<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.73.237.147" dst_port="80" proto="tcp" src_ip="139.40.25.87" src_port="80"/>
      <filter dst_ip="162.73.237.147" dst_port="25" proto="tcp" src_ip="139.40.25.87" src_port="80"/>
      <filter dst_ip="142.243.51.132" dst_port="80" proto="tcp" src_ip="139.40.25.87" src_port="80"/>
      <filter dst_ip="142.243.51.132" dst_port="25" proto="tcp" src_ip="139.40.25.87" src_port="80"/>
      <from sec="1223614956" usec="0"/>
      <to sec="1223615053" usec="0"/>
    </slice>
    <from sec="1223614956" usec="0"/>
    <to sec="1223615054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="212.21.136.148" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="212.21.136.148" src_port="80"/>
      <from sec="1223614877" usec="0"/>
      <to sec="1223615333" usec="0"/>
    </slice>
    <from sec="1223614877" usec="0"/>
    <to sec="1223615333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.53.59.75" dst_port="80" proto="tcp" src_ip="162.73.46.178" src_port="80"/>
      <filter dst_ip="192.65.121.35" dst_port="80" proto="tcp" src_ip="162.73.46.178" src_port="80"/>
      <filter dst_ip="192.65.121.34" dst_port="80" proto="tcp" src_ip="162.73.46.178" src_port="80"/>
      <filter dst_ip="18.137.32.104" dst_port="80" proto="tcp" src_ip="162.73.46.178" src_port="80"/>
      <from sec="1223615199" usec="0"/>
      <to sec="1223615356" usec="0"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="78.72.160.109" dst_port="80" proto="tcp" src_ip="212.21.138.195" src_port="3128"/>
      <filter dst_ip="78.72.160.109" dst_port="80" proto="tcp" src_ip="212.21.138.195" src_port="3124"/>
      <filter dst_ip="78.72.160.109" dst_port="80" proto="tcp" src_ip="212.21.138.195" src_port="80"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615327" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.43.44.108" dst_port="80" proto="tcp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="213.43.44.108" dst_port="80" proto="udp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="213.43.44.108" dst_port="25" proto="tcp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="213.43.44.108" dst_port="25" proto="udp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="136.228.166.200" dst_port="80" proto="tcp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="136.228.166.200" dst_port="80" proto="udp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="136.228.166.200" dst_port="25" proto="tcp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="136.228.166.200" dst_port="25" proto="udp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="195.136.224.182" dst_port="80" proto="tcp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="195.136.224.182" dst_port="80" proto="udp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="195.136.224.182" dst_port="25" proto="tcp" src_ip="136.228.73.198" src_port="80"/>
      <filter dst_ip="195.136.224.182" dst_port="25" proto="udp" src_ip="136.228.73.198" src_port="80"/>
      <from sec="1223614880" usec="0"/>
      <to sec="1223615432" usec="0"/>
    </slice>
    <from sec="1223614880" usec="0"/>
    <to sec="1223615432" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.77.71.197" dst_port="25" proto="tcp" src_ip="108.85.22.213"/>
      <filter dst_ip="216.77.71.197" dst_port="25" proto="udp" src_ip="108.85.22.213"/>
      <filter dst_ip="216.77.71.197" dst_port="53" proto="tcp" src_ip="108.85.22.213"/>
      <filter dst_ip="216.77.71.197" dst_port="53" proto="udp" src_ip="108.85.22.213"/>
      <from sec="1223615471" usec="0"/>
      <to sec="1223615478" usec="0"/>
    </slice>
    <from sec="1223615471" usec="0"/>
    <to sec="1223615478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.228.19.62" dst_port="80" proto="tcp" src_ip="136.228.154.237" src_port="1439"/>
      <filter dst_ip="195.228.19.62" dst_port="443" proto="tcp" src_ip="136.228.154.237" src_port="1439"/>
      <filter dst_ip="195.228.19.62" dst_port="80" proto="tcp" src_ip="136.228.154.237" src_port="1431"/>
      <filter dst_ip="195.228.19.62" dst_port="443" proto="tcp" src_ip="136.228.154.237" src_port="1431"/>
      <filter dst_ip="208.31.10.157" dst_port="80" proto="tcp" src_ip="136.228.154.237" src_port="1439"/>
      <filter dst_ip="208.31.10.157" dst_port="443" proto="tcp" src_ip="136.228.154.237" src_port="1439"/>
      <filter dst_ip="208.31.10.157" dst_port="80" proto="tcp" src_ip="136.228.154.237" src_port="1431"/>
      <filter dst_ip="208.31.10.157" dst_port="443" proto="tcp" src_ip="136.228.154.237" src_port="1431"/>
      <from sec="1223615327" usec="0"/>
      <to sec="1223615330" usec="0"/>
    </slice>
    <from sec="1223615327" usec="0"/>
    <to sec="1223615330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" proto="tcp" src_ip="212.21.143.8"/>
      <filter dst_ip="212.21.143.8" dst_port="80" proto="tcp" src_ip="212.21.143.8"/>
      <filter dst_ip="212.21.143.8" dst_port="80" proto="tcp" src_ip="212.21.143.8"/>
      <filter dst_ip="212.21.143.8" dst_port="80" proto="tcp" src_ip="212.21.143.8"/>
      <from sec="1223614806" usec="0"/>
      <to sec="1223615585" usec="0"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615585" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.65.121.35" dst_port="80" proto="tcp" src_ip="192.65.121.35"/>
      <filter dst_ip="192.65.121.35" dst_port="80" proto="tcp" src_ip="192.65.121.35"/>
      <filter dst_ip="192.65.121.35" dst_port="80" proto="tcp" src_ip="192.65.121.35"/>
      <filter dst_ip="192.65.121.35" dst_port="80" proto="tcp" src_ip="192.65.121.35"/>
      <from sec="1223614866" usec="0"/>
      <to sec="1223615516" usec="0"/>
    </slice>
    <from sec="1223614866" usec="0"/>
    <to sec="1223615516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_10{
style=filled;
color=gray75;
101[label="210.74.3.99s;1pkt 1fpkt", shape=rectangle, color=red];
263[label="142.243.73.85d;2pkt 2fpkt", shape=rectangle, color=red];
1053[label="142.243.73.85;d;6pkt 6fpkt", shape=diamond, color=yellow];
1056[label="210.74.3.110;s;1pkt 1fpkt", shape=diamond, color=yellow];
1396[label="210.74.3.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat10[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.74.3.211:1935, 142.243.73.85:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 1528: (18.1818%)&lt;BR/&gt; 1518: (13.6364%)&lt;BR/&gt; 1527: (4.54545%)&lt;BR/&gt; 1523: (4.54545%)&gt;];
}
101--263[label="1;1pkt 1fpkt"];
101--333[label="1;1pkt 1fpkt"];
101--1053[label="1;1pkt 1fpkt"];
101--1396[label="1;1pkt 1fpkt"];
263--333[label="0.5;1pkt 1fpkt"];
263--1053[label="1;2pkt 2fpkt"];
263--1056[label="1;1pkt 1fpkt"];
263--1396[label="1;1pkt 1fpkt"];
1053--1056[label="1;1pkt 1fpkt"];
1053--1396[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.73.85" src_ip="210.74.3.211" src_port="1935"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.81.6" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.86.10" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="554" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <filter dst_ip="136.228.120.104" dst_port="80" proto="tcp" src_ip="136.228.120.104" src_port="80"/>
      <from sec="1223615055" usec="0"/>
      <to sec="1223615092" usec="0"/>
    </slice>
    <from sec="1223615055" usec="0"/>
    <to sec="1223615092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="80" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="udp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="tcp" src_ip="213.43.44.114"/>
      <filter dst_ip="213.43.44.114" dst_port="25" proto="udp" src_ip="213.43.44.114"/>
      <from sec="1223614851" usec="0"/>
      <to sec="1223615108" usec="0"/>
    </slice>
    <from sec="1223614851" usec="0"/>
    <to sec="1223615108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="53"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="tcp" src_ip="216.77.71.197" src_port="25"/>
      <filter dst_ip="205.111.163.190" dst_port="6000" proto="udp" src_ip="216.77.71.197" src_port="25"/>
      <from sec="1223615172" usec="0"/>
      <to sec="1223615174" usec="0"/>
    </slice>
    <from sec="1223615170" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.228.94.209" dst_port="80" proto="tcp" src_ip="136.228.94.209" src_port="80"/>
      <filter dst_ip="136.228.94.209" dst_port="80" proto="tcp" src_ip="136.228.94.209" src_port="80"/>
      <filter dst_ip="136.228.94.209" dst_port="80" proto="tcp" src_ip="136.228.94.209" src_port="80"/>
      <filter dst_ip="136.228.94.209" dst_port="80" proto="tcp" src_ip="136.228.94.209" src_port="80"/>
      <from sec="1223615037" usec="0"/>
      <to sec="1223615040" usec="0"/>
    </slice>
    <from sec="1223615037" usec="0"/>
    <to sec="1223615040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,901,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_15{
style=filled;
color=gray75;
186[label="136.228.202.188s;1pkt 1fpkt", shape=rectangle, color=red];
303[label="213.43.161.230d;2pkt 2fpkt", shape=rectangle, color=red];
741[label="136.228.202.188;s;651pkt 651fpkt", shape=diamond, color=yellow];
1227[label="213.43.161.230;d;177pkt 177fpkt", shape=diamond, color=yellow];
1594[label="162.73.105.10;s;72pkt 72fpkt", shape=diamond, color=yellow];
1891[label="212.21.136.57;s;287pkt 287fpkt", shape=diamond, color=yellow];
3347[label="136.228.91.181;s;103pkt 103fpkt", shape=diamond, color=yellow];
3876[label="104.93.74.3;d;75pkt 75fpkt", shape=diamond, color=yellow];
4274[label="107.100.242.223;d;26pkt 26fpkt", shape=diamond, color=yellow];
4751[label="136.228.67.25;s;119pkt 119fpkt", shape=diamond, color=yellow];
6111[label="104.93.74.83;d;13pkt 13fpkt", shape=hexagon, color=black];
7898[label="136.228.122.37;s;80pkt 80fpkt", shape=hexagon, color=black];
7917[label="136.228.67.25;s;90pkt 90fpkt", shape=hexagon, color=black];
8160[label="212.21.136.57;s;236pkt 236fpkt", shape=hexagon, color=black];
9618[label="136.228.64.18;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9744[label="136.228.67.25;123pkt 123fpkt", shape=pentagon, color=darkviolet];
12328[label="136.228.20.186;51pkt 51fpkt", shape=pentagon, color=darkviolet];
12921[label="136.228.77.228;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13347[label="162.73.105.10;78pkt 78fpkt", shape=invtriangle, color=brown];
13419[label="136.228.64.18;8pkt 8fpkt", shape=invtriangle, color=brown];
13482[label="136.228.67.25;123pkt 123fpkt", shape=invtriangle, color=brown];
14798[label="136.228.20.186;51pkt 51fpkt", shape=invtriangle, color=brown];
stat15[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.202.188:*, *:*}[40.6367%]&lt;BR/&gt;{*:*, *:25}[25.2809%]&lt;BR/&gt;{*:53, *:*}[21.3483%]&lt;BR/&gt;{*:25, *:*}[20.5368%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (24.3192%)&lt;BR/&gt; 53: (19.3339%)&lt;BR/&gt; 80: (8.10641%)&lt;BR/&gt; 32768: (4.2522%)&lt;BR/&gt; 0: (1.04734%)&gt;];
}
186--303[label="1;1pkt 1fpkt"];
186--741[label="1;1pkt 1fpkt"];
186--1227[label="1;1pkt 1fpkt"];
303--741[label="0.5;1pkt 1fpkt"];
303--1023[label="0.5;1pkt 1fpkt"];
303--1227[label="1;2pkt 2fpkt"];
303--7446[label="0.5;1pkt 1fpkt"];
741--820[label="0.00847458;3pkt 3fpkt"];
741--848[label="0.0107527;7pkt 7fpkt"];
741--999[label="0.00682594;2pkt 2fpkt"];
741--1162[label="0.0015361;1pkt 1fpkt"];
741--1227[label="0.0169492;3pkt 3fpkt"];
741--1251[label="0.00536193;2pkt 2fpkt"];
741--1293[label="0.00956938;2pkt 2fpkt"];
741--1335[label="0.00329489;2pkt 2fpkt"];
741--1343[label="0.00614439;4pkt 4fpkt"];
741--1367[label="0.00614439;4pkt 4fpkt"];
741--1414[label="0.0194805;3pkt 3fpkt"];
741--1462[label="0.015873;1pkt 1fpkt"];
741--1496[label="0.015625;1pkt 1fpkt"];
741--1787[label="0.0696203;33pkt 33fpkt"];
741--1840[label="0.00220751;1pkt 1fpkt"];
741--1967[label="0.00274725;1pkt 1fpkt"];
741--2119[label="0.0015361;1pkt 1fpkt"];
741--2166[label="0.00632911;2pkt 2fpkt"];
741--2167[label="0.00254453;1pkt 1fpkt"];
741--2188[label="0.00763359;2pkt 2fpkt"];
741--2203[label="0.00689655;3pkt 3fpkt"];
741--2213[label="0.0169492;2pkt 2fpkt"];
741--2239[label="0.00357143;1pkt 1fpkt"];
741--2724[label="0.0123457;5pkt 5fpkt"];
741--2731[label="0.0015361;1pkt 1fpkt"];
741--2755[label="0.00714286;2pkt 2fpkt"];
741--3184[label="0.0015361;1pkt 1fpkt"];
741--3225[label="0.0142857;2pkt 2fpkt"];
741--3228[label="0.00921659;2pkt 2fpkt"];
741--3233[label="0.0131579;1pkt 1fpkt"];
741--3242[label="0.012285;5pkt 5fpkt"];
741--3366[label="0.0327869;8pkt 8fpkt"];
741--3730[label="0.00768049;5pkt 5fpkt"];
741--3737[label="0.0015361;1pkt 1fpkt"];
741--3812[label="0.0113636;3pkt 3fpkt"];
741--4178[label="0.0015361;1pkt 1fpkt"];
741--4222[label="0.0015361;1pkt 1fpkt"];
741--4273[label="0.0196078;3pkt 3fpkt"];
741--4277[label="0.09375;12pkt 12fpkt"];
741--4288[label="0.00763359;1pkt 1fpkt"];
741--4647[label="0.00163666;1pkt 1fpkt"];
741--4696[label="0.00158983;1pkt 1fpkt"];
741--4726[label="0.0015361;1pkt 1fpkt"];
741--5058[label="0.00187266;1pkt 1fpkt"];
741--5059[label="0.00185185;1pkt 1fpkt"];
741--5489[label="0.00192678;1pkt 1fpkt"];
741--5511[label="0.00234192;1pkt 1fpkt"];
741--5516[label="0.00217391;1pkt 1fpkt"];
741--5518[label="0.00200401;1pkt 1fpkt"];
741--5526[label="0.00194175;1pkt 1fpkt"];
741--5550[label="0.00217865;1pkt 1fpkt"];
741--6065[label="0.0025;1pkt 1fpkt"];
741--6066[label="0.00614439;4pkt 4fpkt"];
741--6085[label="0.020979;3pkt 3fpkt"];
741--6556[label="0.00653595;1pkt 1fpkt"];
741--6620[label="0.00819672;2pkt 2fpkt"];
741--6774[label="0.00614439;4pkt 4fpkt"];
741--6780[label="1;1pkt 1fpkt"];
741--6838[label="0.0015361;1pkt 1fpkt"];
741--7196[label="0.0126582;2pkt 2fpkt"];
741--7202[label="0.0015361;1pkt 1fpkt"];
741--7212[label="0.00680272;1pkt 1fpkt"];
741--7226[label="0.0107527;2pkt 2fpkt"];
741--7470[label="0.00380228;1pkt 1fpkt"];
741--7557[label="0.0410256;8pkt 8fpkt"];
741--7728[label="0.00714286;2pkt 2fpkt"];
741--7730[label="0.0107527;7pkt 7fpkt"];
741--7826[label="0.00614439;4pkt 4fpkt"];
741--7868[label="0.00789474;3pkt 3fpkt"];
741--7889[label="0.0111111;1pkt 1fpkt"];
741--8135[label="0.0696203;33pkt 33fpkt"];
741--8154[label="0.00188324;1pkt 1fpkt"];
741--8200[label="0.0163934;2pkt 2fpkt"];
741--8212[label="0.0015361;1pkt 1fpkt"];
741--8216[label="0.0015361;1pkt 1fpkt"];
741--8273[label="0.00162075;1pkt 1fpkt"];
741--8546[label="0.00185185;1pkt 1fpkt"];
741--8879[label="0.0015361;1pkt 1fpkt"];
741--9052[label="0.00714286;2pkt 2fpkt"];
741--9076[label="0.00614439;4pkt 4fpkt"];
741--9177[label="0.0015361;1pkt 1fpkt"];
741--9196[label="0.00768049;5pkt 5fpkt"];
741--9197[label="0.0322581;21pkt 21fpkt"];
741--9217[label="0.0015361;1pkt 1fpkt"];
741--9251[label="0.0015361;1pkt 1fpkt"];
1227--1289[label="0.338983;60pkt 60fpkt"];
1227--1391[label="0.00564972;1pkt 1fpkt"];
1227--1445[label="0.00564972;1pkt 1fpkt"];
1227--1594[label="0.0277778;2pkt 2fpkt"];
1227--1790[label="0.0564972;10pkt 10fpkt"];
1227--1891[label="0.0508475;9pkt 9fpkt"];
1227--1896[label="0.0112994;2pkt 2fpkt"];
1227--1972[label="0.0392157;6pkt 6fpkt"];
1227--2164[label="0.00564972;1pkt 1fpkt"];
1227--2228[label="0.00564972;1pkt 1fpkt"];
1227--2234[label="0.00564972;1pkt 1fpkt"];
1227--2596[label="0.00564972;1pkt 1fpkt"];
1227--2660[label="0.0225989;4pkt 4fpkt"];
1227--2737[label="0.0357143;3pkt 3fpkt"];
1227--2777[label="0.0123457;2pkt 2fpkt"];
1227--2879[label="0.00564972;1pkt 1fpkt"];
1227--3347[label="0.0873786;9pkt 9fpkt"];
1227--3681[label="0.025641;1pkt 1fpkt"];
1227--3777[label="0.00675676;1pkt 1fpkt"];
1227--4225[label="0.00564972;1pkt 1fpkt"];
1227--4278[label="0.0229885;2pkt 2fpkt"];
1227--4725[label="0.214286;9pkt 9fpkt"];
1227--4751[label="0.0168067;2pkt 2fpkt"];
1227--4772[label="0.0235294;2pkt 2fpkt"];
1227--5147[label="0.0225989;4pkt 4fpkt"];
1227--6210[label="0.0112994;2pkt 2fpkt"];
1227--6473[label="0.0282486;5pkt 5fpkt"];
1227--6479[label="0.00564972;1pkt 1fpkt"];
1227--6529[label="0.0112994;2pkt 2fpkt"];
1227--6535[label="0.0282486;5pkt 5fpkt"];
1227--6551[label="0.027027;4pkt 4fpkt"];
1227--6610[label="0.0123457;2pkt 2fpkt"];
1227--6634[label="0.00564972;1pkt 1fpkt"];
1227--7235[label="0.00564972;1pkt 1fpkt"];
1227--7446[label="0.0112994;2pkt 2fpkt"];
1227--7463[label="0.00564972;1pkt 1fpkt"];
1227--7488[label="0.0338983;2pkt 2fpkt"];
1227--7511[label="0.00564972;1pkt 1fpkt"];
1227--7898[label="0.025;2pkt 2fpkt"];
1227--7917[label="0.0222222;2pkt 2fpkt"];
1227--7943[label="0.016129;1pkt 1fpkt"];
1227--8160[label="0.0451977;8pkt 8fpkt"];
1227--8252[label="0.0078125;1pkt 1fpkt"];
1227--8269[label="0.205128;8pkt 8fpkt"];
1227--8302[label="0.00564972;1pkt 1fpkt"];
1227--8954[label="0.00564972;1pkt 1fpkt"];
1227--9177[label="0.079096;14pkt 14fpkt"];
1227--9217[label="0.079096;14pkt 14fpkt"];
1227--9251[label="0.079096;14pkt 14fpkt"];
1227--9432[label="0.00564972;1pkt 1fpkt"];
1227--9451[label="0.0227273;2pkt 2fpkt"];
1227--9474[label="0.012987;1pkt 1fpkt"];
1227--9618[label="0.285714;2pkt 2fpkt"];
1227--9737[label="0.00564972;1pkt 1fpkt"];
1227--9744[label="0.0162602;2pkt 2fpkt"];
1227--9942[label="0.0117647;2pkt 2fpkt"];
1227--10169[label="0.0112994;2pkt 2fpkt"];
1227--10569[label="0.112994;20pkt 20fpkt"];
1227--10736[label="0.0112994;2pkt 2fpkt"];
1227--11793[label="0.00564972;1pkt 1fpkt"];
1227--12178[label="0.00564972;1pkt 1fpkt"];
1227--12328[label="0.0392157;2pkt 2fpkt"];
1227--12921[label="0.142857;2pkt 2fpkt"];
1227--13322[label="0.00564972;1pkt 1fpkt"];
1227--13347[label="0.025641;2pkt 2fpkt"];
1227--13419[label="0.25;2pkt 2fpkt"];
1227--13477[label="0.00564972;1pkt 1fpkt"];
1227--13482[label="0.0162602;2pkt 2fpkt"];
1227--13714[label="0.0112994;2pkt 2fpkt"];
1227--13917[label="0.112994;20pkt 20fpkt"];
1227--14004[label="0.0112994;2pkt 2fpkt"];
1227--14726[label="0.00564972;1pkt 1fpkt"];
1227--14798[label="0.0392157;2pkt 2fpkt"];
1227--15316[label="0.00564972;1pkt 1fpkt"];
1227--15608[label="0.112994;20pkt 20fpkt"];
1227--15648[label="0.0112994;2pkt 2fpkt"];
1227--16030[label="0.00564972;1pkt 1fpkt"];
1594--2662[label="0.0555556;4pkt 4fpkt"];
1594--3876[label="0.416667;30pkt 30fpkt"];
1594--6111[label="0.461538;6pkt 6fpkt"];
1594--7776[label="0.0555556;4pkt 4fpkt"];
1594--9132[label="0.0555556;4pkt 4fpkt"];
1594--9177[label="0.125;9pkt 9fpkt"];
1594--9217[label="0.125;9pkt 9fpkt"];
1594--9251[label="0.125;9pkt 9fpkt"];
1594--9474[label="0.986111;71pkt 71fpkt"];
1594--13347[label="1;72pkt 72fpkt"];
1891--2149[label="0.00384615;1pkt 1fpkt"];
1891--2167[label="0.00348432;1pkt 1fpkt"];
1891--2631[label="0.00362319;1pkt 1fpkt"];
1891--2892[label="0.0294118;2pkt 2fpkt"];
1891--3662[label="0.00348432;1pkt 1fpkt"];
1891--3750[label="0.00696864;2pkt 2fpkt"];
1891--3836[label="0.00348432;1pkt 1fpkt"];
1891--4189[label="0.00696864;2pkt 2fpkt"];
1891--4652[label="0.0114943;1pkt 1fpkt"];
1891--5944[label="0.010453;3pkt 3fpkt"];
1891--6097[label="0.125;1pkt 1fpkt"];
1891--6106[label="0.0517241;3pkt 3fpkt"];
1891--6179[label="0.010453;3pkt 3fpkt"];
1891--7219[label="0.00696864;2pkt 2fpkt"];
1891--8160[label="1;236pkt 236fpkt"];
1891--8167[label="0.0135135;1pkt 1fpkt"];
1891--8321[label="0.0322581;2pkt 2fpkt"];
1891--9177[label="0.00348432;1pkt 1fpkt"];
1891--9194[label="0.00348432;1pkt 1fpkt"];
1891--9196[label="0.0487805;14pkt 14fpkt"];
1891--9197[label="0.0174216;5pkt 5fpkt"];
1891--9198[label="0.010453;3pkt 3fpkt"];
1891--9217[label="0.00348432;1pkt 1fpkt"];
1891--9234[label="0.00348432;1pkt 1fpkt"];
1891--9251[label="0.00348432;1pkt 1fpkt"];
1891--9268[label="0.00348432;1pkt 1fpkt"];
3347--3383[label="0.0793651;5pkt 5fpkt"];
3347--4382[label="0.00970874;1pkt 1fpkt"];
3347--5103[label="0.0454545;3pkt 3fpkt"];
3347--6799[label="0.0875;7pkt 7fpkt"];
3347--8010[label="0.00970874;1pkt 1fpkt"];
3347--8314[label="0.0862069;5pkt 5fpkt"];
3347--8559[label="0.00970874;1pkt 1fpkt"];
3347--8593[label="0.038835;4pkt 4fpkt"];
3347--9103[label="0.00970874;1pkt 1fpkt"];
3347--9163[label="0.0582524;6pkt 6fpkt"];
3347--9194[label="0.0485437;5pkt 5fpkt"];
3347--9198[label="0.00970874;1pkt 1fpkt"];
3347--9234[label="0.0485437;5pkt 5fpkt"];
3347--9268[label="0.0485437;5pkt 5fpkt"];
3876--4751[label="0.0533333;4pkt 4fpkt"];
3876--5187[label="0.0133333;1pkt 1fpkt"];
3876--6779[label="0.0266667;2pkt 2fpkt"];
3876--7130[label="0.08;6pkt 6fpkt"];
3876--7139[label="0.133333;10pkt 10fpkt"];
3876--7917[label="0.0533333;4pkt 4fpkt"];
3876--9177[label="0.146667;11pkt 11fpkt"];
3876--9217[label="0.146667;11pkt 11fpkt"];
3876--9251[label="0.146667;11pkt 11fpkt"];
3876--9374[label="0.08;6pkt 6fpkt"];
3876--9474[label="0.4;30pkt 30fpkt"];
3876--9618[label="0.142857;1pkt 1fpkt"];
3876--9694[label="0.0133333;1pkt 1fpkt"];
3876--9744[label="0.0533333;4pkt 4fpkt"];
3876--10569[label="0.146667;11pkt 11fpkt"];
3876--11498[label="0.0266667;2pkt 2fpkt"];
3876--12786[label="0.0133333;1pkt 1fpkt"];
3876--13347[label="0.4;30pkt 30fpkt"];
3876--13419[label="0.125;1pkt 1fpkt"];
3876--13456[label="0.0133333;1pkt 1fpkt"];
3876--13482[label="0.0533333;4pkt 4fpkt"];
3876--13917[label="0.146667;11pkt 11fpkt"];
3876--14385[label="0.0266667;2pkt 2fpkt"];
3876--15608[label="0.146667;11pkt 11fpkt"];
3876--15848[label="0.0266667;2pkt 2fpkt"];
4274--4275[label="0.714286;15pkt 15fpkt"];
4274--4751[label="0.384615;10pkt 10fpkt"];
4274--7541[label="0.733333;11pkt 11fpkt"];
4274--7917[label="0.346154;9pkt 9fpkt"];
4274--9163[label="0.115385;3pkt 3fpkt"];
4274--9194[label="0.0769231;2pkt 2fpkt"];
4274--9198[label="0.0769231;2pkt 2fpkt"];
4274--9234[label="0.0769231;2pkt 2fpkt"];
4274--9268[label="0.0769231;2pkt 2fpkt"];
4274--9744[label="0.384615;10pkt 10fpkt"];
4274--13482[label="0.384615;10pkt 10fpkt"];
4751--5058[label="0.00840336;1pkt 1fpkt"];
4751--5101[label="0.0860215;8pkt 8fpkt"];
4751--5518[label="0.00840336;1pkt 1fpkt"];
4751--5526[label="0.00840336;1pkt 1fpkt"];
4751--5585[label="0.015873;1pkt 1fpkt"];
4751--6111[label="0.0769231;1pkt 1fpkt"];
4751--7917[label="1;90pkt 90fpkt"];
4751--8010[label="0.00840336;1pkt 1fpkt"];
4751--8182[label="0.00840336;1pkt 1fpkt"];
4751--9066[label="0.00840336;1pkt 1fpkt"];
4751--9103[label="0.00840336;1pkt 1fpkt"];
4751--9163[label="0.0336134;4pkt 4fpkt"];
4751--9177[label="0.0252101;3pkt 3fpkt"];
4751--9196[label="0.00840336;1pkt 1fpkt"];
4751--9197[label="0.0336134;4pkt 4fpkt"];
4751--9198[label="0.00840336;1pkt 1fpkt"];
4751--9217[label="0.0252101;3pkt 3fpkt"];
4751--9251[label="0.0252101;3pkt 3fpkt"];
4751--9744[label="0.991597;118pkt 118fpkt"];
4751--13482[label="0.991597;118pkt 118fpkt"];
6111--6535[label="0.0769231;1pkt 1fpkt"];
6111--7139[label="0.0769231;1pkt 1fpkt"];
6111--7917[label="0.0769231;1pkt 1fpkt"];
6111--9177[label="0.0769231;1pkt 1fpkt"];
6111--9217[label="0.0769231;1pkt 1fpkt"];
6111--9251[label="0.0769231;1pkt 1fpkt"];
6111--9474[label="0.461538;6pkt 6fpkt"];
6111--9744[label="0.0769231;1pkt 1fpkt"];
6111--10569[label="0.0769231;1pkt 1fpkt"];
6111--13347[label="0.461538;6pkt 6fpkt"];
6111--13482[label="0.0769231;1pkt 1fpkt"];
6111--13917[label="0.0769231;1pkt 1fpkt"];
6111--15608[label="0.0769231;1pkt 1fpkt"];
7898--8689[label="0.0689655;2pkt 2fpkt"];
7898--9177[label="0.0125;1pkt 1fpkt"];
7898--9196[label="0.025;2pkt 2fpkt"];
7898--9217[label="0.0125;1pkt 1fpkt"];
7898--9251[label="0.0125;1pkt 1fpkt"];
7898--9942[label="1;80pkt 80fpkt"];
7917--8010[label="0.0111111;1pkt 1fpkt"];
7917--8182[label="0.0111111;1pkt 1fpkt"];
7917--9066[label="0.0111111;1pkt 1fpkt"];
7917--9103[label="0.0111111;1pkt 1fpkt"];
7917--9163[label="0.0444444;4pkt 4fpkt"];
7917--9177[label="0.0333333;3pkt 3fpkt"];
7917--9217[label="0.0333333;3pkt 3fpkt"];
7917--9251[label="0.0333333;3pkt 3fpkt"];
7917--9744[label="0.988889;89pkt 89fpkt"];
7917--13482[label="0.988889;89pkt 89fpkt"];
8160--8167[label="0.0135135;1pkt 1fpkt"];
8160--8321[label="0.0322581;2pkt 2fpkt"];
8160--9177[label="0.00423729;1pkt 1fpkt"];
8160--9194[label="0.00423729;1pkt 1fpkt"];
8160--9196[label="0.0254237;6pkt 6fpkt"];
8160--9197[label="0.00423729;1pkt 1fpkt"];
8160--9198[label="0.00423729;1pkt 1fpkt"];
8160--9217[label="0.00423729;1pkt 1fpkt"];
8160--9234[label="0.00423729;1pkt 1fpkt"];
8160--9251[label="0.00423729;1pkt 1fpkt"];
8160--9268[label="0.00423729;1pkt 1fpkt"];
9618--13419[label="1;7pkt 7fpkt"];
9744--13482[label="1;123pkt 123fpkt"];
12328--14798[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.202.188"/>
      <filter src_port="53"/>
      <filter src_port="25"/>
      <filter dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.110.143.87" dst_port="80" proto="tcp" src_ip="136.228.81.72"/>
      <filter dst_ip="216.110.143.87" dst_port="80" proto="udp" src_ip="136.228.81.72"/>
      <filter dst_ip="216.110.143.87" dst_port="53" proto="tcp" src_ip="136.228.81.72"/>
      <filter dst_ip="216.110.143.87" dst_port="53" proto="udp" src_ip="136.228.81.72"/>
      <from sec="1223614809" usec="0"/>
      <to sec="1223614812" usec="0"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223614812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.95.51.104" dst_port="80" proto="tcp" src_ip="213.33.137.167"/>
      <filter dst_ip="192.95.51.104" dst_port="80" proto="udp" src_ip="213.33.137.167"/>
      <filter dst_ip="192.95.51.104" dst_port="53" proto="tcp" src_ip="213.33.137.167"/>
      <filter dst_ip="192.95.51.104" dst_port="53" proto="udp" src_ip="213.33.137.167"/>
      <filter dst_ip="192.95.51.104" dst_port="25" proto="tcp" src_ip="213.33.137.167"/>
      <filter dst_ip="192.95.51.104" dst_port="25" proto="udp" src_ip="213.33.137.167"/>
      <filter dst_ip="164.25.79.32" dst_port="80" proto="tcp" src_ip="213.33.137.167"/>
      <filter dst_ip="164.25.79.32" dst_port="80" proto="udp" src_ip="213.33.137.167"/>
      <filter dst_ip="164.25.79.32" dst_port="53" proto="tcp" src_ip="213.33.137.167"/>
      <filter dst_ip="164.25.79.32" dst_port="53" proto="udp" src_ip="213.33.137.167"/>
      <filter dst_ip="164.25.79.32" dst_port="25" proto="tcp" src_ip="213.33.137.167"/>
      <filter dst_ip="164.25.79.32" dst_port="25" proto="udp" src_ip="213.33.137.167"/>
      <from sec="1223614874" usec="0"/>
      <to sec="1223615262" usec="0"/>
    </slice>
    <from sec="1223614874" usec="0"/>
    <to sec="1223615262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.43.29.47" dst_port="80" proto="tcp" src_ip="213.43.29.47"/>
      <filter dst_ip="213.43.29.47" dst_port="80" proto="tcp" src_ip="213.43.29.47"/>
      <filter dst_ip="213.43.29.47" dst_port="80" proto="tcp" src_ip="213.43.29.47"/>
      <filter dst_ip="213.43.29.47" dst_port="80" proto="tcp" src_ip="213.43.29.47"/>
      <from sec="1223614917" usec="0"/>
      <to sec="1223614940" usec="0"/>
    </slice>
    <from sec="1223614917" usec="0"/>
    <to sec="1223614940" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="164.25.84.74" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <from sec="1223615074" usec="0"/>
      <to sec="1223615142" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="195.162.149.183" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="25" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="tcp" src_ip="108.85.22.108" src_port="80"/>
      <filter dst_ip="136.228.86.37" dst_port="80" proto="udp" src_ip="108.85.22.108" src_port="80"/>
      <from sec="1223615140" usec="0"/>
      <to sec="1223615142" usec="0"/>
    </slice>
    <from sec="1223615074" usec="0"/>
    <to sec="1223615143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <filter dst_ip="107.51.139.85" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <from sec="1223614966" usec="0"/>
      <to sec="1223615168" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="213.42.135.116" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="107.51.139.85" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="80"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <filter dst_ip="107.51.139.91" dst_port="80" proto="tcp" src_ip="142.16.146.11" src_port="59496"/>
      <from sec="1223615165" usec="0"/>
      <to sec="1223615168" usec="0"/>
    </slice>
    <from sec="1223614966" usec="0"/>
    <to sec="1223615168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.110.143.87" dst_port="80" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="80" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="80" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="80" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="25" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="25" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="25" proto="tcp" src_ip="216.110.143.87"/>
      <filter dst_ip="216.110.143.87" dst_port="25" proto="tcp" src_ip="216.110.143.87"/>
      <from sec="1223614966" usec="0"/>
      <to sec="1223615168" usec="0"/>
    </slice>
    <from sec="1223614966" usec="0"/>
    <to sec="1223615168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.52.143.156" dst_port="80" proto="tcp" src_ip="193.52.143.156"/>
      <filter dst_ip="193.52.143.156" dst_port="80" proto="tcp" src_ip="193.52.143.156"/>
      <filter dst_ip="193.52.143.156" dst_port="80" proto="tcp" src_ip="193.52.143.156"/>
      <filter dst_ip="193.52.143.156" dst_port="80" proto="tcp" src_ip="193.52.143.156"/>
      <from sec="1223614942" usec="0"/>
      <to sec="1223615301" usec="0"/>
    </slice>
    <from sec="1223614942" usec="0"/>
    <to sec="1223615301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="216.77.71.192"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="53" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="80" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="tcp" src_ip="118.130.33.58"/>
      <filter dst_ip="216.77.71.192" dst_port="23" proto="udp" src_ip="118.130.33.58"/>
      <from sec="1223614851" usec="0"/>
      <to sec="1223615108" usec="0"/>
    </slice>
    <from sec="1223614851" usec="0"/>
    <to sec="1223615108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="53" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="udp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="tcp" src_ip="164.25.78.127"/>
      <filter dst_ip="164.25.78.127" dst_port="80" proto="udp" src_ip="164.25.78.127"/>
      <from sec="1223615016" usec="0"/>
      <to sec="1223615173" usec="0"/>
    </slice>
    <from sec="1223615016" usec="0"/>
    <to sec="1223615173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_27{
style=filled;
color=gray75;
344[label="104.93.74.20d;16pkt 16fpkt", shape=rectangle, color=red];
1955[label="104.93.74.20;d;81pkt 81fpkt", shape=diamond, color=yellow];
3256[label="164.25.44.57;d;122pkt 122fpkt", shape=diamond, color=yellow];
3326[label="142.16.209.106;s;13pkt 13fpkt", shape=diamond, color=yellow];
5137[label="164.25.33.172;d;37pkt 37fpkt", shape=diamond, color=yellow];
5400[label="108.85.22.213;s;38pkt 38fpkt", shape=diamond, color=yellow];
5600[label="164.25.73.102;d;64pkt 64fpkt", shape=diamond, color=yellow];
8113[label="164.25.94.87;d;4pkt 4fpkt", shape=hexagon, color=black];
8766[label="108.85.22.213;s;38pkt 38fpkt", shape=hexagon, color=black];
10047[label="107.4.84.42;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12602[label="107.4.85.204;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12720[label="108.85.22.213;38pkt 38fpkt", shape=pentagon, color=darkviolet];
14939[label="107.4.85.204;2pkt 2fpkt", shape=invtriangle, color=brown];
14995[label="108.85.22.213;37pkt 37fpkt", shape=invtriangle, color=brown];
stat27[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.44.57:25}[34.0845%]&lt;BR/&gt;{*:*, 104.93.74.20:*}[22.8169%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (38.9113%)&lt;BR/&gt; 995: (4.93952%)&lt;BR/&gt; 993: (4.83871%)&lt;BR/&gt; 35877: (0.604839%)&lt;BR/&gt; 35178: (0.604839%)&gt;];
}
344--385[label="1;9pkt 9fpkt"];
344--1516[label="0.5625;9pkt 9fpkt"];
344--1541[label="0.3125;5pkt 5fpkt"];
344--1955[label="0.5625;9pkt 9fpkt"];
344--3256[label="0.125;2pkt 2fpkt"];
344--5373[label="0.3125;5pkt 5fpkt"];
344--5400[label="0.125;2pkt 2fpkt"];
344--7828[label="0.125;2pkt 2fpkt"];
344--8289[label="0.5625;9pkt 9fpkt"];
344--8766[label="0.125;2pkt 2fpkt"];
344--11853[label="0.5625;9pkt 9fpkt"];
344--12720[label="0.125;2pkt 2fpkt"];
344--14995[label="0.125;2pkt 2fpkt"];
1955--1966[label="0.0123457;1pkt 1fpkt"];
1955--2107[label="0.0493827;4pkt 4fpkt"];
1955--2221[label="0.0123457;1pkt 1fpkt"];
1955--2866[label="0.197531;16pkt 16fpkt"];
1955--2901[label="0.0131579;1pkt 1fpkt"];
1955--3326[label="0.230769;3pkt 3fpkt"];
1955--3788[label="0.0123457;1pkt 1fpkt"];
1955--6478[label="0.0617284;5pkt 5fpkt"];
1955--6941[label="0.230769;3pkt 3fpkt"];
1955--6987[label="0.0144928;1pkt 1fpkt"];
1955--8259[label="0.0123457;1pkt 1fpkt"];
1955--8289[label="0.111111;9pkt 9fpkt"];
1955--8581[label="0.0493827;4pkt 4fpkt"];
1955--9082[label="0.0123457;1pkt 1fpkt"];
1955--10324[label="0.222222;2pkt 2fpkt"];
1955--11249[label="0.0123457;1pkt 1fpkt"];
1955--11853[label="0.111111;9pkt 9fpkt"];
1955--12256[label="0.197531;16pkt 16fpkt"];
1955--13019[label="0.0769231;1pkt 1fpkt"];
1955--13791[label="0.25;2pkt 2fpkt"];
1955--14761[label="0.197531;16pkt 16fpkt"];
1955--16052[label="0.197531;16pkt 16fpkt"];
3256--5300[label="0.125;2pkt 2fpkt"];
3256--5400[label="0.0526316;2pkt 2fpkt"];
3256--5401[label="0.0526316;2pkt 2fpkt"];
3256--7828[label="1;122pkt 122fpkt"];
3256--8766[label="0.0526316;2pkt 2fpkt"];
3256--9177[label="0.0491803;6pkt 6fpkt"];
3256--9217[label="0.0491803;6pkt 6fpkt"];
3256--9251[label="0.0491803;6pkt 6fpkt"];
3256--9696[label="0.142857;5pkt 5fpkt"];
3256--9952[label="0.142857;3pkt 3fpkt"];
3256--12720[label="0.0526316;2pkt 2fpkt"];
3256--12940[label="0.666667;2pkt 2fpkt"];
3256--12968[label="0.285714;2pkt 2fpkt"];
3256--13118[label="0.0526316;2pkt 2fpkt"];
3256--13458[label="0.147059;5pkt 5fpkt"];
3256--14995[label="0.0540541;2pkt 2fpkt"];
3256--15115[label="0.5;2pkt 2fpkt"];
3256--15200[label="0.0526316;2pkt 2fpkt"];
3256--16294[label="0.0540541;2pkt 2fpkt"];
3326--3902[label="0.307692;4pkt 4fpkt"];
3326--6941[label="1;13pkt 13fpkt"];
5137--5400[label="0.108108;4pkt 4fpkt"];
5137--5401[label="0.108108;4pkt 4fpkt"];
5137--7357[label="0.117647;2pkt 2fpkt"];
5137--8268[label="1;37pkt 37fpkt"];
5137--8766[label="0.108108;4pkt 4fpkt"];
5137--8928[label="0.117647;2pkt 2fpkt"];
5137--9177[label="0.027027;1pkt 1fpkt"];
5137--9217[label="0.027027;1pkt 1fpkt"];
5137--9251[label="0.027027;1pkt 1fpkt"];
5137--10047[label="0.25;1pkt 1fpkt"];
5137--12720[label="0.108108;4pkt 4fpkt"];
5137--13118[label="0.108108;4pkt 4fpkt"];
5137--14995[label="0.108108;4pkt 4fpkt"];
5137--15200[label="0.108108;4pkt 4fpkt"];
5137--16294[label="0.108108;4pkt 4fpkt"];
5400--5600[label="0.0526316;2pkt 2fpkt"];
5400--7828[label="0.0526316;2pkt 2fpkt"];
5400--8113[label="0.25;1pkt 1fpkt"];
5400--8268[label="0.108108;4pkt 4fpkt"];
5400--8325[label="0.0263158;1pkt 1fpkt"];
5400--8350[label="0.0588235;2pkt 2fpkt"];
5400--8766[label="1;38pkt 38fpkt"];
5400--12720[label="1;38pkt 38fpkt"];
5400--14995[label="1;37pkt 37fpkt"];
5600--8766[label="0.0526316;2pkt 2fpkt"];
5600--9177[label="0.09375;6pkt 6fpkt"];
5600--9217[label="0.09375;6pkt 6fpkt"];
5600--9251[label="0.09375;6pkt 6fpkt"];
5600--9952[label="0.047619;1pkt 1fpkt"];
5600--12602[label="1;2pkt 2fpkt"];
5600--12720[label="0.0526316;2pkt 2fpkt"];
5600--13118[label="0.0526316;2pkt 2fpkt"];
5600--14939[label="1;2pkt 2fpkt"];
5600--14995[label="0.0540541;2pkt 2fpkt"];
5600--15200[label="0.0526316;2pkt 2fpkt"];
5600--16294[label="0.0540541;2pkt 2fpkt"];
8113--8114[label="1;1pkt 1fpkt"];
8113--8766[label="0.25;1pkt 1fpkt"];
8113--9148[label="1;1pkt 1fpkt"];
8113--12720[label="0.25;1pkt 1fpkt"];
8113--13118[label="0.25;1pkt 1fpkt"];
8113--14995[label="0.25;1pkt 1fpkt"];
8113--15200[label="0.25;1pkt 1fpkt"];
8113--16294[label="0.25;1pkt 1fpkt"];
8766--12720[label="1;38pkt 38fpkt"];
8766--14995[label="1;37pkt 37fpkt"];
12602--14939[label="1;2pkt 2fpkt"];
12720--14995[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="104.93.74.20"/>
      <filter dst_ip="164.25.44.57" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="208.226.54.82" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="23" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="443" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="80" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="tcp" src_ip="118.130.33.58" src_port="80"/>
      <filter dst_ip="162.73.188.82" dst_port="53" proto="udp" src_ip="118.130.33.58" src_port="80"/>
      <from sec="1223615092" usec="0"/>
      <to sec="1223615095" usec="0"/>
    </slice>
    <from sec="1223615092" usec="0"/>
    <to sec="1223615095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03514,2.1431,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="80" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="53" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="25" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="443" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="tcp" src_ip="193.138.87.130" src_port="80"/>
      <filter dst_ip="208.31.10.152" dst_port="21" proto="udp" src_ip="193.138.87.130" src_port="80"/>
      <from sec="1223615592" usec="0"/>
      <to sec="1223615596" usec="0"/>
    </slice>
    <from sec="1223615592" usec="0"/>
    <to sec="1223615596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
5016[label="21.1.146.53;s;61pkt 61fpkt", shape=diamond, color=yellow];
8758[label="21.1.146.53;s;61pkt 61fpkt", shape=hexagon, color=black];
10251[label="21.1.146.53;62pkt 62fpkt", shape=pentagon, color=darkviolet];
13752[label="21.1.146.53;63pkt 63fpkt", shape=invtriangle, color=brown];
15517[label="21.1.146.53;62pkt 62fpkt", shape=invhouse, color=bisque];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.1.146.53:*, 136.228.150.129:80}[58.7302%]&lt;BR/&gt;{21.1.146.53:*, 136.228.76.79:80}[38.0952%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52966: (0.809061%)&lt;BR/&gt; 52965: (0.809061%)&lt;BR/&gt; 52958: (0.809061%)&lt;BR/&gt; 52955: (0.809061%)&gt;];
}
5016--5200[label="0.393443;24pkt 24fpkt"];
5016--8758[label="1;61pkt 61fpkt"];
5016--10251[label="0.983607;60pkt 60fpkt"];
5016--13752[label="1;61pkt 61fpkt"];
5016--15517[label="0.983607;60pkt 60fpkt"];
8758--10251[label="0.983607;60pkt 60fpkt"];
8758--13752[label="1;61pkt 61fpkt"];
8758--15517[label="0.983607;60pkt 60fpkt"];
10251--13752[label="1;62pkt 62fpkt"];
10251--15517[label="1;62pkt 62fpkt"];
13752--15517[label="1;62pkt 62fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.150.129" dst_port="80" src_ip="21.1.146.53"/>
      <filter dst_ip="136.228.76.79" dst_port="80" src_ip="21.1.146.53"/>
    </slice>
    <from sec="1223615160" usec="0"/>
    <to sec="1223615521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
606[label="136.228.65.27;s;4pkt 4fpkt", shape=diamond, color=yellow];
9770[label="136.228.65.27;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.65.27:80, 21.4.78.45:1768}[25%]&lt;BR/&gt;{136.228.65.27:80, 21.4.78.45:1770}[25%]&lt;BR/&gt;{136.228.65.27:80, 21.4.78.45:1773}[25%]&lt;BR/&gt;{136.228.65.27:80, 21.4.78.45:1776}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1776: (14.2857%)&lt;BR/&gt; 1773: (14.2857%)&lt;BR/&gt; 1770: (14.2857%)&lt;BR/&gt; 1768: (7.14286%)&gt;];
}
606--9163[label="1;4pkt 4fpkt"];
606--9770[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="21.4.78.45" dst_port="1776" src_ip="136.228.65.27" src_port="80"/>
      <filter dst_ip="21.4.78.45" dst_port="1773" src_ip="136.228.65.27" src_port="80"/>
      <filter dst_ip="21.4.78.45" dst_port="1770" src_ip="136.228.65.27" src_port="80"/>
      <filter dst_ip="21.4.78.45" dst_port="1768" src_ip="136.228.65.27" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614867" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="41287832" usec="0"/>
    <to sec="41287832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="40523512" usec="0"/>
    <to sec="-834786928" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
703[label="136.228.1.182;d;3pkt 3fpkt", shape=diamond, color=yellow];
704[label="195.173.76.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
7102[label="195.173.76.160;s;1pkt 1fpkt", shape=hexagon, color=black];
7415[label="136.228.1.182;d;3pkt 3fpkt", shape=hexagon, color=black];
11941[label="195.173.76.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14604[label="195.173.76.160;1pkt 1fpkt", shape=invtriangle, color=brown];
15968[label="195.173.76.160;1pkt 1fpkt", shape=invhouse, color=bisque];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.173.76.160:443, 136.228.1.182:3712}[33.3333%]&lt;BR/&gt;{195.173.76.166:40000, 136.228.1.182:3726}[33.3333%]&lt;BR/&gt;{195.173.76.168:443, 136.228.1.182:3713}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (40.9091%)&lt;BR/&gt; 3712: (31.8182%)&lt;BR/&gt; 40000: (9.09091%)&lt;BR/&gt; 3726: (9.09091%)&lt;BR/&gt; 3713: (9.09091%)&gt;];
}
703--704[label="1;1pkt 1fpkt"];
703--7102[label="1;1pkt 1fpkt"];
703--7415[label="1;3pkt 3fpkt"];
703--11941[label="1;1pkt 1fpkt"];
703--14604[label="1;1pkt 1fpkt"];
703--15968[label="1;1pkt 1fpkt"];
704--7102[label="1;1pkt 1fpkt"];
704--7415[label="1;1pkt 1fpkt"];
704--11941[label="1;1pkt 1fpkt"];
704--14604[label="1;1pkt 1fpkt"];
704--15968[label="1;1pkt 1fpkt"];
7102--7415[label="1;1pkt 1fpkt"];
7102--11941[label="1;1pkt 1fpkt"];
7102--14604[label="1;1pkt 1fpkt"];
7102--15968[label="1;1pkt 1fpkt"];
7415--11941[label="1;1pkt 1fpkt"];
7415--14604[label="1;1pkt 1fpkt"];
7415--15968[label="1;1pkt 1fpkt"];
11941--14604[label="1;1pkt 1fpkt"];
11941--15968[label="1;1pkt 1fpkt"];
14604--15968[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.1.182" dst_port="3713" src_ip="195.173.76.168" src_port="443"/>
      <filter dst_ip="136.228.1.182" dst_port="3726" src_ip="195.173.76.166" src_port="40000"/>
      <filter dst_ip="136.228.1.182" dst_port="3712" src_ip="195.173.76.160" src_port="443"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
3928[label="142.243.12.33;s;32pkt 32fpkt", shape=diamond, color=yellow];
7986[label="142.243.12.33;s;32pkt 32fpkt", shape=hexagon, color=black];
9856[label="142.243.12.33;32pkt 32fpkt", shape=pentagon, color=darkviolet];
13536[label="142.243.12.33;32pkt 32fpkt", shape=invtriangle, color=brown];
15420[label="142.243.12.33;33pkt 33fpkt", shape=invhouse, color=bisque];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.12.33:*, 139.40.98.102:80}[54.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.472%)&lt;BR/&gt; 993: (9.31677%)&lt;BR/&gt; 587: (6.21118%)&lt;BR/&gt; 64262: (1.5528%)&lt;BR/&gt; 64225: (1.5528%)&gt;];
}
3928--5967[label="0.105263;2pkt 2fpkt"];
3928--6837[label="0.03125;1pkt 1fpkt"];
3928--7743[label="0.34375;11pkt 11fpkt"];
3928--7986[label="1;32pkt 32fpkt"];
3928--9856[label="0.96875;31pkt 31fpkt"];
3928--13536[label="0.96875;31pkt 31fpkt"];
3928--15420[label="1;32pkt 32fpkt"];
7986--9856[label="0.96875;31pkt 31fpkt"];
7986--13536[label="0.96875;31pkt 31fpkt"];
7986--15420[label="1;32pkt 32fpkt"];
9856--13536[label="1;32pkt 32fpkt"];
9856--15420[label="1;32pkt 32fpkt"];
13536--15420[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="139.40.98.102" dst_port="80" src_ip="142.243.12.33"/>
    </slice>
    <from sec="1223614892" usec="0"/>
    <to sec="1223615675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
990[label="160.49.230.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
991[label="78.8.22.249;s;1pkt 1fpkt", shape=diamond, color=yellow];
7442[label="78.8.22.249;s;1pkt 1fpkt", shape=hexagon, color=black];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.8.22.249:36046, 160.49.230.9:7144}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36046: (50%)&lt;BR/&gt; 7144: (50%)&gt;];
}
990--991[label="1;1pkt 1fpkt"];
990--7442[label="1;1pkt 1fpkt"];
991--7442[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.230.9" dst_port="7144" src_ip="78.8.22.249" src_port="36046"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615590" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
237[label="162.73.190.239s;1pkt 1fpkt", shape=rectangle, color=red];
1035[label="162.73.190.239;s;7pkt 7fpkt", shape=diamond, color=yellow];
1036[label="23.4.134.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
5995[label="23.4.134.82;d;1pkt 1fpkt", shape=hexagon, color=black];
6253[label="162.73.190.239;s;4pkt 4fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.190.239:*, 193.171.133.54:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4223: (17.8571%)&lt;BR/&gt; 1935: (17.8571%)&lt;BR/&gt; 80: (17.8571%)&lt;BR/&gt; 5050: (7.14286%)&lt;BR/&gt; 4796: (7.14286%)&gt;];
}
237--1035[label="1;1pkt 1fpkt"];
237--1036[label="1;1pkt 1fpkt"];
237--5995[label="1;1pkt 1fpkt"];
237--6253[label="1;1pkt 1fpkt"];
1035--1036[label="1;1pkt 1fpkt"];
1035--5995[label="1;1pkt 1fpkt"];
1035--6253[label="1;4pkt 4fpkt"];
1035--9178[label="0.142857;1pkt 1fpkt"];
1035--9218[label="0.142857;1pkt 1fpkt"];
1035--9252[label="0.142857;1pkt 1fpkt"];
1036--5995[label="1;1pkt 1fpkt"];
1036--6253[label="1;1pkt 1fpkt"];
5995--6253[label="1;1pkt 1fpkt"];
6253--9178[label="0.25;1pkt 1fpkt"];
6253--9218[label="0.25;1pkt 1fpkt"];
6253--9252[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.171.133.54" dst_port="80" src_ip="162.73.190.239"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="192.105.68.191"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223614820" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
195[label="212.138.110.200s;1pkt 1fpkt", shape=rectangle, color=red];
1083[label="212.138.110.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
6011[label="212.138.110.200;s;1pkt 1fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.110.200:1935, 213.42.166.8:8438}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8438: (50%)&lt;BR/&gt; 1935: (50%)&gt;];
}
195--573[label="1;1pkt 1fpkt"];
195--1083[label="1;1pkt 1fpkt"];
195--6011[label="1;1pkt 1fpkt"];
1083--6011[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.8" dst_port="8438" src_ip="212.138.110.200" src_port="1935"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
1091[label="162.73.216.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
1092[label="107.199.184.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
6013[label="107.199.184.243;d;1pkt 1fpkt", shape=hexagon, color=black];
8535[label="162.73.216.235;s;1pkt 1fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.216.235:49310, 107.199.184.243:8004}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49310: (50%)&lt;BR/&gt; 8004: (50%)&gt;];
}
1091--1092[label="1;1pkt 1fpkt"];
1091--6013[label="1;1pkt 1fpkt"];
1091--8535[label="1;1pkt 1fpkt"];
1092--6013[label="1;1pkt 1fpkt"];
1092--8535[label="1;1pkt 1fpkt"];
6013--8535[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="107.199.184.243" dst_port="8004" src_ip="162.73.216.235" src_port="49310"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
1256[label="164.25.90.29;d;1pkt 1fpkt", shape=diamond, color=yellow];
1257[label="108.85.5.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
6049[label="164.25.90.29;d;1pkt 1fpkt", shape=hexagon, color=black];
13198[label="108.85.5.252;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.85.5.252:5999, 164.25.90.29:63917}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63917: (50%)&lt;BR/&gt; 5999: (50%)&gt;];
}
1256--1257[label="1;1pkt 1fpkt"];
1256--6049[label="1;1pkt 1fpkt"];
1256--13198[label="1;1pkt 1fpkt"];
1257--6049[label="1;1pkt 1fpkt"];
1257--13198[label="1;1pkt 1fpkt"];
6049--13198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.90.29" dst_port="63917" src_ip="108.85.5.252" src_port="5999"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
1304[label="213.33.56.102;d;6pkt 6fpkt", shape=diamond, color=yellow];
1305[label="8.170.141.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
6314[label="213.33.56.102;d;4pkt 4fpkt", shape=hexagon, color=black];
6315[label="8.170.141.4;s;1pkt 1fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.103.112.13:80, 213.33.56.102:*}[50%]&lt;BR/&gt;{107.103.112.12:80, 213.33.56.102:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 4726: (16.6667%)&lt;BR/&gt; 554: (16.6667%)&lt;BR/&gt; 2044: (8.33333%)&lt;BR/&gt; 2042: (8.33333%)&gt;];
}
1304--1305[label="1;1pkt 1fpkt"];
1304--6314[label="1;4pkt 4fpkt"];
1304--6315[label="1;1pkt 1fpkt"];
1304--9163[label="0.166667;1pkt 1fpkt"];
1304--9194[label="0.166667;1pkt 1fpkt"];
1304--9198[label="0.166667;1pkt 1fpkt"];
1304--9234[label="0.166667;1pkt 1fpkt"];
1304--9268[label="0.166667;1pkt 1fpkt"];
1305--6314[label="1;1pkt 1fpkt"];
1305--6315[label="1;1pkt 1fpkt"];
6314--6315[label="1;1pkt 1fpkt"];
6314--9163[label="0.25;1pkt 1fpkt"];
6314--9194[label="0.25;1pkt 1fpkt"];
6314--9234[label="0.25;1pkt 1fpkt"];
6314--9268[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.56.102" src_ip="107.103.112.13" src_port="80"/>
      <filter dst_ip="213.33.56.102" src_ip="107.103.112.12" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
1332[label="212.21.132.78;s;423pkt 423fpkt", shape=diamond, color=yellow];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.132.78:*, *:53}[60.5201%]&lt;BR/&gt;{212.21.132.78:0, *:0}[39.0071%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (39.0071%)&lt;BR/&gt; 53: (30.3783%)&lt;BR/&gt; 3499: (0.35461%)&lt;BR/&gt; 4567: (0.236407%)&lt;BR/&gt; 2517: (0.236407%)&gt;];
}
1332--3662[label="0.00236407;1pkt 1fpkt"];
1332--5944[label="0.00236407;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="212.21.132.78"/>
      <filter src_ip="212.21.132.78"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1348[label="107.100.249.195;d;543pkt 543fpkt", shape=diamond, color=yellow];
1349[label="136.228.80.2;s;569pkt 569fpkt", shape=diamond, color=yellow];
6069[label="107.100.249.195;d;483pkt 483fpkt", shape=hexagon, color=black];
9326[label="136.228.80.2;604pkt 604fpkt", shape=pentagon, color=darkviolet];
11936[label="153.109.20.160;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13267[label="136.228.80.2;604pkt 604fpkt", shape=invtriangle, color=brown];
14601[label="153.109.20.160;20pkt 20fpkt", shape=invtriangle, color=brown];
15289[label="136.228.80.2;604pkt 604fpkt", shape=invhouse, color=bisque];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.80.2:80, 107.100.249.195:*}[90.8654%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65403: (0.0870575%)&lt;BR/&gt; 65336: (0.0870575%)&lt;BR/&gt; 65295: (0.0870575%)&lt;BR/&gt; 65098: (0.0870575%)&gt;];
}
1348--1349[label="0.98895;537pkt 537fpkt"];
1348--6069[label="1;483pkt 483fpkt"];
1348--9163[label="0.0570902;31pkt 31fpkt"];
1348--9194[label="0.053407;29pkt 29fpkt"];
1348--9198[label="0.0589319;32pkt 32fpkt"];
1348--9234[label="0.053407;29pkt 29fpkt"];
1348--9268[label="0.053407;29pkt 29fpkt"];
1348--9326[label="0.98895;537pkt 537fpkt"];
1348--11936[label="0.315789;6pkt 6fpkt"];
1348--13267[label="0.98895;537pkt 537fpkt"];
1348--14601[label="0.3;6pkt 6fpkt"];
1348--15289[label="0.98895;537pkt 537fpkt"];
1349--2892[label="0.294118;20pkt 20fpkt"];
1349--4382[label="0.00840336;1pkt 1fpkt"];
1349--5105[label="0.0366972;4pkt 4fpkt"];
1349--6069[label="0.989648;478pkt 478fpkt"];
1349--8010[label="0.00840336;1pkt 1fpkt"];
1349--8321[label="0.290323;18pkt 18fpkt"];
1349--9103[label="0.00840336;1pkt 1fpkt"];
1349--9163[label="0.0544815;31pkt 31fpkt"];
1349--9194[label="0.0527241;30pkt 30fpkt"];
1349--9198[label="0.0615114;35pkt 35fpkt"];
1349--9234[label="0.0527241;30pkt 30fpkt"];
1349--9268[label="0.0527241;30pkt 30fpkt"];
1349--9326[label="1;569pkt 569fpkt"];
1349--13267[label="1;569pkt 569fpkt"];
1349--15289[label="1;569pkt 569fpkt"];
6069--9163[label="0.0641822;31pkt 31fpkt"];
6069--9194[label="0.0600414;29pkt 29fpkt"];
6069--9198[label="0.0269151;13pkt 13fpkt"];
6069--9234[label="0.0600414;29pkt 29fpkt"];
6069--9268[label="0.0600414;29pkt 29fpkt"];
6069--9326[label="0.989648;478pkt 478fpkt"];
6069--11936[label="0.263158;5pkt 5fpkt"];
6069--13267[label="0.989648;478pkt 478fpkt"];
6069--14601[label="0.25;5pkt 5fpkt"];
6069--15289[label="0.989648;478pkt 478fpkt"];
9326--13267[label="1;604pkt 604fpkt"];
9326--15289[label="1;604pkt 604fpkt"];
11936--14601[label="1;19pkt 19fpkt"];
13267--15289[label="1;604pkt 604fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.249.195" src_ip="136.228.80.2" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
93[label="142.243.73.85s;2pkt 2fpkt", shape=rectangle, color=red];
1054[label="142.243.73.85;s;6pkt 6fpkt", shape=diamond, color=yellow];
1055[label="210.74.3.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
1395[label="210.74.3.99;d;1pkt 1fpkt", shape=diamond, color=yellow];
6001[label="142.243.73.85;s;6pkt 6fpkt", shape=hexagon, color=black];
10782[label="142.243.73.85;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.73.85:*, 210.74.3.211:1935}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 1528: (11.9048%)&lt;BR/&gt; 1518: (11.9048%)&lt;BR/&gt; 1527: (7.14286%)&lt;BR/&gt; 1523: (7.14286%)&gt;];
}
93--1054[label="1;2pkt 2fpkt"];
93--1055[label="1;1pkt 1fpkt"];
93--1395[label="1;1pkt 1fpkt"];
93--6001[label="1;2pkt 2fpkt"];
93--10782[label="1;2pkt 2fpkt"];
1054--1055[label="1;1pkt 1fpkt"];
1054--1395[label="1;1pkt 1fpkt"];
1054--6001[label="1;6pkt 6fpkt"];
1054--10782[label="1;5pkt 5fpkt"];
1055--6001[label="1;1pkt 1fpkt"];
1055--10782[label="1;1pkt 1fpkt"];
1395--6001[label="1;1pkt 1fpkt"];
1395--10782[label="1;1pkt 1fpkt"];
6001--10782[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="210.74.3.211" dst_port="1935" src_ip="142.243.73.85"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
362[label="202.107.49.140s;128pkt 128fpkt", shape=rectangle, color=red];
1470[label="202.107.49.140;s;342pkt 342fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.107.49.140:*, *:139}[55.5556%]&lt;BR/&gt;{202.107.49.140:*, *:445}[44.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (33.8298%)&lt;BR/&gt; 445: (16.1702%)&lt;BR/&gt; 4093: (0.212766%)&lt;BR/&gt; 4092: (0.212766%)&lt;BR/&gt; 4091: (0.212766%)&gt;];
}
362--1470[label="1;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="202.107.49.140"/>
      <filter dst_port="445" src_ip="202.107.49.140"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223614908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
67[label="212.21.129.56s;2pkt 2fpkt", shape=rectangle, color=red];
282[label="107.100.224.149d;1pkt 1fpkt", shape=rectangle, color=red];
1391[label="212.21.129.56;s;2703pkt 2703fpkt", shape=diamond, color=yellow];
1474[label="107.100.224.242;d;106pkt 106fpkt", shape=diamond, color=yellow];
2371[label="107.100.224.149;d;115pkt 115fpkt", shape=diamond, color=yellow];
3825[label="142.243.167.61;s;468pkt 468fpkt", shape=diamond, color=yellow];
5650[label="192.67.86.144;d;91pkt 91fpkt", shape=diamond, color=yellow];
6606[label="212.21.129.56;s;1903pkt 1903fpkt", shape=hexagon, color=black];
6684[label="107.100.224.149;d;45pkt 45fpkt", shape=hexagon, color=black];
9466[label="136.228.217.9;86pkt 86fpkt", shape=pentagon, color=darkviolet];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.129.56:*, *:53}[69.6396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (40.0181%)&lt;BR/&gt; 25: (6.25%)&lt;BR/&gt; 2703: (2.9529%)&lt;BR/&gt; 32818: (0.407609%)&lt;BR/&gt; 24441: (0.326087%)&gt;];
}
67--1391[label="1;2pkt 2fpkt"];
67--1474[label="1;2pkt 2fpkt"];
67--6606[label="0.5;1pkt 1fpkt"];
282--2371[label="1;1pkt 1fpkt"];
282--6684[label="1;1pkt 1fpkt"];
1391--1474[label="0.962264;102pkt 102fpkt"];
1391--1506[label="0.00813008;1pkt 1fpkt"];
1391--2119[label="0.0230592;60pkt 60fpkt"];
1391--2371[label="0.86087;99pkt 99fpkt"];
1391--3184[label="0.0122358;11pkt 11fpkt"];
1391--3192[label="0.0255363;25pkt 25fpkt"];
1391--3322[label="0.00692841;6pkt 6fpkt"];
1391--3662[label="0.00116959;1pkt 1fpkt"];
1391--3669[label="0.0645161;2pkt 2fpkt"];
1391--3700[label="0.0714286;2pkt 2fpkt"];
1391--3737[label="0.0157127;14pkt 14fpkt"];
1391--3871[label="0.15894;24pkt 24fpkt"];
1391--3904[label="0.0918367;18pkt 18fpkt"];
1391--4178[label="0.0180879;14pkt 14fpkt"];
1391--4222[label="0.0149477;10pkt 10fpkt"];
1391--4647[label="0.00163666;1pkt 1fpkt"];
1391--4683[label="0.0130081;8pkt 8fpkt"];
1391--4696[label="0.027027;17pkt 17fpkt"];
1391--4726[label="0.016129;11pkt 11fpkt"];
1391--5058[label="0.0149813;8pkt 8fpkt"];
1391--5488[label="0.0321361;17pkt 17fpkt"];
1391--5504[label="0.0523691;21pkt 21fpkt"];
1391--5511[label="0.0163934;7pkt 7fpkt"];
1391--5516[label="0.00869565;4pkt 4fpkt"];
1391--5518[label="0.0300601;15pkt 15fpkt"];
1391--5526[label="0.00194175;1pkt 1fpkt"];
1391--5550[label="0.0152505;7pkt 7fpkt"];
1391--5650[label="0.274725;25pkt 25fpkt"];
1391--6179[label="0.000862069;1pkt 1fpkt"];
1391--6606[label="1;1903pkt 1903fpkt"];
1391--6684[label="0.888889;40pkt 40fpkt"];
1391--6838[label="0.00406955;11pkt 11fpkt"];
1391--6844[label="0.0126984;8pkt 8fpkt"];
1391--7258[label="0.00909091;1pkt 1fpkt"];
1391--7796[label="0.000596659;1pkt 1fpkt"];
1391--7946[label="0.186047;24pkt 24fpkt"];
1391--8154[label="0.00188324;1pkt 1fpkt"];
1391--8182[label="0.0183767;12pkt 12fpkt"];
1391--8184[label="0.024735;21pkt 21fpkt"];
1391--8212[label="0.0153257;12pkt 12fpkt"];
1391--8216[label="0.0234342;55pkt 55fpkt"];
1391--8273[label="0.0178282;11pkt 11fpkt"];
1391--8512[label="0.0645161;2pkt 2fpkt"];
1391--8572[label="0.0523691;21pkt 21fpkt"];
1391--8675[label="0.0918367;18pkt 18fpkt"];
1391--8879[label="0.00295967;8pkt 8fpkt"];
1391--9066[label="0.0183767;12pkt 12fpkt"];
1391--9177[label="0.0123609;30pkt 30fpkt"];
1391--9217[label="0.0123609;30pkt 30fpkt"];
1391--9251[label="0.0123609;30pkt 30fpkt"];
1474--6606[label="0.707547;75pkt 75fpkt"];
1474--9177[label="0.122642;13pkt 13fpkt"];
1474--9217[label="0.122642;13pkt 13fpkt"];
1474--9251[label="0.122642;13pkt 13fpkt"];
1474--9361[label="0.00943396;1pkt 1fpkt"];
1474--13285[label="0.00943396;1pkt 1fpkt"];
1474--15297[label="0.00943396;1pkt 1fpkt"];
2371--2606[label="0.00869565;1pkt 1fpkt"];
2371--3757[label="0.00869565;1pkt 1fpkt"];
2371--6606[label="0.643478;74pkt 74fpkt"];
2371--6684[label="1;45pkt 45fpkt"];
2371--9177[label="0.165217;19pkt 19fpkt"];
2371--9217[label="0.165217;19pkt 19fpkt"];
2371--9251[label="0.165217;19pkt 19fpkt"];
2371--9466[label="0.0348837;3pkt 3fpkt"];
3825--3871[label="0.013245;2pkt 2fpkt"];
3825--3904[label="0.0306122;6pkt 6fpkt"];
3825--3967[label="0.25;1pkt 1fpkt"];
3825--4178[label="0.00641026;3pkt 3fpkt"];
3825--4222[label="0.00213675;1pkt 1fpkt"];
3825--4231[label="0.00213675;1pkt 1fpkt"];
3825--4382[label="0.00840336;1pkt 1fpkt"];
3825--4683[label="0.00641026;3pkt 3fpkt"];
3825--4696[label="0.0042735;2pkt 2fpkt"];
3825--5488[label="0.00854701;4pkt 4fpkt"];
3825--5518[label="0.00213675;1pkt 1fpkt"];
3825--5650[label="0.10989;10pkt 10fpkt"];
3825--6844[label="0.0042735;2pkt 2fpkt"];
3825--6898[label="0.00213675;1pkt 1fpkt"];
3825--8010[label="0.00840336;1pkt 1fpkt"];
3825--8182[label="0.00213675;1pkt 1fpkt"];
3825--8184[label="0.0042735;2pkt 2fpkt"];
3825--8212[label="0.00641026;3pkt 3fpkt"];
3825--8675[label="0.0306122;6pkt 6fpkt"];
3825--9066[label="0.00213675;1pkt 1fpkt"];
3825--9103[label="0.00840336;1pkt 1fpkt"];
3825--9197[label="0.00854701;4pkt 4fpkt"];
5650--6606[label="0.230769;21pkt 21fpkt"];
5650--6634[label="0.153846;14pkt 14fpkt"];
5650--13056[label="0.0253165;2pkt 2fpkt"];
6606--6684[label="0.888889;40pkt 40fpkt"];
6606--6838[label="0.00525486;10pkt 10fpkt"];
6606--6844[label="0.0126984;8pkt 8fpkt"];
6606--7796[label="0.000596659;1pkt 1fpkt"];
6606--7946[label="0.186047;24pkt 24fpkt"];
6606--8182[label="0.0153139;10pkt 10fpkt"];
6606--8184[label="0.0223793;19pkt 19fpkt"];
6606--8212[label="0.0127714;10pkt 10fpkt"];
6606--8216[label="0.0215449;41pkt 41fpkt"];
6606--8273[label="0.0178282;11pkt 11fpkt"];
6606--8512[label="0.0645161;2pkt 2fpkt"];
6606--8572[label="0.0349127;14pkt 14fpkt"];
6606--8675[label="0.0714286;14pkt 14fpkt"];
6606--8879[label="0.00420389;8pkt 8fpkt"];
6606--9066[label="0.0153139;10pkt 10fpkt"];
6606--9177[label="0.0157646;30pkt 30fpkt"];
6606--9217[label="0.0157646;30pkt 30fpkt"];
6606--9251[label="0.0157646;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="212.21.129.56"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
1592[label="142.226.144.95;s;14pkt 14fpkt", shape=diamond, color=yellow];
1627[label="107.100.252.42;d;10pkt 10fpkt", shape=diamond, color=yellow];
2290[label="107.100.252.40;d;6pkt 6fpkt", shape=diamond, color=yellow];
2982[label="142.226.200.54;s;2pkt 2fpkt", shape=diamond, color=yellow];
6978[label="107.100.252.40;d;5pkt 5fpkt", shape=hexagon, color=black];
8652[label="142.226.144.95;s;14pkt 14fpkt", shape=hexagon, color=black];
10932[label="142.226.144.95;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.144.95:80, 107.100.252.40:*}[36%]&lt;BR/&gt;{142.226.144.95:80, 107.100.252.42:*}[28%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62493: (3.0303%)&lt;BR/&gt; 58050: (3.0303%)&lt;BR/&gt; 52364: (3.0303%)&lt;BR/&gt; 52254: (3.0303%)&gt;];
}
1592--1627[label="0.6;6pkt 6fpkt"];
1592--2290[label="0.666667;4pkt 4fpkt"];
1592--6978[label="0.6;3pkt 3fpkt"];
1592--8652[label="1;14pkt 14fpkt"];
1592--9163[label="0.0714286;1pkt 1fpkt"];
1592--9194[label="0.0714286;1pkt 1fpkt"];
1592--9198[label="0.0714286;1pkt 1fpkt"];
1592--9234[label="0.0714286;1pkt 1fpkt"];
1592--9268[label="0.0714286;1pkt 1fpkt"];
1592--10932[label="0.928571;13pkt 13fpkt"];
1627--8652[label="0.6;6pkt 6fpkt"];
1627--9163[label="0.1;1pkt 1fpkt"];
1627--10932[label="0.5;5pkt 5fpkt"];
2290--8652[label="0.666667;4pkt 4fpkt"];
2290--9198[label="0.166667;1pkt 1fpkt"];
2290--10932[label="0.666667;4pkt 4fpkt"];
2982--6978[label="0.5;1pkt 1fpkt"];
6978--8652[label="0.6;3pkt 3fpkt"];
6978--9163[label="0.4;2pkt 2fpkt"];
6978--10932[label="0.6;3pkt 3fpkt"];
8652--9163[label="0.0714286;1pkt 1fpkt"];
8652--9194[label="0.0714286;1pkt 1fpkt"];
8652--9198[label="0.0714286;1pkt 1fpkt"];
8652--9234[label="0.0714286;1pkt 1fpkt"];
8652--9268[label="0.0714286;1pkt 1fpkt"];
8652--10932[label="0.928571;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.252.40" src_ip="142.226.144.95" src_port="80"/>
      <filter dst_ip="107.100.252.42" src_ip="142.226.144.95" src_port="80"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
1253[label="213.33.130.212;d;27pkt 27fpkt", shape=diamond, color=yellow];
1634[label="18.119.116.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
1675[label="194.110.219.107;s;1pkt 1fpkt", shape=diamond, color=yellow];
6559[label="213.33.130.212;d;27pkt 27fpkt", shape=hexagon, color=black];
11139[label="194.110.219.107;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11889[label="21.68.77.156;231pkt 231fpkt", shape=pentagon, color=darkviolet];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.68.77.156:1273, *:1434}[89.8833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (40.4514%)&lt;BR/&gt; 1273: (40.4514%)&lt;BR/&gt; 51413: (7.63889%)&lt;BR/&gt; 51635: (0.694444%)&lt;BR/&gt; 41461: (0.694444%)&gt;];
}
1253--1634[label="1;1pkt 1fpkt"];
1253--1675[label="1;1pkt 1fpkt"];
1253--6559[label="1;27pkt 27fpkt"];
1253--11139[label="1;1pkt 1fpkt"];
1253--11889[label="0.037037;1pkt 1fpkt"];
1634--6559[label="1;1pkt 1fpkt"];
1675--6559[label="1;1pkt 1fpkt"];
1675--11139[label="1;1pkt 1fpkt"];
6559--11139[label="1;1pkt 1fpkt"];
6559--11889[label="0.037037;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="21.68.77.156" src_port="1273"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_98{
style=filled;
color=gray75;
1644[label="213.55.177.104;s;5pkt 5fpkt", shape=diamond, color=yellow];
1645[label="136.228.14.37;d;2pkt 2fpkt", shape=diamond, color=yellow];
6404[label="213.55.177.104;s;5pkt 5fpkt", shape=hexagon, color=black];
stat98[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.55.177.104:110, 136.228.14.162:1755}[20%]&lt;BR/&gt;{213.55.177.104:25, 136.228.14.37:59577}[20%]&lt;BR/&gt;{213.55.177.104:110, 136.228.14.37:59569}[20%]&lt;BR/&gt;{213.55.177.104:110, 136.228.14.37:59573}[20%]&lt;BR/&gt;{213.55.177.104:110, 136.228.14.37:59576}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (41.6667%)&lt;BR/&gt; 59573: (12.5%)&lt;BR/&gt; 59569: (12.5%)&lt;BR/&gt; 59577: (8.33333%)&lt;BR/&gt; 59576: (8.33333%)&gt;];
}
1644--1645[label="1;2pkt 2fpkt"];
1644--6404[label="1;5pkt 5fpkt"];
1645--6404[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.14.37" dst_port="59576" src_ip="213.55.177.104" src_port="110"/>
      <filter dst_ip="136.228.14.37" dst_port="59573" src_ip="213.55.177.104" src_port="110"/>
      <filter dst_ip="136.228.14.37" dst_port="59569" src_ip="213.55.177.104" src_port="110"/>
      <filter dst_ip="136.228.14.37" dst_port="59577" src_ip="213.55.177.104" src_port="25"/>
      <filter dst_ip="136.228.14.162" dst_port="1755" src_ip="213.55.177.104" src_port="110"/>
    </slice>
    <from sec="1223614829" usec="0"/>
    <to sec="1223615030" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
31[label="162.73.221.31s;17pkt 17fpkt", shape=rectangle, color=red];
1373[label="162.73.221.31;s;25pkt 25fpkt", shape=diamond, color=yellow];
1666[label="221.82.115.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
1667[label="221.82.115.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
6411[label="221.82.115.159;d;1pkt 1fpkt", shape=hexagon, color=black];
9839[label="162.73.221.31;25pkt 25fpkt", shape=pentagon, color=darkviolet];
13525[label="162.73.221.31;24pkt 24fpkt", shape=invtriangle, color=brown];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.221.31:*, 8.186.15.103:80}[24%]&lt;BR/&gt;{162.73.221.31:*, 211.70.108.106:80}[24%]&lt;BR/&gt;{162.73.221.31:*, 213.43.44.108:80}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4841: (3.19149%)&lt;BR/&gt; 4842: (2.65957%)&lt;BR/&gt; 4855: (2.12766%)&lt;BR/&gt; 4854: (2.12766%)&gt;];
}
31--166[label="0.411765;7pkt 7fpkt"];
31--409[label="0.176471;3pkt 3fpkt"];
31--449[label="0.411765;7pkt 7fpkt"];
31--526[label="0.294118;5pkt 5fpkt"];
31--532[label="0.176471;3pkt 3fpkt"];
31--541[label="0.294118;5pkt 5fpkt"];
31--542[label="0.411765;7pkt 7fpkt"];
31--544[label="0.294118;5pkt 5fpkt"];
31--549[label="0.176471;3pkt 3fpkt"];
31--558[label="0.294118;5pkt 5fpkt"];
31--560[label="0.294118;5pkt 5fpkt"];
31--1373[label="1;17pkt 17fpkt"];
31--1664[label="0.5;2pkt 2fpkt"];
31--1666[label="1;1pkt 1fpkt"];
31--1667[label="1;1pkt 1fpkt"];
31--1735[label="1;1pkt 1fpkt"];
31--6411[label="1;1pkt 1fpkt"];
31--6691[label="1;1pkt 1fpkt"];
31--9839[label="1;17pkt 17fpkt"];
31--13525[label="0.941176;16pkt 16fpkt"];
1373--1664[label="0.75;3pkt 3fpkt"];
1373--1666[label="1;1pkt 1fpkt"];
1373--1667[label="1;1pkt 1fpkt"];
1373--1735[label="1;1pkt 1fpkt"];
1373--2124[label="0.24;6pkt 6fpkt"];
1373--6411[label="1;1pkt 1fpkt"];
1373--6601[label="0.24;6pkt 6fpkt"];
1373--6691[label="1;1pkt 1fpkt"];
1373--9839[label="1;25pkt 25fpkt"];
1373--13525[label="1;24pkt 24fpkt"];
1666--6411[label="1;1pkt 1fpkt"];
1666--9839[label="1;1pkt 1fpkt"];
1666--13525[label="1;1pkt 1fpkt"];
1667--9839[label="1;1pkt 1fpkt"];
1667--13525[label="1;1pkt 1fpkt"];
6411--9839[label="1;1pkt 1fpkt"];
6411--13525[label="1;1pkt 1fpkt"];
9839--13525[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="213.43.44.108" dst_port="80" src_ip="162.73.221.31"/>
      <filter dst_ip="211.70.108.106" dst_port="80" src_ip="162.73.221.31"/>
      <filter dst_ip="8.186.15.103" dst_port="80" src_ip="162.73.221.31"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614985" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
1556[label="136.228.138.128;d;6pkt 6fpkt", shape=diamond, color=yellow];
1672[label="195.173.85.34;s;4pkt 4fpkt", shape=diamond, color=yellow];
6146[label="195.173.85.34;s;5pkt 5fpkt", shape=hexagon, color=black];
6385[label="136.228.138.128;d;12pkt 12fpkt", shape=hexagon, color=black];
9880[label="195.173.85.34;16pkt 16fpkt", shape=pentagon, color=darkviolet];
13552[label="195.173.85.34;17pkt 17fpkt", shape=invtriangle, color=brown];
15431[label="195.173.85.34;16pkt 16fpkt", shape=invhouse, color=bisque];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.173.85.34:443, 136.228.138.128:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 49624: (3.28947%)&lt;BR/&gt; 49623: (3.28947%)&lt;BR/&gt; 49622: (3.28947%)&lt;BR/&gt; 49621: (3.28947%)&gt;];
}
1556--1672[label="1;4pkt 4fpkt"];
1556--9880[label="0.666667;4pkt 4fpkt"];
1556--13552[label="0.666667;4pkt 4fpkt"];
1556--15431[label="0.666667;4pkt 4fpkt"];
1672--9880[label="1;4pkt 4fpkt"];
1672--13552[label="1;4pkt 4fpkt"];
1672--15431[label="1;4pkt 4fpkt"];
6146--6385[label="1;5pkt 5fpkt"];
6146--9880[label="0.8;4pkt 4fpkt"];
6146--13552[label="1;5pkt 5fpkt"];
6146--15431[label="0.8;4pkt 4fpkt"];
6385--8213[label="0.0833333;1pkt 1fpkt"];
6385--9880[label="0.75;9pkt 9fpkt"];
6385--13552[label="0.833333;10pkt 10fpkt"];
6385--15431[label="0.75;9pkt 9fpkt"];
9880--13552[label="1;16pkt 16fpkt"];
9880--15431[label="1;16pkt 16fpkt"];
13552--15431[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.138.128" src_ip="195.173.85.34" src_port="443"/>
    </slice>
    <from sec="1223614811" usec="0"/>
    <to sec="1223615644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
708[label="136.228.128.43;d;927pkt 927fpkt", shape=diamond, color=yellow];
1789[label="136.228.161.159;d;400pkt 400fpkt", shape=diamond, color=yellow];
4154[label="212.84.11.216;s;242pkt 242fpkt", shape=diamond, color=yellow];
4224[label="136.228.140.20;d;101pkt 101fpkt", shape=diamond, color=yellow];
4653[label="73.87.176.246;s;71pkt 71fpkt", shape=diamond, color=yellow];
5645[label="160.49.31.90;d;69pkt 69fpkt", shape=diamond, color=yellow];
7097[label="136.228.161.159;d;364pkt 364fpkt", shape=hexagon, color=black];
7510[label="136.228.140.20;d;89pkt 89fpkt", shape=hexagon, color=black];
7720[label="212.84.11.216;s;149pkt 149fpkt", shape=hexagon, color=black];
9957[label="219.209.13.38;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10006[label="105.104.175.40;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10183[label="212.84.22.50;34pkt 34fpkt", shape=pentagon, color=darkviolet];
10635[label="126.20.51.77;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11099[label="54.221.137.105;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11113[label="195.29.101.106;18pkt 18fpkt", shape=pentagon, color=darkviolet];
11165[label="193.131.98.109;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11754[label="8.186.19.148;8pkt 8fpkt", shape=pentagon, color=darkviolet];
12520[label="213.132.100.199;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12757[label="212.84.11.216;254pkt 254fpkt", shape=pentagon, color=darkviolet];
13075[label="139.40.242.239;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13145[label="73.87.176.246;72pkt 72fpkt", shape=pentagon, color=darkviolet];
13955[label="126.20.51.77;26pkt 26fpkt", shape=invtriangle, color=brown];
14183[label="195.29.101.106;17pkt 17fpkt", shape=invtriangle, color=brown];
15017[label="212.84.11.216;254pkt 254fpkt", shape=invtriangle, color=brown];
15174[label="139.40.242.239;4pkt 4fpkt", shape=invtriangle, color=brown];
15219[label="73.87.176.246;72pkt 72fpkt", shape=invtriangle, color=brown];
15747[label="195.29.101.106;17pkt 17fpkt", shape=invhouse, color=bisque];
16201[label="212.84.11.216;254pkt 254fpkt", shape=invhouse, color=bisque];
16284[label="139.40.242.239;4pkt 4fpkt", shape=invhouse, color=bisque];
16304[label="73.87.176.246;72pkt 72fpkt", shape=invhouse, color=bisque];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 136.228.128.43:*}[38.2214%]&lt;BR/&gt;{*:*, *:25}[30.3887%]&lt;BR/&gt;{*:*, 136.228.161.159:*}[23.5571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.7778%)&lt;BR/&gt; 113: (1.83333%)&lt;BR/&gt; 0: (0.527778%)&lt;BR/&gt; 47542: (0.111111%)&lt;BR/&gt; 47419: (0.111111%)&gt;];
}
708--1315[label="1;7pkt 7fpkt"];
708--1696[label="0.508475;30pkt 30fpkt"];
708--2370[label="0.604651;26pkt 26fpkt"];
708--4154[label="0.92562;224pkt 224fpkt"];
708--4653[label="0.0140845;1pkt 1fpkt"];
708--6418[label="0.566038;30pkt 30fpkt"];
