<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.205.237.32" dst_port="3124" proto="tcp" src_ip="104.33.94.0" src_port="80"/>
      <from sec="1207285843" usec="0"/>
      <to sec="1207285959" usec="0"/>
    </slice>
    <from sec="1207285843" usec="0"/>
    <to sec="1207285959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.135.85.15" dst_port="80" proto="tcp" src_ip="149.82.137.20" src_port="1082"/>
      <filter dst_ip="201.135.85.15" dst_port="80" proto="udp" src_ip="149.82.137.20" src_port="1082"/>
      <filter dst_ip="201.135.85.15" dst_port="25" proto="tcp" src_ip="149.82.137.20" src_port="1082"/>
      <filter dst_ip="201.135.85.15" dst_port="25" proto="udp" src_ip="149.82.137.20" src_port="1082"/>
      <from sec="1207286055" usec="0"/>
      <to sec="1207286064" usec="0"/>
    </slice>
    <from sec="1207286055" usec="0"/>
    <to sec="1207286064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.131.94.128" dst_port="80" proto="tcp" src_ip="185.129.130.30" src_port="3028"/>
      <filter dst_ip="9.131.94.128" dst_port="25" proto="tcp" src_ip="185.129.130.30" src_port="3028"/>
      <filter dst_ip="144.106.70.125" dst_port="80" proto="tcp" src_ip="185.129.130.30" src_port="3028"/>
      <filter dst_ip="144.106.70.125" dst_port="25" proto="tcp" src_ip="185.129.130.30" src_port="3028"/>
      <from sec="1207285678" usec="0"/>
      <to sec="1207285684" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="9.131.94.128" dst_port="80" proto="tcp" src_ip="218.114.34.217" src_port="3028"/>
      <filter dst_ip="9.131.94.128" dst_port="25" proto="tcp" src_ip="218.114.34.217" src_port="3028"/>
      <filter dst_ip="144.106.70.125" dst_port="80" proto="tcp" src_ip="218.114.34.217" src_port="3028"/>
      <filter dst_ip="144.106.70.125" dst_port="25" proto="tcp" src_ip="218.114.34.217" src_port="3028"/>
      <from sec="1207285678" usec="0"/>
      <to sec="1207285681" usec="0"/>
    </slice>
    <from sec="1207285678" usec="0"/>
    <to sec="1207285684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.54.215.204" dst_port="80" proto="tcp" src_ip="149.82.93.37" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="80" proto="udp" src_ip="149.82.93.37" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="22" proto="tcp" src_ip="149.82.93.37" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="22" proto="udp" src_ip="149.82.93.37" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="25" proto="tcp" src_ip="149.82.93.37" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="25" proto="udp" src_ip="149.82.93.37" src_port="4063"/>
      <from sec="1207286083" usec="0"/>
      <to sec="1207286086" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="205.54.215.204" dst_port="80" proto="tcp" src_ip="212.133.3.87" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="80" proto="udp" src_ip="212.133.3.87" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="22" proto="tcp" src_ip="212.133.3.87" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="22" proto="udp" src_ip="212.133.3.87" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="25" proto="tcp" src_ip="212.133.3.87" src_port="4063"/>
      <filter dst_ip="205.54.215.204" dst_port="25" proto="udp" src_ip="212.133.3.87" src_port="4063"/>
      <from sec="1207286083" usec="0"/>
      <to sec="1207286086" usec="0"/>
    </slice>
    <from sec="1207286083" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.178.126" dst_port="80" proto="tcp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.178.126" dst_port="80" proto="udp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.178.126" dst_port="25" proto="tcp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.178.126" dst_port="25" proto="udp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="80" proto="tcp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="80" proto="udp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="25" proto="tcp" src_ip="75.50.49.57" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="25" proto="udp" src_ip="75.50.49.57" src_port="80"/>
      <from sec="1207285324" usec="0"/>
      <to sec="1207285327" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.209.178.126" dst_port="80" proto="tcp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.178.126" dst_port="80" proto="udp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.178.126" dst_port="25" proto="tcp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.178.126" dst_port="25" proto="udp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="80" proto="tcp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="80" proto="udp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="25" proto="tcp" src_ip="22.56.164.159" src_port="80"/>
      <filter dst_ip="167.209.168.226" dst_port="25" proto="udp" src_ip="22.56.164.159" src_port="80"/>
      <from sec="1207285325" usec="0"/>
      <to sec="1207285327" usec="0"/>
    </slice>
    <from sec="1207285324" usec="0"/>
    <to sec="1207285327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.222.234.172" dst_port="80" proto="tcp" src_ip="167.209.133.78" src_port="2841"/>
      <from sec="1207285858" usec="0"/>
      <to sec="1207285863" usec="0"/>
    </slice>
    <from sec="1207285858" usec="0"/>
    <to sec="1207285863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="102.34.106.106" dst_port="80" proto="tcp" src_ip="149.82.5.86" src_port="1721"/>
      <filter dst_ip="102.34.106.106" dst_port="80" proto="udp" src_ip="149.82.5.86" src_port="1721"/>
      <filter dst_ip="102.34.106.106" dst_port="25" proto="tcp" src_ip="149.82.5.86" src_port="1721"/>
      <filter dst_ip="102.34.106.106" dst_port="25" proto="udp" src_ip="149.82.5.86" src_port="1721"/>
      <from sec="1207286094" usec="0"/>
      <to sec="1207286097" usec="0"/>
    </slice>
    <from sec="1207286094" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.61.121.209" proto="icmp" src_ip="212.205.238.94"/>
      <filter dst_ip="213.61.121.209" src_ip="212.205.238.94"/>
      <filter dst_ip="212.205.238.94" proto="icmp" src_ip="212.205.238.94"/>
      <filter dst_ip="212.205.238.94" src_ip="212.205.238.94"/>
      <from sec="1207285220" usec="0"/>
      <to sec="1207285224" usec="0"/>
    </slice>
    <from sec="1207285220" usec="0"/>
    <to sec="1207285224" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="102.34.102.175" dst_port="80" proto="tcp" src_ip="160.86.153.97" src_port="2013"/>
      <filter dst_ip="102.34.102.175" dst_port="80" proto="udp" src_ip="160.86.153.97" src_port="2013"/>
      <filter dst_ip="102.34.102.175" dst_port="25" proto="tcp" src_ip="160.86.153.97" src_port="2013"/>
      <filter dst_ip="102.34.102.175" dst_port="25" proto="udp" src_ip="160.86.153.97" src_port="2013"/>
      <from sec="1207286041" usec="0"/>
      <to sec="1207286091" usec="0"/>
    </slice>
    <from sec="1207286041" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.82.102.124" dst_port="80" proto="tcp" src_ip="167.209.218.148" src_port="17740"/>
      <filter dst_ip="212.82.102.124" dst_port="25" proto="tcp" src_ip="167.209.218.148" src_port="17740"/>
      <from sec="1207285859" usec="0"/>
      <to sec="1207286051" usec="0"/>
    </slice>
    <from sec="1207285859" usec="0"/>
    <to sec="1207286051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.90.89" dst_port="80" proto="tcp" src_ip="197.102.111.149" src_port="1261"/>
      <filter dst_ip="167.209.90.89" dst_port="25" proto="tcp" src_ip="197.102.111.149" src_port="1261"/>
      <filter dst_ip="167.209.90.89" dst_port="80" proto="tcp" src_ip="197.102.111.149" src_port="1260"/>
      <filter dst_ip="167.209.90.89" dst_port="25" proto="tcp" src_ip="197.102.111.149" src_port="1260"/>
      <from sec="1207286049" usec="0"/>
      <to sec="1207286050" usec="0"/>
    </slice>
    <from sec="1207286047" usec="0"/>
    <to sec="1207286051" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="149.82.93.90" dst_port="1146" proto="tcp" src_ip="102.34.111.213" src_port="80"/>
      <filter dst_ip="149.82.93.90" dst_port="1146" proto="udp" src_ip="102.34.111.213" src_port="80"/>
      <filter dst_ip="149.82.93.90" dst_port="25" proto="tcp" src_ip="102.34.111.213" src_port="80"/>
      <filter dst_ip="149.82.93.90" dst_port="25" proto="udp" src_ip="102.34.111.213" src_port="80"/>
      <filter dst_ip="149.82.93.90" dst_port="53" proto="tcp" src_ip="102.34.111.213" src_port="80"/>
      <filter dst_ip="149.82.93.90" dst_port="53" proto="udp" src_ip="102.34.111.213" src_port="80"/>
      <from sec="1207286030" usec="0"/>
      <to sec="1207286086" usec="0"/>
    </slice>
    <from sec="1207286030" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="201.246.89.93" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="201.246.89.93" dst_port="25" proto="tcp" src_port="80"/>
      <from sec="1207285839" usec="0"/>
      <to sec="1207285844" usec="0"/>
    </slice>
    <from sec="1207285839" usec="0"/>
    <to sec="1207285844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="25" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="80" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="udp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_ip="167.209.179.111" dst_port="53" proto="udp" src_port="80"/>
      <from sec="1207285249" usec="0"/>
      <to sec="1207286007" usec="0"/>
    </slice>
    <from sec="1207285249" usec="0"/>
    <to sec="1207286007" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="25" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="80" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="udp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="tcp" src_ip="160.86.89.169"/>
      <filter dst_ip="160.86.89.169" dst_port="53" proto="udp" src_ip="160.86.89.169"/>
      <from sec="1207285414" usec="0"/>
      <to sec="1207286000" usec="0"/>
    </slice>
    <from sec="1207285414" usec="0"/>
    <to sec="1207286000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="220.222.237.188" dst_port="80" proto="tcp" src_ip="213.61.69.95"/>
      <filter dst_ip="220.222.237.188" dst_port="80" proto="tcp" src_ip="213.61.69.95"/>
      <filter dst_ip="220.222.237.188" dst_port="80" proto="tcp" src_ip="213.61.69.95"/>
      <filter dst_ip="220.222.237.188" dst_port="80" proto="tcp" src_ip="213.61.69.95"/>
      <from sec="1207285612" usec="0"/>
      <to sec="1207285614" usec="0"/>
    </slice>
    <from sec="1207285612" usec="0"/>
    <to sec="1207285615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.86.89.211" dst_port="80" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="80" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="80" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="80" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="25" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="25" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="25" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <filter dst_ip="160.86.89.211" dst_port="25" proto="tcp" src_ip="160.86.89.211" src_port="46726"/>
      <from sec="1207285260" usec="0"/>
      <to sec="1207286000" usec="0"/>
    </slice>
    <from sec="1207285260" usec="0"/>
    <to sec="1207286000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.192.122" dst_port="80" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="80" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="80" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="80" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="25" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="25" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="25" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <filter dst_ip="167.209.192.122" dst_port="25" proto="tcp" src_ip="196.12.65.163" src_port="80"/>
      <from sec="1207286083" usec="0"/>
      <to sec="1207286086" usec="0"/>
    </slice>
    <from sec="1207286083" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="117.202.254.193" proto="icmp" src_ip="117.202.254.193"/>
      <filter dst_ip="117.202.254.193" proto="icmp" src_ip="117.202.254.193"/>
      <filter dst_ip="117.202.254.193" proto="icmp" src_ip="117.202.254.193"/>
      <filter dst_ip="117.202.254.193" proto="icmp" src_ip="117.202.254.193"/>
      <from sec="1207285200" usec="0"/>
      <to sec="1207285517" usec="0"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.88.155.165" dst_port="80" proto="tcp" src_ip="167.209.165.113" src_port="80"/>
      <filter dst_ip="210.88.155.165" dst_port="22" proto="tcp" src_ip="167.209.165.113" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="80" proto="tcp" src_ip="167.209.165.113" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="22" proto="tcp" src_ip="167.209.165.113" src_port="80"/>
      <from sec="1207285370" usec="0"/>
      <to sec="1207285373" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.88.155.165" dst_port="80" proto="tcp" src_ip="167.209.208.4" src_port="80"/>
      <filter dst_ip="210.88.155.165" dst_port="22" proto="tcp" src_ip="167.209.208.4" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="80" proto="tcp" src_ip="167.209.208.4" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="22" proto="tcp" src_ip="167.209.208.4" src_port="80"/>
      <from sec="1207285370" usec="0"/>
      <to sec="1207285373" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.88.155.165" dst_port="80" proto="tcp" src_ip="102.49.35.108" src_port="80"/>
      <filter dst_ip="210.88.155.165" dst_port="22" proto="tcp" src_ip="102.49.35.108" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="80" proto="tcp" src_ip="102.49.35.108" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="22" proto="tcp" src_ip="102.49.35.108" src_port="80"/>
      <from sec="1207285370" usec="0"/>
      <to sec="1207285373" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="210.88.155.165" dst_port="80" proto="tcp" src_ip="212.133.3.87" src_port="80"/>
      <filter dst_ip="210.88.155.165" dst_port="22" proto="tcp" src_ip="212.133.3.87" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="80" proto="tcp" src_ip="212.133.3.87" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="22" proto="tcp" src_ip="212.133.3.87" src_port="80"/>
      <from sec="1207285370" usec="0"/>
      <to sec="1207285373" usec="0"/>
    </slice>
    <from sec="1207285370" usec="0"/>
    <to sec="1207285373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="212.205.227.45" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <from sec="1207285235" usec="0"/>
      <to sec="1207286084" usec="0"/>
    </slice>
    <from sec="1207285235" usec="0"/>
    <to sec="1207286084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="80" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="25" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="udp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="tcp" src_ip="167.209.172.56"/>
      <filter dst_ip="144.106.46.73" dst_port="53" proto="udp" src_ip="167.209.172.56"/>
      <from sec="1207285448" usec="0"/>
      <to sec="1207286020" usec="0"/>
    </slice>
    <from sec="1207285448" usec="0"/>
    <to sec="1207286020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="25" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="53" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="tcp" src_ip="36.89.48.114" src_port="55078"/>
      <filter dst_ip="36.89.48.114" dst_port="80" proto="udp" src_ip="36.89.48.114" src_port="55078"/>
      <from sec="1207285607" usec="0"/>
      <to sec="1207285744" usec="0"/>
    </slice>
    <from sec="1207285607" usec="0"/>
    <to sec="1207285744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="101.226.231.119" dst_port="21" proto="udp" src_ip="77.195.150.215"/>
      <from sec="1207285662" usec="0"/>
      <to sec="1207286037" usec="0"/>
    </slice>
    <from sec="1207285662" usec="0"/>
    <to sec="1207286038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="25" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="80" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="udp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="tcp" src_ip="101.226.193.124"/>
      <filter dst_ip="101.226.193.124" dst_port="53" proto="udp" src_ip="101.226.193.124"/>
      <from sec="1207285331" usec="0"/>
      <to sec="1207285846" usec="0"/>
    </slice>
    <from sec="1207285331" usec="0"/>
    <to sec="1207285846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_25{
style=filled;
color=gray75;
251[label="15.45.85.53s;160pkt 160fpkt", shape=rectangle, color=red];
stat25[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.45.85.53:36714, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36714: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
251--1313[label="0.0120482;1pkt 1fpkt"];
251--7990[label="0.0120482;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="15.45.85.53" src_port="36714"/>
    </slice>
    <from sec="1207285784" usec="0"/>
    <to sec="1207285791" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,002,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="137" proto="udp" src_ip="121.32.86.153" src_port="62414"/>
      <from sec="1207285999" usec="0"/>
      <to sec="1207286004" usec="0"/>
    </slice>
    <from sec="1207285999" usec="0"/>
    <to sec="1207286004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="445" proto="tcp" src_ip="8.153.0.212"/>
      <filter dst_port="443" proto="tcp" src_ip="8.153.0.212"/>
      <from sec="1207285210" usec="0"/>
      <to sec="1207285211" usec="0"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207285213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.79.16.234" dst_port="445" proto="tcp" src_ip="213.201.143.227" src_port="445"/>
      <from sec="1207285431" usec="0"/>
      <to sec="1207285484" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="193.79.16.234" dst_port="445" proto="tcp" src_ip="212.205.227.227" src_port="445"/>
      <from sec="1207285430" usec="0"/>
      <to sec="1207285484" usec="0"/>
    </slice>
    <from sec="1207285430" usec="0"/>
    <to sec="1207285484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="25" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="80" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="udp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="tcp" src_ip="213.61.69.7"/>
      <filter dst_ip="213.61.69.7" dst_port="53" proto="udp" src_ip="213.61.69.7"/>
      <from sec="1207285331" usec="0"/>
      <to sec="1207285965" usec="0"/>
    </slice>
    <from sec="1207285331" usec="0"/>
    <to sec="1207285965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="53" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="80" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="udp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="tcp" src_ip="160.86.194.13"/>
      <filter dst_ip="160.86.194.13" dst_port="25" proto="udp" src_ip="160.86.194.13"/>
      <from sec="1207285392" usec="0"/>
      <to sec="1207285864" usec="0"/>
    </slice>
    <from sec="1207285392" usec="0"/>
    <to sec="1207285864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="25" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="53" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="udp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="tcp" src_ip="144.106.71.96"/>
      <filter dst_ip="144.106.71.96" dst_port="80" proto="udp" src_ip="144.106.71.96"/>
      <from sec="1207285574" usec="0"/>
      <to sec="1207285939" usec="0"/>
    </slice>
    <from sec="1207285574" usec="0"/>
    <to sec="1207285939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,020,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.86.82.105" proto="tcp"/>
      <filter dst_ip="160.86.82.105" proto="icmp"/>
      <filter dst_ip="160.86.82.105" proto="tcp"/>
      <filter dst_ip="160.86.82.105" proto="icmp"/>
      <filter dst_ip="160.86.82.105" proto="tcp"/>
      <filter dst_ip="160.86.82.105" proto="icmp"/>
      <filter dst_ip="160.86.82.105" proto="tcp"/>
      <filter dst_ip="160.86.82.105" proto="icmp"/>
      <from sec="1207285780" usec="0"/>
      <to sec="1207285781" usec="0"/>
    </slice>
    <from sec="1207285779" usec="0"/>
    <to sec="1207285782" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="77.195.150.215"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="53" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="25" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="tcp" src_ip="167.209.48.148"/>
      <filter dst_ip="167.209.48.148" dst_port="80" proto="udp" src_ip="167.209.48.148"/>
      <from sec="1207285795" usec="0"/>
      <to sec="1207285855" usec="0"/>
    </slice>
    <from sec="1207285795" usec="0"/>
    <to sec="1207285855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="213.61.121.139" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="445"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="80" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="25" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="tcp" src_ip="77.195.150.215" src_port="139"/>
      <filter dst_ip="193.79.16.234" dst_port="53" proto="udp" src_ip="77.195.150.215" src_port="139"/>
      <from sec="1207285301" usec="0"/>
      <to sec="1207285304" usec="0"/>
    </slice>
    <from sec="1207285301" usec="0"/>
    <to sec="1207285304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.27.23" dst_port="25" proto="tcp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="167.209.27.23" dst_port="25" proto="udp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="167.209.27.23" dst_port="80" proto="tcp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="167.209.27.23" dst_port="80" proto="udp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="25" proto="tcp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="25" proto="udp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="80" proto="tcp" src_ip="212.158.217.146" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="80" proto="udp" src_ip="212.158.217.146" src_port="80"/>
      <from sec="1207285423" usec="0"/>
      <to sec="1207285426" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="167.209.27.23" dst_port="25" proto="tcp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="167.209.27.23" dst_port="25" proto="udp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="167.209.27.23" dst_port="80" proto="tcp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="167.209.27.23" dst_port="80" proto="udp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="25" proto="tcp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="25" proto="udp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="80" proto="tcp" src_ip="167.209.178.186" src_port="80"/>
      <filter dst_ip="197.126.137.73" dst_port="80" proto="udp" src_ip="167.209.178.186" src_port="80"/>
      <from sec="1207285424" usec="0"/>
      <to sec="1207285427" usec="0"/>
    </slice>
    <from sec="1207285423" usec="0"/>
    <to sec="1207285427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="53" proto="tcp" src_port="80"/>
      <filter dst_port="53" proto="udp" src_port="80"/>
      <filter dst_port="25" proto="tcp" src_port="80"/>
      <filter dst_port="25" proto="udp" src_port="80"/>
    </slice>
    <from sec="1207285520" usec="0"/>
    <to sec="1207285523" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.86.194.33" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="25" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <filter dst_ip="160.86.194.33" dst_port="80" proto="tcp" src_ip="77.195.150.215" src_port="2703"/>
      <from sec="1207285282" usec="0"/>
      <to sec="1207285304" usec="0"/>
    </slice>
    <from sec="1207285282" usec="0"/>
    <to sec="1207285304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="53" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="25" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="tcp" src_ip="75.50.12.98" src_port="80"/>
      <filter dst_ip="167.209.107.85" dst_port="80" proto="udp" src_ip="75.50.12.98" src_port="80"/>
      <from sec="1207285522" usec="0"/>
      <to sec="1207285524" usec="0"/>
    </slice>
    <from sec="1207285522" usec="0"/>
    <to sec="1207285525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="80" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="25" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="53" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="udp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="tcp" src_ip="213.45.167.148"/>
      <filter dst_ip="144.106.82.138" dst_port="135" proto="udp" src_ip="213.45.167.148"/>
      <from sec="1207286026" usec="0"/>
      <to sec="1207286029" usec="0"/>
    </slice>
    <from sec="1207286025" usec="0"/>
    <to sec="1207286029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.993864,2.10191,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="193.79.16.234"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="25" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="80" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="tcp" src_ip="213.61.121.139"/>
      <filter dst_ip="167.209.66.244" dst_port="53" proto="udp" src_ip="213.61.121.139"/>
      <from sec="1207285401" usec="0"/>
      <to sec="1207285422" usec="0"/>
    </slice>
    <from sec="1207285401" usec="0"/>
    <to sec="1207285422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29577,1.98453,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
47[label="96.195.37.74s;1pkt 1fpkt", shape=rectangle, color=red];
508[label="96.195.37.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
509[label="167.209.222.216;d;3pkt 3fpkt", shape=diamond, color=yellow];
6322[label="96.195.37.74;s;1pkt 1fpkt", shape=hexagon, color=black];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.134.112.22:6669, 167.209.222.216:1038}[33.3333%]&lt;BR/&gt;{96.195.37.74:1024, 167.209.222.216:17772}[33.3333%]&lt;BR/&gt;{193.76.70.79:2055, 167.209.222.216:17772}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17772: (41.6667%)&lt;BR/&gt; 1024: (33.3333%)&lt;BR/&gt; 6669: (8.33333%)&lt;BR/&gt; 2055: (8.33333%)&lt;BR/&gt; 1038: (8.33333%)&gt;];
}
47--508[label="1;1pkt 1fpkt"];
47--509[label="1;1pkt 1fpkt"];
47--6322[label="1;1pkt 1fpkt"];
508--509[label="1;1pkt 1fpkt"];
508--6322[label="1;1pkt 1fpkt"];
509--6322[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.222.216" dst_port="17772" src_ip="193.76.70.79" src_port="2055"/>
      <filter dst_ip="167.209.222.216" dst_port="17772" src_ip="96.195.37.74" src_port="1024"/>
      <filter dst_ip="167.209.222.216" dst_port="1038" src_ip="106.134.112.22" src_port="6669"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285909" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
585[label="218.9.239.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
586[label="149.82.92.84;s;3pkt 3fpkt", shape=diamond, color=yellow];
5312[label="218.9.239.201;d;1pkt 1fpkt", shape=hexagon, color=black];
6335[label="149.82.92.84;s;3pkt 3fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.92.84:21416, 218.9.239.148:11113}[33.3333%]&lt;BR/&gt;{149.82.92.84:21416, 218.9.239.201:8952}[33.3333%]&lt;BR/&gt;{149.82.92.84:16965, 118.66.203.238:11113}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21416: (37.5%)&lt;BR/&gt; 11113: (25%)&lt;BR/&gt; 8952: (25%)&lt;BR/&gt; 16965: (12.5%)&gt;];
}
585--586[label="1;1pkt 1fpkt"];
585--5312[label="1;1pkt 1fpkt"];
585--6335[label="1;1pkt 1fpkt"];
586--5312[label="1;1pkt 1fpkt"];
586--6335[label="1;3pkt 3fpkt"];
5312--6335[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="118.66.203.238" dst_port="11113" src_ip="149.82.92.84" src_port="16965"/>
      <filter dst_ip="218.9.239.201" dst_port="8952" src_ip="149.82.92.84" src_port="21416"/>
      <filter dst_ip="218.9.239.148" dst_port="11113" src_ip="149.82.92.84" src_port="21416"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_59{
style=filled;
color=gray75;
634[label="204.6.228.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
635[label="150.183.154.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
5325[label="204.6.228.52;d;1pkt 1fpkt", shape=hexagon, color=black];
stat59[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.183.154.243:2049, 204.6.228.52:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2049: (50%)&gt;];
}
634--635[label="1;1pkt 1fpkt"];
634--5325[label="1;1pkt 1fpkt"];
635--5325[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.6.228.52" dst_port="8080" src_ip="150.183.154.243" src_port="2049"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
855[label="198.105.89.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
856[label="167.209.124.22;d;1pkt 1fpkt", shape=diamond, color=yellow];
5387[label="198.105.89.4;s;1pkt 1fpkt", shape=hexagon, color=black];
5388[label="167.209.124.22;d;1pkt 1fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.105.89.4:9010, 167.209.124.22:49288}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49288: (50%)&lt;BR/&gt; 9010: (50%)&gt;];
}
855--856[label="1;1pkt 1fpkt"];
855--5387[label="1;1pkt 1fpkt"];
855--5388[label="1;1pkt 1fpkt"];
856--5387[label="1;1pkt 1fpkt"];
856--5388[label="1;1pkt 1fpkt"];
5387--5388[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.124.22" dst_port="49288" src_ip="198.105.89.4" src_port="9010"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_62{
style=filled;
color=gray75;
854[label="198.105.89.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
857[label="167.209.124.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
5386[label="198.105.89.4;d;1pkt 1fpkt", shape=hexagon, color=black];
5389[label="167.209.124.22;s;1pkt 1fpkt", shape=hexagon, color=black];
stat62[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.124.22:49288, 198.105.89.4:9010}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49288: (50%)&lt;BR/&gt; 9010: (50%)&gt;];
}
854--857[label="1;1pkt 1fpkt"];
854--5386[label="1;1pkt 1fpkt"];
854--5389[label="1;1pkt 1fpkt"];
857--5386[label="1;1pkt 1fpkt"];
857--5389[label="1;1pkt 1fpkt"];
5386--5389[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.105.89.4" dst_port="9010" src_ip="167.209.124.22" src_port="49288"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
868[label="167.209.200.165;s;2pkt 2fpkt", shape=diamond, color=yellow];
869[label="25.39.177.183;d;1pkt 1fpkt", shape=diamond, color=yellow];
5391[label="25.39.177.183;d;1pkt 1fpkt", shape=hexagon, color=black];
7690[label="167.209.200.165;s;2pkt 2fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.200.165:123, 36.92.99.9:123}[50%]&lt;BR/&gt;{167.209.200.165:49184, 25.39.177.183:9036}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49184: (33.3333%)&lt;BR/&gt; 9036: (33.3333%)&lt;BR/&gt; 123: (33.3333%)&gt;];
}
868--869[label="1;1pkt 1fpkt"];
868--5391[label="1;1pkt 1fpkt"];
868--7690[label="1;2pkt 2fpkt"];
869--5391[label="1;1pkt 1fpkt"];
869--7690[label="1;1pkt 1fpkt"];
5391--7690[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="25.39.177.183" dst_port="9036" src_ip="167.209.200.165" src_port="49184"/>
      <filter dst_ip="36.92.99.9" dst_port="123" src_ip="167.209.200.165" src_port="123"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1207285200" usec="0"/>
      <to sec="1207286028" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1207285200" usec="0"/>
      <to sec="1207286028" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29577,1.98453,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_66{
style=filled;
color=gray75;
21[label="167.209.8.25s;2pkt 2fpkt", shape=rectangle, color=red];
562[label="167.209.8.25;s;6pkt 6fpkt", shape=diamond, color=yellow];
947[label="74.97.39.0;d;2pkt 2fpkt", shape=diamond, color=yellow];
964[label="77.201.172.175;d;1pkt 1fpkt", shape=diamond, color=yellow];
5415[label="77.201.172.175;d;1pkt 1fpkt", shape=hexagon, color=black];
stat66[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.8.25:*, 74.97.39.0:19101}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19101: (50%)&lt;BR/&gt; 4462: (16.6667%)&lt;BR/&gt; 1464: (12.5%)&lt;BR/&gt; 1628: (8.33333%)&lt;BR/&gt; 1703: (4.16667%)&gt;];
}
21--562[label="1;2pkt 2fpkt"];
21--947[label="0.5;1pkt 1fpkt"];
21--964[label="1;1pkt 1fpkt"];
21--5415[label="1;1pkt 1fpkt"];
562--947[label="1;2pkt 2fpkt"];
562--964[label="1;1pkt 1fpkt"];
562--5415[label="1;1pkt 1fpkt"];
964--5415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="74.97.39.0" dst_port="19101" src_ip="167.209.8.25"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_67{
style=filled;
color=gray75;
968[label="144.106.125.30;d;13pkt 13fpkt", shape=diamond, color=yellow];
969[label="205.48.232.117;s;4pkt 4fpkt", shape=diamond, color=yellow];
5416[label="144.106.125.30;d;13pkt 13fpkt", shape=hexagon, color=black];
6750[label="205.48.232.117;s;4pkt 4fpkt", shape=hexagon, color=black];
stat67[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:10299, 144.106.125.30:*}[61.5385%]&lt;BR/&gt;{205.48.232.117:20, 144.106.125.30:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10299: (23.5294%)&lt;BR/&gt; 20: (17.6471%)&lt;BR/&gt; 35175: (5.88235%)&lt;BR/&gt; 28284: (5.88235%)&lt;BR/&gt; 28170: (5.88235%)&gt;];
}
968--969[label="1;4pkt 4fpkt"];
968--5416[label="1;13pkt 13fpkt"];
968--6750[label="1;4pkt 4fpkt"];
969--5416[label="1;4pkt 4fpkt"];
969--6750[label="1;4pkt 4fpkt"];
5416--6750[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.125.30" src_port="10299"/>
      <filter dst_ip="144.106.125.30" src_ip="205.48.232.117" src_port="20"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="179.8.231.144"/>
      <from sec="1207285200" usec="0"/>
      <to sec="1207285470" usec="0"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
1075[label="114.67.29.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
1076[label="179.101.236.120;s;17pkt 17fpkt", shape=diamond, color=yellow];
5707[label="179.101.236.120;s;8pkt 8fpkt", shape=hexagon, color=black];
7923[label="114.67.29.146;d;1pkt 1fpkt", shape=hexagon, color=black];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.101.236.120:63945, *:*}[47.0588%]&lt;BR/&gt;{179.101.236.120:*, *:4662}[29.4118%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63945: (22.2222%)&lt;BR/&gt; 4662: (16.6667%)&lt;BR/&gt; 3662: (7.40741%)&lt;BR/&gt; 46876: (3.7037%)&lt;BR/&gt; 35395: (3.7037%)&gt;];
}
1075--1076[label="1;1pkt 1fpkt"];
1075--5707[label="1;1pkt 1fpkt"];
1075--7923[label="1;1pkt 1fpkt"];
1076--5707[label="1;8pkt 8fpkt"];
1076--7923[label="1;1pkt 1fpkt"];
5707--7923[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="179.101.236.120" src_port="63945"/>
      <filter dst_port="4662" src_ip="179.101.236.120"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1117[label="100.214.214.115;d;1pkt 1fpkt", shape=diamond, color=yellow];
1119[label="212.205.235.55;s;4pkt 4fpkt", shape=diamond, color=yellow];
5455[label="100.214.214.115;d;1pkt 1fpkt", shape=hexagon, color=black];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.235.55:55028, 100.214.214.115:8000}[25%]&lt;BR/&gt;{212.205.235.55:55178, 101.3.248.115:443}[25%]&lt;BR/&gt;{212.205.235.55:55208, 101.3.248.115:443}[25%]&lt;BR/&gt;{212.205.235.55:55224, 101.3.248.115:443}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55028: (25%)&lt;BR/&gt; 8000: (25%)&lt;BR/&gt; 443: (25%)&lt;BR/&gt; 55224: (8.33333%)&lt;BR/&gt; 55208: (8.33333%)&gt;];
}
1117--1119[label="1;1pkt 1fpkt"];
1117--5455[label="1;1pkt 1fpkt"];
1119--5455[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="101.3.248.115" dst_port="443" src_ip="212.205.235.55" src_port="55224"/>
      <filter dst_ip="101.3.248.115" dst_port="443" src_ip="212.205.235.55" src_port="55208"/>
      <filter dst_ip="101.3.248.115" dst_port="443" src_ip="212.205.235.55" src_port="55178"/>
      <filter dst_ip="100.214.214.115" dst_port="8000" src_ip="212.205.235.55" src_port="55028"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10316,1.99123,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
52[label="212.82.102.78s;1pkt 1fpkt", shape=rectangle, color=red];
627[label="212.82.102.78;s;1pkt 1fpkt", shape=diamond, color=yellow];
1617[label="149.82.94.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
10245[label="212.82.102.78;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.82.102.78:80, 213.61.121.139:56080}[50%]&lt;BR/&gt;{212.82.102.78:80, 149.82.94.255:1475}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1475: (40%)&lt;BR/&gt; 56080: (10%)&gt;];
}
52--627[label="1;1pkt 1fpkt"];
52--1617[label="1;1pkt 1fpkt"];
52--10245[label="1;1pkt 1fpkt"];
627--1617[label="1;1pkt 1fpkt"];
627--10245[label="1;1pkt 1fpkt"];
1617--10245[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.94.255" dst_port="1475" src_ip="212.82.102.78" src_port="80"/>
      <filter dst_ip="213.61.121.139" dst_port="56080" src_ip="212.82.102.78" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.29577,1.98453,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
81[label="167.209.78.113s;1pkt 1fpkt", shape=rectangle, color=red];
1274[label="167.209.78.113;s;12pkt 12fpkt", shape=diamond, color=yellow];
1275[label="212.82.100.148;d;2pkt 2fpkt", shape=diamond, color=yellow];
4911[label="212.82.100.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
6123[label="212.82.100.148;d;2pkt 2fpkt", shape=hexagon, color=black];
6509[label="167.209.78.113;s;4pkt 4fpkt", shape=hexagon, color=black];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.78.113:*, 165.64.188.133:80}[25%]&lt;BR/&gt;{167.209.78.113:*, *:1935}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 2594: (11.3636%)&lt;BR/&gt; 2498: (9.09091%)&lt;BR/&gt; 2649: (4.54545%)&gt;];
}
81--1274[label="1;1pkt 1fpkt"];
81--1275[label="1;1pkt 1fpkt"];
81--6123[label="1;1pkt 1fpkt"];
81--6509[label="1;1pkt 1fpkt"];
1274--1275[label="1;2pkt 2fpkt"];
1274--4911[label="1;1pkt 1fpkt"];
1274--6123[label="1;2pkt 2fpkt"];
1274--6509[label="1;4pkt 4fpkt"];
1275--6123[label="1;2pkt 2fpkt"];
1275--6509[label="1;2pkt 2fpkt"];
6123--6509[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="1935" src_ip="167.209.78.113"/>
      <filter dst_ip="165.64.188.133" dst_port="80" src_ip="167.209.78.113"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
1466[label="103.162.132.118;d;23pkt 23fpkt", shape=diamond, color=yellow];
1469[label="167.209.122.129;s;24pkt 24fpkt", shape=diamond, color=yellow];
5556[label="103.162.132.118;d;23pkt 23fpkt", shape=hexagon, color=black];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.122.129:*, 103.162.132.118:80}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43621: (2.14286%)&lt;BR/&gt; 43620: (2.14286%)&lt;BR/&gt; 43619: (2.14286%)&lt;BR/&gt; 43618: (2.14286%)&gt;];
}
1466--1469[label="1;23pkt 23fpkt"];
1466--5556[label="1;23pkt 23fpkt"];
1469--5556[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="103.162.132.118" dst_port="80" src_ip="167.209.122.129"/>
    </slice>
    <from sec="1207285233" usec="0"/>
    <to sec="1207285477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.205.80.27"/>
      <from sec="1207285851" usec="0"/>
      <to sec="1207286026" usec="0"/>
    </slice>
    <from sec="1207285851" usec="0"/>
    <to sec="1207286026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
2174[label="101.207.77.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
2175[label="160.67.178.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
6235[label="160.67.178.46;s;1pkt 1fpkt", shape=hexagon, color=black];
9747[label="160.67.178.46;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13228[label="160.67.178.46;1pkt 1fpkt", shape=invtriangle, color=brown];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.67.178.46:80, 101.207.77.171:52978}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52978: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2174--2175[label="1;1pkt 1fpkt"];
2174--6235[label="1;1pkt 1fpkt"];
2174--9747[label="1;1pkt 1fpkt"];
2174--13228[label="1;1pkt 1fpkt"];
2175--6235[label="1;1pkt 1fpkt"];
2175--9747[label="1;1pkt 1fpkt"];
2175--13228[label="1;1pkt 1fpkt"];
6235--9747[label="1;1pkt 1fpkt"];
6235--13228[label="1;1pkt 1fpkt"];
9747--13228[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.77.171" dst_port="52978" src_ip="160.67.178.46" src_port="80"/>
    </slice>
    <from sec="1207285307" usec="0"/>
    <to sec="1207285330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="185.129.76.61"/>
      <from sec="1207285953" usec="0"/>
      <to sec="1207285964" usec="0"/>
    </slice>
    <from sec="1207285953" usec="0"/>
    <to sec="1207285964" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
478[label="212.205.227.193;d;2129pkt 2129fpkt", shape=diamond, color=yellow];
2353[label="20.203.132.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
5913[label="212.205.227.193;d;825pkt 825fpkt", shape=hexagon, color=black];
6400[label="20.203.132.136;s;1pkt 1fpkt", shape=hexagon, color=black];
11237[label="20.203.132.136;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.205.227.193:31077}[64.1146%]&lt;BR/&gt;{*:*, 212.205.227.193:3731}[33.6308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31077: (31.0619%)&lt;BR/&gt; 3731: (17.8221%)&lt;BR/&gt; 0: (1.04836%)&lt;BR/&gt; 16001: (0.591816%)&lt;BR/&gt; 6881: (0.490362%)&gt;];
}
478--820[label="0.00332226;1pkt 1fpkt"];
478--2353[label="1;1pkt 1fpkt"];
478--5272[label="0.000469704;1pkt 1fpkt"];
478--5913[label="1;825pkt 825fpkt"];
478--6370[label="0.00332226;1pkt 1fpkt"];
478--6400[label="1;1pkt 1fpkt"];
478--8591[label="0.00115875;1pkt 1fpkt"];
478--8612[label="0.000469704;1pkt 1fpkt"];
478--8634[label="0.00102249;1pkt 1fpkt"];
478--8711[label="0.00115875;1pkt 1fpkt"];
478--8732[label="0.000469704;1pkt 1fpkt"];
478--8754[label="0.00102249;1pkt 1fpkt"];
478--8829[label="0.00115875;1pkt 1fpkt"];
478--8847[label="0.000469704;1pkt 1fpkt"];
478--8870[label="0.00102249;1pkt 1fpkt"];
478--11237[label="1;1pkt 1fpkt"];
478--15483[label="0.000469704;1pkt 1fpkt"];
2353--5913[label="1;1pkt 1fpkt"];
2353--6400[label="1;1pkt 1fpkt"];
2353--11237[label="1;1pkt 1fpkt"];
5913--6370[label="0.00332226;1pkt 1fpkt"];
5913--6400[label="1;1pkt 1fpkt"];
5913--8591[label="0.00121212;1pkt 1fpkt"];
5913--8612[label="0.00121212;1pkt 1fpkt"];
5913--8634[label="0.00121212;1pkt 1fpkt"];
5913--8711[label="0.00121212;1pkt 1fpkt"];
5913--8732[label="0.00121212;1pkt 1fpkt"];
5913--8754[label="0.00121212;1pkt 1fpkt"];
5913--8829[label="0.00121212;1pkt 1fpkt"];
5913--8847[label="0.00121212;1pkt 1fpkt"];
5913--8870[label="0.00121212;1pkt 1fpkt"];
5913--11237[label="1;1pkt 1fpkt"];
5913--15483[label="0.00121212;1pkt 1fpkt"];
6400--11237[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.205.227.193" dst_port="31077"/>
      <filter dst_ip="212.205.227.193" dst_port="3731"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
1032[label="14.66.104.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
2371[label="167.209.165.78;d;1pkt 1fpkt", shape=diamond, color=yellow];
6767[label="14.66.104.182;s;1pkt 1fpkt", shape=hexagon, color=black];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.66.104.182:0, 167.209.165.78:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1032--2371[label="1;1pkt 1fpkt"];
1032--6767[label="1;1pkt 1fpkt"];
2371--6767[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.165.78" src_ip="14.66.104.182"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="197.205.80.27"/>
      <from sec="1207285851" usec="0"/>
      <to sec="1207285938" usec="0"/>
    </slice>
    <from sec="1207285851" usec="0"/>
    <to sec="1207285938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
2769[label="167.209.140.215;s;2pkt 2fpkt", shape=diamond, color=yellow];
2848[label="104.12.162.252;d;1pkt 1fpkt", shape=diamond, color=yellow];
6296[label="104.12.162.252;d;1pkt 1fpkt", shape=hexagon, color=black];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.140.215:500, 204.10.75.23:500}[50%]&lt;BR/&gt;{167.209.140.215:80, 104.12.162.252:47328}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47328: (37.5%)&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 500: (25%)&gt;];
}
2769--2848[label="1;1pkt 1fpkt"];
2769--6296[label="1;1pkt 1fpkt"];
2848--6296[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="104.12.162.252" dst_port="47328" src_ip="167.209.140.215" src_port="80"/>
      <filter dst_ip="204.10.75.23" dst_port="500" src_ip="167.209.140.215" src_port="500"/>
    </slice>
    <from sec="1207285343" usec="0"/>
    <to sec="1207285435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
2768[label="167.209.140.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
2849[label="104.12.162.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
6252[label="167.209.140.215;d;1pkt 1fpkt", shape=hexagon, color=black];
6641[label="104.12.162.252;s;1pkt 1fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.12.162.252:47328, 167.209.140.215:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 47328: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2768--2849[label="1;1pkt 1fpkt"];
2768--6252[label="1;1pkt 1fpkt"];
2768--6641[label="1;1pkt 1fpkt"];
2849--6252[label="1;1pkt 1fpkt"];
2849--6641[label="1;1pkt 1fpkt"];
6252--6641[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.140.215" dst_port="80" src_ip="104.12.162.252" src_port="47328"/>
    </slice>
    <from sec="1207285343" usec="0"/>
    <to sec="1207285435" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.10316,1.99123,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
292[label="160.130.54.0s;1pkt 1fpkt", shape=rectangle, color=red];
3207[label="198.147.87.68;d;41pkt 41fpkt", shape=diamond, color=yellow];
3218[label="160.130.54.0;s;40pkt 40fpkt", shape=diamond, color=yellow];
8930[label="160.130.54.0;39pkt 39fpkt", shape=pentagon, color=darkviolet];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.130.54.0:*, 198.147.87.68:80}[97.561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5868%)&lt;BR/&gt; 35407: (1.65289%)&lt;BR/&gt; 35430: (1.23967%)&lt;BR/&gt; 35429: (1.23967%)&lt;BR/&gt; 35428: (1.23967%)&gt;];
}
292--3207[label="1;1pkt 1fpkt"];
292--3218[label="1;1pkt 1fpkt"];
292--8930[label="1;1pkt 1fpkt"];
3207--3218[label="1;40pkt 40fpkt"];
3207--8930[label="1;39pkt 39fpkt"];
3207--11051[label="0.0243902;1pkt 1fpkt"];
3218--8930[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="198.147.87.68" dst_port="80" src_ip="160.130.54.0"/>
    </slice>
    <from sec="1207285406" usec="0"/>
    <to sec="1207285517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.54.193.107"/>
      <from sec="1207285489" usec="0"/>
      <to sec="1207285646" usec="0"/>
    </slice>
    <from sec="1207285489" usec="0"/>
    <to sec="1207285646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
3389[label="212.205.245.38;d;185pkt 185fpkt", shape=diamond, color=yellow];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.205.245.38:22250}[97.8378%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22250: (48.9189%)&lt;BR/&gt; 3367: (0.540541%)&lt;BR/&gt; 65376: (0.27027%)&lt;BR/&gt; 64792: (0.27027%)&lt;BR/&gt; 64305: (0.27027%)&gt;];
}
3389--5272[label="0.00540541;1pkt 1fpkt"];
3389--8602[label="0.00540541;1pkt 1fpkt"];
3389--8609[label="0.00540541;1pkt 1fpkt"];
3389--8722[label="0.00540541;1pkt 1fpkt"];
3389--8729[label="0.00540541;1pkt 1fpkt"];
3389--8838[label="0.00540541;1pkt 1fpkt"];
3389--8845[label="0.00540541;1pkt 1fpkt"];
3389--15483[label="0.00540541;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.205.245.38" dst_port="22250"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
3418[label="149.82.163.46;d;630pkt 630fpkt", shape=diamond, color=yellow];
3419[label="196.238.174.186;s;710pkt 710fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.238.174.186:*, 149.82.163.46:6257}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6257: (50%)&lt;BR/&gt; 12025: (0.0746269%)&lt;BR/&gt; 12023: (0.0746269%)&lt;BR/&gt; 12020: (0.0746269%)&lt;BR/&gt; 12019: (0.0746269%)&gt;];
}
3418--3419[label="1;630pkt 630fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.163.46" dst_port="6257" src_ip="196.238.174.186"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967013,1.96331,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
3217[label="160.130.54.0;d;40pkt 40fpkt", shape=diamond, color=yellow];
3652[label="198.147.87.68;s;41pkt 41fpkt", shape=diamond, color=yellow];
10079[label="198.147.87.68;44pkt 44fpkt", shape=pentagon, color=darkviolet];
13390[label="198.147.87.68;44pkt 44fpkt", shape=invtriangle, color=brown];
14948[label="198.147.87.68;44pkt 44fpkt", shape=invhouse, color=bisque];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.147.87.68:80, 160.130.54.0:*}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.3568%)&lt;BR/&gt; 53: (3.28638%)&lt;BR/&gt; 35430: (1.17371%)&lt;BR/&gt; 35429: (1.17371%)&lt;BR/&gt; 35428: (1.17371%)&gt;];
}
3217--3652[label="1;40pkt 40fpkt"];
3217--10079[label="1;40pkt 40fpkt"];
3217--13390[label="1;40pkt 40fpkt"];
3217--14948[label="1;40pkt 40fpkt"];
3652--4987[label="0.0243902;1pkt 1fpkt"];
3652--10079[label="1;41pkt 41fpkt"];
3652--13390[label="1;41pkt 41fpkt"];
3652--14948[label="1;41pkt 41fpkt"];
10079--13390[label="1;44pkt 44fpkt"];
10079--14948[label="1;44pkt 44fpkt"];
13390--14948[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="160.130.54.0" src_ip="198.147.87.68" src_port="80"/>
    </slice>
    <from sec="1207285248" usec="0"/>
    <to sec="1207285518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
3694[label="149.82.64.64;d;7pkt 7fpkt", shape=diamond, color=yellow];
3737[label="12.240.86.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
7049[label="149.82.64.64;d;7pkt 7fpkt", shape=hexagon, color=black];
9077[label="12.240.207.8;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12914[label="12.240.207.8;2pkt 2fpkt", shape=invtriangle, color=brown];
14736[label="12.240.207.8;3pkt 3fpkt", shape=invhouse, color=bisque];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.240.207.8:80, 149.82.64.64:*}[42.8571%]&lt;BR/&gt;{12.240.86.241:80, 149.82.64.64:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 2815: (11.3636%)&lt;BR/&gt; 2814: (11.3636%)&lt;BR/&gt; 0: (9.09091%)&lt;BR/&gt; 2813: (6.81818%)&gt;];
}
3694--3737[label="1;1pkt 1fpkt"];
3694--7049[label="1;7pkt 7fpkt"];
3694--9077[label="1;2pkt 2fpkt"];
3694--12914[label="1;2pkt 2fpkt"];
3694--14736[label="1;3pkt 3fpkt"];
3737--7049[label="1;1pkt 1fpkt"];
7049--9077[label="1;2pkt 2fpkt"];
7049--12914[label="1;2pkt 2fpkt"];
7049--14736[label="1;3pkt 3fpkt"];
9077--12914[label="1;2pkt 2fpkt"];
9077--14736[label="1;2pkt 2fpkt"];
12914--14736[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.64.64" src_ip="12.240.207.8" src_port="80"/>
      <filter dst_ip="149.82.64.64" src_ip="12.240.86.241" src_port="80"/>
    </slice>
    <from sec="1207285543" usec="0"/>
    <to sec="1207285645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
3342[label="212.205.224.36;s;64pkt 64fpkt", shape=diamond, color=yellow];
3815[label="212.64.68.238;d;4pkt 4fpkt", shape=diamond, color=yellow];
7677[label="212.205.224.36;s;54pkt 54fpkt", shape=hexagon, color=black];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.224.36:1038, *:*}[84.375%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1038: (42.623%)&lt;BR/&gt; 443: (3.68852%)&lt;BR/&gt; 80: (2.86885%)&lt;BR/&gt; 18841: (1.22951%)&lt;BR/&gt; 2392: (1.22951%)&gt;];
}
3342--3815[label="1;4pkt 4fpkt"];
3342--7677[label="1;54pkt 54fpkt"];
3342--8590[label="0.03125;2pkt 2fpkt"];
3342--8633[label="0.015625;1pkt 1fpkt"];
3342--8710[label="0.03125;2pkt 2fpkt"];
3342--8753[label="0.015625;1pkt 1fpkt"];
3342--8828[label="0.03125;2pkt 2fpkt"];
3342--8869[label="0.015625;1pkt 1fpkt"];
3815--7677[label="1;4pkt 4fpkt"];
7677--8590[label="0.037037;2pkt 2fpkt"];
7677--8633[label="0.0185185;1pkt 1fpkt"];
7677--8710[label="0.037037;2pkt 2fpkt"];
7677--8753[label="0.0185185;1pkt 1fpkt"];
7677--8828[label="0.037037;2pkt 2fpkt"];
7677--8869[label="0.0185185;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.205.224.36" src_port="1038"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
3852[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
3853[label="167.209.212.127;s;1pkt 1fpkt", shape=diamond, color=yellow];
7706[label="167.209.212.127;s;1pkt 1fpkt", shape=hexagon, color=black];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.212.127:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
3852--3853[label="1;1pkt 1fpkt"];
3852--7706[label="1;1pkt 1fpkt"];
3853--7706[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="167.209.212.127" src_port="4445"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
1110[label="160.188.217.46;s;572pkt 572fpkt", shape=diamond, color=yellow];
3867[label="193.100.134.25;d;1pkt 1fpkt", shape=diamond, color=yellow];
5453[label="160.188.217.46;s;508pkt 508fpkt", shape=hexagon, color=black];
7714[label="193.100.134.25;d;1pkt 1fpkt", shape=hexagon, color=black];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.188.217.46:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1110--3838[label="0.00245098;1pkt 1fpkt"];
1110--3840[label="0.00262467;1pkt 1fpkt"];
1110--3867[label="1;1pkt 1fpkt"];
1110--4468[label="0.0128205;1pkt 1fpkt"];
1110--4581[label="0.00325733;1pkt 1fpkt"];
1110--4582[label="0.00315457;1pkt 1fpkt"];
1110--4595[label="0.003367;1pkt 1fpkt"];
1110--4597[label="0.0031348;1pkt 1fpkt"];
1110--4603[label="0.0026178;1pkt 1fpkt"];
1110--4938[label="0.00342466;1pkt 1fpkt"];
1110--5453[label="1;508pkt 508fpkt"];
1110--7159[label="0.00358423;1pkt 1fpkt"];
1110--7163[label="0.00383142;1pkt 1fpkt"];
1110--7714[label="1;1pkt 1fpkt"];
1110--7877[label="0.00325733;1pkt 1fpkt"];
1110--7906[label="0.0031348;1pkt 1fpkt"];
1110--8507[label="0.00325733;1pkt 1fpkt"];
3867--5453[label="1;1pkt 1fpkt"];
3867--7714[label="1;1pkt 1fpkt"];
5453--7159[label="0.00358423;1pkt 1fpkt"];
5453--7163[label="0.00383142;1pkt 1fpkt"];
5453--7714[label="1;1pkt 1fpkt"];
5453--7877[label="0.00325733;1pkt 1fpkt"];
5453--7906[label="0.0031348;1pkt 1fpkt"];
5453--8507[label="0.00325733;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="160.188.217.46"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
9222[label="9.8.45.16;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.8.45.16:*, 167.209.101.207:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2009: (3.125%)&lt;BR/&gt; 1977: (3.125%)&lt;BR/&gt; 1881: (3.125%)&lt;BR/&gt; 1782: (3.125%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="167.209.101.207" dst_port="25" src_ip="9.8.45.16"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207285396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
1064[label="213.51.187.177;d;566pkt 566fpkt", shape=diamond, color=yellow];
3916[label="194.88.167.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
6043[label="213.51.187.177;d;539pkt 539fpkt", shape=hexagon, color=black];
12215[label="78.88.3.206;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12585[label="194.88.167.232;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12811[label="9.207.12.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.51.187.177:13987}[97.7032%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13987: (48.8729%)&lt;BR/&gt; 45306: (0.631199%)&lt;BR/&gt; 0: (0.360685%)&lt;BR/&gt; 13745: (0.270514%)&lt;BR/&gt; 13662: (0.270514%)&gt;];
}
1064--2225[label="0.00176678;1pkt 1fpkt"];
1064--2874[label="0.00176678;1pkt 1fpkt"];
1064--3916[label="1;1pkt 1fpkt"];
1064--5894[label="0.00176678;1pkt 1fpkt"];
1064--6043[label="1;539pkt 539fpkt"];
1064--8238[label="0.00176678;1pkt 1fpkt"];
1064--8604[label="0.00176678;1pkt 1fpkt"];
1064--8724[label="0.00176678;1pkt 1fpkt"];
1064--8840[label="0.00176678;1pkt 1fpkt"];
1064--9863[label="0.00176678;1pkt 1fpkt"];
1064--12215[label="1;1pkt 1fpkt"];
1064--12585[label="1;1pkt 1fpkt"];
1064--12811[label="1;1pkt 1fpkt"];
1064--13280[label="0.00176678;1pkt 1fpkt"];
1064--14900[label="0.00176678;1pkt 1fpkt"];
3916--6043[label="1;1pkt 1fpkt"];
3916--12585[label="1;1pkt 1fpkt"];
6043--8238[label="0.00185529;1pkt 1fpkt"];
6043--8604[label="0.00185529;1pkt 1fpkt"];
6043--8724[label="0.00185529;1pkt 1fpkt"];
6043--8840[label="0.00185529;1pkt 1fpkt"];
6043--9863[label="0.00185529;1pkt 1fpkt"];
6043--12215[label="1;1pkt 1fpkt"];
6043--12585[label="1;1pkt 1fpkt"];
6043--12811[label="1;1pkt 1fpkt"];
6043--13280[label="0.00185529;1pkt 1fpkt"];
6043--14900[label="0.00185529;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.51.187.177" dst_port="13987"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
4094[label="167.209.169.40;d;71pkt 71fpkt", shape=diamond, color=yellow];
4095[label="206.75.14.25;s;71pkt 71fpkt", shape=diamond, color=yellow];
7407[label="167.209.169.40;d;71pkt 71fpkt", shape=hexagon, color=black];
9383[label="206.75.14.25;71pkt 71fpkt", shape=pentagon, color=darkviolet];
13059[label="206.75.14.25;71pkt 71fpkt", shape=invtriangle, color=brown];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.75.14.25:80, 167.209.169.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59838: (0.704225%)&lt;BR/&gt; 59837: (0.704225%)&lt;BR/&gt; 59835: (0.704225%)&lt;BR/&gt; 59834: (0.704225%)&gt;];
}
4094--4095[label="1;71pkt 71fpkt"];
4094--7407[label="1;71pkt 71fpkt"];
4094--8633[label="0.028169;2pkt 2fpkt"];
4094--8753[label="0.028169;2pkt 2fpkt"];
4094--8869[label="0.028169;2pkt 2fpkt"];
4094--9383[label="1;71pkt 71fpkt"];
4094--13059[label="1;71pkt 71fpkt"];
4095--7407[label="1;71pkt 71fpkt"];
4095--8633[label="0.028169;2pkt 2fpkt"];
4095--8753[label="0.028169;2pkt 2fpkt"];
4095--8869[label="0.028169;2pkt 2fpkt"];
4095--9383[label="1;71pkt 71fpkt"];
4095--13059[label="1;71pkt 71fpkt"];
7407--8633[label="0.028169;2pkt 2fpkt"];
7407--8753[label="0.028169;2pkt 2fpkt"];
7407--8869[label="0.028169;2pkt 2fpkt"];
7407--9383[label="1;71pkt 71fpkt"];
7407--13059[label="1;71pkt 71fpkt"];
9383--13059[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.169.40" src_ip="206.75.14.25" src_port="80"/>
    </slice>
    <from sec="1207285610" usec="0"/>
    <to sec="1207285696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
4208[label="118.170.44.180;d;1pkt 1fpkt", shape=diamond, color=yellow];
4210[label="160.188.216.194;s;2pkt 2fpkt", shape=diamond, color=yellow];
12069[label="160.188.216.194;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14333[label="160.188.216.194;2pkt 2fpkt", shape=invtriangle, color=brown];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.188.216.194:1027, 22.166.207.42:161}[50%]&lt;BR/&gt;{160.188.216.194:1363, 118.170.44.180:443}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1363: (28.5714%)&lt;BR/&gt; 443: (28.5714%)&lt;BR/&gt; 1027: (21.4286%)&lt;BR/&gt; 161: (21.4286%)&gt;];
}
4208--4210[label="1;1pkt 1fpkt"];
4208--12069[label="1;1pkt 1fpkt"];
4208--14333[label="1;1pkt 1fpkt"];
4210--12069[label="1;2pkt 2fpkt"];
4210--14333[label="1;2pkt 2fpkt"];
12069--14333[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="118.170.44.180" dst_port="443" src_ip="160.188.216.194" src_port="1363"/>
      <filter dst_ip="22.166.207.42" dst_port="161" src_ip="160.188.216.194" src_port="1027"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="213.61.121.9"/>
      <from sec="1207285200" usec="0"/>
      <to sec="1207286028" usec="0"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
4523[label="167.209.12.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
4524[label="100.112.57.200;d;1pkt 1fpkt", shape=diamond, color=yellow];
7659[label="100.112.57.200;d;1pkt 1fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.12.144:80, 100.112.57.200:35988}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35988: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4523--4524[label="1;1pkt 1fpkt"];
4523--7659[label="1;1pkt 1fpkt"];
4524--7659[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="100.112.57.200" dst_port="35988" src_ip="167.209.12.144" src_port="80"/>
    </slice>
    <from sec="1207285762" usec="0"/>
    <to sec="1207285770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="14.118.3.48"/>
      <from sec="1207285775" usec="0"/>
      <to sec="1207285824" usec="0"/>
    </slice>
    <from sec="1207285775" usec="0"/>
    <to sec="1207285824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
4556[label="100.112.57.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
4557[label="149.82.68.212;s;5pkt 5fpkt", shape=diamond, color=yellow];
7668[label="149.82.68.212;s;5pkt 5fpkt", shape=hexagon, color=black];
12325[label="149.82.68.212;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14460[label="149.82.68.212;6pkt 6fpkt", shape=invtriangle, color=brown];
15417[label="149.82.68.212;6pkt 6fpkt", shape=invhouse, color=bisque];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.68.212:80, 74.117.50.102:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49658: (10.3448%)&lt;BR/&gt; 4609: (8.62069%)&lt;BR/&gt; 4608: (8.62069%)&lt;BR/&gt; 4607: (8.62069%)&gt;];
}
4556--4557[label="1;1pkt 1fpkt"];
4556--7668[label="1;1pkt 1fpkt"];
4556--12325[label="1;1pkt 1fpkt"];
4556--14460[label="1;1pkt 1fpkt"];
4556--15417[label="1;1pkt 1fpkt"];
4557--7668[label="1;5pkt 5fpkt"];
4557--12325[label="1;5pkt 5fpkt"];
4557--14460[label="1;5pkt 5fpkt"];
4557--15417[label="1;5pkt 5fpkt"];
7668--12325[label="1;5pkt 5fpkt"];
7668--14460[label="1;5pkt 5fpkt"];
7668--15417[label="1;5pkt 5fpkt"];
12325--14460[label="1;6pkt 6fpkt"];
12325--15417[label="1;6pkt 6fpkt"];
14460--15417[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="74.117.50.102" src_ip="149.82.68.212" src_port="80"/>
