3fpkt"];
4882--4930[label="0.05;1pkt 1fpkt"];
4882--5408[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="129.180.105.58"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698991,1.9524,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="93.5.48.252"/>
      <from sec="1194757503" usec="0"/>
      <to sec="1194757939" usec="0"/>
    </slice>
    <from sec="1194757503" usec="0"/>
    <to sec="1194757939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
2681[label="195.43.201.250;d;708pkt 708fpkt", shape=diamond, color=yellow];
2952[label="209.241.77.202;s;142pkt 142fpkt", shape=diamond, color=yellow];
2953[label="209.241.77.204;s;143pkt 143fpkt", shape=diamond, color=yellow];
2954[label="209.241.77.193;s;141pkt 141fpkt", shape=diamond, color=yellow];
2955[label="209.241.77.181;s;142pkt 142fpkt", shape=diamond, color=yellow];
2956[label="209.241.77.180;s;141pkt 141fpkt", shape=diamond, color=yellow];
5438[label="209.241.77.202;s;101pkt 101fpkt", shape=hexagon, color=black];
5806[label="209.241.77.204;s;143pkt 143fpkt", shape=hexagon, color=black];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.241.77.181:22, 195.43.201.250:*}[20.0282%]&lt;BR/&gt;{209.241.77.202:22, 195.43.201.250:*}[20.0282%]&lt;BR/&gt;{209.241.77.204:22, 195.43.201.250:*}[20.0282%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.9398%)&lt;BR/&gt; 54349: (0.150512%)&lt;BR/&gt; 49665: (0.150512%)&lt;BR/&gt; 48253: (0.150512%)&lt;BR/&gt; 43172: (0.150512%)&gt;];
}
2681--2952[label="1;142pkt 142fpkt"];
2681--2953[label="0.993007;142pkt 142fpkt"];
2681--2954[label="1;141pkt 141fpkt"];
2681--2955[label="1;142pkt 142fpkt"];
2681--2956[label="1;141pkt 141fpkt"];
2681--5438[label="1;101pkt 101fpkt"];
2681--5806[label="0.993007;142pkt 142fpkt"];
2952--5438[label="1;101pkt 101fpkt"];
2953--5806[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="195.43.201.250" src_ip="209.241.77.204" src_port="22"/>
      <filter dst_ip="195.43.201.250" src_ip="209.241.77.202" src_port="22"/>
      <filter dst_ip="195.43.201.250" src_ip="209.241.77.181" src_port="22"/>
    </slice>
    <from sec="1194757577" usec="0"/>
    <to sec="1194757965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
2976[label="129.33.94.171;s;66pkt 66fpkt", shape=diamond, color=yellow];
5443[label="129.33.94.171;s;66pkt 66fpkt", shape=hexagon, color=black];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.94.171:*, 222.170.208.25:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50042: (0.757576%)&lt;BR/&gt; 50041: (0.757576%)&lt;BR/&gt; 50040: (0.757576%)&lt;BR/&gt; 50039: (0.757576%)&gt;];
}
2976--4891[label="0.0151515;1pkt 1fpkt"];
2976--5443[label="1;66pkt 66fpkt"];
</description>
    <slice>
      <filter dst_ip="222.170.208.25" dst_port="80" src_ip="129.33.94.171"/>
    </slice>
    <from sec="1194757625" usec="0"/>
    <to sec="1194757771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
2767[label="193.1.200.164;s;24pkt 24fpkt", shape=diamond, color=yellow];
5492[label="193.1.200.164;s;21pkt 21fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.200.164:0, *:0}[45.8333%]&lt;BR/&gt;{193.1.200.164:123, *:123}[45.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (48.8889%)&lt;BR/&gt; 123: (46.6667%)&lt;BR/&gt; 56889: (2.22222%)&lt;BR/&gt; 1533: (2.22222%)&gt;];
}
2767--5492[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="193.1.200.164" src_port="123"/>
      <filter src_ip="193.1.200.164"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
945[label="4.131.140.128;d;370pkt 370fpkt", shape=diamond, color=yellow];
1663[label="33.203.72.102;d;234pkt 234fpkt", shape=diamond, color=yellow];
2061[label="193.1.205.85;s;221pkt 221fpkt", shape=diamond, color=yellow];
4566[label="4.131.140.128;d;264pkt 264fpkt", shape=hexagon, color=black];
4644[label="193.1.205.85;s;114pkt 114fpkt", shape=hexagon, color=black];
5508[label="33.203.72.102;d;234pkt 234fpkt", shape=hexagon, color=black];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:445, 4.131.140.128:*}[43.949%]&lt;BR/&gt;{193.1.205.85:*, *:*}[35.1911%]&lt;BR/&gt;{*:445, 33.203.72.102:*}[20.7006%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.4349%)&lt;BR/&gt; 1358: (12.4565%)&lt;BR/&gt; 7900: (10.7864%)&lt;BR/&gt; 3966: (1.25261%)&lt;BR/&gt; 3831: (0.208768%)&gt;];
}
945--2061[label="0.425339;94pkt 94fpkt"];
945--4566[label="1;264pkt 264fpkt"];
945--4644[label="0.464912;53pkt 53fpkt"];
1663--2061[label="0.466063;103pkt 103fpkt"];
1663--4644[label="0.429825;49pkt 49fpkt"];
1663--5478[label="0.0042735;1pkt 1fpkt"];
1663--5508[label="1;234pkt 234fpkt"];
2061--4566[label="0.312217;69pkt 69fpkt"];
2061--4644[label="1;114pkt 114fpkt"];
2061--5508[label="0.466063;103pkt 103fpkt"];
4566--4644[label="0.464912;53pkt 53fpkt"];
4644--5508[label="0.429825;49pkt 49fpkt"];
</description>
    <slice>
      <filter src_ip="193.1.205.85"/>
      <filter dst_ip="4.131.140.128" src_port="445"/>
      <filter dst_ip="33.203.72.102" src_port="445"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
6871[label="173.144.68.82;55pkt 55fpkt", shape=pentagon, color=darkviolet];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.68.82:54657, *:*}[50.9091%]&lt;BR/&gt;{173.144.68.82:*, 48.153.12.99:80}[25.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54657: (25.4545%)&lt;BR/&gt; 80: (23.6364%)&lt;BR/&gt; 61307: (1.81818%)&lt;BR/&gt; 60072: (0.909091%)&lt;BR/&gt; 60053: (0.909091%)&gt;];
}
</description>
    <slice>
      <filter src_ip="173.144.68.82" src_port="54657"/>
      <filter dst_ip="48.153.12.99" dst_port="80" src_ip="173.144.68.82"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89341,1.82525,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
1323[label="48.164.129.43;d;17pkt 17fpkt", shape=diamond, color=yellow];
1500[label="129.33.82.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
2916[label="129.33.27.70;s;7pkt 7fpkt", shape=diamond, color=yellow];
4921[label="48.164.129.43;d;10pkt 10fpkt", shape=hexagon, color=black];
5567[label="129.33.27.70;s;7pkt 7fpkt", shape=hexagon, color=black];
6770[label="129.33.27.70;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8232[label="129.33.27.70;9pkt 9fpkt", shape=invtriangle, color=brown];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.212.146:80, 48.164.129.43:*}[52.381%]&lt;BR/&gt;{129.33.27.70:80, 48.164.129.43:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 995: (6.66667%)&lt;BR/&gt; 64606: (5%)&lt;BR/&gt; 56852: (5%)&lt;BR/&gt; 54139: (4.16667%)&gt;];
}
1323--1500[label="1;1pkt 1fpkt"];
1323--2916[label="0.571429;4pkt 4fpkt"];
1323--4921[label="1;10pkt 10fpkt"];
1323--5567[label="0.571429;4pkt 4fpkt"];
1323--6065[label="0.176471;3pkt 3fpkt"];
1323--6107[label="0.176471;3pkt 3fpkt"];
1323--6144[label="0.176471;3pkt 3fpkt"];
1323--6770[label="0.555556;5pkt 5fpkt"];
1323--8232[label="0.555556;5pkt 5fpkt"];
1500--4921[label="1;1pkt 1fpkt"];
2916--4921[label="0.285714;2pkt 2fpkt"];
2916--5567[label="1;7pkt 7fpkt"];
2916--6065[label="0.142857;1pkt 1fpkt"];
2916--6107[label="0.142857;1pkt 1fpkt"];
2916--6144[label="0.142857;1pkt 1fpkt"];
2916--6770[label="1;7pkt 7fpkt"];
2916--8232[label="1;7pkt 7fpkt"];
4921--5567[label="0.285714;2pkt 2fpkt"];
4921--6770[label="0.333333;3pkt 3fpkt"];
4921--8232[label="0.333333;3pkt 3fpkt"];
5567--6065[label="0.142857;1pkt 1fpkt"];
5567--6107[label="0.142857;1pkt 1fpkt"];
5567--6144[label="0.142857;1pkt 1fpkt"];
5567--6770[label="1;7pkt 7fpkt"];
5567--8232[label="1;7pkt 7fpkt"];
6770--8232[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="48.164.129.43" src_ip="152.174.212.146" src_port="80"/>
      <filter dst_ip="48.164.129.43" src_ip="129.33.27.70" src_port="80"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
230[label="193.1.194.7;s;949pkt 949fpkt", shape=diamond, color=yellow];
275[label="222.98.132.79;d;1pkt 1fpkt", shape=diamond, color=yellow];
362[label="182.234.115.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
615[label="192.165.204.170;d;33pkt 33fpkt", shape=diamond, color=yellow];
764[label="49.182.78.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
807[label="117.42.71.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
837[label="217.217.29.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
1010[label="53.130.181.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
1436[label="215.13.68.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1843[label="3.33.134.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
1892[label="42.45.3.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
2260[label="89.32.144.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
2263[label="94.233.137.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
2685[label="63.108.146.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
2687[label="49.36.165.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
2701[label="89.20.26.218;d;1pkt 1fpkt", shape=diamond, color=yellow];
2744[label="53.170.80.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
2745[label="62.110.26.226;d;1pkt 1fpkt", shape=diamond, color=yellow];
2746[label="54.100.220.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
2943[label="194.28.47.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
3029[label="52.54.4.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
3178[label="54.64.176.39;d;12pkt 12fpkt", shape=diamond, color=yellow];
3198[label="57.224.188.124;d;13pkt 13fpkt", shape=diamond, color=yellow];
3204[label="92.40.197.239;d;13pkt 13fpkt", shape=diamond, color=yellow];
3208[label="211.20.203.78;d;13pkt 13fpkt", shape=diamond, color=yellow];
3278[label="203.110.240.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
3899[label="193.1.194.7;s;692pkt 692fpkt", shape=hexagon, color=black];
3906[label="222.98.132.79;d;1pkt 1fpkt", shape=hexagon, color=black];
4007[label="217.217.29.176;d;1pkt 1fpkt", shape=hexagon, color=black];
4233[label="117.42.71.215;d;1pkt 1fpkt", shape=hexagon, color=black];
4252[label="215.13.68.196;d;1pkt 1fpkt", shape=hexagon, color=black];
4499[label="3.33.134.255;d;1pkt 1fpkt", shape=hexagon, color=black];
5024[label="54.100.220.175;d;1pkt 1fpkt", shape=hexagon, color=black];
5155[label="89.32.144.10;d;1pkt 1fpkt", shape=hexagon, color=black];
5362[label="54.64.176.39;d;12pkt 12fpkt", shape=hexagon, color=black];
5379[label="57.224.188.124;d;12pkt 12fpkt", shape=hexagon, color=black];
5440[label="89.20.26.218;d;1pkt 1fpkt", shape=hexagon, color=black];
5582[label="203.110.240.215;d;1pkt 1fpkt", shape=hexagon, color=black];
5780[label="92.40.197.239;d;13pkt 13fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.194.7:80, *:*}[99.1658%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.665%)&lt;BR/&gt; 0: (0.335008%)&lt;BR/&gt; 1528: (0.195422%)&lt;BR/&gt; 57660: (0.167504%)&lt;BR/&gt; 2091: (0.167504%)&gt;];
}
230--275[label="1;1pkt 1fpkt"];
230--362[label="1;1pkt 1fpkt"];
230--418[label="0.5;1pkt 1fpkt"];
230--615[label="1;33pkt 33fpkt"];
230--764[label="1;1pkt 1fpkt"];
230--807[label="1;1pkt 1fpkt"];
230--837[label="1;1pkt 1fpkt"];
230--1010[label="1;1pkt 1fpkt"];
230--1201[label="0.545455;6pkt 6fpkt"];
230--1417[label="0.5;1pkt 1fpkt"];
230--1436[label="1;1pkt 1fpkt"];
230--1843[label="1;1pkt 1fpkt"];
230--1892[label="1;1pkt 1fpkt"];
230--2260[label="1;1pkt 1fpkt"];
230--2263[label="1;1pkt 1fpkt"];
230--2400[label="0.458333;11pkt 11fpkt"];
230--2685[label="1;1pkt 1fpkt"];
230--2687[label="1;1pkt 1fpkt"];
230--2701[label="1;1pkt 1fpkt"];
230--2744[label="1;1pkt 1fpkt"];
230--2745[label="1;1pkt 1fpkt"];
230--2746[label="1;1pkt 1fpkt"];
230--2943[label="1;1pkt 1fpkt"];
230--3029[label="1;1pkt 1fpkt"];
230--3178[label="0.916667;11pkt 11fpkt"];
230--3198[label="0.846154;11pkt 11fpkt"];
230--3204[label="0.769231;10pkt 10fpkt"];
230--3208[label="0.769231;10pkt 10fpkt"];
230--3275[label="0.5;1pkt 1fpkt"];
230--3278[label="1;1pkt 1fpkt"];
230--3552[label="1;1pkt 1fpkt"];
230--3899[label="0.998555;691pkt 691fpkt"];
230--3906[label="1;1pkt 1fpkt"];
230--4007[label="1;1pkt 1fpkt"];
230--4233[label="1;1pkt 1fpkt"];
230--4252[label="1;1pkt 1fpkt"];
230--4499[label="1;1pkt 1fpkt"];
230--5024[label="1;1pkt 1fpkt"];
230--5155[label="1;1pkt 1fpkt"];
230--5362[label="0.916667;11pkt 11fpkt"];
230--5379[label="0.916667;11pkt 11fpkt"];
230--5440[label="1;1pkt 1fpkt"];
230--5582[label="1;1pkt 1fpkt"];
230--5780[label="0.769231;10pkt 10fpkt"];
230--6065[label="0.0558483;53pkt 53fpkt"];
230--6081[label="0.0368809;35pkt 35fpkt"];
230--6086[label="0.0263435;25pkt 25fpkt"];
230--6107[label="0.0558483;53pkt 53fpkt"];
230--6122[label="0.0368809;35pkt 35fpkt"];
230--6127[label="0.0263435;25pkt 25fpkt"];
230--6144[label="0.0558483;53pkt 53fpkt"];
230--6157[label="0.0368809;35pkt 35fpkt"];
230--6162[label="0.0263435;25pkt 25fpkt"];
275--3899[label="1;1pkt 1fpkt"];
275--3906[label="1;1pkt 1fpkt"];
362--3899[label="1;1pkt 1fpkt"];
615--3899[label="1;33pkt 33fpkt"];
615--6065[label="0.0606061;2pkt 2fpkt"];
615--6081[label="0.0606061;2pkt 2fpkt"];
615--6086[label="0.0606061;2pkt 2fpkt"];
615--6107[label="0.0606061;2pkt 2fpkt"];
615--6122[label="0.0606061;2pkt 2fpkt"];
615--6127[label="0.0606061;2pkt 2fpkt"];
615--6144[label="0.0606061;2pkt 2fpkt"];
615--6157[label="0.0606061;2pkt 2fpkt"];
615--6162[label="0.0606061;2pkt 2fpkt"];
764--3899[label="1;1pkt 1fpkt"];
807--3899[label="1;1pkt 1fpkt"];
807--4233[label="1;1pkt 1fpkt"];
837--3899[label="1;1pkt 1fpkt"];
837--4007[label="1;1pkt 1fpkt"];
1010--3899[label="1;1pkt 1fpkt"];
1436--3899[label="1;1pkt 1fpkt"];
1436--4252[label="1;1pkt 1fpkt"];
1843--3899[label="1;1pkt 1fpkt"];
1843--4499[label="1;1pkt 1fpkt"];
1892--3899[label="1;1pkt 1fpkt"];
2260--3899[label="1;1pkt 1fpkt"];
2260--5155[label="1;1pkt 1fpkt"];
2263--3899[label="1;1pkt 1fpkt"];
2685--3899[label="1;1pkt 1fpkt"];
2687--3899[label="1;1pkt 1fpkt"];
2701--3899[label="1;1pkt 1fpkt"];
2701--5440[label="1;1pkt 1fpkt"];
2744--3899[label="1;1pkt 1fpkt"];
2745--3899[label="1;1pkt 1fpkt"];
2746--3899[label="1;1pkt 1fpkt"];
2746--5024[label="1;1pkt 1fpkt"];
2943--3899[label="1;1pkt 1fpkt"];
3178--3899[label="0.666667;8pkt 8fpkt"];
3178--5362[label="1;12pkt 12fpkt"];
3178--6065[label="0.0833333;1pkt 1fpkt"];
3178--6107[label="0.0833333;1pkt 1fpkt"];
3178--6144[label="0.0833333;1pkt 1fpkt"];
3198--3899[label="0.615385;8pkt 8fpkt"];
3198--5379[label="1;12pkt 12fpkt"];
3198--6065[label="0.0769231;1pkt 1fpkt"];
3198--6081[label="0.153846;2pkt 2fpkt"];
3198--6107[label="0.0769231;1pkt 1fpkt"];
3198--6122[label="0.153846;2pkt 2fpkt"];
3198--6144[label="0.0769231;1pkt 1fpkt"];
3198--6157[label="0.153846;2pkt 2fpkt"];
3204--3899[label="0.538462;7pkt 7fpkt"];
3204--5780[label="1;13pkt 13fpkt"];
3204--6065[label="0.0769231;1pkt 1fpkt"];
3204--6081[label="0.0769231;1pkt 1fpkt"];
3204--6086[label="0.0769231;1pkt 1fpkt"];
3204--6107[label="0.0769231;1pkt 1fpkt"];
3204--6122[label="0.0769231;1pkt 1fpkt"];
3204--6127[label="0.0769231;1pkt 1fpkt"];
3204--6144[label="0.0769231;1pkt 1fpkt"];
3204--6157[label="0.0769231;1pkt 1fpkt"];
3204--6162[label="0.0769231;1pkt 1fpkt"];
3208--3899[label="0.538462;7pkt 7fpkt"];
3208--6065[label="0.0769231;1pkt 1fpkt"];
3208--6081[label="0.0769231;1pkt 1fpkt"];
3208--6107[label="0.0769231;1pkt 1fpkt"];
3208--6122[label="0.0769231;1pkt 1fpkt"];
3208--6144[label="0.0769231;1pkt 1fpkt"];
3208--6157[label="0.0769231;1pkt 1fpkt"];
3278--5582[label="1;1pkt 1fpkt"];
3899--3906[label="1;1pkt 1fpkt"];
3899--4007[label="1;1pkt 1fpkt"];
3899--4233[label="1;1pkt 1fpkt"];
3899--4252[label="1;1pkt 1fpkt"];
3899--4499[label="1;1pkt 1fpkt"];
3899--5024[label="1;1pkt 1fpkt"];
3899--5155[label="1;1pkt 1fpkt"];
3899--5362[label="0.666667;8pkt 8fpkt"];
3899--5379[label="0.666667;8pkt 8fpkt"];
3899--5440[label="1;1pkt 1fpkt"];
3899--5780[label="0.538462;7pkt 7fpkt"];
3899--6065[label="0.0289017;20pkt 20fpkt"];
3899--6081[label="0.0260116;18pkt 18fpkt"];
3899--6086[label="0.0216763;15pkt 15fpkt"];
3899--6107[label="0.0289017;20pkt 20fpkt"];
3899--6122[label="0.0260116;18pkt 18fpkt"];
3899--6127[label="0.0216763;15pkt 15fpkt"];
3899--6144[label="0.0289017;20pkt 20fpkt"];
3899--6157[label="0.0260116;18pkt 18fpkt"];
3899--6162[label="0.0216763;15pkt 15fpkt"];
5362--6065[label="0.0833333;1pkt 1fpkt"];
5362--6107[label="0.0833333;1pkt 1fpkt"];
5362--6144[label="0.0833333;1pkt 1fpkt"];
5379--6065[label="0.0833333;1pkt 1fpkt"];
5379--6081[label="0.0833333;1pkt 1fpkt"];
5379--6107[label="0.0833333;1pkt 1fpkt"];
5379--6122[label="0.0833333;1pkt 1fpkt"];
5379--6144[label="0.0833333;1pkt 1fpkt"];
5379--6157[label="0.0833333;1pkt 1fpkt"];
5780--6065[label="0.0769231;1pkt 1fpkt"];
5780--6081[label="0.0769231;1pkt 1fpkt"];
5780--6086[label="0.0769231;1pkt 1fpkt"];
5780--6107[label="0.0769231;1pkt 1fpkt"];
5780--6122[label="0.0769231;1pkt 1fpkt"];
5780--6127[label="0.0769231;1pkt 1fpkt"];
5780--6144[label="0.0769231;1pkt 1fpkt"];
5780--6157[label="0.0769231;1pkt 1fpkt"];
5780--6162[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="193.1.194.7" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
2971[label="133.224.139.96;s;99pkt 99fpkt", shape=diamond, color=yellow];
3036[label="218.189.67.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
3556[label="219.2.17.212;d;97pkt 97fpkt", shape=diamond, color=yellow];
5583[label="219.2.17.212;d;97pkt 97fpkt", shape=hexagon, color=black];
6992[label="133.224.139.96;99pkt 99fpkt", shape=pentagon, color=darkviolet];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.139.96:*, 219.2.17.212:443}[97.9798%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.3639%)&lt;BR/&gt; 80: (0.636132%)&lt;BR/&gt; 1180: (0.508906%)&lt;BR/&gt; 1179: (0.508906%)&lt;BR/&gt; 1178: (0.508906%)&gt;];
}
2971--3036[label="1;1pkt 1fpkt"];
2971--3556[label="1;97pkt 97fpkt"];
2971--4177[label="0.010101;1pkt 1fpkt"];
2971--5583[label="1;97pkt 97fpkt"];
2971--6023[label="0.010101;1pkt 1fpkt"];
2971--6992[label="1;99pkt 99fpkt"];
3036--6992[label="1;1pkt 1fpkt"];
3556--5583[label="1;97pkt 97fpkt"];
3556--6992[label="1;97pkt 97fpkt"];
5583--6992[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="219.2.17.212" dst_port="443" src_ip="133.224.139.96"/>
    </slice>
    <from sec="1194757620" usec="0"/>
    <to sec="1194757807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.82224,1.8978,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
3655[label="152.174.75.238;s;308pkt 308fpkt", shape=diamond, color=yellow];
5661[label="152.174.75.238;s;308pkt 308fpkt", shape=hexagon, color=black];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.75.238:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.6494%)&lt;BR/&gt; 35353: (1.78571%)&lt;BR/&gt; 32768: (1.13636%)&lt;BR/&gt; 32771: (0.649351%)&lt;BR/&gt; 32822: (0.487013%)&gt;];
}
3655--5661[label="1;308pkt 308fpkt"];
3655--6083[label="0.00324675;1pkt 1fpkt"];
3655--6097[label="0.00324675;1pkt 1fpkt"];
3655--6124[label="0.00324675;1pkt 1fpkt"];
3655--6136[label="0.00324675;1pkt 1fpkt"];
3655--6159[label="0.00324675;1pkt 1fpkt"];
3655--6170[label="0.00324675;1pkt 1fpkt"];
5661--6083[label="0.00324675;1pkt 1fpkt"];
5661--6097[label="0.00324675;1pkt 1fpkt"];
5661--6124[label="0.00324675;1pkt 1fpkt"];
5661--6136[label="0.00324675;1pkt 1fpkt"];
5661--6159[label="0.00324675;1pkt 1fpkt"];
5661--6170[label="0.00324675;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="152.174.75.238" src_port="53"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1751[label="48.164.136.145;d;52pkt 52fpkt", shape=diamond, color=yellow];
1752[label="152.174.212.159;s;56pkt 56fpkt", shape=diamond, color=yellow];
5353[label="152.174.212.159;s;43pkt 43fpkt", shape=hexagon, color=black];
5746[label="48.164.136.145;d;52pkt 52fpkt", shape=hexagon, color=black];
7417[label="152.174.212.159;60pkt 60fpkt", shape=pentagon, color=darkviolet];
8493[label="152.174.212.159;60pkt 60fpkt", shape=invtriangle, color=brown];
9014[label="152.174.212.159;60pkt 60fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.212.159:80, 48.164.136.145:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58213: (0.913838%)&lt;BR/&gt; 57621: (0.913838%)&lt;BR/&gt; 56784: (0.913838%)&lt;BR/&gt; 56225: (0.913838%)&gt;];
}
1751--1752[label="1;52pkt 52fpkt"];
1751--5353[label="0.930233;40pkt 40fpkt"];
1751--5746[label="1;52pkt 52fpkt"];
1751--6065[label="0.0769231;4pkt 4fpkt"];
1751--6081[label="0.0576923;3pkt 3fpkt"];
1751--6086[label="0.0384615;2pkt 2fpkt"];
1751--6107[label="0.0769231;4pkt 4fpkt"];
1751--6122[label="0.0576923;3pkt 3fpkt"];
1751--6127[label="0.0384615;2pkt 2fpkt"];
1751--6144[label="0.0769231;4pkt 4fpkt"];
1751--6157[label="0.0576923;3pkt 3fpkt"];
1751--6162[label="0.0384615;2pkt 2fpkt"];
1751--7417[label="1;52pkt 52fpkt"];
1751--8493[label="1;52pkt 52fpkt"];
1751--9014[label="1;52pkt 52fpkt"];
1752--5353[label="1;43pkt 43fpkt"];
1752--5746[label="1;52pkt 52fpkt"];
1752--6065[label="0.0714286;4pkt 4fpkt"];
1752--6081[label="0.0714286;4pkt 4fpkt"];
1752--6086[label="0.0357143;2pkt 2fpkt"];
1752--6107[label="0.0714286;4pkt 4fpkt"];
1752--6122[label="0.0714286;4pkt 4fpkt"];
1752--6127[label="0.0357143;2pkt 2fpkt"];
1752--6144[label="0.0714286;4pkt 4fpkt"];
1752--6157[label="0.0714286;4pkt 4fpkt"];
1752--6162[label="0.0357143;2pkt 2fpkt"];
1752--7417[label="1;56pkt 56fpkt"];
1752--8493[label="1;56pkt 56fpkt"];
1752--9014[label="1;56pkt 56fpkt"];
5353--5746[label="0.930233;40pkt 40fpkt"];
5353--7417[label="1;43pkt 43fpkt"];
5353--8493[label="1;43pkt 43fpkt"];
5353--9014[label="1;43pkt 43fpkt"];
5746--6065[label="0.0769231;4pkt 4fpkt"];
5746--6081[label="0.0576923;3pkt 3fpkt"];
5746--6086[label="0.0384615;2pkt 2fpkt"];
5746--6107[label="0.0769231;4pkt 4fpkt"];
5746--6122[label="0.0576923;3pkt 3fpkt"];
5746--6127[label="0.0384615;2pkt 2fpkt"];
5746--6144[label="0.0769231;4pkt 4fpkt"];
5746--6157[label="0.0576923;3pkt 3fpkt"];
5746--6162[label="0.0384615;2pkt 2fpkt"];
5746--7417[label="1;52pkt 52fpkt"];
5746--8493[label="1;52pkt 52fpkt"];
5746--9014[label="1;52pkt 52fpkt"];
7417--8493[label="1;60pkt 60fpkt"];
7417--9014[label="1;60pkt 60fpkt"];
8493--9014[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="48.164.136.145" src_ip="152.174.212.159" src_port="80"/>
    </slice>
    <from sec="1194757206" usec="0"/>
    <to sec="1194758098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698991,1.9524,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="222.33.55.40"/>
      <from sec="1194757399" usec="0"/>
      <to sec="1194758029" usec="0"/>
    </slice>
    <from sec="1194757399" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.698991,1.9524,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.25.73.251"/>
      <from sec="1194757901" usec="0"/>
      <to sec="1194757939" usec="0"/>
    </slice>
    <from sec="1194757901" usec="0"/>
    <to sec="1194757939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06495,2.02255,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.223.200.192"/>
      <from sec="1194757402" usec="0"/>
      <to sec="1194757667" usec="0"/>
    </slice>
    <from sec="1194757402" usec="0"/>
    <to sec="1194757667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
156[label="173.144.70.11;d;414pkt 414fpkt", shape=diamond, color=yellow];
1796[label="17.64.81.111;s;2pkt 2fpkt", shape=diamond, color=yellow];
1832[label="209.26.168.246;s;1pkt 1fpkt", shape=diamond, color=yellow];
1847[label="173.144.71.80;d;112pkt 112fpkt", shape=diamond, color=yellow];