708--6683[label="0.604651;26pkt 26fpkt"];
708--6884[label="1;7pkt 7fpkt"];
708--7720[label="0.90604;135pkt 135fpkt"];
708--9177[label="0.0140237;13pkt 13fpkt"];
708--9196[label="0.0528587;49pkt 49fpkt"];
708--9217[label="0.0140237;13pkt 13fpkt"];
708--9251[label="0.0140237;13pkt 13fpkt"];
708--9591[label="0.677419;21pkt 21fpkt"];
708--9957[label="0.266667;4pkt 4fpkt"];
708--10006[label="0.2;2pkt 2fpkt"];
708--10183[label="0.147059;5pkt 5fpkt"];
708--10635[label="0.04;1pkt 1fpkt"];
708--11099[label="0.0769231;1pkt 1fpkt"];
708--11113[label="0.0555556;1pkt 1fpkt"];
708--11165[label="0.111111;1pkt 1fpkt"];
708--11214[label="0.595238;25pkt 25fpkt"];
708--11754[label="0.125;1pkt 1fpkt"];
708--12520[label="0.166667;1pkt 1fpkt"];
708--12757[label="0.88189;224pkt 224fpkt"];
708--13075[label="0.25;1pkt 1fpkt"];
708--13145[label="0.0138889;1pkt 1fpkt"];
708--13955[label="0.0384615;1pkt 1fpkt"];
708--14183[label="0.0588235;1pkt 1fpkt"];
708--14237[label="0.595238;25pkt 25fpkt"];
708--15017[label="0.88189;224pkt 224fpkt"];
708--15174[label="0.25;1pkt 1fpkt"];
708--15219[label="0.0138889;1pkt 1fpkt"];
708--15747[label="0.0588235;1pkt 1fpkt"];
708--16201[label="0.88189;224pkt 224fpkt"];
708--16284[label="0.25;1pkt 1fpkt"];
708--16304[label="0.0138889;1pkt 1fpkt"];
1789--2663[label="0.0526316;5pkt 5fpkt"];
1789--4154[label="0.0206612;5pkt 5fpkt"];
1789--6553[label="0.038961;3pkt 3fpkt"];
1789--7097[label="1;364pkt 364fpkt"];
1789--7720[label="0.0201342;3pkt 3fpkt"];
1789--9177[label="0.0225;9pkt 9fpkt"];
1789--9196[label="0.0225;9pkt 9fpkt"];
1789--9217[label="0.0225;9pkt 9fpkt"];
1789--9251[label="0.0225;9pkt 9fpkt"];
1789--10057[label="0.05;5pkt 5fpkt"];
1789--10535[label="0.111111;1pkt 1fpkt"];
1789--11099[label="0.307692;4pkt 4fpkt"];
1789--11113[label="0.0555556;1pkt 1fpkt"];
1789--11754[label="0.125;1pkt 1fpkt"];
1789--12520[label="0.333333;2pkt 2fpkt"];
1789--12757[label="0.019685;5pkt 5fpkt"];
1789--13654[label="0.0505051;5pkt 5fpkt"];
1789--14183[label="0.0588235;1pkt 1fpkt"];
1789--15017[label="0.019685;5pkt 5fpkt"];
1789--15747[label="0.0588235;1pkt 1fpkt"];
1789--16201[label="0.019685;5pkt 5fpkt"];
4154--4224[label="0.0594059;6pkt 6fpkt"];
4154--5645[label="0.0289855;2pkt 2fpkt"];
4154--6841[label="0.00413223;1pkt 1fpkt"];
4154--7097[label="0.0206612;5pkt 5fpkt"];
4154--7510[label="0.0674157;6pkt 6fpkt"];
4154--7720[label="1;149pkt 149fpkt"];
4154--9130[label="0.00413223;1pkt 1fpkt"];
4154--9196[label="0.115702;28pkt 28fpkt"];
4154--12757[label="0.995868;241pkt 241fpkt"];
4154--15017[label="0.995868;241pkt 241fpkt"];
4154--16201[label="0.995868;241pkt 241fpkt"];
4224--7510[label="1;89pkt 89fpkt"];
4224--7720[label="0.0594059;6pkt 6fpkt"];
4224--9177[label="0.00990099;1pkt 1fpkt"];
4224--9196[label="0.00990099;1pkt 1fpkt"];
4224--9217[label="0.00990099;1pkt 1fpkt"];
4224--9251[label="0.00990099;1pkt 1fpkt"];
4224--9359[label="0.0243902;1pkt 1fpkt"];
4224--10183[label="0.0294118;1pkt 1fpkt"];
4224--12757[label="0.0594059;6pkt 6fpkt"];
4224--13283[label="0.025;1pkt 1fpkt"];
4224--15017[label="0.0594059;6pkt 6fpkt"];
4224--16201[label="0.0594059;6pkt 6fpkt"];
4653--13145[label="1;71pkt 71fpkt"];
4653--15219[label="1;71pkt 71fpkt"];
4653--16304[label="1;71pkt 71fpkt"];
5645--7720[label="0.0289855;2pkt 2fpkt"];
5645--9177[label="0.0289855;2pkt 2fpkt"];
5645--9217[label="0.0289855;2pkt 2fpkt"];
5645--9251[label="0.0289855;2pkt 2fpkt"];
5645--10183[label="0.117647;4pkt 4fpkt"];
5645--12757[label="0.0144928;1pkt 1fpkt"];
5645--15017[label="0.0144928;1pkt 1fpkt"];
5645--16201[label="0.0144928;1pkt 1fpkt"];
7097--7720[label="0.0201342;3pkt 3fpkt"];
7097--9177[label="0.0247253;9pkt 9fpkt"];
7097--9196[label="0.0137363;5pkt 5fpkt"];
7097--9217[label="0.0247253;9pkt 9fpkt"];
7097--9251[label="0.0247253;9pkt 9fpkt"];
7097--10057[label="0.04;4pkt 4fpkt"];
7097--10535[label="0.111111;1pkt 1fpkt"];
7097--11099[label="0.307692;4pkt 4fpkt"];
7097--11113[label="0.0555556;1pkt 1fpkt"];
7097--11754[label="0.125;1pkt 1fpkt"];
7097--12520[label="0.333333;2pkt 2fpkt"];
7097--12757[label="0.019685;5pkt 5fpkt"];
7097--13654[label="0.040404;4pkt 4fpkt"];
7097--14183[label="0.0588235;1pkt 1fpkt"];
7097--15017[label="0.019685;5pkt 5fpkt"];
7097--15747[label="0.0588235;1pkt 1fpkt"];
7097--16201[label="0.019685;5pkt 5fpkt"];
7510--7720[label="0.0674157;6pkt 6fpkt"];
7510--9177[label="0.011236;1pkt 1fpkt"];
7510--9217[label="0.011236;1pkt 1fpkt"];
7510--9251[label="0.011236;1pkt 1fpkt"];
7510--9359[label="0.0243902;1pkt 1fpkt"];
7510--10183[label="0.0294118;1pkt 1fpkt"];
7510--12757[label="0.0674157;6pkt 6fpkt"];
7510--13283[label="0.025;1pkt 1fpkt"];
7510--15017[label="0.0674157;6pkt 6fpkt"];
7510--16201[label="0.0674157;6pkt 6fpkt"];
7720--9130[label="0.00671141;1pkt 1fpkt"];
7720--12757[label="0.993289;148pkt 148fpkt"];
7720--15017[label="0.993289;148pkt 148fpkt"];
7720--16201[label="0.993289;148pkt 148fpkt"];
10635--13955[label="1;25pkt 25fpkt"];
11113--14183[label="1;17pkt 17fpkt"];
11113--15747[label="1;17pkt 17fpkt"];
12757--15017[label="1;254pkt 254fpkt"];
12757--16201[label="1;254pkt 254fpkt"];
13075--15174[label="1;4pkt 4fpkt"];
13075--16284[label="1;4pkt 4fpkt"];
13145--15219[label="1;72pkt 72fpkt"];
13145--16304[label="1;72pkt 72fpkt"];
14183--15747[label="1;17pkt 17fpkt"];
15017--16201[label="1;254pkt 254fpkt"];
15174--16284[label="1;4pkt 4fpkt"];
15219--16304[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.161.159"/>
      <filter dst_port="25"/>
      <filter dst_ip="136.228.128.43" src_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_102{
style=filled;
color=gray75;
194[label="136.228.184.199s;1pkt 1fpkt", shape=rectangle, color=red];
1749[label="213.148.155.83;d;37pkt 37fpkt", shape=diamond, color=yellow];
stat102[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.184.199:*, 213.148.155.83:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1774: (2.63158%)&lt;BR/&gt; 1831: (1.31579%)&lt;BR/&gt; 1829: (1.31579%)&lt;BR/&gt; 1827: (1.31579%)&gt;];
}
194--1749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.148.155.83" dst_port="80" src_ip="136.228.184.199"/>
    </slice>
    <from sec="1223614869" usec="0"/>
    <to sec="1223614895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27213,2.03825,504,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
313[label="136.228.81.20s;49pkt 49fpkt", shape=rectangle, color=red];
348[label="213.43.77.69d;48pkt 48fpkt", shape=rectangle, color=red];
1760[label="136.228.81.20;s;69pkt 69fpkt", shape=diamond, color=yellow];
9653[label="136.228.81.20;68pkt 68fpkt", shape=pentagon, color=darkviolet];
13436[label="136.228.81.20;68pkt 68fpkt", shape=invtriangle, color=brown];
15372[label="136.228.81.20;69pkt 69fpkt", shape=invhouse, color=bisque];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.81.20:*, 213.43.77.69:443}[78.4091%]&lt;BR/&gt;{136.228.81.2:*, 213.43.77.69:443}[21.5909%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1817: (0.808625%)&lt;BR/&gt; 1816: (0.808625%)&lt;BR/&gt; 1813: (0.808625%)&lt;BR/&gt; 1811: (0.808625%)&gt;];
}
313--348[label="0.604167;29pkt 29fpkt"];
313--1759[label="1;49pkt 49fpkt"];
313--1760[label="1;49pkt 49fpkt"];
313--9653[label="1;49pkt 49fpkt"];
313--13436[label="1;49pkt 49fpkt"];
313--15372[label="1;49pkt 49fpkt"];
348--1759[label="1;48pkt 48fpkt"];
348--1760[label="0.604167;29pkt 29fpkt"];
348--9653[label="0.604167;29pkt 29fpkt"];
348--13436[label="0.604167;29pkt 29fpkt"];
348--15372[label="0.604167;29pkt 29fpkt"];
1760--9653[label="1;68pkt 68fpkt"];
1760--13436[label="1;68pkt 68fpkt"];
1760--15372[label="1;69pkt 69fpkt"];
9653--13436[label="1;68pkt 68fpkt"];
9653--15372[label="1;68pkt 68fpkt"];
13436--15372[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="213.43.77.69" dst_port="443" src_ip="136.228.81.20"/>
      <filter dst_ip="213.43.77.69" dst_port="443" src_ip="136.228.81.2"/>
    </slice>
    <from sec="1223614873" usec="0"/>
    <to sec="1223614908" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
132[label="136.228.64.135s;1pkt 1fpkt", shape=rectangle, color=red];
1767[label="212.20.10.96;d;3pkt 3fpkt", shape=diamond, color=yellow];
6405[label="136.228.64.135;s;35pkt 35fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.64.135:62650, *:*}[40%]&lt;BR/&gt;{136.228.64.135:*, 194.169.20.116:53}[28.5714%]&lt;BR/&gt;{136.228.64.135:*, *:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62650: (17.9487%)&lt;BR/&gt; 80: (17.9487%)&lt;BR/&gt; 53: (12.8205%)&lt;BR/&gt; 60233: (3.84615%)&lt;BR/&gt; 62797: (2.5641%)&gt;];
}
132--1646[label="1;1pkt 1fpkt"];
132--1767[label="1;1pkt 1fpkt"];
132--6405[label="1;1pkt 1fpkt"];
1767--6405[label="1;3pkt 3fpkt"];
6405--6778[label="0.0571429;2pkt 2fpkt"];
6405--7200[label="0.0285714;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.64.135" src_port="62650"/>
      <filter dst_port="80" src_ip="136.228.64.135"/>
      <filter dst_ip="194.169.20.116" dst_port="53" src_ip="136.228.64.135"/>
    </slice>
    <from sec="1223614830" usec="0"/>
    <to sec="1223615359" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
891[label="142.47.172.1;s;236pkt 236fpkt", shape=diamond, color=yellow];
1853[label="71.167.187.114;d;2pkt 2fpkt", shape=diamond, color=yellow];
9311[label="142.47.172.1;256pkt 256fpkt", shape=pentagon, color=darkviolet];
13259[label="142.47.172.1;257pkt 257fpkt", shape=invtriangle, color=brown];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.47.172.1:0, *:0}[99.6124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
891--1853[label="0.5;1pkt 1fpkt"];
891--4009[label="0.0107527;1pkt 1fpkt"];
891--4164[label="0.00423729;1pkt 1fpkt"];
891--5045[label="0.00423729;1pkt 1fpkt"];
891--5065[label="0.00423729;1pkt 1fpkt"];
891--5070[label="0.00423729;1pkt 1fpkt"];
891--6507[label="0.5;1pkt 1fpkt"];
891--7441[label="0.00423729;1pkt 1fpkt"];
891--8382[label="0.0107527;1pkt 1fpkt"];
891--8555[label="0.00423729;1pkt 1fpkt"];
891--9311[label="0.995763;235pkt 235fpkt"];
891--13259[label="1;236pkt 236fpkt"];
1853--6236[label="0.5;1pkt 1fpkt"];
1853--6507[label="1;2pkt 2fpkt"];
1853--9311[label="0.5;1pkt 1fpkt"];
1853--9334[label="0.5;1pkt 1fpkt"];
1853--13259[label="0.5;1pkt 1fpkt"];
9311--13259[label="1;256pkt 256fpkt"];
</description>
    <slice>
      <filter src_ip="142.47.172.1"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
158[label="20.193.254.159s;1pkt 1fpkt", shape=rectangle, color=red];
570[label="142.243.47.213;d;63pkt 63fpkt", shape=diamond, color=yellow];
1892[label="20.193.254.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
1938[label="72.32.69.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
2011[label="204.186.174.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
2069[label="73.194.83.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
2110[label="78.75.80.98;s;1pkt 1fpkt", shape=diamond, color=yellow];
2111[label="202.81.54.29;s;1pkt 1fpkt", shape=diamond, color=yellow];
2173[label="200.90.55.159;s;1pkt 1fpkt", shape=diamond, color=yellow];
2412[label="202.67.42.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
2433[label="110.59.35.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
2625[label="72.111.157.245;s;1pkt 1fpkt", shape=diamond, color=yellow];
2627[label="20.158.173.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
2938[label="71.237.220.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
3232[label="72.54.2.168;s;1pkt 1fpkt", shape=diamond, color=yellow];
4941[label="203.161.67.9;s;1pkt 1fpkt", shape=diamond, color=yellow];
5246[label="70.65.33.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
5306[label="20.121.77.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
6257[label="20.193.254.159;s;1pkt 1fpkt", shape=hexagon, color=black];
6563[label="204.186.174.105;s;1pkt 1fpkt", shape=hexagon, color=black];
6704[label="110.59.35.43;s;1pkt 1fpkt", shape=hexagon, color=black];
7193[label="73.194.83.254;s;1pkt 1fpkt", shape=hexagon, color=black];
7490[label="78.75.80.98;s;1pkt 1fpkt", shape=hexagon, color=black];
7849[label="200.90.55.159;s;1pkt 1fpkt", shape=hexagon, color=black];
10065[label="110.59.35.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10647[label="18.64.210.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10977[label="78.75.80.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13334[label="203.161.67.9;1pkt 1fpkt", shape=invtriangle, color=brown];
14177[label="204.186.174.105;1pkt 1fpkt", shape=invtriangle, color=brown];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.243.47.213:62170}[93.6508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (47.8022%)&lt;BR/&gt; 55126: (2.1978%)&lt;BR/&gt; 24889: (2.1978%)&lt;BR/&gt; 2331: (2.1978%)&lt;BR/&gt; 1423: (2.1978%)&gt;];
}
158--570[label="1;1pkt 1fpkt"];
158--1892[label="1;1pkt 1fpkt"];
158--6257[label="1;1pkt 1fpkt"];
570--572[label="1;1pkt 1fpkt"];
570--1076[label="1;1pkt 1fpkt"];
570--1822[label="1;1pkt 1fpkt"];
570--1892[label="1;1pkt 1fpkt"];
570--1898[label="1;1pkt 1fpkt"];
570--1923[label="1;1pkt 1fpkt"];
570--1935[label="1;1pkt 1fpkt"];
570--1938[label="1;1pkt 1fpkt"];
570--2011[label="1;1pkt 1fpkt"];
570--2035[label="1;1pkt 1fpkt"];
570--2052[label="1;1pkt 1fpkt"];
570--2068[label="1;1pkt 1fpkt"];
570--2069[label="1;1pkt 1fpkt"];
570--2070[label="1;1pkt 1fpkt"];
570--2110[label="1;1pkt 1fpkt"];
570--2111[label="1;1pkt 1fpkt"];
570--2173[label="1;1pkt 1fpkt"];
570--2412[label="1;1pkt 1fpkt"];
570--2433[label="1;1pkt 1fpkt"];
570--2620[label="1;1pkt 1fpkt"];
570--2625[label="1;1pkt 1fpkt"];
570--2627[label="1;1pkt 1fpkt"];
570--2642[label="1;1pkt 1fpkt"];
570--2785[label="1;1pkt 1fpkt"];
570--2809[label="1;1pkt 1fpkt"];
570--2938[label="1;1pkt 1fpkt"];
570--3010[label="1;1pkt 1fpkt"];
570--3232[label="1;1pkt 1fpkt"];
570--3451[label="1;1pkt 1fpkt"];
570--4258[label="1;1pkt 1fpkt"];
570--4392[label="1;1pkt 1fpkt"];
570--4941[label="1;1pkt 1fpkt"];
570--5246[label="1;1pkt 1fpkt"];
570--5282[label="1;1pkt 1fpkt"];
570--5306[label="1;1pkt 1fpkt"];
570--6169[label="1;1pkt 1fpkt"];
570--6257[label="1;1pkt 1fpkt"];
570--6260[label="1;1pkt 1fpkt"];
570--6271[label="1;1pkt 1fpkt"];
570--6312[label="1;1pkt 1fpkt"];
570--6320[label="1;1pkt 1fpkt"];
570--6515[label="1;1pkt 1fpkt"];
570--6541[label="1;1pkt 1fpkt"];
570--6563[label="1;1pkt 1fpkt"];
570--6614[label="1;1pkt 1fpkt"];
570--6704[label="1;1pkt 1fpkt"];
570--6887[label="1;1pkt 1fpkt"];
570--6922[label="1;1pkt 1fpkt"];
570--7161[label="1;1pkt 1fpkt"];
570--7193[label="1;1pkt 1fpkt"];
570--7323[label="1;1pkt 1fpkt"];
570--7428[label="1;1pkt 1fpkt"];
570--7449[label="1;1pkt 1fpkt"];
570--7490[label="1;1pkt 1fpkt"];
570--7613[label="1;1pkt 1fpkt"];
570--7633[label="1;1pkt 1fpkt"];
570--7849[label="1;1pkt 1fpkt"];
570--7873[label="1;1pkt 1fpkt"];
570--8192[label="1;1pkt 1fpkt"];
570--8430[label="1;1pkt 1fpkt"];
570--9006[label="1;1pkt 1fpkt"];
570--9337[label="1;1pkt 1fpkt"];
570--10065[label="1;1pkt 1fpkt"];
570--10647[label="1;1pkt 1fpkt"];
570--10977[label="1;1pkt 1fpkt"];
570--12579[label="0.5;1pkt 1fpkt"];
570--13334[label="1;1pkt 1fpkt"];
570--14177[label="1;1pkt 1fpkt"];
570--14403[label="1;1pkt 1fpkt"];
570--14924[label="0.666667;2pkt 2fpkt"];
570--15130[label="1;1pkt 1fpkt"];
1892--6257[label="1;1pkt 1fpkt"];
2011--6563[label="1;1pkt 1fpkt"];
2011--14177[label="1;1pkt 1fpkt"];
2069--7193[label="1;1pkt 1fpkt"];
2110--7490[label="1;1pkt 1fpkt"];
2110--10977[label="1;1pkt 1fpkt"];
2173--7849[label="1;1pkt 1fpkt"];
2433--6704[label="1;1pkt 1fpkt"];
2433--10065[label="1;1pkt 1fpkt"];
4941--13334[label="1;1pkt 1fpkt"];
6563--14177[label="1;1pkt 1fpkt"];
6704--10065[label="1;1pkt 1fpkt"];
7490--10977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
1093[label="107.199.184.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
1895[label="162.73.216.235;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.199.184.243:8004, 162.73.216.235:49310}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49310: (50%)&lt;BR/&gt; 8004: (50%)&gt;];
}
1093--1895[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.216.235" dst_port="49310" src_ip="107.199.184.243" src_port="8004"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
1907[label="207.152.202.236;d;85pkt 85fpkt", shape=diamond, color=yellow];
1908[label="204.77.26.186;s;85pkt 85fpkt", shape=diamond, color=yellow];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.77.26.186:22, 207.152.202.236:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60940: (0.588235%)&lt;BR/&gt; 60567: (0.588235%)&lt;BR/&gt; 60220: (0.588235%)&lt;BR/&gt; 59683: (0.588235%)&gt;];
}
1907--1908[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="207.152.202.236" src_ip="204.77.26.186" src_port="22"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615214" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_113{
style=filled;
color=gray75;
77[label="212.138.109.68s;1pkt 1fpkt", shape=rectangle, color=red];
1200[label="136.228.114.93;d;2pkt 2fpkt", shape=diamond, color=yellow];
1958[label="212.138.109.68;s;2pkt 2fpkt", shape=diamond, color=yellow];
6284[label="212.138.109.68;s;2pkt 2fpkt", shape=hexagon, color=black];
7169[label="136.228.114.93;d;2pkt 2fpkt", shape=hexagon, color=black];
10462[label="212.138.109.68;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat113[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.122.241.56:80, 136.228.114.93:4003}[33.3333%]&lt;BR/&gt;{212.138.109.68:80, 136.228.214.244:4269}[33.3333%]&lt;BR/&gt;{212.138.109.68:80, 136.228.114.93:4172}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4172: (30%)&lt;BR/&gt; 4269: (10%)&lt;BR/&gt; 4003: (10%)&gt;];
}
77--1200[label="1;1pkt 1fpkt"];
77--1958[label="1;1pkt 1fpkt"];
77--6284[label="1;1pkt 1fpkt"];
77--7169[label="1;1pkt 1fpkt"];
77--9163[label="1;1pkt 1fpkt"];
77--9194[label="1;1pkt 1fpkt"];
77--9234[label="1;1pkt 1fpkt"];
77--9268[label="1;1pkt 1fpkt"];
77--10462[label="1;1pkt 1fpkt"];
1200--1958[label="0.5;1pkt 1fpkt"];
1200--6284[label="0.5;1pkt 1fpkt"];
1200--7169[label="1;2pkt 2fpkt"];
1200--9163[label="1;2pkt 2fpkt"];
1200--9194[label="0.5;1pkt 1fpkt"];
1200--9234[label="0.5;1pkt 1fpkt"];
1200--9268[label="0.5;1pkt 1fpkt"];
1200--10462[label="1;1pkt 1fpkt"];
1958--6284[label="1;2pkt 2fpkt"];
1958--7169[label="0.5;1pkt 1fpkt"];
1958--9163[label="0.5;1pkt 1fpkt"];
1958--9194[label="0.5;1pkt 1fpkt"];
1958--9234[label="0.5;1pkt 1fpkt"];
1958--9268[label="0.5;1pkt 1fpkt"];
1958--10462[label="1;1pkt 1fpkt"];
6284--7169[label="0.5;1pkt 1fpkt"];
6284--9163[label="0.5;1pkt 1fpkt"];
6284--9194[label="0.5;1pkt 1fpkt"];
6284--9234[label="0.5;1pkt 1fpkt"];
6284--9268[label="0.5;1pkt 1fpkt"];
6284--10462[label="1;1pkt 1fpkt"];
7169--9163[label="1;2pkt 2fpkt"];
7169--9194[label="0.5;1pkt 1fpkt"];
7169--9234[label="0.5;1pkt 1fpkt"];
7169--9268[label="0.5;1pkt 1fpkt"];
7169--10462[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.114.93" dst_port="4172" src_ip="212.138.109.68" src_port="80"/>
      <filter dst_ip="136.228.214.244" dst_port="4269" src_ip="212.138.109.68" src_port="80"/>
      <filter dst_ip="136.228.114.93" dst_port="4003" src_ip="204.122.241.56" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.228.67.77"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615628" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
905[label="142.226.154.229;s;308pkt 308fpkt", shape=diamond, color=yellow];
2140[label="107.100.253.76;d;183pkt 183fpkt", shape=diamond, color=yellow];
2193[label="193.52.217.53;d;129pkt 129fpkt", shape=diamond, color=yellow];
4246[label="142.226.211.116;s;38pkt 38fpkt", shape=diamond, color=yellow];
4702[label="107.100.249.34;d;30pkt 30fpkt", shape=diamond, color=yellow];
6908[label="107.100.253.76;d;89pkt 89fpkt", shape=hexagon, color=black];
10393[label="142.226.105.64;44pkt 44fpkt", shape=pentagon, color=darkviolet];
11268[label="142.226.211.116;41pkt 41fpkt", shape=pentagon, color=darkviolet];
12945[label="142.226.154.229;330pkt 330fpkt", shape=pentagon, color=darkviolet];
13162[label="142.226.232.248;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13310[label="153.109.154.6;6pkt 6fpkt", shape=invtriangle, color=brown];
14262[label="142.226.211.116;41pkt 41fpkt", shape=invtriangle, color=brown];
15117[label="142.226.154.229;330pkt 330fpkt", shape=invtriangle, color=brown];
15785[label="142.226.211.116;41pkt 41fpkt", shape=invhouse, color=bisque];
16251[label="142.226.154.229;330pkt 330fpkt", shape=invhouse, color=bisque];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.154.229:80, 107.100.253.76:*}[39.839%]&lt;BR/&gt;{*:80, 193.52.217.53:*}[26.3581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.82%)&lt;BR/&gt; 53: (0.257202%)&lt;BR/&gt; 65101: (0.154321%)&lt;BR/&gt; 64830: (0.154321%)&lt;BR/&gt; 63168: (0.154321%)&gt;];
}
905--2140[label="1;183pkt 183fpkt"];
905--2193[label="0.155039;20pkt 20fpkt"];
905--2612[label="0.075;6pkt 6fpkt"];
905--2742[label="0.107143;15pkt 15fpkt"];
905--2752[label="0.0675676;10pkt 10fpkt"];
905--2776[label="0.0388889;7pkt 7fpkt"];
905--4290[label="0.321429;45pkt 45fpkt"];
905--4746[label="0.0630631;7pkt 7fpkt"];
905--5101[label="0.0107527;1pkt 1fpkt"];
905--5570[label="0.161765;11pkt 11fpkt"];
905--6592[label="0.205882;14pkt 14fpkt"];
905--6799[label="0.075;6pkt 6fpkt"];
905--6908[label="1;89pkt 89fpkt"];
905--7491[label="0.0841121;9pkt 9fpkt"];
905--8227[label="0.037037;6pkt 6fpkt"];
905--9078[label="0.037037;6pkt 6fpkt"];
905--9163[label="0.0909091;28pkt 28fpkt"];
905--9194[label="0.0551948;17pkt 17fpkt"];
905--9198[label="0.0551948;17pkt 17fpkt"];
905--9234[label="0.0551948;17pkt 17fpkt"];
905--9268[label="0.0551948;17pkt 17fpkt"];
905--12945[label="1;308pkt 308fpkt"];
905--15117[label="1;308pkt 308fpkt"];
905--16251[label="1;308pkt 308fpkt"];
2140--6908[label="1;89pkt 89fpkt"];
2140--9163[label="0.0655738;12pkt 12fpkt"];
2140--9194[label="0.0655738;12pkt 12fpkt"];
2140--9198[label="0.0655738;12pkt 12fpkt"];
2140--9234[label="0.0655738;12pkt 12fpkt"];
2140--9268[label="0.0655738;12pkt 12fpkt"];
2140--12945[label="1;183pkt 183fpkt"];
2140--15117[label="1;183pkt 183fpkt"];
2140--16251[label="1;183pkt 183fpkt"];
2193--2655[label="0.0620155;8pkt 8fpkt"];
2193--3831[label="0.183099;13pkt 13fpkt"];
2193--3848[label="0.11828;11pkt 11fpkt"];
2193--4246[label="0.184211;7pkt 7fpkt"];
2193--6335[label="0.0387597;5pkt 5fpkt"];
2193--7168[label="0.0581395;5pkt 5fpkt"];
2193--7759[label="0.00775194;1pkt 1fpkt"];
2193--8283[label="0.163934;10pkt 10fpkt"];
2193--9163[label="0.0930233;12pkt 12fpkt"];
2193--9194[label="0.0542636;7pkt 7fpkt"];
2193--9198[label="0.0697674;9pkt 9fpkt"];
2193--9234[label="0.0542636;7pkt 7fpkt"];
2193--9268[label="0.0542636;7pkt 7fpkt"];
2193--9964[label="0.00775194;1pkt 1fpkt"];
2193--10393[label="0.659091;29pkt 29fpkt"];
2193--10515[label="0.0434783;1pkt 1fpkt"];
2193--11268[label="0.170732;7pkt 7fpkt"];
2193--11523[label="0.166667;9pkt 9fpkt"];
2193--11594[label="0.103093;10pkt 10fpkt"];
2193--12397[label="0.0620155;8pkt 8fpkt"];
2193--12945[label="0.155039;20pkt 20fpkt"];
2193--13162[label="0.25;1pkt 1fpkt"];
2193--13310[label="0.166667;1pkt 1fpkt"];
2193--13599[label="0.00775194;1pkt 1fpkt"];
2193--14262[label="0.170732;7pkt 7fpkt"];
2193--15117[label="0.155039;20pkt 20fpkt"];
2193--15785[label="0.170732;7pkt 7fpkt"];
2193--16251[label="0.155039;20pkt 20fpkt"];
4246--4702[label="1;30pkt 30fpkt"];
4246--9163[label="0.0526316;2pkt 2fpkt"];
4246--9194[label="0.0789474;3pkt 3fpkt"];
4246--9198[label="0.0526316;2pkt 2fpkt"];
4246--9234[label="0.0789474;3pkt 3fpkt"];
4246--9268[label="0.0789474;3pkt 3fpkt"];
4246--11268[label="0.973684;37pkt 37fpkt"];
4246--14262[label="0.973684;37pkt 37fpkt"];
4246--15785[label="0.973684;37pkt 37fpkt"];
4702--9163[label="0.0666667;2pkt 2fpkt"];
4702--9194[label="0.0666667;2pkt 2fpkt"];
4702--9198[label="0.0333333;1pkt 1fpkt"];
4702--9234[label="0.0666667;2pkt 2fpkt"];
4702--9268[label="0.0666667;2pkt 2fpkt"];
4702--11268[label="0.966667;29pkt 29fpkt"];
4702--14262[label="0.966667;29pkt 29fpkt"];
4702--15785[label="0.966667;29pkt 29fpkt"];
6908--9163[label="0.134831;12pkt 12fpkt"];
6908--12945[label="1;89pkt 89fpkt"];
6908--15117[label="1;89pkt 89fpkt"];
6908--16251[label="1;89pkt 89fpkt"];
11268--14262[label="1;41pkt 41fpkt"];
11268--15785[label="1;41pkt 41fpkt"];
12945--15117[label="1;330pkt 330fpkt"];
12945--16251[label="1;330pkt 330fpkt"];
13162--15231[label="1;3pkt 3fpkt"];
14262--15785[label="1;41pkt 41fpkt"];
15117--16251[label="1;330pkt 330fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.217.53" src_port="80"/>
      <filter dst_ip="107.100.253.76" src_ip="142.226.154.229" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_116{
style=filled;
color=gray75;
2071[label="213.43.45.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
2199[label="160.49.182.98;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat116[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.43.45.122:4500, 160.49.182.98:4500}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (100%)&gt;];
}
2071--2199[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.182.98" dst_port="4500" src_ip="213.43.45.122" src_port="4500"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
2215[label="136.228.5.75;d;8pkt 8fpkt", shape=diamond, color=yellow];
2216[label="171.11.89.97;s;8pkt 8fpkt", shape=diamond, color=yellow];
6364[label="171.11.89.97;s;5pkt 5fpkt", shape=hexagon, color=black];
10959[label="171.11.89.97;14pkt 14fpkt", shape=pentagon, color=darkviolet];
14105[label="171.11.89.97;14pkt 14fpkt", shape=invtriangle, color=brown];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.11.89.97:80, 136.228.5.75:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1535: (5.10204%)&lt;BR/&gt; 1534: (5.10204%)&lt;BR/&gt; 1533: (5.10204%)&lt;BR/&gt; 1532: (5.10204%)&gt;];
}
2215--2216[label="1;8pkt 8fpkt"];
2215--6364[label="1;5pkt 5fpkt"];
2215--9163[label="0.25;2pkt 2fpkt"];
2215--10959[label="1;8pkt 8fpkt"];
2215--14105[label="1;8pkt 8fpkt"];
2216--6364[label="1;5pkt 5fpkt"];
2216--9163[label="0.25;2pkt 2fpkt"];
2216--10959[label="1;8pkt 8fpkt"];
2216--14105[label="1;8pkt 8fpkt"];
6364--9163[label="0.4;2pkt 2fpkt"];
6364--10959[label="1;5pkt 5fpkt"];
6364--14105[label="1;5pkt 5fpkt"];
10959--14105[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.5.75" src_ip="171.11.89.97" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
108[label="136.228.172.110s;2pkt 2fpkt", shape=rectangle, color=red];
2230[label="136.228.172.110;s;57pkt 57fpkt", shape=diamond, color=yellow];
2564[label="192.105.74.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
5352[label="192.105.69.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
5428[label="192.105.68.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.172.110:*, 193.52.137.144:80}[64.4068%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2048: (2.38095%)&lt;BR/&gt; 2025: (1.5873%)&lt;BR/&gt; 1937: (1.5873%)&lt;BR/&gt; 2058: (0.793651%)&gt;];
}
108--2230[label="0.5;1pkt 1fpkt"];
108--2564[label="0.5;1pkt 1fpkt"];
108--5428[label="1;1pkt 1fpkt"];
2230--2805[label="0.666667;38pkt 38fpkt"];
2230--3321[label="0.0877193;5pkt 5fpkt"];
2230--5352[label="1;1pkt 1fpkt"];
2230--5428[label="1;1pkt 1fpkt"];
2230--6245[label="0.192982;11pkt 11fpkt"];
2230--6621[label="0.666667;38pkt 38fpkt"];
2230--6940[label="0.0877193;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.137.144" dst_port="80" src_ip="136.228.172.110"/>
    </slice>
    <from sec="1223614977" usec="0"/>
    <to sec="1223615605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
1652[label="142.76.84.14;s;108pkt 108fpkt", shape=diamond, color=yellow];
2231[label="136.228.241.138;d;106pkt 106fpkt", shape=diamond, color=yellow];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.76.84.14:*, 136.228.241.138:80}[96.3303%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63763: (0.46729%)&lt;BR/&gt; 62303: (0.46729%)&lt;BR/&gt; 62283: (0.46729%)&lt;BR/&gt; 62259: (0.46729%)&gt;];
}
1652--2231[label="0.990566;105pkt 105fpkt"];
2231--3969[label="0.00943396;1pkt 1fpkt"];
2231--10265[label="0.00943396;1pkt 1fpkt"];
2231--13761[label="0.00943396;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.241.138" dst_port="80" src_ip="142.76.84.14"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615167" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_120{
style=filled;
color=gray75;
2340[label="136.228.77.0;s;361pkt 361fpkt", shape=diamond, color=yellow];
2341[label="21.18.115.178;d;361pkt 361fpkt", shape=diamond, color=yellow];
7003[label="136.228.77.0;s;361pkt 361fpkt", shape=hexagon, color=black];
8120[label="21.18.115.178;d;181pkt 181fpkt", shape=hexagon, color=black];
stat120[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.77.0:443, 21.18.115.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63219: (0.158228%)&lt;BR/&gt; 63218: (0.158228%)&lt;BR/&gt; 63216: (0.158228%)&lt;BR/&gt; 63215: (0.158228%)&gt;];
}
2340--2341[label="1;361pkt 361fpkt"];
2340--7003[label="1;361pkt 361fpkt"];
2340--8120[label="1;181pkt 181fpkt"];
2341--7003[label="1;361pkt 361fpkt"];
2341--8120[label="1;181pkt 181fpkt"];
7003--8120[label="1;181pkt 181fpkt"];
</description>
    <slice>
      <filter dst_ip="21.18.115.178" src_ip="136.228.77.0" src_port="443"/>
    </slice>
    <from sec="1223615407" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
2339[label="136.228.77.0;d;361pkt 361fpkt", shape=diamond, color=yellow];
2342[label="21.18.115.178;s;361pkt 361fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.18.115.178:*, 136.228.77.0:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 63415: (0.138504%)&lt;BR/&gt; 63414: (0.138504%)&lt;BR/&gt; 63413: (0.138504%)&lt;BR/&gt; 63412: (0.138504%)&gt;];
}
2339--2342[label="1;361pkt 361fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.77.0" dst_port="443" src_ip="21.18.115.178"/>
    </slice>
    <from sec="1223615407" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
1741[label="164.25.96.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
2403[label="107.80.0.144;s;1pkt 1fpkt", shape=diamond, color=yellow];
6427[label="164.25.96.49;d;1pkt 1fpkt", shape=hexagon, color=black];
11685[label="107.80.0.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.80.0.144:20143, 164.25.96.49:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20143: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
1741--2403[label="1;1pkt 1fpkt"];
1741--6427[label="1;1pkt 1fpkt"];
1741--11685[label="1;1pkt 1fpkt"];
2403--6427[label="1;1pkt 1fpkt"];
2403--11685[label="1;1pkt 1fpkt"];
6427--11685[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.96.49" dst_port="25" src_ip="107.80.0.144" src_port="20143"/>
    </slice>
    <from sec="1223614867" usec="0"/>
    <to sec="1223614902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
113[label="136.228.241.117s;1pkt 1fpkt", shape=rectangle, color=red];
2434[label="212.106.1.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.241.117:49550, 212.106.1.33:25}[50%]&lt;BR/&gt;{136.228.241.117:49579, 212.106.1.33:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 49550: (33.3333%)&lt;BR/&gt; 49579: (16.6667%)&gt;];
}
113--1235[label="1;1pkt 1fpkt"];
113--2434[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.106.1.33" dst_port="25" src_ip="136.228.241.117" src_port="49579"/>
      <filter dst_ip="212.106.1.33" dst_port="25" src_ip="136.228.241.117" src_port="49550"/>
    </slice>
    <from sec="1223614889" usec="0"/>
    <to sec="1223615505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_125{
style=filled;
color=gray75;
2258[label="142.226.175.128;s;147pkt 147fpkt", shape=diamond, color=yellow];
2458[label="204.82.233.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
3201[label="142.226.175.129;s;261pkt 261fpkt", shape=diamond, color=yellow];
3970[label="194.29.114.5;d;27pkt 27fpkt", shape=diamond, color=yellow];
4013[label="194.29.109.107;d;2pkt 2fpkt", shape=diamond, color=yellow];
5179[label="204.64.92.122;d;111pkt 111fpkt", shape=diamond, color=yellow];
5336[label="203.16.26.71;d;2pkt 2fpkt", shape=diamond, color=yellow];
5865[label="158.203.8.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
7264[label="142.226.175.128;s;147pkt 147fpkt", shape=hexagon, color=black];
8317[label="204.64.92.122;d;97pkt 97fpkt", shape=hexagon, color=black];
8700[label="194.29.114.5;d;27pkt 27fpkt", shape=hexagon, color=black];
8761[label="203.16.26.71;d;2pkt 2fpkt", shape=hexagon, color=black];
11431[label="142.226.175.128;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14352[label="142.226.175.128;2pkt 2fpkt", shape=invtriangle, color=brown];
15830[label="142.226.175.128;2pkt 2fpkt", shape=invhouse, color=bisque];
stat125[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.175.129:*, *:*}[63.9706%]&lt;BR/&gt;{142.226.175.128:*, *:*}[36.0294%]&lt;BR/&gt;{*:*, 204.64.92.122:*}[27.2059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (9.55529%)&lt;BR/&gt; 3124: (9.49519%)&lt;BR/&gt; 8090: (8.35337%)&lt;BR/&gt; 9090: (5.16827%)&lt;BR/&gt; 3127: (4.6875%)&gt;];
}
2258--2458[label="1;1pkt 1fpkt"];
2258--3970[label="1;27pkt 27fpkt"];
2258--5179[label="0.396396;44pkt 44fpkt"];
2258--5336[label="1;2pkt 2fpkt"];
2258--5529[label="0.218391;19pkt 19fpkt"];
2258--5865[label="1;1pkt 1fpkt"];
2258--7264[label="1;147pkt 147fpkt"];
2258--8317[label="0.402062;39pkt 39fpkt"];
2258--8700[label="1;27pkt 27fpkt"];
2258--8761[label="1;2pkt 2fpkt"];
2258--11431[label="1;3pkt 3fpkt"];
2258--14352[label="1;2pkt 2fpkt"];
2258--15830[label="1;2pkt 2fpkt"];
2458--7264[label="1;1pkt 1fpkt"];
3201--4013[label="1;2pkt 2fpkt"];
3201--5179[label="0.603604;67pkt 67fpkt"];
3201--5529[label="0.0229885;2pkt 2fpkt"];
3201--8317[label="0.597938;58pkt 58fpkt"];
3201--9163[label="0.00383142;1pkt 1fpkt"];
3201--9198[label="0.0421456;11pkt 11fpkt"];
3970--7264[label="1;27pkt 27fpkt"];
3970--8700[label="1;27pkt 27fpkt"];
3970--11431[label="0.666667;2pkt 2fpkt"];
3970--14352[label="1;2pkt 2fpkt"];
3970--15830[label="1;2pkt 2fpkt"];
5179--7264[label="0.396396;44pkt 44fpkt"];
5179--8317[label="1;97pkt 97fpkt"];
5336--7264[label="1;2pkt 2fpkt"];
5336--8761[label="1;2pkt 2fpkt"];
5865--7264[label="1;1pkt 1fpkt"];
7264--8317[label="0.402062;39pkt 39fpkt"];
7264--8700[label="1;27pkt 27fpkt"];
7264--8761[label="1;2pkt 2fpkt"];
7264--11431[label="1;3pkt 3fpkt"];
7264--14352[label="1;2pkt 2fpkt"];
7264--15830[label="1;2pkt 2fpkt"];
8700--11431[label="0.666667;2pkt 2fpkt"];
8700--14352[label="1;2pkt 2fpkt"];
8700--15830[label="1;2pkt 2fpkt"];
11431--14352[label="1;2pkt 2fpkt"];
11431--15830[label="1;2pkt 2fpkt"];
14352--15830[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="142.226.175.129"/>
      <filter src_ip="142.226.175.128"/>
      <filter dst_ip="204.64.92.122"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
4[label="162.73.209.3s;1pkt 1fpkt", shape=rectangle, color=red];
2380[label="162.73.209.3;s;30pkt 30fpkt", shape=diamond, color=yellow];
2484[label="192.84.39.44;d;1pkt 1fpkt", shape=diamond, color=yellow];
4085[label="192.84.39.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
6443[label="192.84.39.44;d;1pkt 1fpkt", shape=hexagon, color=black];
7974[label="162.73.209.3;s;30pkt 30fpkt", shape=hexagon, color=black];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.209.3:*, 192.84.37.184:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.875%)&lt;BR/&gt; 55289: (3.90625%)&lt;BR/&gt; 55333: (2.34375%)&lt;BR/&gt; 55348: (1.5625%)&lt;BR/&gt; 55347: (1.5625%)&gt;];
}
4--544[label="1;1pkt 1fpkt"];
4--560[label="1;1pkt 1fpkt"];
4--2380[label="1;1pkt 1fpkt"];
4--2484[label="1;1pkt 1fpkt"];
4--6443[label="1;1pkt 1fpkt"];
4--7974[label="1;1pkt 1fpkt"];
2380--2484[label="1;1pkt 1fpkt"];
2380--4085[label="1;1pkt 1fpkt"];
2380--6443[label="1;1pkt 1fpkt"];
2380--7974[label="1;30pkt 30fpkt"];
2380--9178[label="0.0333333;1pkt 1fpkt"];
2380--9218[label="0.0333333;1pkt 1fpkt"];
2380--9252[label="0.0333333;1pkt 1fpkt"];
2484--6443[label="1;1pkt 1fpkt"];
2484--7974[label="1;1pkt 1fpkt"];
4085--7974[label="1;1pkt 1fpkt"];
6443--7974[label="1;1pkt 1fpkt"];
7974--9178[label="0.0333333;1pkt 1fpkt"];
7974--9218[label="0.0333333;1pkt 1fpkt"];
7974--9252[label="0.0333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.84.37.184" dst_port="80" src_ip="162.73.209.3"/>
    </slice>
    <from sec="1223614853" usec="0"/>
    <to sec="1223615574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
2517[label="72.112.61.95;s;3pkt 3fpkt", shape=diamond, color=yellow];
10926[label="72.112.61.95;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14091[label="72.112.61.95;2pkt 2fpkt", shape=invtriangle, color=brown];
15703[label="72.112.61.95;2pkt 2fpkt", shape=invhouse, color=bisque];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.112.61.95:80, 136.228.5.143:49996}[33.3333%]&lt;BR/&gt;{72.112.61.95:80, 136.228.5.143:49999}[33.3333%]&lt;BR/&gt;{72.112.61.95:80, 136.228.5.143:50002}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50002: (22.2222%)&lt;BR/&gt; 49999: (22.2222%)&lt;BR/&gt; 49996: (5.55556%)&gt;];
}
2517--10926[label="1;2pkt 2fpkt"];
2517--14091[label="1;2pkt 2fpkt"];
2517--15703[label="1;2pkt 2fpkt"];
10926--14091[label="1;2pkt 2fpkt"];
10926--15703[label="1;2pkt 2fpkt"];
14091--15703[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.5.143" dst_port="50002" src_ip="72.112.61.95" src_port="80"/>
      <filter dst_ip="136.228.5.143" dst_port="49999" src_ip="72.112.61.95" src_port="80"/>
      <filter dst_ip="136.228.5.143" dst_port="49996" src_ip="72.112.61.95" src_port="80"/>
    </slice>
    <from sec="1223614947" usec="0"/>
    <to sec="1223614966" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
2518[label="136.228.154.85;d;14pkt 14fpkt", shape=diamond, color=yellow];
7030[label="136.228.154.85;d;10pkt 10fpkt", shape=hexagon, color=black];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.233.35:80, 136.228.154.85:*}[57.1429%]&lt;BR/&gt;{107.116.130.147:80, 136.228.154.85:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2103: (4.16667%)&lt;BR/&gt; 2101: (4.16667%)&lt;BR/&gt; 2065: (4.16667%)&lt;BR/&gt; 2063: (4.16667%)&gt;];
}
2518--2519[label="0.666667;8pkt 8fpkt"];
2518--4210[label="0.285714;4pkt 4fpkt"];
2518--7030[label="1;10pkt 10fpkt"];
2518--8213[label="0.285714;4pkt 4fpkt"];
7030--8213[label="0.2;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.154.85" src_ip="213.48.233.35" src_port="80"/>
      <filter dst_ip="136.228.154.85" src_ip="107.116.130.147" src_port="80"/>
    </slice>
    <from sec="1223614948" usec="0"/>
    <to sec="1223615328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15212,2.03841,504,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
321[label="136.228.81.55s;118pkt 118fpkt", shape=rectangle, color=red];
2520[label="213.3.40.249;d;217pkt 217fpkt", shape=diamond, color=yellow];
2521[label="136.228.81.55;s;142pkt 142fpkt", shape=diamond, color=yellow];
10275[label="136.228.81.55;141pkt 141fpkt", shape=pentagon, color=darkviolet];
13765[label="136.228.81.55;142pkt 142fpkt", shape=invtriangle, color=brown];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.81.55:*, 213.3.40.249:443}[65.4378%]&lt;BR/&gt;{136.228.94.129:*, 213.3.40.249:443}[34.5622%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 2816: (0.328947%)&lt;BR/&gt; 2815: (0.328947%)&lt;BR/&gt; 2814: (0.328947%)&lt;BR/&gt; 2813: (0.328947%)&gt;];
}
321--2520[label="1;118pkt 118fpkt"];
321--2521[label="1;118pkt 118fpkt"];
321--10275[label="0.991525;117pkt 117fpkt"];
321--13765[label="1;118pkt 118fpkt"];
2520--2521[label="1;142pkt 142fpkt"];
2520--3137[label="0.345622;75pkt 75fpkt"];
2520--7065[label="0.345622;75pkt 75fpkt"];
2520--10275[label="1;141pkt 141fpkt"];
2520--13765[label="1;142pkt 142fpkt"];
2521--10275[label="1;141pkt 141fpkt"];
2521--13765[label="1;142pkt 142fpkt"];
10275--13765[label="1;141pkt 141fpkt"];
</description>
    <slice>
      <filter dst_ip="213.3.40.249" dst_port="443" src_ip="136.228.81.55"/>
      <filter dst_ip="213.3.40.249" dst_port="443" src_ip="136.228.94.129"/>
    </slice>
    <from sec="1223614948" usec="0"/>
    <to sec="1223615091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.1008,2.05673,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
374[label="195.205.167.202s;1pkt 1fpkt", shape=rectangle, color=red];
2056[label="142.47.174.40;d;114pkt 114fpkt", shape=diamond, color=yellow];
2534[label="195.205.167.202;s;110pkt 110fpkt", shape=diamond, color=yellow];
12575[label="195.205.167.202;110pkt 110fpkt", shape=pentagon, color=darkviolet];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.205.167.202:9568, 142.47.174.40:*}[96.4912%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9568: (49.8507%)&lt;BR/&gt; 1665: (0.597015%)&lt;BR/&gt; 1771: (0.447761%)&lt;BR/&gt; 1770: (0.447761%)&lt;BR/&gt; 1769: (0.447761%)&gt;];
}
374--2056[label="1;1pkt 1fpkt"];
374--2534[label="1;1pkt 1fpkt"];
374--12575[label="1;1pkt 1fpkt"];
2056--2534[label="1;110pkt 110fpkt"];
2056--12575[label="1;110pkt 110fpkt"];
2534--12575[label="1;110pkt 110fpkt"];
</description>
    <slice>
      <filter dst_ip="142.47.174.40" src_ip="195.205.167.202" src_port="9568"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
2452[label="136.228.104.224;d;4pkt 4fpkt", shape=diamond, color=yellow];
2542[label="104.243.251.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
3102[label="104.243.250.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.250.6:80, 136.228.104.224:2977}[25%]&lt;BR/&gt;{104.243.251.18:80, 136.228.104.224:2959}[25%]&lt;BR/&gt;{104.243.253.160:80, 136.228.104.224:3007}[25%]&lt;BR/&gt;{107.40.16.175:80, 136.228.104.224:3042}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2977: (16.6667%)&lt;BR/&gt; 2959: (16.6667%)&lt;BR/&gt; 3042: (8.33333%)&lt;BR/&gt; 3007: (8.33333%)&gt;];
}
2452--2542[label="1;1pkt 1fpkt"];
2452--3102[label="1;1pkt 1fpkt"];
2452--3133[label="1;1pkt 1fpkt"];
2452--9194[label="0.25;1pkt 1fpkt"];
2452--9234[label="0.25;1pkt 1fpkt"];
2452--9268[label="0.25;1pkt 1fpkt"];
2452--11955[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.224" dst_port="3042" src_ip="107.40.16.175" src_port="80"/>
      <filter dst_ip="136.228.104.224" dst_port="3007" src_ip="104.243.253.160" src_port="80"/>
      <filter dst_ip="136.228.104.224" dst_port="2959" src_ip="104.243.251.18" src_port="80"/>
      <filter dst_ip="136.228.104.224" dst_port="2977" src_ip="104.243.250.6" src_port="80"/>
    </slice>
    <from sec="1223614905" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
2522[label="136.228.104.134;d;1pkt 1fpkt", shape=diamond, color=yellow];
2577[label="104.243.251.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
7994[label="136.228.104.134;d;2pkt 2fpkt", shape=hexagon, color=black];
11746[label="209.150.123.147;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12548[label="104.243.251.200;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14501[label="209.150.123.147;1pkt 1fpkt", shape=invtriangle, color=brown];
14909[label="104.243.251.200;1pkt 1fpkt", shape=invtriangle, color=brown];
15911[label="209.150.123.147;1pkt 1fpkt", shape=invhouse, color=bisque];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.150.123.147:80, 136.228.104.134:2970}[50%]&lt;BR/&gt;{104.243.251.200:80, 136.228.104.134:2527}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2527: (27.7778%)&lt;BR/&gt; 2970: (22.2222%)&gt;];
}
2522--2577[label="1;1pkt 1fpkt"];
2522--7994[label="1;1pkt 1fpkt"];
2522--12548[label="1;1pkt 1fpkt"];
2522--14909[label="1;1pkt 1fpkt"];
2577--7994[label="1;1pkt 1fpkt"];
2577--12548[label="1;1pkt 1fpkt"];
2577--14909[label="1;1pkt 1fpkt"];
7994--11746[label="1;1pkt 1fpkt"];
7994--12548[label="1;1pkt 1fpkt"];
7994--14501[label="1;1pkt 1fpkt"];
7994--14909[label="1;1pkt 1fpkt"];
7994--15911[label="1;1pkt 1fpkt"];
11746--14501[label="1;1pkt 1fpkt"];
11746--15911[label="1;1pkt 1fpkt"];
12548--14909[label="1;1pkt 1fpkt"];
14501--15911[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.134" dst_port="2527" src_ip="104.243.251.200" src_port="80"/>
      <filter dst_ip="136.228.104.134" dst_port="2970" src_ip="209.150.123.147" src_port="80"/>
    </slice>
    <from sec="1223614948" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_133{
style=filled;
color=gray75;
2602[label="59.212.63.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
6786[label="59.212.63.192;s;1pkt 1fpkt", shape=hexagon, color=black];
12407[label="59.212.63.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14843[label="59.212.63.192;1pkt 1fpkt", shape=invtriangle, color=brown];
stat133[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.212.63.192:0, 212.21.132.185:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2602--6786[label="1;1pkt 1fpkt"];
2602--12407[label="1;1pkt 1fpkt"];
2602--14843[label="1;1pkt 1fpkt"];
6786--12407[label="1;1pkt 1fpkt"];
6786--14843[label="1;1pkt 1fpkt"];
12407--14843[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.132.185" src_ip="59.212.63.192"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_134{
style=filled;
color=gray75;
2672[label="212.21.136.225;s;339pkt 339fpkt", shape=diamond, color=yellow];
2673[label="118.18.252.91;d;336pkt 336fpkt", shape=diamond, color=yellow];
7174[label="212.21.136.225;s;269pkt 269fpkt", shape=hexagon, color=black];
stat134[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.225:139, 118.18.252.91:*}[50.1475%]&lt;BR/&gt;{212.21.136.225:445, 118.18.252.91:*}[48.9676%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.1589%)&lt;BR/&gt; 445: (24.6292%)&lt;BR/&gt; 4864: (0.317797%)&lt;BR/&gt; 4691: (0.317797%)&lt;BR/&gt; 4168: (0.317797%)&gt;];
}
2672--2673[label="1;336pkt 336fpkt"];
2672--3662[label="0.00294985;1pkt 1fpkt"];
2672--7174[label="1;269pkt 269fpkt"];
2673--7174[label="0.988848;266pkt 266fpkt"];
</description>
    <slice>
      <filter dst_ip="118.18.252.91" src_ip="212.21.136.225" src_port="139"/>
      <filter dst_ip="118.18.252.91" src_ip="212.21.136.225" src_port="445"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,002,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
2671[label="212.21.136.225;d;331pkt 331fpkt", shape=diamond, color=yellow];
2674[label="118.18.252.91;s;330pkt 330fpkt", shape=diamond, color=yellow];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{118.18.252.91:*, 212.21.136.225:445}[50%]&lt;BR/&gt;{118.18.252.91:*, 212.21.136.225:139}[49.0964%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1891%)&lt;BR/&gt; 139: (24.6596%)&lt;BR/&gt; 4864: (0.302572%)&lt;BR/&gt; 4691: (0.302572%)&lt;BR/&gt; 4490: (0.302572%)&gt;];
}
2671--2674[label="0.99697;329pkt 329fpkt"];
2671--3663[label="0.00302115;1pkt 1fpkt"];
2671--7010[label="0.00302115;1pkt 1fpkt"];
2671--7388[label="0.00302115;1pkt 1fpkt"];
2671--8930[label="0.00302115;1pkt 1fpkt"];
2671--9192[label="0.00302115;1pkt 1fpkt"];
2671--9232[label="0.00302115;1pkt 1fpkt"];
2671--9266[label="0.00302115;1pkt 1fpkt"];
2671--12387[label="0.00302115;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.225" dst_port="445" src_ip="118.18.252.91"/>
      <filter dst_ip="212.21.136.225" dst_port="139" src_ip="118.18.252.91"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
2726[label="121.172.118.96;s;1042pkt 1042fpkt", shape=diamond, color=yellow];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{121.172.118.96:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56209: (0.0959693%)&lt;BR/&gt; 37117: (0.0959693%)&lt;BR/&gt; 22614: (0.0959693%)&lt;BR/&gt; 17738: (0.0959693%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="121.172.118.96"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,502,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
336[label="204.99.65.173s;564pkt 564fpkt", shape=rectangle, color=red];
3089[label="204.99.65.173;s;1043pkt 1043fpkt", shape=diamond, color=yellow];
3096[label="213.236.29.145;d;1040pkt 1040fpkt", shape=diamond, color=yellow];
6743[label="204.99.65.173;s;260pkt 260fpkt", shape=hexagon, color=black];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.99.65.173:*, 213.236.29.145:22}[99.7124%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 56840: (0.0687994%)&lt;BR/&gt; 56640: (0.0687994%)&lt;BR/&gt; 56623: (0.0687994%)&lt;BR/&gt; 56589: (0.0687994%)&gt;];
}
336--3089[label="1;564pkt 564fpkt"];
336--3096[label="1;564pkt 564fpkt"];
336--6743[label="0.976923;254pkt 254fpkt"];
3089--3096[label="1;1040pkt 1040fpkt"];
3089--6743[label="1;260pkt 260fpkt"];
3096--6743[label="0.988462;257pkt 257fpkt"];
</description>
    <slice>
      <filter dst_ip="213.236.29.145" dst_port="22" src_ip="204.99.65.173"/>
    </slice>
    <from sec="1223615032" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_144{
style=filled;
color=gray75;
50[label="73.206.29.43s;1pkt 1fpkt", shape=rectangle, color=red];
3115[label="73.206.29.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
6748[label="73.206.29.43;s;1pkt 1fpkt", shape=hexagon, color=black];
stat144[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.206.29.43:10818, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10818: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
50--1839[label="1;1pkt 1fpkt"];
50--3115[label="1;1pkt 1fpkt"];
50--6748[label="1;1pkt 1fpkt"];
3115--6748[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="73.206.29.43" src_port="10818"/>
    </slice>
    <from sec="1223615055" usec="0"/>
    <to sec="1223615137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_145{
style=filled;
color=gray75;
211[label="136.228.115.212s;2pkt 2fpkt", shape=rectangle, color=red];
3116[label="136.228.115.212;s;49pkt 49fpkt", shape=diamond, color=yellow];
7350[label="136.228.115.212;s;49pkt 49fpkt", shape=hexagon, color=black];
stat145[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.115.212:*, 192.95.51.29:80}[69.3878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2420: (1.5%)&lt;BR/&gt; 2418: (1.5%)&lt;BR/&gt; 2430: (1%)&lt;BR/&gt; 2426: (1%)&gt;];
}
211--2821[label="1;2pkt 2fpkt"];
211--3116[label="1;2pkt 2fpkt"];
211--7350[label="1;2pkt 2fpkt"];
3116--3228[label="0.0204082;1pkt 1fpkt"];
3116--3765[label="0.0816327;4pkt 4fpkt"];
3116--6626[label="0.44898;22pkt 22fpkt"];
3116--7196[label="0.0204082;1pkt 1fpkt"];
3116--7350[label="1;49pkt 49fpkt"];
3116--7519[label="0.0816327;4pkt 4fpkt"];
3116--8220[label="0.0204082;1pkt 1fpkt"];
7350--7519[label="0.0816327;4pkt 4fpkt"];
7350--8220[label="0.0204082;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.95.51.29" dst_port="80" src_ip="136.228.115.212"/>
    </slice>
    <from sec="1223615055" usec="0"/>
    <to sec="1223615237" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="160.49.29.78"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_149{
style=filled;
color=gray75;
3452[label="162.73.95.13;s;157pkt 157fpkt", shape=diamond, color=yellow];
9524[label="162.73.95.13;390pkt 390fpkt", shape=pentagon, color=darkviolet];
9860[label="213.55.55.33;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13369[label="162.73.95.13;390pkt 390fpkt", shape=invtriangle, color=brown];
13538[label="213.55.55.33;13pkt 13fpkt", shape=invtriangle, color=brown];
15422[label="213.55.55.33;14pkt 14fpkt", shape=invhouse, color=bisque];
stat149[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.95.13:*, 192.217.214.155:80}[96.0396%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59900: (0.153374%)&lt;BR/&gt; 59899: (0.153374%)&lt;BR/&gt; 59898: (0.153374%)&lt;BR/&gt; 59897: (0.153374%)&gt;];
}
3452--9524[label="1;157pkt 157fpkt"];
3452--13369[label="1;157pkt 157fpkt"];
9524--13369[label="1;390pkt 390fpkt"];
9860--13538[label="1;13pkt 13fpkt"];
9860--15422[label="1;14pkt 14fpkt"];
13538--15422[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="192.217.214.155" dst_port="80" src_ip="162.73.95.13"/>
    </slice>
    <from sec="1223614947" usec="0"/>
    <to sec="1223615618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_150{
style=filled;
color=gray75;
751[label="142.243.216.213;d;371pkt 371fpkt", shape=diamond, color=yellow];
936[label="204.4.86.63;s;1pkt 1fpkt", shape=diamond, color=yellow];
1224[label="200.214.91.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
1871[label="21.45.13.112;s;1pkt 1fpkt", shape=diamond, color=yellow];
1939[label="73.165.65.211;s;1pkt 1fpkt", shape=diamond, color=yellow];
2727[label="69.104.71.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
3177[label="69.100.61.35;s;1pkt 1fpkt", shape=diamond, color=yellow];
3185[label="194.100.164.49;s;1pkt 1fpkt", shape=diamond, color=yellow];
3249[label="203.2.109.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
3468[label="18.125.132.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
3686[label="21.45.14.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
3746[label="205.169.25.26;s;1pkt 1fpkt", shape=diamond, color=yellow];
6040[label="200.214.91.213;s;1pkt 1fpkt", shape=hexagon, color=black];
6274[label="73.165.65.211;s;1pkt 1fpkt", shape=hexagon, color=black];
10620[label="119.217.142.76;16pkt 16fpkt", shape=pentagon, color=darkviolet];
12317[label="71.42.108.185;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12699[label="73.165.65.211;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12727[label="200.214.91.213;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14375[label="20.152.98.131;1pkt 1fpkt", shape=invtriangle, color=brown];
15842[label="20.152.98.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat150[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 142.243.216.213:*}[26.9542%]&lt;BR/&gt;{*:*, 142.243.216.213:35801}[21.8329%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.321%)&lt;BR/&gt; 35801: (10%)&lt;BR/&gt; 4662: (2.59259%)&lt;BR/&gt; 4672: (2.22222%)&lt;BR/&gt; 6258: (0.617284%)&gt;];
}
751--906[label="1;1pkt 1fpkt"];
751--936[label="1;1pkt 1fpkt"];
751--1224[label="1;1pkt 1fpkt"];
751--1871[label="1;1pkt 1fpkt"];
751--1939[label="1;1pkt 1fpkt"];
751--2023[label="1;1pkt 1fpkt"];
751--2441[label="1;1pkt 1fpkt"];
751--2600[label="1;1pkt 1fpkt"];
751--2727[label="1;1pkt 1fpkt"];
751--3177[label="1;1pkt 1fpkt"];
751--3185[label="1;1pkt 1fpkt"];
751--3249[label="1;1pkt 1fpkt"];
751--3468[label="1;1pkt 1fpkt"];
751--3686[label="1;1pkt 1fpkt"];
751--3746[label="1;1pkt 1fpkt"];
751--4006[label="1;1pkt 1fpkt"];
751--6040[label="1;1pkt 1fpkt"];
751--6225[label="1;1pkt 1fpkt"];
751--6274[label="1;1pkt 1fpkt"];
751--6869[label="1;1pkt 1fpkt"];
751--7368[label="1;1pkt 1fpkt"];
751--7607[label="1;1pkt 1fpkt"];
751--7725[label="1;1pkt 1fpkt"];
751--10620[label="1;16pkt 16fpkt"];
751--12317[label="1;1pkt 1fpkt"];
751--12699[label="1;1pkt 1fpkt"];
751--12727[label="1;1pkt 1fpkt"];
751--12809[label="1;1pkt 1fpkt"];
751--13176[label="1;1pkt 1fpkt"];
751--14375[label="1;1pkt 1fpkt"];
751--15042[label="1;1pkt 1fpkt"];
751--15842[label="1;1pkt 1fpkt"];
751--16217[label="1;1pkt 1fpkt"];
751--16316[label="1;1pkt 1fpkt"];
1224--6040[label="1;1pkt 1fpkt"];
1224--12727[label="1;1pkt 1fpkt"];
1939--6274[label="1;1pkt 1fpkt"];
1939--12699[label="1;1pkt 1fpkt"];
6040--12727[label="1;1pkt 1fpkt"];
6274--12699[label="1;1pkt 1fpkt"];
14375--15842[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.216.213" src_port="80"/>
      <filter dst_ip="142.243.216.213" dst_port="35801"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
3257[label="213.42.132.231;d;422pkt 422fpkt", shape=diamond, color=yellow];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.42.132.231:0}[99.763%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.763%)&lt;BR/&gt; 4055: (0.118483%)&lt;BR/&gt; 139: (0.118483%)&gt;];
}
3257--12710[label="0.00236967;1pkt 1fpkt"];
3257--14991[label="0.00236967;1pkt 1fpkt"];
3257--16187[label="0.00236967;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.132.231"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
2247[label="142.243.11.170;d;67pkt 67fpkt", shape=diamond, color=yellow];
2474[label="112.252.139.253;s;1pkt 1fpkt", shape=diamond, color=yellow];
6441[label="112.252.139.253;s;1pkt 1fpkt", shape=hexagon, color=black];
11987[label="217.161.112.163;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13218[label="112.252.139.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.187.67.104:80, 142.243.11.170:*}[72.4638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2202: (2.5974%)&lt;BR/&gt; 2171: (1.2987%)&lt;BR/&gt; 2143: (1.2987%)&lt;BR/&gt; 2140: (1.2987%)&gt;];
}
2247--2474[label="1;1pkt 1fpkt"];
2247--3444[label="0.746269;50pkt 50fpkt"];
2247--6441[label="1;1pkt 1fpkt"];
2247--7608[label="0.746269;50pkt 50fpkt"];
2247--9163[label="0.0447761;3pkt 3fpkt"];
2247--9194[label="0.0298507;2pkt 2fpkt"];
2247--9234[label="0.0298507;2pkt 2fpkt"];
2247--9268[label="0.0298507;2pkt 2fpkt"];
2247--11073[label="0.746269;50pkt 50fpkt"];
2247--11883[label="0.047619;2pkt 2fpkt"];
2247--11987[label="0.714286;5pkt 5fpkt"];
2247--13218[label="1;1pkt 1fpkt"];
2474--6441[label="1;1pkt 1fpkt"];
2474--13218[label="1;1pkt 1fpkt"];
6441--13218[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.11.170" src_ip="8.187.67.104" src_port="80"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_153{
style=filled;
color=gray75;
5295[label="212.138.109.210;s;3pkt 3fpkt", shape=diamond, color=yellow];
8747[label="212.138.109.210;s;3pkt 3fpkt", shape=hexagon, color=black];
12691[label="212.138.109.210;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14984[label="212.138.109.210;1pkt 1fpkt", shape=invtriangle, color=brown];
stat153[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.210:554, 136.228.23.20:3336}[33.3333%]&lt;BR/&gt;{212.138.109.210:554, 136.228.23.20:3339}[33.3333%]&lt;BR/&gt;{212.138.109.210:554, 136.228.23.20:3341}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 3341: (25%)&lt;BR/&gt; 3339: (12.5%)&lt;BR/&gt; 3336: (12.5%)&gt;];
}
5295--8747[label="1;3pkt 3fpkt"];
5295--12691[label="1;1pkt 1fpkt"];
5295--14984[label="1;1pkt 1fpkt"];
8747--12691[label="1;1pkt 1fpkt"];
8747--14984[label="1;1pkt 1fpkt"];
12691--14984[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.23.20" dst_port="3341" src_ip="212.138.109.210" src_port="554"/>
      <filter dst_ip="136.228.23.20" dst_port="3339" src_ip="212.138.109.210" src_port="554"/>
      <filter dst_ip="136.228.23.20" dst_port="3336" src_ip="212.138.109.210" src_port="554"/>
    </slice>
    <from sec="1223615356" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_154{
style=filled;
color=gray75;
2935[label="210.192.150.156;s;27pkt 27fpkt", shape=diamond, color=yellow];
3495[label="162.73.66.35;d;18pkt 18fpkt", shape=diamond, color=yellow];
7049[label="162.73.66.35;d;18pkt 18fpkt", shape=hexagon, color=black];
stat154[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.192.150.156:80, 162.73.66.35:*}[55.1724%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49190: (2.38095%)&lt;BR/&gt; 49189: (2.38095%)&lt;BR/&gt; 49188: (2.38095%)&lt;BR/&gt; 49187: (2.38095%)&gt;];
}
2935--3495[label="0.888889;16pkt 16fpkt"];
2935--7049[label="0.888889;16pkt 16fpkt"];
2935--9163[label="0.0740741;2pkt 2fpkt"];
3495--7049[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.66.35" src_ip="210.192.150.156" src_port="80"/>
    </slice>
    <from sec="1223614838" usec="0"/>
    <to sec="1223615142" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_155{
style=filled;
color=gray75;
329[label="136.228.208.131s;14pkt 14fpkt", shape=rectangle, color=red];
3387[label="136.228.208.131;s;61pkt 61fpkt", shape=diamond, color=yellow];
3501[label="109.163.73.72;d;38pkt 38fpkt", shape=diamond, color=yellow];
7056[label="109.163.73.72;d;38pkt 38fpkt", shape=hexagon, color=black];
11490[label="136.228.208.131;61pkt 61fpkt", shape=pentagon, color=darkviolet];
stat155[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.208.131:*, 109.163.73.72:80}[69.3548%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.1698%)&lt;BR/&gt; 52486: (1.17925%)&lt;BR/&gt; 52485: (1.17925%)&lt;BR/&gt; 52484: (1.17925%)&lt;BR/&gt; 52483: (1.17925%)&gt;];
}
329--3387[label="1;14pkt 14fpkt"];
329--3501[label="1;14pkt 14fpkt"];
329--7056[label="1;14pkt 14fpkt"];
329--11490[label="1;14pkt 14fpkt"];
3387--3501[label="1;38pkt 38fpkt"];
3387--6138[label="0.0163934;1pkt 1fpkt"];
3387--6556[label="0.0163934;1pkt 1fpkt"];
3387--7056[label="1;38pkt 38fpkt"];
3387--7825[label="0.0163934;1pkt 1fpkt"];
3387--11490[label="0.983607;60pkt 60fpkt"];
3501--7056[label="1;38pkt 38fpkt"];
3501--11490[label="1;38pkt 38fpkt"];
7056--11490[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="109.163.73.72" dst_port="80" src_ip="136.228.208.131"/>
    </slice>
    <from sec="1223614815" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
3565[label="72.21.146.68;d;2pkt 2fpkt", shape=diamond, color=yellow];
3567[label="136.228.164.9;s;3pkt 3fpkt", shape=diamond, color=yellow];
7071[label="72.21.146.68;d;2pkt 2fpkt", shape=hexagon, color=black];
7072[label="136.228.164.9;s;3pkt 3fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.164.80:0, 72.21.146.68:0}[25%]&lt;BR/&gt;{136.228.164.9:0, 203.162.231.25:0}[25%]&lt;BR/&gt;{136.228.164.9:0, 111.234.91.208:0}[25%]&lt;BR/&gt;{136.228.164.9:0, 72.21.146.68:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3565--3566[label="0.5;1pkt 1fpkt"];
3565--3567[label="0.5;1pkt 1fpkt"];
3565--7071[label="1;2pkt 2fpkt"];
3565--7072[label="0.5;1pkt 1fpkt"];
3565--7358[label="0.5;1pkt 1fpkt"];
3567--3575[label="0.5;1pkt 1fpkt"];
3567--7071[label="0.5;1pkt 1fpkt"];
3567--7072[label="1;3pkt 3fpkt"];
7071--7072[label="0.5;1pkt 1fpkt"];
7071--7358[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.21.146.68" src_ip="136.228.164.9"/>
      <filter dst_ip="111.234.91.208" src_ip="136.228.164.9"/>
      <filter dst_ip="203.162.231.25" src_ip="136.228.164.9"/>
      <filter dst_ip="72.21.146.68" src_ip="136.228.164.80"/>
    </slice>
    <from sec="1223615093" usec="0"/>
    <to sec="1223615155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
3568[label="136.228.86.37;d;384pkt 384fpkt", shape=diamond, color=yellow];
3569[label="195.162.149.183;s;384pkt 384fpkt", shape=diamond, color=yellow];
7359[label="136.228.86.37;d;331pkt 331fpkt", shape=hexagon, color=black];
7634[label="195.162.149.183;s;384pkt 384fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.162.149.183:80, 136.228.86.37:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4999: (0.134862%)&lt;BR/&gt; 4997: (0.134862%)&lt;BR/&gt; 4995: (0.134862%)&lt;BR/&gt; 4993: (0.134862%)&gt;];
}
3568--3569[label="1;384pkt 384fpkt"];
3568--7359[label="1;331pkt 331fpkt"];
3568--7634[label="1;384pkt 384fpkt"];
3568--9194[label="0.145833;56pkt 56fpkt"];
3568--9234[label="0.145833;56pkt 56fpkt"];
3568--9268[label="0.145833;56pkt 56fpkt"];
3569--7359[label="1;331pkt 331fpkt"];
3569--7634[label="1;384pkt 384fpkt"];
3569--9194[label="0.145833;56pkt 56fpkt"];
3569--9234[label="0.145833;56pkt 56fpkt"];
3569--9268[label="0.145833;56pkt 56fpkt"];
7359--7634[label="1;331pkt 331fpkt"];
7359--9194[label="0.169184;56pkt 56fpkt"];
7359--9234[label="0.169184;56pkt 56fpkt"];
7359--9268[label="0.169184;56pkt 56fpkt"];
7634--9194[label="0.145833;56pkt 56fpkt"];
7634--9234[label="0.145833;56pkt 56fpkt"];
7634--9268[label="0.145833;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.86.37" src_ip="195.162.149.183" src_port="80"/>
    </slice>
    <from sec="1223615095" usec="0"/>
    <to sec="1223615381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
3573[label="193.52.171.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
3574[label="136.228.138.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
11117[label="136.228.138.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14186[label="136.228.138.106;2pkt 2fpkt", shape=invtriangle, color=brown];
15749[label="136.228.138.106;1pkt 1fpkt", shape=invhouse, color=bisque];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.138.106:25, 196.1.224.15:58740}[50%]&lt;BR/&gt;{136.228.138.106:25, 193.52.171.40:52015}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 52015: (41.6667%)&lt;BR/&gt; 58740: (8.33333%)&gt;];
}
3573--3574[label="1;1pkt 1fpkt"];
3573--11117[label="1;1pkt 1fpkt"];
3573--14186[label="1;1pkt 1fpkt"];
3573--15749[label="1;1pkt 1fpkt"];
3574--11117[label="1;1pkt 1fpkt"];
3574--14186[label="1;1pkt 1fpkt"];
3574--15749[label="1;1pkt 1fpkt"];
11117--14186[label="1;1pkt 1fpkt"];
11117--15749[label="1;1pkt 1fpkt"];
14186--15749[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.171.40" dst_port="52015" src_ip="136.228.138.106" src_port="25"/>
      <filter dst_ip="196.1.224.15" dst_port="58740" src_ip="136.228.138.106" src_port="25"/>
    </slice>
    <from sec="1223615097" usec="0"/>
    <to sec="1223615462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
3566[label="136.228.164.80;s;3pkt 3fpkt", shape=diamond, color=yellow];
3575[label="203.162.231.25;d;2pkt 2fpkt", shape=diamond, color=yellow];
7358[label="136.228.164.80;s;3pkt 3fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.164.9:0, 203.162.231.25:0}[25%]&lt;BR/&gt;{136.228.164.80:0, 72.21.146.68:0}[25%]&lt;BR/&gt;{136.228.164.80:0, 111.234.91.208:0}[25%]&lt;BR/&gt;{136.228.164.80:0, 203.162.231.25:0}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3566--3575[label="0.5;1pkt 1fpkt"];
3566--7071[label="0.5;1pkt 1fpkt"];
3566--7358[label="1;3pkt 3fpkt"];
3575--7072[label="0.5;1pkt 1fpkt"];
3575--7358[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.162.231.25" src_ip="136.228.164.80"/>
      <filter dst_ip="111.234.91.208" src_ip="136.228.164.80"/>
      <filter dst_ip="72.21.146.68" src_ip="136.228.164.80"/>
      <filter dst_ip="203.162.231.25" src_ip="136.228.164.9"/>
    </slice>
    <from sec="1223615093" usec="0"/>
    <to sec="1223615155" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
218[label="150.133.45.219s;1pkt 1fpkt", shape=rectangle, color=red];
3325[label="150.133.45.219;s;33pkt 33fpkt", shape=diamond, color=yellow];
3579[label="125.97.206.197;d;1pkt 1fpkt", shape=diamond, color=yellow];
7075[label="125.97.206.197;d;1pkt 1fpkt", shape=hexagon, color=black];
12803[label="150.133.45.219;35pkt 35fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.133.45.219:80, 72.136.147.125:*}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1051: (3.52113%)&lt;BR/&gt; 57760: (1.40845%)&lt;BR/&gt; 57759: (1.40845%)&lt;BR/&gt; 52697: (1.40845%)&gt;];
}
218--3325[label="1;1pkt 1fpkt"];
218--3579[label="1;1pkt 1fpkt"];
218--7075[label="1;1pkt 1fpkt"];
218--12803[label="1;1pkt 1fpkt"];
3325--3336[label="1;25pkt 25fpkt"];
3325--3579[label="1;1pkt 1fpkt"];
3325--6946[label="1;25pkt 25fpkt"];
3325--7075[label="1;1pkt 1fpkt"];
3325--9163[label="0.151515;5pkt 5fpkt"];
3325--9194[label="0.0909091;3pkt 3fpkt"];
3325--9198[label="0.212121;7pkt 7fpkt"];
3325--9234[label="0.0909091;3pkt 3fpkt"];
3325--9268[label="0.0909091;3pkt 3fpkt"];
3325--12803[label="0.969697;32pkt 32fpkt"];
3579--7075[label="1;1pkt 1fpkt"];
3579--12803[label="1;1pkt 1fpkt"];
7075--12803[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="72.136.147.125" src_ip="150.133.45.219" src_port="80"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
372[label="136.228.104.161s;12pkt 12fpkt", shape=rectangle, color=red];
3593[label="136.228.104.161;s;123pkt 123fpkt", shape=diamond, color=yellow];
7079[label="136.228.104.161;s;122pkt 122fpkt", shape=hexagon, color=black];
7611[label="195.228.19.36;d;131pkt 131fpkt", shape=hexagon, color=black];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.104.161:*, 195.228.19.36:80}[92.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3655: (0.515464%)&lt;BR/&gt; 3653: (0.515464%)&lt;BR/&gt; 3651: (0.515464%)&lt;BR/&gt; 3649: (0.515464%)&gt;];
}
372--3447[label="1;12pkt 12fpkt"];
372--3593[label="1;12pkt 12fpkt"];
372--7079[label="1;12pkt 12fpkt"];
372--7611[label="1;12pkt 12fpkt"];
3593--7079[label="1;122pkt 122fpkt"];
3593--7611[label="0.99187;122pkt 122fpkt"];
7079--7611[label="0.991803;121pkt 121fpkt"];
7611--9873[label="0.00763359;1pkt 1fpkt"];
7611--10872[label="0.0229008;3pkt 3fpkt"];
7611--14064[label="0.0229008;3pkt 3fpkt"];
7611--15687[label="0.0229008;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="195.228.19.36" dst_port="80" src_ip="136.228.104.161"/>
    </slice>
    <from sec="1223614934" usec="0"/>
    <to sec="1223615187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
3490[label="195.150.29.72;s;892pkt 892fpkt", shape=diamond, color=yellow];
3600[label="107.113.136.187;d;1769pkt 1769fpkt", shape=diamond, color=yellow];
3957[label="195.150.29.76;s;877pkt 877fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.150.29.72:22, 107.113.136.187:*}[50.141%]&lt;BR/&gt;{195.150.29.76:22, 107.113.136.187:*}[49.4078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (49.9435%)&lt;BR/&gt; 60524: (0.0565291%)&lt;BR/&gt; 60061: (0.0565291%)&lt;BR/&gt; 59914: (0.0565291%)&lt;BR/&gt; 59343: (0.0565291%)&gt;];
}
3490--3600[label="0.996637;889pkt 889fpkt"];
3490--4171[label="0.00257069;1pkt 1fpkt"];
3600--3957[label="0.99886;876pkt 876fpkt"];
</description>
    <slice>
      <filter dst_ip="107.113.136.187" src_ip="195.150.29.72" src_port="22"/>
      <filter dst_ip="107.113.136.187" src_ip="195.150.29.76" src_port="22"/>
    </slice>
    <from sec="1223615017" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.27213,2.03825,503,1 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_165{
style=filled;
color=gray75;
135[label="136.228.148.137s;1pkt 1fpkt", shape=rectangle, color=red];
1145[label="136.228.148.137;s;649pkt 649fpkt", shape=diamond, color=yellow];
3250[label="193.170.122.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
3630[label="107.40.198.25;d;3pkt 3fpkt", shape=diamond, color=yellow];
5058[label="213.43.70.194;d;534pkt 534fpkt", shape=diamond, color=yellow];
11578[label="136.228.148.137;740pkt 740fpkt", shape=pentagon, color=darkviolet];
14425[label="136.228.148.137;740pkt 740fpkt", shape=invtriangle, color=brown];
15866[label="136.228.148.137;739pkt 739fpkt", shape=invhouse, color=bisque];
stat165[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.43.70.194:53}[42.268%]&lt;BR/&gt;{136.228.148.137:*, *:80}[30.0555%]&lt;BR/&gt;{136.228.148.137:*, *:53}[23.632%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (24.9633%)&lt;BR/&gt; 80: (21.3971%)&lt;BR/&gt; 443: (2.52421%)&lt;BR/&gt; 123: (0.396243%)&lt;BR/&gt; 993: (0.293513%)&gt;];
}
135--1145[label="1;1pkt 1fpkt"];
135--3630[label="1;1pkt 1fpkt"];
135--11578[label="1;1pkt 1fpkt"];
135--14425[label="1;1pkt 1fpkt"];
135--15866[label="1;1pkt 1fpkt"];
1145--1162[label="0.0585516;38pkt 38fpkt"];
1145--1251[label="0.00268097;1pkt 1fpkt"];
1145--1265[label="0.0363636;20pkt 20fpkt"];
1145--1284[label="0.0585516;38pkt 38fpkt"];
1145--1329[label="0.0046225;3pkt 3fpkt"];
1145--1335[label="0.00823723;5pkt 5fpkt"];
1145--1340[label="0.00678733;3pkt 3fpkt"];
1145--1343[label="0.00924499;6pkt 6fpkt"];
1145--1369[label="0.00154083;1pkt 1fpkt"];
1145--1377[label="0.03125;15pkt 15fpkt"];
1145--1403[label="0.00383877;2pkt 2fpkt"];
1145--1440[label="0.0990566;21pkt 21fpkt"];
1145--1814[label="0.00638978;2pkt 2fpkt"];
1145--1820[label="0.0148148;2pkt 2fpkt"];
1145--1912[label="0.00922509;5pkt 5fpkt"];
1145--1925[label="0.011236;2pkt 2fpkt"];
1145--1973[label="0.0119048;5pkt 5fpkt"];
1145--1990[label="0.00647948;3pkt 3fpkt"];
1145--2119[label="0.0246533;16pkt 16fpkt"];
1145--2157[label="0.00438596;2pkt 2fpkt"];
1145--2239[label="0.00714286;2pkt 2fpkt"];
1145--2724[label="0.00493827;2pkt 2fpkt"];
1145--2739[label="0.0233463;6pkt 6fpkt"];
1145--2755[label="0.0357143;10pkt 10fpkt"];
1145--2842[label="0.00769231;2pkt 2fpkt"];
1145--2928[label="0.0178571;3pkt 3fpkt"];
1145--3184[label="0.00308166;2pkt 2fpkt"];
1145--3192[label="0.00154083;1pkt 1fpkt"];
1145--3225[label="0.0142857;2pkt 2fpkt"];
1145--3250[label="1;1pkt 1fpkt"];
1145--3312[label="0.00429185;1pkt 1fpkt"];
1145--3630[label="1;3pkt 3fpkt"];
1145--3737[label="0.00308166;2pkt 2fpkt"];
1145--3760[label="1;1pkt 1fpkt"];
1145--3818[label="0.012987;2pkt 2fpkt"];
1145--3914[label="0.0147059;1pkt 1fpkt"];