    </slice>
    <from sec="1207285805" usec="0"/>
    <to sec="1207285843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
2342[label="167.209.186.189;s;26pkt 26fpkt", shape=diamond, color=yellow];
3399[label="77.49.79.249;d;2pkt 2fpkt", shape=diamond, color=yellow];
7173[label="77.49.79.249;d;2pkt 2fpkt", shape=hexagon, color=black];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.186.189:43195, *:*}[88.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43195: (45%)&lt;BR/&gt; 5140: (5%)&lt;BR/&gt; 1282: (5%)&lt;BR/&gt; 443: (5%)&lt;BR/&gt; 55376: (1.66667%)&gt;];
}
2342--3399[label="1;2pkt 2fpkt"];
2342--7173[label="1;2pkt 2fpkt"];
2342--8575[label="0.0384615;1pkt 1fpkt"];
2342--8695[label="0.0384615;1pkt 1fpkt"];
3399--7173[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.186.189" src_port="43195"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
4278[label="167.209.176.65;d;16pkt 16fpkt", shape=diamond, color=yellow];
4646[label="14.175.217.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:123, 167.209.176.65:123}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (67.6471%)&lt;BR/&gt; 63921: (2.94118%)&lt;BR/&gt; 60561: (2.94118%)&lt;BR/&gt; 49375: (2.94118%)&lt;BR/&gt; 36413: (2.94118%)&gt;];
}
4278--4646[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.176.65" dst_port="123" src_port="123"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18202,1.95652,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
3851[label="179.101.226.121;s;184pkt 184fpkt", shape=diamond, color=yellow];
4852[label="114.70.151.55;d;1pkt 1fpkt", shape=diamond, color=yellow];
7916[label="179.101.226.121;s;184pkt 184fpkt", shape=hexagon, color=black];
13814[label="179.101.226.121;201pkt 201fpkt", shape=invtriangle, color=brown];
15146[label="179.101.226.121;201pkt 201fpkt", shape=invhouse, color=bisque];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.101.226.121:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16000: (5.70687%)&lt;BR/&gt; 52178: (4.79896%)&lt;BR/&gt; 15774: (4.28016%)&lt;BR/&gt; 29969: (3.89105%)&lt;BR/&gt; 54714: (3.76135%)&gt;];
}
3851--4852[label="1;1pkt 1fpkt"];
3851--7916[label="1;184pkt 184fpkt"];
3851--13814[label="1;184pkt 184fpkt"];
3851--15146[label="1;184pkt 184fpkt"];
4852--7916[label="1;1pkt 1fpkt"];
4852--13814[label="1;1pkt 1fpkt"];
4852--15146[label="1;1pkt 1fpkt"];
7916--13814[label="1;184pkt 184fpkt"];
7916--15146[label="1;184pkt 184fpkt"];
13814--15146[label="1;201pkt 201fpkt"];
</description>
    <slice>
      <filter src_ip="179.101.226.121"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="75.108.133.33"/>
      <from sec="1207285932" usec="0"/>
      <to sec="1207285933" usec="0"/>
    </slice>
    <from sec="1207285932" usec="0"/>
    <to sec="1207285933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
4938[label="14.18.194.92;d;292pkt 292fpkt", shape=diamond, color=yellow];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 14.18.194.92:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4938--5346[label="0.00342466;1pkt 1fpkt"];
4938--5453[label="0.00342466;1pkt 1fpkt"];
4938--6399[label="0.00763359;1pkt 1fpkt"];
4938--7190[label="0.00342466;1pkt 1fpkt"];
4938--8288[label="0.00342466;1pkt 1fpkt"];
4938--9296[label="0.00490196;1pkt 1fpkt"];
4938--9612[label="0.00454545;1pkt 1fpkt"];
4938--10080[label="0.00342466;1pkt 1fpkt"];
4938--12304[label="0.00342466;1pkt 1fpkt"];
4938--13014[label="0.00490196;1pkt 1fpkt"];
4938--14779[label="0.00492611;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="14.18.194.92"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
4953[label="185.129.75.203;s;230pkt 230fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.129.75.203:20003, *:*}[97.3913%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20003: (48.6957%)&lt;BR/&gt; 443: (0.652174%)&lt;BR/&gt; 80: (0.652174%)&lt;BR/&gt; 65327: (0.217391%)&lt;BR/&gt; 65319: (0.217391%)&gt;];
}
4953--8575[label="0.00434783;1pkt 1fpkt"];
4953--8590[label="0.00869565;2pkt 2fpkt"];
4953--8610[label="0.00434783;1pkt 1fpkt"];
4953--8611[label="0.00434783;1pkt 1fpkt"];
4953--8633[label="0.00869565;2pkt 2fpkt"];
4953--8695[label="0.00434783;1pkt 1fpkt"];
4953--8710[label="0.00869565;2pkt 2fpkt"];
4953--8730[label="0.00434783;1pkt 1fpkt"];
4953--8731[label="0.00434783;1pkt 1fpkt"];
4953--8753[label="0.00869565;2pkt 2fpkt"];
4953--8828[label="0.00869565;2pkt 2fpkt"];
4953--8846[label="0.00434783;1pkt 1fpkt"];
4953--8869[label="0.00869565;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="185.129.75.203" src_port="20003"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26886,1.93236,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_109{
style=filled;
color=gray75;
296[label="160.86.53.19s;19pkt 19fpkt", shape=rectangle, color=red];
738[label="160.86.53.19;s;164pkt 164fpkt", shape=diamond, color=yellow];
739[label="211.73.106.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
1843[label="149.82.1.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
4989[label="102.193.180.142;d;99pkt 99fpkt", shape=diamond, color=yellow];
5962[label="160.86.53.19;s;99pkt 99fpkt", shape=hexagon, color=black];
6797[label="149.82.1.21;s;1pkt 1fpkt", shape=hexagon, color=black];
7977[label="102.193.180.142;d;99pkt 99fpkt", shape=hexagon, color=black];
9285[label="160.86.53.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat109[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.53.19:*, 102.193.180.142:80}[60%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1753%)&lt;BR/&gt; 4888: (0.515464%)&lt;BR/&gt; 4887: (0.515464%)&lt;BR/&gt; 4881: (0.515464%)&lt;BR/&gt; 4880: (0.515464%)&gt;];
}
296--738[label="1;19pkt 19fpkt"];
296--4989[label="1;19pkt 19fpkt"];
296--5962[label="1;19pkt 19fpkt"];
296--7977[label="1;19pkt 19fpkt"];
738--739[label="0.5;1pkt 1fpkt"];
738--3048[label="0.107143;15pkt 15fpkt"];
738--4166[label="0.00609756;1pkt 1fpkt"];
738--4989[label="1;99pkt 99fpkt"];
738--5962[label="1;99pkt 99fpkt"];
738--6492[label="0.107143;9pkt 9fpkt"];
738--7977[label="1;99pkt 99fpkt"];
738--8612[label="0.0487805;8pkt 8fpkt"];
738--8688[label="0.0487805;8pkt 8fpkt"];
738--8732[label="0.0487805;8pkt 8fpkt"];
738--8807[label="0.0487805;8pkt 8fpkt"];
738--8847[label="0.0487805;8pkt 8fpkt"];
738--8923[label="0.0487805;8pkt 8fpkt"];
738--9285[label="1;1pkt 1fpkt"];
739--1843[label="1;1pkt 1fpkt"];
739--5962[label="0.5;1pkt 1fpkt"];
739--6797[label="1;1pkt 1fpkt"];
739--9285[label="1;1pkt 1fpkt"];
1843--6797[label="1;1pkt 1fpkt"];
4989--5962[label="0.616162;61pkt 61fpkt"];
4989--7977[label="1;99pkt 99fpkt"];
4989--8612[label="0.040404;4pkt 4fpkt"];
4989--8688[label="0.040404;4pkt 4fpkt"];
4989--8732[label="0.040404;4pkt 4fpkt"];
4989--8807[label="0.040404;4pkt 4fpkt"];
4989--8847[label="0.040404;4pkt 4fpkt"];
4989--8923[label="0.040404;4pkt 4fpkt"];
5962--6492[label="0.107143;9pkt 9fpkt"];
5962--7977[label="0.616162;61pkt 61fpkt"];
5962--8612[label="0.0808081;8pkt 8fpkt"];
5962--8688[label="0.010101;1pkt 1fpkt"];
5962--8732[label="0.0808081;8pkt 8fpkt"];
5962--8807[label="0.010101;1pkt 1fpkt"];
5962--8847[label="0.0808081;8pkt 8fpkt"];
5962--8923[label="0.010101;1pkt 1fpkt"];
5962--9285[label="1;1pkt 1fpkt"];
7977--8612[label="0.040404;4pkt 4fpkt"];
7977--8688[label="0.040404;4pkt 4fpkt"];
7977--8732[label="0.040404;4pkt 4fpkt"];
7977--8807[label="0.040404;4pkt 4fpkt"];
7977--8847[label="0.040404;4pkt 4fpkt"];
7977--8923[label="0.040404;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="102.193.180.142" dst_port="80" src_ip="160.86.53.19"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
3877[label="167.209.8.49;s;108pkt 108fpkt", shape=diamond, color=yellow];
5130[label="194.173.180.243;d;34pkt 34fpkt", shape=diamond, color=yellow];
7934[label="167.209.8.49;s;108pkt 108fpkt", shape=hexagon, color=black];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.8.49:*, 194.173.180.243:80}[31.4815%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4%)&lt;BR/&gt; 993: (1.6%)&lt;BR/&gt; 443: (1.2%)&lt;BR/&gt; 51335: (0.6%)&lt;BR/&gt; 51334: (0.6%)&gt;];
}
3877--3931[label="0.00925926;1pkt 1fpkt"];
3877--3943[label="0.0277778;3pkt 3fpkt"];
3877--4271[label="0.00925926;1pkt 1fpkt"];
3877--5130[label="1;34pkt 34fpkt"];
3877--5978[label="0.00925926;1pkt 1fpkt"];
3877--7521[label="0.00925926;1pkt 1fpkt"];
3877--7934[label="1;108pkt 108fpkt"];
3877--8516[label="0.00925926;1pkt 1fpkt"];
3877--8688[label="0.037037;4pkt 4fpkt"];
3877--8807[label="0.037037;4pkt 4fpkt"];
3877--8923[label="0.037037;4pkt 4fpkt"];
5130--7934[label="1;34pkt 34fpkt"];
7934--8516[label="0.00925926;1pkt 1fpkt"];
7934--8688[label="0.037037;4pkt 4fpkt"];
7934--8807[label="0.037037;4pkt 4fpkt"];
7934--8923[label="0.037037;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="194.173.180.243" dst_port="80" src_ip="167.209.8.49"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
2168[label="150.183.220.34;s;6pkt 6fpkt", shape=diamond, color=yellow];
5173[label="77.44.144.240;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.183.220.34:80, 77.44.144.240:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2625: (12.5%)&lt;BR/&gt; 2624: (12.5%)&lt;BR/&gt; 60814: (6.25%)&lt;BR/&gt; 46943: (6.25%)&gt;];
}
2168--5173[label="1;2pkt 2fpkt"];
2168--8633[label="0.166667;1pkt 1fpkt"];
2168--8753[label="0.166667;1pkt 1fpkt"];
2168--8869[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="77.44.144.240" src_ip="150.183.220.34" src_port="80"/>
    </slice>
    <from sec="1207285729" usec="0"/>
    <to sec="1207285959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.713247,2.08158,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.32.218.133"/>
      <from sec="1207285982" usec="0"/>
      <to sec="1207286003" usec="0"/>
    </slice>
    <from sec="1207285982" usec="0"/>
    <to sec="1207286003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
5251[label="160.130.110.26;d;2pkt 2fpkt", shape=diamond, color=yellow];
5252[label="212.122.130.254;s;2pkt 2fpkt", shape=diamond, color=yellow];
12824[label="212.122.130.254;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.122.130.254:80, 160.130.110.26:3413}[50%]&lt;BR/&gt;{212.122.130.254:80, 160.130.110.26:3414}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3414: (25%)&lt;BR/&gt; 3413: (25%)&gt;];
}
5251--5252[label="1;2pkt 2fpkt"];
5251--12824[label="1;2pkt 2fpkt"];
5252--12824[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.130.110.26" dst_port="3414" src_ip="212.122.130.254" src_port="80"/>
      <filter dst_ip="160.130.110.26" dst_port="3413" src_ip="212.122.130.254" src_port="80"/>
    </slice>
    <from sec="1207286005" usec="0"/>
    <to sec="1207286027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
825[label="149.82.92.80;d;23pkt 23fpkt", shape=diamond, color=yellow];
5256[label="213.128.12.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
11963[label="192.74.211.185;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12688[label="8.197.56.241;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.74.211.185:80, 149.82.92.80:*}[29.1667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3734: (3.125%)&lt;BR/&gt; 3733: (3.125%)&lt;BR/&gt; 3713: (3.125%)&lt;BR/&gt; 3707: (3.125%)&gt;];
}
825--5256[label="1;1pkt 1fpkt"];
825--11963[label="0.833333;5pkt 5fpkt"];
825--12688[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.92.80" src_ip="192.74.211.185" src_port="80"/>
    </slice>
    <from sec="1207285995" usec="0"/>
    <to sec="1207286052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.776896,2.08584,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1207285200" usec="0"/>
      <to sec="1207285668" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
1005[label="179.8.231.144;s;95pkt 95fpkt", shape=diamond, color=yellow];
5686[label="179.8.231.144;s;95pkt 95fpkt", shape=hexagon, color=black];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.8.231.144:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1005--5686[label="1;95pkt 95fpkt"];
1005--6700[label="0.0105263;1pkt 1fpkt"];
5686--6700[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="179.8.231.144"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1778[label="160.86.92.68;d;639pkt 639fpkt", shape=diamond, color=yellow];
5706[label="160.86.92.68;d;639pkt 639fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 160.86.92.68:0}[99.5305%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5305%)&lt;BR/&gt; 137: (0.312989%)&lt;BR/&gt; 38240: (0.0782473%)&lt;BR/&gt; 1027: (0.0782473%)&gt;];
}
1778--4167[label="0.00156495;1pkt 1fpkt"];
1778--5706[label="1;639pkt 639fpkt"];
1778--7432[label="0.00156495;1pkt 1fpkt"];
1778--8413[label="0.00156495;1pkt 1fpkt"];
1778--8636[label="0.00156495;1pkt 1fpkt"];
1778--8680[label="0.00156495;1pkt 1fpkt"];
1778--8756[label="0.00156495;1pkt 1fpkt"];
1778--8800[label="0.00156495;1pkt 1fpkt"];
1778--8872[label="0.00156495;1pkt 1fpkt"];
1778--8916[label="0.00156495;1pkt 1fpkt"];
1778--12263[label="0.00156495;1pkt 1fpkt"];
1778--14432[label="0.00156495;1pkt 1fpkt"];
1778--15405[label="0.00156495;1pkt 1fpkt"];
5706--7432[label="0.00156495;1pkt 1fpkt"];
5706--8413[label="0.00156495;1pkt 1fpkt"];
5706--8636[label="0.00156495;1pkt 1fpkt"];
5706--8680[label="0.00156495;1pkt 1fpkt"];
5706--8756[label="0.00156495;1pkt 1fpkt"];
5706--8800[label="0.00156495;1pkt 1fpkt"];
5706--8872[label="0.00156495;1pkt 1fpkt"];
5706--8916[label="0.00156495;1pkt 1fpkt"];
5706--12263[label="0.00156495;1pkt 1fpkt"];
5706--14432[label="0.00156495;1pkt 1fpkt"];
5706--15405[label="0.00156495;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.92.68"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0156,1.99101,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
479[label="212.205.227.193;s;2472pkt 2472fpkt", shape=diamond, color=yellow];
1079[label="15.134.24.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
1922[label="106.171.109.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
2352[label="20.203.132.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
5280[label="212.205.227.193;s;2472pkt 2472fpkt", shape=hexagon, color=black];
5708[label="15.134.24.103;d;1pkt 1fpkt", shape=hexagon, color=black];
14323[label="212.205.227.193;2625pkt 2625fpkt", shape=invtriangle, color=brown];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.227.193:31077, *:*}[72.0107%]&lt;BR/&gt;{212.205.227.193:3731, *:*}[26.6565%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31077: (35.9435%)&lt;BR/&gt; 3731: (13.4095%)&lt;BR/&gt; 6881: (0.594216%)&lt;BR/&gt; 16001: (0.574409%)&lt;BR/&gt; 1501: (0.184867%)&gt;];
}
479--819[label="0.00371747;1pkt 1fpkt"];
479--1079[label="1;1pkt 1fpkt"];
479--1922[label="1;1pkt 1fpkt"];
479--2352[label="1;1pkt 1fpkt"];
479--2541[label="0.002849;1pkt 1fpkt"];
479--3447[label="0.00740741;1pkt 1fpkt"];
479--5280[label="1;2472pkt 2472fpkt"];
479--5374[label="0.00371747;1pkt 1fpkt"];
479--5708[label="1;1pkt 1fpkt"];
479--6693[label="0.000404531;1pkt 1fpkt"];
479--6875[label="0.00358423;1pkt 1fpkt"];
479--8610[label="0.000404531;1pkt 1fpkt"];
479--8730[label="0.000404531;1pkt 1fpkt"];
479--8846[label="0.000404531;1pkt 1fpkt"];
479--14323[label="0.999595;2471pkt 2471fpkt"];
1079--5280[label="1;1pkt 1fpkt"];
1079--5708[label="1;1pkt 1fpkt"];
1079--14323[label="1;1pkt 1fpkt"];
1922--5280[label="1;1pkt 1fpkt"];
1922--14323[label="1;1pkt 1fpkt"];
2352--5280[label="1;1pkt 1fpkt"];
2352--14323[label="1;1pkt 1fpkt"];
5280--5374[label="0.00371747;1pkt 1fpkt"];
5280--5708[label="1;1pkt 1fpkt"];
5280--6693[label="0.000404531;1pkt 1fpkt"];
5280--6875[label="0.00358423;1pkt 1fpkt"];
5280--8610[label="0.000404531;1pkt 1fpkt"];
5280--8730[label="0.000404531;1pkt 1fpkt"];
5280--8846[label="0.000404531;1pkt 1fpkt"];
5280--14323[label="0.999595;2471pkt 2471fpkt"];
5708--14323[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.205.227.193" src_port="31077"/>
      <filter src_ip="212.205.227.193" src_port="3731"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0156,1.99101,020,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
1840[label="149.82.219.218;s;473pkt 473fpkt", shape=diamond, color=yellow];
5732[label="149.82.219.218;s;440pkt 440fpkt", shape=hexagon, color=black];
14509[label="149.82.219.218;473pkt 473fpkt", shape=invtriangle, color=brown];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.219.218:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1840--3885[label="0.005;1pkt 1fpkt"];
1840--5732[label="1;440pkt 440fpkt"];
1840--7515[label="0.00724638;1pkt 1fpkt"];
1840--14509[label="1;473pkt 473fpkt"];
5732--14509[label="1;440pkt 440fpkt"];
</description>
    <slice>
      <filter src_ip="149.82.219.218"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
1987[label="213.61.101.60;s;655pkt 655fpkt", shape=diamond, color=yellow];
5796[label="213.61.101.60;s;423pkt 423fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.101.60:0, *:0}[99.6947%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.6289%)&lt;BR/&gt; 6000: (0.0927644%)&lt;BR/&gt; 2785: (0.0927644%)&lt;BR/&gt; 1433: (0.0927644%)&lt;BR/&gt; 80: (0.0927644%)&gt;];
}
1987--2224[label="0.00309598;1pkt 1fpkt"];
1987--5796[label="1;423pkt 423fpkt"];
1987--8590[label="0.00152672;1pkt 1fpkt"];
1987--8710[label="0.00152672;1pkt 1fpkt"];
1987--8828[label="0.00152672;1pkt 1fpkt"];
5796--8590[label="0.00236407;1pkt 1fpkt"];
5796--8710[label="0.00236407;1pkt 1fpkt"];
5796--8828[label="0.00236407;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.61.101.60"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
955[label="192.25.96.12;d;5076pkt 5076fpkt", shape=diamond, color=yellow];
6010[label="192.25.96.12;d;4623pkt 4623fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 192.25.96.12:2726}[50.2758%]&lt;BR/&gt;{*:445, 192.25.96.12:*}[49.5666%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2726: (25.1572%)&lt;BR/&gt; 445: (24.7706%)&lt;BR/&gt; 0: (0.144345%)&lt;BR/&gt; 3743: (0.0824827%)&lt;BR/&gt; 3091: (0.0721724%)&gt;];
}
955--6010[label="1;4623pkt 4623fpkt"];
</description>
    <slice>
      <filter dst_ip="192.25.96.12" src_port="445"/>
      <filter dst_ip="192.25.96.12" dst_port="2726"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
1791[label="167.209.54.106;d;640pkt 640fpkt", shape=diamond, color=yellow];
6050[label="167.209.54.106;d;640pkt 640fpkt", shape=hexagon, color=black];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 167.209.54.106:0}[99.8438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8438%)&lt;BR/&gt; 2455: (0.078125%)&lt;BR/&gt; 139: (0.078125%)&gt;];
}
1791--2907[label="0.003125;2pkt 2fpkt"];
1791--6050[label="1;640pkt 640fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.54.106"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
1375[label="149.82.7.67;d;80pkt 80fpkt", shape=diamond, color=yellow];
6156[label="149.82.7.67;d;80pkt 80fpkt", shape=hexagon, color=black];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.82.7.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4629: (0.625%)&lt;BR/&gt; 4628: (0.625%)&lt;BR/&gt; 4627: (0.625%)&lt;BR/&gt; 4626: (0.625%)&gt;];
}
1375--6156[label="1;80pkt 80fpkt"];
1375--8590[label="0.0125;1pkt 1fpkt"];
1375--8710[label="0.0125;1pkt 1fpkt"];
1375--8828[label="0.0125;1pkt 1fpkt"];
6156--8590[label="0.0125;1pkt 1fpkt"];
6156--8710[label="0.0125;1pkt 1fpkt"];
6156--8828[label="0.0125;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.7.67" src_port="80"/>
    </slice>
    <from sec="1207285211" usec="0"/>
    <to sec="1207285470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_141{
style=filled;
color=gray75;
743[label="216.227.155.100;s;265pkt 265fpkt", shape=diamond, color=yellow];
6358[label="216.227.155.100;s;248pkt 248fpkt", shape=hexagon, color=black];
10642[label="216.227.155.100;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13652[label="216.227.155.100;265pkt 265fpkt", shape=invtriangle, color=brown];
15075[label="216.227.155.100;265pkt 265fpkt", shape=invhouse, color=bisque];
stat141[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.227.155.100:6667, *:*}[40.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (20.7259%)&lt;BR/&gt; 6662: (4.25024%)&lt;BR/&gt; 6664: (3.82044%)&lt;BR/&gt; 6666: (3.4384%)&lt;BR/&gt; 6660: (3.24737%)&gt;];
}
743--6358[label="1;248pkt 248fpkt"];
743--10642[label="1;4pkt 4fpkt"];
743--13652[label="1;265pkt 265fpkt"];
743--15075[label="1;265pkt 265fpkt"];
6358--10642[label="1;4pkt 4fpkt"];
6358--13652[label="1;248pkt 248fpkt"];
6358--15075[label="1;248pkt 248fpkt"];
10642--13652[label="1;4pkt 4fpkt"];
10642--15075[label="1;4pkt 4fpkt"];
13652--15075[label="1;265pkt 265fpkt"];
</description>
    <slice>
      <filter src_ip="216.227.155.100" src_port="6667"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
1695[label="167.209.108.196;s;95pkt 95fpkt", shape=diamond, color=yellow];
6396[label="167.209.108.196;s;65pkt 65fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.108.196:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1695--6396[label="1;65pkt 65fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.108.196"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
2976[label="172.20.32.65;s;395pkt 395fpkt", shape=diamond, color=yellow];
6421[label="172.20.32.65;s;218pkt 218fpkt", shape=hexagon, color=black];
10002[label="172.20.32.65;414pkt 414fpkt", shape=pentagon, color=darkviolet];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.32.65:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (8.56865%)&lt;BR/&gt; 80: (8.56865%)&lt;BR/&gt; 54503: (0.438169%)&lt;BR/&gt; 57306: (0.292113%)&lt;BR/&gt; 37298: (0.292113%)&gt;];
}
2976--6421[label="1;218pkt 218fpkt"];
2976--8612[label="0.0177215;7pkt 7fpkt"];
2976--8688[label="0.0151899;6pkt 6fpkt"];
2976--8732[label="0.0177215;7pkt 7fpkt"];
2976--8807[label="0.0151899;6pkt 6fpkt"];
2976--8847[label="0.0177215;7pkt 7fpkt"];
2976--8923[label="0.0151899;6pkt 6fpkt"];
2976--10002[label="1;395pkt 395fpkt"];
6421--8612[label="0.0321101;7pkt 7fpkt"];
6421--8732[label="0.0321101;7pkt 7fpkt"];
6421--8847[label="0.0321101;7pkt 7fpkt"];
6421--10002[label="1;218pkt 218fpkt"];
</description>
    <slice>
      <filter src_ip="172.20.32.65"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
1829[label="179.8.24.56;s;100pkt 100fpkt", shape=diamond, color=yellow];
6448[label="179.8.24.56;s;100pkt 100fpkt", shape=hexagon, color=black];
9881[label="179.8.24.56;103pkt 103fpkt", shape=pentagon, color=darkviolet];
13291[label="179.8.24.56;103pkt 103fpkt", shape=invtriangle, color=brown];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.8.24.56:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1829--6448[label="1;100pkt 100fpkt"];
1829--9881[label="1;100pkt 100fpkt"];
1829--13291[label="1;100pkt 100fpkt"];
6448--9881[label="1;100pkt 100fpkt"];
6448--13291[label="1;100pkt 100fpkt"];
9881--13291[label="1;103pkt 103fpkt"];
</description>
    <slice>
      <filter src_ip="179.8.24.56"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
1176[label="167.209.124.184;d;9pkt 9fpkt", shape=diamond, color=yellow];
1374[label="201.152.60.80;s;2pkt 2fpkt", shape=diamond, color=yellow];
1467[label="103.162.132.118;s;23pkt 23fpkt", shape=diamond, color=yellow];
1468[label="167.209.122.129;d;41pkt 41fpkt", shape=diamond, color=yellow];
5535[label="201.152.60.80;s;2pkt 2fpkt", shape=hexagon, color=black];
5557[label="103.162.132.118;s;23pkt 23fpkt", shape=hexagon, color=black];
10945[label="103.162.132.118;22pkt 22fpkt", shape=pentagon, color=darkviolet];
12631[label="218.202.234.235;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{103.162.132.118:80, 167.209.122.129:*}[46%]&lt;BR/&gt;{204.157.216.25:80, 167.209.122.129:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43621: (1.5625%)&lt;BR/&gt; 43620: (1.5625%)&lt;BR/&gt; 43619: (1.5625%)&lt;BR/&gt; 43618: (1.5625%)&gt;];
}
1176--1374[label="1;2pkt 2fpkt"];
1176--5535[label="1;2pkt 2fpkt"];
1176--12631[label="1;6pkt 6fpkt"];
1374--5535[label="1;2pkt 2fpkt"];
1467--1468[label="1;23pkt 23fpkt"];
1467--5557[label="1;23pkt 23fpkt"];
1467--10945[label="1;22pkt 22fpkt"];
1468--3964[label="0.0243902;1pkt 1fpkt"];
1468--5557[label="1;23pkt 23fpkt"];
1468--6472[label="0.365854;15pkt 15fpkt"];
1468--7566[label="0.0243902;1pkt 1fpkt"];
1468--8487[label="0.0243902;1pkt 1fpkt"];
1468--8972[label="0.0769231;1pkt 1fpkt"];
1468--10945[label="1;22pkt 22fpkt"];
5557--10945[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.122.129" src_ip="103.162.132.118" src_port="80"/>
      <filter dst_ip="167.209.122.129" src_ip="204.157.216.25" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
3046[label="212.205.229.37;s;343pkt 343fpkt", shape=diamond, color=yellow];
6491[label="212.205.229.37;s;341pkt 341fpkt", shape=hexagon, color=black];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.229.37:*, *:53}[59.1837%]&lt;BR/&gt;{212.205.229.37:0, *:0}[40.2332%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40.3509%)&lt;BR/&gt; 53: (29.6053%)&lt;BR/&gt; 3029: (0.438596%)&lt;BR/&gt; 4121: (0.292398%)&lt;BR/&gt; 3766: (0.292398%)&gt;];
}
3046--6491[label="1;341pkt 341fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="212.205.229.37"/>
      <filter src_ip="212.205.229.37"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_148{
style=filled;
color=gray75;
3076[label="217.5.66.145;s;152pkt 152fpkt", shape=diamond, color=yellow];
3526[label="150.183.2.3;d;147pkt 147fpkt", shape=diamond, color=yellow];
6520[label="217.5.66.145;s;70pkt 70fpkt", shape=hexagon, color=black];
6884[label="150.183.2.3;d;83pkt 83fpkt", shape=hexagon, color=black];
11379[label="217.5.66.145;165pkt 165fpkt", shape=pentagon, color=darkviolet];
14004[label="217.5.66.145;165pkt 165fpkt", shape=invtriangle, color=brown];
stat148[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.5.66.145:6667, 150.183.2.3:*}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (49.5524%)&lt;BR/&gt; 113: (0.44757%)&lt;BR/&gt; 63352: (0.383632%)&lt;BR/&gt; 63151: (0.383632%)&lt;BR/&gt; 61433: (0.383632%)&gt;];
}
3076--3526[label="1;147pkt 147fpkt"];
3076--6520[label="1;70pkt 70fpkt"];
3076--6884[label="1;83pkt 83fpkt"];
3076--11379[label="1;152pkt 152fpkt"];
3076--14004[label="1;152pkt 152fpkt"];
3526--6520[label="0.957143;67pkt 67fpkt"];
3526--6884[label="1;83pkt 83fpkt"];
3526--11379[label="1;147pkt 147fpkt"];
3526--14004[label="1;147pkt 147fpkt"];
6520--6884[label="0.957143;67pkt 67fpkt"];
6520--11379[label="1;70pkt 70fpkt"];
6520--14004[label="1;70pkt 70fpkt"];
6884--11379[label="1;83pkt 83fpkt"];
6884--14004[label="1;83pkt 83fpkt"];
11379--14004[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_ip="150.183.2.3" src_ip="217.5.66.145" src_port="6667"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
2159[label="22.56.24.159;s;30pkt 30fpkt", shape=diamond, color=yellow];
3115[label="160.68.76.18;d;31pkt 31fpkt", shape=diamond, color=yellow];
6601[label="22.56.24.159;s;26pkt 26fpkt", shape=hexagon, color=black];
11554[label="22.56.24.159;30pkt 30fpkt", shape=pentagon, color=darkviolet];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.159.120.252:*, 160.68.76.18:443}[44.4444%]&lt;BR/&gt;{22.56.24.159:*, 160.68.76.176:80}[42.5926%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4872%)&lt;BR/&gt; 443: (20.5128%)&lt;BR/&gt; 59654: (1.7094%)&lt;BR/&gt; 58757: (1.7094%)&lt;BR/&gt; 12649: (1.7094%)&gt;];
}
2159--3115[label="0.233333;7pkt 7fpkt"];
2159--6601[label="1;26pkt 26fpkt"];
2159--11554[label="1;30pkt 30fpkt"];
3115--6601[label="0.115385;3pkt 3fpkt"];
3115--11554[label="0.233333;7pkt 7fpkt"];
6601--11554[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="160.68.76.176" dst_port="80" src_ip="22.56.24.159"/>
      <filter dst_ip="160.68.76.18" dst_port="443" src_ip="14.159.120.252"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207285706" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
3313[label="102.34.106.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
6681[label="102.34.106.21;s;1pkt 1fpkt", shape=hexagon, color=black];
9330[label="102.34.106.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13030[label="102.34.106.21;1pkt 1fpkt", shape=invtriangle, color=brown];
14787[label="102.34.106.21;1pkt 1fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.34.106.21:80, 167.209.145.21:1047}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1047: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3313--6681[label="1;1pkt 1fpkt"];
3313--9330[label="1;1pkt 1fpkt"];
3313--13030[label="1;1pkt 1fpkt"];
3313--14787[label="1;1pkt 1fpkt"];
6681--9330[label="1;1pkt 1fpkt"];
6681--13030[label="1;1pkt 1fpkt"];
6681--14787[label="1;1pkt 1fpkt"];
9330--13030[label="1;1pkt 1fpkt"];
9330--14787[label="1;1pkt 1fpkt"];
13030--14787[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.145.21" dst_port="1047" src_ip="102.34.106.21" src_port="80"/>
    </slice>
    <from sec="1207285531" usec="0"/>
    <to sec="1207285548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
524[label="117.202.254.193;d;8052pkt 8052fpkt", shape=diamond, color=yellow];
6700[label="117.202.254.193;d;8052pkt 8052fpkt", shape=hexagon, color=black];
9922[label="179.8.244.58;75pkt 75fpkt", shape=pentagon, color=darkviolet];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 117.202.254.193:0}[99.0893%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
524--1005[label="0.0105263;1pkt 1fpkt"];
524--5686[label="0.0105263;1pkt 1fpkt"];
524--6700[label="1;8052pkt 8052fpkt"];
524--9922[label="0.0133333;1pkt 1fpkt"];
6700--9922[label="0.0133333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="117.202.254.193"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
1099[label="112.231.98.94;s;2013pkt 2013fpkt", shape=diamond, color=yellow];
5450[label="112.231.98.94;s;2013pkt 2013fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.231.98.94:0, *:0}[99.8013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8013%)&lt;BR/&gt; 139: (0.0993542%)&lt;BR/&gt; 4645: (0.0248385%)&lt;BR/&gt; 2743: (0.0248385%)&lt;BR/&gt; 2530: (0.0248385%)&gt;];
}
1099--3359[label="0.00980392;2pkt 2fpkt"];
1099--5450[label="1;2013pkt 2013fpkt"];
1099--6715[label="0.0149254;2pkt 2fpkt"];
5450--6715[label="0.0149254;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="112.231.98.94"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
3365[label="160.86.96.157;s;389pkt 389fpkt", shape=diamond, color=yellow];
6719[label="160.86.96.157;s;280pkt 280fpkt", shape=hexagon, color=black];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.96.157:65013, *:*}[96.6581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65013: (48.6547%)&lt;BR/&gt; 443: (0.971599%)&lt;BR/&gt; 80: (0.44843%)&lt;BR/&gt; 52406: (0.298954%)&lt;BR/&gt; 46439: (0.298954%)&gt;];
}
3365--6719[label="1;280pkt 280fpkt"];
3365--8611[label="0.00257069;1pkt 1fpkt"];
3365--8731[label="0.00257069;1pkt 1fpkt"];
6719--8611[label="0.00357143;1pkt 1fpkt"];
6719--8731[label="0.00357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="160.86.96.157" src_port="65013"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_156{
style=filled;
color=gray75;
2973[label="160.86.96.202;s;196pkt 196fpkt", shape=diamond, color=yellow];
6769[label="160.86.96.202;s;116pkt 116fpkt", shape=hexagon, color=black];
stat156[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.96.202:*, 219.59.176.119:6667}[28.0612%]&lt;BR/&gt;{160.86.96.202:*, 96.102.153.19:*}[21.9388%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (45.8333%)&lt;BR/&gt; 113: (4.00641%)&lt;BR/&gt; 57216: (0.320513%)&lt;BR/&gt; 55232: (0.320513%)&lt;BR/&gt; 55231: (0.320513%)&gt;];
}
2973--4166[label="0.00510204;1pkt 1fpkt"];
2973--6769[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_ip="96.102.153.19" src_ip="160.86.96.202"/>
      <filter dst_ip="219.59.176.119" dst_port="6667" src_ip="160.86.96.202"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
3489[label="212.205.229.37;d;209pkt 209fpkt", shape=diamond, color=yellow];
6851[label="212.205.229.37;d;209pkt 209fpkt", shape=hexagon, color=black];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 212.205.229.37:*}[57.4163%]&lt;BR/&gt;{*:0, 212.205.229.37:0}[40.6699%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (40.6699%)&lt;BR/&gt; 53: (28.7081%)&lt;BR/&gt; 4964: (0.478469%)&lt;BR/&gt; 2731: (0.478469%)&lt;BR/&gt; 1325: (0.478469%)&gt;];
}
3489--5272[label="0.00478469;1pkt 1fpkt"];
3489--6723[label="0.00956938;2pkt 2fpkt"];
3489--6851[label="1;209pkt 209fpkt"];
3489--8573[label="0.00956938;2pkt 2fpkt"];
3489--8694[label="0.00956938;2pkt 2fpkt"];
3489--8813[label="0.00956938;2pkt 2fpkt"];
3489--15483[label="0.00478469;1pkt 1fpkt"];
6851--8573[label="0.00956938;2pkt 2fpkt"];
6851--8694[label="0.00956938;2pkt 2fpkt"];
6851--8813[label="0.00956938;2pkt 2fpkt"];
6851--15483[label="0.00478469;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.205.229.37" src_port="53"/>
      <filter dst_ip="212.205.229.37"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1278[label="179.8.200.225;s;301pkt 301fpkt", shape=diamond, color=yellow];
6873[label="179.8.200.225;s;168pkt 168fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.8.200.225:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1278--6873[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter src_ip="179.8.200.225"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
5234[label="101.134.72.168;d;3pkt 3fpkt", shape=diamond, color=yellow];
5237[label="167.209.84.215;s;20pkt 20fpkt", shape=diamond, color=yellow];
12364[label="167.209.84.215;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.84.215:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1217: (2.67857%)&lt;BR/&gt; 1215: (2.67857%)&lt;BR/&gt; 1207: (2.67857%)&lt;BR/&gt; 1271: (1.78571%)&gt;];
}
5234--5237[label="1;3pkt 3fpkt"];
5234--12364[label="1;3pkt 3fpkt"];
5237--12364[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="167.209.84.215"/>
    </slice>
    <from sec="1207285990" usec="0"/>
    <to sec="1207286054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
2012[label="101.207.71.107;d;34pkt 34fpkt", shape=diamond, color=yellow];
2606[label="160.67.161.67;s;26pkt 26fpkt", shape=diamond, color=yellow];
6914[label="101.207.71.107;d;19pkt 19fpkt", shape=hexagon, color=black];
10058[label="160.67.161.67;29pkt 29fpkt", shape=pentagon, color=darkviolet];
13382[label="160.67.161.67;29pkt 29fpkt", shape=invtriangle, color=brown];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.67.161.67:80, 101.207.71.107:*}[78.3784%]&lt;BR/&gt;{160.67.112.151:80, 101.207.71.107:*}[21.6216%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64932: (1.82482%)&lt;BR/&gt; 62099: (1.82482%)&lt;BR/&gt; 60467: (1.82482%)&lt;BR/&gt; 58242: (1.82482%)&gt;];
}
2012--2606[label="1;26pkt 26fpkt"];
2012--6914[label="1;19pkt 19fpkt"];
2012--8590[label="0.0882353;3pkt 3fpkt"];
2012--8610[label="0.0588235;2pkt 2fpkt"];
2012--8633[label="0.0882353;3pkt 3fpkt"];
2012--8710[label="0.0882353;3pkt 3fpkt"];
2012--8730[label="0.0588235;2pkt 2fpkt"];
2012--8753[label="0.0882353;3pkt 3fpkt"];
2012--8828[label="0.0882353;3pkt 3fpkt"];
2012--8846[label="0.0588235;2pkt 2fpkt"];
2012--8869[label="0.0882353;3pkt 3fpkt"];
2012--10058[label="0.896552;26pkt 26fpkt"];
2012--13382[label="0.896552;26pkt 26fpkt"];
2606--6914[label="0.736842;14pkt 14fpkt"];
2606--8590[label="0.0384615;1pkt 1fpkt"];
2606--8610[label="0.0769231;2pkt 2fpkt"];
2606--8633[label="0.115385;3pkt 3fpkt"];
2606--8710[label="0.0384615;1pkt 1fpkt"];
2606--8730[label="0.0769231;2pkt 2fpkt"];
2606--8753[label="0.115385;3pkt 3fpkt"];
2606--8828[label="0.0384615;1pkt 1fpkt"];
2606--8846[label="0.0769231;2pkt 2fpkt"];
2606--8869[label="0.115385;3pkt 3fpkt"];
2606--10058[label="1;26pkt 26fpkt"];
2606--13382[label="1;26pkt 26fpkt"];
6914--8590[label="0.157895;3pkt 3fpkt"];
6914--8610[label="0.105263;2pkt 2fpkt"];
6914--8710[label="0.157895;3pkt 3fpkt"];
6914--8730[label="0.105263;2pkt 2fpkt"];
6914--8828[label="0.157895;3pkt 3fpkt"];
6914--8846[label="0.105263;2pkt 2fpkt"];
6914--10058[label="0.736842;14pkt 14fpkt"];
6914--13382[label="0.736842;14pkt 14fpkt"];
10058--13382[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.71.107" src_ip="160.67.161.67" src_port="80"/>
      <filter dst_ip="101.207.71.107" src_ip="160.67.112.151" src_port="80"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
3216[label="213.201.143.227;s;255pkt 255fpkt", shape=diamond, color=yellow];
7006[label="213.201.143.227;s;255pkt 255fpkt", shape=hexagon, color=black];
12532[label="213.201.143.227;255pkt 255fpkt", shape=pentagon, color=darkviolet];
14564[label="213.201.143.227;255pkt 255fpkt", shape=invtriangle, color=brown];
15467[label="213.201.143.227;255pkt 255fpkt", shape=invhouse, color=bisque];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.201.143.227:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4760: (0.196078%)&lt;BR/&gt; 4756: (0.196078%)&lt;BR/&gt; 4755: (0.196078%)&lt;BR/&gt; 4754: (0.196078%)&gt;];
}
3216--7006[label="1;255pkt 255fpkt"];
3216--12532[label="1;255pkt 255fpkt"];
3216--14564[label="1;255pkt 255fpkt"];
3216--15467[label="1;255pkt 255fpkt"];
7006--12532[label="1;255pkt 255fpkt"];
7006--14564[label="1;255pkt 255fpkt"];
7006--15467[label="1;255pkt 255fpkt"];
12532--14564[label="1;255pkt 255fpkt"];
12532--15467[label="1;255pkt 255fpkt"];
14564--15467[label="1;255pkt 255fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="213.201.143.227"/>
    </slice>
    <from sec="1207285430" usec="0"/>
    <to sec="1207285493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
794[label="167.209.20.167;d;625pkt 625fpkt", shape=diamond, color=yellow];
829[label="167.209.153.216;d;1176pkt 1176fpkt", shape=diamond, color=yellow];
1102[label="206.110.77.157;s;211pkt 211fpkt", shape=diamond, color=yellow];
1174[label="167.209.178.177;d;64pkt 64fpkt", shape=diamond, color=yellow];
1316[label="167.209.84.181;d;79pkt 79fpkt", shape=diamond, color=yellow];
1471[label="167.209.124.87;d;122pkt 122fpkt", shape=diamond, color=yellow];
1472[label="206.90.68.202;s;14pkt 14fpkt", shape=diamond, color=yellow];
1491[label="206.1.184.179;s;4pkt 4fpkt", shape=diamond, color=yellow];
1550[label="101.134.72.138;s;45pkt 45fpkt", shape=diamond, color=yellow];
1579[label="167.209.196.247;d;359pkt 359fpkt", shape=diamond, color=yellow];
1580[label="205.12.216.14;s;22pkt 22fpkt", shape=diamond, color=yellow];
1961[label="167.209.27.23;d;34pkt 34fpkt", shape=diamond, color=yellow];
2144[label="205.12.216.194;s;31pkt 31fpkt", shape=diamond, color=yellow];
2469[label="204.157.244.211;s;61pkt 61fpkt", shape=diamond, color=yellow];
3276[label="104.87.145.230;s;3pkt 3fpkt", shape=diamond, color=yellow];
3317[label="15.150.169.14;s;1pkt 1fpkt", shape=diamond, color=yellow];
3723[label="206.110.77.3;s;4pkt 4fpkt", shape=diamond, color=yellow];
3934[label="167.209.30.131;d;159pkt 159fpkt", shape=diamond, color=yellow];
4736[label="101.134.72.176;s;34pkt 34fpkt", shape=diamond, color=yellow];
4764[label="167.209.180.182;d;50pkt 50fpkt", shape=diamond, color=yellow];
4820[label="206.69.197.234;s;10pkt 10fpkt", shape=diamond, color=yellow];
4954[label="160.86.126.140;d;267pkt 267fpkt", shape=diamond, color=yellow];
5180[label="197.126.137.69;s;4pkt 4fpkt", shape=diamond, color=yellow];
5231[label="197.126.137.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
5235[label="101.134.72.168;s;3pkt 3fpkt", shape=diamond, color=yellow];
5236[label="167.209.84.215;d;21pkt 21fpkt", shape=diamond, color=yellow];
5241[label="75.108.145.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
5451[label="206.110.77.157;s;47pkt 47fpkt", shape=hexagon, color=black];
5520[label="167.209.84.181;d;79pkt 79fpkt", shape=hexagon, color=black];
5563[label="206.1.184.179;s;4pkt 4fpkt", shape=hexagon, color=black];
5595[label="205.12.216.14;s;22pkt 22fpkt", shape=hexagon, color=black];
5779[label="167.209.27.23;d;25pkt 25fpkt", shape=hexagon, color=black];
5846[label="206.90.68.202;s;8pkt 8fpkt", shape=hexagon, color=black];
5871[label="101.134.72.138;s;45pkt 45fpkt", shape=hexagon, color=black];
5973[label="167.209.20.167;d;302pkt 302fpkt", shape=hexagon, color=black];
5981[label="167.209.153.216;d;521pkt 521fpkt", shape=hexagon, color=black];
6683[label="15.150.169.14;s;1pkt 1fpkt", shape=hexagon, color=black];
7037[label="104.87.145.230;s;3pkt 3fpkt", shape=hexagon, color=black];
7101[label="167.209.196.247;d;262pkt 262fpkt", shape=hexagon, color=black];
7240[label="204.157.244.211;s;42pkt 42fpkt", shape=hexagon, color=black];
7852[label="206.69.197.234;s;9pkt 9fpkt", shape=hexagon, color=black];
7972[label="167.209.30.131;d;159pkt 159fpkt", shape=hexagon, color=black];
8043[label="101.134.72.176;s;34pkt 34fpkt", shape=hexagon, color=black];
8167[label="101.134.72.168;s;3pkt 3fpkt", shape=hexagon, color=black];
8990[label="206.110.77.3;13pkt 13fpkt", shape=pentagon, color=darkviolet];
9014[label="210.82.150.4;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9132[label="206.110.77.11;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9197[label="15.150.169.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9200[label="205.12.216.14;22pkt 22fpkt", shape=pentagon, color=darkviolet];
9207[label="103.173.26.15;50pkt 50fpkt", shape=pentagon, color=darkviolet];
9230[label="206.110.112.16;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9265[label="106.152.22.18;40pkt 40fpkt", shape=pentagon, color=darkviolet];
9688[label="15.150.169.42;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9913[label="206.110.109.58;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10858[label="204.157.212.112;35pkt 35fpkt", shape=pentagon, color=darkviolet];
11235[label="206.110.109.136;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11267[label="101.134.72.138;45pkt 45fpkt", shape=pentagon, color=darkviolet];
11374[label="205.12.216.144;22pkt 22fpkt", shape=pentagon, color=darkviolet];
11381[label="101.134.72.145;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11395[label="101.134.72.146;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11470[label="101.134.72.152;29pkt 29fpkt", shape=pentagon, color=darkviolet];
11535[label="206.110.77.157;219pkt 219fpkt", shape=pentagon, color=darkviolet];
11723[label="206.110.109.170;90pkt 90fpkt", shape=pentagon, color=darkviolet];
11756[label="75.108.145.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11811[label="101.134.72.176;34pkt 34fpkt", shape=pentagon, color=darkviolet];
11875[label="206.1.184.179;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11894[label="102.69.223.180;71pkt 71fpkt", shape=pentagon, color=darkviolet];
11975[label="102.69.223.186;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12319[label="204.157.244.211;65pkt 65fpkt", shape=pentagon, color=darkviolet];
12445[label="120.156.76.222;19pkt 19fpkt", shape=pentagon, color=darkviolet];
12595[label="101.134.72.233;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12680[label="197.126.137.240;30pkt 30fpkt", shape=pentagon, color=darkviolet];
12878[label="210.82.150.4;2pkt 2fpkt", shape=invtriangle, color=brown];
12973[label="103.173.26.15;49pkt 49fpkt", shape=invtriangle, color=brown];
13204[label="15.150.169.42;2pkt 2fpkt", shape=invtriangle, color=brown];
13309[label="206.110.109.58;22pkt 22fpkt", shape=invtriangle, color=brown];
13760[label="204.157.212.112;35pkt 35fpkt", shape=invtriangle, color=brown];
14172[label="206.110.109.170;90pkt 90fpkt", shape=invtriangle, color=brown];
14236[label="206.1.184.179;4pkt 4fpkt", shape=invtriangle, color=brown];
14245[label="102.69.223.180;71pkt 71fpkt", shape=invtriangle, color=brown];
14457[label="204.157.244.211;65pkt 65fpkt", shape=invtriangle, color=brown];
14634[label="197.126.137.240;30pkt 30fpkt", shape=invtriangle, color=brown];
14718[label="210.82.150.4;1pkt 1fpkt", shape=invhouse, color=bisque];
14914[label="206.110.109.58;22pkt 22fpkt", shape=invhouse, color=bisque];
15304[label="206.110.109.170;90pkt 90fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 167.209.153.216:*}[33.1758%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7907%)&lt;BR/&gt; 20129: (2.59679%)&lt;BR/&gt; 443: (1.33774%)&lt;BR/&gt; 53: (0.692477%)&lt;BR/&gt; 8080: (0.409191%)&gt;];
}
794--1044[label="0.0032;2pkt 2fpkt"];
794--1072[label="0.0064;4pkt 4fpkt"];
794--1091[label="0.0288;18pkt 18fpkt"];
794--1098[label="0.0121739;7pkt 7fpkt"];
794--1161[label="0.0032;2pkt 2fpkt"];
794--1173[label="0.00560224;2pkt 2fpkt"];
794--1179[label="0.0016;1pkt 1fpkt"];
794--1268[label="0.00628931;2pkt 2fpkt"];
794--1295[label="0.0126582;2pkt 2fpkt"];
794--1550[label="1;45pkt 45fpkt"];
794--1580[label="0.0909091;2pkt 2fpkt"];
794--1639[label="0.0016;1pkt 1fpkt"];
794--1645[label="0.020202;2pkt 2fpkt"];
794--1646[label="0.00240385;1pkt 1fpkt"];
794--1661[label="0.00374532;2pkt 2fpkt"];
794--1670[label="0.00595238;3pkt 3fpkt"];
794--1717[label="0.00930233;2pkt 2fpkt"];
794--1728[label="0.0016;1pkt 1fpkt"];
794--1857[label="0.00524476;3pkt 3fpkt"];
794--1869[label="0.00338409;2pkt 2fpkt"];
794--1912[label="0.00896861;2pkt 2fpkt"];
794--1913[label="0.145833;14pkt 14fpkt"];
794--1925[label="0.00909091;2pkt 2fpkt"];
794--1981[label="0.00263852;1pkt 1fpkt"];
794--2009[label="0.111111;4pkt 4fpkt"];
794--2032[label="0.0138889;3pkt 3fpkt"];
794--2102[label="0.142857;1pkt 1fpkt"];
794--2131[label="0.0666667;1pkt 1fpkt"];
794--2326[label="0.211268;15pkt 15fpkt"];
794--2361[label="0.0348837;12pkt 12fpkt"];
794--2469[label="0.131148;8pkt 8fpkt"];
794--2489[label="0.0042735;1pkt 1fpkt"];
794--2528[label="0.0272727;3pkt 3fpkt"];
794--2542[label="0.027907;6pkt 6fpkt"];
794--2546[label="0.00347222;1pkt 1fpkt"];
794--2569[label="0.00249377;1pkt 1fpkt"];
794--2577[label="0.00625;1pkt 1fpkt"];
794--2593[label="0.0295203;8pkt 8fpkt"];
794--2596[label="0.0097561;2pkt 2fpkt"];
794--2617[label="0.00675676;1pkt 1fpkt"];
794--2662[label="0.02;1pkt 1fpkt"];
794--2668[label="0.0223642;7pkt 7fpkt"];
794--2966[label="0.0147059;1pkt 1fpkt"];
794--2995[label="0.0405405;3pkt 3fpkt"];
794--3017[label="0.0606061;4pkt 4fpkt"];
794--3035[label="0.00862069;2pkt 2fpkt"];
794--3113[label="0.00704225;1pkt 1fpkt"];
794--3276[label="0.666667;2pkt 2fpkt"];
794--3401[label="0.00900901;1pkt 1fpkt"];
794--3433[label="0.00869565;1pkt 1fpkt"];
794--3468[label="0.0147059;1pkt 1fpkt"];
794--3548[label="0.0224719;2pkt 2fpkt"];
794--3604[label="0.103448;6pkt 6fpkt"];
794--3605[label="0.0163934;1pkt 1fpkt"];
794--3823[label="0.0338983;2pkt 2fpkt"];
794--3895[label="0.0576923;3pkt 3fpkt"];
794--3913[label="0.00934579;1pkt 1fpkt"];
794--3964[label="0.0147059;2pkt 2fpkt"];
794--3987[label="0.00925926;1pkt 1fpkt"];
794--4248[label="0.0078125;1pkt 1fpkt"];
794--4334[label="0.016129;2pkt 2fpkt"];
794--4344[label="0.042735;5pkt 5fpkt"];
794--4372[label="0.0789474;3pkt 3fpkt"];
794--4615[label="0.0365854;3pkt 3fpkt"];
794--4619[label="0.0285714;2pkt 2fpkt"];
794--4662[label="0.0344828;2pkt 2fpkt"];
794--4740[label="0.00917431;1pkt 1fpkt"];
794--4934[label="0.0566038;3pkt 3fpkt"];
794--4966[label="0.0210526;2pkt 2fpkt"];
794--4999[label="0.03125;1pkt 1fpkt"];
794--5013[label="0.0192308;1pkt 1fpkt"];
794--5095[label="0.125;2pkt 2fpkt"];
794--5281[label="0.00496689;3pkt 3fpkt"];
794--5334[label="0.0404858;10pkt 10fpkt"];
794--5591[label="0.0368;23pkt 23fpkt"];
794--5595[label="0.0909091;2pkt 2fpkt"];
794--5679[label="0.00930233;2pkt 2fpkt"];
794--5759[label="0.171875;11pkt 11fpkt"];
794--5792[label="0.00310559;1pkt 1fpkt"];
794--5871[label="1;45pkt 45fpkt"];
794--5973[label="1;302pkt 302fpkt"];
794--5975[label="0.0026455;1pkt 1fpkt"];
794--5986[label="0.211268;15pkt 15fpkt"];
794--6136[label="0.0049505;1pkt 1fpkt"];
794--6158[label="0.0142857;2pkt 2fpkt"];
794--6203[label="0.142857;1pkt 1fpkt"];
794--6356[label="0.0545455;3pkt 3fpkt"];
794--6362[label="0.00257732;1pkt 1fpkt"];
794--6404[label="0.040404;12pkt 12fpkt"];
794--6463[label="0.0032;2pkt 2fpkt"];
794--6464[label="0.0909091;4pkt 4fpkt"];
794--6472[label="0.0016;1pkt 1fpkt"];
794--6507[label="0.00696864;2pkt 2fpkt"];
794--6538[label="0.0322581;4pkt 4fpkt"];
794--6540[label="0.0097561;2pkt 2fpkt"];
794--6551[label="0.00675676;1pkt 1fpkt"];
794--6759[label="0.0147059;1pkt 1fpkt"];
794--6766[label="0.00900901;1pkt 1fpkt"];
794--6815[label="0.00487805;1pkt 1fpkt"];
794--6850[label="0.00507614;1pkt 1fpkt"];
794--6906[label="0.025;2pkt 2fpkt"];
794--6949[label="0.02;1pkt 1fpkt"];
794--6969[label="0.0666667;1pkt 1fpkt"];
794--7037[label="0.666667;2pkt 2fpkt"];
794--7133[label="0.0224719;2pkt 2fpkt"];
794--7240[label="0.142857;6pkt 6fpkt"];
794--7348[label="0.0204082;1pkt 1fpkt"];
794--7505[label="0.00869565;1pkt 1fpkt"];
794--7534[label="0.01;1pkt 1fpkt"];
794--7554[label="0.00347222;1pkt 1fpkt"];
794--7566[label="0.0165289;2pkt 2fpkt"];
794--7716[label="0.0428571;3pkt 3fpkt"];
794--7742[label="0.06;3pkt 3fpkt"];
794--7747[label="0.0147059;1pkt 1fpkt"];
794--7887[label="0.0338983;2pkt 2fpkt"];
794--7897[label="0.00374532;2pkt 2fpkt"];
794--7995[label="0.016129;2pkt 2fpkt"];
794--8008[label="0.00704225;1pkt 1fpkt"];
794--8025[label="0.0789474;3pkt 3fpkt"];
794--8040[label="0.103448;6pkt 6fpkt"];
794--8098[label="0.125;2pkt 2fpkt"];
794--8255[label="0.00930233;2pkt 2fpkt"];
794--8428[label="0.00869565;1pkt 1fpkt"];
794--8470[label="0.0404858;10pkt 10fpkt"];
794--8487[label="0.0165289;2pkt 2fpkt"];
794--8575[label="0.0016;1pkt 1fpkt"];
794--8590[label="0.0608;38pkt 38fpkt"];
794--8610[label="0.0768;48pkt 48fpkt"];
794--8611[label="0.0112;7pkt 7fpkt"];
794--8632[label="0.008;5pkt 5fpkt"];
794--8633[label="0.048;30pkt 30fpkt"];
794--8687[label="0.0016;1pkt 1fpkt"];
794--8695[label="0.0016;1pkt 1fpkt"];
794--8710[label="0.0608;38pkt 38fpkt"];
794--8730[label="0.0768;48pkt 48fpkt"];
794--8731[label="0.0112;7pkt 7fpkt"];
794--8752[label="0.008;5pkt 5fpkt"];
794--8753[label="0.048;30pkt 30fpkt"];
794--8806[label="0.0016;1pkt 1fpkt"];
794--8828[label="0.0608;38pkt 38fpkt"];
794--8846[label="0.0768;48pkt 48fpkt"];
794--8868[label="0.008;5pkt 5fpkt"];
794--8869[label="0.048;30pkt 30fpkt"];
794--8922[label="0.0016;1pkt 1fpkt"];
794--8983[label="0.010989;1pkt 1fpkt"];
794--9200[label="0.0909091;2pkt 2fpkt"];
794--9283[label="0.0121457;3pkt 3fpkt"];
794--9305[label="0.015873;1pkt 1fpkt"];
794--9481[label="0.00865801;2pkt 2fpkt"];
794--9513[label="0.2;15pkt 15fpkt"];
794--9529[label="0.0215054;2pkt 2fpkt"];
794--9824[label="0.00578035;1pkt 1fpkt"];
794--9838[label="0.0188679;1pkt 1fpkt"];
794--9861[label="0.0135135;1pkt 1fpkt"];
794--9997[label="0.263158;5pkt 5fpkt"];
794--10008[label="0.0114286;2pkt 2fpkt"];
794--10048[label="0.0526316;1pkt 1fpkt"];
794--10082[label="0.03125;2pkt 2fpkt"];
794--10151[label="0.0368;23pkt 23fpkt"];
794--10172[label="0.021021;7pkt 7fpkt"];
794--10204[label="0.0571429;2pkt 2fpkt"];
794--10243[label="0.010989;1pkt 1fpkt"];
794--10296[label="0.0714286;1pkt 1fpkt"];
794--10303[label="0.00584795;1pkt 1fpkt"];
794--10339[label="0.0322581;2pkt 2fpkt"];
794--10435[label="0.0357143;1pkt 1fpkt"];
794--10515[label="0.0526316;3pkt 3fpkt"];
794--10779[label="0.111111;1pkt 1fpkt"];
794--10858[label="0.885714;31pkt 31fpkt"];
794--10896[label="0.0166667;1pkt 1fpkt"];
794--10988[label="0.0138889;1pkt 1fpkt"];
794--11034[label="0.0357143;1pkt 1fpkt"];
794--11267[label="1;45pkt 45fpkt"];
794--11342[label="0.0344828;2pkt 2fpkt"];
794--11374[label="0.0454545;1pkt 1fpkt"];
794--11381[label="0.25;5pkt 5fpkt"];
794--11486[label="0.0232558;1pkt 1fpkt"];
794--11661[label="0.0526316;2pkt 2fpkt"];
794--11664[label="0.111111;9pkt 9fpkt"];
794--11679[label="0.00403226;1pkt 1fpkt"];
794--11723[label="0.0444444;4pkt 4fpkt"];
794--11761[label="0.0111111;1pkt 1fpkt"];
794--11805[label="0.0032;2pkt 2fpkt"];
794--11894[label="0.028169;2pkt 2fpkt"];
794--11908[label="0.0227273;1pkt 1fpkt"];
794--11975[label="0.15;3pkt 3fpkt"];
794--12245[label="0.00877193;1pkt 1fpkt"];
794--12269[label="0.025;1pkt 1fpkt"];
794--12271[label="0.0526316;1pkt 1fpkt"];
794--12305[label="0.0357143;1pkt 1fpkt"];
794--12319[label="0.123077;8pkt 8fpkt"];
794--12329[label="0.111111;4pkt 4fpkt"];
794--12342[label="0.00862069;1pkt 1fpkt"];
794--12445[label="0.684211;13pkt 13fpkt"];
794--12513[label="0.0194175;2pkt 2fpkt"];
794--12554[label="0.00588235;1pkt 1fpkt"];
794--12595[label="0.5;2pkt 2fpkt"];
794--12732[label="0.00862069;1pkt 1fpkt"];
794--12753[label="0.0555556;3pkt 3fpkt"];
794--12863[label="0.0111111;1pkt 1fpkt"];
794--12977[label="0.0264901;8pkt 8fpkt"];
794--13008[label="0.0120968;3pkt 3fpkt"];
794--13017[label="0.015873;1pkt 1fpkt"];
794--13278[label="0.0135135;1pkt 1fpkt"];
794--13349[label="0.263158;5pkt 5fpkt"];
794--13376[label="0.0555556;1pkt 1fpkt"];
794--13391[label="0.03125;2pkt 2fpkt"];
794--13431[label="0.021021;7pkt 7fpkt"];
794--13469[label="0.010989;1pkt 1fpkt"];
794--13499[label="0.00584795;1pkt 1fpkt"];
794--13515[label="0.0322581;2pkt 2fpkt"];
794--13598[label="0.0526316;3pkt 3fpkt"];
794--13721[label="0.111111;1pkt 1fpkt"];
794--13760[label="0.885714;31pkt 31fpkt"];
794--14050[label="0.0232558;1pkt 1fpkt"];
794--14151[label="0.00403226;1pkt 1fpkt"];
794--14172[label="0.0444444;4pkt 4fpkt"];
794--14210[label="0.0032;2pkt 2fpkt"];
794--14245[label="0.028169;2pkt 2fpkt"];
794--14422[label="0.00877193;1pkt 1fpkt"];
794--14457[label="0.123077;8pkt 8fpkt"];
794--14711[label="0.010989;1pkt 1fpkt"];
794--14768[label="0.0264026;8pkt 8fpkt"];
794--14980[label="0.010989;1pkt 1fpkt"];
794--15259[label="0.0232558;1pkt 1fpkt"];
794--15304[label="0.0444444;4pkt 4fpkt"];
794--15321[label="0.0032;2pkt 2fpkt"];
829--831[label="0.092033;67pkt 67fpkt"];
829--900[label="0.0427632;13pkt 13fpkt"];
829--958[label="0.0273973;2pkt 2fpkt"];
829--1072[label="0.0986094;78pkt 78fpkt"];
829--1091[label="0.0224852;19pkt 19fpkt"];
829--1098[label="0.0243478;14pkt 14fpkt"];
829--1102[label="0.161137;34pkt 34fpkt"];
829--1161[label="0.024218;24pkt 24fpkt"];
829--1170[label="0.00595238;3pkt 3fpkt"];
829--1173[label="0.0140056;5pkt 5fpkt"];
829--1179[label="0.0860349;69pkt 69fpkt"];
829--1205[label="0.0414508;32pkt 32fpkt"];
829--1227[label="0.00600601;2pkt 2fpkt"];
829--1245[label="0.00943396;1pkt 1fpkt"];
829--1261[label="0.0162162;3pkt 3fpkt"];
829--1268[label="0.00943396;3pkt 3fpkt"];
829--1295[label="0.0443038;7pkt 7fpkt"];
829--1301[label="0.0102041;5pkt 5fpkt"];
829--1320[label="0.00552486;1pkt 1fpkt"];
829--1332[label="0.0549451;5pkt 5fpkt"];
829--1501[label="0.0280374;3pkt 3fpkt"];
829--1596[label="0.0192308;2pkt 2fpkt"];
829--1670[label="0.015873;8pkt 8fpkt"];
829--1717[label="0.00465116;1pkt 1fpkt"];
829--1857[label="0.00699301;4pkt 4fpkt"];
829--1912[label="0.0358744;8pkt 8fpkt"];
829--1925[label="0.0363636;8pkt 8fpkt"];
829--1953[label="0.0207612;6pkt 6fpkt"];
829--1957[label="0.00701754;2pkt 2fpkt"];
829--1981[label="0.0527704;20pkt 20fpkt"];
829--2003[label="0.00621118;1pkt 1fpkt"];
829--2022[label="0.00343643;1pkt 1fpkt"];
829--2032[label="0.0231481;5pkt 5fpkt"];
829--2035[label="0.0307692;2pkt 2fpkt"];
829--2059[label="0.0124069;5pkt 5fpkt"];
829--2093[label="0.0175439;2pkt 2fpkt"];
829--2144[label="0.967742;30pkt 30fpkt"];
829--2281[label="0.0183824;5pkt 5fpkt"];
829--2290[label="0.0245902;6pkt 6fpkt"];
829--2324[label="0.00625;1pkt 1fpkt"];
829--2350[label="0.0075188;2pkt 2fpkt"];
829--2361[label="0.0203488;7pkt 7fpkt"];
829--2377[label="0.0833333;9pkt 9fpkt"];
829--2380[label="0.0869565;8pkt 8fpkt"];
829--2416[label="0.0243902;6pkt 6fpkt"];
829--2489[label="0.0128205;3pkt 3fpkt"];
829--2498[label="0.0104167;1pkt 1fpkt"];
829--2507[label="0.0188679;2pkt 2fpkt"];
829--2528[label="0.0181818;2pkt 2fpkt"];
829--2543[label="0.00301205;1pkt 1fpkt"];
829--2546[label="0.0138889;4pkt 4fpkt"];
829--2549[label="0.00917431;1pkt 1fpkt"];
829--2569[label="0.0074813;3pkt 3fpkt"];
829--2596[label="0.0097561;2pkt 2fpkt"];
829--2601[label="0.0223464;8pkt 8fpkt"];
829--2613[label="0.029703;3pkt 3fpkt"];
829--2619[label="0.00384615;1pkt 1fpkt"];
829--2664[label="0.00896861;2pkt 2fpkt"];
829--2666[label="0.0192308;3pkt 3fpkt"];
829--3035[label="0.0560345;13pkt 13fpkt"];
829--3037[label="0.00636943;1pkt 1fpkt"];
829--3042[label="0.0165746;3pkt 3fpkt"];
829--3113[label="0.00704225;1pkt 1fpkt"];
829--3144[label="0.0333333;6pkt 6fpkt"];
829--3176[label="0.0285714;5pkt 5fpkt"];
829--3385[label="0.016;2pkt 2fpkt"];
829--3443[label="0.121622;9pkt 9fpkt"];
829--3454[label="0.0384615;1pkt 1fpkt"];
829--3457[label="0.0143885;2pkt 2fpkt"];
829--3474[label="0.033557;5pkt 5fpkt"];
829--3551[label="0.012987;2pkt 2fpkt"];
829--3555[label="0.0165746;3pkt 3fpkt"];
829--3605[label="0.0163934;1pkt 1fpkt"];
829--3823[label="0.0508475;3pkt 3fpkt"];
829--3932[label="0.0134228;2pkt 2fpkt"];
829--3945[label="0.00471698;1pkt 1fpkt"];
829--3964[label="0.0441176;6pkt 6fpkt"];
829--3977[label="0.0684932;5pkt 5fpkt"];
829--4017[label="0.00645161;1pkt 1fpkt"];
829--4235[label="0.0263158;2pkt 2fpkt"];
829--4272[label="0.0508475;6pkt 6fpkt"];
829--4286[label="0.0301205;5pkt 5fpkt"];
829--4314[label="0.00793651;1pkt 1fpkt"];
829--4334[label="0.016129;2pkt 2fpkt"];
829--4344[label="0.119658;14pkt 14fpkt"];
829--4361[label="0.0263158;1pkt 1fpkt"];
829--4402[label="0.046729;5pkt 5fpkt"];
829--4615[label="0.0121951;1pkt 1fpkt"];
829--4626[label="0.03125;2pkt 2fpkt"];
829--4820[label="1;10pkt 10fpkt"];
829--5042[label="0.0265487;3pkt 3fpkt"];
829--5180[label="0.5;2pkt 2fpkt"];
829--5231[label="1;1pkt 1fpkt"];
829--5241[label="1;1pkt 1fpkt"];
829--5414[label="0.0526316;1pkt 1fpkt"];
829--5451[label="0.255319;12pkt 12fpkt"];
829--5502[label="0.0188679;3pkt 3fpkt"];
829--5591[label="0.0153509;14pkt 14fpkt"];
829--5606[label="0.0238095;2pkt 2fpkt"];
829--5619[label="0.238095;5pkt 5fpkt"];
829--5664[label="0.0427632;13pkt 13fpkt"];
829--5679[label="0.00465116;1pkt 1fpkt"];
829--5714[label="0.0238095;3pkt 3fpkt"];
829--5769[label="0.0357143;1pkt 1fpkt"];
829--5792[label="0.0621118;20pkt 20fpkt"];
829--5800[label="0.185185;5pkt 5fpkt"];
829--5823[label="0.0143678;5pkt 5fpkt"];
829--5979[label="0.0148368;5pkt 5fpkt"];
829--5981[label="1;521pkt 521fpkt"];
829--5982[label="0.058309;20pkt 20fpkt"];
829--6136[label="0.00990099;2pkt 2fpkt"];
829--6158[label="0.0142857;2pkt 2fpkt"];
829--6362[label="0.00773196;3pkt 3fpkt"];
829--6404[label="0.013468;4pkt 4fpkt"];
829--6463[label="0.024218;24pkt 24fpkt"];
829--6472[label="0.0865385;63pkt 63fpkt"];
829--6490[label="0.0070922;1pkt 1fpkt"];
829--6494[label="0.0104167;1pkt 1fpkt"];
829--6537[label="0.00621118;1pkt 1fpkt"];
829--6540[label="0.0097561;2pkt 2fpkt"];
829--6581[label="0.0217391;3pkt 3fpkt"];
829--6815[label="0.00487805;1pkt 1fpkt"];
829--6845[label="0.0165746;3pkt 3fpkt"];
829--6850[label="0.0101523;2pkt 2fpkt"];
829--6907[label="0.0266667;2pkt 2fpkt"];
829--6917[label="0.0165746;3pkt 3fpkt"];
829--6947[label="0.00877193;1pkt 1fpkt"];
829--7148[label="0.0116959;4pkt 4fpkt"];
829--7259[label="0.0261438;4pkt 4fpkt"];
829--7263[label="0.0190476;2pkt 2fpkt"];
829--7297[label="0.00763359;1pkt 1fpkt"];
829--7317[label="0.0285714;1pkt 1fpkt"];
829--7348[label="0.0204082;1pkt 1fpkt"];
829--7459[label="0.0144928;1pkt 1fpkt"];
829--7480[label="0.00913242;2pkt 2fpkt"];
829--7513[label="0.00657895;3pkt 3fpkt"];
829--7526[label="0.0291971;4pkt 4fpkt"];
829--7553[label="0.00909091;1pkt 1fpkt"];
829--7554[label="0.0138889;4pkt 4fpkt"];
829--7566[label="0.0413223;5pkt 5fpkt"];
829--7573[label="0.0306513;8pkt 8fpkt"];
829--7581[label="0.0263158;1pkt 1fpkt"];
829--7603[label="0.046729;5pkt 5fpkt"];
829--7695[label="0.016;2pkt 2fpkt"];
829--7718[label="0.0243902;6pkt 6fpkt"];
829--7725[label="0.0384615;1pkt 1fpkt"];
829--7768[label="0.00320513;1pkt 1fpkt"];
829--7769[label="0.00571429;1pkt 1fpkt"];
829--7852[label="1;9pkt 9fpkt"];
829--7875[label="0.0183824;5pkt 5fpkt"];
829--7887[label="0.0508475;3pkt 3fpkt"];
829--7922[label="0.0869565;8pkt 8fpkt"];
829--7948[label="0.00636943;1pkt 1fpkt"];
829--7995[label="0.016129;2pkt 2fpkt"];
829--8008[label="0.00704225;1pkt 1fpkt"];
829--8036[label="0.00645161;1pkt 1fpkt"];
829--8045[label="0.0280374;3pkt 3fpkt"];
829--8255[label="0.00465116;1pkt 1fpkt"];
829--8344[label="0.0165746;3pkt 3fpkt"];
829--8487[label="0.0413223;5pkt 5fpkt"];
829--8550[label="0.0165746;3pkt 3fpkt"];
829--8575[label="0.00589971;4pkt 4fpkt"];
829--8590[label="0.0510204;60pkt 60fpkt"];
829--8610[label="0.0382653;45pkt 45fpkt"];
829--8611[label="0.00263158;2pkt 2fpkt"];
829--8633[label="0.0816327;96pkt 96fpkt"];
829--8695[label="0.00589971;4pkt 4fpkt"];
829--8710[label="0.0510204;60pkt 60fpkt"];
829--8730[label="0.0382653;45pkt 45fpkt"];
829--8731[label="0.00263158;2pkt 2fpkt"];
829--8753[label="0.0816327;96pkt 96fpkt"];
829--8828[label="0.0510204;60pkt 60fpkt"];
829--8846[label="0.0382653;45pkt 45fpkt"];
829--8869[label="0.0816327;96pkt 96fpkt"];
829--9013[label="0.00512821;1pkt 1fpkt"];
829--9132[label="0.0666667;1pkt 1fpkt"];
829--9203[label="0.0588235;2pkt 2fpkt"];
829--9207[label="0.32;16pkt 16fpkt"];
829--9265[label="0.3;12pkt 12fpkt"];
829--9283[label="0.0202429;5pkt 5fpkt"];
829--9291[label="0.0227273;1pkt 1fpkt"];
829--9338[label="0.0175439;2pkt 2fpkt"];
829--9356[label="0.0357143;1pkt 1fpkt"];
829--9358[label="0.5;1pkt 1fpkt"];
829--9389[label="0.0294118;1pkt 1fpkt"];
829--9431[label="0.0172414;2pkt 2fpkt"];
829--9447[label="0.0102041;1pkt 1fpkt"];
829--9481[label="0.00865801;2pkt 2fpkt"];
829--9566[label="0.0277778;1pkt 1fpkt"];
829--9861[label="0.0135135;1pkt 1fpkt"];
829--9913[label="0.409091;9pkt 9fpkt"];
829--9972[label="0.105263;2pkt 2fpkt"];
829--10008[label="0.04;7pkt 7fpkt"];
829--10091[label="0.0116279;1pkt 1fpkt"];
829--10151[label="0.0248566;26pkt 26fpkt"];
829--10339[label="0.0483871;3pkt 3fpkt"];