2018[label="88.121.36.240;s;1pkt 1fpkt", shape=diamond, color=yellow];
2969[label="88.121.220.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
3294[label="220.152.138.103;s;1pkt 1fpkt", shape=diamond, color=yellow];
5188[label="88.121.220.223;s;1pkt 1fpkt", shape=hexagon, color=black];
5608[label="173.144.70.11;d;414pkt 414fpkt", shape=hexagon, color=black];
6300[label="88.108.158.11;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6372[label="218.20.57.19;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6463[label="5.77.144.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6559[label="209.27.111.43;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6596[label="4.18.165.47;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6662[label="220.158.89.56;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6687[label="218.30.0.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6842[label="180.161.105.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7072[label="220.220.20.110;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7097[label="208.7.76.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7145[label="3.128.94.122;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7162[label="88.106.116.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7172[label="141.142.13.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7189[label="218.28.161.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7214[label="93.70.154.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7421[label="88.2.32.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7468[label="93.71.124.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7470[label="218.21.194.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7734[label="193.222.141.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7755[label="209.26.0.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7848[label="93.67.65.228;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7865[label="93.69.93.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7882[label="218.27.164.233;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7928[label="218.26.81.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7929[label="3.100.180.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7983[label="93.69.51.252;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8050[label="88.108.158.11;1pkt 1fpkt", shape=invtriangle, color=brown];
8079[label="218.20.57.19;2pkt 2fpkt", shape=invtriangle, color=brown];
8362[label="220.220.20.110;1pkt 1fpkt", shape=invtriangle, color=brown];
8389[label="3.128.94.122;3pkt 3fpkt", shape=invtriangle, color=brown];
8397[label="88.106.116.126;1pkt 1fpkt", shape=invtriangle, color=brown];
8496[label="88.2.32.160;1pkt 1fpkt", shape=invtriangle, color=brown];
8515[label="218.21.194.166;1pkt 1fpkt", shape=invtriangle, color=brown];
8697[label="3.100.180.241;2pkt 2fpkt", shape=invtriangle, color=brown];
8770[label="218.20.57.19;1pkt 1fpkt", shape=invhouse, color=bisque];
8948[label="3.128.94.122;3pkt 3fpkt", shape=invhouse, color=bisque];
8953[label="88.106.116.126;1pkt 1fpkt", shape=invhouse, color=bisque];
9016[label="88.2.32.160;1pkt 1fpkt", shape=invhouse, color=bisque];
9030[label="218.21.194.166;1pkt 1fpkt", shape=invhouse, color=bisque];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 173.144.70.11:2069}[69.5817%]&lt;BR/&gt;{*:80, 173.144.71.80:*}[21.2928%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2069: (38.6026%)&lt;BR/&gt; 80: (11.1001%)&lt;BR/&gt; 0: (0.594648%)&lt;BR/&gt; 2022: (0.346878%)&lt;BR/&gt; 3117: (0.297324%)&gt;];
}
156--1796[label="1;2pkt 2fpkt"];
156--1832[label="1;1pkt 1fpkt"];
156--2018[label="1;1pkt 1fpkt"];
156--2969[label="1;1pkt 1fpkt"];
156--3294[label="1;1pkt 1fpkt"];
156--3491[label="0.0487805;2pkt 2fpkt"];
156--3721[label="0.0106383;1pkt 1fpkt"];
156--5188[label="1;1pkt 1fpkt"];
156--5608[label="1;414pkt 414fpkt"];
156--5767[label="0.0487805;2pkt 2fpkt"];
156--6081[label="0.00483092;2pkt 2fpkt"];
156--6122[label="0.00483092;2pkt 2fpkt"];
156--6157[label="0.00483092;2pkt 2fpkt"];
156--6300[label="1;1pkt 1fpkt"];
156--6372[label="1;2pkt 2fpkt"];
156--6463[label="1;1pkt 1fpkt"];
156--6559[label="1;13pkt 13fpkt"];
156--6596[label="1;1pkt 1fpkt"];
156--6662[label="1;2pkt 2fpkt"];
156--6687[label="1;1pkt 1fpkt"];
156--6842[label="1;1pkt 1fpkt"];
156--7072[label="1;1pkt 1fpkt"];
156--7097[label="1;1pkt 1fpkt"];
156--7162[label="1;1pkt 1fpkt"];
156--7172[label="1;1pkt 1fpkt"];
156--7189[label="1;1pkt 1fpkt"];
156--7214[label="1;1pkt 1fpkt"];
156--7216[label="0.0327869;2pkt 2fpkt"];
156--7421[label="1;1pkt 1fpkt"];
156--7468[label="1;1pkt 1fpkt"];
156--7470[label="1;1pkt 1fpkt"];
156--7734[label="1;1pkt 1fpkt"];
156--7755[label="1;1pkt 1fpkt"];
156--7848[label="1;1pkt 1fpkt"];
156--7865[label="1;1pkt 1fpkt"];
156--7882[label="1;1pkt 1fpkt"];
156--7928[label="1;1pkt 1fpkt"];
156--7929[label="1;2pkt 2fpkt"];
156--7983[label="1;1pkt 1fpkt"];
156--8050[label="1;1pkt 1fpkt"];
156--8079[label="1;2pkt 2fpkt"];
156--8362[label="1;1pkt 1fpkt"];
156--8397[label="1;1pkt 1fpkt"];
156--8496[label="1;1pkt 1fpkt"];
156--8515[label="1;1pkt 1fpkt"];
156--8697[label="1;2pkt 2fpkt"];
156--8770[label="1;1pkt 1fpkt"];
156--8953[label="1;1pkt 1fpkt"];
156--9016[label="1;1pkt 1fpkt"];
156--9030[label="1;1pkt 1fpkt"];
1796--5608[label="1;2pkt 2fpkt"];
1832--5608[label="1;1pkt 1fpkt"];
1847--2584[label="0.265625;17pkt 17fpkt"];
1847--3491[label="0.146341;6pkt 6fpkt"];
1847--3721[label="0.244681;23pkt 23fpkt"];
1847--4939[label="0.265625;17pkt 17fpkt"];
1847--5377[label="0.0625;7pkt 7fpkt"];
1847--5767[label="0.146341;6pkt 6fpkt"];
1847--7145[label="1;3pkt 3fpkt"];
1847--7216[label="0.0983607;6pkt 6fpkt"];
1847--8389[label="1;3pkt 3fpkt"];
1847--8948[label="1;3pkt 3fpkt"];
2018--5608[label="1;1pkt 1fpkt"];
2969--5188[label="1;1pkt 1fpkt"];
2969--5608[label="1;1pkt 1fpkt"];
3294--5608[label="1;1pkt 1fpkt"];
5188--5608[label="1;1pkt 1fpkt"];
5608--5767[label="0.0487805;2pkt 2fpkt"];
5608--6081[label="0.00483092;2pkt 2fpkt"];
5608--6122[label="0.00483092;2pkt 2fpkt"];
5608--6157[label="0.00483092;2pkt 2fpkt"];
5608--6300[label="1;1pkt 1fpkt"];
5608--6372[label="1;2pkt 2fpkt"];
5608--6463[label="1;1pkt 1fpkt"];
5608--6559[label="1;13pkt 13fpkt"];
5608--6596[label="1;1pkt 1fpkt"];
5608--6662[label="1;2pkt 2fpkt"];
5608--6687[label="1;1pkt 1fpkt"];
5608--6842[label="1;1pkt 1fpkt"];
5608--7072[label="1;1pkt 1fpkt"];
5608--7097[label="1;1pkt 1fpkt"];
5608--7162[label="1;1pkt 1fpkt"];
5608--7172[label="1;1pkt 1fpkt"];
5608--7189[label="1;1pkt 1fpkt"];
5608--7214[label="1;1pkt 1fpkt"];
5608--7216[label="0.0327869;2pkt 2fpkt"];
5608--7421[label="1;1pkt 1fpkt"];
5608--7468[label="1;1pkt 1fpkt"];
5608--7470[label="1;1pkt 1fpkt"];
5608--7734[label="1;1pkt 1fpkt"];
5608--7755[label="1;1pkt 1fpkt"];
5608--7848[label="1;1pkt 1fpkt"];
5608--7865[label="1;1pkt 1fpkt"];
5608--7882[label="1;1pkt 1fpkt"];
5608--7928[label="1;1pkt 1fpkt"];
5608--7929[label="1;2pkt 2fpkt"];
5608--7983[label="1;1pkt 1fpkt"];
5608--8050[label="1;1pkt 1fpkt"];
5608--8079[label="1;2pkt 2fpkt"];
5608--8362[label="1;1pkt 1fpkt"];
5608--8397[label="1;1pkt 1fpkt"];
5608--8496[label="1;1pkt 1fpkt"];
5608--8515[label="1;1pkt 1fpkt"];
5608--8697[label="1;2pkt 2fpkt"];
5608--8770[label="1;1pkt 1fpkt"];
5608--8953[label="1;1pkt 1fpkt"];
5608--9016[label="1;1pkt 1fpkt"];
5608--9030[label="1;1pkt 1fpkt"];
6300--8050[label="1;1pkt 1fpkt"];
6372--8079[label="1;2pkt 2fpkt"];
6372--8770[label="1;1pkt 1fpkt"];
7072--8362[label="1;1pkt 1fpkt"];
7145--8389[label="1;3pkt 3fpkt"];
7145--8948[label="1;3pkt 3fpkt"];
7162--8397[label="1;1pkt 1fpkt"];
7162--8953[label="1;1pkt 1fpkt"];
7421--8496[label="1;1pkt 1fpkt"];
7421--9016[label="1;1pkt 1fpkt"];
7470--8515[label="1;1pkt 1fpkt"];
7470--9030[label="1;1pkt 1fpkt"];
7929--8697[label="1;2pkt 2fpkt"];
8079--8770[label="1;1pkt 1fpkt"];
8389--8948[label="1;3pkt 3fpkt"];
8397--8953[label="1;1pkt 1fpkt"];
8496--9016[label="1;1pkt 1fpkt"];
8515--9030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.70.11" dst_port="2069"/>
      <filter dst_ip="173.144.71.80" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.75.0"/>
    </slice>
    <from sec="1194757644" usec="0"/>
    <to sec="1194758077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.144.0"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.14.35.1"/>
    </slice>
    <from sec="1194757888" usec="0"/>
    <to sec="1194758004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.216.218.1"/>
    </slice>
    <from sec="1194757628" usec="0"/>
    <to sec="1194757715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.52.2"/>
    </slice>
    <from sec="1194757355" usec="0"/>
    <to sec="1194757368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.43.103.2"/>
    </slice>
    <from sec="1194757689" usec="0"/>
    <to sec="1194757701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.6.211.2"/>
    </slice>
    <from sec="1194757697" usec="0"/>
    <to sec="1194758080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.138.32.4"/>
    </slice>
    <from sec="1194757545" usec="0"/>
    <to sec="1194757550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.35.4"/>
    </slice>
    <from sec="1194757233" usec="0"/>
    <to sec="1194757845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.41.166.6"/>
    </slice>
    <from sec="1194757956" usec="0"/>
    <to sec="1194758001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.100.161.8"/>
    </slice>
    <from sec="1194757943" usec="0"/>
    <to sec="1194757959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592345,1.89745,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1502[label="210.177.138.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
6275[label="210.177.138.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.177.138.9:56181, 193.1.194.118:995}[50%]&lt;BR/&gt;{210.177.138.9:56183, 193.1.194.118:995}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 56183: (33.3333%)&lt;BR/&gt; 56181: (16.6667%)&gt;];
}
1502--6275[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.194.118" dst_port="995" src_ip="210.177.138.9" src_port="56183"/>
      <filter dst_ip="193.1.194.118" dst_port="995" src_ip="210.177.138.9" src_port="56181"/>
    </slice>
    <from sec="1194757369" usec="0"/>
    <to sec="1194757387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.1.157.9"/>
    </slice>
    <from sec="1194757544" usec="0"/>
    <to sec="1194757594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
2381[label="133.224.159.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
2382[label="57.8.164.88;d;2pkt 2fpkt", shape=diamond, color=yellow];
4799[label="133.224.159.9;s;2pkt 2fpkt", shape=hexagon, color=black];
6277[label="133.224.159.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8039[label="133.224.159.9;1pkt 1fpkt", shape=invtriangle, color=brown];
8744[label="133.224.159.9;2pkt 2fpkt", shape=invhouse, color=bisque];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.146.82:110, 57.8.164.88:1354}[33.3333%]&lt;BR/&gt;{133.224.159.9:995, 57.8.164.90:4233}[33.3333%]&lt;BR/&gt;{133.224.159.9:995, 57.8.164.88:1328}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (45%)&lt;BR/&gt; 1328: (30%)&lt;BR/&gt; 4233: (15%)&lt;BR/&gt; 1354: (5%)&lt;BR/&gt; 110: (5%)&gt;];
}
2381--2382[label="0.5;1pkt 1fpkt"];
2381--4799[label="1;2pkt 2fpkt"];
2381--6277[label="1;1pkt 1fpkt"];
2381--8039[label="1;1pkt 1fpkt"];
2381--8744[label="1;2pkt 2fpkt"];
2382--4799[label="0.5;1pkt 1fpkt"];
2382--6277[label="1;1pkt 1fpkt"];
2382--8039[label="1;1pkt 1fpkt"];
2382--8744[label="0.5;1pkt 1fpkt"];
4799--6277[label="1;1pkt 1fpkt"];
4799--8039[label="1;1pkt 1fpkt"];
4799--8744[label="1;2pkt 2fpkt"];
6277--8039[label="1;1pkt 1fpkt"];
6277--8744[label="1;1pkt 1fpkt"];
8039--8744[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="57.8.164.88" dst_port="1328" src_ip="133.224.159.9" src_port="995"/>
      <filter dst_ip="57.8.164.90" dst_port="4233" src_ip="133.224.159.9" src_port="995"/>
      <filter dst_ip="57.8.164.88" dst_port="1354" src_ip="129.60.146.82" src_port="110"/>
    </slice>
    <from sec="1194757544" usec="0"/>
    <to sec="1194757567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.11.180.9"/>
    </slice>
    <from sec="1194757571" usec="0"/>
    <to sec="1194757595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.32.144.10"/>
    </slice>
    <from sec="1194757375" usec="0"/>
    <to sec="1194757845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.178.209.10"/>
    </slice>
    <from sec="1194757951" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.94.104.11"/>
    </slice>
    <from sec="1194757779" usec="0"/>
    <to sec="1194757790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.11.178.11"/>
    </slice>
    <from sec="1194757221" usec="0"/>
    <to sec="1194757925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.209.11"/>
    </slice>
    <from sec="1194757524" usec="0"/>
    <to sec="1194757566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.223.24.12"/>
    </slice>
    <from sec="1194757495" usec="0"/>
    <to sec="1194757515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.197.192.12"/>
    </slice>
    <from sec="1194757693" usec="0"/>
    <to sec="1194757706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.209.12"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.1.65.13"/>
    </slice>
    <from sec="1194757887" usec="0"/>
    <to sec="1194757918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.35.197.13"/>
    </slice>
    <from sec="1194757898" usec="0"/>
    <to sec="1194757908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.30.82.14"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.44.151.14"/>
    </slice>
    <from sec="1194757606" usec="0"/>
    <to sec="1194757611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.223.146.15"/>
    </slice>
    <from sec="1194757483" usec="0"/>
    <to sec="1194757770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.142.247.15"/>
    </slice>
    <from sec="1194757305" usec="0"/>
    <to sec="1194757803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.50.16"/>
    </slice>
    <from sec="1194757573" usec="0"/>
    <to sec="1194757673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592345,1.89745,504,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
3472[label="210.177.251.16;s;80pkt 80fpkt", shape=diamond, color=yellow];
6343[label="210.177.251.16;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.177.251.16:80, 129.180.62.125:*}[32.9412%]&lt;BR/&gt;{210.177.251.16:443, 129.180.90.169:*}[25.8824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.3636%)&lt;BR/&gt; 443: (13.6364%)&lt;BR/&gt; 64234: (0.606061%)&lt;BR/&gt; 54252: (0.606061%)&lt;BR/&gt; 54251: (0.606061%)&gt;];
}
3472--6065[label="0.0625;5pkt 5fpkt"];
3472--6081[label="0.0125;1pkt 1fpkt"];
3472--6086[label="0.0375;3pkt 3fpkt"];
3472--6107[label="0.0625;5pkt 5fpkt"];
3472--6122[label="0.0125;1pkt 1fpkt"];
3472--6127[label="0.0375;3pkt 3fpkt"];
3472--6144[label="0.0625;5pkt 5fpkt"];
3472--6157[label="0.0125;1pkt 1fpkt"];
3472--6162[label="0.0375;3pkt 3fpkt"];
3472--6343[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="129.180.62.125" src_ip="210.177.251.16" src_port="80"/>
      <filter dst_ip="129.180.90.169" src_ip="210.177.251.16" src_port="443"/>
    </slice>
    <from sec="1194757206" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.247.3.17"/>
    </slice>
    <from sec="1194757377" usec="0"/>
    <to sec="1194757496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.77.18.17"/>
    </slice>
    <from sec="1194757385" usec="0"/>
    <to sec="1194757457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.130.18"/>
    </slice>
    <from sec="1194757219" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.69.236.18"/>
    </slice>
    <from sec="1194757278" usec="0"/>
    <to sec="1194757475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.128.40.19"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.130.45.20"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.174.180.21"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.119.43.23"/>
    </slice>
    <from sec="1194757256" usec="0"/>
    <to sec="1194757373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.144.64.25"/>
    </slice>
    <from sec="1194757494" usec="0"/>
    <to sec="1194758096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.14.78.25"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.238.92.25"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.202.25"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.139.131.26"/>
    </slice>
    <from sec="1194757847" usec="0"/>
    <to sec="1194758083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.167.65.28"/>
    </slice>
    <from sec="1194757510" usec="0"/>
    <to sec="1194757634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.61.73.28"/>
    </slice>
    <from sec="1194757691" usec="0"/>
    <to sec="1194757737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.222.156.28"/>
    </slice>
    <from sec="1194757592" usec="0"/>
    <to sec="1194757615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.14.78.29"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.18.77.30"/>
    </slice>
    <from sec="1194757253" usec="0"/>
    <to sec="1194757300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.108.169.34"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592345,1.89745,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
3501[label="129.60.29.35;s;17pkt 17fpkt", shape=diamond, color=yellow];
6494[label="129.60.29.35;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.29.35:80, 48.164.142.249:*}[35.2941%]&lt;BR/&gt;{129.60.29.35:143, 218.189.181.110:*}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.2941%)&lt;BR/&gt; 143: (14.7059%)&lt;BR/&gt; 62347: (2.94118%)&lt;BR/&gt; 61758: (2.94118%)&lt;BR/&gt; 60561: (2.94118%)&gt;];
}
3501--6081[label="0.117647;2pkt 2fpkt"];
3501--6122[label="0.117647;2pkt 2fpkt"];
3501--6157[label="0.117647;2pkt 2fpkt"];
3501--6494[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="48.164.142.249" src_ip="129.60.29.35" src_port="80"/>
      <filter dst_ip="218.189.181.110" src_ip="129.60.29.35" src_port="143"/>
    </slice>
    <from sec="1194757234" usec="0"/>
    <to sec="1194757937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.144.90.35"/>
    </slice>
    <from sec="1194757266" usec="0"/>
    <to sec="1194757323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.130.243.36"/>
    </slice>
    <from sec="1194757586" usec="0"/>
    <to sec="1194757649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.221.209.37"/>
    </slice>
    <from sec="1194758072" usec="0"/>
    <to sec="1194758077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.8.132.41"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.162.42"/>
    </slice>
    <from sec="1194757964" usec="0"/>
    <to sec="1194758003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.209.42"/>
    </slice>
    <from sec="1194757729" usec="0"/>
    <to sec="1194757743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.129.203.43"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.60.208.43"/>
    </slice>
    <from sec="1194757222" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.135.11.45"/>
    </slice>
    <from sec="1194757216" usec="0"/>
    <to sec="1194758098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.235.24.45"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.112.45"/>
    </slice>
    <from sec="1194757707" usec="0"/>
    <to sec="1194757732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.60.40.47"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.151.161.48"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="61.206.221.49"/>
    </slice>
    <from sec="1194757675" usec="0"/>
    <to sec="1194757690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.12.77.50"/>
    </slice>
    <from sec="1194757553" usec="0"/>
    <to sec="1194757682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.229.79.53"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.137.117.53"/>
    </slice>
    <from sec="1194757493" usec="0"/>
    <to sec="1194757856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.23.218.53"/>
    </slice>
    <from sec="1194757930" usec="0"/>
    <to sec="1194757935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.192.157.56"/>
    </slice>
    <from sec="1194757515" usec="0"/>
    <to sec="1194757569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.239.129.58"/>
    </slice>
    <from sec="1194758076" usec="0"/>
    <to sec="1194758077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.139.58"/>
    </slice>
    <from sec="1194757294" usec="0"/>
    <to sec="1194757301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.169.162.59"/>
    </slice>
    <from sec="1194757244" usec="0"/>
    <to sec="1194757438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.234.0.60"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.153.24.60"/>
    </slice>
    <from sec="1194757457" usec="0"/>
    <to sec="1194757514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.56.60"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.222.62"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.4.10.63"/>
    </slice>
    <from sec="1194757460" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.35.195.63"/>
    </slice>
    <from sec="1194757690" usec="0"/>
    <to sec="1194757702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.48.19.65"/>
    </slice>
    <from sec="1194757485" usec="0"/>
    <to sec="1194757565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.209.131.65"/>
    </slice>
    <from sec="1194757491" usec="0"/>
    <to sec="1194758091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.27.176.66"/>
    </slice>
    <from sec="1194757942" usec="0"/>
    <to sec="1194758098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.214.102.68"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89341,1.82525,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
2847[label="173.144.68.53;d;21pkt 21fpkt", shape=diamond, color=yellow];
3289[label="216.128.146.68;s;7pkt 7fpkt", shape=diamond, color=yellow];
5342[label="173.144.68.53;d;21pkt 21fpkt", shape=hexagon, color=black];
6761[label="216.128.146.68;7pkt 7fpkt", shape=pentagon, color=darkviolet];
6821[label="216.128.146.76;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8228[label="216.128.146.68;7pkt 7fpkt", shape=invtriangle, color=brown];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.128.146.68:80, 173.144.68.53:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0149%)&lt;BR/&gt; 33190: (3.73134%)&lt;BR/&gt; 33189: (3.73134%)&lt;BR/&gt; 33179: (3.73134%)&lt;BR/&gt; 33178: (3.73134%)&gt;];
}
2847--2881[label="0.333333;1pkt 1fpkt"];
2847--3289[label="1;7pkt 7fpkt"];
2847--5103[label="0.190476;4pkt 4fpkt"];
2847--5342[label="1;21pkt 21fpkt"];
2847--5773[label="0.333333;1pkt 1fpkt"];
2847--6761[label="1;7pkt 7fpkt"];
2847--6821[label="1;4pkt 4fpkt"];
2847--8228[label="1;7pkt 7fpkt"];
3289--5342[label="1;7pkt 7fpkt"];
3289--6761[label="1;7pkt 7fpkt"];
3289--8228[label="1;7pkt 7fpkt"];
5342--5773[label="0.333333;1pkt 1fpkt"];
5342--6761[label="1;7pkt 7fpkt"];
