<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.19858,2.20161,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.132.179.149" dst_port="80" proto="tcp" src_ip="141.54.146.8" src_port="49236"/>
      <filter dst_ip="29.132.179.149" dst_port="80" proto="udp" src_ip="141.54.146.8" src_port="49236"/>
      <filter dst_ip="29.132.179.149" dst_port="53" proto="tcp" src_ip="141.54.146.8" src_port="49236"/>
      <filter dst_ip="29.132.179.149" dst_port="53" proto="udp" src_ip="141.54.146.8" src_port="49236"/>
      <from sec="1201929263" usec="0"/>
      <to sec="1201929286" usec="0"/>
    </slice>
    <from sec="1201929263" usec="0"/>
    <to sec="1201929286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="53" proto="tcp" src_ip="169.16.175.88" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="169.16.175.88" src_port="80"/>
      <from sec="1201928405" usec="0"/>
      <to sec="1201929253" usec="0"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.174.99.205" dst_port="80" proto="tcp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="25.174.99.205" dst_port="80" proto="udp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="25.174.99.205" dst_port="53" proto="tcp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="25.174.99.205" dst_port="53" proto="udp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="tcp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="udp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="tcp" src_ip="138.43.151.96" src_port="49915"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="udp" src_ip="138.43.151.96" src_port="49915"/>
      <from sec="1201929259" usec="0"/>
      <to sec="1201929264" usec="0"/>
    </slice>
    <from sec="1201929259" usec="0"/>
    <to sec="1201929264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="195.187.236.19" dst_port="25" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <from sec="1201928931" usec="0"/>
      <to sec="1201929006" usec="0"/>
    </slice>
    <from sec="1201928931" usec="0"/>
    <to sec="1201929006" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.115.55" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <from sec="1201928991" usec="0"/>
      <to sec="1201928995" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="195.187.236.19" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="194.151.26.54" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="80" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="18.46.40.57" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <from sec="1201928990" usec="0"/>
      <to sec="1201928995" usec="0"/>
    </slice>
    <from sec="1201928990" usec="0"/>
    <to sec="1201928995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.245.40.63" proto="icmp" src_ip="194.245.40.63"/>
      <filter dst_ip="194.245.40.63" proto="icmp" src_ip="194.245.40.63"/>
      <filter dst_ip="194.245.40.63" proto="icmp" src_ip="194.245.40.63"/>
      <filter dst_ip="194.245.40.63" proto="icmp" src_ip="194.245.40.63"/>
      <from sec="1201928435" usec="0"/>
      <to sec="1201928467" usec="0"/>
    </slice>
    <from sec="1201928435" usec="0"/>
    <to sec="1201928467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="200.126.213.66" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <from sec="1201928859" usec="0"/>
      <to sec="1201929129" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="200.126.213.66"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="53" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="25" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="tcp" src_ip="141.54.82.239"/>
      <filter dst_ip="141.54.61.71" dst_port="80" proto="udp" src_ip="141.54.82.239"/>
      <from sec="1201928946" usec="0"/>
      <to sec="1201928972" usec="0"/>
    </slice>
    <from sec="1201928859" usec="0"/>
    <to sec="1201929129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="169.16.175.88" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="169.16.175.88" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <from sec="1201928675" usec="0"/>
      <to sec="1201929286" usec="0"/>
    </slice>
    <from sec="1201928675" usec="0"/>
    <to sec="1201929286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.245.37.91" dst_port="80" proto="tcp" src_ip="194.245.37.91"/>
      <filter dst_ip="194.245.37.91" dst_port="80" proto="tcp" src_ip="194.245.37.91"/>
      <filter dst_ip="194.245.37.91" dst_port="80" proto="tcp" src_ip="194.245.37.91"/>
      <filter dst_ip="194.245.37.91" dst_port="80" proto="tcp" src_ip="194.245.37.91"/>
      <from sec="1201928900" usec="0"/>
      <to sec="1201928987" usec="0"/>
    </slice>
    <from sec="1201928900" usec="0"/>
    <to sec="1201928987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="141.54.41.100" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <from sec="1201928952" usec="0"/>
      <to sec="1201928956" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.88" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.220.90.109" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="44.231.14.217" src_port="80"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="44.231.14.217" src_port="80"/>
      <from sec="1201928952" usec="0"/>
      <to sec="1201928957" usec="0"/>
    </slice>
    <from sec="1201928952" usec="0"/>
    <to sec="1201928957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="200.163.95.220"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="200.163.95.220" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <from sec="1201928873" usec="0"/>
      <to sec="1201929002" usec="0"/>
    </slice>
    <from sec="1201928873" usec="0"/>
    <to sec="1201929002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.17.160.112" dst_port="53" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.112" dst_port="53" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.112" dst_port="80" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.112" dst_port="80" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.112" dst_port="25" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.112" dst_port="25" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.162.35" dst_port="25" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.162.35" dst_port="25" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.120" dst_port="53" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.120" dst_port="53" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.120" dst_port="80" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.120" dst_port="80" proto="udp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.120" dst_port="25" proto="tcp" src_ip="141.54.111.26"/>
      <filter dst_ip="195.17.160.120" dst_port="25" proto="udp" src_ip="141.54.111.26"/>
      <from sec="1201928979" usec="0"/>
      <to sec="1201928983" usec="0"/>
    </slice>
    <from sec="1201928978" usec="0"/>
    <to sec="1201928983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="tcp" src_ip="141.54.155.81"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="udp" src_ip="141.54.155.81"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="tcp" src_ip="141.54.155.81"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="udp" src_ip="141.54.155.81"/>
      <from sec="1201928582" usec="0"/>
      <to sec="1201929057" usec="0"/>
    </slice>
    <from sec="1201928582" usec="0"/>
    <to sec="1201929057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="tcp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="udp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.162.35" dst_port="25" proto="tcp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.162.35" dst_port="25" proto="udp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="tcp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="udp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.160.112" dst_port="53" proto="tcp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.160.112" dst_port="53" proto="udp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.160.112" dst_port="25" proto="tcp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.160.112" dst_port="25" proto="udp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.160.112" dst_port="80" proto="tcp" src_ip="141.54.20.218"/>
      <filter dst_ip="195.17.160.112" dst_port="80" proto="udp" src_ip="141.54.20.218"/>
      <from sec="1201928599" usec="0"/>
      <to sec="1201929296" usec="0"/>
    </slice>
    <from sec="1201928599" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.161.12" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <from sec="1201928863" usec="0"/>
      <to sec="1201929010" usec="0"/>
    </slice>
    <from sec="1201928863" usec="0"/>
    <to sec="1201929010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="195.106.132.177"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="138.43.130.109"/>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="138.43.130.109"/>
      <from sec="1201928464" usec="0"/>
      <to sec="1201928928" usec="0"/>
    </slice>
    <from sec="1201928464" usec="0"/>
    <to sec="1201928928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="25" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="53" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="22" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="tcp" src_ip="195.187.207.195"/>
      <filter dst_ip="195.187.207.195" dst_port="80" proto="udp" src_ip="195.187.207.195"/>
      <from sec="1201928852" usec="0"/>
      <to sec="1201929002" usec="0"/>
    </slice>
    <from sec="1201928852" usec="0"/>
    <to sec="1201929002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.43.130.109" dst_port="445" proto="tcp" src_ip="42.132.98.96"/>
      <filter dst_ip="138.43.130.109" dst_port="443" proto="tcp" src_ip="42.132.98.96"/>
      <from sec="1201928447" usec="0"/>
      <to sec="1201928470" usec="0"/>
    </slice>
    <from sec="1201928446" usec="0"/>
    <to sec="1201928470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="91.135.190.133" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="25" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="80" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <filter dst_ip="208.21.167.0" dst_port="22" proto="tcp" src_ip="208.21.167.0" src_port="35600"/>
      <from sec="1201928928" usec="0"/>
      <to sec="1201928932" usec="0"/>
    </slice>
    <from sec="1201928927" usec="0"/>
    <to sec="1201928932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="80" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="53" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="tcp" src_ip="138.43.180.209"/>
      <filter dst_ip="138.43.180.209" dst_port="22" proto="udp" src_ip="138.43.180.209"/>
      <from sec="1201928920" usec="0"/>
      <to sec="1201928928" usec="0"/>
    </slice>
    <from sec="1201928919" usec="0"/>
    <to sec="1201928928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.17.160.112" dst_port="53" proto="tcp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.160.112" dst_port="53" proto="udp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.160.112" dst_port="25" proto="tcp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.160.112" dst_port="25" proto="udp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.160.112" dst_port="80" proto="tcp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.160.112" dst_port="80" proto="udp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="tcp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.162.35" dst_port="53" proto="udp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.162.35" dst_port="25" proto="tcp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.162.35" dst_port="25" proto="udp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="tcp" src_ip="138.43.161.11" src_port="58768"/>
      <filter dst_ip="195.17.162.35" dst_port="80" proto="udp" src_ip="138.43.161.11" src_port="58768"/>
      <from sec="1201928516" usec="0"/>
      <to sec="1201928521" usec="0"/>
    </slice>
    <from sec="1201928516" usec="0"/>
    <to sec="1201928521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19858,2.20161,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="25" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="22" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="53" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="tcp" src_ip="91.135.190.133"/>
      <filter dst_ip="141.54.206.149" dst_port="80" proto="udp" src_ip="91.135.190.133"/>
      <from sec="1201928908" usec="0"/>
      <to sec="1201928912" usec="0"/>
    </slice>
    <from sec="1201928908" usec="0"/>
    <to sec="1201928913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
242[label="169.16.16.82;d;3pkt 3fpkt", shape=diamond, color=yellow];
245[label="93.20.247.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
4150[label="169.16.16.82;d;3pkt 3fpkt", shape=hexagon, color=black];
4151[label="93.20.247.194;s;2pkt 2fpkt", shape=hexagon, color=black];
7381[label="93.20.247.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8691[label="93.20.247.194;2pkt 2fpkt", shape=invtriangle, color=brown];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.103.99.254:44324, 169.16.16.82:8309}[33.3333%]&lt;BR/&gt;{93.20.247.194:34036, 169.16.16.82:2113}[33.3333%]&lt;BR/&gt;{93.20.247.194:34036, 169.16.16.82:8309}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34036: (42.8571%)&lt;BR/&gt; 8309: (28.5714%)&lt;BR/&gt; 2113: (21.4286%)&lt;BR/&gt; 44324: (7.14286%)&gt;];
}
242--245[label="1;2pkt 2fpkt"];
242--4150[label="1;3pkt 3fpkt"];
242--4151[label="1;2pkt 2fpkt"];
242--7381[label="1;2pkt 2fpkt"];
242--8691[label="1;2pkt 2fpkt"];
245--4150[label="1;2pkt 2fpkt"];
245--4151[label="1;2pkt 2fpkt"];
245--7381[label="1;2pkt 2fpkt"];
245--8691[label="1;2pkt 2fpkt"];
4150--4151[label="1;2pkt 2fpkt"];
4150--7381[label="1;2pkt 2fpkt"];
4150--8691[label="1;2pkt 2fpkt"];
4151--7381[label="1;2pkt 2fpkt"];
4151--8691[label="1;2pkt 2fpkt"];
7381--8691[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.16.82" dst_port="8309" src_ip="93.20.247.194" src_port="34036"/>
      <filter dst_ip="169.16.16.82" dst_port="2113" src_ip="93.20.247.194" src_port="34036"/>
      <filter dst_ip="169.16.16.82" dst_port="8309" src_ip="4.103.99.254" src_port="44324"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="48" usec="0"/>
    <to sec="30020992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00915,2.08044,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
281[label="169.16.20.188;s;16pkt 16fpkt", shape=diamond, color=yellow];
282[label="22.110.200.2;d;2pkt 2fpkt", shape=diamond, color=yellow];
7331[label="169.16.20.188;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8669[label="169.16.20.188;18pkt 18fpkt", shape=invtriangle, color=brown];
9216[label="169.16.20.188;18pkt 18fpkt", shape=invhouse, color=bisque];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.20.188:42670, *:*}[72.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42670: (35.4167%)&lt;BR/&gt; 80: (8.33333%)&lt;BR/&gt; 20205: (6.94444%)&lt;BR/&gt; 2583: (3.47222%)&lt;BR/&gt; 61412: (2.77778%)&gt;];
}
281--282[label="1;2pkt 2fpkt"];
281--5454[label="0.0625;1pkt 1fpkt"];
281--5487[label="0.0625;1pkt 1fpkt"];
281--5508[label="0.0625;1pkt 1fpkt"];
281--7331[label="1;16pkt 16fpkt"];
281--8669[label="1;16pkt 16fpkt"];
281--9216[label="1;16pkt 16fpkt"];
282--7331[label="1;2pkt 2fpkt"];
282--8669[label="1;2pkt 2fpkt"];
282--9216[label="1;2pkt 2fpkt"];
7331--8669[label="1;18pkt 18fpkt"];
7331--9216[label="1;18pkt 18fpkt"];
8669--9216[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.20.188" src_port="42670"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
280[label="169.16.20.188;d;9pkt 9fpkt", shape=diamond, color=yellow];
283[label="22.110.200.2;s;2pkt 2fpkt", shape=diamond, color=yellow];
3829[label="22.110.200.2;s;2pkt 2fpkt", shape=hexagon, color=black];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.16.20.188:42670}[77.7778%]&lt;BR/&gt;{22.110.200.2:20205, 169.16.20.188:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 42670: (34.6154%)&lt;BR/&gt; 20205: (23.0769%)&lt;BR/&gt; 2583: (11.5385%)&lt;BR/&gt; 59891: (3.84615%)&lt;BR/&gt; 59321: (3.84615%)&gt;];
}
280--283[label="1;2pkt 2fpkt"];
280--3829[label="1;2pkt 2fpkt"];
283--3829[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.20.188" dst_port="42670"/>
      <filter dst_ip="169.16.20.188" src_ip="22.110.200.2" src_port="20205"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.62.244.44"/>
      <from sec="1201929075" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929075" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.62.244.44"/>
      <from sec="1201929075" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929075" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_46{
style=filled;
color=gray75;
373[label="138.43.0.71;d;7pkt 7fpkt", shape=diamond, color=yellow];
376[label="208.12.75.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat46[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 138.43.0.71:0}[57.1429%]&lt;BR/&gt;{208.12.75.161:80, 138.43.0.71:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 2380: (12.5%)&lt;BR/&gt; 1935: (12.5%)&lt;BR/&gt; 80: (12.5%)&lt;BR/&gt; 2608: (6.25%)&gt;];
}
373--376[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.0.71" src_ip="208.12.75.161" src_port="80"/>
      <filter dst_ip="138.43.0.71"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
6053[label="90.104.106.51;21pkt 21fpkt", shape=pentagon, color=darkviolet];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.104.106.51:80, 169.16.205.218:*}[95.2381%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.619%)&lt;BR/&gt; 35904: (2.38095%)&lt;BR/&gt; 35903: (2.38095%)&lt;BR/&gt; 35901: (2.38095%)&lt;BR/&gt; 35900: (2.38095%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="169.16.205.218" src_ip="90.104.106.51" src_port="80"/>
    </slice>
    <from sec="1201928840" usec="0"/>
    <to sec="1201929201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.101.123.40"/>
      <from sec="1201928833" usec="0"/>
      <to sec="1201929151" usec="0"/>
    </slice>
    <from sec="1201928833" usec="0"/>
    <to sec="1201929151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.101.123.40"/>
      <from sec="1201928833" usec="0"/>
      <to sec="1201929151" usec="0"/>
    </slice>
    <from sec="1201928833" usec="0"/>
    <to sec="1201929151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.32.57.69"/>
      <from sec="1201928902" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928902" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.32.57.69"/>
      <from sec="1201928902" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928902" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.208.88.175"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201928420" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201928420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_53{
style=filled;
color=gray75;
815[label="18.208.66.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
816[label="158.142.31.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat53[shape=component, label=&lt;Rules:&lt;BR/&gt;{158.142.31.14:80, 18.208.66.33:44931}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44931: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
815--816[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.208.66.33" dst_port="44931" src_ip="158.142.31.14" src_port="80"/>
    </slice>
    <from sec="1201929175" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="42.132.98.96"/>
      <from sec="1201928416" usec="0"/>
      <to sec="1201928470" usec="0"/>
    </slice>
    <from sec="1201928416" usec="0"/>
    <to sec="1201928470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.149.218.139"/>
      <from sec="1201928786" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.149.218.139"/>
      <from sec="1201928786" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
960[label="70.39.163.85;s;50pkt 50fpkt", shape=diamond, color=yellow];
961[label="169.16.94.27;d;50pkt 50fpkt", shape=diamond, color=yellow];
4124[label="70.39.163.85;s;36pkt 36fpkt", shape=hexagon, color=black];
6433[label="70.39.163.85;50pkt 50fpkt", shape=pentagon, color=darkviolet];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.39.163.85:80, 169.16.94.27:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4247: (1.07527%)&lt;BR/&gt; 4246: (1.07527%)&lt;BR/&gt; 4245: (1.07527%)&lt;BR/&gt; 4244: (1.07527%)&gt;];
}
960--961[label="1;50pkt 50fpkt"];
960--4124[label="1;36pkt 36fpkt"];
960--6433[label="1;50pkt 50fpkt"];
961--4124[label="1;36pkt 36fpkt"];
961--6433[label="1;50pkt 50fpkt"];
4124--6433[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.94.27" src_ip="70.39.163.85" src_port="80"/>
    </slice>
    <from sec="1201928435" usec="0"/>
    <to sec="1201928677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
959[label="70.39.163.85;d;50pkt 50fpkt", shape=diamond, color=yellow];
962[label="169.16.94.27;s;50pkt 50fpkt", shape=diamond, color=yellow];
4294[label="169.16.94.27;s;50pkt 50fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.94.27:*, 70.39.163.85:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4261: (1%)&lt;BR/&gt; 4260: (1%)&lt;BR/&gt; 4259: (1%)&lt;BR/&gt; 4258: (1%)&gt;];
}
959--962[label="1;50pkt 50fpkt"];
959--4294[label="1;50pkt 50fpkt"];
959--5444[label="0.08;4pkt 4fpkt"];
959--5481[label="0.08;4pkt 4fpkt"];
962--4294[label="1;50pkt 50fpkt"];
962--5444[label="0.08;4pkt 4fpkt"];
962--5481[label="0.08;4pkt 4fpkt"];
4294--5444[label="0.08;4pkt 4fpkt"];
4294--5481[label="0.08;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="70.39.163.85" dst_port="80" src_ip="169.16.94.27"/>
    </slice>
    <from sec="1201928435" usec="0"/>
    <to sec="1201928677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
998[label="141.54.34.77;d;5pkt 5fpkt", shape=diamond, color=yellow];
999[label="42.132.180.41;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.132.180.41:2966, 141.54.34.77:80}[20%]&lt;BR/&gt;{42.132.180.41:2967, 141.54.34.77:80}[20%]&lt;BR/&gt;{42.132.180.41:2968, 141.54.34.77:80}[20%]&lt;BR/&gt;{42.132.180.41:2969, 141.54.34.77:80}[20%]&lt;BR/&gt;{42.132.180.41:2970, 141.54.34.77:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2970: (10%)&lt;BR/&gt; 2969: (10%)&lt;BR/&gt; 2968: (10%)&lt;BR/&gt; 2967: (10%)&gt;];
}
998--999[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.34.77" dst_port="80" src_ip="42.132.180.41" src_port="2970"/>
      <filter dst_ip="141.54.34.77" dst_port="80" src_ip="42.132.180.41" src_port="2969"/>
      <filter dst_ip="141.54.34.77" dst_port="80" src_ip="42.132.180.41" src_port="2968"/>
      <filter dst_ip="141.54.34.77" dst_port="80" src_ip="42.132.180.41" src_port="2967"/>
      <filter dst_ip="141.54.34.77" dst_port="80" src_ip="42.132.180.41" src_port="2966"/>
    </slice>
    <from sec="1201928485" usec="0"/>
    <to sec="1201928535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
354[label="18.237.163.214;d;2pkt 2fpkt", shape=diamond, color=yellow];
1038[label="138.43.128.158;s;1pkt 1fpkt", shape=diamond, color=yellow];
4345[label="138.43.128.158;s;1pkt 1fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.130.97:0, 18.237.163.214:0}[50%]&lt;BR/&gt;{138.43.128.158:2092, 18.237.163.214:8045}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8045: (37.5%)&lt;BR/&gt; 2092: (37.5%)&lt;BR/&gt; 0: (25%)&gt;];
}
354--1038[label="1;1pkt 1fpkt"];
354--4345[label="1;1pkt 1fpkt"];
1038--4345[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.237.163.214" dst_port="8045" src_ip="138.43.128.158" src_port="2092"/>
      <filter dst_ip="18.237.163.214" src_ip="138.43.130.97"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.233.87.205"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="43.15.189.17"/>
      <from sec="1201928712" usec="0"/>
      <to sec="1201929117" usec="0"/>
    </slice>
    <from sec="1201928712" usec="0"/>
    <to sec="1201929117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="43.15.189.17"/>
      <from sec="1201928712" usec="0"/>
      <to sec="1201929117" usec="0"/>
    </slice>
    <from sec="1201928712" usec="0"/>
    <to sec="1201929117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="40.141.112.220"/>
      <from sec="1201928872" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928872" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.141.112.220"/>
      <from sec="1201928872" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928872" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
447[label="195.178.140.84;d;80pkt 80fpkt", shape=diamond, color=yellow];
1198[label="91.234.51.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
2919[label="2.107.240.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
7651[label="18.51.161.228;26pkt 26fpkt", shape=pentagon, color=darkviolet];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 195.178.140.84:46925}[47.9167%]&lt;BR/&gt;{18.51.161.228:*, *:*}[27.0833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46925: (22.2222%)&lt;BR/&gt; 33438: (10.1852%)&lt;BR/&gt; 33435: (8.7963%)&lt;BR/&gt; 12202: (1.85185%)&lt;BR/&gt; 10977: (1.85185%)&gt;];
}
447--1198[label="1;1pkt 1fpkt"];
447--2919[label="1;1pkt 1fpkt"];
447--7651[label="0.384615;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="18.51.161.228"/>
      <filter dst_ip="195.178.140.84" dst_port="46925"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.233.105.24"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929217" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.140.88.198"/>
      <from sec="1201928406" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27218,2.16539,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
108[label="141.54.4.71s;2pkt 2fpkt", shape=rectangle, color=red];
1413[label="141.54.4.71;s;84pkt 84fpkt", shape=diamond, color=yellow];
1479[label="194.35.237.50;d;9pkt 9fpkt", shape=diamond, color=yellow];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.4.71:*, *:80}[67.8571%]&lt;BR/&gt;{141.54.4.71:*, *:53}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7895%)&lt;BR/&gt; 53: (14.2105%)&lt;BR/&gt; 54971: (1.57895%)&lt;BR/&gt; 54970: (1.57895%)&lt;BR/&gt; 54995: (1.05263%)&gt;];
}
108--1413[label="1;2pkt 2fpkt"];
108--1479[label="1;2pkt 2fpkt"];
1413--1479[label="1;9pkt 9fpkt"];
1413--1634[label="0.0119048;1pkt 1fpkt"];
1413--1644[label="0.0357143;3pkt 3fpkt"];
1413--1656[label="0.0119048;1pkt 1fpkt"];
1413--2638[label="0.0119048;1pkt 1fpkt"];
1413--2912[label="0.0119048;1pkt 1fpkt"];
1413--3160[label="0.0119048;1pkt 1fpkt"];
1413--5032[label="0.0119048;1pkt 1fpkt"];
1413--5158[label="0.0119048;1pkt 1fpkt"];
1413--5230[label="0.0119048;1pkt 1fpkt"];
1413--5453[label="0.130952;11pkt 11fpkt"];
1413--5486[label="0.130952;11pkt 11fpkt"];
1413--5507[label="0.130952;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.54.4.71"/>
      <filter dst_port="53" src_ip="141.54.4.71"/>
    </slice>
    <from sec="1201928450" usec="0"/>
    <to sec="1201928937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1373[label="138.52.123.72;s;16pkt 16fpkt", shape=diamond, color=yellow];
1424[label="194.188.195.17;d;15pkt 15fpkt", shape=diamond, color=yellow];
4111[label="138.52.123.72;s;16pkt 16fpkt", shape=hexagon, color=black];
4133[label="194.188.195.17;d;15pkt 15fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.52.123.72:*, 194.188.195.17:80}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3871%)&lt;BR/&gt; 1195: (3.22581%)&lt;BR/&gt; 1194: (3.22581%)&lt;BR/&gt; 1193: (3.22581%)&lt;BR/&gt; 1192: (3.22581%)&gt;];
}
1373--1424[label="1;15pkt 15fpkt"];
1373--4111[label="1;16pkt 16fpkt"];
1373--4133[label="1;15pkt 15fpkt"];
1424--4111[label="1;15pkt 15fpkt"];
1424--4133[label="1;15pkt 15fpkt"];
4111--4133[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="194.188.195.17" dst_port="80" src_ip="138.52.123.72"/>
    </slice>
    <from sec="1201928411" usec="0"/>
    <to sec="1201928617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
873[label="138.43.161.14;s;39pkt 39fpkt", shape=diamond, color=yellow];
1426[label="217.12.132.11;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.161.14:995, *:*}[65%]&lt;BR/&gt;{138.43.161.14:443, 133.20.152.5:*}[22.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (34.1463%)&lt;BR/&gt; 443: (10.9756%)&lt;BR/&gt; 26578: (2.43902%)&lt;BR/&gt; 993: (2.43902%)&lt;BR/&gt; 110: (2.43902%)&gt;];
}
873--1426[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.161.14" src_port="995"/>
      <filter dst_ip="133.20.152.5" src_ip="138.43.161.14" src_port="443"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="48.100.145.226"/>
      <from sec="1201928998" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928998" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.238.42.81"/>
      <from sec="1201929086" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929086" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.233.65.249"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201928924" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201928924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
1665[label="44.138.192.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
1666[label="169.16.16.196;s;51pkt 51fpkt", shape=diamond, color=yellow];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.16.196:*, 44.138.192.77:8080}[64.7059%]&lt;BR/&gt;{169.16.16.196:*, 44.138.192.49:10177}[21.5686%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (31.7308%)&lt;BR/&gt; 10177: (10.5769%)&lt;BR/&gt; 80: (5.76923%)&lt;BR/&gt; 10117: (1.92308%)&lt;BR/&gt; 3330: (1.92308%)&gt;];
}
1665--1666[label="1;1pkt 1fpkt"];
1666--5444[label="0.0392157;2pkt 2fpkt"];
1666--5481[label="0.0392157;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="44.138.192.77" dst_port="8080" src_ip="169.16.16.196"/>
      <filter dst_ip="44.138.192.49" dst_port="10177" src_ip="169.16.16.196"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.85.27.66"/>
      <from sec="1201928989" usec="0"/>
      <to sec="1201929149" usec="0"/>
    </slice>
    <from sec="1201928989" usec="0"/>
    <to sec="1201929149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="44.85.27.66"/>
      <from sec="1201928989" usec="0"/>
      <to sec="1201929149" usec="0"/>
    </slice>
    <from sec="1201928989" usec="0"/>
    <to sec="1201929149" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
1609[label="141.54.101.229;s;100pkt 100fpkt", shape=diamond, color=yellow];
1816[label="89.101.171.73;d;53pkt 53fpkt", shape=diamond, color=yellow];
4485[label="89.101.171.73;d;53pkt 53fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.101.229:*, 89.101.171.73:443}[53%]&lt;BR/&gt;{141.54.101.229:*, 25.150.237.251:80}[29%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (39.5631%)&lt;BR/&gt; 80: (10.1942%)&lt;BR/&gt; 3112: (0.728155%)&lt;BR/&gt; 3111: (0.728155%)&lt;BR/&gt; 3110: (0.728155%)&gt;];
}
1609--1816[label="1;53pkt 53fpkt"];
1609--4485[label="1;53pkt 53fpkt"];
1609--5444[label="0.01;1pkt 1fpkt"];
1609--5467[label="0.07;7pkt 7fpkt"];
1609--5481[label="0.01;1pkt 1fpkt"];
1609--5494[label="0.07;7pkt 7fpkt"];
1609--5514[label="0.07;7pkt 7fpkt"];
1816--4485[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="89.101.171.73" dst_port="443" src_ip="141.54.101.229"/>
      <filter dst_ip="25.150.237.251" dst_port="80" src_ip="141.54.101.229"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="91.196.72.38"/>
      <from sec="1201929030" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929030" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
1073[label="194.245.38.70;s;336pkt 336fpkt", shape=diamond, color=yellow];
1850[label="48.98.98.148;d;2pkt 2fpkt", shape=diamond, color=yellow];
4015[label="194.245.38.70;s;161pkt 161fpkt", shape=hexagon, color=black];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.38.70:80, *:*}[86.0119%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.487%)&lt;BR/&gt; 554: (3.20641%)&lt;BR/&gt; 443: (2.80561%)&lt;BR/&gt; 3156: (0.300601%)&lt;BR/&gt; 2076: (0.300601%)&gt;];
}
1073--1850[label="1;2pkt 2fpkt"];
1073--2109[label="0.00840336;1pkt 1fpkt"];
1073--2527[label="0.00297619;1pkt 1fpkt"];
1073--3298[label="0.0107527;1pkt 1fpkt"];
1073--4015[label="1;161pkt 161fpkt"];
1073--4750[label="0.00297619;1pkt 1fpkt"];
1073--5429[label="0.00297619;1pkt 1fpkt"];
1073--5462[label="0.0505952;17pkt 17fpkt"];
1073--5473[label="0.0654762;22pkt 22fpkt"];
1073--5490[label="0.0505952;17pkt 17fpkt"];
1073--5499[label="0.0654762;22pkt 22fpkt"];
1073--5510[label="0.0505952;17pkt 17fpkt"];
1073--5517[label="0.0654762;22pkt 22fpkt"];
1850--4015[label="1;2pkt 2fpkt"];
4015--5462[label="0.0124224;2pkt 2fpkt"];
4015--5473[label="0.0124224;2pkt 2fpkt"];
4015--5490[label="0.0124224;2pkt 2fpkt"];
4015--5499[label="0.0124224;2pkt 2fpkt"];
4015--5510[label="0.0124224;2pkt 2fpkt"];
4015--5517[label="0.0124224;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.38.70" src_port="80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
2096[label="194.245.18.155;d;88pkt 88fpkt", shape=diamond, color=yellow];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.245.18.155:13956}[94.3182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13956: (47.1591%)&lt;BR/&gt; 45306: (1.70455%)&lt;BR/&gt; 13650: (1.13636%)&lt;BR/&gt; 2560: (1.13636%)&lt;BR/&gt; 0: (1.13636%)&gt;];
}
2096--2528[label="0.0113636;1pkt 1fpkt"];
2096--3140[label="0.0113636;1pkt 1fpkt"];
2096--4751[label="0.0113636;1pkt 1fpkt"];
2096--5399[label="0.0113636;1pkt 1fpkt"];
2096--8740[label="0.0113636;1pkt 1fpkt"];
2096--9138[label="0.0113636;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.18.155" dst_port="13956"/>
    </slice>
    <from sec="1201928412" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.196.72.38"/>
      <from sec="1201929030" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929030" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.68.179.12"/>
      <from sec="1201928602" usec="0"/>
      <to sec="1201928901" usec="0"/>
    </slice>
    <from sec="1201928602" usec="0"/>
    <to sec="1201928901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.247.78.78"/>
      <from sec="1201928625" usec="0"/>
      <to sec="1201928886" usec="0"/>
    </slice>
    <from sec="1201928625" usec="0"/>
    <to sec="1201928886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.61.126.13"/>
      <from sec="1201928649" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928649" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.61.126.13"/>
      <from sec="1201928649" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928649" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.62.0.187"/>
      <from sec="1201928696" usec="0"/>
      <to sec="1201928751" usec="0"/>
    </slice>
    <from sec="1201928696" usec="0"/>
    <to sec="1201928751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.62.0.187"/>
      <from sec="1201928696" usec="0"/>
      <to sec="1201928751" usec="0"/>
    </slice>
    <from sec="1201928696" usec="0"/>
    <to sec="1201928751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.117.53.171"/>
      <from sec="1201928751" usec="0"/>
      <to sec="1201928829" usec="0"/>
    </slice>
    <from sec="1201928751" usec="0"/>
    <to sec="1201928829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.195.145.247"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
540[label="195.178.69.222;s;4950pkt 4950fpkt", shape=diamond, color=yellow];
2343[label="180.210.252.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
2889[label="201.74.167.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
4368[label="195.178.69.222;s;4950pkt 4950fpkt", shape=hexagon, color=black];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.178.69.222:16756, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16756: (50%)&lt;BR/&gt; 6881: (0.545344%)&lt;BR/&gt; 16001: (0.464553%)&lt;BR/&gt; 1501: (0.424157%)&lt;BR/&gt; 23076: (0.151485%)&gt;];
}
540--2343[label="1;1pkt 1fpkt"];
540--2889[label="1;1pkt 1fpkt"];
540--4368[label="1;4950pkt 4950fpkt"];
540--5454[label="0.000227531;1pkt 1fpkt"];
540--5467[label="0.000209776;1pkt 1fpkt"];
540--5487[label="0.000227531;1pkt 1fpkt"];
540--5494[label="0.000209776;1pkt 1fpkt"];
540--5508[label="0.000227531;1pkt 1fpkt"];
540--5514[label="0.000209776;1pkt 1fpkt"];
2343--4368[label="1;1pkt 1fpkt"];
2889--4368[label="1;1pkt 1fpkt"];
4368--5454[label="0.000227531;1pkt 1fpkt"];
4368--5467[label="0.000209776;1pkt 1fpkt"];
4368--5487[label="0.000227531;1pkt 1fpkt"];
4368--5494[label="0.000209776;1pkt 1fpkt"];
4368--5508[label="0.000227531;1pkt 1fpkt"];
4368--5514[label="0.000209776;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="195.178.69.222" src_port="16756"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.195.83.135"/>
      <from sec="1201928608" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928608" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="42.195.83.135"/>
      <from sec="1201928608" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928608" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.247.78.78"/>
      <from sec="1201928625" usec="0"/>
      <to sec="1201928886" usec="0"/>
    </slice>
    <from sec="1201928625" usec="0"/>
    <to sec="1201928886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="40.130.127.9"/>
      <from sec="1201928632" usec="0"/>
      <to sec="1201929013" usec="0"/>
    </slice>
    <from sec="1201928632" usec="0"/>
    <to sec="1201929013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.130.127.9"/>
      <from sec="1201928632" usec="0"/>
      <to sec="1201929013" usec="0"/>
    </slice>
    <from sec="1201928632" usec="0"/>
    <to sec="1201929013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.96.197.93"/>
      <from sec="1201928738" usec="0"/>
      <to sec="1201929077" usec="0"/>
    </slice>
    <from sec="1201928738" usec="0"/>
    <to sec="1201929077" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="7.138.70.64"/>
      <from sec="1201929020" usec="0"/>
      <to sec="1201929227" usec="0"/>
    </slice>
    <from sec="1201929020" usec="0"/>
    <to sec="1201929227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.172.186.255"/>
      <from sec="1201928780" usec="0"/>
      <to sec="1201929116" usec="0"/>
    </slice>
    <from sec="1201928780" usec="0"/>
    <to sec="1201929116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
756[label="169.16.242.199;s;11pkt 11fpkt", shape=diamond, color=yellow];
2494[label="18.208.93.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
2516[label="217.12.148.128;d;2pkt 2fpkt", shape=diamond, color=yellow];
4074[label="169.16.242.199;s;10pkt 10fpkt", shape=hexagon, color=black];
4744[label="18.208.93.13;d;1pkt 1fpkt", shape=hexagon, color=black];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.242.199:995, 216.234.251.123:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 20528: (8%)&lt;BR/&gt; 63306: (6%)&lt;BR/&gt; 63301: (6%)&lt;BR/&gt; 60545: (4%)&gt;];
}
756--2494[label="1;1pkt 1fpkt"];
756--2516[label="1;2pkt 2fpkt"];
756--4074[label="1;10pkt 10fpkt"];
756--4744[label="1;1pkt 1fpkt"];
2494--4074[label="1;1pkt 1fpkt"];
2494--4744[label="1;1pkt 1fpkt"];
2516--4074[label="1;2pkt 2fpkt"];
4074--4744[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.234.251.123" src_ip="169.16.242.199" src_port="995"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
2567[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
2568[label="141.54.110.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
4810[label="192.168.128.255;d;1pkt 1fpkt", shape=hexagon, color=black];
4976[label="141.54.110.113;s;1pkt 1fpkt", shape=hexagon, color=black];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.110.113:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
2567--2568[label="1;1pkt 1fpkt"];
2567--4810[label="1;1pkt 1fpkt"];
2567--4976[label="1;1pkt 1fpkt"];
2568--4810[label="1;1pkt 1fpkt"];
2568--4976[label="1;1pkt 1fpkt"];
4810--4976[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="141.54.110.113" src_port="4445"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.233.133.254"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.233.171.123"/>
      <from sec="1201928402" usec="0"/>
      <to sec="1201929224" usec="0"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.31.8.248"/>
      <from sec="1201928698" usec="0"/>
      <to sec="1201928882" usec="0"/>
    </slice>
    <from sec="1201928698" usec="0"/>
    <to sec="1201928882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="44.31.8.248"/>
      <from sec="1201928698" usec="0"/>
      <to sec="1201928882" usec="0"/>
    </slice>
    <from sec="1201928698" usec="0"/>
    <to sec="1201928882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.0.186.154"/>
      <from sec="1201928716" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928716" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="35.0.186.154"/>
      <from sec="1201928716" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928716" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
2844[label="194.245.37.0;d;244pkt 244fpkt", shape=diamond, color=yellow];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 194.245.37.0:*}[61.4754%]&lt;BR/&gt;{*:0, 194.245.37.0:0}[38.1148%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.1148%)&lt;BR/&gt; 53: (30.7377%)&lt;BR/&gt; 55939: (0.204918%)&lt;BR/&gt; 4901: (0.204918%)&lt;BR/&gt; 4879: (0.204918%)&gt;];
}
2844--4751[label="0.00409836;1pkt 1fpkt"];
2844--5399[label="0.00409836;1pkt 1fpkt"];
2844--5451[label="0.00409836;1pkt 1fpkt"];
2844--5484[label="0.00409836;1pkt 1fpkt"];
2844--5505[label="0.00409836;1pkt 1fpkt"];
2844--9138[label="0.00409836;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.37.0" src_port="53"/>
      <filter dst_ip="194.245.37.0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,011,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
1607[label="90.176.130.165;s;1540pkt 1540fpkt", shape=diamond, color=yellow];
2860[label="138.135.3.5;d;596pkt 596fpkt", shape=diamond, color=yellow];
2873[label="138.233.235.148;d;520pkt 520fpkt", shape=diamond, color=yellow];
2897[label="138.135.90.165;d;585pkt 585fpkt", shape=diamond, color=yellow];
7722[label="218.169.145.238;166pkt 166fpkt", shape=pentagon, color=darkviolet];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.176.130.165:6213, 138.135.3.5:*}[31.2281%]&lt;BR/&gt;{90.176.130.165:6213, 138.135.90.165:*}[31.0526%]&lt;BR/&gt;{90.176.130.165:6213, 138.233.235.148:*}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6213: (45.2011%)&lt;BR/&gt; 4600: (4.78427%)&lt;BR/&gt; 49050: (0.088054%)&lt;BR/&gt; 43389: (0.088054%)&lt;BR/&gt; 36768: (0.088054%)&gt;];
}
1607--2860[label="0.895973;534pkt 534fpkt"];
1607--2873[label="0.913462;475pkt 475fpkt"];
1607--2897[label="0.907692;531pkt 531fpkt"];
2860--7722[label="0.36747;61pkt 61fpkt"];
2873--7722[label="0.26506;44pkt 44fpkt"];
2897--4842[label="0.0017094;1pkt 1fpkt"];
2897--7722[label="0.313253;52pkt 52fpkt"];
</description>
    <slice>
      <filter dst_ip="138.135.3.5" src_ip="90.176.130.165" src_port="6213"/>
      <filter dst_ip="138.135.90.165" src_ip="90.176.130.165" src_port="6213"/>
      <filter dst_ip="138.233.235.148" src_ip="90.176.130.165" src_port="6213"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="169.16.17.164"/>
      <from sec="1201928402" usec="0"/>
      <to sec="1201929137" usec="0"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
2929[label="145.195.146.174;s;196pkt 196fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.146.174:54351, *:*}[98.9796%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54351: (49.4898%)&lt;BR/&gt; 3488: (0.510204%)&lt;BR/&gt; 1047: (0.510204%)&lt;BR/&gt; 443: (0.510204%)&lt;BR/&gt; 81: (0.510204%)&gt;];
}
2929--5467[label="0.00510204;1pkt 1fpkt"];
2929--5494[label="0.00510204;1pkt 1fpkt"];
2929--5514[label="0.00510204;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.195.146.174" src_port="54351"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
2656[label="138.43.166.214;d;12pkt 12fpkt", shape=diamond, color=yellow];
2951[label="212.82.188.40;s;12pkt 12fpkt", shape=diamond, color=yellow];
4857[label="138.43.166.214;d;12pkt 12fpkt", shape=hexagon, color=black];
5046[label="212.82.188.40;s;11pkt 11fpkt", shape=hexagon, color=black];
5962[label="212.82.188.40;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.188.40:*, 138.43.166.214:443}[91.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.7627%)&lt;BR/&gt; 4759: (4.23729%)&lt;BR/&gt; 4752: (4.23729%)&lt;BR/&gt; 4748: (4.23729%)&lt;BR/&gt; 4745: (4.23729%)&gt;];
}
2656--2951[label="1;12pkt 12fpkt"];
2656--4857[label="1;12pkt 12fpkt"];
2656--5046[label="1;11pkt 11fpkt"];
2656--5962[label="1;12pkt 12fpkt"];
2951--4857[label="1;12pkt 12fpkt"];
2951--5046[label="1;11pkt 11fpkt"];
2951--5962[label="1;12pkt 12fpkt"];