1145--4178[label="0.00616333;4pkt 4fpkt"];
1145--4222[label="0.00154083;1pkt 1fpkt"];
1145--4296[label="0.0222222;2pkt 2fpkt"];
1145--4319[label="0.0169492;1pkt 1fpkt"];
1145--4683[label="0.00162602;1pkt 1fpkt"];
1145--4696[label="0.0111288;7pkt 7fpkt"];
1145--4708[label="0.0344828;2pkt 2fpkt"];
1145--4778[label="0.0416667;4pkt 4fpkt"];
1145--5058[label="0.0243446;13pkt 13fpkt"];
1145--5511[label="0.00702576;3pkt 3fpkt"];
1145--5516[label="0.00217391;1pkt 1fpkt"];
1145--5550[label="0.0196078;9pkt 9fpkt"];
1145--5571[label="0.0131579;1pkt 1fpkt"];
1145--5597[label="0.0113636;1pkt 1fpkt"];
1145--5974[label="0.025641;6pkt 6fpkt"];
1145--6056[label="0.0585516;38pkt 38fpkt"];
1145--6065[label="0.01;4pkt 4fpkt"];
1145--6066[label="0.00924499;6pkt 6fpkt"];
1145--6074[label="0.00154083;1pkt 1fpkt"];
1145--6303[label="0.0363636;20pkt 20fpkt"];
1145--6556[label="0.00653595;1pkt 1fpkt"];
1145--6603[label="0.009375;3pkt 3fpkt"];
1145--6632[label="0.00769231;2pkt 2fpkt"];
1145--6791[label="0.0148148;2pkt 2fpkt"];
1145--6837[label="0.0253165;2pkt 2fpkt"];
1145--6838[label="0.0570108;37pkt 37fpkt"];
1145--6844[label="0.0031746;2pkt 2fpkt"];
1145--7200[label="0.0119048;3pkt 3fpkt"];
1145--7212[label="0.0136054;2pkt 2fpkt"];
1145--7434[label="0.0413534;11pkt 11fpkt"];
1145--7728[label="0.00357143;1pkt 1fpkt"];
1145--7730[label="0.00308166;2pkt 2fpkt"];
1145--7825[label="0.0224215;5pkt 5fpkt"];
1145--8164[label="0.00594059;3pkt 3fpkt"];
1145--8168[label="1;7pkt 7fpkt"];
1145--8182[label="0.00616333;4pkt 4fpkt"];
1145--8183[label="0.007109;3pkt 3fpkt"];
1145--8184[label="0.00154083;1pkt 1fpkt"];
1145--8200[label="0.0163934;2pkt 2fpkt"];
1145--8212[label="0.00308166;2pkt 2fpkt"];
1145--8216[label="0.0215716;14pkt 14fpkt"];
1145--8225[label="0.00424628;2pkt 2fpkt"];
1145--8274[label="0.012987;2pkt 2fpkt"];
1145--8671[label="0.0178571;3pkt 3fpkt"];
1145--8879[label="0.0416025;27pkt 27fpkt"];
1145--9052[label="0.00357143;1pkt 1fpkt"];
1145--9062[label="0.00594059;3pkt 3fpkt"];
1145--9066[label="0.00616333;4pkt 4fpkt"];
1145--9178[label="0.0154083;10pkt 10fpkt"];
1145--9218[label="0.0154083;10pkt 10fpkt"];
1145--9252[label="0.0154083;10pkt 10fpkt"];
1145--11578[label="1;649pkt 649fpkt"];
1145--14425[label="1;649pkt 649fpkt"];
1145--15866[label="0.998459;648pkt 648fpkt"];
3250--9178[label="1;1pkt 1fpkt"];
3250--9218[label="1;1pkt 1fpkt"];
3250--9252[label="1;1pkt 1fpkt"];
3250--11578[label="1;1pkt 1fpkt"];
3250--14425[label="1;1pkt 1fpkt"];
3250--15866[label="1;1pkt 1fpkt"];
3630--11578[label="1;3pkt 3fpkt"];
3630--14425[label="1;3pkt 3fpkt"];
3630--15866[label="1;3pkt 3fpkt"];
5058--5126[label="0.00350877;1pkt 1fpkt"];
5058--5992[label="0.011236;6pkt 6fpkt"];
5058--6068[label="0.0131086;7pkt 7fpkt"];
5058--6194[label="0.071161;38pkt 38fpkt"];
5058--6244[label="0.0318352;17pkt 17fpkt"];
5058--6258[label="0.0468165;25pkt 25fpkt"];
5058--6269[label="0.00187266;1pkt 1fpkt"];
5058--6335[label="0.0205993;11pkt 11fpkt"];
5058--6342[label="0.0468165;25pkt 25fpkt"];
5058--6606[label="0.0131086;7pkt 7fpkt"];
5058--6795[label="0.0749064;40pkt 40fpkt"];
5058--6861[label="0.0524345;28pkt 28fpkt"];
5058--6872[label="0.0262172;14pkt 14fpkt"];
5058--7088[label="0.0149813;8pkt 8fpkt"];
5058--7139[label="0.011236;6pkt 6fpkt"];
5058--7229[label="0.00561798;3pkt 3fpkt"];
5058--7240[label="0.0187266;10pkt 10fpkt"];
5058--7917[label="0.0111111;1pkt 1fpkt"];
5058--8030[label="0.00980392;1pkt 1fpkt"];
5058--8525[label="0.00240964;1pkt 1fpkt"];
5058--8588[label="0.00552486;1pkt 1fpkt"];
5058--8857[label="0.011236;6pkt 6fpkt"];
5058--8992[label="0.0149813;8pkt 8fpkt"];
5058--9060[label="0.0411985;22pkt 22fpkt"];
5058--9154[label="0.0131086;7pkt 7fpkt"];
5058--9171[label="0.0149813;8pkt 8fpkt"];
5058--9175[label="0.00561798;3pkt 3fpkt"];
5058--9184[label="0.0449438;24pkt 24fpkt"];
5058--9193[label="0.0543071;29pkt 29fpkt"];
5058--9197[label="0.00187266;1pkt 1fpkt"];
5058--9211[label="0.0149813;8pkt 8fpkt"];
5058--9215[label="0.00561798;3pkt 3fpkt"];
5058--9224[label="0.0449438;24pkt 24fpkt"];
5058--9233[label="0.0543071;29pkt 29fpkt"];
5058--9246[label="0.0149813;8pkt 8fpkt"];
5058--9258[label="0.0449438;24pkt 24fpkt"];
5058--9267[label="0.0543071;29pkt 29fpkt"];
5058--9319[label="0.0524345;28pkt 28fpkt"];
5058--9466[label="0.0116279;1pkt 1fpkt"];
5058--9629[label="0.00735294;1pkt 1fpkt"];
5058--9744[label="0.00813008;1pkt 1fpkt"];
5058--9903[label="0.076779;41pkt 41fpkt"];
5058--10442[label="0.294007;157pkt 157fpkt"];
5058--10569[label="0.00374532;2pkt 2fpkt"];
5058--10590[label="0.00187266;1pkt 1fpkt"];
5058--11249[label="0.00187266;1pkt 1fpkt"];
5058--11561[label="0.00534759;1pkt 1fpkt"];
5058--11578[label="0.0243446;13pkt 13fpkt"];
5058--11840[label="0.00502513;1pkt 1fpkt"];
5058--11996[label="0.0468165;25pkt 25fpkt"];
5058--12914[label="0.0468165;25pkt 25fpkt"];
5058--13060[label="0.0374532;20pkt 20fpkt"];
5058--13482[label="0.00813008;1pkt 1fpkt"];
5058--13565[label="0.076779;41pkt 41fpkt"];
5058--13849[label="0.294007;157pkt 157fpkt"];
5058--13917[label="0.00374532;2pkt 2fpkt"];
5058--14425[label="0.0243446;13pkt 13fpkt"];
5058--14633[label="0.0468165;25pkt 25fpkt"];
5058--15168[label="0.0374532;20pkt 20fpkt"];
5058--15437[label="0.076779;41pkt 41fpkt"];
5058--15608[label="0.00374532;2pkt 2fpkt"];
5058--15866[label="0.0243446;13pkt 13fpkt"];
5058--15986[label="0.0468165;25pkt 25fpkt"];
5058--16280[label="0.0374532;20pkt 20fpkt"];
11578--14425[label="1;740pkt 740fpkt"];
11578--15866[label="1;739pkt 739fpkt"];
14425--15866[label="1;739pkt 739fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.228.148.137"/>
      <filter dst_port="80" src_ip="136.228.148.137"/>
      <filter dst_ip="213.43.70.194" dst_port="53"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
663[label="136.228.171.53;d;148pkt 148fpkt", shape=diamond, color=yellow];
3701[label="192.95.36.42;s;20pkt 20fpkt", shape=diamond, color=yellow];
6472[label="136.228.171.53;d;148pkt 148fpkt", shape=hexagon, color=black];
7411[label="104.31.150.22;s;12pkt 12fpkt", shape=hexagon, color=black];
10041[label="192.95.36.42;20pkt 20fpkt", shape=pentagon, color=darkviolet];
10799[label="107.21.65.86;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13646[label="192.95.36.42;20pkt 20fpkt", shape=invtriangle, color=brown];
15472[label="192.95.36.42;21pkt 21fpkt", shape=invhouse, color=bisque];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.171.53:53}[41.3408%]&lt;BR/&gt;{*:53, 136.228.171.53:60173}[37.4302%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.6154%)&lt;BR/&gt; 60173: (17.9487%)&lt;BR/&gt; 0: (1.53846%)&lt;BR/&gt; 64897: (0.512821%)&lt;BR/&gt; 64130: (0.512821%)&gt;];
}
663--1863[label="0.00675676;1pkt 1fpkt"];
663--2639[label="0.00675676;1pkt 1fpkt"];
663--3193[label="0.00675676;1pkt 1fpkt"];
663--3237[label="0.00675676;1pkt 1fpkt"];
663--3670[label="0.05;1pkt 1fpkt"];
663--3701[label="0.05;1pkt 1fpkt"];
663--3966[label="0.00724638;1pkt 1fpkt"];
663--3969[label="0.00724638;1pkt 1fpkt"];
663--4003[label="0.00675676;1pkt 1fpkt"];
663--4158[label="0.00675676;1pkt 1fpkt"];
663--4648[label="0.00675676;1pkt 1fpkt"];
663--6472[label="1;148pkt 148fpkt"];
663--7345[label="0.00724638;1pkt 1fpkt"];
663--7411[label="0.0833333;1pkt 1fpkt"];
663--7731[label="0.00675676;1pkt 1fpkt"];
663--7816[label="0.00675676;1pkt 1fpkt"];
663--8551[label="0.00675676;1pkt 1fpkt"];
663--9135[label="0.00675676;1pkt 1fpkt"];
663--9197[label="0.121622;18pkt 18fpkt"];
663--10019[label="0.0135135;2pkt 2fpkt"];
663--10041[label="0.05;1pkt 1fpkt"];
663--10265[label="0.00729927;1pkt 1fpkt"];
663--10478[label="0.00787402;1pkt 1fpkt"];
663--10799[label="1;1pkt 1fpkt"];
663--11038[label="0.0075188;1pkt 1fpkt"];
663--11103[label="0.00675676;1pkt 1fpkt"];
663--11448[label="0.2;1pkt 1fpkt"];
663--11544[label="0.00724638;1pkt 1fpkt"];
663--11632[label="0.0434783;1pkt 1fpkt"];
663--11770[label="0.0105263;1pkt 1fpkt"];
663--11814[label="0.05;1pkt 1fpkt"];
663--12450[label="0.00675676;1pkt 1fpkt"];
663--12457[label="0.0625;1pkt 1fpkt"];
663--13646[label="0.05;1pkt 1fpkt"];
663--13761[label="0.00724638;1pkt 1fpkt"];
663--14406[label="0.00729927;1pkt 1fpkt"];
663--14449[label="0.0454545;1pkt 1fpkt"];
663--15472[label="0.047619;1pkt 1fpkt"];
663--15857[label="0.00729927;1pkt 1fpkt"];
663--15882[label="0.0454545;1pkt 1fpkt"];
3701--6472[label="0.05;1pkt 1fpkt"];
3701--6568[label="0.05;1pkt 1fpkt"];
3701--6826[label="0.2;4pkt 4fpkt"];
3701--8139[label="0.2;4pkt 4fpkt"];
3701--9197[label="0.35;7pkt 7fpkt"];
3701--10041[label="0.95;19pkt 19fpkt"];
3701--13646[label="0.95;19pkt 19fpkt"];
3701--15472[label="1;20pkt 20fpkt"];
6472--7345[label="0.00724638;1pkt 1fpkt"];
6472--7411[label="0.0833333;1pkt 1fpkt"];
6472--7731[label="0.00675676;1pkt 1fpkt"];
6472--7816[label="0.00675676;1pkt 1fpkt"];
6472--8551[label="0.00675676;1pkt 1fpkt"];
6472--9135[label="0.00675676;1pkt 1fpkt"];
6472--9197[label="0.121622;18pkt 18fpkt"];
6472--10019[label="0.0135135;2pkt 2fpkt"];
6472--10041[label="0.05;1pkt 1fpkt"];
6472--10265[label="0.00729927;1pkt 1fpkt"];
6472--10478[label="0.00787402;1pkt 1fpkt"];
6472--10799[label="1;1pkt 1fpkt"];
6472--11038[label="0.0075188;1pkt 1fpkt"];
6472--11103[label="0.00675676;1pkt 1fpkt"];
6472--11448[label="0.2;1pkt 1fpkt"];
6472--11544[label="0.00724638;1pkt 1fpkt"];
6472--11632[label="0.0434783;1pkt 1fpkt"];
6472--11770[label="0.0105263;1pkt 1fpkt"];
6472--11814[label="0.05;1pkt 1fpkt"];
6472--12450[label="0.00675676;1pkt 1fpkt"];
6472--12457[label="0.0625;1pkt 1fpkt"];
6472--13646[label="0.05;1pkt 1fpkt"];
6472--13761[label="0.00724638;1pkt 1fpkt"];
6472--14406[label="0.00729927;1pkt 1fpkt"];
6472--14449[label="0.0454545;1pkt 1fpkt"];
6472--15472[label="0.047619;1pkt 1fpkt"];
6472--15857[label="0.00729927;1pkt 1fpkt"];
6472--15882[label="0.0454545;1pkt 1fpkt"];
7411--8139[label="0.333333;4pkt 4fpkt"];
7411--9197[label="0.0833333;1pkt 1fpkt"];
10041--13646[label="1;20pkt 20fpkt"];
10041--15472[label="1;20pkt 20fpkt"];
13646--15472[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.171.53" dst_port="53"/>
      <filter dst_ip="136.228.171.53" dst_port="60173" src_port="53"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.25.138.194"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.228.244.102"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_170{
style=filled;
color=gray75;
1126[label="212.21.129.73;s;2833pkt 2833fpkt", shape=diamond, color=yellow];
1508[label="104.93.74.83;d;70pkt 70fpkt", shape=diamond, color=yellow];
3795[label="114.5.229.215;d;92pkt 92fpkt", shape=diamond, color=yellow];
4805[label="99.105.144.1;d;45pkt 45fpkt", shape=diamond, color=yellow];
6535[label="212.21.129.73;s;850pkt 850fpkt", shape=hexagon, color=black];
9474[label="162.73.105.10;77pkt 77fpkt", shape=pentagon, color=darkviolet];
10569[label="212.21.129.73;3071pkt 3071fpkt", shape=pentagon, color=darkviolet];
11017[label="136.228.87.100;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13917[label="212.21.129.73;3071pkt 3071fpkt", shape=invtriangle, color=brown];
15608[label="212.21.129.73;3031pkt 3031fpkt", shape=invhouse, color=bisque];
stat170[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.129.73:*, *:53}[69.1246%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (36.3588%)&lt;BR/&gt; 25: (10.967%)&lt;BR/&gt; 113: (2.57152%)&lt;BR/&gt; 0: (0.0912964%)&lt;BR/&gt; 34477: (0.0684723%)&gt;];
}
1126--1162[label="0.00317684;9pkt 9fpkt"];
1126--1227[label="0.112994;20pkt 20fpkt"];
1126--1508[label="0.142857;10pkt 10fpkt"];
1126--1688[label="0.00124533;1pkt 1fpkt"];
1126--3184[label="0.00889878;8pkt 8fpkt"];
1126--3192[label="0.0143003;14pkt 14fpkt"];
1126--3322[label="0.184758;160pkt 160fpkt"];
1126--3662[label="0.00116959;1pkt 1fpkt"];
1126--3737[label="0.00897868;8pkt 8fpkt"];
1126--3795[label="1;92pkt 92fpkt"];
1126--3876[label="0.146667;11pkt 11fpkt"];
1126--4174[label="0.00177936;2pkt 2fpkt"];
1126--4178[label="0.0116279;9pkt 9fpkt"];
1126--4222[label="0.0149477;10pkt 10fpkt"];
1126--4309[label="0.0357143;3pkt 3fpkt"];
1126--4683[label="0.0097561;6pkt 6fpkt"];
1126--4696[label="0.00476948;3pkt 3fpkt"];
1126--4805[label="0.777778;35pkt 35fpkt"];
1126--4813[label="0.37931;11pkt 11fpkt"];
1126--5058[label="0.00374532;2pkt 2fpkt"];
1126--5139[label="0.269517;145pkt 145fpkt"];
1126--5488[label="0.00567108;3pkt 3fpkt"];
1126--5516[label="0.05;23pkt 23fpkt"];
1126--5534[label="0.0138889;1pkt 1fpkt"];
1126--5550[label="0.0043573;2pkt 2fpkt"];
1126--6111[label="0.0769231;1pkt 1fpkt"];
1126--6535[label="1;850pkt 850fpkt"];
1126--6838[label="0.00317684;9pkt 9fpkt"];
1126--6844[label="0.0047619;3pkt 3fpkt"];
1126--7561[label="0.0357143;3pkt 3fpkt"];
1126--8182[label="0.0122511;8pkt 8fpkt"];
1126--8184[label="0.0106007;9pkt 9fpkt"];
1126--8212[label="0.0102171;8pkt 8fpkt"];
1126--8622[label="0.269517;145pkt 145fpkt"];
1126--8689[label="0.37931;11pkt 11fpkt"];
1126--8879[label="0.00110742;3pkt 3fpkt"];
1126--9066[label="0.0122511;8pkt 8fpkt"];
1126--9163[label="0.000352983;1pkt 1fpkt"];
1126--9177[label="0.0173053;42pkt 42fpkt"];
1126--9196[label="0.00762195;10pkt 10fpkt"];
1126--9197[label="0.000352983;1pkt 1fpkt"];
1126--9198[label="0.000352983;1pkt 1fpkt"];
1126--9217[label="0.0173053;42pkt 42fpkt"];
1126--9251[label="0.0173053;42pkt 42fpkt"];
1126--10569[label="0.999647;2832pkt 2832fpkt"];
1126--13917[label="0.999647;2832pkt 2832fpkt"];
1126--15608[label="0.986234;2794pkt 2794fpkt"];
1508--1594[label="0.5;35pkt 35fpkt"];
1508--2164[label="0.0714286;5pkt 5fpkt"];
1508--2221[label="0.0285714;2pkt 2fpkt"];
1508--3156[label="0.0428571;3pkt 3fpkt"];
1508--3681[label="0.0512821;2pkt 2fpkt"];
1508--4751[label="0.0428571;3pkt 3fpkt"];
1508--6111[label="1;13pkt 13fpkt"];
1508--6535[label="0.0142857;1pkt 1fpkt"];
1508--6779[label="0.0142857;1pkt 1fpkt"];
1508--7130[label="0.0142857;1pkt 1fpkt"];
1508--7139[label="0.0428571;3pkt 3fpkt"];
1508--7917[label="0.0285714;2pkt 2fpkt"];
1508--9177[label="0.114286;8pkt 8fpkt"];
1508--9217[label="0.114286;8pkt 8fpkt"];
1508--9251[label="0.114286;8pkt 8fpkt"];
1508--9374[label="0.0428571;3pkt 3fpkt"];
1508--9474[label="0.5;35pkt 35fpkt"];
1508--9744[label="0.0428571;3pkt 3fpkt"];
1508--10569[label="0.142857;10pkt 10fpkt"];
1508--11017[label="0.25;1pkt 1fpkt"];
1508--11498[label="0.0142857;1pkt 1fpkt"];
1508--13347[label="0.5;35pkt 35fpkt"];
1508--13482[label="0.0428571;3pkt 3fpkt"];
1508--13917[label="0.142857;10pkt 10fpkt"];
1508--14385[label="0.0142857;1pkt 1fpkt"];
1508--15608[label="0.142857;10pkt 10fpkt"];
1508--15848[label="0.0142857;1pkt 1fpkt"];
3795--6535[label="0.217391;20pkt 20fpkt"];
3795--9177[label="0.0108696;1pkt 1fpkt"];
3795--9217[label="0.0108696;1pkt 1fpkt"];
3795--9251[label="0.0108696;1pkt 1fpkt"];
3795--10569[label="1;92pkt 92fpkt"];
3795--13917[label="1;92pkt 92fpkt"];
3795--15608[label="1;92pkt 92fpkt"];
4805--6335[label="0.0222222;1pkt 1fpkt"];
4805--6535[label="0.155556;7pkt 7fpkt"];
4805--7255[label="0.0888889;4pkt 4fpkt"];
4805--7461[label="0.0222222;1pkt 1fpkt"];
4805--7898[label="0.0222222;1pkt 1fpkt"];
4805--9022[label="0.0888889;4pkt 4fpkt"];
4805--9177[label="0.0444444;2pkt 2fpkt"];
4805--9217[label="0.0444444;2pkt 2fpkt"];
4805--9251[label="0.0444444;2pkt 2fpkt"];
4805--9942[label="0.0444444;2pkt 2fpkt"];
4805--10569[label="0.777778;35pkt 35fpkt"];
4805--13917[label="0.777778;35pkt 35fpkt"];
4805--15608[label="0.777778;35pkt 35fpkt"];
6535--6838[label="0.00352941;3pkt 3fpkt"];
6535--6844[label="0.0031746;2pkt 2fpkt"];
6535--7561[label="0.0357143;3pkt 3fpkt"];
6535--8182[label="0.00306279;2pkt 2fpkt"];
6535--8184[label="0.00353357;3pkt 3fpkt"];
6535--8212[label="0.00127714;1pkt 1fpkt"];
6535--8622[label="0.120818;65pkt 65fpkt"];
6535--8689[label="0.0344828;1pkt 1fpkt"];
6535--8879[label="0.00352941;3pkt 3fpkt"];
6535--9066[label="0.00306279;2pkt 2fpkt"];
6535--9163[label="0.00117647;1pkt 1fpkt"];
6535--9177[label="0.00941176;8pkt 8fpkt"];
6535--9197[label="0.00117647;1pkt 1fpkt"];
6535--9217[label="0.00941176;8pkt 8fpkt"];
6535--9251[label="0.00941176;8pkt 8fpkt"];
6535--10569[label="0.998824;849pkt 849fpkt"];
6535--13917[label="0.998824;849pkt 849fpkt"];
6535--15608[label="0.954118;811pkt 811fpkt"];
9474--13347[label="1;77pkt 77fpkt"];
10569--13917[label="1;3071pkt 3071fpkt"];
10569--15608[label="1;3031pkt 3031fpkt"];
13917--15608[label="1;3031pkt 3031fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="212.21.129.73"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_172{
style=filled;
color=gray75;
1297[label="136.228.122.66;d;738pkt 738fpkt", shape=diamond, color=yellow];
3647[label="192.105.75.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
4494[label="73.244.180.48;s;41pkt 41fpkt", shape=diamond, color=yellow];
5471[label="104.243.253.142;s;3pkt 3fpkt", shape=diamond, color=yellow];
5738[label="200.201.196.4;s;12pkt 12fpkt", shape=diamond, color=yellow];
7084[label="192.105.75.52;s;1pkt 1fpkt", shape=hexagon, color=black];
8070[label="73.244.180.48;s;19pkt 19fpkt", shape=hexagon, color=black];
8781[label="104.243.253.142;s;3pkt 3fpkt", shape=hexagon, color=black];
9743[label="108.130.62.25;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9893[label="8.189.4.35;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9909[label="195.2.198.35;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9997[label="106.78.106.40;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10165[label="73.244.180.48;41pkt 41fpkt", shape=pentagon, color=darkviolet];
10221[label="192.105.75.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10534[label="99.159.6.72;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10805[label="213.241.230.86;15pkt 15fpkt", shape=pentagon, color=darkviolet];
11668[label="104.243.253.142;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12037[label="77.149.107.166;38pkt 38fpkt", shape=pentagon, color=darkviolet];
13010[label="195.144.152.234;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13029[label="213.241.229.235;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13481[label="108.130.62.25;4pkt 4fpkt", shape=invtriangle, color=brown];
13710[label="73.244.180.48;40pkt 40fpkt", shape=invtriangle, color=brown];
13876[label="194.173.188.69;1pkt 1fpkt", shape=invtriangle, color=brown];
13900[label="99.159.6.72;6pkt 6fpkt", shape=invtriangle, color=brown];
14651[label="77.149.107.166;37pkt 37fpkt", shape=invtriangle, color=brown];
15154[label="213.241.229.235;14pkt 14fpkt", shape=invtriangle, color=brown];
15395[label="108.130.62.25;5pkt 5fpkt", shape=invhouse, color=bisque];
15597[label="99.159.6.72;6pkt 6fpkt", shape=invhouse, color=bisque];
15994[label="77.149.107.166;37pkt 37fpkt", shape=invhouse, color=bisque];
stat172[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.228.122.66:*}[88.5486%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.0142%)&lt;BR/&gt; 443: (2.12578%)&lt;BR/&gt; 31664: (1.19575%)&lt;BR/&gt; 9575: (0.310009%)&lt;BR/&gt; 57531: (0.221435%)&gt;];
}
1297--1336[label="0.00271003;2pkt 2fpkt"];
1297--1341[label="0.0136364;6pkt 6fpkt"];
1297--1420[label="0.0384615;1pkt 1fpkt"];
1297--1461[label="0.00738007;2pkt 2fpkt"];
1297--1509[label="0.0215827;3pkt 3fpkt"];
1297--1528[label="0.0745257;55pkt 55fpkt"];
1297--1532[label="0.084507;6pkt 6fpkt"];
1297--1649[label="0.0263591;16pkt 16fpkt"];
1297--2021[label="0.00348432;1pkt 1fpkt"];
1297--2029[label="0.00542005;4pkt 4fpkt"];
1297--2159[label="0.00245098;1pkt 1fpkt"];
1297--2177[label="0.00678733;3pkt 3fpkt"];
1297--2189[label="0.0434783;1pkt 1fpkt"];
1297--2222[label="0.00348432;2pkt 2fpkt"];
1297--2232[label="0.00743494;2pkt 2fpkt"];
1297--2294[label="0.0190476;2pkt 2fpkt"];
1297--2604[label="0.00636943;2pkt 2fpkt"];
1297--2717[label="0.00326797;1pkt 1fpkt"];
1297--2814[label="0.00694444;1pkt 1fpkt"];
1297--2819[label="0.00740741;2pkt 2fpkt"];
1297--2846[label="0.00373134;1pkt 1fpkt"];
1297--2868[label="0.015873;1pkt 1fpkt"];
1297--2898[label="0.027027;1pkt 1fpkt"];
1297--2911[label="0.0392157;2pkt 2fpkt"];
1297--3134[label="1;2pkt 2fpkt"];
1297--3251[label="0.0109489;3pkt 3fpkt"];
1297--3265[label="0.00921659;2pkt 2fpkt"];
1297--3270[label="0.00393701;1pkt 1fpkt"];
1297--3401[label="0.0140845;1pkt 1fpkt"];
1297--3404[label="0.00813008;1pkt 1fpkt"];
1297--3587[label="1;123pkt 123fpkt"];
1297--3647[label="1;1pkt 1fpkt"];
1297--3807[label="0.00492611;1pkt 1fpkt"];
1297--3945[label="0.875;7pkt 7fpkt"];
1297--3959[label="0.12;3pkt 3fpkt"];
1297--4210[label="0.0136054;2pkt 2fpkt"];
1297--4269[label="0.00465116;1pkt 1fpkt"];
1297--4301[label="0.112994;20pkt 20fpkt"];
1297--4307[label="0.0167364;4pkt 4fpkt"];
1297--4336[label="0.333333;27pkt 27fpkt"];
1297--4494[label="1;41pkt 41fpkt"];
1297--4625[label="0.5;1pkt 1fpkt"];
1297--4649[label="0.0144928;2pkt 2fpkt"];
1297--4731[label="0.024;3pkt 3fpkt"];
1297--5009[label="1;1pkt 1fpkt"];
1297--5072[label="0.01;1pkt 1fpkt"];
1297--5371[label="1;1pkt 1fpkt"];
1297--5471[label="1;3pkt 3fpkt"];
1297--5738[label="1;12pkt 12fpkt"];
1297--6087[label="0.0526316;1pkt 1fpkt"];
1297--6324[label="0.00806452;1pkt 1fpkt"];
1297--6341[label="0.00245098;1pkt 1fpkt"];
1297--6349[label="0.0769231;1pkt 1fpkt"];
1297--6391[label="0.0204082;2pkt 2fpkt"];
1297--6492[label="0.00699301;2pkt 2fpkt"];
1297--6753[label="1;2pkt 2fpkt"];
1297--6917[label="0.0102564;2pkt 2fpkt"];
1297--7084[label="1;1pkt 1fpkt"];
1297--7117[label="0.142857;2pkt 2fpkt"];
1297--7195[label="0.00206186;1pkt 1fpkt"];
1297--7842[label="0.0047619;1pkt 1fpkt"];
1297--7865[label="0.00763359;1pkt 1fpkt"];
1297--7887[label="0.00649351;1pkt 1fpkt"];
1297--8009[label="0.04;3pkt 3fpkt"];
1297--8070[label="1;19pkt 19fpkt"];
1297--8124[label="1;1pkt 1fpkt"];
1297--8157[label="0.0144928;2pkt 2fpkt"];
1297--8206[label="0.003663;1pkt 1fpkt"];
1297--8213[label="0.0136054;2pkt 2fpkt"];
1297--8224[label="0.00921659;2pkt 2fpkt"];
1297--8272[label="0.00465116;1pkt 1fpkt"];
1297--8291[label="0.0188679;1pkt 1fpkt"];
1297--8295[label="0.123457;20pkt 20fpkt"];
1297--8475[label="1;123pkt 123fpkt"];
1297--8487[label="1;1pkt 1fpkt"];
1297--8781[label="1;3pkt 3fpkt"];
1297--8852[label="0.00699301;2pkt 2fpkt"];
1297--8953[label="0.0714286;1pkt 1fpkt"];
1297--8997[label="0.0769231;1pkt 1fpkt"];
1297--9163[label="0.0636856;47pkt 47fpkt"];
1297--9194[label="0.0406504;30pkt 30fpkt"];
1297--9198[label="0.0677507;50pkt 50fpkt"];
1297--9234[label="0.0406504;30pkt 30fpkt"];
1297--9268[label="0.0406504;30pkt 30fpkt"];
1297--9270[label="1;3pkt 3fpkt"];
1297--9595[label="0.0138889;1pkt 1fpkt"];
1297--9743[label="1;4pkt 4fpkt"];
1297--9834[label="0.1;1pkt 1fpkt"];
1297--9893[label="1;1pkt 1fpkt"];
1297--9909[label="1;8pkt 8fpkt"];
1297--9997[label="1;24pkt 24fpkt"];
1297--10022[label="0.00346021;1pkt 1fpkt"];
1297--10165[label="1;41pkt 41fpkt"];
1297--10221[label="1;2pkt 2fpkt"];
1297--10289[label="0.0243902;1pkt 1fpkt"];
1297--10493[label="0.5;1pkt 1fpkt"];
1297--10513[label="0.0227273;1pkt 1fpkt"];
1297--10534[label="1;6pkt 6fpkt"];
1297--10567[label="0.00609756;1pkt 1fpkt"];
1297--10677[label="0.0214286;3pkt 3fpkt"];
1297--10693[label="0.00643777;3pkt 3fpkt"];
1297--10805[label="0.466667;7pkt 7fpkt"];
1297--10838[label="0.00334448;1pkt 1fpkt"];
1297--11428[label="0.00757576;1pkt 1fpkt"];
1297--11444[label="0.00233645;1pkt 1fpkt"];
1297--11525[label="0.0434783;1pkt 1fpkt"];
1297--11572[label="0.08;4pkt 4fpkt"];
1297--11668[label="1;2pkt 2fpkt"];
1297--11791[label="0.0344828;1pkt 1fpkt"];
1297--11920[label="0.0136986;2pkt 2fpkt"];
1297--12037[label="1;38pkt 38fpkt"];
1297--12095[label="0.106383;20pkt 20fpkt"];
1297--12107[label="0.0251177;16pkt 16fpkt"];
1297--12511[label="0.016129;1pkt 1fpkt"];
1297--12870[label="0.0895522;6pkt 6fpkt"];
1297--12961[label="0.00623053;2pkt 2fpkt"];
1297--13010[label="0.285714;2pkt 2fpkt"];
1297--13029[label="1;13pkt 13fpkt"];
1297--13154[label="0.0714286;2pkt 2fpkt"];
1297--13240[label="1;3pkt 3fpkt"];
1297--13481[label="1;4pkt 4fpkt"];
1297--13545[label="0.0384615;2pkt 2fpkt"];
1297--13710[label="1;40pkt 40fpkt"];
1297--13876[label="1;1pkt 1fpkt"];
1297--13900[label="1;6pkt 6fpkt"];
1297--14051[label="0.00334448;1pkt 1fpkt"];
1297--14350[label="0.00763359;1pkt 1fpkt"];
1297--14397[label="0.0454545;1pkt 1fpkt"];
1297--14527[label="0.0333333;1pkt 1fpkt"];
1297--14651[label="1;37pkt 37fpkt"];
1297--14679[label="0.106383;20pkt 20fpkt"];
1297--14688[label="0.0251177;16pkt 16fpkt"];
1297--15080[label="0.0895522;6pkt 6fpkt"];
1297--15123[label="0.00623053;2pkt 2fpkt"];
1297--15154[label="1;14pkt 14fpkt"];
1297--15226[label="0.0714286;2pkt 2fpkt"];
1297--15277[label="1;2pkt 2fpkt"];
1297--15395[label="1;5pkt 5fpkt"];
1297--15425[label="0.0384615;2pkt 2fpkt"];
1297--15597[label="1;6pkt 6fpkt"];
1297--15675[label="0.0033557;1pkt 1fpkt"];
1297--15829[label="0.00757576;1pkt 1fpkt"];
1297--15923[label="0.0333333;1pkt 1fpkt"];
1297--15994[label="1;37pkt 37fpkt"];
1297--16010[label="0.106952;20pkt 20fpkt"];
1297--16014[label="0.0251177;16pkt 16fpkt"];
1297--16308[label="0.0689655;2pkt 2fpkt"];
3647--7084[label="1;1pkt 1fpkt"];
3647--10221[label="1;1pkt 1fpkt"];
4494--8070[label="1;19pkt 19fpkt"];
4494--9198[label="0.121951;5pkt 5fpkt"];
4494--10165[label="1;41pkt 41fpkt"];
4494--13710[label="1;40pkt 40fpkt"];
5471--8781[label="1;3pkt 3fpkt"];
5471--9198[label="0.333333;1pkt 1fpkt"];
5471--11668[label="1;2pkt 2fpkt"];
7084--10221[label="1;1pkt 1fpkt"];
8070--10165[label="1;19pkt 19fpkt"];
8070--13710[label="0.947368;18pkt 18fpkt"];
8781--9198[label="0.333333;1pkt 1fpkt"];
8781--11668[label="1;2pkt 2fpkt"];
9743--13481[label="1;4pkt 4fpkt"];
9743--15395[label="1;4pkt 4fpkt"];
10165--13710[label="1;40pkt 40fpkt"];
10534--13900[label="1;6pkt 6fpkt"];
10534--15597[label="1;6pkt 6fpkt"];
12037--14651[label="1;37pkt 37fpkt"];
12037--15994[label="1;37pkt 37fpkt"];
13029--15154[label="1;13pkt 13fpkt"];
13481--15395[label="1;4pkt 4fpkt"];
13900--15597[label="1;6pkt 6fpkt"];
14651--15994[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.66" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="200.253.145.131"/>
      <from sec="1223615180" usec="0"/>
      <to sec="1223615429" usec="0"/>
    </slice>
    <from sec="1223615180" usec="0"/>
    <to sec="1223615429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.253.145.131"/>
      <from sec="1223615180" usec="0"/>
      <to sec="1223615429" usec="0"/>
    </slice>
    <from sec="1223615180" usec="0"/>
    <to sec="1223615429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
5[label="136.228.224.3s;2pkt 2fpkt", shape=rectangle, color=red];
4131[label="136.228.224.3;s;24pkt 24fpkt", shape=diamond, color=yellow];
8402[label="136.228.224.3;s;24pkt 24fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.224.3:*, 210.67.0.252:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46%)&lt;BR/&gt; 1154: (4%)&lt;BR/&gt; 1149: (4%)&lt;BR/&gt; 1069: (4%)&lt;BR/&gt; 1024: (4%)&gt;];
}
5--882[label="1;2pkt 2fpkt"];
5--4131[label="1;2pkt 2fpkt"];
5--7121[label="1;2pkt 2fpkt"];
5--8402[label="1;2pkt 2fpkt"];
4131--5053[label="0.0833333;2pkt 2fpkt"];
4131--6603[label="0.0416667;1pkt 1fpkt"];
4131--7121[label="0.166667;4pkt 4fpkt"];
4131--7200[label="0.0416667;1pkt 1fpkt"];
4131--8402[label="1;24pkt 24fpkt"];
4131--8537[label="0.0833333;2pkt 2fpkt"];
8402--8537[label="0.0833333;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="210.67.0.252" dst_port="80" src_ip="136.228.224.3"/>
    </slice>
    <from sec="1223615231" usec="0"/>
    <to sec="1223615611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
4146[label="209.208.218.202;d;4pkt 4fpkt", shape=diamond, color=yellow];
4147[label="162.73.161.93;s;4pkt 4fpkt", shape=diamond, color=yellow];
7680[label="209.208.218.202;d;4pkt 4fpkt", shape=hexagon, color=black];
10908[label="162.73.161.93;9pkt 9fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.161.93:*, 209.208.218.202:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49220: (9.52381%)&lt;BR/&gt; 49219: (9.52381%)&lt;BR/&gt; 49218: (9.52381%)&lt;BR/&gt; 49217: (9.52381%)&gt;];
}
4146--4147[label="1;4pkt 4fpkt"];
4146--7680[label="1;4pkt 4fpkt"];
4146--10908[label="1;4pkt 4fpkt"];
4147--7680[label="1;4pkt 4fpkt"];
4147--10908[label="1;4pkt 4fpkt"];
7680--10908[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="209.208.218.202" dst_port="80" src_ip="162.73.161.93"/>
    </slice>
    <from sec="1223614996" usec="0"/>
    <to sec="1223615285" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
4201[label="213.33.147.147;d;704pkt 704fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.33.147.147:15369}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15369: (50%)&lt;BR/&gt; 6881: (0.284091%)&lt;BR/&gt; 80: (0.284091%)&lt;BR/&gt; 61000: (0.142045%)&lt;BR/&gt; 27456: (0.142045%)&gt;];
}
4201--9198[label="0.00142045;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.147.147" dst_port="15369"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
4205[label="192.168.128.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
4206[label="136.228.28.91;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.28.91:4445, 192.168.128.255:4445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4445: (100%)&gt;];
}
4205--4206[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.128.255" dst_port="4445" src_ip="136.228.28.91" src_port="4445"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
4215[label="162.73.198.7;d;856pkt 856fpkt", shape=diamond, color=yellow];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:20129, 162.73.198.7:20129}[71.9626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20129: (85.514%)&lt;BR/&gt; 0: (0.46729%)&lt;BR/&gt; 20128: (0.350467%)&lt;BR/&gt; 53249: (0.175234%)&lt;BR/&gt; 15511: (0.116822%)&gt;];
}
4215--9163[label="0.00233645;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.198.7" dst_port="20129" src_port="20129"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,011,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
2196[label="219.87.30.7;s;3pkt 3fpkt", shape=diamond, color=yellow];
4216[label="164.25.23.167;d;3pkt 3fpkt", shape=diamond, color=yellow];
7502[label="164.25.23.167;d;3pkt 3fpkt", shape=hexagon, color=black];
10811[label="213.138.34.87;240pkt 240fpkt", shape=pentagon, color=darkviolet];
14040[label="213.138.34.87;240pkt 240fpkt", shape=invtriangle, color=brown];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.138.34.87:5101, *:*}[98.3607%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5101: (49.2843%)&lt;BR/&gt; 56619: (0.408998%)&lt;BR/&gt; 6664: (0.306748%)&lt;BR/&gt; 1925: (0.306748%)&lt;BR/&gt; 65308: (0.204499%)&gt;];
}
2196--3773[label="1;1pkt 1fpkt"];
2196--4216[label="0.333333;1pkt 1fpkt"];
2196--7237[label="1;1pkt 1fpkt"];
2196--7502[label="0.333333;1pkt 1fpkt"];
2196--8245[label="0.333333;1pkt 1fpkt"];
4216--7502[label="1;3pkt 3fpkt"];
4216--9176[label="0.333333;1pkt 1fpkt"];
4216--9199[label="0.333333;1pkt 1fpkt"];
4216--9216[label="0.333333;1pkt 1fpkt"];
4216--9250[label="0.333333;1pkt 1fpkt"];
4216--10811[label="0.333333;1pkt 1fpkt"];
4216--11499[label="0.333333;1pkt 1fpkt"];
4216--14040[label="0.333333;1pkt 1fpkt"];
7502--9176[label="0.333333;1pkt 1fpkt"];
7502--9199[label="0.333333;1pkt 1fpkt"];
7502--9216[label="0.333333;1pkt 1fpkt"];
7502--9250[label="0.333333;1pkt 1fpkt"];
7502--10811[label="0.333333;1pkt 1fpkt"];
7502--11499[label="0.333333;1pkt 1fpkt"];
7502--14040[label="0.333333;1pkt 1fpkt"];
10811--14040[label="1;240pkt 240fpkt"];
</description>
    <slice>
      <filter src_ip="213.138.34.87" src_port="5101"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
357[label="192.113.17.66s;56pkt 56fpkt", shape=rectangle, color=red];
1441[label="218.180.202.10;s;7pkt 7fpkt", shape=diamond, color=yellow];
2183[label="164.25.102.74;d;156pkt 156fpkt", shape=diamond, color=yellow];
4237[label="164.25.70.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
4240[label="164.25.117.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
4241[label="164.25.16.30;d;9pkt 9fpkt", shape=diamond, color=yellow];
7230[label="218.180.202.10;s;7pkt 7fpkt", shape=hexagon, color=black];
8243[label="164.25.70.205;d;1pkt 1fpkt", shape=hexagon, color=black];
8245[label="164.25.102.74;d;156pkt 156fpkt", shape=hexagon, color=black];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.113.17.66:*, 164.25.102.74:*}[87.6471%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (2.41117%)&lt;BR/&gt; 3128: (2.41117%)&lt;BR/&gt; 80: (2.41117%)&lt;BR/&gt; 1080: (1.90355%)&lt;BR/&gt; 8080: (1.52284%)&gt;];
}
357--409[label="0.0357143;2pkt 2fpkt"];
357--532[label="0.0357143;2pkt 2fpkt"];
357--549[label="0.0357143;2pkt 2fpkt"];
357--2183[label="1;56pkt 56fpkt"];
357--8245[label="1;56pkt 56fpkt"];
1441--2183[label="0.142857;1pkt 1fpkt"];
1441--3764[label="0.333333;1pkt 1fpkt"];
1441--4237[label="1;1pkt 1fpkt"];
1441--4238[label="0.5;1pkt 1fpkt"];
1441--4239[label="0.5;1pkt 1fpkt"];
1441--4240[label="1;1pkt 1fpkt"];
1441--4241[label="0.142857;1pkt 1fpkt"];
1441--7230[label="1;7pkt 7fpkt"];
1441--8243[label="1;1pkt 1fpkt"];
1441--8245[label="0.142857;1pkt 1fpkt"];
2183--2196[label="0.333333;1pkt 1fpkt"];
2183--7230[label="0.142857;1pkt 1fpkt"];
2183--8245[label="1;156pkt 156fpkt"];
4237--7230[label="1;1pkt 1fpkt"];
4237--8243[label="1;1pkt 1fpkt"];
4240--7230[label="1;1pkt 1fpkt"];
4241--7230[label="0.142857;1pkt 1fpkt"];
7230--8243[label="1;1pkt 1fpkt"];
7230--8245[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.102.74" src_ip="192.113.17.66"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
3416[label="136.228.116.48;d;124pkt 124fpkt", shape=diamond, color=yellow];
9388[label="202.148.44.5;93pkt 93fpkt", shape=pentagon, color=darkviolet];
13297[label="202.148.44.5;94pkt 94fpkt", shape=invtriangle, color=brown];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.148.44.5:80, 136.228.104.162:*}[27.907%]&lt;BR/&gt;{202.148.44.5:80, 136.228.116.48:*}[26.7442%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59109: (0.482315%)&lt;BR/&gt; 59093: (0.482315%)&lt;BR/&gt; 59088: (0.482315%)&lt;BR/&gt; 59086: (0.482315%)&gt;];
}
3416--4347[label="0.489362;46pkt 46fpkt"];
3416--9163[label="0.177419;22pkt 22fpkt"];
3416--9194[label="0.016129;2pkt 2fpkt"];
3416--9234[label="0.016129;2pkt 2fpkt"];
3416--9268[label="0.016129;2pkt 2fpkt"];
3416--9388[label="0.483871;45pkt 45fpkt"];
3416--9549[label="0.0952381;2pkt 2fpkt"];
3416--9691[label="0.0178571;1pkt 1fpkt"];
3416--9853[label="0.285714;2pkt 2fpkt"];
3416--10870[label="0.333333;3pkt 3fpkt"];
3416--11304[label="0.2;4pkt 4fpkt"];
3416--11922[label="0.333333;1pkt 1fpkt"];
3416--12578[label="0.217391;10pkt 10fpkt"];
3416--13297[label="0.489362;46pkt 46fpkt"];
3416--13454[label="0.0181818;1pkt 1fpkt"];
3416--13534[label="0.285714;2pkt 2fpkt"];
3416--14062[label="0.333333;3pkt 3fpkt"];
3416--15381[label="0.0181818;1pkt 1fpkt"];
3416--15685[label="0.25;2pkt 2fpkt"];
9388--13297[label="1;93pkt 93fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.116.48" src_ip="202.148.44.5" src_port="80"/>
      <filter dst_ip="136.228.104.162" src_ip="202.148.44.5" src_port="80"/>
    </slice>
    <from sec="1223614838" usec="0"/>
    <to sec="1223615500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
2017[label="162.73.188.145;d;41pkt 41fpkt", shape=diamond, color=yellow];
2031[label="20.168.127.83;s;5pkt 5fpkt", shape=diamond, color=yellow];
6865[label="162.73.188.145;d;23pkt 23fpkt", shape=hexagon, color=black];
6874[label="20.168.127.83;s;5pkt 5fpkt", shape=hexagon, color=black];
10752[label="20.168.127.83;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14011[label="20.168.127.83;4pkt 4fpkt", shape=invtriangle, color=brown];
15651[label="20.168.127.83;4pkt 4fpkt", shape=invhouse, color=bisque];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 162.73.188.145:31878}[68.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31878: (27.0115%)&lt;BR/&gt; 35926: (14.3678%)&lt;BR/&gt; 2016: (4.02299%)&lt;BR/&gt; 62211: (2.87356%)&lt;BR/&gt; 57273: (2.87356%)&gt;];
}
2017--2031[label="0.2;1pkt 1fpkt"];
2017--2694[label="1;1pkt 1fpkt"];
2017--6569[label="1;1pkt 1fpkt"];
2017--6865[label="1;23pkt 23fpkt"];
2017--6874[label="0.2;1pkt 1fpkt"];
2017--9163[label="0.0243902;1pkt 1fpkt"];
2017--9194[label="0.0243902;1pkt 1fpkt"];
2017--9198[label="0.0243902;1pkt 1fpkt"];
2017--9234[label="0.0243902;1pkt 1fpkt"];
2017--9268[label="0.0243902;1pkt 1fpkt"];
2017--10544[label="0.333333;2pkt 2fpkt"];
2017--10752[label="0.2;1pkt 1fpkt"];
2017--12852[label="1;1pkt 1fpkt"];
2017--13906[label="0.285714;2pkt 2fpkt"];
2017--14011[label="0.25;1pkt 1fpkt"];
2017--15071[label="1;1pkt 1fpkt"];
2017--15601[label="0.333333;2pkt 2fpkt"];
2017--15651[label="0.25;1pkt 1fpkt"];
2031--6865[label="0.2;1pkt 1fpkt"];
2031--6874[label="1;5pkt 5fpkt"];
2031--10752[label="1;5pkt 5fpkt"];
2031--14011[label="1;4pkt 4fpkt"];
2031--15651[label="1;4pkt 4fpkt"];
6865--6874[label="0.2;1pkt 1fpkt"];
6865--9163[label="0.0434783;1pkt 1fpkt"];
6865--9194[label="0.0434783;1pkt 1fpkt"];
6865--9198[label="0.0434783;1pkt 1fpkt"];
6865--9234[label="0.0434783;1pkt 1fpkt"];
6865--9268[label="0.0434783;1pkt 1fpkt"];
6865--10544[label="0.166667;1pkt 1fpkt"];
6865--10752[label="0.2;1pkt 1fpkt"];
6865--12852[label="1;1pkt 1fpkt"];
6865--13906[label="0.142857;1pkt 1fpkt"];
6865--14011[label="0.25;1pkt 1fpkt"];
6865--15071[label="1;1pkt 1fpkt"];
6865--15601[label="0.166667;1pkt 1fpkt"];
6865--15651[label="0.25;1pkt 1fpkt"];
6874--10752[label="1;5pkt 5fpkt"];
6874--14011[label="1;4pkt 4fpkt"];
6874--15651[label="1;4pkt 4fpkt"];
10752--14011[label="1;4pkt 4fpkt"];
10752--15651[label="1;4pkt 4fpkt"];
14011--15651[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.188.145" dst_port="31878"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_189{
style=filled;
color=gray75;
782[label="136.228.193.46;d;300pkt 300fpkt", shape=diamond, color=yellow];
783[label="200.193.110.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
1772[label="200.201.165.94;s;32pkt 32fpkt", shape=diamond, color=yellow];
4448[label="194.252.158.129;s;2pkt 2fpkt", shape=diamond, color=yellow];
6488[label="136.228.193.46;d;196pkt 196fpkt", shape=hexagon, color=black];
6490[label="200.193.110.10;s;1pkt 1fpkt", shape=hexagon, color=black];
6703[label="200.201.165.94;s;104pkt 104fpkt", shape=hexagon, color=black];
9408[label="203.26.134.6;46pkt 46fpkt", shape=pentagon, color=darkviolet];
10196[label="203.7.181.50;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11511[label="200.210.245.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13220[label="78.138.181.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13308[label="203.26.134.6;46pkt 46fpkt", shape=invtriangle, color=brown];
13348[label="200.193.110.10;1pkt 1fpkt", shape=invtriangle, color=brown];
13727[label="203.7.181.50;2pkt 2fpkt", shape=invtriangle, color=brown];
14415[label="195.179.197.136;6pkt 6fpkt", shape=invtriangle, color=brown];
15328[label="200.193.110.10;1pkt 1fpkt", shape=invhouse, color=bisque];
15861[label="195.179.197.136;6pkt 6fpkt", shape=invhouse, color=bisque];
16327[label="78.138.181.253;1pkt 1fpkt", shape=invhouse, color=bisque];
stat189[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.201.165.94:80, 136.228.193.46:*}[40.3561%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.5901%)&lt;BR/&gt; 18487: (3.60481%)&lt;BR/&gt; 19101: (1.8024%)&lt;BR/&gt; 18164: (1.2016%)&lt;BR/&gt; 2764: (0.400534%)&gt;];
}
782--783[label="1;1pkt 1fpkt"];
782--1629[label="0.08;24pkt 24fpkt"];
782--1772[label="1;32pkt 32fpkt"];
782--4448[label="1;2pkt 2fpkt"];
782--6488[label="1;196pkt 196fpkt"];
782--6490[label="1;1pkt 1fpkt"];
782--6703[label="1;104pkt 104fpkt"];
782--9163[label="0.00666667;2pkt 2fpkt"];
782--9408[label="0.304348;14pkt 14fpkt"];
782--10196[label="1;2pkt 2fpkt"];
782--11511[label="1;1pkt 1fpkt"];
782--13220[label="1;1pkt 1fpkt"];
782--13308[label="0.304348;14pkt 14fpkt"];
782--13348[label="1;1pkt 1fpkt"];
782--13727[label="1;2pkt 2fpkt"];
782--14415[label="0.166667;1pkt 1fpkt"];
782--15328[label="1;1pkt 1fpkt"];
782--15861[label="0.166667;1pkt 1fpkt"];
782--16327[label="1;1pkt 1fpkt"];
783--6488[label="1;1pkt 1fpkt"];
783--6490[label="1;1pkt 1fpkt"];
783--13348[label="1;1pkt 1fpkt"];
783--15328[label="1;1pkt 1fpkt"];
4448--6488[label="1;2pkt 2fpkt"];
6488--6490[label="1;1pkt 1fpkt"];
6488--6703[label="1;104pkt 104fpkt"];
6488--9163[label="0.0102041;2pkt 2fpkt"];
6488--10196[label="1;2pkt 2fpkt"];
6488--13220[label="1;1pkt 1fpkt"];
6488--13348[label="1;1pkt 1fpkt"];
6488--13727[label="1;2pkt 2fpkt"];
6488--14415[label="0.166667;1pkt 1fpkt"];
6488--15328[label="1;1pkt 1fpkt"];
6488--15861[label="0.166667;1pkt 1fpkt"];
6488--16327[label="1;1pkt 1fpkt"];
6490--13348[label="1;1pkt 1fpkt"];
6490--15328[label="1;1pkt 1fpkt"];
9408--13308[label="1;46pkt 46fpkt"];
10196--13727[label="1;2pkt 2fpkt"];
13220--16327[label="1;1pkt 1fpkt"];
13348--15328[label="1;1pkt 1fpkt"];
14415--15861[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.46" src_ip="200.201.165.94" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="205.178.129.189"/>
      <from sec="1223615261" usec="0"/>
      <to sec="1223615495" usec="0"/>
    </slice>
    <from sec="1223615261" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="104.243.251.189"/>
      <from sec="1223615263" usec="0"/>
      <to sec="1223615283" usec="0"/>
    </slice>
    <from sec="1223615263" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_192{
style=filled;
color=gray75;
1211[label="136.228.154.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
4508[label="104.243.249.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat192[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.249.199:80, 136.228.154.152:3145}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3145: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1211--4508[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.154.152" dst_port="3145" src_ip="104.243.249.199" src_port="80"/>
    </slice>
    <from sec="1223615151" usec="0"/>
    <to sec="1223615530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_193{
style=filled;
color=gray75;
4499[label="136.228.104.208;d;39pkt 39fpkt", shape=diamond, color=yellow];
4525[label="18.78.169.72;s;1pkt 1fpkt", shape=diamond, color=yellow];
12188[label="194.241.192.175;19pkt 19fpkt", shape=pentagon, color=darkviolet];
12797[label="21.99.146.218;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14731[label="194.241.192.175;19pkt 19fpkt", shape=invtriangle, color=brown];
16034[label="194.241.192.175;20pkt 20fpkt", shape=invhouse, color=bisque];
stat193[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.241.192.175:80, 136.228.104.208:*}[51.2821%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3669: (2%)&lt;BR/&gt; 3661: (2%)&lt;BR/&gt; 3650: (2%)&lt;BR/&gt; 3647: (2%)&gt;];
}
4499--4525[label="1;1pkt 1fpkt"];
4499--9198[label="0.025641;1pkt 1fpkt"];
4499--12188[label="1;19pkt 19fpkt"];
4499--12797[label="1;2pkt 2fpkt"];
4499--14731[label="1;19pkt 19fpkt"];
4499--16034[label="1;20pkt 20fpkt"];
4525--9198[label="1;1pkt 1fpkt"];
12188--14731[label="1;19pkt 19fpkt"];
12188--16034[label="1;19pkt 19fpkt"];
14731--16034[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.208" src_ip="194.241.192.175" src_port="80"/>
    </slice>
    <from sec="1223615266" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_194{
style=filled;
color=gray75;
4539[label="136.228.104.144;d;12pkt 12fpkt", shape=diamond, color=yellow];
4540[label="195.144.141.205;s;12pkt 12fpkt", shape=diamond, color=yellow];
7693[label="136.228.104.144;d;13pkt 13fpkt", shape=hexagon, color=black];
7694[label="195.144.141.205;s;12pkt 12fpkt", shape=hexagon, color=black];
9145[label="136.228.104.144;d;12pkt 12fpkt", shape=polygon, color=gold];
9146[label="195.144.141.205;s;12pkt 12fpkt", shape=polygon, color=gold];
stat194[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.144.141.205:80, 136.228.104.144:*}[69.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.6712%)&lt;BR/&gt; 46090: (4.10959%)&lt;BR/&gt; 46089: (4.10959%)&lt;BR/&gt; 4003: (4.10959%)&lt;BR/&gt; 4001: (4.10959%)&gt;];
}
4539--4540[label="1;12pkt 12fpkt"];
4539--7693[label="1;12pkt 12fpkt"];
4539--7694[label="1;12pkt 12fpkt"];
4539--9145[label="1;12pkt 12fpkt"];
4539--9146[label="1;12pkt 12fpkt"];
4539--9198[label="0.166667;2pkt 2fpkt"];
4540--7693[label="1;12pkt 12fpkt"];
4540--7694[label="1;12pkt 12fpkt"];
4540--9145[label="1;12pkt 12fpkt"];
4540--9146[label="1;12pkt 12fpkt"];
4540--9198[label="0.166667;2pkt 2fpkt"];
7693--7694[label="1;12pkt 12fpkt"];
7693--9145[label="1;12pkt 12fpkt"];
7693--9146[label="1;12pkt 12fpkt"];
7693--9198[label="0.153846;2pkt 2fpkt"];
7694--9145[label="1;12pkt 12fpkt"];
7694--9146[label="1;12pkt 12fpkt"];
7694--9198[label="0.166667;2pkt 2fpkt"];
9145--9146[label="1;12pkt 12fpkt"];
9145--9198[label="0.166667;2pkt 2fpkt"];
9146--9198[label="0.166667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.144" src_ip="195.144.141.205" src_port="80"/>
    </slice>
    <from sec="1223615288" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.200.213.184"/>
      <from sec="1223615300" usec="0"/>
      <to sec="1223615456" usec="0"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="77.200.213.184"/>
      <from sec="1223615300" usec="0"/>
      <to sec="1223615456" usec="0"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,010,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_197{
style=filled;
color=gray75;
140[label="213.142.24.142s;2pkt 2fpkt", shape=rectangle, color=red];
4473[label="136.228.154.168;d;14pkt 14fpkt", shape=diamond, color=yellow];
4580[label="213.142.24.142;s;12pkt 12fpkt", shape=diamond, color=yellow];
5507[label="112.5.228.72;s;580pkt 580fpkt", shape=diamond, color=yellow];
7705[label="213.142.24.142;s;12pkt 12fpkt", shape=hexagon, color=black];
8403[label="136.228.154.168;d;14pkt 14fpkt", shape=hexagon, color=black];
stat197[shape=component, label=&lt;Rules:&lt;BR/&gt;{112.5.228.72:*, *:445}[97.8078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (45.8991%)&lt;BR/&gt; 80: (4.10095%)&lt;BR/&gt; 1419: (0.394322%)&lt;BR/&gt; 1417: (0.394322%)&lt;BR/&gt; 1447: (0.315457%)&gt;];
}
140--4473[label="1;2pkt 2fpkt"];
140--4580[label="1;2pkt 2fpkt"];
140--7705[label="1;2pkt 2fpkt"];
140--8403[label="1;2pkt 2fpkt"];
4473--4580[label="1;12pkt 12fpkt"];
4473--5507[label="0.0714286;1pkt 1fpkt"];
4473--7705[label="1;12pkt 12fpkt"];
4473--8403[label="1;14pkt 14fpkt"];
4473--9194[label="0.0714286;1pkt 1fpkt"];
4473--9234[label="0.0714286;1pkt 1fpkt"];
4473--9268[label="0.0714286;1pkt 1fpkt"];
4473--13034[label="0.0714286;1pkt 1fpkt"];
4580--7705[label="1;12pkt 12fpkt"];
4580--8403[label="1;12pkt 12fpkt"];
5507--8403[label="0.0714286;1pkt 1fpkt"];
5507--8672[label="0.125;1pkt 1fpkt"];
7705--8403[label="1;12pkt 12fpkt"];
8403--9194[label="0.0714286;1pkt 1fpkt"];
8403--9234[label="0.0714286;1pkt 1fpkt"];
8403--9268[label="0.0714286;1pkt 1fpkt"];
8403--13034[label="0.0714286;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="112.5.228.72"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
269[label="142.16.165.103d;1pkt 1fpkt", shape=rectangle, color=red];
4583[label="200.52.86.30;s;1pkt 1fpkt", shape=diamond, color=yellow];
7706[label="200.52.86.30;s;1pkt 1fpkt", shape=hexagon, color=black];
9818[label="200.52.86.30;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13518[label="200.52.86.30;1pkt 1fpkt", shape=invtriangle, color=brown];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.52.86.30:1507, 142.16.165.103:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1507: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
269--1014[label="1;1pkt 1fpkt"];
269--4583[label="1;1pkt 1fpkt"];
269--5990[label="1;1pkt 1fpkt"];
269--7706[label="1;1pkt 1fpkt"];
269--8876[label="1;1pkt 1fpkt"];
269--9818[label="1;1pkt 1fpkt"];
269--13518[label="1;1pkt 1fpkt"];
4583--5990[label="1;1pkt 1fpkt"];
4583--7706[label="1;1pkt 1fpkt"];
4583--8876[label="1;1pkt 1fpkt"];
4583--9818[label="1;1pkt 1fpkt"];
4583--13518[label="1;1pkt 1fpkt"];
7706--8876[label="1;1pkt 1fpkt"];
7706--9818[label="1;1pkt 1fpkt"];
7706--13518[label="1;1pkt 1fpkt"];
9818--13518[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.165.103" dst_port="80" src_ip="200.52.86.30" src_port="1507"/>
    </slice>
    <from sec="1223615323" usec="0"/>
    <to sec="1223615347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_199{
style=filled;
color=gray75;
4587[label="196.227.49.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
4588[label="142.16.150.4;d;1pkt 1fpkt", shape=diamond, color=yellow];
7707[label="196.227.49.186;s;1pkt 1fpkt", shape=hexagon, color=black];
12331[label="196.227.49.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat199[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.227.49.186:80, 142.16.150.4:56404}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56404: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4587--4588[label="1;1pkt 1fpkt"];
4587--7707[label="1;1pkt 1fpkt"];
4587--12331[label="1;1pkt 1fpkt"];
4588--7707[label="1;1pkt 1fpkt"];
4588--12331[label="1;1pkt 1fpkt"];
7707--12331[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.150.4" dst_port="56404" src_ip="196.227.49.186" src_port="80"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
4586[label="196.227.49.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
4589[label="142.16.150.4;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.150.4:56404, 196.227.49.186:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56404: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4586--4589[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.227.49.186" dst_port="80" src_ip="142.16.150.4" src_port="56404"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
3160[label="142.16.165.103;s;144pkt 144fpkt", shape=diamond, color=yellow];
4582[label="200.52.86.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
4599[label="72.214.138.9;d;1pkt 1fpkt", shape=diamond, color=yellow];
5229[label="203.70.193.41;d;17pkt 17fpkt", shape=diamond, color=yellow];
7445[label="142.16.165.103;s;114pkt 114fpkt", shape=hexagon, color=black];
8695[label="203.70.193.41;d;17pkt 17fpkt", shape=hexagon, color=black];
11061[label="142.16.165.103;148pkt 148fpkt", shape=pentagon, color=darkviolet];
14158[label="142.16.165.103;148pkt 148fpkt", shape=invtriangle, color=brown];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.165.103:80, *:*}[31.7881%]&lt;BR/&gt;{142.16.165.103:123, *:123}[27.8146%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (44.7458%)&lt;BR/&gt; 80: (18.4746%)&lt;BR/&gt; 12045: (0.677966%)&lt;BR/&gt; 11902: (0.677966%)&lt;BR/&gt; 10123: (0.677966%)&gt;];
}
3160--4582[label="1;1pkt 1fpkt"];
3160--4599[label="1;1pkt 1fpkt"];
3160--5229[label="0.882353;15pkt 15fpkt"];
3160--5234[label="0.265306;13pkt 13fpkt"];
3160--7445[label="1;114pkt 114fpkt"];
3160--8695[label="0.882353;15pkt 15fpkt"];
3160--9163[label="0.0416667;6pkt 6fpkt"];
3160--9194[label="0.0625;9pkt 9fpkt"];
3160--9198[label="0.0347222;5pkt 5fpkt"];
3160--9234[label="0.0625;9pkt 9fpkt"];
3160--9268[label="0.0625;9pkt 9fpkt"];
3160--11061[label="0.993056;143pkt 143fpkt"];
3160--14158[label="0.993056;143pkt 143fpkt"];
4582--7445[label="1;1pkt 1fpkt"];
4582--11061[label="1;1pkt 1fpkt"];
4582--14158[label="1;1pkt 1fpkt"];
4599--7445[label="1;1pkt 1fpkt"];
4599--11061[label="1;1pkt 1fpkt"];
4599--14158[label="1;1pkt 1fpkt"];
5229--7445[label="0.764706;13pkt 13fpkt"];
5229--8695[label="1;17pkt 17fpkt"];
5229--9194[label="0.294118;5pkt 5fpkt"];
5229--9198[label="0.0588235;1pkt 1fpkt"];
5229--9234[label="0.294118;5pkt 5fpkt"];
5229--9268[label="0.294118;5pkt 5fpkt"];
5229--11061[label="0.882353;15pkt 15fpkt"];
5229--14158[label="0.882353;15pkt 15fpkt"];
7445--8695[label="0.764706;13pkt 13fpkt"];
7445--9163[label="0.0526316;6pkt 6fpkt"];
7445--9194[label="0.0789474;9pkt 9fpkt"];
7445--9234[label="0.0789474;9pkt 9fpkt"];
7445--9268[label="0.0789474;9pkt 9fpkt"];
7445--11061[label="0.991228;113pkt 113fpkt"];
7445--14158[label="0.991228;113pkt 113fpkt"];
8695--9194[label="0.294118;5pkt 5fpkt"];
8695--9198[label="0.0588235;1pkt 1fpkt"];
8695--9234[label="0.294118;5pkt 5fpkt"];
8695--9268[label="0.294118;5pkt 5fpkt"];
8695--11061[label="0.882353;15pkt 15fpkt"];
8695--14158[label="0.882353;15pkt 15fpkt"];
11061--14158[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter src_ip="142.16.165.103" src_port="80"/>
      <filter dst_port="123" src_ip="142.16.165.103" src_port="123"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
14[label="19.124.83.11s;1pkt 1fpkt", shape=rectangle, color=red];
4624[label="19.124.83.11;s;2pkt 2fpkt", shape=diamond, color=yellow];
8095[label="19.124.83.11;s;2pkt 2fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.124.83.11:2152, 142.243.151.3:80}[50%]&lt;BR/&gt;{19.124.83.11:2215, 142.243.151.3:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2215: (30%)&lt;BR/&gt; 2152: (20%)&gt;];
}
14--2363[label="1;1pkt 1fpkt"];
14--4624[label="1;1pkt 1fpkt"];
14--6417[label="1;1pkt 1fpkt"];
14--8095[label="1;1pkt 1fpkt"];
4624--6417[label="1;2pkt 2fpkt"];
4624--8095[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.151.3" dst_port="80" src_ip="19.124.83.11" src_port="2215"/>
      <filter dst_ip="142.243.151.3" dst_port="80" src_ip="19.124.83.11" src_port="2152"/>
    </slice>
    <from sec="1223615346" usec="0"/>
    <to sec="1223615396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
4641[label="210.192.150.166;s;2pkt 2fpkt", shape=diamond, color=yellow];
7715[label="210.192.150.166;s;2pkt 2fpkt", shape=hexagon, color=black];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.192.150.166:80, 162.73.251.25:1146}[33.3333%]&lt;BR/&gt;{210.192.150.166:80, 162.73.251.30:50236}[33.3333%]&lt;BR/&gt;{210.192.150.166:80, 162.73.251.30:50237}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50236: (25%)&lt;BR/&gt; 50237: (12.5%)&lt;BR/&gt; 1146: (12.5%)&gt;];
}
4641--4642[label="1;2pkt 2fpkt"];
4641--7715[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.251.30" dst_port="50237" src_ip="210.192.150.166" src_port="80"/>
      <filter dst_ip="162.73.251.30" dst_port="50236" src_ip="210.192.150.166" src_port="80"/>
      <filter dst_ip="162.73.251.25" dst_port="1146" src_ip="210.192.150.166" src_port="80"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
4640[label="210.192.150.166;d;2pkt 2fpkt", shape=diamond, color=yellow];
4643[label="162.73.251.30;s;4pkt 4fpkt", shape=diamond, color=yellow];
8100[label="162.73.251.30;s;4pkt 4fpkt", shape=hexagon, color=black];
9829[label="162.73.251.30;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13521[label="162.73.251.30;4pkt 4fpkt", shape=invtriangle, color=brown];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.251.30:50211, 107.150.181.36:80}[25%]&lt;BR/&gt;{162.73.251.30:50238, 107.150.181.36:80}[25%]&lt;BR/&gt;{162.73.251.30:50236, 210.192.150.166:80}[25%]&lt;BR/&gt;{162.73.251.30:50237, 210.192.150.166:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50237: (13.8889%)&lt;BR/&gt; 50236: (13.8889%)&lt;BR/&gt; 50238: (11.1111%)&lt;BR/&gt; 50211: (11.1111%)&gt;];
}
4640--4643[label="1;2pkt 2fpkt"];
4640--8100[label="1;2pkt 2fpkt"];
4640--9829[label="1;2pkt 2fpkt"];
4640--13521[label="1;2pkt 2fpkt"];
4643--8100[label="1;4pkt 4fpkt"];
4643--9829[label="1;4pkt 4fpkt"];
4643--13521[label="1;4pkt 4fpkt"];
8100--9829[label="1;4pkt 4fpkt"];
8100--13521[label="1;4pkt 4fpkt"];
9829--13521[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="210.192.150.166" dst_port="80" src_ip="162.73.251.30" src_port="50237"/>
      <filter dst_ip="210.192.150.166" dst_port="80" src_ip="162.73.251.30" src_port="50236"/>
      <filter dst_ip="107.150.181.36" dst_port="80" src_ip="162.73.251.30" src_port="50238"/>
      <filter dst_ip="107.150.181.36" dst_port="80" src_ip="162.73.251.30" src_port="50211"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
837[label="162.73.232.37;d;253pkt 253fpkt", shape=diamond, color=yellow];
2960[label="72.211.44.34;s;14pkt 14fpkt", shape=diamond, color=yellow];
4431[label="98.149.238.99;s;5pkt 5fpkt", shape=diamond, color=yellow];
4621[label="166.165.93.61;s;1pkt 1fpkt", shape=diamond, color=yellow];
5236[label="213.0.96.67;s;40pkt 40fpkt", shape=diamond, color=yellow];
5360[label="193.154.80.114;s;1pkt 1fpkt", shape=diamond, color=yellow];
5456[label="192.109.213.242;s;2pkt 2fpkt", shape=diamond, color=yellow];
5473[label="104.6.73.248;s;1pkt 1fpkt", shape=diamond, color=yellow];
5952[label="162.73.232.37;d;61pkt 61fpkt", shape=hexagon, color=black];
6493[label="208.45.64.35;s;47pkt 47fpkt", shape=hexagon, color=black];
6697[label="72.211.44.34;s;11pkt 11fpkt", shape=hexagon, color=black];
8507[label="192.109.213.242;s;1pkt 1fpkt", shape=hexagon, color=black];
9702[label="117.50.197.22;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9877[label="72.211.44.34;28pkt 28fpkt", shape=pentagon, color=darkviolet];
10357[label="166.165.93.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10391[label="213.0.96.64;60pkt 60fpkt", shape=pentagon, color=darkviolet];
10523[label="77.104.82.71;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10684[label="78.25.16.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10971[label="23.10.25.98;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11002[label="98.149.238.99;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11073[label="8.187.67.104;87pkt 87fpkt", shape=pentagon, color=darkviolet];
11272[label="207.9.75.117;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11418[label="8.189.37.128;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11570[label="208.10.79.137;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12038[label="209.150.123.166;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12077[label="210.67.0.169;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12083[label="98.130.84.169;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12515[label="200.53.244.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13102[label="192.109.213.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13167[label="99.129.119.249;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13550[label="72.211.44.34;28pkt 28fpkt", shape=invtriangle, color=brown];
13824[label="213.0.96.64;60pkt 60fpkt", shape=invtriangle, color=brown];
13892[label="77.104.82.71;1pkt 1fpkt", shape=invtriangle, color=brown];
14344[label="8.189.37.128;2pkt 2fpkt", shape=invtriangle, color=brown];
14895[label="200.53.244.198;2pkt 2fpkt", shape=invtriangle, color=brown];
15429[label="72.211.44.34;28pkt 28fpkt", shape=invhouse, color=bisque];
15552[label="213.0.96.64;60pkt 60fpkt", shape=invhouse, color=bisque];
15592[label="77.104.82.71;1pkt 1fpkt", shape=invhouse, color=bisque];
16131[label="200.53.244.198;1pkt 1fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 162.73.232.37:*}[48.7476%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38687: (0.356718%)&lt;BR/&gt; 38649: (0.356718%)&lt;BR/&gt; 38647: (0.356718%)&lt;BR/&gt; 57823: (0.297265%)&gt;];
}
837--1368[label="0.00790514;2pkt 2fpkt"];
837--1378[label="0.0357143;9pkt 9fpkt"];
837--1415[label="0.00613497;1pkt 1fpkt"];
837--1543[label="0.0229885;2pkt 2fpkt"];
837--1589[label="0.0909091;1pkt 1fpkt"];
837--1926[label="0.00529101;1pkt 1fpkt"];
837--2214[label="0.0526316;3pkt 3fpkt"];
837--2225[label="0.0392157;2pkt 2fpkt"];
837--2294[label="0.00952381;1pkt 1fpkt"];
837--2298[label="0.285714;2pkt 2fpkt"];
837--2852[label="0.0925926;5pkt 5fpkt"];
837--3401[label="0.028169;2pkt 2fpkt"];
837--3444[label="0.0344828;3pkt 3fpkt"];
837--3477[label="0.0384615;1pkt 1fpkt"];
837--3684[label="0.0357143;2pkt 2fpkt"];
837--4396[label="0.0333333;1pkt 1fpkt"];
837--4431[label="0.4;2pkt 2fpkt"];
837--4621[label="1;1pkt 1fpkt"];
837--4658[label="0.0136986;1pkt 1fpkt"];
837--4816[label="0.0714286;1pkt 1fpkt"];
837--4859[label="0.0714286;1pkt 1fpkt"];
837--5212[label="0.0571429;2pkt 2fpkt"];
837--5236[label="0.025;1pkt 1fpkt"];
837--5360[label="1;1pkt 1fpkt"];
837--5456[label="1;2pkt 2fpkt"];
837--5473[label="1;1pkt 1fpkt"];
837--5952[label="1;61pkt 61fpkt"];
837--6086[label="0.00671141;1pkt 1fpkt"];
837--6125[label="0.0909091;1pkt 1fpkt"];
837--6332[label="0.0357143;9pkt 9fpkt"];
837--6363[label="0.0243902;1pkt 1fpkt"];
837--6391[label="0.0102041;1pkt 1fpkt"];
837--6493[label="0.212766;10pkt 10fpkt"];
837--6649[label="0.0588235;2pkt 2fpkt"];
837--6658[label="0.333333;1pkt 1fpkt"];
837--6697[label="0.272727;3pkt 3fpkt"];
837--7248[label="0.0454545;2pkt 2fpkt"];
837--7459[label="0.00529101;1pkt 1fpkt"];
837--7493[label="0.00395257;1pkt 1fpkt"];
837--7543[label="0.075;3pkt 3fpkt"];
837--7608[label="0.0117647;1pkt 1fpkt"];
837--8045[label="0.111111;1pkt 1fpkt"];
837--8379[label="0.04;1pkt 1fpkt"];
837--8507[label="1;1pkt 1fpkt"];
837--8534[label="0.0357143;2pkt 2fpkt"];
837--9020[label="0.0243902;1pkt 1fpkt"];
837--9163[label="0.0237154;6pkt 6fpkt"];
837--9194[label="0.106719;27pkt 27fpkt"];
837--9198[label="0.0592885;15pkt 15fpkt"];
837--9234[label="0.106719;27pkt 27fpkt"];
837--9268[label="0.106719;27pkt 27fpkt"];
837--9271[label="0.5;1pkt 1fpkt"];
837--9276[label="0.030303;1pkt 1fpkt"];
837--9277[label="0.0120482;1pkt 1fpkt"];
837--9595[label="0.0277778;2pkt 2fpkt"];
837--9661[label="0.0909091;2pkt 2fpkt"];
837--9702[label="1;1pkt 1fpkt"];
837--9877[label="0.107143;3pkt 3fpkt"];
837--9896[label="0.155689;26pkt 26fpkt"];
837--9940[label="0.0350877;2pkt 2fpkt"];
837--9994[label="0.00790514;2pkt 2fpkt"];
837--10331[label="0.1875;3pkt 3fpkt"];
837--10357[label="1;1pkt 1fpkt"];
837--10380[label="0.0181818;2pkt 2fpkt"];
837--10391[label="0.0166667;1pkt 1fpkt"];
837--10446[label="0.025;1pkt 1fpkt"];
837--10523[label="1;1pkt 1fpkt"];
837--10684[label="1;1pkt 1fpkt"];
837--10789[label="0.00497512;1pkt 1fpkt"];
837--10971[label="1;3pkt 3fpkt"];
837--11002[label="0.571429;4pkt 4fpkt"];
837--11073[label="0.0344828;3pkt 3fpkt"];
837--11272[label="1;1pkt 1fpkt"];
837--11418[label="1;2pkt 2fpkt"];
837--11570[label="1;1pkt 1fpkt"];
837--11727[label="0.0377358;2pkt 2fpkt"];
837--12012[label="0.0714286;1pkt 1fpkt"];
837--12023[label="0.133333;2pkt 2fpkt"];
837--12038[label="1;2pkt 2fpkt"];
837--12077[label="0.05;1pkt 1fpkt"];
837--12083[label="1;2pkt 2fpkt"];
837--12444[label="0.05;3pkt 3fpkt"];
837--12515[label="1;2pkt 2fpkt"];
837--12519[label="0.3;3pkt 3fpkt"];
837--12892[label="0.0877193;5pkt 5fpkt"];
837--12950[label="0.166667;1pkt 1fpkt"];
837--12980[label="0.00584795;1pkt 1fpkt"];
837--13102[label="1;1pkt 1fpkt"];
837--13167[label="1;1pkt 1fpkt"];
837--13241[label="0.5;1pkt 1fpkt"];
837--13550[label="0.107143;3pkt 3fpkt"];
837--13618[label="0.00790514;2pkt 2fpkt"];
837--13794[label="0.1875;3pkt 3fpkt"];
837--13824[label="0.0166667;1pkt 1fpkt"];
837--13892[label="1;1pkt 1fpkt"];
837--14344[label="1;2pkt 2fpkt"];
837--14494[label="0.0384615;2pkt 2fpkt"];
837--14895[label="1;2pkt 2fpkt"];
837--15131[label="0.00584795;1pkt 1fpkt"];
837--15429[label="0.107143;3pkt 3fpkt"];
837--15552[label="0.0166667;1pkt 1fpkt"];
837--15592[label="1;1pkt 1fpkt"];
837--15906[label="0.0384615;2pkt 2fpkt"];
837--16131[label="1;1pkt 1fpkt"];
2960--3801[label="0.285714;4pkt 4fpkt"];
2960--5267[label="0.454545;5pkt 5fpkt"];
2960--7110[label="0.142857;2pkt 2fpkt"];
2960--8266[label="0.142857;2pkt 2fpkt"];
2960--8529[label="0.0714286;1pkt 1fpkt"];
2960--9050[label="0.142857;2pkt 2fpkt"];
2960--9198[label="0.5;7pkt 7fpkt"];
2960--9877[label="1;14pkt 14fpkt"];
2960--13550[label="1;14pkt 14fpkt"];
2960--15429[label="1;14pkt 14fpkt"];
4431--9198[label="0.2;1pkt 1fpkt"];
4431--11002[label="1;5pkt 5fpkt"];
4621--10357[label="1;1pkt 1fpkt"];
5236--6095[label="0.075;3pkt 3fpkt"];
5236--7313[label="0.176471;3pkt 3fpkt"];
5236--8529[label="0.05;2pkt 2fpkt"];
5236--9029[label="0.176471;3pkt 3fpkt"];
5236--10446[label="0.975;39pkt 39fpkt"];
5456--8507[label="1;1pkt 1fpkt"];
5456--9198[label="0.5;1pkt 1fpkt"];
5456--13102[label="1;1pkt 1fpkt"];
5473--9198[label="1;1pkt 1fpkt"];
5952--6086[label="0.0163934;1pkt 1fpkt"];
5952--6125[label="0.0909091;1pkt 1fpkt"];
5952--6332[label="0.0163934;1pkt 1fpkt"];
5952--6363[label="0.0243902;1pkt 1fpkt"];
5952--6391[label="0.0163934;1pkt 1fpkt"];
5952--6493[label="0.191489;9pkt 9fpkt"];
5952--6649[label="0.0588235;2pkt 2fpkt"];
5952--6658[label="0.333333;1pkt 1fpkt"];
5952--6697[label="0.272727;3pkt 3fpkt"];
5952--7543[label="0.025;1pkt 1fpkt"];
5952--9020[label="0.0243902;1pkt 1fpkt"];
5952--9163[label="0.0983607;6pkt 6fpkt"];
5952--9271[label="0.5;1pkt 1fpkt"];
5952--9702[label="1;1pkt 1fpkt"];
5952--9877[label="0.107143;3pkt 3fpkt"];
5952--9896[label="0.147541;9pkt 9fpkt"];
5952--10380[label="0.0327869;2pkt 2fpkt"];
5952--10391[label="0.0166667;1pkt 1fpkt"];
5952--11002[label="0.285714;2pkt 2fpkt"];
5952--11418[label="0.5;1pkt 1fpkt"];
5952--12023[label="0.0666667;1pkt 1fpkt"];
5952--12444[label="0.0166667;1pkt 1fpkt"];
5952--12515[label="0.5;1pkt 1fpkt"];
5952--12519[label="0.1;1pkt 1fpkt"];
5952--12892[label="0.0175439;1pkt 1fpkt"];
5952--12950[label="0.166667;1pkt 1fpkt"];
5952--12980[label="0.0163934;1pkt 1fpkt"];
5952--13241[label="0.5;1pkt 1fpkt"];
5952--13550[label="0.107143;3pkt 3fpkt"];
5952--13824[label="0.0166667;1pkt 1fpkt"];
5952--14344[label="0.5;1pkt 1fpkt"];
5952--14895[label="0.5;1pkt 1fpkt"];
5952--15131[label="0.0163934;1pkt 1fpkt"];
5952--15429[label="0.107143;3pkt 3fpkt"];
5952--15552[label="0.0166667;1pkt 1fpkt"];
6493--7726[label="0.276596;13pkt 13fpkt"];
6493--8529[label="0.297872;14pkt 14fpkt"];
6493--9163[label="0.319149;15pkt 15fpkt"];
6493--9896[label="1;47pkt 47fpkt"];
6697--8266[label="0.272727;3pkt 3fpkt"];
6697--8529[label="0.0909091;1pkt 1fpkt"];
6697--9877[label="1;11pkt 11fpkt"];
6697--13550[label="1;11pkt 11fpkt"];
6697--15429[label="1;11pkt 11fpkt"];
9877--13550[label="1;28pkt 28fpkt"];
9877--15429[label="1;28pkt 28fpkt"];
10391--13824[label="1;60pkt 60fpkt"];
10391--15552[label="1;60pkt 60fpkt"];
10523--13892[label="1;1pkt 1fpkt"];
10523--15592[label="1;1pkt 1fpkt"];
11418--14344[label="1;2pkt 2fpkt"];
12077--14669[label="1;19pkt 19fpkt"];
12515--14895[label="1;2pkt 2fpkt"];
12515--16131[label="1;1pkt 1fpkt"];
13550--15429[label="1;28pkt 28fpkt"];
13824--15552[label="1;60pkt 60fpkt"];
13892--15592[label="1;1pkt 1fpkt"];
14895--16131[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.232.37" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
4633[label="193.217.98.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
8441[label="193.217.98.216;d;1pkt 1fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.86.48:2866, 193.217.98.216:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2866: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4633--4636[label="1;1pkt 1fpkt"];
4633--8441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.217.98.216" dst_port="80" src_ip="136.228.86.48" src_port="2866"/>
    </slice>
    <from sec="1223615349" usec="0"/>
    <to sec="1223615411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_209{
style=filled;
color=gray75;
1379[label="136.228.193.174;d;195pkt 195fpkt", shape=diamond, color=yellow];
4560[label="21.33.94.62;s;47pkt 47fpkt", shape=diamond, color=yellow];
7699[label="21.33.94.62;s;47pkt 47fpkt", shape=hexagon, color=black];
9714[label="73.42.186.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11371[label="212.138.109.124;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11545[label="20.98.243.135;32pkt 32fpkt", shape=pentagon, color=darkviolet];
12158[label="213.106.185.173;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13061[label="21.85.55.238;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13463[label="73.42.186.23;2pkt 2fpkt", shape=invtriangle, color=brown];
14713[label="213.106.185.173;10pkt 10fpkt", shape=invtriangle, color=brown];
stat209[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.33.94.62:80, 136.228.193.174:*}[22.5962%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7238%)&lt;BR/&gt; 21315: (0.414365%)&lt;BR/&gt; 21314: (0.414365%)&lt;BR/&gt; 21269: (0.414365%)&lt;BR/&gt; 21267: (0.414365%)&gt;];
}
1379--1654[label="0.0666667;13pkt 13fpkt"];
1379--1847[label="0.357143;5pkt 5fpkt"];
1379--2232[label="0.0410256;8pkt 8fpkt"];
1379--2529[label="0.2;1pkt 1fpkt"];
1379--4560[label="1;47pkt 47fpkt"];
1379--4870[label="0.0526316;1pkt 1fpkt"];
1379--6604[label="1;67pkt 67fpkt"];
1379--7695[label="0.2;1pkt 1fpkt"];
1379--7699[label="1;47pkt 47fpkt"];
1379--9163[label="0.2;39pkt 39fpkt"];
1379--9198[label="0.0615385;12pkt 12fpkt"];
1379--9329[label="0.0526316;1pkt 1fpkt"];
1379--9714[label="1;2pkt 2fpkt"];
1379--10566[label="0.1;1pkt 1fpkt"];
1379--11371[label="0.0714286;1pkt 1fpkt"];
1379--11545[label="1;32pkt 32fpkt"];
1379--12158[label="1;10pkt 10fpkt"];
1379--12329[label="0.333333;5pkt 5fpkt"];
1379--13061[label="1;3pkt 3fpkt"];
1379--13463[label="1;2pkt 2fpkt"];
1379--14713[label="1;10pkt 10fpkt"];
1379--14799[label="0.333333;5pkt 5fpkt"];
1379--16077[label="0.333333;5pkt 5fpkt"];
4560--7699[label="1;47pkt 47fpkt"];
9714--13463[label="1;2pkt 2fpkt"];
12158--14713[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.174" src_ip="21.33.94.62" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_210{
style=filled;
color=gray75;
208[label="162.73.198.210s;2pkt 2fpkt", shape=rectangle, color=red];
3091[label="192.105.70.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
3499[label="162.73.198.210;s;6pkt 6fpkt", shape=diamond, color=yellow];
4887[label="136.228.104.227;s;4pkt 4fpkt", shape=diamond, color=yellow];
4929[label="104.243.253.86;d;1pkt 1fpkt", shape=diamond, color=yellow];
4933[label="104.243.253.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
8005[label="162.73.198.210;s;6pkt 6fpkt", shape=hexagon, color=black];
stat210[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.198.210:*, 192.90.234.209:80}[30%]&lt;BR/&gt;{136.228.104.227:*, 212.138.109.129:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1150: (9.52381%)&lt;BR/&gt; 2216: (7.14286%)&lt;BR/&gt; 1120: (7.14286%)&lt;BR/&gt; 1142: (4.7619%)&gt;];
}
208--3499[label="0.5;1pkt 1fpkt"];
208--4887[label="0.5;1pkt 1fpkt"];
208--4929[label="1;1pkt 1fpkt"];
208--4933[label="1;1pkt 1fpkt"];
208--8005[label="0.5;1pkt 1fpkt"];
3091--3499[label="1;1pkt 1fpkt"];
3091--8005[label="1;1pkt 1fpkt"];
3499--4933[label="1;1pkt 1fpkt"];
3499--8005[label="1;6pkt 6fpkt"];
3499--8220[label="0.5;3pkt 3fpkt"];
4887--4929[label="1;1pkt 1fpkt"];
4933--8005[label="1;1pkt 1fpkt"];
8005--8220[label="0.5;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.90.234.209" dst_port="80" src_ip="162.73.198.210"/>
      <filter dst_ip="212.138.109.129" dst_port="80" src_ip="136.228.104.227"/>
    </slice>
    <from sec="1223615030" usec="0"/>
    <to sec="1223615487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
1770[label="21.24.162.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
4934[label="162.73.216.32;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.24.162.43:80, 162.73.216.32:3263}[33.3333%]&lt;BR/&gt;{21.24.162.176:80, 162.73.216.32:3263}[33.3333%]&lt;BR/&gt;{21.221.109.249:80, 162.73.216.32:3262}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3263: (37.5%)&lt;BR/&gt; 3262: (12.5%)&gt;];
}
1770--4934[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.216.32" dst_port="3262" src_ip="21.221.109.249" src_port="80"/>
      <filter dst_ip="162.73.216.32" dst_port="3263" src_ip="21.24.162.176" src_port="80"/>
      <filter dst_ip="162.73.216.32" dst_port="3263" src_ip="21.24.162.43" src_port="80"/>
    </slice>
    <from sec="1223615358" usec="0"/>
    <to sec="1223615505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
4952[label="107.100.250.253;d;2pkt 2fpkt", shape=diamond, color=yellow];
4953[label="153.109.157.19;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.157.19:21, 107.100.250.253:60139}[50%]&lt;BR/&gt;{153.109.157.19:18287, 107.100.250.253:51356}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60139: (25%)&lt;BR/&gt; 51356: (25%)&lt;BR/&gt; 18287: (25%)&lt;BR/&gt; 21: (25%)&gt;];