5342--6821[label="1;4pkt 4fpkt"];
5342--8228[label="1;7pkt 7fpkt"];
6761--8228[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.68.53" src_ip="216.128.146.68" src_port="80"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.220.145.70"/>
    </slice>
    <from sec="1194757650" usec="0"/>
    <to sec="1194757680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.18.12.71"/>
    </slice>
    <from sec="1194757250" usec="0"/>
    <to sec="1194757310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.214.62.75"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.22.116.75"/>
    </slice>
    <from sec="1194757502" usec="0"/>
    <to sec="1194757517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.174.243.78"/>
    </slice>
    <from sec="1194757337" usec="0"/>
    <to sec="1194757424" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.242.99.79"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
6849[label="62.50.89.80;47pkt 47fpkt", shape=pentagon, color=darkviolet];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{62.50.89.80:80, 174.57.178.13:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2765: (1.06383%)&lt;BR/&gt; 2553: (1.06383%)&lt;BR/&gt; 2551: (1.06383%)&lt;BR/&gt; 2549: (1.06383%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="174.57.178.13" src_ip="62.50.89.80" src_port="80"/>
    </slice>
    <from sec="1194757423" usec="0"/>
    <to sec="1194757942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.69.179.81"/>
    </slice>
    <from sec="1194757733" usec="0"/>
    <to sec="1194757737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.172.216.81"/>
    </slice>
    <from sec="1194757658" usec="0"/>
    <to sec="1194757762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.196.33.82"/>
    </slice>
    <from sec="1194757551" usec="0"/>
    <to sec="1194757566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.139.9.83"/>
    </slice>
    <from sec="1194757412" usec="0"/>
    <to sec="1194757465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.48.84"/>
    </slice>
    <from sec="1194757246" usec="0"/>
    <to sec="1194757930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.45.22.87"/>
    </slice>
    <from sec="1194757600" usec="0"/>
    <to sec="1194757612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.209.61.88"/>
    </slice>
    <from sec="1194757218" usec="0"/>
    <to sec="1194758090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.152.41.90"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.221.77.91"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.153.208.91"/>
    </slice>
    <from sec="1194757401" usec="0"/>
    <to sec="1194757800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="63.36.135.92"/>
    </slice>
    <from sec="1194757356" usec="0"/>
    <to sec="1194757498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.88.194.92"/>
    </slice>
    <from sec="1194757487" usec="0"/>
    <to sec="1194757608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.235.33.94"/>
    </slice>
    <from sec="1194757536" usec="0"/>
    <to sec="1194757550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.104.100.94"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1747[label="129.33.172.94;s;75pkt 75fpkt", shape=diamond, color=yellow];
2852[label="129.33.172.9;s;258pkt 258fpkt", shape=diamond, color=yellow];
3161[label="48.164.129.228;d;17pkt 17fpkt", shape=diamond, color=yellow];
3773[label="218.189.184.45;d;241pkt 241fpkt", shape=diamond, color=yellow];
5348[label="129.33.172.9;s;69pkt 69fpkt", shape=hexagon, color=black];
5822[label="218.189.184.45;d;241pkt 241fpkt", shape=hexagon, color=black];
6279[label="129.33.172.9;263pkt 263fpkt", shape=pentagon, color=darkviolet];
6980[label="129.33.172.94;102pkt 102fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.172.9:*, 218.189.184.45:53}[47.9564%]&lt;BR/&gt;{129.33.172.94:*, *:80}[27.7929%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (34.4787%)&lt;BR/&gt; 80: (14.7709%)&lt;BR/&gt; 25: (0.750395%)&lt;BR/&gt; 5086: (0.276461%)&lt;BR/&gt; 64389: (0.157978%)&gt;];
}
1747--3773[label="0.853333;64pkt 64fpkt"];
1747--4173[label="0.0133333;1pkt 1fpkt"];
1747--5822[label="0.853333;64pkt 64fpkt"];
1747--6084[label="0.36;27pkt 27fpkt"];
1747--6094[label="0.173333;13pkt 13fpkt"];
1747--6125[label="0.36;27pkt 27fpkt"];
1747--6134[label="0.173333;13pkt 13fpkt"];
1747--6160[label="0.36;27pkt 27fpkt"];
1747--6168[label="0.173333;13pkt 13fpkt"];
1747--6980[label="1;75pkt 75fpkt"];
2852--3161[label="1;17pkt 17fpkt"];
2852--3436[label="0.0117647;2pkt 2fpkt"];
2852--3661[label="0.0353982;4pkt 4fpkt"];
2852--3773[label="0.73029;176pkt 176fpkt"];
2852--3978[label="0.0124224;2pkt 2fpkt"];
2852--5033[label="0.016129;4pkt 4fpkt"];
2852--5348[label="1;69pkt 69fpkt"];
2852--5822[label="0.73029;176pkt 176fpkt"];
2852--6065[label="0.00775194;2pkt 2fpkt"];
2852--6081[label="0.00775194;2pkt 2fpkt"];
2852--6082[label="0.00775194;2pkt 2fpkt"];
2852--6083[label="0.325581;84pkt 84fpkt"];
2852--6086[label="0.00387597;1pkt 1fpkt"];
2852--6107[label="0.00775194;2pkt 2fpkt"];
2852--6122[label="0.00775194;2pkt 2fpkt"];
2852--6123[label="0.00775194;2pkt 2fpkt"];
2852--6124[label="0.325581;84pkt 84fpkt"];
2852--6127[label="0.00387597;1pkt 1fpkt"];
2852--6144[label="0.00775194;2pkt 2fpkt"];
2852--6157[label="0.00775194;2pkt 2fpkt"];
2852--6158[label="0.00775194;2pkt 2fpkt"];
2852--6159[label="0.325581;84pkt 84fpkt"];
2852--6162[label="0.00387597;1pkt 1fpkt"];
2852--6279[label="0.996124;257pkt 257fpkt"];
3161--5348[label="0.764706;13pkt 13fpkt"];
3161--6065[label="0.117647;2pkt 2fpkt"];
3161--6081[label="0.117647;2pkt 2fpkt"];
3161--6086[label="0.0588235;1pkt 1fpkt"];
3161--6107[label="0.117647;2pkt 2fpkt"];
3161--6122[label="0.117647;2pkt 2fpkt"];
3161--6127[label="0.0588235;1pkt 1fpkt"];
3161--6144[label="0.117647;2pkt 2fpkt"];
3161--6157[label="0.117647;2pkt 2fpkt"];
3161--6162[label="0.0588235;1pkt 1fpkt"];
3161--6279[label="0.941176;16pkt 16fpkt"];
3773--5145[label="0.00952381;1pkt 1fpkt"];
3773--5822[label="1;241pkt 241fpkt"];
3773--6083[label="0.344398;83pkt 83fpkt"];
3773--6084[label="0.112033;27pkt 27fpkt"];
3773--6094[label="0.0497925;12pkt 12fpkt"];
3773--6124[label="0.344398;83pkt 83fpkt"];
3773--6125[label="0.112033;27pkt 27fpkt"];
3773--6134[label="0.0497925;12pkt 12fpkt"];
3773--6159[label="0.344398;83pkt 83fpkt"];
3773--6160[label="0.112033;27pkt 27fpkt"];
3773--6168[label="0.0497925;12pkt 12fpkt"];
3773--6279[label="0.73029;176pkt 176fpkt"];
3773--6980[label="0.627451;64pkt 64fpkt"];
5348--6279[label="0.985507;68pkt 68fpkt"];
5822--6083[label="0.344398;83pkt 83fpkt"];
5822--6084[label="0.112033;27pkt 27fpkt"];
5822--6094[label="0.0497925;12pkt 12fpkt"];
5822--6124[label="0.344398;83pkt 83fpkt"];
5822--6125[label="0.112033;27pkt 27fpkt"];
5822--6134[label="0.0497925;12pkt 12fpkt"];
5822--6159[label="0.344398;83pkt 83fpkt"];
5822--6160[label="0.112033;27pkt 27fpkt"];
5822--6168[label="0.0497925;12pkt 12fpkt"];
5822--6279[label="0.73029;176pkt 176fpkt"];
5822--6980[label="0.627451;64pkt 64fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="129.33.172.94"/>
      <filter dst_ip="218.189.184.45" dst_port="53" src_ip="129.33.172.9"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.16.66.95"/>
    </slice>
    <from sec="1194757600" usec="0"/>
    <to sec="1194757842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709223,1.87872,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
3013[label="209.192.59.20;d;277pkt 277fpkt", shape=diamond, color=yellow];
3254[label="129.33.82.95;s;348pkt 348fpkt", shape=diamond, color=yellow];
6984[label="129.33.82.95;402pkt 402fpkt", shape=pentagon, color=darkviolet];
8323[label="129.33.82.95;402pkt 402fpkt", shape=invtriangle, color=brown];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.82.95:*, 209.192.59.20:80}[82.0896%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64069: (0.139958%)&lt;BR/&gt; 64053: (0.139958%)&lt;BR/&gt; 64045: (0.139958%)&lt;BR/&gt; 64026: (0.139958%)&gt;];
}
3013--3254[label="1;277pkt 277fpkt"];
3013--6984[label="1;277pkt 277fpkt"];
3013--8323[label="1;277pkt 277fpkt"];
3254--3513[label="0.016129;2pkt 2fpkt"];
3254--3979[label="0.00956938;2pkt 2fpkt"];
3254--4545[label="0.00574713;2pkt 2fpkt"];
3254--5557[label="0.0186916;2pkt 2fpkt"];
3254--5625[label="0.0143678;5pkt 5fpkt"];
3254--6984[label="1;348pkt 348fpkt"];
3254--8323[label="1;348pkt 348fpkt"];
6984--8323[label="1;402pkt 402fpkt"];
</description>
    <slice>
      <filter dst_ip="209.192.59.20" dst_port="80" src_ip="129.33.82.95"/>
    </slice>
    <from sec="1194757350" usec="0"/>
    <to sec="1194757991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.122.55.97"/>
    </slice>
    <from sec="1194757793" usec="0"/>
    <to sec="1194757825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.248.79.97"/>
    </slice>
    <from sec="1194757313" usec="0"/>
    <to sec="1194757340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.202.98"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.192.91.101"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.221.69.102"/>
    </slice>
    <from sec="1194757621" usec="0"/>
    <to sec="1194757631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.174.88.102"/>
    </slice>
    <from sec="1194757637" usec="0"/>
    <to sec="1194757666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.108.98.102"/>
    </slice>
    <from sec="1194757912" usec="0"/>
    <to sec="1194757960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.67.99.102"/>
    </slice>
    <from sec="1194757321" usec="0"/>
    <to sec="1194757882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.0.233.102"/>
    </slice>
    <from sec="1194757250" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.123.40.105"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.91.46.105"/>
    </slice>
    <from sec="1194757551" usec="0"/>
    <to sec="1194757599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.223.49.105"/>
    </slice>
    <from sec="1194757618" usec="0"/>
    <to sec="1194757659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.8.72.105"/>
    </slice>
    <from sec="1194757263" usec="0"/>
    <to sec="1194758044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.144.125.105"/>
    </slice>
    <from sec="1194757209" usec="0"/>
    <to sec="1194758094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.242.23.106"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.106.192.106"/>
    </slice>
    <from sec="1194757453" usec="0"/>
    <to sec="1194757456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.244.32.108"/>
    </slice>
    <from sec="1194757266" usec="0"/>
    <to sec="1194757958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.125.80.110"/>
    </slice>
    <from sec="1194757611" usec="0"/>
    <to sec="1194757969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.118.131.110"/>
    </slice>
    <from sec="1194757418" usec="0"/>
    <to sec="1194757450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.81.224.110"/>
    </slice>
    <from sec="1194757630" usec="0"/>
    <to sec="1194757636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.42.110.112"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.44.169.113"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.210.172.113"/>
    </slice>
    <from sec="1194757603" usec="0"/>
    <to sec="1194757620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.168.124.116"/>
    </slice>
    <from sec="1194758069" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.45.176.116"/>
    </slice>
    <from sec="1194758045" usec="0"/>
    <to sec="1194758054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.111.184.117"/>
    </slice>
    <from sec="1194757640" usec="0"/>
    <to sec="1194757649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.19.138.118"/>
    </slice>
    <from sec="1194757614" usec="0"/>
    <to sec="1194757627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="170.205.37.120"/>
    </slice>
    <from sec="1194757897" usec="0"/>
    <to sec="1194758041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.26.52.120"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194757211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.46.81.120"/>
    </slice>
    <from sec="1194757741" usec="0"/>
    <to sec="1194757775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.225.22.123"/>
    </slice>
    <from sec="1194757862" usec="0"/>
    <to sec="1194757874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.34.4.124"/>
    </slice>
    <from sec="1194757870" usec="0"/>
    <to sec="1194758016" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.213.124"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.34.86.127"/>
    </slice>
    <from sec="1194757593" usec="0"/>
    <to sec="1194757654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.803776,1.84452,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
376[label="3.112.79.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
377[label="192.19.160.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
567[label="133.224.68.128;s;114pkt 114fpkt", shape=diamond, color=yellow];
4574[label="192.19.160.185;s;1pkt 1fpkt", shape=hexagon, color=black];
4830[label="3.112.79.93;d;2pkt 2fpkt", shape=hexagon, color=black];
7176[label="133.224.68.128;122pkt 122fpkt", shape=pentagon, color=darkviolet];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.68.128:28213, *:*}[91.0569%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28213: (44.6281%)&lt;BR/&gt; 80: (2.47934%)&lt;BR/&gt; 12250: (1.65289%)&lt;BR/&gt; 2848: (0.826446%)&lt;BR/&gt; 1318: (0.826446%)&gt;];
}
376--377[label="1;1pkt 1fpkt"];
376--567[label="0.5;1pkt 1fpkt"];
376--4574[label="1;1pkt 1fpkt"];
376--4830[label="1;2pkt 2fpkt"];
376--7176[label="0.5;1pkt 1fpkt"];
377--4574[label="1;1pkt 1fpkt"];
377--4830[label="1;1pkt 1fpkt"];
567--953[label="0.0277778;2pkt 2fpkt"];
567--1742[label="0.0175439;2pkt 2fpkt"];
567--4065[label="0.0322581;2pkt 2fpkt"];
567--4830[label="0.5;1pkt 1fpkt"];
567--5124[label="0.0175439;2pkt 2fpkt"];
567--5967[label="0.0175439;2pkt 2fpkt"];
567--6073[label="0.00877193;1pkt 1fpkt"];
567--6084[label="0.00877193;1pkt 1fpkt"];
567--6086[label="0.00877193;1pkt 1fpkt"];
567--6115[label="0.00877193;1pkt 1fpkt"];
567--6125[label="0.00877193;1pkt 1fpkt"];
567--6127[label="0.00877193;1pkt 1fpkt"];
567--6150[label="0.00877193;1pkt 1fpkt"];
567--6160[label="0.00877193;1pkt 1fpkt"];
567--6162[label="0.00877193;1pkt 1fpkt"];
567--7176[label="1;114pkt 114fpkt"];
4574--4830[label="1;1pkt 1fpkt"];
4830--7176[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.224.68.128" src_port="28213"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.42.63.129"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758035" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.213.73.129"/>
    </slice>
    <from sec="1194757789" usec="0"/>
    <to sec="1194757792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.7.72.130"/>
    </slice>
    <from sec="1194757560" usec="0"/>
    <to sec="1194757591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.133.129.130"/>
    </slice>
    <from sec="1194757443" usec="0"/>
    <to sec="1194757507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709223,1.87872,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
3698[label="192.19.37.131;s;28pkt 28fpkt", shape=diamond, color=yellow];
7201[label="192.19.37.131;28pkt 28fpkt", shape=pentagon, color=darkviolet];
8411[label="192.19.37.131;28pkt 28fpkt", shape=invtriangle, color=brown];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.19.37.131:29837, *:*}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 29837: (42.8571%)&lt;BR/&gt; 6348: (5.35714%)&lt;BR/&gt; 6346: (3.57143%)&lt;BR/&gt; 50773: (1.78571%)&lt;BR/&gt; 49962: (1.78571%)&gt;];
}
3698--7201[label="1;28pkt 28fpkt"];
3698--8411[label="1;28pkt 28fpkt"];
7201--8411[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="192.19.37.131" src_port="29837"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.146.157.132"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.56.225.132"/>
    </slice>
    <from sec="1194757740" usec="0"/>
    <to sec="1194757798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.172.133"/>
    </slice>
    <from sec="1194757226" usec="0"/>
    <to sec="1194758094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.149.174.133"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
7237[label="129.33.181.134;272pkt 272fpkt", shape=pentagon, color=darkviolet];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.181.134:28622, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28622: (50%)&lt;BR/&gt; 44594: (0.367647%)&lt;BR/&gt; 13197: (0.367647%)&lt;BR/&gt; 65053: (0.183824%)&lt;BR/&gt; 64414: (0.183824%)&gt;];
}
</description>
    <slice>
      <filter src_ip="129.33.181.134" src_port="28622"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.222.225.135"/>
    </slice>
    <from sec="1194757550" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.22.204.136"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.17.103.138"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.4.80.139"/>
    </slice>
    <from sec="1194757610" usec="0"/>
    <to sec="1194757614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.209.18.140"/>
    </slice>
    <from sec="1194757227" usec="0"/>
    <to sec="1194758045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.16.234.140"/>
    </slice>
    <from sec="1194757593" usec="0"/>
    <to sec="1194757615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.12.41.141"/>
    </slice>
    <from sec="1194757400" usec="0"/>
    <to sec="1194757547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.233.99.141"/>
    </slice>
    <from sec="1194757506" usec="0"/>
    <to sec="1194757517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.104.210.143"/>
    </slice>
    <from sec="1194757352" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.80.95.144"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.210.72.145"/>
    </slice>
    <from sec="1194757755" usec="0"/>
    <to sec="1194757770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.28.16.146"/>
    </slice>
    <from sec="1194757241" usec="0"/>
    <to sec="1194757717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.44.160.146"/>
    </slice>
    <from sec="1194757647" usec="0"/>
    <to sec="1194757732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.117.81.148"/>
    </slice>
    <from sec="1194757496" usec="0"/>
    <to sec="1194757516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.217.99.148"/>
    </slice>
    <from sec="1194757322" usec="0"/>
    <to sec="1194758073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.158.202.152"/>
    </slice>
    <from sec="1194757697" usec="0"/>
    <to sec="1194757746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.172.49.153"/>
    </slice>
    <from sec="1194757593" usec="0"/>
    <to sec="1194757879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.1.60.154"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.173.87.154"/>
    </slice>
    <from sec="1194757783" usec="0"/>
    <to sec="1194757799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.156.163.154"/>
    </slice>
    <from sec="1194757740" usec="0"/>
    <to sec="1194757830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.18.108.155"/>
    </slice>
    <from sec="1194757900" usec="0"/>
    <to sec="1194758022" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.128.12.163"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.54.45.163"/>
    </slice>
    <from sec="1194757216" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.68.66.163"/>
    </slice>
    <from sec="1194757617" usec="0"/>
    <to sec="1194757651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
199[label="215.72.123.163;s;1pkt 1fpkt", shape=diamond, color=yellow];
200[label="129.60.168.86;d;200pkt 200fpkt", shape=diamond, color=yellow];
384[label="36.121.194.255;s;1pkt 1fpkt", shape=diamond, color=yellow];
1053[label="2.50.134.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
1585[label="33.169.54.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
3928[label="36.121.194.255;s;1pkt 1fpkt", shape=hexagon, color=black];
4356[label="33.169.54.193;s;1pkt 1fpkt", shape=hexagon, color=black];
4549[label="129.60.168.86;d;88pkt 88fpkt", shape=hexagon, color=black];
5062[label="2.50.134.23;s;1pkt 1fpkt", shape=hexagon, color=black];
6408[label="2.50.134.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7449[label="215.72.123.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8506[label="215.72.123.163;1pkt 1fpkt", shape=invtriangle, color=brown];
9023[label="215.72.123.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.60.168.86:61745}[92.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61745: (43.311%)&lt;BR/&gt; 4672: (9.0301%)&lt;BR/&gt; 10546: (1.33779%)&lt;BR/&gt; 6346: (1.17057%)&lt;BR/&gt; 46461: (1.00334%)&gt;];
}
199--200[label="1;1pkt 1fpkt"];
199--4549[label="1;1pkt 1fpkt"];
199--7449[label="1;1pkt 1fpkt"];
199--8506[label="1;1pkt 1fpkt"];
199--9023[label="1;1pkt 1fpkt"];
200--384[label="1;1pkt 1fpkt"];
200--1053[label="1;1pkt 1fpkt"];
200--1585[label="1;1pkt 1fpkt"];
200--3928[label="1;1pkt 1fpkt"];
200--4356[label="1;1pkt 1fpkt"];
200--4549[label="1;88pkt 88fpkt"];
200--5062[label="1;1pkt 1fpkt"];
200--6408[label="1;1pkt 1fpkt"];
200--7449[label="1;1pkt 1fpkt"];
200--8506[label="1;1pkt 1fpkt"];
200--9023[label="1;1pkt 1fpkt"];
384--3928[label="1;1pkt 1fpkt"];
384--4549[label="1;1pkt 1fpkt"];
1053--4549[label="1;1pkt 1fpkt"];
1053--5062[label="1;1pkt 1fpkt"];
1053--6408[label="1;1pkt 1fpkt"];
1585--4356[label="1;1pkt 1fpkt"];
1585--4549[label="1;1pkt 1fpkt"];
3928--4549[label="1;1pkt 1fpkt"];
4356--4549[label="1;1pkt 1fpkt"];
4549--5062[label="1;1pkt 1fpkt"];
4549--6408[label="1;1pkt 1fpkt"];
4549--7449[label="1;1pkt 1fpkt"];
4549--8506[label="1;1pkt 1fpkt"];
4549--9023[label="1;1pkt 1fpkt"];
5062--6408[label="1;1pkt 1fpkt"];
7449--8506[label="1;1pkt 1fpkt"];
7449--9023[label="1;1pkt 1fpkt"];
8506--9023[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.60.168.86" dst_port="61745"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.89.147.166"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.158.212.167"/>
    </slice>
    <from sec="1194757855" usec="0"/>
    <to sec="1194757860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.218.46.168"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194757997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.180.90.169"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.91.103.170"/>
    </slice>
    <from sec="1194757536" usec="0"/>
    <to sec="1194757568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.112.176.170"/>
    </slice>
    <from sec="1194757918" usec="0"/>
    <to sec="1194757924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.33.220.170"/>
    </slice>
    <from sec="1194757396" usec="0"/>
    <to sec="1194757529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.197.239.170"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.10.70.171"/>
    </slice>
    <from sec="1194757614" usec="0"/>