4857--5046[label="1;11pkt 11fpkt"];
4857--5962[label="1;12pkt 12fpkt"];
5046--5962[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.166.214" dst_port="443" src_ip="212.82.188.40"/>
    </slice>
    <from sec="1201928414" usec="0"/>
    <to sec="1201929271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.177.178.17"/>
      <from sec="1201928601" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928601" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.37.44.248"/>
      <from sec="1201928786" usec="0"/>
      <to sec="1201929187" usec="0"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.94.144.210"/>
      <from sec="1201928787" usec="0"/>
      <to sec="1201929003" usec="0"/>
    </slice>
    <from sec="1201928787" usec="0"/>
    <to sec="1201929003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="211.82.187.99"/>
      <from sec="1201928790" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928790" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.141.124.167"/>
      <from sec="1201928793" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928793" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.214.87.111"/>
      <from sec="1201928809" usec="0"/>
      <to sec="1201928989" usec="0"/>
    </slice>
    <from sec="1201928809" usec="0"/>
    <to sec="1201928989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.199.148.108"/>
      <from sec="1201928836" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928836" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.209.193.20"/>
      <from sec="1201928870" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928870" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.209.193.20"/>
      <from sec="1201928870" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928870" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="211.229.137.30"/>
      <from sec="1201928894" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928894" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.97.153.165"/>
      <from sec="1201928901" usec="0"/>
      <to sec="1201929150" usec="0"/>
    </slice>
    <from sec="1201928901" usec="0"/>
    <to sec="1201929150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="34.97.153.165"/>
      <from sec="1201928901" usec="0"/>
      <to sec="1201929150" usec="0"/>
    </slice>
    <from sec="1201928901" usec="0"/>
    <to sec="1201929150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="91.83.10.9"/>
      <from sec="1201928932" usec="0"/>
      <to sec="1201929214" usec="0"/>
    </slice>
    <from sec="1201928932" usec="0"/>
    <to sec="1201929214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.83.10.9"/>
      <from sec="1201928932" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928932" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
3211[label="141.54.43.239;d;3pkt 3fpkt", shape=diamond, color=yellow];
3212[label="90.112.203.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.112.203.65:123, 141.54.43.239:123}[33.3333%]&lt;BR/&gt;{90.35.11.88:123, 141.54.43.239:123}[33.3333%]&lt;BR/&gt;{195.218.53.236:1627, 141.54.43.239:123}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (87.5%)&lt;BR/&gt; 1627: (12.5%)&gt;];
}
3211--3212[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.43.239" dst_port="123" src_ip="195.218.53.236" src_port="1627"/>
      <filter dst_ip="141.54.43.239" dst_port="123" src_ip="90.35.11.88" src_port="123"/>
      <filter dst_ip="141.54.43.239" dst_port="123" src_ip="90.112.203.65" src_port="123"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="145.195.240.96"/>
      <from sec="1201928402" usec="0"/>
      <to sec="1201929228" usec="0"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
3245[label="194.245.35.204;d;158pkt 158fpkt", shape=diamond, color=yellow];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.245.35.204:3731}[98.1013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3731: (49.0506%)&lt;BR/&gt; 27936: (0.632911%)&lt;BR/&gt; 65005: (0.316456%)&lt;BR/&gt; 64988: (0.316456%)&lt;BR/&gt; 64358: (0.316456%)&gt;];
}
3245--4751[label="0.00632911;1pkt 1fpkt"];
3245--5399[label="0.00632911;1pkt 1fpkt"];
3245--5451[label="0.00632911;1pkt 1fpkt"];
3245--5484[label="0.00632911;1pkt 1fpkt"];
3245--5505[label="0.00632911;1pkt 1fpkt"];
3245--9138[label="0.00632911;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.35.204" dst_port="3731"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
448[label="195.178.140.84;s;122pkt 122fpkt", shape=diamond, color=yellow];
1197[label="91.234.51.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
3266[label="202.250.85.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
4356[label="195.178.140.84;s;48pkt 48fpkt", shape=hexagon, color=black];
4592[label="91.234.51.175;d;1pkt 1fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.178.140.84:46925, *:*}[73.7705%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46925: (39.5954%)&lt;BR/&gt; 42667: (1.15607%)&lt;BR/&gt; 31506: (1.15607%)&lt;BR/&gt; 6881: (1.15607%)&lt;BR/&gt; 61315: (0.867052%)&gt;];
}
448--1197[label="1;1pkt 1fpkt"];
448--3266[label="1;1pkt 1fpkt"];
448--4356[label="1;48pkt 48fpkt"];
448--4592[label="1;1pkt 1fpkt"];
1197--4356[label="1;1pkt 1fpkt"];
1197--4592[label="1;1pkt 1fpkt"];
3266--4356[label="1;1pkt 1fpkt"];
4356--4592[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="195.178.140.84" src_port="46925"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.233.157.150"/>
      <from sec="1201928607" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928607" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.233.157.150"/>
      <from sec="1201928607" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928607" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.251.42.112"/>
      <from sec="1201928795" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928795" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.244.214.211"/>
      <from sec="1201928806" usec="0"/>
      <to sec="1201929109" usec="0"/>
    </slice>
    <from sec="1201928806" usec="0"/>
    <to sec="1201929109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.244.214.211"/>
      <from sec="1201928806" usec="0"/>
      <to sec="1201929109" usec="0"/>
    </slice>
    <from sec="1201928806" usec="0"/>
    <to sec="1201929109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.214.87.111"/>
      <from sec="1201928809" usec="0"/>
      <to sec="1201928989" usec="0"/>
    </slice>
    <from sec="1201928809" usec="0"/>
    <to sec="1201928989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="32.140.2.235"/>
      <from sec="1201928818" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928818" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.140.2.235"/>
      <from sec="1201928818" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928818" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="44.18.152.108"/>
      <from sec="1201928877" usec="0"/>
      <to sec="1201929138" usec="0"/>
    </slice>
    <from sec="1201928877" usec="0"/>
    <to sec="1201929138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="211.87.38.71"/>
      <from sec="1201928880" usec="0"/>
      <to sec="1201929139" usec="0"/>
    </slice>
    <from sec="1201928880" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.129.176.183"/>
      <from sec="1201928880" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928880" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.26.0.176"/>
      <from sec="1201928988" usec="0"/>
      <to sec="1201929138" usec="0"/>
    </slice>
    <from sec="1201928988" usec="0"/>
    <to sec="1201929138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
2895[label="145.195.226.11;s;27pkt 27fpkt", shape=diamond, color=yellow];
3444[label="7.224.216.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
5290[label="7.224.216.204;d;1pkt 1fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.226.11:0, *:0}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (51.7241%)&lt;BR/&gt; 22157: (8.62069%)&lt;BR/&gt; 8080: (8.62069%)&lt;BR/&gt; 60312: (5.17241%)&lt;BR/&gt; 3127: (3.44828%)&gt;];
}
2895--3444[label="1;1pkt 1fpkt"];
2895--5290[label="1;1pkt 1fpkt"];
3444--5290[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.195.226.11"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
620[label="141.54.16.80;s;98pkt 98fpkt", shape=diamond, color=yellow];
3497[label="194.128.1.77;d;2pkt 2fpkt", shape=diamond, color=yellow];
4039[label="141.54.16.80;s;98pkt 98fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.16.80:*, *:80}[97.9592%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9899%)&lt;BR/&gt; 10775: (1.0101%)&lt;BR/&gt; 2310: (0.757576%)&lt;BR/&gt; 2309: (0.757576%)&lt;BR/&gt; 2355: (0.505051%)&gt;];
}
620--3497[label="1;2pkt 2fpkt"];
620--4039[label="1;98pkt 98fpkt"];
620--5454[label="0.0102041;1pkt 1fpkt"];
620--5487[label="0.0102041;1pkt 1fpkt"];
620--5508[label="0.0102041;1pkt 1fpkt"];
3497--4039[label="1;2pkt 2fpkt"];
4039--5454[label="0.0102041;1pkt 1fpkt"];
4039--5487[label="0.0102041;1pkt 1fpkt"];
4039--5508[label="0.0102041;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.54.16.80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
3477[label="141.54.34.28;s;193pkt 193fpkt", shape=diamond, color=yellow];
3514[label="150.128.227.49;d;87pkt 87fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.34.28:*, 150.128.227.49:80}[45.0777%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6429%)&lt;BR/&gt; 1884: (0.357143%)&lt;BR/&gt; 1882: (0.357143%)&lt;BR/&gt; 1877: (0.357143%)&lt;BR/&gt; 1875: (0.357143%)&gt;];
}
3477--3514[label="1;87pkt 87fpkt"];
</description>
    <slice>
      <filter dst_ip="150.128.227.49" dst_port="80" src_ip="141.54.34.28"/>
    </slice>
    <from sec="1201929057" usec="0"/>
    <to sec="1201929223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
2158[label="138.43.144.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
3524[label="44.117.35.120;s;1pkt 1fpkt", shape=diamond, color=yellow];
5223[label="138.43.144.50;d;1pkt 1fpkt", shape=hexagon, color=black];
6742[label="44.117.35.120;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8401[label="44.117.35.120;1pkt 1fpkt", shape=invtriangle, color=brown];
9119[label="44.117.35.120;1pkt 1fpkt", shape=invhouse, color=bisque];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.117.35.120:80, 138.43.144.50:1629}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1629: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2158--3524[label="1;1pkt 1fpkt"];
2158--5223[label="1;1pkt 1fpkt"];
2158--6742[label="1;1pkt 1fpkt"];
2158--8401[label="1;1pkt 1fpkt"];
2158--9119[label="1;1pkt 1fpkt"];
3524--5223[label="1;1pkt 1fpkt"];
3524--6742[label="1;1pkt 1fpkt"];
3524--8401[label="1;1pkt 1fpkt"];
3524--9119[label="1;1pkt 1fpkt"];
5223--6742[label="1;1pkt 1fpkt"];
5223--8401[label="1;1pkt 1fpkt"];
5223--9119[label="1;1pkt 1fpkt"];
6742--8401[label="1;1pkt 1fpkt"];
6742--9119[label="1;1pkt 1fpkt"];
8401--9119[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.144.50" dst_port="1629" src_ip="44.117.35.120" src_port="80"/>
    </slice>
    <from sec="1201929121" usec="0"/>
    <to sec="1201929197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
3526[label="170.50.60.119;d;1pkt 1fpkt", shape=diamond, color=yellow];
3527[label="44.117.53.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
5296[label="44.117.53.162;s;1pkt 1fpkt", shape=hexagon, color=black];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.117.53.162:80, 170.50.60.119:2070}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2070: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3526--3527[label="1;1pkt 1fpkt"];
3526--5296[label="1;1pkt 1fpkt"];
3527--5296[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.50.60.119" dst_port="2070" src_ip="44.117.53.162" src_port="80"/>
    </slice>
    <from sec="1201929129" usec="0"/>
    <to sec="1201929227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
996[label="195.52.163.27;s;4pkt 4fpkt", shape=diamond, color=yellow];
3530[label="141.54.40.193;d;8pkt 8fpkt", shape=diamond, color=yellow];
5224[label="141.54.40.193;d;8pkt 8fpkt", shape=hexagon, color=black];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.52.163.27:80, 141.54.40.193:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1834: (7.5%)&lt;BR/&gt; 1833: (7.5%)&lt;BR/&gt; 1820: (7.5%)&lt;BR/&gt; 1819: (7.5%)&gt;];
}
996--3530[label="1;4pkt 4fpkt"];
996--5224[label="1;4pkt 4fpkt"];
3530--5224[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.40.193" src_ip="195.52.163.27" src_port="80"/>
    </slice>
    <from sec="1201929137" usec="0"/>
    <to sec="1201929167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="138.43.99.65"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.172.142.118"/>
      <from sec="1201928693" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928693" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="141.54.108.217"/>
      <from sec="1201928759" usec="0"/>
      <to sec="1201929226" usec="0"/>
    </slice>
    <from sec="1201928759" usec="0"/>
    <to sec="1201929226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="44.19.128.76"/>
      <from sec="1201928792" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928792" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.67.161.195"/>
      <from sec="1201928968" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928968" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="28.94.128.204"/>
      <from sec="1201928971" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928971" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="28.94.128.204"/>
      <from sec="1201928971" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928971" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.167.217.63"/>
      <from sec="1201928972" usec="0"/>
      <to sec="1201929227" usec="0"/>
    </slice>
    <from sec="1201928972" usec="0"/>
    <to sec="1201929227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
3669[label="169.16.20.139;s;12pkt 12fpkt", shape=diamond, color=yellow];
3682[label="44.138.193.229;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.20.139:*, 194.128.1.10:*}[33.3333%]&lt;BR/&gt;{169.16.20.139:*, 194.128.1.101:80}[25%]&lt;BR/&gt;{169.16.20.139:*, 194.128.1.101:20480}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20480: (17.8571%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 10125: (14.2857%)&lt;BR/&gt; 6824: (7.14286%)&lt;BR/&gt; 6784: (7.14286%)&gt;];
}
3669--3682[label="1;2pkt 2fpkt"];
3669--5467[label="0.0833333;1pkt 1fpkt"];
3669--5494[label="0.0833333;1pkt 1fpkt"];
3669--5514[label="0.0833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.128.1.10" src_ip="169.16.20.139"/>
      <filter dst_ip="194.128.1.101" dst_port="20480" src_ip="169.16.20.139"/>
      <filter dst_ip="194.128.1.101" dst_port="80" src_ip="169.16.20.139"/>
    </slice>
    <from sec="1201928910" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.87.172.181"/>
      <from sec="1201928981" usec="0"/>
      <to sec="1201929228" usec="0"/>
    </slice>
    <from sec="1201928981" usec="0"/>
    <to sec="1201929228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="40.137.103.60"/>
      <from sec="1201928983" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928983" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.26.0.176"/>
      <from sec="1201928988" usec="0"/>
      <to sec="1201929138" usec="0"/>
    </slice>
    <from sec="1201928988" usec="0"/>
    <to sec="1201929138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.227.91.62"/>
      <from sec="1201929034" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929034" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
3706[label="194.245.33.48;d;143pkt 143fpkt", shape=diamond, color=yellow];
3707[label="214.64.36.59;s;142pkt 142fpkt", shape=diamond, color=yellow];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.64.36.59:*, 194.245.33.48:1433}[99.3007%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.8246%)&lt;BR/&gt; 64746: (0.350877%)&lt;BR/&gt; 64472: (0.350877%)&lt;BR/&gt; 64401: (0.350877%)&lt;BR/&gt; 63434: (0.350877%)&gt;];
}
3706--3707[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.33.48" dst_port="1433" src_ip="214.64.36.59"/>
    </slice>
    <from sec="1201929050" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="45.8.77.23"/>
      <from sec="1201929059" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929059" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="90.103.97.20"/>
      <from sec="1201929064" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929064" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="91.88.233.168"/>
      <from sec="1201929073" usec="0"/>
      <to sec="1201929225" usec="0"/>
    </slice>
    <from sec="1201929073" usec="0"/>
    <to sec="1201929225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.134.87.9"/>
      <from sec="1201929139" usec="0"/>
      <to sec="1201929217" usec="0"/>
    </slice>
    <from sec="1201929139" usec="0"/>
    <to sec="1201929217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
325[label="220.119.245.60;d;2pkt 2fpkt", shape=diamond, color=yellow];
2798[label="1.181.99.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
3756[label="138.43.70.85;s;5pkt 5fpkt", shape=diamond, color=yellow];
3801[label="202.50.154.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.70.85:62250, 1.181.99.26:80}[20%]&lt;BR/&gt;{138.43.70.85:1137, 203.152.74.33:80}[20%]&lt;BR/&gt;{138.43.70.85:1138, 202.50.154.133:80}[20%]&lt;BR/&gt;{138.43.70.85:1134, 220.119.245.60:80}[20%]&lt;BR/&gt;{138.43.70.85:1139, 220.119.245.60:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62250: (11.1111%)&lt;BR/&gt; 1139: (11.1111%)&lt;BR/&gt; 1138: (11.1111%)&lt;BR/&gt; 1134: (11.1111%)&gt;];
}
325--3756[label="1;2pkt 2fpkt"];
2798--3756[label="1;1pkt 1fpkt"];
3756--3801[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.119.245.60" dst_port="80" src_ip="138.43.70.85" src_port="1139"/>
      <filter dst_ip="220.119.245.60" dst_port="80" src_ip="138.43.70.85" src_port="1134"/>
      <filter dst_ip="202.50.154.133" dst_port="80" src_ip="138.43.70.85" src_port="1138"/>
      <filter dst_ip="203.152.74.33" dst_port="80" src_ip="138.43.70.85" src_port="1137"/>
      <filter dst_ip="1.181.99.26" dst_port="80" src_ip="138.43.70.85" src_port="62250"/>
    </slice>
    <from sec="1201929143" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.181.136.228"/>
      <from sec="1201929148" usec="0"/>
      <to sec="1201929166" usec="0"/>
    </slice>
    <from sec="1201929148" usec="0"/>
    <to sec="1201929166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
3779[label="90.202.86.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
3780[label="145.195.180.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.180.71:1425, 90.202.86.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1425: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3779--3780[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="90.202.86.148" dst_port="80" src_ip="145.195.180.71" src_port="1425"/>
    </slice>
    <from sec="1201929166" usec="0"/>
    <to sec="1201929224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="28.152.150.107"/>
      <from sec="1201929175" usec="0"/>
      <to sec="1201929201" usec="0"/>
    </slice>
    <from sec="1201929175" usec="0"/>
    <to sec="1201929201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.599828,2.17198,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="17.155.103.160"/>
      <from sec="1201929184" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201929184" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
294[label="138.43.105.122;s;7183pkt 7183fpkt", shape=diamond, color=yellow];
3832[label="138.43.105.122;s;4045pkt 4045fpkt", shape=hexagon, color=black];
6756[label="138.43.105.122;7650pkt 7650fpkt", shape=pentagon, color=darkviolet];
8408[label="138.43.105.122;7650pkt 7650fpkt", shape=invtriangle, color=brown];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.105.122:34876, *:*}[99.9608%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34876: (49.9793%)&lt;BR/&gt; 54045: (0.0640832%)&lt;BR/&gt; 80: (0.0621984%)&lt;BR/&gt; 58840: (0.028272%)&lt;BR/&gt; 54272: (0.028272%)&gt;];
}
294--1309[label="0.00775194;1pkt 1fpkt"];
294--3832[label="1;4045pkt 4045fpkt"];
294--4639[label="0.0114943;1pkt 1fpkt"];
294--5454[label="0.000227531;1pkt 1fpkt"];
294--5467[label="0.000419551;2pkt 2fpkt"];
294--5487[label="0.000227531;1pkt 1fpkt"];
294--5494[label="0.000419551;2pkt 2fpkt"];
294--5508[label="0.000227531;1pkt 1fpkt"];
294--5514[label="0.000419551;2pkt 2fpkt"];
294--6756[label="1;7183pkt 7183fpkt"];
294--8408[label="1;7183pkt 7183fpkt"];
3832--4639[label="0.0114943;1pkt 1fpkt"];
3832--5454[label="0.000247219;1pkt 1fpkt"];
3832--5467[label="0.000247219;1pkt 1fpkt"];
3832--5487[label="0.000247219;1pkt 1fpkt"];
3832--5494[label="0.000247219;1pkt 1fpkt"];
3832--5508[label="0.000247219;1pkt 1fpkt"];
3832--5514[label="0.000247219;1pkt 1fpkt"];
3832--6756[label="1;4045pkt 4045fpkt"];
3832--8408[label="1;4045pkt 4045fpkt"];
6756--8408[label="1;7650pkt 7650fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.105.122" src_port="34876"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
600[label="91.103.204.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
601[label="145.195.233.35;s;32pkt 32fpkt", shape=diamond, color=yellow];
666[label="91.102.1.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
3886[label="91.103.204.167;d;1pkt 1fpkt", shape=hexagon, color=black];
3887[label="145.195.233.35;s;32pkt 32fpkt", shape=hexagon, color=black];
4386[label="91.102.1.59;d;1pkt 1fpkt", shape=hexagon, color=black];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.233.35:*, 213.56.20.1:4160}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4160: (17.6471%)&lt;BR/&gt; 5152: (10.2941%)&lt;BR/&gt; 4662: (5.88235%)&lt;BR/&gt; 7556: (4.41176%)&lt;BR/&gt; 7122: (2.94118%)&gt;];
}
600--601[label="1;1pkt 1fpkt"];
600--3886[label="1;1pkt 1fpkt"];
600--3887[label="1;1pkt 1fpkt"];
601--666[label="1;1pkt 1fpkt"];
601--3886[label="1;1pkt 1fpkt"];
601--3887[label="1;32pkt 32fpkt"];
601--4386[label="1;1pkt 1fpkt"];
666--3887[label="1;1pkt 1fpkt"];
666--4386[label="1;1pkt 1fpkt"];
3886--3887[label="1;1pkt 1fpkt"];
3887--4386[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.56.20.1" dst_port="4160" src_ip="145.195.233.35"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
758[label="18.208.88.175;s;2pkt 2fpkt", shape=diamond, color=yellow];
3925[label="18.208.88.175;s;2pkt 2fpkt", shape=hexagon, color=black];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.208.88.175:5782, 169.16.242.199:995}[50%]&lt;BR/&gt;{18.208.88.175:5786, 169.16.242.199:995}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 5786: (25%)&lt;BR/&gt; 5782: (25%)&gt;];
}
758--3925[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.242.199" dst_port="995" src_ip="18.208.88.175" src_port="5786"/>
      <filter dst_ip="169.16.242.199" dst_port="995" src_ip="18.208.88.175" src_port="5782"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201928420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
863[label="141.54.203.68;d;8pkt 8fpkt", shape=diamond, color=yellow];
952[label="19.39.224.19;s;6pkt 6fpkt", shape=diamond, color=yellow];
3950[label="141.54.203.68;d;4pkt 4fpkt", shape=hexagon, color=black];
5746[label="19.39.224.19;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7933[label="19.39.224.19;10pkt 10fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.39.224.19:80, 141.54.203.68:*}[84.6154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1122: (6.41026%)&lt;BR/&gt; 1126: (5.12821%)&lt;BR/&gt; 1125: (5.12821%)&lt;BR/&gt; 1124: (5.12821%)&gt;];
}
863--952[label="1;6pkt 6fpkt"];
863--3950[label="1;4pkt 4fpkt"];
863--5746[label="0.75;6pkt 6fpkt"];
863--7933[label="0.625;5pkt 5fpkt"];
952--3950[label="0.5;2pkt 2fpkt"];
952--5746[label="1;6pkt 6fpkt"];
952--7933[label="0.833333;5pkt 5fpkt"];
3950--5746[label="0.5;2pkt 2fpkt"];
3950--7933[label="0.25;1pkt 1fpkt"];
5746--7933[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.203.68" src_ip="19.39.224.19" src_port="80"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
984[label="17.155.108.80;s;1pkt 1fpkt", shape=diamond, color=yellow];
3977[label="17.155.108.80;s;1pkt 1fpkt", shape=hexagon, color=black];
6357[label="17.155.108.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8207[label="17.155.108.80;1pkt 1fpkt", shape=invtriangle, color=brown];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.155.108.80:80, 169.16.16.245:2315}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2315: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
984--3977[label="1;1pkt 1fpkt"];
984--6357[label="1;1pkt 1fpkt"];
984--8207[label="1;1pkt 1fpkt"];
3977--6357[label="1;1pkt 1fpkt"];
3977--8207[label="1;1pkt 1fpkt"];
6357--8207[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.16.245" dst_port="2315" src_ip="17.155.108.80" src_port="80"/>
    </slice>
    <from sec="1201928458" usec="0"/>
    <to sec="1201928549" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1201928401" usec="0"/>
      <to sec="1201928599" usec="0"/>
    </slice>
    <from sec="40" usec="0"/>
    <to sec="30270960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1046[label="170.50.163.195;s;506pkt 506fpkt", shape=diamond, color=yellow];
4010[label="170.50.163.195;s;492pkt 492fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.50.163.195:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1046--2535[label="0.0028169;1pkt 1fpkt"];
1046--2560[label="0.00263852;1pkt 1fpkt"];
1046--2569[label="0.002457;1pkt 1fpkt"];
1046--2575[label="0.00271739;1pkt 1fpkt"];
1046--2825[label="0.00294118;1pkt 1fpkt"];
1046--2843[label="0.00248139;1pkt 1fpkt"];
1046--2853[label="0.00331126;1pkt 1fpkt"];
1046--2865[label="0.00299401;1pkt 1fpkt"];
1046--3180[label="0.00343643;1pkt 1fpkt"];
1046--3186[label="0.00346021;1pkt 1fpkt"];
1046--3187[label="0.0034965;1pkt 1fpkt"];
1046--3909[label="0.166667;1pkt 1fpkt"];
1046--4010[label="1;492pkt 492fpkt"];
1046--4799[label="0.00294118;1pkt 1fpkt"];
1046--4818[label="0.00393701;1pkt 1fpkt"];
1046--4954[label="0.00311526;1pkt 1fpkt"];
1046--5155[label="0.00389105;1pkt 1fpkt"];
4010--4799[label="0.00294118;1pkt 1fpkt"];
4010--4818[label="0.00393701;1pkt 1fpkt"];
4010--4954[label="0.00311526;1pkt 1fpkt"];
4010--5155[label="0.00389105;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="170.50.163.195"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
1175[label="44.138.193.251;d;2pkt 2fpkt", shape=diamond, color=yellow];
1176[label="141.54.220.65;s;9pkt 9fpkt", shape=diamond, color=yellow];
4056[label="141.54.220.65;s;5pkt 5fpkt", shape=hexagon, color=black];
5238[label="44.138.193.251;d;2pkt 2fpkt", shape=hexagon, color=black];
6202[label="141.54.220.65;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8134[label="141.54.220.65;9pkt 9fpkt", shape=invtriangle, color=brown];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.220.65:*, 194.128.1.10:80}[33.3333%]&lt;BR/&gt;{141.54.220.65:*, 194.128.1.50:80}[22.2222%]&lt;BR/&gt;{141.54.220.65:*, 194.128.1.101:80}[22.2222%]&lt;BR/&gt;{141.54.220.65:*, 44.138.193.251:10627}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 10627: (16.6667%)&lt;BR/&gt; 2704: (8.33333%)&lt;BR/&gt; 2627: (8.33333%)&lt;BR/&gt; 2707: (5.55556%)&gt;];
}
1175--1176[label="1;2pkt 2fpkt"];
1175--4056[label="1;2pkt 2fpkt"];
1175--5238[label="1;2pkt 2fpkt"];
1175--6202[label="1;2pkt 2fpkt"];
1175--8134[label="1;2pkt 2fpkt"];
1176--4056[label="1;5pkt 5fpkt"];
1176--5238[label="1;2pkt 2fpkt"];
1176--5467[label="0.111111;1pkt 1fpkt"];
1176--5494[label="0.111111;1pkt 1fpkt"];
1176--5514[label="0.111111;1pkt 1fpkt"];
1176--6202[label="1;9pkt 9fpkt"];
1176--8134[label="1;9pkt 9fpkt"];
4056--5238[label="1;2pkt 2fpkt"];
4056--6202[label="1;5pkt 5fpkt"];
4056--8134[label="1;5pkt 5fpkt"];
5238--6202[label="1;2pkt 2fpkt"];
5238--8134[label="1;2pkt 2fpkt"];
6202--8134[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="194.128.1.10" dst_port="80" src_ip="141.54.220.65"/>
      <filter dst_ip="44.138.193.251" dst_port="10627" src_ip="141.54.220.65"/>
      <filter dst_ip="194.128.1.101" dst_port="80" src_ip="141.54.220.65"/>
      <filter dst_ip="194.128.1.50" dst_port="80" src_ip="141.54.220.65"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
1505[label="217.12.132.14;d;1pkt 1fpkt", shape=diamond, color=yellow];
4148[label="217.12.132.14;d;1pkt 1fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.242.199:995, 217.12.132.14:28524}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28524: (50%)&lt;BR/&gt; 995: (50%)&gt;];
}
1505--4148[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.12.132.14" dst_port="28524" src_ip="169.16.242.199" src_port="995"/>
    </slice>
    <from sec="1201928584" usec="0"/>
    <to sec="1201928593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="210.101.123.40"/>
      <from sec="1201928833" usec="0"/>
      <to sec="1201929049" usec="0"/>
    </slice>
    <from sec="1201928833" usec="0"/>
    <to sec="1201929049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
1597[label="138.43.182.90;s;234pkt 234fpkt", shape=diamond, color=yellow];
4213[label="138.43.182.90;s;182pkt 182fpkt", shape=hexagon, color=black];
6490[label="138.43.182.90;246pkt 246fpkt", shape=pentagon, color=darkviolet];
8279[label="138.43.182.90;246pkt 246fpkt", shape=invtriangle, color=brown];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.182.90:0, *:0}[97.1545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (97.5771%)&lt;BR/&gt; 61364: (0.660793%)&lt;BR/&gt; 443: (0.385463%)&lt;BR/&gt; 4790: (0.220264%)&lt;BR/&gt; 1232: (0.220264%)&gt;];
}
1597--4213[label="1;182pkt 182fpkt"];
1597--6490[label="1;234pkt 234fpkt"];
1597--8279[label="1;234pkt 234fpkt"];
4213--6490[label="1;182pkt 182fpkt"];
4213--8279[label="1;182pkt 182fpkt"];
6490--8279[label="1;246pkt 246fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.182.90"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
1201[label="194.245.37.177;s;481pkt 481fpkt", shape=diamond, color=yellow];
4215[label="194.245.37.177;s;459pkt 459fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.37.177:0, *:0}[99.7921%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7872%)&lt;BR/&gt; 37992: (0.106383%)&lt;BR/&gt; 22: (0.106383%)&gt;];
}
1201--1525[label="0.00364964;1pkt 1fpkt"];
1201--2527[label="0.002079;1pkt 1fpkt"];
1201--4215[label="1;459pkt 459fpkt"];
1201--4750[label="0.002079;1pkt 1fpkt"];
1201--5429[label="0.002079;1pkt 1fpkt"];
4215--4750[label="0.00217865;1pkt 1fpkt"];
4215--5429[label="0.00217865;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.37.177"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
1624[label="138.43.165.218;s;439pkt 439fpkt", shape=diamond, color=yellow];
4224[label="138.43.165.218;s;405pkt 405fpkt", shape=hexagon, color=black];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.165.218:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1624--4224[label="1;405pkt 405fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.165.218"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1243[label="141.54.226.58;s;524pkt 524fpkt", shape=diamond, color=yellow];
4226[label="141.54.226.58;s;410pkt 410fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.226.58:0, *:0}[99.8092%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.7859%)&lt;BR/&gt; 52552: (0.107066%)&lt;BR/&gt; 80: (0.107066%)&gt;];
}
1243--1525[label="0.00729927;2pkt 2fpkt"];
1243--4226[label="1;410pkt 410fpkt"];
</description>
    <slice>
      <filter src_ip="141.54.226.58"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
1661[label="194.245.36.178;s;208pkt 208fpkt", shape=diamond, color=yellow];
4243[label="194.245.36.178;s;198pkt 198fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.36.178:0, *:0}[99.5192%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5074%)&lt;BR/&gt; 44813: (0.246305%)&lt;BR/&gt; 22: (0.246305%)&gt;];
}
1661--2527[label="0.00961538;2pkt 2fpkt"];
1661--2535[label="0.00480769;1pkt 1fpkt"];
1661--2560[label="0.00480769;1pkt 1fpkt"];
1661--2569[label="0.00480769;1pkt 1fpkt"];
1661--2575[label="0.00480769;1pkt 1fpkt"];
1661--2825[label="0.00480769;1pkt 1fpkt"];
1661--2843[label="0.00480769;1pkt 1fpkt"];
1661--2853[label="0.00480769;1pkt 1fpkt"];
1661--2865[label="0.00480769;1pkt 1fpkt"];
1661--3180[label="0.00480769;1pkt 1fpkt"];
1661--3186[label="0.00480769;1pkt 1fpkt"];
1661--3187[label="0.00480769;1pkt 1fpkt"];
1661--4243[label="1;198pkt 198fpkt"];
1661--4750[label="0.00961538;2pkt 2fpkt"];
1661--4799[label="0.00480769;1pkt 1fpkt"];
1661--4818[label="0.00480769;1pkt 1fpkt"];
1661--4954[label="0.00480769;1pkt 1fpkt"];
1661--5155[label="0.00480769;1pkt 1fpkt"];
1661--5429[label="0.00961538;2pkt 2fpkt"];
4243--4750[label="0.010101;2pkt 2fpkt"];
4243--4799[label="0.00505051;1pkt 1fpkt"];
4243--4818[label="0.00505051;1pkt 1fpkt"];
4243--4954[label="0.00505051;1pkt 1fpkt"];
4243--5155[label="0.00505051;1pkt 1fpkt"];
4243--5429[label="0.010101;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.36.178"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1364[label="141.54.16.46;s;54pkt 54fpkt", shape=diamond, color=yellow];
1836[label="202.5.115.46;d;16pkt 16fpkt", shape=diamond, color=yellow];
4274[label="141.54.16.46;s;54pkt 54fpkt", shape=hexagon, color=black];
4316[label="202.5.115.46;d;16pkt 16fpkt", shape=hexagon, color=black];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.16.46:*, 202.5.115.46:80}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5714%)&lt;BR/&gt; 3211: (1.42857%)&lt;BR/&gt; 3210: (1.42857%)&lt;BR/&gt; 3207: (1.42857%)&lt;BR/&gt; 3203: (1.42857%)&gt;];
}
1364--1836[label="0.9375;15pkt 15fpkt"];
1364--4227[label="0.0227273;1pkt 1fpkt"];
1364--4274[label="1;54pkt 54fpkt"];
1364--4316[label="0.9375;15pkt 15fpkt"];
1836--3821[label="0.0625;1pkt 1fpkt"];
1836--4274[label="0.9375;15pkt 15fpkt"];
1836--4316[label="1;16pkt 16fpkt"];
4274--4316[label="0.9375;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="202.5.115.46" dst_port="80" src_ip="141.54.16.46"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201928723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15669,2.07533,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
906[label="169.16.132.216;s;25pkt 25fpkt", shape=diamond, color=yellow];
4279[label="169.16.132.216;s;17pkt 17fpkt", shape=hexagon, color=black];
7563[label="169.16.132.216;34pkt 34fpkt", shape=pentagon, color=darkviolet];
9247[label="169.16.132.216;29pkt 29fpkt", shape=invhouse, color=bisque];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.132.216:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59854: (1.90476%)&lt;BR/&gt; 56050: (1.90476%)&lt;BR/&gt; 52841: (1.90476%)&lt;BR/&gt; 50413: (1.90476%)&gt;];
}
906--4279[label="1;17pkt 17fpkt"];
906--7563[label="1;25pkt 25fpkt"];
906--9247[label="0.8;20pkt 20fpkt"];
4279--7563[label="1;17pkt 17fpkt"];
4279--9247[label="0.705882;12pkt 12fpkt"];
7563--9247[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.132.216" src_port="80"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
221[label="193.123.50.172;d;1pkt 1fpkt", shape=diamond, color=yellow];
509[label="193.64.13.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
1008[label="138.201.234.229;s;3pkt 3fpkt", shape=diamond, color=yellow];
4332[label="138.201.234.229;s;3pkt 3fpkt", shape=hexagon, color=black];
7663[label="138.201.234.229;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.201.234.229:80, 92.211.83.11:26422}[20%]&lt;BR/&gt;{138.201.234.229:80, 193.64.13.152:17597}[20%]&lt;BR/&gt;{138.201.234.229:80, 193.123.50.172:1887}[20%]&lt;BR/&gt;{138.201.234.229:80, 91.192.7.180:4978}[20%]&lt;BR/&gt;{138.201.234.229:80, 3.187.19.192:39508}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 17597: (15.3846%)&lt;BR/&gt; 1887: (15.3846%)&lt;BR/&gt; 39508: (11.5385%)&lt;BR/&gt; 26422: (3.84615%)&gt;];
}
221--1008[label="1;1pkt 1fpkt"];
221--4332[label="1;1pkt 1fpkt"];
221--7663[label="1;1pkt 1fpkt"];
509--1008[label="1;1pkt 1fpkt"];
509--4332[label="1;1pkt 1fpkt"];
509--7663[label="1;1pkt 1fpkt"];
1008--4332[label="1;3pkt 3fpkt"];
1008--7663[label="1;3pkt 3fpkt"];
4332--7663[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="3.187.19.192" dst_port="39508" src_ip="138.201.234.229" src_port="80"/>
      <filter dst_ip="91.192.7.180" dst_port="4978" src_ip="138.201.234.229" src_port="80"/>
      <filter dst_ip="193.123.50.172" dst_port="1887" src_ip="138.201.234.229" src_port="80"/>
      <filter dst_ip="193.64.13.152" dst_port="17597" src_ip="138.201.234.229" src_port="80"/>
      <filter dst_ip="92.211.83.11" dst_port="26422" src_ip="138.201.234.229" src_port="80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929184" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
1047[label="194.245.35.183;s;160pkt 160fpkt", shape=diamond, color=yellow];
4349[label="194.245.35.183;s;118pkt 118fpkt", shape=hexagon, color=black];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.35.183:1513, *:1513}[56.25%]&lt;BR/&gt;{194.245.35.183:8045, *:*}[21.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1513: (65.6475%)&lt;BR/&gt; 8045: (10.4317%)&lt;BR/&gt; 0: (1.07914%)&lt;BR/&gt; 443: (0.899281%)&lt;BR/&gt; 64059: (0.359712%)&gt;];
}
1047--3176[label="0.0138889;1pkt 1fpkt"];
1047--4349[label="1;118pkt 118fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.35.183" src_port="8045"/>
      <filter dst_port="1513" src_ip="194.245.35.183" src_port="1513"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
462[label="170.50.180.178;d;455pkt 455fpkt", shape=diamond, color=yellow];
1993[label="23.88.8.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
2005[label="21.19.50.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
2006[label="218.4.80.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
2009[label="27.195.16.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
2016[label="23.34.209.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
2306[label="196.19.50.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
2314[label="49.124.152.115;s;1pkt 1fpkt", shape=diamond, color=yellow];
2319[label="49.120.210.86;s;2pkt 2fpkt", shape=diamond, color=yellow];
2577[label="42.154.19.188;s;1pkt 1fpkt", shape=diamond, color=yellow];
2872[label="23.66.247.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
3158[label="107.82.160.161;s;1pkt 1fpkt", shape=diamond, color=yellow];
3247[label="192.224.6.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
4420[label="23.88.8.185;s;1pkt 1fpkt", shape=hexagon, color=black];
4822[label="49.120.210.86;s;2pkt 2fpkt", shape=hexagon, color=black];
4929[label="170.50.180.178;d;455pkt 455fpkt", shape=hexagon, color=black];
7302[label="23.88.8.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.50.180.178:26303}[89.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26303: (44.0129%)&lt;BR/&gt; 0: (3.452%)&lt;BR/&gt; 6346: (1.13269%)&lt;BR/&gt; 49194: (0.431499%)&lt;BR/&gt; 43034: (0.431499%)&gt;];
}
462--1993[label="1;1pkt 1fpkt"];
462--2005[label="1;1pkt 1fpkt"];
462--2006[label="1;1pkt 1fpkt"];
462--2009[label="1;1pkt 1fpkt"];
462--2016[label="1;1pkt 1fpkt"];
462--2306[label="1;1pkt 1fpkt"];
462--2314[label="1;1pkt 1fpkt"];
462--2319[label="1;2pkt 2fpkt"];
462--2577[label="1;1pkt 1fpkt"];
462--2872[label="1;1pkt 1fpkt"];
462--3158[label="1;1pkt 1fpkt"];
462--3247[label="1;1pkt 1fpkt"];
462--4420[label="1;1pkt 1fpkt"];
462--4822[label="1;2pkt 2fpkt"];
462--4929[label="1;455pkt 455fpkt"];
462--7302[label="1;1pkt 1fpkt"];
1993--4420[label="1;1pkt 1fpkt"];
1993--4929[label="1;1pkt 1fpkt"];
1993--7302[label="1;1pkt 1fpkt"];
2005--4929[label="1;1pkt 1fpkt"];
2006--4929[label="1;1pkt 1fpkt"];
2009--4929[label="1;1pkt 1fpkt"];
2016--4929[label="1;1pkt 1fpkt"];
2306--4929[label="1;1pkt 1fpkt"];
2314--4929[label="1;1pkt 1fpkt"];
2319--4822[label="1;2pkt 2fpkt"];
2319--4929[label="1;2pkt 2fpkt"];
2577--4929[label="1;1pkt 1fpkt"];
2872--4929[label="1;1pkt 1fpkt"];
3158--4929[label="1;1pkt 1fpkt"];
3247--4929[label="1;1pkt 1fpkt"];
4420--4929[label="1;1pkt 1fpkt"];
4420--7302[label="1;1pkt 1fpkt"];
4822--4929[label="1;2pkt 2fpkt"];
4929--7302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.50.180.178" dst_port="26303"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1352[label="195.35.182.227;s;1245pkt 1245fpkt", shape=diamond, color=yellow];
4454[label="195.35.182.227;s;748pkt 748fpkt", shape=hexagon, color=black];
7648[label="195.35.182.227;1363pkt 1363fpkt", shape=pentagon, color=darkviolet];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.35.182.227:*, *:2968}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2968: (50.0447%)&lt;BR/&gt; 3750: (0.134088%)&lt;BR/&gt; 3075: (0.134088%)&lt;BR/&gt; 2943: (0.134088%)&lt;BR/&gt; 2877: (0.134088%)&gt;];
}
1352--4454[label="1;748pkt 748fpkt"];
1352--7648[label="1;1245pkt 1245fpkt"];
4454--7648[label="1;748pkt 748fpkt"];
</description>
    <slice>
      <filter dst_port="2968" src_ip="195.35.182.227"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
1374[label="141.54.55.26;s;2pkt 2fpkt", shape=diamond, color=yellow];
4469[label="141.54.55.26;s;2pkt 2fpkt", shape=hexagon, color=black];
5811[label="141.54.55.26;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7961[label="141.54.55.26;1pkt 1fpkt", shape=invtriangle, color=brown];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.55.26:17772, 40.120.223.47:22455}[50%]&lt;BR/&gt;{141.54.55.26:1032, 18.214.109.222:6669}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22455: (33.3333%)&lt;BR/&gt; 17772: (33.3333%)&lt;BR/&gt; 6669: (16.6667%)&lt;BR/&gt; 1032: (16.6667%)&gt;];
}
1374--4469[label="1;2pkt 2fpkt"];
1374--5811[label="1;1pkt 1fpkt"];
1374--7961[label="1;1pkt 1fpkt"];
4469--5811[label="1;1pkt 1fpkt"];
4469--7961[label="1;1pkt 1fpkt"];
5811--7961[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.214.109.222" dst_port="6669" src_ip="141.54.55.26" src_port="1032"/>
      <filter dst_ip="40.120.223.47" dst_port="22455" src_ip="141.54.55.26" src_port="17772"/>
    </slice>
    <from sec="1201928411" usec="0"/>
    <to sec="1201929293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
2146[label="169.16.206.66;s;10pkt 10fpkt", shape=diamond, color=yellow];
4493[label="169.16.206.66;s;10pkt 10fpkt", shape=hexagon, color=black];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.206.66:*, 26.205.249.225:80}[40%]&lt;BR/&gt;{169.16.206.66:*, 16.202.23.79:80}[20%]&lt;BR/&gt;{169.16.206.66:*, 199.90.152.148:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63706: (5%)&lt;BR/&gt; 63704: (5%)&lt;BR/&gt; 63703: (5%)&lt;BR/&gt; 63702: (5%)&gt;];
}
2146--4187[label="0.1;1pkt 1fpkt"];
2146--4493[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="26.205.249.225" dst_port="80" src_ip="169.16.206.66"/>
      <filter dst_ip="199.90.152.148" dst_port="80" src_ip="169.16.206.66"/>
      <filter dst_ip="16.202.23.79" dst_port="80" src_ip="169.16.206.66"/>
    </slice>
    <from sec="1201928543" usec="0"/>
    <to sec="1201928817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="91.68.179.12"/>
      <from sec="1201928602" usec="0"/>
      <to sec="1201928779" usec="0"/>
    </slice>
    <from sec="1201928602" usec="0"/>
    <to sec="1201928779" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1067[label="90.173.24.5;s;2136pkt 2136fpkt", shape=diamond, color=yellow];
4169[label="90.173.24.5;s;1456pkt 1456fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.173.24.5:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64597: (0.0695991%)&lt;BR/&gt; 22496: (0.0695991%)&lt;BR/&gt; 65098: (0.0556793%)&lt;BR/&gt; 64260: (0.0556793%)&lt;BR/&gt; 63102: (0.0556793%)&gt;];
}
1067--1308[label="0.00490196;1pkt 1fpkt"];
1067--1941[label="0.0384615;1pkt 1fpkt"];
1067--4169[label="1;1456pkt 1456fpkt"];
1067--5466[label="0.000468165;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="90.173.24.5"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
1984[label="138.43.165.218;d;234pkt 234fpkt", shape=diamond, color=yellow];
4604[label="138.43.165.218;d;225pkt 225fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 138.43.165.218:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1984--4604[label="1;225pkt 225fpkt"];
1984--5846[label="0.142857;1pkt 1fpkt"];
4604--5846[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.165.218"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
1986[label="169.16.102.253;d;92pkt 92fpkt", shape=diamond, color=yellow];
4605[label="169.16.102.253;d;67pkt 67fpkt", shape=hexagon, color=black];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.16.102.253:13316}[97.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13316: (49.3711%)&lt;BR/&gt; 13057: (0.943396%)&lt;BR/&gt; 64214: (0.628931%)&lt;BR/&gt; 57554: (0.628931%)&lt;BR/&gt; 53037: (0.628931%)&gt;];
}