}
4952--4953[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.250.253" dst_port="51356" src_ip="153.109.157.19" src_port="18287"/>
      <filter dst_ip="107.100.250.253" dst_port="60139" src_ip="153.109.157.19" src_port="21"/>
    </slice>
    <from sec="1223615372" usec="0"/>
    <to sec="1223615420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
4007[label="162.73.105.87;s;38pkt 38fpkt", shape=diamond, color=yellow];
4602[label="193.52.169.29;d;2pkt 2fpkt", shape=diamond, color=yellow];
4981[label="197.164.132.242;d;1pkt 1fpkt", shape=diamond, color=yellow];
5796[label="99.105.145.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
7640[label="162.73.105.87;s;7pkt 7fpkt", shape=hexagon, color=black];
10817[label="162.73.105.87;42pkt 42fpkt", shape=pentagon, color=darkviolet];
14043[label="162.73.105.87;43pkt 43fpkt", shape=invtriangle, color=brown];
15670[label="162.73.105.87;42pkt 42fpkt", shape=invhouse, color=bisque];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.105.87:995, *:*}[53.4884%]&lt;BR/&gt;{162.73.105.87:443, 78.11.80.73:*}[32.5581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (27.2727%)&lt;BR/&gt; 443: (15.9091%)&lt;BR/&gt; 993: (3.40909%)&lt;BR/&gt; 110: (3.40909%)&lt;BR/&gt; 22854: (2.27273%)&gt;];
}
4007--4602[label="1;2pkt 2fpkt"];
4007--4981[label="1;1pkt 1fpkt"];
4007--5796[label="1;1pkt 1fpkt"];
4007--7640[label="1;7pkt 7fpkt"];
4007--10817[label="0.973684;37pkt 37fpkt"];
4007--14043[label="1;38pkt 38fpkt"];
4007--15670[label="0.973684;37pkt 37fpkt"];
4602--7640[label="1;2pkt 2fpkt"];
4602--10817[label="1;2pkt 2fpkt"];
4602--14043[label="1;2pkt 2fpkt"];
4602--15670[label="1;2pkt 2fpkt"];
4981--10817[label="1;1pkt 1fpkt"];
4981--14043[label="1;1pkt 1fpkt"];
4981--15670[label="1;1pkt 1fpkt"];
5796--10817[label="1;1pkt 1fpkt"];
5796--14043[label="1;1pkt 1fpkt"];
5796--15670[label="1;1pkt 1fpkt"];
7640--10817[label="0.857143;6pkt 6fpkt"];
7640--14043[label="1;7pkt 7fpkt"];
7640--15670[label="0.857143;6pkt 6fpkt"];
10817--14043[label="1;42pkt 42fpkt"];
10817--15670[label="1;42pkt 42fpkt"];
14043--15670[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter src_ip="162.73.105.87" src_port="995"/>
      <filter dst_ip="78.11.80.73" src_ip="162.73.105.87" src_port="443"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_214{
style=filled;
color=gray75;
153[label="162.73.87.157s;1pkt 1fpkt", shape=rectangle, color=red];
1983[label="162.73.87.157;s;344pkt 344fpkt", shape=diamond, color=yellow];
5003[label="212.138.109.127;d;3pkt 3fpkt", shape=diamond, color=yellow];
7782[label="162.73.87.157;s;339pkt 339fpkt", shape=hexagon, color=black];
8122[label="212.138.109.127;d;2pkt 2fpkt", shape=hexagon, color=black];
11904[label="162.73.87.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14586[label="162.73.87.157;1pkt 1fpkt", shape=invtriangle, color=brown];
stat214[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.87.157:*, *:80}[92.1965%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6715%)&lt;BR/&gt; 443: (3.32851%)&lt;BR/&gt; 57755: (0.506512%)&lt;BR/&gt; 60907: (0.144718%)&lt;BR/&gt; 60898: (0.144718%)&gt;];
}
153--159[label="1;1pkt 1fpkt"];
153--1983[label="1;1pkt 1fpkt"];
153--5003[label="1;1pkt 1fpkt"];
153--7782[label="1;1pkt 1fpkt"];
153--8122[label="1;1pkt 1fpkt"];
153--11904[label="1;1pkt 1fpkt"];
153--14586[label="1;1pkt 1fpkt"];
1983--2813[label="0.00653595;1pkt 1fpkt"];
1983--2831[label="0.0141509;3pkt 3fpkt"];
1983--3245[label="0.00458716;1pkt 1fpkt"];
1983--3799[label="0.00746269;1pkt 1fpkt"];
1983--3884[label="0.0285714;2pkt 2fpkt"];
1983--3914[label="0.0147059;1pkt 1fpkt"];
1983--3921[label="0.25;16pkt 16fpkt"];
1983--3938[label="0.526882;49pkt 49fpkt"];
1983--4422[label="0.6;15pkt 15fpkt"];
1983--4730[label="0.00806452;1pkt 1fpkt"];
1983--5003[label="0.333333;1pkt 1fpkt"];
1983--5183[label="0.0449438;4pkt 4fpkt"];
1983--5206[label="0.010989;1pkt 1fpkt"];
1983--5641[label="0.016129;2pkt 2fpkt"];
1983--5981[label="0.0203488;7pkt 7fpkt"];
1983--6277[label="0.0116279;4pkt 4fpkt"];
1983--6294[label="0.00581395;2pkt 2fpkt"];
1983--7316[label="0.382353;26pkt 26fpkt"];
1983--7766[label="0.0512821;10pkt 10fpkt"];
1983--7782[label="1;339pkt 339fpkt"];
1983--8122[label="0.5;1pkt 1fpkt"];
1983--8178[label="0.0436047;15pkt 15fpkt"];
1983--8220[label="0.00318471;1pkt 1fpkt"];
1983--8318[label="0.0512821;4pkt 4fpkt"];
1983--8616[label="0.00746269;1pkt 1fpkt"];
1983--8676[label="0.016129;2pkt 2fpkt"];
1983--9067[label="0.00581395;2pkt 2fpkt"];
1983--9178[label="0.0145349;5pkt 5fpkt"];
1983--9218[label="0.0145349;5pkt 5fpkt"];
1983--9252[label="0.0145349;5pkt 5fpkt"];
1983--11904[label="1;1pkt 1fpkt"];
1983--14586[label="1;1pkt 1fpkt"];
5003--7782[label="0.333333;1pkt 1fpkt"];
5003--8122[label="1;2pkt 2fpkt"];
5003--11904[label="1;1pkt 1fpkt"];
5003--13122[label="0.666667;2pkt 2fpkt"];
5003--14586[label="1;1pkt 1fpkt"];
7782--8122[label="0.5;1pkt 1fpkt"];
7782--8178[label="0.0442478;15pkt 15fpkt"];
7782--8220[label="0.00318471;1pkt 1fpkt"];
7782--8318[label="0.0512821;4pkt 4fpkt"];
7782--8616[label="0.00746269;1pkt 1fpkt"];
7782--8676[label="0.016129;2pkt 2fpkt"];
7782--9067[label="0.00589971;2pkt 2fpkt"];
7782--9178[label="0.0147493;5pkt 5fpkt"];
7782--9218[label="0.0147493;5pkt 5fpkt"];
7782--9252[label="0.0147493;5pkt 5fpkt"];
7782--11904[label="1;1pkt 1fpkt"];
7782--14586[label="1;1pkt 1fpkt"];
8122--11904[label="1;1pkt 1fpkt"];
8122--13122[label="0.5;1pkt 1fpkt"];
8122--14586[label="1;1pkt 1fpkt"];
11904--14586[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="162.73.87.157"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_215{
style=filled;
color=gray75;
3654[label="160.49.105.235;s;3pkt 3fpkt", shape=diamond, color=yellow];
3655[label="73.19.138.212;d;2pkt 2fpkt", shape=diamond, color=yellow];
5015[label="73.86.68.158;d;3pkt 3fpkt", shape=diamond, color=yellow];
5464[label="76.173.85.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
8472[label="73.86.68.158;d;3pkt 3fpkt", shape=hexagon, color=black];
8510[label="76.173.85.5;d;2pkt 2fpkt", shape=hexagon, color=black];
13022[label="160.49.105.235;18pkt 18fpkt", shape=pentagon, color=darkviolet];
15150[label="160.49.105.235;18pkt 18fpkt", shape=invtriangle, color=brown];
16271[label="160.49.105.235;19pkt 19fpkt", shape=invhouse, color=bisque];
stat215[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.49.105.235:80, 106.244.184.85:*}[52.6316%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 26790: (4.28571%)&lt;BR/&gt; 26788: (4.28571%)&lt;BR/&gt; 26787: (4.28571%)&lt;BR/&gt; 4263: (3.57143%)&gt;];
}
3654--5015[label="1;3pkt 3fpkt"];
3654--8472[label="1;3pkt 3fpkt"];
3654--13022[label="1;3pkt 3fpkt"];
3654--15150[label="1;3pkt 3fpkt"];
3654--16271[label="1;3pkt 3fpkt"];
3655--13022[label="1;2pkt 2fpkt"];
3655--15150[label="1;2pkt 2fpkt"];
3655--16271[label="1;2pkt 2fpkt"];
5015--8472[label="1;3pkt 3fpkt"];
5015--13022[label="1;3pkt 3fpkt"];
5015--15150[label="1;3pkt 3fpkt"];
5015--16271[label="1;3pkt 3fpkt"];
5464--8510[label="1;2pkt 2fpkt"];
5464--9198[label="1;2pkt 2fpkt"];
5464--13022[label="1;2pkt 2fpkt"];
5464--15150[label="1;2pkt 2fpkt"];
5464--16271[label="1;2pkt 2fpkt"];
8472--13022[label="1;3pkt 3fpkt"];
8472--15150[label="1;3pkt 3fpkt"];
8472--16271[label="1;3pkt 3fpkt"];
8510--9198[label="1;2pkt 2fpkt"];
8510--13022[label="1;2pkt 2fpkt"];
8510--15150[label="1;2pkt 2fpkt"];
8510--16271[label="1;2pkt 2fpkt"];
13022--15150[label="1;18pkt 18fpkt"];
13022--16271[label="1;18pkt 18fpkt"];
15150--16271[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="106.244.184.85" src_ip="160.49.105.235" src_port="80"/>
    </slice>
    <from sec="1223614830" usec="0"/>
    <to sec="1223615682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
4956[label="136.228.176.145;d;4pkt 4fpkt", shape=diamond, color=yellow];
5034[label="213.48.194.127;s;4pkt 4fpkt", shape=diamond, color=yellow];
8134[label="213.48.194.127;s;4pkt 4fpkt", shape=hexagon, color=black];
11411[label="213.48.194.127;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14339[label="213.48.194.127;3pkt 3fpkt", shape=invtriangle, color=brown];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.194.127:80, 136.228.176.145:1309}[25%]&lt;BR/&gt;{213.48.194.127:80, 136.228.176.145:1320}[25%]&lt;BR/&gt;{213.48.194.127:80, 136.228.176.145:1358}[25%]&lt;BR/&gt;{213.48.194.127:80, 136.228.176.145:1360}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1360: (13.1579%)&lt;BR/&gt; 1358: (13.1579%)&lt;BR/&gt; 1320: (13.1579%)&lt;BR/&gt; 1309: (10.5263%)&gt;];
}
4956--5034[label="1;4pkt 4fpkt"];
4956--8134[label="1;4pkt 4fpkt"];
4956--11411[label="1;4pkt 4fpkt"];
4956--14339[label="1;3pkt 3fpkt"];
5034--8134[label="1;4pkt 4fpkt"];
5034--11411[label="1;4pkt 4fpkt"];
5034--14339[label="1;3pkt 3fpkt"];
8134--11411[label="1;4pkt 4fpkt"];
8134--14339[label="1;3pkt 3fpkt"];
11411--14339[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.176.145" dst_port="1360" src_ip="213.48.194.127" src_port="80"/>
      <filter dst_ip="136.228.176.145" dst_port="1358" src_ip="213.48.194.127" src_port="80"/>
      <filter dst_ip="136.228.176.145" dst_port="1320" src_ip="213.48.194.127" src_port="80"/>
      <filter dst_ip="136.228.176.145" dst_port="1309" src_ip="213.48.194.127" src_port="80"/>
    </slice>
    <from sec="1223615376" usec="0"/>
    <to sec="1223615461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
5056[label="142.243.18.134;d;337pkt 337fpkt", shape=diamond, color=yellow];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.243.18.134:65013}[98.8131%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65013: (49.4065%)&lt;BR/&gt; 53162: (0.296736%)&lt;BR/&gt; 1251: (0.296736%)&lt;BR/&gt; 443: (0.296736%)&lt;BR/&gt; 80: (0.296736%)&gt;];
}
5056--9178[label="0.00593472;2pkt 2fpkt"];
5056--9218[label="0.00593472;2pkt 2fpkt"];
5056--9252[label="0.00593472;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.18.134" dst_port="65013"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
5086[label="213.33.146.168;d;590pkt 590fpkt", shape=diamond, color=yellow];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.33.146.168:15112}[99.8305%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 15112: (49.9153%)&lt;BR/&gt; 20854: (0.254237%)&lt;BR/&gt; 19770: (0.254237%)&lt;BR/&gt; 80: (0.254237%)&lt;BR/&gt; 65535: (0.169492%)&gt;];
}
5086--9198[label="0.00169492;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.146.168" dst_port="15112"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
3288[label="193.241.8.83;s;97pkt 97fpkt", shape=diamond, color=yellow];
5115[label="142.228.95.180;d;47pkt 47fpkt", shape=diamond, color=yellow];
8246[label="142.228.95.180;d;47pkt 47fpkt", shape=hexagon, color=black];
10743[label="193.241.8.83;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14007[label="193.241.8.83;3pkt 3fpkt", shape=invtriangle, color=brown];
15650[label="193.241.8.83;3pkt 3fpkt", shape=invhouse, color=bisque];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.241.8.83:*, 142.228.95.178:443}[51.5464%]&lt;BR/&gt;{193.241.8.83:*, 142.228.95.180:443}[48.4536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 56494: (1.5%)&lt;BR/&gt; 50181: (1%)&lt;BR/&gt; 49336: (1%)&lt;BR/&gt; 65328: (0.75%)&gt;];
}
3288--4700[label="1;50pkt 50fpkt"];
3288--5115[label="1;47pkt 47fpkt"];
3288--8246[label="1;47pkt 47fpkt"];
3288--9178[label="1;97pkt 97fpkt"];
3288--9218[label="1;97pkt 97fpkt"];
3288--9252[label="1;97pkt 97fpkt"];
3288--10743[label="1;3pkt 3fpkt"];
3288--14007[label="1;3pkt 3fpkt"];
3288--15650[label="1;3pkt 3fpkt"];
5115--8246[label="1;47pkt 47fpkt"];
5115--9178[label="1;47pkt 47fpkt"];
5115--9218[label="1;47pkt 47fpkt"];
5115--9252[label="1;47pkt 47fpkt"];
5115--10743[label="0.333333;1pkt 1fpkt"];
5115--14007[label="0.333333;1pkt 1fpkt"];
5115--15650[label="0.333333;1pkt 1fpkt"];
8246--9178[label="1;47pkt 47fpkt"];
8246--9218[label="1;47pkt 47fpkt"];
8246--9252[label="1;47pkt 47fpkt"];
8246--10743[label="0.333333;1pkt 1fpkt"];
8246--14007[label="0.333333;1pkt 1fpkt"];
8246--15650[label="0.333333;1pkt 1fpkt"];
10743--14007[label="1;3pkt 3fpkt"];
10743--15650[label="1;3pkt 3fpkt"];
14007--15650[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.95.178" dst_port="443" src_ip="193.241.8.83"/>
      <filter dst_ip="142.228.95.180" dst_port="443" src_ip="193.241.8.83"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_222{
style=filled;
color=gray75;
5126[label="136.228.140.33;s;285pkt 285fpkt", shape=diamond, color=yellow];
stat222[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.140.33:32768, *:53}[81.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32768: (40.7018%)&lt;BR/&gt; 0: (0.350877%)&lt;BR/&gt; 65491: (0.175439%)&lt;BR/&gt; 62345: (0.175439%)&gt;];
}
5126--5181[label="0.00350877;1pkt 1fpkt"];
5126--5516[label="0.00350877;1pkt 1fpkt"];
5126--5518[label="0.00350877;1pkt 1fpkt"];
5126--5526[label="0.00350877;1pkt 1fpkt"];
5126--5550[label="0.00350877;1pkt 1fpkt"];
5126--6838[label="0.00350877;1pkt 1fpkt"];
5126--6844[label="0.00350877;1pkt 1fpkt"];
5126--8182[label="0.00350877;1pkt 1fpkt"];
5126--8184[label="0.00350877;1pkt 1fpkt"];
5126--8212[label="0.00350877;1pkt 1fpkt"];
5126--8879[label="0.00350877;1pkt 1fpkt"];
5126--9066[label="0.00350877;1pkt 1fpkt"];
5126--9197[label="0.00350877;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.228.140.33" src_port="32768"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
1570[label="212.21.136.229;s;27pkt 27fpkt", shape=diamond, color=yellow];
1703[label="110.163.4.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
6387[label="212.21.136.229;s;11pkt 11fpkt", shape=hexagon, color=black];
6420[label="110.163.4.61;d;1pkt 1fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.229:*, 213.43.114.212:53}[77.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.5%)&lt;BR/&gt; 80: (11.25%)&lt;BR/&gt; 58857: (5%)&lt;BR/&gt; 33817: (2.5%)&lt;BR/&gt; 2166: (2.5%)&gt;];
}
1570--1703[label="1;1pkt 1fpkt"];
1570--5224[label="0.0740741;2pkt 2fpkt"];
1570--5944[label="0.037037;1pkt 1fpkt"];
1570--6387[label="1;11pkt 11fpkt"];
1570--6420[label="1;1pkt 1fpkt"];
1703--6387[label="1;1pkt 1fpkt"];
1703--6420[label="1;1pkt 1fpkt"];
6387--6420[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.43.114.212" dst_port="53" src_ip="212.21.136.229"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="164.25.79.43"/>
      <from sec="1223615272" usec="0"/>
      <to sec="1223615539" usec="0"/>
    </slice>
    <from sec="1223615272" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_225{
style=filled;
color=gray75;
341[label="136.228.214.244s;120pkt 120fpkt", shape=rectangle, color=red];
1932[label="136.228.214.244;s;833pkt 833fpkt", shape=diamond, color=yellow];
2987[label="136.228.75.36;s;126pkt 126fpkt", shape=diamond, color=yellow];
3031[label="107.242.105.48;d;14pkt 14fpkt", shape=diamond, color=yellow];
4774[label="142.243.11.178;s;75pkt 75fpkt", shape=diamond, color=yellow];
5270[label="212.138.109.104;d;88pkt 88fpkt", shape=diamond, color=yellow];
5792[label="124.63.200.25;d;18pkt 18fpkt", shape=diamond, color=yellow];
5868[label="124.63.200.24;d;6pkt 6fpkt", shape=diamond, color=yellow];
7247[label="212.138.109.26;d;160pkt 160fpkt", shape=hexagon, color=black];
8135[label="212.138.109.88;d;474pkt 474fpkt", shape=hexagon, color=black];
13122[label="136.228.214.244;839pkt 839fpkt", shape=pentagon, color=darkviolet];
14740[label="142.243.12.177;21pkt 21fpkt", shape=invtriangle, color=brown];
stat225[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.214.244:*, *:80}[52.4467%]&lt;BR/&gt;{*:*, 212.138.109.88:80}[29.862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9092%)&lt;BR/&gt; 20480: (1.18962%)&lt;BR/&gt; 32048: (0.450613%)&lt;BR/&gt; 443: (0.306417%)&lt;BR/&gt; 3544: (0.108147%)&gt;];
}
341--435[label="0.00833333;1pkt 1fpkt"];
341--479[label="0.0166667;2pkt 2fpkt"];
341--537[label="0.0166667;2pkt 2fpkt"];
341--557[label="0.0166667;2pkt 2fpkt"];
341--1787[label="0.225;27pkt 27fpkt"];
341--1932[label="1;120pkt 120fpkt"];
341--5270[label="0.443182;39pkt 39fpkt"];
341--8135[label="0.225;27pkt 27fpkt"];
341--13122[label="1;120pkt 120fpkt"];
1932--2158[label="0.013089;5pkt 5fpkt"];
1932--2528[label="0.8;4pkt 4fpkt"];
1932--2553[label="0.6;3pkt 3fpkt"];
1932--2903[label="0.444444;4pkt 4fpkt"];
1932--3007[label="0.25;1pkt 1fpkt"];
1932--3031[label="1;14pkt 14fpkt"];
1932--3348[label="0.0294118;1pkt 1fpkt"];
1932--3366[label="0.00819672;2pkt 2fpkt"];
1932--3486[label="0.00387597;1pkt 1fpkt"];
1932--3577[label="0.666667;2pkt 2fpkt"];
1932--3806[label="0.0138889;3pkt 3fpkt"];
1932--3938[label="0.0537634;5pkt 5fpkt"];
1932--4513[label="0.333333;2pkt 2fpkt"];
1932--4673[label="0.0387597;5pkt 5fpkt"];
1932--4802[label="0.0232558;1pkt 1fpkt"];
1932--4866[label="0.047619;8pkt 8fpkt"];
1932--5003[label="0.666667;2pkt 2fpkt"];
1932--5270[label="1;88pkt 88fpkt"];
1932--5792[label="1;18pkt 18fpkt"];
1932--5868[label="1;6pkt 6fpkt"];
1932--6036[label="0.5;1pkt 1fpkt"];
1932--6250[label="0.166667;1pkt 1fpkt"];
1932--6452[label="0.75;3pkt 3fpkt"];
1932--6662[label="0.444444;4pkt 4fpkt"];
1932--7247[label="0.0125;2pkt 2fpkt"];
1932--7316[label="0.0588235;4pkt 4fpkt"];
1932--7557[label="0.0102564;2pkt 2fpkt"];
1932--7721[label="0.0869565;2pkt 2fpkt"];
1932--8122[label="0.5;1pkt 1fpkt"];
1932--8135[label="0.189873;90pkt 90fpkt"];
1932--8398[label="0.047619;8pkt 8fpkt"];
1932--13122[label="0.9988;832pkt 832fpkt"];
2987--3806[label="0.031746;4pkt 4fpkt"];
2987--6717[label="1;126pkt 126fpkt"];
2987--7247[label="0.031746;4pkt 4fpkt"];
3031--13122[label="1;14pkt 14fpkt"];
4774--5531[label="0.0869565;4pkt 4fpkt"];
4774--5646[label="0.0344828;1pkt 1fpkt"];
4774--6065[label="0.0133333;1pkt 1fpkt"];
4774--7196[label="0.0266667;2pkt 2fpkt"];
4774--7247[label="0.0266667;2pkt 2fpkt"];
4774--7320[label="0.0133333;1pkt 1fpkt"];
4774--7945[label="1;75pkt 75fpkt"];
4774--8135[label="0.04;3pkt 3fpkt"];
4774--12227[label="1;75pkt 75fpkt"];
5270--13122[label="1;88pkt 88fpkt"];
5792--13122[label="1;18pkt 18fpkt"];
5868--13122[label="1;6pkt 6fpkt"];
7247--7349[label="0.0138889;1pkt 1fpkt"];
7247--7446[label="0.0125;2pkt 2fpkt"];
7247--7945[label="0.0266667;2pkt 2fpkt"];
7247--8277[label="0.0375;6pkt 6fpkt"];
7247--8562[label="0.00625;1pkt 1fpkt"];
7247--8916[label="0.025;4pkt 4fpkt"];
7247--9072[label="0.0569106;7pkt 7fpkt"];
7247--9561[label="0.047619;1pkt 1fpkt"];
7247--9670[label="0.1125;18pkt 18fpkt"];
7247--9764[label="0.147059;5pkt 5fpkt"];
7247--9946[label="0.0135135;2pkt 2fpkt"];
7247--10137[label="0.01875;3pkt 3fpkt"];
7247--10231[label="0.212121;7pkt 7fpkt"];
7247--11023[label="0.236842;9pkt 9fpkt"];
7247--11249[label="0.03125;5pkt 5fpkt"];
7247--12227[label="0.0266667;2pkt 2fpkt"];
7247--12478[label="0.0909091;5pkt 5fpkt"];
7247--13024[label="0.236842;9pkt 9fpkt"];
7247--13085[label="0.210526;8pkt 8fpkt"];
7247--13122[label="0.0125;2pkt 2fpkt"];
7247--13442[label="0.1125;18pkt 18fpkt"];
7247--13492[label="0.147059;5pkt 5fpkt"];
7247--13696[label="0.01875;3pkt 3fpkt"];
7247--13742[label="0.21875;7pkt 7fpkt"];
7247--14877[label="0.0909091;5pkt 5fpkt"];
7247--15152[label="0.230769;9pkt 9fpkt"];
7247--15181[label="0.210526;8pkt 8fpkt"];
7247--15401[label="0.151515;5pkt 5fpkt"];
7247--15492[label="0.01875;3pkt 3fpkt"];
7247--16120[label="0.0925926;5pkt 5fpkt"];
8135--8252[label="0.0390625;5pkt 5fpkt"];
8135--8525[label="0.0120482;5pkt 5fpkt"];
8135--8581[label="0.0337553;16pkt 16fpkt"];
8135--8588[label="0.0331492;6pkt 6fpkt"];
8135--8609[label="0.00289855;1pkt 1fpkt"];
8135--8651[label="0.2;10pkt 10fpkt"];
8135--8916[label="0.00421941;1pkt 1fpkt"];
8135--8992[label="0.0021097;1pkt 1fpkt"];
8135--9561[label="0.0952381;2pkt 2fpkt"];
8135--9670[label="0.0696203;33pkt 33fpkt"];
8135--9674[label="0.159236;25pkt 25fpkt"];
8135--9887[label="0.0434783;1pkt 1fpkt"];
8135--10303[label="0.0379747;3pkt 3fpkt"];
8135--10636[label="0.411765;14pkt 14fpkt"];
8135--10651[label="0.421053;8pkt 8fpkt"];
8135--10911[label="0.0178571;1pkt 1fpkt"];
8135--11249[label="0.0421941;20pkt 20fpkt"];
8135--11437[label="0.00843882;4pkt 4fpkt"];
8135--11520[label="0.00282486;1pkt 1fpkt"];
8135--11527[label="0.216216;8pkt 8fpkt"];
8135--11561[label="0.0320856;6pkt 6fpkt"];
8135--12082[label="0.0511364;9pkt 9fpkt"];
8135--12211[label="0.0909091;2pkt 2fpkt"];
8135--12227[label="0.04;3pkt 3fpkt"];
8135--13016[label="0.00465116;1pkt 1fpkt"];
8135--13122[label="0.189873;90pkt 90fpkt"];
8135--13442[label="0.0696203;33pkt 33fpkt"];
8135--13443[label="0.158228;25pkt 25fpkt"];
8135--13556[label="0.0434783;1pkt 1fpkt"];
8135--13781[label="0.0379747;3pkt 3fpkt"];
8135--14083[label="0.0178571;1pkt 1fpkt"];
8135--14356[label="0.00843882;4pkt 4fpkt"];
8135--14393[label="0.00282486;1pkt 1fpkt"];
8135--14398[label="0.216216;8pkt 8fpkt"];
8135--14673[label="0.0511364;9pkt 9fpkt"];
8135--14740[label="0.047619;1pkt 1fpkt"];
8135--15147[label="0.00465116;1pkt 1fpkt"];
8135--15532[label="0.025641;2pkt 2fpkt"];
8135--15698[label="0.0175439;1pkt 1fpkt"];
8135--15833[label="0.00843882;4pkt 4fpkt"];
8135--15851[label="0.0028169;1pkt 1fpkt"];
8135--15853[label="0.216216;8pkt 8fpkt"];
8135--16005[label="0.0511364;9pkt 9fpkt"];
8135--16269[label="0.00465116;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.228.214.244"/>
      <filter dst_ip="212.138.109.88" dst_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_226{
style=filled;
color=gray75;
984[label="164.25.69.63;d;5pkt 5fpkt", shape=diamond, color=yellow];
4694[label="164.25.100.133;d;30pkt 30fpkt", shape=diamond, color=yellow];
5046[label="164.25.30.107;d;57pkt 57fpkt", shape=diamond, color=yellow];
5300[label="193.132.221.37;s;16pkt 16fpkt", shape=diamond, color=yellow];
5401[label="107.4.85.244;s;38pkt 38fpkt", shape=diamond, color=yellow];
7828[label="164.25.44.57;d;122pkt 122fpkt", shape=hexagon, color=black];
7851[label="164.25.100.133;d;25pkt 25fpkt", shape=hexagon, color=black];
9952[label="193.132.221.37;21pkt 21fpkt", shape=pentagon, color=darkviolet];
10626[label="126.26.195.76;18pkt 18fpkt", shape=pentagon, color=darkviolet];
12940[label="107.4.85.229;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12968[label="107.4.85.231;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13118[label="107.4.85.244;38pkt 38fpkt", shape=pentagon, color=darkviolet];
15200[label="107.4.85.244;38pkt 38fpkt", shape=invtriangle, color=brown];
16294[label="107.4.85.244;37pkt 37fpkt", shape=invhouse, color=bisque];
stat226[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.44.57:25}[44.3223%]&lt;BR/&gt;{*:*, 164.25.30.107:25}[21.978%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.8901%)&lt;BR/&gt; 36079: (0.549451%)&lt;BR/&gt; 36032: (0.549451%)&lt;BR/&gt; 35796: (0.549451%)&lt;BR/&gt; 35768: (0.549451%)&gt;];
}
984--1867[label="1;1pkt 1fpkt"];
984--5300[label="0.4;2pkt 2fpkt"];
984--5401[label="0.2;1pkt 1fpkt"];
984--6242[label="1;1pkt 1fpkt"];
984--9952[label="0.4;2pkt 2fpkt"];
984--12968[label="0.2;1pkt 1fpkt"];
984--13070[label="0.333333;1pkt 1fpkt"];
984--13118[label="0.2;1pkt 1fpkt"];
984--15171[label="0.5;1pkt 1fpkt"];
984--15200[label="0.2;1pkt 1fpkt"];
984--16282[label="0.5;1pkt 1fpkt"];
984--16294[label="0.2;1pkt 1fpkt"];
4694--5300[label="0.0625;1pkt 1fpkt"];
4694--5400[label="0.0666667;2pkt 2fpkt"];
4694--5401[label="0.0666667;2pkt 2fpkt"];
4694--7851[label="1;25pkt 25fpkt"];
4694--8766[label="0.0666667;2pkt 2fpkt"];
4694--9177[label="0.0666667;2pkt 2fpkt"];
4694--9217[label="0.0666667;2pkt 2fpkt"];
4694--9251[label="0.0666667;2pkt 2fpkt"];
4694--9952[label="0.047619;1pkt 1fpkt"];
4694--12720[label="0.0666667;2pkt 2fpkt"];
4694--13118[label="0.0666667;2pkt 2fpkt"];
4694--14995[label="0.0666667;2pkt 2fpkt"];
4694--15200[label="0.0666667;2pkt 2fpkt"];
4694--16294[label="0.0666667;2pkt 2fpkt"];
5046--5400[label="0.0263158;1pkt 1fpkt"];
5046--5401[label="0.0263158;1pkt 1fpkt"];
5046--8766[label="0.0263158;1pkt 1fpkt"];
5046--9177[label="0.0350877;2pkt 2fpkt"];
5046--9217[label="0.0350877;2pkt 2fpkt"];
5046--9251[label="0.0350877;2pkt 2fpkt"];
5046--10626[label="0.555556;10pkt 10fpkt"];
5046--12720[label="0.0263158;1pkt 1fpkt"];
5046--12940[label="0.333333;1pkt 1fpkt"];
5046--13118[label="0.0263158;1pkt 1fpkt"];
5046--14995[label="0.027027;1pkt 1fpkt"];
5046--15115[label="0.25;1pkt 1fpkt"];
5046--15200[label="0.0263158;1pkt 1fpkt"];
5046--16294[label="0.027027;1pkt 1fpkt"];
5300--5600[label="0.0625;1pkt 1fpkt"];
5300--7828[label="0.125;2pkt 2fpkt"];
5300--7851[label="0.0625;1pkt 1fpkt"];
5300--8325[label="0.0625;1pkt 1fpkt"];
5300--9952[label="1;16pkt 16fpkt"];
5401--5600[label="0.0526316;2pkt 2fpkt"];
5401--7828[label="0.0526316;2pkt 2fpkt"];
5401--8113[label="0.25;1pkt 1fpkt"];
5401--8268[label="0.108108;4pkt 4fpkt"];
5401--8325[label="0.0263158;1pkt 1fpkt"];
5401--8350[label="0.0588235;2pkt 2fpkt"];
5401--13118[label="1;38pkt 38fpkt"];
5401--15200[label="1;38pkt 38fpkt"];
5401--16294[label="1;37pkt 37fpkt"];
7828--8766[label="0.0526316;2pkt 2fpkt"];
7828--9177[label="0.0491803;6pkt 6fpkt"];
7828--9217[label="0.0491803;6pkt 6fpkt"];
7828--9251[label="0.0491803;6pkt 6fpkt"];
7828--9696[label="0.142857;5pkt 5fpkt"];
7828--9952[label="0.142857;3pkt 3fpkt"];
7828--12720[label="0.0526316;2pkt 2fpkt"];
7828--12940[label="0.666667;2pkt 2fpkt"];
7828--12968[label="0.285714;2pkt 2fpkt"];
7828--13118[label="0.0526316;2pkt 2fpkt"];
7828--13458[label="0.147059;5pkt 5fpkt"];
7828--14995[label="0.0540541;2pkt 2fpkt"];
7828--15115[label="0.5;2pkt 2fpkt"];
7828--15200[label="0.0526316;2pkt 2fpkt"];
7828--16294[label="0.0540541;2pkt 2fpkt"];
7851--9177[label="0.08;2pkt 2fpkt"];
7851--9217[label="0.08;2pkt 2fpkt"];
7851--9251[label="0.08;2pkt 2fpkt"];
7851--9952[label="0.047619;1pkt 1fpkt"];
12940--15115[label="1;3pkt 3fpkt"];
13118--15200[label="1;38pkt 38fpkt"];
13118--16294[label="1;37pkt 37fpkt"];
15200--16294[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.44.57" dst_port="25"/>
      <filter dst_ip="164.25.30.107" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
791[label="212.21.128.71;s;490pkt 490fpkt", shape=diamond, color=yellow];
792[label="213.43.19.61;d;1pkt 1fpkt", shape=diamond, color=yellow];
1063[label="107.100.250.249;d;147pkt 147fpkt", shape=diamond, color=yellow];
1225[label="203.70.44.29;d;71pkt 71fpkt", shape=diamond, color=yellow];
2413[label="213.154.79.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
3218[label="77.243.131.37;d;162pkt 162fpkt", shape=diamond, color=yellow];
5303[label="212.73.32.154;d;4pkt 4fpkt", shape=diamond, color=yellow];
5318[label="204.217.96.2;d;33pkt 33fpkt", shape=diamond, color=yellow];
6205[label="213.43.19.61;d;1pkt 1fpkt", shape=hexagon, color=black];
6491[label="212.21.128.71;s;341pkt 341fpkt", shape=hexagon, color=black];
6525[label="107.100.250.249;d;113pkt 113fpkt", shape=hexagon, color=black];
7478[label="77.243.131.37;d;156pkt 156fpkt", shape=hexagon, color=black];
8127[label="213.154.79.4;d;2pkt 2fpkt", shape=hexagon, color=black];
10525[label="212.21.128.71;523pkt 523fpkt", shape=pentagon, color=darkviolet];
13894[label="212.21.128.71;523pkt 523fpkt", shape=invtriangle, color=brown];
15594[label="212.21.128.71;523pkt 523fpkt", shape=invhouse, color=bisque];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.128.71:*, 107.100.250.249:*}[30.5344%]&lt;BR/&gt;{212.21.128.71:21, 77.243.131.37:*}[30.1527%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (33.7484%)&lt;BR/&gt; 80: (1.14812%)&lt;BR/&gt; 0: (0.258732%)&lt;BR/&gt; 44449: (0.161708%)&lt;BR/&gt; 20: (0.161708%)&gt;];
}
791--792[label="1;1pkt 1fpkt"];
791--1063[label="1;147pkt 147fpkt"];
791--1225[label="1;71pkt 71fpkt"];
791--1688[label="0.00204082;1pkt 1fpkt"];
791--2413[label="1;2pkt 2fpkt"];
791--3218[label="1;162pkt 162fpkt"];
791--3662[label="0.00204082;1pkt 1fpkt"];
791--5303[label="1;4pkt 4fpkt"];
791--5318[label="1;33pkt 33fpkt"];
791--6205[label="1;1pkt 1fpkt"];
791--6491[label="1;341pkt 341fpkt"];
791--6525[label="1;113pkt 113fpkt"];
791--7478[label="1;156pkt 156fpkt"];
791--8127[label="1;2pkt 2fpkt"];
791--9163[label="0.00204082;1pkt 1fpkt"];
791--9198[label="0.00204082;1pkt 1fpkt"];
791--10525[label="0.997959;489pkt 489fpkt"];
791--13894[label="0.997959;489pkt 489fpkt"];
791--15594[label="0.997959;489pkt 489fpkt"];
792--6205[label="1;1pkt 1fpkt"];
792--6491[label="1;1pkt 1fpkt"];
792--10525[label="1;1pkt 1fpkt"];
792--13894[label="1;1pkt 1fpkt"];
792--15594[label="1;1pkt 1fpkt"];
1063--6491[label="0.768707;113pkt 113fpkt"];
1063--6525[label="1;113pkt 113fpkt"];
1063--10525[label="1;147pkt 147fpkt"];
1063--13894[label="1;147pkt 147fpkt"];
1063--15594[label="1;147pkt 147fpkt"];
1225--6491[label="0.549296;39pkt 39fpkt"];
1225--10525[label="1;71pkt 71fpkt"];
1225--13894[label="1;71pkt 71fpkt"];
1225--15594[label="1;71pkt 71fpkt"];
2413--8127[label="1;2pkt 2fpkt"];
2413--10525[label="1;2pkt 2fpkt"];
2413--13894[label="1;2pkt 2fpkt"];
2413--15594[label="1;2pkt 2fpkt"];
3218--6491[label="0.833333;135pkt 135fpkt"];
3218--7478[label="1;156pkt 156fpkt"];
3218--10525[label="1;162pkt 162fpkt"];
3218--13894[label="1;162pkt 162fpkt"];
3218--15594[label="1;162pkt 162fpkt"];
5303--10525[label="1;4pkt 4fpkt"];
5303--13894[label="1;4pkt 4fpkt"];
5303--15594[label="1;4pkt 4fpkt"];
5318--10525[label="1;33pkt 33fpkt"];
5318--13894[label="1;33pkt 33fpkt"];
5318--15594[label="1;33pkt 33fpkt"];
6205--6491[label="1;1pkt 1fpkt"];
6205--10525[label="1;1pkt 1fpkt"];
6205--13894[label="1;1pkt 1fpkt"];
6205--15594[label="1;1pkt 1fpkt"];
6491--6525[label="1;113pkt 113fpkt"];
6491--7478[label="0.865385;135pkt 135fpkt"];
6491--9163[label="0.00293255;1pkt 1fpkt"];
6491--10525[label="0.997067;340pkt 340fpkt"];
6491--13894[label="0.997067;340pkt 340fpkt"];
6491--15594[label="0.997067;340pkt 340fpkt"];
6525--10525[label="1;113pkt 113fpkt"];
6525--13894[label="1;113pkt 113fpkt"];
6525--15594[label="1;113pkt 113fpkt"];
7478--10525[label="1;156pkt 156fpkt"];
7478--13894[label="1;156pkt 156fpkt"];
7478--15594[label="1;156pkt 156fpkt"];
8127--10525[label="1;2pkt 2fpkt"];
8127--13894[label="1;2pkt 2fpkt"];
8127--15594[label="1;2pkt 2fpkt"];
10525--13894[label="1;523pkt 523fpkt"];
10525--15594[label="1;523pkt 523fpkt"];
13894--15594[label="1;523pkt 523fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.250.249" src_ip="212.21.128.71"/>
      <filter dst_ip="77.243.131.37" src_ip="212.21.128.71" src_port="21"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
5289[label="142.243.74.138;s;179pkt 179fpkt", shape=diamond, color=yellow];
5351[label="195.136.224.231;d;175pkt 175fpkt", shape=diamond, color=yellow];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.74.138:*, 195.136.224.231:80}[97.7654%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4043: (0.282486%)&lt;BR/&gt; 4042: (0.282486%)&lt;BR/&gt; 4041: (0.282486%)&lt;BR/&gt; 4040: (0.282486%)&gt;];
}
5289--5351[label="1;175pkt 175fpkt"];
5289--7850[label="0.00558659;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.136.224.231" dst_port="80" src_ip="142.243.74.138"/>
    </slice>
    <from sec="1223615343" usec="0"/>
    <to sec="1223615609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_231{
style=filled;
color=gray75;
5378[label="107.100.242.222;d;2pkt 2fpkt", shape=diamond, color=yellow];
5379[label="153.109.180.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
9462[label="153.109.180.9;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat231[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.180.9:80, 193.52.217.40:55416}[25%]&lt;BR/&gt;{153.109.180.9:80, 107.100.242.222:39903}[25%]&lt;BR/&gt;{153.109.180.9:80, 107.100.242.222:44873}[25%]&lt;BR/&gt;{153.109.180.9:80, 107.100.242.222:48794}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48794: (18.75%)&lt;BR/&gt; 44873: (18.75%)&lt;BR/&gt; 55416: (6.25%)&lt;BR/&gt; 39903: (6.25%)&gt;];
}
5378--5379[label="1;2pkt 2fpkt"];
5378--9462[label="1;2pkt 2fpkt"];
5379--9462[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.242.222" dst_port="48794" src_ip="153.109.180.9" src_port="80"/>
      <filter dst_ip="107.100.242.222" dst_port="44873" src_ip="153.109.180.9" src_port="80"/>
      <filter dst_ip="107.100.242.222" dst_port="39903" src_ip="153.109.180.9" src_port="80"/>
      <filter dst_ip="193.52.217.40" dst_port="55416" src_ip="153.109.180.9" src_port="80"/>
    </slice>
    <from sec="1223614842" usec="0"/>
    <to sec="1223615469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
1446[label="142.243.51.134;s;217pkt 217fpkt", shape=diamond, color=yellow];
1780[label="99.105.145.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
2060[label="216.83.114.202;s;250pkt 250fpkt", shape=diamond, color=yellow];
3891[label="21.4.230.232;d;11pkt 11fpkt", shape=diamond, color=yellow];
4821[label="204.105.125.223;d;72pkt 72fpkt", shape=diamond, color=yellow];
4995[label="76.174.36.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
5388[label="99.105.145.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
5752[label="99.105.197.52;d;2pkt 2fpkt", shape=diamond, color=yellow];
6168[label="99.105.145.150;d;1pkt 1fpkt", shape=hexagon, color=black];
6578[label="216.83.114.202;s;237pkt 237fpkt", shape=hexagon, color=black];
8773[label="99.105.197.52;d;2pkt 2fpkt", shape=hexagon, color=black];
11524[label="142.243.51.134;220pkt 220fpkt", shape=pentagon, color=darkviolet];
14396[label="142.243.51.134;220pkt 220fpkt", shape=invtriangle, color=brown];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.83.114.202:*, *:*}[47.7099%]&lt;BR/&gt;{142.243.51.134:*, *:*}[42.1756%]&lt;BR/&gt;{*:443, *:*}[24.6183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (13.5628%)&lt;BR/&gt; 995: (8.38057%)&lt;BR/&gt; 993: (6.19433%)&lt;BR/&gt; 6667: (5.62753%)&lt;BR/&gt; 6668: (3.07692%)&gt;];
}
1446--1780[label="1;1pkt 1fpkt"];
1446--3891[label="0.454545;5pkt 5fpkt"];
1446--4200[label="0.0444444;2pkt 2fpkt"];
1446--4466[label="0.00952381;1pkt 1fpkt"];
1446--4821[label="0.347222;25pkt 25fpkt"];
1446--4995[label="1;1pkt 1fpkt"];
1446--5388[label="1;1pkt 1fpkt"];
1446--5752[label="0.5;1pkt 1fpkt"];
1446--6168[label="1;1pkt 1fpkt"];
1446--8059[label="0.00952381;1pkt 1fpkt"];
1446--8575[label="0.0444444;2pkt 2fpkt"];
1446--8773[label="0.5;1pkt 1fpkt"];
1446--11524[label="0.995392;216pkt 216fpkt"];
1446--14396[label="0.995392;216pkt 216fpkt"];
1780--6168[label="1;1pkt 1fpkt"];
1780--11524[label="1;1pkt 1fpkt"];
1780--14396[label="1;1pkt 1fpkt"];
2060--3891[label="0.0909091;1pkt 1fpkt"];
2060--6578[label="1;237pkt 237fpkt"];
3891--6578[label="0.0909091;1pkt 1fpkt"];
3891--6916[label="0.363636;4pkt 4fpkt"];
3891--9012[label="0.363636;4pkt 4fpkt"];
3891--11524[label="0.454545;5pkt 5fpkt"];
3891--14396[label="0.454545;5pkt 5fpkt"];
4821--4868[label="0.338983;20pkt 20fpkt"];
4821--8058[label="0.487805;20pkt 20fpkt"];
4821--8366[label="0.25;18pkt 18fpkt"];
4821--10273[label="0.25;18pkt 18fpkt"];
4821--11524[label="0.347222;25pkt 25fpkt"];
4821--14396[label="0.347222;25pkt 25fpkt"];
4995--11524[label="1;1pkt 1fpkt"];
4995--14396[label="1;1pkt 1fpkt"];
5388--11524[label="1;1pkt 1fpkt"];
5388--14396[label="1;1pkt 1fpkt"];
5752--8773[label="1;2pkt 2fpkt"];
5752--9919[label="0.5;1pkt 1fpkt"];
5752--11524[label="0.5;1pkt 1fpkt"];
5752--14396[label="0.5;1pkt 1fpkt"];
6168--11524[label="1;1pkt 1fpkt"];
6168--14396[label="1;1pkt 1fpkt"];
8773--9919[label="0.5;1pkt 1fpkt"];
8773--11524[label="0.5;1pkt 1fpkt"];
8773--14396[label="0.5;1pkt 1fpkt"];
11524--14396[label="1;220pkt 220fpkt"];
</description>
    <slice>
      <filter src_ip="216.83.114.202"/>
      <filter src_ip="142.243.51.134"/>
      <filter src_port="443"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_234{
style=filled;
color=gray75;
4297[label="212.21.135.219;d;31pkt 31fpkt", shape=diamond, color=yellow];
4611[label="192.105.78.43;s;2pkt 2fpkt", shape=diamond, color=yellow];
5433[label="104.243.242.136;s;1pkt 1fpkt", shape=diamond, color=yellow];
5800[label="104.243.249.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
8787[label="104.243.249.74;s;1pkt 1fpkt", shape=hexagon, color=black];
10593[label="104.243.249.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13933[label="104.243.249.74;1pkt 1fpkt", shape=invtriangle, color=brown];
stat234[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.40.98.102:443, 212.21.135.219:*}[32.2581%]&lt;BR/&gt;{139.40.98.102:80, 212.21.135.219:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (31.5789%)&lt;BR/&gt; 443: (13.1579%)&lt;BR/&gt; 54496: (6.57895%)&lt;BR/&gt; 54473: (2.63158%)&lt;BR/&gt; 54459: (2.63158%)&gt;];
}
4297--4611[label="1;2pkt 2fpkt"];
4297--5433[label="1;1pkt 1fpkt"];
4297--5453[label="1;1pkt 1fpkt"];
4297--5800[label="1;1pkt 1fpkt"];
4297--7010[label="0.0322581;1pkt 1fpkt"];
4297--7388[label="0.0322581;1pkt 1fpkt"];
4297--7744[label="0.451613;14pkt 14fpkt"];
4297--8774[label="1;1pkt 1fpkt"];
4297--8787[label="1;1pkt 1fpkt"];
4297--8930[label="0.0322581;1pkt 1fpkt"];
4297--9192[label="0.0322581;1pkt 1fpkt"];
4297--9194[label="0.0967742;3pkt 3fpkt"];
4297--9198[label="0.193548;6pkt 6fpkt"];
4297--9232[label="0.0322581;1pkt 1fpkt"];
4297--9234[label="0.0967742;3pkt 3fpkt"];
4297--9266[label="0.0322581;1pkt 1fpkt"];
4297--9268[label="0.0967742;3pkt 3fpkt"];
4297--10593[label="1;1pkt 1fpkt"];
4297--10938[label="0.1875;3pkt 3fpkt"];
4297--11046[label="0.548387;17pkt 17fpkt"];
4297--12387[label="0.0322581;1pkt 1fpkt"];
4297--12682[label="0.0322581;1pkt 1fpkt"];
4297--13025[label="0.0357143;1pkt 1fpkt"];
4297--13933[label="1;1pkt 1fpkt"];
4297--14149[label="0.548387;17pkt 17fpkt"];
4297--14981[label="0.0322581;1pkt 1fpkt"];
4297--15731[label="0.548387;17pkt 17fpkt"];
4297--16178[label="0.0322581;1pkt 1fpkt"];
4611--9198[label="1;2pkt 2fpkt"];
5800--8787[label="1;1pkt 1fpkt"];
5800--9198[label="1;1pkt 1fpkt"];
5800--10593[label="1;1pkt 1fpkt"];
5800--13933[label="1;1pkt 1fpkt"];
8787--9198[label="1;1pkt 1fpkt"];
8787--10593[label="1;1pkt 1fpkt"];
8787--13933[label="1;1pkt 1fpkt"];
10593--13933[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.135.219" src_ip="139.40.98.102" src_port="80"/>
      <filter dst_ip="212.21.135.219" src_ip="139.40.98.102" src_port="443"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
5294[label="136.228.193.53;d;3pkt 3fpkt", shape=diamond, color=yellow];
5443[label="213.147.92.187;s;2pkt 2fpkt", shape=diamond, color=yellow];
12352[label="213.147.92.187;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14810[label="213.147.92.187;2pkt 2fpkt", shape=invtriangle, color=brown];
16084[label="213.147.92.187;1pkt 1fpkt", shape=invhouse, color=bisque];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.154.74.116:45811, 136.228.193.53:80}[33.3333%]&lt;BR/&gt;{213.147.92.187:0, 136.228.193.53:0}[33.3333%]&lt;BR/&gt;{213.147.92.187:62642, 136.228.193.53:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (55.5556%)&lt;BR/&gt; 80: (22.2222%)&lt;BR/&gt; 62642: (16.6667%)&lt;BR/&gt; 45811: (5.55556%)&gt;];
}
5294--5443[label="1;2pkt 2fpkt"];
5294--12352[label="1;1pkt 1fpkt"];
5294--14810[label="1;2pkt 2fpkt"];
5294--16084[label="1;1pkt 1fpkt"];
5443--12352[label="1;1pkt 1fpkt"];
5443--14810[label="1;2pkt 2fpkt"];
5443--16084[label="1;1pkt 1fpkt"];
12352--14810[label="1;1pkt 1fpkt"];
12352--16084[label="1;1pkt 1fpkt"];
14810--16084[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.53" dst_port="80" src_ip="213.147.92.187" src_port="62642"/>
      <filter dst_ip="136.228.193.53" src_ip="213.147.92.187"/>
      <filter dst_ip="136.228.193.53" dst_port="80" src_ip="195.154.74.116" src_port="45811"/>
    </slice>
    <from sec="1223615355" usec="0"/>
    <to sec="1223615562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="136.228.82.128"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
5273[label="164.25.82.108;d;30pkt 30fpkt", shape=diamond, color=yellow];
5623[label="99.29.207.173;s;21pkt 21fpkt", shape=diamond, color=yellow];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.29.207.173:*, 164.25.82.108:80}[62.5%]&lt;BR/&gt;{219.168.209.164:*, 164.25.82.108:80}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54855: (1.96078%)&lt;BR/&gt; 54838: (1.96078%)&lt;BR/&gt; 53530: (1.96078%)&lt;BR/&gt; 51353: (1.96078%)&gt;];
}
5273--5623[label="0.904762;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.82.108" dst_port="80" src_ip="99.29.207.173"/>
      <filter dst_ip="164.25.82.108" dst_port="80" src_ip="219.168.209.164"/>
    </slice>
    <from sec="1223614819" usec="0"/>
    <to sec="1223615612" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_239{
style=filled;
color=gray75;
921[label="136.228.138.83;s;801pkt 801fpkt", shape=diamond, color=yellow];
2643[label="19.216.236.229;d;1pkt 1fpkt", shape=diamond, color=yellow];
2728[label="111.43.202.223;d;2pkt 2fpkt", shape=diamond, color=yellow];
3227[label="70.118.249.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
3794[label="70.73.104.113;d;2pkt 2fpkt", shape=diamond, color=yellow];
4664[label="21.99.191.248;d;9pkt 9fpkt", shape=diamond, color=yellow];
4687[label="109.91.78.71;d;1pkt 1fpkt", shape=diamond, color=yellow];
4838[label="68.99.176.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
5722[label="72.100.129.142;d;1pkt 1fpkt", shape=diamond, color=yellow];
7528[label="70.73.104.113;d;2pkt 2fpkt", shape=hexagon, color=black];
7794[label="21.99.191.248;d;9pkt 9fpkt", shape=hexagon, color=black];
7819[label="111.43.202.223;d;2pkt 2fpkt", shape=hexagon, color=black];
8381[label="68.99.176.90;d;1pkt 1fpkt", shape=hexagon, color=black];
8540[label="19.216.236.229;d;1pkt 1fpkt", shape=hexagon, color=black];
10754[label="136.228.138.83;810pkt 810fpkt", shape=pentagon, color=darkviolet];
14012[label="136.228.138.83;810pkt 810fpkt", shape=invtriangle, color=brown];
15652[label="136.228.138.83;810pkt 810fpkt", shape=invhouse, color=bisque];
stat239[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.138.83:63707, *:*}[83.0073%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63707: (41.682%)&lt;BR/&gt; 4672: (6.06618%)&lt;BR/&gt; 80: (3.09436%)&lt;BR/&gt; 515: (2.15993%)&lt;BR/&gt; 8000: (0.612745%)&gt;];
}
921--1040[label="0.00873908;7pkt 7fpkt"];
921--1340[label="0.00226244;1pkt 1fpkt"];
921--2643[label="1;1pkt 1fpkt"];
921--2728[label="1;2pkt 2fpkt"];
921--3227[label="1;1pkt 1fpkt"];
921--3794[label="1;2pkt 2fpkt"];
921--4664[label="0.222222;2pkt 2fpkt"];
921--4687[label="1;1pkt 1fpkt"];
921--4838[label="1;1pkt 1fpkt"];
921--5657[label="0.0434783;2pkt 2fpkt"];
921--5722[label="1;1pkt 1fpkt"];
921--7200[label="0.00396825;1pkt 1fpkt"];
921--7528[label="1;2pkt 2fpkt"];
921--7794[label="0.222222;2pkt 2fpkt"];
921--7819[label="1;2pkt 2fpkt"];
921--8381[label="1;1pkt 1fpkt"];
921--8540[label="1;1pkt 1fpkt"];
921--10754[label="0.998752;800pkt 800fpkt"];
921--14012[label="0.998752;800pkt 800fpkt"];
921--15652[label="0.998752;800pkt 800fpkt"];
2643--8540[label="1;1pkt 1fpkt"];
2643--10754[label="1;1pkt 1fpkt"];
2643--14012[label="1;1pkt 1fpkt"];
2643--15652[label="1;1pkt 1fpkt"];
2728--7819[label="1;2pkt 2fpkt"];
2728--10754[label="1;2pkt 2fpkt"];
2728--14012[label="1;2pkt 2fpkt"];
2728--15652[label="1;2pkt 2fpkt"];
3227--10754[label="1;1pkt 1fpkt"];
3227--14012[label="1;1pkt 1fpkt"];
3227--15652[label="1;1pkt 1fpkt"];
3794--7528[label="1;2pkt 2fpkt"];
3794--10754[label="1;2pkt 2fpkt"];
3794--14012[label="1;2pkt 2fpkt"];
3794--15652[label="1;2pkt 2fpkt"];
4664--5923[label="0.222222;2pkt 2fpkt"];
4664--6308[label="0.333333;3pkt 3fpkt"];
4664--6466[label="0.111111;1pkt 1fpkt"];
4664--7794[label="1;9pkt 9fpkt"];
4664--10152[label="0.444444;4pkt 4fpkt"];
4664--10754[label="0.222222;2pkt 2fpkt"];
4664--11359[label="0.111111;1pkt 1fpkt"];
4664--13703[label="0.444444;4pkt 4fpkt"];
4664--14012[label="0.222222;2pkt 2fpkt"];
4664--14310[label="0.111111;1pkt 1fpkt"];
4664--15494[label="0.444444;4pkt 4fpkt"];
4664--15652[label="0.222222;2pkt 2fpkt"];
4664--15808[label="0.111111;1pkt 1fpkt"];
4687--10754[label="1;1pkt 1fpkt"];
4687--14012[label="1;1pkt 1fpkt"];
4687--15652[label="1;1pkt 1fpkt"];
4838--8381[label="1;1pkt 1fpkt"];
4838--10754[label="1;1pkt 1fpkt"];
4838--14012[label="1;1pkt 1fpkt"];
4838--15652[label="1;1pkt 1fpkt"];
5722--10754[label="1;1pkt 1fpkt"];
5722--14012[label="1;1pkt 1fpkt"];
5722--15652[label="1;1pkt 1fpkt"];
7528--10754[label="1;2pkt 2fpkt"];
7528--14012[label="1;2pkt 2fpkt"];
7528--15652[label="1;2pkt 2fpkt"];
7794--10152[label="0.444444;4pkt 4fpkt"];
7794--10754[label="0.222222;2pkt 2fpkt"];
7794--11359[label="0.111111;1pkt 1fpkt"];
7794--13703[label="0.444444;4pkt 4fpkt"];
7794--14012[label="0.222222;2pkt 2fpkt"];
7794--14310[label="0.111111;1pkt 1fpkt"];
7794--15494[label="0.444444;4pkt 4fpkt"];
7794--15652[label="0.222222;2pkt 2fpkt"];
7794--15808[label="0.111111;1pkt 1fpkt"];
7819--10754[label="1;2pkt 2fpkt"];
7819--14012[label="1;2pkt 2fpkt"];
7819--15652[label="1;2pkt 2fpkt"];
8381--10754[label="1;1pkt 1fpkt"];
8381--14012[label="1;1pkt 1fpkt"];
8381--15652[label="1;1pkt 1fpkt"];
8540--10754[label="1;1pkt 1fpkt"];
8540--14012[label="1;1pkt 1fpkt"];
8540--15652[label="1;1pkt 1fpkt"];
10754--14012[label="1;810pkt 810fpkt"];
10754--15652[label="1;810pkt 810fpkt"];
14012--15652[label="1;810pkt 810fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.138.83" src_port="63707"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_240{
style=filled;
color=gray75;
5438[label="195.173.78.37;s;13pkt 13fpkt", shape=diamond, color=yellow];
9933[label="195.173.78.37;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13582[label="195.173.78.37;13pkt 13fpkt", shape=invtriangle, color=brown];
15444[label="195.173.78.37;13pkt 13fpkt", shape=invhouse, color=bisque];
stat240[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.173.78.37:80, 142.243.50.29:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60841: (3.92157%)&lt;BR/&gt; 58783: (3.92157%)&lt;BR/&gt; 57962: (3.92157%)&lt;BR/&gt; 56673: (3.92157%)&gt;];
}
5438--9933[label="1;12pkt 12fpkt"];
5438--13582[label="1;13pkt 13fpkt"];
5438--15444[label="1;13pkt 13fpkt"];
9933--13582[label="1;12pkt 12fpkt"];
9933--15444[label="1;12pkt 12fpkt"];
13582--15444[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.50.29" src_ip="195.173.78.37" src_port="80"/>
    </slice>
    <from sec="1223615497" usec="0"/>
    <to sec="1223615518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
3302[label="164.25.33.169;d;13pkt 13fpkt", shape=diamond, color=yellow];
5678[label="99.105.180.129;s;5pkt 5fpkt", shape=diamond, color=yellow];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.105.180.129:80, 164.25.33.169:*}[35.7143%]&lt;BR/&gt;{99.105.180.136:80, 164.25.33.169:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 1729: (5.55556%)&lt;BR/&gt; 1728: (5.55556%)&lt;BR/&gt; 1725: (5.55556%)&lt;BR/&gt; 1723: (5.55556%)&gt;];
}
3302--3462[label="1;4pkt 4fpkt"];
3302--5678[label="0.8;4pkt 4fpkt"];
3302--9176[label="0.0769231;1pkt 1fpkt"];
3302--9194[label="0.0769231;1pkt 1fpkt"];
3302--9198[label="0.0769231;1pkt 1fpkt"];
3302--9199[label="0.0769231;1pkt 1fpkt"];
3302--9216[label="0.0769231;1pkt 1fpkt"];
3302--9234[label="0.0769231;1pkt 1fpkt"];
3302--9250[label="0.0769231;1pkt 1fpkt"];
3302--9268[label="0.0769231;1pkt 1fpkt"];
5678--9198[label="0.4;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.33.169" src_ip="99.105.180.129" src_port="80"/>
      <filter dst_ip="164.25.33.169" src_ip="99.105.180.136" src_port="80"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_243{
style=filled;
color=gray75;
5257[label="136.228.90.200;s;40pkt 40fpkt", shape=diamond, color=yellow];
5706[label="213.3.96.1;d;42pkt 42fpkt", shape=diamond, color=yellow];
8754[label="213.3.96.1;d;42pkt 42fpkt", shape=hexagon, color=black];
12534[label="136.228.90.200;59pkt 59fpkt", shape=pentagon, color=darkviolet];
stat243[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.90.200:*, 213.3.96.1:80}[89.8305%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1879: (1.0929%)&lt;BR/&gt; 1878: (1.0929%)&lt;BR/&gt; 1877: (1.0929%)&lt;BR/&gt; 1876: (1.0929%)&gt;];
}
5257--5706[label="0.85;34pkt 34fpkt"];
5257--8754[label="0.85;34pkt 34fpkt"];
5257--12534[label="1;40pkt 40fpkt"];
5706--8754[label="1;42pkt 42fpkt"];
5706--12534[label="1;42pkt 42fpkt"];
8754--12534[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="213.3.96.1" dst_port="80" src_ip="136.228.90.200"/>
    </slice>
    <from sec="1223615222" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
4752[label="142.226.195.78;s;13pkt 13fpkt", shape=diamond, color=yellow];
5737[label="107.100.252.166;d;2pkt 2fpkt", shape=diamond, color=yellow];
5781[label="107.100.252.167;d;1pkt 1fpkt", shape=diamond, color=yellow];
8293[label="142.226.195.78;s;13pkt 13fpkt", shape=hexagon, color=black];
10664[label="142.226.195.78;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.195.78:80, 107.100.252.167:*}[62.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44802: (4.44444%)&lt;BR/&gt; 59393: (3.33333%)&lt;BR/&gt; 53169: (3.33333%)&lt;BR/&gt; 52627: (3.33333%)&gt;];
}
4752--5737[label="0.5;1pkt 1fpkt"];
4752--8293[label="1;13pkt 13fpkt"];
4752--9163[label="0.0769231;1pkt 1fpkt"];
4752--9194[label="0.0769231;1pkt 1fpkt"];
4752--9234[label="0.0769231;1pkt 1fpkt"];
4752--9268[label="0.0769231;1pkt 1fpkt"];
4752--10664[label="1;13pkt 13fpkt"];
5737--8293[label="0.5;1pkt 1fpkt"];
5737--10664[label="1;2pkt 2fpkt"];
5781--9198[label="1;1pkt 1fpkt"];
5781--10664[label="1;1pkt 1fpkt"];
8293--9163[label="0.0769231;1pkt 1fpkt"];
8293--9194[label="0.0769231;1pkt 1fpkt"];
8293--9234[label="0.0769231;1pkt 1fpkt"];
8293--9268[label="0.0769231;1pkt 1fpkt"];
8293--10664[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.252.167" src_ip="142.226.195.78" src_port="80"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
5671[label="160.49.154.67;d;78pkt 78fpkt", shape=diamond, color=yellow];
5765[label="210.70.27.81;s;34pkt 34fpkt", shape=diamond, color=yellow];
10704[label="210.70.27.81;60pkt 60fpkt", shape=pentagon, color=darkviolet];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.70.27.81:587, 160.49.154.67:*}[57.6923%]&lt;BR/&gt;{210.70.27.86:587, 160.49.154.67:*}[33.6538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 587: (47.3837%)&lt;BR/&gt; 25: (1.45349%)&lt;BR/&gt; 2703: (1.16279%)&lt;BR/&gt; 59536: (0.872093%)&lt;BR/&gt; 59499: (0.872093%)&gt;];
}
5671--5762[label="1;35pkt 35fpkt"];
5671--5765[label="1;34pkt 34fpkt"];
5671--8778[label="1;35pkt 35fpkt"];
5671--9177[label="0.0128205;1pkt 1fpkt"];
5671--9217[label="0.0128205;1pkt 1fpkt"];
5671--9251[label="0.0128205;1pkt 1fpkt"];
5671--10704[label="0.566667;34pkt 34fpkt"];
5765--10704[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.154.67" src_ip="210.70.27.81" src_port="587"/>
      <filter dst_ip="160.49.154.67" src_ip="210.70.27.86" src_port="587"/>
    </slice>
    <from sec="1223615190" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.221.142.217"/>
      <from sec="1223615542" usec="0"/>
      <to sec="1223615628" usec="0"/>
    </slice>
    <from sec="1223615542" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="68.221.142.217"/>
      <from sec="1223615542" usec="0"/>
      <to sec="1223615628" usec="0"/>
    </slice>
    <from sec="1223615542" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,504,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_248{
style=filled;
color=gray75;
137[label="142.243.34.139s;1pkt 1fpkt", shape=rectangle, color=red];
3832[label="108.232.170.16;d;5pkt 5fpkt", shape=diamond, color=yellow];
4781[label="111.99.14.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
5789[label="98.149.139.75;d;1pkt 1fpkt", shape=diamond, color=yellow];
6923[label="142.243.34.139;s;139pkt 139fpkt", shape=hexagon, color=black];
stat248[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.34.139:*, *:80}[27.3381%]&lt;BR/&gt;{142.243.34.139:*, 40.94.172.209:443}[21.5827%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (17.0068%)&lt;BR/&gt; 80: (14.2857%)&lt;BR/&gt; 48678: (4.42177%)&lt;BR/&gt; 25499: (3.40136%)&lt;BR/&gt; 49130: (2.38095%)&gt;];
}
137--2812[label="1;1pkt 1fpkt"];
137--5789[label="1;1pkt 1fpkt"];
137--6923[label="1;1pkt 1fpkt"];
3832--6923[label="1;5pkt 5fpkt"];
4781--6923[label="1;1pkt 1fpkt"];
5789--6923[label="1;1pkt 1fpkt"];
6923--7289[label="0.115108;16pkt 16fpkt"];
6923--7825[label="0.00719424;1pkt 1fpkt"];
6923--8010[label="0.00840336;1pkt 1fpkt"];
6923--8218[label="0.037037;1pkt 1fpkt"];
6923--8970[label="0.153846;16pkt 16fpkt"];
6923--9103[label="0.00840336;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="142.243.34.139"/>
      <filter dst_ip="40.94.172.209" dst_port="443" src_ip="142.243.34.139"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
4670[label="142.243.151.62;s;34pkt 34fpkt", shape=diamond, color=yellow];
4948[label="206.4.96.46;d;2pkt 2fpkt", shape=diamond, color=yellow];
5794[label="206.4.96.33;d;2pkt 2fpkt", shape=diamond, color=yellow];
8205[label="142.243.151.62;s;34pkt 34fpkt", shape=hexagon, color=black];
10372[label="142.243.151.62;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.151.62:25, *:*}[70.5882%]&lt;BR/&gt;{142.243.151.62:*, *:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (33.9623%)&lt;BR/&gt; 80: (13.2075%)&lt;BR/&gt; 123: (2.83019%)&lt;BR/&gt; 40317: (1.88679%)&lt;BR/&gt; 40316: (1.88679%)&gt;];
}
4670--4948[label="1;2pkt 2fpkt"];
4670--5794[label="1;2pkt 2fpkt"];
4670--8205[label="1;34pkt 34fpkt"];
4670--9196[label="0.0588235;2pkt 2fpkt"];
4670--10372[label="1;34pkt 34fpkt"];
4948--8205[label="1;2pkt 2fpkt"];
4948--10372[label="1;2pkt 2fpkt"];
5794--8205[label="1;2pkt 2fpkt"];
5794--10372[label="1;2pkt 2fpkt"];
8205--9196[label="0.0588235;2pkt 2fpkt"];
8205--10372[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter src_ip="142.243.151.62" src_port="25"/>
      <filter dst_port="80" src_ip="142.243.151.62"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
4669[label="142.243.151.62;d;26pkt 26fpkt", shape=diamond, color=yellow];
4949[label="206.4.96.46;s;2pkt 2fpkt", shape=diamond, color=yellow];
5795[label="206.4.96.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
7805[label="142.243.151.62;d;26pkt 26fpkt", shape=hexagon, color=black];
9863[label="206.4.96.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13541[label="206.4.96.33;2pkt 2fpkt", shape=invtriangle, color=brown];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.243.151.62:25}[61.5385%]&lt;BR/&gt;{*:80, 142.243.151.62:*}[30.7692%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.6667%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 40317: (4.16667%)&lt;BR/&gt; 40316: (4.16667%)&lt;BR/&gt; 123: (3.33333%)&gt;];
}
4669--4949[label="1;2pkt 2fpkt"];
4669--5795[label="1;2pkt 2fpkt"];
4669--7805[label="1;26pkt 26fpkt"];
4669--9198[label="0.153846;4pkt 4fpkt"];
4669--9863[label="1;2pkt 2fpkt"];
4669--13120[label="0.0769231;1pkt 1fpkt"];
4669--13541[label="1;2pkt 2fpkt"];
4669--15202[label="0.0769231;1pkt 1fpkt"];
4669--16295[label="0.0769231;1pkt 1fpkt"];
4949--7805[label="1;2pkt 2fpkt"];
5795--7805[label="1;2pkt 2fpkt"];
5795--9198[label="1;2pkt 2fpkt"];
5795--9863[label="1;2pkt 2fpkt"];
5795--13541[label="1;2pkt 2fpkt"];
7805--9198[label="0.153846;4pkt 4fpkt"];
7805--9863[label="1;2pkt 2fpkt"];
7805--13120[label="0.0769231;1pkt 1fpkt"];
7805--13541[label="1;2pkt 2fpkt"];
7805--15202[label="0.0769231;1pkt 1fpkt"];
7805--16295[label="0.0769231;1pkt 1fpkt"];
9863--13541[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.151.62" src_port="80"/>
      <filter dst_ip="142.243.151.62" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
3741[label="136.228.193.16;s;201pkt 201fpkt", shape=diamond, color=yellow];
5444[label="104.243.254.239;d;3pkt 3fpkt", shape=diamond, color=yellow];
5801[label="192.105.66.132;d;2pkt 2fpkt", shape=diamond, color=yellow];
5839[label="192.105.74.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
8503[label="104.243.254.239;d;1pkt 1fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.193.16:*, 193.52.143.13:80}[28.3582%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7981%)&lt;BR/&gt; 443: (1.20192%)&lt;BR/&gt; 49932: (0.721154%)&lt;BR/&gt; 49979: (0.480769%)&lt;BR/&gt; 49967: (0.480769%)&gt;];
}
3741--3786[label="0.00995025;2pkt 2fpkt"];
3741--5166[label="0.268293;11pkt 11fpkt"];
3741--5444[label="1;3pkt 3fpkt"];
3741--5801[label="1;2pkt 2fpkt"];
3741--5839[label="1;1pkt 1fpkt"];
3741--5878[label="1;1pkt 1fpkt"];
3741--6192[label="0.0248756;5pkt 5fpkt"];
3741--6245[label="0.0696517;14pkt 14fpkt"];
3741--6621[label="0.0298507;6pkt 6fpkt"];
3741--7434[label="0.0149254;3pkt 3fpkt"];
3741--7738[label="0.0199005;4pkt 4fpkt"];
3741--7810[label="0.00497512;1pkt 1fpkt"];
3741--8220[label="0.00497512;1pkt 1fpkt"];
3741--8503[label="1;1pkt 1fpkt"];
3741--9128[label="0.0199005;4pkt 4fpkt"];
3741--9585[label="0.99005;199pkt 199fpkt"];
5444--8503[label="1;1pkt 1fpkt"];
5444--9585[label="1;3pkt 3fpkt"];
5801--9585[label="1;2pkt 2fpkt"];
5839--9585[label="1;1pkt 1fpkt"];
8503--9585[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.143.13" dst_port="80" src_ip="136.228.193.16"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="21.122.65.18"/>
      <from sec="1223615555" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223615555" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="21.122.65.18"/>
      <from sec="1223615555" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223615555" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_254{
style=filled;
color=gray75;
103[label="136.228.154.100s;2pkt 2fpkt", shape=rectangle, color=red];
3920[label="136.228.154.100;s;33pkt 33fpkt", shape=diamond, color=yellow];
4530[label="192.105.66.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
5782[label="192.105.66.232;d;1pkt 1fpkt", shape=diamond, color=yellow];
5818[label="192.105.70.168;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat254[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.154.100:*, 193.52.143.13:80}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2161: (3.94737%)&lt;BR/&gt; 2131: (2.63158%)&lt;BR/&gt; 2095: (2.63158%)&lt;BR/&gt; 2165: (1.31579%)&gt;];
}
103--3920[label="0.5;1pkt 1fpkt"];
103--4530[label="1;1pkt 1fpkt"];
103--5818[label="1;1pkt 1fpkt"];
3920--5554[label="0.0909091;3pkt 3fpkt"];
3920--5782[label="1;1pkt 1fpkt"];
3920--5818[label="1;1pkt 1fpkt"];
3920--6245[label="0.393939;13pkt 13fpkt"];
3920--8621[label="0.0909091;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.143.13" dst_port="80" src_ip="136.228.154.100"/>
    </slice>
    <from sec="1223615286" usec="0"/>
    <to sec="1223615607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="107.137.214.42"/>
      <from sec="1223615582" usec="0"/>
      <to sec="1223615604" usec="0"/>
    </slice>
    <from sec="1223615582" usec="0"/>
    <to sec="1223615604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="195.174.159.177"/>
      <from sec="1223615610" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="1223615610" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
3740[label="136.228.193.16;d;259pkt 259fpkt", shape=diamond, color=yellow];
5866[label="104.243.251.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
5879[label="192.105.74.93;s;1pkt 1fpkt", shape=diamond, color=yellow];
8803[label="192.105.74.93;s;1pkt 1fpkt", shape=hexagon, color=black];
12007[label="104.243.251.164;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.193.16:7556}[45%]&lt;BR/&gt;{*:80, 136.228.193.16:*}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7556: (22.1591%)&lt;BR/&gt; 80: (20.4545%)&lt;BR/&gt; 7566: (5.49242%)&lt;BR/&gt; 22263: (2.84091%)&lt;BR/&gt; 0: (2.27273%)&gt;];
}
3740--5866[label="1;1pkt 1fpkt"];
3740--5879[label="1;1pkt 1fpkt"];
3740--8803[label="1;1pkt 1fpkt"];
3740--9194[label="0.220077;57pkt 57fpkt"];
3740--9234[label="0.220077;57pkt 57fpkt"];
3740--9268[label="0.220077;57pkt 57fpkt"];
3740--11363[label="1;27pkt 27fpkt"];
3740--12007[label="0.5;1pkt 1fpkt"];
3740--14312[label="1;28pkt 28fpkt"];
5866--12007[label="1;1pkt 1fpkt"];
5879--8803[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.16" src_port="80"/>
      <filter dst_ip="136.228.193.16" dst_port="7556"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
5880[label="160.49.198.227;d;31pkt 31fpkt", shape=diamond, color=yellow];
5881[label="210.224.178.156;s;31pkt 31fpkt", shape=diamond, color=yellow];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.224.178.156:80, 160.49.198.227:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2561: (1.6129%)&lt;BR/&gt; 2560: (1.6129%)&lt;BR/&gt; 2559: (1.6129%)&lt;BR/&gt; 2558: (1.6129%)&gt;];
}
5880--5881[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.198.227" src_ip="210.224.178.156" src_port="80"/>
    </slice>
    <from sec="1223615616" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
655[label="96.141.47.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
5917[label="96.141.47.127;d;1pkt 1fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.200:1028, 96.141.47.127:54177}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54177: (50%)&lt;BR/&gt; 1028: (50%)&gt;];
}
655--5917[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.141.47.127" dst_port="54177" src_ip="212.21.136.200" src_port="1028"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
667[label="86.68.183.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
5922[label="86.68.183.137;d;1pkt 1fpkt", shape=hexagon, color=black];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.200:4359, 86.68.183.137:64095}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64095: (50%)&lt;BR/&gt; 4359: (50%)&gt;];
}
667--5922[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="86.68.183.137" dst_port="64095" src_ip="212.21.136.200" src_port="4359"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
670[label="136.228.237.233;s;1350pkt 1350fpkt", shape=diamond, color=yellow];
1134[label="203.120.114.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1836[label="203.168.17.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
1894[label="64.167.13.9;d;2pkt 2fpkt", shape=diamond, color=yellow];
1998[label="68.168.174.172;d;3pkt 3fpkt", shape=diamond, color=yellow];
2044[label="202.64.129.112;d;1pkt 1fpkt", shape=diamond, color=yellow];
2048[label="203.74.92.225;d;2pkt 2fpkt", shape=diamond, color=yellow];
2055[label="70.108.102.5;d;2pkt 2fpkt", shape=diamond, color=yellow];
2089[label="76.235.155.5;d;3pkt 3fpkt", shape=diamond, color=yellow];
3255[label="204.134.131.234;d;2pkt 2fpkt", shape=diamond, color=yellow];
3285[label="20.184.62.219;d;3pkt 3fpkt", shape=diamond, color=yellow];
3448[label="202.73.6.162;d;3pkt 3fpkt", shape=diamond, color=yellow];
3744[label="70.71.66.122;d;2pkt 2fpkt", shape=diamond, color=yellow];
3958[label="205.14.180.42;d;2pkt 2fpkt", shape=diamond, color=yellow];
4151[label="204.129.70.70;d;1pkt 1fpkt", shape=diamond, color=yellow];
4878[label="213.3.24.43;d;64pkt 64fpkt", shape=diamond, color=yellow];
5533[label="77.218.208.66;d;22pkt 22fpkt", shape=diamond, color=yellow];
5923[label="136.228.237.233;s;570pkt 570fpkt", shape=hexagon, color=black];
6226[label="203.168.17.52;d;1pkt 1fpkt", shape=hexagon, color=black];
6557[label="68.168.174.172;d;3pkt 3fpkt", shape=hexagon, color=black];
6572[label="202.64.129.112;d;1pkt 1fpkt", shape=hexagon, color=black];
7145[label="64.167.13.9;d;2pkt 2fpkt", shape=hexagon, color=black];
7215[label="70.71.66.122;d;2pkt 2fpkt", shape=hexagon, color=black];
7457[label="203.120.114.122;d;1pkt 1fpkt", shape=hexagon, color=black];
8240[label="20.184.62.219;d;3pkt 3fpkt", shape=hexagon, color=black];
8606[label="77.218.208.66;d;22pkt 22fpkt", shape=hexagon, color=black];
8691[label="202.73.6.162;d;3pkt 3fpkt", shape=hexagon, color=black];
8942[label="203.120.114.122;d;1pkt 1fpkt", shape=polygon, color=gold];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.237.233:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (7.09117%)&lt;BR/&gt; 4672: (2.55668%)&lt;BR/&gt; 4166: (1.83309%)&lt;BR/&gt; 1535: (0.506512%)&lt;BR/&gt; 1549: (0.458273%)&gt;];
}
670--1040[label="0.01221;10pkt 10fpkt"];
670--1134[label="1;1pkt 1fpkt"];
670--1265[label="0.0163636;9pkt 9fpkt"];
670--1329[label="0.00516529;5pkt 5fpkt"];
670--1340[label="0.00226244;1pkt 1fpkt"];
670--1403[label="0.00959693;5pkt 5fpkt"];
670--1814[label="0.00319489;1pkt 1fpkt"];
670--1836[label="1;1pkt 1fpkt"];
670--1894[label="1;2pkt 2fpkt"];
670--1998[label="1;3pkt 3fpkt"];
670--2044[label="1;1pkt 1fpkt"];
670--2048[label="1;2pkt 2fpkt"];
670--2055[label="1;2pkt 2fpkt"];
670--2076[label="0.00374532;1pkt 1fpkt"];
670--2089[label="1;3pkt 3fpkt"];
670--2176[label="0.00225225;1pkt 1fpkt"];
670--2255[label="0.0227273;1pkt 1fpkt"];
670--2590[label="0.0120482;1pkt 1fpkt"];
670--2712[label="0.0122699;2pkt 2fpkt"];
670--3164[label="0.027027;1pkt 1fpkt"];
670--3229[label="0.0192926;6pkt 6fpkt"];
670--3245[label="0.00917431;2pkt 2fpkt"];
670--3255[label="1;2pkt 2fpkt"];
670--3285[label="1;3pkt 3fpkt"];
670--3448[label="1;3pkt 3fpkt"];
670--3744[label="1;2pkt 2fpkt"];
670--3884[label="0.0428571;3pkt 3fpkt"];
670--3958[label="1;2pkt 2fpkt"];
670--4151[label="1;1pkt 1fpkt"];
670--4331[label="0.0070922;1pkt 1fpkt"];
670--4664[label="0.222222;2pkt 2fpkt"];
670--4730[label="0.00806452;1pkt 1fpkt"];
670--4878[label="1;64pkt 64fpkt"];
670--5206[label="0.010989;1pkt 1fpkt"];
670--5533[label="1;22pkt 22fpkt"];
670--5923[label="1;570pkt 570fpkt"];
670--6226[label="1;1pkt 1fpkt"];
670--6303[label="0.0163636;9pkt 9fpkt"];
670--6557[label="1;3pkt 3fpkt"];
670--6572[label="1;1pkt 1fpkt"];
670--7145[label="1;2pkt 2fpkt"];
670--7200[label="0.00396825;1pkt 1fpkt"];
670--7215[label="1;2pkt 2fpkt"];
670--7447[label="0.0294118;1pkt 1fpkt"];
670--7457[label="1;1pkt 1fpkt"];
670--7794[label="0.222222;2pkt 2fpkt"];
670--7808[label="0.0192926;6pkt 6fpkt"];
670--7810[label="0.00446429;1pkt 1fpkt"];
670--7850[label="0.00286533;1pkt 1fpkt"];
670--8201[label="0.0141844;2pkt 2fpkt"];
670--8225[label="0.0106157;5pkt 5fpkt"];
670--8240[label="1;3pkt 3fpkt"];
670--8606[label="1;22pkt 22fpkt"];
670--8662[label="0.0070922;1pkt 1fpkt"];
670--8691[label="1;3pkt 3fpkt"];
670--8942[label="1;1pkt 1fpkt"];
670--9178[label="0.00273973;3pkt 3fpkt"];
670--9218[label="0.00273723;3pkt 3fpkt"];
670--9252[label="0.00273973;3pkt 3fpkt"];
1134--5923[label="1;1pkt 1fpkt"];
1134--7457[label="1;1pkt 1fpkt"];
1134--8942[label="1;1pkt 1fpkt"];
1836--5923[label="1;1pkt 1fpkt"];
1836--6226[label="1;1pkt 1fpkt"];
1894--5923[label="1;2pkt 2fpkt"];
1894--7145[label="1;2pkt 2fpkt"];
1998--5923[label="0.666667;2pkt 2fpkt"];
1998--6557[label="1;3pkt 3fpkt"];
2044--5923[label="1;1pkt 1fpkt"];
2044--6572[label="1;1pkt 1fpkt"];
2048--5923[label="0.5;1pkt 1fpkt"];
2055--5923[label="0.5;1pkt 1fpkt"];
2089--5923[label="0.666667;2pkt 2fpkt"];
3255--5923[label="1;2pkt 2fpkt"];
3285--5923[label="0.333333;1pkt 1fpkt"];
3285--8240[label="1;3pkt 3fpkt"];
3448--8691[label="1;3pkt 3fpkt"];
3744--5923[label="1;2pkt 2fpkt"];
3744--7215[label="1;2pkt 2fpkt"];
4151--5923[label="1;1pkt 1fpkt"];
5533--5923[label="0.181818;4pkt 4fpkt"];
5533--8606[label="1;22pkt 22fpkt"];
5923--6226[label="1;1pkt 1fpkt"];
5923--6303[label="0.00363636;2pkt 2fpkt"];
5923--6557[label="0.666667;2pkt 2fpkt"];
5923--6572[label="1;1pkt 1fpkt"];
5923--7145[label="1;2pkt 2fpkt"];
5923--7215[label="1;2pkt 2fpkt"];
5923--7457[label="1;1pkt 1fpkt"];
5923--7794[label="0.222222;2pkt 2fpkt"];
5923--7808[label="0.0096463;3pkt 3fpkt"];
5923--8201[label="0.0141844;2pkt 2fpkt"];
5923--8225[label="0.00424628;2pkt 2fpkt"];
5923--8240[label="0.333333;1pkt 1fpkt"];
5923--8606[label="0.181818;4pkt 4fpkt"];
5923--8942[label="1;1pkt 1fpkt"];
5923--9178[label="0.00175439;1pkt 1fpkt"];
5923--9218[label="0.00175439;1pkt 1fpkt"];
5923--9252[label="0.00175439;1pkt 1fpkt"];
7457--8942[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.237.233"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
694[label="142.243.65.193;s;7pkt 7fpkt", shape=diamond, color=yellow];
1800[label="212.20.14.182;d;8pkt 8fpkt", shape=diamond, color=yellow];
5931[label="142.243.65.193;s;7pkt 7fpkt", shape=hexagon, color=black];
7099[label="212.20.14.182;d;8pkt 8fpkt", shape=hexagon, color=black];
12421[label="142.243.65.193;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14853[label="142.243.65.193;6pkt 6fpkt", shape=invtriangle, color=brown];
16107[label="142.243.65.193;6pkt 6fpkt", shape=invhouse, color=bisque];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.65.193:*, 212.20.14.182:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49229: (7.29167%)&lt;BR/&gt; 49227: (7.29167%)&lt;BR/&gt; 49225: (7.29167%)&lt;BR/&gt; 49223: (7.29167%)&lt;BR/&gt; 49222: (7.29167%)&gt;];
}
694--1800[label="1;7pkt 7fpkt"];
694--5931[label="1;7pkt 7fpkt"];
694--7099[label="1;7pkt 7fpkt"];
694--12421[label="1;6pkt 6fpkt"];
694--14853[label="1;6pkt 6fpkt"];
694--16107[label="1;6pkt 6fpkt"];
1800--5931[label="1;7pkt 7fpkt"];
1800--7099[label="1;8pkt 8fpkt"];
1800--12421[label="1;6pkt 6fpkt"];
1800--14853[label="1;6pkt 6fpkt"];
1800--16107[label="1;6pkt 6fpkt"];
5931--7099[label="1;7pkt 7fpkt"];
5931--12421[label="1;6pkt 6fpkt"];
5931--14853[label="1;6pkt 6fpkt"];
5931--16107[label="1;6pkt 6fpkt"];
7099--12421[label="1;6pkt 6fpkt"];
7099--14853[label="1;6pkt 6fpkt"];
7099--16107[label="1;6pkt 6fpkt"];
12421--14853[label="1;6pkt 6fpkt"];
12421--16107[label="1;6pkt 6fpkt"];
14853--16107[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.20.14.182" src_ip="142.243.65.193"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
78[label="213.33.128.69s;2pkt 2fpkt", shape=rectangle, color=red];
632[label="213.33.128.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
755[label="114.71.218.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
5939[label="114.71.218.151;d;1pkt 1fpkt", shape=hexagon, color=black];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.138.11:3801, 114.71.218.151:80}[50%]&lt;BR/&gt;{213.33.128.69:2296, 210.192.150.157:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3801: (30%)&lt;BR/&gt; 2296: (20%)&gt;];
}
78--629[label="0.5;1pkt 1fpkt"];
78--632[label="1;1pkt 1fpkt"];
78--755[label="1;1pkt 1fpkt"];
78--756[label="0.5;1pkt 1fpkt"];
78--5939[label="1;1pkt 1fpkt"];
78--5940[label="0.5;1pkt 1fpkt"];
78--10482[label="0.5;1pkt 1fpkt"];
632--10482[label="1;1pkt 1fpkt"];
755--756[label="1;1pkt 1fpkt"];
755--5939[label="1;1pkt 1fpkt"];
755--5940[label="1;1pkt 1fpkt"];
5939--5940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.192.150.157" dst_port="80" src_ip="213.33.128.69" src_port="2296"/>
      <filter dst_ip="114.71.218.151" dst_port="80" src_ip="136.228.138.11" src_port="3801"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
843[label="72.8.128.211;d;447pkt 447fpkt", shape=diamond, color=yellow];
5954[label="72.8.128.211;d;254pkt 254fpkt", shape=hexagon, color=black];
8811[label="72.8.128.211;d;254pkt 254fpkt", shape=polygon, color=gold];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.193.32:*, 72.8.128.211:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3269: (0.157068%)&lt;BR/&gt; 3267: (0.157068%)&lt;BR/&gt; 3265: (0.157068%)&lt;BR/&gt; 3263: (0.157068%)&gt;];
}
843--5954[label="1;254pkt 254fpkt"];
843--6496[label="1;447pkt 447fpkt"];
843--8811[label="1;254pkt 254fpkt"];
5954--6496[label="1;254pkt 254fpkt"];
5954--8811[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_ip="72.8.128.211" dst_port="80" src_ip="136.228.193.32"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_273{
style=filled;
color=gray75;
1109[label="136.228.154.8;d;3pkt 3fpkt", shape=diamond, color=yellow];
1112[label="192.105.76.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
3626[label="104.243.242.186;s;1pkt 1fpkt", shape=diamond, color=yellow];
6015[label="192.105.76.232;s;1pkt 1fpkt", shape=hexagon, color=black];
6830[label="136.228.154.8;d;3pkt 3fpkt", shape=hexagon, color=black];