    <to sec="1194757721" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.225.17.173"/>
    </slice>
    <from sec="1194757369" usec="0"/>
    <to sec="1194757401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.210.135.174"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.133.215.174"/>
    </slice>
    <from sec="1194757362" usec="0"/>
    <to sec="1194757524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.217.29.176"/>
    </slice>
    <from sec="1194757273" usec="0"/>
    <to sec="1194757304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.23.163.176"/>
    </slice>
    <from sec="1194757306" usec="0"/>
    <to sec="1194758060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.32.2.177"/>
    </slice>
    <from sec="1194757752" usec="0"/>
    <to sec="1194757865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.37.80.180"/>
    </slice>
    <from sec="1194757771" usec="0"/>
    <to sec="1194757818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.165.180"/>
    </slice>
    <from sec="1194757698" usec="0"/>
    <to sec="1194757773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.33.112.181"/>
    </slice>
    <from sec="1194758072" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="49.151.121.181"/>
    </slice>
    <from sec="1194757732" usec="0"/>
    <to sec="1194757745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.20.130.181"/>
    </slice>
    <from sec="1194757486" usec="0"/>
    <to sec="1194757518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.144.181"/>
    </slice>
    <from sec="1194757755" usec="0"/>
    <to sec="1194757759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29102,2.00572,999,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_403{
style=filled;
color=gray75;
55[label="221.28.16.182s;301pkt 301fpkt", shape=rectangle, color=red];
7587[label="221.28.16.182;301pkt 301fpkt", shape=pentagon, color=darkviolet];
stat403[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.28.16.182:35935, *:1026}[54.8173%]&lt;BR/&gt;{221.28.16.182:35935, *:1027}[45.1827%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35935: (50%)&lt;BR/&gt; 1026: (27.4086%)&lt;BR/&gt; 1027: (22.5914%)&gt;];
}
55--7587[label="1;301pkt 301fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="221.28.16.182" src_port="35935"/>
      <filter dst_port="1027" src_ip="221.28.16.182" src_port="35935"/>
    </slice>
    <from sec="1194757747" usec="0"/>
    <to sec="1194757750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.125.83.182"/>
    </slice>
    <from sec="1194757522" usec="0"/>
    <to sec="1194757584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.86.42.183"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.35.132.184"/>
    </slice>
    <from sec="1194757556" usec="0"/>
    <to sec="1194757560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.172.217.184"/>
    </slice>
    <from sec="1194757459" usec="0"/>
    <to sec="1194757657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.25.248.185"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.181.5.189"/>
    </slice>
    <from sec="1194757822" usec="0"/>
    <to sec="1194757997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.239.85.189"/>
    </slice>
    <from sec="1194757706" usec="0"/>
    <to sec="1194757718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.139.231.190"/>
    </slice>
    <from sec="1194757876" usec="0"/>
    <to sec="1194757956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.60.93.191"/>
    </slice>
    <from sec="1194757206" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.115.9.192"/>
    </slice>
    <from sec="1194757656" usec="0"/>
    <to sec="1194757677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.7.76.192"/>
    </slice>
    <from sec="1194757818" usec="0"/>
    <to sec="1194757858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
514[label="193.1.205.148;d;42pkt 42fpkt", shape=diamond, color=yellow];
1129[label="193.212.15.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
1590[label="208.200.117.119;s;1pkt 1fpkt", shape=diamond, color=yellow];
1948[label="193.83.93.12;s;3pkt 3fpkt", shape=diamond, color=yellow];
5163[label="193.83.93.12;s;3pkt 3fpkt", shape=hexagon, color=black];
6312[label="193.83.93.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6731[label="193.12.133.65;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7134[label="208.200.117.119;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7647[label="193.212.15.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8386[label="208.200.117.119;1pkt 1fpkt", shape=invtriangle, color=brown];
8579[label="193.212.15.194;2pkt 2fpkt", shape=invtriangle, color=brown];
8947[label="208.200.117.119;1pkt 1fpkt", shape=invhouse, color=bisque];
9067[label="193.212.15.194;2pkt 2fpkt", shape=invhouse, color=bisque];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 193.1.205.148:50194}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50194: (44.6154%)&lt;BR/&gt; 19010: (3.84615%)&lt;BR/&gt; 3606: (3.84615%)&lt;BR/&gt; 1028: (3.84615%)&lt;BR/&gt; 60904: (3.07692%)&gt;];
}
514--725[label="0.0238095;1pkt 1fpkt"];
514--1094[label="0.0238095;1pkt 1fpkt"];
514--1129[label="1;2pkt 2fpkt"];
514--1164[label="0.0238095;1pkt 1fpkt"];
514--1590[label="1;1pkt 1fpkt"];
514--1948[label="1;3pkt 3fpkt"];
514--4456[label="0.0238095;1pkt 1fpkt"];
514--5163[label="1;3pkt 3fpkt"];
514--6312[label="1;2pkt 2fpkt"];
514--6731[label="1;3pkt 3fpkt"];
514--7134[label="1;1pkt 1fpkt"];
514--7647[label="1;2pkt 2fpkt"];
514--8386[label="1;1pkt 1fpkt"];
514--8579[label="1;2pkt 2fpkt"];
514--8947[label="1;1pkt 1fpkt"];
514--9067[label="1;2pkt 2fpkt"];
1129--7647[label="1;2pkt 2fpkt"];
1129--8579[label="1;2pkt 2fpkt"];
1129--9067[label="1;2pkt 2fpkt"];
1590--7134[label="1;1pkt 1fpkt"];
1590--8386[label="1;1pkt 1fpkt"];
1590--8947[label="1;1pkt 1fpkt"];
1948--5163[label="1;3pkt 3fpkt"];
1948--6312[label="1;2pkt 2fpkt"];
5163--6312[label="1;2pkt 2fpkt"];
7134--8386[label="1;1pkt 1fpkt"];
7134--8947[label="1;1pkt 1fpkt"];
7647--8579[label="1;2pkt 2fpkt"];
7647--9067[label="1;2pkt 2fpkt"];
8386--8947[label="1;1pkt 1fpkt"];
8579--9067[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.205.148" dst_port="50194"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.55.170.194"/>
    </slice>
    <from sec="1194758044" usec="0"/>
    <to sec="1194758056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.238.64.195"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.13.68.196"/>
    </slice>
    <from sec="1194757303" usec="0"/>
    <to sec="1194757408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
2987[label="152.174.147.196;s;61pkt 61fpkt", shape=diamond, color=yellow];
5191[label="152.174.147.196;s;23pkt 23fpkt", shape=hexagon, color=black];
7661[label="152.174.147.196;71pkt 71fpkt", shape=pentagon, color=darkviolet];
8585[label="152.174.147.196;71pkt 71fpkt", shape=invtriangle, color=brown];
9071[label="152.174.147.196;71pkt 71fpkt", shape=invhouse, color=bisque];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.147.196:*, 6.145.5.163:80}[64.7887%]&lt;BR/&gt;{152.174.147.196:*, 210.177.251.108:80}[22.5352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2013: (0.841751%)&lt;BR/&gt; 2012: (0.841751%)&lt;BR/&gt; 2011: (0.841751%)&lt;BR/&gt; 2010: (0.841751%)&gt;];
}
2987--5191[label="1;23pkt 23fpkt"];
2987--6073[label="0.0819672;5pkt 5fpkt"];
2987--6084[label="0.0163934;1pkt 1fpkt"];
2987--6115[label="0.0819672;5pkt 5fpkt"];
2987--6125[label="0.0163934;1pkt 1fpkt"];
2987--6150[label="0.0819672;5pkt 5fpkt"];
2987--6160[label="0.0163934;1pkt 1fpkt"];
2987--7661[label="1;61pkt 61fpkt"];
2987--8585[label="1;61pkt 61fpkt"];
2987--9071[label="1;61pkt 61fpkt"];
5191--7661[label="1;23pkt 23fpkt"];
5191--8585[label="1;23pkt 23fpkt"];
5191--9071[label="1;23pkt 23fpkt"];
7661--8585[label="1;71pkt 71fpkt"];
7661--9071[label="1;71pkt 71fpkt"];
8585--9071[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="6.145.5.163" dst_port="80" src_ip="152.174.147.196"/>
      <filter dst_ip="210.177.251.108" dst_port="80" src_ip="152.174.147.196"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.234.72.199"/>
    </slice>
    <from sec="1194757614" usec="0"/>
    <to sec="1194757697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.151.122.199"/>
    </slice>
    <from sec="1194757966" usec="0"/>
    <to sec="1194757970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.228.226.199"/>
    </slice>
    <from sec="1194757654" usec="0"/>
    <to sec="1194757667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="57.11.100.200"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.32.21.201"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.13.132.201"/>
    </slice>
    <from sec="1194757338" usec="0"/>
    <to sec="1194757419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.592345,1.89745,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
2397[label="129.33.176.202;s;77pkt 77fpkt", shape=diamond, color=yellow];
7697[label="129.33.176.202;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.176.202:*, 89.78.183.192:80}[41.5584%]&lt;BR/&gt;{129.33.176.202:*, 222.170.160.82:80}[22.0779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7013%)&lt;BR/&gt; 554: (1.2987%)&lt;BR/&gt; 1684: (0.649351%)&lt;BR/&gt; 1683: (0.649351%)&lt;BR/&gt; 1682: (0.649351%)&gt;];
}
2397--7697[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="89.78.183.192" dst_port="80" src_ip="129.33.176.202"/>
      <filter dst_ip="222.170.160.82" dst_port="80" src_ip="129.33.176.202"/>
    </slice>
    <from sec="1194757558" usec="0"/>
    <to sec="1194757629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="95.92.140.203"/>
    </slice>
    <from sec="1194757788" usec="0"/>
    <to sec="1194757802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.161.85.204"/>
    </slice>
    <from sec="1194757207" usec="0"/>
    <to sec="1194757667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.85.172.205"/>
    </slice>
    <from sec="1194757489" usec="0"/>
    <to sec="1194757517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="129.33.82.207"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.130.181.207"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.65.93.209"/>
    </slice>
    <from sec="1194757516" usec="0"/>
    <to sec="1194757518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.239.208.214"/>
    </slice>
    <from sec="1194757805" usec="0"/>
    <to sec="1194757815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.33.92.216"/>
    </slice>
    <from sec="1194757493" usec="0"/>
    <to sec="1194757534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.179.91.217"/>
    </slice>
    <from sec="1194757465" usec="0"/>
    <to sec="1194757484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.197.238.217"/>
    </slice>
    <from sec="1194757691" usec="0"/>
    <to sec="1194757839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.84.72.218"/>
    </slice>
    <from sec="1194757573" usec="0"/>
    <to sec="1194757654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.109.52.220"/>
    </slice>
    <from sec="1194757954" usec="0"/>
    <to sec="1194757979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
568[label="129.60.48.78;d;3581pkt 3581fpkt", shape=diamond, color=yellow];
2244[label="173.144.71.8;d;1366pkt 1366fpkt", shape=diamond, color=yellow];
2467[label="221.79.15.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
2928[label="92.20.203.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
3014[label="93.202.15.191;s;2pkt 2fpkt", shape=diamond, color=yellow];
3021[label="2.43.103.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
5564[label="173.144.71.8;d;1198pkt 1198fpkt", shape=hexagon, color=black];
5666[label="129.60.48.78;d;3581pkt 3581fpkt", shape=hexagon, color=black];
6199[label="222.63.141.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6557[label="93.242.100.43;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6569[label="5.3.164.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6659[label="192.85.46.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6908[label="222.139.74.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7284[label="218.192.27.142;70pkt 70fpkt", shape=pentagon, color=darkviolet];
7519[label="92.25.106.171;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7524[label="4.66.195.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7564[label="92.20.203.178;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7804[label="89.161.85.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7959[label="218.171.187.246;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7967[label="3.144.218.248;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7969[label="88.160.160.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8437[label="218.192.27.142;70pkt 70fpkt", shape=invtriangle, color=brown];
8538[label="92.25.106.171;6pkt 6fpkt", shape=invtriangle, color=brown];
8542[label="4.66.195.172;1pkt 1fpkt", shape=invtriangle, color=brown];
8555[label="92.20.203.178;1pkt 1fpkt", shape=invtriangle, color=brown];
8643[label="89.161.85.220;1pkt 1fpkt", shape=invtriangle, color=brown];
8712[label="218.171.187.246;1pkt 1fpkt", shape=invtriangle, color=brown];
8716[label="3.144.218.248;1pkt 1fpkt", shape=invtriangle, color=brown];
8717[label="88.160.160.249;1pkt 1fpkt", shape=invtriangle, color=brown];
8981[label="218.192.27.142;70pkt 70fpkt", shape=invhouse, color=bisque];
9044[label="4.66.195.172;1pkt 1fpkt", shape=invhouse, color=bisque];
9053[label="92.20.203.178;1pkt 1fpkt", shape=invhouse, color=bisque];
9102[label="89.161.85.220;1pkt 1fpkt", shape=invhouse, color=bisque];
9141[label="218.171.187.246;1pkt 1fpkt", shape=invhouse, color=bisque];
9144[label="3.144.218.248;1pkt 1fpkt", shape=invhouse, color=bisque];
9145[label="88.160.160.249;1pkt 1fpkt", shape=invhouse, color=bisque];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 129.60.48.78:61364}[70.7528%]&lt;BR/&gt;{*:*, 173.144.71.8:*}[27.5362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61364: (35.1806%)&lt;BR/&gt; 80: (10.8132%)&lt;BR/&gt; 3211: (1.02031%)&lt;BR/&gt; 3255: (0.620186%)&lt;BR/&gt; 0: (0.420126%)&gt;];
}
568--3014[label="0.5;1pkt 1fpkt"];
568--4123[label="0.0188679;1pkt 1fpkt"];
568--5666[label="1;3581pkt 3581fpkt"];
568--6073[label="0.000558503;2pkt 2fpkt"];
568--6084[label="0.000558503;2pkt 2fpkt"];
568--6094[label="0.000558503;2pkt 2fpkt"];
568--6100[label="0.000558503;2pkt 2fpkt"];
568--6115[label="0.000558503;2pkt 2fpkt"];
568--6125[label="0.000558503;2pkt 2fpkt"];
568--6134[label="0.000558503;2pkt 2fpkt"];
568--6140[label="0.000558503;2pkt 2fpkt"];
568--6150[label="0.000558503;2pkt 2fpkt"];
568--6160[label="0.000558503;2pkt 2fpkt"];
568--6168[label="0.000558503;2pkt 2fpkt"];
568--6174[label="0.000558503;2pkt 2fpkt"];
568--6659[label="1;1pkt 1fpkt"];
568--7804[label="1;1pkt 1fpkt"];
568--8643[label="1;1pkt 1fpkt"];
568--9102[label="1;1pkt 1fpkt"];
2244--2312[label="1;1pkt 1fpkt"];
2244--2467[label="0.5;1pkt 1fpkt"];
2244--2652[label="1;1pkt 1fpkt"];
2244--2774[label="0.00420168;1pkt 1fpkt"];
2244--2928[label="1;1pkt 1fpkt"];
2244--3014[label="0.5;1pkt 1fpkt"];
2244--3021[label="1;1pkt 1fpkt"];
2244--3075[label="0.142857;1pkt 1fpkt"];
2244--3238[label="1;1pkt 1fpkt"];
2244--3239[label="1;2pkt 2fpkt"];
2244--3529[label="1;1pkt 1fpkt"];
2244--3744[label="1;3pkt 3fpkt"];
2244--3745[label="1;1pkt 1fpkt"];
2244--3746[label="1;1pkt 1fpkt"];
2244--5423[label="1;1pkt 1fpkt"];
2244--5425[label="1;1pkt 1fpkt"];
2244--5564[label="1;1198pkt 1198fpkt"];
2244--5658[label="0.142857;1pkt 1fpkt"];
2244--5796[label="1;1pkt 1fpkt"];
2244--6065[label="0.0175695;24pkt 24fpkt"];
2244--6073[label="0.0724744;99pkt 99fpkt"];
2244--6081[label="0.0197657;27pkt 27fpkt"];
2244--6084[label="0.0834553;114pkt 114fpkt"];
2244--6086[label="0.0161054;22pkt 22fpkt"];
2244--6094[label="0.0614934;84pkt 84fpkt"];
2244--6100[label="0.000732064;1pkt 1fpkt"];
2244--6107[label="0.0175695;24pkt 24fpkt"];
2244--6115[label="0.0724744;99pkt 99fpkt"];
2244--6122[label="0.0197657;27pkt 27fpkt"];
2244--6125[label="0.0834553;114pkt 114fpkt"];
2244--6127[label="0.0161054;22pkt 22fpkt"];
2244--6134[label="0.0614934;84pkt 84fpkt"];
2244--6140[label="0.000732064;1pkt 1fpkt"];
2244--6144[label="0.0175695;24pkt 24fpkt"];
2244--6150[label="0.0724744;99pkt 99fpkt"];
2244--6157[label="0.0197657;27pkt 27fpkt"];
2244--6160[label="0.0834553;114pkt 114fpkt"];
2244--6162[label="0.0161054;22pkt 22fpkt"];
2244--6168[label="0.0614934;84pkt 84fpkt"];
2244--6174[label="0.000732064;1pkt 1fpkt"];
2244--6199[label="1;1pkt 1fpkt"];
2244--6557[label="0.190476;4pkt 4fpkt"];
2244--6569[label="1;1pkt 1fpkt"];
2244--6908[label="1;1pkt 1fpkt"];
2244--7232[label="1;1pkt 1fpkt"];
2244--7284[label="0.971429;68pkt 68fpkt"];
2244--7416[label="1;1pkt 1fpkt"];
2244--7519[label="0.833333;5pkt 5fpkt"];
2244--7524[label="1;1pkt 1fpkt"];
2244--7564[label="1;1pkt 1fpkt"];
2244--7959[label="1;1pkt 1fpkt"];
2244--7967[label="1;1pkt 1fpkt"];
2244--7969[label="1;1pkt 1fpkt"];
2244--8419[label="1;1pkt 1fpkt"];
2244--8437[label="0.971429;68pkt 68fpkt"];
2244--8538[label="0.833333;5pkt 5fpkt"];
2244--8542[label="1;1pkt 1fpkt"];
2244--8555[label="1;1pkt 1fpkt"];
2244--8712[label="1;1pkt 1fpkt"];
2244--8716[label="1;1pkt 1fpkt"];
2244--8717[label="1;1pkt 1fpkt"];
2244--8967[label="1;1pkt 1fpkt"];
2244--8981[label="0.971429;68pkt 68fpkt"];
2244--9044[label="1;1pkt 1fpkt"];
2244--9053[label="1;1pkt 1fpkt"];
2244--9141[label="1;1pkt 1fpkt"];
2244--9144[label="1;1pkt 1fpkt"];
2244--9145[label="1;1pkt 1fpkt"];
2467--4013[label="0.5;1pkt 1fpkt"];
2467--5564[label="0.5;1pkt 1fpkt"];
2928--5564[label="1;1pkt 1fpkt"];
2928--7564[label="1;1pkt 1fpkt"];
2928--8555[label="1;1pkt 1fpkt"];
2928--9053[label="1;1pkt 1fpkt"];
3014--5564[label="0.5;1pkt 1fpkt"];
3014--5666[label="0.5;1pkt 1fpkt"];
3021--5564[label="1;1pkt 1fpkt"];
5564--5658[label="0.142857;1pkt 1fpkt"];
5564--5796[label="1;1pkt 1fpkt"];
5564--6065[label="0.0200334;24pkt 24fpkt"];
5564--6073[label="0.0826377;99pkt 99fpkt"];
5564--6081[label="0.0225376;27pkt 27fpkt"];
5564--6084[label="0.0684474;82pkt 82fpkt"];
5564--6086[label="0.0175292;21pkt 21fpkt"];
5564--6094[label="0.00166945;2pkt 2fpkt"];
5564--6107[label="0.0200334;24pkt 24fpkt"];
5564--6115[label="0.0826377;99pkt 99fpkt"];
5564--6122[label="0.0225376;27pkt 27fpkt"];
5564--6125[label="0.0684474;82pkt 82fpkt"];
5564--6127[label="0.0175292;21pkt 21fpkt"];
5564--6134[label="0.00166945;2pkt 2fpkt"];
5564--6144[label="0.0200334;24pkt 24fpkt"];
5564--6150[label="0.0826377;99pkt 99fpkt"];
5564--6157[label="0.0225376;27pkt 27fpkt"];
5564--6160[label="0.0684474;82pkt 82fpkt"];
5564--6162[label="0.0175292;21pkt 21fpkt"];
5564--6168[label="0.00166945;2pkt 2fpkt"];
5564--6199[label="1;1pkt 1fpkt"];
5564--6557[label="0.190476;4pkt 4fpkt"];
5564--6569[label="1;1pkt 1fpkt"];
5564--6908[label="1;1pkt 1fpkt"];
5564--7232[label="1;1pkt 1fpkt"];
5564--7284[label="0.857143;60pkt 60fpkt"];
5564--7416[label="1;1pkt 1fpkt"];
5564--7519[label="0.833333;5pkt 5fpkt"];
5564--7524[label="1;1pkt 1fpkt"];
5564--7564[label="1;1pkt 1fpkt"];
5564--7959[label="1;1pkt 1fpkt"];
5564--7967[label="1;1pkt 1fpkt"];
5564--7969[label="1;1pkt 1fpkt"];
5564--8419[label="1;1pkt 1fpkt"];
5564--8437[label="0.857143;60pkt 60fpkt"];
5564--8538[label="0.833333;5pkt 5fpkt"];
5564--8542[label="1;1pkt 1fpkt"];
5564--8555[label="1;1pkt 1fpkt"];
5564--8712[label="1;1pkt 1fpkt"];
5564--8716[label="1;1pkt 1fpkt"];
5564--8717[label="1;1pkt 1fpkt"];
5564--8967[label="1;1pkt 1fpkt"];
5564--8981[label="0.857143;60pkt 60fpkt"];
5564--9044[label="1;1pkt 1fpkt"];
5564--9053[label="1;1pkt 1fpkt"];
5564--9141[label="1;1pkt 1fpkt"];
5564--9144[label="1;1pkt 1fpkt"];
5564--9145[label="1;1pkt 1fpkt"];
5666--6073[label="0.000558503;2pkt 2fpkt"];
5666--6084[label="0.000558503;2pkt 2fpkt"];
5666--6094[label="0.000558503;2pkt 2fpkt"];
5666--6100[label="0.000558503;2pkt 2fpkt"];
5666--6115[label="0.000558503;2pkt 2fpkt"];
5666--6125[label="0.000558503;2pkt 2fpkt"];
5666--6134[label="0.000558503;2pkt 2fpkt"];
5666--6140[label="0.000558503;2pkt 2fpkt"];
5666--6150[label="0.000558503;2pkt 2fpkt"];
5666--6160[label="0.000558503;2pkt 2fpkt"];
5666--6168[label="0.000558503;2pkt 2fpkt"];
5666--6174[label="0.000558503;2pkt 2fpkt"];
5666--6659[label="1;1pkt 1fpkt"];
5666--7804[label="1;1pkt 1fpkt"];
5666--8643[label="1;1pkt 1fpkt"];
5666--9102[label="1;1pkt 1fpkt"];
7284--8437[label="1;70pkt 70fpkt"];
7284--8981[label="1;70pkt 70fpkt"];
7519--8538[label="1;6pkt 6fpkt"];
7524--8542[label="1;1pkt 1fpkt"];
7524--9044[label="1;1pkt 1fpkt"];
7564--8555[label="1;1pkt 1fpkt"];
7564--9053[label="1;1pkt 1fpkt"];
7804--8643[label="1;1pkt 1fpkt"];
7804--9102[label="1;1pkt 1fpkt"];
7959--8712[label="1;1pkt 1fpkt"];
7959--9141[label="1;1pkt 1fpkt"];
7967--8716[label="1;1pkt 1fpkt"];
7967--9144[label="1;1pkt 1fpkt"];
7969--8717[label="1;1pkt 1fpkt"];
7969--9145[label="1;1pkt 1fpkt"];
8437--8981[label="1;70pkt 70fpkt"];
8542--9044[label="1;1pkt 1fpkt"];
8555--9053[label="1;1pkt 1fpkt"];
8643--9102[label="1;1pkt 1fpkt"];
8712--9141[label="1;1pkt 1fpkt"];
8716--9144[label="1;1pkt 1fpkt"];
8717--9145[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.71.8"/>
      <filter dst_ip="129.60.48.78" dst_port="61364"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.46.130.221"/>
    </slice>
    <from sec="1194757565" usec="0"/>
    <to sec="1194757590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.213.207.221"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="10.15.1.222"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.134.253.222"/>
    </slice>
    <from sec="1194757875" usec="0"/>
    <to sec="1194758061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.166.8.226"/>
    </slice>
    <from sec="1194757688" usec="0"/>
    <to sec="1194757761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="62.110.26.226"/>
    </slice>
    <from sec="1194757652" usec="0"/>
    <to sec="1194757666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.219.133.230"/>
    </slice>
    <from sec="1194757592" usec="0"/>
    <to sec="1194757892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="51.10.64.231"/>
    </slice>
    <from sec="1194758073" usec="0"/>
    <to sec="1194758078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.19.161.232"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.29.233"/>
    </slice>
    <from sec="1194757299" usec="0"/>
    <to sec="1194758095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.224.47.233"/>
    </slice>
    <from sec="1194757389" usec="0"/>
    <to sec="1194757748" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.181.200.233"/>
    </slice>
    <from sec="1194757393" usec="0"/>
    <to sec="1194757608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="152.174.149.234"/>
    </slice>
    <from sec="1194757233" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.33.226.235"/>
    </slice>
    <from sec="1194757743" usec="0"/>
    <to sec="1194757768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.222.129.237"/>
    </slice>
    <from sec="1194757480" usec="0"/>
    <to sec="1194758057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.221.131.238"/>
    </slice>
    <from sec="1194757518" usec="0"/>