1986--4605[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.102.253" dst_port="13316"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1679[label="138.135.100.223;d;111pkt 111fpkt", shape=diamond, color=yellow];
4632[label="138.135.100.223;d;72pkt 72fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.135.100.223:13826}[98.1982%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13826: (48.9071%)&lt;BR/&gt; 45306: (1.0929%)&lt;BR/&gt; 13265: (1.0929%)&lt;BR/&gt; 63160: (0.546448%)&lt;BR/&gt; 57416: (0.546448%)&gt;];
}
1679--4632[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="138.135.100.223" dst_port="13826"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
1427[label="169.16.67.135;d;5pkt 5fpkt", shape=diamond, color=yellow];
1463[label="17.155.98.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
1882[label="216.177.190.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
1894[label="17.155.109.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
6038[label="17.155.109.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.177.190.4:80, 169.16.67.135:54758}[20%]&lt;BR/&gt;{17.155.98.49:80, 169.16.67.135:54719}[20%]&lt;BR/&gt;{17.155.109.49:80, 169.16.67.135:54761}[20%]&lt;BR/&gt;{45.188.63.142:80, 169.16.67.135:54727}[20%]&lt;BR/&gt;{45.188.38.194:80, 169.16.67.135:54717}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54761: (16.6667%)&lt;BR/&gt; 54758: (11.1111%)&lt;BR/&gt; 54719: (11.1111%)&lt;BR/&gt; 54727: (5.55556%)&gt;];
}
1427--1463[label="1;1pkt 1fpkt"];
1427--1882[label="1;1pkt 1fpkt"];
1427--1894[label="1;1pkt 1fpkt"];
1427--4265[label="0.2;1pkt 1fpkt"];
1427--6038[label="1;1pkt 1fpkt"];
1427--7373[label="0.2;1pkt 1fpkt"];
1894--6038[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.67.135" dst_port="54717" src_ip="45.188.38.194" src_port="80"/>
      <filter dst_ip="169.16.67.135" dst_port="54727" src_ip="45.188.63.142" src_port="80"/>
      <filter dst_ip="169.16.67.135" dst_port="54761" src_ip="17.155.109.49" src_port="80"/>
      <filter dst_ip="169.16.67.135" dst_port="54719" src_ip="17.155.98.49" src_port="80"/>
      <filter dst_ip="169.16.67.135" dst_port="54758" src_ip="216.177.190.4" src_port="80"/>
    </slice>
    <from sec="1201928473" usec="0"/>
    <to sec="1201928854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1728[label="169.16.1.211;s;21pkt 21fpkt", shape=diamond, color=yellow];
4660[label="169.16.1.211;s;14pkt 14fpkt", shape=hexagon, color=black];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.1.211:80, 18.208.75.55:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61094: (2.85714%)&lt;BR/&gt; 59113: (2.85714%)&lt;BR/&gt; 57452: (2.85714%)&lt;BR/&gt; 54842: (2.85714%)&gt;];
}
1728--4660[label="1;14pkt 14fpkt"];
1728--5462[label="0.047619;1pkt 1fpkt"];
1728--5490[label="0.047619;1pkt 1fpkt"];
1728--5510[label="0.047619;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.208.75.55" src_ip="169.16.1.211" src_port="80"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929176" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
1867[label="217.183.49.198;d;1pkt 1fpkt", shape=diamond, color=yellow];
1868[label="169.16.42.212;s;14pkt 14fpkt", shape=diamond, color=yellow];
2237[label="217.183.49.192;d;1pkt 1fpkt", shape=diamond, color=yellow];
4716[label="169.16.42.212;s;7pkt 7fpkt", shape=hexagon, color=black];
7524[label="169.16.42.212;17pkt 17fpkt", shape=pentagon, color=darkviolet];
8758[label="169.16.42.212;17pkt 17fpkt", shape=invtriangle, color=brown];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.42.212:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7587: (4.38596%)&lt;BR/&gt; 2735: (4.38596%)&lt;BR/&gt; 50731: (3.50877%)&lt;BR/&gt; 48662: (3.50877%)&gt;];
}
1867--1868[label="1;1pkt 1fpkt"];
1867--4716[label="1;1pkt 1fpkt"];
1867--7524[label="1;1pkt 1fpkt"];
1867--8758[label="1;1pkt 1fpkt"];
1868--2237[label="1;1pkt 1fpkt"];
1868--4716[label="1;7pkt 7fpkt"];
1868--5462[label="0.0714286;1pkt 1fpkt"];
1868--5473[label="0.214286;3pkt 3fpkt"];
1868--5490[label="0.0714286;1pkt 1fpkt"];
1868--5499[label="0.214286;3pkt 3fpkt"];
1868--5510[label="0.0714286;1pkt 1fpkt"];
1868--5517[label="0.214286;3pkt 3fpkt"];
1868--7524[label="1;14pkt 14fpkt"];
1868--8758[label="1;14pkt 14fpkt"];
2237--4716[label="1;1pkt 1fpkt"];
2237--7524[label="1;1pkt 1fpkt"];
2237--8758[label="1;1pkt 1fpkt"];
4716--7524[label="1;7pkt 7fpkt"];
4716--8758[label="1;7pkt 7fpkt"];
7524--8758[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.42.212" src_port="80"/>
    </slice>
    <from sec="1201928415" usec="0"/>
    <to sec="1201929211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="40.130.127.9"/>
      <from sec="1201928632" usec="0"/>
      <to sec="1201929013" usec="0"/>
    </slice>
    <from sec="1201928632" usec="0"/>
    <to sec="1201929013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="25.172.186.255"/>
      <from sec="1201928780" usec="0"/>
      <to sec="1201929049" usec="0"/>
    </slice>
    <from sec="1201928780" usec="0"/>
    <to sec="1201929049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
1923[label="170.50.163.195;d;247pkt 247fpkt", shape=diamond, color=yellow];
4761[label="170.50.163.195;d;245pkt 245fpkt", shape=hexagon, color=black];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 170.50.163.195:0}[99.5951%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5935%)&lt;BR/&gt; 1434: (0.203252%)&lt;BR/&gt; 1036: (0.203252%)&gt;];
}
1923--4761[label="1;245pkt 245fpkt"];
1923--5846[label="0.142857;1pkt 1fpkt"];
4761--5846[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.50.163.195"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
2284[label="194.245.39.107;d;988pkt 988fpkt", shape=diamond, color=yellow];
4788[label="194.245.39.107;d;784pkt 784fpkt", shape=hexagon, color=black];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.245.39.107:45530}[98.583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45530: (49.2099%)&lt;BR/&gt; 0: (1.46727%)&lt;BR/&gt; 6881: (0.620767%)&lt;BR/&gt; 14953: (0.197517%)&lt;BR/&gt; 39913: (0.112867%)&gt;];
}
2284--2528[label="0.00101215;1pkt 1fpkt"];
2284--4751[label="0.00101215;1pkt 1fpkt"];
2284--4788[label="1;784pkt 784fpkt"];
2284--5399[label="0.00101215;1pkt 1fpkt"];
2284--5451[label="0.00101215;1pkt 1fpkt"];
2284--5484[label="0.00101215;1pkt 1fpkt"];
2284--5505[label="0.00101215;1pkt 1fpkt"];
2284--9138[label="0.00101215;1pkt 1fpkt"];
4788--5399[label="0.00127551;1pkt 1fpkt"];
4788--5451[label="0.00127551;1pkt 1fpkt"];
4788--5484[label="0.00127551;1pkt 1fpkt"];
4788--5505[label="0.00127551;1pkt 1fpkt"];
4788--9138[label="0.00127551;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.39.107" dst_port="45530"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_219{
style=filled;
color=gray75;
1958[label="138.233.193.249;d;88pkt 88fpkt", shape=diamond, color=yellow];
4790[label="138.233.193.249;d;74pkt 74fpkt", shape=hexagon, color=black];
stat219[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.233.193.249:13820}[95.4545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13820: (47.5309%)&lt;BR/&gt; 45306: (1.23457%)&lt;BR/&gt; 30970: (1.23457%)&lt;BR/&gt; 13356: (1.23457%)&lt;BR/&gt; 59575: (0.617284%)&gt;];
}
1958--4790[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="138.233.193.249" dst_port="13820"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
1596[label="138.43.182.90;d;354pkt 354fpkt", shape=diamond, color=yellow];
4802[label="138.43.182.90;d;334pkt 334fpkt", shape=hexagon, color=black];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.43.182.90:61364}[97.4576%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61364: (48.6919%)&lt;BR/&gt; 443: (1.16279%)&lt;BR/&gt; 53586: (0.290698%)&lt;BR/&gt; 1048: (0.290698%)&lt;BR/&gt; 65384: (0.145349%)&gt;];
}
1596--4802[label="1;334pkt 334fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.182.90" dst_port="61364"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
2325[label="195.17.164.78;s;77pkt 77fpkt", shape=diamond, color=yellow];
4832[label="195.17.164.78;s;51pkt 51fpkt", shape=hexagon, color=black];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.17.164.78:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2325--4832[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="195.17.164.78"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
2338[label="194.245.51.31;s;98pkt 98fpkt", shape=diamond, color=yellow];
4840[label="194.245.51.31;s;71pkt 71fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.51.31:8579, *:*}[66.3265%]&lt;BR/&gt;{194.245.51.31:*, 114.65.103.68:80}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8579: (31.6568%)&lt;BR/&gt; 80: (16.568%)&lt;BR/&gt; 60645: (0.591716%)&lt;BR/&gt; 56901: (0.591716%)&lt;BR/&gt; 56392: (0.591716%)&gt;];
}
2338--2369[label="0.0434783;3pkt 3fpkt"];
2338--4840[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.51.31" src_port="8579"/>
      <filter dst_ip="114.65.103.68" dst_port="80" src_ip="194.245.51.31"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
1357[label="145.140.88.198;d;203pkt 203fpkt", shape=diamond, color=yellow];
4849[label="145.140.88.198;d;203pkt 203fpkt", shape=hexagon, color=black];
7533[label="214.102.9.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.140.88.198:1894}[94.0887%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1894: (47.0588%)&lt;BR/&gt; 45306: (2.20588%)&lt;BR/&gt; 30970: (0.735294%)&lt;BR/&gt; 13800: (0.490196%)&lt;BR/&gt; 13719: (0.490196%)&gt;];
}
1357--4849[label="1;203pkt 203fpkt"];
1357--7533[label="1;2pkt 2fpkt"];
4849--7533[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="145.140.88.198" dst_port="1894"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
1732[label="145.195.233.67;s;11pkt 11fpkt", shape=diamond, color=yellow];
2123[label="91.102.117.148;d;3pkt 3fpkt", shape=diamond, color=yellow];
4850[label="145.195.233.67;s;11pkt 11fpkt", shape=hexagon, color=black];
6231[label="145.195.233.67;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8150[label="145.195.233.67;13pkt 13fpkt", shape=invtriangle, color=brown];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.233.67:*, 213.160.201.57:11824}[28.5714%]&lt;BR/&gt;{145.195.233.67:13516, 91.102.117.148:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13516: (14.7059%)&lt;BR/&gt; 11824: (13.7255%)&lt;BR/&gt; 14856: (7.84314%)&lt;BR/&gt; 9604: (4.90196%)&lt;BR/&gt; 9603: (4.90196%)&gt;];
}
1732--2123[label="1;3pkt 3fpkt"];
1732--4850[label="1;11pkt 11fpkt"];
1732--6231[label="0.909091;10pkt 10fpkt"];
1732--8150[label="0.909091;10pkt 10fpkt"];
2123--4850[label="1;3pkt 3fpkt"];
2123--6231[label="1;3pkt 3fpkt"];
2123--8150[label="1;3pkt 3fpkt"];
4850--6231[label="0.909091;10pkt 10fpkt"];
4850--8150[label="0.909091;10pkt 10fpkt"];
6231--8150[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="213.160.201.57" dst_port="11824" src_ip="145.195.233.67"/>
      <filter dst_ip="91.102.117.148" src_ip="145.195.233.67" src_port="13516"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
446[label="194.245.46.233;s;207pkt 207fpkt", shape=diamond, color=yellow];
607[label="217.117.76.249;d;1pkt 1fpkt", shape=diamond, color=yellow];
746[label="5.229.8.184;d;1pkt 1fpkt", shape=diamond, color=yellow];
1796[label="172.84.233.45;s;178pkt 178fpkt", shape=diamond, color=yellow];
1909[label="107.152.70.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
1936[label="180.240.99.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1947[label="141.54.209.55;s;226pkt 226fpkt", shape=diamond, color=yellow];
2297[label="21.163.12.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
2408[label="172.84.233.44;s;128pkt 128fpkt", shape=diamond, color=yellow];
2409[label="27.239.119.10;d;84pkt 84fpkt", shape=diamond, color=yellow];
2410[label="172.84.232.96;s;117pkt 117fpkt", shape=diamond, color=yellow];
2546[label="25.174.115.89;d;75pkt 75fpkt", shape=diamond, color=yellow];
2685[label="27.239.119.8;d;80pkt 80fpkt", shape=diamond, color=yellow];
2723[label="5.229.8.62;d;3pkt 3fpkt", shape=diamond, color=yellow];
2770[label="27.70.32.3;d;1pkt 1fpkt", shape=diamond, color=yellow];
2978[label="27.239.119.11;d;87pkt 87fpkt", shape=diamond, color=yellow];
2984[label="27.239.119.9;d;84pkt 84fpkt", shape=diamond, color=yellow];
3189[label="2.89.199.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
3860[label="194.245.46.233;s;176pkt 176fpkt", shape=hexagon, color=black];
4380[label="141.54.209.55;s;166pkt 166fpkt", shape=hexagon, color=black];
4692[label="172.84.233.44;s;66pkt 66fpkt", shape=hexagon, color=black];
4782[label="25.174.115.89;d;54pkt 54fpkt", shape=hexagon, color=black];
4871[label="172.84.232.96;s;86pkt 86fpkt", shape=hexagon, color=black];
4970[label="21.163.12.37;d;1pkt 1fpkt", shape=hexagon, color=black];
5059[label="27.239.119.10;d;75pkt 75fpkt", shape=hexagon, color=black];
5192[label="27.70.32.3;d;1pkt 1fpkt", shape=hexagon, color=black];
6542[label="172.84.232.96;142pkt 142fpkt", shape=pentagon, color=darkviolet];
7684[label="194.245.46.233;296pkt 296fpkt", shape=pentagon, color=darkviolet];
8301[label="172.84.232.96;142pkt 142fpkt", shape=invtriangle, color=brown];
8835[label="194.245.46.233;296pkt 296fpkt", shape=invtriangle, color=brown];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, *:80}[54.3585%]&lt;BR/&gt;{194.245.46.233:*, *:*}[28.9912%]&lt;BR/&gt;{141.54.209.55:*, *:*}[22.1352%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.484%)&lt;BR/&gt; 6966: (10.0108%)&lt;BR/&gt; 0: (2.98884%)&lt;BR/&gt; 53: (2.37667%)&lt;BR/&gt; 22: (1.0623%)&gt;];
}
446--607[label="1;1pkt 1fpkt"];
446--746[label="1;1pkt 1fpkt"];
446--1644[label="0.0952381;10pkt 10fpkt"];
446--1909[label="1;1pkt 1fpkt"];
446--1936[label="1;1pkt 1fpkt"];
446--2297[label="1;1pkt 1fpkt"];
446--2527[label="0.0676329;14pkt 14fpkt"];
446--2546[label="0.0133333;1pkt 1fpkt"];
446--2723[label="1;3pkt 3fpkt"];
446--2770[label="1;1pkt 1fpkt"];
446--3189[label="1;1pkt 1fpkt"];
446--3298[label="0.0107527;1pkt 1fpkt"];
446--3860[label="0.994318;175pkt 175fpkt"];
446--4750[label="0.0676329;14pkt 14fpkt"];
446--4782[label="0.0185185;1pkt 1fpkt"];
446--4970[label="1;1pkt 1fpkt"];
446--5192[label="1;1pkt 1fpkt"];
446--5429[label="0.0676329;14pkt 14fpkt"];
446--5444[label="0.149758;31pkt 31fpkt"];
446--5452[label="0.00483092;1pkt 1fpkt"];
446--5466[label="0.00483092;1pkt 1fpkt"];
446--5481[label="0.149758;31pkt 31fpkt"];
446--5485[label="0.00483092;1pkt 1fpkt"];
446--5501[label="0.00483092;1pkt 1fpkt"];
446--5506[label="0.00483092;1pkt 1fpkt"];
446--7684[label="1;207pkt 207fpkt"];
446--8835[label="1;207pkt 207fpkt"];
607--3860[label="1;1pkt 1fpkt"];
607--7684[label="1;1pkt 1fpkt"];
607--8835[label="1;1pkt 1fpkt"];
746--3860[label="1;1pkt 1fpkt"];
746--7684[label="1;1pkt 1fpkt"];
746--8835[label="1;1pkt 1fpkt"];
1796--2409[label="0.428571;36pkt 36fpkt"];
1796--2546[label="0.24;18pkt 18fpkt"];
1796--2685[label="0.4375;35pkt 35fpkt"];
1796--2978[label="0.413793;36pkt 36fpkt"];
1796--2984[label="0.404762;34pkt 34fpkt"];
1796--4782[label="0.166667;9pkt 9fpkt"];
1796--5059[label="0.426667;32pkt 32fpkt"];
1796--5454[label="0.101124;18pkt 18fpkt"];
1796--5467[label="0.0561798;10pkt 10fpkt"];
1796--5487[label="0.101124;18pkt 18fpkt"];
1796--5494[label="0.0561798;10pkt 10fpkt"];
1796--5508[label="0.101124;18pkt 18fpkt"];
1796--5514[label="0.0561798;10pkt 10fpkt"];
1909--3860[label="1;1pkt 1fpkt"];
1909--7684[label="1;1pkt 1fpkt"];
1909--8835[label="1;1pkt 1fpkt"];
1936--3860[label="1;1pkt 1fpkt"];
1936--7684[label="1;1pkt 1fpkt"];
1936--8835[label="1;1pkt 1fpkt"];
1947--2022[label="0.0140845;2pkt 2fpkt"];
1947--2546[label="0.0266667;2pkt 2fpkt"];
1947--4167[label="0.00442478;1pkt 1fpkt"];
1947--4187[label="0.00763359;1pkt 1fpkt"];
1947--4380[label="1;166pkt 166fpkt"];
1947--4782[label="0.037037;2pkt 2fpkt"];
1947--5444[label="0.00884956;2pkt 2fpkt"];
1947--5453[label="0.0132743;3pkt 3fpkt"];
1947--5454[label="0.00884956;2pkt 2fpkt"];
1947--5467[label="0.0132743;3pkt 3fpkt"];
1947--5481[label="0.00884956;2pkt 2fpkt"];
1947--5486[label="0.0132743;3pkt 3fpkt"];
1947--5487[label="0.00884956;2pkt 2fpkt"];
1947--5494[label="0.0132743;3pkt 3fpkt"];
1947--5507[label="0.0132743;3pkt 3fpkt"];
1947--5508[label="0.00884956;2pkt 2fpkt"];
1947--5514[label="0.0132743;3pkt 3fpkt"];
2297--3860[label="1;1pkt 1fpkt"];
2297--4970[label="1;1pkt 1fpkt"];
2297--7684[label="1;1pkt 1fpkt"];
2297--8835[label="1;1pkt 1fpkt"];
2408--2409[label="0.309524;26pkt 26fpkt"];
2408--2546[label="0.186667;14pkt 14fpkt"];
2408--2685[label="0.3125;25pkt 25fpkt"];
2408--2978[label="0.298851;26pkt 26fpkt"];
2408--2984[label="0.321429;27pkt 27fpkt"];
2408--4692[label="1;66pkt 66fpkt"];
2408--4782[label="0.203704;11pkt 11fpkt"];
2408--5059[label="0.32;24pkt 24fpkt"];
2408--5454[label="0.101562;13pkt 13fpkt"];
2408--5467[label="0.101562;13pkt 13fpkt"];
2408--5487[label="0.101562;13pkt 13fpkt"];
2408--5494[label="0.101562;13pkt 13fpkt"];
2408--5508[label="0.101562;13pkt 13fpkt"];
2408--5514[label="0.101562;13pkt 13fpkt"];
2409--2410[label="0.178571;15pkt 15fpkt"];
2409--2982[label="0.0361446;3pkt 3fpkt"];
2409--4692[label="0.212121;14pkt 14fpkt"];
2409--4871[label="0.0952381;8pkt 8fpkt"];
2409--5059[label="1;75pkt 75fpkt"];
2409--5454[label="0.0833333;7pkt 7fpkt"];
2409--5467[label="0.119048;10pkt 10fpkt"];
2409--5487[label="0.0833333;7pkt 7fpkt"];
2409--5494[label="0.119048;10pkt 10fpkt"];
2409--5508[label="0.0833333;7pkt 7fpkt"];
2409--5514[label="0.119048;10pkt 10fpkt"];
2409--6542[label="0.202381;17pkt 17fpkt"];
2409--6621[label="0.0595238;5pkt 5fpkt"];
2409--8301[label="0.202381;17pkt 17fpkt"];
2409--8337[label="0.0595238;5pkt 5fpkt"];
2410--2546[label="0.0933333;7pkt 7fpkt"];
2410--2685[label="0.175;14pkt 14fpkt"];
2410--2978[label="0.183908;16pkt 16fpkt"];
2410--2984[label="0.190476;16pkt 16fpkt"];
2410--4782[label="0.0740741;4pkt 4fpkt"];
2410--4871[label="1;86pkt 86fpkt"];
2410--5059[label="0.2;15pkt 15fpkt"];
2410--5454[label="0.0512821;6pkt 6fpkt"];
2410--5467[label="0.136752;16pkt 16fpkt"];
2410--5487[label="0.0512821;6pkt 6fpkt"];
2410--5494[label="0.136752;16pkt 16fpkt"];
2410--5508[label="0.0512821;6pkt 6fpkt"];
2410--5514[label="0.136752;16pkt 16fpkt"];
2410--6542[label="1;117pkt 117fpkt"];
2410--8301[label="1;117pkt 117fpkt"];
2546--2616[label="0.0151515;1pkt 1fpkt"];
2546--2982[label="0.0266667;2pkt 2fpkt"];
2546--3860[label="0.0133333;1pkt 1fpkt"];
2546--3888[label="0.0266667;2pkt 2fpkt"];
2546--4269[label="0.0133333;1pkt 1fpkt"];
2546--4380[label="0.0266667;2pkt 2fpkt"];
2546--4692[label="0.0909091;6pkt 6fpkt"];
2546--4782[label="1;54pkt 54fpkt"];
2546--4871[label="0.0533333;4pkt 4fpkt"];
2546--5369[label="0.0138889;1pkt 1fpkt"];
2546--5444[label="0.04;3pkt 3fpkt"];
2546--5454[label="0.0933333;7pkt 7fpkt"];
2546--5467[label="0.0533333;4pkt 4fpkt"];
2546--5481[label="0.04;3pkt 3fpkt"];
2546--5487[label="0.0933333;7pkt 7fpkt"];
2546--5494[label="0.0533333;4pkt 4fpkt"];
2546--5508[label="0.0933333;7pkt 7fpkt"];
2546--5514[label="0.0533333;4pkt 4fpkt"];
2546--6523[label="0.0133333;1pkt 1fpkt"];
2546--6542[label="0.12;9pkt 9fpkt"];
2546--6621[label="0.0266667;2pkt 2fpkt"];
2546--7175[label="0.16;8pkt 8fpkt"];
2546--7234[label="0.04;3pkt 3fpkt"];
2546--7684[label="0.0133333;1pkt 1fpkt"];
2546--8291[label="0.0133333;1pkt 1fpkt"];
2546--8301[label="0.12;9pkt 9fpkt"];
2546--8337[label="0.0266667;2pkt 2fpkt"];
2546--8835[label="0.0133333;1pkt 1fpkt"];
2546--9074[label="0.0133333;1pkt 1fpkt"];
2685--2982[label="0.0375;3pkt 3fpkt"];
2685--4692[label="0.19697;13pkt 13fpkt"];
2685--4871[label="0.0875;7pkt 7fpkt"];
2685--5454[label="0.1125;9pkt 9fpkt"];
2685--5467[label="0.0875;7pkt 7fpkt"];
2685--5487[label="0.1125;9pkt 9fpkt"];
2685--5494[label="0.0875;7pkt 7fpkt"];
2685--5508[label="0.1125;9pkt 9fpkt"];
2685--5514[label="0.0875;7pkt 7fpkt"];
2685--6542[label="0.2;16pkt 16fpkt"];
2685--6621[label="0.05;4pkt 4fpkt"];
2685--8301[label="0.2;16pkt 16fpkt"];
2685--8337[label="0.05;4pkt 4fpkt"];
2723--3860[label="1;3pkt 3fpkt"];
2723--7684[label="1;3pkt 3fpkt"];
2723--8835[label="1;3pkt 3fpkt"];
2770--3860[label="1;1pkt 1fpkt"];
2770--5192[label="1;1pkt 1fpkt"];
2770--7684[label="1;1pkt 1fpkt"];
2770--8835[label="1;1pkt 1fpkt"];
2978--2982[label="0.0481928;4pkt 4fpkt"];
2978--4692[label="0.212121;14pkt 14fpkt"];
2978--4871[label="0.116279;10pkt 10fpkt"];
2978--5454[label="0.126437;11pkt 11fpkt"];
2978--5467[label="0.103448;9pkt 9fpkt"];
2978--5487[label="0.126437;11pkt 11fpkt"];
2978--5494[label="0.103448;9pkt 9fpkt"];
2978--5508[label="0.126437;11pkt 11fpkt"];
2978--5514[label="0.103448;9pkt 9fpkt"];
2978--6542[label="0.218391;19pkt 19fpkt"];
2978--6621[label="0.0574713;5pkt 5fpkt"];
2978--8301[label="0.218391;19pkt 19fpkt"];
2978--8337[label="0.0574713;5pkt 5fpkt"];
2984--4692[label="0.212121;14pkt 14fpkt"];
2984--4871[label="0.107143;9pkt 9fpkt"];
2984--5454[label="0.0714286;6pkt 6fpkt"];
2984--5467[label="0.119048;10pkt 10fpkt"];
2984--5487[label="0.0714286;6pkt 6fpkt"];
2984--5494[label="0.119048;10pkt 10fpkt"];
2984--5508[label="0.0714286;6pkt 6fpkt"];
2984--5514[label="0.119048;10pkt 10fpkt"];
2984--6542[label="0.214286;18pkt 18fpkt"];
2984--6621[label="0.0595238;5pkt 5fpkt"];
2984--8301[label="0.214286;18pkt 18fpkt"];
2984--8337[label="0.0595238;5pkt 5fpkt"];
3189--3860[label="1;1pkt 1fpkt"];
3189--7684[label="1;1pkt 1fpkt"];
3189--8835[label="1;1pkt 1fpkt"];
3860--4750[label="0.00568182;1pkt 1fpkt"];
3860--4782[label="0.0185185;1pkt 1fpkt"];
3860--4970[label="1;1pkt 1fpkt"];
3860--5192[label="1;1pkt 1fpkt"];
3860--5429[label="0.00568182;1pkt 1fpkt"];
3860--5444[label="0.176136;31pkt 31fpkt"];
3860--5452[label="0.00568182;1pkt 1fpkt"];
3860--5466[label="0.00568182;1pkt 1fpkt"];
3860--5481[label="0.176136;31pkt 31fpkt"];
3860--5485[label="0.00568182;1pkt 1fpkt"];
3860--5501[label="0.00568182;1pkt 1fpkt"];
3860--5506[label="0.00568182;1pkt 1fpkt"];
3860--7684[label="1;176pkt 176fpkt"];
3860--8835[label="1;176pkt 176fpkt"];
4380--4782[label="0.037037;2pkt 2fpkt"];
4380--5444[label="0.0120482;2pkt 2fpkt"];
4380--5453[label="0.0180723;3pkt 3fpkt"];
4380--5454[label="0.0120482;2pkt 2fpkt"];
4380--5467[label="0.0180723;3pkt 3fpkt"];
4380--5481[label="0.0120482;2pkt 2fpkt"];
4380--5486[label="0.0180723;3pkt 3fpkt"];
4380--5487[label="0.0120482;2pkt 2fpkt"];
4380--5494[label="0.0180723;3pkt 3fpkt"];
4380--5507[label="0.0180723;3pkt 3fpkt"];
4380--5508[label="0.0120482;2pkt 2fpkt"];
4380--5514[label="0.0180723;3pkt 3fpkt"];
4692--4782[label="0.111111;6pkt 6fpkt"];
4692--5059[label="0.212121;14pkt 14fpkt"];
4692--5454[label="0.0606061;4pkt 4fpkt"];
4692--5487[label="0.0606061;4pkt 4fpkt"];
4692--5508[label="0.0606061;4pkt 4fpkt"];
4782--4871[label="0.0740741;4pkt 4fpkt"];
4782--5369[label="0.0185185;1pkt 1fpkt"];
4782--5444[label="0.0555556;3pkt 3fpkt"];
4782--5454[label="0.12963;7pkt 7fpkt"];
4782--5467[label="0.037037;2pkt 2fpkt"];
4782--5481[label="0.0555556;3pkt 3fpkt"];
4782--5487[label="0.12963;7pkt 7fpkt"];
4782--5494[label="0.037037;2pkt 2fpkt"];
4782--5508[label="0.12963;7pkt 7fpkt"];
4782--5514[label="0.037037;2pkt 2fpkt"];
4782--6542[label="0.0740741;4pkt 4fpkt"];
4782--6621[label="0.037037;2pkt 2fpkt"];
4782--7175[label="0.16;8pkt 8fpkt"];
4782--7234[label="0.0555556;3pkt 3fpkt"];
4782--7684[label="0.0185185;1pkt 1fpkt"];
4782--8301[label="0.0740741;4pkt 4fpkt"];
4782--8337[label="0.037037;2pkt 2fpkt"];
4782--8835[label="0.0185185;1pkt 1fpkt"];
4871--5059[label="0.106667;8pkt 8fpkt"];
4871--5454[label="0.0697674;6pkt 6fpkt"];
4871--5467[label="0.0697674;6pkt 6fpkt"];
4871--5487[label="0.0697674;6pkt 6fpkt"];
4871--5494[label="0.0697674;6pkt 6fpkt"];
4871--5508[label="0.0697674;6pkt 6fpkt"];
4871--5514[label="0.0697674;6pkt 6fpkt"];
4871--6542[label="1;86pkt 86fpkt"];
4871--8301[label="1;86pkt 86fpkt"];
4970--7684[label="1;1pkt 1fpkt"];
4970--8835[label="1;1pkt 1fpkt"];
5059--5454[label="0.0933333;7pkt 7fpkt"];
5059--5467[label="0.133333;10pkt 10fpkt"];
5059--5487[label="0.0933333;7pkt 7fpkt"];
5059--5494[label="0.133333;10pkt 10fpkt"];
5059--5508[label="0.0933333;7pkt 7fpkt"];
5059--5514[label="0.133333;10pkt 10fpkt"];
5059--6542[label="0.2;15pkt 15fpkt"];
5059--6621[label="0.0533333;4pkt 4fpkt"];
5059--8301[label="0.2;15pkt 15fpkt"];
5059--8337[label="0.0533333;4pkt 4fpkt"];
5192--7684[label="1;1pkt 1fpkt"];
5192--8835[label="1;1pkt 1fpkt"];
6542--8301[label="1;142pkt 142fpkt"];
7684--8835[label="1;296pkt 296fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.46.233"/>
      <filter src_ip="141.54.209.55"/>
      <filter dst_port="80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="43.15.189.17"/>
      <from sec="1201928712" usec="0"/>
      <to sec="1201928959" usec="0"/>
    </slice>
    <from sec="1201928712" usec="0"/>
    <to sec="1201928959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="35.0.186.154"/>
      <from sec="1201928716" usec="0"/>
      <to sec="1201928957" usec="0"/>
    </slice>
    <from sec="1201928716" usec="0"/>
    <to sec="1201928957" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,011,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
536[label="145.195.25.254;s;22pkt 22fpkt", shape=diamond, color=yellow];
644[label="218.178.154.12;d;1pkt 1fpkt", shape=diamond, color=yellow];
1102[label="210.171.29.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
1298[label="218.180.109.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
2862[label="218.181.10.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
4568[label="145.195.25.254;s;17pkt 17fpkt", shape=hexagon, color=black];
4951[label="218.178.154.12;d;1pkt 1fpkt", shape=hexagon, color=black];
4975[label="218.181.10.167;d;1pkt 1fpkt", shape=hexagon, color=black];
5138[label="210.171.29.8;d;1pkt 1fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.25.254:8000, 214.69.226.194:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8000: (45.6522%)&lt;BR/&gt; 53785: (4.34783%)&lt;BR/&gt; 12781: (4.34783%)&lt;BR/&gt; 3128: (4.34783%)&lt;BR/&gt; 1040: (4.34783%)&gt;];
}
536--644[label="1;1pkt 1fpkt"];
536--1102[label="1;1pkt 1fpkt"];
536--1298[label="1;1pkt 1fpkt"];
536--2862[label="1;1pkt 1fpkt"];
536--4568[label="1;17pkt 17fpkt"];
536--4951[label="1;1pkt 1fpkt"];
536--4975[label="1;1pkt 1fpkt"];
536--5138[label="1;1pkt 1fpkt"];
644--4568[label="1;1pkt 1fpkt"];
644--4951[label="1;1pkt 1fpkt"];
1102--4568[label="1;1pkt 1fpkt"];
1102--5138[label="1;1pkt 1fpkt"];
1298--4568[label="1;1pkt 1fpkt"];
2862--4568[label="1;1pkt 1fpkt"];
2862--4975[label="1;1pkt 1fpkt"];
4568--4951[label="1;1pkt 1fpkt"];
4568--4975[label="1;1pkt 1fpkt"];
4568--5138[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.69.226.194" src_ip="145.195.25.254" src_port="8000"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
5708[label="194.245.62.17;89pkt 89fpkt", shape=pentagon, color=darkviolet];
7915[label="194.245.62.17;89pkt 89fpkt", shape=invtriangle, color=brown];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.62.17:38707, *:53}[91.0112%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38707: (45.5056%)&lt;BR/&gt; 53: (45.5056%)&lt;BR/&gt; 25: (2.80899%)&lt;BR/&gt; 0: (2.24719%)&lt;BR/&gt; 47449: (0.561798%)&gt;];
}
5708--7915[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="194.245.62.17" src_port="38707"/>
    </slice>
    <from sec="1201928413" usec="0"/>
    <to sec="1201929275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
2674[label="138.43.157.73;d;105pkt 105fpkt", shape=diamond, color=yellow];
5054[label="138.43.157.73;d;83pkt 83fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.43.157.73:13266}[97.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13266: (48.4043%)&lt;BR/&gt; 45306: (1.06383%)&lt;BR/&gt; 13433: (1.06383%)&lt;BR/&gt; 13531: (0.797872%)&lt;BR/&gt; 55035: (0.531915%)&gt;];
}
2674--5054[label="1;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.157.73" dst_port="13266"/>
    </slice>
    <from sec="1201928441" usec="0"/>
    <to sec="1201929228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="40.130.127.9"/>
      <from sec="1201928632" usec="0"/>
      <to sec="1201929013" usec="0"/>
    </slice>
    <from sec="1201928632" usec="0"/>
    <to sec="1201929013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="92.61.126.13"/>
      <from sec="1201928649" usec="0"/>
      <to sec="1201929049" usec="0"/>
    </slice>
    <from sec="1201928649" usec="0"/>
    <to sec="1201929049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
2459[label="209.211.56.178;s;17pkt 17fpkt", shape=diamond, color=yellow];
2460[label="141.54.10.156;d;20pkt 20fpkt", shape=diamond, color=yellow];
5089[label="141.54.10.156;d;18pkt 18fpkt", shape=hexagon, color=black];
7245[label="209.211.56.178;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.211.56.178:80, 141.54.10.156:*}[85%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2958%)&lt;BR/&gt; 65086: (2.8169%)&lt;BR/&gt; 62145: (2.8169%)&lt;BR/&gt; 61150: (2.8169%)&lt;BR/&gt; 60762: (2.8169%)&gt;];
}
2459--2460[label="1;17pkt 17fpkt"];
2459--5089[label="1;17pkt 17fpkt"];
2459--7245[label="1;16pkt 16fpkt"];
2460--5089[label="1;18pkt 18fpkt"];
2460--5462[label="0.05;1pkt 1fpkt"];
2460--5473[label="0.05;1pkt 1fpkt"];
2460--5490[label="0.05;1pkt 1fpkt"];
2460--5499[label="0.05;1pkt 1fpkt"];
2460--5510[label="0.05;1pkt 1fpkt"];
2460--5517[label="0.05;1pkt 1fpkt"];
2460--7245[label="1;16pkt 16fpkt"];
2460--7247[label="0.05;1pkt 1fpkt"];
2460--8630[label="0.05;1pkt 1fpkt"];
5089--5462[label="0.0555556;1pkt 1fpkt"];
5089--5473[label="0.0555556;1pkt 1fpkt"];
5089--5490[label="0.0555556;1pkt 1fpkt"];
5089--5499[label="0.0555556;1pkt 1fpkt"];
5089--5510[label="0.0555556;1pkt 1fpkt"];
5089--5517[label="0.0555556;1pkt 1fpkt"];
5089--7245[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.10.156" src_ip="209.211.56.178" src_port="80"/>
    </slice>
    <from sec="1201928724" usec="0"/>
    <to sec="1201929219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="32.37.44.248"/>
      <from sec="1201928786" usec="0"/>
      <to sec="1201929049" usec="0"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="92.214.87.111"/>
      <from sec="1201928809" usec="0"/>
      <to sec="1201928989" usec="0"/>
    </slice>
    <from sec="1201928809" usec="0"/>
    <to sec="1201928989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="34.97.153.165"/>
      <from sec="1201928901" usec="0"/>
      <to sec="1201929085" usec="0"/>
    </slice>
    <from sec="1201928901" usec="0"/>
    <to sec="1201929085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,501,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
269[label="194.245.35.29;s;2403pkt 2403fpkt", shape=diamond, color=yellow];
270[label="195.65.238.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
429[label="40.70.54.29;d;12pkt 12fpkt", shape=diamond, color=yellow];
466[label="1.8.91.157;d;311pkt 311fpkt", shape=diamond, color=yellow];
488[label="3.15.143.189;d;10pkt 10fpkt", shape=diamond, color=yellow];
511[label="45.193.138.156;d;74pkt 74fpkt", shape=diamond, color=yellow];
544[label="34.50.114.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
617[label="93.43.52.137;d;346pkt 346fpkt", shape=diamond, color=yellow];
647[label="42.36.135.185;d;10pkt 10fpkt", shape=diamond, color=yellow];
651[label="210.136.205.2;d;4pkt 4fpkt", shape=diamond, color=yellow];
676[label="93.154.224.92;d;25pkt 25fpkt", shape=diamond, color=yellow];
697[label="93.34.115.236;d;20pkt 20fpkt", shape=diamond, color=yellow];
725[label="210.99.44.120;d;77pkt 77fpkt", shape=diamond, color=yellow];
971[label="42.32.100.21;d;20pkt 20fpkt", shape=diamond, color=yellow];
1053[label="194.245.36.5;s;1482pkt 1482fpkt", shape=diamond, color=yellow];
1309[label="212.109.34.110;d;129pkt 129fpkt", shape=diamond, color=yellow];
1494[label="90.159.175.223;d;6pkt 6fpkt", shape=diamond, color=yellow];
1498[label="18.208.77.49;d;2pkt 2fpkt", shape=diamond, color=yellow];
1794[label="40.142.196.54;d;307pkt 307fpkt", shape=diamond, color=yellow];
1851[label="93.35.138.47;d;41pkt 41fpkt", shape=diamond, color=yellow];
1969[label="92.237.128.239;d;166pkt 166fpkt", shape=diamond, color=yellow];
2008[label="44.30.110.56;d;161pkt 161fpkt", shape=diamond, color=yellow];
2177[label="42.194.3.117;d;124pkt 124fpkt", shape=diamond, color=yellow];
2250[label="40.65.131.8;d;8pkt 8fpkt", shape=diamond, color=yellow];
2451[label="212.21.27.61;d;20pkt 20fpkt", shape=diamond, color=yellow];
2472[label="45.227.39.182;d;20pkt 20fpkt", shape=diamond, color=yellow];
2722[label="212.20.59.49;d;4pkt 4fpkt", shape=diamond, color=yellow];
2745[label="210.3.21.220;d;10pkt 10fpkt", shape=diamond, color=yellow];
2793[label="45.191.33.214;d;3pkt 3fpkt", shape=diamond, color=yellow];
2801[label="195.42.4.84;d;20pkt 20fpkt", shape=diamond, color=yellow];
2805[label="42.37.167.83;d;42pkt 42fpkt", shape=diamond, color=yellow];
3076[label="194.22.27.2;d;32pkt 32fpkt", shape=diamond, color=yellow];
3114[label="211.66.78.22;d;2pkt 2fpkt", shape=diamond, color=yellow];
3116[label="42.41.138.152;d;8pkt 8fpkt", shape=diamond, color=yellow];
3118[label="42.35.18.85;d;6pkt 6fpkt", shape=diamond, color=yellow];
3345[label="29.96.72.76;d;4pkt 4fpkt", shape=diamond, color=yellow];
3357[label="195.117.37.82;d;10pkt 10fpkt", shape=diamond, color=yellow];
3360[label="218.164.57.128;d;4pkt 4fpkt", shape=diamond, color=yellow];
3481[label="93.34.189.6;d;6pkt 6fpkt", shape=diamond, color=yellow];
3521[label="214.240.166.41;d;24pkt 24fpkt", shape=diamond, color=yellow];
3785[label="44.49.73.239;d;16pkt 16fpkt", shape=diamond, color=yellow];
3808[label="92.108.113.82;d;6pkt 6fpkt", shape=diamond, color=yellow];
3828[label="195.65.238.129;d;2pkt 2fpkt", shape=hexagon, color=black];
3972[label="42.32.100.21;d;20pkt 20fpkt", shape=hexagon, color=black];
4011[label="40.70.54.29;d;12pkt 12fpkt", shape=hexagon, color=black];
4030[label="34.50.114.65;d;2pkt 2fpkt", shape=hexagon, color=black];
4058[label="93.34.115.236;d;5pkt 5fpkt", shape=hexagon, color=black];
4334[label="194.245.35.29;s;1255pkt 1255fpkt", shape=hexagon, color=black];
4426[label="44.30.110.56;d;73pkt 73fpkt", shape=hexagon, color=black];
4557[label="1.8.91.157;d;229pkt 229fpkt", shape=hexagon, color=black];
4639[label="212.109.34.110;d;87pkt 87fpkt", shape=hexagon, color=black];
4870[label="40.142.196.54;d;207pkt 207fpkt", shape=hexagon, color=black];
4953[label="210.136.205.2;d;1pkt 1fpkt", shape=hexagon, color=black];
5092[label="45.227.39.182;d;20pkt 20fpkt", shape=hexagon, color=black];
5106[label="194.22.27.2;d;11pkt 11fpkt", shape=hexagon, color=black];
5118[label="42.35.18.85;d;2pkt 2fpkt", shape=hexagon, color=black];
5200[label="42.41.138.152;d;8pkt 8fpkt", shape=hexagon, color=black];
7163[label="194.245.34.168;358pkt 358fpkt", shape=pentagon, color=darkviolet];
8592[label="194.245.34.168;358pkt 358fpkt", shape=invtriangle, color=brown];
9189[label="194.245.34.168;358pkt 358fpkt", shape=invhouse, color=bisque];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.35.29:21, *:*}[45.1537%]&lt;BR/&gt;{194.245.36.5:53, *:*}[34.7102%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (29.2255%)&lt;BR/&gt; 53: (14.9494%)&lt;BR/&gt; 32768: (0.862357%)&lt;BR/&gt; 32769: (0.255925%)&lt;BR/&gt; 32770: (0.183599%)&gt;];
}
269--270[label="1;2pkt 2fpkt"];
269--429[label="1;12pkt 12fpkt"];
269--466[label="1;311pkt 311fpkt"];
269--488[label="1;10pkt 10fpkt"];
269--511[label="1;74pkt 74fpkt"];
269--544[label="1;2pkt 2fpkt"];
269--617[label="1;346pkt 346fpkt"];
269--647[label="1;10pkt 10fpkt"];
269--651[label="1;4pkt 4fpkt"];
269--676[label="0.96;24pkt 24fpkt"];
269--697[label="1;20pkt 20fpkt"];
269--725[label="1;77pkt 77fpkt"];
269--971[label="1;20pkt 20fpkt"];
269--1309[label="0.992248;128pkt 128fpkt"];
269--1494[label="1;6pkt 6fpkt"];
269--1498[label="1;2pkt 2fpkt"];
269--1794[label="0.993485;305pkt 305fpkt"];
269--1851[label="0.97561;40pkt 40fpkt"];
269--1969[label="0.993976;165pkt 165fpkt"];
269--2008[label="1;161pkt 161fpkt"];
269--2177[label="0.91129;113pkt 113fpkt"];
269--2250[label="1;8pkt 8fpkt"];
269--2451[label="1;20pkt 20fpkt"];
269--2472[label="1;20pkt 20fpkt"];
269--2527[label="0.000416146;1pkt 1fpkt"];
269--2722[label="1;4pkt 4fpkt"];
269--2745[label="1;10pkt 10fpkt"];
269--2793[label="1;3pkt 3fpkt"];
269--2801[label="1;20pkt 20fpkt"];
269--2805[label="1;42pkt 42fpkt"];
269--3076[label="1;32pkt 32fpkt"];
269--3114[label="1;2pkt 2fpkt"];
269--3116[label="1;8pkt 8fpkt"];
269--3118[label="1;6pkt 6fpkt"];
269--3345[label="1;4pkt 4fpkt"];
269--3357[label="1;10pkt 10fpkt"];
269--3360[label="1;4pkt 4fpkt"];
269--3481[label="1;6pkt 6fpkt"];
269--3521[label="1;24pkt 24fpkt"];
269--3785[label="1;16pkt 16fpkt"];
269--3808[label="0.5;3pkt 3fpkt"];
269--3828[label="1;2pkt 2fpkt"];
269--3972[label="1;20pkt 20fpkt"];
269--4011[label="1;12pkt 12fpkt"];
269--4030[label="1;2pkt 2fpkt"];
269--4058[label="1;5pkt 5fpkt"];
269--4334[label="1;1255pkt 1255fpkt"];
269--4426[label="1;73pkt 73fpkt"];
269--4557[label="1;229pkt 229fpkt"];
269--4639[label="0.988506;86pkt 86fpkt"];
269--4750[label="0.000416146;1pkt 1fpkt"];
269--4870[label="0.990338;205pkt 205fpkt"];
269--4953[label="1;1pkt 1fpkt"];
269--5092[label="1;20pkt 20fpkt"];
269--5106[label="1;11pkt 11fpkt"];
269--5118[label="1;2pkt 2fpkt"];
269--5200[label="1;8pkt 8fpkt"];
269--5429[label="0.000416146;1pkt 1fpkt"];
270--3828[label="1;2pkt 2fpkt"];
270--4334[label="1;2pkt 2fpkt"];
429--4011[label="1;12pkt 12fpkt"];
429--4334[label="1;12pkt 12fpkt"];
466--4334[label="0.562701;175pkt 175fpkt"];
466--4557[label="1;229pkt 229fpkt"];
488--4334[label="0.6;6pkt 6fpkt"];
511--4334[label="1;74pkt 74fpkt"];
544--4030[label="1;2pkt 2fpkt"];
544--4334[label="1;2pkt 2fpkt"];
617--4334[label="0.936416;324pkt 324fpkt"];
647--4334[label="1;10pkt 10fpkt"];
651--4334[label="0.25;1pkt 1fpkt"];
651--4953[label="1;1pkt 1fpkt"];
676--3836[label="0.04;1pkt 1fpkt"];
676--4334[label="0.56;14pkt 14fpkt"];
676--5404[label="0.04;1pkt 1fpkt"];
697--4058[label="1;5pkt 5fpkt"];
697--4334[label="0.4;8pkt 8fpkt"];
725--4334[label="0.532468;41pkt 41fpkt"];
971--3972[label="1;20pkt 20fpkt"];
971--4334[label="0.6;12pkt 12fpkt"];
1053--2105[label="0.0227273;1pkt 1fpkt"];
1053--2527[label="0.000674764;1pkt 1fpkt"];
1053--2592[label="0.0746269;5pkt 5fpkt"];
1053--2864[label="0.00154799;1pkt 1fpkt"];
1053--3808[label="0.166667;1pkt 1fpkt"];
1053--3914[label="0.0344828;2pkt 2fpkt"];
1053--4750[label="0.000674764;1pkt 1fpkt"];
1053--5429[label="0.000674764;1pkt 1fpkt"];
1053--5453[label="0.0074224;11pkt 11fpkt"];
1053--5471[label="0.00877193;13pkt 13fpkt"];
1053--5475[label="0.00472335;7pkt 7fpkt"];
1053--5486[label="0.0074224;11pkt 11fpkt"];
1053--5497[label="0.00877193;13pkt 13fpkt"];
1053--5502[label="0.00472335;7pkt 7fpkt"];
1053--5507[label="0.0074224;11pkt 11fpkt"];
1053--5515[label="0.00877193;13pkt 13fpkt"];
1053--5520[label="0.00472335;7pkt 7fpkt"];
1309--3832[label="0.00775194;1pkt 1fpkt"];
1309--4334[label="0.496124;64pkt 64fpkt"];
1309--4639[label="1;87pkt 87fpkt"];
1309--6756[label="0.00775194;1pkt 1fpkt"];
1309--8408[label="0.00775194;1pkt 1fpkt"];
1498--4334[label="1;2pkt 2fpkt"];
1794--3836[label="0.00651466;2pkt 2fpkt"];
1794--4334[label="0.403909;124pkt 124fpkt"];
1794--4870[label="1;207pkt 207fpkt"];
1794--5404[label="0.00651466;2pkt 2fpkt"];
1851--3983[label="0.0243902;1pkt 1fpkt"];
1851--4334[label="0.390244;16pkt 16fpkt"];
1969--3836[label="0.0060241;1pkt 1fpkt"];
1969--4334[label="0.463855;77pkt 77fpkt"];
1969--5404[label="0.0060241;1pkt 1fpkt"];
1969--5462[label="0.0060241;1pkt 1fpkt"];
1969--5490[label="0.0060241;1pkt 1fpkt"];
1969--5510[label="0.0060241;1pkt 1fpkt"];
2008--4334[label="0.453416;73pkt 73fpkt"];
2008--4426[label="1;73pkt 73fpkt"];
2177--3836[label="0.0322581;4pkt 4fpkt"];
2177--4334[label="0.282258;35pkt 35fpkt"];
2177--5404[label="0.0322581;4pkt 4fpkt"];
2177--5473[label="0.00806452;1pkt 1fpkt"];
2177--5499[label="0.00806452;1pkt 1fpkt"];
2177--5517[label="0.00806452;1pkt 1fpkt"];
2250--4334[label="0.5;4pkt 4fpkt"];
2451--4334[label="0.4;8pkt 8fpkt"];
2472--4334[label="0.1;2pkt 2fpkt"];
2472--5092[label="1;20pkt 20fpkt"];
2722--4334[label="0.5;2pkt 2fpkt"];
3076--5106[label="1;11pkt 11fpkt"];
3116--5200[label="1;8pkt 8fpkt"];
3118--5118[label="1;2pkt 2fpkt"];
3808--7163[label="0.166667;1pkt 1fpkt"];
3808--8592[label="0.166667;1pkt 1fpkt"];
3808--9189[label="0.166667;1pkt 1fpkt"];
3828--4334[label="1;2pkt 2fpkt"];
3972--4334[label="0.6;12pkt 12fpkt"];
4011--4334[label="1;12pkt 12fpkt"];
4030--4334[label="1;2pkt 2fpkt"];
4058--4334[label="1;5pkt 5fpkt"];
4334--4426[label="1;73pkt 73fpkt"];
4334--4557[label="0.764192;175pkt 175fpkt"];
4334--4639[label="0.735632;64pkt 64fpkt"];
4334--4870[label="0.599034;124pkt 124fpkt"];
4334--4953[label="1;1pkt 1fpkt"];
4334--5092[label="0.1;2pkt 2fpkt"];
4639--6756[label="0.0114943;1pkt 1fpkt"];
4639--8408[label="0.0114943;1pkt 1fpkt"];
4870--5404[label="0.00966184;2pkt 2fpkt"];
7163--8592[label="1;358pkt 358fpkt"];
7163--9189[label="1;358pkt 358fpkt"];
8592--9189[label="1;358pkt 358fpkt"];
</description>
    <slice>
      <filter src_ip="194.245.35.29" src_port="21"/>
      <filter src_ip="194.245.36.5" src_port="53"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_242{
style=filled;
color=gray75;
1601[label="194.245.37.177;d;361pkt 361fpkt", shape=diamond, color=yellow];
5151[label="194.245.37.177;d;361pkt 361fpkt", shape=hexagon, color=black];
stat242[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 194.245.37.177:0}[99.723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.723%)&lt;BR/&gt; 37992: (0.138504%)&lt;BR/&gt; 22: (0.138504%)&gt;];
}
1601--2528[label="0.00277008;1pkt 1fpkt"];
1601--4751[label="0.00277008;1pkt 1fpkt"];
1601--5151[label="1;361pkt 361fpkt"];
1601--5399[label="0.00277008;1pkt 1fpkt"];
1601--5451[label="0.00277008;1pkt 1fpkt"];
1601--5484[label="0.00277008;1pkt 1fpkt"];
1601--5505[label="0.00277008;1pkt 1fpkt"];
1601--9138[label="0.00277008;1pkt 1fpkt"];
5151--5399[label="0.00277008;1pkt 1fpkt"];
5151--5451[label="0.00277008;1pkt 1fpkt"];
5151--5484[label="0.00277008;1pkt 1fpkt"];
5151--5505[label="0.00277008;1pkt 1fpkt"];
5151--9138[label="0.00277008;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.37.177"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.244.214.211"/>
      <from sec="1201928806" usec="0"/>
      <to sec="1201929109" usec="0"/>
    </slice>
    <from sec="1201928806" usec="0"/>
    <to sec="1201929109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
3321[label="138.43.119.0;s;12pkt 12fpkt", shape=diamond, color=yellow];
3510[label="27.172.197.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
5219[label="27.172.197.90;d;1pkt 1fpkt", shape=hexagon, color=black];
5531[label="138.43.119.0;19pkt 19fpkt", shape=pentagon, color=darkviolet];
7830[label="138.43.119.0;18pkt 18fpkt", shape=invtriangle, color=brown];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.119.0:80, 42.33.194.215:*}[31.5789%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58197: (4.90196%)&lt;BR/&gt; 57888: (2.94118%)&lt;BR/&gt; 57808: (2.94118%)&lt;BR/&gt; 45619: (2.94118%)&gt;];
}
3321--3510[label="1;1pkt 1fpkt"];
3321--5219[label="1;1pkt 1fpkt"];
3321--5462[label="0.0833333;1pkt 1fpkt"];
3321--5490[label="0.0833333;1pkt 1fpkt"];
3321--5510[label="0.0833333;1pkt 1fpkt"];
3321--5531[label="1;12pkt 12fpkt"];
3321--7830[label="1;12pkt 12fpkt"];
3510--5219[label="1;1pkt 1fpkt"];
3510--5531[label="1;1pkt 1fpkt"];
3510--7830[label="1;1pkt 1fpkt"];
5219--5531[label="1;1pkt 1fpkt"];
5219--7830[label="1;1pkt 1fpkt"];
5531--7830[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="42.33.194.215" src_ip="138.43.119.0" src_port="80"/>
    </slice>
    <from sec="1201928423" usec="0"/>
    <to sec="1201929292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_246{
style=filled;
color=gray75;
3553[label="169.16.18.23;s;400pkt 400fpkt", shape=diamond, color=yellow];
5242[label="169.16.18.23;s;400pkt 400fpkt", shape=hexagon, color=black];
5785[label="169.16.18.23;421pkt 421fpkt", shape=pentagon, color=darkviolet];
stat246[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.18.23:20129, *:20129}[67.2986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (83.9885%)&lt;BR/&gt; 59319: (0.2457%)&lt;BR/&gt; 20128: (0.2457%)&lt;BR/&gt; 10014: (0.2457%)&lt;BR/&gt; 10000: (0.2457%)&gt;];
}
3553--5242[label="1;400pkt 400fpkt"];
3553--5785[label="0.9975;399pkt 399fpkt"];
5242--5785[label="0.9975;399pkt 399fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="169.16.18.23" src_port="20129"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_247{
style=filled;
color=gray75;
673[label="194.245.32.211;s;3799pkt 3799fpkt", shape=diamond, color=yellow];
1287[label="208.238.107.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
2601[label="203.1.239.8;d;834pkt 834fpkt", shape=diamond, color=yellow];
3205[label="90.107.88.66;d;1pkt 1fpkt", shape=diamond, color=yellow];
3903[label="194.245.32.211;s;619pkt 619fpkt", shape=hexagon, color=black];
4624[label="208.238.107.42;d;1pkt 1fpkt", shape=hexagon, color=black];
5244[label="90.107.88.66;d;1pkt 1fpkt", shape=hexagon, color=black];