12342[label="104.243.242.186;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12983[label="192.105.76.232;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat273[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.242.186:80, 136.228.154.8:3912}[33.3333%]&lt;BR/&gt;{192.105.76.232:80, 136.228.154.8:3847}[33.3333%]&lt;BR/&gt;{192.105.76.232:80, 136.228.154.8:3904}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3912: (16.6667%)&lt;BR/&gt; 3904: (16.6667%)&lt;BR/&gt; 3847: (16.6667%)&gt;];
}
1109--1112[label="1;1pkt 1fpkt"];
1109--3626[label="1;1pkt 1fpkt"];
1109--6015[label="1;1pkt 1fpkt"];
1109--6830[label="1;3pkt 3fpkt"];
1109--9163[label="0.333333;1pkt 1fpkt"];
1109--12342[label="1;1pkt 1fpkt"];
1109--12983[label="1;2pkt 2fpkt"];
1112--6830[label="1;1pkt 1fpkt"];
1112--12983[label="1;1pkt 1fpkt"];
3626--6830[label="1;1pkt 1fpkt"];
3626--12342[label="1;1pkt 1fpkt"];
6015--6830[label="1;1pkt 1fpkt"];
6015--9163[label="1;1pkt 1fpkt"];
6015--12983[label="1;1pkt 1fpkt"];
6830--9163[label="0.333333;1pkt 1fpkt"];
6830--12342[label="1;1pkt 1fpkt"];
6830--12983[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.154.8" dst_port="3904" src_ip="192.105.76.232" src_port="80"/>
      <filter dst_ip="136.228.154.8" dst_port="3847" src_ip="192.105.76.232" src_port="80"/>
      <filter dst_ip="136.228.154.8" dst_port="3912" src_ip="104.243.242.186" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
1121[label="164.25.104.40;d;2pkt 2fpkt", shape=diamond, color=yellow];
1122[label="209.199.152.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
6016[label="164.25.104.40;d;2pkt 2fpkt", shape=hexagon, color=black];
6017[label="209.199.152.202;s;1pkt 1fpkt", shape=hexagon, color=black];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.4.66.135:5050, 164.25.104.40:1609}[50%]&lt;BR/&gt;{209.199.152.202:20, 164.25.104.40:2861}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2861: (33.3333%)&lt;BR/&gt; 20: (33.3333%)&lt;BR/&gt; 5050: (16.6667%)&lt;BR/&gt; 1609: (16.6667%)&gt;];
}
1121--1122[label="1;1pkt 1fpkt"];
1121--6016[label="1;2pkt 2fpkt"];
1121--6017[label="1;1pkt 1fpkt"];
1121--9176[label="0.5;1pkt 1fpkt"];
1121--9199[label="0.5;1pkt 1fpkt"];
1121--9216[label="0.5;1pkt 1fpkt"];
1121--9250[label="0.5;1pkt 1fpkt"];
1121--11534[label="0.5;1pkt 1fpkt"];
1122--6016[label="1;1pkt 1fpkt"];
1122--6017[label="1;1pkt 1fpkt"];
6016--6017[label="1;1pkt 1fpkt"];
6016--9176[label="0.5;1pkt 1fpkt"];
6016--9199[label="0.5;1pkt 1fpkt"];
6016--9216[label="0.5;1pkt 1fpkt"];
6016--9250[label="0.5;1pkt 1fpkt"];
6016--11534[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.104.40" dst_port="2861" src_ip="209.199.152.202" src_port="20"/>
      <filter dst_ip="164.25.104.40" dst_port="1609" src_ip="107.4.66.135" src_port="5050"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
659[label="208.133.110.70;s;134pkt 134fpkt", shape=diamond, color=yellow];
733[label="213.33.62.61;d;405pkt 405fpkt", shape=diamond, color=yellow];
2225[label="208.133.97.146;s;51pkt 51fpkt", shape=diamond, color=yellow];
2268[label="213.33.138.117;d;18pkt 18fpkt", shape=diamond, color=yellow];
2388[label="142.16.237.176;d;48pkt 48fpkt", shape=diamond, color=yellow];
2535[label="213.33.145.7;d;96pkt 96fpkt", shape=diamond, color=yellow];
2585[label="142.243.46.111;d;117pkt 117fpkt", shape=diamond, color=yellow];
3128[label="21.1.161.168;s;112pkt 112fpkt", shape=diamond, color=yellow];
3241[label="136.228.104.186;d;7pkt 7fpkt", shape=diamond, color=yellow];
3287[label="114.167.198.225;s;133pkt 133fpkt", shape=diamond, color=yellow];
3389[label="162.73.76.196;d;99pkt 99fpkt", shape=diamond, color=yellow];
3482[label="136.228.104.183;d;21pkt 21fpkt", shape=diamond, color=yellow];
3671[label="136.228.176.129;d;88pkt 88fpkt", shape=diamond, color=yellow];
3942[label="142.16.131.174;d;61pkt 61fpkt", shape=diamond, color=yellow];
3975[label="8.189.98.209;s;103pkt 103fpkt", shape=diamond, color=yellow];
4387[label="162.73.196.35;d;72pkt 72fpkt", shape=diamond, color=yellow];
4801[label="68.160.64.216;s;93pkt 93fpkt", shape=diamond, color=yellow];
4848[label="142.243.10.116;d;17pkt 17fpkt", shape=diamond, color=yellow];
4891[label="21.116.141.171;s;6pkt 6fpkt", shape=diamond, color=yellow];
5285[label="142.243.221.112;d;38pkt 38fpkt", shape=diamond, color=yellow];
5535[label="212.24.87.108;s;179pkt 179fpkt", shape=diamond, color=yellow];
5634[label="142.243.13.109;d;84pkt 84fpkt", shape=diamond, color=yellow];
5683[label="160.49.255.144;d;3pkt 3fpkt", shape=diamond, color=yellow];
5700[label="142.16.236.96;d;35pkt 35fpkt", shape=diamond, color=yellow];
5919[label="208.133.110.70;s;134pkt 134fpkt", shape=hexagon, color=black];
7092[label="40.10.141.46;s;32pkt 32fpkt", shape=hexagon, color=black];
7233[label="114.167.198.225;s;115pkt 115fpkt", shape=hexagon, color=black];
7248[label="208.133.97.146;s;44pkt 44fpkt", shape=hexagon, color=black];
7306[label="142.16.237.176;d;46pkt 46fpkt", shape=hexagon, color=black];
7351[label="8.189.98.209;s;103pkt 103fpkt", shape=hexagon, color=black];
7486[label="136.228.104.186;d;7pkt 7fpkt", shape=hexagon, color=black];
7535[label="162.73.196.128;d;51pkt 51fpkt", shape=hexagon, color=black];
7970[label="68.160.64.216;s;93pkt 93fpkt", shape=hexagon, color=black];
8021[label="136.228.115.172;d;21pkt 21fpkt", shape=hexagon, color=black];
8342[label="209.150.123.194;s;76pkt 76fpkt", shape=hexagon, color=black];
8433[label="142.243.221.112;d;38pkt 38fpkt", shape=hexagon, color=black];
8620[label="114.167.198.192;s;120pkt 120fpkt", shape=hexagon, color=black];
9354[label="213.184.180.3;11pkt 11fpkt", shape=pentagon, color=darkviolet];
9490[label="213.43.29.11;38pkt 38fpkt", shape=pentagon, color=darkviolet];
10025[label="40.10.141.41;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10084[label="216.140.16.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10184[label="213.43.29.50;25pkt 25fpkt", shape=pentagon, color=darkviolet];
10219[label="213.43.29.52;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10239[label="213.43.29.53;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10272[label="213.43.29.55;20pkt 20fpkt", shape=pentagon, color=darkviolet];
10342[label="213.3.16.60;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10506[label="208.133.110.70;142pkt 142fpkt", shape=pentagon, color=darkviolet];
10731[label="107.116.140.82;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11727[label="208.133.97.146;53pkt 53fpkt", shape=pentagon, color=darkviolet];
12072[label="21.1.161.168;112pkt 112fpkt", shape=pentagon, color=darkviolet];
12119[label="21.116.141.171;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12672[label="8.189.98.209;103pkt 103fpkt", shape=pentagon, color=darkviolet];
13737[label="213.43.29.52;11pkt 11fpkt", shape=invtriangle, color=brown];
13748[label="213.43.29.53;21pkt 21fpkt", shape=invtriangle, color=brown];
13801[label="213.3.16.60;15pkt 15fpkt", shape=invtriangle, color=brown];
14494[label="208.133.97.146;52pkt 52fpkt", shape=invtriangle, color=brown];
15906[label="208.133.97.146;52pkt 52fpkt", shape=invhouse, color=bisque];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, *:*}[87.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0685%)&lt;BR/&gt; 443: (4.91781%)&lt;BR/&gt; 993: (0.383562%)&lt;BR/&gt; 143: (0.30137%)&lt;BR/&gt; 52400: (0.136986%)&gt;];
}
659--733[label="0.0522388;7pkt 7fpkt"];
659--738[label="0.0149254;2pkt 2fpkt"];
659--760[label="0.0373134;5pkt 5fpkt"];
659--802[label="0.0149254;2pkt 2fpkt"];
659--870[label="0.0223881;3pkt 3fpkt"];
659--965[label="0.0149254;2pkt 2fpkt"];
659--1041[label="0.0447761;6pkt 6fpkt"];
659--1173[label="0.111111;1pkt 1fpkt"];
659--1185[label="0.0149254;2pkt 2fpkt"];
659--1365[label="0.0373134;5pkt 5fpkt"];
659--1455[label="0.0447761;6pkt 6fpkt"];
659--1518[label="0.0223881;3pkt 3fpkt"];
659--1824[label="0.00746269;1pkt 1fpkt"];
659--2143[label="0.0223881;3pkt 3fpkt"];
659--2178[label="0.00746269;1pkt 1fpkt"];
659--2185[label="0.0298507;4pkt 4fpkt"];
659--2268[label="0.0555556;1pkt 1fpkt"];
659--2297[label="0.268657;36pkt 36fpkt"];
659--2388[label="0.0208333;1pkt 1fpkt"];
659--2585[label="0.017094;2pkt 2fpkt"];
659--2835[label="0.0196078;1pkt 1fpkt"];
659--3241[label="0.142857;1pkt 1fpkt"];
659--3482[label="0.142857;3pkt 3fpkt"];
659--3671[label="0.0227273;2pkt 2fpkt"];
659--3999[label="0.047619;1pkt 1fpkt"];
659--4848[label="0.117647;2pkt 2fpkt"];
659--5285[label="0.0263158;1pkt 1fpkt"];
659--5634[label="0.0357143;3pkt 3fpkt"];
659--5700[label="0.142857;5pkt 5fpkt"];
659--5919[label="1;134pkt 134fpkt"];
659--6030[label="0.111111;1pkt 1fpkt"];
659--6394[label="0.268657;36pkt 36fpkt"];
659--6600[label="0.00746269;1pkt 1fpkt"];
659--6625[label="0.0447761;6pkt 6fpkt"];
659--6819[label="0.0149254;2pkt 2fpkt"];
659--6841[label="0.0149254;2pkt 2fpkt"];
659--6920[label="0.0298507;4pkt 4fpkt"];
659--6966[label="0.0555556;1pkt 1fpkt"];
659--7106[label="0.0149254;2pkt 2fpkt"];
659--7306[label="0.0217391;1pkt 1fpkt"];
659--7486[label="0.142857;1pkt 1fpkt"];
659--7535[label="0.0196078;1pkt 1fpkt"];
659--7726[label="0.0149254;2pkt 2fpkt"];
659--7836[label="0.00869565;1pkt 1fpkt"];
659--8021[label="0.047619;1pkt 1fpkt"];
659--8433[label="0.0263158;1pkt 1fpkt"];
659--8529[label="0.0149254;2pkt 2fpkt"];
659--8934[label="0.0149254;2pkt 2fpkt"];
659--9130[label="0.0149254;2pkt 2fpkt"];
659--9163[label="0.0746269;10pkt 10fpkt"];
659--9194[label="0.104478;14pkt 14fpkt"];
659--9198[label="0.11194;15pkt 15fpkt"];
659--9234[label="0.104478;14pkt 14fpkt"];
659--9268[label="0.104478;14pkt 14fpkt"];
659--10506[label="0.992537;133pkt 133fpkt"];
733--1027[label="0.189189;70pkt 70fpkt"];
733--1336[label="0.00493827;2pkt 2fpkt"];
733--1368[label="0.0246914;10pkt 10fpkt"];
733--1370[label="0.037037;15pkt 15fpkt"];
733--1413[label="0.017284;7pkt 7fpkt"];
733--1599[label="0.0526316;1pkt 1fpkt"];
733--1968[label="0.0340136;5pkt 5fpkt"];
733--2021[label="0.00348432;1pkt 1fpkt"];
733--2225[label="0.176471;9pkt 9fpkt"];
733--2604[label="0.00636943;2pkt 2fpkt"];
733--2717[label="0.00653595;2pkt 2fpkt"];
733--2814[label="0.0208333;3pkt 3fpkt"];
733--2819[label="0.00740741;2pkt 2fpkt"];
733--2820[label="0.0636364;14pkt 14fpkt"];
733--3128[label="0.741071;83pkt 83fpkt"];
733--3139[label="0.0185676;7pkt 7fpkt"];
733--3265[label="0.00921659;2pkt 2fpkt"];
733--3270[label="0.00393701;1pkt 1fpkt"];
733--3309[label="0.00746269;1pkt 1fpkt"];
733--3313[label="0.00421941;1pkt 1fpkt"];
733--3909[label="0.176471;15pkt 15fpkt"];
733--4210[label="0.0136054;2pkt 2fpkt"];
733--4317[label="0.0454545;1pkt 1fpkt"];
733--4332[label="0.00645161;1pkt 1fpkt"];
733--4346[label="0.00970874;1pkt 1fpkt"];
733--4649[label="0.0144928;2pkt 2fpkt"];
733--4801[label="0.0215054;2pkt 2fpkt"];
733--4975[label="0.266667;4pkt 4fpkt"];
733--5072[label="0.02;2pkt 2fpkt"];
733--5532[label="0.0444444;2pkt 2fpkt"];
733--5535[label="0.173184;31pkt 31fpkt"];
733--5608[label="0.027027;1pkt 1fpkt"];
733--5610[label="0.05;2pkt 2fpkt"];
733--5919[label="0.0522388;7pkt 7fpkt"];
733--5993[label="0.189189;70pkt 70fpkt"];
733--6492[label="0.00699301;2pkt 2fpkt"];
733--6915[label="0.0194553;5pkt 5fpkt"];
733--6930[label="0.0679612;14pkt 14fpkt"];
733--6936[label="0.00847458;1pkt 1fpkt"];
733--7195[label="0.00246914;1pkt 1fpkt"];
733--7248[label="0.181818;8pkt 8fpkt"];
733--7493[label="0.0246914;10pkt 10fpkt"];
733--7536[label="0.0045045;1pkt 1fpkt"];
733--7568[label="0.0454545;1pkt 1fpkt"];
733--7580[label="0.00775194;1pkt 1fpkt"];
733--7773[label="0.0406504;5pkt 5fpkt"];
733--7842[label="0.0047619;1pkt 1fpkt"];
733--7865[label="0.0229008;3pkt 3fpkt"];
733--7970[label="0.0215054;2pkt 2fpkt"];
733--7971[label="0.0114943;1pkt 1fpkt"];
733--8115[label="0.266667;4pkt 4fpkt"];
733--8157[label="0.0144928;2pkt 2fpkt"];
733--8206[label="0.00732601;2pkt 2fpkt"];
733--8213[label="0.0136054;2pkt 2fpkt"];
733--8224[label="0.00921659;2pkt 2fpkt"];
733--8342[label="0.171053;13pkt 13fpkt"];
733--8515[label="0.054321;22pkt 22fpkt"];
733--8654[label="0.05;2pkt 2fpkt"];
733--8852[label="0.00699301;2pkt 2fpkt"];
733--8968[label="0.00775194;1pkt 1fpkt"];
733--9091[label="0.0454545;1pkt 1fpkt"];
733--9098[label="0.0215054;2pkt 2fpkt"];
733--9127[label="0.054321;22pkt 22fpkt"];
733--9163[label="0.128395;52pkt 52fpkt"];
733--9194[label="0.017284;7pkt 7fpkt"];
733--9198[label="0.0345679;14pkt 14fpkt"];
733--9234[label="0.017284;7pkt 7fpkt"];
733--9268[label="0.017284;7pkt 7fpkt"];
733--9343[label="0.0569106;14pkt 14fpkt"];
733--9354[label="0.454545;5pkt 5fpkt"];
733--9442[label="0.017284;7pkt 7fpkt"];
733--9490[label="0.0263158;1pkt 1fpkt"];
733--9994[label="0.0246914;10pkt 10fpkt"];
733--10184[label="0.04;1pkt 1fpkt"];
733--10219[label="0.1;1pkt 1fpkt"];
733--10239[label="0.0454545;1pkt 1fpkt"];
733--10272[label="0.05;1pkt 1fpkt"];
733--10342[label="0.3125;5pkt 5fpkt"];
733--10506[label="0.0492958;7pkt 7fpkt"];
733--10567[label="0.0182927;3pkt 3fpkt"];
733--10639[label="0.00350877;1pkt 1fpkt"];
733--10731[label="0.047619;1pkt 1fpkt"];
733--11013[label="0.0909091;2pkt 2fpkt"];
733--11526[label="0.285714;4pkt 4fpkt"];
733--11727[label="0.169811;9pkt 9fpkt"];
733--11920[label="0.0136986;2pkt 2fpkt"];
733--11971[label="0.00581395;1pkt 1fpkt"];
733--12072[label="0.741071;83pkt 83fpkt"];
733--13274[label="0.0569106;14pkt 14fpkt"];
733--13618[label="0.0246914;10pkt 10fpkt"];
733--13737[label="0.0909091;1pkt 1fpkt"];
733--13748[label="0.047619;1pkt 1fpkt"];
733--13801[label="0.266667;4pkt 4fpkt"];
733--14137[label="0.0909091;2pkt 2fpkt"];
733--14494[label="0.173077;9pkt 9fpkt"];
733--14510[label="0.0263158;1pkt 1fpkt"];
733--15724[label="0.0909091;2pkt 2fpkt"];
733--15906[label="0.173077;9pkt 9fpkt"];
2225--2835[label="0.0392157;2pkt 2fpkt"];
2225--3389[label="0.0392157;2pkt 2fpkt"];
2225--3478[label="0.0196078;1pkt 1fpkt"];
2225--3942[label="0.0196078;1pkt 1fpkt"];
2225--4387[label="0.0588235;3pkt 3fpkt"];
2225--5683[label="0.666667;2pkt 2fpkt"];
2225--5986[label="0.0196078;1pkt 1fpkt"];
2225--6248[label="0.142857;1pkt 1fpkt"];
2225--7106[label="0.0980392;5pkt 5fpkt"];
2225--7248[label="1;44pkt 44fpkt"];
2225--7535[label="0.0392157;2pkt 2fpkt"];
2225--7726[label="0.117647;6pkt 6fpkt"];
2225--8529[label="0.0784314;4pkt 4fpkt"];
2225--8907[label="0.0196078;1pkt 1fpkt"];
2225--8934[label="0.0784314;4pkt 4fpkt"];
2225--9163[label="0.0196078;1pkt 1fpkt"];
2225--9194[label="0.156863;8pkt 8fpkt"];
2225--9198[label="0.0588235;3pkt 3fpkt"];
2225--9234[label="0.156863;8pkt 8fpkt"];
2225--9268[label="0.156863;8pkt 8fpkt"];
2225--11727[label="1;51pkt 51fpkt"];
2225--14494[label="0.980392;50pkt 50fpkt"];
2225--15906[label="0.980392;50pkt 50fpkt"];
2268--3287[label="0.222222;4pkt 4fpkt"];
2268--3311[label="0.222222;4pkt 4fpkt"];
2268--3313[label="0.111111;2pkt 2fpkt"];
2268--4810[label="0.0555556;1pkt 1fpkt"];
2268--5919[label="0.0555556;1pkt 1fpkt"];
2268--6966[label="1;18pkt 18fpkt"];
2268--7233[label="0.222222;4pkt 4fpkt"];
2268--7536[label="0.111111;2pkt 2fpkt"];
2268--7983[label="0.0555556;1pkt 1fpkt"];
2268--8620[label="0.222222;4pkt 4fpkt"];
2268--9163[label="0.611111;11pkt 11fpkt"];
2268--10639[label="0.111111;2pkt 2fpkt"];
2268--11543[label="0.0555556;1pkt 1fpkt"];
2268--12026[label="0.166667;3pkt 3fpkt"];
2268--14644[label="0.222222;4pkt 4fpkt"];
2268--14774[label="0.0625;1pkt 1fpkt"];
2268--15856[label="0.0555556;1pkt 1fpkt"];
2268--15992[label="0.222222;4pkt 4fpkt"];
2388--2819[label="0.0625;3pkt 3fpkt"];
2388--3062[label="0.888889;16pkt 16fpkt"];
2388--3287[label="0.0416667;2pkt 2fpkt"];
2388--3311[label="0.0416667;2pkt 2fpkt"];
2388--3841[label="0.104167;5pkt 5fpkt"];
2388--4646[label="0.0833333;4pkt 4fpkt"];
2388--5535[label="0.0625;3pkt 3fpkt"];
2388--5610[label="0.025;1pkt 1fpkt"];
2388--5919[label="0.0208333;1pkt 1fpkt"];
2388--6738[label="0.714286;5pkt 5fpkt"];
2388--7233[label="0.0416667;2pkt 2fpkt"];
2388--7306[label="1;46pkt 46fpkt"];
2388--7740[label="0.0833333;4pkt 4fpkt"];
2388--7913[label="0.104167;5pkt 5fpkt"];
2388--8620[label="0.0416667;2pkt 2fpkt"];
2388--8654[label="0.025;1pkt 1fpkt"];
2388--9194[label="0.145833;7pkt 7fpkt"];
2388--9234[label="0.145833;7pkt 7fpkt"];
2388--9268[label="0.145833;7pkt 7fpkt"];
2388--10394[label="0.229167;11pkt 11fpkt"];
2388--10506[label="0.0208333;1pkt 1fpkt"];
2388--10786[label="0.104167;5pkt 5fpkt"];
2388--14028[label="0.104167;5pkt 5fpkt"];
2388--14510[label="0.0263158;1pkt 1fpkt"];
2535--4801[label="0.408602;38pkt 38fpkt"];
2535--4891[label="1;6pkt 6fpkt"];
2535--5685[label="1;19pkt 19fpkt"];
2535--7970[label="0.408602;38pkt 38fpkt"];
2535--9098[label="0.408602;38pkt 38fpkt"];
2535--9198[label="0.291667;28pkt 28fpkt"];
2535--12119[label="0.6;6pkt 6fpkt"];
2585--2814[label="0.017094;2pkt 2fpkt"];
2585--3975[label="1;103pkt 103fpkt"];
2585--5919[label="0.017094;2pkt 2fpkt"];
2585--7351[label="1;103pkt 103fpkt"];
2585--7865[label="0.017094;2pkt 2fpkt"];
2585--9163[label="0.017094;2pkt 2fpkt"];
2585--9194[label="0.034188;4pkt 4fpkt"];
2585--9234[label="0.034188;4pkt 4fpkt"];
2585--9268[label="0.034188;4pkt 4fpkt"];
2585--10506[label="0.017094;2pkt 2fpkt"];
2585--10567[label="0.017094;2pkt 2fpkt"];
2585--12672[label="1;103pkt 103fpkt"];
3128--12072[label="1;112pkt 112fpkt"];
3241--5919[label="0.142857;1pkt 1fpkt"];
3241--7486[label="1;7pkt 7fpkt"];
3241--9194[label="0.142857;1pkt 1fpkt"];
3241--9198[label="0.142857;1pkt 1fpkt"];
3241--9234[label="0.142857;1pkt 1fpkt"];
3241--9268[label="0.142857;1pkt 1fpkt"];
3241--10177[label="0.857143;6pkt 6fpkt"];
3241--10506[label="0.142857;1pkt 1fpkt"];
3241--13720[label="0.857143;6pkt 6fpkt"];
3241--15500[label="0.857143;6pkt 6fpkt"];
3287--3389[label="0.0606061;6pkt 6fpkt"];
3287--3942[label="0.0655738;4pkt 4fpkt"];
3287--4387[label="0.0277778;2pkt 2fpkt"];
3287--5215[label="0.0263158;1pkt 1fpkt"];
3287--5683[label="0.333333;1pkt 1fpkt"];
3287--5700[label="0.114286;4pkt 4fpkt"];
3287--6808[label="0.00840336;1pkt 1fpkt"];
3287--6966[label="0.222222;4pkt 4fpkt"];
3287--6975[label="0.0740741;4pkt 4fpkt"];
3287--7233[label="1;115pkt 115fpkt"];
3287--7306[label="0.0434783;2pkt 2fpkt"];
3287--7535[label="0.0784314;4pkt 4fpkt"];
3287--8893[label="0.102564;4pkt 4fpkt"];
3287--9163[label="0.075188;10pkt 10fpkt"];
3287--9194[label="0.165414;22pkt 22fpkt"];
3287--9198[label="0.112782;15pkt 15fpkt"];
3287--9234[label="0.165414;22pkt 22fpkt"];
3287--9268[label="0.165414;22pkt 22fpkt"];
3389--4210[label="0.010101;1pkt 1fpkt"];
3389--4244[label="0.040404;4pkt 4fpkt"];
3389--4646[label="0.0505051;5pkt 5fpkt"];
3389--5406[label="1;39pkt 39fpkt"];
3389--5535[label="0.040404;4pkt 4fpkt"];
3389--6915[label="0.020202;2pkt 2fpkt"];
3389--7233[label="0.0606061;6pkt 6fpkt"];
3389--7248[label="0.0454545;2pkt 2fpkt"];
3389--7520[label="0.040404;4pkt 4fpkt"];
3389--7740[label="0.0649351;5pkt 5fpkt"];
3389--8213[label="0.010101;1pkt 1fpkt"];
3389--8620[label="0.0606061;6pkt 6fpkt"];
3389--9163[label="0.0909091;9pkt 9fpkt"];
3389--9194[label="0.141414;14pkt 14fpkt"];
3389--9198[label="0.010101;1pkt 1fpkt"];
3389--9234[label="0.141414;14pkt 14fpkt"];
3389--9268[label="0.141414;14pkt 14fpkt"];
3389--9378[label="0.333333;1pkt 1fpkt"];
3389--9414[label="0.65;39pkt 39fpkt"];
3389--9442[label="0.020202;2pkt 2fpkt"];
3389--10382[label="0.333333;6pkt 6fpkt"];
3389--10903[label="0.0227273;1pkt 1fpkt"];
3389--10988[label="0.166667;1pkt 1fpkt"];
3389--11013[label="0.136364;3pkt 3fpkt"];
3389--11727[label="0.0377358;2pkt 2fpkt"];
3389--13312[label="0.639344;39pkt 39fpkt"];
3389--13819[label="0.294118;5pkt 5fpkt"];
3389--14079[label="0.0227273;1pkt 1fpkt"];
3389--14124[label="0.142857;1pkt 1fpkt"];
3389--14137[label="0.136364;3pkt 3fpkt"];
3389--14494[label="0.0384615;2pkt 2fpkt"];
3389--15724[label="0.136364;3pkt 3fpkt"];
3389--15906[label="0.0384615;2pkt 2fpkt"];
3482--5919[label="0.142857;3pkt 3fpkt"];
3482--9194[label="0.142857;3pkt 3fpkt"];
3482--9198[label="0.0952381;2pkt 2fpkt"];
3482--9234[label="0.142857;3pkt 3fpkt"];
3482--9268[label="0.142857;3pkt 3fpkt"];
3482--10177[label="0.52381;11pkt 11fpkt"];
3482--10506[label="0.142857;3pkt 3fpkt"];
3482--13720[label="0.52381;11pkt 11fpkt"];
3482--15500[label="0.52381;11pkt 11fpkt"];
3671--4177[label="0.0113636;1pkt 1fpkt"];
3671--4332[label="0.0227273;2pkt 2fpkt"];
3671--4867[label="0.352273;31pkt 31fpkt"];
3671--5919[label="0.0227273;2pkt 2fpkt"];
3671--6324[label="0.0113636;1pkt 1fpkt"];
3671--6341[label="0.0795455;7pkt 7fpkt"];
3671--7459[label="0.0113636;1pkt 1fpkt"];
3671--7467[label="0.0113636;1pkt 1fpkt"];
3671--7580[label="0.0227273;2pkt 2fpkt"];
3671--8206[label="0.0227273;2pkt 2fpkt"];
3671--8729[label="0.352273;31pkt 31fpkt"];
3671--8968[label="0.0227273;2pkt 2fpkt"];
3671--9163[label="0.0795455;7pkt 7fpkt"];
3671--9178[label="0.0113636;1pkt 1fpkt"];
3671--9194[label="0.0681818;6pkt 6fpkt"];
3671--9218[label="0.0113636;1pkt 1fpkt"];
3671--9234[label="0.0681818;6pkt 6fpkt"];
3671--9252[label="0.0113636;1pkt 1fpkt"];
3671--9268[label="0.0681818;6pkt 6fpkt"];
3671--10084[label="1;1pkt 1fpkt"];
3671--10506[label="0.0227273;2pkt 2fpkt"];
3671--10789[label="0.0113636;1pkt 1fpkt"];
3671--11444[label="0.0795455;7pkt 7fpkt"];
3671--11971[label="0.0227273;2pkt 2fpkt"];
3671--13545[label="0.0192308;1pkt 1fpkt"];
3671--15425[label="0.0192308;1pkt 1fpkt"];
3942--4646[label="0.393443;24pkt 24fpkt"];
3942--5535[label="0.311475;19pkt 19fpkt"];
3942--6915[label="0.0327869;2pkt 2fpkt"];
3942--7233[label="0.0655738;4pkt 4fpkt"];
3942--7248[label="0.0227273;1pkt 1fpkt"];
3942--7740[label="0.393443;24pkt 24fpkt"];
3942--8620[label="0.147541;9pkt 9fpkt"];
3942--9194[label="0.0327869;2pkt 2fpkt"];
3942--9234[label="0.0327869;2pkt 2fpkt"];
3942--9268[label="0.0327869;2pkt 2fpkt"];
3942--9442[label="0.0655738;4pkt 4fpkt"];
3942--11727[label="0.0188679;1pkt 1fpkt"];
3942--14494[label="0.0192308;1pkt 1fpkt"];
3942--15906[label="0.0192308;1pkt 1fpkt"];
3975--7351[label="1;103pkt 103fpkt"];
3975--12672[label="1;103pkt 103fpkt"];
4387--4470[label="1;2pkt 2fpkt"];
4387--4646[label="0.180556;13pkt 13fpkt"];
4387--5535[label="0.513889;37pkt 37fpkt"];
4387--5584[label="0.0138889;1pkt 1fpkt"];
4387--7233[label="0.0277778;2pkt 2fpkt"];
4387--7248[label="0.0681818;3pkt 3fpkt"];
4387--7740[label="0.166667;12pkt 12fpkt"];
4387--8620[label="0.0277778;2pkt 2fpkt"];
4387--8642[label="0.0138889;1pkt 1fpkt"];
4387--9194[label="0.111111;8pkt 8fpkt"];
4387--9198[label="0.0138889;1pkt 1fpkt"];
4387--9234[label="0.111111;8pkt 8fpkt"];
4387--9268[label="0.111111;8pkt 8fpkt"];
4387--11434[label="1;1pkt 1fpkt"];
4387--11727[label="0.0566038;3pkt 3fpkt"];
4387--14494[label="0.0576923;3pkt 3fpkt"];
4387--15906[label="0.0576923;3pkt 3fpkt"];
4801--5986[label="0.0107527;1pkt 1fpkt"];
4801--6637[label="0.416667;20pkt 20fpkt"];
4801--7970[label="1;93pkt 93fpkt"];
4801--8514[label="0.0430108;4pkt 4fpkt"];
4801--8907[label="0.0107527;1pkt 1fpkt"];
4801--9098[label="1;93pkt 93fpkt"];
4801--9163[label="0.0215054;2pkt 2fpkt"];
4801--9194[label="0.0645161;6pkt 6fpkt"];
4801--9234[label="0.0645161;6pkt 6fpkt"];
4801--9268[label="0.0645161;6pkt 6fpkt"];
4848--5026[label="1;4pkt 4fpkt"];
4848--5919[label="0.117647;2pkt 2fpkt"];
4848--8131[label="1;2pkt 2fpkt"];
4848--9194[label="0.117647;2pkt 2fpkt"];
4848--9198[label="0.117647;2pkt 2fpkt"];
4848--9234[label="0.117647;2pkt 2fpkt"];
4848--9268[label="0.117647;2pkt 2fpkt"];
4848--10506[label="0.117647;2pkt 2fpkt"];
4848--13000[label="0.6;6pkt 6fpkt"];
4848--15140[label="0.6;6pkt 6fpkt"];
4848--16265[label="0.666667;6pkt 6fpkt"];
4891--9198[label="0.333333;2pkt 2fpkt"];
4891--12119[label="1;6pkt 6fpkt"];
5285--5919[label="0.0263158;1pkt 1fpkt"];
5285--7603[label="0.105263;4pkt 4fpkt"];
5285--8433[label="1;38pkt 38fpkt"];
5285--9198[label="0.0263158;1pkt 1fpkt"];
5285--9631[label="0.789474;30pkt 30fpkt"];
5285--10506[label="0.0263158;1pkt 1fpkt"];
5285--10693[label="0.0263158;1pkt 1fpkt"];
5285--12593[label="0.0322581;1pkt 1fpkt"];
5285--13219[label="0.0526316;2pkt 2fpkt"];
5285--13425[label="0.789474;30pkt 30fpkt"];
5285--15262[label="0.0526316;2pkt 2fpkt"];
5285--16326[label="0.0526316;2pkt 2fpkt"];
5535--5700[label="0.114286;4pkt 4fpkt"];
5535--5998[label="0.0428571;3pkt 3fpkt"];
5535--6248[label="0.571429;4pkt 4fpkt"];
5535--6485[label="0.00558659;1pkt 1fpkt"];
5535--7106[label="0.0893855;16pkt 16fpkt"];
5535--7306[label="0.0652174;3pkt 3fpkt"];
5535--7535[label="0.0588235;3pkt 3fpkt"];
5535--8934[label="0.0726257;13pkt 13fpkt"];
5535--9163[label="0.00558659;1pkt 1fpkt"];
5535--9194[label="0.0502793;9pkt 9fpkt"];
5535--9198[label="0.0726257;13pkt 13fpkt"];
5535--9234[label="0.0502793;9pkt 9fpkt"];
5535--9268[label="0.0502793;9pkt 9fpkt"];
5634--5919[label="0.0357143;3pkt 3fpkt"];
5634--7536[label="0.0119048;1pkt 1fpkt"];
5634--9163[label="0.0833333;7pkt 7fpkt"];
5634--9194[label="0.107143;9pkt 9fpkt"];
5634--9198[label="0.488095;41pkt 41fpkt"];
5634--9234[label="0.107143;9pkt 9fpkt"];
5634--9268[label="0.107143;9pkt 9fpkt"];
5634--9671[label="0.32;8pkt 8fpkt"];
5634--10506[label="0.0357143;3pkt 3fpkt"];
5634--10639[label="0.0119048;1pkt 1fpkt"];
5634--11707[label="0.105263;2pkt 2fpkt"];
5634--12651[label="0.0925926;5pkt 5fpkt"];
5683--7233[label="0.333333;1pkt 1fpkt"];
5683--7248[label="0.333333;1pkt 1fpkt"];
5683--9198[label="0.333333;1pkt 1fpkt"];
5683--11727[label="0.666667;2pkt 2fpkt"];
5683--14494[label="0.666667;2pkt 2fpkt"];
5683--15906[label="0.666667;2pkt 2fpkt"];
5700--5919[label="0.142857;5pkt 5fpkt"];
5700--7092[label="0.0625;2pkt 2fpkt"];
5700--7233[label="0.114286;4pkt 4fpkt"];
5700--8620[label="0.114286;4pkt 4fpkt"];
5700--9198[label="0.771429;27pkt 27fpkt"];
5700--10506[label="0.142857;5pkt 5fpkt"];
5919--6030[label="0.111111;1pkt 1fpkt"];
5919--6394[label="0.268657;36pkt 36fpkt"];
5919--6600[label="0.00746269;1pkt 1fpkt"];
5919--6625[label="0.0447761;6pkt 6fpkt"];
5919--6819[label="0.0149254;2pkt 2fpkt"];
5919--6841[label="0.0149254;2pkt 2fpkt"];
5919--6920[label="0.0298507;4pkt 4fpkt"];
5919--6966[label="0.0555556;1pkt 1fpkt"];
5919--7106[label="0.0149254;2pkt 2fpkt"];
5919--7306[label="0.0217391;1pkt 1fpkt"];
5919--7486[label="0.142857;1pkt 1fpkt"];
5919--7535[label="0.0196078;1pkt 1fpkt"];
5919--7726[label="0.0149254;2pkt 2fpkt"];
5919--7836[label="0.00869565;1pkt 1fpkt"];
5919--8021[label="0.047619;1pkt 1fpkt"];
5919--8433[label="0.0263158;1pkt 1fpkt"];
5919--8529[label="0.0149254;2pkt 2fpkt"];
5919--8934[label="0.0149254;2pkt 2fpkt"];
5919--9130[label="0.0149254;2pkt 2fpkt"];
5919--9163[label="0.0746269;10pkt 10fpkt"];
5919--9194[label="0.104478;14pkt 14fpkt"];
5919--9198[label="0.11194;15pkt 15fpkt"];
5919--9234[label="0.104478;14pkt 14fpkt"];
5919--9268[label="0.104478;14pkt 14fpkt"];
5919--10506[label="0.992537;133pkt 133fpkt"];
7233--7306[label="0.0434783;2pkt 2fpkt"];
7233--7535[label="0.0784314;4pkt 4fpkt"];
7233--8893[label="0.102564;4pkt 4fpkt"];
7233--9163[label="0.0869565;10pkt 10fpkt"];
7233--9194[label="0.191304;22pkt 22fpkt"];
7233--9198[label="0.121739;14pkt 14fpkt"];
7233--9234[label="0.191304;22pkt 22fpkt"];
7233--9268[label="0.191304;22pkt 22fpkt"];
7248--7535[label="0.0454545;2pkt 2fpkt"];
7248--7726[label="0.136364;6pkt 6fpkt"];
7248--8529[label="0.0909091;4pkt 4fpkt"];
7248--8907[label="0.0227273;1pkt 1fpkt"];
7248--8934[label="0.0909091;4pkt 4fpkt"];
7248--9163[label="0.0227273;1pkt 1fpkt"];
7248--9194[label="0.181818;8pkt 8fpkt"];
7248--9198[label="0.0227273;1pkt 1fpkt"];
7248--9234[label="0.181818;8pkt 8fpkt"];
7248--9268[label="0.181818;8pkt 8fpkt"];
7248--11727[label="1;44pkt 44fpkt"];
7248--14494[label="0.977273;43pkt 43fpkt"];
7248--15906[label="0.977273;43pkt 43fpkt"];
7306--7740[label="0.0869565;4pkt 4fpkt"];
7306--7913[label="0.108696;5pkt 5fpkt"];
7306--8620[label="0.0434783;2pkt 2fpkt"];
7306--8654[label="0.025;1pkt 1fpkt"];
7306--9194[label="0.152174;7pkt 7fpkt"];
7306--9234[label="0.152174;7pkt 7fpkt"];
7306--9268[label="0.152174;7pkt 7fpkt"];
7306--10394[label="0.23913;11pkt 11fpkt"];
7306--10506[label="0.0217391;1pkt 1fpkt"];
7306--10786[label="0.108696;5pkt 5fpkt"];
7306--14028[label="0.108696;5pkt 5fpkt"];
7306--14510[label="0.0263158;1pkt 1fpkt"];
7351--12672[label="1;103pkt 103fpkt"];
7486--9194[label="0.142857;1pkt 1fpkt"];
7486--9198[label="0.142857;1pkt 1fpkt"];
7486--9234[label="0.142857;1pkt 1fpkt"];
7486--9268[label="0.142857;1pkt 1fpkt"];
7486--10177[label="0.857143;6pkt 6fpkt"];
7486--10506[label="0.142857;1pkt 1fpkt"];
7486--13720[label="0.857143;6pkt 6fpkt"];
7486--15500[label="0.857143;6pkt 6fpkt"];
7535--7536[label="0.0392157;2pkt 2fpkt"];
7535--7740[label="0.0784314;4pkt 4fpkt"];
7535--7865[label="0.0196078;1pkt 1fpkt"];
7535--8620[label="0.117647;6pkt 6fpkt"];
7535--8654[label="0.025;1pkt 1fpkt"];
7535--9163[label="0.0980392;5pkt 5fpkt"];
7535--9194[label="0.313725;16pkt 16fpkt"];
7535--9196[label="0.0196078;1pkt 1fpkt"];
7535--9234[label="0.313725;16pkt 16fpkt"];
7535--9268[label="0.313725;16pkt 16fpkt"];
7535--10025[label="0.4;6pkt 6fpkt"];
7535--10506[label="0.0196078;1pkt 1fpkt"];
7535--10567[label="0.0196078;1pkt 1fpkt"];
7535--10639[label="0.0196078;1pkt 1fpkt"];
7535--11013[label="0.0454545;1pkt 1fpkt"];
7535--11727[label="0.0392157;2pkt 2fpkt"];
7535--13025[label="0.0357143;1pkt 1fpkt"];
7535--13636[label="0.357143;5pkt 5fpkt"];
7535--14137[label="0.0454545;1pkt 1fpkt"];
7535--14494[label="0.0392157;2pkt 2fpkt"];
7535--14510[label="0.0263158;1pkt 1fpkt"];
7535--15724[label="0.0454545;1pkt 1fpkt"];
7535--15906[label="0.0392157;2pkt 2fpkt"];
7970--8514[label="0.0430108;4pkt 4fpkt"];
7970--8907[label="0.0107527;1pkt 1fpkt"];
7970--9098[label="1;93pkt 93fpkt"];
7970--9163[label="0.0215054;2pkt 2fpkt"];
7970--9194[label="0.0645161;6pkt 6fpkt"];
7970--9234[label="0.0645161;6pkt 6fpkt"];
7970--9268[label="0.0645161;6pkt 6fpkt"];
8021--8213[label="0.047619;1pkt 1fpkt"];
8021--8968[label="0.047619;1pkt 1fpkt"];
8021--9194[label="0.333333;7pkt 7fpkt"];
8021--9234[label="0.333333;7pkt 7fpkt"];
8021--9268[label="0.333333;7pkt 7fpkt"];
8021--10177[label="0.47619;10pkt 10fpkt"];
8021--10506[label="0.047619;1pkt 1fpkt"];
8021--10567[label="0.047619;1pkt 1fpkt"];
8021--10639[label="0.047619;1pkt 1fpkt"];
8021--11971[label="0.047619;1pkt 1fpkt"];
8021--13720[label="0.47619;10pkt 10fpkt"];
8021--15500[label="0.47619;10pkt 10fpkt"];
8342--8907[label="0.0657895;5pkt 5fpkt"];
8342--9163[label="0.0131579;1pkt 1fpkt"];
8342--9194[label="0.0526316;4pkt 4fpkt"];
8342--9234[label="0.0526316;4pkt 4fpkt"];
8342--9268[label="0.0526316;4pkt 4fpkt"];
8433--9198[label="0.0263158;1pkt 1fpkt"];
8433--9631[label="0.789474;30pkt 30fpkt"];
8433--10506[label="0.0263158;1pkt 1fpkt"];
8433--10693[label="0.0263158;1pkt 1fpkt"];
8433--12593[label="0.0322581;1pkt 1fpkt"];
8433--13219[label="0.0526316;2pkt 2fpkt"];
8433--13425[label="0.789474;30pkt 30fpkt"];
8433--15262[label="0.0526316;2pkt 2fpkt"];
8433--16326[label="0.0526316;2pkt 2fpkt"];
8620--9163[label="0.125;15pkt 15fpkt"];
8620--9194[label="0.183333;22pkt 22fpkt"];
8620--9198[label="0.116667;14pkt 14fpkt"];
8620--9234[label="0.183333;22pkt 22fpkt"];
8620--9268[label="0.183333;22pkt 22fpkt"];
10025--13636[label="1;14pkt 14fpkt"];
10219--13737[label="1;10pkt 10fpkt"];
10239--13748[label="1;21pkt 21fpkt"];
10342--13801[label="1;15pkt 15fpkt"];
11727--14494[label="1;52pkt 52fpkt"];
11727--15906[label="1;52pkt 52fpkt"];
14494--15906[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
4542[label="195.155.32.66;s;29pkt 29fpkt", shape=diamond, color=yellow];
10422[label="195.155.32.66;29pkt 29fpkt", shape=pentagon, color=darkviolet];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.155.32.66:80, 136.228.172.90:*}[58.6207%]&lt;BR/&gt;{195.155.32.66:443, 136.228.172.90:*}[41.3793%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.3103%)&lt;BR/&gt; 443: (20.6897%)&lt;BR/&gt; 2213: (1.72414%)&lt;BR/&gt; 2212: (1.72414%)&lt;BR/&gt; 2211: (1.72414%)&gt;];
}
4542--4699[label="1;29pkt 29fpkt"];
4542--10422[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.172.90" src_ip="195.155.32.66" src_port="80"/>
      <filter dst_ip="136.228.172.90" src_ip="195.155.32.66" src_port="443"/>
    </slice>
    <from sec="1223615293" usec="0"/>
    <to sec="1223615404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
1248[label="216.83.114.200;s;835pkt 835fpkt", shape=diamond, color=yellow];
6047[label="216.83.114.200;s;779pkt 779fpkt", shape=hexagon, color=black];
12536[label="216.83.114.200;841pkt 841fpkt", shape=pentagon, color=darkviolet];
14902[label="216.83.114.200;840pkt 840fpkt", shape=invtriangle, color=brown];
16132[label="216.83.114.200;840pkt 840fpkt", shape=invhouse, color=bisque];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.83.114.200:6667, *:*}[36.3853%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (18.4643%)&lt;BR/&gt; 6665: (3.01088%)&lt;BR/&gt; 6668: (2.97461%)&lt;BR/&gt; 6666: (2.96252%)&lt;BR/&gt; 6660: (2.95042%)&gt;];
}
1248--6047[label="1;779pkt 779fpkt"];
1248--9181[label="0.00239521;2pkt 2fpkt"];
1248--9221[label="0.00239521;2pkt 2fpkt"];
1248--9255[label="0.00239521;2pkt 2fpkt"];
1248--12536[label="1;835pkt 835fpkt"];
1248--14902[label="0.998802;834pkt 834fpkt"];
1248--16132[label="0.998802;834pkt 834fpkt"];
6047--9181[label="0.00256739;2pkt 2fpkt"];
6047--9221[label="0.00256739;2pkt 2fpkt"];
6047--9255[label="0.00256739;2pkt 2fpkt"];
6047--12536[label="1;779pkt 779fpkt"];
6047--14902[label="0.998716;778pkt 778fpkt"];
6047--16132[label="0.998716;778pkt 778fpkt"];
12536--14902[label="1;840pkt 840fpkt"];
12536--16132[label="1;840pkt 840fpkt"];
14902--16132[label="1;840pkt 840fpkt"];
</description>
    <slice>
      <filter src_ip="216.83.114.200" src_port="6667"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
1303[label="142.47.174.40;s;127pkt 127fpkt", shape=diamond, color=yellow];
2533[label="195.205.167.202;d;110pkt 110fpkt", shape=diamond, color=yellow];
6061[label="142.47.174.40;s;50pkt 50fpkt", shape=hexagon, color=black];
8859[label="142.47.174.40;s;50pkt 50fpkt", shape=polygon, color=gold];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.47.174.40:*, 195.205.167.202:9568}[86.6142%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9568: (44.6588%)&lt;BR/&gt; 80: (5.04451%)&lt;BR/&gt; 1700: (0.593472%)&lt;BR/&gt; 1699: (0.593472%)&lt;BR/&gt; 1698: (0.593472%)&gt;];
}
1303--2533[label="1;110pkt 110fpkt"];
1303--6060[label="1;1pkt 1fpkt"];
1303--6061[label="1;50pkt 50fpkt"];
1303--8859[label="1;50pkt 50fpkt"];
2533--6061[label="0.78;39pkt 39fpkt"];
2533--8859[label="0.78;39pkt 39fpkt"];
6061--8859[label="1;50pkt 50fpkt"];
</description>
    <slice>
      <filter dst_ip="195.205.167.202" dst_port="9568" src_ip="142.47.174.40"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_279{
style=filled;
color=gray75;
1375[label="136.228.117.4;s;472pkt 472fpkt", shape=diamond, color=yellow];
2125[label="200.122.155.91;d;404pkt 404fpkt", shape=diamond, color=yellow];
6076[label="136.228.117.4;s;192pkt 192fpkt", shape=hexagon, color=black];
stat279[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.117.4:*, 200.122.155.91:80}[85.5932%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8127%)&lt;BR/&gt; 0: (0.374532%)&lt;BR/&gt; 2818: (0.140449%)&lt;BR/&gt; 2817: (0.140449%)&lt;BR/&gt; 2816: (0.140449%)&gt;];
}
1375--2125[label="1;404pkt 404fpkt"];
1375--6076[label="1;192pkt 192fpkt"];
2125--6076[label="0.786458;151pkt 151fpkt"];
</description>
    <slice>
      <filter dst_ip="200.122.155.91" dst_port="80" src_ip="136.228.117.4"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_280{
style=filled;
color=gray75;
1430[label="142.243.73.37;d;32pkt 32fpkt", shape=diamond, color=yellow];
1431[label="73.120.146.34;s;66pkt 66fpkt", shape=diamond, color=yellow];
6090[label="142.243.73.37;d;32pkt 32fpkt", shape=hexagon, color=black];
8473[label="73.120.146.34;s;66pkt 66fpkt", shape=hexagon, color=black];
9888[label="73.120.146.34;95pkt 95fpkt", shape=pentagon, color=darkviolet];
13557[label="73.120.146.34;95pkt 95fpkt", shape=invtriangle, color=brown];
stat280[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.120.146.34:80, 142.243.98.167:*}[67.3469%]&lt;BR/&gt;{73.120.146.34:80, 142.243.73.37:*}[30.6122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61858: (0.518135%)&lt;BR/&gt; 61857: (0.518135%)&lt;BR/&gt; 61852: (0.518135%)&lt;BR/&gt; 61837: (0.518135%)&gt;];
}
1430--6090[label="1;32pkt 32fpkt"];
1430--9163[label="1;32pkt 32fpkt"];
1430--9888[label="0.90625;29pkt 29fpkt"];
1430--13557[label="0.90625;29pkt 29fpkt"];
1431--2178[label="1;66pkt 66fpkt"];
1431--8473[label="1;66pkt 66fpkt"];
1431--9198[label="0.484848;32pkt 32fpkt"];
1431--9888[label="1;66pkt 66fpkt"];
1431--13557[label="1;66pkt 66fpkt"];
6090--9163[label="1;32pkt 32fpkt"];
6090--9888[label="0.90625;29pkt 29fpkt"];
6090--13557[label="0.90625;29pkt 29fpkt"];
8473--9198[label="0.484848;32pkt 32fpkt"];
8473--9888[label="1;66pkt 66fpkt"];
8473--13557[label="1;66pkt 66fpkt"];
9888--13557[label="1;95pkt 95fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.98.167" src_ip="73.120.146.34" src_port="80"/>
      <filter dst_ip="142.243.73.37" src_ip="73.120.146.34" src_port="80"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
47[label="204.6.7.40s;2pkt 2fpkt", shape=rectangle, color=red];
1535[label="204.6.7.40;s;41pkt 41fpkt", shape=diamond, color=yellow];
6379[label="204.6.7.40;s;41pkt 41fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.6.7.40:*, 212.21.136.204:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2775: (1.78571%)&lt;BR/&gt; 2763: (1.78571%)&lt;BR/&gt; 2974: (1.19048%)&lt;BR/&gt; 2939: (1.19048%)&gt;];
}
47--479[label="0.5;1pkt 1fpkt"];
47--557[label="0.5;1pkt 1fpkt"];
47--1487[label="1;2pkt 2fpkt"];
47--1535[label="1;2pkt 2fpkt"];
47--6102[label="1;2pkt 2fpkt"];
47--6379[label="1;2pkt 2fpkt"];
1535--6102[label="0.829268;34pkt 34fpkt"];
1535--6379[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.204" dst_port="80" src_ip="204.6.7.40"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_283{
style=filled;
color=gray75;
1607[label="212.138.109.18;d;2pkt 2fpkt", shape=diamond, color=yellow];
6131[label="212.138.109.18;d;2pkt 2fpkt", shape=hexagon, color=black];
stat283[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.164.60:37332, 212.138.109.18:80}[50%]&lt;BR/&gt;{136.228.164.60:37339, 212.138.109.18:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37339: (25%)&lt;BR/&gt; 37332: (25%)&gt;];
}
1607--6131[label="1;2pkt 2fpkt"];
1607--10348[label="1;2pkt 2fpkt"];
6131--10348[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.138.109.18" dst_port="80" src_ip="136.228.164.60" src_port="37339"/>
      <filter dst_ip="212.138.109.18" dst_port="80" src_ip="136.228.164.60" src_port="37332"/>
    </slice>
    <from sec="1223614819" usec="0"/>
    <to sec="1223614830" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_284{
style=filled;
color=gray75;
1637[label="194.173.188.66;s;1pkt 1fpkt", shape=diamond, color=yellow];
3491[label="136.228.104.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
6139[label="194.173.188.66;s;1pkt 1fpkt", shape=hexagon, color=black];
8001[label="136.228.104.234;d;1pkt 1fpkt", shape=hexagon, color=black];
10436[label="194.173.188.66;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13845[label="194.173.188.66;2pkt 2fpkt", shape=invtriangle, color=brown];
15568[label="194.173.188.66;1pkt 1fpkt", shape=invhouse, color=bisque];
stat284[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.188.66:80, 136.228.216.133:55901}[50%]&lt;BR/&gt;{194.173.188.66:80, 136.228.104.234:3499}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3499: (43.75%)&lt;BR/&gt; 55901: (6.25%)&gt;];
}
1637--3491[label="1;1pkt 1fpkt"];
1637--6139[label="1;1pkt 1fpkt"];
1637--8001[label="1;1pkt 1fpkt"];
1637--10436[label="1;1pkt 1fpkt"];
1637--13845[label="1;1pkt 1fpkt"];
1637--15568[label="1;1pkt 1fpkt"];
3491--6139[label="1;1pkt 1fpkt"];
3491--8001[label="1;1pkt 1fpkt"];
3491--10436[label="1;1pkt 1fpkt"];
3491--13845[label="1;1pkt 1fpkt"];
3491--15568[label="1;1pkt 1fpkt"];
6139--8001[label="1;1pkt 1fpkt"];
6139--10436[label="1;1pkt 1fpkt"];
6139--13845[label="1;1pkt 1fpkt"];
6139--15568[label="1;1pkt 1fpkt"];
8001--10436[label="1;1pkt 1fpkt"];
8001--13845[label="1;1pkt 1fpkt"];
8001--15568[label="1;1pkt 1fpkt"];
10436--13845[label="1;1pkt 1fpkt"];
10436--15568[label="1;1pkt 1fpkt"];
13845--15568[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.234" dst_port="3499" src_ip="194.173.188.66" src_port="80"/>
      <filter dst_ip="136.228.216.133" dst_port="55901" src_ip="194.173.188.66" src_port="80"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
1642[label="136.228.115.42;d;22pkt 22fpkt", shape=diamond, color=yellow];
1643[label="212.58.131.27;s;22pkt 22fpkt", shape=diamond, color=yellow];
6141[label="136.228.115.42;d;22pkt 22fpkt", shape=hexagon, color=black];
6142[label="212.58.131.27;s;22pkt 22fpkt", shape=hexagon, color=black];
9774[label="212.58.131.27;22pkt 22fpkt", shape=pentagon, color=darkviolet];
13497[label="212.58.131.27;22pkt 22fpkt", shape=invtriangle, color=brown];
15405[label="212.58.131.27;21pkt 21fpkt", shape=invhouse, color=bisque];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.58.131.27:80, 136.228.115.42:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3476: (2.28758%)&lt;BR/&gt; 3474: (2.28758%)&lt;BR/&gt; 3472: (2.28758%)&lt;BR/&gt; 3470: (2.28758%)&gt;];
}
1642--1643[label="1;22pkt 22fpkt"];
1642--6141[label="1;22pkt 22fpkt"];
1642--6142[label="1;22pkt 22fpkt"];
1642--9163[label="1;22pkt 22fpkt"];
1642--9774[label="1;22pkt 22fpkt"];
1642--13497[label="1;22pkt 22fpkt"];
1642--15405[label="1;21pkt 21fpkt"];
1643--6141[label="1;22pkt 22fpkt"];
1643--6142[label="1;22pkt 22fpkt"];
1643--9163[label="1;22pkt 22fpkt"];
1643--9774[label="1;22pkt 22fpkt"];
1643--13497[label="1;22pkt 22fpkt"];
1643--15405[label="1;21pkt 21fpkt"];
6141--6142[label="1;22pkt 22fpkt"];
6141--9163[label="1;22pkt 22fpkt"];
6141--9774[label="1;22pkt 22fpkt"];
6141--13497[label="1;22pkt 22fpkt"];
6141--15405[label="1;21pkt 21fpkt"];
6142--9163[label="1;22pkt 22fpkt"];
6142--9774[label="1;22pkt 22fpkt"];
6142--13497[label="1;22pkt 22fpkt"];
6142--15405[label="1;21pkt 21fpkt"];
9774--13497[label="1;22pkt 22fpkt"];
9774--15405[label="1;21pkt 21fpkt"];
13497--15405[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.115.42" src_ip="212.58.131.27" src_port="80"/>
    </slice>
    <from sec="1223614829" usec="0"/>
    <to sec="1223614837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_286{
style=filled;
color=gray75;
1701[label="104.243.251.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
6150[label="142.243.75.33;d;1pkt 1fpkt", shape=hexagon, color=black];
stat286[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.251.86:80, 142.243.75.33:50322}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50322: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1701--6150[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.75.33" dst_port="50322" src_ip="104.243.251.86" src_port="80"/>
    </slice>
    <from sec="1223614844" usec="0"/>
    <to sec="1223614901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
1558[label="136.228.119.106;d;6pkt 6fpkt", shape=diamond, color=yellow];
1740[label="104.243.251.188;s;6pkt 6fpkt", shape=diamond, color=yellow];
6161[label="104.243.251.188;s;6pkt 6fpkt", shape=hexagon, color=black];
8847[label="104.243.251.188;s;6pkt 6fpkt", shape=polygon, color=gold];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.251.188:80, 136.228.119.106:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2031: (8.33333%)&lt;BR/&gt; 2029: (8.33333%)&lt;BR/&gt; 2027: (8.33333%)&lt;BR/&gt; 2025: (8.33333%)&gt;];
}
1558--1740[label="1;6pkt 6fpkt"];
1558--6161[label="1;6pkt 6fpkt"];
1558--8847[label="1;6pkt 6fpkt"];
1740--6161[label="1;6pkt 6fpkt"];
1740--8847[label="1;6pkt 6fpkt"];
6161--8847[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.119.106" src_ip="104.243.251.188" src_port="80"/>
    </slice>
    <from sec="1223614811" usec="0"/>
    <to sec="1223615583" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
572[label="203.68.7.206;s;1pkt 1fpkt", shape=diamond, color=yellow];
6169[label="203.68.7.206;s;1pkt 1fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.68.7.206:10001, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 10001: (50%)&gt;];
}
572--6169[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="203.68.7.206" src_port="10001"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_289{
style=filled;
color=gray75;
584[label="136.228.71.178;d;1240pkt 1240fpkt", shape=diamond, color=yellow];
586[label="19.116.116.130;s;397pkt 397fpkt", shape=diamond, color=yellow];
1184[label="219.128.236.205;s;108pkt 108fpkt", shape=diamond, color=yellow];
1198[label="219.128.236.193;s;71pkt 71fpkt", shape=diamond, color=yellow];
1270[label="211.111.165.190;s;53pkt 53fpkt", shape=diamond, color=yellow];
1427[label="220.246.46.181;s;49pkt 49fpkt", shape=diamond, color=yellow];
2123[label="220.244.161.234;s;228pkt 228fpkt", shape=diamond, color=yellow];
2377[label="196.83.71.169;s;49pkt 49fpkt", shape=diamond, color=yellow];
2883[label="219.128.236.204;s;51pkt 51fpkt", shape=diamond, color=yellow];
2894[label="219.128.236.211;s;33pkt 33fpkt", shape=diamond, color=yellow];
5163[label="219.128.236.197;s;16pkt 16fpkt", shape=diamond, color=yellow];
5901[label="19.116.116.130;s;397pkt 397fpkt", shape=hexagon, color=black];
6173[label="136.228.71.178;d;317pkt 317fpkt", shape=hexagon, color=black];
6329[label="220.244.161.234;s;177pkt 177fpkt", shape=hexagon, color=black];
6661[label="219.128.236.211;s;33pkt 33fpkt", shape=hexagon, color=black];
6970[label="219.128.236.204;s;51pkt 51fpkt", shape=hexagon, color=black];
7166[label="219.128.236.205;s;71pkt 71fpkt", shape=hexagon, color=black];
9850[label="211.111.165.32;22pkt 22fpkt", shape=pentagon, color=darkviolet];
11765[label="219.128.236.148;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12272[label="220.246.46.181;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12458[label="219.128.236.194;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12707[label="219.128.236.211;35pkt 35fpkt", shape=pentagon, color=darkviolet];
12722[label="195.234.68.213;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12888[label="219.128.236.225;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13011[label="220.244.161.234;241pkt 241fpkt", shape=pentagon, color=darkviolet];
13531[label="211.111.165.32;22pkt 22fpkt", shape=invtriangle, color=brown];
14770[label="220.246.46.181;2pkt 2fpkt", shape=invtriangle, color=brown];
14996[label="195.234.68.213;4pkt 4fpkt", shape=invtriangle, color=brown];
16058[label="220.246.46.181;1pkt 1fpkt", shape=invhouse, color=bisque];
stat289[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.116.116.130:80, 136.228.71.178:*}[30.4651%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6476%)&lt;BR/&gt; 443: (0.230415%)&lt;BR/&gt; 33437: (0.121984%)&lt;BR/&gt; 55024: (0.067769%)&lt;BR/&gt; 55023: (0.067769%)&gt;];
}
584--586[label="0.989924;393pkt 393fpkt"];
584--1184[label="1;108pkt 108fpkt"];
584--1198[label="1;71pkt 71fpkt"];
584--1270[label="1;53pkt 53fpkt"];
584--1313[label="0.394089;80pkt 80fpkt"];
584--1427[label="0.591837;29pkt 29fpkt"];
584--1953[label="0.210526;12pkt 12fpkt"];
584--2123[label="0.973684;222pkt 222fpkt"];
584--2377[label="1;49pkt 49fpkt"];
584--2883[label="1;51pkt 51fpkt"];
584--2894[label="1;33pkt 33fpkt"];
584--5163[label="1;16pkt 16fpkt"];
584--5901[label="0.989924;393pkt 393fpkt"];
584--6173[label="1;317pkt 317fpkt"];
584--6329[label="0.966102;171pkt 171fpkt"];
584--6547[label="0.210526;12pkt 12fpkt"];
584--6661[label="1;33pkt 33fpkt"];
584--6881[label="0.137931;8pkt 8fpkt"];
584--6970[label="1;51pkt 51fpkt"];
584--7166[label="1;71pkt 71fpkt"];
584--8884[label="0.137931;8pkt 8fpkt"];
584--9163[label="0.075;93pkt 93fpkt"];
584--9194[label="0.0677419;84pkt 84fpkt"];
584--9198[label="0.0596774;74pkt 74fpkt"];
584--9234[label="0.0677419;84pkt 84fpkt"];
584--9268[label="0.0677419;84pkt 84fpkt"];
584--9850[label="0.954545;21pkt 21fpkt"];
584--10800[label="0.351111;79pkt 79fpkt"];
584--11765[label="1;7pkt 7fpkt"];
584--12458[label="1;3pkt 3fpkt"];
584--12707[label="0.942857;33pkt 33fpkt"];
584--12722[label="0.5;2pkt 2fpkt"];
584--12888[label="1;6pkt 6fpkt"];
584--13011[label="0.917012;221pkt 221fpkt"];
584--13531[label="0.954545;21pkt 21fpkt"];
584--14770[label="0.5;1pkt 1fpkt"];
584--14996[label="0.5;2pkt 2fpkt"];
586--1817[label="0.0100756;4pkt 4fpkt"];
586--5901[label="1;397pkt 397fpkt"];
586--6173[label="0.334385;106pkt 106fpkt"];
586--7110[label="0.0100756;4pkt 4fpkt"];
586--9050[label="0.0100756;4pkt 4fpkt"];
586--9163[label="0.0806045;32pkt 32fpkt"];
586--9194[label="0.0856423;34pkt 34fpkt"];
586--9198[label="0.0528967;21pkt 21fpkt"];
586--9234[label="0.0856423;34pkt 34fpkt"];
586--9268[label="0.0856423;34pkt 34fpkt"];
1184--6173[label="0.305556;33pkt 33fpkt"];
1184--7166[label="1;71pkt 71fpkt"];
1184--9163[label="0.0925926;10pkt 10fpkt"];
1184--9194[label="0.0462963;5pkt 5fpkt"];
1184--9198[label="0.0277778;3pkt 3fpkt"];
1184--9234[label="0.0462963;5pkt 5fpkt"];
1184--9268[label="0.0462963;5pkt 5fpkt"];
1198--6173[label="0.352113;25pkt 25fpkt"];
1198--9163[label="0.056338;4pkt 4fpkt"];
1198--9194[label="0.0985915;7pkt 7fpkt"];
1198--9198[label="0.0140845;1pkt 1fpkt"];
1198--9234[label="0.0985915;7pkt 7fpkt"];
1198--9268[label="0.0985915;7pkt 7fpkt"];
1270--6173[label="0.283019;15pkt 15fpkt"];
1270--9163[label="0.0566038;3pkt 3fpkt"];
1270--9194[label="0.132075;7pkt 7fpkt"];
1270--9198[label="0.0188679;1pkt 1fpkt"];
1270--9234[label="0.132075;7pkt 7fpkt"];
1270--9268[label="0.132075;7pkt 7fpkt"];
1427--6173[label="0.244898;12pkt 12fpkt"];
1427--9163[label="0.102041;5pkt 5fpkt"];
1427--9194[label="0.0612245;3pkt 3fpkt"];
1427--9198[label="0.0612245;3pkt 3fpkt"];
1427--9234[label="0.0612245;3pkt 3fpkt"];
1427--9268[label="0.0612245;3pkt 3fpkt"];
1427--14770[label="0.5;1pkt 1fpkt"];
2123--6173[label="0.166667;38pkt 38fpkt"];
2123--6329[label="1;177pkt 177fpkt"];
2123--9163[label="0.100877;23pkt 23fpkt"];
2123--9194[label="0.0307018;7pkt 7fpkt"];
2123--9198[label="0.0789474;18pkt 18fpkt"];
2123--9234[label="0.0307018;7pkt 7fpkt"];
2123--9268[label="0.0307018;7pkt 7fpkt"];
2123--13011[label="0.995614;227pkt 227fpkt"];
2377--6173[label="0.387755;19pkt 19fpkt"];
2377--9194[label="0.0612245;3pkt 3fpkt"];
2377--9198[label="0.102041;5pkt 5fpkt"];
2377--9234[label="0.0612245;3pkt 3fpkt"];
2377--9268[label="0.0612245;3pkt 3fpkt"];
2883--6173[label="0.156863;8pkt 8fpkt"];
2883--6970[label="1;51pkt 51fpkt"];
2883--9163[label="0.0392157;2pkt 2fpkt"];
2883--9194[label="0.117647;6pkt 6fpkt"];
2883--9198[label="0.0588235;3pkt 3fpkt"];
2883--9234[label="0.117647;6pkt 6fpkt"];
2883--9268[label="0.117647;6pkt 6fpkt"];
2894--6173[label="0.212121;7pkt 7fpkt"];
2894--6661[label="1;33pkt 33fpkt"];
2894--9163[label="0.121212;4pkt 4fpkt"];
2894--9194[label="0.0606061;2pkt 2fpkt"];
2894--9198[label="0.0909091;3pkt 3fpkt"];
2894--9234[label="0.0606061;2pkt 2fpkt"];
2894--9268[label="0.0606061;2pkt 2fpkt"];
2894--12707[label="1;33pkt 33fpkt"];
5163--6173[label="0.1875;3pkt 3fpkt"];
5163--9163[label="0.0625;1pkt 1fpkt"];
5163--9194[label="0.0625;1pkt 1fpkt"];
5163--9198[label="0.125;2pkt 2fpkt"];
5163--9234[label="0.0625;1pkt 1fpkt"];
5163--9268[label="0.0625;1pkt 1fpkt"];
5901--6173[label="0.334385;106pkt 106fpkt"];
5901--7110[label="0.0100756;4pkt 4fpkt"];
5901--9050[label="0.0100756;4pkt 4fpkt"];
5901--9163[label="0.0806045;32pkt 32fpkt"];
5901--9194[label="0.0856423;34pkt 34fpkt"];
5901--9198[label="0.0528967;21pkt 21fpkt"];
5901--9234[label="0.0856423;34pkt 34fpkt"];
5901--9268[label="0.0856423;34pkt 34fpkt"];
6173--6329[label="0.214689;38pkt 38fpkt"];
6173--6547[label="0.0526316;3pkt 3fpkt"];
6173--6661[label="0.212121;7pkt 7fpkt"];
6173--6881[label="0.12069;7pkt 7fpkt"];
6173--6970[label="0.156863;8pkt 8fpkt"];
6173--7166[label="0.464789;33pkt 33fpkt"];
6173--8884[label="0.12069;7pkt 7fpkt"];
6173--9163[label="0.293375;93pkt 93fpkt"];
6173--9850[label="0.227273;5pkt 5fpkt"];
6173--10800[label="0.0266667;6pkt 6fpkt"];
6173--11765[label="0.285714;2pkt 2fpkt"];
6173--12707[label="0.2;7pkt 7fpkt"];
6173--12888[label="0.166667;1pkt 1fpkt"];
6173--13011[label="0.153527;37pkt 37fpkt"];
6173--13531[label="0.227273;5pkt 5fpkt"];
6173--14770[label="0.5;1pkt 1fpkt"];
6329--9163[label="0.129944;23pkt 23fpkt"];
6329--9194[label="0.039548;7pkt 7fpkt"];
6329--9234[label="0.039548;7pkt 7fpkt"];
6329--9268[label="0.039548;7pkt 7fpkt"];
6329--13011[label="0.99435;176pkt 176fpkt"];
6661--9163[label="0.121212;4pkt 4fpkt"];
6661--9194[label="0.0606061;2pkt 2fpkt"];
6661--9198[label="0.0909091;3pkt 3fpkt"];
6661--9234[label="0.0606061;2pkt 2fpkt"];
6661--9268[label="0.0606061;2pkt 2fpkt"];
6661--12707[label="1;33pkt 33fpkt"];
6970--9163[label="0.0392157;2pkt 2fpkt"];
6970--9194[label="0.117647;6pkt 6fpkt"];
6970--9198[label="0.0588235;3pkt 3fpkt"];
6970--9234[label="0.117647;6pkt 6fpkt"];
6970--9268[label="0.117647;6pkt 6fpkt"];
7166--9163[label="0.140845;10pkt 10fpkt"];
7166--9194[label="0.0704225;5pkt 5fpkt"];
7166--9234[label="0.0704225;5pkt 5fpkt"];
7166--9268[label="0.0704225;5pkt 5fpkt"];
9850--13531[label="1;22pkt 22fpkt"];
12272--14770[label="1;1pkt 1fpkt"];
12272--16058[label="1;1pkt 1fpkt"];
12722--14996[label="1;4pkt 4fpkt"];
14770--16058[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.71.178" src_ip="19.116.116.130" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.3299,2.03674,999,1 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_291{
style=filled;
color=gray75;
242[label="193.52.116.254s;2pkt 2fpkt", shape=rectangle, color=red];
690[label="142.243.189.146;d;2pkt 2fpkt", shape=diamond, color=yellow];
693[label="193.52.116.254;s;1pkt 1fpkt", shape=diamond, color=yellow];
6188[label="142.243.189.146;d;1pkt 1fpkt", shape=hexagon, color=black];
7414[label="193.52.116.254;s;1pkt 1fpkt", shape=hexagon, color=black];
16329[label="193.52.116.254;1pkt 1fpkt", shape=invhouse, color=bisque];
stat291[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.117.43.109:1935, 136.228.64.25:21091}[33.3333%]&lt;BR/&gt;{206.180.213.198:80, 142.243.189.146:4136}[33.3333%]&lt;BR/&gt;{193.52.116.254:1935, 142.243.189.146:1680}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (43.75%)&lt;BR/&gt; 1680: (37.5%)&lt;BR/&gt; 21091: (6.25%)&lt;BR/&gt; 4136: (6.25%)&lt;BR/&gt; 80: (6.25%)&gt;];
}
242--690[label="0.5;1pkt 1fpkt"];
242--693[label="1;1pkt 1fpkt"];
242--1352[label="0.5;1pkt 1fpkt"];
242--1425[label="1;1pkt 1fpkt"];
242--6188[label="1;1pkt 1fpkt"];
242--6346[label="1;1pkt 1fpkt"];
242--7414[label="1;1pkt 1fpkt"];
242--7824[label="0.5;1pkt 1fpkt"];
242--16329[label="1;1pkt 1fpkt"];
690--693[label="1;1pkt 1fpkt"];
690--6188[label="1;1pkt 1fpkt"];
690--7414[label="1;1pkt 1fpkt"];
690--16329[label="1;1pkt 1fpkt"];
693--6188[label="1;1pkt 1fpkt"];
693--7414[label="1;1pkt 1fpkt"];
693--16329[label="1;1pkt 1fpkt"];
6188--7414[label="1;1pkt 1fpkt"];
6188--16329[label="1;1pkt 1fpkt"];
7414--16329[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.189.146" dst_port="1680" src_ip="193.52.116.254" src_port="1935"/>
      <filter dst_ip="142.243.189.146" dst_port="4136" src_ip="206.180.213.198" src_port="80"/>
      <filter dst_ip="136.228.64.25" dst_port="21091" src_ip="192.117.43.109" src_port="1935"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_292{
style=filled;
color=gray75;
265[label="136.228.85.91d;2pkt 2fpkt", shape=rectangle, color=red];
746[label="54.214.111.191;d;12pkt 12fpkt", shape=diamond, color=yellow];
747[label="162.73.1.82;s;23pkt 23fpkt", shape=diamond, color=yellow];
6197[label="54.214.111.191;d;12pkt 12fpkt", shape=hexagon, color=black];
6782[label="162.73.1.82;s;23pkt 23fpkt", shape=hexagon, color=black];
stat292[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.1.82:*, 54.214.111.191:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6667%)&lt;BR/&gt; 19733: (4.16667%)&lt;BR/&gt; 1366: (3.47222%)&lt;BR/&gt; 3544: (2.77778%)&lt;BR/&gt; 1496: (2.77778%)&gt;];
}
265--449[label="0.5;1pkt 1fpkt"];
265--542[label="0.5;1pkt 1fpkt"];
265--591[label="0.5;1pkt 1fpkt"];
265--746[label="0.5;1pkt 1fpkt"];
265--747[label="0.5;1pkt 1fpkt"];
265--1695[label="0.5;1pkt 1fpkt"];
265--6197[label="0.5;1pkt 1fpkt"];
265--6462[label="0.5;1pkt 1fpkt"];
265--6782[label="0.5;1pkt 1fpkt"];
265--9163[label="0.5;1pkt 1fpkt"];
746--747[label="1;12pkt 12fpkt"];
746--6197[label="1;12pkt 12fpkt"];
746--6782[label="1;12pkt 12fpkt"];
747--6197[label="1;12pkt 12fpkt"];
747--6782[label="1;23pkt 23fpkt"];
6197--6782[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="54.214.111.191" dst_port="80" src_ip="162.73.1.82"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11412,2.08871,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_294{
style=filled;
color=gray75;
45[label="162.73.232.37s;2pkt 2fpkt", shape=rectangle, color=red];
838[label="162.73.232.37;s;408pkt 408fpkt", shape=diamond, color=yellow];
4592[label="166.166.86.152;d;1pkt 1fpkt", shape=diamond, color=yellow];
5359[label="193.154.80.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
5384[label="220.68.35.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
5423[label="115.227.43.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
5455[label="192.109.213.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
5772[label="104.6.73.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat294[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.232.37:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 32902: (0.359712%)&lt;BR/&gt; 57134: (0.239808%)&lt;BR/&gt; 52328: (0.239808%)&lt;BR/&gt; 46756: (0.239808%)&gt;];
}
45--838[label="1;2pkt 2fpkt"];
45--5423[label="1;1pkt 1fpkt"];
45--6212[label="0.5;1pkt 1fpkt"];
838--848[label="0.0269608;11pkt 11fpkt"];
838--1367[label="0.00245098;1pkt 1fpkt"];
838--1377[label="0.0220588;9pkt 9fpkt"];
838--1382[label="0.00318471;1pkt 1fpkt"];
838--1414[label="0.00649351;1pkt 1fpkt"];
838--1542[label="0.0229885;2pkt 2fpkt"];
838--1925[label="0.00561798;1pkt 1fpkt"];
838--2213[label="0.0254237;3pkt 3fpkt"];
838--2239[label="0.00357143;1pkt 1fpkt"];
838--2295[label="0.0909091;1pkt 1fpkt"];
838--2851[label="0.0510204;5pkt 5fpkt"];
838--3233[label="0.0657895;5pkt 5fpkt"];
838--3443[label="0.0232558;2pkt 2fpkt"];
838--3447[label="0.00763359;1pkt 1fpkt"];
838--3869[label="0.0131579;1pkt 1fpkt"];
838--3884[label="0.0285714;2pkt 2fpkt"];
838--3950[label="0.0384615;1pkt 1fpkt"];
838--4068[label="0.030303;1pkt 1fpkt"];
838--4169[label="0.0350877;2pkt 2fpkt"];
838--4592[label="1;1pkt 1fpkt"];
838--4708[label="0.0344828;2pkt 2fpkt"];
838--4832[label="0.0384615;1pkt 1fpkt"];
838--5060[label="0.0128205;1pkt 1fpkt"];
838--5189[label="0.0454545;1pkt 1fpkt"];
838--5359[label="1;1pkt 1fpkt"];
838--5384[label="1;1pkt 1fpkt"];
838--5423[label="1;1pkt 1fpkt"];
838--5455[label="0.5;1pkt 1fpkt"];
838--5660[label="0.0882353;3pkt 3fpkt"];
838--5772[label="1;1pkt 1fpkt"];
838--6085[label="0.00699301;1pkt 1fpkt"];
838--6208[label="0.214286;9pkt 9fpkt"];
838--6212[label="1;93pkt 93fpkt"];
838--6603[label="0.021875;7pkt 7fpkt"];
838--6980[label="0.0909091;1pkt 1fpkt"];
838--7266[label="0.0229885;2pkt 2fpkt"];
838--7278[label="0.0227273;1pkt 1fpkt"];
838--7393[label="0.037037;1pkt 1fpkt"];
838--7611[label="0.00763359;1pkt 1fpkt"];
838--7730[label="0.0171569;7pkt 7fpkt"];
838--7826[label="0.00245098;1pkt 1fpkt"];
838--7889[label="0.0111111;1pkt 1fpkt"];
838--8220[label="0.00318471;1pkt 1fpkt"];
838--8329[label="0.0454545;1pkt 1fpkt"];
838--8378[label="0.047619;1pkt 1fpkt"];
838--8630[label="0.0510204;5pkt 5fpkt"];
838--9076[label="0.00245098;1pkt 1fpkt"];
838--9094[label="0.0454545;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="162.73.232.37"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_295{
style=filled;
color=gray75;
1187[label="110.2.56.32;d;37pkt 37fpkt", shape=diamond, color=yellow];
1827[label="213.33.60.174;s;162pkt 162fpkt", shape=diamond, color=yellow];
6032[label="110.2.56.32;d;35pkt 35fpkt", shape=hexagon, color=black];
6213[label="213.33.60.174;s;69pkt 69fpkt", shape=hexagon, color=black];
stat295[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.60.174:*, 110.2.56.32:*}[22.8395%]&lt;BR/&gt;{213.33.60.174:22214, 196.48.145.111:*}[20.9877%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22214: (37.1287%)&lt;BR/&gt; 6112: (3.30033%)&lt;BR/&gt; 38376: (1.65017%)&lt;BR/&gt; 61794: (1.32013%)&lt;BR/&gt; 45862: (1.32013%)&gt;];
}
1187--1827[label="1;37pkt 37fpkt"];
1187--6032[label="1;35pkt 35fpkt"];
1187--6213[label="0.324324;12pkt 12fpkt"];
1827--6032[label="1;35pkt 35fpkt"];
1827--6213[label="1;69pkt 69fpkt"];
6032--6213[label="0.342857;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="110.2.56.32" src_ip="213.33.60.174"/>
      <filter dst_ip="196.48.145.111" src_ip="213.33.60.174" src_port="22214"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_296{
style=filled;
color=gray75;
3861[label="136.228.93.246;d;172pkt 172fpkt", shape=diamond, color=yellow];
4789[label="212.138.109.101;d;35pkt 35fpkt", shape=diamond, color=yellow];
4820[label="136.228.216.224;s;196pkt 196fpkt", shape=diamond, color=yellow];
5754[label="162.73.25.148;s;12pkt 12fpkt", shape=diamond, color=yellow];
7274[label="136.228.93.246;d;150pkt 150fpkt", shape=hexagon, color=black];
7278[label="208.45.72.23;d;44pkt 44fpkt", shape=hexagon, color=black];
8363[label="136.228.216.224;s;181pkt 181fpkt", shape=hexagon, color=black];
11621[label="194.228.8.140;55pkt 55fpkt", shape=pentagon, color=darkviolet];
12873[label="136.228.216.224;198pkt 198fpkt", shape=pentagon, color=darkviolet];
14442[label="194.228.8.140;55pkt 55fpkt", shape=invtriangle, color=brown];
15082[label="136.228.216.224;197pkt 197fpkt", shape=invtriangle, color=brown];
15878[label="194.228.8.140;55pkt 55fpkt", shape=invhouse, color=bisque];
16237[label="136.228.216.224;197pkt 197fpkt", shape=invhouse, color=bisque];
stat296[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.216.224:*, *:80}[43.2671%]&lt;BR/&gt;{*:*, 136.228.93.246:80}[29.8013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.6729%)&lt;BR/&gt; 25: (1.93924%)&lt;BR/&gt; 57765: (0.226244%)&lt;BR/&gt; 1066: (0.226244%)&lt;BR/&gt; 1042: (0.226244%)&gt;];
}
3861--3966[label="0.00724638;1pkt 1fpkt"];
3861--3969[label="0.00724638;1pkt 1fpkt"];
3861--7274[label="1;150pkt 150fpkt"];
3861--7345[label="0.00724638;1pkt 1fpkt"];
3861--9177[label="0.0174419;3pkt 3fpkt"];
3861--9196[label="0.00581395;1pkt 1fpkt"];
3861--9217[label="0.0174419;3pkt 3fpkt"];
3861--9251[label="0.0174419;3pkt 3fpkt"];
3861--10265[label="0.00729927;1pkt 1fpkt"];
3861--10793[label="0.0555556;1pkt 1fpkt"];
3861--11544[label="0.00724638;1pkt 1fpkt"];
3861--11621[label="1;55pkt 55fpkt"];
3861--13761[label="0.00724638;1pkt 1fpkt"];
3861--14406[label="0.00729927;1pkt 1fpkt"];
3861--14442[label="1;55pkt 55fpkt"];
3861--15857[label="0.00729927;1pkt 1fpkt"];
3861--15878[label="1;55pkt 55fpkt"];
4789--4820[label="0.0571429;2pkt 2fpkt"];
4789--5754[label="0.166667;2pkt 2fpkt"];
4789--6126[label="0.0571429;2pkt 2fpkt"];
4789--6321[label="0.171429;6pkt 6fpkt"];
4789--6330[label="0.0285714;1pkt 1fpkt"];
4789--6463[label="0.0571429;2pkt 2fpkt"];
4789--6937[label="0.0571429;2pkt 2fpkt"];
4789--8145[label="0.0285714;1pkt 1fpkt"];
4789--8331[label="1;33pkt 33fpkt"];
4789--8363[label="0.0571429;2pkt 2fpkt"];
4789--9051[label="0.0285714;1pkt 1fpkt"];
4789--9072[label="0.171429;6pkt 6fpkt"];
4789--9670[label="0.0285714;1pkt 1fpkt"];
4789--9982[label="0.0571429;2pkt 2fpkt"];
4789--10674[label="0.0571429;2pkt 2fpkt"];
4789--10689[label="0.142857;5pkt 5fpkt"];
4789--10872[label="0.114286;4pkt 4fpkt"];
4789--12873[label="0.0571429;2pkt 2fpkt"];
4789--13442[label="0.0285714;1pkt 1fpkt"];
4789--13610[label="0.0571429;2pkt 2fpkt"];
4789--13981[label="0.142857;5pkt 5fpkt"];
4789--14064[label="0.114286;4pkt 4fpkt"];
4789--15082[label="0.0571429;2pkt 2fpkt"];
4789--15687[label="0.114286;4pkt 4fpkt"];
4789--16237[label="0.0571429;2pkt 2fpkt"];
4820--5206[label="0.010989;1pkt 1fpkt"];
4820--6065[label="0.00510204;1pkt 1fpkt"];
4820--6066[label="0.0357143;7pkt 7fpkt"];
4820--7278[label="0.0909091;4pkt 4fpkt"];
4820--7730[label="0.0306122;6pkt 6fpkt"];
4820--7850[label="0.44898;88pkt 88fpkt"];
4820--8331[label="0.0606061;2pkt 2fpkt"];
4820--8363[label="1;181pkt 181fpkt"];
4820--9178[label="0.00510204;1pkt 1fpkt"];
4820--9218[label="0.00510204;1pkt 1fpkt"];
4820--9252[label="0.00510204;1pkt 1fpkt"];
4820--12873[label="1;196pkt 196fpkt"];
4820--15082[label="0.994898;195pkt 195fpkt"];
4820--16237[label="0.994898;195pkt 195fpkt"];
7274--9177[label="0.02;3pkt 3fpkt"];
7274--9217[label="0.02;3pkt 3fpkt"];
7274--9251[label="0.02;3pkt 3fpkt"];
7274--10265[label="0.00729927;1pkt 1fpkt"];
7274--10793[label="0.0555556;1pkt 1fpkt"];
7274--11621[label="1;55pkt 55fpkt"];
7274--13761[label="0.00724638;1pkt 1fpkt"];
7274--14442[label="1;55pkt 55fpkt"];
7274--15878[label="1;55pkt 55fpkt"];
7278--7424[label="0.0454545;2pkt 2fpkt"];
7278--8363[label="0.0909091;4pkt 4fpkt"];
7278--9873[label="0.0454545;2pkt 2fpkt"];
7278--10013[label="0.0454545;2pkt 2fpkt"];
7278--10100[label="0.0227273;1pkt 1fpkt"];
7278--10906[label="0.0909091;4pkt 4fpkt"];
7278--11078[label="0.0540541;2pkt 2fpkt"];
7278--12657[label="0.0681818;3pkt 3fpkt"];
7278--12873[label="0.0909091;4pkt 4fpkt"];
7278--13629[label="0.0454545;2pkt 2fpkt"];
7278--13675[label="0.0227273;1pkt 1fpkt"];
7278--14167[label="0.0540541;2pkt 2fpkt"];
7278--15082[label="0.0909091;4pkt 4fpkt"];
7278--15480[label="0.0227273;1pkt 1fpkt"];
7278--16237[label="0.0909091;4pkt 4fpkt"];
8363--9178[label="0.00552486;1pkt 1fpkt"];
8363--9218[label="0.00552486;1pkt 1fpkt"];
8363--9252[label="0.00552486;1pkt 1fpkt"];
8363--12873[label="1;181pkt 181fpkt"];
8363--15082[label="0.994475;180pkt 180fpkt"];
8363--16237[label="0.994475;180pkt 180fpkt"];
11621--14442[label="1;55pkt 55fpkt"];
11621--15878[label="1;55pkt 55fpkt"];
12873--15082[label="1;197pkt 197fpkt"];
12873--16237[label="1;197pkt 197fpkt"];
14442--15878[label="1;55pkt 55fpkt"];
15082--16237[label="1;197pkt 197fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.228.216.224"/>
      <filter dst_ip="136.228.93.246" dst_port="80"/>
    </slice>
    <from sec="1223614811" usec="0"/>
    <to sec="1223615673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
906[label="69.106.187.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
6225[label="69.106.187.250;s;1pkt 1fpkt", shape=hexagon, color=black];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.106.187.250:63609, 142.243.216.213:4218}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63609: (50%)&lt;BR/&gt; 4218: (50%)&gt;];
}
906--6225[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.216.213" dst_port="4218" src_ip="69.106.187.250" src_port="63609"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_299{
style=filled;
color=gray75;
1855[label="21.83.174.0;s;1pkt 1fpkt", shape=diamond, color=yellow];
6238[label="21.83.174.0;s;1pkt 1fpkt", shape=hexagon, color=black];
9294[label="21.83.174.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat299[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.83.174.0:55116, 213.42.135.123:40000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55116: (50%)&lt;BR/&gt; 40000: (50%)&gt;];
}
1855--6176[label="1;1pkt 1fpkt"];
1855--6238[label="1;1pkt 1fpkt"];
1855--9294[label="1;1pkt 1fpkt"];
6238--9294[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.135.123" dst_port="40000" src_ip="21.83.174.0" src_port="55116"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
1033[label="106.129.97.131;s;1pkt 1fpkt", shape=diamond, color=yellow];
6252[label="106.129.97.131;s;1pkt 1fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.129.97.131:443, 136.228.25.102:49202}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49202: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
1033--6252[label="1;1pkt 1fpkt"];
1033--6522[label="1;1pkt 1fpkt"];
6252--6522[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.25.102" dst_port="49202" src_ip="106.129.97.131" src_port="443"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
1062[label="196.10.151.172;s;2pkt 2fpkt", shape=diamond, color=yellow];
6256[label="196.10.151.172;s;2pkt 2fpkt", shape=hexagon, color=black];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.10.151.172:554, 162.73.164.101:2532}[50%]&lt;BR/&gt;{196.10.151.172:9980, 162.73.164.101:6970}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9980: (25%)&lt;BR/&gt; 6970: (25%)&lt;BR/&gt; 2532: (25%)&lt;BR/&gt; 554: (25%)&gt;];
}
1062--6256[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.164.101" dst_port="6970" src_ip="196.10.151.172" src_port="9980"/>
      <filter dst_ip="162.73.164.101" dst_port="2532" src_ip="196.10.151.172" src_port="554"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_303{
style=filled;
color=gray75;
1898[label="18.177.113.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
6260[label="18.177.113.38;s;1pkt 1fpkt", shape=hexagon, color=black];
stat303[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.177.113.38:1302, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1302: (50%)&gt;];
}
1898--6260[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="18.177.113.38" src_port="1302"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_304{
style=filled;
color=gray75;
1163[label="136.228.35.33;s;1168pkt 1168fpkt", shape=diamond, color=yellow];
6269[label="136.228.35.33;s;1168pkt 1168fpkt", shape=hexagon, color=black];
stat304[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.35.33:59173, *:53}[99.2295%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.8288%)&lt;BR/&gt; 59173: (49.6575%)&lt;BR/&gt; 0: (0.256849%)&lt;BR/&gt; 64087: (0.0428082%)&lt;BR/&gt; 55587: (0.0428082%)&gt;];
}
1163--2119[label="0.000856164;1pkt 1fpkt"];
1163--3184[label="0.00111235;1pkt 1fpkt"];
1163--3192[label="0.00102145;1pkt 1fpkt"];
1163--3267[label="0.000856164;1pkt 1fpkt"];
1163--3322[label="0.00115473;1pkt 1fpkt"];
1163--3737[label="0.00112233;1pkt 1fpkt"];
1163--4178[label="0.00129199;1pkt 1fpkt"];
1163--4222[label="0.00149477;1pkt 1fpkt"];
1163--4357[label="0.000856164;1pkt 1fpkt"];
1163--4647[label="0.00163666;1pkt 1fpkt"];
1163--4683[label="0.00162602;1pkt 1fpkt"];
1163--4696[label="0.00158983;1pkt 1fpkt"];
1163--4726[label="0.00146628;1pkt 1fpkt"];
1163--5058[label="0.00187266;1pkt 1fpkt"];
1163--5488[label="0.00189036;1pkt 1fpkt"];
1163--5516[label="0.00217391;1pkt 1fpkt"];
1163--5518[label="0.00200401;1pkt 1fpkt"];
1163--5523[label="0.00273224;1pkt 1fpkt"];
1163--5524[label="0.00259067;1pkt 1fpkt"];
1163--5526[label="0.00194175;1pkt 1fpkt"];
1163--5542[label="0.0026178;1pkt 1fpkt"];
1163--5545[label="0.00271739;1pkt 1fpkt"];
1163--5550[label="0.00217865;1pkt 1fpkt"];
1163--5556[label="0.00258398;1pkt 1fpkt"];
1163--6269[label="1;1168pkt 1168fpkt"];
1163--6838[label="0.000856164;1pkt 1fpkt"];
1163--6844[label="0.0015873;1pkt 1fpkt"];
1163--8154[label="0.00188324;1pkt 1fpkt"];
1163--8182[label="0.00153139;1pkt 1fpkt"];
1163--8184[label="0.00117786;1pkt 1fpkt"];
1163--8212[label="0.00127714;1pkt 1fpkt"];
1163--8216[label="0.000856164;1pkt 1fpkt"];
1163--8273[label="0.00162075;1pkt 1fpkt"];
1163--8346[label="0.000856164;1pkt 1fpkt"];
1163--8879[label="0.000856164;1pkt 1fpkt"];
1163--9066[label="0.00153139;1pkt 1fpkt"];
6269--6838[label="0.000856164;1pkt 1fpkt"];
6269--6844[label="0.0015873;1pkt 1fpkt"];
6269--8154[label="0.00188324;1pkt 1fpkt"];
6269--8182[label="0.00153139;1pkt 1fpkt"];
6269--8184[label="0.00117786;1pkt 1fpkt"];
6269--8212[label="0.00127714;1pkt 1fpkt"];
6269--8216[label="0.000856164;1pkt 1fpkt"];
6269--8273[label="0.00162075;1pkt 1fpkt"];
6269--8346[label="0.000856164;1pkt 1fpkt"];
6269--8879[label="0.000856164;1pkt 1fpkt"];
6269--9066[label="0.00153139;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.228.35.33" src_port="59173"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
1935[label="73.119.207.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