    <to sec="1194757550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.241.15.240"/>
    </slice>
    <from sec="1194757485" usec="0"/>
    <to sec="1194757505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.121.36.240"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.58.184.240"/>
    </slice>
    <from sec="1194757427" usec="0"/>
    <to sec="1194757627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.222.226.240"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.149.35.241"/>
    </slice>
    <from sec="1194757452" usec="0"/>
    <to sec="1194757469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.144.64.244"/>
    </slice>
    <from sec="1194757212" usec="0"/>
    <to sec="1194758090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.33.133.246"/>
    </slice>
    <from sec="1194757489" usec="0"/>
    <to sec="1194757502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.218.135.246"/>
    </slice>
    <from sec="1194757267" usec="0"/>
    <to sec="1194757281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.172.181.246"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="94.176.214.246"/>
    </slice>
    <from sec="1194758074" usec="0"/>
    <to sec="1194758081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.219.214.248"/>
    </slice>
    <from sec="1194757590" usec="0"/>
    <to sec="1194757774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.152.45.252"/>
    </slice>
    <from sec="1194757233" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.5.48.252"/>
    </slice>
    <from sec="1194757383" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.147.184.253"/>
    </slice>
    <from sec="1194757714" usec="0"/>
    <to sec="1194757745" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.190.148.254"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.404205,1.95206,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.63.134.255"/>
    </slice>
    <from sec="1194757486" usec="0"/>
    <to sec="1194757490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.216.218.1"/>
    </slice>
    <from sec="1194757628" usec="0"/>
    <to sec="1194757715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.33.52.2"/>
    </slice>
    <from sec="1194757355" usec="0"/>
    <to sec="1194757368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.117.171.2"/>
    </slice>
    <from sec="1194757851" usec="0"/>
    <to sec="1194757881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.6.211.2"/>
    </slice>
    <from sec="1194757697" usec="0"/>
    <to sec="1194758080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.160.44.7"/>
    </slice>
    <from sec="1194757795" usec="0"/>
    <to sec="1194757873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.935224,1.87041,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
2111[label="133.224.51.15;d;485pkt 485fpkt", shape=diamond, color=yellow];
3247[label="76.50.59.47;s;25pkt 25fpkt", shape=diamond, color=yellow];
6256[label="76.50.59.7;16pkt 16fpkt", shape=pentagon, color=darkviolet];
6297[label="76.50.59.11;19pkt 19fpkt", shape=pentagon, color=darkviolet];
6583[label="76.50.59.46;17pkt 17fpkt", shape=pentagon, color=darkviolet];
6593[label="76.50.59.47;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8029[label="76.50.59.7;16pkt 16fpkt", shape=invtriangle, color=brown];
8739[label="76.50.59.7;16pkt 16fpkt", shape=invhouse, color=bisque];
8751[label="76.50.59.11;19pkt 19fpkt", shape=invhouse, color=bisque];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 133.224.51.15:*}[57.732%]&lt;BR/&gt;{*:53, 133.224.51.15:36783}[20.2062%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (39.0282%)&lt;BR/&gt; 53: (9.48276%)&lt;BR/&gt; 36783: (7.68025%)&lt;BR/&gt; 0: (2.19436%)&lt;BR/&gt; 113: (0.470219%)&gt;];
}
2111--2813[label="0.0588235;1pkt 1fpkt"];
2111--3247[label="1;25pkt 25fpkt"];
2111--3419[label="0.015873;1pkt 1fpkt"];
2111--3662[label="0.05;1pkt 1fpkt"];
2111--3677[label="0.039823;9pkt 9fpkt"];
2111--3944[label="0.00824742;4pkt 4fpkt"];
2111--4098[label="0.014433;7pkt 7fpkt"];
2111--4550[label="0.00625;1pkt 1fpkt"];
2111--5310[label="0.0666667;1pkt 1fpkt"];
2111--5710[label="0.039823;9pkt 9fpkt"];
2111--6061[label="0.00824742;4pkt 4fpkt"];
2111--6064[label="0.00618557;3pkt 3fpkt"];
2111--6082[label="0.014433;7pkt 7fpkt"];
2111--6085[label="0.00206186;1pkt 1fpkt"];
2111--6093[label="0.00206186;1pkt 1fpkt"];
2111--6106[label="0.00618557;3pkt 3fpkt"];
2111--6123[label="0.014433;7pkt 7fpkt"];
2111--6126[label="0.00206186;1pkt 1fpkt"];
2111--6133[label="0.00206186;1pkt 1fpkt"];
2111--6158[label="0.014433;7pkt 7fpkt"];
2111--6161[label="0.00206186;1pkt 1fpkt"];
2111--6167[label="0.00206186;1pkt 1fpkt"];
2111--6256[label="1;16pkt 16fpkt"];
2111--6297[label="1;19pkt 19fpkt"];
2111--6583[label="1;17pkt 17fpkt"];
2111--6593[label="1;25pkt 25fpkt"];
2111--6610[label="0.111111;1pkt 1fpkt"];
2111--6751[label="0.0909091;1pkt 1fpkt"];
2111--6858[label="0.0588235;6pkt 6fpkt"];
2111--6877[label="0.142857;1pkt 1fpkt"];
2111--6929[label="0.142857;1pkt 1fpkt"];
2111--7015[label="0.125;1pkt 1fpkt"];
2111--7036[label="0.142857;1pkt 1fpkt"];
2111--7060[label="0.125;1pkt 1fpkt"];
2111--7773[label="0.014433;7pkt 7fpkt"];
2111--7784[label="0.00824742;4pkt 4fpkt"];
2111--7827[label="0.02;1pkt 1fpkt"];
2111--8029[label="1;16pkt 16fpkt"];
2111--8169[label="0.111111;1pkt 1fpkt"];
2111--8222[label="0.0909091;1pkt 1fpkt"];
2111--8272[label="0.166667;1pkt 1fpkt"];
2111--8296[label="0.166667;1pkt 1fpkt"];
2111--8338[label="0.125;1pkt 1fpkt"];
2111--8346[label="0.142857;1pkt 1fpkt"];
2111--8355[label="0.125;1pkt 1fpkt"];
2111--8739[label="1;16pkt 16fpkt"];
2111--8751[label="1;19pkt 19fpkt"];
2111--8935[label="0.125;1pkt 1fpkt"];
3247--6593[label="1;25pkt 25fpkt"];
6256--8029[label="1;16pkt 16fpkt"];
6256--8739[label="1;16pkt 16fpkt"];
6297--8751[label="1;19pkt 19fpkt"];
8029--8739[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.51.15" src_port="25"/>
      <filter dst_ip="133.224.51.15" dst_port="36783" src_port="53"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.168.74.7"/>
    </slice>
    <from sec="1194758005" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
6262[label="209.102.1.8;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8034[label="209.102.1.8;5pkt 5fpkt", shape=invtriangle, color=brown];
8741[label="209.102.1.8;5pkt 5fpkt", shape=invhouse, color=bisque];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.102.1.8:80, 173.144.71.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1999: (9.375%)&lt;BR/&gt; 1995: (9.375%)&lt;BR/&gt; 1970: (9.375%)&lt;BR/&gt; 1966: (9.375%)&gt;];
}
6262--8034[label="1;5pkt 5fpkt"];
6262--8741[label="1;5pkt 5fpkt"];
8034--8741[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.71.42" src_ip="209.102.1.8" src_port="80"/>
    </slice>
    <from sec="1194757310" usec="0"/>
    <to sec="1194757856" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.1.157.9"/>
    </slice>
    <from sec="1194757544" usec="0"/>
    <to sec="1194757594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
6289[label="129.60.133.10;106pkt 106fpkt", shape=pentagon, color=darkviolet];
8044[label="129.60.133.10;107pkt 107fpkt", shape=invtriangle, color=brown];
8749[label="129.60.133.10;107pkt 107fpkt", shape=invhouse, color=bisque];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.60.133.10:*, 196.130.163.222:53}[89.7196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (44.8438%)&lt;BR/&gt; 110: (4.6875%)&lt;BR/&gt; 65439: (0.46875%)&lt;BR/&gt; 65376: (0.46875%)&lt;BR/&gt; 65179: (0.46875%)&gt;];
}
6289--8044[label="1;106pkt 106fpkt"];
6289--8749[label="1;106pkt 106fpkt"];
8044--8749[label="1;107pkt 107fpkt"];
</description>
    <slice>
      <filter dst_ip="196.130.163.222" dst_port="53" src_ip="129.60.133.10"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.32.144.10"/>
    </slice>
    <from sec="1194757375" usec="0"/>
    <to sec="1194757845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.94.104.11"/>
    </slice>
    <from sec="1194757779" usec="0"/>
    <to sec="1194757790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.223.24.12"/>
    </slice>
    <from sec="1194757495" usec="0"/>
    <to sec="1194757515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
6308[label="170.205.47.12;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8053[label="170.205.47.12;21pkt 21fpkt", shape=invtriangle, color=brown];
8753[label="170.205.47.12;21pkt 21fpkt", shape=invhouse, color=bisque];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.205.47.12:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6308--8053[label="1;21pkt 21fpkt"];
6308--8753[label="1;21pkt 21fpkt"];
8053--8753[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="170.205.47.12"/>
    </slice>
    <from sec="1194757218" usec="0"/>
    <to sec="1194758084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
6316[label="217.128.231.12;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8054[label="217.128.231.12;7pkt 7fpkt", shape=invtriangle, color=brown];
8754[label="217.128.231.12;7pkt 7fpkt", shape=invhouse, color=bisque];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.128.231.12:*, 133.224.138.45:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3752: (7.5%)&lt;BR/&gt; 3750: (7.5%)&lt;BR/&gt; 3723: (7.5%)&lt;BR/&gt; 3661: (7.5%)&gt;];
}
6316--8054[label="1;6pkt 6fpkt"];
6316--8754[label="1;6pkt 6fpkt"];
8054--8754[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.138.45" dst_port="25" src_ip="217.128.231.12"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194757224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
6322[label="170.205.47.14;145pkt 145fpkt", shape=pentagon, color=darkviolet];
8058[label="170.205.47.14;146pkt 146fpkt", shape=invtriangle, color=brown];
8757[label="170.205.47.14;146pkt 146fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.205.47.14:53, *:*}[80.137%]&lt;BR/&gt;{170.205.47.14:*, *:53}[22.6027%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.4874%)&lt;BR/&gt; 60602: (9.26773%)&lt;BR/&gt; 32768: (1.373%)&lt;BR/&gt; 0: (1.14416%)&lt;BR/&gt; 32822: (0.686499%)&gt;];
}
6322--8058[label="1;145pkt 145fpkt"];
6322--8757[label="1;145pkt 145fpkt"];
8058--8757[label="1;146pkt 146fpkt"];
</description>
    <slice>
      <filter src_ip="170.205.47.14" src_port="53"/>
      <filter dst_port="53" src_ip="170.205.47.14"/>
    </slice>
    <from sec="1194757219" usec="0"/>
    <to sec="1194758085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
6325[label="42.92.84.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8059[label="42.92.84.14;1pkt 1fpkt", shape=invtriangle, color=brown];
8758[label="42.92.84.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.92.84.14:2169, 193.1.192.82:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 2169: (50%)&gt;];
}
6325--8059[label="1;1pkt 1fpkt"];
6325--8758[label="1;1pkt 1fpkt"];
8059--8758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.192.82" dst_port="3128" src_ip="42.92.84.14" src_port="2169"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
6334[label="68.27.32.16;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8061[label="68.27.32.16;23pkt 23fpkt", shape=invtriangle, color=brown];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.27.32.16:*, 129.60.207.72:80}[60.8696%]&lt;BR/&gt;{68.27.32.16:*, 201.141.66.225:53}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.1111%)&lt;BR/&gt; 53: (18.8889%)&lt;BR/&gt; 65183: (2.22222%)&lt;BR/&gt; 62434: (2.22222%)&lt;BR/&gt; 55606: (2.22222%)&gt;];
}
6334--8061[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="129.60.207.72" dst_port="80" src_ip="68.27.32.16"/>
      <filter dst_ip="201.141.66.225" dst_port="53" src_ip="68.27.32.16"/>
    </slice>
    <from sec="1194757296" usec="0"/>
    <to sec="1194758080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.213.163.16"/>
    </slice>
    <from sec="1194757568" usec="0"/>
    <to sec="1194757589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.247.3.17"/>
    </slice>
    <from sec="1194757377" usec="0"/>
    <to sec="1194757496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.77.18.17"/>
    </slice>
    <from sec="1194757385" usec="0"/>
    <to sec="1194757457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.89341,1.82525,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
1288[label="193.1.204.91;d;78pkt 78fpkt", shape=diamond, color=yellow];
2862[label="48.164.142.32;s;37pkt 37fpkt", shape=diamond, color=yellow];
4187[label="193.1.204.91;d;18pkt 18fpkt", shape=hexagon, color=black];
5358[label="48.164.142.32;s;37pkt 37fpkt", shape=hexagon, color=black];
6348[label="58.138.32.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6820[label="63.42.90.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7834[label="194.170.46.226;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8069[label="58.138.32.17;1pkt 1fpkt", shape=invtriangle, color=brown];
8660[label="194.170.46.226;3pkt 3fpkt", shape=invtriangle, color=brown];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{48.164.142.32:*, 193.1.204.91:80}[47.4359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64852: (1.11732%)&lt;BR/&gt; 63217: (1.11732%)&lt;BR/&gt; 62150: (1.11732%)&lt;BR/&gt; 60813: (1.11732%)&gt;];
}
1288--2862[label="1;37pkt 37fpkt"];
1288--2921[label="0.0128205;1pkt 1fpkt"];
1288--4187[label="1;18pkt 18fpkt"];
1288--5165[label="0.0136986;1pkt 1fpkt"];
1288--5358[label="1;37pkt 37fpkt"];
1288--6073[label="0.0769231;6pkt 6fpkt"];
1288--6084[label="0.0641026;5pkt 5fpkt"];
1288--6086[label="0.0128205;1pkt 1fpkt"];
1288--6094[label="0.025641;2pkt 2fpkt"];
1288--6100[label="0.0128205;1pkt 1fpkt"];
1288--6115[label="0.0769231;6pkt 6fpkt"];
1288--6125[label="0.0641026;5pkt 5fpkt"];
1288--6127[label="0.0128205;1pkt 1fpkt"];
1288--6134[label="0.025641;2pkt 2fpkt"];
1288--6140[label="0.0128205;1pkt 1fpkt"];
1288--6150[label="0.0769231;6pkt 6fpkt"];
1288--6160[label="0.0641026;5pkt 5fpkt"];
1288--6162[label="0.0128205;1pkt 1fpkt"];
1288--6168[label="0.025641;2pkt 2fpkt"];
1288--6174[label="0.0128205;1pkt 1fpkt"];
1288--6348[label="1;1pkt 1fpkt"];
1288--6507[label="0.0128205;1pkt 1fpkt"];
1288--6820[label="1;1pkt 1fpkt"];
1288--7834[label="1;3pkt 3fpkt"];
1288--8069[label="1;1pkt 1fpkt"];
1288--8127[label="0.0128205;1pkt 1fpkt"];
1288--8660[label="1;3pkt 3fpkt"];
2862--4187[label="0.5;9pkt 9fpkt"];
2862--5358[label="1;37pkt 37fpkt"];
2862--6073[label="0.0810811;3pkt 3fpkt"];
2862--6084[label="0.0810811;3pkt 3fpkt"];
2862--6094[label="0.027027;1pkt 1fpkt"];
2862--6115[label="0.0810811;3pkt 3fpkt"];
2862--6125[label="0.0810811;3pkt 3fpkt"];
2862--6134[label="0.027027;1pkt 1fpkt"];
2862--6150[label="0.0810811;3pkt 3fpkt"];
2862--6160[label="0.0810811;3pkt 3fpkt"];
2862--6168[label="0.027027;1pkt 1fpkt"];
4187--5358[label="0.5;9pkt 9fpkt"];
4187--6073[label="0.0555556;1pkt 1fpkt"];
4187--6084[label="0.0555556;1pkt 1fpkt"];
4187--6094[label="0.0555556;1pkt 1fpkt"];
4187--6100[label="0.0555556;1pkt 1fpkt"];
4187--6115[label="0.0555556;1pkt 1fpkt"];
4187--6125[label="0.0555556;1pkt 1fpkt"];
4187--6134[label="0.0555556;1pkt 1fpkt"];
4187--6140[label="0.0555556;1pkt 1fpkt"];
4187--6150[label="0.0555556;1pkt 1fpkt"];
4187--6160[label="0.0555556;1pkt 1fpkt"];
4187--6168[label="0.0555556;1pkt 1fpkt"];
4187--6174[label="0.0555556;1pkt 1fpkt"];
4187--6820[label="1;1pkt 1fpkt"];
5358--6073[label="0.0810811;3pkt 3fpkt"];
5358--6084[label="0.0810811;3pkt 3fpkt"];
5358--6094[label="0.027027;1pkt 1fpkt"];
5358--6115[label="0.0810811;3pkt 3fpkt"];
5358--6125[label="0.0810811;3pkt 3fpkt"];
5358--6134[label="0.027027;1pkt 1fpkt"];
5358--6150[label="0.0810811;3pkt 3fpkt"];
5358--6160[label="0.0810811;3pkt 3fpkt"];
5358--6168[label="0.027027;1pkt 1fpkt"];
6348--8069[label="1;1pkt 1fpkt"];
7834--8660[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.204.91" dst_port="80" src_ip="48.164.142.32"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.132.197.18"/>
    </slice>
    <from sec="1194758060" usec="0"/>
    <to sec="1194758073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.69.236.18"/>
    </slice>
    <from sec="1194757278" usec="0"/>
    <to sec="1194757475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
6373[label="129.33.156.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8080[label="129.33.156.19;1pkt 1fpkt", shape=invtriangle, color=brown];
8771[label="129.33.156.19;1pkt 1fpkt", shape=invhouse, color=bisque];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.156.19:0, 219.16.203.170:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6373--8080[label="1;1pkt 1fpkt"];
6373--8771[label="1;1pkt 1fpkt"];
8080--8771[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.16.203.170" src_ip="129.33.156.19"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.174.180.21"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.119.43.23"/>
    </slice>
    <from sec="1194757256" usec="0"/>
    <to sec="1194757373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.50.134.23"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
6419[label="133.224.234.24;43pkt 43fpkt", shape=pentagon, color=darkviolet];
8099[label="133.224.234.24;43pkt 43fpkt", shape=invtriangle, color=brown];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.234.24:*, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50220: (1.16279%)&lt;BR/&gt; 50219: (1.16279%)&lt;BR/&gt; 50218: (1.16279%)&lt;BR/&gt; 50215: (1.16279%)&gt;];
}
6419--8099[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="133.224.234.24"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.139.131.26"/>
    </slice>
    <from sec="1194757847" usec="0"/>
    <to sec="1194758083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.167.65.28"/>
    </slice>
    <from sec="1194757510" usec="0"/>
    <to sec="1194757634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.222.156.28"/>
    </slice>
    <from sec="1194757592" usec="0"/>
    <to sec="1194757615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
6472[label="173.144.25.32;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8116[label="173.144.25.32;8pkt 8fpkt", shape=invtriangle, color=brown];
8790[label="173.144.25.32;7pkt 7fpkt", shape=invhouse, color=bisque];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.25.32:*, 209.192.47.2:80}[37.5%]&lt;BR/&gt;{173.144.25.32:*, 209.240.74.1:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58362: (6.52174%)&lt;BR/&gt; 58361: (6.52174%)&lt;BR/&gt; 58360: (6.52174%)&lt;BR/&gt; 58359: (6.52174%)&gt;];
}
6472--8116[label="1;8pkt 8fpkt"];
6472--8790[label="1;7pkt 7fpkt"];
8116--8790[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="209.192.47.2" dst_port="80" src_ip="173.144.25.32"/>
      <filter dst_ip="209.240.74.1" dst_port="80" src_ip="173.144.25.32"/>
    </slice>
    <from sec="1194757271" usec="0"/>
    <to sec="1194757315" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
6480[label="133.224.34.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8119[label="133.224.34.33;2pkt 2fpkt", shape=invtriangle, color=brown];
8793[label="133.224.34.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.224.34.33:80, 48.187.26.36:57707}[50%]&lt;BR/&gt;{133.224.34.33:80, 219.8.115.79:50728}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57707: (25%)&lt;BR/&gt; 50728: (25%)&gt;];
}
6480--8119[label="1;2pkt 2fpkt"];
6480--8793[label="1;2pkt 2fpkt"];
8119--8793[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.8.115.79" dst_port="50728" src_ip="133.224.34.33" src_port="80"/>
      <filter dst_ip="48.187.26.36" dst_port="57707" src_ip="133.224.34.33" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.186.245.34"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.169.86.35"/>
    </slice>
    <from sec="1194757547" usec="0"/>
    <to sec="1194757554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.195.137.36"/>
    </slice>
    <from sec="1194757872" usec="0"/>
    <to sec="1194757882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
6506[label="144.45.8.37;160pkt 160fpkt", shape=pentagon, color=darkviolet];
8126[label="144.45.8.37;159pkt 159fpkt", shape=invtriangle, color=brown];
8797[label="144.45.8.37;160pkt 160fpkt", shape=invhouse, color=bisque];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.45.8.37:20129, *:20129}[61.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (80.8977%)&lt;BR/&gt; 64224: (0.313152%)&lt;BR/&gt; 60714: (0.313152%)&lt;BR/&gt; 60139: (0.313152%)&lt;BR/&gt; 59645: (0.313152%)&gt;];
}
6506--8126[label="1;159pkt 159fpkt"];
6506--8797[label="1;160pkt 160fpkt"];
8126--8797[label="1;159pkt 159fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="144.45.8.37" src_port="20129"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194758091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
6510[label="92.20.62.37;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8128[label="92.20.62.37;7pkt 7fpkt", shape=invtriangle, color=brown];
8798[label="92.20.62.37;8pkt 8fpkt", shape=invhouse, color=bisque];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{92.20.62.37:*, 192.188.126.3:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3825: (6.81818%)&lt;BR/&gt; 3823: (6.81818%)&lt;BR/&gt; 3822: (6.81818%)&lt;BR/&gt; 3799: (6.81818%)&gt;];
}
6510--8128[label="1;7pkt 7fpkt"];
6510--8798[label="1;7pkt 7fpkt"];
8128--8798[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="192.188.126.3" dst_port="25" src_ip="92.20.62.37"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.114.217.37"/>
    </slice>
    <from sec="1194758006" usec="0"/>
    <to sec="1194758011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.223.10.38"/>
    </slice>
    <from sec="1194757787" usec="0"/>
    <to sec="1194757816" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.122.209.42"/>
    </slice>
    <from sec="1194757729" usec="0"/>
    <to sec="1194757743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.198.217.47"/>
    </slice>
    <from sec="1194757523" usec="0"/>
    <to sec="1194757602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.151.161.48"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="61.206.221.49"/>
    </slice>
    <from sec="1194757675" usec="0"/>
    <to sec="1194757690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.12.77.50"/>
    </slice>
    <from sec="1194757553" usec="0"/>
    <to sec="1194757682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
6614[label="129.33.136.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8171[label="129.33.136.50;2pkt 2fpkt", shape=invtriangle, color=brown];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.136.50:80, 48.164.142.121:56506}[50%]&lt;BR/&gt;{129.33.136.50:80, 93.238.67.214:36158}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56506: (25%)&lt;BR/&gt; 36158: (25%)&gt;];
}
6614--8171[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="93.238.67.214" dst_port="36158" src_ip="129.33.136.50" src_port="80"/>
      <filter dst_ip="48.164.142.121" dst_port="56506" src_ip="129.33.136.50" src_port="80"/>
    </slice>
    <from sec="1194757798" usec="0"/>
    <to sec="1194757860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
6674[label="2.73.145.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8193[label="2.73.145.57;1pkt 1fpkt", shape=invtriangle, color=brown];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.73.145.57:1276, 173.144.70.11:2069}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2069: (50%)&lt;BR/&gt; 1276: (50%)&gt;];