stat247[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.32.211:53, 203.1.239.8:*}[21.223%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.7705%)&lt;BR/&gt; 32768: (0.761035%)&lt;BR/&gt; 32769: (0.180746%)&lt;BR/&gt; 32770: (0.133181%)&lt;BR/&gt; 32771: (0.104642%)&gt;];
}
673--1287[label="1;1pkt 1fpkt"];
673--2527[label="0.000263227;1pkt 1fpkt"];
673--2601[label="0.888489;741pkt 741fpkt"];
673--3205[label="1;1pkt 1fpkt"];
673--3903[label="1;619pkt 619fpkt"];
673--4624[label="1;1pkt 1fpkt"];
673--4750[label="0.000263227;1pkt 1fpkt"];
673--5244[label="1;1pkt 1fpkt"];
673--5429[label="0.000263227;1pkt 1fpkt"];
673--5453[label="0.00789681;30pkt 30fpkt"];
673--5471[label="0.0127193;29pkt 29fpkt"];
673--5475[label="0.011302;25pkt 25fpkt"];
673--5477[label="0.00210582;8pkt 8fpkt"];
673--5486[label="0.00789681;30pkt 30fpkt"];
673--5497[label="0.0127193;29pkt 29fpkt"];
673--5502[label="0.011302;25pkt 25fpkt"];
673--5504[label="0.00210582;8pkt 8fpkt"];
673--5507[label="0.00789681;30pkt 30fpkt"];
673--5515[label="0.0127193;29pkt 29fpkt"];
673--5520[label="0.011302;25pkt 25fpkt"];
1287--3903[label="1;1pkt 1fpkt"];
1287--4624[label="1;1pkt 1fpkt"];
2601--3816[label="0.00479616;4pkt 4fpkt"];
2601--3903[label="0.168013;104pkt 104fpkt"];
2601--3988[label="0.00119904;1pkt 1fpkt"];
2601--5392[label="0.00479616;4pkt 4fpkt"];
2601--6221[label="0.00839329;7pkt 7fpkt"];
2601--8145[label="0.00839329;7pkt 7fpkt"];
2601--9027[label="0.00839329;7pkt 7fpkt"];
3205--3903[label="1;1pkt 1fpkt"];
3205--5244[label="1;1pkt 1fpkt"];
3903--4624[label="1;1pkt 1fpkt"];
3903--5244[label="1;1pkt 1fpkt"];
3903--5453[label="0.0306947;19pkt 19fpkt"];
3903--5471[label="0.0290792;18pkt 18fpkt"];
3903--5475[label="0.0258481;16pkt 16fpkt"];
3903--5477[label="0.00969305;6pkt 6fpkt"];
3903--5486[label="0.0306947;19pkt 19fpkt"];
3903--5497[label="0.0290792;18pkt 18fpkt"];
3903--5502[label="0.0258481;16pkt 16fpkt"];
3903--5504[label="0.00969305;6pkt 6fpkt"];
3903--5507[label="0.0306947;19pkt 19fpkt"];
3903--5515[label="0.0290792;18pkt 18fpkt"];
3903--5520[label="0.0258481;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="203.1.239.8" src_ip="194.245.32.211" src_port="53"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15669,2.07533,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
2631[label="195.178.137.44;d;40pkt 40fpkt", shape=diamond, color=yellow];
2672[label="18.208.75.214;s;39pkt 39fpkt", shape=diamond, color=yellow];
5250[label="195.178.137.44;d;40pkt 40fpkt", shape=hexagon, color=black];
7540[label="18.208.75.214;42pkt 42fpkt", shape=pentagon, color=darkviolet];
9246[label="18.208.75.214;41pkt 41fpkt", shape=invhouse, color=bisque];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.208.75.214:*, 195.178.137.44:80}[97.6744%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65348: (1.23762%)&lt;BR/&gt; 65261: (1.23762%)&lt;BR/&gt; 64882: (1.23762%)&lt;BR/&gt; 64087: (1.23762%)&gt;];
}
2631--2672[label="1;39pkt 39fpkt"];
2631--5250[label="1;40pkt 40fpkt"];
2631--5444[label="0.05;2pkt 2fpkt"];
2631--5454[label="0.1;4pkt 4fpkt"];
2631--5467[label="0.05;2pkt 2fpkt"];
2631--5481[label="0.05;2pkt 2fpkt"];
2631--5487[label="0.1;4pkt 4fpkt"];
2631--5494[label="0.05;2pkt 2fpkt"];
2631--5508[label="0.1;4pkt 4fpkt"];
2631--5514[label="0.05;2pkt 2fpkt"];
2631--7540[label="0.975;39pkt 39fpkt"];
2631--9246[label="0.975;39pkt 39fpkt"];
2672--5250[label="1;39pkt 39fpkt"];
2672--5444[label="0.0512821;2pkt 2fpkt"];
2672--5454[label="0.102564;4pkt 4fpkt"];
2672--5467[label="0.0512821;2pkt 2fpkt"];
2672--5481[label="0.0512821;2pkt 2fpkt"];
2672--5487[label="0.102564;4pkt 4fpkt"];
2672--5494[label="0.0512821;2pkt 2fpkt"];
2672--5508[label="0.102564;4pkt 4fpkt"];
2672--5514[label="0.0512821;2pkt 2fpkt"];
2672--7540[label="1;39pkt 39fpkt"];
2672--9246[label="1;39pkt 39fpkt"];
5250--5444[label="0.05;2pkt 2fpkt"];
5250--5454[label="0.1;4pkt 4fpkt"];
5250--5467[label="0.05;2pkt 2fpkt"];
5250--5481[label="0.05;2pkt 2fpkt"];
5250--5487[label="0.1;4pkt 4fpkt"];
5250--5494[label="0.05;2pkt 2fpkt"];
5250--5508[label="0.1;4pkt 4fpkt"];
5250--5514[label="0.05;2pkt 2fpkt"];
5250--7540[label="0.975;39pkt 39fpkt"];
5250--9246[label="0.975;39pkt 39fpkt"];
7540--9246[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.137.44" dst_port="80" src_ip="18.208.75.214"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
3634[label="172.84.179.27;s;54pkt 54fpkt", shape=diamond, color=yellow];
5266[label="172.84.179.27;s;54pkt 54fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.84.179.27:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 17267: (1.85185%)&lt;BR/&gt; 65535: (0.925926%)&lt;BR/&gt; 63937: (0.925926%)&lt;BR/&gt; 63235: (0.925926%)&gt;];
}
3634--5266[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter src_ip="172.84.179.27" src_port="53"/>
    </slice>
    <from sec="1201928465" usec="0"/>
    <to sec="1201929224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.251.42.112"/>
      <from sec="1201928795" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928795" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="34.97.153.165"/>
      <from sec="1201928901" usec="0"/>
      <to sec="1201929150" usec="0"/>
    </slice>
    <from sec="1201928901" usec="0"/>
    <to sec="1201929150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="28.94.128.204"/>
      <from sec="1201928971" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928971" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.809834,2.17301,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="28.94.128.204"/>
      <from sec="1201928971" usec="0"/>
      <to sec="1201929229" usec="0"/>
    </slice>
    <from sec="1201928971" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00915,2.08044,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
2070[label="195.178.74.82;s;25pkt 25fpkt", shape=diamond, color=yellow];
6376[label="195.178.74.82;26pkt 26fpkt", shape=pentagon, color=darkviolet];
8220[label="195.178.74.82;26pkt 26fpkt", shape=invtriangle, color=brown];
9053[label="195.178.74.82;26pkt 26fpkt", shape=invhouse, color=bisque];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.178.74.82:*, 197.145.196.174:80}[46.1538%]&lt;BR/&gt;{195.178.74.82:*, 70.39.165.161:80}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2454: (1.94175%)&lt;BR/&gt; 2453: (1.94175%)&lt;BR/&gt; 2452: (1.94175%)&lt;BR/&gt; 2451: (1.94175%)&gt;];
}
2070--6376[label="1;25pkt 25fpkt"];
2070--8220[label="1;25pkt 25fpkt"];
2070--9053[label="1;25pkt 25fpkt"];
6376--8220[label="1;26pkt 26fpkt"];
6376--9053[label="1;26pkt 26fpkt"];
8220--9053[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="197.145.196.174" dst_port="80" src_ip="195.178.74.82"/>
      <filter dst_ip="70.39.165.161" dst_port="80" src_ip="195.178.74.82"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.43592,2.23437,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="214.244.214.211"/>
      <from sec="1201928806" usec="0"/>
      <to sec="1201929109" usec="0"/>
    </slice>
    <from sec="1201928806" usec="0"/>
    <to sec="1201929109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
6065[label="172.84.233.52;114pkt 114fpkt", shape=pentagon, color=darkviolet];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.84.233.52:53, 18.208.66.26:*}[25.4386%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.3158%)&lt;BR/&gt; 54398: (3.94737%)&lt;BR/&gt; 65309: (0.438596%)&lt;BR/&gt; 64842: (0.438596%)&lt;BR/&gt; 64785: (0.438596%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="18.208.66.26" src_ip="172.84.233.52" src_port="53"/>
    </slice>
    <from sec="1201928459" usec="0"/>
    <to sec="1201929295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
2552[label="194.245.37.0;s;377pkt 377fpkt", shape=diamond, color=yellow];
5524[label="194.245.37.0;377pkt 377fpkt", shape=pentagon, color=darkviolet];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.37.0:*, *:53}[60.4775%]&lt;BR/&gt;{194.245.37.0:0, *:0}[38.992%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (38.992%)&lt;BR/&gt; 53: (30.2387%)&lt;BR/&gt; 4861: (0.265252%)&lt;BR/&gt; 3489: (0.265252%)&lt;BR/&gt; 2709: (0.265252%)&gt;];
}
2552--4750[label="0.00265252;1pkt 1fpkt"];
2552--5429[label="0.00265252;1pkt 1fpkt"];
2552--5453[label="0.100796;38pkt 38fpkt"];
2552--5486[label="0.100796;38pkt 38fpkt"];
2552--5507[label="0.100796;38pkt 38fpkt"];
2552--5524[label="1;377pkt 377fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="194.245.37.0"/>
      <filter src_ip="194.245.37.0"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.42.68.0"/>
    </slice>
    <from sec="1201929056" usec="0"/>
    <to sec="1201929064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.100.225.0"/>
    </slice>
    <from sec="1201929296" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.205.236.0"/>
    </slice>
    <from sec="1201929222" usec="0"/>
    <to sec="1201929238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.104.24.2"/>
    </slice>
    <from sec="1201928793" usec="0"/>
    <to sec="1201928802" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.182.136.2"/>
    </slice>
    <from sec="1201929276" usec="0"/>
    <to sec="1201929282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.190.146.6"/>
    </slice>
    <from sec="1201929208" usec="0"/>
    <to sec="1201929213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.16.7"/>
    </slice>
    <from sec="1201929056" usec="0"/>
    <to sec="1201929071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_271{
style=filled;
color=gray75;
1648[label="170.50.81.233;d;988pkt 988fpkt", shape=diamond, color=yellow];
5606[label="40.138.64.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat271[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 170.50.81.233:15114}[96.3563%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15114: (48.18%)&lt;BR/&gt; 0: (2.22447%)&lt;BR/&gt; 6881: (2.0728%)&lt;BR/&gt; 15160: (0.606673%)&lt;BR/&gt; 16001: (0.505561%)&gt;];
}
1648--5606[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="170.50.81.233" dst_port="15114"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.3.39.9"/>
    </slice>
    <from sec="1201928412" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.233.98.9"/>
    </slice>
    <from sec="1201928747" usec="0"/>
    <to sec="1201929217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.12.149.9"/>
    </slice>
    <from sec="1201928594" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
1997[label="138.135.18.34;d;81pkt 81fpkt", shape=diamond, color=yellow];
5629[label="92.217.32.10;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7880[label="92.217.32.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.135.18.34:13052}[95.0617%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13052: (46.4286%)&lt;BR/&gt; 45306: (3.57143%)&lt;BR/&gt; 13403: (2.97619%)&lt;BR/&gt; 15148: (1.19048%)&lt;BR/&gt; 13599: (1.19048%)&gt;];
}
1997--5629[label="1;2pkt 2fpkt"];
1997--7880[label="1;1pkt 1fpkt"];
5629--7880[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.135.18.34" dst_port="13052"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
5655[label="93.35.41.12;126pkt 126fpkt", shape=pentagon, color=darkviolet];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.35.41.12:1025, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1025: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="93.35.41.12" src_port="1025"/>
    </slice>
    <from sec="1201928862" usec="0"/>
    <to sec="1201928870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.68.179.12"/>
    </slice>
    <from sec="1201928602" usec="0"/>
    <to sec="1201928902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.112.1.13"/>
    </slice>
    <from sec="1201928660" usec="0"/>
    <to sec="1201929286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.113.168.13"/>
    </slice>
    <from sec="1201929134" usec="0"/>
    <to sec="1201929192" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
1683[label="218.80.162.70;d;182pkt 182fpkt", shape=diamond, color=yellow];
1684[label="145.195.226.13;s;270pkt 270fpkt", shape=diamond, color=yellow];
5670[label="145.195.226.13;327pkt 327fpkt", shape=pentagon, color=darkviolet];
7899[label="145.195.226.13;328pkt 328fpkt", shape=invtriangle, color=brown];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.195.226.13:*, 218.80.162.70:80}[60.3659%]&lt;BR/&gt;{145.195.226.13:0, *:0}[28.9634%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 0: (24.6612%)&lt;BR/&gt; 33457: (2.71003%)&lt;BR/&gt; 49043: (0.542005%)&lt;BR/&gt; 32477: (0.406504%)&gt;];
}
1683--1684[label="0.879121;160pkt 160fpkt"];
1683--5444[label="0.0274725;5pkt 5fpkt"];
1683--5454[label="0.0714286;13pkt 13fpkt"];
1683--5467[label="0.0604396;11pkt 11fpkt"];
1683--5481[label="0.0274725;5pkt 5fpkt"];
1683--5487[label="0.0714286;13pkt 13fpkt"];
1683--5494[label="0.0604396;11pkt 11fpkt"];
1683--5508[label="0.0714286;13pkt 13fpkt"];
1683--5514[label="0.0604396;11pkt 11fpkt"];
1683--5670[label="1;182pkt 182fpkt"];
1683--7899[label="1;182pkt 182fpkt"];
1684--5444[label="0.0185185;5pkt 5fpkt"];
1684--5454[label="0.0481481;13pkt 13fpkt"];
1684--5467[label="0.0407407;11pkt 11fpkt"];
1684--5481[label="0.0185185;5pkt 5fpkt"];
1684--5487[label="0.0481481;13pkt 13fpkt"];
1684--5494[label="0.0407407;11pkt 11fpkt"];
1684--5508[label="0.0481481;13pkt 13fpkt"];
1684--5514[label="0.0407407;11pkt 11fpkt"];
1684--5670[label="0.996296;269pkt 269fpkt"];
1684--7899[label="1;270pkt 270fpkt"];
5670--7899[label="1;327pkt 327fpkt"];
</description>
    <slice>
      <filter dst_ip="218.80.162.70" dst_port="80" src_ip="145.195.226.13"/>
      <filter src_ip="145.195.226.13"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.236.141.14"/>
    </slice>
    <from sec="1201928491" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.57.18.15"/>
    </slice>
    <from sec="1201928452" usec="0"/>
    <to sec="1201928663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.84.44.16"/>
    </slice>
    <from sec="1201928884" usec="0"/>
    <to sec="1201928890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.15.189.17"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.26.193.17"/>
    </slice>
    <from sec="1201929253" usec="0"/>
    <to sec="1201929265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.15.2.18"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.71.37.19"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.138.69.19"/>
    </slice>
    <from sec="1201928462" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.81.76.19"/>
    </slice>
    <from sec="1201928840" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.193.210.19"/>
    </slice>
    <from sec="1201928518" usec="0"/>
    <to sec="1201928982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.103.97.20"/>
    </slice>
    <from sec="1201928791" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
3761[label="208.21.174.215;d;6pkt 6fpkt", shape=diamond, color=yellow];
5750[label="138.43.117.20;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.117.20:80, 208.21.174.215:*}[40%]&lt;BR/&gt;{138.43.117.20:80, 5.15.185.164:*}[26.6667%]&lt;BR/&gt;{138.43.117.20:80, 42.25.197.202:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 11969: (5%)&lt;BR/&gt; 1772: (5%)&lt;BR/&gt; 1771: (5%)&lt;BR/&gt; 1757: (5%)&gt;];
}
3761--5750[label="0.833333;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.21.174.215" src_ip="138.43.117.20" src_port="80"/>
      <filter dst_ip="5.15.185.164" src_ip="138.43.117.20" src_port="80"/>
      <filter dst_ip="42.25.197.202" src_ip="138.43.117.20" src_port="80"/>
    </slice>
    <from sec="1201928501" usec="0"/>
    <to sec="1201929167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
3598[label="138.43.182.20;s;43pkt 43fpkt", shape=diamond, color=yellow];
5753[label="138.43.182.20;48pkt 48fpkt", shape=pentagon, color=darkviolet];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.182.20:37413, 44.111.85.65:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37413: (50%)&lt;BR/&gt; 22481: (2.1978%)&lt;BR/&gt; 60962: (1.0989%)&lt;BR/&gt; 60117: (1.0989%)&lt;BR/&gt; 59838: (1.0989%)&gt;];
}
3598--5753[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="44.111.85.65" src_ip="138.43.182.20" src_port="37413"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.209.193.20"/>
    </slice>
    <from sec="1201928749" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.78.214.20"/>
    </slice>
    <from sec="1201928622" usec="0"/>
    <to sec="1201929225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.97.225.20"/>
    </slice>
    <from sec="1201928595" usec="0"/>
    <to sec="1201929291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.78.60.21"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.87.96.21"/>
    </slice>
    <from sec="1201929179" usec="0"/>
    <to sec="1201929264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.101.145.21"/>
    </slice>
    <from sec="1201928934" usec="0"/>
    <to sec="1201928943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.201.159.21"/>
    </slice>
    <from sec="1201928491" usec="0"/>
    <to sec="1201929267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.203.185.22"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.80.64.23"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.174.104.23"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.87.224.23"/>
    </slice>
    <from sec="1201929028" usec="0"/>
    <to sec="1201929032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.178.85.25"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.18.143.25"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.43.204.26"/>
    </slice>
    <from sec="1201928893" usec="0"/>
    <to sec="1201928903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.84.236.26"/>
    </slice>
    <from sec="1201928597" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.145.97.27"/>
    </slice>
    <from sec="1201928824" usec="0"/>
    <to sec="1201928836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.54.207.27"/>
    </slice>
    <from sec="1201928418" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.90.98.28"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.240.119.28"/>
    </slice>
    <from sec="1201928415" usec="0"/>
    <to sec="1201929278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.106.6.29"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.242.176.29"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.101.220.29"/>
    </slice>
    <from sec="1201928434" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.50.50.30"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.8.76.30"/>
    </slice>
    <from sec="1201928866" usec="0"/>
    <to sec="1201928871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.106.174.30"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.117.67.31"/>
    </slice>
    <from sec="1201928423" usec="0"/>
    <to sec="1201929285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.15.42.32"/>
    </slice>
    <from sec="1201928426" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.136.66.32"/>
    </slice>
    <from sec="1201928453" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.137.224.32"/>
    </slice>
    <from sec="1201929215" usec="0"/>
    <to sec="1201929274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.125.33"/>
    </slice>
    <from sec="1201928693" usec="0"/>
    <to sec="1201928797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.49.104.34"/>
    </slice>
    <from sec="1201929235" usec="0"/>
    <to sec="1201929271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.113.111.35"/>
    </slice>
    <from sec="1201928532" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.163.218.35"/>
    </slice>
    <from sec="1201928657" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.142.232.35"/>
    </slice>
    <from sec="1201928999" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.16.42.36"/>
    </slice>
    <from sec="1201928428" usec="0"/>
    <to sec="1201929297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.48.52.36"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.72.4.39"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.195.27.39"/>
    </slice>
    <from sec="1201928450" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.24.143.39"/>
    </slice>
    <from sec="1201928467" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
5964[label="141.54.252.40;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.252.40:*, 217.182.208.84:443}[37.9747%]&lt;BR/&gt;{141.54.252.40:*, 208.166.148.10:80}[22.7848%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.3165%)&lt;BR/&gt; 443: (18.9873%)&lt;BR/&gt; 0: (3.79747%)&lt;BR/&gt; 60076: (1.89873%)&lt;BR/&gt; 123: (1.26582%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="217.182.208.84" dst_port="443" src_ip="141.54.252.40"/>
      <filter dst_ip="208.166.148.10" dst_port="80" src_ip="141.54.252.40"/>
    </slice>
    <from sec="1201928427" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.2.41"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.111.43"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.165.43"/>
    </slice>
    <from sec="1201929220" usec="0"/>
    <to sec="1201929244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25635,2.13634,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
141[label="44.205.80.45s;71pkt 71fpkt", shape=rectangle, color=red];
6000[label="44.205.80.45;256pkt 256fpkt", shape=pentagon, color=darkviolet];
8045[label="44.205.80.45;256pkt 256fpkt", shape=invtriangle, color=brown];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.205.80.45:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 50890: (0.25729%)&lt;BR/&gt; 50888: (0.25729%)&lt;BR/&gt; 50887: (0.25729%)&lt;BR/&gt; 50885: (0.25729%)&gt;];
}
141--6000[label="1;71pkt 71fpkt"];
141--8045[label="1;71pkt 71fpkt"];
6000--8045[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="44.205.80.45"/>
    </slice>
    <from sec="1201929020" usec="0"/>
    <to sec="1201929034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
6022[label="194.245.33.48;184pkt 184fpkt", shape=pentagon, color=darkviolet];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.33.48:1433, 214.64.36.59:*}[99.4565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (49.7283%)&lt;BR/&gt; 64832: (0.271739%)&lt;BR/&gt; 64746: (0.271739%)&lt;BR/&gt; 64472: (0.271739%)&lt;BR/&gt; 64401: (0.271739%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="214.64.36.59" src_ip="194.245.33.48" src_port="1433"/>
    </slice>
    <from sec="1201928868" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.71.83.48"/>
    </slice>
    <from sec="1201928553" usec="0"/>
    <to sec="1201929239" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.86.32.49"/>
    </slice>
    <from sec="1201928784" usec="0"/>
    <to sec="1201929216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.155.98.49"/>
    </slice>
    <from sec="1201928524" usec="0"/>
    <to sec="1201928596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.66.225.49"/>
    </slice>
    <from sec="1201928827" usec="0"/>
    <to sec="1201928830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.96.13.50"/>
    </slice>
    <from sec="1201928654" usec="0"/>
    <to sec="1201929165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.238.37.51"/>
    </slice>
    <from sec="1201928697" usec="0"/>
    <to sec="1201928723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.69.117.51"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.114.85.52"/>
    </slice>
    <from sec="1201928844" usec="0"/>
    <to sec="1201928932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.37.53"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.245.42.53"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.175.55.53"/>
    </slice>
    <from sec="1201928659" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.151.26.54"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.43.117.54"/>
    </slice>
    <from sec="1201929243" usec="0"/>
    <to sec="1201929260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.72.125.54"/>
    </slice>
    <from sec="1201929243" usec="0"/>
    <to sec="1201929260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.220.147.54"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.235.161.54"/>
    </slice>
    <from sec="1201928804" usec="0"/>
    <to sec="1201928809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.137.78.56"/>
    </slice>
    <from sec="1201928408" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.233.135.56"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.248.56"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.142.232.58"/>
    </slice>
    <from sec="1201928546" usec="0"/>
    <to sec="1201929203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.56.223.60"/>
    </slice>
    <from sec="1201928423" usec="0"/>
    <to sec="1201929199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.54.61"/>
    </slice>
    <from sec="1201929137" usec="0"/>
    <to sec="1201929260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.34.104.61"/>
    </slice>
    <from sec="1201928780" usec="0"/>
    <to sec="1201929143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.26.134.62"/>
    </slice>
    <from sec="1201928711" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.245.42.65"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.109.173.65"/>
    </slice>
    <from sec="1201928439" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.112.203.65"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.85.27.66"/>
    </slice>
    <from sec="1201928449" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.24.82.67"/>
    </slice>
    <from sec="1201928756" usec="0"/>
    <to sec="1201929157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.119.199.67"/>
    </slice>
    <from sec="1201929043" usec="0"/>
    <to sec="1201929049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.86.81.68"/>
    </slice>
    <from sec="1201928467" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.12.132.68"/>
    </slice>
    <from sec="1201928502" usec="0"/>
    <to sec="1201929231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.89.200.68"/>
    </slice>
    <from sec="1201928563" usec="0"/>
    <to sec="1201928839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.16.192.70"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.176.213.70"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.87.38.71"/>
    </slice>
    <from sec="1201928520" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.66.20.74"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00915,2.08044,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
1791[label="141.54.96.74;s;23pkt 23fpkt", shape=diamond, color=yellow];
6301[label="141.54.96.74;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8176[label="141.54.96.74;24pkt 24fpkt", shape=invtriangle, color=brown];
9037[label="141.54.96.74;23pkt 23fpkt", shape=invhouse, color=bisque];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.96.74:*, 25.116.106.65:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4619: (2.12766%)&lt;BR/&gt; 4618: (2.12766%)&lt;BR/&gt; 4599: (2.12766%)&lt;BR/&gt; 4595: (2.12766%)&gt;];
}
1791--4445[label="0.0869565;2pkt 2fpkt"];
1791--5454[label="0.0869565;2pkt 2fpkt"];
1791--5487[label="0.0869565;2pkt 2fpkt"];
1791--5508[label="0.0869565;2pkt 2fpkt"];
1791--6301[label="1;23pkt 23fpkt"];
1791--8176[label="1;23pkt 23fpkt"];
1791--9037[label="0.956522;22pkt 22fpkt"];
6301--8176[label="1;24pkt 24fpkt"];
6301--9037[label="1;23pkt 23fpkt"];
8176--9037[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="25.116.106.65" dst_port="80" src_ip="141.54.96.74"/>
    </slice>
    <from sec="1201928451" usec="0"/>
    <to sec="1201929079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
3255[label="141.54.174.74;s;121pkt 121fpkt", shape=diamond, color=yellow];
6304[label="141.54.174.74;144pkt 144fpkt", shape=pentagon, color=darkviolet];
8179[label="141.54.174.74;144pkt 144fpkt", shape=invtriangle, color=brown];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.174.74:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59150: (0.366748%)&lt;BR/&gt; 59148: (0.366748%)&lt;BR/&gt; 59024: (0.366748%)&lt;BR/&gt; 2446: (0.366748%)&gt;];
}
3255--4202[label="0.0578512;7pkt 7fpkt"];
3255--4817[label="0.00826446;1pkt 1fpkt"];
3255--5008[label="0.0114943;1pkt 1fpkt"];
3255--5444[label="0.0165289;2pkt 2fpkt"];
3255--5454[label="0.0909091;11pkt 11fpkt"];
3255--5467[label="0.0165289;2pkt 2fpkt"];
3255--5481[label="0.0165289;2pkt 2fpkt"];
3255--5487[label="0.0909091;11pkt 11fpkt"];
3255--5494[label="0.0165289;2pkt 2fpkt"];
3255--5508[label="0.0909091;11pkt 11fpkt"];
3255--5514[label="0.0165289;2pkt 2fpkt"];
3255--6304[label="1;121pkt 121fpkt"];
3255--8179[label="1;121pkt 121fpkt"];
6304--8179[label="1;144pkt 144fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="141.54.174.74"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.32.214.74"/>
    </slice>
    <from sec="1201929278" usec="0"/>
    <to sec="1201929286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.55.0.75"/>
    </slice>
    <from sec="1201929245" usec="0"/>
    <to sec="1201929295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.102.75.77"/>
    </slice>
    <from sec="1201928411" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
3202[label="195.17.162.134;d;13pkt 13fpkt", shape=diamond, color=yellow];
5162[label="195.17.162.134;d;13pkt 13fpkt", shape=hexagon, color=black];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 195.17.162.134:0}[53.8462%]&lt;BR/&gt;{*:*, 195.17.162.134:80}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (53.8462%)&lt;BR/&gt; 80: (23.0769%)&lt;BR/&gt; 49189: (3.84615%)&lt;BR/&gt; 45127: (3.84615%)&lt;BR/&gt; 37733: (3.84615%)&gt;];
}
3202--5162[label="1;13pkt 13fpkt"];
3202--6332[label="0.0769231;1pkt 1fpkt"];
5162--6332[label="0.0769231;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.17.162.134" dst_port="80"/>
      <filter dst_ip="195.17.162.134"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.118.72.78"/>
    </slice>
    <from sec="1201929238" usec="0"/>
    <to sec="1201929247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.247.78.78"/>
    </slice>
    <from sec="1201928476" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.200.192.78"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.173.2.79"/>
    </slice>
    <from sec="1201928711" usec="0"/>
    <to sec="1201929004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.51.112.79"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.132.139.79"/>
    </slice>
    <from sec="1201928445" usec="0"/>
    <to sec="1201928496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.61.80"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.180.38.81"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201928820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
1048[label="169.16.175.82;s;21pkt 21fpkt", shape=diamond, color=yellow];
6383[label="169.16.175.82;60pkt 60fpkt", shape=pentagon, color=darkviolet];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.175.82:*, 70.56.223.60:*}[98.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64139: (1.23457%)&lt;BR/&gt; 61301: (1.23457%)&lt;BR/&gt; 54089: (1.23457%)&lt;BR/&gt; 53101: (1.23457%)&lt;BR/&gt; 51225: (1.23457%)&gt;];
}
1048--6383[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="70.56.223.60" src_ip="169.16.175.82"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.149.60.83"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.244.144.83"/>
    </slice>
    <from sec="1201928792" usec="0"/>
    <to sec="1201928887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.171.163.83"/>
    </slice>
    <from sec="1201928433" usec="0"/>
    <to sec="1201929285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.98.173.83"/>
    </slice>
    <from sec="1201928480" usec="0"/>
    <to sec="1201928574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.177.85.84"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.164.17.85"/>
    </slice>
    <from sec="1201928436" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.35.253.85"/>
    </slice>
    <from sec="1201928934" usec="0"/>
    <to sec="1201928970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.4.96.86"/>
    </slice>
    <from sec="1201928862" usec="0"/>
    <to sec="1201928915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.200.215.86"/>
    </slice>
    <from sec="1201928967" usec="0"/>
    <to sec="1201929062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
3596[label="195.187.237.86;s;311pkt 311fpkt", shape=diamond, color=yellow];
6446[label="195.187.237.86;340pkt 340fpkt", shape=pentagon, color=darkviolet];
8259[label="195.187.237.86;340pkt 340fpkt", shape=invtriangle, color=brown];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.187.237.86:53, *:*}[98.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.5318%)&lt;BR/&gt; 32768: (4.2886%)&lt;BR/&gt; 32769: (0.908174%)&lt;BR/&gt; 5303: (0.756811%)&lt;BR/&gt; 32770: (0.605449%)&gt;];
}
3596--5453[label="0.00643087;2pkt 2fpkt"];
3596--5471[label="0.0192926;6pkt 6fpkt"];
3596--5475[label="0.0096463;3pkt 3fpkt"];
3596--5477[label="0.00321543;1pkt 1fpkt"];
3596--5486[label="0.00643087;2pkt 2fpkt"];
3596--5497[label="0.0192926;6pkt 6fpkt"];
3596--5502[label="0.0096463;3pkt 3fpkt"];
3596--5504[label="0.00321543;1pkt 1fpkt"];
3596--5507[label="0.00643087;2pkt 2fpkt"];
3596--5515[label="0.0192926;6pkt 6fpkt"];
3596--5520[label="0.0096463;3pkt 3fpkt"];
3596--6446[label="1;311pkt 311fpkt"];
3596--8259[label="1;311pkt 311fpkt"];
6446--8259[label="1;340pkt 340fpkt"];
</description>
    <slice>
      <filter src_ip="195.187.237.86" src_port="53"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.135.24.87"/>
    </slice>
    <from sec="1201928799" usec="0"/>
    <to sec="1201928819" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.56.108.87"/>
    </slice>
    <from sec="1201928541" usec="0"/>
    <to sec="1201929272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.68.205.87"/>
    </slice>
    <from sec="1201928520" usec="0"/>
    <to sec="1201928992" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.181.52.88"/>
    </slice>
    <from sec="1201928826" usec="0"/>
    <to sec="1201928831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.136.181.88"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.66.195.88"/>
    </slice>
    <from sec="1201928802" usec="0"/>
    <to sec="1201928898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.85.2.90"/>
    </slice>
    <from sec="1201928907" usec="0"/>
    <to sec="1201928931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.18.47.90"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.92.174.90"/>
    </slice>
    <from sec="1201928533" usec="0"/>
    <to sec="1201928896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.195.174.90"/>
    </slice>
    <from sec="1201928776" usec="0"/>
    <to sec="1201928875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.84.10.91"/>
    </slice>
    <from sec="1201928506" usec="0"/>
    <to sec="1201929259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.12.41.92"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201928999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.16.104.92"/>
    </slice>
    <from sec="1201928554" usec="0"/>
    <to sec="1201928559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.97.139.93"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.18.144.93"/>
    </slice>
    <from sec="1201928567" usec="0"/>
    <to sec="1201929148" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_422{
style=filled;
color=gray75;
6518[label="91.135.12.94;56pkt 56fpkt", shape=pentagon, color=darkviolet];
stat422[shape=component, label=&lt;Rules:&lt;BR/&gt;{91.135.12.94:0, *:0}[50%]&lt;BR/&gt;{91.135.12.94:*, *:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 3821: (1.78571%)&lt;BR/&gt; 4997: (0.892857%)&lt;BR/&gt; 4879: (0.892857%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="91.135.12.94"/>
      <filter src_ip="91.135.12.94"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201929252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
6520[label="193.164.143.94;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.164.143.94:1041, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1041: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="137" src_ip="193.164.143.94" src_port="1041"/>
    </slice>
    <from sec="1201928785" usec="0"/>
    <to sec="1201928812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.201.67.96"/>
    </slice>
    <from sec="1201928635" usec="0"/>
    <to sec="1201929273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.60.129.96"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929116" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.228.114.98"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.250.89.100"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.198.132.100"/>
    </slice>
    <from sec="1201928534" usec="0"/>
    <to sec="1201928536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.127.47.101"/>
    </slice>
    <from sec="1201929292" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.134.146.101"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.202.255.101"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201928413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.100.131.102"/>
    </slice>
    <from sec="1201928519" usec="0"/>
    <to sec="1201928520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
2277[label="169.16.175.102;s;11pkt 11fpkt", shape=diamond, color=yellow];
6600[label="169.16.175.102;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.175.102:49416, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49416: (50%)&lt;BR/&gt; 49173: (4.54545%)&lt;BR/&gt; 46145: (4.54545%)&lt;BR/&gt; 38094: (4.54545%)&lt;BR/&gt; 32263: (4.54545%)&gt;];
}
2277--6600[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.175.102" src_port="49416"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.115.182.102"/>
    </slice>
    <from sec="1201928571" usec="0"/>
    <to sec="1201929295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.142.225.103"/>
    </slice>
    <from sec="1201928449" usec="0"/>
    <to sec="1201929043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.100.131.104"/>
    </slice>
    <from sec="1201928495" usec="0"/>
    <to sec="1201928497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
2551[label="209.109.168.104;s;149pkt 149fpkt", shape=diamond, color=yellow];
3531[label="141.54.174.0;d;110pkt 110fpkt", shape=diamond, color=yellow];
6618[label="209.109.168.104;179pkt 179fpkt", shape=pentagon, color=darkviolet];
8335[label="209.109.168.104;179pkt 179fpkt", shape=invtriangle, color=brown];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.109.168.104:80, 141.54.174.0:*}[54.4041%]&lt;BR/&gt;{209.109.168.104:80, 141.54.206.237:*}[38.8601%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3840: (0.324149%)&lt;BR/&gt; 3833: (0.324149%)&lt;BR/&gt; 3832: (0.324149%)&lt;BR/&gt; 3831: (0.324149%)&gt;];
}
2551--3531[label="0.809091;89pkt 89fpkt"];
2551--5462[label="0.0536913;8pkt 8fpkt"];
2551--5473[label="0.033557;5pkt 5fpkt"];
2551--5490[label="0.0536913;8pkt 8fpkt"];
2551--5499[label="0.033557;5pkt 5fpkt"];
2551--5510[label="0.0536913;8pkt 8fpkt"];
2551--5517[label="0.033557;5pkt 5fpkt"];
2551--6618[label="0.993289;148pkt 148fpkt"];
2551--8335[label="0.993289;148pkt 148fpkt"];
3531--5462[label="0.0818182;9pkt 9fpkt"];
3531--5473[label="0.00909091;1pkt 1fpkt"];
3531--5490[label="0.0818182;9pkt 9fpkt"];
3531--5499[label="0.00909091;1pkt 1fpkt"];
3531--5510[label="0.0818182;9pkt 9fpkt"];
3531--5517[label="0.00909091;1pkt 1fpkt"];
3531--6618[label="0.872727;96pkt 96fpkt"];
3531--8335[label="0.872727;96pkt 96fpkt"];
6618--8335[label="1;179pkt 179fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.174.0" src_ip="209.109.168.104" src_port="80"/>
      <filter dst_ip="141.54.206.237" src_ip="209.109.168.104" src_port="80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.176.144.105"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201928432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.146.105"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.148.165.105"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00915,2.08044,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
3778[label="23.71.224.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
6629[label="23.71.224.105;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8341[label="23.71.224.105;1pkt 1fpkt", shape=invtriangle, color=brown];
9092[label="23.71.224.105;1pkt 1fpkt", shape=invhouse, color=bisque];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.71.224.105:2599, 194.245.35.1:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2599: (50%)&gt;];
}
3778--6629[label="1;1pkt 1fpkt"];
3778--8341[label="1;1pkt 1fpkt"];
3778--9092[label="1;1pkt 1fpkt"];
6629--8341[label="1;1pkt 1fpkt"];
6629--9092[label="1;1pkt 1fpkt"];
8341--9092[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.35.1" dst_port="8080" src_ip="23.71.224.105" src_port="2599"/>
    </slice>
    <from sec="1201929164" usec="0"/>
    <to sec="1201929205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.202.53.106"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.14.229.106"/>
    </slice>
    <from sec="1201928489" usec="0"/>
    <to sec="1201928658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.37.144.108"/>
    </slice>
    <from sec="1201928945" usec="0"/>
    <to sec="1201928991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.18.152.108"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.2.204.109"/>
    </slice>
    <from sec="1201928418" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.131.105.113"/>
    </slice>
    <from sec="1201929267" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.110.113"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.214.167.114"/>
    </slice>
    <from sec="1201928537" usec="0"/>
    <to sec="1201928967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.198.188.114"/>
    </slice>
    <from sec="1201929084" usec="0"/>
    <to sec="1201929098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.52.200.114"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.70.121.115"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.96.124.115"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.203.211.115"/>
    </slice>
    <from sec="1201928571" usec="0"/>
    <to sec="1201928765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.209.177.116"/>
    </slice>
    <from sec="1201928520" usec="0"/>
    <to sec="1201929236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.32.125.118"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.81.248.125"/>
    </slice>
    <from sec="1201928835" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.68.126.127"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201928999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.164.57.128"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
1393[label="195.178.142.5;d;15pkt 15fpkt", shape=diamond, color=yellow];
1455[label="17.155.110.166;s;1pkt 1fpkt", shape=diamond, color=yellow];
3519[label="45.188.62.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
4139[label="17.155.110.166;s;1pkt 1fpkt", shape=hexagon, color=black];
6689[label="45.188.62.112;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7146[label="17.155.110.166;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8375[label="45.188.62.112;1pkt 1fpkt", shape=invtriangle, color=brown];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 195.178.142.5:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.619%)&lt;BR/&gt; 62615: (9.52381%)&lt;BR/&gt; 50795: (9.52381%)&lt;BR/&gt; 63707: (2.38095%)&lt;BR/&gt; 63705: (2.38095%)&gt;];
}
1393--1455[label="1;1pkt 1fpkt"];
1393--1901[label="0.133333;2pkt 2fpkt"];
1393--2822[label="1;1pkt 1fpkt"];
1393--3519[label="1;1pkt 1fpkt"];
1393--4139[label="1;1pkt 1fpkt"];
1393--4512[label="0.133333;2pkt 2fpkt"];
1393--5473[label="0.0666667;1pkt 1fpkt"];
1393--5499[label="0.0666667;1pkt 1fpkt"];
1393--5517[label="0.0666667;1pkt 1fpkt"];
1393--5803[label="0.0666667;1pkt 1fpkt"];
1393--6678[label="0.5;1pkt 1fpkt"];
1393--6689[label="1;1pkt 1fpkt"];
1393--7146[label="1;1pkt 1fpkt"];
1393--7457[label="0.0666667;1pkt 1fpkt"];
1393--7957[label="0.0666667;1pkt 1fpkt"];
1393--8370[label="0.5;1pkt 1fpkt"];
1393--8375[label="1;1pkt 1fpkt"];
1393--8731[label="0.0666667;1pkt 1fpkt"];
1393--9104[label="0.5;1pkt 1fpkt"];
1455--4139[label="1;1pkt 1fpkt"];
1455--7146[label="1;1pkt 1fpkt"];
3519--6689[label="1;1pkt 1fpkt"];
3519--8375[label="1;1pkt 1fpkt"];
4139--7146[label="1;1pkt 1fpkt"];
6689--8375[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.142.5" src_port="80"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201929226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.247.102.128"/>