829--10557[label="0.0162602;2pkt 2fpkt"];
829--10678[label="0.0265487;3pkt 3fpkt"];
829--10785[label="0.0153846;1pkt 1fpkt"];
829--10803[label="0.0119048;1pkt 1fpkt"];
829--10861[label="0.00444444;1pkt 1fpkt"];
829--10932[label="0.00892857;1pkt 1fpkt"];
829--10988[label="0.0138889;1pkt 1fpkt"];
829--11164[label="0.155844;12pkt 12fpkt"];
829--11227[label="0.03125;5pkt 5fpkt"];
829--11370[label="0.1;1pkt 1fpkt"];
829--11396[label="0.2;16pkt 16fpkt"];
829--11535[label="0.155251;34pkt 34fpkt"];
829--11661[label="0.0263158;1pkt 1fpkt"];
829--11662[label="0.0118343;2pkt 2fpkt"];
829--11679[label="0.0120968;3pkt 3fpkt"];
829--11717[label="0.2;2pkt 2fpkt"];
829--11723[label="0.1;9pkt 9fpkt"];
829--11726[label="0.166667;2pkt 2fpkt"];
829--11743[label="0.117647;2pkt 2fpkt"];
829--11756[label="1;1pkt 1fpkt"];
829--11761[label="0.0111111;1pkt 1fpkt"];
829--11769[label="0.00285714;1pkt 1fpkt"];
829--11894[label="0.0704225;5pkt 5fpkt"];
829--11941[label="0.0166667;1pkt 1fpkt"];
829--11969[label="0.00588235;1pkt 1fpkt"];
829--11985[label="0.0333333;1pkt 1fpkt"];
829--11994[label="0.0526316;5pkt 5fpkt"];
829--12028[label="0.02;1pkt 1fpkt"];
829--12099[label="0.0263158;1pkt 1fpkt"];
829--12146[label="0.008;2pkt 2fpkt"];
829--12152[label="0.00588235;1pkt 1fpkt"];
829--12171[label="0.024;3pkt 3fpkt"];
829--12220[label="0.111111;1pkt 1fpkt"];
829--12477[label="0.0133333;1pkt 1fpkt"];
829--12543[label="0.00381679;1pkt 1fpkt"];
829--12553[label="0.010101;5pkt 5fpkt"];
829--12554[label="0.00588235;1pkt 1fpkt"];
829--12593[label="0.05;1pkt 1fpkt"];
829--12607[label="0.0294118;1pkt 1fpkt"];
829--12677[label="0.0289855;2pkt 2fpkt"];
829--12680[label="0.866667;26pkt 26fpkt"];
829--12777[label="0.0235294;6pkt 6fpkt"];
829--12827[label="0.166667;3pkt 3fpkt"];
829--12877[label="0.00510204;1pkt 1fpkt"];
829--12954[label="0.0223881;6pkt 6fpkt"];
829--12970[label="0.0606061;2pkt 2fpkt"];
829--12973[label="0.326531;16pkt 16fpkt"];
829--13008[label="0.0201613;5pkt 5fpkt"];
829--13033[label="0.0175439;2pkt 2fpkt"];
829--13045[label="0.0357143;1pkt 1fpkt"];
829--13092[label="0.0102041;1pkt 1fpkt"];
829--13147[label="0.0277778;1pkt 1fpkt"];
829--13194[label="0.0384615;1pkt 1fpkt"];
829--13278[label="0.0135135;1pkt 1fpkt"];
829--13309[label="0.409091;9pkt 9fpkt"];
829--13335[label="0.105263;2pkt 2fpkt"];
829--13397[label="0.0116279;1pkt 1fpkt"];
829--13515[label="0.0483871;3pkt 3fpkt"];
829--13595[label="0.0416667;5pkt 5fpkt"];
829--13669[label="0.0265487;3pkt 3fpkt"];
829--13733[label="0.0119048;1pkt 1fpkt"];
829--13789[label="0.00892857;1pkt 1fpkt"];
829--13894[label="0.155844;12pkt 12fpkt"];
829--13926[label="0.03125;5pkt 5fpkt"];
829--14013[label="0.2;16pkt 16fpkt"];
829--14145[label="0.0118343;2pkt 2fpkt"];
829--14151[label="0.0120968;3pkt 3fpkt"];
829--14172[label="0.1;9pkt 9fpkt"];
829--14193[label="0.00285714;1pkt 1fpkt"];
829--14245[label="0.0704225;5pkt 5fpkt"];
829--14290[label="0.0333333;1pkt 1fpkt"];
829--14308[label="0.02;1pkt 1fpkt"];
829--14367[label="0.008;2pkt 2fpkt"];
829--14381[label="0.0241935;3pkt 3fpkt"];
829--14632[label="0.0289855;2pkt 2fpkt"];
829--14634[label="0.866667;26pkt 26fpkt"];
829--14789[label="0.0176991;2pkt 2fpkt"];
829--14815[label="0.0103093;1pkt 1fpkt"];
829--14861[label="0.0384615;1pkt 1fpkt"];
829--14914[label="0.409091;9pkt 9fpkt"];
829--15082[label="0.0265487;3pkt 3fpkt"];
829--15304[label="0.1;9pkt 9fpkt"];
829--15387[label="0.0241935;3pkt 3fpkt"];
1102--1174[label="0.5;32pkt 32fpkt"];
1102--1282[label="0.0805687;17pkt 17fpkt"];
1102--1311[label="0.00473934;1pkt 1fpkt"];
1102--1322[label="0.251185;53pkt 53fpkt"];
1102--1999[label="0.132701;28pkt 28fpkt"];
1102--5451[label="1;47pkt 47fpkt"];
1102--5521[label="0.227488;48pkt 48fpkt"];
1102--5981[label="0.0663507;14pkt 14fpkt"];
1102--6143[label="0.132701;28pkt 28fpkt"];
1102--8590[label="0.00947867;2pkt 2fpkt"];
1102--8610[label="0.0616114;13pkt 13fpkt"];
1102--8710[label="0.00947867;2pkt 2fpkt"];
1102--8730[label="0.0616114;13pkt 13fpkt"];
1102--8828[label="0.00947867;2pkt 2fpkt"];
1102--8846[label="0.0616114;13pkt 13fpkt"];
1102--11535[label="1;211pkt 211fpkt"];
1174--1661[label="0.03125;2pkt 2fpkt"];
1174--3035[label="0.140625;9pkt 9fpkt"];
1174--3397[label="0.0333333;2pkt 2fpkt"];
1174--3977[label="0.03125;2pkt 2fpkt"];
1174--4992[label="0.0952381;6pkt 6fpkt"];
1174--7897[label="0.03125;2pkt 2fpkt"];
1174--9356[label="0.0714286;2pkt 2fpkt"];
1174--11396[label="0.03125;2pkt 2fpkt"];
1174--11535[label="0.5;32pkt 32fpkt"];
1174--13045[label="0.0714286;2pkt 2fpkt"];
1174--14013[label="0.03125;2pkt 2fpkt"];
1316--1580[label="0.181818;4pkt 4fpkt"];
1316--1888[label="0.0253165;2pkt 2fpkt"];
1316--2845[label="0.0307692;2pkt 2fpkt"];
1316--3543[label="0.0126582;1pkt 1fpkt"];
1316--3582[label="0.0379747;3pkt 3fpkt"];
1316--3918[label="0.0128205;1pkt 1fpkt"];
1316--4272[label="0.0253165;2pkt 2fpkt"];
1316--4286[label="0.0126582;1pkt 1fpkt"];
1316--4334[label="0.0126582;1pkt 1fpkt"];
1316--4344[label="0.0253165;2pkt 2fpkt"];
1316--4596[label="0.0869565;2pkt 2fpkt"];
1316--4631[label="0.0253165;2pkt 2fpkt"];
1316--4699[label="0.0253165;2pkt 2fpkt"];
1316--5520[label="1;79pkt 79fpkt"];
1316--5595[label="0.181818;4pkt 4fpkt"];
1316--6472[label="0.0126582;1pkt 1fpkt"];
1316--6640[label="0.0307692;2pkt 2fpkt"];
1316--7265[label="0.0204082;1pkt 1fpkt"];
1316--7784[label="0.0126582;1pkt 1fpkt"];
1316--7941[label="0.0253165;2pkt 2fpkt"];
1316--7995[label="0.0126582;1pkt 1fpkt"];
1316--9200[label="0.181818;4pkt 4fpkt"];
1316--9497[label="0.0126582;1pkt 1fpkt"];
1316--11381[label="0.3;6pkt 6fpkt"];
1316--11395[label="0.25;1pkt 1fpkt"];
1316--11470[label="0.0344828;1pkt 1fpkt"];
1316--11661[label="0.0263158;1pkt 1fpkt"];
1316--11761[label="0.0379747;3pkt 3fpkt"];
1316--11894[label="0.028169;2pkt 2fpkt"];
1316--11975[label="0.4;8pkt 8fpkt"];
1316--12477[label="0.0266667;2pkt 2fpkt"];
1316--13119[label="0.0126582;1pkt 1fpkt"];
1316--14245[label="0.028169;2pkt 2fpkt"];
1471--1472[label="1;14pkt 14fpkt"];
1471--3035[label="0.00819672;1pkt 1fpkt"];
1471--5609[label="0.0245902;3pkt 3fpkt"];
1471--5846[label="1;8pkt 8fpkt"];
1471--7496[label="0.00819672;1pkt 1fpkt"];
1471--8590[label="0.0245902;3pkt 3fpkt"];
1471--8610[label="0.0491803;6pkt 6fpkt"];
1471--8633[label="0.204918;25pkt 25fpkt"];
1471--8710[label="0.0245902;3pkt 3fpkt"];
1471--8730[label="0.0491803;6pkt 6fpkt"];
1471--8753[label="0.204918;25pkt 25fpkt"];
1471--8828[label="0.0245902;3pkt 3fpkt"];
1471--8846[label="0.0491803;6pkt 6fpkt"];
1471--8869[label="0.204918;25pkt 25fpkt"];
1471--9913[label="0.454545;10pkt 10fpkt"];
1471--11939[label="0.0245902;3pkt 3fpkt"];
1471--13309[label="0.454545;10pkt 10fpkt"];
1471--14914[label="0.454545;10pkt 10fpkt"];
1472--5846[label="1;8pkt 8fpkt"];
1472--8590[label="0.142857;2pkt 2fpkt"];
1472--8610[label="0.285714;4pkt 4fpkt"];
1472--8710[label="0.142857;2pkt 2fpkt"];
1472--8730[label="0.285714;4pkt 4fpkt"];
1472--8828[label="0.142857;2pkt 2fpkt"];
1472--8846[label="0.285714;4pkt 4fpkt"];
1491--1579[label="1;4pkt 4fpkt"];
1491--5563[label="1;4pkt 4fpkt"];
1491--7101[label="1;4pkt 4fpkt"];
1491--11875[label="1;4pkt 4fpkt"];
1491--14236[label="1;4pkt 4fpkt"];
1550--5871[label="1;45pkt 45fpkt"];
1550--5973[label="1;45pkt 45fpkt"];
1550--8590[label="0.0444444;2pkt 2fpkt"];
1550--8710[label="0.0444444;2pkt 2fpkt"];
1550--8828[label="0.0444444;2pkt 2fpkt"];
1550--11267[label="1;45pkt 45fpkt"];
1579--1580[label="0.454545;10pkt 10fpkt"];
1579--1771[label="0.0139276;5pkt 5fpkt"];
1579--1857[label="0.00278552;1pkt 1fpkt"];
1579--2001[label="0.210526;4pkt 4fpkt"];
1579--2032[label="0.00462963;1pkt 1fpkt"];
1579--2569[label="0.00557103;2pkt 2fpkt"];
1579--2709[label="0.037037;2pkt 2fpkt"];
1579--2907[label="0.00278552;1pkt 1fpkt"];
1579--3035[label="0.0344828;8pkt 8fpkt"];
1579--3113[label="0.0140845;2pkt 2fpkt"];
1579--3317[label="1;1pkt 1fpkt"];
1579--3723[label="0.5;2pkt 2fpkt"];
1579--3921[label="0.0958904;7pkt 7fpkt"];
1579--4013[label="0.0454545;2pkt 2fpkt"];
1579--4340[label="0.0277778;2pkt 2fpkt"];
1579--4344[label="0.128205;15pkt 15fpkt"];
1579--4631[label="0.0416667;4pkt 4fpkt"];
1579--4699[label="0.428571;42pkt 42fpkt"];
1579--4736[label="0.0588235;2pkt 2fpkt"];
1579--5563[label="1;4pkt 4fpkt"];
1579--5595[label="0.454545;10pkt 10fpkt"];
1579--6136[label="0.00990099;2pkt 2fpkt"];
1579--6158[label="0.00714286;1pkt 1fpkt"];
1579--6683[label="1;1pkt 1fpkt"];
1579--6971[label="0.037037;2pkt 2fpkt"];
1579--7101[label="1;262pkt 262fpkt"];
1579--7266[label="0.0327869;2pkt 2fpkt"];
1579--7305[label="0.210526;4pkt 4fpkt"];
1579--7331[label="0.0454545;2pkt 2fpkt"];
1579--7919[label="0.0139276;5pkt 5fpkt"];
1579--7941[label="0.0416667;4pkt 4fpkt"];
1579--8008[label="0.0140845;2pkt 2fpkt"];
1579--8043[label="0.0588235;2pkt 2fpkt"];
1579--8590[label="0.091922;33pkt 33fpkt"];
1579--8610[label="0.0501393;18pkt 18fpkt"];
1579--8633[label="0.00278552;1pkt 1fpkt"];
1579--8710[label="0.091922;33pkt 33fpkt"];
1579--8730[label="0.0501393;18pkt 18fpkt"];
1579--8753[label="0.00278552;1pkt 1fpkt"];
1579--8828[label="0.091922;33pkt 33fpkt"];
1579--8846[label="0.0501393;18pkt 18fpkt"];
1579--8869[label="0.00278552;1pkt 1fpkt"];
1579--8990[label="0.307692;4pkt 4fpkt"];
1579--9116[label="0.0886076;7pkt 7fpkt"];
1579--9132[label="0.133333;2pkt 2fpkt"];
1579--9197[label="1;1pkt 1fpkt"];
1579--9200[label="0.454545;10pkt 10fpkt"];
1579--9230[label="1;18pkt 18fpkt"];
1579--9283[label="0.00404858;1pkt 1fpkt"];
1579--9356[label="0.0714286;2pkt 2fpkt"];
1579--9688[label="1;2pkt 2fpkt"];
1579--9694[label="0.0357143;2pkt 2fpkt"];
1579--10013[label="0.142857;1pkt 1fpkt"];
1579--10347[label="0.4;2pkt 2fpkt"];
1579--10601[label="0.105263;2pkt 2fpkt"];
1579--11080[label="0.0697674;3pkt 3fpkt"];
1579--11235[label="1;4pkt 4fpkt"];
1579--11374[label="0.227273;5pkt 5fpkt"];
1579--11470[label="0.310345;9pkt 9fpkt"];
1579--11661[label="0.0526316;2pkt 2fpkt"];
1579--11722[label="0.142857;1pkt 1fpkt"];
1579--11723[label="0.766667;69pkt 69fpkt"];
1579--11761[label="0.0222222;2pkt 2fpkt"];
1579--11811[label="0.0588235;2pkt 2fpkt"];
1579--11875[label="1;4pkt 4fpkt"];
1579--11894[label="0.140845;10pkt 10fpkt"];
1579--11932[label="0.020202;2pkt 2fpkt"];
1579--11975[label="0.15;3pkt 3fpkt"];
1579--12352[label="0.1;1pkt 1fpkt"];
1579--12554[label="0.0117647;2pkt 2fpkt"];
1579--12558[label="0.0909091;2pkt 2fpkt"];
1579--13008[label="0.00403226;1pkt 1fpkt"];
1579--13045[label="0.0714286;2pkt 2fpkt"];
1579--13204[label="1;2pkt 2fpkt"];
1579--13355[label="0.142857;1pkt 1fpkt"];
1579--13519[label="0.4;2pkt 2fpkt"];
1579--14172[label="0.766667;69pkt 69fpkt"];
1579--14236[label="1;4pkt 4fpkt"];
1579--14245[label="0.140845;10pkt 10fpkt"];
1579--14264[label="0.020202;2pkt 2fpkt"];
1579--15304[label="0.766667;69pkt 69fpkt"];
1580--2007[label="0.0909091;2pkt 2fpkt"];
1580--5520[label="0.181818;4pkt 4fpkt"];
1580--5595[label="1;22pkt 22fpkt"];
1580--7101[label="0.454545;10pkt 10fpkt"];
1580--8590[label="0.0909091;2pkt 2fpkt"];
1580--8610[label="0.136364;3pkt 3fpkt"];
1580--8633[label="0.227273;5pkt 5fpkt"];
1580--8710[label="0.0909091;2pkt 2fpkt"];
1580--8730[label="0.136364;3pkt 3fpkt"];
1580--8753[label="0.227273;5pkt 5fpkt"];
1580--8828[label="0.0909091;2pkt 2fpkt"];
1580--8846[label="0.136364;3pkt 3fpkt"];
1580--8869[label="0.227273;5pkt 5fpkt"];
1580--9200[label="1;22pkt 22fpkt"];
1961--2326[label="0.0882353;3pkt 3fpkt"];
1961--2469[label="0.205882;7pkt 7fpkt"];
1961--2542[label="0.0588235;2pkt 2fpkt"];
1961--4361[label="0.0294118;1pkt 1fpkt"];
1961--4386[label="0.0588235;2pkt 2fpkt"];
1961--5334[label="0.117647;4pkt 4fpkt"];
1961--5779[label="1;25pkt 25fpkt"];
1961--5986[label="0.0882353;3pkt 3fpkt"];
1961--7240[label="0.205882;7pkt 7fpkt"];
1961--7581[label="0.0294118;1pkt 1fpkt"];
1961--8470[label="0.117647;4pkt 4fpkt"];
1961--8590[label="0.0294118;1pkt 1fpkt"];
1961--8610[label="0.352941;12pkt 12fpkt"];
1961--8710[label="0.0294118;1pkt 1fpkt"];
1961--8730[label="0.352941;12pkt 12fpkt"];
1961--8828[label="0.0294118;1pkt 1fpkt"];
1961--8846[label="0.352941;12pkt 12fpkt"];
1961--9513[label="0.0882353;3pkt 3fpkt"];
1961--10720[label="0.0588235;2pkt 2fpkt"];
1961--12099[label="0.0294118;1pkt 1fpkt"];
1961--12319[label="0.205882;7pkt 7fpkt"];
1961--13685[label="0.0588235;2pkt 2fpkt"];
1961--14457[label="0.205882;7pkt 7fpkt"];
2144--5824[label="0.0322581;1pkt 1fpkt"];
2144--5981[label="0.967742;30pkt 30fpkt"];
2144--8590[label="0.258065;8pkt 8fpkt"];
2144--8610[label="0.0322581;1pkt 1fpkt"];
2144--8710[label="0.258065;8pkt 8fpkt"];
2144--8730[label="0.0322581;1pkt 1fpkt"];
2144--8828[label="0.258065;8pkt 8fpkt"];
2144--8846[label="0.0322581;1pkt 1fpkt"];
2469--2584[label="0.0327869;2pkt 2fpkt"];
2469--2591[label="0.0655738;4pkt 4fpkt"];
2469--2660[label="0.0491803;3pkt 3fpkt"];
2469--3376[label="0.0163934;1pkt 1fpkt"];
2469--3440[label="0.0327869;2pkt 2fpkt"];
2469--3934[label="0.0983607;6pkt 6fpkt"];
2469--5279[label="0.0655738;4pkt 4fpkt"];
2469--5779[label="0.28;7pkt 7fpkt"];
2469--5973[label="0.0655738;4pkt 4fpkt"];
2469--6146[label="0.0655738;4pkt 4fpkt"];
2469--6186[label="0.0491803;3pkt 3fpkt"];
2469--6802[label="0.0327869;2pkt 2fpkt"];
2469--7240[label="1;42pkt 42fpkt"];
2469--7874[label="0.0655738;4pkt 4fpkt"];
2469--7972[label="0.0983607;6pkt 6fpkt"];
2469--8464[label="0.0655738;4pkt 4fpkt"];
2469--8590[label="0.0163934;1pkt 1fpkt"];
2469--8610[label="0.114754;7pkt 7fpkt"];
2469--8633[label="0.0819672;5pkt 5fpkt"];
2469--8710[label="0.0163934;1pkt 1fpkt"];
2469--8730[label="0.114754;7pkt 7fpkt"];
2469--8753[label="0.0819672;5pkt 5fpkt"];
2469--8828[label="0.0163934;1pkt 1fpkt"];
2469--8846[label="0.114754;7pkt 7fpkt"];
2469--8869[label="0.0819672;5pkt 5fpkt"];
2469--12319[label="0.983607;60pkt 60fpkt"];
2469--14457[label="0.983607;60pkt 60fpkt"];
3276--6034[label="0.333333;1pkt 1fpkt"];
3276--7037[label="1;3pkt 3fpkt"];
3317--6683[label="1;1pkt 1fpkt"];
3317--7101[label="1;1pkt 1fpkt"];
3317--9197[label="1;1pkt 1fpkt"];
3723--7101[label="0.5;2pkt 2fpkt"];
3723--8633[label="0.25;1pkt 1fpkt"];
3723--8753[label="0.25;1pkt 1fpkt"];
3723--8869[label="0.25;1pkt 1fpkt"];
3723--8990[label="1;4pkt 4fpkt"];
3934--3964[label="0.0147059;2pkt 2fpkt"];
3934--4328[label="0.0111111;1pkt 1fpkt"];
3934--4999[label="0.03125;1pkt 1fpkt"];
3934--5759[label="0.09375;6pkt 6fpkt"];
3934--6362[label="0.0251572;4pkt 4fpkt"];
3934--6463[label="0.176101;28pkt 28fpkt"];
3934--6472[label="0.00628931;1pkt 1fpkt"];
3934--6494[label="0.0104167;1pkt 1fpkt"];
3934--6538[label="0.00806452;1pkt 1fpkt"];
3934--6540[label="0.00628931;1pkt 1fpkt"];
3934--6546[label="0.04;1pkt 1fpkt"];
3934--6815[label="0.00628931;1pkt 1fpkt"];
3934--7240[label="0.0952381;4pkt 4fpkt"];
3934--7513[label="0.0188679;3pkt 3fpkt"];
3934--7566[label="0.0165289;2pkt 2fpkt"];
3934--7716[label="0.0142857;1pkt 1fpkt"];
3934--7972[label="1;159pkt 159fpkt"];
3934--8487[label="0.0165289;2pkt 2fpkt"];
3934--8590[label="0.0880503;14pkt 14fpkt"];
3934--8610[label="0.0377358;6pkt 6fpkt"];
3934--8633[label="0.213836;34pkt 34fpkt"];
3934--8710[label="0.0880503;14pkt 14fpkt"];
3934--8730[label="0.0377358;6pkt 6fpkt"];
3934--8753[label="0.213836;34pkt 34fpkt"];
3934--8828[label="0.0880503;14pkt 14fpkt"];
3934--8846[label="0.0377358;6pkt 6fpkt"];
3934--8869[label="0.213836;34pkt 34fpkt"];
3934--9014[label="1;1pkt 1fpkt"];
3934--9447[label="0.0102041;1pkt 1fpkt"];
3934--9481[label="0.00628931;1pkt 1fpkt"];
3934--9979[label="0.00628931;1pkt 1fpkt"];
3934--10100[label="0.625;5pkt 5fpkt"];
3934--10900[label="0.00628931;1pkt 1fpkt"];
3934--11284[label="0.00628931;1pkt 1fpkt"];
3934--12269[label="0.025;1pkt 1fpkt"];
3934--12319[label="0.0923077;6pkt 6fpkt"];
3934--12543[label="0.0628931;10pkt 10fpkt"];
3934--12775[label="0.010101;1pkt 1fpkt"];
3934--12878[label="1;2pkt 2fpkt"];
3934--12977[label="0.00628931;1pkt 1fpkt"];
3934--13092[label="0.0102041;1pkt 1fpkt"];
3934--14457[label="0.0923077;6pkt 6fpkt"];
3934--14672[label="0.010101;1pkt 1fpkt"];
3934--14718[label="1;1pkt 1fpkt"];
3934--14768[label="0.00628931;1pkt 1fpkt"];
3934--14815[label="0.0103093;1pkt 1fpkt"];
3934--14930[label="0.00628931;1pkt 1fpkt"];
3934--15124[label="0.00628931;1pkt 1fpkt"];
3934--15525[label="0.010101;1pkt 1fpkt"];
4736--4764[label="0.5;17pkt 17fpkt"];
4736--6161[label="0.176471;6pkt 6fpkt"];
4736--7101[label="0.0588235;2pkt 2fpkt"];
4736--8043[label="1;34pkt 34fpkt"];
4736--8590[label="0.117647;4pkt 4fpkt"];
4736--8710[label="0.117647;4pkt 4fpkt"];
4736--8828[label="0.117647;4pkt 4fpkt"];
4736--11811[label="1;34pkt 34fpkt"];
4764--6157[label="0.0487805;2pkt 2fpkt"];
4764--6540[label="0.06;3pkt 3fpkt"];
4764--7477[label="0.1;5pkt 5fpkt"];
4764--8043[label="0.5;17pkt 17fpkt"];
4764--9095[label="0.1;5pkt 5fpkt"];
4764--9283[label="0.06;3pkt 3fpkt"];
4764--9481[label="0.06;3pkt 3fpkt"];
4764--11761[label="0.1;5pkt 5fpkt"];
4764--11811[label="0.5;17pkt 17fpkt"];
4764--12220[label="0.111111;1pkt 1fpkt"];
4764--13008[label="0.06;3pkt 3fpkt"];
4820--7852[label="1;9pkt 9fpkt"];
4954--5180[label="0.5;2pkt 2fpkt"];
4954--5591[label="0.0374532;10pkt 10fpkt"];
4954--5714[label="0.00793651;1pkt 1fpkt"];
4954--7148[label="0.00374532;1pkt 1fpkt"];
4954--7432[label="0.00749064;2pkt 2fpkt"];
4954--8413[label="0.00749064;2pkt 2fpkt"];
4954--8590[label="0.00749064;2pkt 2fpkt"];
4954--8610[label="0.0374532;10pkt 10fpkt"];
4954--8611[label="0.00374532;1pkt 1fpkt"];
4954--8643[label="0.00749064;2pkt 2fpkt"];
4954--8679[label="0.00374532;1pkt 1fpkt"];
4954--8680[label="0.00374532;1pkt 1fpkt"];
4954--8710[label="0.00749064;2pkt 2fpkt"];
4954--8730[label="0.0374532;10pkt 10fpkt"];
4954--8731[label="0.00374532;1pkt 1fpkt"];
4954--8763[label="0.00749064;2pkt 2fpkt"];
4954--8799[label="0.00374532;1pkt 1fpkt"];
4954--8800[label="0.00374532;1pkt 1fpkt"];
4954--8828[label="0.00749064;2pkt 2fpkt"];
4954--8846[label="0.0374532;10pkt 10fpkt"];
4954--8879[label="0.00749064;2pkt 2fpkt"];
4954--8915[label="0.00374532;1pkt 1fpkt"];
4954--8916[label="0.00374532;1pkt 1fpkt"];
4954--9275[label="0.0625;3pkt 3fpkt"];
4954--10151[label="0.0561798;15pkt 15fpkt"];
4954--10300[label="0.0526316;3pkt 3fpkt"];
4954--12263[label="0.00749064;2pkt 2fpkt"];
4954--12680[label="0.133333;4pkt 4fpkt"];
4954--13497[label="0.0526316;3pkt 3fpkt"];
4954--14432[label="0.00749064;2pkt 2fpkt"];
4954--14634[label="0.133333;4pkt 4fpkt"];
4954--15405[label="0.00749064;2pkt 2fpkt"];
5235--5236[label="1;3pkt 3fpkt"];
5235--8167[label="1;3pkt 3fpkt"];
5236--8167[label="1;3pkt 3fpkt"];
5236--11470[label="0.047619;1pkt 1fpkt"];
5236--11661[label="0.0952381;2pkt 2fpkt"];
5236--11679[label="0.047619;1pkt 1fpkt"];
5236--11761[label="0.142857;3pkt 3fpkt"];
5236--11894[label="0.0952381;2pkt 2fpkt"];
5236--14151[label="0.047619;1pkt 1fpkt"];
5236--14245[label="0.0952381;2pkt 2fpkt"];
5241--11756[label="1;1pkt 1fpkt"];
5451--5981[label="0.255319;12pkt 12fpkt"];
5451--11535[label="1;47pkt 47fpkt"];
5520--5595[label="0.181818;4pkt 4fpkt"];
5520--6472[label="0.0126582;1pkt 1fpkt"];
5520--6640[label="0.0307692;2pkt 2fpkt"];
5520--7265[label="0.0204082;1pkt 1fpkt"];
5520--7784[label="0.0126582;1pkt 1fpkt"];
5520--7941[label="0.0253165;2pkt 2fpkt"];
5520--7995[label="0.0126582;1pkt 1fpkt"];
5520--9200[label="0.181818;4pkt 4fpkt"];
5520--9497[label="0.0126582;1pkt 1fpkt"];
5520--11381[label="0.3;6pkt 6fpkt"];
5520--11395[label="0.25;1pkt 1fpkt"];
5520--11470[label="0.0344828;1pkt 1fpkt"];
5520--11661[label="0.0263158;1pkt 1fpkt"];
5520--11761[label="0.0379747;3pkt 3fpkt"];
5520--11894[label="0.028169;2pkt 2fpkt"];
5520--11975[label="0.4;8pkt 8fpkt"];
5520--12477[label="0.0266667;2pkt 2fpkt"];
5520--13119[label="0.0126582;1pkt 1fpkt"];
5520--14245[label="0.028169;2pkt 2fpkt"];
5563--7101[label="1;4pkt 4fpkt"];
5563--11875[label="1;4pkt 4fpkt"];
5563--14236[label="1;4pkt 4fpkt"];
5595--7101[label="0.454545;10pkt 10fpkt"];
5595--8590[label="0.0909091;2pkt 2fpkt"];
5595--8610[label="0.136364;3pkt 3fpkt"];
5595--8633[label="0.227273;5pkt 5fpkt"];
5595--8710[label="0.0909091;2pkt 2fpkt"];
5595--8730[label="0.136364;3pkt 3fpkt"];
5595--8753[label="0.227273;5pkt 5fpkt"];
5595--8828[label="0.0909091;2pkt 2fpkt"];
5595--8846[label="0.136364;3pkt 3fpkt"];
5595--8869[label="0.227273;5pkt 5fpkt"];
5595--9200[label="1;22pkt 22fpkt"];
5779--5986[label="0.04;1pkt 1fpkt"];
5779--7240[label="0.28;7pkt 7fpkt"];
5779--7581[label="0.04;1pkt 1fpkt"];
5779--8590[label="0.04;1pkt 1fpkt"];
5779--8610[label="0.2;5pkt 5fpkt"];
5779--8710[label="0.04;1pkt 1fpkt"];
5779--8730[label="0.2;5pkt 5fpkt"];
5779--8828[label="0.04;1pkt 1fpkt"];
5779--8846[label="0.2;5pkt 5fpkt"];
5779--9513[label="0.04;1pkt 1fpkt"];
5779--10720[label="0.08;2pkt 2fpkt"];
5779--12099[label="0.04;1pkt 1fpkt"];
5779--12319[label="0.28;7pkt 7fpkt"];
5779--13685[label="0.08;2pkt 2fpkt"];
5779--14457[label="0.28;7pkt 7fpkt"];
5846--8590[label="0.25;2pkt 2fpkt"];
5846--8710[label="0.25;2pkt 2fpkt"];
5846--8828[label="0.25;2pkt 2fpkt"];
5871--5973[label="1;45pkt 45fpkt"];
5871--8590[label="0.0444444;2pkt 2fpkt"];
5871--8710[label="0.0444444;2pkt 2fpkt"];
5871--8828[label="0.0444444;2pkt 2fpkt"];
5871--11267[label="1;45pkt 45fpkt"];
5973--5986[label="0.140845;10pkt 10fpkt"];
5973--6136[label="0.0049505;1pkt 1fpkt"];
5973--6158[label="0.0142857;2pkt 2fpkt"];
5973--6203[label="0.142857;1pkt 1fpkt"];
5973--6356[label="0.0545455;3pkt 3fpkt"];
5973--6404[label="0.013468;4pkt 4fpkt"];
5973--6463[label="0.00331126;1pkt 1fpkt"];
5973--6464[label="0.0909091;4pkt 4fpkt"];
5973--6507[label="0.00696864;2pkt 2fpkt"];
5973--6538[label="0.0322581;4pkt 4fpkt"];
5973--6540[label="0.0097561;2pkt 2fpkt"];
5973--6759[label="0.0147059;1pkt 1fpkt"];
5973--6766[label="0.00900901;1pkt 1fpkt"];
5973--6815[label="0.00487805;1pkt 1fpkt"];
5973--7133[label="0.0224719;2pkt 2fpkt"];
5973--7240[label="0.0952381;4pkt 4fpkt"];
5973--7505[label="0.00869565;1pkt 1fpkt"];
5973--7534[label="0.01;1pkt 1fpkt"];
5973--7554[label="0.00347222;1pkt 1fpkt"];
5973--7566[label="0.0165289;2pkt 2fpkt"];
5973--7716[label="0.0142857;1pkt 1fpkt"];
5973--7747[label="0.0147059;1pkt 1fpkt"];
5973--7995[label="0.00806452;1pkt 1fpkt"];
5973--8025[label="0.0263158;1pkt 1fpkt"];
5973--8040[label="0.0344828;2pkt 2fpkt"];
5973--8428[label="0.00869565;1pkt 1fpkt"];
5973--8470[label="0.0283401;7pkt 7fpkt"];
5973--8487[label="0.0165289;2pkt 2fpkt"];
5973--8575[label="0.00331126;1pkt 1fpkt"];
5973--8590[label="0.125828;38pkt 38fpkt"];
5973--8610[label="0.15894;48pkt 48fpkt"];
5973--8611[label="0.0231788;7pkt 7fpkt"];
5973--8633[label="0.00331126;1pkt 1fpkt"];
5973--8695[label="0.00331126;1pkt 1fpkt"];
5973--8710[label="0.125828;38pkt 38fpkt"];
5973--8730[label="0.15894;48pkt 48fpkt"];
5973--8731[label="0.0231788;7pkt 7fpkt"];
5973--8753[label="0.00331126;1pkt 1fpkt"];
5973--8828[label="0.125828;38pkt 38fpkt"];
5973--8846[label="0.15894;48pkt 48fpkt"];
5973--8869[label="0.00331126;1pkt 1fpkt"];
5973--8983[label="0.010989;1pkt 1fpkt"];
5973--9283[label="0.00809717;2pkt 2fpkt"];
5973--9305[label="0.015873;1pkt 1fpkt"];
5973--9481[label="0.00865801;2pkt 2fpkt"];
5973--9513[label="0.133333;10pkt 10fpkt"];
5973--9997[label="0.157895;3pkt 3fpkt"];
5973--10082[label="0.015625;1pkt 1fpkt"];
5973--10435[label="0.0357143;1pkt 1fpkt"];
5973--10515[label="0.0526316;3pkt 3fpkt"];
5973--10858[label="0.771429;27pkt 27fpkt"];
5973--11267[label="1;45pkt 45fpkt"];
5973--11342[label="0.0344828;2pkt 2fpkt"];
5973--11374[label="0.0454545;1pkt 1fpkt"];
5973--11486[label="0.0232558;1pkt 1fpkt"];
5973--11661[label="0.0263158;1pkt 1fpkt"];
5973--11664[label="0.037037;3pkt 3fpkt"];
5973--11723[label="0.0444444;4pkt 4fpkt"];
5973--11761[label="0.0111111;1pkt 1fpkt"];
5973--11894[label="0.028169;2pkt 2fpkt"];
5973--12245[label="0.00877193;1pkt 1fpkt"];
5973--12269[label="0.025;1pkt 1fpkt"];
5973--12305[label="0.0357143;1pkt 1fpkt"];
5973--12319[label="0.0615385;4pkt 4fpkt"];
5973--12329[label="0.111111;4pkt 4fpkt"];
5973--12342[label="0.00862069;1pkt 1fpkt"];
5973--12445[label="0.421053;8pkt 8fpkt"];
5973--12513[label="0.0194175;2pkt 2fpkt"];
5973--12732[label="0.00862069;1pkt 1fpkt"];
5973--12753[label="0.0185185;1pkt 1fpkt"];
5973--12863[label="0.0111111;1pkt 1fpkt"];
5973--12977[label="0.013245;4pkt 4fpkt"];
5973--13008[label="0.00806452;2pkt 2fpkt"];
5973--13017[label="0.015873;1pkt 1fpkt"];
5973--13349[label="0.157895;3pkt 3fpkt"];
5973--13391[label="0.015625;1pkt 1fpkt"];
5973--13598[label="0.0526316;3pkt 3fpkt"];
5973--13760[label="0.771429;27pkt 27fpkt"];
5973--14050[label="0.0232558;1pkt 1fpkt"];
5973--14172[label="0.0444444;4pkt 4fpkt"];
5973--14245[label="0.028169;2pkt 2fpkt"];
5973--14422[label="0.00877193;1pkt 1fpkt"];
5973--14457[label="0.0615385;4pkt 4fpkt"];
5973--14711[label="0.010989;1pkt 1fpkt"];
5973--14768[label="0.013245;4pkt 4fpkt"];
5973--15259[label="0.0232558;1pkt 1fpkt"];
5973--15304[label="0.0444444;4pkt 4fpkt"];
5981--5982[label="0.058309;20pkt 20fpkt"];
5981--6136[label="0.00990099;2pkt 2fpkt"];
5981--6158[label="0.0142857;2pkt 2fpkt"];
5981--6362[label="0.00773196;3pkt 3fpkt"];
5981--6404[label="0.00673401;2pkt 2fpkt"];
5981--6463[label="0.00767754;4pkt 4fpkt"];
5981--6472[label="0.0479846;25pkt 25fpkt"];
5981--6490[label="0.0070922;1pkt 1fpkt"];
5981--6494[label="0.0104167;1pkt 1fpkt"];
5981--6537[label="0.00621118;1pkt 1fpkt"];
5981--6540[label="0.00487805;1pkt 1fpkt"];
5981--6581[label="0.00724638;1pkt 1fpkt"];
5981--6815[label="0.00487805;1pkt 1fpkt"];
5981--6845[label="0.0110497;2pkt 2fpkt"];
5981--6850[label="0.0101523;2pkt 2fpkt"];
5981--6907[label="0.0266667;2pkt 2fpkt"];
5981--6917[label="0.0165746;3pkt 3fpkt"];
5981--6947[label="0.00877193;1pkt 1fpkt"];
5981--7148[label="0.0116959;4pkt 4fpkt"];
5981--7259[label="0.0261438;4pkt 4fpkt"];
5981--7263[label="0.0190476;2pkt 2fpkt"];
5981--7297[label="0.00763359;1pkt 1fpkt"];
5981--7317[label="0.0285714;1pkt 1fpkt"];
5981--7348[label="0.0204082;1pkt 1fpkt"];
5981--7459[label="0.0144928;1pkt 1fpkt"];
5981--7480[label="0.00456621;1pkt 1fpkt"];
5981--7526[label="0.0145985;2pkt 2fpkt"];
5981--7553[label="0.00909091;1pkt 1fpkt"];
5981--7554[label="0.00347222;1pkt 1fpkt"];
5981--7566[label="0.0247934;3pkt 3fpkt"];
5981--7573[label="0.0306513;8pkt 8fpkt"];
5981--7581[label="0.0263158;1pkt 1fpkt"];
5981--7695[label="0.008;1pkt 1fpkt"];
5981--7718[label="0.0162602;4pkt 4fpkt"];
5981--7725[label="0.0384615;1pkt 1fpkt"];
5981--7769[label="0.00571429;1pkt 1fpkt"];
5981--7887[label="0.0508475;3pkt 3fpkt"];
5981--7922[label="0.0869565;8pkt 8fpkt"];
5981--7948[label="0.00636943;1pkt 1fpkt"];
5981--8045[label="0.0186916;2pkt 2fpkt"];
5981--8344[label="0.0110497;2pkt 2fpkt"];
5981--8487[label="0.0247934;3pkt 3fpkt"];
5981--8550[label="0.0165746;3pkt 3fpkt"];
5981--8575[label="0.00767754;4pkt 4fpkt"];
5981--8590[label="0.115163;60pkt 60fpkt"];
5981--8610[label="0.0863724;45pkt 45fpkt"];
5981--8611[label="0.00383877;2pkt 2fpkt"];
5981--8695[label="0.00767754;4pkt 4fpkt"];
5981--8710[label="0.115163;60pkt 60fpkt"];
5981--8730[label="0.0863724;45pkt 45fpkt"];
5981--8731[label="0.00383877;2pkt 2fpkt"];
5981--8828[label="0.115163;60pkt 60fpkt"];
5981--8846[label="0.0863724;45pkt 45fpkt"];
5981--9013[label="0.00512821;1pkt 1fpkt"];
5981--9132[label="0.0666667;1pkt 1fpkt"];
5981--9207[label="0.26;13pkt 13fpkt"];
5981--9265[label="0.175;7pkt 7fpkt"];
5981--9283[label="0.00809717;2pkt 2fpkt"];
5981--9338[label="0.0175439;2pkt 2fpkt"];
5981--9358[label="0.5;1pkt 1fpkt"];
5981--9389[label="0.0294118;1pkt 1fpkt"];
5981--9431[label="0.0172414;2pkt 2fpkt"];
5981--9447[label="0.0102041;1pkt 1fpkt"];
5981--9481[label="0.004329;1pkt 1fpkt"];
5981--9861[label="0.0135135;1pkt 1fpkt"];
5981--9913[label="0.409091;9pkt 9fpkt"];
5981--10008[label="0.0114286;2pkt 2fpkt"];
5981--10151[label="0.00383877;2pkt 2fpkt"];
5981--10339[label="0.0483871;3pkt 3fpkt"];
5981--10557[label="0.00813008;1pkt 1fpkt"];
5981--10678[label="0.0176991;2pkt 2fpkt"];
5981--10785[label="0.0153846;1pkt 1fpkt"];
5981--10861[label="0.00444444;1pkt 1fpkt"];
5981--10988[label="0.0138889;1pkt 1fpkt"];
5981--11164[label="0.0909091;7pkt 7fpkt"];
5981--11227[label="0.0125;2pkt 2fpkt"];
5981--11535[label="0.0639269;14pkt 14fpkt"];
5981--11661[label="0.0263158;1pkt 1fpkt"];
5981--11662[label="0.0118343;2pkt 2fpkt"];
5981--11679[label="0.00806452;2pkt 2fpkt"];
5981--11723[label="0.1;9pkt 9fpkt"];
5981--11761[label="0.0111111;1pkt 1fpkt"];
5981--11894[label="0.0422535;3pkt 3fpkt"];
5981--11941[label="0.0166667;1pkt 1fpkt"];
5981--11985[label="0.0333333;1pkt 1fpkt"];
5981--11994[label="0.0526316;5pkt 5fpkt"];
5981--12028[label="0.02;1pkt 1fpkt"];
5981--12099[label="0.0263158;1pkt 1fpkt"];
5981--12146[label="0.008;2pkt 2fpkt"];
5981--12152[label="0.00588235;1pkt 1fpkt"];
5981--12171[label="0.024;3pkt 3fpkt"];
5981--12220[label="0.111111;1pkt 1fpkt"];
5981--12677[label="0.0144928;1pkt 1fpkt"];
5981--12877[label="0.00510204;1pkt 1fpkt"];
5981--12954[label="0.0149254;4pkt 4fpkt"];
5981--12973[label="0.265306;13pkt 13fpkt"];
5981--13008[label="0.00806452;2pkt 2fpkt"];
5981--13033[label="0.0175439;2pkt 2fpkt"];
5981--13092[label="0.0102041;1pkt 1fpkt"];
5981--13194[label="0.0384615;1pkt 1fpkt"];
5981--13278[label="0.0135135;1pkt 1fpkt"];
5981--13309[label="0.409091;9pkt 9fpkt"];
5981--13515[label="0.0483871;3pkt 3fpkt"];
5981--13669[label="0.0176991;2pkt 2fpkt"];
5981--13894[label="0.0909091;7pkt 7fpkt"];
5981--13926[label="0.0125;2pkt 2fpkt"];
5981--14145[label="0.0118343;2pkt 2fpkt"];
5981--14151[label="0.00806452;2pkt 2fpkt"];
5981--14172[label="0.1;9pkt 9fpkt"];
5981--14245[label="0.0422535;3pkt 3fpkt"];
5981--14290[label="0.0333333;1pkt 1fpkt"];
5981--14308[label="0.02;1pkt 1fpkt"];
5981--14367[label="0.008;2pkt 2fpkt"];
5981--14381[label="0.0241935;3pkt 3fpkt"];
5981--14632[label="0.0144928;1pkt 1fpkt"];
5981--14789[label="0.0176991;2pkt 2fpkt"];
5981--14815[label="0.0103093;1pkt 1fpkt"];
5981--14861[label="0.0384615;1pkt 1fpkt"];
5981--14914[label="0.409091;9pkt 9fpkt"];
5981--15082[label="0.0176991;2pkt 2fpkt"];
5981--15304[label="0.1;9pkt 9fpkt"];
5981--15387[label="0.0241935;3pkt 3fpkt"];
6683--7101[label="1;1pkt 1fpkt"];
6683--9197[label="1;1pkt 1fpkt"];
7101--7266[label="0.0327869;2pkt 2fpkt"];
7101--7305[label="0.210526;4pkt 4fpkt"];
7101--7331[label="0.0454545;2pkt 2fpkt"];
7101--7919[label="0.019084;5pkt 5fpkt"];
7101--7941[label="0.0416667;4pkt 4fpkt"];
7101--8008[label="0.0140845;2pkt 2fpkt"];
7101--8043[label="0.0588235;2pkt 2fpkt"];
7101--8590[label="0.125954;33pkt 33fpkt"];
7101--8610[label="0.0687023;18pkt 18fpkt"];
7101--8633[label="0.00381679;1pkt 1fpkt"];
7101--8710[label="0.125954;33pkt 33fpkt"];
7101--8730[label="0.0687023;18pkt 18fpkt"];
7101--8753[label="0.00381679;1pkt 1fpkt"];
7101--8828[label="0.125954;33pkt 33fpkt"];
7101--8846[label="0.0687023;18pkt 18fpkt"];
7101--8869[label="0.00381679;1pkt 1fpkt"];
7101--8990[label="0.153846;2pkt 2fpkt"];
7101--9116[label="0.0253165;2pkt 2fpkt"];
7101--9132[label="0.0666667;1pkt 1fpkt"];
7101--9197[label="1;1pkt 1fpkt"];
7101--9200[label="0.454545;10pkt 10fpkt"];
7101--9230[label="1;18pkt 18fpkt"];
7101--9283[label="0.00404858;1pkt 1fpkt"];
7101--9356[label="0.0357143;1pkt 1fpkt"];
7101--9688[label="1;2pkt 2fpkt"];
7101--9694[label="0.0357143;2pkt 2fpkt"];
7101--10013[label="0.142857;1pkt 1fpkt"];
7101--10347[label="0.4;2pkt 2fpkt"];
7101--10601[label="0.105263;2pkt 2fpkt"];
7101--11235[label="1;4pkt 4fpkt"];
7101--11374[label="0.0454545;1pkt 1fpkt"];
7101--11470[label="0.310345;9pkt 9fpkt"];
7101--11661[label="0.0526316;2pkt 2fpkt"];
7101--11722[label="0.142857;1pkt 1fpkt"];
7101--11723[label="0.766667;69pkt 69fpkt"];
7101--11761[label="0.0222222;2pkt 2fpkt"];
7101--11811[label="0.0588235;2pkt 2fpkt"];
7101--11875[label="1;4pkt 4fpkt"];
7101--11894[label="0.112676;8pkt 8fpkt"];
7101--11932[label="0.020202;2pkt 2fpkt"];
7101--11975[label="0.15;3pkt 3fpkt"];
7101--12352[label="0.1;1pkt 1fpkt"];
7101--12554[label="0.0117647;2pkt 2fpkt"];
7101--12558[label="0.0909091;2pkt 2fpkt"];
7101--13008[label="0.00403226;1pkt 1fpkt"];
7101--13045[label="0.0357143;1pkt 1fpkt"];
7101--13204[label="1;2pkt 2fpkt"];
7101--13355[label="0.142857;1pkt 1fpkt"];
7101--13519[label="0.4;2pkt 2fpkt"];
7101--14172[label="0.766667;69pkt 69fpkt"];
7101--14236[label="1;4pkt 4fpkt"];
7101--14245[label="0.112676;8pkt 8fpkt"];
7101--14264[label="0.020202;2pkt 2fpkt"];
7101--15304[label="0.766667;69pkt 69fpkt"];
7240--7874[label="0.0238095;1pkt 1fpkt"];
7240--7972[label="0.0952381;4pkt 4fpkt"];
7240--8464[label="0.0714286;3pkt 3fpkt"];
7240--8590[label="0.0238095;1pkt 1fpkt"];
7240--8610[label="0.166667;7pkt 7fpkt"];
7240--8633[label="0.119048;5pkt 5fpkt"];
7240--8710[label="0.0238095;1pkt 1fpkt"];
7240--8730[label="0.166667;7pkt 7fpkt"];
7240--8753[label="0.119048;5pkt 5fpkt"];
7240--8828[label="0.0238095;1pkt 1fpkt"];
7240--8846[label="0.166667;7pkt 7fpkt"];
7240--8869[label="0.119048;5pkt 5fpkt"];
7240--12319[label="0.97619;41pkt 41fpkt"];
7240--14457[label="0.97619;41pkt 41fpkt"];
7972--8487[label="0.0165289;2pkt 2fpkt"];
7972--8590[label="0.0880503;14pkt 14fpkt"];
7972--8610[label="0.0377358;6pkt 6fpkt"];
7972--8633[label="0.213836;34pkt 34fpkt"];
7972--8710[label="0.0880503;14pkt 14fpkt"];
7972--8730[label="0.0377358;6pkt 6fpkt"];
7972--8753[label="0.213836;34pkt 34fpkt"];
7972--8828[label="0.0880503;14pkt 14fpkt"];
7972--8846[label="0.0377358;6pkt 6fpkt"];
7972--8869[label="0.213836;34pkt 34fpkt"];
7972--9014[label="1;1pkt 1fpkt"];
7972--9447[label="0.0102041;1pkt 1fpkt"];
7972--9481[label="0.00628931;1pkt 1fpkt"];
7972--9979[label="0.00628931;1pkt 1fpkt"];
7972--10100[label="0.625;5pkt 5fpkt"];
7972--10900[label="0.00628931;1pkt 1fpkt"];
7972--11284[label="0.00628931;1pkt 1fpkt"];
7972--12269[label="0.025;1pkt 1fpkt"];
7972--12319[label="0.0923077;6pkt 6fpkt"];
7972--12543[label="0.0628931;10pkt 10fpkt"];
7972--12775[label="0.010101;1pkt 1fpkt"];
7972--12878[label="1;2pkt 2fpkt"];
7972--12977[label="0.00628931;1pkt 1fpkt"];
7972--13092[label="0.0102041;1pkt 1fpkt"];
7972--14457[label="0.0923077;6pkt 6fpkt"];
7972--14672[label="0.010101;1pkt 1fpkt"];
7972--14718[label="1;1pkt 1fpkt"];
7972--14768[label="0.00628931;1pkt 1fpkt"];
7972--14815[label="0.0103093;1pkt 1fpkt"];
7972--14930[label="0.00628931;1pkt 1fpkt"];
7972--15124[label="0.00628931;1pkt 1fpkt"];
7972--15525[label="0.010101;1pkt 1fpkt"];
8043--8590[label="0.117647;4pkt 4fpkt"];
8043--8710[label="0.117647;4pkt 4fpkt"];
8043--8828[label="0.117647;4pkt 4fpkt"];
8043--11811[label="1;34pkt 34fpkt"];
9014--12878[label="1;1pkt 1fpkt"];
9014--14718[label="1;1pkt 1fpkt"];
9207--12973[label="1;49pkt 49fpkt"];
9688--13204[label="1;2pkt 2fpkt"];
9913--13309[label="1;22pkt 22fpkt"];
9913--14914[label="1;22pkt 22fpkt"];
10858--13760[label="1;35pkt 35fpkt"];
11723--14172[label="1;90pkt 90fpkt"];
11723--15304[label="1;90pkt 90fpkt"];
11875--14236[label="1;4pkt 4fpkt"];
11894--14245[label="1;71pkt 71fpkt"];
12319--14457[label="1;65pkt 65fpkt"];
12680--14634[label="1;30pkt 30fpkt"];
12878--14718[label="1;1pkt 1fpkt"];
13309--14914[label="1;22pkt 22fpkt"];
14172--15304[label="1;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.153.216" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
3744[label="213.60.202.141;s;9pkt 9fpkt", shape=diamond, color=yellow];
7070[label="213.60.202.141;s;9pkt 9fpkt", shape=hexagon, color=black];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.60.202.141:80, 167.209.145.21:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4444%)&lt;BR/&gt; 1048: (5.55556%)&lt;BR/&gt; 1045: (5.55556%)&lt;BR/&gt; 1044: (5.55556%)&lt;BR/&gt; 1043: (5.55556%)&gt;];
}
3744--7070[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.145.21" src_ip="213.60.202.141" src_port="80"/>
    </slice>
    <from sec="1207285593" usec="0"/>
    <to sec="1207285673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
3754[label="101.207.71.65;d;6pkt 6fpkt", shape=diamond, color=yellow];
3755[label="166.73.237.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
7072[label="101.207.71.65;d;6pkt 6fpkt", shape=hexagon, color=black];
9081[label="166.73.237.8;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.73.237.8:80, 101.207.71.65:*}[55.5556%]&lt;BR/&gt;{*:0, 101.207.71.65:0}[22.2222%]&lt;BR/&gt;{185.129.30.4:80, 101.207.71.65:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.8889%)&lt;BR/&gt; 0: (22.2222%)&lt;BR/&gt; 41015: (11.1111%)&lt;BR/&gt; 42918: (8.33333%)&lt;BR/&gt; 49043: (5.55556%)&gt;];
}
3754--3755[label="1;1pkt 1fpkt"];
3754--7072[label="1;6pkt 6fpkt"];
3754--9081[label="0.4;2pkt 2fpkt"];
3755--7072[label="1;1pkt 1fpkt"];
3755--9081[label="1;1pkt 1fpkt"];
7072--9081[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.71.65" src_ip="166.73.237.8" src_port="80"/>
      <filter dst_ip="101.207.71.65" src_ip="185.129.30.4" src_port="80"/>
      <filter dst_ip="101.207.71.65"/>
    </slice>
    <from sec="1207285372" usec="0"/>
    <to sec="1207286068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09476,1.93947,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
1587[label="160.86.213.20;s;2278pkt 2278fpkt", shape=diamond, color=yellow];
7103[label="160.86.213.20;s;1431pkt 1431fpkt", shape=hexagon, color=black];
9315[label="160.86.213.20;2414pkt 2414fpkt", shape=pentagon, color=darkviolet];
14784[label="160.86.213.20;2409pkt 2409fpkt", shape=invhouse, color=bisque];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.213.20:48662, *:*}[55.261%]&lt;BR/&gt;{160.86.213.20:34723, *:*}[44.739%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48662: (28.8737%)&lt;BR/&gt; 34723: (21.1498%)&lt;BR/&gt; 16001: (0.685654%)&lt;BR/&gt; 6881: (0.580169%)&lt;BR/&gt; 32459: (0.134787%)&gt;];
}
1587--3447[label="0.00740741;1pkt 1fpkt"];
1587--7103[label="1;1431pkt 1431fpkt"];
1587--9315[label="1;2278pkt 2278fpkt"];
1587--14784[label="0.997805;2273pkt 2273fpkt"];
7103--9315[label="1;1431pkt 1431fpkt"];
7103--14784[label="0.997205;1427pkt 1427fpkt"];
9315--14784[label="1;2409pkt 2409fpkt"];
</description>
    <slice>
      <filter src_ip="160.86.213.20" src_port="48662"/>
      <filter src_ip="160.86.213.20" src_port="34723"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
877[label="167.209.194.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
878[label="198.80.236.51;d;3pkt 3fpkt", shape=diamond, color=yellow];
937[label="167.209.115.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
1697[label="160.86.70.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
5395[label="167.209.194.179;s;1pkt 1fpkt", shape=hexagon, color=black];
7154[label="167.209.115.131;s;2pkt 2fpkt", shape=hexagon, color=black];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.194.179:49866, 198.80.236.51:8020}[25%]&lt;BR/&gt;{160.86.70.200:51898, 198.80.236.51:8010}[25%]&lt;BR/&gt;{167.209.115.131:50034, 102.185.52.166:80}[25%]&lt;BR/&gt;{167.209.115.131:49514, 198.80.236.51:8000}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49866: (15%)&lt;BR/&gt; 49514: (15%)&lt;BR/&gt; 8020: (15%)&lt;BR/&gt; 8000: (15%)&lt;BR/&gt; 51898: (10%)&gt;];
}
877--878[label="1;1pkt 1fpkt"];
877--5395[label="1;1pkt 1fpkt"];
878--937[label="0.5;1pkt 1fpkt"];
878--1697[label="1;1pkt 1fpkt"];
878--5395[label="1;1pkt 1fpkt"];
878--7154[label="0.5;1pkt 1fpkt"];
937--7154[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="198.80.236.51" dst_port="8000" src_ip="167.209.115.131" src_port="49514"/>
      <filter dst_ip="102.185.52.166" dst_port="80" src_ip="167.209.115.131" src_port="50034"/>
      <filter dst_ip="198.80.236.51" dst_port="8010" src_ip="160.86.70.200" src_port="51898"/>
      <filter dst_ip="198.80.236.51" dst_port="8020" src_ip="167.209.194.179" src_port="49866"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09476,1.93947,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
1705[label="74.81.33.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
1706[label="149.82.92.30;s;8pkt 8fpkt", shape=diamond, color=yellow];
6011[label="149.82.92.30;s;6pkt 6fpkt", shape=hexagon, color=black];
7158[label="74.81.33.1;d;1pkt 1fpkt", shape=hexagon, color=black];
9472[label="149.82.92.30;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14821[label="149.82.92.30;7pkt 7fpkt", shape=invhouse, color=bisque];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.92.30:*, 74.81.33.75:8080}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (41.9355%)&lt;BR/&gt; 10106: (8.06452%)&lt;BR/&gt; 1310: (8.06452%)&lt;BR/&gt; 2204: (6.45161%)&lt;BR/&gt; 2203: (6.45161%)&gt;];
}
1705--1706[label="1;1pkt 1fpkt"];
1705--6011[label="1;1pkt 1fpkt"];
1705--7158[label="1;1pkt 1fpkt"];
1705--9472[label="1;1pkt 1fpkt"];
1706--6011[label="1;6pkt 6fpkt"];
1706--7158[label="1;1pkt 1fpkt"];
1706--9472[label="1;8pkt 8fpkt"];
1706--14821[label="1;7pkt 7fpkt"];
6011--7158[label="1;1pkt 1fpkt"];
6011--9472[label="1;6pkt 6fpkt"];
6011--14821[label="0.833333;5pkt 5fpkt"];
7158--9472[label="1;1pkt 1fpkt"];
9472--14821[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="74.81.33.75" dst_port="8080" src_ip="149.82.92.30"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
1790[label="160.130.50.73;s;177pkt 177fpkt", shape=diamond, color=yellow];
2984[label="100.0.254.86;d;7pkt 7fpkt", shape=diamond, color=yellow];
3508[label="48.58.134.162;d;115pkt 115fpkt", shape=diamond, color=yellow];
4685[label="220.138.12.129;d;28pkt 28fpkt", shape=diamond, color=yellow];
6049[label="160.130.50.73;s;86pkt 86fpkt", shape=hexagon, color=black];
7189[label="100.0.254.86;d;5pkt 5fpkt", shape=hexagon, color=black];
10146[label="160.130.50.73;191pkt 191fpkt", shape=pentagon, color=darkviolet];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.130.50.73:*, 48.58.134.162:80}[63.7306%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.9622%)&lt;BR/&gt; 443: (1.72414%)&lt;BR/&gt; 3020: (0.410509%)&lt;BR/&gt; 2395: (0.410509%)&lt;BR/&gt; 2332: (0.410509%)&gt;];
}
1790--2984[label="1;7pkt 7fpkt"];
1790--3508[label="0.991304;114pkt 114fpkt"];
1790--4685[label="0.964286;27pkt 27fpkt"];
1790--6049[label="1;86pkt 86fpkt"];
1790--7189[label="1;5pkt 5fpkt"];
1790--8612[label="0.0734463;13pkt 13fpkt"];
1790--8688[label="0.0508475;9pkt 9fpkt"];
1790--8732[label="0.0734463;13pkt 13fpkt"];
1790--8807[label="0.0508475;9pkt 9fpkt"];
1790--8847[label="0.0734463;13pkt 13fpkt"];
1790--8923[label="0.0508475;9pkt 9fpkt"];
1790--10146[label="1;177pkt 177fpkt"];
2984--6049[label="0.714286;5pkt 5fpkt"];
2984--7189[label="1;5pkt 5fpkt"];
2984--10146[label="1;7pkt 7fpkt"];
3508--6049[label="0.651163;56pkt 56fpkt"];
3508--8612[label="0.0782609;9pkt 9fpkt"];
3508--8688[label="0.0434783;5pkt 5fpkt"];
3508--8732[label="0.0782609;9pkt 9fpkt"];
3508--8807[label="0.0434783;5pkt 5fpkt"];
3508--8847[label="0.0782609;9pkt 9fpkt"];
3508--8923[label="0.0434783;5pkt 5fpkt"];
3508--9973[label="0.00869565;1pkt 1fpkt"];
3508--10146[label="0.991304;114pkt 114fpkt"];
4685--6049[label="0.428571;12pkt 12fpkt"];
4685--8612[label="0.0714286;2pkt 2fpkt"];
4685--8688[label="0.0714286;2pkt 2fpkt"];
4685--8732[label="0.0714286;2pkt 2fpkt"];
4685--8807[label="0.0714286;2pkt 2fpkt"];
4685--8847[label="0.0714286;2pkt 2fpkt"];
4685--8923[label="0.0714286;2pkt 2fpkt"];
4685--9973[label="0.0357143;1pkt 1fpkt"];
4685--10146[label="0.964286;27pkt 27fpkt"];
6049--7189[label="1;5pkt 5fpkt"];
6049--8612[label="0.151163;13pkt 13fpkt"];
6049--8732[label="0.151163;13pkt 13fpkt"];
6049--8847[label="0.151163;13pkt 13fpkt"];
6049--10146[label="1;86pkt 86fpkt"];
7189--10146[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="48.58.134.162" dst_port="80" src_ip="160.130.50.73"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
1792[label="167.209.54.106;s;580pkt 580fpkt", shape=diamond, color=yellow];
7190[label="167.209.54.106;s;552pkt 552fpkt", shape=hexagon, color=black];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.54.106:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1792--3818[label="0.0025641;1pkt 1fpkt"];
1792--3840[label="0.00262467;1pkt 1fpkt"];
1792--4582[label="0.00315457;1pkt 1fpkt"];
1792--4938[label="0.00342466;1pkt 1fpkt"];
1792--7109[label="0.0025641;1pkt 1fpkt"];
1792--7190[label="1;552pkt 552fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.54.106"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1828[label="179.8.24.56;d;115pkt 115fpkt", shape=diamond, color=yellow];
7208[label="179.8.24.56;d;101pkt 101fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 179.8.24.56:13489}[95.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13489: (47.6852%)&lt;BR/&gt; 45306: (2.31481%)&lt;BR/&gt; 62743: (0.925926%)&lt;BR/&gt; 13671: (0.925926%)&lt;BR/&gt; 13120: (0.925926%)&gt;];
}
1828--7208[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="179.8.24.56" dst_port="13489"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
2444[label="160.188.2.50;d;345pkt 345fpkt", shape=diamond, color=yellow];
7229[label="160.188.2.50;d;313pkt 313fpkt", shape=hexagon, color=black];
9942[label="194.56.189.60;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.188.2.50:13278}[57.3913%]&lt;BR/&gt;{*:*, 160.188.2.50:13579}[40.8696%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13278: (27.8452%)&lt;BR/&gt; 13579: (21.3961%)&lt;BR/&gt; 45306: (0.531108%)&lt;BR/&gt; 13108: (0.379363%)&lt;BR/&gt; 13796: (0.30349%)&gt;];
}
2444--7229[label="1;313pkt 313fpkt"];
2444--9942[label="1;1pkt 1fpkt"];
7229--9942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.2.50" dst_port="13278"/>
      <filter dst_ip="160.188.2.50" dst_port="13579"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09476,1.93947,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1197[label="167.209.172.61;s;134pkt 134fpkt", shape=diamond, color=yellow];
4636[label="101.207.77.228;d;25pkt 25fpkt", shape=diamond, color=yellow];
7239[label="167.209.172.61;s;134pkt 134fpkt", shape=hexagon, color=black];
9957[label="167.209.172.61;139pkt 139fpkt", shape=pentagon, color=darkviolet];
14925[label="167.209.172.61;139pkt 139fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.172.61:80, 101.207.77.228:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63410: (0.437828%)&lt;BR/&gt; 62561: (0.437828%)&lt;BR/&gt; 60880: (0.437828%)&lt;BR/&gt; 60062: (0.437828%)&gt;];
}
1197--4636[label="0.96;24pkt 24fpkt"];
1197--7239[label="1;134pkt 134fpkt"];
1197--8590[label="0.104478;14pkt 14fpkt"];
1197--8610[label="0.0970149;13pkt 13fpkt"];
1197--8633[label="0.0149254;2pkt 2fpkt"];
1197--8710[label="0.104478;14pkt 14fpkt"];
1197--8730[label="0.0970149;13pkt 13fpkt"];
1197--8753[label="0.0149254;2pkt 2fpkt"];
1197--8828[label="0.104478;14pkt 14fpkt"];
1197--8846[label="0.0970149;13pkt 13fpkt"];
1197--8869[label="0.0149254;2pkt 2fpkt"];
1197--9957[label="1;134pkt 134fpkt"];
1197--14925[label="1;134pkt 134fpkt"];
4636--7239[label="0.96;24pkt 24fpkt"];
4636--8590[label="0.04;1pkt 1fpkt"];
4636--8610[label="0.04;1pkt 1fpkt"];
4636--8633[label="0.04;1pkt 1fpkt"];
4636--8710[label="0.04;1pkt 1fpkt"];
4636--8730[label="0.04;1pkt 1fpkt"];
4636--8753[label="0.04;1pkt 1fpkt"];
4636--8828[label="0.04;1pkt 1fpkt"];
4636--8846[label="0.04;1pkt 1fpkt"];
4636--8869[label="0.04;1pkt 1fpkt"];
4636--9957[label="0.96;24pkt 24fpkt"];
4636--14925[label="0.96;24pkt 24fpkt"];
7239--8590[label="0.104478;14pkt 14fpkt"];
7239--8610[label="0.0970149;13pkt 13fpkt"];
7239--8633[label="0.0149254;2pkt 2fpkt"];
7239--8710[label="0.104478;14pkt 14fpkt"];
7239--8730[label="0.0970149;13pkt 13fpkt"];
7239--8753[label="0.0149254;2pkt 2fpkt"];
7239--8828[label="0.104478;14pkt 14fpkt"];
7239--8846[label="0.0970149;13pkt 13fpkt"];
7239--8869[label="0.0149254;2pkt 2fpkt"];
7239--9957[label="1;134pkt 134fpkt"];
7239--14925[label="1;134pkt 134fpkt"];
9957--14925[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.77.228" src_ip="167.209.172.61" src_port="80"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1214[label="167.209.178.22;d;70pkt 70fpkt", shape=diamond, color=yellow];
3182[label="167.209.178.102;d;40pkt 40fpkt", shape=diamond, color=yellow];
4218[label="55.92.86.102;s;121pkt 121fpkt", shape=diamond, color=yellow];
4807[label="204.156.110.208;s;12pkt 12fpkt", shape=diamond, color=yellow];
5754[label="167.209.178.22;d;70pkt 70fpkt", shape=hexagon, color=black];
6600[label="167.209.178.102;d;40pkt 40fpkt", shape=hexagon, color=black];
10684[label="55.92.86.102;135pkt 135fpkt", shape=pentagon, color=darkviolet];
12257[label="204.156.110.208;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13670[label="55.92.86.102;134pkt 134fpkt", shape=invtriangle, color=brown];
14430[label="204.156.110.208;12pkt 12fpkt", shape=invtriangle, color=brown];
15083[label="55.92.86.102;134pkt 134fpkt", shape=invhouse, color=bisque];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{55.92.86.102:80, *:*}[63.6792%]&lt;BR/&gt;{*:80, 167.209.178.22:*}[33.0189%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7436%)&lt;BR/&gt; 1836: (0.641026%)&lt;BR/&gt; 3806: (0.576923%)&lt;BR/&gt; 3798: (0.384615%)&lt;BR/&gt; 3794: (0.384615%)&gt;];
}
1214--3037[label="0.0714286;5pkt 5fpkt"];
1214--3551[label="0.0285714;2pkt 2fpkt"];
1214--4218[label="0.0571429;4pkt 4fpkt"];
1214--4807[label="1;12pkt 12fpkt"];
1214--5754[label="1;70pkt 70fpkt"];
1214--6472[label="0.0285714;2pkt 2fpkt"];
1214--6482[label="0.0428571;3pkt 3fpkt"];
1214--7948[label="0.0714286;5pkt 5fpkt"];
1214--8633[label="0.142857;10pkt 10fpkt"];
1214--8753[label="0.142857;10pkt 10fpkt"];
1214--8869[label="0.142857;10pkt 10fpkt"];
1214--10684[label="0.0571429;4pkt 4fpkt"];
1214--11187[label="0.0285714;2pkt 2fpkt"];
1214--11662[label="0.0285714;2pkt 2fpkt"];
1214--12257[label="1;12pkt 12fpkt"];
1214--13670[label="0.0571429;4pkt 4fpkt"];
1214--14145[label="0.0285714;2pkt 2fpkt"];
1214--14430[label="1;12pkt 12fpkt"];
1214--15083[label="0.0571429;4pkt 4fpkt"];
3182--3605[label="0.125;5pkt 5fpkt"];
3182--4218[label="0.725;29pkt 29fpkt"];
3182--6482[label="0.05;2pkt 2fpkt"];
3182--6600[label="1;40pkt 40fpkt"];
3182--7348[label="0.125;5pkt 5fpkt"];
3182--7459[label="0.025;1pkt 1fpkt"];
3182--8590[label="0.025;1pkt 1fpkt"];
3182--8610[label="0.05;2pkt 2fpkt"];
3182--8633[label="0.025;1pkt 1fpkt"];
3182--8710[label="0.025;1pkt 1fpkt"];
3182--8730[label="0.05;2pkt 2fpkt"];
3182--8753[label="0.025;1pkt 1fpkt"];
3182--8828[label="0.025;1pkt 1fpkt"];
3182--8846[label="0.05;2pkt 2fpkt"];
3182--8869[label="0.025;1pkt 1fpkt"];
3182--9345[label="0.025;1pkt 1fpkt"];
3182--10684[label="0.725;29pkt 29fpkt"];
3182--10988[label="0.125;5pkt 5fpkt"];
3182--13670[label="0.725;29pkt 29fpkt"];
3182--15083[label="0.725;29pkt 29fpkt"];
4218--5620[label="0.00826446;1pkt 1fpkt"];
4218--5754[label="0.0571429;4pkt 4fpkt"];
4218--6143[label="0.0413223;5pkt 5fpkt"];
4218--6600[label="0.725;29pkt 29fpkt"];
4218--7635[label="0.0625;6pkt 6fpkt"];
4218--8590[label="0.0661157;8pkt 8fpkt"];
4218--8610[label="0.0991736;12pkt 12fpkt"];
4218--8633[label="0.0743802;9pkt 9fpkt"];
4218--8710[label="0.0661157;8pkt 8fpkt"];
4218--8730[label="0.0991736;12pkt 12fpkt"];
4218--8753[label="0.0743802;9pkt 9fpkt"];
4218--8828[label="0.0661157;8pkt 8fpkt"];
4218--8846[label="0.0991736;12pkt 12fpkt"];
4218--8869[label="0.0743802;9pkt 9fpkt"];
4218--10684[label="1;121pkt 121fpkt"];
4218--13670[label="0.991736;120pkt 120fpkt"];
4218--15083[label="0.991736;120pkt 120fpkt"];
4807--5754[label="1;12pkt 12fpkt"];
4807--12257[label="1;12pkt 12fpkt"];
4807--14430[label="1;12pkt 12fpkt"];
5754--6472[label="0.0285714;2pkt 2fpkt"];
5754--6482[label="0.0428571;3pkt 3fpkt"];
5754--7948[label="0.0714286;5pkt 5fpkt"];
5754--8633[label="0.142857;10pkt 10fpkt"];
5754--8753[label="0.142857;10pkt 10fpkt"];
5754--8869[label="0.142857;10pkt 10fpkt"];
5754--10684[label="0.0571429;4pkt 4fpkt"];
5754--11187[label="0.0285714;2pkt 2fpkt"];
5754--11662[label="0.0285714;2pkt 2fpkt"];
5754--12257[label="1;12pkt 12fpkt"];
5754--13670[label="0.0571429;4pkt 4fpkt"];
5754--14145[label="0.0285714;2pkt 2fpkt"];
5754--14430[label="1;12pkt 12fpkt"];
5754--15083[label="0.0571429;4pkt 4fpkt"];
6600--7348[label="0.125;5pkt 5fpkt"];
6600--7459[label="0.025;1pkt 1fpkt"];
6600--8590[label="0.025;1pkt 1fpkt"];
6600--8610[label="0.05;2pkt 2fpkt"];
6600--8633[label="0.025;1pkt 1fpkt"];
6600--8710[label="0.025;1pkt 1fpkt"];
6600--8730[label="0.05;2pkt 2fpkt"];
6600--8753[label="0.025;1pkt 1fpkt"];
6600--8828[label="0.025;1pkt 1fpkt"];
6600--8846[label="0.05;2pkt 2fpkt"];
6600--8869[label="0.025;1pkt 1fpkt"];
6600--9345[label="0.025;1pkt 1fpkt"];
6600--10684[label="0.725;29pkt 29fpkt"];
6600--10988[label="0.125;5pkt 5fpkt"];
6600--13670[label="0.725;29pkt 29fpkt"];
6600--15083[label="0.725;29pkt 29fpkt"];
10684--13670[label="1;134pkt 134fpkt"];
10684--15083[label="1;134pkt 134fpkt"];
12257--14430[label="1;12pkt 12fpkt"];
13670--15083[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter src_ip="55.92.86.102" src_port="80"/>
      <filter dst_ip="167.209.178.22" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
2801[label="149.82.5.205;d;105pkt 105fpkt", shape=diamond, color=yellow];
7369[label="149.82.5.205;d;105pkt 105fpkt", shape=hexagon, color=black];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.82.5.205:13739}[97.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13739: (48.5714%)&lt;BR/&gt; 13012: (1.42857%)&lt;BR/&gt; 45306: (0.952381%)&lt;BR/&gt; 41331: (0.952381%)&lt;BR/&gt; 64949: (0.47619%)&gt;];
}
2801--7369[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.5.205" dst_port="13739"/>
    </slice>
    <from sec="1207285389" usec="0"/>
    <to sec="1207285594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
4217[label="160.86.96.25;s;165pkt 165fpkt", shape=diamond, color=yellow];
7466[label="160.86.96.25;s;157pkt 157fpkt", shape=hexagon, color=black];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.96.25:32770, *:53}[80.6061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.2733%)&lt;BR/&gt; 32770: (40.3727%)&lt;BR/&gt; 0: (8.69565%)&lt;BR/&gt; 55109: (0.310559%)&lt;BR/&gt; 55039: (0.310559%)&gt;];
}
4217--4224[label="0.00840336;1pkt 1fpkt"];
4217--4311[label="0.00775194;1pkt 1fpkt"];
4217--4468[label="0.0128205;1pkt 1fpkt"];
4217--4583[label="0.00606061;1pkt 1fpkt"];
4217--4593[label="0.00704225;1pkt 1fpkt"];
4217--4984[label="0.00606061;1pkt 1fpkt"];
4217--6033[label="0.00704225;1pkt 1fpkt"];
4217--6391[label="0.010101;1pkt 1fpkt"];
4217--6406[label="0.0169492;1pkt 1fpkt"];
4217--6478[label="0.00653595;1pkt 1fpkt"];
4217--6792[label="0.00990099;1pkt 1fpkt"];
4217--7288[label="0.00847458;1pkt 1fpkt"];
4217--7466[label="1;157pkt 157fpkt"];
4217--7471[label="0.00724638;1pkt 1fpkt"];
4217--7482[label="0.00884956;1pkt 1fpkt"];
4217--7885[label="0.00606061;1pkt 1fpkt"];
4217--7896[label="0.00606061;1pkt 1fpkt"];
4217--7971[label="0.00606061;1pkt 1fpkt"];
4217--7979[label="0.00775194;1pkt 1fpkt"];
4217--8536[label="0.00606061;1pkt 1fpkt"];
4217--8614[label="0.00606061;1pkt 1fpkt"];
4217--8734[label="0.00606061;1pkt 1fpkt"];
4217--8850[label="0.00606061;1pkt 1fpkt"];
7466--7471[label="0.00724638;1pkt 1fpkt"];
7466--7482[label="0.00884956;1pkt 1fpkt"];
7466--7885[label="0.00636943;1pkt 1fpkt"];
7466--7896[label="0.00636943;1pkt 1fpkt"];
7466--7971[label="0.00636943;1pkt 1fpkt"];
7466--7979[label="0.00775194;1pkt 1fpkt"];
7466--8536[label="0.00636943;1pkt 1fpkt"];
7466--8614[label="0.00636943;1pkt 1fpkt"];
7466--8734[label="0.00636943;1pkt 1fpkt"];
7466--8850[label="0.00636943;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="160.86.96.25" src_port="32770"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
1776[label="167.209.30.92;s;120pkt 120fpkt", shape=diamond, color=yellow];
2375[label="218.51.231.77;d;3pkt 3fpkt", shape=diamond, color=yellow];
4024[label="149.82.162.23;s;20pkt 20fpkt", shape=diamond, color=yellow];
4118[label="204.157.156.111;d;2pkt 2fpkt", shape=diamond, color=yellow];
4563[label="198.65.8.199;d;2pkt 2fpkt", shape=diamond, color=yellow];
4924[label="167.209.121.103;s;204pkt 204fpkt", shape=diamond, color=yellow];
5705[label="167.209.30.92;s;106pkt 106fpkt", shape=hexagon, color=black];
7492[label="218.51.231.77;d;3pkt 3fpkt", shape=hexagon, color=black];
9360[label="149.82.162.23;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10506[label="167.209.30.92;121pkt 121fpkt", shape=pentagon, color=darkviolet];
10698[label="167.209.121.103;234pkt 234fpkt", shape=pentagon, color=darkviolet];
13048[label="149.82.162.23;22pkt 22fpkt", shape=invtriangle, color=brown];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.121.103:53, *:*}[39.1534%]&lt;BR/&gt;{167.209.30.92:53, *:*}[23.0159%]&lt;BR/&gt;{167.209.121.103:49733, *:53}[22.4868%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (43.0733%)&lt;BR/&gt; 49733: (9.6624%)&lt;BR/&gt; 25: (4.42375%)&lt;BR/&gt; 995: (3.72526%)&lt;BR/&gt; 32768: (0.989523%)&gt;];
}
1776--1947[label="0.0714286;1pkt 1fpkt"];
1776--2340[label="0.00833333;1pkt 1fpkt"];
1776--2375[label="0.333333;1pkt 1fpkt"];
1776--2953[label="0.00840336;1pkt 1fpkt"];
1776--3392[label="0.1625;13pkt 13fpkt"];
1776--3813[label="0.015873;1pkt 1fpkt"];
1776--4118[label="0.5;1pkt 1fpkt"];
1776--4311[label="0.00833333;1pkt 1fpkt"];
1776--5705[label="1;106pkt 106fpkt"];
1776--6119[label="0.0714286;1pkt 1fpkt"];
1776--6742[label="0.00970874;1pkt 1fpkt"];
1776--7162[label="0.1625;13pkt 13fpkt"];
1776--7492[label="0.333333;1pkt 1fpkt"];
1776--7979[label="0.00833333;1pkt 1fpkt"];
1776--8323[label="0.00970874;1pkt 1fpkt"];
1776--8589[label="0.00833333;1pkt 1fpkt"];
1776--8603[label="0.00833333;1pkt 1fpkt"];
1776--8614[label="0.0166667;2pkt 2fpkt"];
1776--8684[label="0.0166667;2pkt 2fpkt"];
1776--8687[label="0.00833333;1pkt 1fpkt"];
1776--8692[label="0.00833333;1pkt 1fpkt"];
1776--8709[label="0.00833333;1pkt 1fpkt"];
1776--8723[label="0.00833333;1pkt 1fpkt"];
1776--8734[label="0.0166667;2pkt 2fpkt"];
1776--8803[label="0.0166667;2pkt 2fpkt"];
1776--8806[label="0.00833333;1pkt 1fpkt"];
1776--8811[label="0.00833333;1pkt 1fpkt"];
1776--8827[label="0.00833333;1pkt 1fpkt"];
1776--8839[label="0.00833333;1pkt 1fpkt"];
1776--8850[label="0.0166667;2pkt 2fpkt"];
1776--8919[label="0.0166667;2pkt 2fpkt"];
1776--8922[label="0.00833333;1pkt 1fpkt"];
1776--8927[label="0.00833333;1pkt 1fpkt"];
1776--10506[label="1;120pkt 120fpkt"];
2375--4924[label="0.333333;1pkt 1fpkt"];
2375--5705[label="0.333333;1pkt 1fpkt"];
2375--7492[label="1;3pkt 3fpkt"];
2375--10506[label="0.333333;1pkt 1fpkt"];
2375--10698[label="0.333333;1pkt 1fpkt"];
4024--4118[label="0.5;1pkt 1fpkt"];
4024--4563[label="1;2pkt 2fpkt"];
4024--9360[label="1;20pkt 20fpkt"];
4024--13048[label="1;20pkt 20fpkt"];
4118--5705[label="0.5;1pkt 1fpkt"];
4118--9360[label="0.5;1pkt 1fpkt"];
4118--10506[label="0.5;1pkt 1fpkt"];
4118--13048[label="0.5;1pkt 1fpkt"];
4563--9360[label="1;2pkt 2fpkt"];
4563--13048[label="1;2pkt 2fpkt"];
4924--6033[label="0.00704225;1pkt 1fpkt"];
4924--6119[label="0.0714286;1pkt 1fpkt"];
4924--6391[label="0.010101;1pkt 1fpkt"];
4924--6478[label="0.00653595;1pkt 1fpkt"];
4924--6792[label="0.00990099;1pkt 1fpkt"];
4924--7288[label="0.00847458;1pkt 1fpkt"];
4924--7471[label="0.00724638;1pkt 1fpkt"];
4924--7482[label="0.00884956;1pkt 1fpkt"];
4924--7492[label="0.333333;1pkt 1fpkt"];
4924--7896[label="0.00578035;1pkt 1fpkt"];
4924--8614[label="0.00490196;1pkt 1fpkt"];
4924--8692[label="0.00490196;1pkt 1fpkt"];
4924--8734[label="0.00490196;1pkt 1fpkt"];
4924--8811[label="0.00490196;1pkt 1fpkt"];
4924--8850[label="0.00490196;1pkt 1fpkt"];
4924--8927[label="0.00490196;1pkt 1fpkt"];
4924--10698[label="1;204pkt 204fpkt"];
5705--6119[label="0.0714286;1pkt 1fpkt"];
5705--6742[label="0.00970874;1pkt 1fpkt"];
5705--7162[label="0.1125;9pkt 9fpkt"];
5705--7492[label="0.333333;1pkt 1fpkt"];
5705--8323[label="0.00970874;1pkt 1fpkt"];
5705--8589[label="0.00943396;1pkt 1fpkt"];
5705--8603[label="0.00943396;1pkt 1fpkt"];
5705--8614[label="0.0188679;2pkt 2fpkt"];
5705--8684[label="0.0188679;2pkt 2fpkt"];
5705--8687[label="0.00943396;1pkt 1fpkt"];
5705--8692[label="0.00943396;1pkt 1fpkt"];
5705--8709[label="0.00943396;1pkt 1fpkt"];
5705--8723[label="0.00943396;1pkt 1fpkt"];
5705--8734[label="0.0188679;2pkt 2fpkt"];
5705--8803[label="0.0188679;2pkt 2fpkt"];
5705--8806[label="0.00943396;1pkt 1fpkt"];
5705--8811[label="0.00943396;1pkt 1fpkt"];
5705--8827[label="0.00943396;1pkt 1fpkt"];
5705--8839[label="0.00943396;1pkt 1fpkt"];
5705--8850[label="0.0188679;2pkt 2fpkt"];
5705--8919[label="0.0188679;2pkt 2fpkt"];
5705--8922[label="0.00943396;1pkt 1fpkt"];
5705--8927[label="0.00943396;1pkt 1fpkt"];
5705--10506[label="1;106pkt 106fpkt"];
7492--10506[label="0.333333;1pkt 1fpkt"];
7492--10698[label="0.333333;1pkt 1fpkt"];
9360--13048[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.121.103" src_port="53"/>
      <filter src_ip="167.209.30.92" src_port="53"/>
      <filter dst_port="53" src_ip="167.209.121.103" src_port="49733"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
4020[label="101.207.77.40;d;21pkt 21fpkt", shape=diamond, color=yellow];
4021[label="166.73.194.30;s;36pkt 36fpkt", shape=diamond, color=yellow];
7592[label="101.207.77.40;d;18pkt 18fpkt", shape=hexagon, color=black];
9475[label="166.73.194.30;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{166.73.194.30:80, 101.207.77.40:*}[56.4103%]&lt;BR/&gt;{166.73.194.30:80, 151.25.17.7:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65149: (1.76991%)&lt;BR/&gt; 63745: (1.76991%)&lt;BR/&gt; 59133: (1.76991%)&lt;BR/&gt; 54310: (1.76991%)&gt;];
}
4020--4021[label="0.952381;20pkt 20fpkt"];
4020--7592[label="1;18pkt 18fpkt"];
4020--8590[label="0.047619;1pkt 1fpkt"];
4020--8610[label="0.0952381;2pkt 2fpkt"];
4020--8633[label="0.047619;1pkt 1fpkt"];
4020--8710[label="0.047619;1pkt 1fpkt"];
4020--8730[label="0.0952381;2pkt 2fpkt"];
4020--8753[label="0.047619;1pkt 1fpkt"];
4020--8828[label="0.047619;1pkt 1fpkt"];
4020--8846[label="0.0952381;2pkt 2fpkt"];
4020--8869[label="0.047619;1pkt 1fpkt"];