}
6674--8193[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.70.11" dst_port="2069" src_ip="2.73.145.57" src_port="1276"/>
    </slice>
    <from sec="1194757467" usec="0"/>
    <to sec="1194758098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.169.162.59"/>
    </slice>
    <from sec="1194757244" usec="0"/>
    <to sec="1194757438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.153.24.60"/>
    </slice>
    <from sec="1194757457" usec="0"/>
    <to sec="1194757514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.139.74.61"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.224.222.62"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.28.159.63"/>
    </slice>
    <from sec="1194757530" usec="0"/>
    <to sec="1194757535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.35.195.63"/>
    </slice>
    <from sec="1194757690" usec="0"/>
    <to sec="1194757702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.180.84.64"/>
    </slice>
    <from sec="1194757523" usec="0"/>
    <to sec="1194757532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.76.44.66"/>
    </slice>
    <from sec="1194757535" usec="0"/>
    <to sec="1194757556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.214.102.68"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.210.135.68"/>
    </slice>
    <from sec="1194757391" usec="0"/>
    <to sec="1194757460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="133.224.90.69"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.96.54.72"/>
    </slice>
    <from sec="1194757696" usec="0"/>
    <to sec="1194757704" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.134.11.76"/>
    </slice>
    <from sec="1194757959" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
6847[label="129.33.55.80;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8259[label="129.33.55.80;26pkt 26fpkt", shape=invtriangle, color=brown];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.55.80:80, 48.164.129.86:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65515: (1.92308%)&lt;BR/&gt; 65335: (1.92308%)&lt;BR/&gt; 64748: (1.92308%)&lt;BR/&gt; 63539: (1.92308%)&gt;];
}
6847--8259[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="48.164.129.86" src_ip="129.33.55.80" src_port="80"/>
    </slice>
    <from sec="1194757237" usec="0"/>
    <to sec="1194758086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.172.216.81"/>
    </slice>
    <from sec="1194757658" usec="0"/>
    <to sec="1194757762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.196.33.82"/>
    </slice>
    <from sec="1194757551" usec="0"/>
    <to sec="1194757566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
6878[label="49.68.23.83;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8273[label="49.68.23.83;16pkt 16fpkt", shape=invtriangle, color=brown];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.68.23.83:80, 133.224.139.58:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4369: (3.0303%)&lt;BR/&gt; 4368: (3.0303%)&lt;BR/&gt; 4367: (3.0303%)&lt;BR/&gt; 4366: (3.0303%)&gt;];
}
6878--8273[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.139.58" src_ip="49.68.23.83" src_port="80"/>
    </slice>
    <from sec="1194757296" usec="0"/>
    <to sec="1194757301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.109.145.84"/>
    </slice>
    <from sec="1194757843" usec="0"/>
    <to sec="1194757849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.209.61.85"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="129.33.144.85"/>
    </slice>
    <from sec="1194757517" usec="0"/>
    <to sec="1194757545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_546{
style=filled;
color=gray75;
6907[label="209.240.67.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8286[label="209.240.67.86;1pkt 1fpkt", shape=invtriangle, color=brown];
stat546[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.240.67.86:80, 133.224.134.173:1699}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1699: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6907--8286[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.134.173" dst_port="1699" src_ip="209.240.67.86" src_port="80"/>
    </slice>
    <from sec="1194757570" usec="0"/>
    <to sec="1194757593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.139.74.86"/>
    </slice>
    <from sec="1194757662" usec="0"/>
    <to sec="1194757670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.225.189.87"/>
    </slice>
    <from sec="1194757231" usec="0"/>
    <to sec="1194757793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
6939[label="194.210.36.90;249pkt 249fpkt", shape=pentagon, color=darkviolet];
8301[label="194.210.36.90;248pkt 248fpkt", shape=invtriangle, color=brown];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.210.36.90:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 3406: (0.603622%)&lt;BR/&gt; 1551: (0.503018%)&lt;BR/&gt; 4311: (0.402414%)&lt;BR/&gt; 4309: (0.402414%)&gt;];
}
6939--8301[label="1;248pkt 248fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="194.210.36.90"/>
    </slice>
    <from sec="1194757466" usec="0"/>
    <to sec="1194757517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
6940[label="72.170.38.90;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8302[label="72.170.38.90;2pkt 2fpkt", shape=invtriangle, color=brown];
8901[label="72.170.38.90;2pkt 2fpkt", shape=invhouse, color=bisque];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.170.38.90:2703, 129.180.105.50:25}[50%]&lt;BR/&gt;{72.170.38.90:2706, 129.180.105.51:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2706: (25%)&lt;BR/&gt; 2703: (25%)&gt;];
}
6940--8302[label="1;2pkt 2fpkt"];
6940--8901[label="1;2pkt 2fpkt"];
8302--8901[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="129.180.105.51" dst_port="25" src_ip="72.170.38.90" src_port="2706"/>
      <filter dst_ip="129.180.105.50" dst_port="25" src_ip="72.170.38.90" src_port="2703"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="63.133.166.90"/>
    </slice>
    <from sec="1194757321" usec="0"/>
    <to sec="1194757353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.221.77.91"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.153.208.91"/>
    </slice>
    <from sec="1194757401" usec="0"/>
    <to sec="1194757800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.104.100.94"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="4.16.66.95"/>
    </slice>
    <from sec="1194757600" usec="0"/>
    <to sec="1194757842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.7.101.95"/>
    </slice>
    <from sec="1194757232" usec="0"/>
    <to sec="1194758091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.248.79.97"/>
    </slice>
    <from sec="1194757313" usec="0"/>
    <to sec="1194757340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
7009[label="43.55.176.99;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8334[label="43.55.176.99;13pkt 13fpkt", shape=invtriangle, color=brown];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.55.176.99:*, 193.1.194.188:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 4976: (3.84615%)&lt;BR/&gt; 4921: (3.84615%)&lt;BR/&gt; 4844: (3.84615%)&lt;BR/&gt; 4834: (3.84615%)&gt;];
}
7009--8334[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="193.1.194.188" dst_port="25" src_ip="43.55.176.99"/>
    </slice>
    <from sec="1194758071" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.192.91.101"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.221.69.102"/>
    </slice>
    <from sec="1194757621" usec="0"/>
    <to sec="1194757631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
7037[label="173.144.234.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8347[label="173.144.234.104;2pkt 2fpkt", shape=invtriangle, color=brown];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.144.234.104:80, 58.138.32.97:41142}[50%]&lt;BR/&gt;{173.144.234.104:80, 58.138.32.97:41164}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41164: (25%)&lt;BR/&gt; 41142: (25%)&gt;];
}
7037--8347[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="58.138.32.97" dst_port="41164" src_ip="173.144.234.104" src_port="80"/>
      <filter dst_ip="58.138.32.97" dst_port="41142" src_ip="173.144.234.104" src_port="80"/>
    </slice>
    <from sec="1194757775" usec="0"/>
    <to sec="1194757779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="89.223.49.105"/>
    </slice>
    <from sec="1194757618" usec="0"/>
    <to sec="1194757659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.125.80.110"/>
    </slice>
    <from sec="1194757611" usec="0"/>
    <to sec="1194757969" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.210.172.113"/>
    </slice>
    <from sec="1194757603" usec="0"/>
    <to sec="1194757620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.45.176.116"/>
    </slice>
    <from sec="1194758045" usec="0"/>
    <to sec="1194758054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
7118[label="210.177.231.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8378[label="210.177.231.116;1pkt 1fpkt", shape=invtriangle, color=brown];
8945[label="210.177.231.116;1pkt 1fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.177.231.116:25, 129.60.40.47:36929}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36929: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
7118--8378[label="1;1pkt 1fpkt"];
7118--8945[label="1;1pkt 1fpkt"];
8378--8945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.60.40.47" dst_port="36929" src_ip="210.177.231.116" src_port="25"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.111.184.117"/>
    </slice>
    <from sec="1194757640" usec="0"/>
    <to sec="1194757649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.46.81.120"/>
    </slice>
    <from sec="1194757741" usec="0"/>
    <to sec="1194757775" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.7.72.130"/>
    </slice>
    <from sec="1194757560" usec="0"/>
    <to sec="1194757591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.222.225.135"/>
    </slice>
    <from sec="1194757550" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.17.103.138"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.4.80.139"/>
    </slice>
    <from sec="1194757610" usec="0"/>
    <to sec="1194757614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="180.16.234.140"/>
    </slice>
    <from sec="1194757593" usec="0"/>
    <to sec="1194757615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.12.41.141"/>
    </slice>
    <from sec="1194757400" usec="0"/>
    <to sec="1194757547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.233.99.141"/>
    </slice>
    <from sec="1194757506" usec="0"/>
    <to sec="1194757517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
7289[label="152.174.195.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8438[label="152.174.195.142;2pkt 2fpkt", shape=invtriangle, color=brown];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.195.142:80, 89.208.65.129:1072}[50%]&lt;BR/&gt;{152.174.195.142:80, 89.208.65.129:1073}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1073: (25%)&lt;BR/&gt; 1072: (25%)&gt;];
}
7289--8438[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="89.208.65.129" dst_port="1073" src_ip="152.174.195.142" src_port="80"/>
      <filter dst_ip="89.208.65.129" dst_port="1072" src_ip="152.174.195.142" src_port="80"/>
    </slice>
    <from sec="1194757614" usec="0"/>
    <to sec="1194757632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.104.210.143"/>
    </slice>
    <from sec="1194757352" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.158.202.152"/>
    </slice>
    <from sec="1194757697" usec="0"/>
    <to sec="1194757746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="49.173.87.154"/>
    </slice>
    <from sec="1194757783" usec="0"/>
    <to sec="1194757799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.156.163.154"/>
    </slice>
    <from sec="1194757740" usec="0"/>
    <to sec="1194757830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_584{
style=filled;
color=gray75;
7440[label="214.104.190.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8501[label="214.104.190.162;1pkt 1fpkt", shape=invtriangle, color=brown];
9021[label="214.104.190.162;1pkt 1fpkt", shape=invhouse, color=bisque];
stat584[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.104.190.162:80, 133.224.155.114:37286}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37286: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7440--8501[label="1;1pkt 1fpkt"];
7440--9021[label="1;1pkt 1fpkt"];
8501--9021[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.155.114" dst_port="37286" src_ip="214.104.190.162" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.128.12.163"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.68.66.163"/>
    </slice>
    <from sec="1194757617" usec="0"/>
    <to sec="1194757651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.158.212.167"/>
    </slice>
    <from sec="1194757855" usec="0"/>
    <to sec="1194757860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.91.103.170"/>
    </slice>
    <from sec="1194757536" usec="0"/>
    <to sec="1194757568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
526[label="133.224.208.82;d;313pkt 313fpkt", shape=diamond, color=yellow];
763[label="209.192.10.230;s;1pkt 1fpkt", shape=diamond, color=yellow];
1237[label="129.37.80.63;d;405pkt 405fpkt", shape=diamond, color=yellow];
1469[label="173.144.70.85;d;126pkt 126fpkt", shape=diamond, color=yellow];
1942[label="51.179.91.45;s;1pkt 1fpkt", shape=diamond, color=yellow];
2198[label="2.122.194.128;s;7pkt 7fpkt", shape=diamond, color=yellow];
2900[label="173.144.71.77;d;318pkt 318fpkt", shape=diamond, color=yellow];
3039[label="48.174.193.222;s;124pkt 124fpkt", shape=diamond, color=yellow];
3142[label="132.9.42.38;s;14pkt 14fpkt", shape=diamond, color=yellow];
3621[label="206.168.32.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
4214[label="209.192.10.230;s;1pkt 1fpkt", shape=hexagon, color=black];
4529[label="51.179.91.45;s;1pkt 1fpkt", shape=hexagon, color=black];
4885[label="129.37.80.63;d;363pkt 363fpkt", shape=hexagon, color=black];
5410[label="173.144.70.85;d;126pkt 126fpkt", shape=hexagon, color=black];
5599[label="206.168.32.15;s;1pkt 1fpkt", shape=hexagon, color=black];
6307[label="206.168.32.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6816[label="198.210.86.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6895[label="57.4.3.85;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7181[label="2.122.194.128;16pkt 16fpkt", shape=pentagon, color=darkviolet];
7205[label="209.192.9.132;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7301[label="135.172.120.144;22pkt 22fpkt", shape=pentagon, color=darkviolet];
7375[label="88.136.128.153;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7392[label="135.3.168.155;74pkt 74fpkt", shape=pentagon, color=darkviolet];
7398[label="4.243.49.156;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7516[label="59.1.50.171;47pkt 47fpkt", shape=pentagon, color=darkviolet];
8404[label="2.122.194.128;16pkt 16fpkt", shape=invtriangle, color=brown];
8445[label="135.172.120.144;22pkt 22fpkt", shape=invtriangle, color=brown];
8487[label="4.243.49.156;4pkt 4fpkt", shape=invtriangle, color=brown];
8536[label="59.1.50.171;47pkt 47fpkt", shape=invtriangle, color=brown];
8988[label="135.172.120.144;22pkt 22fpkt", shape=invhouse, color=bisque];
9011[label="4.243.49.156;4pkt 4fpkt", shape=invhouse, color=bisque];
9041[label="59.1.50.171;47pkt 47fpkt", shape=invhouse, color=bisque];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 129.37.80.63:*}[30.303%]&lt;BR/&gt;{*:80, 173.144.71.77:*}[26.431%]&lt;BR/&gt;{*:*, 133.224.208.82:*}[26.3468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.4766%)&lt;BR/&gt; 25: (3.73832%)&lt;BR/&gt; 53: (1.21495%)&lt;BR/&gt; 110: (1.07477%)&lt;BR/&gt; 443: (0.514019%)&gt;];
}
526--763[label="1;1pkt 1fpkt"];
526--1285[label="0.00638978;2pkt 2fpkt"];
526--1694[label="0.02;1pkt 1fpkt"];
526--1706[label="0.00958466;3pkt 3fpkt"];
526--1743[label="0.00416667;1pkt 1fpkt"];
526--1763[label="0.030303;1pkt 1fpkt"];
526--1777[label="0.00977199;3pkt 3fpkt"];
526--1778[label="0.0227273;1pkt 1fpkt"];
526--2095[label="0.0190476;2pkt 2fpkt"];
526--2108[label="0.0204082;1pkt 1fpkt"];
526--2133[label="0.0212766;1pkt 1fpkt"];
526--2205[label="0.031746;2pkt 2fpkt"];
526--3390[label="0.00319489;1pkt 1fpkt"];
526--3662[label="0.05;1pkt 1fpkt"];
526--3677[label="0.0707965;16pkt 16fpkt"];
526--3944[label="0.0127796;4pkt 4fpkt"];
526--4098[label="0.0223642;7pkt 7fpkt"];
526--4214[label="1;1pkt 1fpkt"];
526--4659[label="0.0190476;2pkt 2fpkt"];
526--4696[label="0.00543478;1pkt 1fpkt"];
526--4942[label="0.031746;2pkt 2fpkt"];
526--5366[label="0.01;2pkt 2fpkt"];
526--5525[label="0.00958466;3pkt 3fpkt"];
526--5710[label="0.0707965;16pkt 16fpkt"];
526--6061[label="0.0223642;7pkt 7fpkt"];
526--6065[label="0.00958466;3pkt 3fpkt"];
526--6072[label="0.00319489;1pkt 1fpkt"];
526--6081[label="0.00958466;3pkt 3fpkt"];
526--6082[label="0.0223642;7pkt 7fpkt"];
526--6083[label="0.00319489;1pkt 1fpkt"];
526--6086[label="0.0127796;4pkt 4fpkt"];
526--6093[label="0.00638978;2pkt 2fpkt"];
526--6107[label="0.00958466;3pkt 3fpkt"];
526--6114[label="0.00319489;1pkt 1fpkt"];
526--6122[label="0.00958466;3pkt 3fpkt"];
526--6123[label="0.0223642;7pkt 7fpkt"];
526--6124[label="0.00319489;1pkt 1fpkt"];
526--6127[label="0.0127796;4pkt 4fpkt"];
526--6133[label="0.00638978;2pkt 2fpkt"];
526--6144[label="0.00958466;3pkt 3fpkt"];
526--6149[label="0.00319489;1pkt 1fpkt"];
526--6157[label="0.00958466;3pkt 3fpkt"];
526--6158[label="0.0223642;7pkt 7fpkt"];
526--6159[label="0.00319489;1pkt 1fpkt"];
526--6162[label="0.0127796;4pkt 4fpkt"];
526--6167[label="0.00638978;2pkt 2fpkt"];
526--6584[label="0.0454545;1pkt 1fpkt"];
526--6751[label="0.0909091;1pkt 1fpkt"];
526--6858[label="0.0196078;2pkt 2fpkt"];
526--7205[label="0.142857;1pkt 1fpkt"];
526--7301[label="0.0454545;1pkt 1fpkt"];
526--7586[label="0.1;3pkt 3fpkt"];
526--7599[label="0.111111;1pkt 1fpkt"];
526--7773[label="0.0223642;7pkt 7fpkt"];
526--7784[label="0.0127796;4pkt 4fpkt"];
526--7827[label="0.02;1pkt 1fpkt"];
526--8222[label="0.0909091;1pkt 1fpkt"];
526--8445[label="0.0454545;1pkt 1fpkt"];
526--8988[label="0.0454545;1pkt 1fpkt"];
763--4214[label="1;1pkt 1fpkt"];
1237--1285[label="0.00246914;1pkt 1fpkt"];
1237--1316[label="0.00380228;1pkt 1fpkt"];
1237--1355[label="0.0192308;1pkt 1fpkt"];
1237--1357[label="0.129032;8pkt 8fpkt"];
1237--1701[label="0.00493827;2pkt 2fpkt"];
1237--1706[label="0.00246914;1pkt 1fpkt"];
1237--1777[label="0.00325733;1pkt 1fpkt"];
1237--1993[label="0.00671141;1pkt 1fpkt"];
1237--2070[label="0.0512821;2pkt 2fpkt"];
1237--2095[label="0.0190476;2pkt 2fpkt"];
1237--2200[label="0.0545455;3pkt 3fpkt"];
1237--2205[label="0.0634921;4pkt 4fpkt"];
1237--2521[label="0.0027248;1pkt 1fpkt"];
1237--2560[label="0.0526316;2pkt 2fpkt"];
1237--2569[label="0.0882353;6pkt 6fpkt"];
1237--2584[label="0.015625;1pkt 1fpkt"];
1237--2586[label="0.103448;6pkt 6fpkt"];
1237--2648[label="0.0222222;1pkt 1fpkt"];
1237--2774[label="0.0336134;8pkt 8fpkt"];
1237--2827[label="0.0298507;2pkt 2fpkt"];
1237--2944[label="0.375;6pkt 6fpkt"];
1237--2963[label="0.477477;53pkt 53fpkt"];
1237--3483[label="0.075;3pkt 3fpkt"];
1237--3491[label="0.0731707;3pkt 3fpkt"];
1237--3721[label="0.0106383;1pkt 1fpkt"];
1237--3725[label="0.0322581;1pkt 1fpkt"];
1237--3990[label="0.06;3pkt 3fpkt"];
1237--4613[label="0.0757576;5pkt 5fpkt"];
1237--4653[label="0.00246914;1pkt 1fpkt"];
1237--4659[label="0.0190476;2pkt 2fpkt"];
1237--4885[label="1;363pkt 363fpkt"];
1237--4924[label="0.0540541;2pkt 2fpkt"];
1237--4932[label="0.136364;6pkt 6fpkt"];
1237--4934[label="0.0555556;7pkt 7fpkt"];
1237--4939[label="0.015625;1pkt 1fpkt"];
1237--4942[label="0.0634921;4pkt 4fpkt"];
1237--5181[label="0.477477;53pkt 53fpkt"];
1237--5434[label="0.375;6pkt 6fpkt"];
1237--5525[label="0.00246914;1pkt 1fpkt"];
1237--5628[label="0.00671141;1pkt 1fpkt"];
1237--5694[label="0.0512821;2pkt 2fpkt"];
1237--5767[label="0.0731707;3pkt 3fpkt"];
1237--5952[label="0.136364;6pkt 6fpkt"];
1237--5954[label="0.0555556;7pkt 7fpkt"];
1237--6065[label="0.0938272;38pkt 38fpkt"];
1237--6081[label="0.0123457;5pkt 5fpkt"];
1237--6086[label="0.00246914;1pkt 1fpkt"];
1237--6107[label="0.0938272;38pkt 38fpkt"];
1237--6122[label="0.0123457;5pkt 5fpkt"];
1237--6127[label="0.00246914;1pkt 1fpkt"];
1237--6144[label="0.0938272;38pkt 38fpkt"];
1237--6157[label="0.0123457;5pkt 5fpkt"];
1237--6162[label="0.00246914;1pkt 1fpkt"];
1237--6895[label="0.5;1pkt 1fpkt"];
1237--7181[label="0.125;2pkt 2fpkt"];
1237--7216[label="0.0327869;2pkt 2fpkt"];
1237--7229[label="0.0363636;2pkt 2fpkt"];
1237--7250[label="0.142857;2pkt 2fpkt"];
1237--7301[label="0.272727;6pkt 6fpkt"];
1237--7392[label="1;74pkt 74fpkt"];
1237--7398[label="1;4pkt 4fpkt"];
1237--7788[label="0.0169492;1pkt 1fpkt"];
1237--7899[label="0.0144928;1pkt 1fpkt"];
1237--8404[label="0.125;2pkt 2fpkt"];
1237--8445[label="0.272727;6pkt 6fpkt"];
1237--8487[label="1;4pkt 4fpkt"];
1237--8636[label="0.0169492;1pkt 1fpkt"];
1237--8988[label="0.272727;6pkt 6fpkt"];
1237--9011[label="1;4pkt 4fpkt"];
1469--1942[label="1;1pkt 1fpkt"];
1469--2198[label="0.285714;2pkt 2fpkt"];
1469--2584[label="0.015625;1pkt 1fpkt"];
1469--2774[label="0.00793651;1pkt 1fpkt"];
1469--2787[label="0.0512821;2pkt 2fpkt"];
1469--3142[label="0.928571;13pkt 13fpkt"];
1469--4529[label="1;1pkt 1fpkt"];
1469--4939[label="0.015625;1pkt 1fpkt"];
1469--5410[label="1;126pkt 126fpkt"];
1469--6065[label="0.0634921;8pkt 8fpkt"];
1469--6081[label="0.00793651;1pkt 1fpkt"];
1469--6107[label="0.0634921;8pkt 8fpkt"];
1469--6122[label="0.00793651;1pkt 1fpkt"];
1469--6144[label="0.0634921;8pkt 8fpkt"];
1469--6157[label="0.00793651;1pkt 1fpkt"];
1469--6552[label="0.0434783;1pkt 1fpkt"];
1469--6911[label="0.047619;2pkt 2fpkt"];
1469--7181[label="0.125;2pkt 2fpkt"];
1469--7301[label="0.136364;3pkt 3fpkt"];
1469--7375[label="1;2pkt 2fpkt"];
1469--7516[label="1;47pkt 47fpkt"];
1469--8147[label="0.0454545;1pkt 1fpkt"];
1469--8404[label="0.125;2pkt 2fpkt"];
1469--8445[label="0.136364;3pkt 3fpkt"];
1469--8536[label="1;47pkt 47fpkt"];
1469--8988[label="0.136364;3pkt 3fpkt"];
1469--9041[label="1;47pkt 47fpkt"];
1942--4529[label="1;1pkt 1fpkt"];
1942--5410[label="1;1pkt 1fpkt"];
2198--3522[label="0.571429;4pkt 4fpkt"];
2198--5410[label="0.285714;2pkt 2fpkt"];
2198--7181[label="1;7pkt 7fpkt"];
2198--8404[label="1;7pkt 7fpkt"];
2900--3039[label="1;124pkt 124fpkt"];
2900--3491[label="0.0243902;1pkt 1fpkt"];
2900--3621[label="1;1pkt 1fpkt"];
2900--3721[label="0.0744681;7pkt 7fpkt"];
2900--4939[label="0.03125;2pkt 2fpkt"];
2900--5377[label="0.00793651;1pkt 1fpkt"];
2900--5599[label="1;1pkt 1fpkt"];
2900--5767[label="0.0243902;1pkt 1fpkt"];
2900--6065[label="0.091195;29pkt 29fpkt"];
2900--6081[label="0.0188679;6pkt 6fpkt"];
2900--6107[label="0.091195;29pkt 29fpkt"];
2900--6122[label="0.0188679;6pkt 6fpkt"];
2900--6144[label="0.091195;29pkt 29fpkt"];
2900--6157[label="0.0188679;6pkt 6fpkt"];