    </slice>
    <from sec="1201928529" usec="0"/>
    <to sec="1201929197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
3259[label="138.233.66.102;d;92pkt 92fpkt", shape=diamond, color=yellow];
6809[label="211.94.180.129;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.233.66.102:43722}[47.8261%]&lt;BR/&gt;{*:*, 138.233.66.102:45510}[32.6087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43722: (23.9362%)&lt;BR/&gt; 45510: (15.9574%)&lt;BR/&gt; 50429: (8.51064%)&lt;BR/&gt; 13769: (2.12766%)&lt;BR/&gt; 45306: (1.59574%)&gt;];
}
3259--6809[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="138.233.66.102" dst_port="43722"/>
      <filter dst_ip="138.233.66.102" dst_port="45510"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.155.109.131"/>
    </slice>
    <from sec="1201928662" usec="0"/>
    <to sec="1201928737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.221.160.131"/>
    </slice>
    <from sec="1201929063" usec="0"/>
    <to sec="1201929068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.114.215.131"/>
    </slice>
    <from sec="1201928516" usec="0"/>
    <to sec="1201929241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.131.180.132"/>
    </slice>
    <from sec="1201928437" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.148.1.133"/>
    </slice>
    <from sec="1201928490" usec="0"/>
    <to sec="1201928546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
6845[label="169.16.87.133;52pkt 52fpkt", shape=pentagon, color=darkviolet];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.87.133:9834, *:*}[98.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9834: (49.0385%)&lt;BR/&gt; 12233: (1.92308%)&lt;BR/&gt; 10022: (1.92308%)&lt;BR/&gt; 64197: (0.961538%)&lt;BR/&gt; 64039: (0.961538%)&gt;];
}
</description>
    <slice>
      <filter src_ip="169.16.87.133" src_port="9834"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.244.213.133"/>
    </slice>
    <from sec="1201929204" usec="0"/>
    <to sec="1201929209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="89.111.108.134"/>
    </slice>
    <from sec="1201928663" usec="0"/>
    <to sec="1201928842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
6854[label="0.166.0.135;330pkt 330fpkt", shape=pentagon, color=darkviolet];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.166.0.135:62518, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62518: (50%)&lt;BR/&gt; 8000: (8.33333%)&lt;BR/&gt; 3128: (7.72727%)&lt;BR/&gt; 11171: (7.57576%)&lt;BR/&gt; 8080: (7.57576%)&gt;];
}
</description>
    <slice>
      <filter src_ip="0.166.0.135" src_port="62518"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
3310[label="141.54.16.82;d;3pkt 3fpkt", shape=diamond, color=yellow];
3471[label="17.155.97.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
3624[label="143.183.83.135;s;82pkt 82fpkt", shape=diamond, color=yellow];
6858[label="143.183.83.135;83pkt 83fpkt", shape=pentagon, color=darkviolet];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.183.83.135:80, 169.16.67.238:*}[25.8824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.4911%)&lt;BR/&gt; 443: (6.50888%)&lt;BR/&gt; 4473: (0.887574%)&lt;BR/&gt; 65140: (0.591716%)&lt;BR/&gt; 61394: (0.591716%)&gt;];
}
3310--3471[label="1;1pkt 1fpkt"];
3310--3624[label="0.333333;1pkt 1fpkt"];
3310--6858[label="0.333333;1pkt 1fpkt"];
3624--4666[label="0.0243902;2pkt 2fpkt"];
3624--4774[label="0.0243902;2pkt 2fpkt"];
3624--5013[label="0.0121951;1pkt 1fpkt"];
3624--5462[label="0.0487805;4pkt 4fpkt"];
3624--5473[label="0.097561;8pkt 8fpkt"];
3624--5490[label="0.0487805;4pkt 4fpkt"];
3624--5499[label="0.097561;8pkt 8fpkt"];
3624--5510[label="0.0487805;4pkt 4fpkt"];
3624--5517[label="0.097561;8pkt 8fpkt"];
3624--6858[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.67.238" src_ip="143.183.83.135" src_port="80"/>
    </slice>
    <from sec="1201928436" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.195.83.135"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.177.177.135"/>
    </slice>
    <from sec="1201928998" usec="0"/>
    <to sec="1201929030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.906185,2.10075,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
1776[label="29.132.179.227;s;12pkt 12fpkt", shape=diamond, color=yellow];
4687[label="29.132.179.227;s;12pkt 12fpkt", shape=hexagon, color=black];
7647[label="29.132.179.227;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.132.179.227:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2621: (3.57143%)&lt;BR/&gt; 2620: (3.57143%)&lt;BR/&gt; 1919: (3.57143%)&lt;BR/&gt; 1659: (3.57143%)&gt;];
}
1776--1827[label="0.0833333;1pkt 1fpkt"];
1776--4687[label="1;12pkt 12fpkt"];
1776--7647[label="1;12pkt 12fpkt"];
4687--7647[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="29.132.179.227" src_port="80"/>
    </slice>
    <from sec="1201928436" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.90.226.136"/>
    </slice>
    <from sec="1201929192" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
755[label="169.16.242.199;d;19pkt 19fpkt", shape=diamond, color=yellow];
881[label="90.82.81.141;s;109pkt 109fpkt", shape=diamond, color=yellow];
905[label="169.16.132.216;d;76pkt 76fpkt", shape=diamond, color=yellow];
2495[label="18.208.93.13;s;1pkt 1fpkt", shape=diamond, color=yellow];
2747[label="169.16.12.32;d;45pkt 45fpkt", shape=diamond, color=yellow];
3766[label="208.181.136.228;s;1pkt 1fpkt", shape=diamond, color=yellow];
3954[label="90.82.81.141;s;75pkt 75fpkt", shape=hexagon, color=black];
4898[label="169.16.242.199;d;11pkt 11fpkt", shape=hexagon, color=black];
4902[label="169.16.12.32;d;43pkt 43fpkt", shape=hexagon, color=black];
5968[label="18.208.81.41;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6878[label="180.193.48.137;12pkt 12fpkt", shape=pentagon, color=darkviolet];
6910[label="90.82.81.141;109pkt 109fpkt", shape=pentagon, color=darkviolet];
8028[label="18.208.81.41;2pkt 2fpkt", shape=invtriangle, color=brown];
8457[label="180.193.48.137;12pkt 12fpkt", shape=invtriangle, color=brown];
8979[label="18.208.81.41;1pkt 1fpkt", shape=invhouse, color=bisque];
9142[label="180.193.48.137;12pkt 12fpkt", shape=invhouse, color=bisque];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.82.81.141:*, 169.16.132.216:80}[47.2603%]&lt;BR/&gt;{90.82.81.141:*, 169.16.12.32:80}[21.9178%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9057%)&lt;BR/&gt; 995: (2.64151%)&lt;BR/&gt; 443: (1.88679%)&lt;BR/&gt; 49208: (0.566038%)&lt;BR/&gt; 161: (0.566038%)&gt;];
}
755--881[label="0.105263;2pkt 2fpkt"];
755--2495[label="1;1pkt 1fpkt"];
755--3766[label="1;1pkt 1fpkt"];
755--4898[label="1;11pkt 11fpkt"];
755--6910[label="0.105263;2pkt 2fpkt"];
881--905[label="0.907895;69pkt 69fpkt"];
881--2747[label="0.711111;32pkt 32fpkt"];
881--3954[label="1;75pkt 75fpkt"];
881--4898[label="0.181818;2pkt 2fpkt"];
881--4902[label="0.697674;30pkt 30fpkt"];
881--5444[label="0.321101;35pkt 35fpkt"];
881--5454[label="0.0183486;2pkt 2fpkt"];
881--5467[label="0.00917431;1pkt 1fpkt"];
881--5481[label="0.321101;35pkt 35fpkt"];
881--5487[label="0.0183486;2pkt 2fpkt"];
881--5494[label="0.00917431;1pkt 1fpkt"];
881--5508[label="0.0183486;2pkt 2fpkt"];
881--5514[label="0.00917431;1pkt 1fpkt"];
881--6910[label="1;109pkt 109fpkt"];
905--3954[label="0.92;69pkt 69fpkt"];
905--5444[label="0.473684;36pkt 36fpkt"];
905--5481[label="0.473684;36pkt 36fpkt"];
905--5968[label="1;2pkt 2fpkt"];
905--6910[label="0.907895;69pkt 69fpkt"];
905--7026[label="0.111111;1pkt 1fpkt"];
905--8028[label="1;2pkt 2fpkt"];
905--8979[label="1;1pkt 1fpkt"];
2495--4898[label="1;1pkt 1fpkt"];
2747--4902[label="1;43pkt 43fpkt"];
2747--5454[label="0.0444444;2pkt 2fpkt"];
2747--5467[label="0.0222222;1pkt 1fpkt"];
2747--5487[label="0.0444444;2pkt 2fpkt"];
2747--5494[label="0.0222222;1pkt 1fpkt"];
2747--5508[label="0.0444444;2pkt 2fpkt"];
2747--5514[label="0.0222222;1pkt 1fpkt"];
2747--6878[label="1;12pkt 12fpkt"];
2747--6910[label="0.711111;32pkt 32fpkt"];
2747--8457[label="1;12pkt 12fpkt"];
2747--9142[label="1;12pkt 12fpkt"];
3954--5444[label="0.466667;35pkt 35fpkt"];
3954--5481[label="0.466667;35pkt 35fpkt"];
3954--6910[label="1;75pkt 75fpkt"];
4898--6910[label="0.181818;2pkt 2fpkt"];
4902--5454[label="0.0465116;2pkt 2fpkt"];
4902--5487[label="0.0465116;2pkt 2fpkt"];
4902--5508[label="0.0465116;2pkt 2fpkt"];
4902--6878[label="1;12pkt 12fpkt"];
4902--6910[label="0.697674;30pkt 30fpkt"];
4902--8457[label="1;12pkt 12fpkt"];
4902--9142[label="1;12pkt 12fpkt"];
5968--8028[label="1;2pkt 2fpkt"];
5968--8979[label="1;1pkt 1fpkt"];
6878--8457[label="1;12pkt 12fpkt"];
6878--9142[label="1;12pkt 12fpkt"];
8028--8979[label="1;1pkt 1fpkt"];
8457--9142[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.132.216" dst_port="80" src_ip="90.82.81.141"/>
      <filter dst_ip="169.16.12.32" dst_port="80" src_ip="90.82.81.141"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.106.66.138"/>
    </slice>
    <from sec="1201928600" usec="0"/>
    <to sec="1201928717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
3764[label="20.94.181.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
6895[label="20.94.181.139;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8465[label="20.94.181.139;1pkt 1fpkt", shape=invtriangle, color=brown];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.94.181.139:3076, 194.245.35.1:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3076: (50%)&gt;];
}
3764--6895[label="1;1pkt 1fpkt"];
3764--8465[label="1;1pkt 1fpkt"];
6895--8465[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.35.1" dst_port="8080" src_ip="20.94.181.139" src_port="3076"/>
    </slice>
    <from sec="1201929147" usec="0"/>
    <to sec="1201929172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.172.39.140"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.242.140"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.1.112.143"/>
    </slice>
    <from sec="1201928433" usec="0"/>
    <to sec="1201928620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.232.217.144"/>
    </slice>
    <from sec="1201928874" usec="0"/>
    <to sec="1201928928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.48.0.145"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.171.40.145"/>
    </slice>
    <from sec="1201928694" usec="0"/>
    <to sec="1201928703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.89.58.146"/>
    </slice>
    <from sec="1201928429" usec="0"/>
    <to sec="1201928461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.134.24.147"/>
    </slice>
    <from sec="1201928970" usec="0"/>
    <to sec="1201929258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.32.36.147"/>
    </slice>
    <from sec="1201928420" usec="0"/>
    <to sec="1201928431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.2.52.147"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201928698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.51.128.147"/>
    </slice>
    <from sec="1201929159" usec="0"/>
    <to sec="1201929281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
1784[label="141.54.184.219;s;17pkt 17fpkt", shape=diamond, color=yellow];
1814[label="141.54.163.50;s;81pkt 81fpkt", shape=diamond, color=yellow];
1883[label="17.155.100.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
4325[label="17.155.100.185;d;1pkt 1fpkt", shape=hexagon, color=black];
4690[label="141.54.184.219;s;13pkt 13fpkt", shape=hexagon, color=black];
6045[label="141.54.163.50;90pkt 90fpkt", shape=pentagon, color=darkviolet];
8064[label="141.54.163.50;90pkt 90fpkt", shape=invtriangle, color=brown];
8995[label="141.54.163.50;89pkt 89fpkt", shape=invhouse, color=bisque];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.163.50:*, 42.25.200.73:80}[30.8411%]&lt;BR/&gt;{141.54.163.50:*, 42.25.200.206:80}[22.4299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.822%)&lt;BR/&gt; 49954: (0.91623%)&lt;BR/&gt; 3437: (0.52356%)&lt;BR/&gt; 3436: (0.52356%)&lt;BR/&gt; 3401: (0.52356%)&gt;];
}
1784--1883[label="1;1pkt 1fpkt"];
1784--4325[label="1;1pkt 1fpkt"];
1784--4690[label="1;13pkt 13fpkt"];
1814--6045[label="1;81pkt 81fpkt"];
1814--8064[label="1;81pkt 81fpkt"];
1814--8995[label="1;81pkt 81fpkt"];
1883--4325[label="1;1pkt 1fpkt"];
1883--4690[label="1;1pkt 1fpkt"];
4325--4690[label="1;1pkt 1fpkt"];
6045--8064[label="1;90pkt 90fpkt"];
6045--8995[label="1;89pkt 89fpkt"];
8064--8995[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="42.25.200.73" dst_port="80" src_ip="141.54.163.50"/>
      <filter dst_ip="42.25.200.206" dst_port="80" src_ip="141.54.163.50"/>
    </slice>
    <from sec="1201928442" usec="0"/>
    <to sec="1201929289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.71.89.148"/>
    </slice>
    <from sec="1201928770" usec="0"/>
    <to sec="1201928823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.135.141.148"/>
    </slice>
    <from sec="1201928528" usec="0"/>
    <to sec="1201928955" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.145.5.149"/>
    </slice>
    <from sec="1201928519" usec="0"/>
    <to sec="1201929170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
1308[label="169.16.176.105;d;204pkt 204fpkt", shape=diamond, color=yellow];
4638[label="169.16.176.105;d;107pkt 107fpkt", shape=hexagon, color=black];
6287[label="34.52.107.73;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6388[label="44.90.43.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6983[label="44.84.49.149;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7787[label="34.56.5.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8227[label="44.90.43.83;1pkt 1fpkt", shape=invtriangle, color=brown];
8509[label="44.84.49.149;2pkt 2fpkt", shape=invtriangle, color=brown];
9056[label="44.90.43.83;1pkt 1fpkt", shape=invhouse, color=bisque];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 169.16.176.105:13750}[95.098%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13750: (47.1963%)&lt;BR/&gt; 45306: (2.64798%)&lt;BR/&gt; 13983: (1.55763%)&lt;BR/&gt; 13686: (0.934579%)&lt;BR/&gt; 47254: (0.778816%)&gt;];
}
1308--4169[label="0.00490196;1pkt 1fpkt"];
1308--4638[label="1;107pkt 107fpkt"];
1308--6287[label="1;1pkt 1fpkt"];
1308--6388[label="1;1pkt 1fpkt"];
1308--6983[label="1;2pkt 2fpkt"];
1308--7787[label="1;2pkt 2fpkt"];
1308--8227[label="1;1pkt 1fpkt"];
1308--8509[label="1;2pkt 2fpkt"];
1308--9056[label="1;1pkt 1fpkt"];
4638--6388[label="1;1pkt 1fpkt"];
4638--6983[label="0.5;1pkt 1fpkt"];
4638--7787[label="1;2pkt 2fpkt"];
4638--8227[label="1;1pkt 1fpkt"];
4638--8509[label="0.5;1pkt 1fpkt"];
4638--9056[label="1;1pkt 1fpkt"];
6388--8227[label="1;1pkt 1fpkt"];
6388--9056[label="1;1pkt 1fpkt"];
6983--8509[label="1;2pkt 2fpkt"];
8227--9056[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.176.105" dst_port="13750"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.155.240.149"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.74.185.150"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201929291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.201.190.151"/>
    </slice>
    <from sec="1201929108" usec="0"/>
    <to sec="1201929178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
2018[label="195.178.85.47;d;36pkt 36fpkt", shape=diamond, color=yellow];
7014[label="18.198.244.151;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 195.178.85.47:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4987: (2.43902%)&lt;BR/&gt; 4971: (2.43902%)&lt;BR/&gt; 4963: (2.43902%)&lt;BR/&gt; 4921: (2.43902%)&gt;];
}
2018--5473[label="0.0833333;3pkt 3fpkt"];
2018--5499[label="0.0833333;3pkt 3fpkt"];
2018--5517[label="0.0833333;3pkt 3fpkt"];
2018--7014[label="1;5pkt 5fpkt"];
2018--7447[label="0.285714;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.85.47" src_port="80"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.188.63.152"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.172.200.152"/>
    </slice>
    <from sec="1201928731" usec="0"/>
    <to sec="1201928734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.245.44.154"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.187.207.154"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.12.230.156"/>
    </slice>
    <from sec="1201928427" usec="0"/>
    <to sec="1201929288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.162.160.157"/>
    </slice>
    <from sec="1201929175" usec="0"/>
    <to sec="1201929197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.94.227.157"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.43.128.158"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.201.36.160"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201928434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.251.90.160"/>
    </slice>
    <from sec="1201928521" usec="0"/>
    <to sec="1201929168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.239.29.161"/>
    </slice>
    <from sec="1201929261" usec="0"/>
    <to sec="1201929297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.142.172.161"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.166.78.162"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.131.107.162"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
7107[label="141.54.139.162;252pkt 252fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.139.162:53, *:*}[93.254%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.8095%)&lt;BR/&gt; 25: (2.97619%)&lt;BR/&gt; 32768: (1.5873%)&lt;BR/&gt; 32829: (0.595238%)&lt;BR/&gt; 32769: (0.595238%)&gt;];
}
</description>
    <slice>
      <filter src_ip="141.54.139.162" src_port="53"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.206.34.163"/>
    </slice>
    <from sec="1201928755" usec="0"/>
    <to sec="1201928768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
6405[label="169.16.92.84;11pkt 11fpkt", shape=pentagon, color=darkviolet];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.92.84:*, 89.101.74.122:80}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50965: (4.54545%)&lt;BR/&gt; 50958: (4.54545%)&lt;BR/&gt; 50957: (4.54545%)&lt;BR/&gt; 50956: (4.54545%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="89.101.74.122" dst_port="80" src_ip="169.16.92.84"/>
    </slice>
    <from sec="1201928566" usec="0"/>
    <to sec="1201928616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.200.232.163"/>
    </slice>
    <from sec="1201928984" usec="0"/>
    <to sec="1201929146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="169.16.16.164"/>
    </slice>
    <from sec="1201928460" usec="0"/>
    <to sec="1201928770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.155.109.164"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.104.170.164"/>
    </slice>
    <from sec="1201928858" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.144.221.166"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.61.100.167"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.43.106.167"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.154.212.167"/>
    </slice>
    <from sec="1201929263" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.34.128.168"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201928548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.184.169"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.130.54.170"/>
    </slice>
    <from sec="1201928714" usec="0"/>
    <to sec="1201928716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
2263[label="44.117.53.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
7186[label="44.117.53.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8605[label="44.117.53.171;1pkt 1fpkt", shape=invtriangle, color=brown];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.117.53.171:80, 138.43.144.50:1619}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1619: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2263--7186[label="1;1pkt 1fpkt"];
2263--8605[label="1;1pkt 1fpkt"];
7186--8605[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.144.50" dst_port="1619" src_ip="44.117.53.171" src_port="80"/>
    </slice>
    <from sec="1201928751" usec="0"/>
    <to sec="1201928829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.129.65.171"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.195.233.171"/>
    </slice>
    <from sec="1201928422" usec="0"/>
    <to sec="1201929282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="90.103.84.173"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.234.51.175"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.245.58.175"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.184.176"/>
    </slice>
    <from sec="1201928487" usec="0"/>
    <to sec="1201928931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.85.49.177"/>
    </slice>
    <from sec="1201929245" usec="0"/>
    <to sec="1201929248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="138.43.150.178"/>
    </slice>
    <from sec="1201929171" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.28.39.182"/>
    </slice>
    <from sec="1201928916" usec="0"/>
    <to sec="1201928920" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.209.107.182"/>
    </slice>
    <from sec="1201928417" usec="0"/>
    <to sec="1201929255" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.50.128.182"/>
    </slice>
    <from sec="1201928569" usec="0"/>
    <to sec="1201928571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.54.245.182"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.210.37.183"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
1932[label="138.43.151.183;s;1464pkt 1464fpkt", shape=diamond, color=yellow];
7294[label="138.43.151.183;1695pkt 1695fpkt", shape=pentagon, color=darkviolet];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.151.183:59522, *:*}[98.2891%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59522: (49.3194%)&lt;BR/&gt; 80: (0.316556%)&lt;BR/&gt; 443: (0.269072%)&lt;BR/&gt; 61238: (0.0633112%)&lt;BR/&gt; 60115: (0.0633112%)&gt;];
}
1932--4187[label="0.00763359;1pkt 1fpkt"];
1932--5444[label="0.00136612;2pkt 2fpkt"];
1932--5481[label="0.00136612;2pkt 2fpkt"];
1932--7294[label="1;1464pkt 1464fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.151.183" src_port="59522"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.121.130.184"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.113.5.188"/>
    </slice>
    <from sec="1201928470" usec="0"/>
    <to sec="1201928481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.88.156.189"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.89.83.191"/>
    </slice>
    <from sec="1201928750" usec="0"/>
    <to sec="1201928785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.23.46.192"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.239.100.193"/>
    </slice>
    <from sec="1201928515" usec="0"/>
    <to sec="1201928577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.161.107.193"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.188.63.194"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.200.34.195"/>
    </slice>
    <from sec="1201928642" usec="0"/>
    <to sec="1201928725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.252.142.195"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.102.170.195"/>
    </slice>
    <from sec="1201929287" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.237.196.196"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.177.96.199"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="27.239.100.199"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="93.84.14.200"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.53.192.201"/>
    </slice>
    <from sec="1201929008" usec="0"/>
    <to sec="1201929274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.67.176.202"/>
    </slice>
    <from sec="1201929248" usec="0"/>
    <to sec="1201929252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.107.240.202"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="28.94.128.204"/>
    </slice>
    <from sec="1201928443" usec="0"/>
    <to sec="1201929241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.158.132.205"/>
    </slice>
    <from sec="1201929163" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.173.164.205"/>
    </slice>
    <from sec="1201929156" usec="0"/>
    <to sec="1201929180" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.67.89.206"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.120.98.206"/>
    </slice>
    <from sec="1201928425" usec="0"/>
    <to sec="1201929284" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="1.60.85.209"/>
    </slice>
    <from sec="1201929086" usec="0"/>
    <to sec="1201929094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.94.144.210"/>
    </slice>
    <from sec="1201928668" usec="0"/>
    <to sec="1201929004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
3182[label="141.54.190.210;s;188pkt 188fpkt", shape=diamond, color=yellow];
7503[label="141.54.190.210;201pkt 201fpkt", shape=pentagon, color=darkviolet];
8751[label="141.54.190.210;201pkt 201fpkt", shape=invtriangle, color=brown];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.190.210:53, *:*}[64.6766%]&lt;BR/&gt;{141.54.190.210:49733, *:53}[26.8657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.5763%)&lt;BR/&gt; 49733: (13.3898%)&lt;BR/&gt; 0: (3.38983%)&lt;BR/&gt; 25: (2.28814%)&lt;BR/&gt; 32768: (1.35593%)&gt;];
}
3182--4562[label="0.0277778;1pkt 1fpkt"];
3182--4593[label="0.0188679;1pkt 1fpkt"];
3182--4613[label="0.0192308;1pkt 1fpkt"];
3182--4772[label="0.0238095;1pkt 1fpkt"];
3182--4836[label="0.00917431;1pkt 1fpkt"];
3182--4964[label="0.00787402;1pkt 1fpkt"];
3182--5032[label="0.00719424;1pkt 1fpkt"];
3182--5158[label="0.00680272;1pkt 1fpkt"];
3182--5230[label="0.00813008;1pkt 1fpkt"];
3182--5453[label="0.0691489;13pkt 13fpkt"];
3182--5471[label="0.00531915;1pkt 1fpkt"];
3182--5475[label="0.00531915;1pkt 1fpkt"];
3182--5477[label="0.00531915;1pkt 1fpkt"];
3182--5486[label="0.0691489;13pkt 13fpkt"];
3182--5497[label="0.00531915;1pkt 1fpkt"];
3182--5502[label="0.00531915;1pkt 1fpkt"];
3182--5504[label="0.00531915;1pkt 1fpkt"];
3182--5507[label="0.0691489;13pkt 13fpkt"];
3182--5515[label="0.00531915;1pkt 1fpkt"];
3182--5520[label="0.00531915;1pkt 1fpkt"];
3182--7503[label="1;188pkt 188fpkt"];
3182--8751[label="1;188pkt 188fpkt"];
7503--8751[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter src_ip="141.54.190.210" src_port="53"/>
      <filter dst_port="53" src_ip="141.54.190.210" src_port="49733"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
3597[label="138.43.182.20;d;56pkt 56fpkt", shape=diamond, color=yellow];
7513[label="210.22.128.211;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{44.111.85.65:*, 138.43.182.20:37413}[26.7857%]&lt;BR/&gt;{*:*, 138.43.182.20:443}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37413: (37.3016%)&lt;BR/&gt; 443: (10.3175%)&lt;BR/&gt; 80: (2.38095%)&lt;BR/&gt; 22481: (1.5873%)&lt;BR/&gt; 22005: (1.5873%)&gt;];
}
3597--5462[label="0.0178571;1pkt 1fpkt"];
3597--5473[label="0.0178571;1pkt 1fpkt"];
3597--5490[label="0.0178571;1pkt 1fpkt"];
3597--5499[label="0.0178571;1pkt 1fpkt"];
3597--5510[label="0.0178571;1pkt 1fpkt"];
3597--5517[label="0.0178571;1pkt 1fpkt"];
3597--7513[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.182.20" dst_port="443"/>
      <filter dst_ip="138.43.182.20" dst_port="37413" src_ip="44.111.85.65"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.244.214.211"/>
    </slice>
    <from sec="1201928479" usec="0"/>
    <to sec="1201929109" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.109.236.212"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.100.61.213"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.104.74.214"/>
    </slice>
    <from sec="1201928890" usec="0"/>
    <to sec="1201928904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.233.186.214"/>
    </slice>
    <from sec="1201929284" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.585909,2.13702,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
2762[label="141.54.40.0;d;16pkt 16fpkt", shape=diamond, color=yellow];
7558[label="211.55.38.216;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.192.145.154:80, 141.54.40.0:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4621: (5.55556%)&lt;BR/&gt; 4620: (5.55556%)&lt;BR/&gt; 4629: (2.77778%)&lt;BR/&gt; 4624: (2.77778%)&gt;];
}
2762--7558[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.40.0" src_ip="195.192.145.154" src_port="80"/>
    </slice>
    <from sec="1201928867" usec="0"/>
    <to sec="1201928928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.27.163.216"/>
    </slice>
    <from sec="1201928565" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.162.202.216"/>
    </slice>
    <from sec="1201928554" usec="0"/>
    <to sec="1201928559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.4.234.216"/>
    </slice>
    <from sec="1201928880" usec="0"/>
    <to sec="1201929196" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.93.41.219"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.200.128.219"/>
    </slice>
    <from sec="1201928650" usec="0"/>
    <to sec="1201928791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.203.22.220"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.141.112.220"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.115.58.221"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.95.215.222"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.117.58.223"/>
    </slice>
    <from sec="1201928575" usec="0"/>
    <to sec="1201928586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.19.178.223"/>
    </slice>
    <from sec="1201928950" usec="0"/>
    <to sec="1201928976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.4.13.224"/>
    </slice>
    <from sec="1201928408" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.2.12.226"/>
    </slice>
    <from sec="1201929254" usec="0"/>
    <to sec="1201929263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="48.27.80.226"/>
    </slice>
    <from sec="1201929180" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.194.100.226"/>
    </slice>
    <from sec="1201928755" usec="0"/>
    <to sec="1201928822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.244.226.226"/>
    </slice>
    <from sec="1201928668" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.75.83.228"/>
    </slice>
    <from sec="1201928435" usec="0"/>
    <to sec="1201928894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.30.190.228"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.101.150.229"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_599{
style=filled;
color=gray75;
3242[label="169.16.16.231;s;15pkt 15fpkt", shape=diamond, color=yellow];
7672[label="169.16.16.231;31pkt 31fpkt", shape=pentagon, color=darkviolet];
8830[label="169.16.16.231;31pkt 31fpkt", shape=invtriangle, color=brown];
stat599[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.16.231:59534, *:*}[61.2903%]&lt;BR/&gt;{169.16.16.231:*, *:80}[29.0323%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59534: (33.1169%)&lt;BR/&gt; 80: (11.6883%)&lt;BR/&gt; 65358: (1.94805%)&lt;BR/&gt; 65357: (1.94805%)&lt;BR/&gt; 49739: (1.94805%)&gt;];
}
3242--7672[label="1;15pkt 15fpkt"];
3242--8830[label="1;15pkt 15fpkt"];
7672--8830[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.16.231" src_port="59534"/>
      <filter dst_port="80" src_ip="169.16.16.231"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.105.1.232"/>
    </slice>
    <from sec="1201928715" usec="0"/>
    <to sec="1201928821" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.166.28.234"/>
    </slice>
    <from sec="1201928573" usec="0"/>
    <to sec="1201928596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.89.199.234"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.140.2.235"/>
    </slice>
    <from sec="1201928818" usec="0"/>
    <to sec="1201929235" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.143.100.235"/>
    </slice>
    <from sec="1201929073" usec="0"/>
    <to sec="1201929094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
778[label="138.43.180.209;s;1823pkt 1823fpkt", shape=diamond, color=yellow];
4412[label="138.43.180.209;s;1158pkt 1158fpkt", shape=hexagon, color=black];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.180.209:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51078: (0.100637%)&lt;BR/&gt; 64742: (0.0838645%)&lt;BR/&gt; 50690: (0.0838645%)&lt;BR/&gt; 65417: (0.0670916%)&gt;];
}
778--2655[label="0.0196078;1pkt 1fpkt"];
778--4412[label="1;1158pkt 1158fpkt"];
778--5462[label="0.0702139;128pkt 128fpkt"];
778--5473[label="0.0608886;111pkt 111fpkt"];
778--5490[label="0.0702139;128pkt 128fpkt"];
778--5499[label="0.0608886;111pkt 111fpkt"];
778--5510[label="0.0702139;128pkt 128fpkt"];
778--5517[label="0.0608886;111pkt 111fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.180.209" src_port="80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
230[label="141.54.59.136;d;1563pkt 1563fpkt", shape=diamond, color=yellow];
718[label="134.214.125.50;s;144pkt 144fpkt", shape=diamond, color=yellow];
736[label="209.49.80.89;s;3pkt 3fpkt", shape=diamond, color=yellow];
738[label="202.230.71.243;s;93pkt 93fpkt", shape=diamond, color=yellow];
740[label="209.49.80.109;s;187pkt 187fpkt", shape=diamond, color=yellow];
745[label="29.132.179.238;s;204pkt 204fpkt", shape=diamond, color=yellow];
853[label="195.219.37.245;s;52pkt 52fpkt", shape=diamond, color=yellow];
891[label="221.69.234.1;s;54pkt 54fpkt", shape=diamond, color=yellow];
932[label="21.25.37.143;s;20pkt 20fpkt", shape=diamond, color=yellow];
973[label="221.165.20.219;s;76pkt 76fpkt", shape=diamond, color=yellow];
1009[label="88.2.229.167;s;24pkt 24fpkt", shape=diamond, color=yellow];
1361[label="141.54.40.136;d;50pkt 50fpkt", shape=diamond, color=yellow];
1460[label="209.9.88.213;s;9pkt 9fpkt", shape=diamond, color=yellow];
1464[label="195.52.161.33;s;4pkt 4fpkt", shape=diamond, color=yellow];
1487[label="169.16.16.54;d;2pkt 2fpkt", shape=diamond, color=yellow];
1606[label="221.69.244.147;s;93pkt 93fpkt", shape=diamond, color=yellow];
1783[label="221.69.244.148;s;19pkt 19fpkt", shape=diamond, color=yellow];
2514[label="194.35.237.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
2858[label="70.39.15.137;s;31pkt 31fpkt", shape=diamond, color=yellow];
3254[label="209.138.96.145;s;12pkt 12fpkt", shape=diamond, color=yellow];
3782[label="134.214.125.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
3919[label="209.49.80.89;s;7pkt 7fpkt", shape=hexagon, color=black];
3946[label="195.219.37.245;s;28pkt 28fpkt", shape=hexagon, color=black];
3956[label="221.69.234.1;s;36pkt 36fpkt", shape=hexagon, color=black];
3974[label="221.165.20.219;s;46pkt 46fpkt", shape=hexagon, color=black];
4071[label="29.132.179.238;s;72pkt 72fpkt", shape=hexagon, color=black];
4459[label="141.54.40.136;d;50pkt 50fpkt", shape=hexagon, color=black];
4527[label="141.54.59.136;d;1046pkt 1046fpkt", shape=hexagon, color=black];
4747[label="194.35.237.84;s;1pkt 1fpkt", shape=hexagon, color=black];
4914[label="88.2.229.167;s;24pkt 24fpkt", shape=hexagon, color=black];
5548[label="221.69.234.1;56pkt 56fpkt", shape=pentagon, color=darkviolet];
5884[label="195.52.161.33;10pkt 10fpkt", shape=pentagon, color=darkviolet];
5954[label="208.181.45.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
6043[label="134.214.125.50;144pkt 144fpkt", shape=pentagon, color=darkviolet];
6272[label="198.238.105.72;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6416[label="194.35.237.84;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6463[label="25.116.89.88;4pkt 4fpkt", shape=pentagon, color=darkviolet];
6476[label="209.49.80.89;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6669[label="209.49.80.109;194pkt 194fpkt", shape=pentagon, color=darkviolet];
6707[label="221.69.234.114;13pkt 13fpkt", shape=pentagon, color=darkviolet];
6877[label="70.39.15.137;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6920[label="1.164.6.143;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6921[label="21.25.37.143;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6939[label="209.138.96.145;14pkt 14fpkt", shape=pentagon, color=darkviolet];
6968[label="221.69.244.147;96pkt 96fpkt", shape=pentagon, color=darkviolet];
6980[label="221.69.244.148;24pkt 24fpkt", shape=pentagon, color=darkviolet];
7090[label="6.246.199.160;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7136[label="22.201.187.164;11pkt 11fpkt", shape=pentagon, color=darkviolet];
7416[label="202.230.71.199;7pkt 7fpkt", shape=pentagon, color=darkviolet];
7457[label="18.133.139.204;40pkt 40fpkt", shape=pentagon, color=darkviolet];
7517[label="220.63.150.211;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7536[label="209.9.88.213;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7602[label="26.206.88.220;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7724[label="29.132.179.238;222pkt 222fpkt", shape=pentagon, color=darkviolet];
7838[label="221.69.234.1;55pkt 55fpkt", shape=invtriangle, color=brown];
7991[label="195.52.161.33;10pkt 10fpkt", shape=invtriangle, color=brown];
8021[label="208.181.45.40;2pkt 2fpkt", shape=invtriangle, color=brown];
8163[label="198.238.105.72;4pkt 4fpkt", shape=invtriangle, color=brown];
8481[label="21.25.37.143;21pkt 21fpkt", shape=invtriangle, color=brown];
8505[label="221.69.244.147;96pkt 96fpkt", shape=invtriangle, color=brown];
8577[label="22.201.187.164;11pkt 11fpkt", shape=invtriangle, color=brown];
8731[label="18.133.139.204;40pkt 40fpkt", shape=invtriangle, color=brown];
8788[label="26.206.88.220;1pkt 1fpkt", shape=invtriangle, color=brown];
8856[label="29.132.179.238;222pkt 222fpkt", shape=invtriangle, color=brown];
8967[label="195.52.161.33;9pkt 9fpkt", shape=invhouse, color=bisque];
8977[label="208.181.45.40;2pkt 2fpkt", shape=invhouse, color=bisque];
9164[label="221.69.244.147;96pkt 96fpkt", shape=invhouse, color=bisque];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 141.54.59.136:*}[89.3433%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1488%)&lt;BR/&gt; 33437: (0.256269%)&lt;BR/&gt; 33439: (0.210507%)&lt;BR/&gt; 33436: (0.210507%)&lt;BR/&gt; 443: (0.128135%)&gt;];
}
230--261[label="0.00858369;2pkt 2fpkt"];
230--551[label="0.00356295;3pkt 3fpkt"];
230--604[label="0.000649773;1pkt 1fpkt"];
230--718[label="1;144pkt 144fpkt"];
230--736[label="1;3pkt 3fpkt"];
230--738[label="1;93pkt 93fpkt"];
230--740[label="1;187pkt 187fpkt"];
230--745[label="0.946078;193pkt 193fpkt"];
230--828[label="0.20122;132pkt 132fpkt"];
230--853[label="1;52pkt 52fpkt"];
230--857[label="0.0324074;7pkt 7fpkt"];
230--872[label="0.00606061;1pkt 1fpkt"];
230--891[label="0.740741;40pkt 40fpkt"];
230--932[label="1;20pkt 20fpkt"];
230--973[label="1;76pkt 76fpkt"];
230--1009[label="1;24pkt 24fpkt"];
230--1213[label="0.237705;29pkt 29fpkt"];
230--1368[label="0.0113636;1pkt 1fpkt"];
230--1380[label="0.0305344;4pkt 4fpkt"];
230--1460[label="1;9pkt 9fpkt"];
230--1606[label="1;93pkt 93fpkt"];
230--1645[label="0.043956;4pkt 4fpkt"];
230--1674[label="0.0222222;2pkt 2fpkt"];
230--1733[label="0.025;2pkt 2fpkt"];
230--1763[label="0.0106383;1pkt 1fpkt"];
230--1783[label="0.210526;4pkt 4fpkt"];
230--1787[label="0.00613497;1pkt 1fpkt"];
230--2056[label="0.00917431;1pkt 1fpkt"];
230--2081[label="0.011236;1pkt 1fpkt"];
230--2365[label="0.00892857;1pkt 1fpkt"];
230--2514[label="1;1pkt 1fpkt"];
230--2858[label="1;31pkt 31fpkt"];
230--3054[label="0.05;1pkt 1fpkt"];
230--3254[label="1;12pkt 12fpkt"];
230--3276[label="0.0277778;1pkt 1fpkt"];
230--3647[label="0.0666667;1pkt 1fpkt"];
230--3782[label="1;1pkt 1fpkt"];
230--3919[label="1;7pkt 7fpkt"];
230--3946[label="1;28pkt 28fpkt"];
230--3948[label="0.0519481;4pkt 4fpkt"];
230--3956[label="0.722222;26pkt 26fpkt"];
230--3974[label="1;46pkt 46fpkt"];
230--4033[label="0.00414938;1pkt 1fpkt"];
230--4071[label="0.902778;65pkt 65fpkt"];
230--4450[label="0.0111111;1pkt 1fpkt"];
230--4460[label="0.0263158;1pkt 1fpkt"];
230--4461[label="0.0344828;1pkt 1fpkt"];
230--4478[label="0.0181818;1pkt 1fpkt"];
230--4527[label="1;1046pkt 1046fpkt"];
230--4612[label="0.0517241;3pkt 3fpkt"];
230--4657[label="0.0344828;1pkt 1fpkt"];
230--4747[label="1;1pkt 1fpkt"];
230--4807[label="0.25974;20pkt 20fpkt"];
230--4914[label="1;24pkt 24fpkt"];
230--5191[label="0.05;1pkt 1fpkt"];
230--5225[label="0.00858369;2pkt 2fpkt"];
230--5462[label="0.0582214;91pkt 91fpkt"];
230--5473[label="0.0639795;100pkt 100fpkt"];
230--5490[label="0.0582214;91pkt 91fpkt"];
230--5499[label="0.0639795;100pkt 100fpkt"];
230--5510[label="0.0582214;91pkt 91fpkt"];
230--5517[label="0.0639795;100pkt 100fpkt"];
230--5548[label="0.714286;40pkt 40fpkt"];
230--5642[label="0.0434783;1pkt 1fpkt"];
230--5954[label="0.5;1pkt 1fpkt"];
230--6043[label="1;144pkt 144fpkt"];
230--6272[label="0.5;2pkt 2fpkt"];
230--6416[label="1;1pkt 1fpkt"];
230--6463[label="0.5;2pkt 2fpkt"];
230--6476[label="0.9;9pkt 9fpkt"];
230--6669[label="0.963918;187pkt 187fpkt"];
230--6707[label="0.846154;11pkt 11fpkt"];
230--6798[label="0.00549451;1pkt 1fpkt"];
230--6877[label="0.857143;30pkt 30fpkt"];
230--6920[label="1;9pkt 9fpkt"];
230--6921[label="0.952381;20pkt 20fpkt"];
230--6939[label="1;14pkt 14fpkt"];
230--6968[label="0.958333;92pkt 92fpkt"];
230--6980[label="0.375;9pkt 9fpkt"];
230--7090[label="1;4pkt 4fpkt"];
230--7136[label="1;11pkt 11fpkt"];
230--7170[label="0.000639795;1pkt 1fpkt"];
230--7247[label="0.00862069;1pkt 1fpkt"];
230--7255[label="0.012987;1pkt 1fpkt"];
230--7385[label="0.0227273;1pkt 1fpkt"];
230--7416[label="0.857143;6pkt 6fpkt"];
230--7462[label="0.0103093;1pkt 1fpkt"];
230--7509[label="0.00806452;1pkt 1fpkt"];
230--7517[label="0.875;7pkt 7fpkt"];
230--7536[label="0.833333;10pkt 10fpkt"];
230--7602[label="1;1pkt 1fpkt"];
230--7724[label="0.869369;193pkt 193fpkt"];
230--7838[label="0.727273;40pkt 40fpkt"];
230--8021[label="0.5;1pkt 1fpkt"];
230--8163[label="0.5;2pkt 2fpkt"];
230--8429[label="0.00549451;1pkt 1fpkt"];
230--8481[label="0.952381;20pkt 20fpkt"];
230--8505[label="0.958333;92pkt 92fpkt"];
230--8577[label="1;11pkt 11fpkt"];
230--8630[label="0.00862069;1pkt 1fpkt"];
230--8733[label="0.0103093;1pkt 1fpkt"];
230--8754[label="0.00806452;1pkt 1fpkt"];
230--8788[label="1;1pkt 1fpkt"];
230--8856[label="0.869369;193pkt 193fpkt"];
230--8977[label="0.5;1pkt 1fpkt"];
230--9134[label="0.00549451;1pkt 1fpkt"];
230--9164[label="0.958333;92pkt 92fpkt"];
718--4527[label="0.729167;105pkt 105fpkt"];
718--5462[label="0.0833333;12pkt 12fpkt"];
718--5473[label="0.0763889;11pkt 11fpkt"];
718--5490[label="0.0833333;12pkt 12fpkt"];
718--5499[label="0.0763889;11pkt 11fpkt"];
718--5510[label="0.0833333;12pkt 12fpkt"];
718--5517[label="0.0763889;11pkt 11fpkt"];
718--6043[label="1;144pkt 144fpkt"];
736--5462[label="0.333333;1pkt 1fpkt"];
736--5490[label="0.333333;1pkt 1fpkt"];
736--5510[label="0.333333;1pkt 1fpkt"];
736--6476[label="1;3pkt 3fpkt"];
738--4527[label="0.645161;60pkt 60fpkt"];
738--5462[label="0.0645161;6pkt 6fpkt"];
738--5473[label="0.0860215;8pkt 8fpkt"];
738--5490[label="0.0645161;6pkt 6fpkt"];
738--5499[label="0.0860215;8pkt 8fpkt"];
738--5510[label="0.0645161;6pkt 6fpkt"];
738--5517[label="0.0860215;8pkt 8fpkt"];
740--4527[label="0.57754;108pkt 108fpkt"];
740--5462[label="0.0534759;10pkt 10fpkt"];
740--5473[label="0.0855615;16pkt 16fpkt"];
740--5490[label="0.0534759;10pkt 10fpkt"];
740--5499[label="0.0855615;16pkt 16fpkt"];
740--5510[label="0.0534759;10pkt 10fpkt"];
740--5517[label="0.0855615;16pkt 16fpkt"];
740--6669[label="1;187pkt 187fpkt"];
745--4071[label="1;72pkt 72fpkt"];
745--4527[label="0.588235;120pkt 120fpkt"];
745--5462[label="0.0637255;13pkt 13fpkt"];
745--5473[label="0.0588235;12pkt 12fpkt"];
745--5490[label="0.0637255;13pkt 13fpkt"];
745--5499[label="0.0588235;12pkt 12fpkt"];
745--5510[label="0.0637255;13pkt 13fpkt"];
745--5517[label="0.0588235;12pkt 12fpkt"];
745--7724[label="1;204pkt 204fpkt"];
745--8856[label="1;204pkt 204fpkt"];
853--3946[label="1;28pkt 28fpkt"];
853--4527[label="0.730769;38pkt 38fpkt"];
853--5462[label="0.0384615;2pkt 2fpkt"];
853--5473[label="0.0384615;2pkt 2fpkt"];
853--5490[label="0.0384615;2pkt 2fpkt"];
853--5499[label="0.0384615;2pkt 2fpkt"];
853--5510[label="0.0384615;2pkt 2fpkt"];
853--5517[label="0.0384615;2pkt 2fpkt"];
891--1353[label="0.0185185;1pkt 1fpkt"];
891--2122[label="0.0185185;1pkt 1fpkt"];
891--2727[label="0.142857;1pkt 1fpkt"];
891--3712[label="0.037037;2pkt 2fpkt"];
891--3844[label="0.0185185;1pkt 1fpkt"];
891--3956[label="1;36pkt 36fpkt"];
891--4527[label="0.555556;30pkt 30fpkt"];
891--4656[label="0.0204082;1pkt 1fpkt"];
891--5462[label="0.0740741;4pkt 4fpkt"];
891--5473[label="0.0555556;3pkt 3fpkt"];
891--5490[label="0.0740741;4pkt 4fpkt"];
891--5499[label="0.0555556;3pkt 3fpkt"];
891--5510[label="0.0740741;4pkt 4fpkt"];
891--5517[label="0.0555556;3pkt 3fpkt"];
891--5548[label="1;54pkt 54fpkt"];
891--7838[label="0.981481;53pkt 53fpkt"];
932--4527[label="0.8;16pkt 16fpkt"];
932--5462[label="0.1;2pkt 2fpkt"];