4020--9475[label="0.952381;20pkt 20fpkt"];
4021--7592[label="0.944444;17pkt 17fpkt"];
4021--8590[label="0.0277778;1pkt 1fpkt"];
4021--8610[label="0.0555556;2pkt 2fpkt"];
4021--8633[label="0.0555556;2pkt 2fpkt"];
4021--8710[label="0.0277778;1pkt 1fpkt"];
4021--8730[label="0.0555556;2pkt 2fpkt"];
4021--8753[label="0.0555556;2pkt 2fpkt"];
4021--8828[label="0.0277778;1pkt 1fpkt"];
4021--8846[label="0.0555556;2pkt 2fpkt"];
4021--8869[label="0.0555556;2pkt 2fpkt"];
4021--9475[label="1;36pkt 36fpkt"];
7592--8590[label="0.0555556;1pkt 1fpkt"];
7592--8610[label="0.111111;2pkt 2fpkt"];
7592--8633[label="0.0555556;1pkt 1fpkt"];
7592--8710[label="0.0555556;1pkt 1fpkt"];
7592--8730[label="0.111111;2pkt 2fpkt"];
7592--8753[label="0.0555556;1pkt 1fpkt"];
7592--8828[label="0.0555556;1pkt 1fpkt"];
7592--8846[label="0.111111;2pkt 2fpkt"];
7592--8869[label="0.0555556;1pkt 1fpkt"];
7592--9475[label="0.944444;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.77.40" src_ip="166.73.194.30" src_port="80"/>
      <filter dst_ip="151.25.17.7" src_ip="166.73.194.30" src_port="80"/>
    </slice>
    <from sec="1207285236" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_191{
style=filled;
color=gray75;
4536[label="14.118.3.48;s;190pkt 190fpkt", shape=diamond, color=yellow];
7660[label="14.118.3.48;s;190pkt 190fpkt", shape=hexagon, color=black];
9766[label="14.118.3.48;190pkt 190fpkt", shape=pentagon, color=darkviolet];
stat191[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.118.3.48:*, *:445}[53.6842%]&lt;BR/&gt;{14.118.3.48:*, *:139}[46.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (26.8421%)&lt;BR/&gt; 139: (23.1579%)&lt;BR/&gt; 4992: (0.263158%)&lt;BR/&gt; 4961: (0.263158%)&lt;BR/&gt; 4895: (0.263158%)&gt;];
}
4536--7660[label="1;190pkt 190fpkt"];
4536--9766[label="1;190pkt 190fpkt"];
7660--9766[label="1;190pkt 190fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="14.118.3.48"/>
      <filter dst_port="139" src_ip="14.118.3.48"/>
    </slice>
    <from sec="1207285775" usec="0"/>
    <to sec="1207285825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
3868[label="167.209.3.243;s;156pkt 156fpkt", shape=diamond, color=yellow];
7715[label="167.209.3.243;s;156pkt 156fpkt", shape=hexagon, color=black];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.3.243:139, 192.168.80.1:*}[50%]&lt;BR/&gt;{167.209.3.243:139, 192.168.201.1:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 3504: (0.320513%)&lt;BR/&gt; 3503: (0.320513%)&lt;BR/&gt; 3496: (0.320513%)&lt;BR/&gt; 3495: (0.320513%)&gt;];
}
3868--7715[label="1;156pkt 156fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.201.1" src_ip="167.209.3.243" src_port="139"/>
      <filter dst_ip="192.168.80.1" src_ip="167.209.3.243" src_port="139"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
3878[label="213.61.121.9;d;622pkt 622fpkt", shape=diamond, color=yellow];
7727[label="213.61.121.9;d;558pkt 558fpkt", shape=hexagon, color=black];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 213.61.121.9:20129}[68.8103%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (83.178%)&lt;BR/&gt; 0: (0.847458%)&lt;BR/&gt; 5051: (0.338983%)&lt;BR/&gt; 34856: (0.254237%)&lt;BR/&gt; 1027: (0.254237%)&gt;];
}
3878--5894[label="0.00160772;1pkt 1fpkt"];
3878--7727[label="1;558pkt 558fpkt"];
3878--8238[label="0.00160772;1pkt 1fpkt"];
3878--8604[label="0.00160772;1pkt 1fpkt"];
3878--8724[label="0.00160772;1pkt 1fpkt"];
3878--8840[label="0.00160772;1pkt 1fpkt"];
3878--9863[label="0.00160772;1pkt 1fpkt"];
3878--12625[label="0.0108696;2pkt 2fpkt"];
3878--13280[label="0.00160772;1pkt 1fpkt"];
3878--14606[label="0.0108696;2pkt 2fpkt"];
3878--14900[label="0.00160772;1pkt 1fpkt"];
3878--15489[label="0.0108696;2pkt 2fpkt"];
7727--8238[label="0.00179211;1pkt 1fpkt"];
7727--8604[label="0.00179211;1pkt 1fpkt"];
7727--8724[label="0.00179211;1pkt 1fpkt"];
7727--8840[label="0.00179211;1pkt 1fpkt"];
7727--9863[label="0.00179211;1pkt 1fpkt"];
7727--12625[label="0.0108696;2pkt 2fpkt"];
7727--13280[label="0.00179211;1pkt 1fpkt"];
7727--14606[label="0.0108696;2pkt 2fpkt"];
7727--14900[label="0.00179211;1pkt 1fpkt"];
7727--15489[label="0.0108696;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.61.121.9" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
4624[label="167.209.170.240;s;23pkt 23fpkt", shape=diamond, color=yellow];
7729[label="167.209.170.240;s;21pkt 21fpkt", shape=hexagon, color=black];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.170.240:23419, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23419: (50%)&lt;BR/&gt; 65014: (2.27273%)&lt;BR/&gt; 64889: (2.27273%)&lt;BR/&gt; 61207: (2.27273%)&lt;BR/&gt; 59980: (2.27273%)&gt;];
}
4624--7729[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.170.240" src_port="23419"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.09476,1.93947,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
4638[label="216.227.155.102;s;40pkt 40fpkt", shape=diamond, color=yellow];
7743[label="216.227.155.102;s;32pkt 32fpkt", shape=hexagon, color=black];
10688[label="216.227.155.102;40pkt 40fpkt", shape=pentagon, color=darkviolet];
15084[label="216.227.155.102;39pkt 39fpkt", shape=invhouse, color=bisque];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.227.155.102:6667, *:*}[47.5%]&lt;BR/&gt;{216.227.155.102:*, 74.116.122.125:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (24.8344%)&lt;BR/&gt; 6663: (6.62252%)&lt;BR/&gt; 6666: (3.97351%)&lt;BR/&gt; 6662: (3.97351%)&lt;BR/&gt; 1038: (2.31788%)&gt;];
}
4638--7743[label="1;32pkt 32fpkt"];
4638--10688[label="1;40pkt 40fpkt"];
4638--15084[label="1;39pkt 39fpkt"];
7743--10688[label="1;32pkt 32fpkt"];
7743--15084[label="0.96875;31pkt 31fpkt"];
10688--15084[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="74.116.122.125" src_ip="216.227.155.102"/>
      <filter src_ip="216.227.155.102" src_port="6667"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_196{
style=filled;
color=gray75;
4230[label="213.51.26.58;s;179pkt 179fpkt", shape=diamond, color=yellow];
7489[label="213.51.26.58;s;165pkt 165fpkt", shape=hexagon, color=black];
9908[label="213.51.26.58;193pkt 193fpkt", shape=pentagon, color=darkviolet];
stat196[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.51.26.58:32942, *:53}[89.6373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7207%)&lt;BR/&gt; 32942: (44.4134%)&lt;BR/&gt; 20658: (0.27933%)&lt;BR/&gt; 6000: (0.27933%)&lt;BR/&gt; 3182: (0.27933%)&gt;];
}
4230--4247[label="0.00840336;1pkt 1fpkt"];
4230--4294[label="0.015625;1pkt 1fpkt"];
4230--4311[label="0.00775194;1pkt 1fpkt"];
4230--4593[label="0.00704225;1pkt 1fpkt"];
4230--4664[label="0.0172414;1pkt 1fpkt"];
4230--6033[label="0.00704225;1pkt 1fpkt"];
4230--6391[label="0.010101;1pkt 1fpkt"];
4230--6406[label="0.0169492;1pkt 1fpkt"];
4230--6478[label="0.00653595;1pkt 1fpkt"];
4230--6792[label="0.00990099;1pkt 1fpkt"];
4230--7288[label="0.00847458;1pkt 1fpkt"];
4230--7471[label="0.00724638;1pkt 1fpkt"];
4230--7482[label="0.00884956;1pkt 1fpkt"];
4230--7489[label="1;165pkt 165fpkt"];
4230--7759[label="0.0188679;1pkt 1fpkt"];
4230--7896[label="0.00578035;1pkt 1fpkt"];
4230--7961[label="0.015625;1pkt 1fpkt"];
4230--7979[label="0.00775194;1pkt 1fpkt"];
4230--9908[label="1;179pkt 179fpkt"];
7489--7759[label="0.0188679;1pkt 1fpkt"];
7489--7896[label="0.00606061;1pkt 1fpkt"];
7489--7961[label="0.015625;1pkt 1fpkt"];
7489--7979[label="0.00775194;1pkt 1fpkt"];
7489--9908[label="1;165pkt 165fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="213.51.26.58" src_port="32942"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
853[label="144.106.75.80;d;229pkt 229fpkt", shape=diamond, color=yellow];
3124[label="109.144.120.66;s;2pkt 2fpkt", shape=diamond, color=yellow];
3580[label="116.123.5.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
3882[label="116.20.55.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
5385[label="144.106.75.80;d;171pkt 171fpkt", shape=hexagon, color=black];
7794[label="109.144.120.66;s;2pkt 2fpkt", shape=hexagon, color=black];
11009[label="106.102.26.123;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11567[label="113.48.86.160;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12360[label="97.198.25.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.106.75.80:21}[89.5197%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (45%)&lt;BR/&gt; 0: (8.53659%)&lt;BR/&gt; 35352: (1.09756%)&lt;BR/&gt; 51413: (0.731707%)&lt;BR/&gt; 4440: (0.731707%)&gt;];
}
853--3124[label="1;2pkt 2fpkt"];
853--3580[label="1;1pkt 1fpkt"];
853--3882[label="1;1pkt 1fpkt"];
853--5385[label="1;171pkt 171fpkt"];
853--7794[label="1;2pkt 2fpkt"];
853--11009[label="1;1pkt 1fpkt"];
853--11567[label="1;2pkt 2fpkt"];
853--12360[label="1;1pkt 1fpkt"];
3124--5385[label="1;2pkt 2fpkt"];
3124--7794[label="1;2pkt 2fpkt"];
3580--5385[label="1;1pkt 1fpkt"];
3882--5385[label="1;1pkt 1fpkt"];
5385--7794[label="1;2pkt 2fpkt"];
5385--11009[label="1;1pkt 1fpkt"];
5385--11567[label="1;2pkt 2fpkt"];
5385--12360[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.75.80" dst_port="21"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
3192[label="149.82.21.237;s;32pkt 32fpkt", shape=diamond, color=yellow];
3236[label="164.86.34.67;d;7pkt 7fpkt", shape=diamond, color=yellow];
7022[label="164.86.34.67;d;5pkt 5fpkt", shape=hexagon, color=black];
7816[label="149.82.21.237;s;32pkt 32fpkt", shape=hexagon, color=black];
12644[label="149.82.21.237;32pkt 32fpkt", shape=pentagon, color=darkviolet];
14615[label="149.82.21.237;32pkt 32fpkt", shape=invtriangle, color=brown];
15493[label="149.82.21.237;32pkt 32fpkt", shape=invhouse, color=bisque];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.21.237:*, 164.86.34.6:80}[40.625%]&lt;BR/&gt;{149.82.21.237:*, 204.194.162.90:443}[28.125%]&lt;BR/&gt;{149.82.21.237:*, 164.86.34.67:80}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.9186%)&lt;BR/&gt; 443: (13.0814%)&lt;BR/&gt; 1249: (2.03488%)&lt;BR/&gt; 1248: (2.03488%)&lt;BR/&gt; 1247: (2.03488%)&gt;];
}
3192--3236[label="1;7pkt 7fpkt"];
3192--7022[label="1;5pkt 5fpkt"];
3192--7816[label="1;32pkt 32fpkt"];
3192--8688[label="0.09375;3pkt 3fpkt"];
3192--8807[label="0.09375;3pkt 3fpkt"];
3192--8923[label="0.09375;3pkt 3fpkt"];
3192--12644[label="1;32pkt 32fpkt"];
3192--14615[label="1;32pkt 32fpkt"];
3192--15493[label="1;32pkt 32fpkt"];
3236--7022[label="1;5pkt 5fpkt"];
3236--7816[label="1;7pkt 7fpkt"];
3236--12644[label="1;7pkt 7fpkt"];
3236--14615[label="1;7pkt 7fpkt"];
3236--15493[label="1;7pkt 7fpkt"];
7022--7816[label="1;5pkt 5fpkt"];
7022--12644[label="1;5pkt 5fpkt"];
7022--14615[label="1;5pkt 5fpkt"];
7022--15493[label="1;5pkt 5fpkt"];
7816--8688[label="0.09375;3pkt 3fpkt"];
7816--8807[label="0.09375;3pkt 3fpkt"];
7816--8923[label="0.09375;3pkt 3fpkt"];
7816--12644[label="1;32pkt 32fpkt"];
7816--14615[label="1;32pkt 32fpkt"];
7816--15493[label="1;32pkt 32fpkt"];
12644--14615[label="1;32pkt 32fpkt"];
12644--15493[label="1;32pkt 32fpkt"];
14615--15493[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="164.86.34.6" dst_port="80" src_ip="149.82.21.237"/>
      <filter dst_ip="204.194.162.90" dst_port="443" src_ip="149.82.21.237"/>
      <filter dst_ip="164.86.34.67" dst_port="80" src_ip="149.82.21.237"/>
    </slice>
    <from sec="1207285339" usec="0"/>
    <to sec="1207285800" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
4822[label="200.20.158.9;d;7pkt 7fpkt", shape=diamond, color=yellow];
4840[label="149.82.150.205;s;18pkt 18fpkt", shape=diamond, color=yellow];
7853[label="200.20.158.9;d;6pkt 6fpkt", shape=hexagon, color=black];
12209[label="149.82.150.205;27pkt 27fpkt", shape=pentagon, color=darkviolet];
14403[label="149.82.150.205;27pkt 27fpkt", shape=invtriangle, color=brown];
15397[label="149.82.150.205;27pkt 27fpkt", shape=invhouse, color=bisque];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.150.205:*, *:80}[89.6552%]&lt;BR/&gt;{*:*, 200.20.158.9:80}[24.1379%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6607%)&lt;BR/&gt; 2336: (2.67857%)&lt;BR/&gt; 2332: (2.67857%)&lt;BR/&gt; 2329: (2.67857%)&lt;BR/&gt; 2327: (2.67857%)&gt;];
}
4822--4840[label="0.714286;5pkt 5fpkt"];
4822--7853[label="1;6pkt 6fpkt"];
4822--12209[label="0.714286;5pkt 5fpkt"];
4822--14403[label="0.714286;5pkt 5fpkt"];
4822--15397[label="0.714286;5pkt 5fpkt"];
4840--7853[label="0.833333;5pkt 5fpkt"];
4840--12209[label="1;18pkt 18fpkt"];
4840--14403[label="1;18pkt 18fpkt"];
4840--15397[label="1;18pkt 18fpkt"];
7853--12209[label="0.833333;5pkt 5fpkt"];
7853--14403[label="0.833333;5pkt 5fpkt"];
7853--15397[label="0.833333;5pkt 5fpkt"];
12209--14403[label="1;27pkt 27fpkt"];
12209--15397[label="1;27pkt 27fpkt"];
14403--15397[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.82.150.205"/>
      <filter dst_ip="200.20.158.9" dst_port="80"/>
    </slice>
    <from sec="1207285614" usec="0"/>
    <to sec="1207286042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.776896,2.08584,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="197.205.80.27"/>
      <from sec="1207285851" usec="0"/>
      <to sec="1207285938" usec="0"/>
    </slice>
    <from sec="1207285851" usec="0"/>
    <to sec="1207285938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1586[label="160.86.213.20;d;2905pkt 2905fpkt", shape=diamond, color=yellow];
4927[label="75.5.240.111;s;67pkt 67fpkt", shape=diamond, color=yellow];
6327[label="160.86.213.20;d;2134pkt 2134fpkt", shape=hexagon, color=black];
7902[label="75.5.240.111;s;67pkt 67fpkt", shape=hexagon, color=black];
9601[label="216.212.219.37;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10845[label="75.5.240.111;73pkt 73fpkt", shape=pentagon, color=darkviolet];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.86.213.20:48662}[58.8801%]&lt;BR/&gt;{*:*, 160.86.213.20:34723}[38.6809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48662: (31.4942%)&lt;BR/&gt; 34723: (17.4671%)&lt;BR/&gt; 0: (2.03926%)&lt;BR/&gt; 6881: (0.457404%)&lt;BR/&gt; 16001: (0.25729%)&gt;];
}
1586--4167[label="0.000688468;2pkt 2fpkt"];
1586--4927[label="1;67pkt 67fpkt"];
1586--6327[label="1;2134pkt 2134fpkt"];
1586--7432[label="0.000688468;2pkt 2fpkt"];
1586--7902[label="1;67pkt 67fpkt"];
1586--8413[label="0.000688468;2pkt 2fpkt"];
1586--8669[label="0.000344234;1pkt 1fpkt"];
1586--8670[label="0.000403063;1pkt 1fpkt"];
1586--8679[label="0.000344234;1pkt 1fpkt"];
1586--8680[label="0.000344234;1pkt 1fpkt"];
1586--8789[label="0.000344234;1pkt 1fpkt"];
1586--8790[label="0.000402901;1pkt 1fpkt"];
1586--8799[label="0.000344234;1pkt 1fpkt"];
1586--8800[label="0.000344234;1pkt 1fpkt"];
1586--8905[label="0.000344234;1pkt 1fpkt"];
1586--8906[label="0.000403063;1pkt 1fpkt"];
1586--8915[label="0.000344234;1pkt 1fpkt"];
1586--8916[label="0.000344234;1pkt 1fpkt"];
1586--9601[label="1;1pkt 1fpkt"];
1586--10845[label="0.917808;67pkt 67fpkt"];
1586--12263[label="0.000688468;2pkt 2fpkt"];
1586--14432[label="0.000688468;2pkt 2fpkt"];
1586--15405[label="0.000688468;2pkt 2fpkt"];
4927--6327[label="0.791045;53pkt 53fpkt"];
4927--7902[label="1;67pkt 67fpkt"];
4927--10845[label="1;67pkt 67fpkt"];
6327--7432[label="0.000937207;2pkt 2fpkt"];
6327--7902[label="0.791045;53pkt 53fpkt"];
6327--8413[label="0.000937207;2pkt 2fpkt"];
6327--8669[label="0.000468604;1pkt 1fpkt"];
6327--8670[label="0.000468604;1pkt 1fpkt"];
6327--8679[label="0.000468604;1pkt 1fpkt"];
6327--8680[label="0.000468604;1pkt 1fpkt"];
6327--8789[label="0.000468604;1pkt 1fpkt"];
6327--8790[label="0.000468604;1pkt 1fpkt"];
6327--8799[label="0.000468604;1pkt 1fpkt"];
6327--8800[label="0.000468604;1pkt 1fpkt"];
6327--8905[label="0.000468604;1pkt 1fpkt"];
6327--8906[label="0.000468604;1pkt 1fpkt"];
6327--8915[label="0.000468604;1pkt 1fpkt"];
6327--8916[label="0.000468604;1pkt 1fpkt"];
6327--9601[label="1;1pkt 1fpkt"];
6327--10845[label="0.726027;53pkt 53fpkt"];
6327--12263[label="0.000937207;2pkt 2fpkt"];
6327--14432[label="0.000937207;2pkt 2fpkt"];
6327--15405[label="0.000937207;2pkt 2fpkt"];
7902--10845[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.213.20" dst_port="48662"/>
      <filter dst_ip="160.86.213.20" dst_port="34723"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
4932[label="213.61.120.12;s;353pkt 353fpkt", shape=diamond, color=yellow];
7917[label="213.61.120.12;s;353pkt 353fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.120.12:53, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (53.3994%)&lt;BR/&gt; 32768: (3.11615%)&lt;BR/&gt; 5302: (0.566572%)&lt;BR/&gt; 32771: (0.424929%)&lt;BR/&gt; 4096: (0.424929%)&gt;];
}
4932--4984[label="0.00283286;1pkt 1fpkt"];
4932--7225[label="0.0113314;4pkt 4fpkt"];
4932--7917[label="1;353pkt 353fpkt"];
4932--7971[label="0.00283286;1pkt 1fpkt"];
4932--8387[label="0.0113314;4pkt 4fpkt"];
4932--8536[label="0.00283286;1pkt 1fpkt"];
4932--8603[label="0.00283286;1pkt 1fpkt"];
4932--8614[label="0.00849858;3pkt 3fpkt"];
4932--8684[label="0.00566572;2pkt 2fpkt"];
4932--8692[label="0.00566572;2pkt 2fpkt"];
4932--8723[label="0.00283286;1pkt 1fpkt"];
4932--8734[label="0.00849858;3pkt 3fpkt"];
4932--8803[label="0.00566572;2pkt 2fpkt"];
4932--8811[label="0.00566572;2pkt 2fpkt"];
4932--8839[label="0.00283286;1pkt 1fpkt"];
4932--8850[label="0.00849858;3pkt 3fpkt"];
4932--8919[label="0.00566572;2pkt 2fpkt"];
4932--8927[label="0.00566572;2pkt 2fpkt"];
7917--7971[label="0.00283286;1pkt 1fpkt"];
7917--8387[label="0.0113314;4pkt 4fpkt"];
7917--8536[label="0.00283286;1pkt 1fpkt"];
7917--8603[label="0.00283286;1pkt 1fpkt"];
7917--8614[label="0.00849858;3pkt 3fpkt"];
7917--8684[label="0.00566572;2pkt 2fpkt"];
7917--8692[label="0.00566572;2pkt 2fpkt"];
7917--8723[label="0.00283286;1pkt 1fpkt"];
7917--8734[label="0.00849858;3pkt 3fpkt"];
7917--8803[label="0.00566572;2pkt 2fpkt"];
7917--8811[label="0.00566572;2pkt 2fpkt"];
7917--8839[label="0.00283286;1pkt 1fpkt"];
7917--8850[label="0.00849858;3pkt 3fpkt"];
7917--8919[label="0.00566572;2pkt 2fpkt"];
7917--8927[label="0.00566572;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="213.61.120.12" src_port="53"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
2447[label="185.129.66.130;s;30pkt 30fpkt", shape=diamond, color=yellow];
3021[label="101.207.71.103;d;36pkt 36fpkt", shape=diamond, color=yellow];
6816[label="101.207.71.103;d;24pkt 24fpkt", shape=hexagon, color=black];
7940[label="185.129.66.130;s;30pkt 30fpkt", shape=hexagon, color=black];
11116[label="185.129.66.130;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.129.66.130:80, 101.207.71.103:*}[84.2105%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57633: (1.65563%)&lt;BR/&gt; 56969: (1.65563%)&lt;BR/&gt; 54205: (1.65563%)&lt;BR/&gt; 53476: (1.65563%)&gt;];
}
2447--3021[label="1;30pkt 30fpkt"];
2447--6816[label="0.833333;20pkt 20fpkt"];
2447--7940[label="1;30pkt 30fpkt"];
2447--8590[label="0.0666667;2pkt 2fpkt"];
2447--8610[label="0.0666667;2pkt 2fpkt"];
2447--8633[label="0.0666667;2pkt 2fpkt"];
2447--8710[label="0.0666667;2pkt 2fpkt"];
2447--8730[label="0.0666667;2pkt 2fpkt"];
2447--8753[label="0.0666667;2pkt 2fpkt"];
2447--8828[label="0.0666667;2pkt 2fpkt"];
2447--8846[label="0.0666667;2pkt 2fpkt"];
2447--8869[label="0.0666667;2pkt 2fpkt"];
2447--11116[label="0.966667;29pkt 29fpkt"];
3021--6816[label="1;24pkt 24fpkt"];
3021--7940[label="1;30pkt 30fpkt"];
3021--8590[label="0.0555556;2pkt 2fpkt"];
3021--8610[label="0.0555556;2pkt 2fpkt"];
3021--8633[label="0.0833333;3pkt 3fpkt"];
3021--8710[label="0.0555556;2pkt 2fpkt"];
3021--8730[label="0.0555556;2pkt 2fpkt"];
3021--8753[label="0.0833333;3pkt 3fpkt"];
3021--8828[label="0.0555556;2pkt 2fpkt"];
3021--8846[label="0.0555556;2pkt 2fpkt"];
3021--8869[label="0.0833333;3pkt 3fpkt"];
3021--11116[label="0.935484;29pkt 29fpkt"];
6816--7940[label="0.833333;20pkt 20fpkt"];
6816--8590[label="0.0833333;2pkt 2fpkt"];
6816--8610[label="0.0833333;2pkt 2fpkt"];
6816--8633[label="0.0416667;1pkt 1fpkt"];
6816--8710[label="0.0833333;2pkt 2fpkt"];
6816--8730[label="0.0833333;2pkt 2fpkt"];
6816--8753[label="0.0416667;1pkt 1fpkt"];
6816--8828[label="0.0833333;2pkt 2fpkt"];
6816--8846[label="0.0833333;2pkt 2fpkt"];
6816--8869[label="0.0416667;1pkt 1fpkt"];
6816--11116[label="0.791667;19pkt 19fpkt"];
7940--8590[label="0.0666667;2pkt 2fpkt"];
7940--8610[label="0.0666667;2pkt 2fpkt"];
7940--8633[label="0.0666667;2pkt 2fpkt"];
7940--8710[label="0.0666667;2pkt 2fpkt"];
7940--8730[label="0.0666667;2pkt 2fpkt"];
7940--8753[label="0.0666667;2pkt 2fpkt"];
7940--8828[label="0.0666667;2pkt 2fpkt"];
7940--8846[label="0.0666667;2pkt 2fpkt"];
7940--8869[label="0.0666667;2pkt 2fpkt"];
7940--11116[label="0.966667;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.71.103" src_ip="185.129.66.130" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.0156,1.99101,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
2413[label="167.209.20.14;s;217pkt 217fpkt", shape=diamond, color=yellow];
2998[label="210.89.81.47;d;173pkt 173fpkt", shape=diamond, color=yellow];
7207[label="210.89.81.47;d;136pkt 136fpkt", shape=hexagon, color=black];
12966[label="167.209.20.14;238pkt 238fpkt", shape=invtriangle, color=brown];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.20.14:*, 210.89.81.47:80}[78.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7094%)&lt;BR/&gt; 1038: (0.719895%)&lt;BR/&gt; 53: (0.719895%)&lt;BR/&gt; 5354: (0.52356%)&lt;BR/&gt; 443: (0.39267%)&gt;];
}
2413--2994[label="0.038961;3pkt 3fpkt"];
2413--2998[label="1;173pkt 173fpkt"];
2413--3001[label="0.00729927;1pkt 1fpkt"];
2413--3036[label="0.0568182;10pkt 10fpkt"];
2413--3108[label="0.0166667;1pkt 1fpkt"];
2413--3472[label="0.047619;2pkt 2fpkt"];
2413--3931[label="0.0387097;6pkt 6fpkt"];
2413--4593[label="0.00704225;1pkt 1fpkt"];
2413--4711[label="0.0123457;1pkt 1fpkt"];
2413--5473[label="0.00460829;1pkt 1fpkt"];
2413--5474[label="0.00921659;2pkt 2fpkt"];
2413--6443[label="0.038961;3pkt 3fpkt"];
2413--7207[label="1;136pkt 136fpkt"];
2413--7506[label="0.00460829;1pkt 1fpkt"];
2413--7947[label="0.0568182;10pkt 10fpkt"];
2413--8199[label="0.00460829;1pkt 1fpkt"];
2413--8200[label="0.00921659;2pkt 2fpkt"];
2413--8526[label="0.038961;3pkt 3fpkt"];
2413--8612[label="0.0552995;12pkt 12fpkt"];
2413--8688[label="0.0737327;16pkt 16fpkt"];
2413--8732[label="0.0552995;12pkt 12fpkt"];
2413--8807[label="0.0737327;16pkt 16fpkt"];
2413--8847[label="0.0552995;12pkt 12fpkt"];
2413--8923[label="0.0737327;16pkt 16fpkt"];
2413--12966[label="0.990783;215pkt 215fpkt"];
2998--7207[label="1;136pkt 136fpkt"];
2998--8612[label="0.0578035;10pkt 10fpkt"];
2998--8688[label="0.0578035;10pkt 10fpkt"];
2998--8732[label="0.0578035;10pkt 10fpkt"];
2998--8807[label="0.0578035;10pkt 10fpkt"];
2998--8847[label="0.0578035;10pkt 10fpkt"];
2998--8923[label="0.0578035;10pkt 10fpkt"];
2998--12966[label="0.99422;172pkt 172fpkt"];
7207--8612[label="0.0735294;10pkt 10fpkt"];
7207--8688[label="0.0735294;10pkt 10fpkt"];
7207--8732[label="0.0735294;10pkt 10fpkt"];
7207--8807[label="0.0735294;10pkt 10fpkt"];
7207--8847[label="0.0735294;10pkt 10fpkt"];
7207--8923[label="0.0735294;10pkt 10fpkt"];
7207--12966[label="0.992647;135pkt 135fpkt"];
</description>
    <slice>
      <filter dst_ip="210.89.81.47" dst_port="80" src_ip="167.209.20.14"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
4648[label="185.129.76.222;s;57pkt 57fpkt", shape=diamond, color=yellow];
7952[label="185.129.76.222;s;57pkt 57fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.129.76.222:18955, 213.166.238.29:*}[35.0877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18955: (50%)&lt;BR/&gt; 63460: (0.877193%)&lt;BR/&gt; 63075: (0.877193%)&lt;BR/&gt; 63044: (0.877193%)&lt;BR/&gt; 62783: (0.877193%)&gt;];
}
4648--7952[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter dst_ip="213.166.238.29" src_ip="185.129.76.222" src_port="18955"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
4663[label="212.205.234.88;s;60pkt 60fpkt", shape=diamond, color=yellow];
5160[label="196.221.243.29;d;139pkt 139fpkt", shape=diamond, color=yellow];
7962[label="212.205.234.88;s;60pkt 60fpkt", shape=hexagon, color=black];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:4899, 196.221.243.29:*}[62.6263%]&lt;BR/&gt;{212.205.234.88:80, *:*}[29.798%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4899: (24.3243%)&lt;BR/&gt; 80: (22.7799%)&lt;BR/&gt; 0: (5.79151%)&lt;BR/&gt; 1295: (0.579151%)&lt;BR/&gt; 64336: (0.3861%)&gt;];
}
4663--5160[label="0.0166667;1pkt 1fpkt"];
4663--7962[label="1;60pkt 60fpkt"];
4663--8610[label="0.0333333;2pkt 2fpkt"];
4663--8633[label="0.0333333;2pkt 2fpkt"];
4663--8730[label="0.0333333;2pkt 2fpkt"];
4663--8753[label="0.0333333;2pkt 2fpkt"];
4663--8846[label="0.0333333;2pkt 2fpkt"];
4663--8869[label="0.0333333;2pkt 2fpkt"];
5160--5269[label="0.00719424;1pkt 1fpkt"];
5160--5757[label="0.00719424;1pkt 1fpkt"];
5160--7962[label="0.0166667;1pkt 1fpkt"];
5160--8240[label="0.00719424;1pkt 1fpkt"];
5160--9336[label="0.00806452;1pkt 1fpkt"];
5160--10924[label="0.00719424;1pkt 1fpkt"];
5160--13129[label="0.00719424;1pkt 1fpkt"];
5160--13786[label="0.00719424;1pkt 1fpkt"];
5160--14831[label="0.00719424;1pkt 1fpkt"];
7962--8610[label="0.0333333;2pkt 2fpkt"];
7962--8633[label="0.0333333;2pkt 2fpkt"];
7962--8730[label="0.0333333;2pkt 2fpkt"];
7962--8753[label="0.0333333;2pkt 2fpkt"];
7962--8846[label="0.0333333;2pkt 2fpkt"];
7962--8869[label="0.0333333;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="212.205.234.88" src_port="80"/>
      <filter dst_ip="196.221.243.29" src_port="4899"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
4317[label="216.43.90.16;s;321pkt 321fpkt", shape=diamond, color=yellow];
7981[label="216.43.90.16;s;321pkt 321fpkt", shape=hexagon, color=black];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.43.90.16:53, 123.6.72.93:*}[23.3645%]&lt;BR/&gt;{216.43.90.16:53, 121.81.53.93:*}[22.1184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.6231%)&lt;BR/&gt; 32771: (2.33645%)&lt;BR/&gt; 32768: (1.09034%)&lt;BR/&gt; 50454: (0.311526%)&lt;BR/&gt; 1065: (0.311526%)&gt;];
}
4317--7981[label="1;321pkt 321fpkt"];
4317--8603[label="0.00934579;3pkt 3fpkt"];
4317--8614[label="0.00934579;3pkt 3fpkt"];
4317--8684[label="0.0124611;4pkt 4fpkt"];
4317--8692[label="0.0124611;4pkt 4fpkt"];
4317--8723[label="0.00934579;3pkt 3fpkt"];
4317--8734[label="0.00934579;3pkt 3fpkt"];
4317--8803[label="0.0124611;4pkt 4fpkt"];
4317--8811[label="0.0124611;4pkt 4fpkt"];
4317--8839[label="0.00934579;3pkt 3fpkt"];
4317--8850[label="0.00934579;3pkt 3fpkt"];
4317--8919[label="0.0124611;4pkt 4fpkt"];
4317--8927[label="0.0124611;4pkt 4fpkt"];
7981--8603[label="0.00934579;3pkt 3fpkt"];
7981--8614[label="0.00934579;3pkt 3fpkt"];
7981--8684[label="0.0124611;4pkt 4fpkt"];
7981--8692[label="0.0124611;4pkt 4fpkt"];
7981--8723[label="0.00934579;3pkt 3fpkt"];
7981--8734[label="0.00934579;3pkt 3fpkt"];
7981--8803[label="0.0124611;4pkt 4fpkt"];
7981--8811[label="0.0124611;4pkt 4fpkt"];
7981--8839[label="0.00934579;3pkt 3fpkt"];
7981--8850[label="0.00934579;3pkt 3fpkt"];
7981--8919[label="0.0124611;4pkt 4fpkt"];
7981--8927[label="0.0124611;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="123.6.72.93" src_ip="216.43.90.16" src_port="53"/>
      <filter dst_ip="121.81.53.93" src_ip="216.43.90.16" src_port="53"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.949618,2.02535,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
5023[label="160.86.213.87;s;11pkt 11fpkt", shape=diamond, color=yellow];
8009[label="160.86.213.87;s;11pkt 11fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.213.87:*, 99.215.81.13:80}[54.5455%]&lt;BR/&gt;{160.86.213.87:*, 212.79.197.46:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40.9091%)&lt;BR/&gt; 60216: (4.54545%)&lt;BR/&gt; 60207: (4.54545%)&lt;BR/&gt; 60206: (4.54545%)&lt;BR/&gt; 60205: (4.54545%)&gt;];
}
5023--8009[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="212.79.197.46" src_ip="160.86.213.87"/>
      <filter dst_ip="99.215.81.13" dst_port="80" src_ip="160.86.213.87"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
4001[label="101.207.77.154;d;24pkt 24fpkt", shape=diamond, color=yellow];
5035[label="185.129.74.117;s;26pkt 26fpkt", shape=diamond, color=yellow];
8024[label="185.129.74.117;s;26pkt 26fpkt", shape=hexagon, color=black];
10930[label="185.129.74.117;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12372[label="160.67.150.215;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.129.74.117:80, 101.207.77.154:*}[96.5517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65076: (1.90476%)&lt;BR/&gt; 64746: (1.90476%)&lt;BR/&gt; 63698: (1.90476%)&lt;BR/&gt; 62592: (1.90476%)&gt;];
}
4001--5035[label="0.958333;23pkt 23fpkt"];
4001--8024[label="0.958333;23pkt 23fpkt"];
4001--8590[label="0.0416667;1pkt 1fpkt"];
4001--8610[label="0.0833333;2pkt 2fpkt"];
4001--8633[label="0.0833333;2pkt 2fpkt"];
4001--8710[label="0.0416667;1pkt 1fpkt"];
4001--8730[label="0.0833333;2pkt 2fpkt"];
4001--8753[label="0.0833333;2pkt 2fpkt"];
4001--8828[label="0.0416667;1pkt 1fpkt"];
4001--8846[label="0.0833333;2pkt 2fpkt"];
4001--8869[label="0.0833333;2pkt 2fpkt"];
4001--10930[label="0.958333;23pkt 23fpkt"];
4001--12372[label="1;1pkt 1fpkt"];
5035--8024[label="1;26pkt 26fpkt"];
5035--8590[label="0.0384615;1pkt 1fpkt"];
5035--8610[label="0.0769231;2pkt 2fpkt"];
5035--8633[label="0.0769231;2pkt 2fpkt"];
5035--8710[label="0.0384615;1pkt 1fpkt"];
5035--8730[label="0.0769231;2pkt 2fpkt"];
5035--8753[label="0.0769231;2pkt 2fpkt"];
5035--8828[label="0.0384615;1pkt 1fpkt"];
5035--8846[label="0.0769231;2pkt 2fpkt"];
5035--8869[label="0.0769231;2pkt 2fpkt"];
5035--10930[label="1;26pkt 26fpkt"];
8024--8590[label="0.0384615;1pkt 1fpkt"];
8024--8610[label="0.0769231;2pkt 2fpkt"];
8024--8633[label="0.0769231;2pkt 2fpkt"];
8024--8710[label="0.0384615;1pkt 1fpkt"];
8024--8730[label="0.0769231;2pkt 2fpkt"];
8024--8753[label="0.0769231;2pkt 2fpkt"];
8024--8828[label="0.0384615;1pkt 1fpkt"];
8024--8846[label="0.0769231;2pkt 2fpkt"];
8024--8869[label="0.0769231;2pkt 2fpkt"];
8024--10930[label="1;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.77.154" src_ip="185.129.74.117" src_port="80"/>
    </slice>
    <from sec="1207285218" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
593[label="160.188.216.155;d;1654pkt 1654fpkt", shape=diamond, color=yellow];
745[label="8.104.18.165;s;3pkt 3fpkt", shape=diamond, color=yellow];
957[label="105.169.192.176;s;5pkt 5fpkt", shape=diamond, color=yellow];
4109[label="96.7.11.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
5413[label="105.169.192.176;s;5pkt 5fpkt", shape=hexagon, color=black];
5940[label="160.188.216.155;d;1362pkt 1362fpkt", shape=hexagon, color=black];
5965[label="8.104.18.165;s;3pkt 3fpkt", shape=hexagon, color=black];
8082[label="96.7.11.236;s;1pkt 1fpkt", shape=hexagon, color=black];
8977[label="76.25.141.2;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11652[label="8.104.18.165;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12634[label="96.7.11.236;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14610[label="96.7.11.236;1pkt 1fpkt", shape=invtriangle, color=brown];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.188.216.155:63789}[88.7009%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63789: (43.906%)&lt;BR/&gt; 0: (4.13929%)&lt;BR/&gt; 6881: (2.51314%)&lt;BR/&gt; 50000: (0.476347%)&lt;BR/&gt; 13149: (0.377792%)&gt;];
}
593--745[label="1;3pkt 3fpkt"];
593--957[label="1;5pkt 5fpkt"];
593--4109[label="1;1pkt 1fpkt"];
593--5413[label="1;5pkt 5fpkt"];
593--5940[label="1;1362pkt 1362fpkt"];
593--5965[label="1;3pkt 3fpkt"];
593--8082[label="1;1pkt 1fpkt"];
593--8977[label="0.857143;6pkt 6fpkt"];
593--11652[label="1;1pkt 1fpkt"];
593--12634[label="1;1pkt 1fpkt"];
593--14610[label="1;1pkt 1fpkt"];
745--5940[label="1;3pkt 3fpkt"];
745--5965[label="1;3pkt 3fpkt"];
745--11652[label="1;1pkt 1fpkt"];
957--5413[label="1;5pkt 5fpkt"];
957--5940[label="1;5pkt 5fpkt"];
4109--5940[label="1;1pkt 1fpkt"];
4109--8082[label="1;1pkt 1fpkt"];
4109--12634[label="1;1pkt 1fpkt"];
4109--14610[label="1;1pkt 1fpkt"];
5413--5940[label="1;5pkt 5fpkt"];
5940--5965[label="1;3pkt 3fpkt"];
5940--8082[label="1;1pkt 1fpkt"];
5940--8977[label="0.857143;6pkt 6fpkt"];
5940--11652[label="1;1pkt 1fpkt"];
5940--12634[label="1;1pkt 1fpkt"];
5940--14610[label="1;1pkt 1fpkt"];
5965--11652[label="1;1pkt 1fpkt"];
8082--12634[label="1;1pkt 1fpkt"];
8082--14610[label="1;1pkt 1fpkt"];
12634--14610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.216.155" dst_port="63789"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967013,1.96331,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
1461[label="167.209.84.204;d;81pkt 81fpkt", shape=diamond, color=yellow];
9781[label="196.12.69.49;68pkt 68fpkt", shape=pentagon, color=darkviolet];
13248[label="196.12.69.49;68pkt 68fpkt", shape=invtriangle, color=brown];
14883[label="196.12.69.49;68pkt 68fpkt", shape=invhouse, color=bisque];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.12.69.49:80, 167.209.84.204:*}[83.9506%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3140: (0.701754%)&lt;BR/&gt; 3138: (0.701754%)&lt;BR/&gt; 3136: (0.701754%)&lt;BR/&gt; 3134: (0.701754%)&gt;];
}
1461--1888[label="0.0493827;4pkt 4fpkt"];
1461--3543[label="0.0493827;4pkt 4fpkt"];
1461--4272[label="0.0246914;2pkt 2fpkt"];
1461--5742[label="0.0493827;4pkt 4fpkt"];
1461--7784[label="0.0493827;4pkt 4fpkt"];
1461--9781[label="1;68pkt 68fpkt"];
1461--13248[label="1;68pkt 68fpkt"];
1461--14883[label="1;68pkt 68fpkt"];
9781--13248[label="1;68pkt 68fpkt"];
9781--14883[label="1;68pkt 68fpkt"];
13248--14883[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.84.204" src_ip="196.12.69.49" src_port="80"/>
    </slice>
    <from sec="1207285232" usec="0"/>
    <to sec="1207285304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
4087[label="167.209.8.158;d;24pkt 24fpkt", shape=diamond, color=yellow];
4198[label="160.228.186.77;s;8pkt 8fpkt", shape=diamond, color=yellow];
8109[label="160.228.186.77;s;8pkt 8fpkt", shape=hexagon, color=black];
10227[label="160.228.186.77;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13456[label="160.228.186.77;8pkt 8fpkt", shape=invtriangle, color=brown];
14975[label="160.228.186.77;8pkt 8fpkt", shape=invhouse, color=bisque];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.228.186.77:80, 167.209.8.158:*}[33.3333%]&lt;BR/&gt;{75.50.67.84:80, 167.209.8.158:*}[25%]&lt;BR/&gt;{204.157.216.25:80, 167.209.8.158:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2188%)&lt;BR/&gt; 2452: (4.6875%)&lt;BR/&gt; 2451: (4.6875%)&lt;BR/&gt; 2449: (4.6875%)&lt;BR/&gt; 2448: (4.6875%)&gt;];
}
4087--4198[label="1;8pkt 8fpkt"];
4087--6472[label="0.125;3pkt 3fpkt"];
4087--7566[label="0.0833333;2pkt 2fpkt"];
4087--7695[label="0.0416667;1pkt 1fpkt"];
4087--8109[label="1;8pkt 8fpkt"];
4087--8487[label="0.0833333;2pkt 2fpkt"];
4087--8633[label="0.208333;5pkt 5fpkt"];
4087--8753[label="0.208333;5pkt 5fpkt"];
4087--8869[label="0.208333;5pkt 5fpkt"];
4087--10227[label="1;8pkt 8fpkt"];
4087--13456[label="1;8pkt 8fpkt"];
4087--14975[label="1;8pkt 8fpkt"];
4198--8109[label="1;8pkt 8fpkt"];
4198--10227[label="1;8pkt 8fpkt"];
4198--13456[label="1;8pkt 8fpkt"];
4198--14975[label="1;8pkt 8fpkt"];
8109--10227[label="1;8pkt 8fpkt"];
8109--13456[label="1;8pkt 8fpkt"];
8109--14975[label="1;8pkt 8fpkt"];
10227--13456[label="1;8pkt 8fpkt"];
10227--14975[label="1;8pkt 8fpkt"];
13456--14975[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.8.158" src_ip="160.228.186.77" src_port="80"/>
      <filter dst_ip="167.209.8.158" src_ip="75.50.67.84" src_port="80"/>
      <filter dst_ip="167.209.8.158" src_ip="204.157.216.25" src_port="80"/>
    </slice>
    <from sec="1207285597" usec="0"/>
    <to sec="1207286015" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26886,1.93236,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_216{
style=filled;
color=gray75;
228[label="86.43.23.134s;102pkt 102fpkt", shape=rectangle, color=red];
1341[label="86.43.23.134;s;253pkt 253fpkt", shape=diamond, color=yellow];
2002[label="167.209.92.125;d;330pkt 330fpkt", shape=diamond, color=yellow];
4121[label="100.197.193.136;s;52pkt 52fpkt", shape=diamond, color=yellow];
6145[label="167.209.92.125;d;318pkt 318fpkt", shape=hexagon, color=black];
11240[label="100.197.193.136;51pkt 51fpkt", shape=pentagon, color=darkviolet];
stat216[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.43.23.134:*, 167.209.92.125:80}[76.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53534: (0.180832%)&lt;BR/&gt; 53533: (0.180832%)&lt;BR/&gt; 53532: (0.180832%)&lt;BR/&gt; 53531: (0.180832%)&gt;];
}
228--1341[label="1;102pkt 102fpkt"];
228--2002[label="1;102pkt 102fpkt"];
228--6145[label="1;102pkt 102fpkt"];
1341--2002[label="1;253pkt 253fpkt"];
1341--6145[label="1;253pkt 253fpkt"];
2002--2284[label="0.00606061;1pkt 1fpkt"];
2002--4121[label="1;52pkt 52fpkt"];
2002--6145[label="1;318pkt 318fpkt"];
2002--6699[label="0.0105263;1pkt 1fpkt"];
2002--8612[label="0.00606061;2pkt 2fpkt"];
2002--8732[label="0.00606061;2pkt 2fpkt"];
2002--8847[label="0.00606061;2pkt 2fpkt"];
2002--11240[label="1;51pkt 51fpkt"];
4121--6145[label="1;52pkt 52fpkt"];
4121--11240[label="1;51pkt 51fpkt"];
6145--6699[label="0.0105263;1pkt 1fpkt"];
6145--8612[label="0.00628931;2pkt 2fpkt"];
6145--8732[label="0.00628931;2pkt 2fpkt"];
6145--8847[label="0.00628931;2pkt 2fpkt"];
6145--11240[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.92.125" dst_port="80" src_ip="86.43.23.134"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.167.3.1"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.139.84.1"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.217.132.1"/>
    </slice>
    <from sec="1207285228" usec="0"/>
    <to sec="1207285785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.240.146.1"/>
    </slice>
    <from sec="1207285521" usec="0"/>
    <to sec="1207285530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.27.4.3"/>
    </slice>
    <from sec="1207285641" usec="0"/>
    <to sec="1207285659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.105.89.4"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.17.207.4"/>
    </slice>
    <from sec="1207285300" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
4373[label="160.86.123.231;d;211pkt 211fpkt", shape=diamond, color=yellow];
4541[label="194.152.23.64;s;159pkt 159fpkt", shape=diamond, color=yellow];
5146[label="70.205.5.5;s;7pkt 7fpkt", shape=diamond, color=yellow];
8117[label="194.152.23.64;s;159pkt 159fpkt", shape=hexagon, color=black];
9019[label="70.205.5.5;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9145[label="212.247.202.11;17pkt 17fpkt", shape=pentagon, color=darkviolet];
12883[label="70.205.5.5;7pkt 7fpkt", shape=invtriangle, color=brown];
14720[label="70.205.5.5;7pkt 7fpkt", shape=invhouse, color=bisque];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.152.23.64:80, 160.86.123.231:*}[75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.651%)&lt;BR/&gt; 64767: (0.4363%)&lt;BR/&gt; 63500: (0.4363%)&lt;BR/&gt; 61741: (0.4363%)&lt;BR/&gt; 59130: (0.4363%)&gt;];
}
4373--4541[label="1;159pkt 159fpkt"];
4373--5037[label="0.0405405;3pkt 3fpkt"];
4373--5146[label="1;7pkt 7fpkt"];
4373--5609[label="0.00473934;1pkt 1fpkt"];
4373--6815[label="0.00487805;1pkt 1fpkt"];
4373--7432[label="0.00473934;1pkt 1fpkt"];
4373--7496[label="0.00947867;2pkt 2fpkt"];
4373--8117[label="1;159pkt 159fpkt"];
4373--8413[label="0.00473934;1pkt 1fpkt"];
4373--8610[label="0.00473934;1pkt 1fpkt"];
4373--8633[label="0.014218;3pkt 3fpkt"];
4373--8643[label="0.00473934;1pkt 1fpkt"];
4373--8679[label="0.00473934;1pkt 1fpkt"];
4373--8730[label="0.00473934;1pkt 1fpkt"];
4373--8753[label="0.014218;3pkt 3fpkt"];
4373--8763[label="0.00473934;1pkt 1fpkt"];
4373--8799[label="0.00473934;1pkt 1fpkt"];
4373--8846[label="0.00473934;1pkt 1fpkt"];
4373--8869[label="0.014218;3pkt 3fpkt"];
4373--8879[label="0.00473934;1pkt 1fpkt"];
4373--8915[label="0.00473934;1pkt 1fpkt"];
4373--9019[label="1;6pkt 6fpkt"];
4373--9145[label="0.941176;16pkt 16fpkt"];
4373--9287[label="0.0333333;3pkt 3fpkt"];
4373--11939[label="0.00473934;1pkt 1fpkt"];
4373--12263[label="0.00473934;1pkt 1fpkt"];
4373--12883[label="1;7pkt 7fpkt"];
4373--13011[label="0.0333333;3pkt 3fpkt"];
4373--14432[label="0.00473934;1pkt 1fpkt"];
4373--14720[label="1;7pkt 7fpkt"];
4373--15405[label="0.00473934;1pkt 1fpkt"];
4541--8117[label="1;159pkt 159fpkt"];
5146--9019[label="1;6pkt 6fpkt"];
5146--12883[label="1;7pkt 7fpkt"];
5146--14720[label="1;7pkt 7fpkt"];
9019--12883[label="1;6pkt 6fpkt"];
9019--14720[label="1;6pkt 6fpkt"];
12883--14720[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.123.231" src_ip="194.152.23.64" src_port="80"/>
    </slice>
    <from sec="1207285221" usec="0"/>
    <to sec="1207286023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.116.32.5"/>
    </slice>
    <from sec="1207285692" usec="0"/>
    <to sec="1207285702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.97.33.5"/>
    </slice>
    <from sec="1207285530" usec="0"/>
    <to sec="1207285540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.133.5"/>
    </slice>
    <from sec="1207285968" usec="0"/>
    <to sec="1207286059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.90.205.5"/>
    </slice>
    <from sec="1207285845" usec="0"/>
    <to sec="1207285854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.32.6"/>
    </slice>
    <from sec="1207285584" usec="0"/>
    <to sec="1207285626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.183.131.6"/>
    </slice>
    <from sec="1207285596" usec="0"/>
    <to sec="1207285617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.8.7"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.27.7"/>
    </slice>
    <from sec="1207285507" usec="0"/>
    <to sec="1207285565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.97.239.7"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207285758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.173.102.8"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207285366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.189.148.8"/>
    </slice>
    <from sec="1207285280" usec="0"/>
    <to sec="1207285308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.48.182.8"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.67.194.8"/>
    </slice>
    <from sec="1207285925" usec="0"/>
    <to sec="1207285936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.208.218.8"/>
    </slice>
    <from sec="1207285631" usec="0"/>
    <to sec="1207285654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.64.34.9"/>
    </slice>
    <from sec="1207285524" usec="0"/>
    <to sec="1207285547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.108.46.9"/>
    </slice>
    <from sec="1207285306" usec="0"/>
    <to sec="1207285338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.160.100.9"/>
    </slice>
    <from sec="1207285797" usec="0"/>
    <to sec="1207285806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.142.119.9"/>
    </slice>
    <from sec="1207285779" usec="0"/>
    <to sec="1207285793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.64.148.9"/>
    </slice>
    <from sec="1207285765" usec="0"/>
    <to sec="1207285790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.912557,1.97426,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
4823[label="200.20.158.9;s;7pkt 7fpkt", shape=diamond, color=yellow];
5110[label="149.82.150.205;d;11pkt 11fpkt", shape=diamond, color=yellow];
8122[label="149.82.150.205;d;11pkt 11fpkt", shape=hexagon, color=black];
9099[label="200.20.158.9;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.20.158.9:80, 149.82.150.205:*}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2336: (5.55556%)&lt;BR/&gt; 2332: (5.55556%)&lt;BR/&gt; 2329: (5.55556%)&lt;BR/&gt; 2327: (5.55556%)&gt;];
}
4823--5110[label="0.714286;5pkt 5fpkt"];
4823--8122[label="0.714286;5pkt 5fpkt"];
4823--9099[label="1;7pkt 7fpkt"];
5110--8122[label="1;11pkt 11fpkt"];
5110--9099[label="0.714286;5pkt 5fpkt"];
8122--9099[label="0.714286;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.150.205" src_ip="200.20.158.9" src_port="80"/>
    </slice>
    <from sec="1207285561" usec="0"/>
    <to sec="1207286012" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.54.197.9"/>
    </slice>
    <from sec="1207285614" usec="0"/>
    <to sec="1207285679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.18.0.10"/>
    </slice>
    <from sec="1207285303" usec="0"/>
    <to sec="1207285386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.74.136.10"/>
    </slice>
    <from sec="1207285266" usec="0"/>
    <to sec="1207285999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
9125[label="160.86.226.10;241pkt 241fpkt", shape=pentagon, color=darkviolet];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.226.10:53, 106.168.70.182:*}[24.8963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (51.6598%)&lt;BR/&gt; 32768: (1.03734%)&lt;BR/&gt; 32772: (0.414938%)&lt;BR/&gt; 0: (0.414938%)&lt;BR/&gt; 65432: (0.207469%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="106.168.70.182" src_ip="160.86.226.10" src_port="53"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.123.5.11"/>
    </slice>
    <from sec="1207285223" usec="0"/>
    <to sec="1207285803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.119.183.11"/>
    </slice>
    <from sec="1207285721" usec="0"/>
    <to sec="1207285733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.110.156.12"/>
    </slice>
    <from sec="1207285621" usec="0"/>
    <to sec="1207285638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.168.253.12"/>
    </slice>
    <from sec="1207285923" usec="0"/>
    <to sec="1207285940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.65.2.13"/>
    </slice>
    <from sec="1207285599" usec="0"/>
    <to sec="1207285659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="121.240.55.13"/>
    </slice>
    <from sec="1207285574" usec="0"/>
    <to sec="1207285578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.210.82.13"/>
    </slice>
    <from sec="1207285736" usec="0"/>
    <to sec="1207285758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.111.143.13"/>
    </slice>
    <from sec="1207285544" usec="0"/>
    <to sec="1207285930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.4.193.13"/>
    </slice>
    <from sec="1207286076" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.26.241.14"/>
    </slice>
    <from sec="1207285705" usec="0"/>
    <to sec="1207285722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.228.83.15"/>
    </slice>
    <from sec="1207285935" usec="0"/>
    <to sec="1207285967" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.37.128.15"/>
    </slice>
    <from sec="1207285989" usec="0"/>
    <to sec="1207285998" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.185.101.16"/>
    </slice>
    <from sec="1207285924" usec="0"/>
    <to sec="1207285951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.138.141.16"/>
    </slice>
    <from sec="1207285579" usec="0"/>
    <to sec="1207285590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.76.169.16"/>
    </slice>
    <from sec="1207285581" usec="0"/>
    <to sec="1207285590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.10.204.16"/>
    </slice>
    <from sec="1207285565" usec="0"/>
    <to sec="1207285575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="121.110.51.17"/>
    </slice>
    <from sec="1207285802" usec="0"/>
    <to sec="1207285813" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.200.73.17"/>
    </slice>
    <from sec="1207285456" usec="0"/>
    <to sec="1207285475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.71.136.17"/>
    </slice>
    <from sec="1207285742" usec="0"/>
    <to sec="1207285746" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.13.75.18"/>
    </slice>
    <from sec="1207285471" usec="0"/>
    <to sec="1207285556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.180.101.18"/>
    </slice>
    <from sec="1207285987" usec="0"/>
    <to sec="1207285991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.104.18"/>
    </slice>
    <from sec="1207285634" usec="0"/>
    <to sec="1207285681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.208.152.18"/>
    </slice>
    <from sec="1207285892" usec="0"/>
    <to sec="1207285894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.78.186.18"/>
    </slice>
    <from sec="1207285518" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.24.27.19"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.12.20"/>
    </slice>
    <from sec="1207285272" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.207.77.20"/>
    </slice>
    <from sec="1207285786" usec="0"/>
    <to sec="1207285793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.196.253.20"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.70.37.21"/>
    </slice>
    <from sec="1207285387" usec="0"/>
    <to sec="1207285425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.180.92.21"/>
    </slice>
    <from sec="1207286052" usec="0"/>
    <to sec="1207286063" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.98.93.22"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.178.22"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1277[label="179.8.200.225;d;262pkt 262fpkt", shape=diamond, color=yellow];
5506[label="179.8.200.225;d;133pkt 133fpkt", shape=hexagon, color=black];
9359[label="15.213.148.23;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10454[label="193.103.83.89;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13047[label="15.213.148.23;1pkt 1fpkt", shape=invtriangle, color=brown];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 179.8.200.225:41457}[98.4733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 41457: (49.3719%)&lt;BR/&gt; 45306: (0.628141%)&lt;BR/&gt; 13659: (0.628141%)&lt;BR/&gt; 13545: (0.502513%)&lt;BR/&gt; 13533: (0.502513%)&gt;];
}
1277--5506[label="1;133pkt 133fpkt"];
1277--9359[label="1;1pkt 1fpkt"];
1277--10454[label="1;1pkt 1fpkt"];
1277--13047[label="1;1pkt 1fpkt"];
5506--9359[label="1;1pkt 1fpkt"];
5506--10454[label="1;1pkt 1fpkt"];
5506--13047[label="1;1pkt 1fpkt"];
9359--13047[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="179.8.200.225" dst_port="41457"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.221.23"/>
    </slice>
    <from sec="1207285775" usec="0"/>
    <to sec="1207285840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.51.76.24"/>
    </slice>
    <from sec="1207285551" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.223.146.26"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.61.80.27"/>
    </slice>
    <from sec="1207285716" usec="0"/>
    <to sec="1207285734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.223.180.27"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.103.203.27"/>
    </slice>
    <from sec="1207285643" usec="0"/>
    <to sec="1207285667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.136.33.28"/>
    </slice>
    <from sec="1207285652" usec="0"/>
    <to sec="1207285655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.19.209.28"/>
    </slice>
    <from sec="1207285729" usec="0"/>
    <to sec="1207285803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.66.110.29"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.200.215.30"/>
    </slice>
    <from sec="1207285790" usec="0"/>
    <to sec="1207285796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.221.80.31"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.33.104.31"/>
    </slice>
    <from sec="1207286039" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.102.26.32"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.20.127.32"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.218.141.32"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207285982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.68.151.32"/>
    </slice>
    <from sec="1207285400" usec="0"/>
    <to sec="1207285621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.157.32"/>
    </slice>
    <from sec="1207285243" usec="0"/>
    <to sec="1207286082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.17.42.33"/>
    </slice>
    <from sec="1207285672" usec="0"/>
    <to sec="1207285736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
4297[label="160.86.52.33;s;284pkt 284fpkt", shape=diamond, color=yellow];
9526[label="160.86.52.33;302pkt 302fpkt", shape=pentagon, color=darkviolet];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.52.33:20129, *:20129}[58.9404%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (73.5495%)&lt;BR/&gt; 38414: (4.94881%)&lt;BR/&gt; 14231: (0.341297%)&lt;BR/&gt; 12350: (0.341297%)&lt;BR/&gt; 10011: (0.341297%)&gt;];
}
4297--9526[label="1;284pkt 284fpkt"];
</description>
    <slice>
      <filter dst_port="20129" src_ip="160.86.52.33" src_port="20129"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.173.87.33"/>
    </slice>
    <from sec="1207285370" usec="0"/>
    <to sec="1207285390" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.194.33"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.137.20.35"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.16.32.36"/>
    </slice>
    <from sec="1207285750" usec="0"/>
    <to sec="1207285780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.52.131.36"/>
    </slice>
    <from sec="1207285695" usec="0"/>
    <to sec="1207285717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.157.216.37"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.205.226.37"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.221.76.38"/>
    </slice>
    <from sec="1207285804" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
9612[label="149.1.95.38;220pkt 220fpkt", shape=pentagon, color=darkviolet];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.1.95.38:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="149.1.95.38"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.148.214.38"/>
    </slice>
    <from sec="1207285589" usec="0"/>
    <to sec="1207285596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.145.136.39"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.71.215.40"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.33.130.41"/>
    </slice>
    <from sec="1207285637" usec="0"/>
    <to sec="1207285653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
1082[label="144.106.70.125;d;288pkt 288fpkt", shape=diamond, color=yellow];
1536[label="115.211.149.229;s;45pkt 45fpkt", shape=diamond, color=yellow];
1861[label="199.50.19.107;s;89pkt 89fpkt", shape=diamond, color=yellow];
2719[label="218.114.34.217;s;67pkt 67fpkt", shape=diamond, color=yellow];
3190[label="200.160.207.41;s;59pkt 59fpkt", shape=diamond, color=yellow];
5865[label="115.211.149.229;s;45pkt 45fpkt", shape=hexagon, color=black];
6226[label="218.114.34.217;s;28pkt 28fpkt", shape=hexagon, color=black];
6428[label="144.106.70.125;d;246pkt 246fpkt", shape=hexagon, color=black];
6614[label="200.160.207.41;s;41pkt 41fpkt", shape=hexagon, color=black];
9669[label="200.160.207.41;58pkt 58fpkt", shape=pentagon, color=darkviolet];
10764[label="199.50.19.107;88pkt 88fpkt", shape=pentagon, color=darkviolet];
12393[label="218.114.34.217;66pkt 66fpkt", shape=pentagon, color=darkviolet];
12551[label="115.211.149.229;44pkt 44fpkt", shape=pentagon, color=darkviolet];
13196[label="200.160.207.41;58pkt 58fpkt", shape=invtriangle, color=brown];
14574[label="115.211.149.229;44pkt 44fpkt", shape=invtriangle, color=brown];
14862[label="200.160.207.41;58pkt 58fpkt", shape=invhouse, color=bisque];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.50.19.107:*, 144.106.70.125:80}[30.9028%]&lt;BR/&gt;{218.114.34.217:*, 144.106.70.125:80}[23.2639%]&lt;BR/&gt;{200.160.207.41:80, 144.106.70.125:*}[20.4861%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50940: (0.339879%)&lt;BR/&gt; 50939: (0.339879%)&lt;BR/&gt; 50935: (0.339879%)&lt;BR/&gt; 50884: (0.339879%)&gt;];
}
1082--1218[label="0.00613497;1pkt 1fpkt"];
1082--1536[label="1;45pkt 45fpkt"];
1082--1861[label="1;89pkt 89fpkt"];
1082--2719[label="1;67pkt 67fpkt"];
1082--3190[label="1;59pkt 59fpkt"];
1082--5756[label="0.0188679;1pkt 1fpkt"];
1082--5865[label="1;45pkt 45fpkt"];
1082--6226[label="1;28pkt 28fpkt"];
1082--6428[label="1;246pkt 246fpkt"];
1082--6614[label="1;41pkt 41fpkt"];
1082--8590[label="0.0798611;23pkt 23fpkt"];
1082--8610[label="0.0277778;8pkt 8fpkt"];
1082--8612[label="0.0243056;7pkt 7fpkt"];
1082--8633[label="0.0173611;5pkt 5fpkt"];
1082--8688[label="0.00347222;1pkt 1fpkt"];
1082--8710[label="0.0798611;23pkt 23fpkt"];
1082--8730[label="0.0277778;8pkt 8fpkt"];
1082--8732[label="0.0243056;7pkt 7fpkt"];
1082--8753[label="0.0173611;5pkt 5fpkt"];
1082--8807[label="0.00347222;1pkt 1fpkt"];
1082--8828[label="0.0798611;23pkt 23fpkt"];
1082--8846[label="0.0277778;8pkt 8fpkt"];
1082--8847[label="0.0243056;7pkt 7fpkt"];
1082--8869[label="0.0173611;5pkt 5fpkt"];
1082--8923[label="0.00347222;1pkt 1fpkt"];
1082--9123[label="0.125;1pkt 1fpkt"];
1082--9669[label="1;58pkt 58fpkt"];
1082--10764[label="1;88pkt 88fpkt"];
1082--11284[label="0.00588235;1pkt 1fpkt"];
1082--12393[label="1;66pkt 66fpkt"];
1082--12551[label="1;44pkt 44fpkt"];
1082--12935[label="0.111111;1pkt 1fpkt"];
1082--13196[label="1;58pkt 58fpkt"];
1082--14574[label="1;44pkt 44fpkt"];
1082--14747[label="0.111111;1pkt 1fpkt"];
1082--14862[label="1;58pkt 58fpkt"];
1536--5865[label="1;45pkt 45fpkt"];
1536--6428[label="1;45pkt 45fpkt"];
1536--12551[label="1;44pkt 44fpkt"];
1536--14574[label="1;44pkt 44fpkt"];
1861--6428[label="1;89pkt 89fpkt"];
1861--10764[label="1;88pkt 88fpkt"];
2719--6226[label="1;28pkt 28fpkt"];
2719--6428[label="0.701493;47pkt 47fpkt"];
2719--8612[label="0.104478;7pkt 7fpkt"];
2719--8688[label="0.0149254;1pkt 1fpkt"];
2719--8732[label="0.104478;7pkt 7fpkt"];
2719--8807[label="0.0149254;1pkt 1fpkt"];
2719--8847[label="0.104478;7pkt 7fpkt"];
2719--8923[label="0.0149254;1pkt 1fpkt"];
2719--12393[label="1;66pkt 66fpkt"];
3190--6428[label="0.694915;41pkt 41fpkt"];
3190--6614[label="1;41pkt 41fpkt"];
3190--8590[label="0.254237;15pkt 15fpkt"];
3190--8610[label="0.0847458;5pkt 5fpkt"];
3190--8633[label="0.0677966;4pkt 4fpkt"];
3190--8710[label="0.254237;15pkt 15fpkt"];
3190--8730[label="0.0847458;5pkt 5fpkt"];
3190--8753[label="0.0677966;4pkt 4fpkt"];
3190--8828[label="0.254237;15pkt 15fpkt"];
3190--8846[label="0.0847458;5pkt 5fpkt"];
3190--8869[label="0.0677966;4pkt 4fpkt"];
3190--9669[label="1;58pkt 58fpkt"];
3190--13196[label="1;58pkt 58fpkt"];
3190--14862[label="1;58pkt 58fpkt"];
5865--6428[label="1;45pkt 45fpkt"];
5865--12551[label="1;44pkt 44fpkt"];
5865--14574[label="1;44pkt 44fpkt"];
6226--6428[label="1;28pkt 28fpkt"];
6226--8612[label="0.25;7pkt 7fpkt"];
6226--8732[label="0.25;7pkt 7fpkt"];
6226--8847[label="0.25;7pkt 7fpkt"];
6226--12393[label="0.964286;27pkt 27fpkt"];
6428--6614[label="1;41pkt 41fpkt"];
6428--8590[label="0.0934959;23pkt 23fpkt"];
6428--8610[label="0.0325203;8pkt 8fpkt"];
6428--8612[label="0.0284553;7pkt 7fpkt"];
6428--8710[label="0.0934959;23pkt 23fpkt"];
6428--8730[label="0.0325203;8pkt 8fpkt"];
6428--8732[label="0.0284553;7pkt 7fpkt"];
6428--8828[label="0.0934959;23pkt 23fpkt"];
6428--8846[label="0.0325203;8pkt 8fpkt"];
6428--8847[label="0.0284553;7pkt 7fpkt"];
6428--9123[label="0.125;1pkt 1fpkt"];
6428--9669[label="0.689655;40pkt 40fpkt"];
6428--10764[label="1;88pkt 88fpkt"];
6428--11284[label="0.00588235;1pkt 1fpkt"];
6428--12393[label="0.69697;46pkt 46fpkt"];
6428--12551[label="1;44pkt 44fpkt"];
6428--12935[label="0.111111;1pkt 1fpkt"];
6428--13196[label="0.689655;40pkt 40fpkt"];
6428--14574[label="1;44pkt 44fpkt"];
6428--14747[label="0.111111;1pkt 1fpkt"];
6428--14862[label="0.689655;40pkt 40fpkt"];
6614--8590[label="0.365854;15pkt 15fpkt"];
6614--8610[label="0.121951;5pkt 5fpkt"];
6614--8710[label="0.365854;15pkt 15fpkt"];
6614--8730[label="0.121951;5pkt 5fpkt"];
6614--8828[label="0.365854;15pkt 15fpkt"];
6614--8846[label="0.121951;5pkt 5fpkt"];
6614--9669[label="0.97561;40pkt 40fpkt"];
6614--13196[label="0.97561;40pkt 40fpkt"];
6614--14862[label="0.97561;40pkt 40fpkt"];
9669--13196[label="1;58pkt 58fpkt"];
9669--14862[label="1;58pkt 58fpkt"];
12551--14574[label="1;44pkt 44fpkt"];
13196--14862[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.70.125" dst_port="80" src_ip="199.50.19.107"/>
      <filter dst_ip="144.106.70.125" dst_port="80" src_ip="218.114.34.217"/>
      <filter dst_ip="144.106.70.125" src_ip="200.160.207.41" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207285971" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.213.233.41"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.0.42"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.38.229.43"/>
    </slice>
    <from sec="1207285307" usec="0"/>
    <to sec="1207285353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.151.68.44"/>
    </slice>
    <from sec="1207285234" usec="0"/>
    <to sec="1207285394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.118.87.44"/>
    </slice>
    <from sec="1207285932" usec="0"/>
    <to sec="1207285976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.133.44"/>
    </slice>
    <from sec="1207286058" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.42.206.44"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207285212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.205.238.44"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.53.46"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.108.70.46"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.86.152.46"/>