2900--6246[label="0.833333;5pkt 5fpkt"];
2900--6307[label="1;1pkt 1fpkt"];
2900--6816[label="1;1pkt 1fpkt"];
2900--7205[label="0.857143;6pkt 6fpkt"];
2900--7216[label="0.0163934;1pkt 1fpkt"];
3142--5410[label="0.928571;13pkt 13fpkt"];
3142--6065[label="0.142857;2pkt 2fpkt"];
3142--6081[label="0.142857;2pkt 2fpkt"];
3142--6086[label="0.0714286;1pkt 1fpkt"];
3142--6107[label="0.142857;2pkt 2fpkt"];
3142--6122[label="0.142857;2pkt 2fpkt"];
3142--6127[label="0.0714286;1pkt 1fpkt"];
3142--6144[label="0.142857;2pkt 2fpkt"];
3142--6157[label="0.142857;2pkt 2fpkt"];
3142--6162[label="0.0714286;1pkt 1fpkt"];
3621--5599[label="1;1pkt 1fpkt"];
4529--5410[label="1;1pkt 1fpkt"];
4885--4924[label="0.0540541;2pkt 2fpkt"];
4885--4932[label="0.136364;6pkt 6fpkt"];
4885--4934[label="0.0555556;7pkt 7fpkt"];
4885--4939[label="0.015625;1pkt 1fpkt"];
4885--4942[label="0.0634921;4pkt 4fpkt"];
4885--5181[label="0.477477;53pkt 53fpkt"];
4885--5434[label="0.375;6pkt 6fpkt"];
4885--5525[label="0.00275482;1pkt 1fpkt"];
4885--5628[label="0.00671141;1pkt 1fpkt"];
4885--5694[label="0.0512821;2pkt 2fpkt"];
4885--5767[label="0.0731707;3pkt 3fpkt"];
4885--5952[label="0.136364;6pkt 6fpkt"];
4885--5954[label="0.0555556;7pkt 7fpkt"];
4885--6065[label="0.00826446;3pkt 3fpkt"];
4885--6081[label="0.00826446;3pkt 3fpkt"];
4885--6086[label="0.00275482;1pkt 1fpkt"];
4885--6107[label="0.00826446;3pkt 3fpkt"];
4885--6122[label="0.00826446;3pkt 3fpkt"];
4885--6127[label="0.00275482;1pkt 1fpkt"];
4885--6144[label="0.00826446;3pkt 3fpkt"];
4885--6157[label="0.00826446;3pkt 3fpkt"];
4885--6162[label="0.00275482;1pkt 1fpkt"];
4885--6895[label="0.5;1pkt 1fpkt"];
4885--7181[label="0.125;2pkt 2fpkt"];
4885--7216[label="0.0327869;2pkt 2fpkt"];
4885--7229[label="0.0363636;2pkt 2fpkt"];
4885--7250[label="0.142857;2pkt 2fpkt"];
4885--7301[label="0.272727;6pkt 6fpkt"];
4885--7392[label="1;74pkt 74fpkt"];
4885--7398[label="1;4pkt 4fpkt"];
4885--7788[label="0.0169492;1pkt 1fpkt"];
4885--7899[label="0.0144928;1pkt 1fpkt"];
4885--8404[label="0.125;2pkt 2fpkt"];
4885--8445[label="0.272727;6pkt 6fpkt"];
4885--8487[label="1;4pkt 4fpkt"];
4885--8636[label="0.0169492;1pkt 1fpkt"];
4885--8988[label="0.272727;6pkt 6fpkt"];
4885--9011[label="1;4pkt 4fpkt"];
5410--6065[label="0.0634921;8pkt 8fpkt"];
5410--6081[label="0.00793651;1pkt 1fpkt"];
5410--6107[label="0.0634921;8pkt 8fpkt"];
5410--6122[label="0.00793651;1pkt 1fpkt"];
5410--6144[label="0.0634921;8pkt 8fpkt"];
5410--6157[label="0.00793651;1pkt 1fpkt"];
5410--6552[label="0.0434783;1pkt 1fpkt"];
5410--6911[label="0.047619;2pkt 2fpkt"];
5410--7181[label="0.125;2pkt 2fpkt"];
5410--7301[label="0.136364;3pkt 3fpkt"];
5410--7375[label="1;2pkt 2fpkt"];
5410--7516[label="1;47pkt 47fpkt"];
5410--8147[label="0.0454545;1pkt 1fpkt"];
5410--8404[label="0.125;2pkt 2fpkt"];
5410--8445[label="0.136364;3pkt 3fpkt"];
5410--8536[label="1;47pkt 47fpkt"];
5410--8988[label="0.136364;3pkt 3fpkt"];
5410--9041[label="1;47pkt 47fpkt"];
7181--8404[label="1;16pkt 16fpkt"];
7301--8445[label="1;22pkt 22fpkt"];
7301--8988[label="1;22pkt 22fpkt"];
7398--8487[label="1;4pkt 4fpkt"];
7398--9011[label="1;4pkt 4fpkt"];
7516--8536[label="1;47pkt 47fpkt"];
7516--9041[label="1;47pkt 47fpkt"];
8445--8988[label="1;22pkt 22fpkt"];
8487--9011[label="1;4pkt 4fpkt"];
8536--9041[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.208.82"/>
      <filter dst_ip="129.37.80.63" src_port="80"/>
      <filter dst_ip="173.144.71.77" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.210.135.174"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.133.215.174"/>
    </slice>
    <from sec="1194757362" usec="0"/>
    <to sec="1194757524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.217.29.176"/>
    </slice>
    <from sec="1194757273" usec="0"/>
    <to sec="1194757304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_595{
style=filled;
color=gray75;
2630[label="133.224.199.81;d;45pkt 45fpkt", shape=diamond, color=yellow];
2889[label="173.144.71.178;d;93pkt 93fpkt", shape=diamond, color=yellow];
3032[label="163.60.201.108;s;77pkt 77fpkt", shape=diamond, color=yellow];
5204[label="163.60.201.108;s;77pkt 77fpkt", shape=hexagon, color=black];
5389[label="173.144.71.178;d;93pkt 93fpkt", shape=hexagon, color=black];
5413[label="133.224.199.81;d;45pkt 45fpkt", shape=hexagon, color=black];
7063[label="163.60.201.108;77pkt 77fpkt", shape=pentagon, color=darkviolet];
7554[label="209.192.7.178;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8356[label="163.60.201.108;77pkt 77fpkt", shape=invtriangle, color=brown];
8551[label="209.192.7.178;7pkt 7fpkt", shape=invtriangle, color=brown];
9052[label="209.192.7.178;7pkt 7fpkt", shape=invhouse, color=bisque];
stat595[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.60.201.108:80, 173.144.71.178:*}[54.6099%]&lt;BR/&gt;{*:*, 133.224.199.81:*}[31.9149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.7025%)&lt;BR/&gt; 443: (4.13223%)&lt;BR/&gt; 60892: (0.495868%)&lt;BR/&gt; 60891: (0.495868%)&lt;BR/&gt; 60890: (0.495868%)&gt;];
}
2630--4659[label="0.0222222;1pkt 1fpkt"];
2630--4942[label="0.0444444;2pkt 2fpkt"];
2630--5413[label="1;45pkt 45fpkt"];
2630--6552[label="0.130435;3pkt 3fpkt"];
2630--7554[label="0.285714;2pkt 2fpkt"];
2630--7628[label="0.2;1pkt 1fpkt"];
2630--8147[label="0.136364;3pkt 3fpkt"];
2630--8551[label="0.285714;2pkt 2fpkt"];
2630--9052[label="0.285714;2pkt 2fpkt"];
2889--3032[label="1;77pkt 77fpkt"];
2889--4939[label="0.015625;1pkt 1fpkt"];
2889--5204[label="1;77pkt 77fpkt"];
2889--5389[label="1;93pkt 93fpkt"];
2889--5694[label="0.025641;1pkt 1fpkt"];
2889--7063[label="1;77pkt 77fpkt"];
2889--7554[label="0.285714;2pkt 2fpkt"];
2889--8356[label="1;77pkt 77fpkt"];
2889--8551[label="0.285714;2pkt 2fpkt"];
2889--9052[label="0.285714;2pkt 2fpkt"];
3032--5204[label="1;77pkt 77fpkt"];
3032--5389[label="1;77pkt 77fpkt"];
3032--7063[label="1;77pkt 77fpkt"];
3032--8356[label="1;77pkt 77fpkt"];
5204--5389[label="1;77pkt 77fpkt"];
5204--7063[label="1;77pkt 77fpkt"];
5204--8356[label="1;77pkt 77fpkt"];
5389--5694[label="0.025641;1pkt 1fpkt"];
5389--7063[label="1;77pkt 77fpkt"];
5389--7554[label="0.285714;2pkt 2fpkt"];
5389--8356[label="1;77pkt 77fpkt"];
5389--8551[label="0.285714;2pkt 2fpkt"];
5389--9052[label="0.285714;2pkt 2fpkt"];
5413--6552[label="0.130435;3pkt 3fpkt"];
5413--7554[label="0.285714;2pkt 2fpkt"];
5413--7628[label="0.2;1pkt 1fpkt"];
5413--8147[label="0.136364;3pkt 3fpkt"];
5413--8551[label="0.285714;2pkt 2fpkt"];
5413--9052[label="0.285714;2pkt 2fpkt"];
7063--8356[label="1;77pkt 77fpkt"];
7554--8551[label="1;7pkt 7fpkt"];
7554--9052[label="1;7pkt 7fpkt"];
8551--9052[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.199.81"/>
      <filter dst_ip="173.144.71.178" src_ip="163.60.201.108" src_port="80"/>
    </slice>
    <from sec="1194757232" usec="0"/>
    <to sec="1194757962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
7558[label="192.30.105.178;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8552[label="192.30.105.178;8pkt 8fpkt", shape=invtriangle, color=brown];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.30.105.178:16080, 4.137.197.191:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16080: (50%)&lt;BR/&gt; 56959: (6.25%)&lt;BR/&gt; 56941: (6.25%)&lt;BR/&gt; 48614: (6.25%)&lt;BR/&gt; 48604: (6.25%)&gt;];
}
7558--8552[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="4.137.197.191" src_ip="192.30.105.178" src_port="16080"/>
    </slice>
    <from sec="1194757361" usec="0"/>
    <to sec="1194758087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.20.130.181"/>
    </slice>
    <from sec="1194757486" usec="0"/>
    <to sec="1194757518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.125.83.182"/>
    </slice>
    <from sec="1194757522" usec="0"/>
    <to sec="1194757584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
7597[label="140.114.157.183;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8565[label="140.114.157.183;1pkt 1fpkt", shape=invtriangle, color=brown];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.114.157.183:80, 133.224.155.114:37287}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37287: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7597--8565[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.155.114" dst_port="37287" src_ip="140.114.157.183" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="48.35.132.184"/>
    </slice>
    <from sec="1194757556" usec="0"/>
    <to sec="1194757560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
1147[label="173.144.137.28;d;393pkt 393fpkt", shape=diamond, color=yellow];
2660[label="133.224.158.45;d;6pkt 6fpkt", shape=diamond, color=yellow];
2663[label="74.147.26.157;s;7pkt 7fpkt", shape=diamond, color=yellow];
2699[label="193.8.80.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
4142[label="173.144.137.28;d;182pkt 182fpkt", shape=hexagon, color=black];
6657[label="93.236.17.56;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7614[label="221.44.36.187;3pkt 3fpkt", shape=pentagon, color=darkviolet];
7660[label="208.5.137.196;10pkt 10fpkt", shape=pentagon, color=darkviolet];
7709[label="193.8.80.205;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8184[label="93.236.17.56;9pkt 9fpkt", shape=invtriangle, color=brown];
8569[label="221.44.36.187;3pkt 3fpkt", shape=invtriangle, color=brown];
8605[label="193.8.80.205;2pkt 2fpkt", shape=invtriangle, color=brown];
8830[label="93.236.17.56;8pkt 8fpkt", shape=invhouse, color=bisque];
9063[label="221.44.36.187;3pkt 3fpkt", shape=invhouse, color=bisque];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 173.144.137.28:80}[96.3145%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9218%)&lt;BR/&gt; 1391: (0.547731%)&lt;BR/&gt; 1692: (0.391236%)&lt;BR/&gt; 1681: (0.391236%)&lt;BR/&gt; 1680: (0.391236%)&gt;];
}
1147--2663[label="0.142857;1pkt 1fpkt"];
1147--2699[label="1;2pkt 2fpkt"];
1147--3866[label="0.00254453;1pkt 1fpkt"];
1147--4142[label="1;182pkt 182fpkt"];
1147--6073[label="0.0585242;23pkt 23fpkt"];
1147--6084[label="0.0458015;18pkt 18fpkt"];
1147--6094[label="0.043257;17pkt 17fpkt"];
1147--6098[label="0.00254453;1pkt 1fpkt"];
1147--6100[label="0.00254453;1pkt 1fpkt"];
1147--6115[label="0.0585242;23pkt 23fpkt"];
1147--6125[label="0.0458015;18pkt 18fpkt"];
1147--6134[label="0.043257;17pkt 17fpkt"];
1147--6137[label="0.00254453;1pkt 1fpkt"];
1147--6140[label="0.00254453;1pkt 1fpkt"];
1147--6150[label="0.0585242;23pkt 23fpkt"];
1147--6160[label="0.0458015;18pkt 18fpkt"];
1147--6168[label="0.043257;17pkt 17fpkt"];
1147--6171[label="0.00254453;1pkt 1fpkt"];
1147--6174[label="0.00254453;1pkt 1fpkt"];
1147--6657[label="1;9pkt 9fpkt"];
1147--7279[label="0.00254453;1pkt 1fpkt"];
1147--7614[label="1;3pkt 3fpkt"];
1147--7660[label="0.2;2pkt 2fpkt"];
1147--7709[label="1;2pkt 2fpkt"];
1147--8184[label="1;9pkt 9fpkt"];
1147--8569[label="1;3pkt 3fpkt"];
1147--8605[label="1;2pkt 2fpkt"];
1147--8830[label="1;8pkt 8fpkt"];
1147--9063[label="1;3pkt 3fpkt"];
2660--2663[label="1;6pkt 6fpkt"];
2699--7709[label="1;2pkt 2fpkt"];
2699--8605[label="1;2pkt 2fpkt"];
4142--6073[label="0.00549451;1pkt 1fpkt"];
4142--6084[label="0.00549451;1pkt 1fpkt"];
4142--6094[label="0.00549451;1pkt 1fpkt"];
4142--6115[label="0.00549451;1pkt 1fpkt"];
4142--6125[label="0.00549451;1pkt 1fpkt"];
4142--6134[label="0.00549451;1pkt 1fpkt"];
4142--6150[label="0.00549451;1pkt 1fpkt"];
4142--6160[label="0.00549451;1pkt 1fpkt"];
4142--6168[label="0.00549451;1pkt 1fpkt"];
4142--6657[label="0.666667;6pkt 6fpkt"];
4142--7614[label="1;3pkt 3fpkt"];
4142--7660[label="0.2;2pkt 2fpkt"];
4142--8184[label="0.666667;6pkt 6fpkt"];
4142--8569[label="1;3pkt 3fpkt"];
4142--8830[label="0.625;5pkt 5fpkt"];
4142--9063[label="1;3pkt 3fpkt"];
6657--8184[label="1;9pkt 9fpkt"];
6657--8830[label="1;8pkt 8fpkt"];
7614--8569[label="1;3pkt 3fpkt"];
7614--9063[label="1;3pkt 3fpkt"];
7709--8605[label="1;2pkt 2fpkt"];
8184--8830[label="1;8pkt 8fpkt"];
8569--9063[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.137.28" dst_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.181.5.189"/>
    </slice>
    <from sec="1194757822" usec="0"/>
    <to sec="1194757997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.239.85.189"/>
    </slice>
    <from sec="1194757706" usec="0"/>
    <to sec="1194757718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.139.231.190"/>
    </slice>
    <from sec="1194757876" usec="0"/>
    <to sec="1194757956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.115.9.192"/>
    </slice>
    <from sec="1194757656" usec="0"/>
    <to sec="1194757677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.238.64.195"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.13.68.196"/>
    </slice>
    <from sec="1194757303" usec="0"/>
    <to sec="1194757408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="57.11.100.200"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_609{
style=filled;
color=gray75;
7688[label="221.29.133.200;109pkt 109fpkt", shape=pentagon, color=darkviolet];
8596[label="221.29.133.200;109pkt 109fpkt", shape=invtriangle, color=brown];
9076[label="221.29.133.200;109pkt 109fpkt", shape=invhouse, color=bisque];
stat609[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.29.133.200:47527, *:1026}[46.789%]&lt;BR/&gt;{221.29.133.200:47528, *:*}[27.5229%]&lt;BR/&gt;{221.29.133.200:47527, *:1027}[25.6881%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47527: (36.2385%)&lt;BR/&gt; 1026: (31.1927%)&lt;BR/&gt; 1027: (18.8073%)&lt;BR/&gt; 47528: (13.7615%)&gt;];
}
7688--8596[label="1;109pkt 109fpkt"];
7688--9076[label="1;109pkt 109fpkt"];
8596--9076[label="1;109pkt 109fpkt"];
</description>
    <slice>
      <filter src_ip="221.29.133.200" src_port="47528"/>
      <filter dst_port="1026" src_ip="221.29.133.200" src_port="47527"/>
      <filter dst_port="1027" src_ip="221.29.133.200" src_port="47527"/>
    </slice>
    <from sec="1194757811" usec="0"/>
    <to sec="1194757812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.13.132.201"/>
    </slice>
    <from sec="1194757338" usec="0"/>
    <to sec="1194757419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
7704[label="152.174.98.204;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8602[label="152.174.98.204;2pkt 2fpkt", shape=invtriangle, color=brown];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.174.98.204:80, 74.147.116.5:1637}[50%]&lt;BR/&gt;{152.174.98.204:80, 74.147.116.5:2174}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2174: (25%)&lt;BR/&gt; 1637: (25%)&gt;];
}
7704--8602[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="74.147.116.5" dst_port="2174" src_ip="152.174.98.204" src_port="80"/>
      <filter dst_ip="74.147.116.5" dst_port="1637" src_ip="152.174.98.204" src_port="80"/>
    </slice>
    <from sec="1194757598" usec="0"/>
    <to sec="1194757616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.08159,1.81669,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
112[label="51.15.141.138;d;4pkt 4fpkt", shape=diamond, color=yellow];
113[label="193.1.200.192;s;446pkt 446fpkt", shape=diamond, color=yellow];
890[label="57.16.49.89;d;72pkt 72fpkt", shape=diamond, color=yellow];
1045[label="93.82.144.234;d;38pkt 38fpkt", shape=diamond, color=yellow];
1046[label="129.33.160.194;s;156pkt 156fpkt", shape=diamond, color=yellow];
1278[label="48.164.136.168;d;119pkt 119fpkt", shape=diamond, color=yellow];
1354[label="129.33.56.72;s;143pkt 143fpkt", shape=diamond, color=yellow];
1442[label="132.19.74.95;s;412pkt 412fpkt", shape=diamond, color=yellow];
1450[label="219.2.33.196;d;1pkt 1fpkt", shape=diamond, color=yellow];
1494[label="4.131.137.27;d;29pkt 29fpkt", shape=diamond, color=yellow];
1523[label="192.140.144.203;d;84pkt 84fpkt", shape=diamond, color=yellow];
1564[label="220.236.33.226;d;9pkt 9fpkt", shape=diamond, color=yellow];
1589[label="152.174.152.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
1749[label="152.174.125.185;s;8pkt 8fpkt", shape=diamond, color=yellow];
1805[label="57.8.161.198;d;3pkt 3fpkt", shape=diamond, color=yellow];
2189[label="132.19.73.40;s;310pkt 310fpkt", shape=diamond, color=yellow];
2259[label="8.151.88.228;d;47pkt 47fpkt", shape=diamond, color=yellow];
2274[label="220.236.3.219;d;8pkt 8fpkt", shape=diamond, color=yellow];
2369[label="53.28.159.63;d;1pkt 1fpkt", shape=diamond, color=yellow];
2661[label="133.224.158.45;s;10pkt 10fpkt", shape=diamond, color=yellow];
2662[label="74.147.26.157;d;9pkt 9fpkt", shape=diamond, color=yellow];
2959[label="219.2.71.35;d;105pkt 105fpkt", shape=diamond, color=yellow];
3777[label="219.24.146.146;d;6pkt 6fpkt", shape=diamond, color=yellow];
3781[label="210.177.138.40;d;2pkt 2fpkt", shape=diamond, color=yellow];
3821[label="219.2.228.162;d;3pkt 3fpkt", shape=diamond, color=yellow];
3839[label="129.33.160.2;s;2pkt 2fpkt", shape=diamond, color=yellow];
3844[label="93.100.155.92;d;2pkt 2fpkt", shape=diamond, color=yellow];
3872[label="51.15.141.138;d;4pkt 4fpkt", shape=hexagon, color=black];
3873[label="193.1.200.192;s;446pkt 446fpkt", shape=hexagon, color=black];
4254[label="132.19.74.95;s;307pkt 307fpkt", shape=hexagon, color=black];
4261[label="4.131.137.27;d;29pkt 29fpkt", shape=hexagon, color=black];
4290[label="57.16.49.89;d;71pkt 71fpkt", shape=hexagon, color=black];
4466[label="129.33.56.72;s;143pkt 143fpkt", shape=hexagon, color=black];
5000[label="74.147.26.157;d;9pkt 9fpkt", shape=hexagon, color=black];
5178[label="219.2.71.35;d;105pkt 105fpkt", shape=hexagon, color=black];
5319[label="48.164.136.168;d;107pkt 107fpkt", shape=hexagon, color=black];
5755[label="132.19.73.40;s;310pkt 310fpkt", shape=hexagon, color=black];
5856[label="129.33.160.2;s;2pkt 2fpkt", shape=hexagon, color=black];
5858[label="93.100.155.92;d;2pkt 2fpkt", shape=hexagon, color=black];
6209[label="129.33.160.2;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6578[label="133.224.158.45;11pkt 11fpkt", shape=pentagon, color=darkviolet];
6913[label="129.60.146.86;30pkt 30fpkt", shape=pentagon, color=darkviolet];
7652[label="129.33.160.194;168pkt 168fpkt", shape=pentagon, color=darkviolet];
7723[label="152.174.149.207;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8156[label="133.224.158.45;10pkt 10fpkt", shape=invtriangle, color=brown];
8289[label="129.60.146.86;29pkt 29fpkt", shape=invtriangle, color=brown];
8580[label="129.33.160.194;168pkt 168fpkt", shape=invtriangle, color=brown];
8608[label="152.174.149.207;16pkt 16fpkt", shape=invtriangle, color=brown];
8696[label="152.174.152.241;5pkt 5fpkt", shape=invtriangle, color=brown];
8891[label="129.60.146.86;30pkt 30fpkt", shape=invhouse, color=bisque];
9082[label="152.174.149.207;16pkt 16fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{132.19.74.95:80, *:*}[25.9119%]&lt;BR/&gt;{193.1.200.192:80, *:*}[24.5283%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.4402%)&lt;BR/&gt; 25: (5.53369%)&lt;BR/&gt; 995: (4.95573%)&lt;BR/&gt; 443: (1.56173%)&lt;BR/&gt; 993: (1.10674%)&gt;];
}
112--113[label="1;4pkt 4fpkt"];
112--3872[label="1;4pkt 4fpkt"];
112--3873[label="1;4pkt 4fpkt"];
113--571[label="0.00990099;1pkt 1fpkt"];
113--890[label="0.777778;56pkt 56fpkt"];
113--1262[label="0.00995025;2pkt 2fpkt"];
113--1278[label="0.571429;68pkt 68fpkt"];
113--1371[label="0.024;3pkt 3fpkt"];
113--1717[label="0.0135135;1pkt 1fpkt"];
113--1761[label="0.0225564;3pkt 3fpkt"];
113--2249[label="0.0363636;2pkt 2fpkt"];
113--2369[label="1;1pkt 1fpkt"];
113--3777[label="0.666667;4pkt 4fpkt"];
113--3872[label="1;4pkt 4fpkt"];
113--3873[label="1;446pkt 446fpkt"];
113--4223[label="0.037037;3pkt 3fpkt"];
113--4290[label="0.788732;56pkt 56fpkt"];
113--5114[label="0.0149254;1pkt 1fpkt"];
113--5134[label="0.0225564;3pkt 3fpkt"];
113--5319[label="0.579439;62pkt 62fpkt"];
113--5406[label="0.0363636;2pkt 2fpkt"];
113--6053[label="0.0363636;2pkt 2fpkt"];
113--6065[label="0.0717489;32pkt 32fpkt"];
113--6081[label="0.0426009;19pkt 19fpkt"];
113--6086[label="0.0224215;10pkt 10fpkt"];
113--6107[label="0.0717489;32pkt 32fpkt"];
113--6122[label="0.0426009;19pkt 19fpkt"];
113--6127[label="0.0224215;10pkt 10fpkt"];
113--6144[label="0.0717489;32pkt 32fpkt"];
113--6157[label="0.0426009;19pkt 19fpkt"];
113--6162[label="0.0224215;10pkt 10fpkt"];
890--1257[label="0.138889;10pkt 10fpkt"];
890--1301[label="0.0277778;2pkt 2fpkt"];
890--1588[label="0.0138889;1pkt 1fpkt"];
890--2844[label="0.0138889;1pkt 1fpkt"];
890--3873[label="0.777778;56pkt 56fpkt"];
890--4290[label="1;71pkt 71fpkt"];
890--5306[label="0.138889;10pkt 10fpkt"];
890--5729[label="0.0277778;2pkt 2fpkt"];
890--7246[label="0.138889;10pkt 10fpkt"];
890--7999[label="0.0138889;1pkt 1fpkt"];
1045--1046[label="1;38pkt 38fpkt"];
1045--6065[label="0.0789474;3pkt 3fpkt"];
1045--6081[label="0.0526316;2pkt 2fpkt"];
1045--6086[label="0.0263158;1pkt 1fpkt"];
1045--6107[label="0.0789474;3pkt 3fpkt"];
1045--6122[label="0.0526316;2pkt 2fpkt"];
1045--6127[label="0.0263158;1pkt 1fpkt"];
1045--6144[label="0.0789474;3pkt 3fpkt"];
1045--6157[label="0.0526316;2pkt 2fpkt"];
1045--6162[label="0.0263158;1pkt 1fpkt"];
1045--7652[label="1;38pkt 38fpkt"];
1045--8580[label="1;38pkt 38fpkt"];
1046--1278[label="0.411765;49pkt 49fpkt"];
1046--2249[label="0.0363636;2pkt 2fpkt"];
1046--2259[label="0.234043;11pkt 11fpkt"];
1046--2274[label="0.375;3pkt 3fpkt"];
1046--3821[label="1;3pkt 3fpkt"];
1046--5319[label="0.401869;43pkt 43fpkt"];
1046--5406[label="0.0363636;2pkt 2fpkt"];
1046--6053[label="0.0363636;2pkt 2fpkt"];
1046--6065[label="0.0769231;12pkt 12fpkt"];
1046--6081[label="0.0705128;11pkt 11fpkt"];
1046--6086[label="0.0320513;5pkt 5fpkt"];
1046--6107[label="0.0769231;12pkt 12fpkt"];
1046--6122[label="0.0705128;11pkt 11fpkt"];
1046--6127[label="0.0320513;5pkt 5fpkt"];
1046--6144[label="0.0769231;12pkt 12fpkt"];
1046--6157[label="0.0705128;11pkt 11fpkt"];
1046--6162[label="0.0320513;5pkt 5fpkt"];
1046--7652[label="1;156pkt 156fpkt"];
1046--8580[label="1;156pkt 156fpkt"];
1278--3873[label="0.571429;68pkt 68fpkt"];
1278--5319[label="1;107pkt 107fpkt"];
1278--6065[label="0.0336134;4pkt 4fpkt"];
1278--6081[label="0.0588235;7pkt 7fpkt"];
1278--6086[label="0.00840336;1pkt 1fpkt"];
1278--6107[label="0.0336134;4pkt 4fpkt"];
1278--6122[label="0.0588235;7pkt 7fpkt"];
1278--6127[label="0.00840336;1pkt 1fpkt"];
1278--6144[label="0.0336134;4pkt 4fpkt"];
1278--6157[label="0.0588235;7pkt 7fpkt"];
1278--6162[label="0.00840336;1pkt 1fpkt"];
1278--7652[label="0.411765;49pkt 49fpkt"];
1278--8580[label="0.411765;49pkt 49fpkt"];
1354--1564[label="0.111111;1pkt 1fpkt"];
1354--1805[label="0.666667;2pkt 2fpkt"];
1354--2662[label="0.222222;2pkt 2fpkt"];
1354--2959[label="0.0571429;6pkt 6fpkt"];
1354--3781[label="0.5;1pkt 1fpkt"];
1354--4466[label="1;143pkt 143fpkt"];
1354--5000[label="0.222222;2pkt 2fpkt"];
1354--5178[label="0.0571429;6pkt 6fpkt"];
1442--1494[label="1;29pkt 29fpkt"];
1442--1523[label="0.97619;82pkt 82fpkt"];
1442--2249[label="0.0363636;2pkt 2fpkt"];
1442--2259[label="0.702128;33pkt 33fpkt"];
1442--2936[label="0.0555556;2pkt 2fpkt"];
1442--2959[label="0.609524;64pkt 64fpkt"];
1442--4254[label="1;307pkt 307fpkt"];
1442--4261[label="1;29pkt 29fpkt"];
1442--5178[label="0.609524;64pkt 64fpkt"];
1442--5406[label="0.0363636;2pkt 2fpkt"];
1442--5799[label="0.0555556;2pkt 2fpkt"];
1442--6053[label="0.0363636;2pkt 2fpkt"];
1442--6065[label="0.0169903;7pkt 7fpkt"];
1442--6081[label="0.0728155;30pkt 30fpkt"];