932--5473[label="0.1;2pkt 2fpkt"];
932--5490[label="0.1;2pkt 2fpkt"];
932--5499[label="0.1;2pkt 2fpkt"];
932--5510[label="0.1;2pkt 2fpkt"];
932--5517[label="0.1;2pkt 2fpkt"];
932--6921[label="1;20pkt 20fpkt"];
932--8481[label="1;20pkt 20fpkt"];
973--3974[label="1;46pkt 46fpkt"];
973--4527[label="0.605263;46pkt 46fpkt"];
973--5462[label="0.0526316;4pkt 4fpkt"];
973--5473[label="0.0789474;6pkt 6fpkt"];
973--5490[label="0.0526316;4pkt 4fpkt"];
973--5499[label="0.0789474;6pkt 6fpkt"];
973--5510[label="0.0526316;4pkt 4fpkt"];
973--5517[label="0.0789474;6pkt 6fpkt"];
1009--4527[label="0.875;21pkt 21fpkt"];
1009--4914[label="1;24pkt 24fpkt"];
1009--5462[label="0.125;3pkt 3fpkt"];
1009--5473[label="0.125;3pkt 3fpkt"];
1009--5490[label="0.125;3pkt 3fpkt"];
1009--5499[label="0.125;3pkt 3fpkt"];
1009--5510[label="0.125;3pkt 3fpkt"];
1009--5517[label="0.125;3pkt 3fpkt"];
1361--1464[label="0.5;2pkt 2fpkt"];
1361--1690[label="0.04;2pkt 2fpkt"];
1361--1783[label="0.526316;10pkt 10fpkt"];
1361--1800[label="0.04;2pkt 2fpkt"];
1361--3948[label="0.04;2pkt 2fpkt"];
1361--4459[label="1;50pkt 50fpkt"];
1361--5884[label="0.2;2pkt 2fpkt"];
1361--6780[label="0.037037;1pkt 1fpkt"];
1361--6980[label="0.416667;10pkt 10fpkt"];
1361--7353[label="0.04;2pkt 2fpkt"];
1361--7457[label="0.1;4pkt 4fpkt"];
1361--7991[label="0.2;2pkt 2fpkt"];
1361--8731[label="0.1;4pkt 4fpkt"];
1361--8967[label="0.222222;2pkt 2fpkt"];
1460--4527[label="1;9pkt 9fpkt"];
1460--5462[label="0.222222;2pkt 2fpkt"];
1460--5490[label="0.222222;2pkt 2fpkt"];
1460--5510[label="0.222222;2pkt 2fpkt"];
1460--7536[label="0.888889;8pkt 8fpkt"];
1464--1487[label="1;2pkt 2fpkt"];
1464--4459[label="0.5;2pkt 2fpkt"];
1464--5884[label="1;4pkt 4fpkt"];
1464--7991[label="1;4pkt 4fpkt"];
1464--8967[label="1;4pkt 4fpkt"];
1487--5884[label="1;2pkt 2fpkt"];
1487--7991[label="1;2pkt 2fpkt"];
1487--8967[label="1;2pkt 2fpkt"];
1606--4527[label="0.634409;59pkt 59fpkt"];
1606--5462[label="0.0752688;7pkt 7fpkt"];
1606--5473[label="0.0645161;6pkt 6fpkt"];
1606--5490[label="0.0752688;7pkt 7fpkt"];
1606--5499[label="0.0645161;6pkt 6fpkt"];
1606--5510[label="0.0752688;7pkt 7fpkt"];
1606--5517[label="0.0645161;6pkt 6fpkt"];
1606--6968[label="0.989247;92pkt 92fpkt"];
1606--8505[label="0.989247;92pkt 92fpkt"];
1606--9164[label="0.989247;92pkt 92fpkt"];
1783--4459[label="0.526316;10pkt 10fpkt"];
1783--4527[label="0.210526;4pkt 4fpkt"];
1783--6980[label="1;19pkt 19fpkt"];
2514--4527[label="1;1pkt 1fpkt"];
2514--4747[label="1;1pkt 1fpkt"];
2514--6416[label="1;1pkt 1fpkt"];
2858--4527[label="0.645161;20pkt 20fpkt"];
2858--5462[label="0.0322581;1pkt 1fpkt"];
2858--5473[label="0.0322581;1pkt 1fpkt"];
2858--5490[label="0.0322581;1pkt 1fpkt"];
2858--5499[label="0.0322581;1pkt 1fpkt"];
2858--5510[label="0.0322581;1pkt 1fpkt"];
2858--5517[label="0.0322581;1pkt 1fpkt"];
2858--6877[label="0.967742;30pkt 30fpkt"];
3254--4527[label="0.833333;10pkt 10fpkt"];
3254--5462[label="0.0833333;1pkt 1fpkt"];
3254--5490[label="0.0833333;1pkt 1fpkt"];
3254--5510[label="0.0833333;1pkt 1fpkt"];
3254--6939[label="1;12pkt 12fpkt"];
3919--4527[label="1;7pkt 7fpkt"];
3919--6476[label="0.857143;6pkt 6fpkt"];
3946--4527[label="1;28pkt 28fpkt"];
3956--4527[label="0.722222;26pkt 26fpkt"];
3956--4656[label="0.0277778;1pkt 1fpkt"];
3956--5548[label="1;36pkt 36fpkt"];
3956--7838[label="0.972222;35pkt 35fpkt"];
3974--4527[label="1;46pkt 46fpkt"];
3974--5462[label="0.0434783;2pkt 2fpkt"];
3974--5490[label="0.0434783;2pkt 2fpkt"];
3974--5510[label="0.0434783;2pkt 2fpkt"];
4071--4527[label="0.902778;65pkt 65fpkt"];
4071--7724[label="1;72pkt 72fpkt"];
4071--8856[label="1;72pkt 72fpkt"];
4459--5884[label="0.2;2pkt 2fpkt"];
4459--6780[label="0.037037;1pkt 1fpkt"];
4459--6980[label="0.416667;10pkt 10fpkt"];
4459--7353[label="0.04;2pkt 2fpkt"];
4459--7457[label="0.1;4pkt 4fpkt"];
4459--7991[label="0.2;2pkt 2fpkt"];
4459--8731[label="0.1;4pkt 4fpkt"];
4459--8967[label="0.222222;2pkt 2fpkt"];
4527--4612[label="0.0517241;3pkt 3fpkt"];
4527--4657[label="0.0344828;1pkt 1fpkt"];
4527--4747[label="1;1pkt 1fpkt"];
4527--4807[label="0.25974;20pkt 20fpkt"];
4527--4914[label="0.875;21pkt 21fpkt"];
4527--5225[label="0.00429185;1pkt 1fpkt"];
4527--5462[label="0.0468451;49pkt 49fpkt"];
4527--5473[label="0.00191205;2pkt 2fpkt"];
4527--5490[label="0.0468451;49pkt 49fpkt"];
4527--5499[label="0.00191205;2pkt 2fpkt"];
4527--5510[label="0.0468451;49pkt 49fpkt"];
4527--5517[label="0.00191205;2pkt 2fpkt"];
4527--5548[label="0.535714;30pkt 30fpkt"];
4527--6043[label="0.729167;105pkt 105fpkt"];
4527--6416[label="1;1pkt 1fpkt"];
4527--6463[label="0.5;2pkt 2fpkt"];
4527--6476[label="0.6;6pkt 6fpkt"];
4527--6669[label="0.556701;108pkt 108fpkt"];
4527--6707[label="0.230769;3pkt 3fpkt"];
4527--6798[label="0.00549451;1pkt 1fpkt"];
4527--6877[label="0.542857;19pkt 19fpkt"];
4527--6920[label="0.777778;7pkt 7fpkt"];
4527--6921[label="0.761905;16pkt 16fpkt"];
4527--6939[label="0.714286;10pkt 10fpkt"];
4527--6968[label="0.604167;58pkt 58fpkt"];
4527--6980[label="0.333333;8pkt 8fpkt"];
4527--7090[label="0.25;1pkt 1fpkt"];
4527--7136[label="0.727273;8pkt 8fpkt"];
4527--7247[label="0.00862069;1pkt 1fpkt"];
4527--7255[label="0.012987;1pkt 1fpkt"];
4527--7385[label="0.0227273;1pkt 1fpkt"];
4527--7416[label="0.428571;3pkt 3fpkt"];
4527--7462[label="0.0103093;1pkt 1fpkt"];
4527--7509[label="0.00806452;1pkt 1fpkt"];
4527--7517[label="0.625;5pkt 5fpkt"];
4527--7536[label="0.666667;8pkt 8fpkt"];
4527--7724[label="0.540541;120pkt 120fpkt"];
4527--7838[label="0.545455;30pkt 30fpkt"];
4527--8429[label="0.00549451;1pkt 1fpkt"];
4527--8481[label="0.761905;16pkt 16fpkt"];
4527--8505[label="0.604167;58pkt 58fpkt"];
4527--8577[label="0.727273;8pkt 8fpkt"];
4527--8630[label="0.00862069;1pkt 1fpkt"];
4527--8733[label="0.0103093;1pkt 1fpkt"];
4527--8754[label="0.00806452;1pkt 1fpkt"];
4527--8856[label="0.540541;120pkt 120fpkt"];
4527--9134[label="0.00549451;1pkt 1fpkt"];
4527--9164[label="0.604167;58pkt 58fpkt"];
4747--6416[label="1;1pkt 1fpkt"];
4914--5462[label="0.125;3pkt 3fpkt"];
4914--5473[label="0.125;3pkt 3fpkt"];
4914--5490[label="0.125;3pkt 3fpkt"];
4914--5499[label="0.125;3pkt 3fpkt"];
4914--5510[label="0.125;3pkt 3fpkt"];
4914--5517[label="0.125;3pkt 3fpkt"];
5548--7838[label="1;55pkt 55fpkt"];
5884--7991[label="1;10pkt 10fpkt"];
5884--8967[label="1;9pkt 9fpkt"];
5954--8021[label="1;2pkt 2fpkt"];
5954--8977[label="1;2pkt 2fpkt"];
6272--8163[label="1;4pkt 4fpkt"];
6921--8481[label="1;21pkt 21fpkt"];
6968--8505[label="1;96pkt 96fpkt"];
6968--9164[label="1;96pkt 96fpkt"];
7136--8577[label="1;11pkt 11fpkt"];
7457--8731[label="1;40pkt 40fpkt"];
7602--8788[label="1;1pkt 1fpkt"];
7724--8856[label="1;222pkt 222fpkt"];
7991--8967[label="1;9pkt 9fpkt"];
8021--8977[label="1;2pkt 2fpkt"];
8505--9164[label="1;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.59.136" src_port="80"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="91.207.221.240"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.105.8.242"/>
    </slice>
    <from sec="1201928484" usec="0"/>
    <to sec="1201929246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.32.70.242"/>
    </slice>
    <from sec="1201928871" usec="0"/>
    <to sec="1201928938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.41.190.243"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
812[label="138.49.213.183;d;170pkt 170fpkt", shape=diamond, color=yellow];
4247[label="138.49.213.183;d;167pkt 167fpkt", shape=hexagon, color=black];
5925[label="195.164.41.37;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7052[label="219.136.46.156;14pkt 14fpkt", shape=pentagon, color=darkviolet];
7061[label="74.152.64.157;33pkt 33fpkt", shape=pentagon, color=darkviolet];
7775[label="211.219.10.246;36pkt 36fpkt", shape=pentagon, color=darkviolet];
8009[label="195.164.41.37;13pkt 13fpkt", shape=invtriangle, color=brown];
8541[label="219.136.46.156;14pkt 14fpkt", shape=invtriangle, color=brown];
8546[label="74.152.64.157;33pkt 33fpkt", shape=invtriangle, color=brown];
8887[label="211.219.10.246;36pkt 36fpkt", shape=invtriangle, color=brown];
8975[label="195.164.41.37;13pkt 13fpkt", shape=invhouse, color=bisque];
9175[label="219.136.46.156;14pkt 14fpkt", shape=invhouse, color=bisque];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.219.10.246:*, 138.49.213.183:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49576: (0.44964%)&lt;BR/&gt; 49573: (0.44964%)&lt;BR/&gt; 49570: (0.44964%)&lt;BR/&gt; 49568: (0.44964%)&gt;];
}
812--2185[label="0.00714286;1pkt 1fpkt"];
812--2717[label="0.00970874;1pkt 1fpkt"];
812--4247[label="1;167pkt 167fpkt"];
812--4886[label="0.0103093;1pkt 1fpkt"];
812--5444[label="0.123529;21pkt 21fpkt"];
812--5467[label="0.188235;32pkt 32fpkt"];
812--5481[label="0.123529;21pkt 21fpkt"];
812--5494[label="0.188235;32pkt 32fpkt"];
812--5514[label="0.188235;32pkt 32fpkt"];
812--5925[label="1;13pkt 13fpkt"];
812--6092[label="0.00699301;1pkt 1fpkt"];
812--6332[label="0.00970874;1pkt 1fpkt"];
812--7052[label="1;14pkt 14fpkt"];
812--7061[label="0.969697;32pkt 32fpkt"];
812--7775[label="1;36pkt 36fpkt"];
812--8009[label="1;13pkt 13fpkt"];
812--8541[label="1;14pkt 14fpkt"];
812--8546[label="0.969697;32pkt 32fpkt"];
812--8887[label="1;36pkt 36fpkt"];
812--8975[label="1;13pkt 13fpkt"];
812--9175[label="1;14pkt 14fpkt"];
4247--4886[label="0.0103093;1pkt 1fpkt"];
4247--5444[label="0.125749;21pkt 21fpkt"];
4247--5467[label="0.191617;32pkt 32fpkt"];
4247--5481[label="0.125749;21pkt 21fpkt"];
4247--5494[label="0.191617;32pkt 32fpkt"];
4247--5514[label="0.191617;32pkt 32fpkt"];
4247--5925[label="1;13pkt 13fpkt"];
4247--6092[label="0.00699301;1pkt 1fpkt"];
4247--6332[label="0.00970874;1pkt 1fpkt"];
4247--7052[label="1;14pkt 14fpkt"];
4247--7061[label="0.969697;32pkt 32fpkt"];
4247--7775[label="0.944444;34pkt 34fpkt"];
4247--8009[label="1;13pkt 13fpkt"];
4247--8541[label="1;14pkt 14fpkt"];
4247--8546[label="0.969697;32pkt 32fpkt"];
4247--8887[label="0.944444;34pkt 34fpkt"];
4247--8975[label="1;13pkt 13fpkt"];
4247--9175[label="1;14pkt 14fpkt"];
5925--8009[label="1;13pkt 13fpkt"];
5925--8975[label="1;13pkt 13fpkt"];
7052--8541[label="1;14pkt 14fpkt"];
7052--9175[label="1;14pkt 14fpkt"];
7061--8546[label="1;33pkt 33fpkt"];
7775--8887[label="1;36pkt 36fpkt"];
8009--8975[label="1;13pkt 13fpkt"];
8541--9175[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="138.49.213.183" dst_port="80" src_ip="211.219.10.246"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.31.8.248"/>
    </slice>
    <from sec="1201928533" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.42.137.248"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201928600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.77.56.252"/>
    </slice>
    <from sec="1201928418" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.91.81.252"/>
    </slice>
    <from sec="1201928487" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.45.192.255"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.401801,2.17371,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.66.242.255"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.42.68.0"/>
    </slice>
    <from sec="1201929056" usec="0"/>
    <to sec="1201929064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.59.87.0"/>
    </slice>
    <from sec="1201928510" usec="0"/>
    <to sec="1201928540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.77.111.0"/>
    </slice>
    <from sec="1201928903" usec="0"/>
    <to sec="1201928908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.205.236.0"/>
    </slice>
    <from sec="1201929222" usec="0"/>
    <to sec="1201929238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_622{
style=filled;
color=gray75;
5542[label="169.16.9.1;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7835[label="169.16.9.1;8pkt 8fpkt", shape=invtriangle, color=brown];
8914[label="169.16.9.1;7pkt 7fpkt", shape=invhouse, color=bisque];
stat622[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.9.1:*, 208.206.75.169:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1853: (6.52174%)&lt;BR/&gt; 1852: (6.52174%)&lt;BR/&gt; 1842: (6.52174%)&lt;BR/&gt; 1841: (6.52174%)&gt;];
}
5542--7835[label="1;8pkt 8fpkt"];
5542--8914[label="1;7pkt 7fpkt"];
7835--8914[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="208.206.75.169" dst_port="80" src_ip="169.16.9.1"/>
    </slice>
    <from sec="1201928482" usec="0"/>
    <to sec="1201928739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.182.136.2"/>
    </slice>
    <from sec="1201929276" usec="0"/>
    <to sec="1201929282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="27.70.32.3"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
5570[label="169.16.18.4;423pkt 423fpkt", shape=pentagon, color=darkviolet];
7849[label="169.16.18.4;423pkt 423fpkt", shape=invtriangle, color=brown];
8921[label="169.16.18.4;423pkt 423fpkt", shape=invhouse, color=bisque];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.18.4:20129, *:20129}[67.6123%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (83.6879%)&lt;BR/&gt; 20128: (0.35461%)&lt;BR/&gt; 65077: (0.118203%)&lt;BR/&gt; 64921: (0.118203%)&lt;BR/&gt; 64861: (0.118203%)&gt;];
}
5570--7849[label="1;423pkt 423fpkt"];
5570--8921[label="1;423pkt 423fpkt"];
7849--8921[label="1;423pkt 423fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="169.16.18.4" src_port="20129"/>
    </slice>
    <from sec="1201928408" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.121.10.6"/>
    </slice>
    <from sec="1201928997" usec="0"/>
    <to sec="1201929003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.4.102.6"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.142.73.7"/>
    </slice>
    <from sec="1201929218" usec="0"/>
    <to sec="1201929223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
5604[label="141.54.41.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7868[label="141.54.41.8;1pkt 1fpkt", shape=invtriangle, color=brown];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.41.8:25, 213.16.162.4:1658}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1658: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
5604--7868[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.16.162.4" dst_port="1658" src_ip="141.54.41.8" src_port="25"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.138.64.8"/>
    </slice>
    <from sec="1201928419" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_631{
style=filled;
color=gray75;
5613[label="141.54.203.8;21pkt 21fpkt", shape=pentagon, color=darkviolet];
7872[label="141.54.203.8;20pkt 20fpkt", shape=invtriangle, color=brown];
stat631[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.203.8:*, 217.44.131.28:80}[42.8571%]&lt;BR/&gt;{141.54.203.8:*, 17.40.117.210:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6829%)&lt;BR/&gt; 1140: (7.31707%)&lt;BR/&gt; 53: (7.31707%)&lt;BR/&gt; 4119: (2.43902%)&lt;BR/&gt; 1814: (2.43902%)&gt;];
}
5613--7872[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="217.44.131.28" dst_port="80" src_ip="141.54.203.8"/>
      <filter dst_ip="17.40.117.210" dst_port="80" src_ip="141.54.203.8"/>
    </slice>
    <from sec="1201928591" usec="0"/>
    <to sec="1201929151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.12.149.9"/>
    </slice>
    <from sec="1201928594" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_633{
style=filled;
color=gray75;
5628[label="169.16.18.10;36pkt 36fpkt", shape=pentagon, color=darkviolet];
7879[label="169.16.18.10;35pkt 35fpkt", shape=invtriangle, color=brown];
8931[label="169.16.18.10;36pkt 36fpkt", shape=invhouse, color=bisque];
stat633[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.18.10:62620, *:*}[30.5556%]&lt;BR/&gt;{169.16.18.10:*, 18.166.18.2:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.8411%)&lt;BR/&gt; 62620: (15.4206%)&lt;BR/&gt; 59840: (1.40187%)&lt;BR/&gt; 59128: (1.40187%)&lt;BR/&gt; 58940: (1.40187%)&gt;];
}
5628--7879[label="1;35pkt 35fpkt"];
5628--8931[label="1;36pkt 36fpkt"];
7879--8931[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.18.10" src_port="62620"/>
      <filter dst_ip="18.166.18.2" dst_port="80" src_ip="169.16.18.10"/>
    </slice>
    <from sec="1201928428" usec="0"/>
    <to sec="1201929242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
5632[label="141.54.101.10;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7882[label="141.54.101.10;1pkt 1fpkt", shape=invtriangle, color=brown];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.101.10:46371, 208.181.133.243:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46371: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5632--7882[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="208.181.133.243" dst_port="80" src_ip="141.54.101.10" src_port="46371"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_635{
style=filled;
color=gray75;
5633[label="208.166.148.10;17pkt 17fpkt", shape=pentagon, color=darkviolet];
7883[label="208.166.148.10;17pkt 17fpkt", shape=invtriangle, color=brown];
8932[label="208.166.148.10;17pkt 17fpkt", shape=invhouse, color=bisque];
stat635[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.166.148.10:80, 141.54.252.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2103: (2.94118%)&lt;BR/&gt; 2098: (2.94118%)&lt;BR/&gt; 2097: (2.94118%)&lt;BR/&gt; 2095: (2.94118%)&gt;];
}
5633--7883[label="1;17pkt 17fpkt"];
5633--8932[label="1;17pkt 17fpkt"];
7883--8932[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.252.40" src_ip="208.166.148.10" src_port="80"/>
    </slice>
    <from sec="1201929280" usec="0"/>
    <to sec="1201929292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
5656[label="194.245.42.12;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7891[label="194.245.42.12;2pkt 2fpkt", shape=invtriangle, color=brown];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.42.12:22, 91.135.190.133:45294}[50%]&lt;BR/&gt;{194.245.42.12:22, 91.135.190.133:45438}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 45438: (25%)&lt;BR/&gt; 45294: (25%)&gt;];
}
5656--7891[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="45438" src_ip="194.245.42.12" src_port="22"/>
      <filter dst_ip="91.135.190.133" dst_port="45294" src_ip="194.245.42.12" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.68.179.12"/>
    </slice>
    <from sec="1201928602" usec="0"/>
    <to sec="1201928902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
5677[label="194.245.42.14;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7905[label="194.245.42.14;3pkt 3fpkt", shape=invtriangle, color=brown];
8937[label="194.245.42.14;3pkt 3fpkt", shape=invhouse, color=bisque];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.42.14:80, 27.172.196.120:35383}[33.3333%]&lt;BR/&gt;{194.245.42.14:80, 42.25.197.205:51018}[33.3333%]&lt;BR/&gt;{194.245.42.14:80, 27.172.199.209:37409}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37409: (18.75%)&lt;BR/&gt; 35383: (18.75%)&lt;BR/&gt; 51018: (12.5%)&gt;];
}
5677--7905[label="1;2pkt 2fpkt"];
5677--8937[label="1;2pkt 2fpkt"];
7905--8937[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="27.172.199.209" dst_port="37409" src_ip="194.245.42.14" src_port="80"/>
      <filter dst_ip="42.25.197.205" dst_port="51018" src_ip="194.245.42.14" src_port="80"/>
      <filter dst_ip="27.172.196.120" dst_port="35383" src_ip="194.245.42.14" src_port="80"/>
    </slice>
    <from sec="1201928912" usec="0"/>
    <to sec="1201929122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_639{
style=filled;
color=gray75;
5688[label="138.43.16.15;20pkt 20fpkt", shape=pentagon, color=darkviolet];
7909[label="138.43.16.15;20pkt 20fpkt", shape=invtriangle, color=brown];
stat639[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.16.15:45201, *:*}[95%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45201: (47.5%)&lt;BR/&gt; 61660: (2.5%)&lt;BR/&gt; 61659: (2.5%)&lt;BR/&gt; 58187: (2.5%)&lt;BR/&gt; 56858: (2.5%)&gt;];
}
5688--7909[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.16.15" src_port="45201"/>
    </slice>
    <from sec="1201928418" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.70.47.16"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_641{
style=filled;
color=gray75;
5715[label="219.41.161.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7918[label="219.41.161.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat641[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.41.161.17:19952, 169.16.175.88:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19952: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5715--7918[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.175.88" dst_port="80" src_ip="219.41.161.17" src_port="19952"/>
    </slice>
    <from sec="1201928648" usec="0"/>
    <to sec="1201929273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.15.189.17"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.26.193.17"/>
    </slice>
    <from sec="1201929253" usec="0"/>
    <to sec="1201929265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.15.2.18"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_646{
style=filled;
color=gray75;
5731[label="138.43.119.18;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7926[label="138.43.119.18;12pkt 12fpkt", shape=invtriangle, color=brown];
stat646[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.119.18:*, 197.153.102.202:80}[50%]&lt;BR/&gt;{138.43.119.18:*, 199.0.209.218:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4134: (4.16667%)&lt;BR/&gt; 4133: (4.16667%)&lt;BR/&gt; 4132: (4.16667%)&lt;BR/&gt; 4130: (4.16667%)&gt;];
}
5731--7926[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="199.0.209.218" dst_port="80" src_ip="138.43.119.18"/>
      <filter dst_ip="197.153.102.202" dst_port="80" src_ip="138.43.119.18"/>
    </slice>
    <from sec="1201928663" usec="0"/>
    <to sec="1201929277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_647{
style=filled;
color=gray75;
1741[label="141.54.16.76;s;170pkt 170fpkt", shape=diamond, color=yellow];
1837[label="19.28.100.150;d;74pkt 74fpkt", shape=diamond, color=yellow];
4668[label="141.54.16.76;s;124pkt 124fpkt", shape=hexagon, color=black];
stat647[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.16.76:*, 19.28.100.150:80}[43.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2413: (0.407609%)&lt;BR/&gt; 2395: (0.407609%)&lt;BR/&gt; 2394: (0.407609%)&lt;BR/&gt; 2393: (0.407609%)&gt;];
}
1741--1837[label="1;74pkt 74fpkt"];
1741--4590[label="0.0176471;3pkt 3fpkt"];
1741--4668[label="1;124pkt 124fpkt"];
1741--5454[label="0.0235294;4pkt 4fpkt"];
1741--5467[label="0.0352941;6pkt 6fpkt"];
1741--5487[label="0.0235294;4pkt 4fpkt"];
1741--5494[label="0.0352941;6pkt 6fpkt"];
1741--5508[label="0.0235294;4pkt 4fpkt"];
1741--5514[label="0.0352941;6pkt 6fpkt"];
1837--4668[label="1;74pkt 74fpkt"];
4668--5454[label="0.0322581;4pkt 4fpkt"];
4668--5467[label="0.00806452;1pkt 1fpkt"];
4668--5487[label="0.0322581;4pkt 4fpkt"];
4668--5494[label="0.00806452;1pkt 1fpkt"];
4668--5508[label="0.0322581;4pkt 4fpkt"];
4668--5514[label="0.00806452;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="19.28.100.150" dst_port="80" src_ip="141.54.16.76"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201929227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
5739[label="214.232.42.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7931[label="214.232.42.19;1pkt 1fpkt", shape=invtriangle, color=brown];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{214.232.42.19:1400, 169.16.175.88:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1400: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5739--7931[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.175.88" dst_port="80" src_ip="214.232.42.19" src_port="1400"/>
    </slice>
    <from sec="1201929294" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.78.214.20"/>
    </slice>
    <from sec="1201928622" usec="0"/>
    <to sec="1201929225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.87.96.21"/>
    </slice>
    <from sec="1201929179" usec="0"/>
    <to sec="1201929264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.80.64.23"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_652{
style=filled;
color=gray75;
5798[label="138.52.25.24;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7956[label="138.52.25.24;5pkt 5fpkt", shape=invtriangle, color=brown];
stat652[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.52.25.24:4418, 91.97.103.142:62081}[20%]&lt;BR/&gt;{138.52.25.24:1273, 91.103.16.108:26325}[20%]&lt;BR/&gt;{138.52.25.24:1275, 91.103.16.108:26325}[20%]&lt;BR/&gt;{138.52.25.24:1277, 91.97.198.245:59244}[20%]&lt;BR/&gt;{138.52.25.24:36481, 91.97.198.245:59244}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59244: (22.2222%)&lt;BR/&gt; 26325: (22.2222%)&lt;BR/&gt; 36481: (11.1111%)&lt;BR/&gt; 1277: (11.1111%)&lt;BR/&gt; 1275: (11.1111%)&gt;];
}
5798--7956[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="91.97.198.245" dst_port="59244" src_ip="138.52.25.24" src_port="36481"/>
      <filter dst_ip="91.97.198.245" dst_port="59244" src_ip="138.52.25.24" src_port="1277"/>
      <filter dst_ip="91.103.16.108" dst_port="26325" src_ip="138.52.25.24" src_port="1275"/>
      <filter dst_ip="91.103.16.108" dst_port="26325" src_ip="138.52.25.24" src_port="1273"/>
      <filter dst_ip="91.97.103.142" dst_port="62081" src_ip="138.52.25.24" src_port="4418"/>
    </slice>
    <from sec="1201928497" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.117.67.31"/>
    </slice>
    <from sec="1201928423" usec="0"/>
    <to sec="1201929285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.136.66.32"/>
    </slice>
    <from sec="1201928453" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.137.224.32"/>
    </slice>
    <from sec="1201929215" usec="0"/>
    <to sec="1201929274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
1502[label="138.43.64.97;d;46pkt 46fpkt", shape=diamond, color=yellow];
1503[label="219.145.136.18;s;3pkt 3fpkt", shape=diamond, color=yellow];
5733[label="219.145.136.18;3pkt 3fpkt", shape=pentagon, color=darkviolet];
5890[label="45.188.25.34;37pkt 37fpkt", shape=pentagon, color=darkviolet];
7994[label="45.188.25.34;37pkt 37fpkt", shape=invtriangle, color=brown];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.188.25.34:80, 138.43.64.97:*}[80.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1202: (1.19048%)&lt;BR/&gt; 1201: (1.19048%)&lt;BR/&gt; 1200: (1.19048%)&lt;BR/&gt; 1199: (1.19048%)&gt;];
}
1502--1503[label="1;3pkt 3fpkt"];
1502--1589[label="0.0434783;2pkt 2fpkt"];
1502--3948[label="0.0217391;1pkt 1fpkt"];
1502--4591[label="0.0434783;2pkt 2fpkt"];
1502--5733[label="1;3pkt 3fpkt"];
1502--5803[label="0.0434783;2pkt 2fpkt"];
1502--5890[label="1;37pkt 37fpkt"];
1502--7957[label="0.0434783;2pkt 2fpkt"];
1502--7994[label="1;37pkt 37fpkt"];
1503--5733[label="1;3pkt 3fpkt"];
5890--7994[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.64.97" src_ip="45.188.25.34" src_port="80"/>
    </slice>
    <from sec="1201928577" usec="0"/>
    <to sec="1201928695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.113.111.35"/>
    </slice>
    <from sec="1201928532" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.163.218.35"/>
    </slice>
    <from sec="1201928657" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.915247,2.13631,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_660{
style=filled;
color=gray75;
2198[label="141.54.40.201;d;43pkt 43fpkt", shape=diamond, color=yellow];
2217[label="195.35.59.117;s;33pkt 33fpkt", shape=diamond, color=yellow];
4515[label="141.54.40.201;d;42pkt 42fpkt", shape=hexagon, color=black];
stat660[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.35.59.117:80, 141.54.40.201:*}[76.7442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1856: (1.27119%)&lt;BR/&gt; 1855: (1.27119%)&lt;BR/&gt; 1854: (1.27119%)&lt;BR/&gt; 1853: (1.27119%)&gt;];
}
2198--2217[label="1;33pkt 33fpkt"];
2198--4515[label="1;42pkt 42fpkt"];
2198--5920[label="0.0465116;2pkt 2fpkt"];
2198--8006[label="0.0465116;2pkt 2fpkt"];
2198--8972[label="0.0465116;2pkt 2fpkt"];
2217--4515[label="0.969697;32pkt 32fpkt"];
4515--5920[label="0.047619;2pkt 2fpkt"];
4515--8006[label="0.047619;2pkt 2fpkt"];
4515--8972[label="0.047619;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.40.201" src_ip="195.35.59.117" src_port="80"/>
    </slice>
    <from sec="1201928670" usec="0"/>
    <to sec="1201928881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_661{
style=filled;
color=gray75;
5921[label="213.167.197.36;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8007[label="213.167.197.36;2pkt 2fpkt", shape=invtriangle, color=brown];
8973[label="213.167.197.36;2pkt 2fpkt", shape=invhouse, color=bisque];
stat661[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.167.197.36:7099, 141.54.43.129:80}[50%]&lt;BR/&gt;{213.167.197.36:7100, 141.54.43.129:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7100: (25%)&lt;BR/&gt; 7099: (25%)&gt;];
}
5921--8007[label="1;2pkt 2fpkt"];
5921--8973[label="1;2pkt 2fpkt"];
8007--8973[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.43.129" dst_port="80" src_ip="213.167.197.36" src_port="7100"/>
      <filter dst_ip="141.54.43.129" dst_port="80" src_ip="213.167.197.36" src_port="7099"/>
    </slice>
    <from sec="1201929000" usec="0"/>
    <to sec="1201929091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
5927[label="194.245.47.37;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8010[label="194.245.47.37;2pkt 2fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.47.37:22, 91.135.190.133:40438}[50%]&lt;BR/&gt;{194.245.47.37:22, 91.135.190.133:40550}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 40550: (25%)&lt;BR/&gt; 40438: (25%)&gt;];
}
5927--8010[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="40550" src_ip="194.245.47.37" src_port="22"/>
      <filter dst_ip="91.135.190.133" dst_port="40438" src_ip="194.245.47.37" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.196.72.38"/>
    </slice>
    <from sec="1201928504" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_665{
style=filled;
color=gray75;
5974[label="141.54.193.41;32pkt 32fpkt", shape=pentagon, color=darkviolet];
8032[label="141.54.193.41;32pkt 32fpkt", shape=invtriangle, color=brown];
8981[label="141.54.193.41;32pkt 32fpkt", shape=invhouse, color=bisque];
stat665[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.193.41:1027, *:53}[84.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (42.1875%)&lt;BR/&gt; 53: (42.1875%)&lt;BR/&gt; 0: (15.625%)&gt;];
}
5974--8032[label="1;32pkt 32fpkt"];
5974--8981[label="1;32pkt 32fpkt"];
8032--8981[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="141.54.193.41" src_port="1027"/>
    </slice>
    <from sec="1201928420" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_666{
style=filled;
color=gray75;
6014[label="194.245.42.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8049[label="194.245.42.47;2pkt 2fpkt", shape=invtriangle, color=brown];
stat666[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.42.47:22, 91.135.190.133:41349}[50%]&lt;BR/&gt;{194.245.42.47:22, 91.135.190.133:41459}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 41459: (25%)&lt;BR/&gt; 41349: (25%)&gt;];
}
6014--8049[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="41459" src_ip="194.245.42.47" src_port="22"/>
      <filter dst_ip="91.135.190.133" dst_port="41349" src_ip="194.245.42.47" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_667{
style=filled;
color=gray75;
6031[label="169.16.16.49;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8057[label="169.16.16.49;1pkt 1fpkt", shape=invtriangle, color=brown];
stat667[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.16.49:4315, 195.54.69.242:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4315: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6031--8057[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.54.69.242" dst_port="80" src_ip="169.16.16.49" src_port="4315"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.86.32.49"/>
    </slice>
    <from sec="1201928784" usec="0"/>
    <to sec="1201929216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.66.225.49"/>
    </slice>
    <from sec="1201928827" usec="0"/>
    <to sec="1201928830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.96.13.50"/>
    </slice>
    <from sec="1201928654" usec="0"/>
    <to sec="1201929165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.238.37.51"/>
    </slice>
    <from sec="1201928698" usec="0"/>
    <to sec="1201928723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.69.117.51"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="138.43.117.54"/>
    </slice>
    <from sec="1201929243" usec="0"/>
    <to sec="1201929260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.72.125.54"/>
    </slice>
    <from sec="1201929243" usec="0"/>
    <to sec="1201929260" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.220.147.54"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.235.161.54"/>
    </slice>
    <from sec="1201928804" usec="0"/>
    <to sec="1201928809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.142.232.58"/>
    </slice>
    <from sec="1201928546" usec="0"/>
    <to sec="1201929203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_679{
style=filled;
color=gray75;
6139[label="141.54.184.59;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8104[label="141.54.184.59;1pkt 1fpkt", shape=invtriangle, color=brown];
9011[label="141.54.184.59;1pkt 1fpkt", shape=invhouse, color=bisque];
stat679[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.184.59:50238, 29.132.179.236:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50238: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6139--8104[label="1;1pkt 1fpkt"];
6139--9011[label="1;1pkt 1fpkt"];
8104--9011[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="29.132.179.236" dst_port="80" src_ip="141.54.184.59" src_port="50238"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.203.73.60"/>
    </slice>
    <from sec="1201928497" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.137.103.60"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
6152[label="194.245.47.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8111[label="194.245.47.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.47.61:22, 91.135.190.133:34079}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34079: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
6152--8111[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="34079" src_ip="194.245.47.61" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.26.134.62"/>
    </slice>
    <from sec="1201928711" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_684{
style=filled;
color=gray75;
6172[label="194.245.42.63;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8121[label="194.245.42.63;2pkt 2fpkt", shape=invtriangle, color=brown];
stat684[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.42.63:22, 91.135.190.133:33541}[50%]&lt;BR/&gt;{194.245.42.63:22, 91.135.190.133:33652}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 33652: (25%)&lt;BR/&gt; 33541: (25%)&gt;];
}
6172--8121[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="33652" src_ip="194.245.42.63" src_port="22"/>
      <filter dst_ip="91.135.190.133" dst_port="33541" src_ip="194.245.42.63" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.85.27.66"/>
    </slice>
    <from sec="1201928449" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
6211[label="194.245.43.66;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8139[label="194.245.43.66;2pkt 2fpkt", shape=invtriangle, color=brown];
9023[label="194.245.43.66;2pkt 2fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.43.66:22, 91.135.190.133:46198}[50%]&lt;BR/&gt;{194.245.43.66:22, 91.135.190.133:46374}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 46374: (25%)&lt;BR/&gt; 46198: (25%)&gt;];
}
6211--8139[label="1;2pkt 2fpkt"];
6211--9023[label="1;2pkt 2fpkt"];
8139--9023[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="46374" src_ip="194.245.43.66" src_port="22"/>
      <filter dst_ip="91.135.190.133" dst_port="46198" src_ip="194.245.43.66" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_687{
style=filled;
color=gray75;
6213[label="141.54.120.66;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8140[label="141.54.120.66;16pkt 16fpkt", shape=invtriangle, color=brown];
9024[label="141.54.120.66;16pkt 16fpkt", shape=invhouse, color=bisque];
stat687[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.120.66:*, 17.77.171.58:80}[62.5%]&lt;BR/&gt;{141.54.120.66:*, 17.77.171.58:8080}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.25%)&lt;BR/&gt; 8080: (18.75%)&lt;BR/&gt; 49823: (3.125%)&lt;BR/&gt; 49822: (3.125%)&lt;BR/&gt; 49821: (3.125%)&gt;];
}
6213--8140[label="1;16pkt 16fpkt"];
6213--9024[label="1;16pkt 16fpkt"];
8140--9024[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="17.77.171.58" dst_port="80" src_ip="141.54.120.66"/>
      <filter dst_ip="17.77.171.58" dst_port="8080" src_ip="141.54.120.66"/>
    </slice>
    <from sec="1201928487" usec="0"/>
    <to sec="1201928940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="50.119.199.67"/>
    </slice>
    <from sec="1201929043" usec="0"/>
    <to sec="1201929049" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
6245[label="194.56.217.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8153[label="194.56.217.68;2pkt 2fpkt", shape=invtriangle, color=brown];
9030[label="194.56.217.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.56.217.68:80, 141.54.59.136:51899}[50%]&lt;BR/&gt;{194.56.217.68:53, 141.54.43.207:57454}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51899: (30%)&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 57454: (20%)&lt;BR/&gt; 53: (20%)&gt;];
}
6245--8153[label="1;2pkt 2fpkt"];
6245--9030[label="1;1pkt 1fpkt"];
8153--9030[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.43.207" dst_port="57454" src_ip="194.56.217.68" src_port="53"/>
      <filter dst_ip="141.54.59.136" dst_port="51899" src_ip="194.56.217.68" src_port="80"/>
    </slice>
    <from sec="1201929257" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.32.57.69"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.176.213.70"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_692{
style=filled;
color=gray75;
6271[label="18.208.75.72;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8162[label="18.208.75.72;8pkt 8fpkt", shape=invtriangle, color=brown];
stat692[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.208.75.72:*, 138.43.119.174:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65132: (6.25%)&lt;BR/&gt; 64640: (6.25%)&lt;BR/&gt; 64575: (6.25%)&lt;BR/&gt; 64522: (6.25%)&gt;];
}
6271--8162[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.119.174" dst_port="80" src_ip="18.208.75.72"/>
    </slice>
    <from sec="1201928520" usec="0"/>
    <to sec="1201929256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
6274[label="208.12.128.72;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8165[label="208.12.128.72;30pkt 30fpkt", shape=invtriangle, color=brown];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.12.128.72:*, 141.54.16.101:33437}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33437: (50%)&lt;BR/&gt; 12295: (1.66667%)&lt;BR/&gt; 12077: (1.66667%)&lt;BR/&gt; 11951: (1.66667%)&lt;BR/&gt; 11737: (1.66667%)&gt;];
}
6274--8165[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.16.101" dst_port="33437" src_ip="208.12.128.72"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.66.20.74"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_695{
style=filled;
color=gray75;
6319[label="29.96.72.76;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8189[label="29.96.72.76;1pkt 1fpkt", shape=invtriangle, color=brown];
stat695[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.96.72.76:50668, 194.245.35.29:40241}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50668: (50%)&lt;BR/&gt; 40241: (50%)&gt;];
}
6319--8189[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.35.29" dst_port="40241" src_ip="29.96.72.76" src_port="50668"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.200.192.78"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.173.2.79"/>
    </slice>
    <from sec="1201928711" usec="0"/>
    <to sec="1201929004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.132.139.79"/>
    </slice>
    <from sec="1201928445" usec="0"/>
    <to sec="1201928496" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.180.38.81"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201928820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_701{
style=filled;
color=gray75;
6385[label="217.170.249.82;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8224[label="217.170.249.82;4pkt 4fpkt", shape=invtriangle, color=brown];
9055[label="217.170.249.82;4pkt 4fpkt", shape=invhouse, color=bisque];
stat701[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.170.249.82:80, 169.16.192.14:49222}[25%]&lt;BR/&gt;{217.170.249.82:80, 169.16.192.14:49223}[25%]&lt;BR/&gt;{217.170.249.82:80, 169.16.192.14:49235}[25%]&lt;BR/&gt;{217.170.249.82:80, 169.16.192.14:49239}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49239: (12.5%)&lt;BR/&gt; 49235: (12.5%)&lt;BR/&gt; 49223: (12.5%)&lt;BR/&gt; 49222: (12.5%)&gt;];
}
6385--8224[label="1;4pkt 4fpkt"];
6385--9055[label="1;4pkt 4fpkt"];
8224--9055[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.192.14" dst_port="49239" src_ip="217.170.249.82" src_port="80"/>
      <filter dst_ip="169.16.192.14" dst_port="49235" src_ip="217.170.249.82" src_port="80"/>
      <filter dst_ip="169.16.192.14" dst_port="49223" src_ip="217.170.249.82" src_port="80"/>
      <filter dst_ip="169.16.192.14" dst_port="49222" src_ip="217.170.249.82" src_port="80"/>
    </slice>
    <from sec="1201928602" usec="0"/>
    <to sec="1201928714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.164.17.83"/>
    </slice>
    <from sec="1201928459" usec="0"/>
    <to sec="1201929298" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="146.149.60.83"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.244.144.83"/>
    </slice>
    <from sec="1201928792" usec="0"/>
    <to sec="1201928887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
6396[label="42.37.167.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8233[label="42.37.167.83;1pkt 1fpkt", shape=invtriangle, color=brown];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.37.167.83:1938, 194.245.35.29:10364}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10364: (50%)&lt;BR/&gt; 1938: (50%)&gt;];
}
6396--8233[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.35.29" dst_port="10364" src_ip="42.37.167.83" src_port="1938"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,901,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_707{
style=filled;
color=gray75;
1014[label="194.245.34.80;s;568pkt 568fpkt", shape=diamond, color=yellow];
1315[label="141.54.200.170;s;653pkt 653fpkt", shape=diamond, color=yellow];
1725[label="194.245.38.36;s;67pkt 67fpkt", shape=diamond, color=yellow];
1970[label="169.69.166.46;s;362pkt 362fpkt", shape=diamond, color=yellow];
2535[label="128.38.97.180;d;355pkt 355fpkt", shape=diamond, color=yellow];
2560[label="214.69.192.115;d;379pkt 379fpkt", shape=diamond, color=yellow];
2569[label="210.12.123.68;d;407pkt 407fpkt", shape=diamond, color=yellow];
2575[label="195.96.149.109;d;368pkt 368fpkt", shape=diamond, color=yellow];
2825[label="210.111.107.139;d;340pkt 340fpkt", shape=diamond, color=yellow];
2843[label="3.97.214.62;d;403pkt 403fpkt", shape=diamond, color=yellow];
2853[label="194.56.58.12;d;302pkt 302fpkt", shape=diamond, color=yellow];
2865[label="91.134.89.214;d;334pkt 334fpkt", shape=diamond, color=yellow];
3180[label="92.4.20.159;d;291pkt 291fpkt", shape=diamond, color=yellow];
3186[label="210.118.14.24;d;289pkt 289fpkt", shape=diamond, color=yellow];
3187[label="90.146.195.175;d;286pkt 286fpkt", shape=diamond, color=yellow];
3223[label="200.162.100.24;s;20pkt 20fpkt", shape=diamond, color=yellow];
3251[label="195.35.182.227;d;20pkt 20fpkt", shape=diamond, color=yellow];
3271[label="18.132.105.138;d;97pkt 97fpkt", shape=diamond, color=yellow];
3287[label="194.245.36.135;s;41pkt 41fpkt", shape=diamond, color=yellow];
3621[label="25.162.129.153;d;11pkt 11fpkt", shape=diamond, color=yellow];
4256[label="141.54.200.170;s;456pkt 456fpkt", shape=hexagon, color=black];
4268[label="194.245.38.36;s;40pkt 40fpkt", shape=hexagon, color=black];
4333[label="194.245.34.80;s;506pkt 506fpkt", shape=hexagon, color=black];
4799[label="214.69.192.115;d;340pkt 340fpkt", shape=hexagon, color=black];
4818[label="195.96.149.109;d;254pkt 254fpkt", shape=hexagon, color=black];
4954[label="3.97.214.62;d;321pkt 321fpkt", shape=hexagon, color=black];
4972[label="169.69.166.46;s;322pkt 322fpkt", shape=hexagon, color=black];
5155[label="92.4.20.159;d;257pkt 257fpkt", shape=hexagon, color=black];