    </slice>
    <from sec="1207285970" usec="0"/>
    <to sec="1207285981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.195.46"/>
    </slice>
    <from sec="1207285448" usec="0"/>
    <to sec="1207286052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.112.21.47"/>
    </slice>
    <from sec="1207285797" usec="0"/>
    <to sec="1207286080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
5137[label="160.86.152.48;s;8pkt 8fpkt", shape=diamond, color=yellow];
9772[label="160.86.152.48;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13243[label="160.86.152.48;12pkt 12fpkt", shape=invtriangle, color=brown];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.152.48:80, 42.226.49.43:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.3125%)&lt;BR/&gt; 0: (9.375%)&lt;BR/&gt; 64320: (4.6875%)&lt;BR/&gt; 53338: (4.6875%)&lt;BR/&gt; 31751: (4.6875%)&gt;];
}
5137--9772[label="1;8pkt 8fpkt"];
5137--13243[label="1;8pkt 8fpkt"];
9772--13243[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="42.226.49.43" src_ip="160.86.152.48" src_port="80"/>
    </slice>
    <from sec="1207285307" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.5.160.48"/>
    </slice>
    <from sec="1207285527" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.210.222.48"/>
    </slice>
    <from sec="1207285625" usec="0"/>
    <to sec="1207285646" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.15.49"/>
    </slice>
    <from sec="1207285691" usec="0"/>
    <to sec="1207285764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.32.200.49"/>
    </slice>
    <from sec="1207285378" usec="0"/>
    <to sec="1207285383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.69.248.49"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.251.21.50"/>
    </slice>
    <from sec="1207285235" usec="0"/>
    <to sec="1207285249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.29.183.50"/>
    </slice>
    <from sec="1207285842" usec="0"/>
    <to sec="1207285861" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_351{
style=filled;
color=gray75;
5043[label="209.149.42.52;s;105pkt 105fpkt", shape=diamond, color=yellow];
9818[label="209.149.42.52;121pkt 121fpkt", shape=pentagon, color=darkviolet];
13258[label="209.149.42.52;121pkt 121fpkt", shape=invtriangle, color=brown];
stat351[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.149.42.52:*, 212.205.232.34:*}[49.5868%]&lt;BR/&gt;{209.149.42.52:*, 216.246.213.209:*}[49.5868%]&lt;BR/&gt;{209.149.42.52:*, *:33438}[25.6198%]&lt;BR/&gt;{209.149.42.52:*, *:33435}[24.7934%]&lt;BR/&gt;{209.149.42.52:*, *:33436}[24.7934%]&lt;BR/&gt;{209.149.42.52:*, *:33437}[24.7934%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33438: (12.8242%)&lt;BR/&gt; 33437: (12.3919%)&lt;BR/&gt; 33436: (12.3919%)&lt;BR/&gt; 33435: (12.3919%)&lt;BR/&gt; 11435: (3.45821%)&gt;];
}
5043--9818[label="1;105pkt 105fpkt"];
5043--13258[label="1;105pkt 105fpkt"];
9818--13258[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_ip="216.246.213.209" src_ip="209.149.42.52"/>
      <filter dst_ip="212.205.232.34" src_ip="209.149.42.52"/>
      <filter dst_port="33438" src_ip="209.149.42.52"/>
      <filter dst_port="33437" src_ip="209.149.42.52"/>
      <filter dst_port="33436" src_ip="209.149.42.52"/>
      <filter dst_port="33435" src_ip="209.149.42.52"/>
    </slice>
    <from sec="1207285235" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.160.42.52"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.223.22.54"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.20.196.55"/>
    </slice>
    <from sec="1207285213" usec="0"/>
    <to sec="1207285226" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.78.16.57"/>
    </slice>
    <from sec="1207285792" usec="0"/>
    <to sec="1207285805" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.134.231.58"/>
    </slice>
    <from sec="1207286037" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.226.33.59"/>
    </slice>
    <from sec="1207285745" usec="0"/>
    <to sec="1207285758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.205.226.60"/>
    </slice>
    <from sec="1207285670" usec="0"/>
    <to sec="1207285740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.104.145.61"/>
    </slice>
    <from sec="1207286049" usec="0"/>
    <to sec="1207286081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.72.150.62"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.235.220.62"/>
    </slice>
    <from sec="1207285363" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.39.126.63"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.48.5.64"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.61.69.64"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.183.180.64"/>
    </slice>
    <from sec="1207285220" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.52.8.65"/>
    </slice>
    <from sec="1207285390" usec="0"/>
    <to sec="1207285983" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.116.47.65"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.32.120.66"/>
    </slice>
    <from sec="1207285552" usec="0"/>
    <to sec="1207285556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.60.170.66"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.192.66"/>
    </slice>
    <from sec="1207285479" usec="0"/>
    <to sec="1207285625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
3334[label="100.112.61.148;d;1pkt 1fpkt", shape=diamond, color=yellow];
3537[label="149.82.239.66;s;47pkt 47fpkt", shape=diamond, color=yellow];
10040[label="149.82.239.66;78pkt 78fpkt", shape=pentagon, color=darkviolet];
13372[label="149.82.239.66;78pkt 78fpkt", shape=invtriangle, color=brown];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.239.66:80, 212.171.26.0:*}[61.5385%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55334: (0.980392%)&lt;BR/&gt; 63965: (0.735294%)&lt;BR/&gt; 60604: (0.735294%)&lt;BR/&gt; 60409: (0.735294%)&gt;];
}
3334--3537[label="1;1pkt 1fpkt"];
3334--10040[label="1;1pkt 1fpkt"];
3334--13372[label="1;1pkt 1fpkt"];
3537--8590[label="0.0638298;3pkt 3fpkt"];
3537--8610[label="0.0212766;1pkt 1fpkt"];
3537--8710[label="0.0638298;3pkt 3fpkt"];
3537--8730[label="0.0212766;1pkt 1fpkt"];
3537--8828[label="0.0638298;3pkt 3fpkt"];
3537--8846[label="0.0212766;1pkt 1fpkt"];
3537--10040[label="1;47pkt 47fpkt"];
3537--13372[label="1;47pkt 47fpkt"];
10040--13372[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="212.171.26.0" src_ip="149.82.239.66" src_port="80"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.48.1.67"/>
    </slice>
    <from sec="1207285432" usec="0"/>
    <to sec="1207285511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.13.67"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.97.54.67"/>
    </slice>
    <from sec="1207285211" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.68.223.67"/>
    </slice>
    <from sec="1207285631" usec="0"/>
    <to sec="1207285668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.51.29.68"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.205.226.68"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.6.70.71"/>
    </slice>
    <from sec="1207285767" usec="0"/>
    <to sec="1207285829" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.89.128.71"/>
    </slice>
    <from sec="1207285270" usec="0"/>
    <to sec="1207285292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.1.72"/>
    </slice>
    <from sec="1207286036" usec="0"/>
    <to sec="1207286050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.40.36.72"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.83.162.72"/>
    </slice>
    <from sec="1207285502" usec="0"/>
    <to sec="1207285564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.97.54.73"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.26.230.73"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207285229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.21.74"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207286073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.7.73.74"/>
    </slice>
    <from sec="1207285806" usec="0"/>
    <to sec="1207285823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.65.141.74"/>
    </slice>
    <from sec="1207285270" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.4.207.74"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.181.245.76"/>
    </slice>
    <from sec="1207285611" usec="0"/>
    <to sec="1207285615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.192.38.77"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.36.216.77"/>
    </slice>
    <from sec="1207285244" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.71.227.77"/>
    </slice>
    <from sec="1207285980" usec="0"/>
    <to sec="1207285988" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.191.10.78"/>
    </slice>
    <from sec="1207285644" usec="0"/>
    <to sec="1207285665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.221.99.78"/>
    </slice>
    <from sec="1207285721" usec="0"/>
    <to sec="1207285770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.34.186.78"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286044" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.215.3.79"/>
    </slice>
    <from sec="1207285664" usec="0"/>
    <to sec="1207285670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.171.73.79"/>
    </slice>
    <from sec="1207285948" usec="0"/>
    <to sec="1207285950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.27.138.79"/>
    </slice>
    <from sec="1207286081" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.152.144.79"/>
    </slice>
    <from sec="1207286030" usec="0"/>
    <to sec="1207286070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.107.155.79"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.182.87.80"/>
    </slice>
    <from sec="1207285509" usec="0"/>
    <to sec="1207285530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.92.80"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.248.179.80"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.55.28.81"/>
    </slice>
    <from sec="1207285518" usec="0"/>
    <to sec="1207285585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
1563[label="197.184.207.81;s;2pkt 2fpkt", shape=diamond, color=yellow];
10310[label="197.184.207.81;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.184.207.81:80, 149.82.19.243:2090}[50%]&lt;BR/&gt;{197.184.207.81:80, 149.82.19.243:2091}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2091: (25%)&lt;BR/&gt; 2090: (25%)&gt;];
}
1563--10310[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.19.243" dst_port="2091" src_ip="197.184.207.81" src_port="80"/>
      <filter dst_ip="149.82.19.243" dst_port="2090" src_ip="197.184.207.81" src_port="80"/>
    </slice>
    <from sec="1207285294" usec="0"/>
    <to sec="1207285329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.228.81"/>
    </slice>
    <from sec="1207285796" usec="0"/>
    <to sec="1207285850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
550[label="167.209.149.223;d;80pkt 80fpkt", shape=diamond, color=yellow];
551[label="219.54.9.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
3733[label="199.211.72.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
5300[label="167.209.149.223;d;23pkt 23fpkt", shape=hexagon, color=black];
5597[label="219.54.9.19;s;1pkt 1fpkt", shape=hexagon, color=black];
10183[label="115.0.59.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10319[label="199.211.72.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12409[label="112.112.179.218;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13439[label="115.0.59.75;1pkt 1fpkt", shape=invtriangle, color=brown];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.209.149.223:60244}[33.75%]&lt;BR/&gt;{204.157.242.85:80, 167.209.149.223:*}[23.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60244: (19.5455%)&lt;BR/&gt; 80: (18.6364%)&lt;BR/&gt; 2321: (2.72727%)&lt;BR/&gt; 0: (2.72727%)&lt;BR/&gt; 58604: (2.27273%)&gt;];
}
550--551[label="1;1pkt 1fpkt"];
550--1072[label="0.0125;1pkt 1fpkt"];
550--1091[label="0.05;4pkt 4fpkt"];
550--1161[label="0.2375;19pkt 19fpkt"];
550--1170[label="0.05;4pkt 4fpkt"];
550--1173[label="0.0125;1pkt 1fpkt"];
550--2546[label="0.0125;1pkt 1fpkt"];
550--3733[label="1;1pkt 1fpkt"];
550--5300[label="1;23pkt 23fpkt"];
550--5597[label="1;1pkt 1fpkt"];
550--6463[label="0.2375;19pkt 19fpkt"];
550--6815[label="0.0125;1pkt 1fpkt"];
550--7513[label="0.05;4pkt 4fpkt"];
550--7554[label="0.0125;1pkt 1fpkt"];
550--8575[label="0.0125;1pkt 1fpkt"];
550--8611[label="0.0125;1pkt 1fpkt"];
550--8633[label="0.0375;3pkt 3fpkt"];
550--8695[label="0.0125;1pkt 1fpkt"];
550--8731[label="0.0125;1pkt 1fpkt"];
550--8753[label="0.0375;3pkt 3fpkt"];
550--8869[label="0.0375;3pkt 3fpkt"];
550--10183[label="1;1pkt 1fpkt"];
550--10319[label="1;1pkt 1fpkt"];
550--12409[label="1;1pkt 1fpkt"];
550--13439[label="1;1pkt 1fpkt"];
551--5300[label="1;1pkt 1fpkt"];
551--5597[label="1;1pkt 1fpkt"];
3733--10319[label="1;1pkt 1fpkt"];
5300--5597[label="1;1pkt 1fpkt"];
5300--8575[label="0.0434783;1pkt 1fpkt"];
5300--8611[label="0.0434783;1pkt 1fpkt"];
5300--8695[label="0.0434783;1pkt 1fpkt"];
5300--8731[label="0.0434783;1pkt 1fpkt"];
5300--10183[label="1;1pkt 1fpkt"];
5300--12409[label="1;1pkt 1fpkt"];
5300--13439[label="1;1pkt 1fpkt"];
10183--13439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.149.223" dst_port="60244"/>
      <filter dst_ip="167.209.149.223" src_ip="204.157.242.85" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.107.82"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.245.155.82"/>
    </slice>
    <from sec="1207285259" usec="0"/>
    <to sec="1207285470" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.13.82.83"/>
    </slice>
    <from sec="1207286081" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.153.111.84"/>
    </slice>
    <from sec="1207285598" usec="0"/>
    <to sec="1207285601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.242.216.84"/>
    </slice>
    <from sec="1207285268" usec="0"/>
    <to sec="1207286073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.12.79.86"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.133.86"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.133.3.87"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.194.3.87"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.216.91.87"/>
    </slice>
    <from sec="1207285229" usec="0"/>
    <to sec="1207285645" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
4019[label="167.209.124.87;s;94pkt 94fpkt", shape=diamond, color=yellow];
10411[label="167.209.124.87;101pkt 101fpkt", shape=pentagon, color=darkviolet];
13544[label="167.209.124.87;101pkt 101fpkt", shape=invtriangle, color=brown];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.124.87:*, 205.12.216.193:80}[30.6931%]&lt;BR/&gt;{167.209.124.87:*, 205.12.216.90:80}[28.7129%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9324%)&lt;BR/&gt; 10001: (4.05405%)&lt;BR/&gt; 10000: (1.01351%)&lt;BR/&gt; 4252: (0.506757%)&lt;BR/&gt; 4251: (0.506757%)&gt;];
}
4019--6095[label="0.0106383;1pkt 1fpkt"];
4019--8612[label="0.0212766;2pkt 2fpkt"];
4019--8732[label="0.0212766;2pkt 2fpkt"];
4019--8847[label="0.0212766;2pkt 2fpkt"];
4019--10411[label="1;94pkt 94fpkt"];
4019--13544[label="1;94pkt 94fpkt"];
10411--13544[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="205.12.216.193" dst_port="80" src_ip="167.209.124.87"/>
      <filter dst_ip="205.12.216.90" dst_port="80" src_ip="167.209.124.87"/>
    </slice>
    <from sec="1207285234" usec="0"/>
    <to sec="1207285924" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
5031[label="213.218.217.88;s;30pkt 30fpkt", shape=diamond, color=yellow];
8021[label="213.218.217.88;s;30pkt 30fpkt", shape=hexagon, color=black];
10447[label="213.218.217.88;32pkt 32fpkt", shape=pentagon, color=darkviolet];
13565[label="213.218.217.88;32pkt 32fpkt", shape=invtriangle, color=brown];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.218.217.88:80, 149.82.96.2:*}[93.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3131: (1.6129%)&lt;BR/&gt; 3129: (1.6129%)&lt;BR/&gt; 2306: (1.6129%)&lt;BR/&gt; 2305: (1.6129%)&gt;];
}
5031--8021[label="1;30pkt 30fpkt"];
5031--8590[label="0.0666667;2pkt 2fpkt"];
5031--8610[label="0.0666667;2pkt 2fpkt"];
5031--8633[label="0.0666667;2pkt 2fpkt"];
5031--8710[label="0.0666667;2pkt 2fpkt"];
5031--8730[label="0.0666667;2pkt 2fpkt"];
5031--8753[label="0.0666667;2pkt 2fpkt"];
5031--8828[label="0.0666667;2pkt 2fpkt"];
5031--8846[label="0.0666667;2pkt 2fpkt"];
5031--8869[label="0.0666667;2pkt 2fpkt"];
5031--10447[label="1;30pkt 30fpkt"];
5031--13565[label="1;30pkt 30fpkt"];
8021--8590[label="0.0666667;2pkt 2fpkt"];
8021--8610[label="0.0666667;2pkt 2fpkt"];
8021--8633[label="0.0666667;2pkt 2fpkt"];
8021--8710[label="0.0666667;2pkt 2fpkt"];
8021--8730[label="0.0666667;2pkt 2fpkt"];
8021--8753[label="0.0666667;2pkt 2fpkt"];
8021--8828[label="0.0666667;2pkt 2fpkt"];
8021--8846[label="0.0666667;2pkt 2fpkt"];
8021--8869[label="0.0666667;2pkt 2fpkt"];
8021--10447[label="1;30pkt 30fpkt"];
8021--13565[label="1;30pkt 30fpkt"];
10447--13565[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.96.2" src_ip="213.218.217.88" src_port="80"/>
    </slice>
    <from sec="1207285215" usec="0"/>
    <to sec="1207286087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.48.140.89"/>
    </slice>
    <from sec="1207285275" usec="0"/>
    <to sec="1207286071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.99.125.91"/>
    </slice>
    <from sec="1207285732" usec="0"/>
    <to sec="1207285741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.54.3.93"/>
    </slice>
    <from sec="1207286046" usec="0"/>
    <to sec="1207286062" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.207.77.94"/>
    </slice>
    <from sec="1207285390" usec="0"/>
    <to sec="1207285985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.33.87.95"/>
    </slice>
    <from sec="1207286037" usec="0"/>
    <to sec="1207286057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.108.92.95"/>
    </slice>
    <from sec="1207285644" usec="0"/>
    <to sec="1207285651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.107.95"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207285849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.52.8.96"/>
    </slice>
    <from sec="1207285402" usec="0"/>
    <to sec="1207285995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.224.80.96"/>
    </slice>
    <from sec="1207285651" usec="0"/>
    <to sec="1207285708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.201.165.96"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.29.171.97"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.9.5.98"/>
    </slice>
    <from sec="1207285603" usec="0"/>
    <to sec="1207285785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.203.148.98"/>
    </slice>
    <from sec="1207285680" usec="0"/>
    <to sec="1207285995" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
5182[label="102.34.111.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
10625[label="102.34.111.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.34.111.99:80, 167.209.202.78:3197}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3197: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5182--10625[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.202.78" dst_port="3197" src_ip="102.34.111.99" src_port="80"/>
    </slice>
    <from sec="1207285942" usec="0"/>
    <to sec="1207285974" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.111.76.100"/>
    </slice>
    <from sec="1207285608" usec="0"/>
    <to sec="1207285614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.100.164.100"/>
    </slice>
    <from sec="1207285470" usec="0"/>
    <to sec="1207285511" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.10.189.100"/>
    </slice>
    <from sec="1207285524" usec="0"/>
    <to sec="1207285529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.179.10.101"/>
    </slice>
    <from sec="1207285265" usec="0"/>
    <to sec="1207285271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.241.33.101"/>
    </slice>
    <from sec="1207285267" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.136.120.101"/>
    </slice>
    <from sec="1207285587" usec="0"/>
    <to sec="1207285613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.69.228.101"/>
    </slice>
    <from sec="1207285673" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.189.3.103"/>
    </slice>
    <from sec="1207285298" usec="0"/>
    <to sec="1207285345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
996[label="160.188.209.76;d;368pkt 368fpkt", shape=diamond, color=yellow];
5426[label="160.188.209.76;d;368pkt 368fpkt", shape=hexagon, color=black];
10700[label="69.238.157.103;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10890[label="76.116.164.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10942[label="68.12.90.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11042[label="194.165.92.125;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11095[label="70.240.35.129;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11199[label="78.165.105.134;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11647[label="196.214.180.164;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12014[label="75.210.143.190;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12321[label="14.11.0.212;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13067[label="213.142.44.26;1pkt 1fpkt", shape=invtriangle, color=brown];
13676[label="69.238.157.103;1pkt 1fpkt", shape=invtriangle, color=brown];
13771[label="76.116.164.114;2pkt 2fpkt", shape=invtriangle, color=brown];
13831[label="194.165.92.125;1pkt 1fpkt", shape=invtriangle, color=brown];
13857[label="70.240.35.129;3pkt 3fpkt", shape=invtriangle, color=brown];
14141[label="196.214.180.164;1pkt 1fpkt", shape=invtriangle, color=brown];
14301[label="75.210.143.190;1pkt 1fpkt", shape=invtriangle, color=brown];
14459[label="14.11.0.212;1pkt 1fpkt", shape=invtriangle, color=brown];
15154[label="194.165.92.125;1pkt 1fpkt", shape=invhouse, color=bisque];
15356[label="75.210.143.190;1pkt 1fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.188.209.76:61592}[85.3261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61592: (41.2615%)&lt;BR/&gt; 64473: (6.24179%)&lt;BR/&gt; 45306: (1.70828%)&lt;BR/&gt; 13940: (0.788436%)&lt;BR/&gt; 30970: (0.525624%)&gt;];
}
996--5426[label="1;368pkt 368fpkt"];
996--8590[label="0.00271739;1pkt 1fpkt"];
996--8610[label="0.00271739;1pkt 1fpkt"];
996--8633[label="0.00271739;1pkt 1fpkt"];
996--8710[label="0.00271739;1pkt 1fpkt"];
996--8730[label="0.00271739;1pkt 1fpkt"];
996--8753[label="0.00271739;1pkt 1fpkt"];
996--8828[label="0.00271739;1pkt 1fpkt"];
996--8846[label="0.00271739;1pkt 1fpkt"];
996--8869[label="0.00271739;1pkt 1fpkt"];
996--10700[label="1;1pkt 1fpkt"];
996--10890[label="1;2pkt 2fpkt"];
996--10942[label="1;1pkt 1fpkt"];
996--11042[label="1;1pkt 1fpkt"];
996--11095[label="1;3pkt 3fpkt"];
996--11199[label="1;1pkt 1fpkt"];
996--11647[label="1;1pkt 1fpkt"];
996--12014[label="1;1pkt 1fpkt"];
996--12321[label="1;1pkt 1fpkt"];
996--13067[label="1;1pkt 1fpkt"];
996--13676[label="1;1pkt 1fpkt"];
996--13771[label="1;2pkt 2fpkt"];
996--13831[label="1;1pkt 1fpkt"];
996--13857[label="1;3pkt 3fpkt"];
996--14141[label="1;1pkt 1fpkt"];
996--14301[label="1;1pkt 1fpkt"];
996--14459[label="1;1pkt 1fpkt"];
996--15154[label="1;1pkt 1fpkt"];
996--15356[label="1;1pkt 1fpkt"];
5426--8590[label="0.00271739;1pkt 1fpkt"];
5426--8610[label="0.00271739;1pkt 1fpkt"];
5426--8633[label="0.00271739;1pkt 1fpkt"];
5426--8710[label="0.00271739;1pkt 1fpkt"];
5426--8730[label="0.00271739;1pkt 1fpkt"];
5426--8753[label="0.00271739;1pkt 1fpkt"];
5426--8828[label="0.00271739;1pkt 1fpkt"];
5426--8846[label="0.00271739;1pkt 1fpkt"];
5426--8869[label="0.00271739;1pkt 1fpkt"];
5426--10700[label="1;1pkt 1fpkt"];
5426--10890[label="1;2pkt 2fpkt"];
5426--10942[label="1;1pkt 1fpkt"];
5426--11042[label="1;1pkt 1fpkt"];
5426--11095[label="1;3pkt 3fpkt"];
5426--11199[label="1;1pkt 1fpkt"];
5426--11647[label="1;1pkt 1fpkt"];
5426--12014[label="1;1pkt 1fpkt"];
5426--12321[label="1;1pkt 1fpkt"];
5426--13067[label="1;1pkt 1fpkt"];
5426--13676[label="1;1pkt 1fpkt"];
5426--13771[label="1;2pkt 2fpkt"];
5426--13831[label="1;1pkt 1fpkt"];
5426--13857[label="1;3pkt 3fpkt"];
5426--14141[label="1;1pkt 1fpkt"];
5426--14301[label="1;1pkt 1fpkt"];
5426--14459[label="1;1pkt 1fpkt"];
5426--15154[label="1;1pkt 1fpkt"];
5426--15356[label="1;1pkt 1fpkt"];
10700--13676[label="1;1pkt 1fpkt"];
10890--13771[label="1;2pkt 2fpkt"];
11042--13831[label="1;1pkt 1fpkt"];
11042--15154[label="1;1pkt 1fpkt"];
11095--13857[label="1;3pkt 3fpkt"];
11647--14141[label="1;1pkt 1fpkt"];
12014--14301[label="1;1pkt 1fpkt"];
12014--15356[label="1;1pkt 1fpkt"];
12321--14459[label="1;1pkt 1fpkt"];
13831--15154[label="1;1pkt 1fpkt"];
14301--15356[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.209.76" dst_port="61592"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.89.219.103"/>
    </slice>
    <from sec="1207285677" usec="0"/>
    <to sec="1207285807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.213.120.104"/>
    </slice>
    <from sec="1207285947" usec="0"/>
    <to sec="1207285968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.157.253.104"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.24.105"/>
    </slice>
    <from sec="1207285512" usec="0"/>
    <to sec="1207285554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.172.179.105"/>
    </slice>
    <from sec="1207286053" usec="0"/>
    <to sec="1207286080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.86.187.105"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.2.204.105"/>
    </slice>
    <from sec="1207285804" usec="0"/>
    <to sec="1207285820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.13.33.106"/>
    </slice>
    <from sec="1207285879" usec="0"/>
    <to sec="1207286029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.174.64.106"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.54.193.107"/>
    </slice>
    <from sec="1207285491" usec="0"/>
    <to sec="1207285647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.206.228.107"/>
    </slice>
    <from sec="1207285329" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.73.243.107"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
5046[label="101.207.71.108;s;29pkt 29fpkt", shape=diamond, color=yellow];
10791[label="101.207.71.108;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.207.71.108:*, 160.188.216.48:21}[45.1613%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.1667%)&lt;BR/&gt; 34892: (2.5%)&lt;BR/&gt; 64781: (1.66667%)&lt;BR/&gt; 64027: (1.66667%)&lt;BR/&gt; 63245: (1.66667%)&gt;];
}
5046--10791[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="160.188.216.48" dst_port="21" src_ip="101.207.71.108"/>
    </slice>
    <from sec="1207285242" usec="0"/>
    <to sec="1207286058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.243.131.108"/>
    </slice>
    <from sec="1207285471" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.186.136.108"/>
    </slice>
    <from sec="1207285458" usec="0"/>
    <to sec="1207285468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.206.35.109"/>
    </slice>
    <from sec="1207285290" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.194.128.109"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.199.109"/>
    </slice>
    <from sec="1207285522" usec="0"/>
    <to sec="1207285590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.92.11.110"/>
    </slice>
    <from sec="1207285580" usec="0"/>
    <to sec="1207285586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.198.152.110"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.1.192.110"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.99.191.111"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.3.198.111"/>
    </slice>
    <from sec="1207285458" usec="0"/>
    <to sec="1207285895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.2.8.112"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.196.34.112"/>
    </slice>
    <from sec="1207285410" usec="0"/>
    <to sec="1207285898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.113.88.113"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.143.165.113"/>
    </slice>
    <from sec="1207285728" usec="0"/>
    <to sec="1207285747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.24.178.113"/>
    </slice>
    <from sec="1207285526" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="97.94.69.114"/>
    </slice>
    <from sec="1207285547" usec="0"/>
    <to sec="1207285573" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.5.116.114"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.102.115"/>
    </slice>
    <from sec="1207285603" usec="0"/>
    <to sec="1207285627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.214.165.115"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.214.214.115"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.85.201.116"/>
    </slice>
    <from sec="1207285270" usec="0"/>
    <to sec="1207286087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.162.170.118"/>
    </slice>
    <from sec="1207285515" usec="0"/>
    <to sec="1207285538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.106.71.119"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.226.231.119"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.76.18.120"/>
    </slice>
    <from sec="1207285869" usec="0"/>
    <to sec="1207285884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
5017[label="167.209.78.120;s;78pkt 78fpkt", shape=diamond, color=yellow];
10975[label="167.209.78.120;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.78.120:*, 96.69.248.192:80}[25.5556%]&lt;BR/&gt;{167.209.78.120:*, 105.194.231.24:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1642: (0.595238%)&lt;BR/&gt; 1641: (0.595238%)&lt;BR/&gt; 1638: (0.595238%)&lt;BR/&gt; 1636: (0.595238%)&gt;];
}
5017--8612[label="0.0641026;5pkt 5fpkt"];
5017--8688[label="0.0384615;3pkt 3fpkt"];
5017--8732[label="0.0641026;5pkt 5fpkt"];
5017--8807[label="0.0384615;3pkt 3fpkt"];
5017--8847[label="0.0641026;5pkt 5fpkt"];
5017--8923[label="0.0384615;3pkt 3fpkt"];
5017--10975[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="96.69.248.192" dst_port="80" src_ip="167.209.78.120"/>
      <filter dst_ip="105.194.231.24" dst_port="80" src_ip="167.209.78.120"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.79.40.121"/>
    </slice>
    <from sec="1207285560" usec="0"/>
    <to sec="1207285621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.118.241.121"/>
    </slice>
    <from sec="1207285703" usec="0"/>
    <to sec="1207285720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.102.123"/>
    </slice>
    <from sec="1207285618" usec="0"/>
    <to sec="1207285631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.220.133.123"/>
    </slice>
    <from sec="1207285981" usec="0"/>
    <to sec="1207286024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.68.198.123"/>
    </slice>
    <from sec="1207285889" usec="0"/>
    <to sec="1207285932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.178.164.124"/>
    </slice>
    <from sec="1207285220" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.102.125"/>
    </slice>
    <from sec="1207285910" usec="0"/>
    <to sec="1207285917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.34.192.125"/>
    </slice>
    <from sec="1207285807" usec="0"/>
    <to sec="1207285823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.34.41.126"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.185.123.126"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.151.143.127"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.61.121.128"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.67.149.128"/>
    </slice>
    <from sec="1207285234" usec="0"/>
    <to sec="1207286080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.148.240.128"/>
    </slice>
    <from sec="1207285703" usec="0"/>
    <to sec="1207285814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.156.0.129"/>
    </slice>
    <from sec="1207285572" usec="0"/>
    <to sec="1207285580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.218.217.130"/>
    </slice>
    <from sec="1207285580" usec="0"/>
    <to sec="1207285966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.113.3.131"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.76.62.131"/>
    </slice>
    <from sec="1207285888" usec="0"/>
    <to sec="1207285903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.61.121.131"/>
    </slice>
    <from sec="1207285213" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.43.23.132"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.69.161.132"/>
    </slice>
    <from sec="1207285222" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.156.184.132"/>
    </slice>
    <from sec="1207285768" usec="0"/>
    <to sec="1207285796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.238.232.132"/>
    </slice>
    <from sec="1207285220" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.67.186.133"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.32.218.133"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.11.29.134"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.213.82.134"/>
    </slice>
    <from sec="1207285701" usec="0"/>
    <to sec="1207285710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.105.135"/>
    </slice>
    <from sec="1207285579" usec="0"/>
    <to sec="1207285597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
3687[label="149.82.17.108;d;15pkt 15fpkt", shape=diamond, color=yellow];
3774[label="102.34.111.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
5128[label="102.34.105.136;s;2pkt 2fpkt", shape=diamond, color=yellow];
7043[label="149.82.17.108;d;6pkt 6fpkt", shape=hexagon, color=black];
11234[label="102.34.105.136;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13930[label="102.34.105.136;2pkt 2fpkt", shape=invtriangle, color=brown];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.157.244.204:80, 149.82.17.108:*}[73.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60153: (7.14286%)&lt;BR/&gt; 60103: (7.14286%)&lt;BR/&gt; 60072: (5.35714%)&lt;BR/&gt; 60060: (3.57143%)&gt;];
}
3687--3774[label="1;1pkt 1fpkt"];
3687--5128[label="1;2pkt 2fpkt"];
3687--7043[label="1;6pkt 6fpkt"];
3687--11234[label="1;2pkt 2fpkt"];
3687--13930[label="1;2pkt 2fpkt"];
3774--7043[label="1;1pkt 1fpkt"];
5128--11234[label="1;2pkt 2fpkt"];
5128--13930[label="1;2pkt 2fpkt"];
11234--13930[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.17.108" src_ip="204.157.244.204" src_port="80"/>
    </slice>
    <from sec="1207285529" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.187.112.136"/>
    </slice>
    <from sec="1207286039" usec="0"/>
    <to sec="1207286056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.43.148.136"/>
    </slice>
    <from sec="1207285577" usec="0"/>
    <to sec="1207285605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.140.173.137"/>
    </slice>
    <from sec="1207285215" usec="0"/>
    <to sec="1207286088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.203.47.138"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207285826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.185.33.139"/>
    </slice>
    <from sec="1207285526" usec="0"/>
    <to sec="1207285690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.27.165.139"/>
    </slice>
    <from sec="1207285476" usec="0"/>
    <to sec="1207285578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.173.72.140"/>
    </slice>
    <from sec="1207286086" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.232.195.141"/>
    </slice>
    <from sec="1207285460" usec="0"/>
    <to sec="1207285513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.214.30.142"/>
    </slice>
    <from sec="1207285633" usec="0"/>
    <to sec="1207285666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.10.55.142"/>
    </slice>
    <from sec="1207285712" usec="0"/>
    <to sec="1207285751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.108.145.142"/>
    </slice>
    <from sec="1207285512" usec="0"/>
    <to sec="1207285521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.94.175.142"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.180.228.142"/>
    </slice>
    <from sec="1207285605" usec="0"/>
    <to sec="1207285619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.58.169.143"/>
    </slice>
    <from sec="1207285666" usec="0"/>
    <to sec="1207285700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.160.44.145"/>
    </slice>
    <from sec="1207285218" usec="0"/>
    <to sec="1207285641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.127.96.145"/>
    </slice>
    <from sec="1207285493" usec="0"/>
    <to sec="1207285527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.45.82.146"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.60.232.146"/>
    </slice>
    <from sec="1207285289" usec="0"/>
    <to sec="1207285762" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.200.36.149"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207285897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.131.60.149"/>
    </slice>
    <from sec="1207285873" usec="0"/>
    <to sec="1207285903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.186.187.149"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.20.152"/>
    </slice>
    <from sec="1207285818" usec="0"/>
    <to sec="1207286088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.9.77.152"/>
    </slice>
    <from sec="1207285839" usec="0"/>
    <to sec="1207285893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.69.33.153"/>
    </slice>
    <from sec="1207285996" usec="0"/>
    <to sec="1207286010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.220.100.153"/>
    </slice>
    <from sec="1207285252" usec="0"/>
    <to sec="1207285264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.138.78.154"/>
    </slice>
    <from sec="1207285705" usec="0"/>
    <to sec="1207285714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.75.85.155"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207285378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.43.158.155"/>
    </slice>
    <from sec="1207285539" usec="0"/>
    <to sec="1207285559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.224.221.155"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207285560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.134.81.156"/>
    </slice>
    <from sec="1207285871" usec="0"/>
    <to sec="1207286048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.209.115.156"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.6.157"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.35.12.157"/>
    </slice>
    <from sec="1207285230" usec="0"/>
    <to sec="1207286002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="199.156.14.157"/>
    </slice>
    <from sec="1207285325" usec="0"/>
    <to sec="1207285330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.23.6.158"/>
    </slice>
    <from sec="1207285306" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.27.158"/>
    </slice>
    <from sec="1207285737" usec="0"/>
    <to sec="1207285854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.207.8.159"/>
    </slice>
    <from sec="1207285227" usec="0"/>
    <to sec="1207285258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.46.159"/>
    </slice>
    <from sec="1207285523" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
1817[label="149.82.199.159;d;99pkt 99fpkt", shape=diamond, color=yellow];
11561[label="78.88.202.159;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14094[label="78.88.202.159;1pkt 1fpkt", shape=invtriangle, color=brown];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 149.82.199.159:13041}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13041: (50%)&lt;BR/&gt; 13854: (1.48515%)&lt;BR/&gt; 13159: (0.990099%)&lt;BR/&gt; 13138: (0.990099%)&lt;BR/&gt; 63318: (0.49505%)&gt;];
}
1817--11561[label="1;1pkt 1fpkt"];
1817--14094[label="1;1pkt 1fpkt"];
11561--14094[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.199.159" dst_port="13041"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.11.209.159"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.153.9.161"/>
    </slice>
    <from sec="1207286062" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.157.249.161"/>
    </slice>
    <from sec="1207285811" usec="0"/>
    <to sec="1207285830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.1.180.162"/>
    </slice>
    <from sec="1207285482" usec="0"/>
    <to sec="1207285485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="198.172.235.162"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.32.192.163"/>
    </slice>
    <from sec="1207285498" usec="0"/>
    <to sec="1207285510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.216.0.164"/>
    </slice>
    <from sec="1207285515" usec="0"/>
    <to sec="1207285524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.188.87.164"/>
    </slice>
    <from sec="1207285710" usec="0"/>
    <to sec="1207285817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.134.148.164"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.148.186.164"/>
    </slice>
    <from sec="1207285583" usec="0"/>
    <to sec="1207285594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.106.4.165"/>
    </slice>
    <from sec="1207285392" usec="0"/>
    <to sec="1207285936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.23.76.166"/>
    </slice>
    <from sec="1207285508" usec="0"/>
    <to sec="1207285517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.147.8.167"/>
    </slice>
    <from sec="1207285224" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.49.139.167"/>
    </slice>
    <from sec="1207285542" usec="0"/>
    <to sec="1207285684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.54.211.167"/>
    </slice>
    <from sec="1207285574" usec="0"/>
    <to sec="1207285599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.89.48.168"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.84.168"/>
    </slice>
    <from sec="1207285710" usec="0"/>
    <to sec="1207285711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.15.230.168"/>
    </slice>
    <from sec="1207285637" usec="0"/>
    <to sec="1207285657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.197.254.168"/>
    </slice>
    <from sec="1207285888" usec="0"/>
    <to sec="1207285907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.50.53.169"/>
    </slice>
    <from sec="1207286060" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.43.19.170"/>
    </slice>
    <from sec="1207285961" usec="0"/>
    <to sec="1207286004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.131.161.170"/>
    </slice>
    <from sec="1207285627" usec="0"/>
    <to sec="1207285635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.145.26.171"/>
    </slice>
    <from sec="1207286033" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.19.72.171"/>
    </slice>
    <from sec="1207285810" usec="0"/>
    <to sec="1207285874" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.137.131.173"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.155.40.174"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207286087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.133.92.174"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.179.72.175"/>
    </slice>
    <from sec="1207285555" usec="0"/>
    <to sec="1207285569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.102.175"/>
    </slice>
    <from sec="1207286041" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.148.153.175"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.201.172.175"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.78.59.176"/>
    </slice>
    <from sec="1207285219" usec="0"/>
    <to sec="1207285316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.97.144.176"/>
    </slice>
    <from sec="1207285238" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.12.218.177"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.165.218.177"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.186.54.178"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
11861[label="212.246.10.179;105pkt 105fpkt", shape=pentagon, color=darkviolet];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.246.10.179:*, *:1433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1433: (50%)&lt;BR/&gt; 4915: (0.952381%)&lt;BR/&gt; 2275: (0.952381%)&lt;BR/&gt; 1534: (0.952381%)&lt;BR/&gt; 4985: (0.47619%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1433" src_ip="212.246.10.179"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="185.129.77.179"/>
    </slice>
    <from sec="1207285414" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.32.177.179"/>
    </slice>
    <from sec="1207285918" usec="0"/>
    <to sec="1207286056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.152.185.179"/>
    </slice>
    <from sec="1207285782" usec="0"/>
    <to sec="1207285809" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.194.179"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.194.1.181"/>
    </slice>
    <from sec="1207285530" usec="0"/>
    <to sec="1207285647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.7.63.181"/>
    </slice>
    <from sec="1207285249" usec="0"/>
    <to sec="1207285692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.239.181"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.133.182"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.108.183"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="123.122.194.184"/>
    </slice>
    <from sec="1207285367" usec="0"/>
    <to sec="1207285467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.175.38.186"/>
    </slice>
    <from sec="1207285715" usec="0"/>
    <to sec="1207285729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.46.80.186"/>
    </slice>
    <from sec="1207285583" usec="0"/>
    <to sec="1207285656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.93.124.186"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.181.5.187"/>
    </slice>
    <from sec="1207285259" usec="0"/>
    <to sec="1207286073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.43.178.187"/>
    </slice>
    <from sec="1207285217" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.221.187"/>
    </slice>
    <from sec="1207285668" usec="0"/>
    <to sec="1207285717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
2494[label="167.209.236.112;d;193pkt 193fpkt", shape=diamond, color=yellow];
6853[label="167.209.236.112;d;172pkt 172fpkt", shape=hexagon, color=black];
11983[label="12.93.232.187;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14289[label="12.93.232.187;13pkt 13fpkt", shape=invtriangle, color=brown];
15350[label="12.93.232.187;13pkt 13fpkt", shape=invhouse, color=bisque];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.209.236.112:25}[89.6373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.505%)&lt;BR/&gt; 49388: (0.618812%)&lt;BR/&gt; 49381: (0.618812%)&lt;BR/&gt; 49377: (0.618812%)&lt;BR/&gt; 49364: (0.618812%)&gt;];
}
2494--2560[label="0.0294118;1pkt 1fpkt"];
2494--2577[label="0.00625;1pkt 1fpkt"];
2494--2617[label="0.00675676;1pkt 1fpkt"];
2494--2907[label="0.0103627;2pkt 2fpkt"];
2494--6551[label="0.00675676;1pkt 1fpkt"];
2494--6853[label="1;172pkt 172fpkt"];
2494--6888[label="0.0294118;1pkt 1fpkt"];
2494--8687[label="0.0414508;8pkt 8fpkt"];
2494--8806[label="0.0414508;8pkt 8fpkt"];
2494--8922[label="0.0414508;8pkt 8fpkt"];
2494--9004[label="0.037037;1pkt 1fpkt"];
2494--9050[label="0.0227273;1pkt 1fpkt"];
2494--9824[label="0.00578035;1pkt 1fpkt"];
2494--10303[label="0.00584795;1pkt 1fpkt"];
2494--11798[label="0.0666667;1pkt 1fpkt"];
2494--11983[label="1;13pkt 13fpkt"];
2494--13499[label="0.00584795;1pkt 1fpkt"];
2494--14289[label="1;13pkt 13fpkt"];
2494--15350[label="1;13pkt 13fpkt"];
6853--6888[label="0.0294118;1pkt 1fpkt"];
6853--8687[label="0.0465116;8pkt 8fpkt"];
6853--8806[label="0.0465116;8pkt 8fpkt"];
6853--8922[label="0.0465116;8pkt 8fpkt"];
6853--9004[label="0.037037;1pkt 1fpkt"];
6853--9050[label="0.0227273;1pkt 1fpkt"];
6853--9824[label="0.00581395;1pkt 1fpkt"];
6853--10303[label="0.00584795;1pkt 1fpkt"];
6853--11798[label="0.0666667;1pkt 1fpkt"];
6853--11983[label="1;13pkt 13fpkt"];
6853--13499[label="0.00584795;1pkt 1fpkt"];
6853--14289[label="1;13pkt 13fpkt"];
6853--15350[label="1;13pkt 13fpkt"];
11983--14289[label="1;13pkt 13fpkt"];
11983--15350[label="1;13pkt 13fpkt"];
14289--15350[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.236.112" dst_port="25"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.12.233.187"/>
    </slice>
    <from sec="1207285256" usec="0"/>
    <to sec="1207285384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.219.25.189"/>
    </slice>
    <from sec="1207285376" usec="0"/>
    <to sec="1207285836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.43.36.189"/>
    </slice>
    <from sec="1207285223" usec="0"/>
    <to sec="1207285670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.5.65.189"/>
    </slice>
    <from sec="1207285493" usec="0"/>
    <to sec="1207285563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
5196[label="74.169.175.189;s;1pkt 1fpkt", shape=diamond, color=yellow];
12003[label="74.169.175.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.169.175.189:23982, 150.183.90.91:2491}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23982: (50%)&lt;BR/&gt; 2491: (50%)&gt;];
}
5196--12003[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.183.90.91" dst_port="2491" src_ip="74.169.175.189" src_port="23982"/>
    </slice>
    <from sec="1207285956" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.148.211.189"/>
    </slice>
    <from sec="1207285753" usec="0"/>
    <to sec="1207285815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.11.190"/>
    </slice>
    <from sec="1207285664" usec="0"/>
    <to sec="1207285695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="201.209.58.190"/>
    </slice>
    <from sec="1207285292" usec="0"/>
    <to sec="1207285355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.187.112.190"/>
    </slice>
    <from sec="1207285428" usec="0"/>
    <to sec="1207285439" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.98.146.190"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.6.40.191"/>
    </slice>
    <from sec="1207285550" usec="0"/>
    <to sec="1207285579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.104.192"/>
    </slice>
    <from sec="1207285934" usec="0"/>
    <to sec="1207285978" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.148.180.193"/>
    </slice>
    <from sec="1207286062" usec="0"/>
    <to sec="1207286073" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.158.215.193"/>
    </slice>
    <from sec="1207285954" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.9.52.194"/>
    </slice>
    <from sec="1207285590" usec="0"/>
    <to sec="1207285627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.37.70.194"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_629{
style=filled;
color=gray75;
12082[label="213.61.102.196;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat629[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.102.196:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
</description>
    <slice>
      <filter src_ip="213.61.102.196"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.193.122.196"/>
    </slice>
    <from sec="1207285553" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.168.196"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.46.29.197"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285307" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.27.145.197"/>
    </slice>
    <from sec="1207285751" usec="0"/>
    <to sec="1207285948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.82.71.198"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.151.202.198"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.231.225.198"/>
    </slice>
    <from sec="1207285691" usec="0"/>
    <to sec="1207285716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.126.138.199"/>
    </slice>
    <from sec="1207285349" usec="0"/>
    <to sec="1207285665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.81.16.200"/>
    </slice>
    <from sec="1207285923" usec="0"/>
    <to sec="1207285947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.30.200"/>
    </slice>
    <from sec="1207285715" usec="0"/>
    <to sec="1207285786" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.178.200"/>
    </slice>
    <from sec="1207285384" usec="0"/>
    <to sec="1207285447" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.121.197.200"/>
    </slice>
    <from sec="1207285658" usec="0"/>
    <to sec="1207285768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.97.33.201"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_644{
style=filled;
color=gray75;
5069[label="15.193.160.201;s;621pkt 621fpkt", shape=diamond, color=yellow];
12163[label="15.193.160.201;717pkt 717fpkt", shape=pentagon, color=darkviolet];
stat644[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.193.160.201:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32346: (0.186846%)&lt;BR/&gt; 55863: (0.149477%)&lt;BR/&gt; 45909: (0.149477%)&lt;BR/&gt; 44850: (0.149477%)&gt;];
}
5069--8004[label="0.00833333;1pkt 1fpkt"];
5069--8633[label="0.114332;71pkt 71fpkt"];
5069--8753[label="0.114332;71pkt 71fpkt"];
5069--8869[label="0.114332;71pkt 71fpkt"];
5069--12163[label="1;621pkt 621fpkt"];
</description>
    <slice>
      <filter src_ip="15.193.160.201" src_port="80"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.241.0.202"/>
    </slice>
    <from sec="1207285227" usec="0"/>
    <to sec="1207286071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.61.202"/>
    </slice>
    <from sec="1207285254" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.197.224.202"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.127.33.203"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.213.21.204"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.84.204"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.60.170.204"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.176.174.204"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207285373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.27.206"/>
    </slice>
    <from sec="1207285802" usec="0"/>
    <to sec="1207285880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.216.119.206"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.15.18.207"/>
    </slice>
    <from sec="1207285615" usec="0"/>
    <to sec="1207285665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.66.18.207"/>
    </slice>
    <from sec="1207285319" usec="0"/>
    <to sec="1207285655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.156.78.207"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207285285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.66.120.208"/>
    </slice>
    <from sec="1207285225" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.165.109.209"/>
    </slice>
    <from sec="1207285319" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.228.187.209"/>
    </slice>
    <from sec="1207286054" usec="0"/>
    <to sec="1207286072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.216.139.210"/>
    </slice>
    <from sec="1207285731" usec="0"/>
    <to sec="1207285812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.86.160.210"/>
    </slice>
    <from sec="1207285222" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.15.197.210"/>
    </slice>
    <from sec="1207285536" usec="0"/>
    <to sec="1207285626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.32.212"/>
    </slice>
    <from sec="1207285715" usec="0"/>
    <to sec="1207285844" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.224.212"/>
    </slice>
    <from sec="1207285706" usec="0"/>
    <to sec="1207285740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_671{
style=filled;
color=gray75;
2870[label="102.34.106.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
12338[label="102.34.106.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14467[label="102.34.106.213;1pkt 1fpkt", shape=invtriangle, color=brown];
stat671[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.34.106.213:80, 167.209.145.21:1050}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1050: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2870--12338[label="1;1pkt 1fpkt"];
2870--14467[label="1;1pkt 1fpkt"];
12338--14467[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.145.21" dst_port="1050" src_ip="102.34.106.213" src_port="80"/>
    </slice>
    <from sec="1207285442" usec="0"/>
    <to sec="1207285451" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.111.213"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.13401,2.04189,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_673{
style=filled;
color=gray75;
214[label="96.98.198.211s;1pkt 1fpkt", shape=rectangle, color=red];
5105[label="160.130.48.16;d;126pkt 126fpkt", shape=diamond, color=yellow];
5148[label="96.98.198.211;s;121pkt 121fpkt", shape=diamond, color=yellow];
stat673[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.98.198.211:80, 160.130.48.16:*}[94.4882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7984%)&lt;BR/&gt; 4809: (0.604839%)&lt;BR/&gt; 4878: (0.403226%)&lt;BR/&gt; 4877: (0.403226%)&lt;BR/&gt; 4876: (0.403226%)&gt;];
}
214--5105[label="1;1pkt 1fpkt"];
214--5148[label="1;1pkt 1fpkt"];
5105--5148[label="0.991736;120pkt 120fpkt"];
5105--12342[label="0.0517241;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="160.130.48.16" src_ip="96.98.198.211" src_port="80"/>
    </slice>
    <from sec="1207285792" usec="0"/>
    <to sec="1207286027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.162.72.215"/>
    </slice>
    <from sec="1207285457" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.187.98.215"/>
    </slice>
    <from sec="1207285535" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="74.14.199.215"/>
    </slice>
    <from sec="1207285854" usec="0"/>
    <to sec="1207286011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_677{
style=filled;
color=gray75;
1562[label="149.82.19.243;d;90pkt 90fpkt", shape=diamond, color=yellow];
4904[label="192.37.102.219;s;14pkt 14fpkt", shape=diamond, color=yellow];
5156[label="78.234.209.220;s;57pkt 57fpkt", shape=diamond, color=yellow];
5583[label="149.82.19.243;d;90pkt 90fpkt", shape=hexagon, color=black];
8148[label="192.37.102.219;s;14pkt 14fpkt", shape=hexagon, color=black];
8151[label="78.234.209.220;s;57pkt 57fpkt", shape=hexagon, color=black];
12401[label="192.33.230.217;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12472[label="192.33.230.223;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12666[label="192.33.230.238;26pkt 26fpkt", shape=pentagon, color=darkviolet];
14499[label="192.33.230.217;6pkt 6fpkt", shape=invtriangle, color=brown];
14535[label="192.33.230.223;28pkt 28fpkt", shape=invtriangle, color=brown];
15429[label="192.33.230.217;6pkt 6fpkt", shape=invhouse, color=bisque];
15449[label="192.33.230.223;28pkt 28fpkt", shape=invhouse, color=bisque];
stat677[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.234.209.220:80, 149.82.19.243:*}[42.8571%]&lt;BR/&gt;{192.33.230.223:80, 149.82.19.243:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.3333%)&lt;BR/&gt; 8080: (8.66667%)&lt;BR/&gt; 2428: (0.555556%)&lt;BR/&gt; 2425: (0.555556%)&lt;BR/&gt; 2423: (0.555556%)&gt;];
}
1562--4904[label="0.785714;11pkt 11fpkt"];
1562--5156[label="0.298246;17pkt 17fpkt"];
1562--5583[label="1;90pkt 90fpkt"];
1562--8148[label="0.785714;11pkt 11fpkt"];
1562--8151[label="0.298246;17pkt 17fpkt"];
1562--12401[label="1;6pkt 6fpkt"];
1562--12472[label="1;28pkt 28fpkt"];
1562--12666[label="1;26pkt 26fpkt"];
1562--14499[label="1;6pkt 6fpkt"];
1562--14535[label="1;28pkt 28fpkt"];
1562--15429[label="1;6pkt 6fpkt"];
1562--15449[label="1;28pkt 28fpkt"];
4904--5583[label="0.785714;11pkt 11fpkt"];
4904--8148[label="1;14pkt 14fpkt"];
5156--5583[label="0.298246;17pkt 17fpkt"];
5156--8151[label="1;57pkt 57fpkt"];
5583--8148[label="0.785714;11pkt 11fpkt"];
5583--8151[label="0.298246;17pkt 17fpkt"];
5583--12401[label="1;6pkt 6fpkt"];
5583--12472[label="1;28pkt 28fpkt"];
5583--12666[label="1;26pkt 26fpkt"];
5583--14499[label="1;6pkt 6fpkt"];
5583--14535[label="1;28pkt 28fpkt"];
5583--15429[label="1;6pkt 6fpkt"];
5583--15449[label="1;28pkt 28fpkt"];
12401--14499[label="1;6pkt 6fpkt"];
12401--15429[label="1;6pkt 6fpkt"];
12472--14535[label="1;28pkt 28fpkt"];
12472--15449[label="1;28pkt 28fpkt"];
14499--15429[label="1;6pkt 6fpkt"];
14535--15449[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.19.243" src_ip="78.234.209.220" src_port="80"/>
      <filter dst_ip="149.82.19.243" src_ip="192.33.230.223" src_port="80"/>