6271[label="73.119.207.108;s;1pkt 1fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.119.207.108:1081, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1081: (50%)&gt;];
}
1935--6271[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="73.119.207.108" src_port="1081"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
1176[label="160.49.241.50;d;185pkt 185fpkt", shape=diamond, color=yellow];
1177[label="203.26.135.234;s;390pkt 390fpkt", shape=diamond, color=yellow];
1275[label="160.49.241.48;d;205pkt 205fpkt", shape=diamond, color=yellow];
6278[label="203.26.135.234;s;390pkt 390fpkt", shape=hexagon, color=black];
6307[label="160.49.241.48;d;205pkt 205fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.26.135.234:*, 160.49.241.48:22}[52.5641%]&lt;BR/&gt;{203.26.135.234:*, 160.49.241.50:22}[47.4359%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 60614: (0.145455%)&lt;BR/&gt; 60552: (0.145455%)&lt;BR/&gt; 60498: (0.145455%)&lt;BR/&gt; 60443: (0.145455%)&gt;];
}
1176--1177[label="1;185pkt 185fpkt"];
1176--6278[label="1;185pkt 185fpkt"];
1177--1275[label="1;205pkt 205fpkt"];
1177--6278[label="1;390pkt 390fpkt"];
1177--6307[label="1;205pkt 205fpkt"];
1275--6278[label="1;205pkt 205fpkt"];
1275--6307[label="1;205pkt 205fpkt"];
6278--6307[label="1;205pkt 205fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.241.48" dst_port="22" src_ip="203.26.135.234"/>
      <filter dst_ip="160.49.241.50" dst_port="22" src_ip="203.26.135.234"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_307{
style=filled;
color=gray75;
1222[label="164.25.25.150;d;119pkt 119fpkt", shape=diamond, color=yellow];
1223[label="196.16.169.141;s;119pkt 119fpkt", shape=diamond, color=yellow];
6288[label="196.16.169.141;s;40pkt 40fpkt", shape=hexagon, color=black];
7771[label="164.25.25.150;d;119pkt 119fpkt", shape=hexagon, color=black];
11647[label="196.16.169.141;119pkt 119fpkt", shape=pentagon, color=darkviolet];
stat307[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.16.169.141:20, 164.25.25.150:*}[99.1597%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (49.5155%)&lt;BR/&gt; 1344: (0.484496%)&lt;BR/&gt; 1343: (0.484496%)&lt;BR/&gt; 1342: (0.484496%)&lt;BR/&gt; 1341: (0.484496%)&gt;];
}
1222--1223[label="1;119pkt 119fpkt"];
1222--6288[label="1;40pkt 40fpkt"];
1222--7771[label="1;119pkt 119fpkt"];
1222--11647[label="1;119pkt 119fpkt"];
1223--6288[label="1;40pkt 40fpkt"];
1223--7771[label="1;119pkt 119fpkt"];
1223--11647[label="1;119pkt 119fpkt"];
6288--7771[label="1;40pkt 40fpkt"];
6288--11647[label="1;40pkt 40fpkt"];
7771--11647[label="1;119pkt 119fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.25.150" src_ip="196.16.169.141" src_port="20"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
1978[label="77.30.219.239;s;1pkt 1fpkt", shape=diamond, color=yellow];
6293[label="77.30.219.239;s;1pkt 1fpkt", shape=hexagon, color=black];
13074[label="77.30.219.239;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.30.219.239:7559, 213.42.135.123:54999}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54999: (50%)&lt;BR/&gt; 7559: (50%)&gt;];
}
1978--6176[label="1;1pkt 1fpkt"];
1978--6293[label="1;1pkt 1fpkt"];
1978--13074[label="1;1pkt 1fpkt"];
6293--13074[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.135.123" dst_port="54999" src_ip="77.30.219.239" src_port="7559"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
1989[label="142.243.12.23;d;810pkt 810fpkt", shape=diamond, color=yellow];
6296[label="142.243.12.23;d;810pkt 810fpkt", shape=hexagon, color=black];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.243.12.23:12188}[98.7654%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12188: (49.3827%)&lt;BR/&gt; 443: (0.493827%)&lt;BR/&gt; 28953: (0.123457%)&lt;BR/&gt; 12918: (0.123457%)&lt;BR/&gt; 80: (0.123457%)&gt;];
}
1989--6296[label="1;810pkt 810fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.12.23" dst_port="12188"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_310{
style=filled;
color=gray75;
2052[label="73.227.49.226;s;1pkt 1fpkt", shape=diamond, color=yellow];
6312[label="73.227.49.226;s;1pkt 1fpkt", shape=hexagon, color=black];
stat310[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.227.49.226:44285, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 44285: (50%)&gt;];
}
2052--6312[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="73.227.49.226" src_port="44285"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_311{
style=filled;
color=gray75;
2070[label="204.218.41.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
6320[label="204.218.41.238;s;1pkt 1fpkt", shape=hexagon, color=black];
stat311[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.218.41.238:57038, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 57038: (50%)&gt;];
}
2070--6320[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="204.218.41.238" src_port="57038"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
1113[label="136.228.65.70;d;556pkt 556fpkt", shape=diamond, color=yellow];
4443[label="167.218.12.165;s;29pkt 29fpkt", shape=diamond, color=yellow];
4609[label="72.212.208.196;s;24pkt 24fpkt", shape=diamond, color=yellow];
5024[label="202.129.178.200;s;83pkt 83fpkt", shape=diamond, color=yellow];
5043[label="136.228.65.71;d;37pkt 37fpkt", shape=diamond, color=yellow];
8436[label="72.212.208.196;s;22pkt 22fpkt", shape=hexagon, color=black];
8517[label="136.228.65.71;d;37pkt 37fpkt", shape=hexagon, color=black];
10039[label="73.253.32.42;46pkt 46fpkt", shape=pentagon, color=darkviolet];
12008[label="167.218.12.165;28pkt 28fpkt", shape=pentagon, color=darkviolet];
12488[label="72.212.208.196;24pkt 24fpkt", shape=pentagon, color=darkviolet];
13644[label="73.253.32.42;46pkt 46fpkt", shape=invtriangle, color=brown];
14636[label="167.218.12.165;29pkt 29fpkt", shape=invtriangle, color=brown];
16124[label="72.212.208.196;20pkt 20fpkt", shape=invhouse, color=bisque];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.65.70:80}[92.6544%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8471%)&lt;BR/&gt; 49677: (0.30581%)&lt;BR/&gt; 49675: (0.30581%)&lt;BR/&gt; 49674: (0.30581%)&lt;BR/&gt; 49666: (0.254842%)&gt;];
}
1113--1469[label="0.692308;9pkt 9fpkt"];
1113--2475[label="0.57;114pkt 114fpkt"];
1113--2488[label="0.461538;6pkt 6fpkt"];
1113--2714[label="0.00179856;1pkt 1fpkt"];
1113--3003[label="0.273684;26pkt 26fpkt"];
1113--3614[label="0.724138;63pkt 63fpkt"];
1113--3620[label="1;28pkt 28fpkt"];
1113--3966[label="0.00724638;1pkt 1fpkt"];
1113--3968[label="0.417722;33pkt 33fpkt"];
1113--3969[label="0.00724638;1pkt 1fpkt"];
1113--4050[label="0.4;4pkt 4fpkt"];
1113--4443[label="1;29pkt 29fpkt"];
1113--4609[label="0.625;15pkt 15fpkt"];
1113--5024[label="1;83pkt 83fpkt"];
1113--6358[label="0.692308;9pkt 9fpkt"];
1113--6726[label="0.338235;23pkt 23fpkt"];
1113--7345[label="0.00724638;1pkt 1fpkt"];
1113--7348[label="0.277778;10pkt 10fpkt"];
1113--7373[label="0.724138;63pkt 63fpkt"];
1113--7642[label="1;28pkt 28fpkt"];
1113--7656[label="0.4;4pkt 4fpkt"];
1113--7757[label="1;481pkt 481fpkt"];
1113--8436[label="0.681818;15pkt 15fpkt"];
1113--8568[label="0.00179856;1pkt 1fpkt"];
1113--9031[label="0.338235;23pkt 23fpkt"];
1113--9929[label="0.888889;16pkt 16fpkt"];
1113--10039[label="1;46pkt 46fpkt"];
1113--10265[label="0.00729927;1pkt 1fpkt"];
1113--10609[label="0.333333;3pkt 3fpkt"];
1113--10644[label="0.692308;9pkt 9fpkt"];
1113--11409[label="0.265957;25pkt 25fpkt"];
1113--11493[label="0.75;3pkt 3fpkt"];
1113--11544[label="0.00724638;1pkt 1fpkt"];
1113--11667[label="0.567164;114pkt 114fpkt"];
1113--11957[label="1;28pkt 28fpkt"];
1113--12008[label="1;28pkt 28fpkt"];
1113--12163[label="0.294118;10pkt 10fpkt"];
1113--12396[label="0.72093;62pkt 62fpkt"];
1113--12488[label="0.625;15pkt 15fpkt"];
1113--13170[label="0.875;21pkt 21fpkt"];
1113--13644[label="1;46pkt 46fpkt"];
1113--13761[label="0.00724638;1pkt 1fpkt"];
1113--14406[label="0.00729927;1pkt 1fpkt"];
1113--14636[label="1;29pkt 29fpkt"];
1113--14717[label="0.272727;9pkt 9fpkt"];
1113--15238[label="0.875;21pkt 21fpkt"];
1113--15857[label="0.00729927;1pkt 1fpkt"];
1113--15974[label="1;27pkt 27fpkt"];
1113--16124[label="0.55;11pkt 11fpkt"];
1113--16314[label="0.875;21pkt 21fpkt"];
4443--7757[label="1;29pkt 29fpkt"];
4443--12008[label="1;28pkt 28fpkt"];
4443--14636[label="1;29pkt 29fpkt"];
4609--5043[label="0.125;3pkt 3fpkt"];
4609--7757[label="0.625;15pkt 15fpkt"];
4609--8311[label="0.166667;4pkt 4fpkt"];
4609--8436[label="1;22pkt 22fpkt"];
4609--8517[label="0.125;3pkt 3fpkt"];
4609--12488[label="1;24pkt 24fpkt"];
4609--16124[label="1;20pkt 20fpkt"];
5024--7757[label="1;83pkt 83fpkt"];
5043--6726[label="0.324324;12pkt 12fpkt"];
5043--8436[label="0.136364;3pkt 3fpkt"];
5043--8517[label="1;37pkt 37fpkt"];
5043--9031[label="0.324324;12pkt 12fpkt"];
5043--9929[label="0.111111;2pkt 2fpkt"];
5043--11409[label="0.702703;26pkt 26fpkt"];
5043--12488[label="0.125;3pkt 3fpkt"];
5043--16124[label="0.15;3pkt 3fpkt"];
8436--8517[label="0.136364;3pkt 3fpkt"];
8436--12488[label="1;22pkt 22fpkt"];
8436--16124[label="0.9;18pkt 18fpkt"];
8517--9031[label="0.324324;12pkt 12fpkt"];
8517--9929[label="0.111111;2pkt 2fpkt"];
8517--11409[label="0.702703;26pkt 26fpkt"];
8517--12488[label="0.125;3pkt 3fpkt"];
8517--16124[label="0.15;3pkt 3fpkt"];
10039--13644[label="1;46pkt 46fpkt"];
12008--14636[label="1;28pkt 28fpkt"];
12488--16124[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.65.70" dst_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
1482[label="219.216.145.180;s;82pkt 82fpkt", shape=diamond, color=yellow];
6362[label="219.216.145.180;s;82pkt 82fpkt", shape=hexagon, color=black];
12262[label="219.216.145.180;90pkt 90fpkt", shape=pentagon, color=darkviolet];
14765[label="219.216.145.180;90pkt 90fpkt", shape=invtriangle, color=brown];
16055[label="219.216.145.180;89pkt 89fpkt", shape=invhouse, color=bisque];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.216.145.180:80, 136.228.71.181:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60917: (0.577367%)&lt;BR/&gt; 60781: (0.577367%)&lt;BR/&gt; 60760: (0.577367%)&lt;BR/&gt; 60734: (0.577367%)&gt;];
}
1482--6362[label="1;82pkt 82fpkt"];
1482--9163[label="0.097561;8pkt 8fpkt"];
1482--9194[label="0.0853659;7pkt 7fpkt"];
1482--9198[label="0.0243902;2pkt 2fpkt"];
1482--9234[label="0.0853659;7pkt 7fpkt"];
1482--9268[label="0.0853659;7pkt 7fpkt"];
1482--12262[label="1;82pkt 82fpkt"];
1482--14765[label="1;82pkt 82fpkt"];
1482--16055[label="0.987805;81pkt 81fpkt"];
6362--9163[label="0.097561;8pkt 8fpkt"];
6362--9194[label="0.0853659;7pkt 7fpkt"];
6362--9198[label="0.0243902;2pkt 2fpkt"];
6362--9234[label="0.0853659;7pkt 7fpkt"];
6362--9268[label="0.0853659;7pkt 7fpkt"];
6362--12262[label="1;82pkt 82fpkt"];
6362--14765[label="1;82pkt 82fpkt"];
6362--16055[label="0.987805;81pkt 81fpkt"];
12262--14765[label="1;90pkt 90fpkt"];
12262--16055[label="1;89pkt 89fpkt"];
14765--16055[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.71.181" src_ip="219.216.145.180" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
1488[label="212.21.136.204;s;156pkt 156fpkt", shape=diamond, color=yellow];
2349[label="212.140.104.61;d;14pkt 14fpkt", shape=diamond, color=yellow];
4735[label="20.184.164.166;d;132pkt 132fpkt", shape=diamond, color=yellow];
6366[label="212.21.136.204;s;90pkt 90fpkt", shape=hexagon, color=black];
8337[label="212.140.104.61;d;12pkt 12fpkt", shape=hexagon, color=black];
12605[label="212.21.136.204;168pkt 168fpkt", shape=pentagon, color=darkviolet];
14942[label="212.21.136.204;169pkt 169fpkt", shape=invtriangle, color=brown];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.204:80, 20.184.164.166:*}[84.0237%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54021: (0.404858%)&lt;BR/&gt; 54020: (0.404858%)&lt;BR/&gt; 54019: (0.404858%)&lt;BR/&gt; 54018: (0.404858%)&gt;];
}
1488--2349[label="1;14pkt 14fpkt"];
1488--4735[label="1;132pkt 132fpkt"];
1488--6366[label="1;90pkt 90fpkt"];
1488--8337[label="1;12pkt 12fpkt"];
1488--9163[label="0.0641026;10pkt 10fpkt"];
1488--9194[label="0.0576923;9pkt 9fpkt"];
1488--9198[label="0.0448718;7pkt 7fpkt"];
1488--9234[label="0.0576923;9pkt 9fpkt"];
1488--9268[label="0.0576923;9pkt 9fpkt"];
1488--12605[label="0.99359;155pkt 155fpkt"];
1488--14942[label="1;156pkt 156fpkt"];
2349--6366[label="0.571429;8pkt 8fpkt"];
2349--8337[label="1;12pkt 12fpkt"];
2349--9163[label="0.0714286;1pkt 1fpkt"];
2349--9198[label="0.0714286;1pkt 1fpkt"];
2349--12605[label="1;14pkt 14fpkt"];
2349--14942[label="1;14pkt 14fpkt"];
4735--6366[label="0.877778;79pkt 79fpkt"];
4735--9163[label="0.0681818;9pkt 9fpkt"];
4735--9194[label="0.0681818;9pkt 9fpkt"];
4735--9198[label="0.0454545;6pkt 6fpkt"];
4735--9234[label="0.0681818;9pkt 9fpkt"];
4735--9268[label="0.0681818;9pkt 9fpkt"];
4735--12605[label="0.992424;131pkt 131fpkt"];
4735--14942[label="1;132pkt 132fpkt"];
6366--8337[label="0.666667;8pkt 8fpkt"];
6366--9163[label="0.111111;10pkt 10fpkt"];
6366--9194[label="0.1;9pkt 9fpkt"];
6366--9234[label="0.1;9pkt 9fpkt"];
6366--9268[label="0.1;9pkt 9fpkt"];
6366--12605[label="0.988889;89pkt 89fpkt"];
6366--14942[label="1;90pkt 90fpkt"];
8337--9163[label="0.0833333;1pkt 1fpkt"];
8337--12605[label="1;12pkt 12fpkt"];
8337--14942[label="1;12pkt 12fpkt"];
12605--14942[label="1;168pkt 168fpkt"];
</description>
    <slice>
      <filter dst_ip="20.184.164.166" src_ip="212.21.136.204" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
1647[label="70.21.31.183;s;83pkt 83fpkt", shape=diamond, color=yellow];
6406[label="70.21.31.183;s;83pkt 83fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.21.31.183:80, 160.49.198.239:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37751: (0.60241%)&lt;BR/&gt; 37747: (0.60241%)&lt;BR/&gt; 37745: (0.60241%)&lt;BR/&gt; 37743: (0.60241%)&gt;];
}
1647--6406[label="1;83pkt 83fpkt"];
1647--9163[label="0.698795;58pkt 58fpkt"];
1647--9194[label="0.0120482;1pkt 1fpkt"];
1647--9234[label="0.0120482;1pkt 1fpkt"];
1647--9268[label="0.0120482;1pkt 1fpkt"];
6406--9163[label="0.698795;58pkt 58fpkt"];
6406--9194[label="0.0120482;1pkt 1fpkt"];
6406--9234[label="0.0120482;1pkt 1fpkt"];
6406--9268[label="0.0120482;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.198.239" src_ip="70.21.31.183" src_port="80"/>
    </slice>
    <from sec="1223614830" usec="0"/>
    <to sec="1223615381" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
2391[label="162.73.99.153;d;7pkt 7fpkt", shape=diamond, color=yellow];
6423[label="162.73.99.153;d;7pkt 7fpkt", shape=hexagon, color=black];
8846[label="162.73.99.153;d;7pkt 7fpkt", shape=polygon, color=gold];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.134:80, 162.73.99.153:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49214: (7.14286%)&lt;BR/&gt; 49213: (7.14286%)&lt;BR/&gt; 49212: (7.14286%)&lt;BR/&gt; 49206: (7.14286%)&gt;];
}
2391--2443[label="1;7pkt 7fpkt"];
2391--6423[label="1;7pkt 7fpkt"];
2391--8846[label="1;7pkt 7fpkt"];
6423--8846[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.99.153" src_ip="212.138.109.134" src_port="80"/>
    </slice>
    <from sec="1223614861" usec="0"/>
    <to sec="1223614958" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_319{
style=filled;
color=gray75;
2449[label="195.197.156.167;s;9pkt 9fpkt", shape=diamond, color=yellow];
6436[label="195.197.156.167;s;9pkt 9fpkt", shape=hexagon, color=black];
12057[label="195.197.156.167;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat319[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.197.156.167:80, 142.243.184.116:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3274: (5.76923%)&lt;BR/&gt; 3270: (5.76923%)&lt;BR/&gt; 3266: (5.76923%)&lt;BR/&gt; 3264: (5.76923%)&gt;];
}
2449--6436[label="1;9pkt 9fpkt"];
2449--12057[label="1;8pkt 8fpkt"];
6436--12057[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.184.116" src_ip="195.197.156.167" src_port="80"/>
    </slice>
    <from sec="1223614902" usec="0"/>
    <to sec="1223614959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_320{
style=filled;
color=gray75;
2460[label="195.2.104.91;s;9pkt 9fpkt", shape=diamond, color=yellow];
6438[label="195.2.104.91;s;10pkt 10fpkt", shape=hexagon, color=black];
stat320[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.2.104.91:80, 136.228.44.228:*}[60%]&lt;BR/&gt;{195.2.104.91:80, 142.243.85.101:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51074: (5.26316%)&lt;BR/&gt; 51073: (5.26316%)&lt;BR/&gt; 51067: (5.26316%)&lt;BR/&gt; 51066: (5.26316%)&gt;];
}
2460--6438[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.228" src_ip="195.2.104.91" src_port="80"/>
      <filter dst_ip="142.243.85.101" src_ip="195.2.104.91" src_port="80"/>
    </slice>
    <from sec="1223614907" usec="0"/>
    <to sec="1223615054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
2296[label="136.228.122.36;s;18pkt 18fpkt", shape=diamond, color=yellow];
2468[label="193.52.176.64;d;2pkt 2fpkt", shape=diamond, color=yellow];
6439[label="193.52.176.64;d;2pkt 2fpkt", shape=hexagon, color=black];
9919[label="136.228.122.36;34pkt 34fpkt", shape=pentagon, color=darkviolet];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.122.36:995, *:*}[97.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (48.2143%)&lt;BR/&gt; 48202: (3.57143%)&lt;BR/&gt; 48201: (3.57143%)&lt;BR/&gt; 64173: (1.78571%)&lt;BR/&gt; 64170: (1.78571%)&gt;];
}
2296--2468[label="1;2pkt 2fpkt"];
2296--6439[label="1;2pkt 2fpkt"];
2296--9919[label="1;18pkt 18fpkt"];
2468--6439[label="1;2pkt 2fpkt"];
2468--9919[label="1;2pkt 2fpkt"];
6439--9919[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.122.36" src_port="995"/>
    </slice>
    <from sec="1223614815" usec="0"/>
    <to sec="1223615690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_322{
style=filled;
color=gray75;
2472[label="20.144.179.211;s;33pkt 33fpkt", shape=diamond, color=yellow];
6440[label="20.144.179.211;s;33pkt 33fpkt", shape=hexagon, color=black];
stat322[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.144.179.211:80, 213.33.63.13:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48930: (1.51515%)&lt;BR/&gt; 48900: (1.51515%)&lt;BR/&gt; 48873: (1.51515%)&lt;BR/&gt; 48644: (1.51515%)&gt;];
}
2472--6440[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" src_ip="20.144.179.211" src_port="80"/>
    </slice>
    <from sec="1223614914" usec="0"/>
    <to sec="1223615003" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,053,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
1374[label="136.228.117.4;d;627pkt 627fpkt", shape=diamond, color=yellow];
2126[label="200.122.155.91;s;404pkt 404fpkt", shape=diamond, color=yellow];
2511[label="78.154.226.139;s;105pkt 105fpkt", shape=diamond, color=yellow];
6075[label="136.228.117.4;d;564pkt 564fpkt", shape=hexagon, color=black];
6331[label="200.122.155.91;s;356pkt 356fpkt", shape=hexagon, color=black];
6450[label="78.154.226.139;s;105pkt 105fpkt", shape=hexagon, color=black];
10870[label="18.112.27.91;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10876[label="200.122.155.91;444pkt 444fpkt", shape=pentagon, color=darkviolet];
11254[label="194.157.149.115;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11324[label="195.10.33.121;30pkt 30fpkt", shape=pentagon, color=darkviolet];
11559[label="195.179.197.136;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11615[label="78.154.226.139;104pkt 104fpkt", shape=pentagon, color=darkviolet];
14062[label="18.112.27.91;9pkt 9fpkt", shape=invtriangle, color=brown];
15685[label="18.112.27.91;8pkt 8fpkt", shape=invhouse, color=bisque];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.122.155.91:80, 136.228.117.4:*}[65.5376%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3075: (0.0901226%)&lt;BR/&gt; 3074: (0.0901226%)&lt;BR/&gt; 3073: (0.0901226%)&lt;BR/&gt; 3072: (0.0901226%)&gt;];
}
1374--2126[label="1;404pkt 404fpkt"];
1374--2511[label="1;105pkt 105fpkt"];
1374--6075[label="1;564pkt 564fpkt"];
1374--6331[label="1;356pkt 356fpkt"];
1374--6450[label="1;105pkt 105fpkt"];
1374--9163[label="0.0334928;21pkt 21fpkt"];
1374--9194[label="0.0845295;53pkt 53fpkt"];
1374--9198[label="0.0861244;54pkt 54fpkt"];
1374--9234[label="0.0845295;53pkt 53fpkt"];
1374--9268[label="0.0845295;53pkt 53fpkt"];
1374--9549[label="0.142857;3pkt 3fpkt"];
1374--9691[label="0.0714286;4pkt 4fpkt"];
1374--10051[label="0.222222;4pkt 4fpkt"];
1374--10350[label="0.214286;6pkt 6fpkt"];
1374--10870[label="0.222222;2pkt 2fpkt"];
1374--10876[label="0.907658;403pkt 403fpkt"];
1374--11254[label="0.5;2pkt 2fpkt"];
1374--11324[label="0.933333;28pkt 28fpkt"];
1374--11559[label="1;5pkt 5fpkt"];
1374--11615[label="1;104pkt 104fpkt"];
1374--13454[label="0.0727273;4pkt 4fpkt"];
1374--14062[label="0.222222;2pkt 2fpkt"];
1374--14415[label="0.833333;5pkt 5fpkt"];
1374--15381[label="0.0727273;4pkt 4fpkt"];
1374--15685[label="0.25;2pkt 2fpkt"];
1374--15861[label="0.833333;5pkt 5fpkt"];
2126--6075[label="0.881188;356pkt 356fpkt"];
2126--6331[label="1;356pkt 356fpkt"];
2126--9163[label="0.00990099;4pkt 4fpkt"];
2126--9194[label="0.111386;45pkt 45fpkt"];
2126--9198[label="0.116337;47pkt 47fpkt"];
2126--9234[label="0.111386;45pkt 45fpkt"];
2126--9268[label="0.111386;45pkt 45fpkt"];
2126--10876[label="0.997525;403pkt 403fpkt"];
2511--6075[label="1;105pkt 105fpkt"];
2511--6450[label="1;105pkt 105fpkt"];
2511--11615[label="1;104pkt 104fpkt"];
6075--6331[label="1;356pkt 356fpkt"];
6075--6450[label="1;105pkt 105fpkt"];
6075--9163[label="0.037234;21pkt 21fpkt"];
6075--9194[label="0.0939716;53pkt 53fpkt"];
6075--9198[label="0.0602837;34pkt 34fpkt"];
6075--9234[label="0.0939716;53pkt 53fpkt"];
6075--9268[label="0.0939716;53pkt 53fpkt"];
6075--9549[label="0.142857;3pkt 3fpkt"];
6075--9691[label="0.0714286;4pkt 4fpkt"];
6075--10051[label="0.222222;4pkt 4fpkt"];
6075--10350[label="0.214286;6pkt 6fpkt"];
6075--10870[label="0.222222;2pkt 2fpkt"];
6075--10876[label="0.79955;355pkt 355fpkt"];
6075--11324[label="0.8;24pkt 24fpkt"];
6075--11559[label="1;5pkt 5fpkt"];
6075--11615[label="1;104pkt 104fpkt"];
6075--13454[label="0.0727273;4pkt 4fpkt"];
6075--14062[label="0.222222;2pkt 2fpkt"];
6075--14415[label="0.833333;5pkt 5fpkt"];
6075--15381[label="0.0727273;4pkt 4fpkt"];
6075--15685[label="0.25;2pkt 2fpkt"];
6075--15861[label="0.833333;5pkt 5fpkt"];
6331--9163[label="0.011236;4pkt 4fpkt"];
6331--9194[label="0.126404;45pkt 45fpkt"];
6331--9198[label="0.0870787;31pkt 31fpkt"];
6331--9234[label="0.126404;45pkt 45fpkt"];
6331--9268[label="0.126404;45pkt 45fpkt"];
6331--10876[label="0.997191;355pkt 355fpkt"];
6450--11615[label="1;104pkt 104fpkt"];
10870--14062[label="1;9pkt 9fpkt"];
10870--15685[label="1;8pkt 8fpkt"];
11559--14415[label="1;5pkt 5fpkt"];
11559--15861[label="1;5pkt 5fpkt"];
14062--15685[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.117.4" src_ip="200.122.155.91" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
2540[label="104.243.252.48;s;1pkt 1fpkt", shape=diamond, color=yellow];
6453[label="104.243.252.48;s;1pkt 1fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.252.48:80, 142.243.50.21:56887}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56887: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2540--6453[label="1;1pkt 1fpkt"];
2540--6600[label="1;1pkt 1fpkt"];
6453--6600[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.50.21" dst_port="56887" src_ip="104.243.252.48" src_port="80"/>
    </slice>
    <from sec="1223614955" usec="0"/>
    <to sec="1223614989" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_325{
style=filled;
color=gray75;
36[label="40.10.141.33s;4pkt 4fpkt", shape=rectangle, color=red];
672[label="162.73.189.36;s;92pkt 92fpkt", shape=diamond, color=yellow];
847[label="21.113.7.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
1193[label="21.78.18.129;d;2pkt 2fpkt", shape=diamond, color=yellow];
1208[label="204.182.170.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
1241[label="78.89.45.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
1499[label="205.124.48.198;d;2pkt 2fpkt", shape=diamond, color=yellow];
1792[label="70.52.207.117;d;3pkt 3fpkt", shape=diamond, color=yellow];
1868[label="19.186.105.213;d;2pkt 2fpkt", shape=diamond, color=yellow];
2028[label="212.21.133.33;s;379pkt 379fpkt", shape=diamond, color=yellow];
2085[label="202.71.22.31;d;1pkt 1fpkt", shape=diamond, color=yellow];
2346[label="77.110.121.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
2913[label="68.219.99.60;d;1pkt 1fpkt", shape=diamond, color=yellow];
2927[label="20.119.5.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
3197[label="68.218.110.196;d;3pkt 3fpkt", shape=diamond, color=yellow];
3396[label="200.236.16.139;d;2pkt 2fpkt", shape=diamond, color=yellow];
3406[label="19.165.87.70;d;2pkt 2fpkt", shape=diamond, color=yellow];
3816[label="204.217.129.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
3951[label="76.116.138.190;d;2pkt 2fpkt", shape=diamond, color=yellow];
6034[label="21.78.18.129;d;1pkt 1fpkt", shape=hexagon, color=black];
6475[label="162.73.189.36;s;92pkt 92fpkt", shape=hexagon, color=black];
6585[label="202.71.22.31;d;1pkt 1fpkt", shape=hexagon, color=black];
6635[label="205.124.48.198;d;2pkt 2fpkt", shape=hexagon, color=black];
6793[label="21.113.7.76;d;1pkt 1fpkt", shape=hexagon, color=black];
6814[label="19.186.105.213;d;2pkt 2fpkt", shape=hexagon, color=black];
6853[label="78.89.45.31;d;1pkt 1fpkt", shape=hexagon, color=black];
6859[label="68.218.110.196;d;3pkt 3fpkt", shape=hexagon, color=black];
6994[label="68.219.99.60;d;1pkt 1fpkt", shape=hexagon, color=black];
7286[label="200.236.16.139;d;2pkt 2fpkt", shape=hexagon, color=black];
7337[label="76.116.138.190;d;2pkt 2fpkt", shape=hexagon, color=black];
7538[label="204.217.129.52;d;1pkt 1fpkt", shape=hexagon, color=black];
8179[label="204.182.170.53;d;2pkt 2fpkt", shape=hexagon, color=black];
9923[label="162.73.189.36;92pkt 92fpkt", shape=pentagon, color=darkviolet];
13577[label="162.73.189.36;91pkt 91fpkt", shape=invtriangle, color=brown];
stat325[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.133.33:25, *:*}[41.2262%]&lt;BR/&gt;{212.21.133.33:*, *:113}[37.2093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (12.3116%)&lt;BR/&gt; 113: (11.0553%)&lt;BR/&gt; 46906: (9.04523%)&lt;BR/&gt; 8080: (3.51759%)&lt;BR/&gt; 4129: (3.26633%)&gt;];
}
36--672[label="0.25;1pkt 1fpkt"];
36--1241[label="1;1pkt 1fpkt"];
36--2028[label="0.25;1pkt 1fpkt"];
36--3997[label="0.5;2pkt 2fpkt"];
36--4337[label="0.5;2pkt 2fpkt"];
36--6475[label="0.25;1pkt 1fpkt"];
36--6853[label="1;1pkt 1fpkt"];
36--8332[label="0.5;2pkt 2fpkt"];
36--8707[label="0.5;2pkt 2fpkt"];
36--9923[label="0.25;1pkt 1fpkt"];
36--13577[label="0.25;1pkt 1fpkt"];
672--847[label="1;1pkt 1fpkt"];
672--1193[label="1;2pkt 2fpkt"];
672--1208[label="1;2pkt 2fpkt"];
672--1241[label="1;1pkt 1fpkt"];
672--1499[label="1;2pkt 2fpkt"];
672--1792[label="1;3pkt 3fpkt"];
672--1868[label="1;2pkt 2fpkt"];
672--2085[label="1;1pkt 1fpkt"];
672--2346[label="1;1pkt 1fpkt"];
672--2913[label="1;1pkt 1fpkt"];
672--2927[label="1;1pkt 1fpkt"];
672--3197[label="1;3pkt 3fpkt"];
672--3396[label="1;2pkt 2fpkt"];
672--3406[label="1;2pkt 2fpkt"];
672--3816[label="1;1pkt 1fpkt"];
672--3951[label="1;2pkt 2fpkt"];
672--6034[label="1;1pkt 1fpkt"];
672--6475[label="1;92pkt 92fpkt"];
672--6585[label="1;1pkt 1fpkt"];
672--6635[label="1;2pkt 2fpkt"];
672--6793[label="1;1pkt 1fpkt"];
672--6814[label="1;2pkt 2fpkt"];
672--6853[label="1;1pkt 1fpkt"];
672--6859[label="1;3pkt 3fpkt"];
672--6994[label="1;1pkt 1fpkt"];
672--7286[label="1;2pkt 2fpkt"];
672--7337[label="1;2pkt 2fpkt"];
672--7538[label="1;1pkt 1fpkt"];
672--8179[label="1;2pkt 2fpkt"];
672--9923[label="1;92pkt 92fpkt"];
672--13577[label="1;91pkt 91fpkt"];
847--6475[label="1;1pkt 1fpkt"];
847--6793[label="1;1pkt 1fpkt"];
847--9923[label="1;1pkt 1fpkt"];
847--13577[label="1;1pkt 1fpkt"];
1193--6034[label="1;1pkt 1fpkt"];
1193--6475[label="1;2pkt 2fpkt"];
1193--9923[label="1;2pkt 2fpkt"];
1193--13577[label="1;2pkt 2fpkt"];
1208--6475[label="1;2pkt 2fpkt"];
1208--8179[label="1;2pkt 2fpkt"];
1208--9923[label="1;2pkt 2fpkt"];
1208--13577[label="1;2pkt 2fpkt"];
1241--6475[label="1;1pkt 1fpkt"];
1241--6853[label="1;1pkt 1fpkt"];
1241--9923[label="1;1pkt 1fpkt"];
1241--13577[label="1;1pkt 1fpkt"];
1499--6475[label="1;2pkt 2fpkt"];
1499--6635[label="1;2pkt 2fpkt"];
1499--9923[label="1;2pkt 2fpkt"];
1499--13577[label="1;2pkt 2fpkt"];
1792--6475[label="1;3pkt 3fpkt"];
1792--9923[label="1;3pkt 3fpkt"];
1792--13577[label="1;3pkt 3fpkt"];
1868--6475[label="1;2pkt 2fpkt"];
1868--6814[label="1;2pkt 2fpkt"];
1868--9923[label="1;2pkt 2fpkt"];
1868--13577[label="1;2pkt 2fpkt"];
2028--3662[label="0.00263852;1pkt 1fpkt"];
2028--4159[label="0.00263852;1pkt 1fpkt"];
2028--4171[label="0.00263852;1pkt 1fpkt"];
2028--5944[label="0.00791557;3pkt 3fpkt"];
2028--9196[label="0.0184697;7pkt 7fpkt"];
2085--6475[label="1;1pkt 1fpkt"];
2085--6585[label="1;1pkt 1fpkt"];
2085--9923[label="1;1pkt 1fpkt"];
2085--13577[label="1;1pkt 1fpkt"];
2346--6475[label="1;1pkt 1fpkt"];
2346--9923[label="1;1pkt 1fpkt"];
2346--13577[label="1;1pkt 1fpkt"];
2913--6475[label="1;1pkt 1fpkt"];
2913--6994[label="1;1pkt 1fpkt"];
2913--9923[label="1;1pkt 1fpkt"];
2913--13577[label="1;1pkt 1fpkt"];
2927--6475[label="1;1pkt 1fpkt"];
2927--9923[label="1;1pkt 1fpkt"];
2927--13577[label="1;1pkt 1fpkt"];
3197--6475[label="1;3pkt 3fpkt"];
3197--6859[label="1;3pkt 3fpkt"];
3197--9923[label="1;3pkt 3fpkt"];
3197--13577[label="1;3pkt 3fpkt"];
3396--6475[label="1;2pkt 2fpkt"];
3396--7286[label="1;2pkt 2fpkt"];
3396--9923[label="1;2pkt 2fpkt"];
3396--13577[label="1;2pkt 2fpkt"];
3406--6475[label="1;2pkt 2fpkt"];
3406--9923[label="1;2pkt 2fpkt"];
3406--13577[label="1;2pkt 2fpkt"];
3816--6475[label="1;1pkt 1fpkt"];
3816--7538[label="1;1pkt 1fpkt"];
3816--9923[label="1;1pkt 1fpkt"];
3951--6475[label="1;2pkt 2fpkt"];
3951--7337[label="1;2pkt 2fpkt"];
3951--9923[label="1;2pkt 2fpkt"];
3951--13577[label="1;2pkt 2fpkt"];
6034--6475[label="1;1pkt 1fpkt"];
6034--9923[label="1;1pkt 1fpkt"];
6034--13577[label="1;1pkt 1fpkt"];
6475--6585[label="1;1pkt 1fpkt"];
6475--6635[label="1;2pkt 2fpkt"];
6475--6793[label="1;1pkt 1fpkt"];
6475--6814[label="1;2pkt 2fpkt"];
6475--6853[label="1;1pkt 1fpkt"];
6475--6859[label="1;3pkt 3fpkt"];
6475--6994[label="1;1pkt 1fpkt"];
6475--7286[label="1;2pkt 2fpkt"];
6475--7337[label="1;2pkt 2fpkt"];
6475--7538[label="1;1pkt 1fpkt"];
6475--8179[label="1;2pkt 2fpkt"];
6475--9923[label="1;92pkt 92fpkt"];
6475--13577[label="1;91pkt 91fpkt"];
6585--9923[label="1;1pkt 1fpkt"];
6585--13577[label="1;1pkt 1fpkt"];
6635--9923[label="1;2pkt 2fpkt"];
6635--13577[label="1;2pkt 2fpkt"];
6793--9923[label="1;1pkt 1fpkt"];
6793--13577[label="1;1pkt 1fpkt"];
6814--9923[label="1;2pkt 2fpkt"];
6814--13577[label="1;2pkt 2fpkt"];
6853--9923[label="1;1pkt 1fpkt"];
6853--13577[label="1;1pkt 1fpkt"];
6859--9923[label="1;3pkt 3fpkt"];
6859--13577[label="1;3pkt 3fpkt"];
6994--9923[label="1;1pkt 1fpkt"];
6994--13577[label="1;1pkt 1fpkt"];
7286--9923[label="1;2pkt 2fpkt"];
7286--13577[label="1;2pkt 2fpkt"];
7337--9923[label="1;2pkt 2fpkt"];
7337--13577[label="1;2pkt 2fpkt"];
7538--9923[label="1;1pkt 1fpkt"];
8179--9923[label="1;2pkt 2fpkt"];
8179--13577[label="1;2pkt 2fpkt"];
9923--13577[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter src_ip="212.21.133.33" src_port="25"/>
      <filter dst_port="113" src_ip="212.21.133.33"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
754[label="131.250.142.63;s;2pkt 2fpkt", shape=diamond, color=yellow];
6483[label="131.250.142.63;s;1pkt 1fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.250.142.63:60136, 212.21.136.200:1028}[50%]&lt;BR/&gt;{131.250.142.63:60136, 212.21.136.200:4359}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60136: (50%)&lt;BR/&gt; 4359: (33.3333%)&lt;BR/&gt; 1028: (16.6667%)&gt;];
}
754--6483[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.200" dst_port="4359" src_ip="131.250.142.63" src_port="60136"/>
      <filter dst_ip="212.21.136.200" dst_port="1028" src_ip="131.250.142.63" src_port="60136"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
1844[label="192.75.87.225;d;16pkt 16fpkt", shape=diamond, color=yellow];
6505[label="192.75.87.225;d;6pkt 6fpkt", shape=hexagon, color=black];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.188.65:*, 192.75.87.225:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3209: (4.54545%)&lt;BR/&gt; 1094: (4.54545%)&lt;BR/&gt; 1085: (4.54545%)&lt;BR/&gt; 1078: (4.54545%)&gt;];
}
1844--6505[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="192.75.87.225" dst_port="80" src_ip="162.73.188.65"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
946[label="142.47.172.2;s;307pkt 307fpkt", shape=diamond, color=yellow];
6236[label="142.47.172.2;s;233pkt 233fpkt", shape=hexagon, color=black];
6507[label="71.167.187.114;d;2pkt 2fpkt", shape=hexagon, color=black];
9334[label="142.47.172.2;320pkt 320fpkt", shape=pentagon, color=darkviolet];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.47.172.2:0, *:0}[99.0654%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.3039%)&lt;BR/&gt; 51276: (0.348028%)&lt;BR/&gt; 53: (0.348028%)&gt;];
}
946--1853[label="0.5;1pkt 1fpkt"];
946--4009[label="0.0107527;1pkt 1fpkt"];
946--4159[label="0.00325733;1pkt 1fpkt"];
946--4164[label="0.00325733;1pkt 1fpkt"];
946--4171[label="0.00325733;1pkt 1fpkt"];
946--5070[label="0.00325733;1pkt 1fpkt"];
946--5074[label="0.00371747;1pkt 1fpkt"];
946--5094[label="0.00371747;1pkt 1fpkt"];
946--5500[label="0.00431034;1pkt 1fpkt"];
946--6236[label="1;233pkt 233fpkt"];
946--6507[label="0.5;1pkt 1fpkt"];
946--7441[label="0.00325733;1pkt 1fpkt"];
946--8382[label="0.0107527;1pkt 1fpkt"];
946--8564[label="0.00371747;1pkt 1fpkt"];
946--9334[label="1;307pkt 307fpkt"];
6236--6507[label="0.5;1pkt 1fpkt"];
6236--7441[label="0.00429185;1pkt 1fpkt"];
6236--8382[label="0.0107527;1pkt 1fpkt"];
6236--8564[label="0.00429185;1pkt 1fpkt"];
6236--9334[label="1;233pkt 233fpkt"];
6507--9311[label="0.5;1pkt 1fpkt"];
6507--9334[label="0.5;1pkt 1fpkt"];
6507--13259[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="142.47.172.2"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
380[label="142.243.77.23s;1pkt 1fpkt", shape=rectangle, color=red];
964[label="142.243.77.23;s;21pkt 21fpkt", shape=diamond, color=yellow];
1246[label="70.106.143.41;d;5pkt 5fpkt", shape=diamond, color=yellow];
3027[label="76.96.137.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
3555[label="68.136.241.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
4051[label="200.226.16.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
4455[label="78.74.105.1;d;1pkt 1fpkt", shape=diamond, color=yellow];
6509[label="142.243.77.23;s;20pkt 20fpkt", shape=hexagon, color=black];
7035[label="76.96.137.170;d;1pkt 1fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.77.23:*, 202.70.162.10:80}[33.3333%]&lt;BR/&gt;{142.243.77.23:8080, 70.106.143.41:*}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (37.5%)&lt;BR/&gt; 80: (14.4231%)&lt;BR/&gt; 1550: (3.84615%)&lt;BR/&gt; 1358: (3.84615%)&lt;BR/&gt; 64999: (2.88462%)&gt;];
}
380--964[label="1;1pkt 1fpkt"];
380--1246[label="1;1pkt 1fpkt"];
380--6509[label="1;1pkt 1fpkt"];
964--1246[label="1;5pkt 5fpkt"];
964--3027[label="1;1pkt 1fpkt"];
964--3555[label="1;1pkt 1fpkt"];
964--4051[label="1;1pkt 1fpkt"];
964--4455[label="1;1pkt 1fpkt"];
964--6509[label="1;20pkt 20fpkt"];
964--7035[label="1;1pkt 1fpkt"];
1246--6509[label="1;5pkt 5fpkt"];
3027--6509[label="1;1pkt 1fpkt"];
3027--7035[label="1;1pkt 1fpkt"];
3555--6509[label="1;1pkt 1fpkt"];
4051--6509[label="1;1pkt 1fpkt"];
4455--6509[label="1;1pkt 1fpkt"];
6509--7035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.70.162.10" dst_port="80" src_ip="142.243.77.23"/>
      <filter dst_ip="70.106.143.41" src_ip="142.243.77.23" src_port="8080"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
2620[label="18.75.157.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
6515[label="18.75.157.70;s;1pkt 1fpkt", shape=hexagon, color=black];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.75.157.70:1046, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1046: (50%)&gt;];
}
2620--6515[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="18.75.157.70" src_port="1046"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
1030[label="102.195.244.40;s;6584pkt 6584fpkt", shape=diamond, color=yellow];
6521[label="102.195.244.40;s;5144pkt 5144fpkt", shape=hexagon, color=black];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{102.195.244.40:*, *:135}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (50%)&lt;BR/&gt; 65385: (0.0383697%)&lt;BR/&gt; 65185: (0.0383697%)&lt;BR/&gt; 65143: (0.0383697%)&lt;BR/&gt; 64939: (0.0383697%)&gt;];
}
1030--6521[label="1;5144pkt 5144fpkt"];
</description>
    <slice>
      <filter dst_port="135" src_ip="102.195.244.40"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.857172,2.02412,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1923[label="101.86.144.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
6541[label="101.86.144.135;s;1pkt 1fpkt", shape=hexagon, color=black];
14403[label="101.86.144.135;1pkt 1fpkt", shape=invtriangle, color=brown];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{101.86.144.135:1412, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1412: (50%)&gt;];
}
1923--6541[label="1;1pkt 1fpkt"];
1923--14403[label="1;1pkt 1fpkt"];
6541--14403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="101.86.144.135" src_port="1412"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
1954[label="87.59.182.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
6548[label="87.59.182.18;d;1pkt 1fpkt", shape=hexagon, color=black];
8882[label="87.59.182.18;d;1pkt 1fpkt", shape=polygon, color=gold];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.44.214:62191, 87.59.182.18:64832}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64832: (50%)&lt;BR/&gt; 62191: (50%)&gt;];
}
1954--6548[label="1;1pkt 1fpkt"];
1954--7423[label="1;1pkt 1fpkt"];
1954--8882[label="1;1pkt 1fpkt"];
6548--7423[label="1;1pkt 1fpkt"];
6548--8882[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="87.59.182.18" dst_port="64832" src_ip="136.228.44.214" src_port="62191"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_334{
style=filled;
color=gray75;
2001[label="209.233.153.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
2002[label="136.228.77.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
6300[label="209.233.153.210;d;1pkt 1fpkt", shape=hexagon, color=black];
6560[label="136.228.77.179;s;1pkt 1fpkt", shape=hexagon, color=black];
12250[label="136.228.77.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat334[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.77.179:8199, 209.233.153.210:8195}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8199: (50%)&lt;BR/&gt; 8195: (50%)&gt;];
}
2001--2002[label="1;1pkt 1fpkt"];
2001--6300[label="1;1pkt 1fpkt"];
2001--6560[label="1;1pkt 1fpkt"];
2001--12250[label="1;1pkt 1fpkt"];
2002--6300[label="1;1pkt 1fpkt"];
2002--6560[label="1;1pkt 1fpkt"];
2002--12250[label="1;1pkt 1fpkt"];
6300--6560[label="1;1pkt 1fpkt"];
6300--12250[label="1;1pkt 1fpkt"];
6560--12250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="209.233.153.210" dst_port="8195" src_ip="136.228.77.179" src_port="8199"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
2694[label="105.45.103.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
6569[label="105.45.103.223;s;1pkt 1fpkt", shape=hexagon, color=black];
12852[label="105.45.103.223;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15071[label="105.45.103.223;1pkt 1fpkt", shape=invtriangle, color=brown];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{105.45.103.223:62898, 162.73.188.145:1994}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62898: (50%)&lt;BR/&gt; 1994: (50%)&gt;];
}
2694--6569[label="1;1pkt 1fpkt"];
2694--6865[label="1;1pkt 1fpkt"];
2694--12852[label="1;1pkt 1fpkt"];
2694--15071[label="1;1pkt 1fpkt"];
6569--6865[label="1;1pkt 1fpkt"];
6569--12852[label="1;1pkt 1fpkt"];
6569--15071[label="1;1pkt 1fpkt"];
12852--15071[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.188.145" dst_port="1994" src_ip="105.45.103.223" src_port="62898"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
2747[label="212.138.109.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
6593[label="212.138.109.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.217:554, 136.228.23.20:3258}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3258: (50%)&lt;BR/&gt; 554: (50%)&gt;];
}
2747--6593[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.23.20" dst_port="3258" src_ip="212.138.109.217" src_port="554"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
2785[label="203.125.15.11;s;1pkt 1fpkt", shape=diamond, color=yellow];
6614[label="203.125.15.11;s;1pkt 1fpkt", shape=hexagon, color=black];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.125.15.11:2593, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2593: (50%)&gt;];
}
2785--6614[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="203.125.15.11" src_port="2593"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
2190[label="136.228.160.110;d;193pkt 193fpkt", shape=diamond, color=yellow];
10928[label="200.233.97.95;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.160.110:3730}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3730: (50%)&lt;BR/&gt; 13993: (0.515464%)&lt;BR/&gt; 13820: (0.515464%)&lt;BR/&gt; 13729: (0.515464%)&lt;BR/&gt; 13653: (0.515464%)&gt;];
}
2190--6622[label="1;102pkt 102fpkt"];
2190--10928[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.160.110" dst_port="3730"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_339{
style=filled;
color=gray75;
2839[label="79.65.187.67;s;1pkt 1fpkt", shape=diamond, color=yellow];
6631[label="79.65.187.67;s;1pkt 1fpkt", shape=hexagon, color=black];
stat339[shape=component, label=&lt;Rules:&lt;BR/&gt;{79.65.187.67:2787, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2787: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
2839--6631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="79.65.187.67" src_port="2787"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
2865[label="77.137.30.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
6644[label="77.137.30.121;s;1pkt 1fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.137.30.121:59268, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59268: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
2865--6644[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="77.137.30.121" src_port="59268"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_341{
style=filled;
color=gray75;
2419[label="216.138.201.41;d;10pkt 10fpkt", shape=diamond, color=yellow];
2420[label="142.226.173.122;s;39pkt 39fpkt", shape=diamond, color=yellow];
6698[label="142.226.173.122;s;39pkt 39fpkt", shape=hexagon, color=black];
7310[label="216.138.201.41;d;10pkt 10fpkt", shape=hexagon, color=black];
11345[label="142.226.173.122;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat341[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.173.122:*, 216.138.201.148:80}[69.2308%]&lt;BR/&gt;{142.226.173.122:*, 216.138.201.41:80}[25.641%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4883: (1.83824%)&lt;BR/&gt; 4879: (1.83824%)&lt;BR/&gt; 4861: (1.83824%)&lt;BR/&gt; 4860: (1.83824%)&gt;];
}
2419--2420[label="1;10pkt 10fpkt"];
2419--6698[label="1;10pkt 10fpkt"];
2419--7310[label="1;10pkt 10fpkt"];
2419--11345[label="0.9;9pkt 9fpkt"];
2420--6698[label="1;39pkt 39fpkt"];
2420--7310[label="1;10pkt 10fpkt"];
2420--11345[label="1;38pkt 38fpkt"];
6698--7310[label="1;10pkt 10fpkt"];
6698--11345[label="1;38pkt 38fpkt"];
7310--11345[label="0.9;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="216.138.201.148" dst_port="80" src_ip="142.226.173.122"/>
      <filter dst_ip="216.138.201.41" dst_port="80" src_ip="142.226.173.122"/>
    </slice>
    <from sec="1223614878" usec="0"/>
    <to sec="1223615137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
2445[label="98.177.64.83;d;530pkt 530fpkt", shape=diamond, color=yellow];
6710[label="98.177.64.83;d;294pkt 294fpkt", shape=hexagon, color=black];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.241.117:*, 98.177.64.83:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 50908: (0.121359%)&lt;BR/&gt; 50907: (0.121359%)&lt;BR/&gt; 50905: (0.121359%)&lt;BR/&gt; 50898: (0.121359%)&gt;];
}
2445--6710[label="1;294pkt 294fpkt"];
</description>
    <slice>
      <filter dst_ip="98.177.64.83" dst_port="25" src_ip="136.228.241.117"/>
    </slice>
    <from sec="1223615287" usec="0"/>
    <to sec="1223615526" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
2343[label="136.228.209.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
2466[label="104.243.253.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
6714[label="104.243.253.104;s;1pkt 1fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.253.104:80, 136.228.209.140:1156}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1156: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2343--2466[label="1;1pkt 1fpkt"];
2343--6714[label="1;1pkt 1fpkt"];
2466--6714[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.209.140" dst_port="1156" src_ip="104.243.253.104" src_port="80"/>
    </slice>
    <from sec="1223614833" usec="0"/>
    <to sec="1223615609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
2494[label="136.228.109.52;d;1pkt 1fpkt", shape=diamond, color=yellow];
6720[label="136.228.109.52;d;1pkt 1fpkt", shape=hexagon, color=black];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.18.85.52:80, 136.228.109.52:1886}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1886: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2494--6720[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.109.52" dst_port="1886" src_ip="221.18.85.52" src_port="80"/>
    </slice>
    <from sec="1223614930" usec="0"/>
    <to sec="1223615021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_345{
style=filled;
color=gray75;
2253[label="162.73.185.138;d;4pkt 4fpkt", shape=diamond, color=yellow];
2538[label="104.243.246.12;s;1pkt 1fpkt", shape=diamond, color=yellow];
6724[label="104.243.246.12;s;1pkt 1fpkt", shape=hexagon, color=black];
9513[label="104.243.246.12;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12409[label="192.105.77.192;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14845[label="192.105.77.192;1pkt 1fpkt", shape=invtriangle, color=brown];
16105[label="192.105.77.192;1pkt 1fpkt", shape=invhouse, color=bisque];
stat345[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.246.12:80, 162.73.185.138:3520}[25%]&lt;BR/&gt;{192.105.77.192:80, 162.73.185.138:3666}[25%]&lt;BR/&gt;{197.64.160.57:80, 162.73.185.138:3640}[25%]&lt;BR/&gt;{197.64.160.57:80, 162.73.185.138:3648}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3666: (20%)&lt;BR/&gt; 3520: (20%)&lt;BR/&gt; 3648: (5%)&lt;BR/&gt; 3640: (5%)&gt;];
}
2253--2538[label="1;1pkt 1fpkt"];
2253--6724[label="1;1pkt 1fpkt"];
2253--9513[label="1;1pkt 1fpkt"];
2253--12409[label="1;1pkt 1fpkt"];
2253--14845[label="1;1pkt 1fpkt"];
2253--16105[label="1;1pkt 1fpkt"];
2538--6724[label="1;1pkt 1fpkt"];
2538--9513[label="1;1pkt 1fpkt"];
6724--9513[label="1;1pkt 1fpkt"];
12409--14845[label="1;1pkt 1fpkt"];
12409--16105[label="1;1pkt 1fpkt"];
14845--16105[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.185.138" dst_port="3648" src_ip="197.64.160.57" src_port="80"/>
      <filter dst_ip="162.73.185.138" dst_port="3640" src_ip="197.64.160.57" src_port="80"/>
      <filter dst_ip="162.73.185.138" dst_port="3666" src_ip="192.105.77.192" src_port="80"/>
      <filter dst_ip="162.73.185.138" dst_port="3520" src_ip="104.243.246.12" src_port="80"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
3006[label="136.228.104.137;d;103pkt 103fpkt", shape=diamond, color=yellow];
3079[label="73.244.180.147;s;97pkt 97fpkt", shape=diamond, color=yellow];
6727[label="136.228.104.137;d;97pkt 97fpkt", shape=hexagon, color=black];
11748[label="73.244.180.147;97pkt 97fpkt", shape=pentagon, color=darkviolet];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.244.180.147:80, 136.228.104.137:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7462%)&lt;BR/&gt; 2189: (0.507614%)&lt;BR/&gt; 2186: (0.507614%)&lt;BR/&gt; 2184: (0.507614%)&lt;BR/&gt; 2182: (0.507614%)&gt;];
}
3006--3079[label="0.989691;96pkt 96fpkt"];
3006--5532[label="0.0222222;1pkt 1fpkt"];
3006--6492[label="0.00970874;1pkt 1fpkt"];
3006--6727[label="1;97pkt 97fpkt"];
3006--7865[label="0.00970874;1pkt 1fpkt"];
3006--8852[label="0.00970874;1pkt 1fpkt"];
3006--10266[label="0.0909091;1pkt 1fpkt"];
3006--10567[label="0.00970874;1pkt 1fpkt"];
3006--11748[label="0.989691;96pkt 96fpkt"];
3079--5956[label="0.0103093;1pkt 1fpkt"];
3079--6727[label="0.989691;96pkt 96fpkt"];
3079--8853[label="0.0103093;1pkt 1fpkt"];
3079--11748[label="1;97pkt 97fpkt"];
6727--8852[label="0.0103093;1pkt 1fpkt"];
6727--11748[label="0.989691;96pkt 96fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.137" src_ip="73.244.180.147" src_port="80"/>
    </slice>
    <from sec="1223614967" usec="0"/>
    <to sec="1223615343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
3009[label="71.55.198.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
6728[label="71.55.198.175;s;1pkt 1fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.55.198.175:80, 213.33.63.13:48416}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 48416: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3009--6728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" dst_port="48416" src_ip="71.55.198.175" src_port="80"/>
    </slice>
    <from sec="1223614972" usec="0"/>
    <to sec="1223615183" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_348{
style=filled;
color=gray75;
2229[label="136.228.172.110;d;2pkt 2fpkt", shape=diamond, color=yellow];
2565[label="192.105.74.9;s;2pkt 2fpkt", shape=diamond, color=yellow];
6729[label="192.105.74.9;s;2pkt 2fpkt", shape=hexagon, color=black];
stat348[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.74.9:80, 136.228.172.110:1937}[50%]&lt;BR/&gt;{192.105.74.9:80, 136.228.172.110:1953}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1953: (25%)&lt;BR/&gt; 1937: (25%)&gt;];
}
2229--2565[label="1;2pkt 2fpkt"];
2229--6729[label="1;2pkt 2fpkt"];
2565--6729[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.172.110" dst_port="1953" src_ip="192.105.74.9" src_port="80"/>
      <filter dst_ip="136.228.172.110" dst_port="1937" src_ip="192.105.74.9" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615086" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
2568[label="205.140.98.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
6731[label="205.140.98.145;s;1pkt 1fpkt", shape=hexagon, color=black];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.140.98.145:1868, 142.243.151.3:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1868: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2568--6417[label="1;1pkt 1fpkt"];
2568--6731[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.151.3" dst_port="80" src_ip="205.140.98.145" src_port="1868"/>
    </slice>
    <from sec="1223614980" usec="0"/>
    <to sec="1223614987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
3023[label="107.100.252.236;d;3pkt 3fpkt", shape=diamond, color=yellow];
6732[label="107.100.252.236;d;3pkt 3fpkt", shape=hexagon, color=black];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.180.36:80, 107.100.252.236:56711}[33.3333%]&lt;BR/&gt;{212.21.128.41:80, 107.100.252.236:58157}[33.3333%]&lt;BR/&gt;{153.109.19.60:80, 107.100.252.236:32999}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58157: (16.6667%)&lt;BR/&gt; 56711: (16.6667%)&lt;BR/&gt; 32999: (16.6667%)&gt;];
}
3023--6732[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.252.236" dst_port="32999" src_ip="153.109.19.60" src_port="80"/>
      <filter dst_ip="107.100.252.236" dst_port="58157" src_ip="212.21.128.41" src_port="80"/>
      <filter dst_ip="107.100.252.236" dst_port="56711" src_ip="142.226.180.36" src_port="80"/>
    </slice>
    <from sec="1223614988" usec="0"/>
    <to sec="1223615047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_354{
style=filled;
color=gray75;
2970[label="136.228.119.124;d;4pkt 4fpkt", shape=diamond, color=yellow];
3104[label="104.243.251.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
5038[label="192.90.232.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
6747[label="104.243.251.21;s;1pkt 1fpkt", shape=hexagon, color=black];
stat354[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.251.20:80, 136.228.119.124:2131}[25%]&lt;BR/&gt;{104.243.251.21:80, 136.228.119.124:2102}[25%]&lt;BR/&gt;{192.90.232.155:80, 136.228.119.124:2249}[25%]&lt;BR/&gt;{107.40.16.175:80, 136.228.119.124:2177}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2102: (21.4286%)&lt;BR/&gt; 2249: (14.2857%)&lt;BR/&gt; 2177: (7.14286%)&lt;BR/&gt; 2131: (7.14286%)&gt;];
}
2970--3104[label="1;1pkt 1fpkt"];
2970--3661[label="1;1pkt 1fpkt"];
2970--5038[label="1;1pkt 1fpkt"];
2970--6747[label="1;1pkt 1fpkt"];
2970--9194[label="0.25;1pkt 1fpkt"];
2970--9198[label="0.25;1pkt 1fpkt"];
2970--9234[label="0.25;1pkt 1fpkt"];
2970--9268[label="0.25;1pkt 1fpkt"];
3104--6747[label="1;1pkt 1fpkt"];
5038--9198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.119.124" dst_port="2177" src_ip="107.40.16.175" src_port="80"/>
      <filter dst_ip="136.228.119.124" dst_port="2249" src_ip="192.90.232.155" src_port="80"/>
      <filter dst_ip="136.228.119.124" dst_port="2102" src_ip="104.243.251.21" src_port="80"/>
      <filter dst_ip="136.228.119.124" dst_port="2131" src_ip="104.243.251.20" src_port="80"/>
    </slice>
    <from sec="1223614895" usec="0"/>
    <to sec="1223615542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
3119[label="136.228.115.211;d;33pkt 33fpkt", shape=diamond, color=yellow];
6749[label="136.228.115.211;d;33pkt 33fpkt", shape=hexagon, color=black];
11922[label="204.102.140.158;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.112.171.4:80, 136.228.115.211:*}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2117: (2.17391%)&lt;BR/&gt; 2115: (2.17391%)&lt;BR/&gt; 2141: (1.44928%)&lt;BR/&gt; 2139: (1.44928%)&gt;];
}
3119--6749[label="1;33pkt 33fpkt"];
3119--9691[label="0.030303;1pkt 1fpkt"];
3119--10051[label="0.166667;3pkt 3fpkt"];
3119--10350[label="0.0714286;2pkt 2fpkt"];
3119--11922[label="0.666667;2pkt 2fpkt"];
3119--12578[label="0.030303;1pkt 1fpkt"];
3119--13454[label="0.030303;1pkt 1fpkt"];
3119--15381[label="0.030303;1pkt 1fpkt"];
6749--9691[label="0.030303;1pkt 1fpkt"];
6749--10051[label="0.166667;3pkt 3fpkt"];
6749--10350[label="0.0714286;2pkt 2fpkt"];
6749--11922[label="0.666667;2pkt 2fpkt"];
6749--12578[label="0.030303;1pkt 1fpkt"];
6749--13454[label="0.030303;1pkt 1fpkt"];
6749--15381[label="0.030303;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.115.211" src_ip="213.112.171.4" src_port="80"/>
    </slice>
    <from sec="1223614909" usec="0"/>
    <to sec="1223615067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.670358,2.09816,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1223614801" usec="0"/>
      <to sec="1223615629" usec="0"/>
    </slice>
    <from sec="-834803184" usec="0"/>
    <to sec="40" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_357{
style=filled;
color=gray75;
668[label="86.68.183.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
6765[label="86.68.183.137;s;1pkt 1fpkt", shape=hexagon, color=black];
stat357[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.68.183.137:64095, 212.21.136.200:4359}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64095: (50%)&lt;BR/&gt; 4359: (50%)&gt;];
}
668--6765[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.200" dst_port="4359" src_ip="86.68.183.137" src_port="64095"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_358{
style=filled;
color=gray75;
3143[label="136.228.65.82;s;168pkt 168fpkt", shape=diamond, color=yellow];
6783[label="136.228.65.82;s;127pkt 127fpkt", shape=hexagon, color=black];
10720[label="136.228.65.82;191pkt 191fpkt", shape=pentagon, color=darkviolet];
13997[label="136.228.65.82;191pkt 191fpkt", shape=invtriangle, color=brown];
stat358[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.65.82:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 27857: (0.516987%)&lt;BR/&gt; 4579: (0.516987%)&lt;BR/&gt; 65412: (0.295421%)&lt;BR/&gt; 65145: (0.295421%)&gt;];
}
3143--6783[label="1;127pkt 127fpkt"];
3143--9196[label="0.0654762;11pkt 11fpkt"];
3143--10720[label="1;168pkt 168fpkt"];
3143--13997[label="1;168pkt 168fpkt"];
6783--9196[label="0.015748;2pkt 2fpkt"];
6783--10720[label="1;127pkt 127fpkt"];
6783--13997[label="1;127pkt 127fpkt"];
10720--13997[label="1;191pkt 191fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.65.82" src_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_359{
style=filled;
color=gray75;
816[label="96.206.249.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
817[label="213.33.154.41;s;34pkt 34fpkt", shape=diamond, color=yellow];
6789[label="213.33.154.41;s;24pkt 24fpkt", shape=hexagon, color=black];
7113[label="96.206.249.231;d;1pkt 1fpkt", shape=hexagon, color=black];
stat359[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.154.41:33458, *:*}[70.5882%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33458: (35.8333%)&lt;BR/&gt; 10572: (6.66667%)&lt;BR/&gt; 23894: (3.33333%)&lt;BR/&gt; 6346: (3.33333%)&lt;BR/&gt; 4828: (3.33333%)&gt;];
}
816--817[label="1;1pkt 1fpkt"];
816--6789[label="1;1pkt 1fpkt"];
816--7113[label="1;1pkt 1fpkt"];
817--6789[label="1;24pkt 24fpkt"];
817--7113[label="1;1pkt 1fpkt"];
6789--7113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.33.154.41" src_port="33458"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_361{
style=filled;
color=gray75;
2612[label="193.52.217.33;d;80pkt 80fpkt", shape=diamond, color=yellow];
2703[label="107.100.253.143;d;58pkt 58fpkt", shape=diamond, color=yellow];
3273[label="142.226.34.171;s;72pkt 72fpkt", shape=diamond, color=yellow];
5101[label="193.52.217.42;d;93pkt 93fpkt", shape=diamond, color=yellow];
5614[label="162.73.201.82;s;36pkt 36fpkt", shape=diamond, color=yellow];
5636[label="142.226.92.3;s;19pkt 19fpkt", shape=diamond, color=yellow];
5712[label="162.73.106.216;s;4pkt 4fpkt", shape=diamond, color=yellow];
6799[label="193.52.217.33;d;80pkt 80fpkt", shape=hexagon, color=black];
8591[label="142.226.34.171;s;72pkt 72fpkt", shape=hexagon, color=black];
8656[label="162.73.201.82;s;37pkt 37fpkt", shape=hexagon, color=black];
8668[label="142.226.92.3;s;19pkt 19fpkt", shape=hexagon, color=black];
8760[label="162.73.106.216;s;4pkt 4fpkt", shape=hexagon, color=black];
9346[label="142.226.92.3;29pkt 29fpkt", shape=pentagon, color=darkviolet];
10740[label="162.73.201.82;36pkt 36fpkt", shape=pentagon, color=darkviolet];
10822[label="153.109.193.87;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10859[label="137.87.97.90;28pkt 28fpkt", shape=pentagon, color=darkviolet];
11022[label="153.109.148.100;22pkt 22fpkt", shape=pentagon, color=darkviolet];
12765[label="162.73.106.216;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13277[label="142.226.92.3;28pkt 28fpkt", shape=invtriangle, color=brown];
14006[label="162.73.201.82;36pkt 36fpkt", shape=invtriangle, color=brown];
14046[label="153.109.193.87;15pkt 15fpkt", shape=invtriangle, color=brown];
15231[label="142.226.232.248;3pkt 3fpkt", shape=invtriangle, color=brown];
15294[label="142.226.92.3;29pkt 29fpkt", shape=invhouse, color=bisque];
15673[label="153.109.193.87;16pkt 16fpkt", shape=invhouse, color=bisque];
stat361[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 193.52.217.42:*}[26.4957%]&lt;BR/&gt;{*:80, 193.52.217.33:*}[23.3618%]&lt;BR/&gt;{142.226.34.171:*, *:*}[20.5128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3437%)&lt;BR/&gt; 443: (0.477327%)&lt;BR/&gt; 63730: (0.417661%)&lt;BR/&gt; 60380: (0.417661%)&lt;BR/&gt; 56051: (0.417661%)&gt;];
}
2612--2856[label="0.0375;3pkt 3fpkt"];
2612--3273[label="0.0138889;1pkt 1fpkt"];
2612--3347[label="0.0875;7pkt 7fpkt"];
2612--5614[label="0.0277778;1pkt 1fpkt"];
2612--5636[label="0.368421;7pkt 7fpkt"];
2612--5712[label="0.25;1pkt 1fpkt"];
2612--6799[label="1;80pkt 80fpkt"];
2612--6817[label="0.157895;6pkt 6fpkt"];
2612--6947[label="0.0454545;2pkt 2fpkt"];
2612--8591[label="0.0138889;1pkt 1fpkt"];
2612--8656[label="0.027027;1pkt 1fpkt"];
2612--8668[label="0.368421;7pkt 7fpkt"];
2612--8760[label="0.25;1pkt 1fpkt"];
2612--9163[label="0.0625;5pkt 5fpkt"];
2612--9194[label="0.0375;3pkt 3fpkt"];
2612--9198[label="0.075;6pkt 6fpkt"];
2612--9234[label="0.0375;3pkt 3fpkt"];
2612--9268[label="0.0375;3pkt 3fpkt"];
2612--9346[label="0.241379;7pkt 7fpkt"];
2612--10740[label="0.0277778;1pkt 1fpkt"];
2612--10822[label="0.266667;4pkt 4fpkt"];
2612--10859[label="0.0357143;1pkt 1fpkt"];
2612--11523[label="0.0185185;1pkt 1fpkt"];
2612--12765[label="0.285714;2pkt 2fpkt"];
2612--12945[label="0.075;6pkt 6fpkt"];
2612--13277[label="0.25;7pkt 7fpkt"];
2612--14006[label="0.0277778;1pkt 1fpkt"];
2612--14046[label="0.266667;4pkt 4fpkt"];
2612--15117[label="0.075;6pkt 6fpkt"];
2612--15294[label="0.241379;7pkt 7fpkt"];
2612--15673[label="0.25;4pkt 4fpkt"];
2612--16251[label="0.075;6pkt 6fpkt"];
2703--3273[label="0.948276;55pkt 55fpkt"];
2703--8591[label="0.948276;55pkt 55fpkt"];
2703--9163[label="0.0517241;3pkt 3fpkt"];
2703--9194[label="0.0517241;3pkt 3fpkt"];
2703--9198[label="0.0689655;4pkt 4fpkt"];
2703--9234[label="0.0517241;3pkt 3fpkt"];
2703--9268[label="0.0517241;3pkt 3fpkt"];
2703--13162[label="0.75;3pkt 3fpkt"];
2703--15231[label="1;3pkt 3fpkt"];
3273--5101[label="0.222222;16pkt 16fpkt"];
3273--6799[label="0.0138889;1pkt 1fpkt"];
3273--8591[label="1;72pkt 72fpkt"];
3273--9163[label="0.0694444;5pkt 5fpkt"];
3273--9194[label="0.0694444;5pkt 5fpkt"];
3273--9198[label="0.0694444;5pkt 5fpkt"];
3273--9234[label="0.0694444;5pkt 5fpkt"];
3273--9268[label="0.0694444;5pkt 5fpkt"];
5101--5629[label="0.142857;3pkt 3fpkt"];
5101--5636[label="0.0526316;1pkt 1fpkt"];
5101--5935[label="0.0235294;2pkt 2fpkt"];
5101--6335[label="0.107527;10pkt 10fpkt"];
5101--6777[label="0.0757576;5pkt 5fpkt"];
5101--7917[label="0.0777778;7pkt 7fpkt"];
5101--8282[label="0.0222222;1pkt 1fpkt"];
5101--8591[label="0.222222;16pkt 16fpkt"];
5101--8625[label="0.242857;17pkt 17fpkt"];
5101--8668[label="0.0526316;1pkt 1fpkt"];
5101--9163[label="0.107527;10pkt 10fpkt"];
5101--9194[label="0.0645161;6pkt 6fpkt"];
5101--9198[label="0.0752688;7pkt 7fpkt"];
5101--9234[label="0.0645161;6pkt 6fpkt"];
5101--9268[label="0.0645161;6pkt 6fpkt"];
5101--9346[label="0.0344828;1pkt 1fpkt"];
5101--9463[label="0.0645161;6pkt 6fpkt"];
5101--9744[label="0.0860215;8pkt 8fpkt"];
5101--10314[label="0.0204082;1pkt 1fpkt"];
5101--11022[label="0.136364;3pkt 3fpkt"];
5101--11523[label="0.0185185;1pkt 1fpkt"];
5101--12945[label="0.0107527;1pkt 1fpkt"];
5101--13340[label="0.0645161;6pkt 6fpkt"];
5101--13482[label="0.0860215;8pkt 8fpkt"];
5101--14140[label="0.0952381;2pkt 2fpkt"];
5101--15117[label="0.0107527;1pkt 1fpkt"];
5101--15294[label="0.0344828;1pkt 1fpkt"];
5101--16251[label="0.0107527;1pkt 1fpkt"];
5614--5718[label="0.52;13pkt 13fpkt"];
5614--6799[label="0.0277778;1pkt 1fpkt"];
5614--8656[label="1;36pkt 36fpkt"];
5614--9163[label="0.0555556;2pkt 2fpkt"];
5614--9194[label="0.0277778;1pkt 1fpkt"];
5614--9198[label="0.194444;7pkt 7fpkt"];
5614--9234[label="0.0277778;1pkt 1fpkt"];
5614--9268[label="0.0277778;1pkt 1fpkt"];
5614--10740[label="1;36pkt 36fpkt"];
5614--14006[label="1;36pkt 36fpkt"];
5636--6799[label="0.368421;7pkt 7fpkt"];
5636--8227[label="0.0526316;1pkt 1fpkt"];
5636--8668[label="1;19pkt 19fpkt"];
5636--9078[label="0.0526316;1pkt 1fpkt"];
5636--9163[label="0.0526316;1pkt 1fpkt"];
5636--9194[label="0.0526316;1pkt 1fpkt"];
5636--9198[label="0.263158;5pkt 5fpkt"];
5636--9234[label="0.0526316;1pkt 1fpkt"];
5636--9268[label="0.0526316;1pkt 1fpkt"];
5636--9346[label="1;19pkt 19fpkt"];
5636--13277[label="0.947368;18pkt 18fpkt"];
5636--15294[label="1;19pkt 19fpkt"];
5712--6799[label="0.25;1pkt 1fpkt"];
5712--8760[label="1;4pkt 4fpkt"];
5712--9198[label="0.25;1pkt 1fpkt"];
5712--12765[label="1;4pkt 4fpkt"];
6799--6817[label="0.157895;6pkt 6fpkt"];
6799--6947[label="0.0454545;2pkt 2fpkt"];
6799--8591[label="0.0138889;1pkt 1fpkt"];
6799--8656[label="0.027027;1pkt 1fpkt"];
6799--8668[label="0.368421;7pkt 7fpkt"];
6799--8760[label="0.25;1pkt 1fpkt"];
6799--9163[label="0.0625;5pkt 5fpkt"];
6799--9194[label="0.0375;3pkt 3fpkt"];
6799--9198[label="0.075;6pkt 6fpkt"];
6799--9234[label="0.0375;3pkt 3fpkt"];
6799--9268[label="0.0375;3pkt 3fpkt"];
6799--9346[label="0.241379;7pkt 7fpkt"];
6799--10740[label="0.0277778;1pkt 1fpkt"];
6799--10822[label="0.266667;4pkt 4fpkt"];
6799--10859[label="0.0357143;1pkt 1fpkt"];
6799--11523[label="0.0185185;1pkt 1fpkt"];
6799--12765[label="0.285714;2pkt 2fpkt"];
6799--12945[label="0.075;6pkt 6fpkt"];
6799--13277[label="0.25;7pkt 7fpkt"];
6799--14006[label="0.0277778;1pkt 1fpkt"];
6799--14046[label="0.266667;4pkt 4fpkt"];
6799--15117[label="0.075;6pkt 6fpkt"];
6799--15294[label="0.241379;7pkt 7fpkt"];
6799--15673[label="0.25;4pkt 4fpkt"];
6799--16251[label="0.075;6pkt 6fpkt"];
8591--9163[label="0.0694444;5pkt 5fpkt"];
8591--9194[label="0.0694444;5pkt 5fpkt"];
8591--9198[label="0.0694444;5pkt 5fpkt"];
8591--9234[label="0.0694444;5pkt 5fpkt"];
8591--9268[label="0.0694444;5pkt 5fpkt"];
8656--9163[label="0.0540541;2pkt 2fpkt"];
8656--9194[label="0.027027;1pkt 1fpkt"];
8656--9198[label="0.189189;7pkt 7fpkt"];
8656--9234[label="0.027027;1pkt 1fpkt"];
8656--9268[label="0.027027;1pkt 1fpkt"];
8656--10740[label="1;36pkt 36fpkt"];
8656--14006[label="1;36pkt 36fpkt"];
8668--9078[label="0.0526316;1pkt 1fpkt"];
8668--9163[label="0.0526316;1pkt 1fpkt"];
8668--9194[label="0.0526316;1pkt 1fpkt"];
8668--9198[label="0.263158;5pkt 5fpkt"];
8668--9234[label="0.0526316;1pkt 1fpkt"];
8668--9268[label="0.0526316;1pkt 1fpkt"];
8668--9346[label="1;19pkt 19fpkt"];
8668--13277[label="0.947368;18pkt 18fpkt"];
8668--15294[label="1;19pkt 19fpkt"];
8760--9198[label="0.25;1pkt 1fpkt"];
8760--12765[label="1;4pkt 4fpkt"];
9346--13277[label="1;28pkt 28fpkt"];
9346--15294[label="1;29pkt 29fpkt"];
10740--14006[label="1;36pkt 36fpkt"];
10822--14046[label="1;15pkt 15fpkt"];
10822--15673[label="1;15pkt 15fpkt"];
11022--14140[label="1;21pkt 21fpkt"];
13277--15294[label="1;28pkt 28fpkt"];
14046--15673[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter src_ip="142.226.34.171"/>
      <filter dst_ip="193.52.217.42" src_port="80"/>
      <filter dst_ip="193.52.217.33" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_362{
style=filled;
color=gray75;
1034[label="162.73.190.239;d;2pkt 2fpkt", shape=diamond, color=yellow];
1037[label="23.4.134.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
6254[label="23.4.134.82;s;1pkt 1fpkt", shape=hexagon, color=black];
6818[label="162.73.190.239;d;1pkt 1fpkt", shape=hexagon, color=black];
10730[label="23.4.134.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat362[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.4.134.82:1935, 162.73.190.239:4223}[50%]&lt;BR/&gt;{205.116.193.179:80, 162.73.190.239:4876}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4223: (41.6667%)&lt;BR/&gt; 1935: (41.6667%)&lt;BR/&gt; 4876: (8.33333%)&lt;BR/&gt; 80: (8.33333%)&gt;];
}
1034--1037[label="1;1pkt 1fpkt"];
1034--6254[label="1;1pkt 1fpkt"];
1034--6818[label="1;1pkt 1fpkt"];
1034--9198[label="0.5;1pkt 1fpkt"];
1034--10730[label="1;1pkt 1fpkt"];
1037--6254[label="1;1pkt 1fpkt"];
1037--6818[label="1;1pkt 1fpkt"];
1037--10730[label="1;1pkt 1fpkt"];
6254--6818[label="1;1pkt 1fpkt"];
6254--10730[label="1;1pkt 1fpkt"];
6818--10730[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.190.239" dst_port="4876" src_ip="205.116.193.179" src_port="80"/>
      <filter dst_ip="162.73.190.239" dst_port="4223" src_ip="23.4.134.82" src_port="1935"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_363{
style=filled;
color=gray75;
1127[label="107.100.242.123;d;210pkt 210fpkt", shape=diamond, color=yellow];
1128[label="153.109.91.214;s;208pkt 208fpkt", shape=diamond, color=yellow];
6832[label="107.100.242.123;d;110pkt 110fpkt", shape=hexagon, color=black];
12742[label="153.109.91.214;230pkt 230fpkt", shape=pentagon, color=darkviolet];
stat363[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.91.214:80, 107.100.242.123:*}[99.1416%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65515: (0.263852%)&lt;BR/&gt; 65052: (0.263852%)&lt;BR/&gt; 63825: (0.263852%)&lt;BR/&gt; 63741: (0.263852%)&gt;];
}
1127--1128[label="1;208pkt 208fpkt"];
1127--6832[label="1;110pkt 110fpkt"];
1127--9163[label="0.0761905;16pkt 16fpkt"];
1127--9194[label="0.047619;10pkt 10fpkt"];
1127--9198[label="0.0571429;12pkt 12fpkt"];
1127--9234[label="0.047619;10pkt 10fpkt"];
1127--9268[label="0.047619;10pkt 10fpkt"];
1127--12742[label="0.985714;207pkt 207fpkt"];
1128--6832[label="0.990909;109pkt 109fpkt"];
1128--9163[label="0.0769231;16pkt 16fpkt"];
1128--9194[label="0.0480769;10pkt 10fpkt"];
1128--9198[label="0.0576923;12pkt 12fpkt"];
1128--9234[label="0.0480769;10pkt 10fpkt"];
1128--9268[label="0.0480769;10pkt 10fpkt"];
1128--12742[label="0.995192;207pkt 207fpkt"];
6832--9163[label="0.145455;16pkt 16fpkt"];
6832--9194[label="0.00909091;1pkt 1fpkt"];
6832--9198[label="0.00909091;1pkt 1fpkt"];
6832--9234[label="0.00909091;1pkt 1fpkt"];
6832--9268[label="0.00909091;1pkt 1fpkt"];
6832--12742[label="0.981818;108pkt 108fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.242.123" src_ip="153.109.91.214" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_364{
style=filled;
color=gray75;
856[label="136.228.112.35;s;7102pkt 7102fpkt", shape=diamond, color=yellow];
4743[label="23.44.179.107;d;527pkt 527fpkt", shape=diamond, color=yellow];
5488[label="216.180.169.17;d;529pkt 529fpkt", shape=diamond, color=yellow];
5523[label="108.144.184.219;d;366pkt 366fpkt", shape=diamond, color=yellow];
6795[label="136.228.112.35;s;6214pkt 6214fpkt", shape=hexagon, color=black];
9903[label="136.228.112.35;7831pkt 7831fpkt", shape=pentagon, color=darkviolet];
13565[label="136.228.112.35;7830pkt 7830fpkt", shape=invtriangle, color=brown];
15437[label="136.228.112.35;7831pkt 7831fpkt", shape=invhouse, color=bisque];
stat364[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.112.35:*, *:53}[76.9627%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.9895%)&lt;BR/&gt; 0: (0.196181%)&lt;BR/&gt; 32768: (0.0457756%)&lt;BR/&gt; 65338: (0.020926%)&lt;BR/&gt; 55270: (0.0196181%)&gt;];
}
856--1162[label="0.0882645;534pkt 534fpkt"];
856--1295[label="0.00852273;18pkt 18fpkt"];
856--1912[label="0.0110701;6pkt 6fpkt"];
856--2119[label="0.122598;319pkt 319fpkt"];
856--2270[label="0.0222222;1pkt 1fpkt"];
856--2292[label="0.0175439;1pkt 1fpkt"];
856--2686[label="0.0070922;1pkt 1fpkt"];
856--2707[label="0.00431499;4pkt 4fpkt"];
856--2740[label="0.165854;238pkt 238fpkt"];
856--3184[label="0.0111235;10pkt 10fpkt"];
856--3192[label="0.0132789;13pkt 13fpkt"];
856--3737[label="0.0112233;10pkt 10fpkt"];
856--3750[label="0.00105485;1pkt 1fpkt"];
856--3822[label="0.0121951;1pkt 1fpkt"];
856--3836[label="0.000870322;1pkt 1fpkt"];
856--4174[label="0.00355872;4pkt 4fpkt"];
856--4178[label="0.00775194;6pkt 6fpkt"];
856--4189[label="0.00509554;4pkt 4fpkt"];
856--4222[label="0.0149477;10pkt 10fpkt"];
856--4229[label="0.031746;4pkt 4fpkt"];
856--4231[label="0.00841346;7pkt 7fpkt"];
856--4235[label="0.0181818;1pkt 1fpkt"];
856--4309[label="0.0357143;3pkt 3fpkt"];
856--4647[label="0.00818331;5pkt 5fpkt"];
856--4683[label="0.0178862;11pkt 11fpkt"];
856--4690[label="0.0046225;3pkt 3fpkt"];