5262[label="25.162.129.153;d;11pkt 11fpkt", shape=hexagon, color=black];
5813[label="200.162.100.26;14pkt 14fpkt", shape=pentagon, color=darkviolet];
5829[label="195.187.235.27;72pkt 72fpkt", shape=pentagon, color=darkviolet];
5912[label="194.245.38.36;71pkt 71fpkt", shape=pentagon, color=darkviolet];
6280[label="195.187.249.72;35pkt 35fpkt", shape=pentagon, color=darkviolet];
6353[label="194.245.34.80;570pkt 570fpkt", shape=pentagon, color=darkviolet];
6400[label="194.245.32.84;34pkt 34fpkt", shape=pentagon, color=darkviolet];
6856[label="194.245.36.135;56pkt 56fpkt", shape=pentagon, color=darkviolet];
7182[label="141.54.200.170;693pkt 693fpkt", shape=pentagon, color=darkviolet];
7237[label="195.187.237.176;94pkt 94fpkt", shape=pentagon, color=darkviolet];
7478[label="200.163.81.207;84pkt 84fpkt", shape=pentagon, color=darkviolet];
7538[label="194.245.32.214;87pkt 87fpkt", shape=pentagon, color=darkviolet];
7814[label="194.17.10.254;107pkt 107fpkt", shape=pentagon, color=darkviolet];
7969[label="195.187.235.27;73pkt 73fpkt", shape=invtriangle, color=brown];
8235[label="194.245.32.84;34pkt 34fpkt", shape=invtriangle, color=brown];
8957[label="195.187.235.27;73pkt 73fpkt", shape=invhouse, color=bisque];
9057[label="194.245.32.84;33pkt 33fpkt", shape=invhouse, color=bisque];
stat707[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, *:0}[86.4527%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (79.9218%)&lt;BR/&gt; 25: (4.12023%)&lt;BR/&gt; 53: (4.08113%)&lt;BR/&gt; 49152: (3.33822%)&lt;BR/&gt; 2703: (1.3783%)&gt;];
}
1014--1525[label="0.00364964;1pkt 1fpkt"];
1014--2527[label="0.00176056;1pkt 1fpkt"];
1014--3621[label="0.0909091;1pkt 1fpkt"];
1014--4333[label="1;506pkt 506fpkt"];
1014--4750[label="0.00176056;1pkt 1fpkt"];
1014--5262[label="0.0909091;1pkt 1fpkt"];
1014--5429[label="0.00176056;1pkt 1fpkt"];
1014--6353[label="1;568pkt 568fpkt"];
1315--1335[label="0.0027248;1pkt 1fpkt"];
1315--1581[label="0.0192308;1pkt 1fpkt"];
1315--1593[label="0.0217391;1pkt 1fpkt"];
1315--1599[label="0.015625;1pkt 1fpkt"];
1315--1634[label="0.00666667;1pkt 1fpkt"];
1315--1656[label="0.00641026;1pkt 1fpkt"];
1315--1962[label="0.00729927;1pkt 1fpkt"];
1315--1999[label="0.015625;1pkt 1fpkt"];
1315--2022[label="0.00704225;1pkt 1fpkt"];
1315--2329[label="0.0454545;1pkt 1fpkt"];
1315--2331[label="0.00714286;1pkt 1fpkt"];
1315--2341[label="0.0736842;7pkt 7fpkt"];
1315--2556[label="0.00609756;1pkt 1fpkt"];
1315--2618[label="0.0075188;1pkt 1fpkt"];
1315--2638[label="0.00719424;1pkt 1fpkt"];
1315--2840[label="0.0181818;1pkt 1fpkt"];
1315--2875[label="0.0454545;1pkt 1fpkt"];
1315--2903[label="0.00813008;1pkt 1fpkt"];
1315--2912[label="0.00793651;1pkt 1fpkt"];
1315--3160[label="0.00813008;1pkt 1fpkt"];
1315--3190[label="0.0119048;1pkt 1fpkt"];
1315--3230[label="0.0126582;2pkt 2fpkt"];
1315--3271[label="0.329897;32pkt 32fpkt"];
1315--3565[label="0.00990099;1pkt 1fpkt"];
1315--4089[label="0.0501253;20pkt 20fpkt"];
1315--4256[label="1;456pkt 456fpkt"];
1315--4392[label="0.0434783;1pkt 1fpkt"];
1315--4593[label="0.0188679;1pkt 1fpkt"];
1315--4613[label="0.0192308;1pkt 1fpkt"];
1315--4646[label="0.0046729;1pkt 1fpkt"];
1315--4824[label="0.00396825;1pkt 1fpkt"];
1315--4836[label="0.00917431;1pkt 1fpkt"];
1315--4952[label="0.02;1pkt 1fpkt"];
1315--4964[label="0.00787402;1pkt 1fpkt"];
1315--4986[label="0.0454545;1pkt 1fpkt"];
1315--5032[label="0.00719424;1pkt 1fpkt"];
1315--5158[label="0.00680272;1pkt 1fpkt"];
1315--5165[label="0.0075188;1pkt 1fpkt"];
1315--5230[label="0.00813008;1pkt 1fpkt"];
1315--5327[label="0.0598291;7pkt 7fpkt"];
1315--5452[label="0.00459418;3pkt 3fpkt"];
1315--5453[label="0.0918836;60pkt 60fpkt"];
1315--5461[label="0.00612557;4pkt 4fpkt"];
1315--5466[label="0.0245023;16pkt 16fpkt"];
1315--5475[label="0.00153139;1pkt 1fpkt"];
1315--5477[label="0.0321593;21pkt 21fpkt"];
1315--5485[label="0.00459418;3pkt 3fpkt"];
1315--5486[label="0.0918836;60pkt 60fpkt"];
1315--5489[label="0.00612557;4pkt 4fpkt"];
1315--5501[label="0.0474732;31pkt 31fpkt"];
1315--5502[label="0.00153139;1pkt 1fpkt"];
1315--5504[label="0.0321593;21pkt 21fpkt"];
1315--5506[label="0.00459418;3pkt 3fpkt"];
1315--5507[label="0.0918836;60pkt 60fpkt"];
1315--5509[label="0.00612557;4pkt 4fpkt"];
1315--5520[label="0.00153139;1pkt 1fpkt"];
1315--7182[label="1;653pkt 653fpkt"];
1725--1962[label="0.0149254;1pkt 1fpkt"];
1725--2022[label="0.0149254;1pkt 1fpkt"];
1725--2391[label="0.037037;1pkt 1fpkt"];
1725--2527[label="0.0149254;1pkt 1fpkt"];
1725--2912[label="0.0149254;1pkt 1fpkt"];
1725--3180[label="0.0149254;1pkt 1fpkt"];
1725--3190[label="0.0149254;1pkt 1fpkt"];
1725--3271[label="0.0447761;3pkt 3fpkt"];
1725--3298[label="0.0149254;1pkt 1fpkt"];
1725--4089[label="0.0597015;4pkt 4fpkt"];
1725--4108[label="0.0333333;1pkt 1fpkt"];
1725--4268[label="1;40pkt 40fpkt"];
1725--4750[label="0.0149254;1pkt 1fpkt"];
1725--4964[label="0.0149254;1pkt 1fpkt"];
1725--5155[label="0.0149254;1pkt 1fpkt"];
1725--5158[label="0.0149254;1pkt 1fpkt"];
1725--5429[label="0.0149254;1pkt 1fpkt"];
1725--5912[label="1;67pkt 67fpkt"];
1970--2535[label="0.0028169;1pkt 1fpkt"];
1970--2560[label="0.00276243;1pkt 1fpkt"];
1970--2569[label="0.00276243;1pkt 1fpkt"];
1970--2575[label="0.00276243;1pkt 1fpkt"];
1970--2825[label="0.00294118;1pkt 1fpkt"];
1970--2843[label="0.00276243;1pkt 1fpkt"];
1970--2853[label="0.00331126;1pkt 1fpkt"];
1970--2865[label="0.00299401;1pkt 1fpkt"];
1970--3180[label="0.00343643;1pkt 1fpkt"];
1970--3186[label="0.00346021;1pkt 1fpkt"];
1970--3187[label="0.0034965;1pkt 1fpkt"];
1970--3251[label="0.05;1pkt 1fpkt"];
1970--4799[label="0.00294118;1pkt 1fpkt"];
1970--4818[label="0.00393701;1pkt 1fpkt"];
1970--4954[label="0.00311526;1pkt 1fpkt"];
1970--4972[label="1;322pkt 322fpkt"];
1970--5155[label="0.00389105;1pkt 1fpkt"];
2535--4010[label="0.0028169;1pkt 1fpkt"];
2535--4243[label="0.00505051;1pkt 1fpkt"];
2535--4569[label="0.0028169;1pkt 1fpkt"];
2535--4972[label="0.00310559;1pkt 1fpkt"];
2535--5829[label="0.0138889;1pkt 1fpkt"];
2535--6280[label="0.0285714;1pkt 1fpkt"];
2535--6400[label="0.0294118;1pkt 1fpkt"];
2535--7237[label="0.0106383;1pkt 1fpkt"];
2535--7538[label="0.0114943;1pkt 1fpkt"];
2535--7969[label="0.0136986;1pkt 1fpkt"];
2535--8235[label="0.0294118;1pkt 1fpkt"];
2535--8957[label="0.0136986;1pkt 1fpkt"];
2535--9057[label="0.030303;1pkt 1fpkt"];
2560--3223[label="0.05;1pkt 1fpkt"];
2560--3287[label="0.0243902;1pkt 1fpkt"];
2560--4010[label="0.00263852;1pkt 1fpkt"];
2560--4183[label="0.00265252;1pkt 1fpkt"];
2560--4243[label="0.00505051;1pkt 1fpkt"];
2560--4799[label="1;340pkt 340fpkt"];
2560--4972[label="0.00310559;1pkt 1fpkt"];
2560--5801[label="0.0128205;1pkt 1fpkt"];
2560--5813[label="0.0714286;1pkt 1fpkt"];
2560--5829[label="0.0138889;1pkt 1fpkt"];
2560--6280[label="0.0285714;1pkt 1fpkt"];
2560--6768[label="0.00263852;1pkt 1fpkt"];
2560--6856[label="0.0178571;1pkt 1fpkt"];
2560--7237[label="0.0106383;1pkt 1fpkt"];
2560--7969[label="0.0136986;1pkt 1fpkt"];
2560--8414[label="0.00263852;1pkt 1fpkt"];
2560--8957[label="0.0136986;1pkt 1fpkt"];
2560--9126[label="0.00263852;1pkt 1fpkt"];
2569--3223[label="0.05;1pkt 1fpkt"];
2569--4010[label="0.002457;1pkt 1fpkt"];
2569--4183[label="0.00265252;1pkt 1fpkt"];
2569--4243[label="0.00505051;1pkt 1fpkt"];
2569--4569[label="0.002457;1pkt 1fpkt"];
2569--4972[label="0.00310559;1pkt 1fpkt"];
2569--5829[label="0.0138889;1pkt 1fpkt"];
2569--6400[label="0.0294118;1pkt 1fpkt"];
2569--6768[label="0.002457;1pkt 1fpkt"];
2569--7237[label="0.0106383;1pkt 1fpkt"];
2569--7969[label="0.0136986;1pkt 1fpkt"];
2569--8235[label="0.0294118;1pkt 1fpkt"];
2569--8414[label="0.002457;1pkt 1fpkt"];
2569--8957[label="0.0136986;1pkt 1fpkt"];
2569--9057[label="0.030303;1pkt 1fpkt"];
2569--9126[label="0.002457;1pkt 1fpkt"];
2575--3223[label="0.05;1pkt 1fpkt"];
2575--3604[label="0.00793651;1pkt 1fpkt"];
2575--4010[label="0.00271739;1pkt 1fpkt"];
2575--4243[label="0.00505051;1pkt 1fpkt"];
2575--4569[label="0.00271739;1pkt 1fpkt"];
2575--4818[label="1;254pkt 254fpkt"];
2575--4972[label="0.00310559;1pkt 1fpkt"];
2575--5829[label="0.0138889;1pkt 1fpkt"];
2575--6280[label="0.0285714;1pkt 1fpkt"];
2575--6554[label="0.0114943;1pkt 1fpkt"];
2575--7814[label="0.00934579;1pkt 1fpkt"];
2575--7969[label="0.0136986;1pkt 1fpkt"];
2575--8957[label="0.0136986;1pkt 1fpkt"];
2825--4010[label="0.00294118;1pkt 1fpkt"];
2825--4183[label="0.00294118;1pkt 1fpkt"];
2825--4243[label="0.00505051;1pkt 1fpkt"];
2825--4569[label="0.00294118;1pkt 1fpkt"];
2825--4972[label="0.00310559;1pkt 1fpkt"];
2825--5813[label="0.0714286;1pkt 1fpkt"];
2825--5829[label="0.0138889;1pkt 1fpkt"];
2825--6280[label="0.0285714;1pkt 1fpkt"];
2825--6768[label="0.00294118;1pkt 1fpkt"];
2825--7237[label="0.0106383;1pkt 1fpkt"];
2825--7538[label="0.0114943;1pkt 1fpkt"];
2825--7969[label="0.0136986;1pkt 1fpkt"];
2825--8414[label="0.00294118;1pkt 1fpkt"];
2825--8957[label="0.0136986;1pkt 1fpkt"];
2825--9126[label="0.00294118;1pkt 1fpkt"];
2843--4010[label="0.00248139;1pkt 1fpkt"];
2843--4243[label="0.00505051;1pkt 1fpkt"];
2843--4569[label="0.00248139;1pkt 1fpkt"];
2843--4954[label="1;321pkt 321fpkt"];
2843--4972[label="0.00310559;1pkt 1fpkt"];
2843--5829[label="0.0138889;1pkt 1fpkt"];
2843--6280[label="0.0285714;1pkt 1fpkt"];
2843--6400[label="0.0294118;1pkt 1fpkt"];
2843--7237[label="0.0106383;1pkt 1fpkt"];
2843--7538[label="0.0114943;1pkt 1fpkt"];
2843--7969[label="0.0136986;1pkt 1fpkt"];
2843--8235[label="0.0294118;1pkt 1fpkt"];
2843--8957[label="0.0136986;1pkt 1fpkt"];
2843--9057[label="0.030303;1pkt 1fpkt"];
2853--4010[label="0.00331126;1pkt 1fpkt"];
2853--4183[label="0.00331126;1pkt 1fpkt"];
2853--4243[label="0.00505051;1pkt 1fpkt"];
2853--4972[label="0.00331126;1pkt 1fpkt"];
2853--5829[label="0.0138889;1pkt 1fpkt"];
2853--6280[label="0.0285714;1pkt 1fpkt"];
2853--6768[label="0.00331126;1pkt 1fpkt"];
2853--7237[label="0.0106383;1pkt 1fpkt"];
2853--7538[label="0.0114943;1pkt 1fpkt"];
2853--7969[label="0.0136986;1pkt 1fpkt"];
2853--8414[label="0.00331126;1pkt 1fpkt"];
2853--8957[label="0.0136986;1pkt 1fpkt"];
2853--9126[label="0.00331126;1pkt 1fpkt"];
2865--4010[label="0.00299401;1pkt 1fpkt"];
2865--4183[label="0.00299401;1pkt 1fpkt"];
2865--4243[label="0.00505051;1pkt 1fpkt"];
2865--4569[label="0.00299401;1pkt 1fpkt"];
2865--4972[label="0.00310559;1pkt 1fpkt"];
2865--5829[label="0.0138889;1pkt 1fpkt"];
2865--6280[label="0.0285714;1pkt 1fpkt"];
2865--6400[label="0.0294118;1pkt 1fpkt"];
2865--6768[label="0.00299401;1pkt 1fpkt"];
2865--7237[label="0.0106383;1pkt 1fpkt"];
2865--7538[label="0.0114943;1pkt 1fpkt"];
2865--7969[label="0.0136986;1pkt 1fpkt"];
2865--8235[label="0.0294118;1pkt 1fpkt"];
2865--8414[label="0.00299401;1pkt 1fpkt"];
2865--8957[label="0.0136986;1pkt 1fpkt"];
2865--9057[label="0.030303;1pkt 1fpkt"];
2865--9126[label="0.00299401;1pkt 1fpkt"];
3180--4010[label="0.00343643;1pkt 1fpkt"];
3180--4243[label="0.00505051;1pkt 1fpkt"];
3180--4569[label="0.00343643;1pkt 1fpkt"];
3180--4971[label="0.0163934;1pkt 1fpkt"];
3180--4972[label="0.00343643;1pkt 1fpkt"];
3180--5155[label="1;257pkt 257fpkt"];
3180--5694[label="0.0344828;1pkt 1fpkt"];
3180--5829[label="0.0138889;1pkt 1fpkt"];
3180--5912[label="0.0140845;1pkt 1fpkt"];
3180--6280[label="0.0285714;1pkt 1fpkt"];
3180--6400[label="0.0294118;1pkt 1fpkt"];
3180--7125[label="0.010989;1pkt 1fpkt"];
3180--7237[label="0.0106383;1pkt 1fpkt"];
3180--7538[label="0.0114943;1pkt 1fpkt"];
3180--7969[label="0.0136986;1pkt 1fpkt"];
3180--8235[label="0.0294118;1pkt 1fpkt"];
3180--8572[label="0.010989;1pkt 1fpkt"];
3180--8957[label="0.0136986;1pkt 1fpkt"];
3180--9057[label="0.030303;1pkt 1fpkt"];
3186--4010[label="0.00346021;1pkt 1fpkt"];
3186--4243[label="0.00505051;1pkt 1fpkt"];
3186--4569[label="0.00346021;1pkt 1fpkt"];
3186--4972[label="0.00346021;1pkt 1fpkt"];
3186--5829[label="0.0138889;1pkt 1fpkt"];
3186--6280[label="0.0285714;1pkt 1fpkt"];
3186--6400[label="0.0294118;1pkt 1fpkt"];
3186--7237[label="0.0106383;1pkt 1fpkt"];
3186--7969[label="0.0136986;1pkt 1fpkt"];
3186--8235[label="0.0294118;1pkt 1fpkt"];
3186--8957[label="0.0136986;1pkt 1fpkt"];
3186--9057[label="0.030303;1pkt 1fpkt"];
3187--4010[label="0.0034965;1pkt 1fpkt"];
3187--4243[label="0.00505051;1pkt 1fpkt"];
3187--4569[label="0.0034965;1pkt 1fpkt"];
3187--4972[label="0.0034965;1pkt 1fpkt"];
3187--5829[label="0.0138889;1pkt 1fpkt"];
3187--6280[label="0.0285714;1pkt 1fpkt"];
3187--7969[label="0.0136986;1pkt 1fpkt"];
3187--8957[label="0.0136986;1pkt 1fpkt"];
3223--4799[label="0.05;1pkt 1fpkt"];
3223--4818[label="0.05;1pkt 1fpkt"];
3251--4972[label="0.05;1pkt 1fpkt"];
3251--5829[label="0.05;1pkt 1fpkt"];
3251--6280[label="0.05;1pkt 1fpkt"];
3251--7237[label="0.15;3pkt 3fpkt"];
3251--7969[label="0.05;1pkt 1fpkt"];
3251--8957[label="0.05;1pkt 1fpkt"];
3271--4256[label="0.164948;16pkt 16fpkt"];
3271--4268[label="0.025;1pkt 1fpkt"];
3271--5912[label="0.0422535;3pkt 3fpkt"];
3271--6180[label="0.0731707;3pkt 3fpkt"];
3271--7182[label="0.329897;32pkt 32fpkt"];
3287--3621[label="0.0909091;1pkt 1fpkt"];
3287--3930[label="0.037037;1pkt 1fpkt"];
3287--4750[label="0.0243902;1pkt 1fpkt"];
3287--4799[label="0.0243902;1pkt 1fpkt"];
3287--5262[label="0.0909091;1pkt 1fpkt"];
3287--5429[label="0.0243902;1pkt 1fpkt"];
3287--6856[label="1;41pkt 41fpkt"];
3621--4333[label="0.0909091;1pkt 1fpkt"];
3621--5262[label="1;11pkt 11fpkt"];
3621--6353[label="0.0909091;1pkt 1fpkt"];
3621--6856[label="0.0909091;1pkt 1fpkt"];
3621--7478[label="0.0909091;1pkt 1fpkt"];
3621--7538[label="0.0909091;1pkt 1fpkt"];
3621--7814[label="0.0909091;1pkt 1fpkt"];
4256--4392[label="0.0434783;1pkt 1fpkt"];
4256--4593[label="0.0188679;1pkt 1fpkt"];
4256--4613[label="0.0192308;1pkt 1fpkt"];
4256--4646[label="0.0046729;1pkt 1fpkt"];
4256--4824[label="0.00396825;1pkt 1fpkt"];
4256--4836[label="0.00917431;1pkt 1fpkt"];
4256--4952[label="0.02;1pkt 1fpkt"];
4256--4964[label="0.00787402;1pkt 1fpkt"];
4256--4986[label="0.0454545;1pkt 1fpkt"];
4256--5032[label="0.00719424;1pkt 1fpkt"];
4256--5158[label="0.00680272;1pkt 1fpkt"];
4256--5165[label="0.0075188;1pkt 1fpkt"];
4256--5230[label="0.00813008;1pkt 1fpkt"];
4256--5327[label="0.0598291;7pkt 7fpkt"];
4256--5452[label="0.00657895;3pkt 3fpkt"];
4256--5453[label="0.131579;60pkt 60fpkt"];
4256--5461[label="0.00438596;2pkt 2fpkt"];
4256--5466[label="0.00657895;3pkt 3fpkt"];
4256--5477[label="0.0350877;16pkt 16fpkt"];
4256--5485[label="0.00657895;3pkt 3fpkt"];
4256--5486[label="0.131579;60pkt 60fpkt"];
4256--5489[label="0.00438596;2pkt 2fpkt"];
4256--5501[label="0.00438596;2pkt 2fpkt"];
4256--5504[label="0.0350877;16pkt 16fpkt"];
4256--5506[label="0.00657895;3pkt 3fpkt"];
4256--5507[label="0.131579;60pkt 60fpkt"];
4256--5509[label="0.00438596;2pkt 2fpkt"];
4256--7182[label="1;456pkt 456fpkt"];
4268--4964[label="0.025;1pkt 1fpkt"];
4268--5912[label="1;40pkt 40fpkt"];
4333--5262[label="0.0909091;1pkt 1fpkt"];
4333--6353[label="1;506pkt 506fpkt"];
4799--4972[label="0.00310559;1pkt 1fpkt"];
4799--5801[label="0.0128205;1pkt 1fpkt"];
4799--5813[label="0.0714286;1pkt 1fpkt"];
4799--5829[label="0.0138889;1pkt 1fpkt"];
4799--6280[label="0.0285714;1pkt 1fpkt"];
4799--6768[label="0.00294118;1pkt 1fpkt"];
4799--6856[label="0.0178571;1pkt 1fpkt"];
4799--7237[label="0.0106383;1pkt 1fpkt"];
4799--7969[label="0.0136986;1pkt 1fpkt"];
4799--8414[label="0.00294118;1pkt 1fpkt"];
4799--8957[label="0.0136986;1pkt 1fpkt"];
4799--9126[label="0.00294118;1pkt 1fpkt"];
4818--4972[label="0.00393701;1pkt 1fpkt"];
4818--5829[label="0.0138889;1pkt 1fpkt"];
4818--6280[label="0.0285714;1pkt 1fpkt"];
4818--6554[label="0.0114943;1pkt 1fpkt"];
4818--7814[label="0.00934579;1pkt 1fpkt"];
4818--7969[label="0.0136986;1pkt 1fpkt"];
4818--8957[label="0.0136986;1pkt 1fpkt"];
4954--4972[label="0.00311526;1pkt 1fpkt"];
4954--5829[label="0.0138889;1pkt 1fpkt"];
4954--6280[label="0.0285714;1pkt 1fpkt"];
4954--6400[label="0.0294118;1pkt 1fpkt"];
4954--7237[label="0.0106383;1pkt 1fpkt"];
4954--7538[label="0.0114943;1pkt 1fpkt"];
4954--7969[label="0.0136986;1pkt 1fpkt"];
4954--8235[label="0.0294118;1pkt 1fpkt"];
4954--8957[label="0.0136986;1pkt 1fpkt"];
4954--9057[label="0.030303;1pkt 1fpkt"];
4972--5155[label="0.00389105;1pkt 1fpkt"];
5155--5694[label="0.0344828;1pkt 1fpkt"];
5155--5829[label="0.0138889;1pkt 1fpkt"];
5155--5912[label="0.0140845;1pkt 1fpkt"];
5155--6280[label="0.0285714;1pkt 1fpkt"];
5155--6400[label="0.0294118;1pkt 1fpkt"];
5155--7125[label="0.010989;1pkt 1fpkt"];
5155--7237[label="0.0106383;1pkt 1fpkt"];
5155--7538[label="0.0114943;1pkt 1fpkt"];
5155--7969[label="0.0136986;1pkt 1fpkt"];
5155--8235[label="0.0294118;1pkt 1fpkt"];
5155--8572[label="0.010989;1pkt 1fpkt"];
5155--8957[label="0.0136986;1pkt 1fpkt"];
5155--9057[label="0.030303;1pkt 1fpkt"];
5262--6353[label="0.0909091;1pkt 1fpkt"];
5262--6856[label="0.0909091;1pkt 1fpkt"];
5262--7478[label="0.0909091;1pkt 1fpkt"];
5262--7538[label="0.0909091;1pkt 1fpkt"];
5262--7814[label="0.0909091;1pkt 1fpkt"];
5829--7969[label="1;72pkt 72fpkt"];
5829--8957[label="1;72pkt 72fpkt"];
6400--8235[label="1;34pkt 34fpkt"];
6400--9057[label="1;33pkt 33fpkt"];
7969--8957[label="1;73pkt 73fpkt"];
8235--9057[label="1;33pkt 33fpkt"];
</description>
    <slice/>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.177.85.84"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
6413[label="210.16.182.84;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8241[label="210.16.182.84;22pkt 22fpkt", shape=invtriangle, color=brown];
9059[label="210.16.182.84;22pkt 22fpkt", shape=invhouse, color=bisque];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.16.182.84:80, 194.245.42.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59972: (2.27273%)&lt;BR/&gt; 59968: (2.27273%)&lt;BR/&gt; 59963: (2.27273%)&lt;BR/&gt; 59956: (2.27273%)&gt;];
}
6413--8241[label="1;22pkt 22fpkt"];
6413--9059[label="1;22pkt 22fpkt"];
8241--9059[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.42.108" src_ip="210.16.182.84" src_port="80"/>
    </slice>
    <from sec="1201929282" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.164.17.85"/>
    </slice>
    <from sec="1201928436" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
6426[label="195.178.90.85;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8249[label="195.178.90.85;15pkt 15fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.178.90.85:80, 27.172.212.112:*}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6667%)&lt;BR/&gt; 123: (6.66667%)&lt;BR/&gt; 61727: (3.33333%)&lt;BR/&gt; 54739: (3.33333%)&lt;BR/&gt; 54667: (3.33333%)&gt;];
}
6426--8249[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="27.172.212.112" src_ip="195.178.90.85" src_port="80"/>
    </slice>
    <from sec="1201928415" usec="0"/>
    <to sec="1201929011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
6428[label="169.16.132.85;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8250[label="169.16.132.85;12pkt 12fpkt", shape=invtriangle, color=brown];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.132.85:*, 211.219.64.220:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2207: (4.16667%)&lt;BR/&gt; 2205: (4.16667%)&lt;BR/&gt; 2204: (4.16667%)&lt;BR/&gt; 2203: (4.16667%)&gt;];
}
6428--8250[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="211.219.64.220" dst_port="80" src_ip="169.16.132.85"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_713{
style=filled;
color=gray75;
6434[label="192.200.163.85;122pkt 122fpkt", shape=pentagon, color=darkviolet];
8252[label="192.200.163.85;122pkt 122fpkt", shape=invtriangle, color=brown];
9064[label="192.200.163.85;122pkt 122fpkt", shape=invhouse, color=bisque];
stat713[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.200.163.85:*, *:1730}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1730: (50%)&lt;BR/&gt; 64668: (0.409836%)&lt;BR/&gt; 64093: (0.409836%)&lt;BR/&gt; 63450: (0.409836%)&lt;BR/&gt; 62845: (0.409836%)&gt;];
}
6434--8252[label="1;122pkt 122fpkt"];
6434--9064[label="1;122pkt 122fpkt"];
8252--9064[label="1;122pkt 122fpkt"];
</description>
    <slice>
      <filter dst_port="1730" src_ip="192.200.163.85"/>
    </slice>
    <from sec="1201928417" usec="0"/>
    <to sec="1201929295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.35.253.85"/>
    </slice>
    <from sec="1201928934" usec="0"/>
    <to sec="1201928970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
6443[label="210.16.182.86;20pkt 20fpkt", shape=pentagon, color=darkviolet];
8257[label="210.16.182.86;20pkt 20fpkt", shape=invtriangle, color=brown];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.16.182.86:80, 194.245.42.108:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45258: (2.5%)&lt;BR/&gt; 45252: (2.5%)&lt;BR/&gt; 45251: (2.5%)&lt;BR/&gt; 45243: (2.5%)&gt;];
}
6443--8257[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.42.108" src_ip="210.16.182.86" src_port="80"/>
    </slice>
    <from sec="1201929282" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.33.3.87"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201928755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.83.37.87"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_718{
style=filled;
color=gray75;
6456[label="218.98.214.87;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8263[label="218.98.214.87;1pkt 1fpkt", shape=invtriangle, color=brown];
stat718[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.98.214.87:4949, 194.245.42.56:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4949: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6456--8263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.42.56" dst_port="80" src_ip="218.98.214.87" src_port="4949"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_719{
style=filled;
color=gray75;
6458[label="27.162.10.88;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8265[label="27.162.10.88;3pkt 3fpkt", shape=invtriangle, color=brown];
9068[label="27.162.10.88;3pkt 3fpkt", shape=invhouse, color=bisque];
stat719[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.162.10.88:1908, 194.245.37.187:80}[33.3333%]&lt;BR/&gt;{27.162.10.88:1909, 194.245.37.187:80}[33.3333%]&lt;BR/&gt;{27.162.10.88:1910, 194.245.37.187:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1910: (16.6667%)&lt;BR/&gt; 1909: (16.6667%)&lt;BR/&gt; 1908: (16.6667%)&gt;];
}
6458--8265[label="1;3pkt 3fpkt"];
6458--9068[label="1;3pkt 3fpkt"];
8265--9068[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.37.187" dst_port="80" src_ip="27.162.10.88" src_port="1910"/>
      <filter dst_ip="194.245.37.187" dst_port="80" src_ip="27.162.10.88" src_port="1909"/>
      <filter dst_ip="194.245.37.187" dst_port="80" src_ip="27.162.10.88" src_port="1908"/>
    </slice>
    <from sec="1201929131" usec="0"/>
    <to sec="1201929224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.181.52.88"/>
    </slice>
    <from sec="1201928826" usec="0"/>
    <to sec="1201928831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.136.181.88"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.66.195.88"/>
    </slice>
    <from sec="1201928802" usec="0"/>
    <to sec="1201928898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_723{
style=filled;
color=gray75;
6481[label="169.16.175.89;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8278[label="169.16.175.89;3pkt 3fpkt", shape=invtriangle, color=brown];
stat723[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.175.89:80, 27.172.208.23:39490}[33.3333%]&lt;BR/&gt;{169.16.175.89:80, 93.86.193.194:1877}[33.3333%]&lt;BR/&gt;{169.16.175.89:80, 93.86.193.194:1878}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 39490: (16.6667%)&lt;BR/&gt; 1878: (16.6667%)&lt;BR/&gt; 1877: (16.6667%)&gt;];
}
6481--8278[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="93.86.193.194" dst_port="1878" src_ip="169.16.175.89" src_port="80"/>
      <filter dst_ip="93.86.193.194" dst_port="1877" src_ip="169.16.175.89" src_port="80"/>
      <filter dst_ip="27.172.208.23" dst_port="39490" src_ip="169.16.175.89" src_port="80"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.84.10.91"/>
    </slice>
    <from sec="1201928506" usec="0"/>
    <to sec="1201929259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_725{
style=filled;
color=gray75;
6530[label="213.14.42.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8294[label="213.14.42.96;2pkt 2fpkt", shape=invtriangle, color=brown];
stat725[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.14.42.96:4814, 169.16.175.10:3128}[50%]&lt;BR/&gt;{213.14.42.96:4816, 169.16.175.10:3128}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (50%)&lt;BR/&gt; 4816: (25%)&lt;BR/&gt; 4814: (25%)&gt;];
}
6530--8294[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.175.10" dst_port="3128" src_ip="213.14.42.96" src_port="4816"/>
      <filter dst_ip="169.16.175.10" dst_port="3128" src_ip="213.14.42.96" src_port="4814"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_726{
style=filled;
color=gray75;
899[label="169.16.16.168;d;39pkt 39fpkt", shape=diamond, color=yellow];
928[label="25.164.30.6;s;11pkt 11fpkt", shape=diamond, color=yellow];
3965[label="25.164.30.6;s;11pkt 11fpkt", shape=hexagon, color=black];
6545[label="25.164.30.97;25pkt 25fpkt", shape=pentagon, color=darkviolet];
8303[label="25.164.30.97;25pkt 25fpkt", shape=invtriangle, color=brown];
stat726[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.164.30.97:80, 169.16.16.168:*}[64.1026%]&lt;BR/&gt;{25.164.30.6:80, 169.16.16.168:*}[28.2051%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3523: (1.35135%)&lt;BR/&gt; 3522: (1.35135%)&lt;BR/&gt; 3521: (1.35135%)&lt;BR/&gt; 3519: (1.35135%)&gt;];
}
899--928[label="1;11pkt 11fpkt"];
899--3965[label="1;11pkt 11fpkt"];
899--6545[label="1;25pkt 25fpkt"];
899--8303[label="1;25pkt 25fpkt"];
928--3965[label="1;11pkt 11fpkt"];
6545--8303[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.16.168" src_ip="25.164.30.97" src_port="80"/>
      <filter dst_ip="169.16.16.168" src_ip="25.164.30.6" src_port="80"/>
    </slice>
    <from sec="1201928408" usec="0"/>
    <to sec="1201928571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_727{
style=filled;
color=gray75;
6547[label="138.43.130.97;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8304[label="138.43.130.97;14pkt 14fpkt", shape=invtriangle, color=brown];
9078[label="138.43.130.97;14pkt 14fpkt", shape=invhouse, color=bisque];
stat727[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.130.97:*, 29.132.179.149:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10018: (3.57143%)&lt;BR/&gt; 1123: (3.57143%)&lt;BR/&gt; 1122: (3.57143%)&lt;BR/&gt; 1121: (3.57143%)&gt;];
}
6547--8304[label="1;14pkt 14fpkt"];
6547--9078[label="1;14pkt 14fpkt"];
8304--9078[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="29.132.179.149" dst_port="80" src_ip="138.43.130.97"/>
    </slice>
    <from sec="1201929201" usec="0"/>
    <to sec="1201929261" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_728{
style=filled;
color=gray75;
6550[label="169.16.18.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8306[label="169.16.18.98;1pkt 1fpkt", shape=invtriangle, color=brown];
stat728[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.18.98:49775, 101.241.78.166:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49775: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6550--8306[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="101.241.78.166" dst_port="80" src_ip="169.16.18.98" src_port="49775"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.228.114.98"/>
    </slice>
    <from sec="1201928786" usec="0"/>
    <to sec="1201929248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.134.146.101"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
6587[label="88.94.244.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8321[label="88.94.244.101;1pkt 1fpkt", shape=invtriangle, color=brown];
9085[label="88.94.244.101;1pkt 1fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{88.94.244.101:3007, 195.178.64.249:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3007: (50%)&gt;];
}
6587--8321[label="1;1pkt 1fpkt"];
6587--9085[label="1;1pkt 1fpkt"];
8321--9085[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.64.249" dst_port="8080" src_ip="88.94.244.101" src_port="3007"/>
    </slice>
    <from sec="1201929251" usec="0"/>
    <to sec="1201929278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.202.255.101"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201928413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,002,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
6593[label="0.200.39.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8324[label="0.200.39.102;2pkt 2fpkt", shape=invtriangle, color=brown];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.200.39.102:58820, 169.16.86.113:137}[50%]&lt;BR/&gt;{0.200.39.102:58824, 169.16.85.115:137}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 58824: (25%)&lt;BR/&gt; 58820: (25%)&gt;];
}
6593--8324[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.85.115" dst_port="137" src_ip="0.200.39.102" src_port="58824"/>
      <filter dst_ip="169.16.86.113" dst_port="137" src_ip="0.200.39.102" src_port="58820"/>
    </slice>
    <from sec="1201928423" usec="0"/>
    <to sec="1201929288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
6597[label="208.193.113.102;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8327[label="208.193.113.102;2pkt 2fpkt", shape=invtriangle, color=brown];
9086[label="208.193.113.102;2pkt 2fpkt", shape=invhouse, color=bisque];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.193.113.102:80, 195.178.141.96:38037}[50%]&lt;BR/&gt;{208.193.113.102:80, 195.178.141.96:38038}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38038: (25%)&lt;BR/&gt; 38037: (25%)&gt;];
}
6597--8327[label="1;2pkt 2fpkt"];
6597--9086[label="1;2pkt 2fpkt"];
8327--9086[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.141.96" dst_port="38038" src_ip="208.193.113.102" src_port="80"/>
      <filter dst_ip="195.178.141.96" dst_port="38037" src_ip="208.193.113.102" src_port="80"/>
    </slice>
    <from sec="1201929273" usec="0"/>
    <to sec="1201929275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
6609[label="45.188.37.104;12pkt 12fpkt", shape=pentagon, color=darkviolet];
8331[label="45.188.37.104;12pkt 12fpkt", shape=invtriangle, color=brown];
9088[label="45.188.37.104;12pkt 12fpkt", shape=invhouse, color=bisque];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.188.37.104:80, 141.54.203.42:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63328: (4.16667%)&lt;BR/&gt; 60368: (4.16667%)&lt;BR/&gt; 1900: (4.16667%)&lt;BR/&gt; 1735: (4.16667%)&gt;];
}
6609--8331[label="1;12pkt 12fpkt"];
6609--9088[label="1;12pkt 12fpkt"];
8331--9088[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.203.42" src_ip="45.188.37.104" src_port="80"/>
    </slice>
    <from sec="1201928443" usec="0"/>
    <to sec="1201929092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
6622[label="195.187.249.104;123pkt 123fpkt", shape=pentagon, color=darkviolet];
8338[label="195.187.249.104;123pkt 123fpkt", shape=invtriangle, color=brown];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.187.249.104:53, *:*}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.4065%)&lt;BR/&gt; 32768: (1.62602%)&lt;BR/&gt; 52910: (1.21951%)&lt;BR/&gt; 33266: (0.813008%)&lt;BR/&gt; 32826: (0.813008%)&gt;];
}
6622--8338[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter src_ip="195.187.249.104" src_port="53"/>
    </slice>
    <from sec="1201928417" usec="0"/>
    <to sec="1201929291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_737{
style=filled;
color=gray75;
6641[label="29.132.180.106;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8347[label="29.132.180.106;15pkt 15fpkt", shape=invtriangle, color=brown];
stat737[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.132.180.106:80, 195.178.138.31:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3680: (3.33333%)&lt;BR/&gt; 3678: (3.33333%)&lt;BR/&gt; 3677: (3.33333%)&lt;BR/&gt; 3676: (3.33333%)&gt;];
}
6641--8347[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.138.31" src_ip="29.132.180.106" src_port="80"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.184.201.106"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.14.229.106"/>
    </slice>
    <from sec="1201928489" usec="0"/>
    <to sec="1201928658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.18.152.108"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929145" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_741{
style=filled;
color=gray75;
6688[label="198.239.184.111;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8374[label="198.239.184.111;13pkt 13fpkt", shape=invtriangle, color=brown];
stat741[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.239.184.111:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6688--8374[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="198.239.184.111"/>
    </slice>
    <from sec="1201928424" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.131.105.113"/>
    </slice>
    <from sec="1201929267" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.54.110.113"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.214.167.114"/>
    </slice>
    <from sec="1201928537" usec="0"/>
    <to sec="1201928967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.70.121.115"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.96.124.115"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
6738[label="211.246.178.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8399[label="211.246.178.119;2pkt 2fpkt", shape=invtriangle, color=brown];
9117[label="211.246.178.119;2pkt 2fpkt", shape=invhouse, color=bisque];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.246.178.119:1383, 194.245.40.62:3124}[50%]&lt;BR/&gt;{211.246.178.119:3250, 194.245.40.63:100}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3250: (25%)&lt;BR/&gt; 3124: (25%)&lt;BR/&gt; 1383: (25%)&lt;BR/&gt; 100: (25%)&gt;];
}
6738--8399[label="1;2pkt 2fpkt"];
6738--9117[label="1;2pkt 2fpkt"];
8399--9117[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.40.63" dst_port="100" src_ip="211.246.178.119" src_port="3250"/>
      <filter dst_ip="194.245.40.62" dst_port="3124" src_ip="211.246.178.119" src_port="1383"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.989698,2.06898,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
445[label="194.245.46.233;d;217pkt 217fpkt", shape=diamond, color=yellow];
1128[label="217.117.76.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
1212[label="5.229.8.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
1729[label="138.201.153.15;d;8pkt 8fpkt", shape=diamond, color=yellow];
2615[label="169.16.18.98;d;26pkt 26fpkt", shape=diamond, color=yellow];
2771[label="27.70.32.3;s;1pkt 1fpkt", shape=diamond, color=yellow];
2856[label="21.163.12.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
2976[label="17.40.112.82;s;2pkt 2fpkt", shape=diamond, color=yellow];
3012[label="5.229.8.62;s;3pkt 3fpkt", shape=diamond, color=yellow];
4596[label="5.229.8.184;s;1pkt 1fpkt", shape=hexagon, color=black];
4661[label="138.201.153.15;d;8pkt 8fpkt", shape=hexagon, color=black];
4781[label="217.117.76.249;s;1pkt 1fpkt", shape=hexagon, color=black];
5164[label="169.16.18.98;d;26pkt 26fpkt", shape=hexagon, color=black];
5562[label="27.70.32.3;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5871[label="217.12.129.32;1pkt 1fpkt", shape=pentagon, color=darkviolet];
6058[label="194.80.33.52;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6113[label="194.35.237.56;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6158[label="5.229.8.62;3pkt 3fpkt", shape=pentagon, color=darkviolet];
6477[label="25.174.115.89;21pkt 21fpkt", shape=pentagon, color=darkviolet];
6751[label="25.174.81.121;18pkt 18fpkt", shape=pentagon, color=darkviolet];
7040[label="22.159.51.155;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7646[label="23.66.86.227;13pkt 13fpkt", shape=pentagon, color=darkviolet];
7984[label="217.12.129.32;1pkt 1fpkt", shape=invtriangle, color=brown];
8073[label="194.80.33.52;2pkt 2fpkt", shape=invtriangle, color=brown];
8113[label="5.229.8.62;3pkt 3fpkt", shape=invtriangle, color=brown];
8274[label="25.174.115.89;21pkt 21fpkt", shape=invtriangle, color=brown];
8406[label="25.174.81.121;18pkt 18fpkt", shape=invtriangle, color=brown];
8814[label="23.66.86.227;13pkt 13fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 194.245.46.233:6966}[47.4048%]&lt;BR/&gt;{*:80, *:*}[23.1834%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6966: (20.922%)&lt;BR/&gt; 80: (13.8298%)&lt;BR/&gt; 5222: (3.5461%)&lt;BR/&gt; 22: (2.60047%)&lt;BR/&gt; 143: (1.41844%)&gt;];
}
445--1128[label="1;1pkt 1fpkt"];
445--1212[label="1;1pkt 1fpkt"];
445--1645[label="0.10989;10pkt 10fpkt"];
445--2528[label="0.101382;22pkt 22fpkt"];
445--2716[label="0.0105263;1pkt 1fpkt"];
445--2717[label="0.00970874;1pkt 1fpkt"];
445--2771[label="1;1pkt 1fpkt"];
445--2856[label="1;1pkt 1fpkt"];
445--3012[label="1;3pkt 3fpkt"];
445--4596[label="1;1pkt 1fpkt"];
445--4612[label="0.172414;10pkt 10fpkt"];
445--4751[label="0.101382;22pkt 22fpkt"];
445--4781[label="1;1pkt 1fpkt"];
445--4888[label="0.0121951;1pkt 1fpkt"];
445--5397[label="0.0136986;1pkt 1fpkt"];
445--5399[label="0.101382;22pkt 22fpkt"];
445--5451[label="0.00460829;1pkt 1fpkt"];
445--5454[label="0.00460829;1pkt 1fpkt"];
445--5461[label="0.00460829;1pkt 1fpkt"];
445--5474[label="0.0322581;7pkt 7fpkt"];
445--5484[label="0.00460829;1pkt 1fpkt"];
445--5487[label="0.00460829;1pkt 1fpkt"];
445--5489[label="0.00460829;1pkt 1fpkt"];
445--5500[label="0.0322581;7pkt 7fpkt"];
445--5505[label="0.00460829;1pkt 1fpkt"];
445--5508[label="0.00460829;1pkt 1fpkt"];
445--5509[label="0.00460829;1pkt 1fpkt"];
445--5518[label="0.0322581;7pkt 7fpkt"];
445--5562[label="1;1pkt 1fpkt"];
445--6158[label="1;3pkt 3fpkt"];
445--6332[label="0.00970874;1pkt 1fpkt"];
445--6477[label="0.047619;1pkt 1fpkt"];
445--6751[label="0.0555556;1pkt 1fpkt"];
445--7526[label="0.0166667;1pkt 1fpkt"];
445--7552[label="0.0105263;1pkt 1fpkt"];
445--7646[label="1;13pkt 13fpkt"];
445--8113[label="1;3pkt 3fpkt"];
445--8274[label="0.047619;1pkt 1fpkt"];
445--8406[label="0.0555556;1pkt 1fpkt"];
445--8759[label="0.0166667;1pkt 1fpkt"];
445--8770[label="0.0105263;1pkt 1fpkt"];
445--8814[label="1;13pkt 13fpkt"];
445--9138[label="0.0967742;21pkt 21fpkt"];
1128--4781[label="1;1pkt 1fpkt"];
1212--4596[label="1;1pkt 1fpkt"];
1729--2976[label="1;2pkt 2fpkt"];
1729--4661[label="1;8pkt 8fpkt"];
1729--5871[label="1;1pkt 1fpkt"];
1729--6751[label="0.125;1pkt 1fpkt"];
1729--7040[label="1;4pkt 4fpkt"];
1729--7984[label="1;1pkt 1fpkt"];
1729--8406[label="0.125;1pkt 1fpkt"];
2615--5164[label="1;26pkt 26fpkt"];
2615--6058[label="0.333333;1pkt 1fpkt"];
2615--6113[label="0.8;4pkt 4fpkt"];
2615--6477[label="0.047619;1pkt 1fpkt"];
2615--8083[label="0.192308;5pkt 5fpkt"];
2615--8274[label="0.047619;1pkt 1fpkt"];
2771--5562[label="1;1pkt 1fpkt"];
2976--4661[label="1;2pkt 2fpkt"];
3012--6158[label="1;3pkt 3fpkt"];
3012--8113[label="1;3pkt 3fpkt"];
4661--5871[label="1;1pkt 1fpkt"];
4661--6751[label="0.125;1pkt 1fpkt"];
4661--7040[label="1;4pkt 4fpkt"];
4661--7984[label="1;1pkt 1fpkt"];
4661--8406[label="0.125;1pkt 1fpkt"];
5164--6058[label="0.333333;1pkt 1fpkt"];
5164--6113[label="0.8;4pkt 4fpkt"];
5164--6477[label="0.047619;1pkt 1fpkt"];
5164--8083[label="0.192308;5pkt 5fpkt"];
5164--8274[label="0.047619;1pkt 1fpkt"];
5871--7984[label="1;1pkt 1fpkt"];
6058--8073[label="1;2pkt 2fpkt"];
6158--8113[label="1;3pkt 3fpkt"];
6477--8274[label="1;21pkt 21fpkt"];
6751--8406[label="1;18pkt 18fpkt"];
7646--8814[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
      <filter dst_ip="194.245.46.233" dst_port="6966"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
6779[label="174.8.143.125;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8420[label="174.8.143.125;1pkt 1fpkt", shape=invtriangle, color=brown];
9129[label="174.8.143.125;1pkt 1fpkt", shape=invhouse, color=bisque];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{174.8.143.125:38974, 194.245.37.91:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38974: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6779--8420[label="1;1pkt 1fpkt"];
6779--9129[label="1;1pkt 1fpkt"];
8420--9129[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.37.91" dst_port="80" src_ip="174.8.143.125" src_port="38974"/>
    </slice>
    <from sec="1201929250" usec="0"/>
    <to sec="1201929258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
6785[label="27.210.55.126;30pkt 30fpkt", shape=pentagon, color=darkviolet];
8422[label="27.210.55.126;30pkt 30fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.210.55.126:443, 194.245.39.74:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3874: (1.66667%)&lt;BR/&gt; 3872: (1.66667%)&lt;BR/&gt; 3840: (1.66667%)&lt;BR/&gt; 3835: (1.66667%)&gt;];
}
6785--8422[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.39.74" src_ip="27.210.55.126" src_port="443"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.68.126.127"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201928999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
6795[label="45.188.3.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8428[label="45.188.3.128;2pkt 2fpkt", shape=invtriangle, color=brown];
9133[label="45.188.3.128;2pkt 2fpkt", shape=invhouse, color=bisque];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.188.3.128:80, 141.54.101.173:1365}[50%]&lt;BR/&gt;{45.188.3.128:80, 141.54.101.173:1366}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1366: (25%)&lt;BR/&gt; 1365: (25%)&gt;];
}
6795--8428[label="1;2pkt 2fpkt"];
6795--9133[label="1;2pkt 2fpkt"];
8428--9133[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.101.173" dst_port="1366" src_ip="45.188.3.128" src_port="80"/>
      <filter dst_ip="141.54.101.173" dst_port="1365" src_ip="45.188.3.128" src_port="80"/>
    </slice>
    <from sec="1201928530" usec="0"/>
    <to sec="1201928536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_753{
style=filled;
color=gray75;
6807[label="138.43.151.129;94pkt 94fpkt", shape=pentagon, color=darkviolet];
8434[label="138.43.151.129;94pkt 94fpkt", shape=invtriangle, color=brown];
stat753[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.151.129:*, 216.134.71.54:80}[29.7872%]&lt;BR/&gt;{138.43.151.129:9788, *:*}[26.5957%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.1064%)&lt;BR/&gt; 9788: (13.2979%)&lt;BR/&gt; 62933: (0.531915%)&lt;BR/&gt; 61427: (0.531915%)&lt;BR/&gt; 57985: (0.531915%)&gt;];
}
6807--8434[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.151.129" src_port="9788"/>
      <filter dst_ip="216.134.71.54" dst_port="80" src_ip="138.43.151.129"/>
    </slice>
    <from sec="1201928457" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_754{
style=filled;
color=gray75;
6810[label="197.110.181.129;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8435[label="197.110.181.129;6pkt 6fpkt", shape=invtriangle, color=brown];
stat754[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.110.181.129:80, 141.54.201.100:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4524: (8.33333%)&lt;BR/&gt; 4522: (8.33333%)&lt;BR/&gt; 4521: (8.33333%)&lt;BR/&gt; 4520: (8.33333%)&gt;];
}
6810--8435[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.201.100" src_ip="197.110.181.129" src_port="80"/>
    </slice>
    <from sec="1201928801" usec="0"/>
    <to sec="1201928810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.114.215.131"/>
    </slice>
    <from sec="1201928516" usec="0"/>
    <to sec="1201929241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_756{
style=filled;
color=gray75;
6839[label="219.176.160.132;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8445[label="219.176.160.132;2pkt 2fpkt", shape=invtriangle, color=brown];
stat756[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.176.160.132:80, 195.178.138.6:51997}[50%]&lt;BR/&gt;{219.176.160.132:80, 195.178.138.6:52000}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52000: (25%)&lt;BR/&gt; 51997: (25%)&gt;];
}
6839--8445[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.138.6" dst_port="52000" src_ip="219.176.160.132" src_port="80"/>
      <filter dst_ip="195.178.138.6" dst_port="51997" src_ip="219.176.160.132" src_port="80"/>
    </slice>
    <from sec="1201929136" usec="0"/>
    <to sec="1201929138" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_757{
style=filled;
color=gray75;
6848[label="210.6.195.133;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8448[label="210.6.195.133;3pkt 3fpkt", shape=invtriangle, color=brown];
stat757[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.6.195.133:17454, 194.245.35.29:45079}[33.3333%]&lt;BR/&gt;{210.6.195.133:28331, 194.245.35.29:21}[33.3333%]&lt;BR/&gt;{210.6.195.133:28333, 194.245.35.29:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.3333%)&lt;BR/&gt; 45079: (16.6667%)&lt;BR/&gt; 28333: (16.6667%)&lt;BR/&gt; 28331: (16.6667%)&lt;BR/&gt; 17454: (16.6667%)&gt;];