    </slice>
    <from sec="1207285922" usec="0"/>
    <to sec="1207286013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="75.60.213.218"/>
    </slice>
    <from sec="1207285532" usec="0"/>
    <to sec="1207285827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.198.161.220"/>
    </slice>
    <from sec="1207285942" usec="0"/>
    <to sec="1207286041" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.234.209.220"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.33.82.221"/>
    </slice>
    <from sec="1207285628" usec="0"/>
    <to sec="1207285634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.154.93.221"/>
    </slice>
    <from sec="1207285918" usec="0"/>
    <to sec="1207285925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.101.106.222"/>
    </slice>
    <from sec="1207285660" usec="0"/>
    <to sec="1207285682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.146.180.222"/>
    </slice>
    <from sec="1207285702" usec="0"/>
    <to sec="1207285723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.147.153.223"/>
    </slice>
    <from sec="1207285964" usec="0"/>
    <to sec="1207285991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.152.49.224"/>
    </slice>
    <from sec="1207285491" usec="0"/>
    <to sec="1207285497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.31.93.224"/>
    </slice>
    <from sec="1207285534" usec="0"/>
    <to sec="1207285610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.45.229.224"/>
    </slice>
    <from sec="1207285796" usec="0"/>
    <to sec="1207285807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.5.14.225"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.93.226"/>
    </slice>
    <from sec="1207286072" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.89.135.226"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207285918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.20.1.230"/>
    </slice>
    <from sec="1207285229" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.171.101.230"/>
    </slice>
    <from sec="1207285754" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.217.138.231"/>
    </slice>
    <from sec="1207285234" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.160.231"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.65.162.231"/>
    </slice>
    <from sec="1207285425" usec="0"/>
    <to sec="1207285543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.159.125.232"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.150.161.232"/>
    </slice>
    <from sec="1207285899" usec="0"/>
    <to sec="1207285925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.210.238.232"/>
    </slice>
    <from sec="1207285702" usec="0"/>
    <to sec="1207285814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.205.156.233"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.161.4.234"/>
    </slice>
    <from sec="1207285597" usec="0"/>
    <to sec="1207285629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.148.96.235"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.142.216.235"/>
    </slice>
    <from sec="1207285610" usec="0"/>
    <to sec="1207285632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.57.247.235"/>
    </slice>
    <from sec="1207286047" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.174.99.238"/>
    </slice>
    <from sec="1207285277" usec="0"/>
    <to sec="1207285432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
5266[label="221.92.33.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
12703[label="221.92.33.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14644[label="221.92.33.242;3pkt 3fpkt", shape=invtriangle, color=brown];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.92.33.242:80, 167.209.208.54:46379}[33.3333%]&lt;BR/&gt;{221.92.33.242:80, 167.209.208.54:46390}[33.3333%]&lt;BR/&gt;{221.92.33.242:80, 167.209.208.54:46461}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46390: (18.75%)&lt;BR/&gt; 46379: (18.75%)&lt;BR/&gt; 46461: (12.5%)&gt;];
}
5266--12703[label="1;2pkt 2fpkt"];
5266--14644[label="1;2pkt 2fpkt"];
12703--14644[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.208.54" dst_port="46461" src_ip="221.92.33.242" src_port="80"/>
      <filter dst_ip="167.209.208.54" dst_port="46390" src_ip="221.92.33.242" src_port="80"/>
      <filter dst_ip="167.209.208.54" dst_port="46379" src_ip="221.92.33.242" src_port="80"/>
    </slice>
    <from sec="1207286022" usec="0"/>
    <to sec="1207286085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.34.69.242"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207285911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.1.88.242"/>
    </slice>
    <from sec="1207285950" usec="0"/>
    <to sec="1207285970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.203.162.242"/>
    </slice>
    <from sec="1207285224" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.3.243"/>
    </slice>
    <from sec="1207285619" usec="0"/>
    <to sec="1207285647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_714{
style=filled;
color=gray75;
1333[label="101.207.71.161;d;35pkt 35fpkt", shape=diamond, color=yellow];
1488[label="160.67.152.243;s;4pkt 4fpkt", shape=diamond, color=yellow];
3592[label="185.129.177.97;s;34pkt 34fpkt", shape=diamond, color=yellow];
6140[label="101.207.71.161;d;24pkt 24fpkt", shape=hexagon, color=black];
8034[label="185.129.177.97;s;34pkt 34fpkt", shape=hexagon, color=black];
10594[label="185.129.177.97;35pkt 35fpkt", shape=pentagon, color=darkviolet];
12723[label="160.67.152.243;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14653[label="160.67.152.243;7pkt 7fpkt", shape=invtriangle, color=brown];
15516[label="160.67.152.243;7pkt 7fpkt", shape=invhouse, color=bisque];
stat714[shape=component, label=&lt;Rules:&lt;BR/&gt;{185.129.177.97:80, 101.207.71.161:*}[81.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9305%)&lt;BR/&gt; 60498: (1.60428%)&lt;BR/&gt; 55733: (1.60428%)&lt;BR/&gt; 65406: (1.3369%)&lt;BR/&gt; 61711: (1.3369%)&gt;];
}
1333--1488[label="0.5;2pkt 2fpkt"];
1333--3592[label="0.882353;30pkt 30fpkt"];
1333--6140[label="1;24pkt 24fpkt"];
1333--8034[label="0.882353;30pkt 30fpkt"];
1333--8590[label="0.0571429;2pkt 2fpkt"];
1333--8610[label="0.0285714;1pkt 1fpkt"];
1333--8633[label="0.0571429;2pkt 2fpkt"];
1333--8710[label="0.0571429;2pkt 2fpkt"];
1333--8730[label="0.0285714;1pkt 1fpkt"];
1333--8753[label="0.0571429;2pkt 2fpkt"];
1333--8828[label="0.0571429;2pkt 2fpkt"];
1333--8846[label="0.0285714;1pkt 1fpkt"];
1333--8869[label="0.0571429;2pkt 2fpkt"];
1333--10594[label="0.828571;29pkt 29fpkt"];
1333--12723[label="0.571429;4pkt 4fpkt"];
1333--14653[label="0.571429;4pkt 4fpkt"];
1333--15516[label="0.571429;4pkt 4fpkt"];
1488--6140[label="0.5;2pkt 2fpkt"];
1488--12723[label="1;4pkt 4fpkt"];
1488--14653[label="1;4pkt 4fpkt"];
1488--15516[label="1;4pkt 4fpkt"];
3592--6140[label="0.875;21pkt 21fpkt"];
3592--8034[label="1;34pkt 34fpkt"];
3592--8590[label="0.0588235;2pkt 2fpkt"];
3592--8610[label="0.0294118;1pkt 1fpkt"];
3592--8633[label="0.0294118;1pkt 1fpkt"];
3592--8710[label="0.0588235;2pkt 2fpkt"];
3592--8730[label="0.0294118;1pkt 1fpkt"];
3592--8753[label="0.0294118;1pkt 1fpkt"];
3592--8828[label="0.0588235;2pkt 2fpkt"];
3592--8846[label="0.0294118;1pkt 1fpkt"];
3592--8869[label="0.0294118;1pkt 1fpkt"];
3592--10594[label="0.970588;33pkt 33fpkt"];
6140--8034[label="0.875;21pkt 21fpkt"];
6140--8590[label="0.0833333;2pkt 2fpkt"];
6140--8610[label="0.0416667;1pkt 1fpkt"];
6140--8710[label="0.0833333;2pkt 2fpkt"];
6140--8730[label="0.0416667;1pkt 1fpkt"];
6140--8828[label="0.0833333;2pkt 2fpkt"];
6140--8846[label="0.0416667;1pkt 1fpkt"];
6140--10594[label="0.833333;20pkt 20fpkt"];
6140--12723[label="0.285714;2pkt 2fpkt"];
6140--14653[label="0.285714;2pkt 2fpkt"];
6140--15516[label="0.285714;2pkt 2fpkt"];
8034--8590[label="0.0588235;2pkt 2fpkt"];
8034--8610[label="0.0294118;1pkt 1fpkt"];
8034--8633[label="0.0294118;1pkt 1fpkt"];
8034--8710[label="0.0588235;2pkt 2fpkt"];
8034--8730[label="0.0294118;1pkt 1fpkt"];
8034--8753[label="0.0294118;1pkt 1fpkt"];
8034--8828[label="0.0588235;2pkt 2fpkt"];
8034--8846[label="0.0294118;1pkt 1fpkt"];
8034--8869[label="0.0294118;1pkt 1fpkt"];
8034--10594[label="0.970588;33pkt 33fpkt"];
12723--14653[label="1;7pkt 7fpkt"];
12723--15516[label="1;7pkt 7fpkt"];
14653--15516[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.71.161" src_ip="185.129.177.97" src_port="80"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="149.82.211.243"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207285714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.240.86.244"/>
    </slice>
    <from sec="1207285587" usec="0"/>
    <to sec="1207285627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.67.0.246"/>
    </slice>
    <from sec="1207285308" usec="0"/>
    <to sec="1207285979" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.217.2.246"/>
    </slice>
    <from sec="1207285975" usec="0"/>
    <to sec="1207285982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.187.206.246"/>
    </slice>
    <from sec="1207285946" usec="0"/>
    <to sec="1207285965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.34.106.247"/>
    </slice>
    <from sec="1207285495" usec="0"/>
    <to sec="1207285562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.223.92.248"/>
    </slice>
    <from sec="1207285226" usec="0"/>
    <to sec="1207286101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.196.171.248"/>
    </slice>
    <from sec="1207285369" usec="0"/>
    <to sec="1207285416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="167.209.178.248"/>
    </slice>
    <from sec="1207286085" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.183.4.249"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.170.14.251"/>
    </slice>
    <from sec="1207285231" usec="0"/>
    <to sec="1207285279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.101.38.251"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.51.28.254"/>
    </slice>
    <from sec="1207285441" usec="0"/>
    <to sec="1207285448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.376164,2.09221,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.218.210.254"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.236.209.0"/>
    </slice>
    <from sec="1207285527" usec="0"/>
    <to sec="1207285538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.167.3.1"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.139.84.1"/>
    </slice>
    <from sec="1207285749" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.240.146.1"/>
    </slice>
    <from sec="1207285521" usec="0"/>
    <to sec="1207285530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_733{
style=filled;
color=gray75;
2341[label="167.209.186.189;d;44pkt 44fpkt", shape=diamond, color=yellow];
3400[label="77.49.79.249;s;2pkt 2fpkt", shape=diamond, color=yellow];
7913[label="77.49.79.249;s;2pkt 2fpkt", shape=hexagon, color=black];
8974[label="14.210.96.2;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9214[label="42.106.121.15;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12780[label="77.49.79.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12856[label="14.210.96.2;6pkt 6fpkt", shape=invtriangle, color=brown];
14709[label="14.210.96.2;7pkt 7fpkt", shape=invhouse, color=bisque];
stat733[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.209.186.189:43195}[90.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43195: (47.1831%)&lt;BR/&gt; 63407: (2.8169%)&lt;BR/&gt; 63347: (2.8169%)&lt;BR/&gt; 62358: (2.8169%)&lt;BR/&gt; 61766: (2.8169%)&gt;];
}
2341--3400[label="1;2pkt 2fpkt"];
2341--7913[label="1;2pkt 2fpkt"];
2341--8974[label="1;7pkt 7fpkt"];
2341--9214[label="1;1pkt 1fpkt"];
2341--12780[label="1;2pkt 2fpkt"];
2341--12856[label="1;6pkt 6fpkt"];
2341--14709[label="1;7pkt 7fpkt"];
3400--7913[label="1;2pkt 2fpkt"];
3400--12780[label="1;2pkt 2fpkt"];
7913--12780[label="1;2pkt 2fpkt"];
8974--12856[label="1;6pkt 6fpkt"];
8974--14709[label="1;7pkt 7fpkt"];
12856--14709[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.186.189" dst_port="43195"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="111.140.148.2"/>
    </slice>
    <from sec="1207285902" usec="0"/>
    <to sec="1207285908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.54.197.2"/>
    </slice>
    <from sec="1207285516" usec="0"/>
    <to sec="1207285660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967013,1.96331,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_736{
style=filled;
color=gray75;
3850[label="160.86.96.202;d;162pkt 162fpkt", shape=diamond, color=yellow];
4607[label="219.59.176.119;s;65pkt 65fpkt", shape=diamond, color=yellow];
8993[label="219.87.95.3;40pkt 40fpkt", shape=pentagon, color=darkviolet];
12869[label="219.87.95.3;41pkt 41fpkt", shape=invtriangle, color=brown];
14714[label="219.87.95.3;40pkt 40fpkt", shape=invhouse, color=bisque];
stat736[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.59.176.119:6667, 160.86.96.202:*}[30.8989%]&lt;BR/&gt;{219.87.95.3:*, 160.86.96.202:*}[23.0337%]&lt;BR/&gt;{96.102.153.19:*, 160.86.96.202:*}[20.2247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (41.2356%)&lt;BR/&gt; 113: (8.33333%)&lt;BR/&gt; 58718: (0.574713%)&lt;BR/&gt; 57216: (0.574713%)&lt;BR/&gt; 57057: (0.574713%)&gt;];
}
3850--4167[label="0.0123457;2pkt 2fpkt"];
3850--4607[label="0.846154;55pkt 55fpkt"];
3850--7432[label="0.0123457;2pkt 2fpkt"];
3850--8413[label="0.0123457;2pkt 2fpkt"];
3850--8641[label="0.0123457;2pkt 2fpkt"];
3850--8679[label="0.00617284;1pkt 1fpkt"];
3850--8680[label="0.00617284;1pkt 1fpkt"];
3850--8761[label="0.0123457;2pkt 2fpkt"];
3850--8799[label="0.00617284;1pkt 1fpkt"];
3850--8800[label="0.00617284;1pkt 1fpkt"];
3850--8877[label="0.0123457;2pkt 2fpkt"];
3850--8915[label="0.00617284;1pkt 1fpkt"];
3850--8916[label="0.00617284;1pkt 1fpkt"];
3850--8993[label="0.85;34pkt 34fpkt"];
3850--12263[label="0.0123457;2pkt 2fpkt"];
3850--12869[label="0.853659;35pkt 35fpkt"];
3850--14432[label="0.0123457;2pkt 2fpkt"];
3850--14714[label="0.85;34pkt 34fpkt"];
3850--15405[label="0.0123457;2pkt 2fpkt"];
8993--12869[label="1;40pkt 40fpkt"];
8993--14714[label="1;40pkt 40fpkt"];
12869--14714[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.96.202" src_ip="219.87.95.3"/>
      <filter dst_ip="160.86.96.202" src_ip="96.102.153.19"/>
      <filter dst_ip="160.86.96.202" src_ip="219.59.176.119" src_port="6667"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.81.162.3"/>
    </slice>
    <from sec="1207286014" usec="0"/>
    <to sec="1207286019" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="102.34.109.4"/>
    </slice>
    <from sec="1207285929" usec="0"/>
    <to sec="1207285941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.192.4"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.17.207.4"/>
    </slice>
    <from sec="1207285300" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.97.33.5"/>
    </slice>
    <from sec="1207285530" usec="0"/>
    <to sec="1207285540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.27.7"/>
    </slice>
    <from sec="1207285507" usec="0"/>
    <to sec="1207285565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.189.148.8"/>
    </slice>
    <from sec="1207285280" usec="0"/>
    <to sec="1207285308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.48.182.8"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.67.194.8"/>
    </slice>
    <from sec="1207285925" usec="0"/>
    <to sec="1207285936" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.122.70.9"/>
    </slice>
    <from sec="1207285303" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.24.241.9"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
9107[label="97.236.14.10;60pkt 60fpkt", shape=pentagon, color=darkviolet];
12930[label="97.236.14.10;60pkt 60fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.236.14.10:*, 144.106.245.222:53}[51.6667%]&lt;BR/&gt;{97.236.14.10:*, 144.106.245.220:53}[48.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 63262: (1.66667%)&lt;BR/&gt; 63260: (1.66667%)&lt;BR/&gt; 63258: (1.66667%)&lt;BR/&gt; 63253: (1.66667%)&gt;];
}
9107--12930[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.245.222" dst_port="53" src_ip="97.236.14.10"/>
      <filter dst_ip="144.106.245.220" dst_port="53" src_ip="97.236.14.10"/>
    </slice>
    <from sec="1207285217" usec="0"/>
    <to sec="1207286087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
9141[label="167.209.178.11;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12941[label="167.209.178.11;1pkt 1fpkt", shape=invtriangle, color=brown];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.178.11:1971, 220.222.234.172:80}[50%]&lt;BR/&gt;{167.209.178.11:1973, 220.222.234.172:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1973: (33.3333%)&lt;BR/&gt; 1971: (16.6667%)&gt;];
}
9141--12941[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.222.234.172" dst_port="80" src_ip="167.209.178.11" src_port="1973"/>
      <filter dst_ip="220.222.234.172" dst_port="80" src_ip="167.209.178.11" src_port="1971"/>
    </slice>
    <from sec="1207286023" usec="0"/>
    <to sec="1207286030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.12.203.11"/>
    </slice>
    <from sec="1207285781" usec="0"/>
    <to sec="1207285795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.209.133.12"/>
    </slice>
    <from sec="1207285610" usec="0"/>
    <to sec="1207285703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.168.253.12"/>
    </slice>
    <from sec="1207285923" usec="0"/>
    <to sec="1207285940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="121.240.55.13"/>
    </slice>
    <from sec="1207285574" usec="0"/>
    <to sec="1207285578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.26.241.14"/>
    </slice>
    <from sec="1207285705" usec="0"/>
    <to sec="1207285722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
9204[label="204.157.252.14;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12971[label="204.157.252.14;1pkt 1fpkt", shape=invtriangle, color=brown];
14766[label="204.157.252.14;1pkt 1fpkt", shape=invhouse, color=bisque];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.157.252.14:44723, 167.209.177.81:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44723: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9204--12971[label="1;1pkt 1fpkt"];
9204--14766[label="1;1pkt 1fpkt"];
12971--14766[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.177.81" dst_port="25" src_ip="204.157.252.14" src_port="44723"/>
    </slice>
    <from sec="1207285725" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.76.169.16"/>
    </slice>
    <from sec="1207285581" usec="0"/>
    <to sec="1207285590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.54.9.19"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.24.27.19"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
9304[label="75.50.59.20;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13016[label="75.50.59.20;15pkt 15fpkt", shape=invtriangle, color=brown];
14781[label="75.50.59.20;14pkt 14fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.50.59.20:80, 167.209.165.113:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41164: (3.40909%)&lt;BR/&gt; 41163: (3.40909%)&lt;BR/&gt; 41162: (3.40909%)&lt;BR/&gt; 41161: (3.40909%)&gt;];
}
9304--13016[label="1;15pkt 15fpkt"];
9304--14781[label="1;14pkt 14fpkt"];
13016--14781[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.165.113" src_ip="75.50.59.20" src_port="80"/>
    </slice>
    <from sec="1207285874" usec="0"/>
    <to sec="1207285875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.207.77.20"/>
    </slice>
    <from sec="1207285786" usec="0"/>
    <to sec="1207285793" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
9323[label="206.75.14.21;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13026[label="206.75.14.21;3pkt 3fpkt", shape=invtriangle, color=brown];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.75.14.21:443, 167.209.192.16:49653}[33.3333%]&lt;BR/&gt;{206.75.14.21:80, 167.209.192.16:49647}[33.3333%]&lt;BR/&gt;{206.75.14.21:80, 167.209.192.16:49652}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 49653: (16.6667%)&lt;BR/&gt; 49652: (16.6667%)&lt;BR/&gt; 49647: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
9323--13026[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.192.16" dst_port="49652" src_ip="206.75.14.21" src_port="80"/>
      <filter dst_ip="167.209.192.16" dst_port="49647" src_ip="206.75.14.21" src_port="80"/>
      <filter dst_ip="167.209.192.16" dst_port="49653" src_ip="206.75.14.21" src_port="443"/>
    </slice>
    <from sec="1207285842" usec="0"/>
    <to sec="1207285877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.70.37.21"/>
    </slice>
    <from sec="1207285387" usec="0"/>
    <to sec="1207285425" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
9341[label="97.176.77.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13037[label="97.176.77.22;1pkt 1fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{97.176.77.22:22743, 144.106.70.126:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22743: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9341--13037[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.70.126" dst_port="25" src_ip="97.176.77.22" src_port="22743"/>
    </slice>
    <from sec="1207285590" usec="0"/>
    <to sec="1207285610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.98.93.22"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
9351[label="196.201.212.22;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13042[label="196.201.212.22;2pkt 2fpkt", shape=invtriangle, color=brown];
14793[label="196.201.212.22;2pkt 2fpkt", shape=invhouse, color=bisque];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.201.212.22:16806, 160.86.89.211:80}[50%]&lt;BR/&gt;{196.201.212.22:47614, 160.86.89.211:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47614: (25%)&lt;BR/&gt; 16806: (25%)&gt;];
}
9351--13042[label="1;2pkt 2fpkt"];
9351--14793[label="1;2pkt 2fpkt"];
13042--14793[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.89.211" dst_port="80" src_ip="196.201.212.22" src_port="47614"/>
      <filter dst_ip="160.86.89.211" dst_port="80" src_ip="196.201.212.22" src_port="16806"/>
    </slice>
    <from sec="1207286025" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.14.221.23"/>
    </slice>
    <from sec="1207285775" usec="0"/>
    <to sec="1207285840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.61.80.27"/>
    </slice>
    <from sec="1207285716" usec="0"/>
    <to sec="1207285734" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.205.80.27"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.223.180.27"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="105.136.33.28"/>
    </slice>
    <from sec="1207285652" usec="0"/>
    <to sec="1207285655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.19.209.28"/>
    </slice>
    <from sec="1207285729" usec="0"/>
    <to sec="1207285803" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
9457[label="75.50.23.29;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13098[label="75.50.23.29;3pkt 3fpkt", shape=invtriangle, color=brown];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.50.23.29:80, 167.209.165.113:41068}[33.3333%]&lt;BR/&gt;{75.50.23.29:80, 167.209.165.113:42357}[33.3333%]&lt;BR/&gt;{75.50.23.29:80, 167.209.165.113:42712}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42712: (16.6667%)&lt;BR/&gt; 42357: (16.6667%)&lt;BR/&gt; 41068: (16.6667%)&gt;];
}
9457--13098[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.165.113" dst_port="42712" src_ip="75.50.23.29" src_port="80"/>
      <filter dst_ip="167.209.165.113" dst_port="42357" src_ip="75.50.23.29" src_port="80"/>
      <filter dst_ip="167.209.165.113" dst_port="41068" src_ip="75.50.23.29" src_port="80"/>
    </slice>
    <from sec="1207285866" usec="0"/>
    <to sec="1207285977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.200.215.30"/>
    </slice>
    <from sec="1207285790" usec="0"/>
    <to sec="1207285796" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_777{
style=filled;
color=gray75;
993[label="150.183.72.36;d;90pkt 90fpkt", shape=diamond, color=yellow];
3014[label="192.96.195.59;s;1pkt 1fpkt", shape=diamond, color=yellow];
4236[label="77.186.5.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
5425[label="150.183.72.36;d;73pkt 73fpkt", shape=hexagon, color=black];
7224[label="192.96.195.59;s;1pkt 1fpkt", shape=hexagon, color=black];
9089[label="193.122.70.9;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9480[label="77.34.231.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10259[label="76.93.84.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11958[label="197.216.147.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13110[label="77.34.231.30;2pkt 2fpkt", shape=invtriangle, color=brown];
14276[label="197.216.147.185;1pkt 1fpkt", shape=invtriangle, color=brown];
stat777[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 150.183.72.36:13781}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13781: (44.5402%)&lt;BR/&gt; 45306: (2.58621%)&lt;BR/&gt; 30970: (2.29885%)&lt;BR/&gt; 13290: (1.72414%)&lt;BR/&gt; 12658: (1.43678%)&gt;];
}
993--1808[label="0.0111111;1pkt 1fpkt"];
993--3014[label="1;1pkt 1fpkt"];
993--4236[label="1;1pkt 1fpkt"];
993--5425[label="1;73pkt 73fpkt"];
993--6437[label="0.0111111;1pkt 1fpkt"];
993--7224[label="1;1pkt 1fpkt"];
993--8292[label="0.0111111;1pkt 1fpkt"];
993--8641[label="0.0111111;1pkt 1fpkt"];
993--8761[label="0.0111111;1pkt 1fpkt"];
993--8877[label="0.0111111;1pkt 1fpkt"];
993--9089[label="1;1pkt 1fpkt"];
993--9480[label="0.5;1pkt 1fpkt"];
993--10259[label="1;1pkt 1fpkt"];
993--11958[label="1;1pkt 1fpkt"];
993--13110[label="0.5;1pkt 1fpkt"];
993--14276[label="1;1pkt 1fpkt"];
3014--5425[label="1;1pkt 1fpkt"];
3014--7224[label="1;1pkt 1fpkt"];
4236--5425[label="1;1pkt 1fpkt"];
5425--6437[label="0.0136986;1pkt 1fpkt"];
5425--7224[label="1;1pkt 1fpkt"];
5425--8292[label="0.0136986;1pkt 1fpkt"];
5425--8641[label="0.0136986;1pkt 1fpkt"];
5425--8761[label="0.0136986;1pkt 1fpkt"];
5425--8877[label="0.0136986;1pkt 1fpkt"];
5425--9089[label="1;1pkt 1fpkt"];
5425--9480[label="0.5;1pkt 1fpkt"];
5425--10259[label="1;1pkt 1fpkt"];
5425--11958[label="1;1pkt 1fpkt"];
5425--13110[label="0.5;1pkt 1fpkt"];
5425--14276[label="1;1pkt 1fpkt"];
9480--13110[label="1;2pkt 2fpkt"];
11958--14276[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="150.183.72.36" dst_port="13781"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.221.80.31"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_779{
style=filled;
color=gray75;
9491[label="101.222.127.31;36pkt 36fpkt", shape=pentagon, color=darkviolet];
13115[label="101.222.127.31;36pkt 36fpkt", shape=invtriangle, color=brown];
14827[label="101.222.127.31;36pkt 36fpkt", shape=invhouse, color=bisque];
stat779[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.222.127.31:*, 149.82.218.112:33435}[25%]&lt;BR/&gt;{101.222.127.31:*, 149.82.218.112:33437}[25%]&lt;BR/&gt;{101.222.127.31:*, 149.82.218.112:33439}[25%]&lt;BR/&gt;{101.222.127.31:*, 149.82.218.112:33440}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33440: (12.5%)&lt;BR/&gt; 33439: (12.5%)&lt;BR/&gt; 33437: (12.5%)&lt;BR/&gt; 33435: (12.5%)&lt;BR/&gt; 19319: (5.55556%)&gt;];
}
9491--13115[label="1;36pkt 36fpkt"];
9491--14827[label="1;36pkt 36fpkt"];
13115--14827[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.218.112" dst_port="33440" src_ip="101.222.127.31"/>
      <filter dst_ip="149.82.218.112" dst_port="33439" src_ip="101.222.127.31"/>
      <filter dst_ip="149.82.218.112" dst_port="33437" src_ip="101.222.127.31"/>
      <filter dst_ip="149.82.218.112" dst_port="33435" src_ip="101.222.127.31"/>
    </slice>
    <from sec="1207285349" usec="0"/>
    <to sec="1207286076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.102.26.32"/>
    </slice>
    <from sec="1207286053" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.218.141.32"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207285982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.17.42.33"/>
    </slice>
    <from sec="1207285672" usec="0"/>
    <to sec="1207285736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.16.32.36"/>
    </slice>
    <from sec="1207285750" usec="0"/>
    <to sec="1207285780" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="178.52.131.36"/>
    </slice>
    <from sec="1207285695" usec="0"/>
    <to sec="1207285717" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_785{
style=filled;
color=gray75;
9616[label="167.209.171.38;22pkt 22fpkt", shape=pentagon, color=darkviolet];
13167[label="167.209.171.38;22pkt 22fpkt", shape=invtriangle, color=brown];
stat785[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.171.38:*, 197.126.138.199:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4857: (2.27273%)&lt;BR/&gt; 4856: (2.27273%)&lt;BR/&gt; 4845: (2.27273%)&lt;BR/&gt; 4842: (2.27273%)&gt;];
}
9616--13167[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="197.126.138.199" dst_port="443" src_ip="167.209.171.38"/>
    </slice>
    <from sec="1207285348" usec="0"/>
    <to sec="1207285665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_786{
style=filled;
color=gray75;
9617[label="167.209.187.38;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13168[label="167.209.187.38;11pkt 11fpkt", shape=invtriangle, color=brown];
stat786[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.187.38:80, 14.127.33.203:*}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58120: (4.54545%)&lt;BR/&gt; 51248: (4.54545%)&lt;BR/&gt; 48155: (4.54545%)&lt;BR/&gt; 48037: (4.54545%)&gt;];
}
9617--13168[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="14.127.33.203" src_ip="167.209.187.38" src_port="80"/>
    </slice>
    <from sec="1207285453" usec="0"/>
    <to sec="1207285886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_787{
style=filled;
color=gray75;
9650[label="167.209.196.40;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13186[label="167.209.196.40;24pkt 24fpkt", shape=invtriangle, color=brown];
stat787[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.196.40:*, 205.12.216.203:80}[45.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50230: (2.08333%)&lt;BR/&gt; 50229: (2.08333%)&lt;BR/&gt; 50228: (2.08333%)&lt;BR/&gt; 50227: (2.08333%)&gt;];
}
9650--13186[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="205.12.216.203" dst_port="80" src_ip="167.209.196.40"/>
    </slice>
    <from sec="1207285517" usec="0"/>
    <to sec="1207285699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_788{
style=filled;
color=gray75;
3975[label="160.130.45.221;d;59pkt 59fpkt", shape=diamond, color=yellow];
4754[label="167.209.192.106;d;50pkt 50fpkt", shape=diamond, color=yellow];
4783[label="164.86.40.9;s;31pkt 31fpkt", shape=diamond, color=yellow];
8096[label="164.86.40.9;s;31pkt 31fpkt", shape=hexagon, color=black];
9657[label="201.24.28.41;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13189[label="201.24.28.41;6pkt 6fpkt", shape=invtriangle, color=brown];
14858[label="201.24.28.41;6pkt 6fpkt", shape=invhouse, color=bisque];
stat788[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 167.209.192.106:*}[45.8716%]&lt;BR/&gt;{164.86.40.9:80, 160.130.45.221:*}[42.2018%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2412: (1.0582%)&lt;BR/&gt; 2330: (1.0582%)&lt;BR/&gt; 2323: (1.0582%)&lt;BR/&gt; 2318: (1.0582%)&gt;];
}
3975--4783[label="0.451613;14pkt 14fpkt"];
3975--8096[label="0.451613;14pkt 14fpkt"];
3975--8590[label="0.0169492;1pkt 1fpkt"];
3975--8610[label="0.0677966;4pkt 4fpkt"];
3975--8633[label="0.0677966;4pkt 4fpkt"];
3975--8710[label="0.0169492;1pkt 1fpkt"];
3975--8730[label="0.0677966;4pkt 4fpkt"];
3975--8753[label="0.0677966;4pkt 4fpkt"];
3975--8828[label="0.0169492;1pkt 1fpkt"];
3975--8846[label="0.0677966;4pkt 4fpkt"];
3975--8869[label="0.0677966;4pkt 4fpkt"];
4754--4783[label="0.548387;17pkt 17fpkt"];
4754--8096[label="0.548387;17pkt 17fpkt"];
4754--8633[label="0.06;3pkt 3fpkt"];
4754--8753[label="0.06;3pkt 3fpkt"];
4754--8869[label="0.06;3pkt 3fpkt"];
4754--9657[label="1;6pkt 6fpkt"];
4754--13189[label="1;6pkt 6fpkt"];
4754--14858[label="1;6pkt 6fpkt"];
4783--8096[label="1;31pkt 31fpkt"];
4783--8633[label="0.0645161;2pkt 2fpkt"];
4783--8753[label="0.0645161;2pkt 2fpkt"];
4783--8869[label="0.0645161;2pkt 2fpkt"];
8096--8633[label="0.0645161;2pkt 2fpkt"];
8096--8753[label="0.0645161;2pkt 2fpkt"];
8096--8869[label="0.0645161;2pkt 2fpkt"];
9657--13189[label="1;6pkt 6fpkt"];
9657--14858[label="1;6pkt 6fpkt"];
13189--14858[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.192.106" src_port="80"/>
      <filter dst_ip="160.130.45.221" src_ip="164.86.40.9" src_port="80"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_789{
style=filled;
color=gray75;
9662[label="160.86.125.41;57pkt 57fpkt", shape=pentagon, color=darkviolet];
13192[label="160.86.125.41;57pkt 57fpkt", shape=invtriangle, color=brown];
14860[label="160.86.125.41;57pkt 57fpkt", shape=invhouse, color=bisque];
stat789[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.125.41:32048, *:*}[91.2281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32048: (45.614%)&lt;BR/&gt; 59975: (1.75439%)&lt;BR/&gt; 48993: (1.75439%)&lt;BR/&gt; 42697: (1.75439%)&lt;BR/&gt; 26281: (1.75439%)&gt;];
}
9662--13192[label="1;57pkt 57fpkt"];
9662--14860[label="1;57pkt 57fpkt"];
13192--14860[label="1;57pkt 57fpkt"];
</description>
    <slice>
      <filter src_ip="160.86.125.41" src_port="32048"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_790{
style=filled;
color=gray75;
9667[label="102.88.168.41;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13195[label="102.88.168.41;18pkt 18fpkt", shape=invtriangle, color=brown];
stat790[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.88.168.41:21, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 49704: (2.77778%)&lt;BR/&gt; 49703: (2.77778%)&lt;BR/&gt; 49701: (2.77778%)&lt;BR/&gt; 4226: (2.77778%)&gt;];
}
9667--13195[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter src_ip="102.88.168.41" src_port="21"/>
    </slice>
    <from sec="1207285451" usec="0"/>
    <to sec="1207286059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.40.194.42"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.212.240.42"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_793{
style=filled;
color=gray75;
9701[label="14.88.163.43;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13211[label="14.88.163.43;3pkt 3fpkt", shape=invtriangle, color=brown];
14867[label="14.88.163.43;3pkt 3fpkt", shape=invhouse, color=bisque];
stat793[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.88.163.43:80, 213.51.26.52:33531}[33.3333%]&lt;BR/&gt;{14.88.163.43:80, 213.51.26.52:33559}[33.3333%]&lt;BR/&gt;{14.88.163.43:80, 213.51.26.52:33561}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33561: (16.6667%)&lt;BR/&gt; 33559: (16.6667%)&lt;BR/&gt; 33531: (16.6667%)&gt;];
}
9701--13211[label="1;3pkt 3fpkt"];
9701--14867[label="1;3pkt 3fpkt"];
13211--14867[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.51.26.52" dst_port="33561" src_ip="14.88.163.43" src_port="80"/>
      <filter dst_ip="213.51.26.52" dst_port="33559" src_ip="14.88.163.43" src_port="80"/>
      <filter dst_ip="213.51.26.52" dst_port="33531" src_ip="14.88.163.43" src_port="80"/>
    </slice>
    <from sec="1207286043" usec="0"/>
    <to sec="1207286101" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.42.206.44"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_795{
style=filled;
color=gray75;
9728[label="206.66.125.45;20pkt 20fpkt", shape=pentagon, color=darkviolet];
13223[label="206.66.125.45;20pkt 20fpkt", shape=invtriangle, color=brown];
stat795[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.66.125.45:443, 167.209.124.182:*}[90%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49901: (2.5%)&lt;BR/&gt; 49900: (2.5%)&lt;BR/&gt; 1227: (2.5%)&lt;BR/&gt; 1226: (2.5%)&gt;];
}
9728--13223[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.124.182" src_ip="206.66.125.45" src_port="443"/>
    </slice>
    <from sec="1207285574" usec="0"/>
    <to sec="1207286056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.108.70.46"/>
    </slice>
    <from sec="1207285202" usec="0"/>
    <to sec="1207286076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.81.201.46"/>
    </slice>
    <from sec="1207286081" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967013,1.96331,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_798{
style=filled;
color=gray75;
4226[label="160.86.157.39;d;74pkt 74fpkt", shape=diamond, color=yellow];
8958[label="199.128.99.1;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9764[label="77.27.222.47;5pkt 5fpkt", shape=pentagon, color=darkviolet];
10742[label="194.141.210.105;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13238[label="77.27.222.47;5pkt 5fpkt", shape=invtriangle, color=brown];
14879[label="77.27.222.47;5pkt 5fpkt", shape=invhouse, color=bisque];
stat798[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.86.157.39:25}[91.8919%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (46.0396%)&lt;BR/&gt; 137: (2.9703%)&lt;BR/&gt; 1361: (1.9802%)&lt;BR/&gt; 1310: (1.9802%)&lt;BR/&gt; 1309: (1.9802%)&gt;];
}
4226--4713[label="0.0147059;1pkt 1fpkt"];
4226--6484[label="0.0149254;1pkt 1fpkt"];
4226--7432[label="0.0405405;3pkt 3fpkt"];
4226--8413[label="0.0405405;3pkt 3fpkt"];
4226--8659[label="0.027027;2pkt 2fpkt"];
4226--8660[label="0.0135135;1pkt 1fpkt"];
4226--8679[label="0.027027;2pkt 2fpkt"];
4226--8680[label="0.0135135;1pkt 1fpkt"];
4226--8687[label="0.0135135;1pkt 1fpkt"];
4226--8779[label="0.027027;2pkt 2fpkt"];
4226--8780[label="0.0135135;1pkt 1fpkt"];
4226--8799[label="0.027027;2pkt 2fpkt"];
4226--8800[label="0.0135135;1pkt 1fpkt"];
4226--8806[label="0.0135135;1pkt 1fpkt"];
4226--8895[label="0.027027;2pkt 2fpkt"];
4226--8896[label="0.0135135;1pkt 1fpkt"];
4226--8915[label="0.027027;2pkt 2fpkt"];
4226--8916[label="0.0135135;1pkt 1fpkt"];
4226--8922[label="0.0135135;1pkt 1fpkt"];
4226--8937[label="0.0151515;1pkt 1fpkt"];
4226--8958[label="1;6pkt 6fpkt"];
4226--9540[label="0.0666667;1pkt 1fpkt"];
4226--9606[label="0.0625;1pkt 1fpkt"];
4226--9764[label="1;5pkt 5fpkt"];
4226--10272[label="0.0769231;1pkt 1fpkt"];
4226--10742[label="1;6pkt 6fpkt"];
4226--11754[label="0.047619;1pkt 1fpkt"];
4226--12050[label="0.0147059;1pkt 1fpkt"];
4226--12263[label="0.0405405;3pkt 3fpkt"];
4226--12837[label="0.0151515;1pkt 1fpkt"];
4226--13238[label="1;5pkt 5fpkt"];
4226--14321[label="0.0147059;1pkt 1fpkt"];
4226--14432[label="0.0405405;3pkt 3fpkt"];
4226--14701[label="0.0151515;1pkt 1fpkt"];
4226--14879[label="1;5pkt 5fpkt"];
4226--15405[label="0.0405405;3pkt 3fpkt"];
9764--13238[label="1;5pkt 5fpkt"];
9764--14879[label="1;5pkt 5fpkt"];
13238--14879[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.157.39" dst_port="25"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.5.160.48"/>
    </slice>
    <from sec="1207285527" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.15.49"/>
    </slice>
    <from sec="1207285691" usec="0"/>
    <to sec="1207285764" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
9870[label="120.172.152.55;213pkt 213fpkt", shape=pentagon, color=darkviolet];
13284[label="120.172.152.55;213pkt 213fpkt", shape=invtriangle, color=brown];
14904[label="120.172.152.55;213pkt 213fpkt", shape=invhouse, color=bisque];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{120.172.152.55:21589, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21589: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
9870--13284[label="1;213pkt 213fpkt"];
9870--14904[label="1;213pkt 213fpkt"];
13284--14904[label="1;213pkt 213fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="120.172.152.55" src_port="21589"/>
    </slice>
    <from sec="1207285621" usec="0"/>
    <to sec="1207285654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
3003[label="149.82.219.218;d;276pkt 276fpkt", shape=diamond, color=yellow];
9875[label="210.89.218.55;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13286[label="210.89.218.55;11pkt 11fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 149.82.219.218:0}[96.5035%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3003--9875[label="0.0909091;1pkt 1fpkt"];
3003--13286[label="0.0909091;1pkt 1fpkt"];
9875--13286[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.219.218"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_803{
style=filled;
color=gray75;
9903[label="160.86.210.57;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13302[label="160.86.210.57;1pkt 1fpkt", shape=invtriangle, color=brown];
stat803[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.210.57:22, 196.48.140.89:1066}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1066: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
9903--13302[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.48.140.89" dst_port="1066" src_ip="160.86.210.57" src_port="22"/>
    </slice>
    <from sec="1207285215" usec="0"/>
    <to sec="1207286071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_804{
style=filled;
color=gray75;
9914[label="160.67.121.58;63pkt 63fpkt", shape=pentagon, color=darkviolet];
13310[label="160.67.121.58;63pkt 63fpkt", shape=invtriangle, color=brown];
stat804[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.67.121.58:*, 206.233.15.155:443}[98.4127%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.2063%)&lt;BR/&gt; 2768: (0.793651%)&lt;BR/&gt; 2767: (0.793651%)&lt;BR/&gt; 2766: (0.793651%)&lt;BR/&gt; 2765: (0.793651%)&gt;];
}
9914--13310[label="1;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="206.233.15.155" dst_port="443" src_ip="160.67.121.58"/>
    </slice>
    <from sec="1207285522" usec="0"/>
    <to sec="1207285551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.54.193.58"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.226.33.59"/>
    </slice>
    <from sec="1207285745" usec="0"/>
    <to sec="1207285758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
9930[label="102.88.168.59;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13317[label="102.88.168.59;14pkt 14fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.88.168.59:21, 144.106.64.54:*}[50%]&lt;BR/&gt;{102.88.168.59:21, 144.106.42.64:*}[21.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1485: (3.57143%)&lt;BR/&gt; 1484: (3.57143%)&lt;BR/&gt; 1482: (3.57143%)&lt;BR/&gt; 1299: (3.57143%)&gt;];
}
9930--13317[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.64.54" src_ip="102.88.168.59" src_port="21"/>
      <filter dst_ip="144.106.42.64" src_ip="102.88.168.59" src_port="21"/>
    </slice>
    <from sec="1207285401" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.663104,2.03191,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
5190[label="167.209.178.207;d;88pkt 88fpkt", shape=diamond, color=yellow];
10137[label="207.248.179.72;26pkt 26fpkt", shape=pentagon, color=darkviolet];
10497[label="207.78.130.91;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.11.240.133:80, 167.209.178.207:*}[30.4348%]&lt;BR/&gt;{207.248.179.72:80, 167.209.178.207:*}[28.2609%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1667%)&lt;BR/&gt; 4702: (0.833333%)&lt;BR/&gt; 4698: (0.833333%)&lt;BR/&gt; 4673: (0.833333%)&lt;BR/&gt; 4671: (0.833333%)&gt;];
}
5190--5682[label="0.0113636;1pkt 1fpkt"];
5190--8997[label="0.0357143;1pkt 1fpkt"];
5190--9972[label="0.0526316;1pkt 1fpkt"];
5190--10137[label="0.884615;23pkt 23fpkt"];
5190--10497[label="0.833333;5pkt 5fpkt"];
5190--12870[label="0.0357143;1pkt 1fpkt"];
5190--13187[label="0.0113636;1pkt 1fpkt"];
5190--13335[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.178.207" src_ip="207.11.240.133" src_port="80"/>
      <filter dst_ip="167.209.178.207" src_ip="207.248.179.72" src_port="80"/>
    </slice>
    <from sec="1207285951" usec="0"/>
    <to sec="1207286038" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_809{
style=filled;
color=gray75;
9991[label="167.209.165.64;126pkt 126fpkt", shape=pentagon, color=darkviolet];
13344[label="167.209.165.64;126pkt 126fpkt", shape=invtriangle, color=brown];
stat809[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.165.64:53, *:*}[73.8095%]&lt;BR/&gt;{167.209.165.64:*, 192.168.118.16:80}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (39.2857%)&lt;BR/&gt; 80: (12.6984%)&lt;BR/&gt; 32768: (3.1746%)&lt;BR/&gt; 9253: (1.5873%)&lt;BR/&gt; 64575: (0.396825%)&gt;];
}
9991--13344[label="1;126pkt 126fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.165.64" src_port="53"/>
      <filter dst_ip="192.168.118.16" dst_port="80" src_ip="167.209.165.64"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.52.8.66"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.32.120.66"/>
    </slice>
    <from sec="1207285552" usec="0"/>
    <to sec="1207285556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_812{
style=filled;
color=gray75;
10034[label="167.209.190.66;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13368[label="167.209.190.66;4pkt 4fpkt", shape=invtriangle, color=brown];
14939[label="167.209.190.66;4pkt 4fpkt", shape=invhouse, color=bisque];
stat812[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.190.66:51123, 106.64.29.4:80}[25%]&lt;BR/&gt;{167.209.190.66:51119, 116.69.176.109:80}[25%]&lt;BR/&gt;{167.209.190.66:51121, 100.97.79.136:80}[25%]&lt;BR/&gt;{167.209.190.66:51122, 106.65.106.232:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51123: (12.5%)&lt;BR/&gt; 51122: (12.5%)&lt;BR/&gt; 51121: (12.5%)&lt;BR/&gt; 51119: (12.5%)&gt;];
}
10034--13368[label="1;4pkt 4fpkt"];
10034--14939[label="1;4pkt 4fpkt"];
13368--14939[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="106.65.106.232" dst_port="80" src_ip="167.209.190.66" src_port="51122"/>
      <filter dst_ip="100.97.79.136" dst_port="80" src_ip="167.209.190.66" src_port="51121"/>
      <filter dst_ip="116.69.176.109" dst_port="80" src_ip="167.209.190.66" src_port="51119"/>
      <filter dst_ip="106.64.29.4" dst_port="80" src_ip="167.209.190.66" src_port="51123"/>
    </slice>
    <from sec="1207285246" usec="0"/>
    <to sec="1207285282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.192.66"/>
    </slice>
    <from sec="1207285479" usec="0"/>
    <to sec="1207285625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
10057[label="160.86.153.67;16pkt 16fpkt", shape=pentagon, color=darkviolet];
13381[label="160.86.153.67;16pkt 16fpkt", shape=invtriangle, color=brown];
14943[label="160.86.153.67;16pkt 16fpkt", shape=invhouse, color=bisque];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.153.67:*, 101.207.88.62:443}[43.75%]&lt;BR/&gt;{160.86.153.67:*, 101.207.88.61:443}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1452: (3.125%)&lt;BR/&gt; 1431: (3.125%)&lt;BR/&gt; 1424: (3.125%)&lt;BR/&gt; 1421: (3.125%)&gt;];
}
10057--13381[label="1;16pkt 16fpkt"];
10057--14943[label="1;16pkt 16fpkt"];
13381--14943[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.88.62" dst_port="443" src_ip="160.86.153.67"/>
      <filter dst_ip="101.207.88.61" dst_port="443" src_ip="160.86.153.67"/>
    </slice>
    <from sec="1207285235" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,501,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_815{
style=filled;
color=gray75;
10065[label="211.66.212.67;56pkt 56fpkt", shape=pentagon, color=darkviolet];
13386[label="211.66.212.67;56pkt 56fpkt", shape=invtriangle, color=brown];
14946[label="211.66.212.67;56pkt 56fpkt", shape=invhouse, color=bisque];
stat815[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.66.212.67:21, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 1538: (1.78571%)&lt;BR/&gt; 1106: (1.78571%)&lt;BR/&gt; 50363: (0.892857%)&lt;BR/&gt; 50348: (0.892857%)&gt;];
}
10065--13386[label="1;56pkt 56fpkt"];
10065--14946[label="1;56pkt 56fpkt"];
13386--14946[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="211.66.212.67" src_port="21"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_816{
style=filled;
color=gray75;
10086[label="167.209.177.68;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13393[label="167.209.177.68;9pkt 9fpkt", shape=invtriangle, color=brown];
stat816[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.177.68:995, 74.118.152.65:*}[55.5556%]&lt;BR/&gt;{167.209.177.68:995, 74.116.101.180:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 40284: (5.55556%)&lt;BR/&gt; 40001: (5.55556%)&lt;BR/&gt; 4737: (5.55556%)&lt;BR/&gt; 4710: (5.55556%)&gt;];
}
10086--13393[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="74.118.152.65" src_ip="167.209.177.68" src_port="995"/>
      <filter dst_ip="74.116.101.180" src_ip="167.209.177.68" src_port="995"/>
    </slice>
    <from sec="1207285219" usec="0"/>
    <to sec="1207286084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_817{
style=filled;
color=gray75;
10095[label="74.114.90.69;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13400[label="74.114.90.69;5pkt 5fpkt", shape=invtriangle, color=brown];
stat817[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.114.90.69:3443, 213.51.29.68:993}[20%]&lt;BR/&gt;{74.114.90.69:4429, 213.51.29.68:993}[20%]&lt;BR/&gt;{74.114.90.69:4430, 213.51.29.68:993}[20%]&lt;BR/&gt;{74.114.90.69:4431, 213.51.29.68:993}[20%]&lt;BR/&gt;{74.114.90.69:4432, 213.51.29.68:993}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (50%)&lt;BR/&gt; 3443: (16.6667%)&lt;BR/&gt; 4432: (8.33333%)&lt;BR/&gt; 4431: (8.33333%)&lt;BR/&gt; 4430: (8.33333%)&gt;];
}
10095--13400[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.51.29.68" dst_port="993" src_ip="74.114.90.69" src_port="4432"/>
      <filter dst_ip="213.51.29.68" dst_port="993" src_ip="74.114.90.69" src_port="4431"/>
      <filter dst_ip="213.51.29.68" dst_port="993" src_ip="74.114.90.69" src_port="4430"/>
      <filter dst_ip="213.51.29.68" dst_port="993" src_ip="74.114.90.69" src_port="4429"/>
      <filter dst_ip="213.51.29.68" dst_port="993" src_ip="74.114.90.69" src_port="3443"/>
    </slice>
    <from sec="1207285245" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
10119[label="167.209.77.71;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13411[label="167.209.77.71;1pkt 1fpkt", shape=invtriangle, color=brown];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.77.71:48464, 201.246.89.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48464: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10119--13411[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="201.246.89.81" dst_port="80" src_ip="167.209.77.71" src_port="48464"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.1.72"/>
    </slice>
    <from sec="1207286036" usec="0"/>
    <to sec="1207286050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.26.230.73"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207285229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.65.141.74"/>
    </slice>
    <from sec="1207285270" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.181.245.76"/>
    </slice>
    <from sec="1207285611" usec="0"/>
    <to sec="1207285615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.192.38.77"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.36.216.77"/>
    </slice>
    <from sec="1207285244" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.191.10.78"/>
    </slice>
    <from sec="1207285644" usec="0"/>
    <to sec="1207285665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_827{
style=filled;
color=gray75;
10236[label="160.130.29.78;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13462[label="160.130.29.78;15pkt 15fpkt", shape=invtriangle, color=brown];
stat827[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.130.29.78:80, 8.204.54.212:*}[60%]&lt;BR/&gt;{160.130.29.78:80, 78.146.22.92:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55270: (3.33333%)&lt;BR/&gt; 53500: (3.33333%)&lt;BR/&gt; 53499: (3.33333%)&lt;BR/&gt; 53498: (3.33333%)&gt;];
}
10236--13462[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="8.204.54.212" src_ip="160.130.29.78" src_port="80"/>
      <filter dst_ip="78.146.22.92" src_ip="160.130.29.78" src_port="80"/>
    </slice>
    <from sec="1207285428" usec="0"/>
    <to sec="1207285926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
10249[label="167.209.178.78;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13472[label="167.209.178.78;12pkt 12fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.178.78:*, 201.2.5.14:80}[66.6667%]&lt;BR/&gt;{167.209.178.78:*, 104.155.153.170:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3337: (4.16667%)&lt;BR/&gt; 3331: (4.16667%)&lt;BR/&gt; 3329: (4.16667%)&lt;BR/&gt; 3327: (4.16667%)&gt;];
}
10249--13472[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="201.2.5.14" dst_port="80" src_ip="167.209.178.78"/>
      <filter dst_ip="104.155.153.170" dst_port="80" src_ip="167.209.178.78"/>
    </slice>
    <from sec="1207285532" usec="0"/>
    <to sec="1207285556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
10256[label="149.82.43.79;141pkt 141fpkt", shape=pentagon, color=darkviolet];
13475[label="149.82.43.79;141pkt 141fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.43.79:24566, *:*}[73.0496%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 24566: (36.5248%)&lt;BR/&gt; 80: (9.57447%)&lt;BR/&gt; 7600: (2.12766%)&lt;BR/&gt; 7200: (2.12766%)&lt;BR/&gt; 8600: (1.41844%)&gt;];
}
10256--13475[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter src_ip="149.82.43.79" src_port="24566"/>
    </slice>
    <from sec="1207285214" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.171.73.79"/>
    </slice>
    <from sec="1207285948" usec="0"/>
    <to sec="1207285950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.27.138.79"/>
    </slice>
    <from sec="1207286081" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.152.144.79"/>
    </slice>
    <from sec="1207286030" usec="0"/>
    <to sec="1207286070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.107.155.79"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.182.87.80"/>
    </slice>
    <from sec="1207285509" usec="0"/>
    <to sec="1207285530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.248.179.80"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_836{
style=filled;
color=gray75;
10284[label="115.218.210.80;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13487[label="115.218.210.80;2pkt 2fpkt", shape=invtriangle, color=brown];
stat836[shape=component, label=&lt;Rules:&lt;BR/&gt;{115.218.210.80:80, 167.209.116.177:49797}[50%]&lt;BR/&gt;{115.218.210.80:80, 167.209.116.177:49798}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49798: (25%)&lt;BR/&gt; 49797: (25%)&gt;];
}
10284--13487[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.116.177" dst_port="49798" src_ip="115.218.210.80" src_port="80"/>
      <filter dst_ip="167.209.116.177" dst_port="49797" src_ip="115.218.210.80" src_port="80"/>
    </slice>
    <from sec="1207286059" usec="0"/>
    <to sec="1207286066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.14.228.81"/>
    </slice>
    <from sec="1207285796" usec="0"/>
    <to sec="1207285850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="199.211.72.82"/>
    </slice>
    <from sec="1207285587" usec="0"/>
    <to sec="1207285843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_840{
style=filled;
color=gray75;
10325[label="14.88.163.82;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13508[label="14.88.163.82;8pkt 8fpkt", shape=invtriangle, color=brown];
15001[label="14.88.163.82;8pkt 8fpkt", shape=invhouse, color=bisque];
stat840[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.88.163.82:80, 213.51.26.52:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33573: (6.25%)&lt;BR/&gt; 33567: (6.25%)&lt;BR/&gt; 33566: (6.25%)&lt;BR/&gt; 33565: (6.25%)&gt;];
}
10325--13508[label="1;8pkt 8fpkt"];
10325--15001[label="1;8pkt 8fpkt"];
13508--15001[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.51.26.52" src_ip="14.88.163.82" src_port="80"/>
    </slice>
    <from sec="1207286047" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.153.111.84"/>
    </slice>
    <from sec="1207285598" usec="0"/>
    <to sec="1207285601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.194.3.87"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_843{
style=filled;
color=gray75;
10420[label="167.209.195.87;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13546[label="167.209.195.87;18pkt 18fpkt", shape=invtriangle, color=brown];
15021[label="167.209.195.87;18pkt 18fpkt", shape=invhouse, color=bisque];
stat843[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.195.87:*, *:80}[94.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.2222%)&lt;BR/&gt; 0: (5.55556%)&lt;BR/&gt; 50537: (2.77778%)&lt;BR/&gt; 50535: (2.77778%)&lt;BR/&gt; 50525: (2.77778%)&gt;];
}
10420--13546[label="1;18pkt 18fpkt"];
10420--15021[label="1;18pkt 18fpkt"];
13546--15021[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="167.209.195.87"/>
    </slice>
    <from sec="1207285274" usec="0"/>
    <to sec="1207285932" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
10432[label="74.113.60.88;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13557[label="74.113.60.88;2pkt 2fpkt", shape=invtriangle, color=brown];
15025[label="74.113.60.88;2pkt 2fpkt", shape=invhouse, color=bisque];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.113.60.88:52425, 150.183.123.109:80}[50%]&lt;BR/&gt;{74.113.60.88:52428, 150.183.123.109:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52428: (25%)&lt;BR/&gt; 52425: (25%)&gt;];
}
10432--13557[label="1;2pkt 2fpkt"];
10432--15025[label="1;2pkt 2fpkt"];
13557--15025[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.183.123.109" dst_port="80" src_ip="74.113.60.88" src_port="52428"/>
      <filter dst_ip="150.183.123.109" dst_port="80" src_ip="74.113.60.88" src_port="52425"/>
    </slice>
    <from sec="1207285479" usec="0"/>
    <to sec="1207285487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798992,2.04819,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
5202[label="176.59.167.88;s;1pkt 1fpkt", shape=diamond, color=yellow];
13561[label="176.59.167.88;1pkt 1fpkt", shape=invtriangle, color=brown];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{176.59.167.88:80, 213.61.69.95:60357}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60357: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5202--13561[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.61.69.95" dst_port="60357" src_ip="176.59.167.88" src_port="80"/>
    </slice>
    <from sec="1207285962" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_848{
style=filled;
color=gray75;
10475[label="167.209.28.90;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13579[label="167.209.28.90;6pkt 6fpkt", shape=invtriangle, color=brown];
stat848[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.28.90:25, 192.66.184.31:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 59511: (8.33333%)&lt;BR/&gt; 59408: (8.33333%)&lt;BR/&gt; 59365: (8.33333%)&lt;BR/&gt; 59313: (8.33333%)&gt;];
}
10475--13579[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.66.184.31" src_ip="167.209.28.90" src_port="25"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.99.125.91"/>
    </slice>
    <from sec="1207285732" usec="0"/>
    <to sec="1207285741" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
1045[label="206.111.209.239;s;2pkt 2fpkt", shape=diamond, color=yellow];
1129[label="167.209.18.94;d;370pkt 370fpkt", shape=diamond, color=yellow];
4011[label="96.156.17.44;s;202pkt 202fpkt", shape=diamond, color=yellow];
4998[label="206.75.165.27;s;87pkt 87fpkt", shape=diamond, color=yellow];
6417[label="206.111.209.239;s;2pkt 2fpkt", shape=hexagon, color=black];
7985[label="206.75.165.27;s;87pkt 87fpkt", shape=hexagon, color=black];
9435[label="206.75.165.27;94pkt 94fpkt", shape=pentagon, color=darkviolet];
12055[label="211.1.53.194;32pkt 32fpkt", shape=pentagon, color=darkviolet];
13085[label="206.75.165.27;94pkt 94fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.156.17.44:80, 167.209.18.94:*}[44.8276%]&lt;BR/&gt;{206.75.165.27:80, 167.209.18.94:*}[22.1675%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4845%)&lt;BR/&gt; 34735: (0.360825%)&lt;BR/&gt; 34731: (0.360825%)&lt;BR/&gt; 34431: (0.360825%)&lt;BR/&gt; 34303: (0.360825%)&gt;];
}
1045--1129[label="0.5;1pkt 1fpkt"];
1045--5267[label="0.5;1pkt 1fpkt"];
1045--6417[label="1;2pkt 2fpkt"];
1129--1399[label="0.0227273;5pkt 5fpkt"];
1129--4011[label="0.90099;182pkt 182fpkt"];
1129--4998[label="0.954023;83pkt 83fpkt"];
1129--5822[label="0.0227273;5pkt 5fpkt"];
1129--6417[label="0.5;1pkt 1fpkt"];
1129--7985[label="0.954023;83pkt 83fpkt"];
1129--8590[label="0.0702703;26pkt 26fpkt"];
1129--8610[label="0.0702703;26pkt 26fpkt"];
1129--8633[label="0.0702703;26pkt 26fpkt"];
1129--8710[label="0.0702703;26pkt 26fpkt"];
1129--8730[label="0.0702703;26pkt 26fpkt"];
1129--8753[label="0.0702703;26pkt 26fpkt"];
1129--8828[label="0.0702703;26pkt 26fpkt"];
1129--8846[label="0.0702703;26pkt 26fpkt"];
1129--8869[label="0.0702703;26pkt 26fpkt"];
1129--9435[label="0.882979;83pkt 83fpkt"];
1129--12055[label="0.875;28pkt 28fpkt"];