856--4696[label="0.0413355;26pkt 26fpkt"];
856--4726[label="0.00146628;1pkt 1fpkt"];
856--4743[label="0.136622;72pkt 72fpkt"];
856--4798[label="0.0263158;1pkt 1fpkt"];
856--4812[label="0.0196078;1pkt 1fpkt"];
856--4896[label="0.027027;1pkt 1fpkt"];
856--5058[label="0.076779;41pkt 41fpkt"];
856--5059[label="0.0666667;36pkt 36fpkt"];
856--5078[label="0.0384615;22pkt 22fpkt"];
856--5097[label="0.00156986;1pkt 1fpkt"];
856--5488[label="0.0189036;10pkt 10fpkt"];
856--5511[label="0.107728;46pkt 46fpkt"];
856--5516[label="0.0934783;43pkt 43fpkt"];
856--5518[label="0.012024;6pkt 6fpkt"];
856--5523[label="0.103825;38pkt 38fpkt"];
856--5524[label="0.0984456;38pkt 38fpkt"];
856--5526[label="0.015534;8pkt 8fpkt"];
856--5542[label="0.0994764;38pkt 38fpkt"];
856--5545[label="0.100543;37pkt 37fpkt"];
856--5550[label="0.0762527;35pkt 35fpkt"];
856--5556[label="0.108527;42pkt 42fpkt"];
856--6795[label="1;6214pkt 6214fpkt"];
856--6838[label="0.0883207;456pkt 456fpkt"];
856--6844[label="0.00793651;5pkt 5fpkt"];
856--6898[label="0.179747;213pkt 213fpkt"];
856--7219[label="0.00105485;1pkt 1fpkt"];
856--7252[label="0.0128205;1pkt 1fpkt"];
856--7561[label="0.0357143;3pkt 3fpkt"];
856--7796[label="0.0107399;18pkt 18fpkt"];
856--8079[label="0.027027;1pkt 1fpkt"];
856--8154[label="0.00564972;3pkt 3fpkt"];
856--8164[label="0.0118812;6pkt 6fpkt"];
856--8182[label="0.00765697;5pkt 5fpkt"];
856--8184[label="0.0129564;11pkt 11fpkt"];
856--8212[label="0.0102171;8pkt 8fpkt"];
856--8216[label="0.11504;270pkt 270fpkt"];
856--8287[label="0.141454;72pkt 72fpkt"];
856--8546[label="0.0666667;36pkt 36fpkt"];
856--8559[label="0.0070922;1pkt 1fpkt"];
856--8571[label="0.0384615;22pkt 22fpkt"];
856--8598[label="0.0181818;1pkt 1fpkt"];
856--8686[label="0.0196078;1pkt 1fpkt"];
856--8879[label="0.0708749;192pkt 192fpkt"];
856--9062[label="0.0118812;6pkt 6fpkt"];
856--9066[label="0.00765697;5pkt 5fpkt"];
856--9197[label="0.00957477;68pkt 68fpkt"];
856--9903[label="1;7102pkt 7102fpkt"];
856--13565[label="0.999859;7101pkt 7101fpkt"];
856--15437[label="1;7102pkt 7102fpkt"];
4743--6194[label="0.193548;102pkt 102fpkt"];
4743--6258[label="0.193548;102pkt 102fpkt"];
4743--6633[label="0.00255102;1pkt 1fpkt"];
4743--6795[label="0.136622;72pkt 72fpkt"];
4743--6861[label="0.0379507;20pkt 20fpkt"];
4743--6890[label="0.00446429;1pkt 1fpkt"];
4743--7088[label="0.00189753;1pkt 1fpkt"];
4743--7446[label="0.00193424;1pkt 1fpkt"];
4743--7461[label="0.00392157;1pkt 1fpkt"];
4743--7463[label="0.0189753;10pkt 10fpkt"];
4743--8287[label="1;509pkt 509fpkt"];
4743--8916[label="0.00421941;1pkt 1fpkt"];
4743--8992[label="0.00189753;1pkt 1fpkt"];
4743--9060[label="0.193548;102pkt 102fpkt"];
4743--9319[label="0.0379507;20pkt 20fpkt"];
4743--9903[label="0.136622;72pkt 72fpkt"];
4743--11793[label="0.0189753;10pkt 10fpkt"];
4743--11996[label="0.199241;105pkt 105fpkt"];
4743--12537[label="0.0384615;7pkt 7fpkt"];
4743--12914[label="0.193548;102pkt 102fpkt"];
4743--13565[label="0.136622;72pkt 72fpkt"];
4743--14633[label="0.199241;105pkt 105fpkt"];
4743--14903[label="0.038674;7pkt 7fpkt"];
4743--15437[label="0.136622;72pkt 72fpkt"];
4743--15986[label="0.199241;105pkt 105fpkt"];
4743--16133[label="0.038674;7pkt 7fpkt"];
5488--5992[label="0.0151229;8pkt 8fpkt"];
5488--6194[label="0.020794;11pkt 11fpkt"];
5488--6233[label="0.0113422;6pkt 6fpkt"];
5488--6244[label="0.0132325;7pkt 7fpkt"];
5488--6258[label="0.0170132;9pkt 9fpkt"];
5488--6269[label="0.00189036;1pkt 1fpkt"];
5488--6335[label="0.00756144;4pkt 4fpkt"];
5488--6342[label="0.0170132;9pkt 9fpkt"];
5488--6591[label="0.0113422;6pkt 6fpkt"];
5488--6606[label="0.0283554;15pkt 15fpkt"];
5488--6795[label="0.0189036;10pkt 10fpkt"];
5488--6861[label="0.0378072;20pkt 20fpkt"];
5488--6872[label="0.00567108;3pkt 3fpkt"];
5488--7088[label="0.047259;25pkt 25fpkt"];
5488--7096[label="0.00189036;1pkt 1fpkt"];
5488--7141[label="0.00189036;1pkt 1fpkt"];
5488--7205[label="0.0106383;1pkt 1fpkt"];
5488--7229[label="0.0113422;6pkt 6fpkt"];
5488--7235[label="0.0132325;7pkt 7fpkt"];
5488--7240[label="0.0302457;16pkt 16fpkt"];
5488--7412[label="0.00567108;3pkt 3fpkt"];
5488--7462[label="0.00378072;2pkt 2fpkt"];
5488--7495[label="0.00378072;2pkt 2fpkt"];
5488--7499[label="0.0132325;7pkt 7fpkt"];
5488--7780[label="0.00189036;1pkt 1fpkt"];
5488--8141[label="0.00378072;2pkt 2fpkt"];
5488--8193[label="0.020794;11pkt 11fpkt"];
5488--8857[label="0.0113422;6pkt 6fpkt"];
5488--8954[label="0.0094518;5pkt 5fpkt"];
5488--8992[label="0.047259;25pkt 25fpkt"];
5488--9060[label="0.0151229;8pkt 8fpkt"];
5488--9154[label="0.0113422;6pkt 6fpkt"];
5488--9170[label="0.00567108;3pkt 3fpkt"];
5488--9184[label="0.00756144;4pkt 4fpkt"];
5488--9193[label="0.0094518;5pkt 5fpkt"];
5488--9224[label="0.00756144;4pkt 4fpkt"];
5488--9233[label="0.0094518;5pkt 5fpkt"];
5488--9258[label="0.00756144;4pkt 4fpkt"];
5488--9267[label="0.0094518;5pkt 5fpkt"];
5488--9319[label="0.0378072;20pkt 20fpkt"];
5488--9582[label="0.0606061;2pkt 2fpkt"];
5488--9737[label="0.0041841;1pkt 1fpkt"];
5488--9903[label="0.0189036;10pkt 10fpkt"];
5488--9958[label="0.00378072;2pkt 2fpkt"];
5488--10005[label="0.0884956;10pkt 10fpkt"];
5488--10442[label="0.173913;92pkt 92fpkt"];
5488--10569[label="0.00567108;3pkt 3fpkt"];
5488--10590[label="0.00189036;1pkt 1fpkt"];
5488--11020[label="0.00440529;1pkt 1fpkt"];
5488--11265[label="0.0153846;1pkt 1fpkt"];
5488--11996[label="0.0321361;17pkt 17fpkt"];
5488--12178[label="0.0132325;7pkt 7fpkt"];
5488--12186[label="0.0113422;6pkt 6fpkt"];
5488--12318[label="0.00346021;1pkt 1fpkt"];
5488--12466[label="0.00189036;1pkt 1fpkt"];
5488--12692[label="0.00378072;2pkt 2fpkt"];
5488--12786[label="0.00449438;2pkt 2fpkt"];
5488--12914[label="0.0170132;9pkt 9fpkt"];
5488--13009[label="0.0703883;29pkt 29fpkt"];
5488--13056[label="0.0126582;1pkt 1fpkt"];
5488--13060[label="0.0113422;6pkt 6fpkt"];
5488--13477[label="0.0041841;1pkt 1fpkt"];
5488--13565[label="0.0189036;10pkt 10fpkt"];
5488--13595[label="0.00378072;2pkt 2fpkt"];
5488--13625[label="0.0892857;10pkt 10fpkt"];
5488--13849[label="0.173913;92pkt 92fpkt"];
5488--13917[label="0.00567108;3pkt 3fpkt"];
5488--14260[label="0.0153846;1pkt 1fpkt"];
5488--14633[label="0.0321361;17pkt 17fpkt"];
5488--14726[label="0.0132325;7pkt 7fpkt"];
5488--14869[label="0.00189036;1pkt 1fpkt"];
5488--15146[label="0.0705596;29pkt 29fpkt"];
5488--15168[label="0.0113422;6pkt 6fpkt"];
5488--15437[label="0.0189036;10pkt 10fpkt"];
5488--15450[label="0.00378072;2pkt 2fpkt"];
5488--15464[label="0.0892857;10pkt 10fpkt"];
5488--15608[label="0.00567108;3pkt 3fpkt"];
5488--15986[label="0.0321361;17pkt 17fpkt"];
5488--16030[label="0.0132325;7pkt 7fpkt"];
5488--16280[label="0.0113422;6pkt 6fpkt"];
5523--6194[label="0.0956284;35pkt 35fpkt"];
5523--6258[label="0.117486;43pkt 43fpkt"];
5523--6269[label="0.00273224;1pkt 1fpkt"];
5523--6795[label="0.0901639;33pkt 33fpkt"];
5523--8193[label="0.213115;78pkt 78fpkt"];
5523--9060[label="0.103825;38pkt 38fpkt"];
5523--9171[label="0.00819672;3pkt 3fpkt"];
5523--9175[label="0.00546448;2pkt 2fpkt"];
5523--9211[label="0.00819672;3pkt 3fpkt"];
5523--9215[label="0.00546448;2pkt 2fpkt"];
5523--9246[label="0.00819672;3pkt 3fpkt"];
5523--9903[label="0.103825;38pkt 38fpkt"];
5523--11996[label="0.243169;89pkt 89fpkt"];
5523--12914[label="0.117486;43pkt 43fpkt"];
5523--13565[label="0.103825;38pkt 38fpkt"];
5523--14633[label="0.243169;89pkt 89fpkt"];
5523--15437[label="0.103825;38pkt 38fpkt"];
5523--15986[label="0.243169;89pkt 89fpkt"];
6795--6838[label="0.0883207;456pkt 456fpkt"];
6795--6844[label="0.00793651;5pkt 5fpkt"];
6795--6898[label="0.179747;213pkt 213fpkt"];
6795--7219[label="0.00105485;1pkt 1fpkt"];
6795--7252[label="0.0128205;1pkt 1fpkt"];
6795--7561[label="0.0357143;3pkt 3fpkt"];
6795--7796[label="0.0107399;18pkt 18fpkt"];
6795--8079[label="0.027027;1pkt 1fpkt"];
6795--8154[label="0.00564972;3pkt 3fpkt"];
6795--8164[label="0.0118812;6pkt 6fpkt"];
6795--8182[label="0.00765697;5pkt 5fpkt"];
6795--8184[label="0.0129564;11pkt 11fpkt"];
6795--8212[label="0.0102171;8pkt 8fpkt"];
6795--8216[label="0.11504;270pkt 270fpkt"];
6795--8287[label="0.141454;72pkt 72fpkt"];
6795--8546[label="0.0555556;30pkt 30fpkt"];
6795--8559[label="0.0070922;1pkt 1fpkt"];
6795--8571[label="0.0367133;21pkt 21fpkt"];
6795--8598[label="0.0181818;1pkt 1fpkt"];
6795--8686[label="0.0196078;1pkt 1fpkt"];
6795--8879[label="0.0708749;192pkt 192fpkt"];
6795--9062[label="0.0118812;6pkt 6fpkt"];
6795--9066[label="0.00765697;5pkt 5fpkt"];
6795--9197[label="0.00531059;33pkt 33fpkt"];
6795--9903[label="1;6214pkt 6214fpkt"];
6795--13565[label="0.999839;6213pkt 6213fpkt"];
6795--15437[label="1;6214pkt 6214fpkt"];
9903--13565[label="1;7830pkt 7830fpkt"];
9903--15437[label="1;7831pkt 7831fpkt"];
13565--15437[label="1;7830pkt 7830fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.228.112.35"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,011,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
819[label="142.47.49.197;d;1062pkt 1062fpkt", shape=diamond, color=yellow];
2676[label="204.133.5.209;s;1603pkt 1603fpkt", shape=diamond, color=yellow];
6855[label="204.133.5.209;s;1603pkt 1603fpkt", shape=hexagon, color=black];
12664[label="204.133.5.209;1733pkt 1733fpkt", shape=pentagon, color=darkviolet];
12695[label="204.185.168.210;139pkt 139fpkt", shape=pentagon, color=darkviolet];
14987[label="204.185.168.210;139pkt 139fpkt", shape=invtriangle, color=brown];
16183[label="204.185.168.210;139pkt 139fpkt", shape=invhouse, color=bisque];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.133.5.209:10711, *:*}[57.6253%]&lt;BR/&gt;{204.133.5.213:80, 142.47.49.197:*}[21.9694%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10711: (35.8367%)&lt;BR/&gt; 80: (9.95637%)&lt;BR/&gt; 9559: (2.40729%)&lt;BR/&gt; 10137: (1.80742%)&lt;BR/&gt; 47487: (0.0856965%)&gt;];
}
819--2080[label="1;618pkt 618fpkt"];
819--2676[label="0.106403;113pkt 113fpkt"];
819--6322[label="1;280pkt 280fpkt"];
819--6855[label="0.106403;113pkt 113fpkt"];
819--8832[label="1;280pkt 280fpkt"];
819--9163[label="0.0348399;37pkt 37fpkt"];
819--9194[label="0.149718;159pkt 159fpkt"];
819--9198[label="0.0047081;5pkt 5fpkt"];
819--9234[label="0.149718;159pkt 159fpkt"];
819--9268[label="0.149718;159pkt 159fpkt"];
819--12664[label="0.106403;113pkt 113fpkt"];
819--12695[label="0.0647482;9pkt 9fpkt"];
819--14987[label="0.0647482;9pkt 9fpkt"];
819--16183[label="0.0647482;9pkt 9fpkt"];
2676--6855[label="1;1603pkt 1603fpkt"];
2676--12664[label="0.999376;1602pkt 1602fpkt"];
6855--12664[label="0.999376;1602pkt 1602fpkt"];
12695--14987[label="1;139pkt 139fpkt"];
12695--16183[label="1;139pkt 139fpkt"];
14987--16183[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter src_ip="204.133.5.209" src_port="10711"/>
      <filter dst_ip="142.47.49.197" src_ip="204.133.5.213" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
2023[label="18.235.144.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
6869[label="18.235.144.219;s;1pkt 1fpkt", shape=hexagon, color=black];
12809[label="18.235.144.219;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15042[label="18.235.144.219;1pkt 1fpkt", shape=invtriangle, color=brown];
16217[label="18.235.144.219;1pkt 1fpkt", shape=invhouse, color=bisque];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.235.144.219:4662, 142.243.216.213:3714}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4662: (50%)&lt;BR/&gt; 3714: (50%)&gt;];
}
2023--6869[label="1;1pkt 1fpkt"];
2023--12809[label="1;1pkt 1fpkt"];
2023--15042[label="1;1pkt 1fpkt"];
2023--16217[label="1;1pkt 1fpkt"];
6869--12809[label="1;1pkt 1fpkt"];
6869--15042[label="1;1pkt 1fpkt"];
6869--16217[label="1;1pkt 1fpkt"];
12809--15042[label="1;1pkt 1fpkt"];
12809--16217[label="1;1pkt 1fpkt"];
15042--16217[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.216.213" dst_port="3714" src_ip="18.235.144.219" src_port="4662"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_368{
style=filled;
color=gray75;
1315[label="8.187.57.197;s;7pkt 7fpkt", shape=diamond, color=yellow];
6884[label="8.187.57.197;s;7pkt 7fpkt", shape=hexagon, color=black];
stat368[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.187.57.197:25, 136.228.128.43:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 44299: (7.14286%)&lt;BR/&gt; 44282: (7.14286%)&lt;BR/&gt; 44275: (7.14286%)&lt;BR/&gt; 44270: (7.14286%)&gt;];
}
1315--6884[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.128.43" src_ip="8.187.57.197" src_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_369{
style=filled;
color=gray75;
2068[label="20.114.201.2;s;1pkt 1fpkt", shape=diamond, color=yellow];
6887[label="20.114.201.2;s;1pkt 1fpkt", shape=hexagon, color=black];
9006[label="20.114.201.2;s;1pkt 1fpkt", shape=polygon, color=gold];
9337[label="20.114.201.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat369[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.114.201.2:1220, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1220: (50%)&gt;];
}
2068--6887[label="1;1pkt 1fpkt"];
2068--9006[label="1;1pkt 1fpkt"];
2068--9337[label="1;1pkt 1fpkt"];
6887--9006[label="1;1pkt 1fpkt"];
6887--9337[label="1;1pkt 1fpkt"];
9006--9337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="20.114.201.2" src_port="1220"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615485" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_370{
style=filled;
color=gray75;
3226[label="142.243.247.13;s;82pkt 82fpkt", shape=diamond, color=yellow];
5501[label="126.46.19.178;d;11pkt 11fpkt", shape=diamond, color=yellow];
6888[label="142.243.247.13;s;74pkt 74fpkt", shape=hexagon, color=black];
9535[label="142.243.247.13;86pkt 86fpkt", shape=pentagon, color=darkviolet];
13375[label="142.243.247.13;85pkt 85fpkt", shape=invtriangle, color=brown];
stat370[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.247.13:80, 118.128.185.58:*}[22.093%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4142%)&lt;BR/&gt; 53: (4.5858%)&lt;BR/&gt; 60738: (0.739645%)&lt;BR/&gt; 60700: (0.739645%)&lt;BR/&gt; 60698: (0.739645%)&gt;];
}
3226--5501[label="1;11pkt 11fpkt"];
3226--6888[label="1;74pkt 74fpkt"];
3226--9163[label="0.0853659;7pkt 7fpkt"];
3226--9194[label="0.121951;10pkt 10fpkt"];
3226--9198[label="0.0731707;6pkt 6fpkt"];
3226--9234[label="0.121951;10pkt 10fpkt"];
3226--9268[label="0.121951;10pkt 10fpkt"];
3226--9535[label="1;82pkt 82fpkt"];
3226--13375[label="0.987805;81pkt 81fpkt"];
5501--6888[label="0.909091;10pkt 10fpkt"];
5501--9163[label="0.181818;2pkt 2fpkt"];
5501--9194[label="0.0909091;1pkt 1fpkt"];
5501--9198[label="0.0909091;1pkt 1fpkt"];
5501--9234[label="0.0909091;1pkt 1fpkt"];
5501--9268[label="0.0909091;1pkt 1fpkt"];
5501--9535[label="1;11pkt 11fpkt"];
5501--13375[label="1;11pkt 11fpkt"];
6888--9163[label="0.0945946;7pkt 7fpkt"];
6888--9194[label="0.135135;10pkt 10fpkt"];
6888--9198[label="0.0675676;5pkt 5fpkt"];
6888--9234[label="0.135135;10pkt 10fpkt"];
6888--9268[label="0.135135;10pkt 10fpkt"];
6888--9535[label="1;74pkt 74fpkt"];
6888--13375[label="0.986486;73pkt 73fpkt"];
9535--13375[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="118.128.185.58" src_ip="142.243.247.13" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
2005[label="142.243.233.222;d;2pkt 2fpkt", shape=diamond, color=yellow];
2074[label="212.214.190.181;s;1pkt 1fpkt", shape=diamond, color=yellow];
6889[label="212.214.190.181;s;1pkt 1fpkt", shape=hexagon, color=black];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.20.171.39:1140, 142.243.233.222:1027}[50%]&lt;BR/&gt;{212.214.190.181:1029, 142.243.233.222:1027}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (50%)&lt;BR/&gt; 1029: (37.5%)&lt;BR/&gt; 1140: (12.5%)&gt;];
}
2005--2074[label="1;1pkt 1fpkt"];
2005--6889[label="1;1pkt 1fpkt"];
2074--6889[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.233.222" dst_port="1027" src_ip="212.214.190.181" src_port="1029"/>
      <filter dst_ip="142.243.233.222" dst_port="1027" src_ip="21.20.171.39" src_port="1140"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_372{
style=filled;
color=gray75;
3236[label="20.182.91.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
6893[label="20.182.91.220;s;1pkt 1fpkt", shape=hexagon, color=black];
stat372[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.182.91.220:59237, 136.228.44.214:62191}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62191: (50%)&lt;BR/&gt; 59237: (50%)&gt;];
}
3236--6893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.214" dst_port="62191" src_ip="20.182.91.220" src_port="59237"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_373{
style=filled;
color=gray75;
2088[label="133.24.93.90;d;1pkt 1fpkt", shape=diamond, color=yellow];
6897[label="133.24.93.90;d;1pkt 1fpkt", shape=hexagon, color=black];
9008[label="133.24.93.90;d;1pkt 1fpkt", shape=polygon, color=gold];
stat373[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.44.214:59067, 133.24.93.90:6777}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59067: (50%)&lt;BR/&gt; 6777: (50%)&gt;];
}
2088--6897[label="1;1pkt 1fpkt"];
2088--7423[label="1;1pkt 1fpkt"];
2088--9008[label="1;1pkt 1fpkt"];
6897--7423[label="1;1pkt 1fpkt"];
6897--9008[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.24.93.90" dst_port="6777" src_ip="136.228.44.214" src_port="59067"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_374{
style=filled;
color=gray75;
1353[label="107.100.253.201;d;126pkt 126fpkt", shape=diamond, color=yellow];
1354[label="142.226.203.135;s;115pkt 115fpkt", shape=diamond, color=yellow];
6071[label="142.226.203.135;s;115pkt 115fpkt", shape=hexagon, color=black];
6900[label="107.100.253.201;d;54pkt 54fpkt", shape=hexagon, color=black];
stat374[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.203.135:80, 107.100.253.201:*}[91.2698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65492: (0.487805%)&lt;BR/&gt; 65200: (0.487805%)&lt;BR/&gt; 64941: (0.487805%)&lt;BR/&gt; 64287: (0.487805%)&gt;];
}
1353--1354[label="1;115pkt 115fpkt"];
1353--6071[label="1;115pkt 115fpkt"];
1353--6900[label="1;54pkt 54fpkt"];
1353--9163[label="0.0555556;7pkt 7fpkt"];
1353--9194[label="0.0873016;11pkt 11fpkt"];
1353--9198[label="0.0714286;9pkt 9fpkt"];
1353--9234[label="0.0873016;11pkt 11fpkt"];
1353--9268[label="0.0873016;11pkt 11fpkt"];
1354--6071[label="1;115pkt 115fpkt"];
1354--6900[label="0.925926;50pkt 50fpkt"];
1354--9163[label="0.0608696;7pkt 7fpkt"];
1354--9194[label="0.0782609;9pkt 9fpkt"];
1354--9198[label="0.0695652;8pkt 8fpkt"];
1354--9234[label="0.0782609;9pkt 9fpkt"];
1354--9268[label="0.0782609;9pkt 9fpkt"];
6071--6900[label="0.925926;50pkt 50fpkt"];
6071--9163[label="0.0608696;7pkt 7fpkt"];
6071--9194[label="0.0782609;9pkt 9fpkt"];
6071--9198[label="0.0695652;8pkt 8fpkt"];
6071--9234[label="0.0782609;9pkt 9fpkt"];
6071--9268[label="0.0782609;9pkt 9fpkt"];
6900--9163[label="0.12963;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.253.201" src_ip="142.226.203.135" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,504,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_375{
style=filled;
color=gray75;
1357[label="18.104.91.186;d;10pkt 10fpkt", shape=diamond, color=yellow];
1358[label="136.228.34.162;s;1pkt 1fpkt", shape=diamond, color=yellow];
6902[label="18.104.91.186;d;10pkt 10fpkt", shape=hexagon, color=black];
11968[label="136.228.34.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14619[label="136.228.34.162;2pkt 2fpkt", shape=invtriangle, color=brown];
stat375[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.34.5:443, 18.104.91.186:*}[63.6364%]&lt;BR/&gt;{136.228.34.162:443, 18.104.91.186:*}[27.2727%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.8333%)&lt;BR/&gt; 63611: (8.33333%)&lt;BR/&gt; 63631: (4.16667%)&lt;BR/&gt; 63559: (4.16667%)&lt;BR/&gt; 63513: (4.16667%)&gt;];
}
1357--1358[label="1;1pkt 1fpkt"];
1357--6902[label="1;10pkt 10fpkt"];
1357--9198[label="0.1;1pkt 1fpkt"];
1357--14619[label="0.5;1pkt 1fpkt"];
1358--6902[label="1;1pkt 1fpkt"];
1358--14619[label="1;1pkt 1fpkt"];
6902--9198[label="0.1;1pkt 1fpkt"];
6902--14619[label="0.5;1pkt 1fpkt"];
11968--14619[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="18.104.91.186" src_ip="136.228.34.5" src_port="443"/>
      <filter dst_ip="18.104.91.186" src_ip="136.228.34.162" src_port="443"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_376{
style=filled;
color=gray75;
2761[label="21.20.253.192;s;5pkt 5fpkt", shape=diamond, color=yellow];
6906[label="21.20.253.192;s;5pkt 5fpkt", shape=hexagon, color=black];
12418[label="21.20.253.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat376[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.20.253.192:0, 136.228.29.12:0}[20%]&lt;BR/&gt;{21.20.253.192:0, 136.228.82.35:0}[20%]&lt;BR/&gt;{21.20.253.192:0, 136.228.112.79:0}[20%]&lt;BR/&gt;{21.20.253.192:0, 142.243.54.146:0}[20%]&lt;BR/&gt;{21.20.253.192:0, 136.228.246.237:0}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2761--6906[label="1;5pkt 5fpkt"];
2761--12418[label="1;5pkt 5fpkt"];
6906--12418[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.246.237" src_ip="21.20.253.192"/>
      <filter dst_ip="142.243.54.146" src_ip="21.20.253.192"/>
      <filter dst_ip="136.228.112.79" src_ip="21.20.253.192"/>
      <filter dst_ip="136.228.82.35" src_ip="21.20.253.192"/>
      <filter dst_ip="136.228.29.12" src_ip="21.20.253.192"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_377{
style=filled;
color=gray75;
2763[label="59.212.50.44;s;1pkt 1fpkt", shape=diamond, color=yellow];
6907[label="59.212.50.44;s;1pkt 1fpkt", shape=hexagon, color=black];
8887[label="59.212.50.44;s;1pkt 1fpkt", shape=polygon, color=gold];
stat377[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.212.50.44:0, 212.21.132.185:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2763--6907[label="1;1pkt 1fpkt"];
2763--8887[label="1;1pkt 1fpkt"];
6907--8887[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.132.185" src_ip="59.212.50.44"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
983[label="142.228.95.21;d;938pkt 938fpkt", shape=diamond, color=yellow];
1331[label="142.228.95.23;d;561pkt 561fpkt", shape=diamond, color=yellow];
1381[label="142.228.95.17;d;736pkt 736fpkt", shape=diamond, color=yellow];
1576[label="136.228.118.144;d;62pkt 62fpkt", shape=diamond, color=yellow];
1591[label="115.154.8.52;s;4pkt 4fpkt", shape=diamond, color=yellow];
2303[label="220.233.119.103;s;23pkt 23fpkt", shape=diamond, color=yellow];
2476[label="73.42.151.1;s;1pkt 1fpkt", shape=diamond, color=yellow];
2670[label="193.214.131.28;s;336pkt 336fpkt", shape=diamond, color=yellow];
2958[label="73.42.154.65;s;19pkt 19fpkt", shape=diamond, color=yellow];
2973[label="21.174.215.74;s;49pkt 49fpkt", shape=diamond, color=yellow];
2979[label="210.73.80.176;s;12pkt 12fpkt", shape=diamond, color=yellow];
3041[label="139.40.41.216;s;16pkt 16fpkt", shape=diamond, color=yellow];
3864[label="162.73.25.151;d;129pkt 129fpkt", shape=diamond, color=yellow];
3959[label="73.42.155.165;s;25pkt 25fpkt", shape=diamond, color=yellow];
4402[label="213.241.228.181;s;14pkt 14fpkt", shape=diamond, color=yellow];
4899[label="215.165.135.49;s;67pkt 67fpkt", shape=diamond, color=yellow];
5017[label="19.116.119.46;s;6pkt 6fpkt", shape=diamond, color=yellow];
5430[label="21.1.170.69;s;15pkt 15fpkt", shape=diamond, color=yellow];
6792[label="108.129.217.181;s;723pkt 723fpkt", shape=hexagon, color=black];
6811[label="142.228.95.21;d;540pkt 540fpkt", shape=hexagon, color=black];
7037[label="139.40.41.216;s;16pkt 16fpkt", shape=hexagon, color=black];
7381[label="73.42.151.46;s;5pkt 5fpkt", shape=hexagon, color=black];
8379[label="210.67.2.155;s;25pkt 25fpkt", shape=hexagon, color=black];
8423[label="215.165.135.49;s;66pkt 66fpkt", shape=hexagon, color=black];
9310[label="73.42.151.1;23pkt 23fpkt", shape=pentagon, color=darkviolet];
9400[label="213.241.228.5;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9409[label="73.42.151.6;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9530[label="194.139.135.13;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9567[label="210.193.144.15;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9575[label="212.146.70.16;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9615[label="194.65.23.18;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9644[label="18.48.229.19;17pkt 17fpkt", shape=pentagon, color=darkviolet];
9677[label="73.42.151.21;12pkt 12fpkt", shape=pentagon, color=darkviolet];
9778[label="73.42.151.27;33pkt 33fpkt", shape=pentagon, color=darkviolet];
9974[label="18.48.229.38;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9990[label="108.129.218.39;48pkt 48fpkt", shape=pentagon, color=darkviolet];
10052[label="20.189.132.42;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10053[label="73.42.151.42;10pkt 10fpkt", shape=pentagon, color=darkviolet];
10081[label="108.129.218.43;75pkt 75fpkt", shape=pentagon, color=darkviolet];
10131[label="108.129.218.46;59pkt 59fpkt", shape=pentagon, color=darkviolet];
10141[label="212.146.66.47;35pkt 35fpkt", shape=pentagon, color=darkviolet];
10173[label="215.165.135.49;71pkt 71fpkt", shape=pentagon, color=darkviolet];
10191[label="73.42.151.50;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10216[label="115.154.8.52;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10280[label="213.241.231.55;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10322[label="73.42.151.58;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10467[label="73.42.151.68;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10488[label="73.42.151.69;24pkt 24fpkt", shape=pentagon, color=darkviolet];
10504[label="213.0.96.70;13pkt 13fpkt", shape=pentagon, color=darkviolet];
10591[label="21.174.215.74;48pkt 48fpkt", shape=pentagon, color=darkviolet];
10732[label="205.130.149.82;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10892[label="20.189.132.92;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10927[label="210.73.74.95;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10961[label="68.20.104.97;32pkt 32fpkt", shape=pentagon, color=darkviolet];
11026[label="18.48.229.100;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11774[label="212.27.125.149;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11776[label="73.42.155.149;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11831[label="197.89.111.152;10pkt 10fpkt", shape=pentagon, color=darkviolet];
12196[label="210.73.80.176;13pkt 13fpkt", shape=pentagon, color=darkviolet];
12282[label="213.241.228.181;15pkt 15fpkt", shape=pentagon, color=darkviolet];
12776[label="20.189.132.217;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13302[label="213.241.228.5;7pkt 7fpkt", shape=invtriangle, color=brown];
13309[label="73.42.151.6;22pkt 22fpkt", shape=invtriangle, color=brown];
13371[label="194.139.135.13;11pkt 11fpkt", shape=invtriangle, color=brown];
13394[label="210.193.144.15;2pkt 2fpkt", shape=invtriangle, color=brown];
13399[label="212.146.70.16;8pkt 8fpkt", shape=invtriangle, color=brown];
13432[label="18.48.229.19;17pkt 17fpkt", shape=invtriangle, color=brown];
13651[label="73.42.151.42;11pkt 11fpkt", shape=invtriangle, color=brown];
13693[label="108.129.218.46;58pkt 58fpkt", shape=invtriangle, color=brown];
13697[label="212.146.66.47;36pkt 36fpkt", shape=invtriangle, color=brown];
13725[label="73.42.151.50;16pkt 16fpkt", shape=invtriangle, color=brown];
13768[label="213.241.231.55;6pkt 6fpkt", shape=invtriangle, color=brown];
13860[label="73.42.151.68;21pkt 21fpkt", shape=invtriangle, color=brown];
13875[label="73.42.151.69;24pkt 24fpkt", shape=invtriangle, color=brown];
14141[label="18.48.229.100;8pkt 8fpkt", shape=invtriangle, color=brown];
14518[label="73.42.155.149;20pkt 20fpkt", shape=invtriangle, color=brown];
14547[label="197.89.111.152;10pkt 10fpkt", shape=invtriangle, color=brown];
14774[label="213.241.228.181;16pkt 16fpkt", shape=invtriangle, color=brown];
15352[label="210.193.144.15;2pkt 2fpkt", shape=invhouse, color=bisque];
15354[label="212.146.70.16;7pkt 7fpkt", shape=invhouse, color=bisque];
15493[label="212.146.66.47;36pkt 36fpkt", shape=invhouse, color=bisque];
15523[label="213.241.231.55;5pkt 5fpkt", shape=invhouse, color=bisque];
15577[label="73.42.151.68;22pkt 22fpkt", shape=invhouse, color=bisque];
15916[label="73.42.155.149;20pkt 20fpkt", shape=invhouse, color=bisque];
15937[label="197.89.111.152;10pkt 10fpkt", shape=invhouse, color=bisque];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 142.228.95.21:*}[26.4888%]&lt;BR/&gt;{*:80, 142.228.95.17:*}[20.3933%]&lt;BR/&gt;{108.129.217.181:80, *:*}[20.2809%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0498%)&lt;BR/&gt; 443: (0.823529%)&lt;BR/&gt; 58324: (0.081448%)&lt;BR/&gt; 52686: (0.0633484%)&lt;BR/&gt; 60218: (0.0542986%)&gt;];
}
983--1336[label="0.0330073;27pkt 27fpkt"];
983--1370[label="0.0266525;25pkt 25fpkt"];
983--1413[label="0.206628;106pkt 106fpkt"];
983--1509[label="0.294964;41pkt 41fpkt"];
983--1591[label="1;4pkt 4fpkt"];
983--2664[label="0.0649351;20pkt 20fpkt"];
983--2670[label="0.0565476;19pkt 19fpkt"];
983--2725[label="0.0623053;20pkt 20fpkt"];
983--2911[label="0.0588235;3pkt 3fpkt"];
983--3041[label="0.3125;5pkt 5fpkt"];
983--3275[label="0.0742049;21pkt 21fpkt"];
983--3427[label="0.0595238;5pkt 5fpkt"];
983--3867[label="0.142857;6pkt 6fpkt"];
983--3925[label="0.0208333;2pkt 2fpkt"];
983--3959[label="0.08;2pkt 2fpkt"];
983--4023[label="0.0625;1pkt 1fpkt"];
983--4332[label="0.0322581;5pkt 5fpkt"];
983--4396[label="0.166667;5pkt 5fpkt"];
983--4402[label="0.0714286;1pkt 1fpkt"];
983--4445[label="0.833333;20pkt 20fpkt"];
983--4729[label="0.0877193;10pkt 10fpkt"];
983--4899[label="0.0149254;1pkt 1fpkt"];
983--5122[label="0.527473;48pkt 48fpkt"];
983--6792[label="0.197787;143pkt 143fpkt"];
983--6811[label="1;540pkt 540fpkt"];
983--6915[label="0.210117;54pkt 54fpkt"];
983--7037[label="0.3125;5pkt 5fpkt"];
983--7195[label="0.0474227;23pkt 23fpkt"];
983--7224[label="0.0821918;18pkt 18fpkt"];
983--7305[label="0.0595238;5pkt 5fpkt"];
983--7381[label="0.2;1pkt 1fpkt"];
983--7580[label="0.0387597;5pkt 5fpkt"];
983--7601[label="0.0229885;2pkt 2fpkt"];
983--7744[label="0.00426439;4pkt 4fpkt"];
983--8009[label="0.106667;8pkt 8fpkt"];
983--8051[label="0.833333;20pkt 20fpkt"];
983--8250[label="0.527473;48pkt 48fpkt"];
983--8379[label="0.2;5pkt 5fpkt"];
983--8968[label="0.0387597;5pkt 5fpkt"];
983--9163[label="0.0458422;43pkt 43fpkt"];
983--9194[label="0.10661;100pkt 100fpkt"];
983--9198[label="0.0469083;44pkt 44fpkt"];
983--9234[label="0.10661;100pkt 100fpkt"];
983--9268[label="0.10661;100pkt 100fpkt"];
983--9310[label="0.173913;4pkt 4fpkt"];
983--9409[label="0.238095;5pkt 5fpkt"];
983--9442[label="0.192029;106pkt 106fpkt"];
983--9534[label="0.163265;8pkt 8fpkt"];
983--9570[label="0.0222222;1pkt 1fpkt"];
983--9575[label="0.5;4pkt 4fpkt"];
983--9644[label="0.0588235;1pkt 1fpkt"];
983--9677[label="0.166667;2pkt 2fpkt"];
983--9778[label="0.121212;4pkt 4fpkt"];
983--9794[label="0.0533708;19pkt 19fpkt"];
983--9974[label="0.1;1pkt 1fpkt"];
983--9990[label="0.270833;13pkt 13fpkt"];
983--10010[label="0.470588;48pkt 48fpkt"];
983--10081[label="0.24;18pkt 18fpkt"];
983--10131[label="0.864407;51pkt 51fpkt"];
983--10141[label="0.257143;9pkt 9fpkt"];
983--10173[label="0.084507;6pkt 6fpkt"];
983--10191[label="0.125;2pkt 2fpkt"];
983--10216[label="1;4pkt 4fpkt"];
983--10322[label="0.0909091;2pkt 2fpkt"];
983--10410[label="0.645161;20pkt 20fpkt"];
983--10467[label="0.0454545;1pkt 1fpkt"];
983--10488[label="0.0416667;1pkt 1fpkt"];
983--10583[label="0.0487805;2pkt 2fpkt"];
983--10961[label="1;32pkt 32fpkt"];
983--11026[label="0.125;1pkt 1fpkt"];
983--11046[label="0.00426439;4pkt 4fpkt"];
983--11737[label="0.0416667;1pkt 1fpkt"];
983--11774[label="0.571429;4pkt 4fpkt"];
983--11776[label="0.238095;5pkt 5fpkt"];
983--11831[label="1;10pkt 10fpkt"];
983--11911[label="0.0188679;2pkt 2fpkt"];
983--11971[label="0.0290698;5pkt 5fpkt"];
983--11980[label="0.0625;1pkt 1fpkt"];
983--12026[label="0.0322581;1pkt 1fpkt"];
983--12281[label="0.178527;143pkt 143fpkt"];
983--12282[label="0.0666667;1pkt 1fpkt"];
983--13309[label="0.227273;5pkt 5fpkt"];
983--13374[label="0.166667;8pkt 8fpkt"];
983--13396[label="0.0227273;1pkt 1fpkt"];
983--13399[label="0.5;4pkt 4fpkt"];
983--13432[label="0.0588235;1pkt 1fpkt"];
983--13545[label="0.0576923;3pkt 3fpkt"];
983--13628[label="0.475248;48pkt 48fpkt"];
983--13693[label="0.862069;50pkt 50fpkt"];
983--13697[label="0.25;9pkt 9fpkt"];
983--13725[label="0.125;2pkt 2fpkt"];
983--13860[label="0.047619;1pkt 1fpkt"];
983--13875[label="0.0416667;1pkt 1fpkt"];
983--13927[label="0.0487805;2pkt 2fpkt"];
983--14141[label="0.125;1pkt 1fpkt"];
983--14149[label="0.00426439;4pkt 4fpkt"];
983--14499[label="0.0434783;1pkt 1fpkt"];
983--14518[label="0.25;5pkt 5fpkt"];
983--14547[label="1;10pkt 10fpkt"];
983--14591[label="0.0190476;2pkt 2fpkt"];
983--14624[label="0.0625;1pkt 1fpkt"];
983--14644[label="0.03125;1pkt 1fpkt"];
983--14774[label="0.0625;1pkt 1fpkt"];
983--15354[label="0.571429;4pkt 4fpkt"];
983--15425[label="0.0576923;3pkt 3fpkt"];
983--15465[label="0.475248;48pkt 48fpkt"];
983--15493[label="0.25;9pkt 9fpkt"];
983--15577[label="0.0454545;1pkt 1fpkt"];
983--15612[label="0.05;2pkt 2fpkt"];
983--15731[label="0.00426439;4pkt 4fpkt"];
983--15910[label="0.0416667;1pkt 1fpkt"];
983--15916[label="0.25;5pkt 5fpkt"];
983--15937[label="1;10pkt 10fpkt"];
983--15958[label="0.0188679;2pkt 2fpkt"];
983--15992[label="0.03125;1pkt 1fpkt"];
1331--1336[label="0.087344;49pkt 49fpkt"];
1331--1341[label="0.00227273;1pkt 1fpkt"];
1331--1370[label="0.114082;64pkt 64fpkt"];
1331--1413[label="0.0994152;51pkt 51fpkt"];
1331--1415[label="0.00613497;1pkt 1fpkt"];
1331--1926[label="0.00529101;1pkt 1fpkt"];
1331--2072[label="1;3pkt 3fpkt"];
1331--2664[label="0.0714286;22pkt 22fpkt"];
1331--2670[label="0.0625;21pkt 21fpkt"];
1331--2725[label="0.0716511;23pkt 23fpkt"];
1331--2979[label="1;12pkt 12fpkt"];
1331--3041[label="0.375;6pkt 6fpkt"];
1331--3275[label="0.0706714;20pkt 20fpkt"];
1331--4332[label="0.0129032;2pkt 2fpkt"];
1331--4729[label="0.280702;32pkt 32fpkt"];
1331--4810[label="0.0465116;2pkt 2fpkt"];
1331--5017[label="1;6pkt 6fpkt"];
1331--5122[label="0.153846;14pkt 14fpkt"];
1331--5430[label="1;15pkt 15fpkt"];
1331--6086[label="0.00671141;1pkt 1fpkt"];
1331--6582[label="1;3pkt 3fpkt"];
1331--6792[label="0.139037;78pkt 78fpkt"];
1331--6915[label="0.124514;32pkt 32fpkt"];
1331--7037[label="0.375;6pkt 6fpkt"];
1331--7195[label="0.0804124;39pkt 39fpkt"];
1331--7224[label="0.0730594;16pkt 16fpkt"];
1331--7459[label="0.00529101;1pkt 1fpkt"];
1331--7580[label="0.0155039;2pkt 2fpkt"];
1331--7983[label="0.0512821;2pkt 2fpkt"];
1331--8250[label="0.153846;14pkt 14fpkt"];
1331--8275[label="0.015873;1pkt 1fpkt"];
1331--8968[label="0.0155039;2pkt 2fpkt"];
1331--9163[label="0.0926916;52pkt 52fpkt"];
1331--9194[label="0.0285205;16pkt 16fpkt"];
1331--9198[label="0.112299;63pkt 63fpkt"];
1331--9234[label="0.0285205;16pkt 16fpkt"];
1331--9268[label="0.0285205;16pkt 16fpkt"];
1331--9400[label="0.5;4pkt 4fpkt"];
1331--9442[label="0.0923913;51pkt 51fpkt"];
1331--9644[label="0.117647;2pkt 2fpkt"];
1331--9794[label="0.0589888;21pkt 21fpkt"];
1331--9974[label="0.3;3pkt 3fpkt"];
1331--10010[label="0.137255;14pkt 14fpkt"];
1331--10492[label="0.789474;15pkt 15fpkt"];
1331--10789[label="0.00497512;1pkt 1fpkt"];
1331--10892[label="0.933333;14pkt 14fpkt"];
1331--11026[label="0.25;2pkt 2fpkt"];
1331--11150[label="0.025641;1pkt 1fpkt"];
1331--11290[label="0.45;9pkt 9fpkt"];
1331--11543[label="0.0444444;2pkt 2fpkt"];
1331--11971[label="0.0116279;2pkt 2fpkt"];
1331--12196[label="0.923077;12pkt 12fpkt"];
1331--12281[label="0.139037;78pkt 78fpkt"];
1331--12776[label="1;2pkt 2fpkt"];
1331--12883[label="0.0952381;2pkt 2fpkt"];
1331--12980[label="0.00584795;1pkt 1fpkt"];
1331--13302[label="0.428571;3pkt 3fpkt"];
1331--13432[label="0.117647;2pkt 2fpkt"];
1331--13628[label="0.128713;13pkt 13fpkt"];
1331--14141[label="0.25;2pkt 2fpkt"];
1331--14206[label="0.025641;1pkt 1fpkt"];
1331--14273[label="0.45;9pkt 9fpkt"];
1331--14405[label="0.0454545;2pkt 2fpkt"];
1331--15086[label="0.0952381;2pkt 2fpkt"];
1331--15131[label="0.00584795;1pkt 1fpkt"];
1331--15465[label="0.128713;13pkt 13fpkt"];
1331--15792[label="0.47619;10pkt 10fpkt"];
1331--15856[label="0.0444444;2pkt 2fpkt"];
1381--1413[label="0.0116959;6pkt 6fpkt"];
1381--1415[label="0.00613497;1pkt 1fpkt"];
1381--1477[label="0.0101351;3pkt 3fpkt"];
1381--1509[label="0.0503597;7pkt 7fpkt"];
1381--1926[label="0.015873;3pkt 3fpkt"];
1381--2208[label="0.012987;1pkt 1fpkt"];
1381--2303[label="0.173913;4pkt 4fpkt"];
1381--2418[label="0.153846;2pkt 2fpkt"];
1381--2664[label="0.0779221;24pkt 24fpkt"];
1381--2670[label="0.0654762;22pkt 22fpkt"];
1381--2725[label="0.0747664;24pkt 24fpkt"];
1381--2778[label="0.294118;5pkt 5fpkt"];
1381--2833[label="0.0177515;3pkt 3fpkt"];
1381--2911[label="0.0784314;4pkt 4fpkt"];
1381--2958[label="0.736842;14pkt 14fpkt"];
1381--2973[label="1;49pkt 49fpkt"];
1381--3275[label="0.0918728;26pkt 26fpkt"];
1381--3427[label="0.142857;12pkt 12fpkt"];
1381--3753[label="0.14218;30pkt 30fpkt"];
1381--3830[label="0.0113636;1pkt 1fpkt"];
1381--3925[label="0.104167;10pkt 10fpkt"];
1381--3941[label="0.2;1pkt 1fpkt"];
1381--4023[label="0.1875;3pkt 3fpkt"];
1381--4332[label="0.0258065;4pkt 4fpkt"];
1381--4445[label="0.0833333;2pkt 2fpkt"];
1381--4489[label="0.0769231;1pkt 1fpkt"];
1381--4729[label="0.0175439;2pkt 2fpkt"];
1381--5095[label="0.0701754;4pkt 4fpkt"];
1381--5119[label="0.190476;20pkt 20fpkt"];
1381--6086[label="0.00671141;1pkt 1fpkt"];
1381--6324[label="0.00806452;1pkt 1fpkt"];
1381--6792[label="0.0525588;38pkt 38fpkt"];
1381--6913[label="0.294118;5pkt 5fpkt"];
1381--6915[label="0.00389105;1pkt 1fpkt"];
1381--7195[label="0.0618557;30pkt 30fpkt"];
1381--7224[label="0.0776256;17pkt 17fpkt"];
1381--7244[label="0.0192308;1pkt 1fpkt"];
1381--7305[label="0.142857;12pkt 12fpkt"];
1381--7459[label="0.015873;3pkt 3fpkt"];
1381--7580[label="0.0310078;4pkt 4fpkt"];
1381--7601[label="0.114943;10pkt 10fpkt"];
1381--7906[label="0.0196078;1pkt 1fpkt"];
1381--8009[label="0.0933333;7pkt 7fpkt"];
1381--8051[label="0.0833333;2pkt 2fpkt"];
1381--8068[label="0.0769231;1pkt 1fpkt"];
1381--8248[label="0.2;18pkt 18fpkt"];
1381--8275[label="0.031746;2pkt 2fpkt"];
1381--8968[label="0.0310078;4pkt 4fpkt"];
1381--9163[label="0.0529891;39pkt 39fpkt"];
1381--9194[label="0.0788043;58pkt 58fpkt"];
1381--9198[label="0.0434783;32pkt 32fpkt"];
1381--9234[label="0.0788043;58pkt 58fpkt"];
1381--9268[label="0.0788043;58pkt 58fpkt"];
1381--9310[label="0.130435;3pkt 3fpkt"];
1381--9409[label="0.0952381;2pkt 2fpkt"];
1381--9442[label="0.0108696;6pkt 6fpkt"];
1381--9530[label="1;12pkt 12fpkt"];
1381--9534[label="0.0816327;4pkt 4fpkt"];
1381--9567[label="1;3pkt 3fpkt"];
1381--9615[label="1;6pkt 6fpkt"];
1381--9644[label="0.705882;12pkt 12fpkt"];
1381--9677[label="0.0833333;1pkt 1fpkt"];
1381--9691[label="0.0714286;4pkt 4fpkt"];
1381--9778[label="0.181818;6pkt 6fpkt"];
1381--9794[label="0.0617978;22pkt 22fpkt"];
1381--9954[label="0.125;2pkt 2fpkt"];
1381--9974[label="0.5;5pkt 5fpkt"];
1381--10052[label="1;4pkt 4fpkt"];
1381--10053[label="0.3;3pkt 3fpkt"];
1381--10167[label="0.168067;20pkt 20fpkt"];
1381--10177[label="0.0167598;3pkt 3fpkt"];
1381--10191[label="0.0625;1pkt 1fpkt"];
1381--10280[label="1;6pkt 6fpkt"];
1381--10322[label="0.227273;5pkt 5fpkt"];
1381--10410[label="0.0645161;2pkt 2fpkt"];
1381--10467[label="0.0454545;1pkt 1fpkt"];
1381--10488[label="0.125;3pkt 3fpkt"];
1381--10504[label="1;13pkt 13fpkt"];
1381--10591[label="1;48pkt 48fpkt"];
1381--10657[label="0.0666667;1pkt 1fpkt"];
1381--10694[label="0.294118;5pkt 5fpkt"];
1381--10727[label="0.0677966;4pkt 4fpkt"];
1381--10789[label="0.0149254;3pkt 3fpkt"];
1381--10927[label="1;3pkt 3fpkt"];
1381--11000[label="0.428571;3pkt 3fpkt"];
1381--11026[label="0.375;3pkt 3fpkt"];
1381--11059[label="0.125;3pkt 3fpkt"];
1381--11150[label="0.0512821;2pkt 2fpkt"];
1381--11572[label="0.02;1pkt 1fpkt"];
1381--11675[label="0.15;6pkt 6fpkt"];
1381--11890[label="0.25;2pkt 2fpkt"];
1381--11911[label="0.0943396;10pkt 10fpkt"];
1381--11971[label="0.0232558;4pkt 4fpkt"];
1381--11980[label="0.0625;1pkt 1fpkt"];
1381--12156[label="0.333333;4pkt 4fpkt"];
1381--12281[label="0.0516304;38pkt 38fpkt"];
1381--12980[label="0.00584795;1pkt 1fpkt"];
1381--13128[label="0.0285714;1pkt 1fpkt"];
1381--13309[label="0.136364;3pkt 3fpkt"];
1381--13371[label="1;11pkt 11fpkt"];
1381--13374[label="0.0833333;4pkt 4fpkt"];
1381--13394[label="1;2pkt 2fpkt"];
1381--13432[label="0.705882;12pkt 12fpkt"];
1381--13454[label="0.0727273;4pkt 4fpkt"];
1381--13545[label="0.0769231;4pkt 4fpkt"];
1381--13651[label="0.272727;3pkt 3fpkt"];
1381--13712[label="0.169492;20pkt 20fpkt"];
1381--13720[label="0.0166667;3pkt 3fpkt"];
1381--13725[label="0.0625;1pkt 1fpkt"];
1381--13768[label="1;6pkt 6fpkt"];
1381--13860[label="0.047619;1pkt 1fpkt"];
1381--13875[label="0.125;3pkt 3fpkt"];
1381--14001[label="0.0677966;4pkt 4fpkt"];
1381--14141[label="0.375;3pkt 3fpkt"];
1381--14206[label="0.0512821;2pkt 2fpkt"];
1381--14591[label="0.0952381;10pkt 10fpkt"];
1381--14624[label="0.0625;1pkt 1fpkt"];
1381--15131[label="0.00584795;1pkt 1fpkt"];
1381--15352[label="1;2pkt 2fpkt"];
1381--15381[label="0.0727273;4pkt 4fpkt"];
1381--15425[label="0.0769231;4pkt 4fpkt"];
1381--15497[label="0.168067;20pkt 20fpkt"];
1381--15500[label="0.0166667;3pkt 3fpkt"];
1381--15523[label="1;5pkt 5fpkt"];
1381--15577[label="0.0454545;1pkt 1fpkt"];
1381--15647[label="0.0677966;4pkt 4fpkt"];
1381--15958[label="0.0943396;10pkt 10fpkt"];
1576--2476[label="1;1pkt 1fpkt"];
1576--9310[label="0.0434783;1pkt 1fpkt"];
1576--9409[label="0.238095;5pkt 5fpkt"];
1576--9677[label="0.166667;2pkt 2fpkt"];
1576--9778[label="0.212121;7pkt 7fpkt"];
1576--10053[label="0.2;2pkt 2fpkt"];
1576--10191[label="0.0625;1pkt 1fpkt"];
1576--10322[label="0.0909091;2pkt 2fpkt"];
1576--10467[label="0.0909091;2pkt 2fpkt"];
1576--10488[label="0.291667;7pkt 7fpkt"];
1576--10732[label="0.666667;4pkt 4fpkt"];
1576--13309[label="0.227273;5pkt 5fpkt"];
1576--13651[label="0.181818;2pkt 2fpkt"];
1576--13725[label="0.0625;1pkt 1fpkt"];
1576--13860[label="0.0952381;2pkt 2fpkt"];
1576--13875[label="0.291667;7pkt 7fpkt"];
1576--15577[label="0.0909091;2pkt 2fpkt"];
1591--6811[label="1;4pkt 4fpkt"];
1591--9163[label="1;4pkt 4fpkt"];
1591--10216[label="1;4pkt 4fpkt"];
2303--8514[label="0.0434783;1pkt 1fpkt"];
2303--9163[label="0.0869565;2pkt 2fpkt"];
2303--9194[label="0.173913;4pkt 4fpkt"];
2303--9198[label="0.130435;3pkt 3fpkt"];
2303--9234[label="0.173913;4pkt 4fpkt"];
2303--9268[label="0.173913;4pkt 4fpkt"];
2303--11059[label="0.956522;22pkt 22fpkt"];
2476--9310[label="1;1pkt 1fpkt"];
2670--3178[label="0.0123457;3pkt 3fpkt"];
2670--3338[label="0.0533333;4pkt 4fpkt"];
2670--4723[label="0.0142857;2pkt 2fpkt"];
2670--5653[label="0.0227273;1pkt 1fpkt"];
2670--6095[label="0.0922619;31pkt 31fpkt"];
2670--6290[label="0.0408163;10pkt 10fpkt"];
2670--6517[label="0.0714286;24pkt 24fpkt"];
2670--6540[label="0.00806452;1pkt 1fpkt"];
2670--6625[label="0.00377358;1pkt 1fpkt"];
2670--6773[label="0.0193237;4pkt 4fpkt"];
2670--6811[label="0.0327381;11pkt 11fpkt"];
2670--6948[label="0.0533333;4pkt 4fpkt"];
2670--7768[label="0.0123457;3pkt 3fpkt"];
2670--7888[label="0.020202;2pkt 2fpkt"];
2670--8703[label="0.0227273;1pkt 1fpkt"];
2670--9131[label="0.0408163;10pkt 10fpkt"];
2670--9163[label="0.0595238;20pkt 20fpkt"];
2670--9194[label="0.0535714;18pkt 18fpkt"];
2670--9198[label="0.0922619;31pkt 31fpkt"];
2670--9234[label="0.0535714;18pkt 18fpkt"];
2670--9268[label="0.0535714;18pkt 18fpkt"];
2670--9794[label="1;336pkt 336fpkt"];
2973--10591[label="1;48pkt 48fpkt"];
2979--12196[label="1;12pkt 12fpkt"];
3041--6095[label="0.3125;5pkt 5fpkt"];
3041--6811[label="0.3125;5pkt 5fpkt"];
3041--7037[label="1;16pkt 16fpkt"];
3864--4023[label="0.4375;7pkt 7fpkt"];
3864--4489[label="0.461538;6pkt 6fpkt"];
3864--7195[label="0.0232558;3pkt 3fpkt"];
3864--7381[label="0.8;4pkt 4fpkt"];
3864--8068[label="0.461538;6pkt 6fpkt"];
3864--9163[label="0.0155039;2pkt 2fpkt"];
3864--9194[label="0.465116;60pkt 60fpkt"];
3864--9198[label="0.0155039;2pkt 2fpkt"];
3864--9234[label="0.465116;60pkt 60fpkt"];
3864--9268[label="0.465116;60pkt 60fpkt"];
3864--9310[label="0.26087;6pkt 6fpkt"];
3864--9778[label="0.181818;6pkt 6fpkt"];
3864--10053[label="0.1;1pkt 1fpkt"];
3864--10191[label="0.125;2pkt 2fpkt"];
3864--10322[label="0.227273;5pkt 5fpkt"];
3864--10467[label="0.272727;6pkt 6fpkt"];
3864--10488[label="0.0833333;2pkt 2fpkt"];
3864--10731[label="0.047619;1pkt 1fpkt"];
3864--13651[label="0.181818;2pkt 2fpkt"];
3864--13725[label="0.125;2pkt 2fpkt"];
3864--13860[label="0.238095;5pkt 5fpkt"];
3864--13875[label="0.0833333;2pkt 2fpkt"];
3864--15577[label="0.272727;6pkt 6fpkt"];
3959--4138[label="0.166667;3pkt 3fpkt"];
3959--5653[label="0.12;3pkt 3fpkt"];
3959--8003[label="1;15pkt 15fpkt"];
3959--8063[label="0.157895;3pkt 3fpkt"];
3959--8703[label="0.12;3pkt 3fpkt"];
3959--9035[label="0.166667;3pkt 3fpkt"];
3959--9194[label="0.08;2pkt 2fpkt"];
3959--9198[label="0.44;11pkt 11fpkt"];
3959--9234[label="0.08;2pkt 2fpkt"];
3959--9268[label="0.08;2pkt 2fpkt"];
4402--6095[label="0.0714286;1pkt 1fpkt"];
4402--8628[label="0.285714;4pkt 4fpkt"];
4402--12282[label="1;14pkt 14fpkt"];
4402--14774[label="1;14pkt 14fpkt"];
4899--6095[label="0.985075;66pkt 66fpkt"];
4899--8423[label="1;66pkt 66fpkt"];
4899--10173[label="0.985075;66pkt 66fpkt"];
5017--9198[label="0.666667;4pkt 4fpkt"];
5430--9198[label="0.133333;2pkt 2fpkt"];
5430--10492[label="1;15pkt 15fpkt"];
6792--6811[label="0.15;81pkt 81fpkt"];
6792--7147[label="0.00232019;1pkt 1fpkt"];
6792--8420[label="0.178571;10pkt 10fpkt"];
6792--8871[label="0.0414938;30pkt 30fpkt"];
6792--9163[label="0.0484094;35pkt 35fpkt"];
6792--9194[label="0.0733057;53pkt 53fpkt"];
6792--9198[label="0.0622407;45pkt 45fpkt"];
6792--9234[label="0.0733057;53pkt 53fpkt"];
6792--9268[label="0.0733057;53pkt 53fpkt"];
6792--12281[label="1;723pkt 723fpkt"];
6811--6915[label="0.210117;54pkt 54fpkt"];
6811--7037[label="0.3125;5pkt 5fpkt"];
6811--7195[label="0.0391753;19pkt 19fpkt"];
6811--7224[label="0.0502283;11pkt 11fpkt"];
6811--7381[label="0.2;1pkt 1fpkt"];
6811--7580[label="0.0387597;5pkt 5fpkt"];
6811--7744[label="0.0037037;2pkt 2fpkt"];
6811--8250[label="0.230769;21pkt 21fpkt"];
6811--8379[label="0.2;5pkt 5fpkt"];
6811--8968[label="0.0387597;5pkt 5fpkt"];
6811--9163[label="0.0796296;43pkt 43fpkt"];
6811--9194[label="0.114815;62pkt 62fpkt"];
6811--9234[label="0.114815;62pkt 62fpkt"];
6811--9268[label="0.114815;62pkt 62fpkt"];
6811--9310[label="0.173913;4pkt 4fpkt"];
6811--9409[label="0.238095;5pkt 5fpkt"];
6811--9442[label="0.1;54pkt 54fpkt"];
6811--9570[label="0.0222222;1pkt 1fpkt"];
6811--9575[label="0.5;4pkt 4fpkt"];
6811--9677[label="0.166667;2pkt 2fpkt"];
6811--9778[label="0.121212;4pkt 4fpkt"];
6811--9794[label="0.0308989;11pkt 11fpkt"];
6811--10010[label="0.205882;21pkt 21fpkt"];
6811--10081[label="0.24;18pkt 18fpkt"];
6811--10131[label="0.152542;9pkt 9fpkt"];
6811--10141[label="0.257143;9pkt 9fpkt"];
6811--10173[label="0.0704225;5pkt 5fpkt"];
6811--10191[label="0.125;2pkt 2fpkt"];
6811--10216[label="1;4pkt 4fpkt"];
6811--10322[label="0.0909091;2pkt 2fpkt"];
6811--10467[label="0.0454545;1pkt 1fpkt"];
6811--10488[label="0.0416667;1pkt 1fpkt"];
6811--10583[label="0.0487805;2pkt 2fpkt"];
6811--10961[label="1;32pkt 32fpkt"];
6811--11046[label="0.0037037;2pkt 2fpkt"];
6811--11774[label="0.571429;4pkt 4fpkt"];
6811--11971[label="0.0290698;5pkt 5fpkt"];
6811--11980[label="0.0625;1pkt 1fpkt"];
6811--12026[label="0.0322581;1pkt 1fpkt"];
6811--12281[label="0.15;81pkt 81fpkt"];
6811--13309[label="0.227273;5pkt 5fpkt"];
6811--13396[label="0.0227273;1pkt 1fpkt"];
6811--13399[label="0.5;4pkt 4fpkt"];
6811--13545[label="0.0576923;3pkt 3fpkt"];
6811--13628[label="0.207921;21pkt 21fpkt"];
6811--13693[label="0.137931;8pkt 8fpkt"];
6811--13697[label="0.25;9pkt 9fpkt"];
6811--13725[label="0.125;2pkt 2fpkt"];
6811--13860[label="0.047619;1pkt 1fpkt"];
6811--13875[label="0.0416667;1pkt 1fpkt"];
6811--13927[label="0.0487805;2pkt 2fpkt"];
6811--14149[label="0.0037037;2pkt 2fpkt"];
6811--14624[label="0.0625;1pkt 1fpkt"];
6811--14644[label="0.03125;1pkt 1fpkt"];
6811--15354[label="0.571429;4pkt 4fpkt"];
6811--15425[label="0.0576923;3pkt 3fpkt"];
6811--15465[label="0.207921;21pkt 21fpkt"];
6811--15493[label="0.25;9pkt 9fpkt"];
6811--15577[label="0.0454545;1pkt 1fpkt"];
6811--15612[label="0.05;2pkt 2fpkt"];
6811--15731[label="0.0037037;2pkt 2fpkt"];
6811--15992[label="0.03125;1pkt 1fpkt"];
7381--9194[label="0.8;4pkt 4fpkt"];
7381--9234[label="0.8;4pkt 4fpkt"];
7381--9268[label="0.8;4pkt 4fpkt"];
8379--8645[label="0.04;1pkt 1fpkt"];
8379--9194[label="0.12;3pkt 3fpkt"];
8379--9196[label="0.04;1pkt 1fpkt"];
8379--9198[label="0.24;6pkt 6fpkt"];
8379--9234[label="0.12;3pkt 3fpkt"];
8379--9268[label="0.12;3pkt 3fpkt"];
8423--10173[label="0.984848;65pkt 65fpkt"];
9400--13302[label="1;7pkt 7fpkt"];
9409--13309[label="1;21pkt 21fpkt"];
9530--13371[label="1;11pkt 11fpkt"];
9567--13394[label="1;2pkt 2fpkt"];
9567--15352[label="1;2pkt 2fpkt"];
9575--13399[label="1;8pkt 8fpkt"];
9575--15354[label="1;7pkt 7fpkt"];
9644--13432[label="1;17pkt 17fpkt"];
10053--13651[label="1;10pkt 10fpkt"];
10131--13693[label="1;58pkt 58fpkt"];
10141--13697[label="1;35pkt 35fpkt"];
10141--15493[label="1;35pkt 35fpkt"];
10191--13725[label="1;16pkt 16fpkt"];
10280--13768[label="1;6pkt 6fpkt"];
10280--15523[label="1;5pkt 5fpkt"];
10467--13860[label="1;21pkt 21fpkt"];
10467--15577[label="1;22pkt 22fpkt"];
10488--13875[label="1;24pkt 24fpkt"];
11026--14141[label="1;8pkt 8fpkt"];
11776--14518[label="1;20pkt 20fpkt"];
11776--15916[label="1;20pkt 20fpkt"];
11831--14547[label="1;10pkt 10fpkt"];
11831--15937[label="1;10pkt 10fpkt"];
12282--14774[label="1;15pkt 15fpkt"];
13394--15352[label="1;2pkt 2fpkt"];
13399--15354[label="1;7pkt 7fpkt"];
13697--15493[label="1;36pkt 36fpkt"];
13768--15523[label="1;5pkt 5fpkt"];
13860--15577[label="1;21pkt 21fpkt"];
14518--15916[label="1;20pkt 20fpkt"];
14547--15937[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="108.129.217.181" src_port="80"/>
      <filter dst_ip="142.228.95.21" src_port="80"/>
      <filter dst_ip="142.228.95.17" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_379{
style=filled;
color=gray75;
2809[label="20.223.45.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
6922[label="20.223.45.62;s;1pkt 1fpkt", shape=hexagon, color=black];
stat379[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.223.45.62:2757, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2757: (50%)&gt;];
}
2809--6922[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="20.223.45.62" src_port="2757"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_380{
style=filled;
color=gray75;
2165[label="54.64.191.249;d;26pkt 26fpkt", shape=diamond, color=yellow];
2205[label="136.228.241.177;s;77pkt 77fpkt", shape=diamond, color=yellow];
6343[label="54.64.191.249;d;26pkt 26fpkt", shape=hexagon, color=black];
6931[label="136.228.241.177;s;66pkt 66fpkt", shape=hexagon, color=black];
stat380[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.241.177:80, 64.31.200.30:*}[58.4158%]&lt;BR/&gt;{136.228.65.70:80, 54.64.191.249:*}[22.7723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4872%)&lt;BR/&gt; 2448: (1.02564%)&lt;BR/&gt; 2447: (1.02564%)&lt;BR/&gt; 61724: (0.512821%)&lt;BR/&gt; 61722: (0.512821%)&gt;];
}
2165--2205[label="0.0769231;2pkt 2fpkt"];
2165--6258[label="0.0384615;1pkt 1fpkt"];
2165--6343[label="1;26pkt 26fpkt"];
2165--6931[label="0.0769231;2pkt 2fpkt"];
2165--7148[label="0.884615;23pkt 23fpkt"];
2165--9060[label="0.0384615;1pkt 1fpkt"];
2165--9163[label="0.0769231;2pkt 2fpkt"];
2165--12914[label="0.0384615;1pkt 1fpkt"];
2205--4382[label="0.012987;1pkt 1fpkt"];
2205--6343[label="0.0769231;2pkt 2fpkt"];
2205--6357[label="0.860465;37pkt 37fpkt"];
2205--6931[label="1;66pkt 66fpkt"];
2205--8010[label="0.012987;1pkt 1fpkt"];
2205--9103[label="0.012987;1pkt 1fpkt"];
2205--9163[label="0.12987;10pkt 10fpkt"];
2205--9194[label="0.116883;9pkt 9fpkt"];
2205--9198[label="0.025974;2pkt 2fpkt"];
2205--9234[label="0.116883;9pkt 9fpkt"];
2205--9268[label="0.116883;9pkt 9fpkt"];
6343--6931[label="0.0769231;2pkt 2fpkt"];
6343--7148[label="0.884615;23pkt 23fpkt"];
6343--9060[label="0.0384615;1pkt 1fpkt"];
6343--9163[label="0.0769231;2pkt 2fpkt"];
6343--12914[label="0.0384615;1pkt 1fpkt"];
6931--9163[label="0.151515;10pkt 10fpkt"];
6931--9194[label="0.136364;9pkt 9fpkt"];
6931--9198[label="0.0151515;1pkt 1fpkt"];
6931--9234[label="0.136364;9pkt 9fpkt"];
6931--9268[label="0.136364;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="64.31.200.30" src_ip="136.228.241.177" src_port="80"/>
      <filter dst_ip="54.64.191.249" src_ip="136.228.65.70" src_port="80"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_381{
style=filled;
color=gray75;
2825[label="77.108.188.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
6934[label="77.108.188.222;s;1pkt 1fpkt", shape=hexagon, color=black];
stat381[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.108.188.222:18787, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18787: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
2825--6934[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="77.108.188.222" src_port="18787"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_382{
style=filled;
color=gray75;
3316[label="69.183.155.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
6939[label="69.183.155.82;s;1pkt 1fpkt", shape=hexagon, color=black];
stat382[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.183.155.82:12409, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12409: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
3316--6939[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="69.183.155.82" src_port="12409"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_384{
style=filled;
color=gray75;
3356[label="78.75.80.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
6960[label="78.75.80.99;s;1pkt 1fpkt", shape=hexagon, color=black];
10994[label="78.75.80.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat384[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.75.80.99:34072, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34072: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
3356--6960[label="1;1pkt 1fpkt"];
3356--10994[label="1;1pkt 1fpkt"];
6960--10994[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="78.75.80.99" src_port="34072"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_385{
style=filled;
color=gray75;
2260[label="204.5.32.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
6962[label="204.5.32.111;s;1pkt 1fpkt", shape=hexagon, color=black];
stat385[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.5.32.111:1724, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1889: (50%)&lt;BR/&gt; 1724: (50%)&gt;];
}
2260--6962[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="204.5.32.111" src_port="1724"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.14367,2.09264,504,1 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_386{
style=filled;
color=gray75;
337[label="21.18.115.178s;110pkt 110fpkt", shape=rectangle, color=red];
6675[label="21.18.115.178;s;208pkt 208fpkt", shape=hexagon, color=black];
7002[label="136.228.77.0;d;208pkt 208fpkt", shape=hexagon, color=black];
stat386[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.18.115.178:*, 136.228.77.0:443}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 62478: (0.285171%)&lt;BR/&gt; 62477: (0.285171%)&lt;BR/&gt; 62476: (0.285171%)&lt;BR/&gt; 62475: (0.285171%)&gt;];
}
337--6675[label="1;110pkt 110fpkt"];
337--7002[label="1;110pkt 110fpkt"];
6675--7002[label="1;208pkt 208fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.77.0" dst_port="443" src_ip="21.18.115.178"/>
    </slice>
    <from sec="1223614833" usec="0"/>
    <to sec="1223615090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_387{
style=filled;
color=gray75;
2974[label="218.45.157.82;d;188pkt 188fpkt", shape=diamond, color=yellow];
2975[label="162.73.218.192;s;213pkt 213fpkt", shape=diamond, color=yellow];
7025[label="162.73.218.192;s;196pkt 196fpkt", shape=hexagon, color=black];
stat387[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.218.192:*, 218.45.157.82:80}[88.2629%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2903: (0.251256%)&lt;BR/&gt; 2901: (0.251256%)&lt;BR/&gt; 2899: (0.251256%)&lt;BR/&gt; 2898: (0.251256%)&gt;];
}
2974--2975[label="1;188pkt 188fpkt"];
2974--7025[label="0.968085;182pkt 182fpkt"];
2975--5599[label="0.0117647;1pkt 1fpkt"];
2975--7025[label="1;196pkt 196fpkt"];
2975--7850[label="0.0140845;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="218.45.157.82" dst_port="80" src_ip="162.73.218.192"/>
    </slice>
    <from sec="1223614904" usec="0"/>
    <to sec="1223615431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_388{
style=filled;
color=gray75;
2993[label="136.228.161.48;d;5pkt 5fpkt", shape=diamond, color=yellow];
3110[label="192.105.77.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
5468[label="104.243.248.23;s;1pkt 1fpkt", shape=diamond, color=yellow];
7029[label="136.228.161.48;d;1pkt 1fpkt", shape=hexagon, color=black];
7347[label="192.105.77.171;s;1pkt 1fpkt", shape=hexagon, color=black];
12113[label="192.105.77.171;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat388[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.248.23:80, 136.228.161.48:21254}[20%]&lt;BR/&gt;{192.105.77.171:80, 136.228.161.48:21075}[20%]&lt;BR/&gt;{208.133.110.77:80, 136.228.161.48:21159}[20%]&lt;BR/&gt;{208.133.110.77:80, 136.228.161.48:21185}[20%]&lt;BR/&gt;{208.133.110.77:80, 136.228.161.48:21280}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 21075: (25%)&lt;BR/&gt; 21254: (10%)&lt;BR/&gt; 21280: (5%)&lt;BR/&gt; 21185: (5%)&gt;];
}
2993--3110[label="1;1pkt 1fpkt"];
2993--3313[label="0.6;3pkt 3fpkt"];
2993--5468[label="1;1pkt 1fpkt"];
2993--7029[label="1;1pkt 1fpkt"];
2993--7347[label="1;1pkt 1fpkt"];
2993--7536[label="0.4;2pkt 2fpkt"];
2993--9198[label="0.2;1pkt 1fpkt"];
2993--10639[label="0.6;3pkt 3fpkt"];
2993--12113[label="1;1pkt 1fpkt"];
3110--7029[label="1;1pkt 1fpkt"];
3110--7347[label="1;1pkt 1fpkt"];
3110--12113[label="1;1pkt 1fpkt"];
5468--9198[label="1;1pkt 1fpkt"];
7029--7347[label="1;1pkt 1fpkt"];
7029--12113[label="1;1pkt 1fpkt"];
7347--12113[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.161.48" dst_port="21280" src_ip="208.133.110.77" src_port="80"/>
      <filter dst_ip="136.228.161.48" dst_port="21185" src_ip="208.133.110.77" src_port="80"/>
      <filter dst_ip="136.228.161.48" dst_port="21159" src_ip="208.133.110.77" src_port="80"/>
      <filter dst_ip="136.228.161.48" dst_port="21075" src_ip="192.105.77.171" src_port="80"/>
      <filter dst_ip="136.228.161.48" dst_port="21254" src_ip="104.243.248.23" src_port="80"/>
    </slice>
    <from sec="1223614941" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_389{
style=filled;
color=gray75;
2519[label="213.48.233.35;s;12pkt 12fpkt", shape=diamond, color=yellow];
2561[label="136.228.86.22;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat389[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.233.35:80, 136.228.154.85:*}[66.6667%]&lt;BR/&gt;{213.48.233.35:80, 136.228.86.22:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4167: (6.25%)&lt;BR/&gt; 4165: (6.25%)&lt;BR/&gt; 4037: (6.25%)&lt;BR/&gt; 4035: (6.25%)&gt;];
}
2519--2561[label="1;4pkt 4fpkt"];
2519--7030[label="0.8;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.154.85" src_ip="213.48.233.35" src_port="80"/>
      <filter dst_ip="136.228.86.22" src_ip="213.48.233.35" src_port="80"/>
    </slice>
    <from sec="1223614948" usec="0"/>
    <to sec="1223615057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_390{
style=filled;
color=gray75;
2408[label="194.173.185.23;s;49pkt 49fpkt", shape=diamond, color=yellow];
7041[label="194.173.185.23;s;49pkt 49fpkt", shape=hexagon, color=black];
stat390[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.185.23:80, 136.228.120.112:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54202: (1.02041%)&lt;BR/&gt; 54201: (1.02041%)&lt;BR/&gt; 54200: (1.02041%)&lt;BR/&gt; 54199: (1.02041%)&gt;];
}
2408--7041[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.120.112" src_ip="194.173.185.23" src_port="80"/>
    </slice>
    <from sec="1223615008" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_391{
style=filled;
color=gray75;
3083[label="203.41.3.235;s;1pkt 1fpkt", shape=diamond, color=yellow];
7051[label="203.41.3.235;s;1pkt 1fpkt", shape=hexagon, color=black];
stat391[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.41.3.235:62219, 142.243.151.3:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62219: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3083--6417[label="1;1pkt 1fpkt"];
3083--7051[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.151.3" dst_port="80" src_ip="203.41.3.235" src_port="62219"/>
    </slice>
    <from sec="1223615024" usec="0"/>
    <to sec="1223615028" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_392{
style=filled;
color=gray75;
3095[label="192.105.74.41;s;1pkt 1fpkt", shape=diamond, color=yellow];
7055[label="192.105.74.41;s;1pkt 1fpkt", shape=hexagon, color=black];
stat392[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.74.41:80, 162.73.211.17:1803}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1803: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3095--7055[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.211.17" dst_port="1803" src_ip="192.105.74.41" src_port="80"/>
    </slice>
    <from sec="1223615033" usec="0"/>
    <to sec="1223615090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_393{
style=filled;
color=gray75;
3520[label="204.156.171.35;d;9pkt 9fpkt", shape=diamond, color=yellow];
7062[label="204.156.171.35;d;9pkt 9fpkt", shape=hexagon, color=black];
stat393[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.58.13:80, 204.156.171.35:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 44895: (5.55556%)&lt;BR/&gt; 44894: (5.55556%)&lt;BR/&gt; 44893: (5.55556%)&lt;BR/&gt; 44849: (5.55556%)&gt;];
}
3520--6947[label="1;9pkt 9fpkt"];
3520--7062[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="204.156.171.35" src_ip="213.33.58.13" src_port="80"/>
    </slice>
    <from sec="1223615060" usec="0"/>
    <to sec="1223615135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_394{
style=filled;
color=gray75;
3623[label="195.162.144.199;s;54pkt 54fpkt", shape=diamond, color=yellow];
7081[label="195.162.144.199;s;54pkt 54fpkt", shape=hexagon, color=black];
12522[label="195.162.144.199;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat394[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.162.144.199:80, 136.228.29.44:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51797: (0.925926%)&lt;BR/&gt; 51796: (0.925926%)&lt;BR/&gt; 51795: (0.925926%)&lt;BR/&gt; 51794: (0.925926%)&gt;];
}
3623--7081[label="1;54pkt 54fpkt"];
3623--7862[label="1;54pkt 54fpkt"];
3623--12522[label="1;54pkt 54fpkt"];
7081--7862[label="1;54pkt 54fpkt"];
7081--12522[label="1;54pkt 54fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.29.44" src_ip="195.162.144.199" src_port="80"/>
    </slice>
    <from sec="1223615132" usec="0"/>
    <to sec="1223615186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_395{
style=filled;
color=gray75;
177[label="136.228.71.178s;1pkt 1fpkt", shape=rectangle, color=red];
585[label="136.228.71.178;s;754pkt 754fpkt", shape=diamond, color=yellow];
1183[label="219.128.236.205;d;122pkt 122fpkt", shape=diamond, color=yellow];
1197[label="219.128.236.193;d;79pkt 79fpkt", shape=diamond, color=yellow];
1269[label="211.111.165.190;d;53pkt 53fpkt", shape=diamond, color=yellow];
1426[label="220.246.46.181;d;49pkt 49fpkt", shape=diamond, color=yellow];
1726[label="114.198.158.13;d;11pkt 11fpkt", shape=diamond, color=yellow];
1952[label="219.43.10.43;d;57pkt 57fpkt", shape=diamond, color=yellow];
2122[label="220.244.161.234;d;229pkt 229fpkt", shape=diamond, color=yellow];
2293[label="68.145.51.174;d;2pkt 2fpkt", shape=diamond, color=yellow];
2882[label="219.128.236.204;d;51pkt 51fpkt", shape=diamond, color=yellow];
3390[label="219.128.236.211;d;33pkt 33fpkt", shape=diamond, color=yellow];
6031[label="219.128.236.205;d;71pkt 71fpkt", shape=hexagon, color=black];
6052[label="211.111.165.190;d;6pkt 6fpkt", shape=hexagon, color=black];
6282[label="219.128.236.193;d;58pkt 58fpkt", shape=hexagon, color=black];
6653[label="219.128.236.204;d;46pkt 46fpkt", shape=hexagon, color=black];
6840[label="219.43.10.43;d;33pkt 33fpkt", shape=hexagon, color=black];
7090[label="136.228.71.178;s;466pkt 466fpkt", shape=hexagon, color=black];
7228[label="220.246.46.181;d;49pkt 49fpkt", shape=hexagon, color=black];
8078[label="68.145.51.174;d;2pkt 2fpkt", shape=hexagon, color=black];
8217[label="220.244.161.234;d;202pkt 202fpkt", shape=hexagon, color=black];
12230[label="136.228.71.178;1048pkt 1048fpkt", shape=pentagon, color=darkviolet];
14748[label="136.228.71.178;1049pkt 1049fpkt", shape=invtriangle, color=brown];
stat395[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.71.178:*, 220.244.161.234:80}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6533%)&lt;BR/&gt; 443: (0.257213%)&lt;BR/&gt; 0: (0.178931%)&lt;BR/&gt; 54977: (0.0782823%)&lt;BR/&gt; 55676: (0.0670991%)&gt;];
}
177--585[label="1;1pkt 1fpkt"];
177--1197[label="1;1pkt 1fpkt"];
177--6282[label="1;1pkt 1fpkt"];
177--7090[label="1;1pkt 1fpkt"];
177--12230[label="1;1pkt 1fpkt"];
177--14748[label="1;1pkt 1fpkt"];
585--1183[label="0.893443;109pkt 109fpkt"];
585--1197[label="0.898734;71pkt 71fpkt"];
585--1269[label="1;53pkt 53fpkt"];
585--1312[label="0.319048;67pkt 67fpkt"];
585--1359[label="0.444444;4pkt 4fpkt"];
585--1426[label="0.571429;28pkt 28fpkt"];
585--1726[label="1;11pkt 11fpkt"];
585--1952[label="0.210526;12pkt 12fpkt"];
585--2122[label="0.851528;195pkt 195fpkt"];
585--2293[label="1;2pkt 2fpkt"];
585--2882[label="0.901961;46pkt 46fpkt"];
585--3390[label="0.818182;27pkt 27fpkt"];
585--3453[label="0.0357143;3pkt 3fpkt"];
585--6031[label="1;71pkt 71fpkt"];
585--6052[label="1;6pkt 6fpkt"];
585--6073[label="0.444444;4pkt 4fpkt"];
585--6282[label="1;58pkt 58fpkt"];
585--6580[label="0.372222;67pkt 67fpkt"];
585--6653[label="1;46pkt 46fpkt"];
585--6840[label="0.333333;11pkt 11fpkt"];
585--7090[label="1;466pkt 466fpkt"];
585--7228[label="0.571429;28pkt 28fpkt"];
585--8078[label="1;2pkt 2fpkt"];
585--8217[label="0.965347;195pkt 195fpkt"];
585--9178[label="0.00132626;1pkt 1fpkt"];
585--9218[label="0.00132626;1pkt 1fpkt"];
585--9252[label="0.00132626;1pkt 1fpkt"];
585--12230[label="0.998674;753pkt 753fpkt"];
585--14748[label="1;754pkt 754fpkt"];
1183--6031[label="1;71pkt 71fpkt"];
1183--7090[label="0.581967;71pkt 71fpkt"];
1183--12230[label="1;122pkt 122fpkt"];
1183--14748[label="1;122pkt 122fpkt"];
1197--6282[label="1;58pkt 58fpkt"];
1197--7090[label="0.607595;48pkt 48fpkt"];
1197--12230[label="1;79pkt 79fpkt"];
1197--14748[label="1;79pkt 79fpkt"];
1269--6052[label="1;6pkt 6fpkt"];
1269--7090[label="0.660377;35pkt 35fpkt"];
1269--12230[label="1;53pkt 53fpkt"];
1269--14748[label="1;53pkt 53fpkt"];
1426--7090[label="0.387755;19pkt 19fpkt"];
1426--7228[label="1;49pkt 49fpkt"];
1426--12230[label="0.591837;29pkt 29fpkt"];
1426--14748[label="0.591837;29pkt 29fpkt"];
1726--7090[label="1;11pkt 11fpkt"];
1726--12230[label="1;11pkt 11fpkt"];
1726--14748[label="1;11pkt 11fpkt"];
1952--6840[label="1;33pkt 33fpkt"];
1952--7090[label="0.192982;11pkt 11fpkt"];
1952--12230[label="0.210526;12pkt 12fpkt"];
1952--14748[label="0.210526;12pkt 12fpkt"];
2122--7090[label="0.49345;113pkt 113fpkt"];
2122--8217[label="1;202pkt 202fpkt"];
2122--12230[label="0.969432;222pkt 222fpkt"];
2122--14748[label="0.969432;222pkt 222fpkt"];
2293--8078[label="1;2pkt 2fpkt"];
2293--12230[label="1;2pkt 2fpkt"];
2293--14748[label="1;2pkt 2fpkt"];
2882--6653[label="1;46pkt 46fpkt"];
2882--7090[label="0.588235;30pkt 30fpkt"];
2882--12230[label="1;51pkt 51fpkt"];
2882--14748[label="1;51pkt 51fpkt"];
3390--7090[label="0.545455;18pkt 18fpkt"];
3390--12230[label="1;33pkt 33fpkt"];
3390--14748[label="1;33pkt 33fpkt"];
6031--7090[label="1;71pkt 71fpkt"];
6031--12230[label="1;71pkt 71fpkt"];
6031--14748[label="1;71pkt 71fpkt"];
6052--7090[label="1;6pkt 6fpkt"];
6052--12230[label="1;6pkt 6fpkt"];
6052--14748[label="1;6pkt 6fpkt"];
6282--7090[label="0.827586;48pkt 48fpkt"];
6282--12230[label="1;58pkt 58fpkt"];
6282--14748[label="1;58pkt 58fpkt"];
6653--7090[label="0.652174;30pkt 30fpkt"];
6653--12230[label="1;46pkt 46fpkt"];
6653--14748[label="1;46pkt 46fpkt"];
6840--7090[label="0.333333;11pkt 11fpkt"];
6840--12230[label="0.333333;11pkt 11fpkt"];
6840--14748[label="0.333333;11pkt 11fpkt"];
7090--7228[label="0.387755;19pkt 19fpkt"];
7090--8217[label="0.559406;113pkt 113fpkt"];
7090--9178[label="0.00214592;1pkt 1fpkt"];
7090--9218[label="0.00214592;1pkt 1fpkt"];
7090--9252[label="0.00214592;1pkt 1fpkt"];
7090--12230[label="0.997854;465pkt 465fpkt"];
7090--14748[label="1;466pkt 466fpkt"];
7228--12230[label="0.591837;29pkt 29fpkt"];
7228--14748[label="0.591837;29pkt 29fpkt"];
8078--12230[label="1;2pkt 2fpkt"];
8078--14748[label="1;2pkt 2fpkt"];
8217--12230[label="0.965347;195pkt 195fpkt"];
8217--14748[label="0.965347;195pkt 195fpkt"];
12230--14748[label="1;1048pkt 1048fpkt"];
</description>
    <slice>
      <filter dst_ip="220.244.161.234" dst_port="80" src_ip="136.228.71.178"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_398{
style=filled;
color=gray75;
702[label="206.104.61.109;s;1pkt 1fpkt", shape=diamond, color=yellow];
7101[label="206.104.61.109;s;1pkt 1fpkt", shape=hexagon, color=black];
stat398[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.104.61.109:8000, 136.228.146.164:14402}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14402: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
702--7101[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.146.164" dst_port="14402" src_ip="206.104.61.109" src_port="8000"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_399{
style=filled;
color=gray75;
2601[label="160.49.29.78;s;576pkt 576fpkt", shape=diamond, color=yellow];
7107[label="160.49.29.78;s;515pkt 515fpkt", shape=hexagon, color=black];
stat399[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.49.29.78:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2601--4159[label="0.00262467;1pkt 1fpkt"];
2601--4164[label="0.00253165;1pkt 1fpkt"];
2601--4171[label="0.00257069;1pkt 1fpkt"];
2601--5045[label="0.00343643;1pkt 1fpkt"];
2601--5065[label="0.003663;1pkt 1fpkt"];
2601--5070[label="0.003003;1pkt 1fpkt"];
2601--5074[label="0.00371747;1pkt 1fpkt"];
2601--5094[label="0.00371747;1pkt 1fpkt"];
2601--5500[label="0.00431034;1pkt 1fpkt"];
2601--7107[label="1;515pkt 515fpkt"];
2601--7441[label="0.00282486;1pkt 1fpkt"];
2601--8555[label="0.003663;1pkt 1fpkt"];
2601--8564[label="0.00371747;1pkt 1fpkt"];
7107--7441[label="0.00282486;1pkt 1fpkt"];
7107--8555[label="0.003663;1pkt 1fpkt"];
7107--8564[label="0.00371747;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="160.49.29.78"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.26872,2.13005,503,0 0 0 1 0 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_401{
style=filled;
color=gray75;
805[label="208.45.64.35;s;158pkt 158fpkt", shape=diamond, color=yellow];
1953[label="219.43.10.43;s;57pkt 57fpkt", shape=diamond, color=yellow];
2443[label="212.138.109.134;s;40pkt 40fpkt", shape=diamond, color=yellow];
9054[label="136.228.148.136;d;88pkt 88fpkt", shape=polygon, color=gold];