1442--6107[label="0.0169903;7pkt 7fpkt"];
1442--6122[label="0.0728155;30pkt 30fpkt"];
1442--6144[label="0.0169903;7pkt 7fpkt"];
1442--6157[label="0.0728155;30pkt 30fpkt"];
1450--2189[label="1;1pkt 1fpkt"];
1450--5755[label="1;1pkt 1fpkt"];
1494--4254[label="1;29pkt 29fpkt"];
1494--4261[label="1;29pkt 29fpkt"];
1523--3718[label="0.0327869;2pkt 2fpkt"];
1523--4254[label="0.97619;82pkt 82fpkt"];
1564--1589[label="1;1pkt 1fpkt"];
1564--4466[label="0.111111;1pkt 1fpkt"];
1564--7723[label="0.111111;1pkt 1fpkt"];
1564--8608[label="0.111111;1pkt 1fpkt"];
1564--8696[label="0.2;1pkt 1fpkt"];
1564--9082[label="0.111111;1pkt 1fpkt"];
1749--2274[label="0.5;4pkt 4fpkt"];
1805--2189[label="0.333333;1pkt 1fpkt"];
1805--4466[label="0.666667;2pkt 2fpkt"];
1805--5755[label="0.333333;1pkt 1fpkt"];
2189--3844[label="1;2pkt 2fpkt"];
2189--5755[label="1;310pkt 310fpkt"];
2189--5858[label="1;2pkt 2fpkt"];
2189--6064[label="0.0290323;9pkt 9fpkt"];
2189--6085[label="0.0225806;7pkt 7fpkt"];
2189--6106[label="0.0290323;9pkt 9fpkt"];
2189--6126[label="0.0225806;7pkt 7fpkt"];
2189--6161[label="0.0225806;7pkt 7fpkt"];
2259--4254[label="0.702128;33pkt 33fpkt"];
2259--7652[label="0.234043;11pkt 11fpkt"];
2259--8580[label="0.234043;11pkt 11fpkt"];
2274--7652[label="0.375;3pkt 3fpkt"];
2274--7690[label="0.25;1pkt 1fpkt"];
2274--8580[label="0.375;3pkt 3fpkt"];
2274--8597[label="0.25;1pkt 1fpkt"];
2274--9077[label="0.25;1pkt 1fpkt"];
2369--3873[label="1;1pkt 1fpkt"];
2661--2662[label="0.666667;6pkt 6fpkt"];
2661--5000[label="0.666667;6pkt 6fpkt"];
2661--6578[label="1;10pkt 10fpkt"];
2661--8156[label="1;10pkt 10fpkt"];
2662--4466[label="0.222222;2pkt 2fpkt"];
2662--5000[label="1;9pkt 9fpkt"];
2662--5269[label="0.111111;1pkt 1fpkt"];
2662--6578[label="0.666667;6pkt 6fpkt"];
2662--8156[label="0.666667;6pkt 6fpkt"];
2959--3718[label="0.0163934;1pkt 1fpkt"];
2959--4254[label="0.352381;37pkt 37fpkt"];
2959--4466[label="0.0571429;6pkt 6fpkt"];
2959--5178[label="1;105pkt 105fpkt"];
2959--5617[label="0.00952381;1pkt 1fpkt"];
2959--6065[label="0.0380952;4pkt 4fpkt"];
2959--6081[label="0.0666667;7pkt 7fpkt"];
2959--6107[label="0.0380952;4pkt 4fpkt"];
2959--6122[label="0.0666667;7pkt 7fpkt"];
2959--6144[label="0.0380952;4pkt 4fpkt"];
2959--6157[label="0.0666667;7pkt 7fpkt"];
2959--6913[label="0.933333;28pkt 28fpkt"];
2959--7644[label="0.00952381;1pkt 1fpkt"];
2959--8289[label="0.931034;27pkt 27fpkt"];
2959--8891[label="0.933333;28pkt 28fpkt"];
3777--3839[label="1;2pkt 2fpkt"];
3777--3873[label="0.666667;4pkt 4fpkt"];
3777--5856[label="1;2pkt 2fpkt"];
3777--6065[label="0.333333;2pkt 2fpkt"];
3777--6107[label="0.333333;2pkt 2fpkt"];
3777--6144[label="0.333333;2pkt 2fpkt"];
3777--6209[label="1;2pkt 2fpkt"];
3781--4466[label="0.5;1pkt 1fpkt"];
3821--6081[label="1;3pkt 3fpkt"];
3821--6122[label="1;3pkt 3fpkt"];
3821--6157[label="1;3pkt 3fpkt"];
3821--7652[label="1;3pkt 3fpkt"];
3821--8580[label="1;3pkt 3fpkt"];
3839--5856[label="1;2pkt 2fpkt"];
3839--6209[label="1;2pkt 2fpkt"];
3844--5755[label="1;2pkt 2fpkt"];
3844--5858[label="1;2pkt 2fpkt"];
3872--3873[label="1;4pkt 4fpkt"];
3873--4223[label="0.037037;3pkt 3fpkt"];
3873--4290[label="0.788732;56pkt 56fpkt"];
3873--5114[label="0.0149254;1pkt 1fpkt"];
3873--5134[label="0.0225564;3pkt 3fpkt"];
3873--5319[label="0.579439;62pkt 62fpkt"];
3873--5406[label="0.0363636;2pkt 2fpkt"];
3873--6053[label="0.0363636;2pkt 2fpkt"];
3873--6065[label="0.0717489;32pkt 32fpkt"];
3873--6081[label="0.0426009;19pkt 19fpkt"];
3873--6086[label="0.0224215;10pkt 10fpkt"];
3873--6107[label="0.0717489;32pkt 32fpkt"];
3873--6122[label="0.0426009;19pkt 19fpkt"];
3873--6127[label="0.0224215;10pkt 10fpkt"];
3873--6144[label="0.0717489;32pkt 32fpkt"];
3873--6157[label="0.0426009;19pkt 19fpkt"];
3873--6162[label="0.0224215;10pkt 10fpkt"];
4254--4261[label="1;29pkt 29fpkt"];
4254--5178[label="0.352381;37pkt 37fpkt"];
4254--5406[label="0.0363636;2pkt 2fpkt"];
4254--6053[label="0.0363636;2pkt 2fpkt"];
4290--5306[label="0.126761;9pkt 9fpkt"];
4290--5729[label="0.028169;2pkt 2fpkt"];
4290--7246[label="0.126761;9pkt 9fpkt"];
4290--7999[label="0.0140845;1pkt 1fpkt"];
4466--5000[label="0.222222;2pkt 2fpkt"];
4466--5178[label="0.0571429;6pkt 6fpkt"];
5000--5269[label="0.111111;1pkt 1fpkt"];
5000--6578[label="0.666667;6pkt 6fpkt"];
5000--8156[label="0.666667;6pkt 6fpkt"];
5178--5617[label="0.00952381;1pkt 1fpkt"];
5178--6065[label="0.0380952;4pkt 4fpkt"];
5178--6081[label="0.0666667;7pkt 7fpkt"];
5178--6107[label="0.0380952;4pkt 4fpkt"];
5178--6122[label="0.0666667;7pkt 7fpkt"];
5178--6144[label="0.0380952;4pkt 4fpkt"];
5178--6157[label="0.0666667;7pkt 7fpkt"];
5178--6913[label="0.933333;28pkt 28fpkt"];
5178--7644[label="0.00952381;1pkt 1fpkt"];
5178--8289[label="0.931034;27pkt 27fpkt"];
5178--8891[label="0.933333;28pkt 28fpkt"];
5319--6065[label="0.0373832;4pkt 4fpkt"];
5319--6081[label="0.0280374;3pkt 3fpkt"];
5319--6107[label="0.0373832;4pkt 4fpkt"];
5319--6122[label="0.0280374;3pkt 3fpkt"];
5319--6144[label="0.0373832;4pkt 4fpkt"];
5319--6157[label="0.0280374;3pkt 3fpkt"];
5319--7652[label="0.401869;43pkt 43fpkt"];
5319--8580[label="0.401869;43pkt 43fpkt"];
5755--5858[label="1;2pkt 2fpkt"];
5755--6064[label="0.0290323;9pkt 9fpkt"];
5755--6085[label="0.0225806;7pkt 7fpkt"];
5755--6106[label="0.0290323;9pkt 9fpkt"];
5755--6126[label="0.0225806;7pkt 7fpkt"];
5755--6161[label="0.0225806;7pkt 7fpkt"];
5856--6209[label="1;2pkt 2fpkt"];
6578--8156[label="1;10pkt 10fpkt"];
6913--8289[label="1;29pkt 29fpkt"];
6913--8891[label="1;30pkt 30fpkt"];
7652--8580[label="1;168pkt 168fpkt"];
7723--8608[label="1;16pkt 16fpkt"];
7723--9082[label="1;16pkt 16fpkt"];
8289--8891[label="1;29pkt 29fpkt"];
8608--9082[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter src_ip="193.1.200.192" src_port="80"/>
      <filter src_ip="132.19.74.95" src_port="80"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.130.181.207"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_614{
style=filled;
color=gray75;
7728[label="57.1.64.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8612[label="57.1.64.208;1pkt 1fpkt", shape=invtriangle, color=brown];
9085[label="57.1.64.208;1pkt 1fpkt", shape=invhouse, color=bisque];
stat614[shape=component, label=&lt;Rules:&lt;BR/&gt;{57.1.64.208:80, 133.224.155.114:37344}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37344: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7728--8612[label="1;1pkt 1fpkt"];
7728--9085[label="1;1pkt 1fpkt"];
8612--9085[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.155.114" dst_port="37344" src_ip="57.1.64.208" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_615{
style=filled;
color=gray75;
7778[label="129.33.88.216;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8630[label="129.33.88.216;6pkt 6fpkt", shape=invtriangle, color=brown];
9098[label="129.33.88.216;6pkt 6fpkt", shape=invhouse, color=bisque];
stat615[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.88.216:*, 192.221.207.109:7070}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7070: (50%)&lt;BR/&gt; 63437: (8.33333%)&lt;BR/&gt; 63193: (8.33333%)&lt;BR/&gt; 62285: (8.33333%)&lt;BR/&gt; 60812: (8.33333%)&gt;];
}
7778--8630[label="1;6pkt 6fpkt"];
7778--9098[label="1;6pkt 6fpkt"];
8630--9098[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.221.207.109" dst_port="7070" src_ip="129.33.88.216"/>
    </slice>
    <from sec="1194757657" usec="0"/>
    <to sec="1194757664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.33.92.216"/>
    </slice>
    <from sec="1194757493" usec="0"/>
    <to sec="1194757534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
7783[label="193.55.57.217;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8633[label="193.55.57.217;4pkt 4fpkt", shape=invtriangle, color=brown];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.55.57.217:80, 133.224.109.146:60123}[25%]&lt;BR/&gt;{193.55.57.217:80, 133.224.109.146:60124}[25%]&lt;BR/&gt;{193.55.57.217:80, 133.224.109.146:60125}[25%]&lt;BR/&gt;{193.55.57.217:80, 133.224.109.146:60126}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60126: (12.5%)&lt;BR/&gt; 60125: (12.5%)&lt;BR/&gt; 60124: (12.5%)&lt;BR/&gt; 60123: (12.5%)&gt;];
}
7783--8633[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.109.146" dst_port="60126" src_ip="193.55.57.217" src_port="80"/>
      <filter dst_ip="133.224.109.146" dst_port="60125" src_ip="193.55.57.217" src_port="80"/>
      <filter dst_ip="133.224.109.146" dst_port="60124" src_ip="193.55.57.217" src_port="80"/>
      <filter dst_ip="133.224.109.146" dst_port="60123" src_ip="193.55.57.217" src_port="80"/>
    </slice>
    <from sec="1194757648" usec="0"/>
    <to sec="1194757773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="51.179.91.217"/>
    </slice>
    <from sec="1194757465" usec="0"/>
    <to sec="1194757484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.84.72.218"/>
    </slice>
    <from sec="1194757573" usec="0"/>
    <to sec="1194757654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="54.46.130.221"/>
    </slice>
    <from sec="1194757565" usec="0"/>
    <to sec="1194757590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="6.213.207.221"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194758050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
7816[label="196.130.163.222;106pkt 106fpkt", shape=pentagon, color=darkviolet];
8649[label="196.130.163.222;106pkt 106fpkt", shape=invtriangle, color=brown];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.130.163.222:53, 129.60.133.10:*}[90.566%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.283%)&lt;BR/&gt; 110: (4.71698%)&lt;BR/&gt; 65439: (0.471698%)&lt;BR/&gt; 65376: (0.471698%)&lt;BR/&gt; 65179: (0.471698%)&gt;];
}
7816--8649[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter dst_ip="129.60.133.10" src_ip="196.130.163.222" src_port="53"/>
    </slice>
    <from sec="1194757201" usec="0"/>
    <to sec="1194758054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.166.8.226"/>
    </slice>
    <from sec="1194757688" usec="0"/>
    <to sec="1194757761" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="62.110.26.226"/>
    </slice>
    <from sec="1194757652" usec="0"/>
    <to sec="1194757666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
7842[label="216.8.33.227;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8662[label="216.8.33.227;1pkt 1fpkt", shape=invtriangle, color=brown];
9109[label="216.8.33.227;1pkt 1fpkt", shape=invhouse, color=bisque];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.8.33.227:80, 129.60.232.104:34948}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34948: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7842--8662[label="1;1pkt 1fpkt"];
7842--9109[label="1;1pkt 1fpkt"];
8662--9109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="129.60.232.104" dst_port="34948" src_ip="216.8.33.227" src_port="80"/>
    </slice>
    <from sec="1194757769" usec="0"/>
    <to sec="1194757771" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.72.167.228"/>
    </slice>
    <from sec="1194757319" usec="0"/>
    <to sec="1194757322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_627{
style=filled;
color=gray75;
7869[label="193.1.207.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8671[label="193.1.207.231;1pkt 1fpkt", shape=invtriangle, color=brown];
9118[label="193.1.207.231;1pkt 1fpkt", shape=invhouse, color=bisque];
stat627[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.207.231:80, 222.170.89.65:2020}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2020: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7869--8671[label="1;1pkt 1fpkt"];
7869--9118[label="1;1pkt 1fpkt"];
8671--9118[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="222.170.89.65" dst_port="2020" src_ip="193.1.207.231" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.19.161.232"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.181.200.233"/>
    </slice>
    <from sec="1194757393" usec="0"/>
    <to sec="1194757608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_630{
style=filled;
color=gray75;
7902[label="68.27.97.237;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8684[label="68.27.97.237;4pkt 4fpkt", shape=invtriangle, color=brown];
9123[label="68.27.97.237;4pkt 4fpkt", shape=invhouse, color=bisque];
stat630[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.27.97.237:80, 173.144.64.199:32796}[25%]&lt;BR/&gt;{68.27.97.237:80, 173.144.64.199:33004}[25%]&lt;BR/&gt;{68.27.97.237:80, 173.144.64.199:33812}[25%]&lt;BR/&gt;{68.27.97.237:80, 173.144.64.199:34044}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 34044: (12.5%)&lt;BR/&gt; 33812: (12.5%)&lt;BR/&gt; 33004: (12.5%)&lt;BR/&gt; 32796: (12.5%)&gt;];
}
7902--8684[label="1;4pkt 4fpkt"];
7902--9123[label="1;4pkt 4fpkt"];
8684--9123[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="173.144.64.199" dst_port="34044" src_ip="68.27.97.237" src_port="80"/>
      <filter dst_ip="173.144.64.199" dst_port="33812" src_ip="68.27.97.237" src_port="80"/>
      <filter dst_ip="173.144.64.199" dst_port="33004" src_ip="68.27.97.237" src_port="80"/>
      <filter dst_ip="173.144.64.199" dst_port="32796" src_ip="68.27.97.237" src_port="80"/>
    </slice>
    <from sec="1194757444" usec="0"/>
    <to sec="1194757452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.222.129.237"/>
    </slice>
    <from sec="1194757480" usec="0"/>
    <to sec="1194758057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="88.121.36.240"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
7920[label="129.33.82.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8692[label="129.33.82.240;1pkt 1fpkt", shape=invtriangle, color=brown];
9129[label="129.33.82.240;1pkt 1fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{129.33.82.240:80, 209.84.79.74:9361}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9361: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7920--8692[label="1;1pkt 1fpkt"];
7920--9129[label="1;1pkt 1fpkt"];
8692--9129[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.84.79.74" dst_port="9361" src_ip="129.33.82.240" src_port="80"/>
    </slice>
    <from sec="1194757482" usec="0"/>
    <to sec="1194757498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.58.184.240"/>
    </slice>
    <from sec="1194757427" usec="0"/>
    <to sec="1194757627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.222.226.240"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.33.133.246"/>
    </slice>
    <from sec="1194757489" usec="0"/>
    <to sec="1194757502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.172.181.246"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.219.214.248"/>
    </slice>
    <from sec="1194757590" usec="0"/>
    <to sec="1194757774" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.5.48.252"/>
    </slice>
    <from sec="1194757383" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.828947,1.92578,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
7984[label="192.30.83.252;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8721[label="192.30.83.252;2pkt 2fpkt", shape=invtriangle, color=brown];
9150[label="192.30.83.252;2pkt 2fpkt", shape=invhouse, color=bisque];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.30.83.252:80, 222.172.147.236:3963}[50%]&lt;BR/&gt;{192.30.83.252:80, 222.172.147.236:3968}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3968: (25%)&lt;BR/&gt; 3963: (25%)&gt;];
}
7984--8721[label="1;2pkt 2fpkt"];
7984--9150[label="1;2pkt 2fpkt"];
8721--9150[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="222.172.147.236" dst_port="3968" src_ip="192.30.83.252" src_port="80"/>
      <filter dst_ip="222.172.147.236" dst_port="3963" src_ip="192.30.83.252" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.587817,1.98475,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.190.148.254"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.5617,1.93386,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
8005[label="192.90.218.255;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8728[label="192.90.218.255;2pkt 2fpkt", shape=invtriangle, color=brown];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.90.218.255:80, 133.224.155.116:44239}[50%]&lt;BR/&gt;{192.90.218.255:80, 133.224.155.116:44243}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44243: (25%)&lt;BR/&gt; 44239: (25%)&gt;];
}
8005--8728[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.224.155.116" dst_port="44243" src_ip="192.90.218.255" src_port="80"/>
      <filter dst_ip="133.224.155.116" dst_port="44239" src_ip="192.90.218.255" src_port="80"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.216.218.1"/>
    </slice>
    <from sec="1194757628" usec="0"/>
    <to sec="1194757715" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.94.104.11"/>
    </slice>
    <from sec="1194757779" usec="0"/>
    <to sec="1194757790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.1.65.13"/>
    </slice>
    <from sec="1194757887" usec="0"/>
    <to sec="1194757918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.213.163.16"/>
    </slice>
    <from sec="1194757568" usec="0"/>
    <to sec="1194757589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.247.3.17"/>
    </slice>
    <from sec="1194757377" usec="0"/>
    <to sec="1194757496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.77.18.17"/>
    </slice>
    <from sec="1194757385" usec="0"/>
    <to sec="1194757457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.138.32.17"/>
    </slice>
    <from sec="1194757978" usec="0"/>
    <to sec="1194757989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.132.197.18"/>
    </slice>
    <from sec="1194758060" usec="0"/>
    <to sec="1194758073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.174.180.21"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.139.131.26"/>
    </slice>
    <from sec="1194757847" usec="0"/>
    <to sec="1194758083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.122.209.42"/>
    </slice>
    <from sec="1194757729" usec="0"/>
    <to sec="1194757743" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.153.24.60"/>
    </slice>
    <from sec="1194757457" usec="0"/>
    <to sec="1194757514" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="133.224.222.62"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.35.195.63"/>
    </slice>
    <from sec="1194757690" usec="0"/>
    <to sec="1194757702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.214.102.68"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194758099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="51.214.62.75"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.134.11.76"/>
    </slice>
    <from sec="1194757959" usec="0"/>
    <to sec="1194758100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.57.69.81"/>
    </slice>
    <from sec="1194758081" usec="0"/>
    <to sec="1194758101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="52.196.33.82"/>
    </slice>
    <from sec="1194757551" usec="0"/>
    <to sec="1194757561" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="89.26.67.91"/>
    </slice>
    <from sec="1194757315" usec="0"/>
    <to sec="1194758066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.221.77.91"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.104.100.94"/>
    </slice>
    <from sec="1194757203" usec="0"/>
    <to sec="1194757690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.248.79.97"/>
    </slice>
    <from sec="1194757313" usec="0"/>
    <to sec="1194757340" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.192.91.101"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="57.221.69.102"/>
    </slice>
    <from sec="1194757621" usec="0"/>
    <to sec="1194757631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.45.176.116"/>
    </slice>
    <from sec="1194758045" usec="0"/>
    <to sec="1194758054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.17.103.138"/>
    </slice>
    <from sec="1194757208" usec="0"/>
    <to sec="1194758082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.4.80.139"/>
    </slice>
    <from sec="1194757612" usec="0"/>
    <to sec="1194757614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="180.16.234.140"/>
    </slice>
    <from sec="1194757593" usec="0"/>
    <to sec="1194757615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.104.210.143"/>
    </slice>
    <from sec="1194757352" usec="0"/>
    <to sec="1194758097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="49.173.87.154"/>
    </slice>
    <from sec="1194757783" usec="0"/>
    <to sec="1194757799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.210.135.174"/>
    </slice>
    <from sec="1194758101" usec="0"/>
    <to sec="1194758102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.133.215.174"/>
    </slice>
    <from sec="1194757362" usec="0"/>
    <to sec="1194757524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.217.29.176"/>
    </slice>
    <from sec="1194757273" usec="0"/>
    <to sec="1194757304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.20.130.181"/>
    </slice>
    <from sec="1194757486" usec="0"/>
    <to sec="1194757518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="48.35.132.184"/>
    </slice>
    <from sec="1194757556" usec="0"/>
    <to sec="1194757560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.181.5.189"/>
    </slice>
    <from sec="1194757822" usec="0"/>
    <to sec="1194757997" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="6.239.85.189"/>
    </slice>
    <from sec="1194757706" usec="0"/>
    <to sec="1194757718" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="55.238.64.195"/>
    </slice>
    <from sec="1194757204" usec="0"/>
    <to sec="1194757208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="53.130.181.207"/>
    </slice>
    <from sec="1194757202" usec="0"/>
    <to sec="1194757496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.33.92.216"/>
    </slice>
    <from sec="1194757493" usec="0"/>
    <to sec="1194757534" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="54.46.130.221"/>
    </slice>
    <from sec="1194757565" usec="0"/>
    <to sec="1194757590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="62.110.26.226"/>
    </slice>
    <from sec="1194757652" usec="0"/>
    <to sec="1194757666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.72.167.228"/>
    </slice>
    <from sec="1194757319" usec="0"/>
    <to sec="1194757322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="32.181.200.233"/>
    </slice>
    <from sec="1194757393" usec="0"/>
    <to sec="1194757608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.222.129.237"/>
    </slice>
    <from sec="1194757480" usec="0"/>
    <to sec="1194758057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.121.36.240"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="220.172.181.246"/>
    </slice>
    <from sec="1194757205" usec="0"/>
    <to sec="1194757727" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.751698,1.99468,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="58.138.34.251"/>
    </slice>
    <from sec="1194757366" usec="0"/>
    <to sec="1194757369" usec="0"/>
  </anomaly>

</admd:annotation>