1129--13085[label="0.882979;83pkt 83fpkt"];
1129--15189[label="0.0185185;4pkt 4fpkt"];
4011--5749[label="0.029703;6pkt 6fpkt"];
4011--8232[label="0.030303;6pkt 6fpkt"];
4011--8590[label="0.0940594;19pkt 19fpkt"];
4011--8610[label="0.0643564;13pkt 13fpkt"];
4011--8633[label="0.0643564;13pkt 13fpkt"];
4011--8710[label="0.0940594;19pkt 19fpkt"];
4011--8730[label="0.0643564;13pkt 13fpkt"];
4011--8753[label="0.0643564;13pkt 13fpkt"];
4011--8828[label="0.0940594;19pkt 19fpkt"];
4011--8846[label="0.0643564;13pkt 13fpkt"];
4011--8869[label="0.0643564;13pkt 13fpkt"];
4998--7985[label="1;87pkt 87fpkt"];
4998--8590[label="0.0574713;5pkt 5fpkt"];
4998--8610[label="0.0574713;5pkt 5fpkt"];
4998--8633[label="0.0574713;5pkt 5fpkt"];
4998--8710[label="0.0574713;5pkt 5fpkt"];
4998--8730[label="0.0574713;5pkt 5fpkt"];
4998--8753[label="0.0574713;5pkt 5fpkt"];
4998--8828[label="0.0574713;5pkt 5fpkt"];
4998--8846[label="0.0574713;5pkt 5fpkt"];
4998--8869[label="0.0574713;5pkt 5fpkt"];
4998--9435[label="1;87pkt 87fpkt"];
4998--13085[label="1;87pkt 87fpkt"];
7985--8590[label="0.0574713;5pkt 5fpkt"];
7985--8610[label="0.0574713;5pkt 5fpkt"];
7985--8633[label="0.0574713;5pkt 5fpkt"];
7985--8710[label="0.0574713;5pkt 5fpkt"];
7985--8730[label="0.0574713;5pkt 5fpkt"];
7985--8753[label="0.0574713;5pkt 5fpkt"];
7985--8828[label="0.0574713;5pkt 5fpkt"];
7985--8846[label="0.0574713;5pkt 5fpkt"];
7985--8869[label="0.0574713;5pkt 5fpkt"];
7985--9435[label="1;87pkt 87fpkt"];
7985--13085[label="1;87pkt 87fpkt"];
9435--13085[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.18.94" src_ip="96.156.17.44" src_port="80"/>
      <filter dst_ip="167.209.18.94" src_ip="206.75.165.27" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
10540[label="212.205.234.94;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13605[label="212.205.234.94;1pkt 1fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.205.234.94:80, 9.73.197.84:49397}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49397: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10540--13605[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="9.73.197.84" dst_port="49397" src_ip="212.205.234.94" src_port="80"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.108.92.95"/>
    </slice>
    <from sec="1207285644" usec="0"/>
    <to sec="1207285651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="102.34.107.95"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207285849" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_855{
style=filled;
color=gray75;
10559[label="144.106.71.96;133pkt 133fpkt", shape=pentagon, color=darkviolet];
13612[label="144.106.71.96;133pkt 133fpkt", shape=invtriangle, color=brown];
15054[label="144.106.71.96;133pkt 133fpkt", shape=invhouse, color=bisque];
stat855[shape=component, label=&lt;Rules:&lt;BR/&gt;{144.106.71.96:53, *:*}[92.4812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50.3759%)&lt;BR/&gt; 53758: (3.7594%)&lt;BR/&gt; 32921: (1.12782%)&lt;BR/&gt; 65373: (0.37594%)&lt;BR/&gt; 64894: (0.37594%)&gt;];
}
10559--13612[label="1;133pkt 133fpkt"];
10559--15054[label="1;133pkt 133fpkt"];
13612--15054[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter src_ip="144.106.71.96" src_port="53"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_856{
style=filled;
color=gray75;
10575[label="207.134.231.96;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13615[label="207.134.231.96;6pkt 6fpkt", shape=invtriangle, color=brown];
stat856[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.134.231.96:80, 160.68.128.145:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64591: (8.33333%)&lt;BR/&gt; 64590: (8.33333%)&lt;BR/&gt; 64587: (8.33333%)&lt;BR/&gt; 64548: (8.33333%)&gt;];
}
10575--13615[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="160.68.128.145" src_ip="207.134.231.96" src_port="80"/>
    </slice>
    <from sec="1207286071" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.9.5.98"/>
    </slice>
    <from sec="1207285603" usec="0"/>
    <to sec="1207285785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967013,1.96331,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
4962[label="167.209.8.66;d;77pkt 77fpkt", shape=diamond, color=yellow];
5168[label="212.75.32.72;s;6pkt 6fpkt", shape=diamond, color=yellow];
10128[label="212.75.32.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10600[label="75.50.8.98;28pkt 28fpkt", shape=pentagon, color=darkviolet];
13415[label="212.75.32.72;1pkt 1fpkt", shape=invtriangle, color=brown];
13626[label="75.50.8.98;28pkt 28fpkt", shape=invtriangle, color=brown];
15061[label="75.50.8.98;28pkt 28fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.50.8.98:80, 167.209.8.66:*}[32.1839%]&lt;BR/&gt;{204.157.242.21:80, 167.209.8.66:*}[22.9885%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.858%)&lt;BR/&gt; 554: (4.14201%)&lt;BR/&gt; 52595: (1.18343%)&lt;BR/&gt; 52592: (1.18343%)&lt;BR/&gt; 52584: (1.18343%)&gt;];
}
4962--5168[label="1;6pkt 6fpkt"];
4962--6136[label="0.012987;1pkt 1fpkt"];
4962--6472[label="0.012987;1pkt 1fpkt"];
4962--7477[label="0.0140845;1pkt 1fpkt"];
4962--7513[label="0.012987;1pkt 1fpkt"];
4962--7768[label="0.038961;3pkt 3fpkt"];
4962--8036[label="0.012987;1pkt 1fpkt"];
4962--8590[label="0.103896;8pkt 8fpkt"];
4962--8610[label="0.103896;8pkt 8fpkt"];
4962--8633[label="0.025974;2pkt 2fpkt"];
4962--8710[label="0.103896;8pkt 8fpkt"];
4962--8730[label="0.103896;8pkt 8fpkt"];
4962--8753[label="0.025974;2pkt 2fpkt"];
4962--8828[label="0.103896;8pkt 8fpkt"];
4962--8846[label="0.103896;8pkt 8fpkt"];
4962--8869[label="0.025974;2pkt 2fpkt"];
4962--9095[label="0.0135135;1pkt 1fpkt"];
4962--10128[label="1;1pkt 1fpkt"];
4962--10600[label="0.642857;18pkt 18fpkt"];
4962--11769[label="0.038961;3pkt 3fpkt"];
4962--11969[label="0.012987;1pkt 1fpkt"];
4962--13415[label="1;1pkt 1fpkt"];
4962--13626[label="0.642857;18pkt 18fpkt"];
4962--14193[label="0.038961;3pkt 3fpkt"];
4962--15061[label="0.642857;18pkt 18fpkt"];
5168--10128[label="1;1pkt 1fpkt"];
5168--13415[label="1;1pkt 1fpkt"];
10128--13415[label="1;1pkt 1fpkt"];
10600--13626[label="1;28pkt 28fpkt"];
10600--15061[label="1;28pkt 28fpkt"];
13626--15061[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.8.66" src_ip="75.50.8.98" src_port="80"/>
      <filter dst_ip="167.209.8.66" src_ip="204.157.242.21" src_port="80"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_859{
style=filled;
color=gray75;
10602[label="75.50.17.98;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13627[label="75.50.17.98;8pkt 8fpkt", shape=invtriangle, color=brown];
15062[label="75.50.17.98;8pkt 8fpkt", shape=invhouse, color=bisque];
stat859[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.50.17.98:80, 167.209.145.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4512: (6.25%)&lt;BR/&gt; 4430: (6.25%)&lt;BR/&gt; 4322: (6.25%)&lt;BR/&gt; 4312: (6.25%)&gt;];
}
10602--13627[label="1;8pkt 8fpkt"];
10602--15062[label="1;8pkt 8fpkt"];
13627--15062[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.145.178" src_ip="75.50.17.98" src_port="80"/>
    </slice>
    <from sec="1207285852" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.111.76.100"/>
    </slice>
    <from sec="1207285608" usec="0"/>
    <to sec="1207285614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_862{
style=filled;
color=gray75;
852[label="144.106.82.138;d;303pkt 303fpkt", shape=diamond, color=yellow];
5384[label="144.106.82.138;d;210pkt 210fpkt", shape=hexagon, color=black];
10643[label="104.12.160.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13653[label="104.12.160.100;2pkt 2fpkt", shape=invtriangle, color=brown];
stat862[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 144.106.82.138:80}[99.3421%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8066%)&lt;BR/&gt; 40468: (0.386847%)&lt;BR/&gt; 38577: (0.386847%)&lt;BR/&gt; 38573: (0.386847%)&lt;BR/&gt; 47415: (0.290135%)&gt;];
}
852--2402[label="0.00330033;1pkt 1fpkt"];
852--4051[label="0.00917431;1pkt 1fpkt"];
852--4052[label="0.008;1pkt 1fpkt"];
852--5384[label="1;210pkt 210fpkt"];
852--7377[label="0.0123457;1pkt 1fpkt"];
852--7501[label="0.00330033;1pkt 1fpkt"];
852--8403[label="0.0123457;1pkt 1fpkt"];
852--8478[label="0.00330033;1pkt 1fpkt"];
852--8612[label="0.0594059;18pkt 18fpkt"];
852--8688[label="0.0231023;7pkt 7fpkt"];
852--8732[label="0.0594059;18pkt 18fpkt"];
852--8807[label="0.0231023;7pkt 7fpkt"];
852--8847[label="0.0594059;18pkt 18fpkt"];
852--8923[label="0.0231023;7pkt 7fpkt"];
852--10643[label="0.5;1pkt 1fpkt"];
852--11947[label="0.008;1pkt 1fpkt"];
852--12097[label="0.00877193;1pkt 1fpkt"];
852--12816[label="0.00330033;1pkt 1fpkt"];
852--13653[label="0.5;1pkt 1fpkt"];
852--14342[label="0.00877193;1pkt 1fpkt"];
852--14691[label="0.00330033;1pkt 1fpkt"];
852--15531[label="0.00330033;1pkt 1fpkt"];
5384--7377[label="0.0123457;1pkt 1fpkt"];
5384--7501[label="0.0047619;1pkt 1fpkt"];
5384--8403[label="0.0123457;1pkt 1fpkt"];
5384--8478[label="0.0047619;1pkt 1fpkt"];
5384--8612[label="0.0857143;18pkt 18fpkt"];
5384--8688[label="0.0333333;7pkt 7fpkt"];
5384--8732[label="0.0857143;18pkt 18fpkt"];
5384--8807[label="0.0333333;7pkt 7fpkt"];
5384--8847[label="0.0857143;18pkt 18fpkt"];
5384--8923[label="0.0333333;7pkt 7fpkt"];
5384--10643[label="0.5;1pkt 1fpkt"];
5384--11947[label="0.008;1pkt 1fpkt"];
5384--12816[label="0.0047619;1pkt 1fpkt"];
5384--13653[label="0.5;1pkt 1fpkt"];
5384--14691[label="0.0047619;1pkt 1fpkt"];
5384--15531[label="0.0047619;1pkt 1fpkt"];
10643--13653[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.82.138" dst_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="201.10.189.100"/>
    </slice>
    <from sec="1207285524" usec="0"/>
    <to sec="1207285529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
10649[label="179.101.241.100;128pkt 128fpkt", shape=pentagon, color=darkviolet];
13655[label="179.101.241.100;128pkt 128fpkt", shape=invtriangle, color=brown];
15077[label="179.101.241.100;128pkt 128fpkt", shape=invhouse, color=bisque];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.101.241.100:23860, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23860: (50%)&lt;BR/&gt; 64987: (0.390625%)&lt;BR/&gt; 64075: (0.390625%)&lt;BR/&gt; 64057: (0.390625%)&lt;BR/&gt; 63795: (0.390625%)&gt;];
}
10649--13655[label="1;128pkt 128fpkt"];
10649--15077[label="1;128pkt 128fpkt"];
13655--15077[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter src_ip="179.101.241.100" src_port="23860"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.241.33.101"/>
    </slice>
    <from sec="1207285267" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_866{
style=filled;
color=gray75;
10663[label="102.34.110.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13664[label="102.34.110.101;1pkt 1fpkt", shape=invtriangle, color=brown];
stat866[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.34.110.101:80, 167.209.46.217:53339}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53339: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10663--13664[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.46.217" dst_port="53339" src_ip="102.34.110.101" src_port="80"/>
    </slice>
    <from sec="1207286094" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.69.228.101"/>
    </slice>
    <from sec="1207285673" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.24.105"/>
    </slice>
    <from sec="1207285512" usec="0"/>
    <to sec="1207285554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
10728[label="96.97.54.105;29pkt 29fpkt", shape=pentagon, color=darkviolet];
13690[label="96.97.54.105;29pkt 29fpkt", shape=invtriangle, color=brown];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.97.54.105:21, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 3962: (1.72414%)&lt;BR/&gt; 3960: (1.72414%)&lt;BR/&gt; 3669: (1.72414%)&lt;BR/&gt; 3665: (1.72414%)&gt;];
}
10728--13690[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter src_ip="96.97.54.105" src_port="21"/>
    </slice>
    <from sec="1207285226" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.172.179.105"/>
    </slice>
    <from sec="1207286053" usec="0"/>
    <to sec="1207286080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.86.187.105"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.2.204.105"/>
    </slice>
    <from sec="1207285804" usec="0"/>
    <to sec="1207285820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.13.33.106"/>
    </slice>
    <from sec="1207285879" usec="0"/>
    <to sec="1207286029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.220.192.106"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_878{
style=filled;
color=gray75;
10765[label="75.50.23.107;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13710[label="75.50.23.107;13pkt 13fpkt", shape=invtriangle, color=brown];
15101[label="75.50.23.107;13pkt 13fpkt", shape=invhouse, color=bisque];
stat878[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.50.23.107:80, 167.209.153.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54898: (3.84615%)&lt;BR/&gt; 54890: (3.84615%)&lt;BR/&gt; 54882: (3.84615%)&lt;BR/&gt; 54860: (3.84615%)&gt;];
}
10765--13710[label="1;13pkt 13fpkt"];
10765--15101[label="1;13pkt 13fpkt"];
13710--15101[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.153.216" src_ip="75.50.23.107" src_port="80"/>
    </slice>
    <from sec="1207286036" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_879{
style=filled;
color=gray75;
10771[label="167.209.133.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13715[label="167.209.133.107;1pkt 1fpkt", shape=invtriangle, color=brown];
15102[label="167.209.133.107;1pkt 1fpkt", shape=invhouse, color=bisque];
stat879[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.133.107:2876, 220.222.237.188:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2876: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10771--13715[label="1;1pkt 1fpkt"];
10771--15102[label="1;1pkt 1fpkt"];
13715--15102[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.222.237.188" dst_port="80" src_ip="167.209.133.107" src_port="2876"/>
    </slice>
    <from sec="1207285942" usec="0"/>
    <to sec="1207286033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.54.193.107"/>
    </slice>
    <from sec="1207285491" usec="0"/>
    <to sec="1207285647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_881{
style=filled;
color=gray75;
10778[label="167.209.213.107;82pkt 82fpkt", shape=pentagon, color=darkviolet];
13720[label="167.209.213.107;82pkt 82fpkt", shape=invtriangle, color=brown];
15104[label="167.209.213.107;82pkt 82fpkt", shape=invhouse, color=bisque];
stat881[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.213.107:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
10778--13720[label="1;82pkt 82fpkt"];
10778--15104[label="1;82pkt 82fpkt"];
13720--15104[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter src_ip="167.209.213.107"/>
    </slice>
    <from sec="1207285211" usec="0"/>
    <to sec="1207286097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.243.131.108"/>
    </slice>
    <from sec="1207285471" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="123.186.136.108"/>
    </slice>
    <from sec="1207285458" usec="0"/>
    <to sec="1207285468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_884{
style=filled;
color=gray75;
10804[label="77.31.11.109;16pkt 16fpkt", shape=pentagon, color=darkviolet];
13734[label="77.31.11.109;16pkt 16fpkt", shape=invtriangle, color=brown];
15112[label="77.31.11.109;16pkt 16fpkt", shape=invhouse, color=bisque];
stat884[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.31.11.109:*, 160.86.68.6:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54835: (3.125%)&lt;BR/&gt; 38750: (3.125%)&lt;BR/&gt; 38749: (3.125%)&lt;BR/&gt; 38748: (3.125%)&gt;];
}
10804--13734[label="1;16pkt 16fpkt"];
10804--15112[label="1;16pkt 16fpkt"];
13734--15112[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.68.6" dst_port="80" src_ip="77.31.11.109"/>
    </slice>
    <from sec="1207285537" usec="0"/>
    <to sec="1207285564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.209.22.109"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.14.199.109"/>
    </slice>
    <from sec="1207285522" usec="0"/>
    <to sec="1207285590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.3.198.111"/>
    </slice>
    <from sec="1207285458" usec="0"/>
    <to sec="1207285895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="58.143.6.112"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.196.34.112"/>
    </slice>
    <from sec="1207285410" usec="0"/>
    <to sec="1207285898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
10859[label="101.3.218.112;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13761[label="101.3.218.112;10pkt 10fpkt", shape=invtriangle, color=brown];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.3.218.112:80, 160.86.160.13:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1229: (5%)&lt;BR/&gt; 1228: (5%)&lt;BR/&gt; 1225: (5%)&lt;BR/&gt; 1224: (5%)&gt;];
}
10859--13761[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.160.13" src_ip="101.3.218.112" src_port="80"/>
    </slice>
    <from sec="1207285278" usec="0"/>
    <to sec="1207285321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="149.5.116.114"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.85.201.116"/>
    </slice>
    <from sec="1207285270" usec="0"/>
    <to sec="1207286087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_893{
style=filled;
color=gray75;
10931[label="101.207.77.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13788[label="101.207.77.117;1pkt 1fpkt", shape=invtriangle, color=brown];
15131[label="101.207.77.117;7pkt 7fpkt", shape=invhouse, color=bisque];
stat893[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.207.77.117:*, 144.106.121.164:80}[42.8571%]&lt;BR/&gt;{101.207.77.117:*, *:21}[28.5714%]&lt;BR/&gt;{101.207.77.117:*, 144.106.73.52:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 61942: (16.6667%)&lt;BR/&gt; 21: (11.1111%)&lt;BR/&gt; 64963: (5.55556%)&lt;BR/&gt; 64431: (5.55556%)&gt;];
}
10931--13788[label="1;1pkt 1fpkt"];
10931--15131[label="1;1pkt 1fpkt"];
13788--15131[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="144.106.73.52" src_ip="101.207.77.117"/>
      <filter dst_port="21" src_ip="101.207.77.117"/>
      <filter dst_ip="144.106.121.164" dst_port="80" src_ip="101.207.77.117"/>
    </slice>
    <from sec="1207285248" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.111.77.118"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.186.5.121"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_896{
style=filled;
color=gray75;
10995[label="160.67.2.122;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13815[label="160.67.2.122;2pkt 2fpkt", shape=invtriangle, color=brown];
15147[label="160.67.2.122;2pkt 2fpkt", shape=invhouse, color=bisque];
stat896[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.67.2.122:80, 101.207.72.104:47791}[50%]&lt;BR/&gt;{160.67.2.122:80, 101.207.72.104:47814}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 47814: (25%)&lt;BR/&gt; 47791: (25%)&gt;];
}
10995--13815[label="1;2pkt 2fpkt"];
10995--15147[label="1;2pkt 2fpkt"];
13815--15147[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="101.207.72.104" dst_port="47814" src_ip="160.67.2.122" src_port="80"/>
      <filter dst_ip="101.207.72.104" dst_port="47791" src_ip="160.67.2.122" src_port="80"/>
    </slice>
    <from sec="1207285590" usec="0"/>
    <to sec="1207285592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_897{
style=filled;
color=gray75;
11006[label="206.75.3.123;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13818[label="206.75.3.123;6pkt 6fpkt", shape=invtriangle, color=brown];
15148[label="206.75.3.123;6pkt 6fpkt", shape=invhouse, color=bisque];
stat897[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.75.3.123:443, 160.86.136.164:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2005: (8.33333%)&lt;BR/&gt; 2004: (8.33333%)&lt;BR/&gt; 2002: (8.33333%)&lt;BR/&gt; 1961: (8.33333%)&gt;];
}
11006--13818[label="1;6pkt 6fpkt"];
11006--15148[label="1;6pkt 6fpkt"];
13818--15148[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.136.164" src_ip="206.75.3.123" src_port="443"/>
    </slice>
    <from sec="1207285567" usec="0"/>
    <to sec="1207285968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_898{
style=filled;
color=gray75;
11022[label="25.59.24.124;40pkt 40fpkt", shape=pentagon, color=darkviolet];
13823[label="25.59.24.124;40pkt 40fpkt", shape=invtriangle, color=brown];
15150[label="25.59.24.124;40pkt 40fpkt", shape=invhouse, color=bisque];
stat898[shape=component, label=&lt;Rules:&lt;BR/&gt;{25.59.24.124:80, 167.209.18.159:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63783: (1.25%)&lt;BR/&gt; 63458: (1.25%)&lt;BR/&gt; 63082: (1.25%)&lt;BR/&gt; 61422: (1.25%)&gt;];
}
11022--13823[label="1;40pkt 40fpkt"];
11022--15150[label="1;40pkt 40fpkt"];
13823--15150[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.18.159" src_ip="25.59.24.124" src_port="80"/>
    </slice>
    <from sec="1207285211" usec="0"/>
    <to sec="1207286037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="102.34.102.125"/>
    </slice>
    <from sec="1207285910" usec="0"/>
    <to sec="1207285917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_900{
style=filled;
color=gray75;
11055[label="78.183.7.126;343pkt 343fpkt", shape=pentagon, color=darkviolet];
13837[label="78.183.7.126;343pkt 343fpkt", shape=invtriangle, color=brown];
15156[label="78.183.7.126;343pkt 343fpkt", shape=invhouse, color=bisque];
stat900[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.183.7.126:7108, *:*}[79.0087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7108: (39.5044%)&lt;BR/&gt; 7700: (9.91254%)&lt;BR/&gt; 2314: (0.58309%)&lt;BR/&gt; 1: (0.58309%)&lt;BR/&gt; 62580: (0.437318%)&gt;];
}
11055--13837[label="1;343pkt 343fpkt"];
11055--15156[label="1;343pkt 343fpkt"];
13837--15156[label="1;343pkt 343fpkt"];
</description>
    <slice>
      <filter src_ip="78.183.7.126" src_port="7108"/>
    </slice>
    <from sec="1207285526" usec="0"/>
    <to sec="1207285907" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.34.41.126"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
11066[label="149.82.87.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13844[label="149.82.87.127;1pkt 1fpkt", shape=invtriangle, color=brown];
15161[label="149.82.87.127;1pkt 1fpkt", shape=invhouse, color=bisque];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.87.127:1098, 204.157.249.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1098: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11066--13844[label="1;1pkt 1fpkt"];
11066--15161[label="1;1pkt 1fpkt"];
13844--15161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.157.249.161" dst_port="80" src_ip="149.82.87.127" src_port="1098"/>
    </slice>
    <from sec="1207286054" usec="0"/>
    <to sec="1207286069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_903{
style=filled;
color=gray75;
11068[label="15.46.115.127;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13845[label="15.46.115.127;10pkt 10fpkt", shape=invtriangle, color=brown];
15162[label="15.46.115.127;10pkt 10fpkt", shape=invhouse, color=bisque];
stat903[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.46.115.127:*, 167.209.153.141:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49990: (5%)&lt;BR/&gt; 49987: (5%)&lt;BR/&gt; 49986: (5%)&lt;BR/&gt; 49985: (5%)&gt;];
}
11068--13845[label="1;10pkt 10fpkt"];
11068--15162[label="1;10pkt 10fpkt"];
13845--15162[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.153.141" dst_port="80" src_ip="15.46.115.127"/>
    </slice>
    <from sec="1207285907" usec="0"/>
    <to sec="1207285950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_904{
style=filled;
color=gray75;
11071[label="74.12.155.127;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13847[label="74.12.155.127;1pkt 1fpkt", shape=invtriangle, color=brown];
stat904[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.12.155.127:4570, 149.82.211.221:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4570: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11071--13847[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.211.221" dst_port="80" src_ip="74.12.155.127" src_port="4570"/>
    </slice>
    <from sec="1207285366" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_905{
style=filled;
color=gray75;
11078[label="160.86.70.128;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13850[label="160.86.70.128;14pkt 14fpkt", shape=invtriangle, color=brown];
stat905[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.70.128:37413, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37413: (50%)&lt;BR/&gt; 63924: (3.57143%)&lt;BR/&gt; 57618: (3.57143%)&lt;BR/&gt; 42128: (3.57143%)&lt;BR/&gt; 37292: (3.57143%)&gt;];
}
11078--13850[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter src_ip="160.86.70.128" src_port="37413"/>
    </slice>
    <from sec="1207285220" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_906{
style=filled;
color=gray75;
11087[label="149.82.154.128;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13854[label="149.82.154.128;6pkt 6fpkt", shape=invtriangle, color=brown];
15164[label="149.82.154.128;6pkt 6fpkt", shape=invhouse, color=bisque];
stat906[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.154.128:*, 208.52.16.227:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56613: (8.33333%)&lt;BR/&gt; 56611: (8.33333%)&lt;BR/&gt; 56610: (8.33333%)&lt;BR/&gt; 56598: (8.33333%)&gt;];
}
11087--13854[label="1;6pkt 6fpkt"];
11087--15164[label="1;6pkt 6fpkt"];
13854--15164[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="208.52.16.227" dst_port="80" src_ip="149.82.154.128"/>
    </slice>
    <from sec="1207285813" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_907{
style=filled;
color=gray75;
546[label="212.205.234.93;d;418pkt 418fpkt", shape=diamond, color=yellow];
652[label="102.69.23.122;s;4pkt 4fpkt", shape=diamond, color=yellow];
967[label="86.55.56.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
1494[label="128.206.164.101;s;1pkt 1fpkt", shape=diamond, color=yellow];
3344[label="96.156.21.176;s;187pkt 187fpkt", shape=diamond, color=yellow];
3881[label="201.97.27.149;s;72pkt 72fpkt", shape=diamond, color=yellow];
4053[label="9.8.102.189;s;4pkt 4fpkt", shape=diamond, color=yellow];
5299[label="212.205.234.93;d;85pkt 85fpkt", shape=hexagon, color=black];
5952[label="102.69.23.122;s;4pkt 4fpkt", shape=hexagon, color=black];
6017[label="86.55.56.74;s;1pkt 1fpkt", shape=hexagon, color=black];
7228[label="201.97.27.149;s;49pkt 49fpkt", shape=hexagon, color=black];
7595[label="128.206.164.101;s;1pkt 1fpkt", shape=hexagon, color=black];
10015[label="123.98.244.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11088[label="99.65.205.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11807[label="96.156.21.176;211pkt 211fpkt", shape=pentagon, color=darkviolet];
12001[label="9.8.102.189;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13855[label="99.65.205.128;1pkt 1fpkt", shape=invtriangle, color=brown];
14307[label="100.160.179.191;1pkt 1fpkt", shape=invtriangle, color=brown];
15165[label="99.65.205.128;1pkt 1fpkt", shape=invhouse, color=bisque];
stat907[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.156.21.176:8080, 212.205.234.93:*}[47.5113%]&lt;BR/&gt;{*:*, 212.205.234.93:6970}[29.8643%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (28.4623%)&lt;BR/&gt; 6970: (12.703%)&lt;BR/&gt; 51337: (3.19962%)&lt;BR/&gt; 80: (2.96084%)&lt;BR/&gt; 0: (0.477555%)&gt;];
}
546--652[label="1;4pkt 4fpkt"];
546--783[label="0.00717703;3pkt 3fpkt"];
546--967[label="1;1pkt 1fpkt"];
546--1218[label="0.0613497;10pkt 10fpkt"];
546--1494[label="1;1pkt 1fpkt"];
546--1645[label="0.010101;1pkt 1fpkt"];
546--3097[label="0.0666667;1pkt 1fpkt"];
546--3344[label="1;187pkt 187fpkt"];
546--3468[label="0.0147059;1pkt 1fpkt"];
546--3881[label="1;72pkt 72fpkt"];
546--4051[label="0.00917431;1pkt 1fpkt"];
546--4052[label="0.008;1pkt 1fpkt"];
546--4053[label="1;4pkt 4fpkt"];
546--4366[label="0.0238095;1pkt 1fpkt"];
546--5161[label="0.00239234;1pkt 1fpkt"];
546--5299[label="1;85pkt 85fpkt"];
546--5756[label="0.188679;10pkt 10fpkt"];
546--5952[label="1;4pkt 4fpkt"];
546--6017[label="1;1pkt 1fpkt"];
546--6532[label="0.0666667;1pkt 1fpkt"];
546--6723[label="0.00717703;3pkt 3fpkt"];
546--7133[label="0.011236;1pkt 1fpkt"];
546--7228[label="1;49pkt 49fpkt"];
546--7376[label="0.0142857;1pkt 1fpkt"];
546--7595[label="1;1pkt 1fpkt"];
546--7747[label="0.0147059;1pkt 1fpkt"];
546--8688[label="0.00239234;1pkt 1fpkt"];
546--8807[label="0.00239234;1pkt 1fpkt"];
546--8923[label="0.00239234;1pkt 1fpkt"];
546--10015[label="1;1pkt 1fpkt"];
546--11088[label="1;1pkt 1fpkt"];
546--11284[label="0.0588235;10pkt 10fpkt"];
546--11773[label="0.0232558;1pkt 1fpkt"];
546--11807[label="0.886256;187pkt 187fpkt"];
546--11947[label="0.008;1pkt 1fpkt"];
546--12001[label="1;4pkt 4fpkt"];
546--12097[label="0.00877193;1pkt 1fpkt"];
546--12513[label="0.00970874;1pkt 1fpkt"];
546--13855[label="1;1pkt 1fpkt"];
546--14307[label="1;1pkt 1fpkt"];
546--14342[label="0.00877193;1pkt 1fpkt"];
546--15165[label="1;1pkt 1fpkt"];
652--5299[label="1;4pkt 4fpkt"];
652--5952[label="1;4pkt 4fpkt"];
967--5299[label="1;1pkt 1fpkt"];
967--6017[label="1;1pkt 1fpkt"];
1494--5299[label="1;1pkt 1fpkt"];
1494--7595[label="1;1pkt 1fpkt"];
3344--5299[label="0.176471;15pkt 15fpkt"];
3344--11807[label="1;187pkt 187fpkt"];
3881--5299[label="0.236111;17pkt 17fpkt"];
3881--7228[label="1;49pkt 49fpkt"];
4053--12001[label="1;4pkt 4fpkt"];
5299--5756[label="0.188679;10pkt 10fpkt"];
5299--5952[label="1;4pkt 4fpkt"];
5299--6017[label="1;1pkt 1fpkt"];
5299--6532[label="0.0666667;1pkt 1fpkt"];
5299--7228[label="0.346939;17pkt 17fpkt"];
5299--7595[label="1;1pkt 1fpkt"];
5299--7747[label="0.0147059;1pkt 1fpkt"];
5299--10015[label="1;1pkt 1fpkt"];
5299--11284[label="0.117647;10pkt 10fpkt"];
5299--11807[label="0.176471;15pkt 15fpkt"];
5299--14307[label="1;1pkt 1fpkt"];
11088--13855[label="1;1pkt 1fpkt"];
11088--15165[label="1;1pkt 1fpkt"];
13855--15165[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.205.234.93" dst_port="6970"/>
      <filter dst_ip="212.205.234.93" src_ip="96.156.21.176" src_port="8080"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.148.240.128"/>
    </slice>
    <from sec="1207285703" usec="0"/>
    <to sec="1207285814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_909{
style=filled;
color=gray75;
11109[label="105.206.194.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13862[label="105.206.194.129;1pkt 1fpkt", shape=invtriangle, color=brown];
stat909[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.206.194.129:52097, 212.205.237.33:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52097: (50%)&lt;BR/&gt; 8080: (50%)&gt;];
}
11109--13862[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.205.237.33" dst_port="8080" src_ip="105.206.194.129" src_port="52097"/>
    </slice>
    <from sec="1207286040" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_910{
style=filled;
color=gray75;
602[label="204.157.221.129;s;77pkt 77fpkt", shape=diamond, color=yellow];
890[label="167.209.8.165;d;240pkt 240fpkt", shape=diamond, color=yellow];
1377[label="167.209.203.186;d;17pkt 17fpkt", shape=diamond, color=yellow];
1384[label="75.50.41.99;s;124pkt 124fpkt", shape=diamond, color=yellow];
2028[label="75.50.59.4;s;92pkt 92fpkt", shape=diamond, color=yellow];
2172[label="167.209.133.52;d;105pkt 105fpkt", shape=diamond, color=yellow];
3159[label="160.86.121.39;d;47pkt 47fpkt", shape=diamond, color=yellow];
3267[label="103.79.70.61;s;14pkt 14fpkt", shape=diamond, color=yellow];
3572[label="167.209.133.28;d;133pkt 133fpkt", shape=diamond, color=yellow];
3590[label="167.209.124.197;d;101pkt 101fpkt", shape=diamond, color=yellow];
3749[label="212.75.32.62;s;66pkt 66fpkt", shape=diamond, color=yellow];
4435[label="167.209.16.217;d;29pkt 29fpkt", shape=diamond, color=yellow];
4836[label="213.60.33.3;s;8pkt 8fpkt", shape=diamond, color=yellow];
5138[label="102.34.104.141;s;1pkt 1fpkt", shape=diamond, color=yellow];
5536[label="167.209.203.186;d;17pkt 17fpkt", shape=hexagon, color=black];
5562[label="167.209.159.46;d;132pkt 132fpkt", shape=hexagon, color=black];
5991[label="167.209.8.165;d;96pkt 96fpkt", shape=hexagon, color=black];
6921[label="75.50.59.4;s;60pkt 60fpkt", shape=hexagon, color=black];
6956[label="160.86.121.39;d;22pkt 22fpkt", shape=hexagon, color=black];
7316[label="75.50.41.99;s;115pkt 115fpkt", shape=hexagon, color=black];
8033[label="167.209.124.197;d;101pkt 101fpkt", shape=hexagon, color=black];
9006[label="75.50.59.4;107pkt 107fpkt", shape=pentagon, color=darkviolet];
9949[label="103.79.70.61;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10621[label="75.50.41.99;130pkt 130fpkt", shape=pentagon, color=darkviolet];
11111[label="204.157.221.129;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11317[label="102.34.104.141;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11683[label="102.34.105.167;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12875[label="75.50.59.4;107pkt 107fpkt", shape=invtriangle, color=brown];
13327[label="103.79.70.61;14pkt 14fpkt", shape=invtriangle, color=brown];
13639[label="75.50.41.99;130pkt 130fpkt", shape=invtriangle, color=brown];
13864[label="204.157.221.129;162pkt 162fpkt", shape=invtriangle, color=brown];
13971[label="102.34.104.141;1pkt 1fpkt", shape=invtriangle, color=brown];
14716[label="75.50.59.4;107pkt 107fpkt", shape=invhouse, color=bisque];
14923[label="103.79.70.61;14pkt 14fpkt", shape=invhouse, color=bisque];
15219[label="102.34.104.141;1pkt 1fpkt", shape=invhouse, color=bisque];
stat910[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 167.209.8.165:*}[26.2405%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.7761%)&lt;BR/&gt; 5004: (1.8797%)&lt;BR/&gt; 554: (1.8797%)&lt;BR/&gt; 110: (0.459482%)&lt;BR/&gt; 443: (0.417711%)&gt;];
}
602--890[label="0.688312;53pkt 53fpkt"];
602--2432[label="0.103896;8pkt 8fpkt"];
602--4426[label="0.207792;16pkt 16fpkt"];
602--13864[label="1;77pkt 77fpkt"];
890--900[label="0.141667;34pkt 34fpkt"];
890--1072[label="0.00833333;2pkt 2fpkt"];
890--1320[label="0.0165746;3pkt 3fpkt"];
890--1384[label="0.120968;15pkt 15fpkt"];
890--1596[label="0.00961538;1pkt 1fpkt"];
890--1661[label="0.195833;47pkt 47fpkt"];
890--1953[label="0.0333333;8pkt 8fpkt"];
890--2198[label="1;1pkt 1fpkt"];
890--2308[label="0.00833333;2pkt 2fpkt"];
890--2498[label="0.0104167;1pkt 1fpkt"];
890--2995[label="0.0135135;1pkt 1fpkt"];
890--3042[label="0.0165746;3pkt 3fpkt"];
890--3462[label="0.0185185;3pkt 3fpkt"];
890--3543[label="0.00833333;2pkt 2fpkt"];
890--4836[label="0.75;6pkt 6fpkt"];
890--5036[label="0.0357143;2pkt 2fpkt"];
890--5138[label="1;1pkt 1fpkt"];
890--5334[label="0.0125;3pkt 3fpkt"];
890--5606[label="0.0119048;1pkt 1fpkt"];
890--5664[label="0.141667;34pkt 34fpkt"];
890--5979[label="0.0125;3pkt 3fpkt"];
890--5982[label="0.00416667;1pkt 1fpkt"];
890--5991[label="1;96pkt 96fpkt"];
890--6350[label="0.00833333;1pkt 1fpkt"];
890--6494[label="0.0104167;1pkt 1fpkt"];
890--6845[label="0.0165746;3pkt 3fpkt"];
890--7297[label="0.00763359;1pkt 1fpkt"];
890--7316[label="0.130435;15pkt 15fpkt"];
890--7716[label="0.0142857;1pkt 1fpkt"];
890--7739[label="0.0202703;3pkt 3fpkt"];
890--7784[label="0.00938967;2pkt 2fpkt"];
890--7897[label="0.195833;47pkt 47fpkt"];
890--8344[label="0.0165746;3pkt 3fpkt"];
890--8470[label="0.0125;3pkt 3fpkt"];
890--8574[label="0.00416667;1pkt 1fpkt"];
890--8589[label="0.00416667;1pkt 1fpkt"];
890--8590[label="0.1125;27pkt 27fpkt"];
890--8610[label="0.0166667;4pkt 4fpkt"];
890--8632[label="0.00416667;1pkt 1fpkt"];
890--8633[label="0.0291667;7pkt 7fpkt"];
890--8709[label="0.00416667;1pkt 1fpkt"];
890--8710[label="0.1125;27pkt 27fpkt"];
890--8730[label="0.0166667;4pkt 4fpkt"];
890--8752[label="0.00416667;1pkt 1fpkt"];
890--8753[label="0.0291667;7pkt 7fpkt"];
890--8827[label="0.00416667;1pkt 1fpkt"];
890--8828[label="0.1125;27pkt 27fpkt"];
890--8846[label="0.0166667;4pkt 4fpkt"];
890--8868[label="0.00416667;1pkt 1fpkt"];
890--8869[label="0.0291667;7pkt 7fpkt"];
890--8972[label="0.0769231;1pkt 1fpkt"];
890--9013[label="0.0153846;3pkt 3fpkt"];
890--9137[label="0.0625;1pkt 1fpkt"];
890--9158[label="0.333333;2pkt 2fpkt"];
890--9431[label="0.00862069;1pkt 1fpkt"];
890--9447[label="0.0102041;1pkt 1fpkt"];
890--10621[label="0.115385;15pkt 15fpkt"];
890--11317[label="1;1pkt 1fpkt"];
890--11683[label="1;1pkt 1fpkt"];
890--11707[label="0.0333333;1pkt 1fpkt"];
890--12028[label="0.02;1pkt 1fpkt"];
890--12400[label="0.0285714;1pkt 1fpkt"];
890--12877[label="0.0153061;3pkt 3fpkt"];
890--12939[label="0.0666667;1pkt 1fpkt"];
890--12951[label="0.4;2pkt 2fpkt"];
890--13092[label="0.0102041;1pkt 1fpkt"];
890--13639[label="0.115385;15pkt 15fpkt"];
890--13864[label="0.32716;53pkt 53fpkt"];
890--13971[label="1;1pkt 1fpkt"];
890--14308[label="0.02;1pkt 1fpkt"];
890--14498[label="0.0285714;1pkt 1fpkt"];
890--14752[label="0.0625;1pkt 1fpkt"];
890--14815[label="0.0103093;1pkt 1fpkt"];
890--15219[label="1;1pkt 1fpkt"];
1377--1384[label="0.764706;13pkt 13fpkt"];
1377--2028[label="0.235294;4pkt 4fpkt"];
1377--5536[label="1;17pkt 17fpkt"];
1377--6921[label="0.235294;4pkt 4fpkt"];
1377--7316[label="0.764706;13pkt 13fpkt"];
1377--9006[label="0.235294;4pkt 4fpkt"];
1377--10621[label="0.764706;13pkt 13fpkt"];
1377--12875[label="0.235294;4pkt 4fpkt"];
1377--13639[label="0.764706;13pkt 13fpkt"];
1377--14716[label="0.235294;4pkt 4fpkt"];
1384--1398[label="0.0403226;5pkt 5fpkt"];
1384--2146[label="0.0111111;1pkt 1fpkt"];
1384--2172[label="0.228571;24pkt 24fpkt"];
1384--3143[label="0.00806452;1pkt 1fpkt"];
1384--3155[label="0.0462963;5pkt 5fpkt"];
1384--3230[label="0.00806452;1pkt 1fpkt"];
1384--5267[label="0.016129;2pkt 2fpkt"];
1384--5472[label="0.0403226;5pkt 5fpkt"];
1384--5536[label="0.764706;13pkt 13fpkt"];
1384--5875[label="0.00806452;1pkt 1fpkt"];
1384--5991[label="0.15625;15pkt 15fpkt"];
1384--6069[label="0.00806452;1pkt 1fpkt"];
1384--6289[label="0.0344828;3pkt 3fpkt"];
1384--7316[label="1;115pkt 115fpkt"];
1384--7329[label="0.00813008;1pkt 1fpkt"];
1384--7338[label="0.0462963;5pkt 5fpkt"];
1384--8590[label="0.0241935;3pkt 3fpkt"];
1384--8610[label="0.0403226;5pkt 5fpkt"];
1384--8633[label="0.0967742;12pkt 12fpkt"];
1384--8710[label="0.0241935;3pkt 3fpkt"];
1384--8730[label="0.0403226;5pkt 5fpkt"];
1384--8753[label="0.0967742;12pkt 12fpkt"];
1384--8828[label="0.0241935;3pkt 3fpkt"];
1384--8846[label="0.0403226;5pkt 5fpkt"];
1384--8869[label="0.0967742;12pkt 12fpkt"];
1384--10621[label="1;124pkt 124fpkt"];
1384--13639[label="1;124pkt 124fpkt"];
2028--2152[label="0.0322581;2pkt 2fpkt"];
2028--2583[label="0.0217391;2pkt 2fpkt"];
2028--3159[label="0.148936;7pkt 7fpkt"];
2028--3572[label="0.0978261;9pkt 9fpkt"];
2028--3590[label="0.119565;11pkt 11fpkt"];
2028--3654[label="0.0978261;9pkt 9fpkt"];
2028--3936[label="0.0434783;4pkt 4fpkt"];
2028--4435[label="0.482759;14pkt 14fpkt"];
2028--5536[label="0.235294;4pkt 4fpkt"];
2028--5539[label="0.0217391;2pkt 2fpkt"];
2028--5562[label="0.076087;7pkt 7fpkt"];
2028--5656[label="0.0217391;2pkt 2fpkt"];
2028--5919[label="0.0108696;1pkt 1fpkt"];
2028--6101[label="0.0222222;1pkt 1fpkt"];
2028--6143[label="0.0108696;1pkt 1fpkt"];
2028--6221[label="0.0338983;2pkt 2fpkt"];
2028--6921[label="1;60pkt 60fpkt"];
2028--7275[label="0.0434783;4pkt 4fpkt"];
2028--8004[label="0.0217391;2pkt 2fpkt"];
2028--8033[label="0.119565;11pkt 11fpkt"];
2028--8394[label="0.045977;4pkt 4fpkt"];
2028--8520[label="0.0217391;2pkt 2fpkt"];
2028--8590[label="0.0869565;8pkt 8fpkt"];
2028--8610[label="0.119565;11pkt 11fpkt"];
2028--8710[label="0.0869565;8pkt 8fpkt"];
2028--8730[label="0.119565;11pkt 11fpkt"];
2028--8828[label="0.0869565;8pkt 8fpkt"];
2028--8846[label="0.119565;11pkt 11fpkt"];
2028--9006[label="1;92pkt 92fpkt"];
2028--12875[label="1;92pkt 92fpkt"];
2028--14716[label="1;92pkt 92fpkt"];
2172--6517[label="0.247619;26pkt 26fpkt"];
2172--7316[label="0.228571;24pkt 24fpkt"];
2172--10557[label="0.0380952;4pkt 4fpkt"];
2172--10621[label="0.228571;24pkt 24fpkt"];
2172--12553[label="0.247619;26pkt 26fpkt"];
2172--13639[label="0.228571;24pkt 24fpkt"];
3159--3267[label="1;14pkt 14fpkt"];
3159--4167[label="0.0212766;1pkt 1fpkt"];
3159--6956[label="1;22pkt 22fpkt"];
3159--7432[label="0.0212766;1pkt 1fpkt"];
3159--8413[label="0.0212766;1pkt 1fpkt"];
3159--8643[label="0.0212766;1pkt 1fpkt"];
3159--8680[label="0.0212766;1pkt 1fpkt"];
3159--8763[label="0.0212766;1pkt 1fpkt"];
3159--8800[label="0.0212766;1pkt 1fpkt"];
3159--8879[label="0.0212766;1pkt 1fpkt"];
3159--8916[label="0.0212766;1pkt 1fpkt"];
3159--9006[label="0.148936;7pkt 7fpkt"];
3159--9949[label="1;14pkt 14fpkt"];
3159--12263[label="0.0212766;1pkt 1fpkt"];
3159--12875[label="0.148936;7pkt 7fpkt"];
3159--13327[label="1;14pkt 14fpkt"];
3159--14432[label="0.0212766;1pkt 1fpkt"];
3159--14716[label="0.148936;7pkt 7fpkt"];
3159--14923[label="1;14pkt 14fpkt"];
3159--15405[label="0.0212766;1pkt 1fpkt"];
3267--6956[label="1;14pkt 14fpkt"];
3267--9949[label="1;14pkt 14fpkt"];
3267--13327[label="1;14pkt 14fpkt"];
3267--14923[label="1;14pkt 14fpkt"];
3572--3749[label="1;66pkt 66fpkt"];
3572--6921[label="0.15;9pkt 9fpkt"];
3572--8590[label="0.0526316;7pkt 7fpkt"];
3572--8610[label="0.0225564;3pkt 3fpkt"];
3572--8710[label="0.0526316;7pkt 7fpkt"];
3572--8730[label="0.0225564;3pkt 3fpkt"];
3572--8828[label="0.0526316;7pkt 7fpkt"];
3572--8846[label="0.0225564;3pkt 3fpkt"];
3572--9006[label="0.0841121;9pkt 9fpkt"];
3572--12875[label="0.0841121;9pkt 9fpkt"];
3572--14716[label="0.0841121;9pkt 9fpkt"];
3590--3964[label="0.019802;2pkt 2fpkt"];
3590--4272[label="0.019802;2pkt 2fpkt"];
3590--4286[label="0.00990099;1pkt 1fpkt"];
3590--4334[label="0.019802;2pkt 2fpkt"];
3590--5334[label="0.039604;4pkt 4fpkt"];
3590--5402[label="0.019802;2pkt 2fpkt"];
3590--5609[label="0.00990099;1pkt 1fpkt"];
3590--5742[label="0.00990099;1pkt 1fpkt"];
3590--6472[label="0.00990099;1pkt 1fpkt"];
3590--6482[label="0.039604;4pkt 4fpkt"];
3590--6921[label="0.183333;11pkt 11fpkt"];
3590--7457[label="0.019802;2pkt 2fpkt"];
3590--7496[label="0.039604;4pkt 4fpkt"];
3590--7566[label="0.019802;2pkt 2fpkt"];
3590--7810[label="0.00990099;1pkt 1fpkt"];
3590--7922[label="0.0326087;3pkt 3fpkt"];
3590--7995[label="0.019802;2pkt 2fpkt"];
3590--8008[label="0.0792079;8pkt 8fpkt"];
3590--8033[label="1;101pkt 101fpkt"];
3590--8252[label="0.019802;2pkt 2fpkt"];
3590--8470[label="0.039604;4pkt 4fpkt"];
3590--8487[label="0.019802;2pkt 2fpkt"];
3590--8590[label="0.039604;4pkt 4fpkt"];
3590--8610[label="0.049505;5pkt 5fpkt"];
3590--8710[label="0.039604;4pkt 4fpkt"];
3590--8730[label="0.049505;5pkt 5fpkt"];
3590--8828[label="0.039604;4pkt 4fpkt"];
3590--8846[label="0.049505;5pkt 5fpkt"];
3590--9006[label="0.108911;11pkt 11fpkt"];
3590--9018[label="0.00990099;1pkt 1fpkt"];
3590--11037[label="0.111111;6pkt 6fpkt"];
3590--11939[label="0.00990099;1pkt 1fpkt"];
3590--12553[label="0.019802;2pkt 2fpkt"];
3590--12554[label="0.0792079;8pkt 8fpkt"];
3590--12777[label="0.019802;2pkt 2fpkt"];
3590--12875[label="0.108911;11pkt 11fpkt"];
3590--12882[label="0.00990099;1pkt 1fpkt"];
3590--14716[label="0.108911;11pkt 11fpkt"];
3590--14719[label="0.00990099;1pkt 1fpkt"];
4435--6581[label="0.137931;4pkt 4fpkt"];
4435--6921[label="0.0689655;2pkt 2fpkt"];
4435--9006[label="0.482759;14pkt 14fpkt"];
4435--10583[label="0.0344828;1pkt 1fpkt"];
4435--12875[label="0.482759;14pkt 14fpkt"];
4435--14716[label="0.482759;14pkt 14fpkt"];
4836--5991[label="0.5;4pkt 4fpkt"];
4836--6574[label="0.125;1pkt 1fpkt"];
5138--5991[label="1;1pkt 1fpkt"];
5138--11317[label="1;1pkt 1fpkt"];
5138--13971[label="1;1pkt 1fpkt"];
5138--15219[label="1;1pkt 1fpkt"];
5536--6921[label="0.235294;4pkt 4fpkt"];
5536--7316[label="0.764706;13pkt 13fpkt"];
5536--9006[label="0.235294;4pkt 4fpkt"];
5536--10621[label="0.764706;13pkt 13fpkt"];
5536--12875[label="0.235294;4pkt 4fpkt"];
5536--13639[label="0.764706;13pkt 13fpkt"];
5536--14716[label="0.235294;4pkt 4fpkt"];
5562--6921[label="0.116667;7pkt 7fpkt"];
5562--6971[label="0.0185185;1pkt 1fpkt"];
5562--7687[label="0.00757576;1pkt 1fpkt"];
5562--8252[label="0.0757576;10pkt 10fpkt"];
5562--8590[label="0.143939;19pkt 19fpkt"];
5562--8710[label="0.143939;19pkt 19fpkt"];
5562--8828[label="0.143939;19pkt 19fpkt"];
5562--9006[label="0.0654206;7pkt 7fpkt"];
5562--10091[label="0.116279;10pkt 10fpkt"];
5562--10709[label="0.0169492;1pkt 1fpkt"];
5562--11932[label="0.010101;1pkt 1fpkt"];
5562--12875[label="0.0654206;7pkt 7fpkt"];
5562--13397[label="0.116279;10pkt 10fpkt"];
5562--14264[label="0.010101;1pkt 1fpkt"];
5562--14716[label="0.0654206;7pkt 7fpkt"];
5991--6350[label="0.0104167;1pkt 1fpkt"];
5991--6494[label="0.0104167;1pkt 1fpkt"];
5991--6845[label="0.0208333;2pkt 2fpkt"];
5991--7297[label="0.0104167;1pkt 1fpkt"];
5991--7316[label="0.15625;15pkt 15fpkt"];
5991--7716[label="0.0142857;1pkt 1fpkt"];
5991--7739[label="0.03125;3pkt 3fpkt"];
5991--7784[label="0.0208333;2pkt 2fpkt"];
5991--8344[label="0.0208333;2pkt 2fpkt"];
5991--8470[label="0.03125;3pkt 3fpkt"];
5991--8574[label="0.0104167;1pkt 1fpkt"];
5991--8589[label="0.0104167;1pkt 1fpkt"];
5991--8590[label="0.28125;27pkt 27fpkt"];
5991--8610[label="0.0416667;4pkt 4fpkt"];
5991--8632[label="0.0104167;1pkt 1fpkt"];
5991--8633[label="0.0729167;7pkt 7fpkt"];
5991--8709[label="0.0104167;1pkt 1fpkt"];
5991--8710[label="0.28125;27pkt 27fpkt"];
5991--8730[label="0.0416667;4pkt 4fpkt"];
5991--8752[label="0.0104167;1pkt 1fpkt"];
5991--8753[label="0.0729167;7pkt 7fpkt"];
5991--8827[label="0.0104167;1pkt 1fpkt"];
5991--8828[label="0.28125;27pkt 27fpkt"];
5991--8846[label="0.0416667;4pkt 4fpkt"];
5991--8868[label="0.0104167;1pkt 1fpkt"];
5991--8869[label="0.0729167;7pkt 7fpkt"];
5991--8972[label="0.0769231;1pkt 1fpkt"];
5991--9013[label="0.03125;3pkt 3fpkt"];
5991--9137[label="0.0625;1pkt 1fpkt"];
5991--9158[label="0.333333;2pkt 2fpkt"];
5991--9431[label="0.0104167;1pkt 1fpkt"];
5991--9447[label="0.0104167;1pkt 1fpkt"];
5991--10621[label="0.15625;15pkt 15fpkt"];
5991--11317[label="1;1pkt 1fpkt"];
5991--11683[label="1;1pkt 1fpkt"];
5991--11707[label="0.0333333;1pkt 1fpkt"];
5991--12400[label="0.0285714;1pkt 1fpkt"];
5991--12877[label="0.03125;3pkt 3fpkt"];
5991--12939[label="0.0666667;1pkt 1fpkt"];
5991--12951[label="0.4;2pkt 2fpkt"];
5991--13092[label="0.0104167;1pkt 1fpkt"];
5991--13639[label="0.15625;15pkt 15fpkt"];
5991--13971[label="1;1pkt 1fpkt"];
5991--14498[label="0.0285714;1pkt 1fpkt"];
5991--14752[label="0.0625;1pkt 1fpkt"];
5991--14815[label="0.0104167;1pkt 1fpkt"];
5991--15219[label="1;1pkt 1fpkt"];
6921--7275[label="0.0666667;4pkt 4fpkt"];
6921--8033[label="0.183333;11pkt 11fpkt"];
6921--8394[label="0.0666667;4pkt 4fpkt"];
6921--8520[label="0.0166667;1pkt 1fpkt"];
6921--8590[label="0.133333;8pkt 8fpkt"];
6921--8610[label="0.183333;11pkt 11fpkt"];
6921--8710[label="0.133333;8pkt 8fpkt"];
6921--8730[label="0.183333;11pkt 11fpkt"];
6921--8828[label="0.133333;8pkt 8fpkt"];
6921--8846[label="0.183333;11pkt 11fpkt"];
6921--9006[label="1;60pkt 60fpkt"];
6921--12875[label="1;60pkt 60fpkt"];
6921--14716[label="1;60pkt 60fpkt"];
6956--9949[label="1;14pkt 14fpkt"];
6956--13327[label="1;14pkt 14fpkt"];
6956--14923[label="1;14pkt 14fpkt"];
7316--7329[label="0.00869565;1pkt 1fpkt"];
7316--7338[label="0.0462963;5pkt 5fpkt"];
7316--8590[label="0.026087;3pkt 3fpkt"];
7316--8610[label="0.0434783;5pkt 5fpkt"];
7316--8633[label="0.104348;12pkt 12fpkt"];
7316--8710[label="0.026087;3pkt 3fpkt"];
7316--8730[label="0.0434783;5pkt 5fpkt"];
7316--8753[label="0.104348;12pkt 12fpkt"];
7316--8828[label="0.026087;3pkt 3fpkt"];
7316--8846[label="0.0434783;5pkt 5fpkt"];
7316--8869[label="0.104348;12pkt 12fpkt"];
7316--10621[label="1;115pkt 115fpkt"];
7316--13639[label="1;115pkt 115fpkt"];
8033--8252[label="0.019802;2pkt 2fpkt"];
8033--8470[label="0.039604;4pkt 4fpkt"];
8033--8487[label="0.019802;2pkt 2fpkt"];
8033--8590[label="0.039604;4pkt 4fpkt"];
8033--8610[label="0.049505;5pkt 5fpkt"];
8033--8710[label="0.039604;4pkt 4fpkt"];
8033--8730[label="0.049505;5pkt 5fpkt"];
8033--8828[label="0.039604;4pkt 4fpkt"];
8033--8846[label="0.049505;5pkt 5fpkt"];
8033--9006[label="0.108911;11pkt 11fpkt"];
8033--9018[label="0.00990099;1pkt 1fpkt"];
8033--11037[label="0.111111;6pkt 6fpkt"];
8033--11939[label="0.00990099;1pkt 1fpkt"];
8033--12553[label="0.019802;2pkt 2fpkt"];
8033--12554[label="0.0792079;8pkt 8fpkt"];
8033--12777[label="0.019802;2pkt 2fpkt"];
8033--12875[label="0.108911;11pkt 11fpkt"];
8033--12882[label="0.00990099;1pkt 1fpkt"];
8033--14716[label="0.108911;11pkt 11fpkt"];
8033--14719[label="0.00990099;1pkt 1fpkt"];
9006--12875[label="1;107pkt 107fpkt"];
9006--14716[label="1;107pkt 107fpkt"];
9949--13327[label="1;14pkt 14fpkt"];
9949--14923[label="1;14pkt 14fpkt"];
10621--13639[label="1;130pkt 130fpkt"];
11111--13864[label="1;8pkt 8fpkt"];
11317--13971[label="1;1pkt 1fpkt"];
11317--15219[label="1;1pkt 1fpkt"];
12875--14716[label="1;107pkt 107fpkt"];
13327--14923[label="1;14pkt 14fpkt"];
13971--15219[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.8.165" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_911{
style=filled;
color=gray75;
11139[label="149.82.94.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13877[label="149.82.94.131;2pkt 2fpkt", shape=invtriangle, color=brown];
stat911[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.94.131:1295, 115.218.162.42:80}[50%]&lt;BR/&gt;{149.82.94.131:1296, 115.218.162.42:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1296: (25%)&lt;BR/&gt; 1295: (25%)&gt;];
}
11139--13877[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="115.218.162.42" dst_port="80" src_ip="149.82.94.131" src_port="1296"/>
      <filter dst_ip="115.218.162.42" dst_port="80" src_ip="149.82.94.131" src_port="1295"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_912{
style=filled;
color=gray75;
11151[label="167.209.237.131;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13886[label="167.209.237.131;9pkt 9fpkt", shape=invtriangle, color=brown];
15177[label="167.209.237.131;9pkt 9fpkt", shape=invhouse, color=bisque];
stat912[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.237.131:443, 77.42.66.217:*}[33.3333%]&lt;BR/&gt;{167.209.237.131:443, 74.118.152.20:*}[22.2222%]&lt;BR/&gt;{167.209.237.131:443, 192.25.19.78:*}[22.2222%]&lt;BR/&gt;{167.209.237.131:443, 74.115.171.157:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 52501: (5.55556%)&lt;BR/&gt; 52500: (5.55556%)&lt;BR/&gt; 3858: (5.55556%)&lt;BR/&gt; 3857: (5.55556%)&gt;];
}
11151--13886[label="1;9pkt 9fpkt"];
11151--15177[label="1;9pkt 9fpkt"];
13886--15177[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="77.42.66.217" src_ip="167.209.237.131" src_port="443"/>
      <filter dst_ip="74.115.171.157" src_ip="167.209.237.131" src_port="443"/>
      <filter dst_ip="192.25.19.78" src_ip="167.209.237.131" src_port="443"/>
      <filter dst_ip="74.118.152.20" src_ip="167.209.237.131" src_port="443"/>
    </slice>
    <from sec="1207285338" usec="0"/>
    <to sec="1207286082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_913{
style=filled;
color=gray75;
11153[label="149.82.6.132;43pkt 43fpkt", shape=pentagon, color=darkviolet];
13887[label="149.82.6.132;43pkt 43fpkt", shape=invtriangle, color=brown];
stat913[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.6.132:*, 36.7.63.181:80}[88.3721%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49191: (2.32558%)&lt;BR/&gt; 49189: (2.32558%)&lt;BR/&gt; 49187: (2.32558%)&lt;BR/&gt; 49181: (2.32558%)&gt;];
}
11153--13887[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="36.7.63.181" dst_port="80" src_ip="149.82.6.132"/>
    </slice>
    <from sec="1207285248" usec="0"/>
    <to sec="1207285692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.69.161.132"/>
    </slice>
    <from sec="1207285222" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.67.186.133"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.11.29.134"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.213.82.134"/>
    </slice>
    <from sec="1207285701" usec="0"/>
    <to sec="1207285710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.165.105.134"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_920{
style=filled;
color=gray75;
1694[label="167.209.108.196;d;120pkt 120fpkt", shape=diamond, color=yellow];
6002[label="167.209.108.196;d;60pkt 60fpkt", shape=hexagon, color=black];
11208[label="75.146.229.134;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11252[label="75.196.117.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13914[label="75.146.229.134;2pkt 2fpkt", shape=invtriangle, color=brown];
stat920[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 167.209.108.196:13328}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13328: (46.2162%)&lt;BR/&gt; 45306: (2.43243%)&lt;BR/&gt; 12965: (2.16216%)&lt;BR/&gt; 13233: (1.08108%)&lt;BR/&gt; 13066: (1.08108%)&gt;];
}
1694--2907[label="0.0166667;2pkt 2fpkt"];
1694--6002[label="1;60pkt 60fpkt"];
1694--11208[label="1;2pkt 2fpkt"];
1694--11252[label="1;1pkt 1fpkt"];
1694--13914[label="1;2pkt 2fpkt"];
11208--13914[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.108.196" dst_port="13328"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.51.175.135"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.187.112.136"/>
    </slice>
    <from sec="1207286039" usec="0"/>
    <to sec="1207286056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.203.132.136"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.185.33.139"/>
    </slice>
    <from sec="1207285526" usec="0"/>
    <to sec="1207285690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_927{
style=filled;
color=gray75;
11321[label="160.86.174.141;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13974[label="160.86.174.141;13pkt 13fpkt", shape=invtriangle, color=brown];
15221[label="160.86.174.141;13pkt 13fpkt", shape=invhouse, color=bisque];
stat927[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.86.174.141:*, 15.149.130.149:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1471: (3.84615%)&lt;BR/&gt; 1470: (3.84615%)&lt;BR/&gt; 1469: (3.84615%)&lt;BR/&gt; 1468: (3.84615%)&gt;];
}
11321--13974[label="1;13pkt 13fpkt"];
11321--15221[label="1;13pkt 13fpkt"];
13974--15221[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="15.149.130.149" dst_port="80" src_ip="160.86.174.141"/>
    </slice>
    <from sec="1207285646" usec="0"/>
    <to sec="1207285648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.232.195.141"/>
    </slice>
    <from sec="1207285460" usec="0"/>
    <to sec="1207285513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_929{
style=filled;
color=gray75;
11329[label="206.81.41.142;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13979[label="206.81.41.142;9pkt 9fpkt", shape=invtriangle, color=brown];
stat929[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.81.41.142:*, 213.51.29.65:80}[55.5556%]&lt;BR/&gt;{206.81.41.142:*, 213.51.26.67:80}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 33640: (5.55556%)&lt;BR/&gt; 33612: (5.55556%)&lt;BR/&gt; 33386: (5.55556%)&lt;BR/&gt; 33358: (5.55556%)&gt;];
}
11329--13979[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="213.51.29.65" dst_port="80" src_ip="206.81.41.142"/>
      <filter dst_ip="213.51.26.67" dst_port="80" src_ip="206.81.41.142"/>
    </slice>
    <from sec="1207285229" usec="0"/>
    <to sec="1207285713" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.108.145.142"/>
    </slice>
    <from sec="1207285512" usec="0"/>
    <to sec="1207285521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_931{
style=filled;
color=gray75;
11369[label="213.61.121.144;116pkt 116fpkt", shape=pentagon, color=darkviolet];
13996[label="213.61.121.144;116pkt 116fpkt", shape=invtriangle, color=brown];
stat931[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.61.121.144:4926, *:53}[89.6552%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4926: (44.8276%)&lt;BR/&gt; 53: (44.8276%)&lt;BR/&gt; 0: (9.48276%)&lt;BR/&gt; 60127: (0.431034%)&lt;BR/&gt; 80: (0.431034%)&gt;];
}
11369--13996[label="1;116pkt 116fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="213.61.121.144" src_port="4926"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_932{
style=filled;
color=gray75;
11373[label="206.111.209.144;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13999[label="206.111.209.144;8pkt 8fpkt", shape=invtriangle, color=brown];
15229[label="206.111.209.144;8pkt 8fpkt", shape=invhouse, color=bisque];
stat932[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.111.209.144:443, 167.209.84.176:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3035: (6.25%)&lt;BR/&gt; 3033: (6.25%)&lt;BR/&gt; 3031: (6.25%)&lt;BR/&gt; 3027: (6.25%)&gt;];
}
11373--13999[label="1;8pkt 8fpkt"];
11373--15229[label="1;8pkt 8fpkt"];
13999--15229[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.84.176" src_ip="206.111.209.144" src_port="443"/>
    </slice>
    <from sec="1207285452" usec="0"/>
    <to sec="1207285494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.160.44.145"/>
    </slice>
    <from sec="1207285218" usec="0"/>
    <to sec="1207285641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_934{
style=filled;
color=gray75;
1248[label="167.209.208.5;d;975pkt 975fpkt", shape=diamond, color=yellow];
1508[label="210.250.162.56;s;3pkt 3fpkt", shape=diamond, color=yellow];
2115[label="8.194.107.32;s;110pkt 110fpkt", shape=diamond, color=yellow];
2640[label="213.45.138.156;s;50pkt 50fpkt", shape=diamond, color=yellow];
2740[label="9.8.177.231;s;89pkt 89fpkt", shape=diamond, color=yellow];
3286[label="9.8.177.202;s;21pkt 21fpkt", shape=diamond, color=yellow];
3836[label="212.205.238.23;d;50pkt 50fpkt", shape=diamond, color=yellow];
5214[label="8.196.114.174;s;7pkt 7fpkt", shape=diamond, color=yellow];
5499[label="167.209.208.5;d;788pkt 788fpkt", shape=hexagon, color=black];
5568[label="210.250.162.56;s;2pkt 2fpkt", shape=hexagon, color=black];
6564[label="213.45.138.156;s;50pkt 50fpkt", shape=hexagon, color=black];
7365[label="9.8.177.231;s;89pkt 89fpkt", shape=hexagon, color=black];
9509[label="8.194.107.32;344pkt 344fpkt", shape=pentagon, color=darkviolet];
9888[label="210.250.162.56;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11164[label="102.78.162.132;77pkt 77fpkt", shape=pentagon, color=darkviolet];
11337[label="198.57.178.142;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11525[label="213.45.138.156;55pkt 55fpkt", shape=pentagon, color=darkviolet];
12172[label="9.8.177.202;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12578[label="9.8.177.231;92pkt 92fpkt", shape=pentagon, color=darkviolet];
13294[label="210.250.162.56;4pkt 4fpkt", shape=invtriangle, color=brown];
13894[label="102.78.162.132;77pkt 77fpkt", shape=invtriangle, color=brown];
14830[label="8.194.107.32;344pkt 344fpkt", shape=invhouse, color=bisque];
stat934[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.194.107.32:80, 167.209.208.5:*}[30.3965%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9613%)&lt;BR/&gt; 110: (2.67199%)&lt;BR/&gt; 29290: (0.614251%)&lt;BR/&gt; 0: (0.276413%)&lt;BR/&gt; 995: (0.230344%)&gt;];
}
1248--1314[label="0.160454;99pkt 99fpkt"];
1248--1508[label="1;3pkt 3fpkt"];
1248--1661[label="0.0243446;13pkt 13fpkt"];
1248--1717[label="0.00465116;1pkt 1fpkt"];
1248--1879[label="0.0175439;2pkt 2fpkt"];
1248--1888[label="0.0123457;10pkt 10fpkt"];
1248--1950[label="0.00877193;4pkt 4fpkt"];
1248--2032[label="0.00925926;2pkt 2fpkt"];
1248--2115[label="1;110pkt 110fpkt"];
1248--2324[label="0.0125;2pkt 2fpkt"];
1248--2509[label="0.0060241;1pkt 1fpkt"];
1248--2543[label="0.0361446;12pkt 12fpkt"];
1248--2546[label="0.00347222;1pkt 1fpkt"];
1248--2632[label="0.0217391;1pkt 1fpkt"];
1248--2640[label="0.28;14pkt 14fpkt"];
1248--2740[label="1;89pkt 89fpkt"];
1248--2907[label="0.00102564;1pkt 1fpkt"];
1248--3035[label="0.00431034;1pkt 1fpkt"];
1248--3153[label="0.131579;5pkt 5fpkt"];
1248--3156[label="0.0833333;3pkt 3fpkt"];
1248--3286[label="1;21pkt 21fpkt"];
1248--3371[label="0.0101523;2pkt 2fpkt"];
1248--3397[label="0.0333333;2pkt 2fpkt"];
1248--3551[label="0.012987;2pkt 2fpkt"];
1248--3582[label="0.018018;2pkt 2fpkt"];
1248--3583[label="0.0220588;3pkt 3fpkt"];
1248--3921[label="0.0547945;4pkt 4fpkt"];
1248--4017[label="0.0193548;3pkt 3fpkt"];
1248--4361[label="0.0263158;1pkt 1fpkt"];
1248--4596[label="0.0434783;1pkt 1fpkt"];
1248--4742[label="0.0185185;1pkt 1fpkt"];
1248--5214[label="1;7pkt 7fpkt"];
1248--5499[label="1;788pkt 788fpkt"];
1248--5568[label="1;2pkt 2fpkt"];
1248--5609[label="0.0136986;7pkt 7fpkt"];
1248--5679[label="0.00465116;1pkt 1fpkt"];
1248--5982[label="0.0145773;5pkt 5fpkt"];
1248--6158[label="0.0142857;2pkt 2fpkt"];
1248--6467[label="0.28169;60pkt 60fpkt"];
1248--6472[label="0.00412088;3pkt 3fpkt"];
1248--6482[label="0.0236967;10pkt 10fpkt"];
1248--6500[label="0.0135135;1pkt 1fpkt"];
1248--6560[label="0.0322581;1pkt 1fpkt"];
1248--6564[label="0.28;14pkt 14fpkt"];
1248--6907[label="0.0266667;2pkt 2fpkt"];
1248--7266[label="0.0655738;4pkt 4fpkt"];
1248--7274[label="0.00615385;2pkt 2fpkt"];
1248--7332[label="0.03;3pkt 3fpkt"];
1248--7339[label="0.0833333;3pkt 3fpkt"];
1248--7365[label="1;89pkt 89fpkt"];
1248--7496[label="0.014;7pkt 7fpkt"];
1248--7517[label="0.019802;2pkt 2fpkt"];