}
6848--8448[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.35.29" dst_port="21" src_ip="210.6.195.133" src_port="28333"/>
      <filter dst_ip="194.245.35.29" dst_port="21" src_ip="210.6.195.133" src_port="28331"/>
      <filter dst_ip="194.245.35.29" dst_port="45079" src_ip="210.6.195.133" src_port="17454"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.244.213.133"/>
    </slice>
    <from sec="1201929204" usec="0"/>
    <to sec="1201929209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.195.83.135"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_760{
style=filled;
color=gray75;
6881[label="138.52.100.137;21pkt 21fpkt", shape=pentagon, color=darkviolet];
8459[label="138.52.100.137;21pkt 21fpkt", shape=invtriangle, color=brown];
9143[label="138.52.100.137;21pkt 21fpkt", shape=invhouse, color=bisque];
stat760[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.52.100.137:*, 155.60.200.196:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1670: (2.38095%)&lt;BR/&gt; 1669: (2.38095%)&lt;BR/&gt; 1668: (2.38095%)&lt;BR/&gt; 1667: (2.38095%)&gt;];
}
6881--8459[label="1;21pkt 21fpkt"];
6881--9143[label="1;21pkt 21fpkt"];
8459--9143[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="155.60.200.196" dst_port="80" src_ip="138.52.100.137"/>
    </slice>
    <from sec="1201928588" usec="0"/>
    <to sec="1201928593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.251.5.138"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.172.39.140"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
6901[label="141.54.59.140;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8470[label="141.54.59.140;9pkt 9fpkt", shape=invtriangle, color=brown];
9148[label="141.54.59.140;9pkt 9fpkt", shape=invhouse, color=bisque];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.59.140:*, 143.180.105.12:80}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54267: (5.55556%)&lt;BR/&gt; 54265: (5.55556%)&lt;BR/&gt; 54264: (5.55556%)&lt;BR/&gt; 54263: (5.55556%)&gt;];
}
6901--8470[label="1;9pkt 9fpkt"];
6901--9148[label="1;9pkt 9fpkt"];
8470--9148[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="143.180.105.12" dst_port="80" src_ip="141.54.59.140"/>
    </slice>
    <from sec="1201929199" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_764{
style=filled;
color=gray75;
6911[label="27.132.93.141;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8474[label="27.132.93.141;9pkt 9fpkt", shape=invtriangle, color=brown];
stat764[shape=component, label=&lt;Rules:&lt;BR/&gt;{27.132.93.141:80, 141.54.4.71:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 55704: (5.55556%)&lt;BR/&gt; 55691: (5.55556%)&lt;BR/&gt; 55690: (5.55556%)&lt;BR/&gt; 55664: (5.55556%)&gt;];
}
6911--8474[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.4.71" src_ip="27.132.93.141" src_port="80"/>
    </slice>
    <from sec="1201929238" usec="0"/>
    <to sec="1201929268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
6914[label="197.145.196.141;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8477[label="197.145.196.141;3pkt 3fpkt", shape=invtriangle, color=brown];
9150[label="197.145.196.141;3pkt 3fpkt", shape=invhouse, color=bisque];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.145.196.141:80, 195.178.138.2:2240}[33.3333%]&lt;BR/&gt;{197.145.196.141:80, 195.178.138.2:2243}[33.3333%]&lt;BR/&gt;{197.145.196.141:80, 195.178.138.2:2245}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2245: (16.6667%)&lt;BR/&gt; 2243: (16.6667%)&lt;BR/&gt; 2240: (16.6667%)&gt;];
}
6914--8477[label="1;3pkt 3fpkt"];
6914--9150[label="1;3pkt 3fpkt"];
8477--9150[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.138.2" dst_port="2245" src_ip="197.145.196.141" src_port="80"/>
      <filter dst_ip="195.178.138.2" dst_port="2243" src_ip="197.145.196.141" src_port="80"/>
      <filter dst_ip="195.178.138.2" dst_port="2240" src_ip="197.145.196.141" src_port="80"/>
    </slice>
    <from sec="1201929274" usec="0"/>
    <to sec="1201929295" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_766{
style=filled;
color=gray75;
6917[label="42.11.18.142;18pkt 18fpkt", shape=pentagon, color=darkviolet];
8479[label="42.11.18.142;18pkt 18fpkt", shape=invtriangle, color=brown];
stat766[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.11.18.142:*, 141.54.149.2:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3186: (2.77778%)&lt;BR/&gt; 3185: (2.77778%)&lt;BR/&gt; 3184: (2.77778%)&lt;BR/&gt; 3183: (2.77778%)&gt;];
}
6917--8479[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.149.2" dst_port="80" src_ip="42.11.18.142"/>
    </slice>
    <from sec="1201929285" usec="0"/>
    <to sec="1201929291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
6928[label="195.85.244.143;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8485[label="195.85.244.143;5pkt 5fpkt", shape=invtriangle, color=brown];
9154[label="195.85.244.143;5pkt 5fpkt", shape=invhouse, color=bisque];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.85.244.143:80, 138.49.11.159:53030}[20%]&lt;BR/&gt;{195.85.244.143:80, 138.49.11.159:53073}[20%]&lt;BR/&gt;{195.85.244.143:80, 138.49.11.159:53074}[20%]&lt;BR/&gt;{195.85.244.143:80, 138.49.11.159:53271}[20%]&lt;BR/&gt;{195.85.244.143:80, 138.49.11.159:53272}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53272: (10%)&lt;BR/&gt; 53271: (10%)&lt;BR/&gt; 53074: (10%)&lt;BR/&gt; 53073: (10%)&gt;];
}
6928--8485[label="1;5pkt 5fpkt"];
6928--9154[label="1;5pkt 5fpkt"];
8485--9154[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="138.49.11.159" dst_port="53272" src_ip="195.85.244.143" src_port="80"/>
      <filter dst_ip="138.49.11.159" dst_port="53271" src_ip="195.85.244.143" src_port="80"/>
      <filter dst_ip="138.49.11.159" dst_port="53074" src_ip="195.85.244.143" src_port="80"/>
      <filter dst_ip="138.49.11.159" dst_port="53073" src_ip="195.85.244.143" src_port="80"/>
      <filter dst_ip="138.49.11.159" dst_port="53030" src_ip="195.85.244.143" src_port="80"/>
    </slice>
    <from sec="1201929246" usec="0"/>
    <to sec="1201929288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.48.0.145"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.171.40.145"/>
    </slice>
    <from sec="1201928694" usec="0"/>
    <to sec="1201928703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.89.58.146"/>
    </slice>
    <from sec="1201928429" usec="0"/>
    <to sec="1201928461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="40.134.24.147"/>
    </slice>
    <from sec="1201928970" usec="0"/>
    <to sec="1201929258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.32.36.147"/>
    </slice>
    <from sec="1201928420" usec="0"/>
    <to sec="1201928431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.2.52.147"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201928698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.51.128.147"/>
    </slice>
    <from sec="1201929159" usec="0"/>
    <to sec="1201929281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
6986[label="138.43.145.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8512[label="138.43.145.149;1pkt 1fpkt", shape=invtriangle, color=brown];
9165[label="138.43.145.149;1pkt 1fpkt", shape=invhouse, color=bisque];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.145.149:2177, 211.219.64.254:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2177: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6986--8512[label="1;1pkt 1fpkt"];
6986--9165[label="1;1pkt 1fpkt"];
8512--9165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="211.219.64.254" dst_port="80" src_ip="138.43.145.149" src_port="2177"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.74.185.150"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201929291" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
7005[label="141.54.205.150;31pkt 31fpkt", shape=pentagon, color=darkviolet];
8522[label="141.54.205.150;31pkt 31fpkt", shape=invtriangle, color=brown];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.205.150:60137, *:*}[64.5161%]&lt;BR/&gt;{141.54.205.150:*, *:80}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60137: (32.2581%)&lt;BR/&gt; 80: (11.2903%)&lt;BR/&gt; 995: (4.83871%)&lt;BR/&gt; 64513: (1.6129%)&lt;BR/&gt; 55956: (1.6129%)&gt;];
}
7005--8522[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter src_ip="141.54.205.150" src_port="60137"/>
      <filter dst_port="80" src_ip="141.54.205.150"/>
    </slice>
    <from sec="1201928436" usec="0"/>
    <to sec="1201929270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
7008[label="17.173.23.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8523[label="17.173.23.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.173.23.151:56937, 169.16.175.11:3128}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56937: (50%)&lt;BR/&gt; 3128: (50%)&gt;];
}
7008--8523[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.175.11" dst_port="3128" src_ip="17.173.23.151" src_port="56937"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_780{
style=filled;
color=gray75;
7009[label="194.128.77.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8524[label="194.128.77.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat780[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.128.77.151:63104, 169.16.175.88:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63104: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7009--8524[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.175.88" dst_port="80" src_ip="194.128.77.151" src_port="63104"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
7022[label="169.16.0.153;28pkt 28fpkt", shape=pentagon, color=darkviolet];
8527[label="169.16.0.153;28pkt 28fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{169.16.0.153:10548, *:*}[82.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10548: (41.0714%)&lt;BR/&gt; 80: (7.14286%)&lt;BR/&gt; 60848: (1.78571%)&lt;BR/&gt; 58580: (1.78571%)&lt;BR/&gt; 58341: (1.78571%)&gt;];
}
7022--8527[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter src_ip="169.16.0.153" src_port="10548"/>
    </slice>
    <from sec="1201929199" usec="0"/>
    <to sec="1201929227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.22322,2.04316,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
1369[label="141.54.61.80;d;238pkt 238fpkt", shape=diamond, color=yellow];
3017[label="211.198.114.182;s;33pkt 33fpkt", shape=diamond, color=yellow];
5182[label="211.198.114.182;s;33pkt 33fpkt", shape=hexagon, color=black];
5719[label="107.80.213.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
5877[label="210.214.9.33;79pkt 79fpkt", shape=pentagon, color=darkviolet];
7025[label="219.82.46.153;9pkt 9fpkt", shape=pentagon, color=darkviolet];
7285[label="211.198.114.182;33pkt 33fpkt", shape=pentagon, color=darkviolet];
8530[label="219.82.46.153;9pkt 9fpkt", shape=invtriangle, color=brown];
8647[label="211.198.114.182;33pkt 33fpkt", shape=invtriangle, color=brown];
9172[label="219.82.46.153;8pkt 8fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.214.9.33:*, *:80}[27.6224%]&lt;BR/&gt;{70.55.81.168:*, 141.54.61.80:80}[23.7762%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1073: (0.52521%)&lt;BR/&gt; 1072: (0.52521%)&lt;BR/&gt; 1071: (0.52521%)&lt;BR/&gt; 1070: (0.52521%)&gt;];
}
1369--1834[label="0.550725;38pkt 38fpkt"];
1369--2716[label="0.0105263;1pkt 1fpkt"];
1369--2717[label="0.00970874;1pkt 1fpkt"];
1369--3017[label="0.636364;21pkt 21fpkt"];
1369--3292[label="0.150943;8pkt 8fpkt"];
1369--5182[label="0.636364;21pkt 21fpkt"];
1369--5444[label="0.0294118;7pkt 7fpkt"];
1369--5454[label="0.0504202;12pkt 12fpkt"];
1369--5467[label="0.180672;43pkt 43fpkt"];
1369--5481[label="0.0294118;7pkt 7fpkt"];
1369--5487[label="0.0504202;12pkt 12fpkt"];
1369--5494[label="0.180672;43pkt 43fpkt"];
1369--5508[label="0.0504202;12pkt 12fpkt"];
1369--5514[label="0.180672;43pkt 43fpkt"];
1369--5719[label="1;1pkt 1fpkt"];
1369--5877[label="0.544304;43pkt 43fpkt"];
1369--6332[label="0.00970874;1pkt 1fpkt"];
1369--7025[label="1;9pkt 9fpkt"];
1369--7285[label="0.636364;21pkt 21fpkt"];
1369--7552[label="0.0105263;1pkt 1fpkt"];
1369--8530[label="1;9pkt 9fpkt"];
1369--8647[label="0.636364;21pkt 21fpkt"];
1369--8770[label="0.0105263;1pkt 1fpkt"];
1369--9172[label="1;8pkt 8fpkt"];
3017--5182[label="1;33pkt 33fpkt"];
3017--5454[label="0.0909091;3pkt 3fpkt"];
3017--5467[label="0.181818;6pkt 6fpkt"];
3017--5487[label="0.0909091;3pkt 3fpkt"];
3017--5494[label="0.181818;6pkt 6fpkt"];
3017--5508[label="0.0909091;3pkt 3fpkt"];
3017--5514[label="0.181818;6pkt 6fpkt"];
3017--7285[label="1;33pkt 33fpkt"];
3017--8647[label="1;33pkt 33fpkt"];
5182--5454[label="0.0909091;3pkt 3fpkt"];
5182--5467[label="0.181818;6pkt 6fpkt"];
5182--5487[label="0.0909091;3pkt 3fpkt"];
5182--5494[label="0.181818;6pkt 6fpkt"];
5182--5508[label="0.0909091;3pkt 3fpkt"];
5182--5514[label="0.181818;6pkt 6fpkt"];
5182--7285[label="1;33pkt 33fpkt"];
5182--8647[label="1;33pkt 33fpkt"];
7025--8530[label="1;9pkt 9fpkt"];
7025--9172[label="1;8pkt 8fpkt"];
7285--8647[label="1;33pkt 33fpkt"];
8530--9172[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="210.214.9.33"/>
      <filter dst_ip="141.54.61.80" dst_port="80" src_ip="70.55.81.168"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201929226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.94.227.157"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.201.36.160"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201928434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="90.166.78.162"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
7115[label="218.3.36.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8567[label="218.3.36.163;1pkt 1fpkt", shape=invtriangle, color=brown];
9181[label="218.3.36.163;1pkt 1fpkt", shape=invhouse, color=bisque];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.3.36.163:1056, 169.16.175.88:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1056: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7115--8567[label="1;1pkt 1fpkt"];
7115--9181[label="1;1pkt 1fpkt"];
8567--9181[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.175.88" dst_port="80" src_ip="218.3.36.163" src_port="1056"/>
    </slice>
    <from sec="1201929265" usec="0"/>
    <to sec="1201929281" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
7118[label="141.54.113.163;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8569[label="141.54.113.163;4pkt 4fpkt", shape=invtriangle, color=brown];
9182[label="141.54.113.163;4pkt 4fpkt", shape=invhouse, color=bisque];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.113.163:4316, 208.181.133.243:80}[25%]&lt;BR/&gt;{141.54.113.163:4100, 25.174.81.99:995}[25%]&lt;BR/&gt;{141.54.113.163:4179, 25.174.81.99:995}[25%]&lt;BR/&gt;{141.54.113.163:4258, 25.174.81.99:995}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (37.5%)&lt;BR/&gt; 4316: (12.5%)&lt;BR/&gt; 4258: (12.5%)&lt;BR/&gt; 4179: (12.5%)&lt;BR/&gt; 4100: (12.5%)&gt;];
}
7118--8569[label="1;4pkt 4fpkt"];
7118--9182[label="1;4pkt 4fpkt"];
8569--9182[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="25.174.81.99" dst_port="995" src_ip="141.54.113.163" src_port="4258"/>
      <filter dst_ip="25.174.81.99" dst_port="995" src_ip="141.54.113.163" src_port="4179"/>
      <filter dst_ip="25.174.81.99" dst_port="995" src_ip="141.54.113.163" src_port="4100"/>
      <filter dst_ip="208.181.133.243" dst_port="80" src_ip="141.54.113.163" src_port="4316"/>
    </slice>
    <from sec="1201928412" usec="0"/>
    <to sec="1201929278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
7120[label="145.140.9.164;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8570[label="145.140.9.164;13pkt 13fpkt", shape=invtriangle, color=brown];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.140.9.164:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63040: (3.84615%)&lt;BR/&gt; 60943: (3.84615%)&lt;BR/&gt; 60938: (3.84615%)&lt;BR/&gt; 60124: (3.84615%)&gt;];
}
7120--8570[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="145.140.9.164" src_port="80"/>
    </slice>
    <from sec="1201928669" usec="0"/>
    <to sec="1201929210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
7135[label="5.15.185.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8576[label="5.15.185.164;5pkt 5fpkt", shape=invtriangle, color=brown];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.15.185.164:38027, 138.43.117.20:11969}[20%]&lt;BR/&gt;{5.15.185.164:38322, 138.43.117.20:80}[20%]&lt;BR/&gt;{5.15.185.164:38323, 138.43.117.20:11969}[20%]&lt;BR/&gt;{5.15.185.164:38325, 138.43.117.20:80}[20%]&lt;BR/&gt;{5.15.185.164:38326, 138.43.117.20:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 11969: (20%)&lt;BR/&gt; 38326: (10%)&lt;BR/&gt; 38325: (10%)&lt;BR/&gt; 38323: (10%)&gt;];
}
7135--8576[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.117.20" dst_port="80" src_ip="5.15.185.164" src_port="38326"/>
      <filter dst_ip="138.43.117.20" dst_port="80" src_ip="5.15.185.164" src_port="38325"/>
      <filter dst_ip="138.43.117.20" dst_port="11969" src_ip="5.15.185.164" src_port="38323"/>
      <filter dst_ip="138.43.117.20" dst_port="80" src_ip="5.15.185.164" src_port="38322"/>
      <filter dst_ip="138.43.117.20" dst_port="11969" src_ip="5.15.185.164" src_port="38027"/>
    </slice>
    <from sec="1201928826" usec="0"/>
    <to sec="1201928838" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
7138[label="3.153.4.165;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8579[label="3.153.4.165;8pkt 8fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.153.4.165:*, 138.43.213.132:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2035: (6.25%)&lt;BR/&gt; 1594: (6.25%)&lt;BR/&gt; 1591: (6.25%)&lt;BR/&gt; 1583: (6.25%)&gt;];
}
7138--8579[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="138.43.213.132" dst_port="25" src_ip="3.153.4.165"/>
    </slice>
    <from sec="1201928409" usec="0"/>
    <to sec="1201928478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.154.212.167"/>
    </slice>
    <from sec="1201929263" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.130.54.170"/>
    </slice>
    <from sec="1201928714" usec="0"/>
    <to sec="1201928716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.140.221.170"/>
    </slice>
    <from sec="1201928432" usec="0"/>
    <to sec="1201929287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
7185[label="93.67.50.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8604[label="93.67.50.171;1pkt 1fpkt", shape=invtriangle, color=brown];
9193[label="93.67.50.171;1pkt 1fpkt", shape=invhouse, color=bisque];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{93.67.50.171:4532, 194.245.40.62:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4532: (50%)&lt;BR/&gt; 3127: (50%)&gt;];
}
7185--8604[label="1;1pkt 1fpkt"];
7185--9193[label="1;1pkt 1fpkt"];
8604--9193[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.245.40.62" dst_port="3127" src_ip="93.67.50.171" src_port="4532"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
7187[label="45.188.63.171;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8606[label="45.188.63.171;2pkt 2fpkt", shape=invtriangle, color=brown];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{45.188.63.171:80, 141.54.163.50:4023}[50%]&lt;BR/&gt;{45.188.63.171:80, 141.54.59.140:54268}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54268: (25%)&lt;BR/&gt; 4023: (25%)&gt;];
}
7187--8606[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.59.140" dst_port="54268" src_ip="45.188.63.171" src_port="80"/>
      <filter dst_ip="141.54.163.50" dst_port="4023" src_ip="45.188.63.171" src_port="80"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.129.65.171"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.234.51.175"/>
    </slice>
    <from sec="1201928403" usec="0"/>
    <to sec="1201929032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="17.85.49.177"/>
    </slice>
    <from sec="1201929245" usec="0"/>
    <to sec="1201929248" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_800{
style=filled;
color=gray75;
7273[label="194.245.38.181;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8642[label="194.245.38.181;3pkt 3fpkt", shape=invtriangle, color=brown];
stat800[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.38.181:0, 18.145.179.81:0}[33.3333%]&lt;BR/&gt;{194.245.38.181:0, 18.145.179.88:0}[33.3333%]&lt;BR/&gt;{194.245.38.181:0, 18.145.179.89:0}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7273--8642[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="18.145.179.89" src_ip="194.245.38.181"/>
      <filter dst_ip="18.145.179.88" src_ip="194.245.38.181"/>
      <filter dst_ip="18.145.179.81" src_ip="194.245.38.181"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.50.128.182"/>
    </slice>
    <from sec="1201928569" usec="0"/>
    <to sec="1201928571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00915,2.08044,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
3304[label="141.54.115.30;d;34pkt 34fpkt", shape=diamond, color=yellow];
5773[label="195.98.35.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7947[label="195.98.35.22;2pkt 2fpkt", shape=invtriangle, color=brown];
8948[label="195.98.35.22;1pkt 1fpkt", shape=invhouse, color=bisque];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.77.171.58:80, 141.54.115.30:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2864: (5.26316%)&lt;BR/&gt; 2863: (2.63158%)&lt;BR/&gt; 49345: (1.31579%)&lt;BR/&gt; 49344: (1.31579%)&gt;];
}
3304--4657[label="0.172414;5pkt 5fpkt"];
3304--5473[label="0.0588235;2pkt 2fpkt"];
3304--5499[label="0.0588235;2pkt 2fpkt"];
3304--5517[label="0.0588235;2pkt 2fpkt"];
3304--5773[label="1;1pkt 1fpkt"];
3304--7311[label="0.0294118;1pkt 1fpkt"];
3304--7364[label="0.0294118;1pkt 1fpkt"];
3304--7947[label="1;2pkt 2fpkt"];
3304--8659[label="0.0294118;1pkt 1fpkt"];
3304--8684[label="0.0294118;1pkt 1fpkt"];
3304--8948[label="1;1pkt 1fpkt"];
3304--9213[label="0.0294118;1pkt 1fpkt"];
5773--7947[label="1;1pkt 1fpkt"];
5773--8948[label="1;1pkt 1fpkt"];
7947--8948[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.115.30" src_ip="17.77.171.58" src_port="80"/>
    </slice>
    <from sec="1201928731" usec="0"/>
    <to sec="1201929226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
7326[label="90.250.111.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8667[label="90.250.111.187;1pkt 1fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{90.250.111.187:80, 169.16.87.162:1383}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1383: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7326--8667[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.87.162" dst_port="1383" src_ip="90.250.111.187" src_port="80"/>
    </slice>
    <from sec="1201929187" usec="0"/>
    <to sec="1201929202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.23.46.192"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.118.46.192"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
7382[label="220.208.9.195;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8692[label="220.208.9.195;2pkt 2fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.208.9.195:80, 141.54.141.246:10078}[50%]&lt;BR/&gt;{220.208.9.195:80, 141.54.141.246:10333}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10333: (25%)&lt;BR/&gt; 10078: (25%)&gt;];
}
7382--8692[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.141.246" dst_port="10333" src_ip="220.208.9.195" src_port="80"/>
      <filter dst_ip="141.54.141.246" dst_port="10078" src_ip="220.208.9.195" src_port="80"/>
    </slice>
    <from sec="1201928502" usec="0"/>
    <to sec="1201928645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.200.34.195"/>
    </slice>
    <from sec="1201928642" usec="0"/>
    <to sec="1201928725" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
7387[label="17.155.97.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8695[label="17.155.97.195;2pkt 2fpkt", shape=invtriangle, color=brown];
9223[label="17.155.97.195;2pkt 2fpkt", shape=invhouse, color=bisque];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{17.155.97.195:80, 141.54.184.129:49815}[50%]&lt;BR/&gt;{17.155.97.195:80, 141.54.184.129:49840}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49840: (30%)&lt;BR/&gt; 49815: (20%)&gt;];
}
7387--8695[label="1;1pkt 1fpkt"];
7387--9223[label="1;1pkt 1fpkt"];
8695--9223[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.184.129" dst_port="49840" src_ip="17.155.97.195" src_port="80"/>
      <filter dst_ip="141.54.184.129" dst_port="49815" src_ip="17.155.97.195" src_port="80"/>
    </slice>
    <from sec="1201929235" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.252.142.195"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.102.170.195"/>
    </slice>
    <from sec="1201929287" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.237.196.196"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.177.96.199"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.84.14.200"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
7427[label="49.112.206.200;82pkt 82fpkt", shape=pentagon, color=darkviolet];
8719[label="49.112.206.200;81pkt 81fpkt", shape=invtriangle, color=brown];
9235[label="49.112.206.200;81pkt 81fpkt", shape=invhouse, color=bisque];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{49.112.206.200:*, *:3127}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4695: (0.614754%)&lt;BR/&gt; 4693: (0.614754%)&lt;BR/&gt; 4624: (0.614754%)&lt;BR/&gt; 4591: (0.614754%)&gt;];
}
7427--8719[label="1;81pkt 81fpkt"];
7427--9235[label="1;81pkt 81fpkt"];
8719--9235[label="1;81pkt 81fpkt"];
</description>
    <slice>
      <filter dst_port="3127" src_ip="49.112.206.200"/>
    </slice>
    <from sec="1201928408" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
7455[label="194.245.58.204;22pkt 22fpkt", shape=pentagon, color=darkviolet];
8729[label="194.245.58.204;22pkt 22fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.58.204:*, 29.132.179.214:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3130: (2.27273%)&lt;BR/&gt; 3128: (2.27273%)&lt;BR/&gt; 3126: (2.27273%)&lt;BR/&gt; 3124: (2.27273%)&gt;];
}
7455--8729[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="29.132.179.214" dst_port="80" src_ip="194.245.58.204"/>
    </slice>
    <from sec="1201929146" usec="0"/>
    <to sec="1201929156" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.94.128.204"/>
    </slice>
    <from sec="1201928443" usec="0"/>
    <to sec="1201929241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.67.89.206"/>
    </slice>
    <from sec="1201928407" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.719809,2.14127,020,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_819{
style=filled;
color=gray75;
3140[label="221.22.173.207;s;1693pkt 1693fpkt", shape=diamond, color=yellow];
8740[label="221.22.173.207;4018pkt 4018fpkt", shape=invtriangle, color=brown];
stat819[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.22.173.207:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3140--3373[label="0.00531915;1pkt 1fpkt"];
3140--3383[label="0.00719424;1pkt 1fpkt"];
3140--3395[label="0.00487805;1pkt 1fpkt"];
3140--3412[label="0.00537634;1pkt 1fpkt"];
3140--3428[label="0.00529101;1pkt 1fpkt"];
3140--3702[label="0.00813008;1pkt 1fpkt"];
3140--3723[label="0.0204082;1pkt 1fpkt"];
3140--5166[label="0.0121951;1pkt 1fpkt"];
3140--8740[label="1;1693pkt 1693fpkt"];
</description>
    <slice>
      <filter src_ip="221.22.173.207"/>
    </slice>
    <from sec="1201929014" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="1.60.85.209"/>
    </slice>
    <from sec="1201929086" usec="0"/>
    <to sec="1201929094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_821{
style=filled;
color=gray75;
7497[label="138.43.180.209;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8749[label="138.43.180.209;4pkt 4fpkt", shape=invtriangle, color=brown];
9243[label="138.43.180.209;4pkt 4fpkt", shape=invhouse, color=bisque];
stat821[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.180.209:80, 88.21.128.22:50234}[25%]&lt;BR/&gt;{138.43.180.209:80, 88.21.161.87:51653}[25%]&lt;BR/&gt;{138.43.180.209:80, 88.21.160.167:61776}[25%]&lt;BR/&gt;{138.43.180.209:80, 88.21.164.228:60025}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61776: (12.5%)&lt;BR/&gt; 60025: (12.5%)&lt;BR/&gt; 51653: (12.5%)&lt;BR/&gt; 50234: (12.5%)&gt;];
}
7497--8749[label="1;4pkt 4fpkt"];
7497--9243[label="1;4pkt 4fpkt"];
8749--9243[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="88.21.164.228" dst_port="60025" src_ip="138.43.180.209" src_port="80"/>
      <filter dst_ip="88.21.160.167" dst_port="61776" src_ip="138.43.180.209" src_port="80"/>
      <filter dst_ip="88.21.161.87" dst_port="51653" src_ip="138.43.180.209" src_port="80"/>
      <filter dst_ip="88.21.128.22" dst_port="50234" src_ip="138.43.180.209" src_port="80"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.104.74.214"/>
    </slice>
    <from sec="1201928890" usec="0"/>
    <to sec="1201928904" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.37.203.214"/>
    </slice>
    <from sec="1201928410" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.115.58.221"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.95.215.222"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.117.58.223"/>
    </slice>
    <from sec="1201928575" usec="0"/>
    <to sec="1201928586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.4.13.224"/>
    </slice>
    <from sec="1201928408" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.244.226.226"/>
    </slice>
    <from sec="1201928668" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="211.75.83.228"/>
    </slice>
    <from sec="1201928435" usec="0"/>
    <to sec="1201928894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.30.190.228"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_832{
style=filled;
color=gray75;
7657[label="194.245.40.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8821[label="194.245.40.229;1pkt 1fpkt", shape=invtriangle, color=brown];
stat832[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.245.40.229:22, 91.135.190.133:41028}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41028: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
7657--8821[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="91.135.190.133" dst_port="41028" src_ip="194.245.40.229" src_port="22"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
7658[label="141.54.121.229;8pkt 8fpkt", shape=pentagon, color=darkviolet];
8822[label="141.54.121.229;8pkt 8fpkt", shape=invtriangle, color=brown];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{141.54.121.229:*, 220.219.85.219:80}[50%]&lt;BR/&gt;{141.54.121.229:*, 221.8.237.137:80}[25%]&lt;BR/&gt;{141.54.121.229:*, 220.219.85.221:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1925: (6.25%)&lt;BR/&gt; 1924: (6.25%)&lt;BR/&gt; 1921: (6.25%)&lt;BR/&gt; 1920: (6.25%)&gt;];
}
7658--8822[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="220.219.85.219" dst_port="80" src_ip="141.54.121.229"/>
      <filter dst_ip="220.219.85.221" dst_port="80" src_ip="141.54.121.229"/>
      <filter dst_ip="221.8.237.137" dst_port="80" src_ip="141.54.121.229"/>
    </slice>
    <from sec="1201929148" usec="0"/>
    <to sec="1201929247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.166.28.234"/>
    </slice>
    <from sec="1201928573" usec="0"/>
    <to sec="1201928596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,012,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
7689[label="195.51.65.234;16pkt 16fpkt", shape=pentagon, color=darkviolet];
8837[label="195.51.65.234;16pkt 16fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.51.65.234:5061, 195.178.138.5:*}[68.75%]&lt;BR/&gt;{195.51.65.234:443, 195.178.138.5:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5061: (34.375%)&lt;BR/&gt; 443: (15.625%)&lt;BR/&gt; 2962: (3.125%)&lt;BR/&gt; 2924: (3.125%)&lt;BR/&gt; 2884: (3.125%)&gt;];
}
7689--8837[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="195.178.138.5" src_ip="195.51.65.234" src_port="5061"/>
      <filter dst_ip="195.178.138.5" src_ip="195.51.65.234" src_port="443"/>
    </slice>
    <from sec="1201928427" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="2.89.199.234"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.143.100.235"/>
    </slice>
    <from sec="1201929073" usec="0"/>
    <to sec="1201929094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
7709[label="29.132.179.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8846[label="29.132.179.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.132.179.236:80, 141.54.184.59:50238}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50238: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7709--8846[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="141.54.184.59" dst_port="50238" src_ip="29.132.179.236" src_port="80"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
1669[label="138.201.18.29;d;133pkt 133fpkt", shape=diamond, color=yellow];
7611[label="90.171.131.222;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7735[label="44.84.68.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8793[label="90.171.131.222;2pkt 2fpkt", shape=invtriangle, color=brown];
8863[label="44.84.68.240;2pkt 2fpkt", shape=invtriangle, color=brown];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 138.201.18.29:13987}[94.0741%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13987: (46.8085%)&lt;BR/&gt; 46308: (1.77305%)&lt;BR/&gt; 13246: (1.77305%)&lt;BR/&gt; 45306: (1.41844%)&lt;BR/&gt; 30970: (0.70922%)&gt;];
}
1669--7611[label="0.5;1pkt 1fpkt"];
1669--7735[label="0.5;1pkt 1fpkt"];
1669--8793[label="0.5;1pkt 1fpkt"];
1669--8863[label="0.5;1pkt 1fpkt"];
7611--8793[label="1;2pkt 2fpkt"];
7735--8863[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="138.201.18.29" dst_port="13987"/>
    </slice>
    <from sec="1201928402" usec="0"/>
    <to sec="1201929297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.207.221.240"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.91462,2.11811,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_842{
style=filled;
color=gray75;
7739[label="213.39.5.241;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8868[label="213.39.5.241;1pkt 1fpkt", shape=invtriangle, color=brown];
9277[label="213.39.5.241;1pkt 1fpkt", shape=invhouse, color=bisque];
stat842[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.39.5.241:80, 138.49.11.159:52878}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52878: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7739--8868[label="1;1pkt 1fpkt"];
7739--9277[label="1;1pkt 1fpkt"];
8868--9277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="138.49.11.159" dst_port="52878" src_ip="213.39.5.241" src_port="80"/>
    </slice>
    <from sec="1201929240" usec="0"/>
    <to sec="1201929256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
7748[label="138.43.180.241;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8872[label="138.43.180.241;13pkt 13fpkt", shape=invtriangle, color=brown];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{138.43.180.241:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62953: (3.84615%)&lt;BR/&gt; 62761: (3.84615%)&lt;BR/&gt; 58374: (3.84615%)&lt;BR/&gt; 58368: (3.84615%)&gt;];
}
7748--8872[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="138.43.180.241" src_port="80"/>
    </slice>
    <from sec="1201928412" usec="0"/>
    <to sec="1201929266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.105.8.242"/>
    </slice>
    <from sec="1201928484" usec="0"/>
    <to sec="1201929246" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="43.32.70.242"/>
    </slice>
    <from sec="1201928871" usec="0"/>
    <to sec="1201928938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.85.104.242"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="92.41.190.243"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="91.205.157.245"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="93.43.188.246"/>
    </slice>
    <from sec="1201928404" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.708252,2.1058,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
2122[label="169.16.16.186;d;92pkt 92fpkt", shape=diamond, color=yellow];
7459[label="218.188.240.204;8pkt 8fpkt", shape=pentagon, color=darkviolet];
7795[label="19.192.167.250;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8896[label="19.192.167.250;9pkt 9fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.133.40.145:80, 169.16.16.186:*}[35.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.7966%)&lt;BR/&gt; 443: (6.77966%)&lt;BR/&gt; 54892: (1.27119%)&lt;BR/&gt; 49823: (1.27119%)&lt;BR/&gt; 49822: (1.27119%)&gt;];
}
2122--2363[label="0.015873;1pkt 1fpkt"];
2122--3956[label="0.0277778;1pkt 1fpkt"];
2122--4166[label="0.0108696;1pkt 1fpkt"];
2122--4471[label="0.0185185;1pkt 1fpkt"];
2122--4612[label="0.241379;14pkt 14fpkt"];
2122--5462[label="0.0108696;1pkt 1fpkt"];
2122--5473[label="0.0108696;1pkt 1fpkt"];
2122--5490[label="0.0108696;1pkt 1fpkt"];
2122--5499[label="0.0108696;1pkt 1fpkt"];
2122--5510[label="0.0108696;1pkt 1fpkt"];
2122--5517[label="0.0108696;1pkt 1fpkt"];
2122--5548[label="0.0178571;1pkt 1fpkt"];
2122--7311[label="0.0666667;3pkt 3fpkt"];
2122--7353[label="0.0108696;1pkt 1fpkt"];
2122--7459[label="1;8pkt 8fpkt"];
2122--7795[label="1;9pkt 9fpkt"];
2122--7838[label="0.0181818;1pkt 1fpkt"];
2122--8083[label="0.0108696;1pkt 1fpkt"];
2122--8659[label="0.0666667;3pkt 3fpkt"];
2122--8896[label="1;9pkt 9fpkt"];
2122--9213[label="0.0666667;3pkt 3fpkt"];
7795--8896[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.16.186" src_ip="18.133.40.145" src_port="80"/>
    </slice>
    <from sec="1201928467" usec="0"/>
    <to sec="1201929229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.565486,2.14302,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
7801[label="208.242.132.251;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8899[label="208.242.132.251;2pkt 2fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.242.132.251:80, 169.16.1.46:49890}[50%]&lt;BR/&gt;{208.242.132.251:80, 169.16.1.46:49891}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49891: (25%)&lt;BR/&gt; 49890: (25%)&gt;];
}
7801--8899[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="169.16.1.46" dst_port="49891" src_ip="208.242.132.251" src_port="80"/>
      <filter dst_ip="169.16.1.46" dst_port="49890" src_ip="208.242.132.251" src_port="80"/>
    </slice>
    <from sec="1201929186" usec="0"/>
    <to sec="1201929219" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.579896,2.17789,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.91.81.252"/>
    </slice>
    <from sec="1201928487" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.42.68.0"/>
    </slice>
    <from sec="1201929056" usec="0"/>
    <to sec="1201929064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="27.70.32.3"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.142.73.7"/>
    </slice>
    <from sec="1201929218" usec="0"/>
    <to sec="1201929223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.26.193.17"/>
    </slice>
    <from sec="1201929253" usec="0"/>
    <to sec="1201929265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.87.96.21"/>
    </slice>
    <from sec="1201929179" usec="0"/>
    <to sec="1201929264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.187.236.25"/>
    </slice>
    <from sec="1201928412" usec="0"/>
    <to sec="1201929297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.136.66.32"/>
    </slice>
    <from sec="1201928453" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.137.224.32"/>
    </slice>
    <from sec="1201929215" usec="0"/>
    <to sec="1201929274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.123.196.33"/>
    </slice>
    <from sec="1201929163" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.155.97.36"/>
    </slice>
    <from sec="1201929037" usec="0"/>
    <to sec="1201929044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.86.32.49"/>
    </slice>
    <from sec="1201928784" usec="0"/>
    <to sec="1201929147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="141.54.40.49"/>
    </slice>
    <from sec="1201928401" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="17.66.225.49"/>
    </slice>
    <from sec="1201928827" usec="0"/>
    <to sec="1201928830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.69.117.51"/>
    </slice>
    <from sec="1201928406" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.92.88.53"/>
    </slice>
    <from sec="1201928405" usec="0"/>
    <to sec="1201929299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="40.142.232.58"/>
    </slice>
    <from sec="1201928546" usec="0"/>
    <to sec="1201929203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.26.134.62"/>
    </slice>
    <from sec="1201928711" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="7.138.70.64"/>
    </slice>
    <from sec="1201928563" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.154.23.66"/>
    </slice>
    <from sec="1201928823" usec="0"/>
    <to sec="1201928880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.125.24.66"/>
    </slice>
    <from sec="1201928894" usec="0"/>
    <to sec="1201928908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.85.27.66"/>
    </slice>
    <from sec="1201928449" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.66.20.74"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.200.192.78"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201929300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.12.57.85"/>
    </slice>
    <from sec="1201929110" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.35.253.85"/>
    </slice>
    <from sec="1201928934" usec="0"/>
    <to sec="1201928970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.14.229.106"/>
    </slice>
    <from sec="1201928489" usec="0"/>
    <to sec="1201928658" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.152.150.107"/>
    </slice>
    <from sec="1201929178" usec="0"/>
    <to sec="1201929199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="2.70.121.115"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="43.203.211.115"/>
    </slice>
    <from sec="1201928571" usec="0"/>
    <to sec="1201928694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.214.89.123"/>
    </slice>
    <from sec="1201928861" usec="0"/>
    <to sec="1201929269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="45.244.213.133"/>
    </slice>
    <from sec="1201929204" usec="0"/>
    <to sec="1201929209" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.32.36.147"/>
    </slice>
    <from sec="1201928420" usec="0"/>
    <to sec="1201928431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="90.2.52.147"/>
    </slice>
    <from sec="1201928430" usec="0"/>
    <to sec="1201928698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.88.234.161"/>
    </slice>
    <from sec="1201928746" usec="0"/>
    <to sec="1201929263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.154.212.167"/>
    </slice>
    <from sec="1201929263" usec="0"/>
    <to sec="1201929301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.130.54.170"/>
    </slice>
    <from sec="1201928714" usec="0"/>
    <to sec="1201928716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.50.128.182"/>
    </slice>
    <from sec="1201928569" usec="0"/>
    <to sec="1201928571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.102.170.195"/>
    </slice>
    <from sec="1201929287" usec="0"/>
    <to sec="1201929290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="93.84.14.200"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.94.128.204"/>
    </slice>
    <from sec="1201928443" usec="0"/>
    <to sec="1201929241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="1.60.85.209"/>
    </slice>
    <from sec="1201929086" usec="0"/>
    <to sec="1201929094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.117.58.223"/>
    </slice>
    <from sec="1201928575" usec="0"/>
    <to sec="1201928586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="211.75.83.228"/>
    </slice>
    <from sec="1201928435" usec="0"/>
    <to sec="1201928894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.166.28.234"/>
    </slice>
    <from sec="1201928573" usec="0"/>
    <to sec="1201928596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.143.100.235"/>
    </slice>
    <from sec="1201929073" usec="0"/>
    <to sec="1201929094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="91.207.221.240"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.833488,2.18393,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="92.41.190.243"/>
    </slice>
    <from sec="1201929301" usec="0"/>
    <to sec="1201929302" usec="0"/>
  </anomaly>

</admd:annotation>