1248--7554[label="0.00347222;1pkt 1fpkt"];
1248--7581[label="0.0263158;1pkt 1fpkt"];
1248--7687[label="0.011236;2pkt 2fpkt"];
1248--7768[label="0.025641;8pkt 8fpkt"];
1248--7897[label="0.0243446;13pkt 13fpkt"];
1248--8036[label="0.0193548;3pkt 3fpkt"];
1248--8255[label="0.00465116;1pkt 1fpkt"];
1248--8590[label="0.118974;116pkt 116fpkt"];
1248--8610[label="0.111795;109pkt 109fpkt"];
1248--8633[label="0.0851282;83pkt 83fpkt"];
1248--8710[label="0.118974;116pkt 116fpkt"];
1248--8730[label="0.111795;109pkt 109fpkt"];
1248--8753[label="0.0851282;83pkt 83fpkt"];
1248--8828[label="0.118974;116pkt 116fpkt"];
1248--8846[label="0.111795;109pkt 109fpkt"];
1248--8869[label="0.0851282;83pkt 83fpkt"];
1248--9003[label="0.135135;5pkt 5fpkt"];
1248--9116[label="0.0506329;4pkt 4fpkt"];
1248--9279[label="0.157895;3pkt 3fpkt"];
1248--9283[label="0.00809717;2pkt 2fpkt"];
1248--9509[label="0.950581;327pkt 327fpkt"];
1248--9888[label="1;4pkt 4fpkt"];
1248--10660[label="0.0108303;3pkt 3fpkt"];
1248--10727[label="0.04;2pkt 2fpkt"];
1248--11164[label="0.298701;23pkt 23fpkt"];
1248--11337[label="1;4pkt 4fpkt"];
1248--11525[label="0.254545;14pkt 14fpkt"];
1248--11569[label="0.09375;3pkt 3fpkt"];
1248--11662[label="0.0118343;2pkt 2fpkt"];
1248--11664[label="0.037037;3pkt 3fpkt"];
1248--11761[label="0.0222222;2pkt 2fpkt"];
1248--11769[label="0.0342857;12pkt 12fpkt"];
1248--11939[label="0.0132075;7pkt 7fpkt"];
1248--11969[label="0.0176471;3pkt 3fpkt"];
1248--12099[label="0.0263158;1pkt 1fpkt"];
1248--12152[label="0.0117647;2pkt 2fpkt"];
1248--12172[label="1;21pkt 21fpkt"];
1248--12578[label="1;92pkt 92fpkt"];
1248--13005[label="0.15;3pkt 3fpkt"];
1248--13008[label="0.00806452;2pkt 2fpkt"];
1248--13294[label="1;4pkt 4fpkt"];
1248--13661[label="0.0108303;3pkt 3fpkt"];
1248--13894[label="0.298701;23pkt 23fpkt"];
1248--13950[label="0.015748;2pkt 2fpkt"];
1248--14100[label="0.09375;3pkt 3fpkt"];
1248--14145[label="0.0118343;2pkt 2fpkt"];
1248--14193[label="0.0342857;12pkt 12fpkt"];
1248--14830[label="0.950581;327pkt 327fpkt"];
1248--15079[label="0.0108303;3pkt 3fpkt"];
1508--5499[label="1;3pkt 3fpkt"];
1508--5568[label="1;2pkt 2fpkt"];
1508--8590[label="0.333333;1pkt 1fpkt"];
1508--8710[label="0.333333;1pkt 1fpkt"];
1508--8828[label="0.333333;1pkt 1fpkt"];
1508--9888[label="1;3pkt 3fpkt"];
1508--13294[label="1;3pkt 3fpkt"];
2115--9509[label="1;110pkt 110fpkt"];
2115--14830[label="1;110pkt 110fpkt"];
2640--3439[label="0.04;2pkt 2fpkt"];
2640--3836[label="0.04;2pkt 2fpkt"];
2640--5271[label="0.2;10pkt 10fpkt"];
2640--5499[label="0.22;11pkt 11fpkt"];
2640--6564[label="1;50pkt 50fpkt"];
2640--7216[label="0.0444444;2pkt 2fpkt"];
2640--8220[label="0.06;3pkt 3fpkt"];
2640--11525[label="1;50pkt 50fpkt"];
2740--5499[label="1;89pkt 89fpkt"];
2740--7365[label="1;89pkt 89fpkt"];
2740--8590[label="0.235955;21pkt 21fpkt"];
2740--8610[label="0.247191;22pkt 22fpkt"];
2740--8710[label="0.235955;21pkt 21fpkt"];
2740--8730[label="0.247191;22pkt 22fpkt"];
2740--8828[label="0.235955;21pkt 21fpkt"];
2740--8846[label="0.247191;22pkt 22fpkt"];
2740--12578[label="1;89pkt 89fpkt"];
3286--5499[label="1;21pkt 21fpkt"];
3286--12172[label="1;21pkt 21fpkt"];
3836--5272[label="0.02;1pkt 1fpkt"];
3836--6564[label="0.04;2pkt 2fpkt"];
3836--7133[label="0.02;1pkt 1fpkt"];
3836--11525[label="0.04;2pkt 2fpkt"];
3836--12513[label="0.02;1pkt 1fpkt"];
3836--15483[label="0.02;1pkt 1fpkt"];
5499--5568[label="1;2pkt 2fpkt"];
5499--5609[label="0.0117417;6pkt 6fpkt"];
5499--5982[label="0.0145773;5pkt 5fpkt"];
5499--6158[label="0.0142857;2pkt 2fpkt"];
5499--6467[label="0.28169;60pkt 60fpkt"];
5499--6482[label="0.0236967;10pkt 10fpkt"];
5499--6500[label="0.0135135;1pkt 1fpkt"];
5499--6560[label="0.0322581;1pkt 1fpkt"];
5499--6564[label="0.22;11pkt 11fpkt"];
5499--6907[label="0.0266667;2pkt 2fpkt"];
5499--7266[label="0.0655738;4pkt 4fpkt"];
5499--7274[label="0.00615385;2pkt 2fpkt"];
5499--7332[label="0.03;3pkt 3fpkt"];
5499--7339[label="0.0555556;2pkt 2fpkt"];
5499--7365[label="1;89pkt 89fpkt"];
5499--7496[label="0.014;7pkt 7fpkt"];
5499--7554[label="0.00347222;1pkt 1fpkt"];
5499--7581[label="0.0263158;1pkt 1fpkt"];
5499--7687[label="0.011236;2pkt 2fpkt"];
5499--7768[label="0.0128205;4pkt 4fpkt"];
5499--7897[label="0.0243446;13pkt 13fpkt"];
5499--8590[label="0.147208;116pkt 116fpkt"];
5499--8610[label="0.138325;109pkt 109fpkt"];
5499--8633[label="0.10533;83pkt 83fpkt"];
5499--8710[label="0.147208;116pkt 116fpkt"];
5499--8730[label="0.138325;109pkt 109fpkt"];
5499--8753[label="0.10533;83pkt 83fpkt"];
5499--8828[label="0.147208;116pkt 116fpkt"];
5499--8846[label="0.138325;109pkt 109fpkt"];
5499--8869[label="0.10533;83pkt 83fpkt"];
5499--9003[label="0.0540541;2pkt 2fpkt"];
5499--9116[label="0.0506329;4pkt 4fpkt"];
5499--9279[label="0.157895;3pkt 3fpkt"];
5499--9283[label="0.00809717;2pkt 2fpkt"];
5499--9509[label="0.630814;217pkt 217fpkt"];
5499--9888[label="1;4pkt 4fpkt"];
5499--10660[label="0.0108303;3pkt 3fpkt"];
5499--10727[label="0.04;2pkt 2fpkt"];
5499--11164[label="0.246753;19pkt 19fpkt"];
5499--11337[label="1;4pkt 4fpkt"];
5499--11525[label="0.2;11pkt 11fpkt"];
5499--11569[label="0.09375;3pkt 3fpkt"];
5499--11662[label="0.0118343;2pkt 2fpkt"];
5499--11664[label="0.0123457;1pkt 1fpkt"];
5499--11761[label="0.0222222;2pkt 2fpkt"];
5499--11769[label="0.0114286;4pkt 4fpkt"];
5499--11939[label="0.0113208;6pkt 6fpkt"];
5499--12099[label="0.0263158;1pkt 1fpkt"];
5499--12172[label="1;21pkt 21fpkt"];
5499--12578[label="0.967391;89pkt 89fpkt"];
5499--13005[label="0.15;3pkt 3fpkt"];
5499--13008[label="0.00806452;2pkt 2fpkt"];
5499--13294[label="1;4pkt 4fpkt"];
5499--13661[label="0.0108303;3pkt 3fpkt"];
5499--13894[label="0.246753;19pkt 19fpkt"];
5499--14100[label="0.09375;3pkt 3fpkt"];
5499--14145[label="0.0118343;2pkt 2fpkt"];
5499--14193[label="0.0114286;4pkt 4fpkt"];
5499--14830[label="0.630814;217pkt 217fpkt"];
5499--15079[label="0.0108303;3pkt 3fpkt"];
5568--9888[label="1;2pkt 2fpkt"];
5568--13294[label="1;2pkt 2fpkt"];
6564--7216[label="0.0444444;2pkt 2fpkt"];
6564--8220[label="0.06;3pkt 3fpkt"];
6564--11525[label="1;50pkt 50fpkt"];
7365--8590[label="0.235955;21pkt 21fpkt"];
7365--8610[label="0.247191;22pkt 22fpkt"];
7365--8710[label="0.235955;21pkt 21fpkt"];
7365--8730[label="0.247191;22pkt 22fpkt"];
7365--8828[label="0.235955;21pkt 21fpkt"];
7365--8846[label="0.247191;22pkt 22fpkt"];
7365--12578[label="1;89pkt 89fpkt"];
9509--14830[label="1;344pkt 344fpkt"];
9888--13294[label="1;4pkt 4fpkt"];
11164--13894[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.208.5" src_ip="8.194.107.32" src_port="80"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286093" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_935{
style=filled;
color=gray75;
11384[label="118.66.148.145;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14005[label="118.66.148.145;8pkt 8fpkt", shape=invtriangle, color=brown];
stat935[shape=component, label=&lt;Rules:&lt;BR/&gt;{118.66.148.145:443, 213.61.121.139:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 61006: (6.25%)&lt;BR/&gt; 60958: (6.25%)&lt;BR/&gt; 60915: (6.25%)&lt;BR/&gt; 60912: (6.25%)&gt;];
}
11384--14005[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.61.121.139" src_ip="118.66.148.145" src_port="443"/>
    </slice>
    <from sec="1207286043" usec="0"/>
    <to sec="1207286057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_936{
style=filled;
color=gray75;
11426[label="221.100.93.148;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14019[label="221.100.93.148;3pkt 3fpkt", shape=invtriangle, color=brown];
15240[label="221.100.93.148;3pkt 3fpkt", shape=invhouse, color=bisque];
stat936[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.100.93.148:80, 167.209.124.221:1809}[33.3333%]&lt;BR/&gt;{221.100.93.148:80, 167.209.124.221:1810}[33.3333%]&lt;BR/&gt;{221.100.93.148:80, 167.209.124.221:1814}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1814: (16.6667%)&lt;BR/&gt; 1810: (16.6667%)&lt;BR/&gt; 1809: (16.6667%)&gt;];
}
11426--14019[label="1;3pkt 3fpkt"];
11426--15240[label="1;3pkt 3fpkt"];
14019--15240[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.124.221" dst_port="1814" src_ip="221.100.93.148" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="1810" src_ip="221.100.93.148" src_port="80"/>
      <filter dst_ip="167.209.124.221" dst_port="1809" src_ip="221.100.93.148" src_port="80"/>
    </slice>
    <from sec="1207286028" usec="0"/>
    <to sec="1207286057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.200.36.149"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207285897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.131.60.149"/>
    </slice>
    <from sec="1207285873" usec="0"/>
    <to sec="1207285903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_939{
style=filled;
color=gray75;
11447[label="192.37.100.150;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14031[label="192.37.100.150;3pkt 3fpkt", shape=invtriangle, color=brown];
stat939[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.37.100.150:80, 160.130.54.113:3111}[33.3333%]&lt;BR/&gt;{192.37.100.150:80, 160.130.54.113:3125}[33.3333%]&lt;BR/&gt;{192.37.100.150:80, 160.130.54.113:3184}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3184: (16.6667%)&lt;BR/&gt; 3125: (16.6667%)&lt;BR/&gt; 3111: (16.6667%)&gt;];
}
11447--14031[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="160.130.54.113" dst_port="3184" src_ip="192.37.100.150" src_port="80"/>
      <filter dst_ip="160.130.54.113" dst_port="3125" src_ip="192.37.100.150" src_port="80"/>
      <filter dst_ip="160.130.54.113" dst_port="3111" src_ip="192.37.100.150" src_port="80"/>
    </slice>
    <from sec="1207285502" usec="0"/>
    <to sec="1207285570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_940{
style=filled;
color=gray75;
11473[label="217.201.83.152;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14043[label="217.201.83.152;1pkt 1fpkt", shape=invtriangle, color=brown];
15256[label="217.201.83.152;1pkt 1fpkt", shape=invhouse, color=bisque];
stat940[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.201.83.152:4474, 212.205.238.12:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4474: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11473--14043[label="1;1pkt 1fpkt"];
11473--15256[label="1;1pkt 1fpkt"];
14043--15256[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.205.238.12" dst_port="80" src_ip="217.201.83.152" src_port="4474"/>
    </slice>
    <from sec="1207286084" usec="0"/>
    <to sec="1207286092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_941{
style=filled;
color=gray75;
11475[label="104.96.162.152;91pkt 91fpkt", shape=pentagon, color=darkviolet];
14045[label="104.96.162.152;91pkt 91fpkt", shape=invtriangle, color=brown];
stat941[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.96.162.152:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 45811: (0.549451%)&lt;BR/&gt; 45756: (0.549451%)&lt;BR/&gt; 45681: (0.549451%)&lt;BR/&gt; 45629: (0.549451%)&gt;];
}
11475--14045[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="104.96.162.152"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.220.100.153"/>
    </slice>
    <from sec="1207285252" usec="0"/>
    <to sec="1207285264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.138.78.154"/>
    </slice>
    <from sec="1207285705" usec="0"/>
    <to sec="1207285714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.43.158.155"/>
    </slice>
    <from sec="1207285539" usec="0"/>
    <to sec="1207285559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.224.221.155"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
11517[label="78.122.245.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14068[label="78.122.245.155;1pkt 1fpkt", shape=invtriangle, color=brown];
15268[label="78.122.245.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.122.245.155:80, 149.82.92.5:1504}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1504: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11517--14068[label="1;1pkt 1fpkt"];
11517--15268[label="1;1pkt 1fpkt"];
14068--15268[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.92.5" dst_port="1504" src_ip="78.122.245.155" src_port="80"/>
    </slice>
    <from sec="1207286029" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.209.115.156"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.35.12.157"/>
    </slice>
    <from sec="1207285230" usec="0"/>
    <to sec="1207286002" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.54.197.157"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285254" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.27.158"/>
    </slice>
    <from sec="1207285737" usec="0"/>
    <to sec="1207285854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.207.8.159"/>
    </slice>
    <from sec="1207285227" usec="0"/>
    <to sec="1207285258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.981034,1.93902,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_952{
style=filled;
color=gray75;
4697[label="160.86.213.87;d;16pkt 16fpkt", shape=diamond, color=yellow];
5140[label="212.79.197.46;s;3pkt 3fpkt", shape=diamond, color=yellow];
8143[label="212.79.197.46;s;3pkt 3fpkt", shape=hexagon, color=black];
11585[label="198.38.70.161;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14110[label="198.38.70.161;1pkt 1fpkt", shape=invtriangle, color=brown];
stat952[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.215.81.13:80, 160.86.213.87:*}[37.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 60207: (6.25%)&lt;BR/&gt; 60206: (6.25%)&lt;BR/&gt; 60205: (6.25%)&lt;BR/&gt; 59541: (6.25%)&gt;];
}
4697--5140[label="1;3pkt 3fpkt"];
4697--5334[label="0.0625;1pkt 1fpkt"];
4697--6482[label="0.0625;1pkt 1fpkt"];
4697--8143[label="1;3pkt 3fpkt"];
4697--8470[label="0.0625;1pkt 1fpkt"];
4697--11585[label="1;1pkt 1fpkt"];
4697--12152[label="0.0625;1pkt 1fpkt"];
4697--14110[label="1;1pkt 1fpkt"];
5140--8143[label="1;3pkt 3fpkt"];
11585--14110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.213.87" src_ip="99.215.81.13" src_port="80"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_953{
style=filled;
color=gray75;
11619[label="196.12.65.163;142pkt 142fpkt", shape=pentagon, color=darkviolet];
14124[label="196.12.65.163;142pkt 142fpkt", shape=invtriangle, color=brown];
15288[label="196.12.65.163;142pkt 142fpkt", shape=invhouse, color=bisque];
stat953[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.12.65.163:80, 167.209.192.122:*}[95.0704%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51387: (0.352113%)&lt;BR/&gt; 51377: (0.352113%)&lt;BR/&gt; 51369: (0.352113%)&lt;BR/&gt; 1794: (0.352113%)&gt;];
}
11619--14124[label="1;142pkt 142fpkt"];
11619--15288[label="1;142pkt 142fpkt"];
14124--15288[label="1;142pkt 142fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.192.122" src_ip="196.12.65.163" src_port="80"/>
    </slice>
    <from sec="1207285326" usec="0"/>
    <to sec="1207286091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15246,1.90359,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
3162[label="149.82.45.54;d;71pkt 71fpkt", shape=diamond, color=yellow];
4500[label="193.84.16.171;s;3pkt 3fpkt", shape=diamond, color=yellow];
4864[label="206.1.184.165;s;2pkt 2fpkt", shape=diamond, color=yellow];
8134[label="206.1.184.165;s;2pkt 2fpkt", shape=hexagon, color=black];
11620[label="210.81.91.163;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11660[label="206.1.184.165;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11735[label="193.84.16.171;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12615[label="101.0.24.235;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14125[label="210.81.91.163;1pkt 1fpkt", shape=invtriangle, color=brown];
14144[label="206.1.184.165;2pkt 2fpkt", shape=invtriangle, color=brown];
14175[label="193.84.16.171;3pkt 3fpkt", shape=invtriangle, color=brown];
15289[label="210.81.91.163;1pkt 1fpkt", shape=invhouse, color=bisque];
15291[label="206.1.184.165;2pkt 2fpkt", shape=invhouse, color=bisque];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 149.82.45.54:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46005: (3.19149%)&lt;BR/&gt; 45987: (3.19149%)&lt;BR/&gt; 46000: (2.12766%)&lt;BR/&gt; 45982: (2.12766%)&gt;];
}
3162--3468[label="0.0441176;3pkt 3fpkt"];
3162--4429[label="0.125;2pkt 2fpkt"];
3162--4500[label="1;3pkt 3fpkt"];
3162--4864[label="1;2pkt 2fpkt"];
3162--7747[label="0.0441176;3pkt 3fpkt"];
3162--7901[label="0.0140845;1pkt 1fpkt"];
3162--8134[label="1;2pkt 2fpkt"];
3162--8610[label="0.0422535;3pkt 3fpkt"];
3162--8633[label="0.126761;9pkt 9fpkt"];
3162--8730[label="0.0422535;3pkt 3fpkt"];
3162--8753[label="0.126761;9pkt 9fpkt"];
3162--8846[label="0.0422535;3pkt 3fpkt"];
3162--8869[label="0.126761;9pkt 9fpkt"];
3162--8990[label="0.0769231;1pkt 1fpkt"];
3162--9132[label="0.0666667;1pkt 1fpkt"];
3162--9450[label="0.0140845;1pkt 1fpkt"];
3162--11450[label="0.181818;2pkt 2fpkt"];
3162--11620[label="1;1pkt 1fpkt"];
3162--11660[label="1;2pkt 2fpkt"];
3162--11735[label="1;3pkt 3fpkt"];
3162--12181[label="0.162162;6pkt 6fpkt"];
3162--12615[label="1;1pkt 1fpkt"];
3162--13094[label="0.0140845;1pkt 1fpkt"];
3162--14033[label="0.181818;2pkt 2fpkt"];
3162--14125[label="1;1pkt 1fpkt"];
3162--14144[label="1;2pkt 2fpkt"];
3162--14175[label="1;3pkt 3fpkt"];
3162--14383[label="0.162162;6pkt 6fpkt"];
3162--14816[label="0.0140845;1pkt 1fpkt"];
3162--15249[label="0.181818;2pkt 2fpkt"];
3162--15289[label="1;1pkt 1fpkt"];
3162--15291[label="1;2pkt 2fpkt"];
4500--8633[label="0.333333;1pkt 1fpkt"];
4500--8753[label="0.333333;1pkt 1fpkt"];
4500--8869[label="0.333333;1pkt 1fpkt"];
4500--11735[label="1;3pkt 3fpkt"];
4500--14175[label="1;3pkt 3fpkt"];
4864--8134[label="1;2pkt 2fpkt"];
4864--11660[label="1;2pkt 2fpkt"];
4864--14144[label="1;2pkt 2fpkt"];
4864--15291[label="1;2pkt 2fpkt"];
8134--11660[label="1;2pkt 2fpkt"];
8134--14144[label="1;2pkt 2fpkt"];
8134--15291[label="1;2pkt 2fpkt"];
11620--14125[label="1;1pkt 1fpkt"];
11620--15289[label="1;1pkt 1fpkt"];
11660--14144[label="1;2pkt 2fpkt"];
11660--15291[label="1;2pkt 2fpkt"];
11735--14175[label="1;3pkt 3fpkt"];
14125--15289[label="1;1pkt 1fpkt"];
14144--15291[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="149.82.45.54" src_port="80"/>
    </slice>
    <from sec="1207285249" usec="0"/>
    <to sec="1207285934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_955{
style=filled;
color=gray75;
11625[label="212.127.130.163;31pkt 31fpkt", shape=pentagon, color=darkviolet];
14128[label="212.127.130.163;31pkt 31fpkt", shape=invtriangle, color=brown];
stat955[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.127.130.163:80, 167.209.172.60:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60912: (1.6129%)&lt;BR/&gt; 60911: (1.6129%)&lt;BR/&gt; 60910: (1.6129%)&lt;BR/&gt; 60909: (1.6129%)&gt;];
}
11625--14128[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.172.60" src_ip="212.127.130.163" src_port="80"/>
    </slice>
    <from sec="1207285977" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.32.192.163"/>
    </slice>
    <from sec="1207285498" usec="0"/>
    <to sec="1207285510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.216.0.164"/>
    </slice>
    <from sec="1207285515" usec="0"/>
    <to sec="1207285524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.188.87.164"/>
    </slice>
    <from sec="1207285710" usec="0"/>
    <to sec="1207285817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798992,2.04819,011,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_959{
style=filled;
color=gray75;
3353[label="197.197.148.164;s;1038pkt 1038fpkt", shape=diamond, color=yellow];
14140[label="197.197.148.164;1145pkt 1145fpkt", shape=invtriangle, color=brown];
stat959[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.197.148.164:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49309: (0.137426%)&lt;BR/&gt; 24332: (0.114521%)&lt;BR/&gt; 63774: (0.091617%)&lt;BR/&gt; 62813: (0.091617%)&lt;BR/&gt; 58645: (0.091617%)&gt;];
}
3353--14140[label="0.993256;1031pkt 1031fpkt"];
</description>
    <slice>
      <filter src_ip="197.197.148.164"/>
    </slice>
    <from sec="1207285200" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.147.8.167"/>
    </slice>
    <from sec="1207285224" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.54.211.167"/>
    </slice>
    <from sec="1207285574" usec="0"/>
    <to sec="1207285599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.86.84.168"/>
    </slice>
    <from sec="1207285710" usec="0"/>
    <to sec="1207285711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.15.230.168"/>
    </slice>
    <from sec="1207285637" usec="0"/>
    <to sec="1207285657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.131.161.170"/>
    </slice>
    <from sec="1207285627" usec="0"/>
    <to sec="1207285635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_965{
style=filled;
color=gray75;
11763[label="74.12.15.173;247pkt 247fpkt", shape=pentagon, color=darkviolet];
14190[label="74.12.15.173;247pkt 247fpkt", shape=invtriangle, color=brown];
15312[label="74.12.15.173;247pkt 247fpkt", shape=invhouse, color=bisque];
stat965[shape=component, label=&lt;Rules:&lt;BR/&gt;{74.12.15.173:*, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (50%)&lt;BR/&gt; 35224: (0.202429%)&lt;BR/&gt; 35169: (0.202429%)&lt;BR/&gt; 35155: (0.202429%)&lt;BR/&gt; 35123: (0.202429%)&gt;];
}
11763--14190[label="1;247pkt 247fpkt"];
11763--15312[label="1;247pkt 247fpkt"];
14190--15312[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="74.12.15.173"/>
    </slice>
    <from sec="1207285627" usec="0"/>
    <to sec="1207285641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.137.131.173"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.179.72.175"/>
    </slice>
    <from sec="1207285555" usec="0"/>
    <to sec="1207285569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.148.153.175"/>
    </slice>
    <from sec="1207286101" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.201.172.175"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.97.144.176"/>
    </slice>
    <from sec="1207285238" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.165.218.177"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_972{
style=filled;
color=gray75;
11858[label="15.148.197.178;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14230[label="15.148.197.178;2pkt 2fpkt", shape=invtriangle, color=brown];
15331[label="15.148.197.178;2pkt 2fpkt", shape=invhouse, color=bisque];
stat972[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.148.197.178:32867, 160.86.89.211:80}[50%]&lt;BR/&gt;{15.148.197.178:32868, 160.86.89.211:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32868: (25%)&lt;BR/&gt; 32867: (25%)&gt;];
}
11858--14230[label="1;2pkt 2fpkt"];
11858--15331[label="1;2pkt 2fpkt"];
14230--15331[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.89.211" dst_port="80" src_ip="15.148.197.178" src_port="32868"/>
      <filter dst_ip="160.86.89.211" dst_port="80" src_ip="15.148.197.178" src_port="32867"/>
    </slice>
    <from sec="1207285967" usec="0"/>
    <to sec="1207285968" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_973{
style=filled;
color=gray75;
11864[label="212.101.70.179;69pkt 69fpkt", shape=pentagon, color=darkviolet];
14231[label="212.101.70.179;69pkt 69fpkt", shape=invtriangle, color=brown];
stat973[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.101.70.179:*, *:2967}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2967: (50%)&lt;BR/&gt; 65150: (0.724638%)&lt;BR/&gt; 64936: (0.724638%)&lt;BR/&gt; 64781: (0.724638%)&lt;BR/&gt; 64015: (0.724638%)&gt;];
}
11864--14231[label="1;69pkt 69fpkt"];
</description>
    <slice>
      <filter dst_port="2967" src_ip="212.101.70.179"/>
    </slice>
    <from sec="1207285217" usec="0"/>
    <to sec="1207286090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.8.73.180"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286084" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.188.105.180"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
11889[label="175.203.108.180;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14243[label="175.203.108.180;4pkt 4fpkt", shape=invtriangle, color=brown];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{175.203.108.180:3043, 160.86.89.72:80}[25%]&lt;BR/&gt;{175.203.108.180:3178, 160.86.89.72:80}[25%]&lt;BR/&gt;{175.203.108.180:2739, 160.86.69.110:80}[25%]&lt;BR/&gt;{175.203.108.180:2757, 160.86.69.110:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3178: (12.5%)&lt;BR/&gt; 3043: (12.5%)&lt;BR/&gt; 2757: (12.5%)&lt;BR/&gt; 2739: (12.5%)&gt;];
}
11889--14243[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.69.110" dst_port="80" src_ip="175.203.108.180" src_port="2757"/>
      <filter dst_ip="160.86.69.110" dst_port="80" src_ip="175.203.108.180" src_port="2739"/>
      <filter dst_ip="160.86.89.72" dst_port="80" src_ip="175.203.108.180" src_port="3178"/>
      <filter dst_ip="160.86.89.72" dst_port="80" src_ip="175.203.108.180" src_port="3043"/>
    </slice>
    <from sec="1207285871" usec="0"/>
    <to sec="1207285948" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.194.1.181"/>
    </slice>
    <from sec="1207285530" usec="0"/>
    <to sec="1207285647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.00206,2.01468,002,0 0 0 1 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_978{
style=filled;
color=gray75;
4853[label="213.168.22.181;s;1689pkt 1689fpkt", shape=diamond, color=yellow];
14248[label="213.168.22.181;2347pkt 2347fpkt", shape=invtriangle, color=brown];
15335[label="213.168.22.181;2347pkt 2347fpkt", shape=invhouse, color=bisque];
stat978[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.168.22.181:1040, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1040: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
4853--14248[label="1;1689pkt 1689fpkt"];
4853--15335[label="1;1689pkt 1689fpkt"];
14248--15335[label="1;2347pkt 2347fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="213.168.22.181" src_port="1040"/>
    </slice>
    <from sec="1207285843" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_979{
style=filled;
color=gray75;
11910[label="192.202.165.181;137pkt 137fpkt", shape=pentagon, color=darkviolet];
14251[label="192.202.165.181;137pkt 137fpkt", shape=invtriangle, color=brown];
stat979[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.202.165.181:58332, *:1027}[50.365%]&lt;BR/&gt;{192.202.165.181:58332, *:1026}[49.635%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58332: (50%)&lt;BR/&gt; 1027: (25.1825%)&lt;BR/&gt; 1026: (24.8175%)&gt;];
}
11910--14251[label="1;137pkt 137fpkt"];
</description>
    <slice>
      <filter dst_port="1027" src_ip="192.202.165.181" src_port="58332"/>
      <filter dst_port="1026" src_ip="192.202.165.181" src_port="58332"/>
    </slice>
    <from sec="1207285561" usec="0"/>
    <to sec="1207285562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_980{
style=filled;
color=gray75;
11923[label="106.168.70.182;247pkt 247fpkt", shape=pentagon, color=darkviolet];
14260[label="106.168.70.182;247pkt 247fpkt", shape=invtriangle, color=brown];
stat980[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.168.70.182:*, 160.86.208.237:53}[72.0648%]&lt;BR/&gt;{106.168.70.182:*, 160.86.226.10:53}[24.2915%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 65250: (0.202429%)&lt;BR/&gt; 65001: (0.202429%)&lt;BR/&gt; 64800: (0.202429%)&lt;BR/&gt; 64787: (0.202429%)&gt;];
}
11923--14260[label="1;247pkt 247fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.208.237" dst_port="53" src_ip="106.168.70.182"/>
      <filter dst_ip="160.86.226.10" dst_port="53" src_ip="106.168.70.182"/>
    </slice>
    <from sec="1207285308" usec="0"/>
    <to sec="1207285839" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.39.177.183"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.93.124.186"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.43.178.187"/>
    </slice>
    <from sec="1207285217" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_984{
style=filled;
color=gray75;
11997[label="12.233.39.189;58pkt 58fpkt", shape=pentagon, color=darkviolet];
14297[label="12.233.39.189;58pkt 58fpkt", shape=invtriangle, color=brown];
stat984[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.233.39.189:*, 160.86.96.225:80}[93.1034%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.4138%)&lt;BR/&gt; 0: (3.44828%)&lt;BR/&gt; 4742: (0.862069%)&lt;BR/&gt; 4739: (0.862069%)&lt;BR/&gt; 4577: (0.862069%)&gt;];
}
11997--14297[label="1;58pkt 58fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.96.225" dst_port="80" src_ip="12.233.39.189"/>
    </slice>
    <from sec="1207285239" usec="0"/>
    <to sec="1207285937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.148.211.189"/>
    </slice>
    <from sec="1207285753" usec="0"/>
    <to sec="1207285815" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.92.209.192"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207285400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.158.215.193"/>
    </slice>
    <from sec="1207285954" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_988{
style=filled;
color=gray75;
12053[label="172.20.34.194;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14324[label="172.20.34.194;5pkt 5fpkt", shape=invtriangle, color=brown];
stat988[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.34.194:3870, 216.13.59.112:80}[20%]&lt;BR/&gt;{172.20.34.194:3760, 208.159.214.90:3544}[20%]&lt;BR/&gt;{172.20.34.194:3855, 208.159.214.90:3544}[20%]&lt;BR/&gt;{172.20.34.194:3760, 208.159.214.91:3544}[20%]&lt;BR/&gt;{172.20.34.194:3855, 208.159.214.91:3544}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3544: (40%)&lt;BR/&gt; 3855: (20%)&lt;BR/&gt; 3760: (20%)&lt;BR/&gt; 3870: (10%)&lt;BR/&gt; 80: (10%)&gt;];
}
12053--14324[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="208.159.214.91" dst_port="3544" src_ip="172.20.34.194" src_port="3855"/>
      <filter dst_ip="208.159.214.91" dst_port="3544" src_ip="172.20.34.194" src_port="3760"/>
      <filter dst_ip="208.159.214.90" dst_port="3544" src_ip="172.20.34.194" src_port="3855"/>
      <filter dst_ip="208.159.214.90" dst_port="3544" src_ip="172.20.34.194" src_port="3760"/>
      <filter dst_ip="216.13.59.112" dst_port="80" src_ip="172.20.34.194" src_port="3870"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.9.52.194"/>
    </slice>
    <from sec="1207285590" usec="0"/>
    <to sec="1207285627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_990{
style=filled;
color=gray75;
12114[label="149.82.16.198;51pkt 51fpkt", shape=pentagon, color=darkviolet];
14351[label="149.82.16.198;51pkt 51fpkt", shape=invtriangle, color=brown];
stat990[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.16.198:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4162: (0.980392%)&lt;BR/&gt; 4156: (0.980392%)&lt;BR/&gt; 4150: (0.980392%)&lt;BR/&gt; 4142: (0.980392%)&gt;];
}
12114--14351[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.82.16.198"/>
    </slice>
    <from sec="1207285555" usec="0"/>
    <to sec="1207286087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="128.81.16.200"/>
    </slice>
    <from sec="1207285923" usec="0"/>
    <to sec="1207285947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,501,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="167.209.170.200"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.121.197.200"/>
    </slice>
    <from sec="1207285658" usec="0"/>
    <to sec="1207285768" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.967013,1.96331,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_994{
style=filled;
color=gray75;
4445[label="160.68.76.176;d;81pkt 81fpkt", shape=diamond, color=yellow];
11250[label="197.101.99.137;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11592[label="22.56.170.161;33pkt 33fpkt", shape=pentagon, color=darkviolet];
12156[label="22.56.24.201;24pkt 24fpkt", shape=pentagon, color=darkviolet];
14114[label="22.56.170.161;33pkt 33fpkt", shape=invtriangle, color=brown];
14374[label="22.56.24.201;24pkt 24fpkt", shape=invtriangle, color=brown];
15286[label="22.56.170.161;33pkt 33fpkt", shape=invhouse, color=bisque];
stat994[shape=component, label=&lt;Rules:&lt;BR/&gt;{22.56.170.161:*, 160.68.76.176:80}[39.759%]&lt;BR/&gt;{22.56.24.201:*, 160.68.76.176:80}[28.9157%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64061: (0.826446%)&lt;BR/&gt; 64039: (0.826446%)&lt;BR/&gt; 64012: (0.826446%)&lt;BR/&gt; 63716: (0.826446%)&gt;];
}
4445--7377[label="0.0123457;1pkt 1fpkt"];
4445--8403[label="0.0123457;1pkt 1fpkt"];
4445--8688[label="0.160494;13pkt 13fpkt"];
4445--8807[label="0.160494;13pkt 13fpkt"];
4445--8923[label="0.160494;13pkt 13fpkt"];
4445--11250[label="1;14pkt 14fpkt"];
4445--11592[label="0.939394;31pkt 31fpkt"];
4445--11947[label="0.0123457;1pkt 1fpkt"];
4445--12156[label="1;24pkt 24fpkt"];
4445--14114[label="0.939394;31pkt 31fpkt"];
4445--14374[label="1;24pkt 24fpkt"];
4445--15286[label="0.939394;31pkt 31fpkt"];
11592--14114[label="1;33pkt 33fpkt"];
11592--15286[label="1;33pkt 33fpkt"];
12156--14374[label="1;24pkt 24fpkt"];
14114--15286[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="160.68.76.176" dst_port="80" src_ip="22.56.170.161"/>
      <filter dst_ip="160.68.76.176" dst_port="80" src_ip="22.56.24.201"/>
    </slice>
    <from sec="1207285598" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.213.21.204"/>
    </slice>
    <from sec="1207285207" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.15.27.206"/>
    </slice>
    <from sec="1207285802" usec="0"/>
    <to sec="1207285880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.216.119.206"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_999{
style=filled;
color=gray75;
12240[label="201.197.131.207;59pkt 59fpkt", shape=pentagon, color=darkviolet];
14420[label="201.197.131.207;59pkt 59fpkt", shape=invtriangle, color=brown];
stat999[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.197.131.207:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12240--14420[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter src_ip="201.197.131.207"/>
    </slice>
    <from sec="1207285650" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.139.98.208"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1001{
style=filled;
color=gray75;
12260[label="149.82.137.208;19pkt 19fpkt", shape=pentagon, color=darkviolet];
14431[label="149.82.137.208;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1001[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.137.208:*, 209.212.223.68:443}[31.5789%]&lt;BR/&gt;{149.82.137.208:*, *:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (39.4737%)&lt;BR/&gt; 80: (10.5263%)&lt;BR/&gt; 1672: (2.63158%)&lt;BR/&gt; 1671: (2.63158%)&lt;BR/&gt; 1670: (2.63158%)&gt;];
}
12260--14431[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.82.137.208"/>
      <filter dst_ip="209.212.223.68" dst_port="443" src_ip="149.82.137.208"/>
    </slice>
    <from sec="1207285241" usec="0"/>
    <to sec="1207285807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1002{
style=filled;
color=gray75;
12272[label="149.82.10.209;25pkt 25fpkt", shape=pentagon, color=darkviolet];
14435[label="149.82.10.209;25pkt 25fpkt", shape=invtriangle, color=brown];
stat1002[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.10.209:*, 52.68.223.67:80}[68%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3684: (2%)&lt;BR/&gt; 3683: (2%)&lt;BR/&gt; 3682: (2%)&lt;BR/&gt; 3681: (2%)&gt;];
}
12272--14435[label="1;25pkt 25fpkt"];
</description>
    <slice>
      <filter dst_ip="52.68.223.67" dst_port="80" src_ip="149.82.10.209"/>
    </slice>
    <from sec="1207285601" usec="0"/>
    <to sec="1207285707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1003{
style=filled;
color=gray75;
12300[label="149.82.211.210;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14448[label="149.82.211.210;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1003[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.211.210:20, 213.79.87.166:2752}[50%]&lt;BR/&gt;{149.82.211.210:21, 213.79.87.166:2750}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2750: (33.3333%)&lt;BR/&gt; 21: (33.3333%)&lt;BR/&gt; 2752: (16.6667%)&lt;BR/&gt; 20: (16.6667%)&gt;];
}
12300--14448[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.79.87.166" dst_port="2750" src_ip="149.82.211.210" src_port="21"/>
      <filter dst_ip="213.79.87.166" dst_port="2752" src_ip="149.82.211.210" src_port="20"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207285217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1005{
style=filled;
color=gray75;
12330[label="167.209.223.212;36pkt 36fpkt", shape=pentagon, color=darkviolet];
14464[label="167.209.223.212;36pkt 36fpkt", shape=invtriangle, color=brown];
stat1005[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.223.212:25, 200.216.102.224:*}[61.1111%]&lt;BR/&gt;{167.209.223.212:*, 102.26.44.179:443}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (31.9444%)&lt;BR/&gt; 443: (13.8889%)&lt;BR/&gt; 993: (4.16667%)&lt;BR/&gt; 50622: (1.38889%)&lt;BR/&gt; 50621: (1.38889%)&gt;];
}
12330--14464[label="1;36pkt 36fpkt"];
</description>
    <slice>
      <filter dst_ip="200.216.102.224" src_ip="167.209.223.212" src_port="25"/>
      <filter dst_ip="102.26.44.179" dst_port="443" src_ip="167.209.223.212"/>
    </slice>
    <from sec="1207285245" usec="0"/>
    <to sec="1207285926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.14.224.212"/>
    </slice>
    <from sec="1207285706" usec="0"/>
    <to sec="1207285740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.58.242.214"/>
    </slice>
    <from sec="1207285210" usec="0"/>
    <to sec="1207285994" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.754569,1.99769,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1009{
style=filled;
color=gray75;
4961[label="149.82.168.215;s;155pkt 155fpkt", shape=diamond, color=yellow];
12374[label="149.82.168.215;162pkt 162fpkt", shape=pentagon, color=darkviolet];
14480[label="149.82.168.215;162pkt 162fpkt", shape=invtriangle, color=brown];
stat1009[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.168.215:*, 15.10.185.100:28221}[21.4724%]&lt;BR/&gt;{149.82.168.215:*, 106.177.15.101:8899}[20.8589%]&lt;BR/&gt;{149.82.168.215:*, 197.165.15.130:28221}[20.8589%]&lt;BR/&gt;{149.82.168.215:*, 101.224.80.183:8911}[20.8589%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28221: (20.9812%)&lt;BR/&gt; 8911: (10.4384%)&lt;BR/&gt; 8899: (10.4384%)&lt;BR/&gt; 31987: (7.51566%)&lt;BR/&gt; 3004: (3.75783%)&gt;];
}
4961--12374[label="0.993548;154pkt 154fpkt"];
4961--14480[label="0.993548;154pkt 154fpkt"];
12374--14480[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter dst_ip="15.10.185.100" dst_port="28221" src_ip="149.82.168.215"/>
      <filter dst_ip="101.224.80.183" dst_port="8911" src_ip="149.82.168.215"/>
      <filter dst_ip="197.165.15.130" dst_port="28221" src_ip="149.82.168.215"/>
      <filter dst_ip="106.177.15.101" dst_port="8899" src_ip="149.82.168.215"/>
    </slice>
    <from sec="1207285201" usec="0"/>
    <to sec="1207286088" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="74.14.199.215"/>
    </slice>
    <from sec="1207285854" usec="0"/>
    <to sec="1207286011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.211.40.217"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1012{
style=filled;
color=gray75;
12404[label="76.118.49.218;196pkt 196fpkt", shape=pentagon, color=darkviolet];
14502[label="76.118.49.218;196pkt 196fpkt", shape=invtriangle, color=brown];
15432[label="76.118.49.218;196pkt 196fpkt", shape=invhouse, color=bisque];
stat1012[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.118.49.218:*, *:445}[54.0816%]&lt;BR/&gt;{76.118.49.218:*, *:139}[45.9184%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (27.0408%)&lt;BR/&gt; 139: (22.9592%)&lt;BR/&gt; 2968: (0.765306%)&lt;BR/&gt; 4389: (0.510204%)&lt;BR/&gt; 4292: (0.510204%)&gt;];
}
12404--14502[label="1;196pkt 196fpkt"];
12404--15432[label="1;196pkt 196fpkt"];
14502--15432[label="1;196pkt 196fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="76.118.49.218"/>
      <filter dst_port="139" src_ip="76.118.49.218"/>
    </slice>
    <from sec="1207285893" usec="0"/>
    <to sec="1207285940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="75.60.213.218"/>
    </slice>
    <from sec="1207285532" usec="0"/>
    <to sec="1207285827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1014{
style=filled;
color=gray75;
12412[label="149.82.3.219;39pkt 39fpkt", shape=pentagon, color=darkviolet];
14510[label="149.82.3.219;39pkt 39fpkt", shape=invtriangle, color=brown];
stat1014[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.3.219:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1718: (1.28205%)&lt;BR/&gt; 1717: (1.28205%)&lt;BR/&gt; 1715: (1.28205%)&lt;BR/&gt; 1714: (1.28205%)&gt;];
}
12412--14510[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="149.82.3.219"/>
    </slice>
    <from sec="1207285307" usec="0"/>
    <to sec="1207285984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.33.82.221"/>
    </slice>
    <from sec="1207285628" usec="0"/>
    <to sec="1207285634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.152.49.224"/>
    </slice>
    <from sec="1207285491" usec="0"/>
    <to sec="1207285497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.31.93.224"/>
    </slice>
    <from sec="1207285534" usec="0"/>
    <to sec="1207285610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.89.135.226"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207285918" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.20.1.230"/>
    </slice>
    <from sec="1207285229" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="116.150.161.232"/>
    </slice>
    <from sec="1207285899" usec="0"/>
    <to sec="1207285925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.210.238.232"/>
    </slice>
    <from sec="1207285702" usec="0"/>
    <to sec="1207285814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1022{
style=filled;
color=gray75;
12591[label="213.196.244.232;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14592[label="213.196.244.232;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1022[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.196.244.232:80, 213.61.69.95:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60365: (7.14286%)&lt;BR/&gt; 60348: (7.14286%)&lt;BR/&gt; 60343: (7.14286%)&lt;BR/&gt; 60264: (7.14286%)&gt;];
}
12591--14592[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="213.61.69.95" src_ip="213.196.244.232" src_port="80"/>
    </slice>
    <from sec="1207285946" usec="0"/>
    <to sec="1207286029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1023{
style=filled;
color=gray75;
12625[label="192.85.162.235;184pkt 184fpkt", shape=pentagon, color=darkviolet];
14606[label="192.85.162.235;184pkt 184fpkt", shape=invtriangle, color=brown];
15489[label="192.85.162.235;184pkt 184fpkt", shape=invhouse, color=bisque];
stat1023[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.85.162.235:35245, *:1026}[52.1739%]&lt;BR/&gt;{192.85.162.235:35245, *:1027}[47.8261%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35245: (50%)&lt;BR/&gt; 1026: (26.087%)&lt;BR/&gt; 1027: (23.913%)&gt;];
}
12625--14606[label="1;184pkt 184fpkt"];
12625--15489[label="1;184pkt 184fpkt"];
14606--15489[label="1;184pkt 184fpkt"];
</description>
    <slice>
      <filter dst_port="1026" src_ip="192.85.162.235" src_port="35245"/>
      <filter dst_port="1027" src_ip="192.85.162.235" src_port="35245"/>
    </slice>
    <from sec="1207285721" usec="0"/>
    <to sec="1207285722" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.66.10.236"/>
    </slice>
    <from sec="1207286014" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.125.201.236"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
12653[label="75.227.245.237;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14620[label="75.227.245.237;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{75.227.245.237:3390, 167.209.153.141:80}[50%]&lt;BR/&gt;{75.227.245.237:3392, 167.209.153.141:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3392: (25%)&lt;BR/&gt; 3390: (25%)&gt;];
}
12653--14620[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.153.141" dst_port="80" src_ip="75.227.245.237" src_port="3392"/>
      <filter dst_ip="167.209.153.141" dst_port="80" src_ip="75.227.245.237" src_port="3390"/>
    </slice>
    <from sec="1207285884" usec="0"/>
    <to sec="1207285925" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1027{
style=filled;
color=gray75;
12656[label="213.45.84.238;20pkt 20fpkt", shape=pentagon, color=darkviolet];
14623[label="213.45.84.238;20pkt 20fpkt", shape=invtriangle, color=brown];
stat1027[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.45.84.238:*, 167.209.74.161:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4694: (2.5%)&lt;BR/&gt; 4691: (2.5%)&lt;BR/&gt; 4675: (2.5%)&lt;BR/&gt; 4668: (2.5%)&gt;];
}
12656--14623[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.74.161" dst_port="80" src_ip="213.45.84.238"/>
    </slice>
    <from sec="1207285305" usec="0"/>
    <to sec="1207286028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="14.159.122.239"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1029{
style=filled;
color=gray75;
12682[label="77.44.144.240;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14635[label="77.44.144.240;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1029[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.44.144.240:2624, 150.183.220.34:80}[50%]&lt;BR/&gt;{77.44.144.240:2625, 150.183.220.34:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2625: (25%)&lt;BR/&gt; 2624: (25%)&gt;];
}
12682--14635[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="150.183.220.34" dst_port="80" src_ip="77.44.144.240" src_port="2625"/>
      <filter dst_ip="150.183.220.34" dst_port="80" src_ip="77.44.144.240" src_port="2624"/>
    </slice>
    <from sec="1207285938" usec="0"/>
    <to sec="1207285960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.1.88.242"/>
    </slice>
    <from sec="1207285950" usec="0"/>
    <to sec="1207285970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.217.2.246"/>
    </slice>
    <from sec="1207285975" usec="0"/>
    <to sec="1207285982" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="105.187.206.246"/>
    </slice>
    <from sec="1207285946" usec="0"/>
    <to sec="1207285965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="102.34.106.247"/>
    </slice>
    <from sec="1207285495" usec="0"/>
    <to sec="1207285562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1034{
style=filled;
color=gray75;
12783[label="196.13.173.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14674[label="196.13.173.249;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1034[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.13.173.249:80, 160.86.121.213:1644}[50%]&lt;BR/&gt;{196.13.173.249:80, 160.86.121.213:1646}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1646: (25%)&lt;BR/&gt; 1644: (25%)&gt;];
}
12783--14674[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="160.86.121.213" dst_port="1646" src_ip="196.13.173.249" src_port="80"/>
      <filter dst_ip="160.86.121.213" dst_port="1644" src_ip="196.13.173.249" src_port="80"/>
    </slice>
    <from sec="1207285934" usec="0"/>
    <to sec="1207285937" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.798064,2.02566,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1035{
style=filled;
color=gray75;
12784[label="192.24.217.249;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14675[label="192.24.217.249;13pkt 13fpkt", shape=invtriangle, color=brown];
15526[label="192.24.217.249;13pkt 13fpkt", shape=invhouse, color=bisque];
stat1035[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.24.217.249:*, 213.61.69.43:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2380: (3.84615%)&lt;BR/&gt; 2379: (3.84615%)&lt;BR/&gt; 2378: (3.84615%)&lt;BR/&gt; 2377: (3.84615%)&gt;];
}
12784--14675[label="1;13pkt 13fpkt"];
12784--15526[label="1;13pkt 13fpkt"];
14675--15526[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="213.61.69.43" dst_port="80" src_ip="192.24.217.249"/>
    </slice>
    <from sec="1207285893" usec="0"/>
    <to sec="1207285905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.58325,2.10803,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.214.132.250"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.520737,2.05899,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1037{
style=filled;
color=gray75;
12807[label="149.82.94.252;67pkt 67fpkt", shape=pentagon, color=darkviolet];
14687[label="149.82.94.252;67pkt 67fpkt", shape=invtriangle, color=brown];
stat1037[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.82.94.252:63237, *:*}[58.209%]&lt;BR/&gt;{149.82.94.252:*, 96.69.248.202:80}[28.3582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63237: (29.1045%)&lt;BR/&gt; 80: (19.403%)&lt;BR/&gt; 12350: (1.49254%)&lt;BR/&gt; 64868: (0.746269%)&lt;BR/&gt; 64552: (0.746269%)&gt;];
}
12807--14687[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter src_ip="149.82.94.252" src_port="63237"/>
      <filter dst_ip="96.69.248.202" dst_port="80" src_ip="149.82.94.252"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.54.201.0"/>
    </slice>
    <from sec="1207285692" usec="0"/>
    <to sec="1207285833" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.167.3.1"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="119.139.84.1"/>
    </slice>
    <from sec="1207285749" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.240.146.1"/>
    </slice>
    <from sec="1207285521" usec="0"/>
    <to sec="1207285530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.173.102.8"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.189.148.8"/>
    </slice>
    <from sec="1207285280" usec="0"/>
    <to sec="1207285308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.160.100.9"/>
    </slice>
    <from sec="1207285797" usec="0"/>
    <to sec="1207285806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.100.194.12"/>
    </slice>
    <from sec="1207286086" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.210.82.13"/>
    </slice>
    <from sec="1207285736" usec="0"/>
    <to sec="1207285758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.180.101.18"/>
    </slice>
    <from sec="1207285987" usec="0"/>
    <to sec="1207285991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="99.78.186.18"/>
    </slice>
    <from sec="1207285518" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.45.32.24"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285233" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.223.146.26"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="105.136.33.28"/>
    </slice>
    <from sec="1207285652" usec="0"/>
    <to sec="1207285655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.221.80.31"/>
    </slice>
    <from sec="1207285208" usec="0"/>
    <to sec="1207286096" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="115.40.194.42"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.5.160.48"/>
    </slice>
    <from sec="1207285527" usec="0"/>
    <to sec="1207285537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.200.131.49"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840191,2.07548,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1058{
style=filled;
color=gray75;
13270[label="213.218.223.53;5pkt 5fpkt", shape=invtriangle, color=brown];
14897[label="213.218.223.53;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1058[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.218.223.53:40838, 167.209.48.148:53}[20%]&lt;BR/&gt;{213.218.223.53:40839, 167.209.201.67:80}[20%]&lt;BR/&gt;{213.218.223.53:40849, 167.209.201.67:80}[20%]&lt;BR/&gt;{213.218.223.53:40850, 167.209.201.67:80}[20%]&lt;BR/&gt;{213.218.223.53:40851, 167.209.201.67:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 40851: (10%)&lt;BR/&gt; 40850: (10%)&lt;BR/&gt; 40849: (10%)&lt;BR/&gt; 40839: (10%)&gt;];
}
13270--14897[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="167.209.201.67" dst_port="80" src_ip="213.218.223.53" src_port="40851"/>
      <filter dst_ip="167.209.201.67" dst_port="80" src_ip="213.218.223.53" src_port="40850"/>
      <filter dst_ip="167.209.201.67" dst_port="80" src_ip="213.218.223.53" src_port="40849"/>
      <filter dst_ip="167.209.201.67" dst_port="80" src_ip="213.218.223.53" src_port="40839"/>
      <filter dst_ip="167.209.48.148" dst_port="53" src_ip="213.218.223.53" src_port="40838"/>
    </slice>
    <from sec="1207286098" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.54.193.58"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="102.72.150.62"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.15.1.72"/>
    </slice>
    <from sec="1207286036" usec="0"/>
    <to sec="1207286050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.26.230.73"/>
    </slice>
    <from sec="1207285212" usec="0"/>
    <to sec="1207285229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.181.245.76"/>
    </slice>
    <from sec="1207285611" usec="0"/>
    <to sec="1207285615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.191.10.78"/>
    </slice>
    <from sec="1207285644" usec="0"/>
    <to sec="1207285665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="165.171.73.79"/>
    </slice>
    <from sec="1207285948" usec="0"/>
    <to sec="1207285950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.27.138.79"/>
    </slice>
    <from sec="1207286081" usec="0"/>
    <to sec="1207286089" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.152.144.79"/>
    </slice>
    <from sec="1207286030" usec="0"/>
    <to sec="1207286070" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.107.155.79"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="160.86.57.80"/>
    </slice>
    <from sec="1207285205" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.248.179.80"/>
    </slice>
    <from sec="1207286092" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.14.228.81"/>
    </slice>
    <from sec="1207285796" usec="0"/>
    <to sec="1207285850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.153.111.84"/>
    </slice>
    <from sec="1207285598" usec="0"/>
    <to sec="1207285601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.840191,2.07548,010,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1073{
style=filled;
color=gray75;
13575[label="221.40.203.89;117pkt 117fpkt", shape=invtriangle, color=brown];
15033[label="221.40.203.89;117pkt 117fpkt", shape=invhouse, color=bisque];
stat1073[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.40.203.89:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 64013: (0.42735%)&lt;BR/&gt; 63402: (0.42735%)&lt;BR/&gt; 63124: (0.42735%)&lt;BR/&gt; 62507: (0.42735%)&gt;];
}
13575--15033[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="221.40.203.89"/>
    </slice>
    <from sec="1207285948" usec="0"/>
    <to sec="1207286094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.108.92.95"/>
    </slice>
    <from sec="1207285644" usec="0"/>
    <to sec="1207285651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.9.5.98"/>
    </slice>
    <from sec="1207285603" usec="0"/>
    <to sec="1207285785" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="201.10.189.100"/>
    </slice>
    <from sec="1207285524" usec="0"/>
    <to sec="1207285529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.151.246.101"/>
    </slice>
    <from sec="1207285638" usec="0"/>
    <to sec="1207285641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.15.24.105"/>
    </slice>
    <from sec="1207285512" usec="0"/>
    <to sec="1207285554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.172.179.105"/>
    </slice>
    <from sec="1207286053" usec="0"/>
    <to sec="1207286080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="115.2.204.105"/>
    </slice>
    <from sec="1207285804" usec="0"/>
    <to sec="1207285820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.13.33.106"/>
    </slice>
    <from sec="1207285879" usec="0"/>
    <to sec="1207286029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="205.54.193.107"/>
    </slice>
    <from sec="1207285491" usec="0"/>
    <to sec="1207285647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="68.3.198.111"/>
    </slice>
    <from sec="1207285458" usec="0"/>
    <to sec="1207285895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="149.5.116.114"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.214.214.115"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.34.41.126"/>
    </slice>
    <from sec="1207285209" usec="0"/>
    <to sec="1207286098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.132.226.129"/>
    </slice>
    <from sec="1207285269" usec="0"/>
    <to sec="1207286001" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="196.67.186.133"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.11.29.134"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="119.213.82.134"/>
    </slice>
    <from sec="1207285701" usec="0"/>
    <to sec="1207285710" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.187.112.136"/>
    </slice>
    <from sec="1207286039" usec="0"/>
    <to sec="1207286056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.203.132.136"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.201.195.138"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="75.108.145.142"/>
    </slice>
    <from sec="1207285512" usec="0"/>
    <to sec="1207285521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.160.44.145"/>
    </slice>
    <from sec="1207285218" usec="0"/>
    <to sec="1207285641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.200.36.149"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207285897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="120.186.187.149"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.138.78.154"/>
    </slice>
    <from sec="1207285705" usec="0"/>
    <to sec="1207285714" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.43.158.155"/>
    </slice>
    <from sec="1207285539" usec="0"/>
    <to sec="1207285559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="42.240.149.157"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.207.8.159"/>
    </slice>
    <from sec="1207285227" usec="0"/>
    <to sec="1207285258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.147.8.167"/>
    </slice>
    <from sec="1207285224" usec="0"/>
    <to sec="1207286086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.131.161.170"/>
    </slice>
    <from sec="1207285627" usec="0"/>
    <to sec="1207285635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.712207,2.05942,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1105{
style=filled;
color=gray75;
11775[label="167.209.3.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15313[label="167.209.3.174;10pkt 10fpkt", shape=invhouse, color=bisque];
stat1105[shape=component, label=&lt;Rules:&lt;BR/&gt;{167.209.3.174:*, 204.132.73.157:80}[50%]&lt;BR/&gt;{167.209.3.174:*, 212.82.102.121:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41049: (9.09091%)&lt;BR/&gt; 51546: (4.54545%)&lt;BR/&gt; 51541: (4.54545%)&lt;BR/&gt; 51537: (4.54545%)&gt;];
}
11775--15313[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.132.73.157" dst_port="80" src_ip="167.209.3.174"/>
      <filter dst_ip="212.82.102.121" dst_port="80" src_ip="167.209.3.174"/>
    </slice>
    <from sec="1207286046" usec="0"/>
    <to sec="1207286102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.201.172.175"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.158.215.193"/>
    </slice>
    <from sec="1207285954" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.216.119.206"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.14.224.212"/>
    </slice>
    <from sec="1207285706" usec="0"/>
    <to sec="1207285740" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.14.199.215"/>
    </slice>
    <from sec="1207285854" usec="0"/>
    <to sec="1207286011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.211.40.217"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.54.229.222"/>
    </slice>
    <from sec="1207285204" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="222.152.49.224"/>
    </slice>
    <from sec="1207285491" usec="0"/>
    <to sec="1207285497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.148.96.235"/>
    </slice>
    <from sec="1207285206" usec="0"/>
    <to sec="1207286100" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.125.201.236"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207286099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="115.1.88.242"/>
    </slice>
    <from sec="1207285950" usec="0"/>
    <to sec="1207285970" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="74.229.110.242"/>
    </slice>
    <from sec="1207285203" usec="0"/>
    <to sec="1207285736" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.759113,2.10844,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.217.2.246"/>
    </slice>
    <from sec="1207285975" usec="0"/>
    <to sec="1207285982" usec="0"/>
  </anomaly>

</admd:annotation>