stat401[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.45.64.35:80, *:*}[47.1642%]&lt;BR/&gt;{*:*, 136.228.148.136:*}[26.2687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.8571%)&lt;BR/&gt; 61597: (6.12245%)&lt;BR/&gt; 0: (1.45773%)&lt;BR/&gt; 63099: (0.291545%)&lt;BR/&gt; 62919: (0.291545%)&gt;];
}
805--837[label="0.164557;26pkt 26fpkt"];
805--870[label="0.00632911;1pkt 1fpkt"];
805--965[label="0.240506;38pkt 38fpkt"];
805--1493[label="0.0126582;2pkt 2fpkt"];
805--1518[label="0.297468;47pkt 47fpkt"];
805--1883[label="0.00632911;1pkt 1fpkt"];
805--3146[label="0.0215054;2pkt 2fpkt"];
805--3697[label="0.0294118;2pkt 2fpkt"];
805--5655[label="0.0555556;2pkt 2fpkt"];
805--5952[label="0.147541;9pkt 9fpkt"];
805--6370[label="0.0126582;2pkt 2fpkt"];
805--6493[label="1;47pkt 47fpkt"];
805--7120[label="0.0227273;2pkt 2fpkt"];
805--7726[label="0.126582;20pkt 20fpkt"];
805--8529[label="0.240506;38pkt 38fpkt"];
805--9054[label="0.0227273;2pkt 2fpkt"];
805--9163[label="0.0949367;15pkt 15fpkt"];
805--9194[label="0.14557;23pkt 23fpkt"];
805--9198[label="0.0379747;6pkt 6fpkt"];
805--9234[label="0.14557;23pkt 23fpkt"];
805--9268[label="0.14557;23pkt 23fpkt"];
805--9896[label="1;158pkt 158fpkt"];
1953--3146[label="0.0701754;4pkt 4fpkt"];
1953--6173[label="0.0526316;3pkt 3fpkt"];
1953--6547[label="1;57pkt 57fpkt"];
1953--7120[label="0.0701754;4pkt 4fpkt"];
1953--9054[label="0.0701754;4pkt 4fpkt"];
1953--9163[label="0.0350877;2pkt 2fpkt"];
1953--9194[label="0.0350877;2pkt 2fpkt"];
1953--9198[label="0.0175439;1pkt 1fpkt"];
1953--9234[label="0.0350877;2pkt 2fpkt"];
1953--9268[label="0.0350877;2pkt 2fpkt"];
2443--3146[label="0.05;2pkt 2fpkt"];
2443--6423[label="1;7pkt 7fpkt"];
2443--7120[label="0.05;2pkt 2fpkt"];
2443--8846[label="1;7pkt 7fpkt"];
2443--9054[label="0.05;2pkt 2fpkt"];
2443--9194[label="0.1;4pkt 4fpkt"];
2443--9234[label="0.1;4pkt 4fpkt"];
2443--9268[label="0.1;4pkt 4fpkt"];
9054--9896[label="0.0227273;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.148.136"/>
      <filter src_ip="208.45.64.35" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,901,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_402{
style=filled;
color=gray75;
1850[label="164.25.68.135;d;8pkt 8fpkt", shape=diamond, color=yellow];
1851[label="108.208.188.217;s;1pkt 1fpkt", shape=diamond, color=yellow];
7128[label="108.208.188.217;s;1pkt 1fpkt", shape=hexagon, color=black];
stat402[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.68.135:33453}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8011: (15%)&lt;BR/&gt; 3653: (15%)&lt;BR/&gt; 33453: (10%)&lt;BR/&gt; 33458: (5%)&lt;BR/&gt; 33456: (5%)&gt;];
}
1850--1851[label="1;1pkt 1fpkt"];
1850--7128[label="1;1pkt 1fpkt"];
1851--7128[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.68.135" dst_port="33453"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_404{
style=filled;
color=gray75;
2642[label="20.100.111.86;s;1pkt 1fpkt", shape=diamond, color=yellow];
7161[label="20.100.111.86;s;1pkt 1fpkt", shape=hexagon, color=black];
stat404[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.100.111.86:1191, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1191: (50%)&gt;];
}
2642--7161[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="20.100.111.86" src_port="1191"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_405{
style=filled;
color=gray75;
1276[label="213.33.154.81;d;2pkt 2fpkt", shape=diamond, color=yellow];
1277[label="73.42.148.40;s;2pkt 2fpkt", shape=diamond, color=yellow];
6567[label="73.42.148.40;s;2pkt 2fpkt", shape=hexagon, color=black];
7183[label="213.33.154.81;d;2pkt 2fpkt", shape=hexagon, color=black];
10002[label="73.42.148.40;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13622[label="73.42.148.40;1pkt 1fpkt", shape=invtriangle, color=brown];
stat405[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.42.148.40:554, 213.33.154.81:1156}[50%]&lt;BR/&gt;{73.42.148.40:5004, 213.33.154.81:1160}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1156: (30%)&lt;BR/&gt; 554: (30%)&lt;BR/&gt; 5004: (20%)&lt;BR/&gt; 1160: (20%)&gt;];
}
1276--1277[label="1;2pkt 2fpkt"];
1276--6567[label="1;2pkt 2fpkt"];
1276--7183[label="1;2pkt 2fpkt"];
1276--10002[label="1;1pkt 1fpkt"];
1276--13622[label="1;1pkt 1fpkt"];
1277--6567[label="1;2pkt 2fpkt"];
1277--7183[label="1;2pkt 2fpkt"];
1277--10002[label="1;1pkt 1fpkt"];
1277--13622[label="1;1pkt 1fpkt"];
6567--7183[label="1;2pkt 2fpkt"];
6567--10002[label="1;1pkt 1fpkt"];
6567--13622[label="1;1pkt 1fpkt"];
7183--10002[label="1;1pkt 1fpkt"];
7183--13622[label="1;1pkt 1fpkt"];
10002--13622[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.154.81" dst_port="1160" src_ip="73.42.148.40" src_port="5004"/>
      <filter dst_ip="213.33.154.81" dst_port="1156" src_ip="73.42.148.40" src_port="554"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
278[label="164.25.41.136d;1pkt 1fpkt", shape=rectangle, color=red];
2037[label="164.25.41.136;d;101pkt 101fpkt", shape=diamond, color=yellow];
2912[label="219.168.209.19;s;30pkt 30fpkt", shape=diamond, color=yellow];
6665[label="219.168.209.19;s;30pkt 30fpkt", shape=hexagon, color=black];
7186[label="164.25.41.136;d;77pkt 77fpkt", shape=hexagon, color=black];
9642[label="219.168.209.19;29pkt 29fpkt", shape=pentagon, color=darkviolet];
13431[label="219.168.209.19;30pkt 30fpkt", shape=invtriangle, color=brown];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.41.136:25}[68.3168%]&lt;BR/&gt;{219.168.209.19:*, 164.25.41.136:80}[29.703%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30.3691%)&lt;BR/&gt; 25: (19.4631%)&lt;BR/&gt; 60334: (1.00671%)&lt;BR/&gt; 48763: (1.00671%)&lt;BR/&gt; 48092: (1.00671%)&gt;];
}
278--2037[label="1;1pkt 1fpkt"];
278--7186[label="1;1pkt 1fpkt"];
2037--2912[label="1;30pkt 30fpkt"];
2037--6665[label="1;30pkt 30fpkt"];
2037--7186[label="1;77pkt 77fpkt"];
2037--9177[label="0.039604;4pkt 4fpkt"];
2037--9217[label="0.039604;4pkt 4fpkt"];
2037--9251[label="0.039604;4pkt 4fpkt"];
2037--9642[label="1;29pkt 29fpkt"];
2037--11130[label="0.5;1pkt 1fpkt"];
2037--11310[label="0.333333;1pkt 1fpkt"];
2037--13431[label="1;30pkt 30fpkt"];
2037--14195[label="0.5;1pkt 1fpkt"];
2912--6665[label="1;30pkt 30fpkt"];
2912--7186[label="1;30pkt 30fpkt"];
2912--9642[label="1;29pkt 29fpkt"];
2912--13431[label="1;30pkt 30fpkt"];
6665--7186[label="1;30pkt 30fpkt"];
6665--9642[label="1;29pkt 29fpkt"];
6665--13431[label="1;30pkt 30fpkt"];
7186--9177[label="0.0519481;4pkt 4fpkt"];
7186--9217[label="0.0519481;4pkt 4fpkt"];
7186--9251[label="0.0519481;4pkt 4fpkt"];
7186--9642[label="1;29pkt 29fpkt"];
7186--11130[label="0.5;1pkt 1fpkt"];
7186--11310[label="0.333333;1pkt 1fpkt"];
7186--13431[label="1;30pkt 30fpkt"];
7186--14195[label="0.5;1pkt 1fpkt"];
9642--13431[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.41.136" dst_port="25"/>
      <filter dst_ip="164.25.41.136" dst_port="80" src_ip="219.168.209.19"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_407{
style=filled;
color=gray75;
5695[label="212.138.109.210;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat407[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.23.20:3336, 212.138.109.210:554}[33.3333%]&lt;BR/&gt;{136.228.23.20:3339, 212.138.109.210:554}[33.3333%]&lt;BR/&gt;{136.228.23.20:3341, 212.138.109.210:554}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 554: (50%)&lt;BR/&gt; 3341: (16.6667%)&lt;BR/&gt; 3339: (16.6667%)&lt;BR/&gt; 3336: (16.6667%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="212.138.109.210" dst_port="554" src_ip="136.228.23.20" src_port="3341"/>
      <filter dst_ip="212.138.109.210" dst_port="554" src_ip="136.228.23.20" src_port="3339"/>
      <filter dst_ip="212.138.109.210" dst_port="554" src_ip="136.228.23.20" src_port="3336"/>
    </slice>
    <from sec="1223615356" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_409{
style=filled;
color=gray75;
2186[label="196.10.132.212;d;122pkt 122fpkt", shape=diamond, color=yellow];
7234[label="196.10.132.212;d;69pkt 69fpkt", shape=hexagon, color=black];
stat409[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.71.181:*, 196.10.132.212:80}[97.541%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60937: (0.52356%)&lt;BR/&gt; 60907: (0.52356%)&lt;BR/&gt; 60897: (0.52356%)&lt;BR/&gt; 60877: (0.52356%)&gt;];
}
2186--3693[label="0.00819672;1pkt 1fpkt"];
2186--7234[label="1;69pkt 69fpkt"];
2186--10642[label="0.00819672;1pkt 1fpkt"];
2186--13959[label="0.00819672;1pkt 1fpkt"];
2186--15628[label="0.00819672;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="196.10.132.212" dst_port="80" src_ip="136.228.71.181"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_410{
style=filled;
color=gray75;
3773[label="164.25.102.83;d;1pkt 1fpkt", shape=diamond, color=yellow];
7237[label="164.25.102.83;d;1pkt 1fpkt", shape=hexagon, color=black];
stat410[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.87.30.7:6667, 164.25.102.83:1833}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (50%)&lt;BR/&gt; 1833: (50%)&gt;];
}
3773--7237[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.102.83" dst_port="1833" src_ip="219.87.30.7" src_port="6667"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_411{
style=filled;
color=gray75;
5414[label="136.228.81.165;d;101pkt 101fpkt", shape=diamond, color=yellow];
5415[label="21.24.162.94;s;5pkt 5fpkt", shape=diamond, color=yellow];
5451[label="21.24.168.82;s;22pkt 22fpkt", shape=diamond, color=yellow];
8498[label="21.24.162.94;s;5pkt 5fpkt", shape=hexagon, color=black];
10737[label="21.24.168.82;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14005[label="21.24.168.82;21pkt 21fpkt", shape=invtriangle, color=brown];
15649[label="21.24.168.82;21pkt 21fpkt", shape=invhouse, color=bisque];
stat411[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.24.170.249:80, 136.228.81.165:*}[58.4158%]&lt;BR/&gt;{21.24.168.82:80, 136.228.81.165:*}[21.7822%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3845: (1.26904%)&lt;BR/&gt; 3843: (1.26904%)&lt;BR/&gt; 3793: (1.26904%)&lt;BR/&gt; 3792: (1.26904%)&gt;];
}
5414--5415[label="1;5pkt 5fpkt"];
5414--5451[label="1;22pkt 22fpkt"];
5414--8498[label="1;5pkt 5fpkt"];
5414--9198[label="0.0792079;8pkt 8fpkt"];
5414--10631[label="0.263158;5pkt 5fpkt"];
5414--10737[label="1;22pkt 22fpkt"];
5414--13953[label="0.277778;5pkt 5fpkt"];
5414--14005[label="1;21pkt 21fpkt"];
5414--15649[label="1;21pkt 21fpkt"];
5415--8498[label="1;5pkt 5fpkt"];
5415--9198[label="0.2;1pkt 1fpkt"];
5451--9198[label="0.181818;4pkt 4fpkt"];
5451--10737[label="1;22pkt 22fpkt"];
5451--14005[label="1;21pkt 21fpkt"];
5451--15649[label="1;21pkt 21fpkt"];
8498--9198[label="0.2;1pkt 1fpkt"];
10737--14005[label="1;21pkt 21fpkt"];
10737--15649[label="1;21pkt 21fpkt"];
14005--15649[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.81.165" src_ip="21.24.170.249" src_port="80"/>
      <filter dst_ip="136.228.81.165" src_ip="21.24.168.82" src_port="80"/>
    </slice>
    <from sec="1223615472" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_412{
style=filled;
color=gray75;
3789[label="192.88.24.132;d;150pkt 150fpkt", shape=diamond, color=yellow];
3790[label="136.228.18.107;s;150pkt 150fpkt", shape=diamond, color=yellow];
7245[label="136.228.18.107;s;101pkt 101fpkt", shape=hexagon, color=black];
7874[label="192.88.24.132;d;150pkt 150fpkt", shape=hexagon, color=black];
9083[label="192.88.24.132;d;134pkt 134fpkt", shape=polygon, color=gold];
stat412[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.18.107:*, 192.88.24.132:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2223: (0.364964%)&lt;BR/&gt; 2221: (0.364964%)&lt;BR/&gt; 2219: (0.364964%)&lt;BR/&gt; 2217: (0.364964%)&gt;];
}
3789--3790[label="1;150pkt 150fpkt"];
3789--7245[label="1;101pkt 101fpkt"];
3789--7874[label="1;150pkt 150fpkt"];
3789--9083[label="1;134pkt 134fpkt"];
3790--7245[label="1;101pkt 101fpkt"];
3790--7874[label="1;150pkt 150fpkt"];
3790--9083[label="1;134pkt 134fpkt"];
7245--7874[label="1;101pkt 101fpkt"];
7245--9083[label="1;101pkt 101fpkt"];
7874--9083[label="1;134pkt 134fpkt"];
</description>
    <slice>
      <filter dst_ip="192.88.24.132" dst_port="80" src_ip="136.228.18.107"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_413{
style=filled;
color=gray75;
2840[label="73.169.71.71;s;1pkt 1fpkt", shape=diamond, color=yellow];
7250[label="73.169.71.71;s;1pkt 1fpkt", shape=hexagon, color=black];
stat413[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.169.71.71:23722, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23722: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
2840--7250[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="73.169.71.71" src_port="23722"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_414{
style=filled;
color=gray75;
2863[label="65.201.2.185;s;1pkt 1fpkt", shape=diamond, color=yellow];
7263[label="65.201.2.185;s;1pkt 1fpkt", shape=hexagon, color=black];
stat414[shape=component, label=&lt;Rules:&lt;BR/&gt;{65.201.2.185:28425, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 28425: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
2863--7263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="65.201.2.185" src_port="28425"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_415{
style=filled;
color=gray75;
1622[label="19.210.210.12;s;50pkt 50fpkt", shape=diamond, color=yellow];
7290[label="19.210.210.12;s;50pkt 50fpkt", shape=hexagon, color=black];
9510[label="19.210.210.12;49pkt 49fpkt", shape=pentagon, color=darkviolet];
13359[label="19.210.210.12;49pkt 49fpkt", shape=invtriangle, color=brown];
stat415[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.210.210.12:*, 212.21.138.195:3124}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 5000: (1.0101%)&lt;BR/&gt; 4998: (1.0101%)&lt;BR/&gt; 4996: (1.0101%)&lt;BR/&gt; 4994: (1.0101%)&gt;];
}
1622--1797[label="1;50pkt 50fpkt"];
1622--7290[label="1;50pkt 50fpkt"];
1622--8514[label="1;50pkt 50fpkt"];
1622--9510[label="1;49pkt 49fpkt"];
1622--13359[label="1;49pkt 49fpkt"];
7290--8514[label="1;50pkt 50fpkt"];
7290--9510[label="1;49pkt 49fpkt"];
7290--13359[label="1;49pkt 49fpkt"];
9510--13359[label="1;49pkt 49fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" dst_port="3124" src_ip="19.210.210.12"/>
    </slice>
    <from sec="1223614823" usec="0"/>
    <to sec="1223615146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_416{
style=filled;
color=gray75;
2742[label="193.52.217.36;d;140pkt 140fpkt", shape=diamond, color=yellow];
3892[label="107.100.249.36;d;11pkt 11fpkt", shape=diamond, color=yellow];
3893[label="142.226.116.18;s;15pkt 15fpkt", shape=diamond, color=yellow];
7291[label="142.226.116.18;s;9pkt 9fpkt", shape=hexagon, color=black];
7958[label="107.100.249.36;d;8pkt 8fpkt", shape=hexagon, color=black];
9624[label="142.226.116.18;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9935[label="142.226.90.37;23pkt 23fpkt", shape=pentagon, color=darkviolet];
12468[label="142.226.168.195;51pkt 51fpkt", shape=pentagon, color=darkviolet];
13423[label="142.226.116.18;19pkt 19fpkt", shape=invtriangle, color=brown];
14871[label="142.226.168.195;52pkt 52fpkt", shape=invtriangle, color=brown];
15365[label="142.226.116.18;19pkt 19fpkt", shape=invhouse, color=bisque];
16117[label="142.226.168.195;52pkt 52fpkt", shape=invhouse, color=bisque];
stat416[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.168.195:80, *:*}[23.6364%]&lt;BR/&gt;{137.87.97.92:80, 193.52.217.36:*}[20.9091%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 41610: (0.839329%)&lt;BR/&gt; 38856: (0.839329%)&lt;BR/&gt; 34199: (0.839329%)&lt;BR/&gt; 33000: (0.839329%)&gt;];
}
2742--2858[label="0.0632911;5pkt 5fpkt"];
2742--3893[label="0.466667;7pkt 7fpkt"];
2742--6119[label="0.00714286;1pkt 1fpkt"];
2742--6181[label="0.00714286;1pkt 1fpkt"];
2742--6328[label="0.555556;20pkt 20fpkt"];
2742--6377[label="0.025;1pkt 1fpkt"];
2742--6592[label="1;68pkt 68fpkt"];
2742--7291[label="0.444444;4pkt 4fpkt"];
2742--7759[label="0.257143;36pkt 36fpkt"];
2742--8285[label="0.0632911;5pkt 5fpkt"];
2742--9088[label="0.025;1pkt 1fpkt"];
2742--9163[label="0.1;14pkt 14fpkt"];
2742--9194[label="0.05;7pkt 7fpkt"];
2742--9198[label="0.0428571;6pkt 6fpkt"];
2742--9234[label="0.05;7pkt 7fpkt"];
2742--9268[label="0.05;7pkt 7fpkt"];
2742--9624[label="0.388889;7pkt 7fpkt"];
2742--9935[label="0.173913;4pkt 4fpkt"];
2742--9964[label="0.257143;36pkt 36fpkt"];
2742--10859[label="0.178571;5pkt 5fpkt"];
2742--11936[label="0.421053;8pkt 8fpkt"];
2742--12228[label="0.00714286;1pkt 1fpkt"];
2742--12468[label="0.0980392;5pkt 5fpkt"];
2742--12945[label="0.107143;15pkt 15fpkt"];
2742--13423[label="0.368421;7pkt 7fpkt"];
2742--13599[label="0.257143;36pkt 36fpkt"];
2742--14601[label="0.45;9pkt 9fpkt"];
2742--14746[label="0.00714286;1pkt 1fpkt"];
2742--14871[label="0.0961538;5pkt 5fpkt"];
2742--15117[label="0.107143;15pkt 15fpkt"];
2742--15365[label="0.368421;7pkt 7fpkt"];
2742--16042[label="0.00714286;1pkt 1fpkt"];
2742--16117[label="0.0961538;5pkt 5fpkt"];
2742--16251[label="0.107143;15pkt 15fpkt"];
3892--3893[label="0.727273;8pkt 8fpkt"];
3892--7291[label="0.555556;5pkt 5fpkt"];
3892--7958[label="1;8pkt 8fpkt"];
3892--9163[label="0.0909091;1pkt 1fpkt"];
3892--9194[label="0.0909091;1pkt 1fpkt"];
3892--9234[label="0.0909091;1pkt 1fpkt"];
3892--9268[label="0.0909091;1pkt 1fpkt"];
3892--9624[label="0.727273;8pkt 8fpkt"];
3892--13423[label="0.818182;9pkt 9fpkt"];
3892--15365[label="0.818182;9pkt 9fpkt"];
3893--6592[label="0.133333;2pkt 2fpkt"];
3893--7291[label="1;9pkt 9fpkt"];
3893--7958[label="0.875;7pkt 7fpkt"];
3893--9163[label="0.0666667;1pkt 1fpkt"];
3893--9194[label="0.0666667;1pkt 1fpkt"];
3893--9234[label="0.0666667;1pkt 1fpkt"];
3893--9268[label="0.0666667;1pkt 1fpkt"];
3893--9624[label="0.933333;14pkt 14fpkt"];
3893--13423[label="1;15pkt 15fpkt"];
3893--15365[label="1;15pkt 15fpkt"];
7291--7958[label="0.625;5pkt 5fpkt"];
7291--9163[label="0.111111;1pkt 1fpkt"];
7291--9194[label="0.111111;1pkt 1fpkt"];
7291--9234[label="0.111111;1pkt 1fpkt"];
7291--9268[label="0.111111;1pkt 1fpkt"];
7291--9624[label="0.888889;8pkt 8fpkt"];
7291--13423[label="1;9pkt 9fpkt"];
7291--15365[label="1;9pkt 9fpkt"];
7958--9163[label="0.125;1pkt 1fpkt"];
7958--9194[label="0.125;1pkt 1fpkt"];
7958--9234[label="0.125;1pkt 1fpkt"];
7958--9268[label="0.125;1pkt 1fpkt"];
7958--9624[label="0.75;6pkt 6fpkt"];
7958--13423[label="0.875;7pkt 7fpkt"];
7958--15365[label="0.875;7pkt 7fpkt"];
9624--13423[label="1;18pkt 18fpkt"];
9624--15365[label="1;18pkt 18fpkt"];
12468--14871[label="1;51pkt 51fpkt"];
12468--16117[label="1;51pkt 51fpkt"];
13423--15365[label="1;19pkt 19fpkt"];
14871--16117[label="1;52pkt 52fpkt"];
</description>
    <slice>
      <filter src_ip="142.226.168.195" src_port="80"/>
      <filter dst_ip="193.52.217.36" src_ip="137.87.97.92" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_418{
style=filled;
color=gray75;
3010[label="72.233.104.40;s;1pkt 1fpkt", shape=diamond, color=yellow];
7323[label="72.233.104.40;s;1pkt 1fpkt", shape=hexagon, color=black];
stat418[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.233.104.40:62261, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62261: (50%)&lt;BR/&gt; 62170: (50%)&gt;];
}
3010--7323[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="72.233.104.40" src_port="62261"/>
    </slice>
    <from sec="1223614973" usec="0"/>
    <to sec="1223615565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_419{
style=filled;
color=gray75;
3047[label="77.32.94.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
7333[label="77.32.94.243;s;1pkt 1fpkt", shape=hexagon, color=black];
13109[label="77.32.94.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat419[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.32.94.243:1468, 213.42.135.123:40000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40000: (50%)&lt;BR/&gt; 1468: (50%)&gt;];
}
3047--6176[label="1;1pkt 1fpkt"];
3047--7333[label="1;1pkt 1fpkt"];
3047--13109[label="1;1pkt 1fpkt"];
7333--13109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.135.123" dst_port="40000" src_ip="77.32.94.243" src_port="1468"/>
    </slice>
    <from sec="1223614819" usec="0"/>
    <to sec="1223615354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_420{
style=filled;
color=gray75;
3474[label="136.228.5.210;d;4pkt 4fpkt", shape=diamond, color=yellow];
3475[label="195.146.130.198;s;4pkt 4fpkt", shape=diamond, color=yellow];
7335[label="195.146.130.198;s;4pkt 4fpkt", shape=hexagon, color=black];
stat420[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.146.130.198:80, 136.228.5.210:3863}[25%]&lt;BR/&gt;{195.146.130.198:80, 136.228.5.210:3864}[25%]&lt;BR/&gt;{195.146.130.198:80, 136.228.5.210:3865}[25%]&lt;BR/&gt;{195.146.130.198:80, 136.228.5.210:3866}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3866: (12.5%)&lt;BR/&gt; 3865: (12.5%)&lt;BR/&gt; 3864: (12.5%)&lt;BR/&gt; 3863: (12.5%)&gt;];
}
3474--3475[label="1;4pkt 4fpkt"];
3474--7335[label="1;4pkt 4fpkt"];
3475--7335[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.5.210" dst_port="3866" src_ip="195.146.130.198" src_port="80"/>
      <filter dst_ip="136.228.5.210" dst_port="3865" src_ip="195.146.130.198" src_port="80"/>
      <filter dst_ip="136.228.5.210" dst_port="3864" src_ip="195.146.130.198" src_port="80"/>
      <filter dst_ip="136.228.5.210" dst_port="3863" src_ip="195.146.130.198" src_port="80"/>
    </slice>
    <from sec="1223615005" usec="0"/>
    <to sec="1223615172" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_421{
style=filled;
color=gray75;
3098[label="204.212.129.27;s;9pkt 9fpkt", shape=diamond, color=yellow];
7343[label="204.212.129.27;s;9pkt 9fpkt", shape=hexagon, color=black];
stat421[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.212.129.27:80, 136.228.81.37:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2613: (5.55556%)&lt;BR/&gt; 2611: (5.55556%)&lt;BR/&gt; 2609: (5.55556%)&lt;BR/&gt; 2599: (5.55556%)&gt;];
}
3098--7343[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.81.37" src_ip="204.212.129.27" src_port="80"/>
    </slice>
    <from sec="1223615034" usec="0"/>
    <to sec="1223615107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_423{
style=filled;
color=gray75;
4006[label="20.157.6.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
7368[label="20.157.6.229;s;1pkt 1fpkt", shape=hexagon, color=black];
stat423[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.157.6.229:1195, 142.243.216.213:4540}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4540: (50%)&lt;BR/&gt; 1195: (50%)&gt;];
}
4006--7368[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.216.213" dst_port="4540" src_ip="20.157.6.229" src_port="1195"/>
    </slice>
    <from sec="1223615115" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_424{
style=filled;
color=gray75;
4016[label="136.228.19.139;d;3pkt 3fpkt", shape=diamond, color=yellow];
4020[label="195.128.233.8;s;2pkt 2fpkt", shape=diamond, color=yellow];
7379[label="195.128.233.8;s;2pkt 2fpkt", shape=hexagon, color=black];
9449[label="195.128.233.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13332[label="195.128.233.8;1pkt 1fpkt", shape=invtriangle, color=brown];
15322[label="195.128.233.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat424[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.101.196.196:3225, 136.228.19.139:25}[33.3333%]&lt;BR/&gt;{195.128.233.8:24022, 136.228.19.139:25}[33.3333%]&lt;BR/&gt;{195.128.233.8:24405, 136.228.19.139:25}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 24405: (30%)&lt;BR/&gt; 24022: (15%)&lt;BR/&gt; 3225: (5%)&gt;];
}
4016--4020[label="1;2pkt 2fpkt"];
4016--7379[label="1;2pkt 2fpkt"];
4016--9449[label="1;1pkt 1fpkt"];
4016--13332[label="1;1pkt 1fpkt"];
4016--15322[label="1;1pkt 1fpkt"];
4020--7379[label="1;2pkt 2fpkt"];
4020--9449[label="1;1pkt 1fpkt"];
4020--13332[label="1;1pkt 1fpkt"];
4020--15322[label="1;1pkt 1fpkt"];
7379--9449[label="1;1pkt 1fpkt"];
7379--13332[label="1;1pkt 1fpkt"];
7379--15322[label="1;1pkt 1fpkt"];
9449--13332[label="1;1pkt 1fpkt"];
9449--15322[label="1;1pkt 1fpkt"];
13332--15322[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.19.139" dst_port="25" src_ip="195.128.233.8" src_port="24405"/>
      <filter dst_ip="136.228.19.139" dst_port="25" src_ip="195.128.233.8" src_port="24022"/>
      <filter dst_ip="136.228.19.139" dst_port="25" src_ip="18.101.196.196" src_port="3225"/>
    </slice>
    <from sec="1223615129" usec="0"/>
    <to sec="1223615227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_426{
style=filled;
color=gray75;
4045[label="73.16.36.167;s;1pkt 1fpkt", shape=diamond, color=yellow];
7390[label="73.16.36.167;s;1pkt 1fpkt", shape=hexagon, color=black];
stat426[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.16.36.167:1030, 213.42.166.8:65283}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65283: (50%)&lt;BR/&gt; 1030: (50%)&gt;];
}
4045--7390[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.8" dst_port="65283" src_ip="73.16.36.167" src_port="1030"/>
    </slice>
    <from sec="1223615175" usec="0"/>
    <to sec="1223615548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_427{
style=filled;
color=gray75;
4095[label="119.93.234.198;s;3pkt 3fpkt", shape=diamond, color=yellow];
7399[label="119.93.234.198;s;2pkt 2fpkt", shape=hexagon, color=black];
12514[label="119.93.234.198;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat427[shape=component, label=&lt;Rules:&lt;BR/&gt;{119.93.234.198:1682, 164.25.70.80:21}[33.3333%]&lt;BR/&gt;{119.93.234.198:12019, 164.25.70.80:20}[33.3333%]&lt;BR/&gt;{119.93.234.198:12019, 164.25.70.80:21}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 12019: (35.7143%)&lt;BR/&gt; 21: (35.7143%)&lt;BR/&gt; 1682: (14.2857%)&lt;BR/&gt; 20: (14.2857%)&gt;];
}
4095--7399[label="1;2pkt 2fpkt"];
4095--8528[label="1;3pkt 3fpkt"];
4095--12514[label="1;2pkt 2fpkt"];
7399--8528[label="1;2pkt 2fpkt"];
7399--12514[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.70.80" dst_port="21" src_ip="119.93.234.198" src_port="12019"/>
      <filter dst_ip="164.25.70.80" dst_port="20" src_ip="119.93.234.198" src_port="12019"/>
      <filter dst_ip="164.25.70.80" dst_port="21" src_ip="119.93.234.198" src_port="1682"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_428{
style=filled;
color=gray75;
4101[label="136.228.100.55;d;12pkt 12fpkt", shape=diamond, color=yellow];
4102[label="73.244.158.42;s;12pkt 12fpkt", shape=diamond, color=yellow];
7401[label="73.244.158.42;s;12pkt 12fpkt", shape=hexagon, color=black];
8055[label="136.228.100.55;d;12pkt 12fpkt", shape=hexagon, color=black];
10055[label="73.244.158.42;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13652[label="73.244.158.42;11pkt 11fpkt", shape=invtriangle, color=brown];
15473[label="73.244.158.42;12pkt 12fpkt", shape=invhouse, color=bisque];
stat428[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.244.158.42:80, 136.228.100.55:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3804: (4.21687%)&lt;BR/&gt; 3803: (4.21687%)&lt;BR/&gt; 3801: (4.21687%)&lt;BR/&gt; 3800: (4.21687%)&gt;];
}
4101--4102[label="1;12pkt 12fpkt"];
4101--7401[label="1;12pkt 12fpkt"];
4101--8055[label="1;12pkt 12fpkt"];
4101--9194[label="1;12pkt 12fpkt"];
4101--9234[label="1;12pkt 12fpkt"];
4101--9268[label="1;12pkt 12fpkt"];
4101--10055[label="1;12pkt 12fpkt"];
4101--13652[label="1;11pkt 11fpkt"];
4101--15473[label="1;12pkt 12fpkt"];
4102--7401[label="1;12pkt 12fpkt"];
4102--8055[label="1;12pkt 12fpkt"];
4102--9194[label="1;12pkt 12fpkt"];
4102--9234[label="1;12pkt 12fpkt"];
4102--9268[label="1;12pkt 12fpkt"];
4102--10055[label="1;12pkt 12fpkt"];
4102--13652[label="1;11pkt 11fpkt"];
4102--15473[label="1;12pkt 12fpkt"];
7401--8055[label="1;12pkt 12fpkt"];
7401--9194[label="1;12pkt 12fpkt"];
7401--9234[label="1;12pkt 12fpkt"];
7401--9268[label="1;12pkt 12fpkt"];
7401--10055[label="1;12pkt 12fpkt"];
7401--13652[label="1;11pkt 11fpkt"];
7401--15473[label="1;12pkt 12fpkt"];
8055--9194[label="1;12pkt 12fpkt"];
8055--9234[label="1;12pkt 12fpkt"];
8055--9268[label="1;12pkt 12fpkt"];
8055--10055[label="1;12pkt 12fpkt"];
8055--13652[label="1;11pkt 11fpkt"];
8055--15473[label="1;12pkt 12fpkt"];
10055--13652[label="1;11pkt 11fpkt"];
10055--15473[label="1;12pkt 12fpkt"];
13652--15473[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.100.55" src_ip="73.244.158.42" src_port="80"/>
    </slice>
    <from sec="1223615206" usec="0"/>
    <to sec="1223615593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_429{
style=filled;
color=gray75;
105[label="213.33.138.106s;1pkt 1fpkt", shape=rectangle, color=red];
4110[label="104.243.240.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
7403[label="104.243.240.129;d;1pkt 1fpkt", shape=hexagon, color=black];
stat429[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.138.106:50197, 104.243.240.129:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50197: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
105--3783[label="1;1pkt 1fpkt"];
105--4110[label="1;1pkt 1fpkt"];
105--7403[label="1;1pkt 1fpkt"];
4110--7403[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="104.243.240.129" dst_port="80" src_ip="213.33.138.106" src_port="50197"/>
    </slice>
    <from sec="1223615212" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_430{
style=filled;
color=gray75;
688[label="194.28.161.189;s;10pkt 10fpkt", shape=diamond, color=yellow];
7413[label="194.28.161.189;s;9pkt 9fpkt", shape=hexagon, color=black];
12372[label="194.28.161.189;11pkt 11fpkt", shape=pentagon, color=darkviolet];
14824[label="194.28.161.189;12pkt 12fpkt", shape=invtriangle, color=brown];
16092[label="194.28.161.189;12pkt 12fpkt", shape=invhouse, color=bisque];
stat430[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.28.161.189:*, 212.21.138.195:8090}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8090: (50%)&lt;BR/&gt; 61967: (4.62963%)&lt;BR/&gt; 57956: (4.62963%)&lt;BR/&gt; 55282: (4.62963%)&lt;BR/&gt; 47920: (4.62963%)&gt;];
}
688--1797[label="1;10pkt 10fpkt"];
688--7413[label="1;9pkt 9fpkt"];
688--8514[label="1;10pkt 10fpkt"];
688--12372[label="0.9;9pkt 9fpkt"];
688--14824[label="1;10pkt 10fpkt"];
688--16092[label="1;10pkt 10fpkt"];
7413--8514[label="1;9pkt 9fpkt"];
7413--12372[label="0.888889;8pkt 8fpkt"];
7413--14824[label="1;9pkt 9fpkt"];
7413--16092[label="1;9pkt 9fpkt"];
12372--14824[label="1;11pkt 11fpkt"];
12372--16092[label="1;11pkt 11fpkt"];
14824--16092[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" dst_port="8090" src_ip="194.28.161.189"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_431{
style=filled;
color=gray75;
789[label="136.228.44.214;s;4315pkt 4315fpkt", shape=diamond, color=yellow];
852[label="122.221.139.215;d;2pkt 2fpkt", shape=diamond, color=yellow];
934[label="72.224.210.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
1088[label="77.163.95.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
1250[label="87.187.23.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
1555[label="118.140.42.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
1929[label="211.87.192.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
2057[label="100.135.140.156;d;2pkt 2fpkt", shape=diamond, color=yellow];
2251[label="34.214.49.201;d;1pkt 1fpkt", shape=diamond, color=yellow];
2262[label="86.194.95.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
2286[label="86.232.179.53;d;1pkt 1fpkt", shape=diamond, color=yellow];
2305[label="102.44.172.178;d;15pkt 15fpkt", shape=diamond, color=yellow];
2682[label="108.175.217.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
2719[label="118.112.149.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
2921[label="125.234.115.228;d;1pkt 1fpkt", shape=diamond, color=yellow];
3149[label="103.121.163.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
3182[label="76.130.10.154;d;4pkt 4fpkt", shape=diamond, color=yellow];
3211[label="120.160.200.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
3235[label="20.182.91.220;d;1pkt 1fpkt", shape=diamond, color=yellow];
3467[label="109.254.95.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
3714[label="100.180.90.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
3735[label="98.215.53.158;d;2pkt 2fpkt", shape=diamond, color=yellow];
3887[label="209.252.211.139;d;1pkt 1fpkt", shape=diamond, color=yellow];
4001[label="212.68.247.82;d;3pkt 3fpkt", shape=diamond, color=yellow];
4340[label="196.79.4.197;d;3pkt 3fpkt", shape=diamond, color=yellow];
4375[label="34.233.139.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
4846[label="108.215.108.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
4865[label="125.202.223.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
5225[label="34.123.176.203;d;2pkt 2fpkt", shape=diamond, color=yellow];
5264[label="106.171.171.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
5710[label="96.163.159.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
5955[label="122.221.139.215;d;1pkt 1fpkt", shape=hexagon, color=black];
6299[label="87.187.23.122;d;1pkt 1fpkt", shape=hexagon, color=black];
6583[label="118.112.149.179;d;1pkt 1fpkt", shape=hexagon, color=black];
6860[label="108.175.217.76;d;1pkt 1fpkt", shape=hexagon, color=black];
6878[label="100.135.140.156;d;2pkt 2fpkt", shape=hexagon, color=black];
7184[label="120.160.200.103;d;1pkt 1fpkt", shape=hexagon, color=black];
7423[label="136.228.44.214;s;3079pkt 3079fpkt", shape=hexagon, color=black];
7573[label="102.44.172.178;d;15pkt 15fpkt", shape=hexagon, color=black];
7638[label="212.68.247.82;d;2pkt 2fpkt", shape=hexagon, color=black];
7736[label="72.224.210.110;d;1pkt 1fpkt", shape=hexagon, color=black];
7770[label="76.130.10.154;d;4pkt 4fpkt", shape=hexagon, color=black];
7815[label="20.182.91.220;d;1pkt 1fpkt", shape=hexagon, color=black];
7936[label="118.140.42.65;d;1pkt 1fpkt", shape=hexagon, color=black];
7939[label="86.232.179.53;d;1pkt 1fpkt", shape=hexagon, color=black];
7998[label="109.254.95.103;d;1pkt 1fpkt", shape=hexagon, color=black];
8210[label="98.215.53.158;d;2pkt 2fpkt", shape=hexagon, color=black];
8335[label="125.234.115.228;d;1pkt 1fpkt", shape=hexagon, color=black];
8414[label="106.171.171.246;d;1pkt 1fpkt", shape=hexagon, color=black];
8727[label="125.202.223.0;d;1pkt 1fpkt", shape=hexagon, color=black];
8757[label="96.163.159.28;d;1pkt 1fpkt", shape=hexagon, color=black];
stat431[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.44.214:62191, *:*}[84.5031%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62191: (41.9738%)&lt;BR/&gt; 6881: (1.5625%)&lt;BR/&gt; 51413: (0.447382%)&lt;BR/&gt; 49152: (0.247062%)&lt;BR/&gt; 62044: (0.22703%)&gt;];
}
789--852[label="1;2pkt 2fpkt"];
789--934[label="1;1pkt 1fpkt"];
789--1088[label="1;1pkt 1fpkt"];
789--1236[label="0.00561272;6pkt 6fpkt"];
789--1250[label="1;1pkt 1fpkt"];
789--1340[label="0.00226244;1pkt 1fpkt"];
789--1555[label="1;1pkt 1fpkt"];
789--1929[label="1;1pkt 1fpkt"];
789--1954[label="1;1pkt 1fpkt"];
789--2057[label="1;2pkt 2fpkt"];
789--2088[label="1;1pkt 1fpkt"];
789--2151[label="0.00395257;2pkt 2fpkt"];
789--2251[label="1;1pkt 1fpkt"];
789--2262[label="1;1pkt 1fpkt"];
789--2286[label="1;1pkt 1fpkt"];
789--2305[label="1;15pkt 15fpkt"];
789--2682[label="1;1pkt 1fpkt"];
789--2719[label="1;1pkt 1fpkt"];
789--2921[label="1;1pkt 1fpkt"];
789--3149[label="1;1pkt 1fpkt"];
789--3182[label="1;4pkt 4fpkt"];
789--3211[label="1;1pkt 1fpkt"];
789--3235[label="1;1pkt 1fpkt"];
789--3467[label="1;1pkt 1fpkt"];
789--3714[label="1;1pkt 1fpkt"];
789--3735[label="1;2pkt 2fpkt"];
789--3887[label="1;1pkt 1fpkt"];
789--4001[label="1;3pkt 3fpkt"];
789--4340[label="0.333333;1pkt 1fpkt"];
789--4375[label="1;1pkt 1fpkt"];
789--4661[label="0.0162602;2pkt 2fpkt"];
789--4667[label="0.00621118;1pkt 1fpkt"];
789--4846[label="1;1pkt 1fpkt"];
789--4865[label="1;1pkt 1fpkt"];
789--5107[label="0.04;1pkt 1fpkt"];
789--5225[label="1;2pkt 2fpkt"];
789--5264[label="1;1pkt 1fpkt"];
789--5710[label="1;1pkt 1fpkt"];
789--5955[label="1;1pkt 1fpkt"];
789--6299[label="1;1pkt 1fpkt"];
789--6548[label="1;1pkt 1fpkt"];
789--6583[label="1;1pkt 1fpkt"];
789--6851[label="0.00499168;3pkt 3fpkt"];
789--6860[label="1;1pkt 1fpkt"];
789--6878[label="1;2pkt 2fpkt"];
789--6897[label="1;1pkt 1fpkt"];
789--7184[label="1;1pkt 1fpkt"];
789--7200[label="0.00396825;1pkt 1fpkt"];
789--7423[label="1;3079pkt 3079fpkt"];
789--7573[label="1;15pkt 15fpkt"];
789--7638[label="1;2pkt 2fpkt"];
789--7736[label="1;1pkt 1fpkt"];
789--7770[label="1;4pkt 4fpkt"];
789--7779[label="0.0208333;2pkt 2fpkt"];
789--7815[label="1;1pkt 1fpkt"];
789--7936[label="1;1pkt 1fpkt"];
789--7939[label="1;1pkt 1fpkt"];
789--7998[label="1;1pkt 1fpkt"];
789--8210[label="1;2pkt 2fpkt"];
789--8237[label="0.0416667;1pkt 1fpkt"];
789--8335[label="1;1pkt 1fpkt"];
789--8414[label="1;1pkt 1fpkt"];
789--8727[label="1;1pkt 1fpkt"];
789--8757[label="1;1pkt 1fpkt"];
789--8882[label="1;1pkt 1fpkt"];
789--9003[label="0.0208333;2pkt 2fpkt"];
789--9008[label="1;1pkt 1fpkt"];
852--5955[label="1;1pkt 1fpkt"];
852--7423[label="1;2pkt 2fpkt"];
934--7423[label="1;1pkt 1fpkt"];
934--7736[label="1;1pkt 1fpkt"];
1088--7423[label="1;1pkt 1fpkt"];
1250--6299[label="1;1pkt 1fpkt"];
1250--7423[label="1;1pkt 1fpkt"];
1555--7423[label="1;1pkt 1fpkt"];
1555--7936[label="1;1pkt 1fpkt"];
1929--7423[label="1;1pkt 1fpkt"];
2057--6878[label="1;2pkt 2fpkt"];
2057--7423[label="1;2pkt 2fpkt"];
2251--7423[label="1;1pkt 1fpkt"];
2262--7423[label="1;1pkt 1fpkt"];
2286--7423[label="1;1pkt 1fpkt"];
2286--7939[label="1;1pkt 1fpkt"];
2305--7423[label="1;15pkt 15fpkt"];
2305--7573[label="1;15pkt 15fpkt"];
2682--6860[label="1;1pkt 1fpkt"];
2682--7423[label="1;1pkt 1fpkt"];
2719--6583[label="1;1pkt 1fpkt"];
2719--7423[label="1;1pkt 1fpkt"];
2921--7423[label="1;1pkt 1fpkt"];
2921--8335[label="1;1pkt 1fpkt"];
3149--7423[label="1;1pkt 1fpkt"];
3182--7423[label="1;4pkt 4fpkt"];
3182--7770[label="1;4pkt 4fpkt"];
3211--7184[label="1;1pkt 1fpkt"];
3211--7423[label="1;1pkt 1fpkt"];
3235--7423[label="1;1pkt 1fpkt"];
3235--7815[label="1;1pkt 1fpkt"];
3467--7423[label="1;1pkt 1fpkt"];
3467--7998[label="1;1pkt 1fpkt"];
3714--7423[label="1;1pkt 1fpkt"];
3735--7423[label="1;2pkt 2fpkt"];
3735--8210[label="1;2pkt 2fpkt"];
3887--7423[label="1;1pkt 1fpkt"];
4001--7423[label="0.666667;2pkt 2fpkt"];
4001--7638[label="1;2pkt 2fpkt"];
4340--7423[label="0.333333;1pkt 1fpkt"];
4340--9460[label="0.666667;2pkt 2fpkt"];
4375--7423[label="1;1pkt 1fpkt"];
4846--7423[label="1;1pkt 1fpkt"];
4865--7423[label="1;1pkt 1fpkt"];
4865--8727[label="1;1pkt 1fpkt"];
5225--7423[label="1;2pkt 2fpkt"];
5264--7423[label="1;1pkt 1fpkt"];
5264--8414[label="1;1pkt 1fpkt"];
5710--8757[label="1;1pkt 1fpkt"];
5955--7423[label="1;1pkt 1fpkt"];
6299--7423[label="1;1pkt 1fpkt"];
6583--7423[label="1;1pkt 1fpkt"];
6860--7423[label="1;1pkt 1fpkt"];
6878--7423[label="1;2pkt 2fpkt"];
7184--7423[label="1;1pkt 1fpkt"];
7423--7573[label="1;15pkt 15fpkt"];
7423--7638[label="1;2pkt 2fpkt"];
7423--7736[label="1;1pkt 1fpkt"];
7423--7770[label="1;4pkt 4fpkt"];
7423--7779[label="0.0208333;2pkt 2fpkt"];
7423--7815[label="1;1pkt 1fpkt"];
7423--7936[label="1;1pkt 1fpkt"];
7423--7939[label="1;1pkt 1fpkt"];
7423--7998[label="1;1pkt 1fpkt"];
7423--8210[label="1;2pkt 2fpkt"];
7423--8335[label="1;1pkt 1fpkt"];
7423--8414[label="1;1pkt 1fpkt"];
7423--8727[label="1;1pkt 1fpkt"];
7423--8882[label="1;1pkt 1fpkt"];
7423--9003[label="0.0208333;2pkt 2fpkt"];
7423--9008[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.44.214" src_port="62191"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_432{
style=filled;
color=gray75;
1822[label="76.15.176.51;s;1pkt 1fpkt", shape=diamond, color=yellow];
7428[label="76.15.176.51;s;1pkt 1fpkt", shape=hexagon, color=black];
stat432[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.15.176.51:1749, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1749: (50%)&gt;];
}
1822--7428[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="76.15.176.51" src_port="1749"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
1076[label="77.107.178.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
7449[label="77.107.178.229;s;1pkt 1fpkt", shape=hexagon, color=black];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.107.178.229:1413, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 1413: (50%)&gt;];
}
1076--7449[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="77.107.178.229" src_port="1413"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,504,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_434{
style=filled;
color=gray75;
1477[label="20.189.133.112;s;296pkt 296fpkt", shape=diamond, color=yellow];
2287[label="162.73.188.160;d;19pkt 19fpkt", shape=diamond, color=yellow];
2356[label="136.228.81.201;d;21pkt 21fpkt", shape=diamond, color=yellow];
2373[label="136.228.104.154;d;8pkt 8fpkt", shape=diamond, color=yellow];
2374[label="21.220.153.6;s;195pkt 195fpkt", shape=diamond, color=yellow];
2580[label="213.241.229.22;s;6pkt 6fpkt", shape=diamond, color=yellow];
3307[label="142.243.13.66;d;71pkt 71fpkt", shape=diamond, color=yellow];
5256[label="136.228.81.52;d;21pkt 21fpkt", shape=diamond, color=yellow];
6868[label="213.55.176.180;s;39pkt 39fpkt", shape=hexagon, color=black];
7012[label="21.220.153.6;s;63pkt 63fpkt", shape=hexagon, color=black];
7246[label="142.243.13.66;d;47pkt 47fpkt", shape=hexagon, color=black];
8104[label="136.228.81.201;d;14pkt 14fpkt", shape=hexagon, color=black];
8399[label="136.228.81.52;d;19pkt 19fpkt", shape=hexagon, color=black];
9117[label="136.228.81.201;d;14pkt 14fpkt", shape=polygon, color=gold];
9705[label="213.241.229.22;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat434[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.189.133.112:80, 136.228.82.142:*}[39.7906%]&lt;BR/&gt;{21.220.153.6:443, *:*}[25.6545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.2983%)&lt;BR/&gt; 443: (19.0334%)&lt;BR/&gt; 110: (3.52029%)&lt;BR/&gt; 46921: (1.61098%)&lt;BR/&gt; 2230: (0.298329%)&gt;];
}
1477--1553[label="0.764706;13pkt 13fpkt"];
1477--2287[label="0.526316;10pkt 10fpkt"];
1477--2352[label="0.333333;6pkt 6fpkt"];
1477--3307[label="0.0140845;1pkt 1fpkt"];
1477--3330[label="0.0229885;2pkt 2fpkt"];
1477--3628[label="0.363636;4pkt 4fpkt"];
1477--6095[label="0.0168919;5pkt 5fpkt"];
1477--6517[label="0.0101351;3pkt 3fpkt"];
1477--6971[label="0.722222;13pkt 13fpkt"];
1477--7246[label="0.0212766;1pkt 1fpkt"];
1477--8531[label="0.0135135;4pkt 4fpkt"];
1477--9163[label="0.287162;85pkt 85fpkt"];
1477--9194[label="0.0135135;4pkt 4fpkt"];
1477--9198[label="0.0168919;5pkt 5fpkt"];
1477--9234[label="0.0135135;4pkt 4fpkt"];
1477--9268[label="0.0135135;4pkt 4fpkt"];
2287--2580[label="1;6pkt 6fpkt"];
2287--5498[label="0.0526316;1pkt 1fpkt"];
2287--9194[label="0.0526316;1pkt 1fpkt"];
2287--9234[label="0.0526316;1pkt 1fpkt"];
2287--9268[label="0.0526316;1pkt 1fpkt"];
2287--9613[label="0.0526316;1pkt 1fpkt"];
2287--9705[label="1;5pkt 5fpkt"];
2287--11371[label="0.0714286;1pkt 1fpkt"];
2287--13417[label="0.0526316;1pkt 1fpkt"];
2356--2374[label="0.809524;17pkt 17fpkt"];
2356--8104[label="1;14pkt 14fpkt"];
2356--9117[label="1;14pkt 14fpkt"];
2356--9198[label="0.428571;9pkt 9fpkt"];
2373--2374[label="1;8pkt 8fpkt"];
2373--7012[label="1;8pkt 8fpkt"];
2374--3307[label="0.408451;29pkt 29fpkt"];
2374--5256[label="0.952381;20pkt 20fpkt"];
2374--6600[label="0.0820513;16pkt 16fpkt"];
2374--6625[label="0.148718;29pkt 29fpkt"];
2374--7012[label="1;63pkt 63fpkt"];
2374--7246[label="0.340426;16pkt 16fpkt"];
2374--8104[label="0.714286;10pkt 10fpkt"];
2374--8399[label="0.947368;18pkt 18fpkt"];
2374--9117[label="0.714286;10pkt 10fpkt"];
2374--9194[label="0.0205128;4pkt 4fpkt"];
2374--9198[label="0.0461538;9pkt 9fpkt"];
2374--9234[label="0.0205128;4pkt 4fpkt"];
2374--9268[label="0.0205128;4pkt 4fpkt"];
2580--9705[label="1;5pkt 5fpkt"];
3307--6868[label="0.307692;12pkt 12fpkt"];
3307--7012[label="0.142857;9pkt 9fpkt"];
3307--7246[label="1;47pkt 47fpkt"];
3307--7459[label="0.0140845;1pkt 1fpkt"];
3307--9163[label="0.0140845;1pkt 1fpkt"];
3307--9194[label="0.028169;2pkt 2fpkt"];
3307--9234[label="0.028169;2pkt 2fpkt"];
3307--9268[label="0.028169;2pkt 2fpkt"];
3307--10789[label="0.0140845;1pkt 1fpkt"];
3307--12265[label="0.254902;13pkt 13fpkt"];
5256--8399[label="1;19pkt 19fpkt"];
6868--6943[label="0.0416667;1pkt 1fpkt"];
6868--7246[label="0.179487;7pkt 7fpkt"];
6868--12265[label="0.974359;38pkt 38fpkt"];
7012--7246[label="0.191489;9pkt 9fpkt"];
7246--7459[label="0.0212766;1pkt 1fpkt"];
7246--9163[label="0.0212766;1pkt 1fpkt"];
7246--9194[label="0.0425532;2pkt 2fpkt"];
7246--9234[label="0.0425532;2pkt 2fpkt"];
7246--9268[label="0.0425532;2pkt 2fpkt"];
7246--10789[label="0.0212766;1pkt 1fpkt"];
7246--12265[label="0.148936;7pkt 7fpkt"];
8104--9117[label="1;14pkt 14fpkt"];
8104--9198[label="0.142857;2pkt 2fpkt"];
9117--9198[label="0.142857;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="21.220.153.6" src_port="443"/>
      <filter dst_ip="136.228.82.142" src_ip="20.189.133.112" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_435{
style=filled;
color=gray75;
3258[label="212.21.133.202;d;408pkt 408fpkt", shape=diamond, color=yellow];
7496[label="212.21.133.202;d;401pkt 401fpkt", shape=hexagon, color=black];
stat435[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 212.21.133.202:0}[99.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.0111%)&lt;BR/&gt; 6000: (0.123609%)&lt;BR/&gt; 3185: (0.123609%)&lt;BR/&gt; 2404: (0.123609%)&lt;BR/&gt; 2336: (0.123609%)&gt;];
}
3258--3663[label="0.00245098;1pkt 1fpkt"];
3258--7010[label="0.00245098;1pkt 1fpkt"];
3258--7388[label="0.00245098;1pkt 1fpkt"];
3258--7496[label="1;401pkt 401fpkt"];
3258--8930[label="0.00245098;1pkt 1fpkt"];
3258--9192[label="0.00245098;1pkt 1fpkt"];
3258--9232[label="0.00245098;1pkt 1fpkt"];
3258--9266[label="0.00245098;1pkt 1fpkt"];
3258--12387[label="0.00245098;1pkt 1fpkt"];
7496--8930[label="0.00249377;1pkt 1fpkt"];
7496--9192[label="0.00249377;1pkt 1fpkt"];
7496--9232[label="0.00249377;1pkt 1fpkt"];
7496--9266[label="0.00249377;1pkt 1fpkt"];
7496--12387[label="0.00249377;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.133.202"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_436{
style=filled;
color=gray75;
3748[label="150.133.16.246;s;207pkt 207fpkt", shape=diamond, color=yellow];
4590[label="119.194.21.179;d;3pkt 3fpkt", shape=diamond, color=yellow];
7501[label="150.133.16.246;s;148pkt 148fpkt", shape=hexagon, color=black];
stat436[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.133.16.246:16881, *:*}[26.087%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (13.2682%)&lt;BR/&gt; 0: (7.82123%)&lt;BR/&gt; 55005: (4.46927%)&lt;BR/&gt; 53969: (1.53631%)&lt;BR/&gt; 62082: (1.39665%)&gt;];
}
3748--4590[label="1;3pkt 3fpkt"];
3748--7501[label="1;148pkt 148fpkt"];
4590--7501[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="150.133.16.246" src_port="16881"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
1412[label="136.228.94.151;d;142pkt 142fpkt", shape=diamond, color=yellow];
6974[label="194.173.177.32;s;19pkt 19fpkt", shape=hexagon, color=black];
7509[label="136.228.94.151;d;125pkt 125fpkt", shape=hexagon, color=black];
11153[label="194.173.177.108;18pkt 18fpkt", shape=pentagon, color=darkviolet];
14208[label="194.173.177.108;17pkt 17fpkt", shape=invtriangle, color=brown];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.177.32:80, 136.228.94.151:*}[47.2973%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3186: (0.623053%)&lt;BR/&gt; 3162: (0.623053%)&lt;BR/&gt; 3146: (0.623053%)&lt;BR/&gt; 3128: (0.623053%)&gt;];
}
1412--1569[label="0.875;70pkt 70fpkt"];
1412--4210[label="0.15493;22pkt 22fpkt"];
1412--4709[label="1;28pkt 28fpkt"];
1412--6974[label="1;19pkt 19fpkt"];
1412--7509[label="1;125pkt 125fpkt"];
1412--8213[label="0.15493;22pkt 22fpkt"];
1412--9163[label="0.0915493;13pkt 13fpkt"];
1412--9194[label="0.112676;16pkt 16fpkt"];
1412--9198[label="0.0422535;6pkt 6fpkt"];
1412--9234[label="0.112676;16pkt 16fpkt"];
1412--9268[label="0.112676;16pkt 16fpkt"];
1412--10419[label="0.12;3pkt 3fpkt"];
1412--11153[label="0.666667;12pkt 12fpkt"];
1412--13839[label="0.12;3pkt 3fpkt"];
1412--14208[label="0.705882;12pkt 12fpkt"];
1412--15563[label="0.125;3pkt 3fpkt"];
6974--7509[label="1;19pkt 19fpkt"];
6974--9163[label="0.315789;6pkt 6fpkt"];
7509--8213[label="0.176;22pkt 22fpkt"];
7509--9163[label="0.104;13pkt 13fpkt"];
7509--9194[label="0.128;16pkt 16fpkt"];
7509--9198[label="0.024;3pkt 3fpkt"];
7509--9234[label="0.128;16pkt 16fpkt"];
7509--9268[label="0.128;16pkt 16fpkt"];
7509--10419[label="0.08;2pkt 2fpkt"];
7509--11153[label="0.555556;10pkt 10fpkt"];
7509--13839[label="0.08;2pkt 2fpkt"];
7509--14208[label="0.588235;10pkt 10fpkt"];
7509--15563[label="0.0833333;2pkt 2fpkt"];
11153--14208[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.94.151" src_ip="194.173.177.32" src_port="80"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_438{
style=filled;
color=gray75;
1916[label="213.33.130.131;d;1230pkt 1230fpkt", shape=diamond, color=yellow];
3771[label="210.192.150.158;s;65pkt 65fpkt", shape=diamond, color=yellow];
4247[label="213.33.58.9;d;25pkt 25fpkt", shape=diamond, color=yellow];
6538[label="213.33.130.131;d;996pkt 996fpkt", shape=hexagon, color=black];
7522[label="210.192.150.158;s;47pkt 47fpkt", shape=hexagon, color=black];
7523[label="213.33.58.9;d;23pkt 23fpkt", shape=hexagon, color=black];
12148[label="113.25.225.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat438[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.33.130.131:16756}[92.8517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16756: (46.3553%)&lt;BR/&gt; 80: (2.76498%)&lt;BR/&gt; 16001: (0.879765%)&lt;BR/&gt; 993: (0.754085%)&lt;BR/&gt; 6881: (0.272308%)&gt;];
}
1916--3771[label="0.0153846;1pkt 1fpkt"];
1916--6538[label="1;996pkt 996fpkt"];
1916--7522[label="0.0212766;1pkt 1fpkt"];
1916--12148[label="1;1pkt 1fpkt"];
3771--4247[label="0.16;4pkt 4fpkt"];
3771--6538[label="0.0153846;1pkt 1fpkt"];
3771--6854[label="0.0615385;4pkt 4fpkt"];
3771--7522[label="1;47pkt 47fpkt"];
3771--7523[label="0.173913;4pkt 4fpkt"];
3771--9163[label="0.169231;11pkt 11fpkt"];
3771--9194[label="0.0923077;6pkt 6fpkt"];
3771--9198[label="0.123077;8pkt 8fpkt"];
3771--9234[label="0.0923077;6pkt 6fpkt"];
3771--9268[label="0.0923077;6pkt 6fpkt"];
4247--7522[label="0.16;4pkt 4fpkt"];
4247--7523[label="1;23pkt 23fpkt"];
4247--9163[label="0.16;4pkt 4fpkt"];
6538--7522[label="0.0212766;1pkt 1fpkt"];
6538--12148[label="1;1pkt 1fpkt"];
7522--7523[label="0.173913;4pkt 4fpkt"];
7522--9163[label="0.234043;11pkt 11fpkt"];
7522--9194[label="0.12766;6pkt 6fpkt"];
7522--9234[label="0.12766;6pkt 6fpkt"];
7522--9268[label="0.12766;6pkt 6fpkt"];
7523--9163[label="0.173913;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.130.131" dst_port="16756"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.01275,2.02396,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_439{
style=filled;
color=gray75;
3357[label="96.186.31.155;s;1pkt 1fpkt", shape=diamond, color=yellow];
7551[label="96.186.31.155;s;1pkt 1fpkt", shape=hexagon, color=black];
14570[label="96.186.31.155;1pkt 1fpkt", shape=invtriangle, color=brown];
15947[label="96.186.31.155;1pkt 1fpkt", shape=invhouse, color=bisque];
stat439[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.186.31.155:10717, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10717: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
3357--7551[label="1;1pkt 1fpkt"];
3357--14570[label="1;1pkt 1fpkt"];
3357--15947[label="1;1pkt 1fpkt"];
7551--14570[label="1;1pkt 1fpkt"];
7551--15947[label="1;1pkt 1fpkt"];
14570--15947[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="96.186.31.155" src_port="10717"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_440{
style=filled;
color=gray75;
3363[label="136.228.132.115;s;4pkt 4fpkt", shape=diamond, color=yellow];
3433[label="18.137.58.245;d;1pkt 1fpkt", shape=diamond, color=yellow];
7554[label="136.228.132.115;s;4pkt 4fpkt", shape=hexagon, color=black];
8682[label="18.137.58.245;d;1pkt 1fpkt", shape=hexagon, color=black];
stat440[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.132.115:1116, 193.52.170.62:80}[25%]&lt;BR/&gt;{136.228.132.115:1066, 18.137.58.245:3389}[25%]&lt;BR/&gt;{136.228.132.115:1054, 50.80.27.241:8102}[25%]&lt;BR/&gt;{136.228.132.115:1115, 50.80.27.241:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (20%)&lt;BR/&gt; 1066: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 8102: (10%)&lt;BR/&gt; 1116: (10%)&gt;];
}
3363--3433[label="1;1pkt 1fpkt"];
3363--7554[label="1;4pkt 4fpkt"];
3363--8682[label="1;1pkt 1fpkt"];
3433--7554[label="1;1pkt 1fpkt"];
3433--8682[label="1;1pkt 1fpkt"];
7554--8682[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="50.80.27.241" dst_port="80" src_ip="136.228.132.115" src_port="1115"/>
      <filter dst_ip="50.80.27.241" dst_port="8102" src_ip="136.228.132.115" src_port="1054"/>
      <filter dst_ip="18.137.58.245" dst_port="3389" src_ip="136.228.132.115" src_port="1066"/>
      <filter dst_ip="193.52.170.62" dst_port="80" src_ip="136.228.132.115" src_port="1116"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_441{
style=filled;
color=gray75;
3853[label="221.112.183.142;s;27pkt 27fpkt", shape=diamond, color=yellow];
7559[label="221.112.183.142;s;21pkt 21fpkt", shape=hexagon, color=black];
11662[label="221.112.183.142;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat441[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.112.183.142:80, 142.16.131.2:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3672: (1.97368%)&lt;BR/&gt; 3670: (1.97368%)&lt;BR/&gt; 3668: (1.97368%)&lt;BR/&gt; 3664: (1.97368%)&gt;];
}
3853--7559[label="1;21pkt 21fpkt"];
3853--9163[label="0.0740741;2pkt 2fpkt"];
3853--9194[label="0.0740741;2pkt 2fpkt"];
3853--9198[label="0.0740741;2pkt 2fpkt"];
3853--9234[label="0.0740741;2pkt 2fpkt"];
3853--9268[label="0.0740741;2pkt 2fpkt"];
3853--11662[label="0.962963;26pkt 26fpkt"];
7559--9163[label="0.0952381;2pkt 2fpkt"];
7559--9194[label="0.0952381;2pkt 2fpkt"];
7559--9234[label="0.0952381;2pkt 2fpkt"];
7559--9268[label="0.0952381;2pkt 2fpkt"];
7559--11662[label="0.952381;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.131.2" src_ip="221.112.183.142" src_port="80"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_443{
style=filled;
color=gray75;
2360[label="105.116.227.118;d;2pkt 2fpkt", shape=diamond, color=yellow];
7587[label="105.116.227.118;d;2pkt 2fpkt", shape=hexagon, color=black];
8973[label="105.116.227.118;d;2pkt 2fpkt", shape=polygon, color=gold];
stat443[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.200:0, 105.116.227.118:0}[50%]&lt;BR/&gt;{212.21.136.200:4359, 105.116.227.118:60658}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (50%)&lt;BR/&gt; 60658: (25%)&lt;BR/&gt; 4359: (25%)&gt;];
}
2360--7587[label="1;2pkt 2fpkt"];
2360--8973[label="1;2pkt 2fpkt"];
7587--8973[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="105.116.227.118" dst_port="60658" src_ip="212.21.136.200" src_port="4359"/>
      <filter dst_ip="105.116.227.118" src_ip="212.21.136.200"/>
    </slice>
    <from sec="1223614840" usec="0"/>
    <to sec="1223615218" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_444{
style=filled;
color=gray75;
4350[label="142.16.214.93;d;42pkt 42fpkt", shape=diamond, color=yellow];
11226[label="107.137.214.113;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14241[label="107.137.214.113;6pkt 6fpkt", shape=invtriangle, color=brown];
15775[label="107.137.214.113;5pkt 5fpkt", shape=invhouse, color=bisque];
stat444[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 142.16.214.93:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 35132: (3.38983%)&lt;BR/&gt; 35129: (3.38983%)&lt;BR/&gt; 35128: (3.38983%)&lt;BR/&gt; 35124: (3.38983%)&gt;];
}
4350--4423[label="0.333333;8pkt 8fpkt"];
4350--5584[label="0.0238095;1pkt 1fpkt"];
4350--6761[label="0.0238095;1pkt 1fpkt"];
4350--7591[label="1;42pkt 42fpkt"];
4350--7608[label="0.119048;5pkt 5fpkt"];
4350--8642[label="0.0238095;1pkt 1fpkt"];
4350--8933[label="0.0238095;1pkt 1fpkt"];
4350--9194[label="0.047619;2pkt 2fpkt"];
4350--9198[label="0.0952381;4pkt 4fpkt"];
4350--9234[label="0.047619;2pkt 2fpkt"];
4350--9268[label="0.047619;2pkt 2fpkt"];
4350--9359[label="0.0487805;2pkt 2fpkt"];
4350--10450[label="0.333333;1pkt 1fpkt"];
4350--10574[label="0.291667;7pkt 7fpkt"];
4350--11073[label="0.119048;5pkt 5fpkt"];
4350--11226[label="1;6pkt 6fpkt"];
4350--13283[label="0.025;1pkt 1fpkt"];
4350--13853[label="0.333333;1pkt 1fpkt"];
4350--14241[label="1;6pkt 6fpkt"];
4350--15775[label="1;5pkt 5fpkt"];
11226--14241[label="1;6pkt 6fpkt"];
11226--15775[label="1;5pkt 5fpkt"];
14241--15775[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.214.93" src_port="80"/>
    </slice>
    <from sec="1223614846" usec="0"/>
    <to sec="1223615609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_445{
style=filled;
color=gray75;
2983[label="72.0.117.169;s;1pkt 1fpkt", shape=diamond, color=yellow];
7610[label="72.0.117.169;s;1pkt 1fpkt", shape=hexagon, color=black];
stat445[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.0.117.169:5147, 136.228.20.48:57024}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57024: (50%)&lt;BR/&gt; 5147: (50%)&gt;];
}
2983--7610[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.20.48" dst_port="57024" src_ip="72.0.117.169" src_port="5147"/>
    </slice>
    <from sec="1223614919" usec="0"/>
    <to sec="1223615200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_446{
style=filled;
color=gray75;
3451[label="203.73.5.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
7613[label="203.73.5.171;s;1pkt 1fpkt", shape=hexagon, color=black];
stat446[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.73.5.171:2207, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2207: (50%)&gt;];
}
3451--7613[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="203.73.5.171" src_port="2207"/>
    </slice>
    <from sec="1223614944" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_447{
style=filled;
color=gray75;
3509[label="21.129.3.105;d;1pkt 1fpkt", shape=diamond, color=yellow];
3510[label="153.109.69.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
7624[label="153.109.69.140;s;1pkt 1fpkt", shape=hexagon, color=black];
stat447[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.69.140:17651, 21.129.3.105:21634}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21634: (50%)&lt;BR/&gt; 17651: (50%)&gt;];
}
3509--3510[label="1;1pkt 1fpkt"];
3509--7624[label="1;1pkt 1fpkt"];
3510--7624[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="21.129.3.105" dst_port="21634" src_ip="153.109.69.140" src_port="17651"/>
    </slice>
    <from sec="1223615049" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_449{
style=filled;
color=gray75;
4392[label="77.81.169.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
7633[label="77.81.169.16;s;1pkt 1fpkt", shape=hexagon, color=black];
stat449[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.81.169.16:2205, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2205: (50%)&gt;];
}
4392--7633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="77.81.169.16" src_port="2205"/>
    </slice>
    <from sec="1223615089" usec="0"/>
    <to sec="1223615619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.1008,2.05673,503,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_450{
style=filled;
color=gray75;
51[label="136.228.86.43s;1pkt 1fpkt", shape=rectangle, color=red];
873[label="212.138.109.38;d;1pkt 1fpkt", shape=diamond, color=yellow];
10067[label="136.228.86.43;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat450[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.86.43:*, 220.201.1.144:80}[23.3766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2210: (1.89873%)&lt;BR/&gt; 2494: (0.632911%)&lt;BR/&gt; 2488: (0.632911%)&lt;BR/&gt; 2484: (0.632911%)&gt;];
}
51--873[label="1;1pkt 1fpkt"];
51--4030[label="1;1pkt 1fpkt"];
51--7649[label="1;1pkt 1fpkt"];
51--10067[label="1;1pkt 1fpkt"];
873--4030[label="1;1pkt 1fpkt"];
873--7649[label="1;1pkt 1fpkt"];
873--10067[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.201.1.144" dst_port="80" src_ip="136.228.86.43"/>
    </slice>
    <from sec="1223615153" usec="0"/>
    <to sec="1223615660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_452{
style=filled;
color=gray75;
4080[label="76.210.105.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
7664[label="76.210.105.111;s;1pkt 1fpkt", shape=hexagon, color=black];
stat452[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.210.105.111:80, 142.243.50.29:53433}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53433: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4080--7664[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.50.29" dst_port="53433" src_ip="76.210.105.111" src_port="80"/>
    </slice>
    <from sec="1223615463" usec="0"/>
    <to sec="1223615466" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_453{
style=filled;
color=gray75;
3949[label="136.228.118.165;s;8pkt 8fpkt", shape=diamond, color=yellow];
4083[label="104.243.253.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
7665[label="104.243.253.16;d;1pkt 1fpkt", shape=hexagon, color=black];
12018[label="136.228.118.165;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat453[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.118.165:*, 192.90.234.209:80}[62.5%]&lt;BR/&gt;{136.228.118.165:*, 104.243.253.16:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4029: (11.7647%)&lt;BR/&gt; 4041: (5.88235%)&lt;BR/&gt; 3999: (5.88235%)&lt;BR/&gt; 3967: (5.88235%)&gt;];
}
3949--4083[label="1;1pkt 1fpkt"];
3949--7665[label="1;1pkt 1fpkt"];
3949--8220[label="0.625;5pkt 5fpkt"];
3949--12018[label="1;7pkt 7fpkt"];
4083--7665[label="1;1pkt 1fpkt"];
4083--12018[label="1;1pkt 1fpkt"];
7665--12018[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.90.234.209" dst_port="80" src_ip="136.228.118.165"/>
      <filter dst_ip="104.243.253.16" dst_port="80" src_ip="136.228.118.165"/>
    </slice>
    <from sec="1223615005" usec="0"/>
    <to sec="1223615502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.670358,2.09816,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="77.200.213.184"/>
      <from sec="1223615300" usec="0"/>
      <to sec="1223615418" usec="0"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_457{
style=filled;
color=gray75;
4578[label="192.90.232.236;s;1pkt 1fpkt", shape=diamond, color=yellow];
7703[label="192.90.232.236;s;1pkt 1fpkt", shape=hexagon, color=black];
stat457[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.90.232.236:80, 142.243.75.33:50381}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50381: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4578--7703[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.75.33" dst_port="50381" src_ip="192.90.232.236" src_port="80"/>
    </slice>
    <from sec="1223615319" usec="0"/>
    <to sec="1223615362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_458{
style=filled;
color=gray75;
4593[label="136.228.81.86;d;81pkt 81fpkt", shape=diamond, color=yellow];
4594[label="213.0.121.48;s;81pkt 81fpkt", shape=diamond, color=yellow];
7709[label="213.0.121.48;s;81pkt 81fpkt", shape=hexagon, color=black];
8085[label="136.228.81.86;d;81pkt 81fpkt", shape=hexagon, color=black];
8990[label="213.0.121.48;s;71pkt 71fpkt", shape=polygon, color=gold];
stat458[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.0.121.48:80, 136.228.81.86:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1692: (0.632911%)&lt;BR/&gt; 1690: (0.632911%)&lt;BR/&gt; 1688: (0.632911%)&lt;BR/&gt; 1686: (0.632911%)&gt;];
}
4593--4594[label="1;81pkt 81fpkt"];
4593--7709[label="1;81pkt 81fpkt"];
4593--8085[label="1;81pkt 81fpkt"];
4593--8990[label="1;71pkt 71fpkt"];
4594--7709[label="1;81pkt 81fpkt"];
4594--8085[label="1;81pkt 81fpkt"];
4594--8990[label="1;71pkt 71fpkt"];
7709--8085[label="1;81pkt 81fpkt"];
7709--8990[label="1;71pkt 71fpkt"];
8085--8990[label="1;71pkt 71fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.81.86" src_ip="213.0.121.48" src_port="80"/>
    </slice>
    <from sec="1223615329" usec="0"/>
    <to sec="1223615402" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_459{
style=filled;
color=gray75;
4634[label="193.217.98.216;s;1pkt 1fpkt", shape=diamond, color=yellow];
4635[label="136.228.86.48;d;7pkt 7fpkt", shape=diamond, color=yellow];
7713[label="136.228.86.48;d;1pkt 1fpkt", shape=hexagon, color=black];
8098[label="193.217.98.216;s;1pkt 1fpkt", shape=hexagon, color=black];
12762[label="193.217.98.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15020[label="193.217.98.216;1pkt 1fpkt", shape=invtriangle, color=brown];
stat459[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.64:80, 136.228.86.48:*}[28.5714%]&lt;BR/&gt;{212.138.109.118:80, 136.228.86.48:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2866: (25%)&lt;BR/&gt; 3054: (4.16667%)&lt;BR/&gt; 3028: (4.16667%)&lt;BR/&gt; 3027: (4.16667%)&gt;];
}
4634--4635[label="1;1pkt 1fpkt"];
4634--7713[label="1;1pkt 1fpkt"];
4634--8098[label="1;1pkt 1fpkt"];
4634--12762[label="1;1pkt 1fpkt"];
4634--15020[label="1;1pkt 1fpkt"];
4635--7713[label="1;1pkt 1fpkt"];
4635--8098[label="1;1pkt 1fpkt"];
4635--8745[label="0.285714;2pkt 2fpkt"];
4635--10394[label="0.285714;2pkt 2fpkt"];
4635--12762[label="1;1pkt 1fpkt"];
4635--15020[label="1;1pkt 1fpkt"];
7713--8098[label="1;1pkt 1fpkt"];
7713--12762[label="1;1pkt 1fpkt"];
7713--15020[label="1;1pkt 1fpkt"];
8098--12762[label="1;1pkt 1fpkt"];
8098--15020[label="1;1pkt 1fpkt"];
12762--15020[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.86.48" src_ip="212.138.109.118" src_port="80"/>
      <filter dst_ip="136.228.86.48" src_ip="212.138.109.64" src_port="80"/>
    </slice>
    <from sec="1223615349" usec="0"/>
    <to sec="1223615500" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_460{
style=filled;
color=gray75;
4642[label="162.73.251.30;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat460[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.192.150.166:80, 162.73.251.30:50236}[50%]&lt;BR/&gt;{210.192.150.166:80, 162.73.251.30:50237}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50237: (25%)&lt;BR/&gt; 50236: (25%)&gt;];
}
4642--7715[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.251.30" dst_port="50237" src_ip="210.192.150.166" src_port="80"/>
      <filter dst_ip="162.73.251.30" dst_port="50236" src_ip="210.192.150.166" src_port="80"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615436" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_461{
style=filled;
color=gray75;
691[label="142.243.189.146;s;2pkt 2fpkt", shape=diamond, color=yellow];
692[label="193.52.116.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
5930[label="142.243.189.146;s;2pkt 2fpkt", shape=hexagon, color=black];
7718[label="193.52.116.254;d;1pkt 1fpkt", shape=hexagon, color=black];
stat461[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.189.146:4136, 206.180.213.198:80}[50%]&lt;BR/&gt;{142.243.189.146:1680, 193.52.116.254:1935}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (33.3333%)&lt;BR/&gt; 1680: (33.3333%)&lt;BR/&gt; 4136: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&gt;];
}
691--692[label="1;1pkt 1fpkt"];
691--5930[label="1;2pkt 2fpkt"];
691--7718[label="1;1pkt 1fpkt"];
692--5930[label="1;1pkt 1fpkt"];
692--7718[label="1;1pkt 1fpkt"];
5930--7718[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.116.254" dst_port="1935" src_ip="142.243.189.146" src_port="1680"/>
      <filter dst_ip="206.180.213.198" dst_port="80" src_ip="142.243.189.146" src_port="4136"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938376,2.00969,999,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_462{
style=filled;
color=gray75;
2600[label="76.81.145.250;s;1pkt 1fpkt", shape=diamond, color=yellow];
7725[label="76.81.145.250;s;1pkt 1fpkt", shape=hexagon, color=black];
13176[label="76.81.145.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16316[label="76.81.145.250;1pkt 1fpkt", shape=invhouse, color=bisque];
stat462[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.81.145.250:17084, 142.243.216.213:4310}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17084: (50%)&lt;BR/&gt; 4310: (50%)&gt;];
}
2600--7725[label="1;1pkt 1fpkt"];
2600--13176[label="1;1pkt 1fpkt"];
2600--16316[label="1;1pkt 1fpkt"];
7725--13176[label="1;1pkt 1fpkt"];
7725--16316[label="1;1pkt 1fpkt"];
13176--16316[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.216.213" dst_port="4310" src_ip="76.81.145.250" src_port="17084"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_463{
style=filled;
color=gray75;
4644[label="213.33.154.41;d;33pkt 33fpkt", shape=diamond, color=yellow];
5117[label="213.55.215.46;s;1pkt 1fpkt", shape=diamond, color=yellow];
7727[label="213.33.154.41;d;27pkt 27fpkt", shape=hexagon, color=black];
stat463[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.33.154.41:33458}[78.7879%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33458: (39.3443%)&lt;BR/&gt; 10572: (6.55738%)&lt;BR/&gt; 44131: (2.45902%)&lt;BR/&gt; 1067: (2.45902%)&lt;BR/&gt; 60476: (1.63934%)&gt;];
}
4644--5117[label="1;1pkt 1fpkt"];
4644--7727[label="1;27pkt 27fpkt"];
5117--7727[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.154.41" dst_port="33458"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_464{
style=filled;
color=gray75;
841[label="136.228.193.32;d;589pkt 589fpkt", shape=diamond, color=yellow];
844[label="72.8.128.211;s;448pkt 448fpkt", shape=diamond, color=yellow];
6497[label="72.8.128.211;s;255pkt 255fpkt", shape=hexagon, color=black];
7729[label="136.228.193.32;d;483pkt 483fpkt", shape=hexagon, color=black];
12704[label="72.8.128.211;479pkt 479fpkt", shape=pentagon, color=darkviolet];
14989[label="72.8.128.211;478pkt 478fpkt", shape=invtriangle, color=brown];
16185[label="72.8.128.211;478pkt 478fpkt", shape=invhouse, color=bisque];
stat464[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.8.128.211:80, 136.228.193.32:*}[77.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9065%)&lt;BR/&gt; 3269: (0.109034%)&lt;BR/&gt; 3267: (0.109034%)&lt;BR/&gt; 3265: (0.109034%)&lt;BR/&gt; 3263: (0.109034%)&gt;];
}
841--844[label="1;448pkt 448fpkt"];
841--1336[label="0.00169779;1pkt 1fpkt"];
841--2263[label="0.0142857;1pkt 1fpkt"];
841--2604[label="0.0159236;5pkt 5fpkt"];
841--6492[label="0.0174825;5pkt 5fpkt"];
841--6497[label="1;255pkt 255fpkt"];
841--7195[label="0.00206186;1pkt 1fpkt"];
841--7729[label="1;483pkt 483fpkt"];
841--8138[label="0.0105263;1pkt 1fpkt"];
841--8852[label="0.0174825;5pkt 5fpkt"];
841--9163[label="0.0594228;35pkt 35fpkt"];
841--9194[label="0.0696095;41pkt 41fpkt"];
841--9197[label="0.00169779;1pkt 1fpkt"];
841--9198[label="0.0645161;38pkt 38fpkt"];
841--9234[label="0.0696095;41pkt 41fpkt"];
841--9268[label="0.0696095;41pkt 41fpkt"];
841--10517[label="0.00980392;1pkt 1fpkt"];
841--12704[label="0.935282;448pkt 448fpkt"];
841--13889[label="0.00990099;1pkt 1fpkt"];
841--14989[label="0.935146;447pkt 447fpkt"];
841--16185[label="0.935146;447pkt 447fpkt"];
844--6497[label="1;255pkt 255fpkt"];
844--7729[label="0.770089;345pkt 345fpkt"];
844--9163[label="0.0714286;32pkt 32fpkt"];
844--9194[label="0.0647321;29pkt 29fpkt"];
844--9198[label="0.078125;35pkt 35fpkt"];
844--9234[label="0.0647321;29pkt 29fpkt"];
844--9268[label="0.0647321;29pkt 29fpkt"];
844--12704[label="1;448pkt 448fpkt"];
844--14989[label="0.997768;447pkt 447fpkt"];
844--16185[label="0.997768;447pkt 447fpkt"];
6497--7729[label="1;255pkt 255fpkt"];
6497--9163[label="0.12549;32pkt 32fpkt"];
6497--9194[label="0.113725;29pkt 29fpkt"];
6497--9198[label="0.00392157;1pkt 1fpkt"];
6497--9234[label="0.113725;29pkt 29fpkt"];
6497--9268[label="0.113725;29pkt 29fpkt"];
6497--12704[label="1;255pkt 255fpkt"];
6497--14989[label="0.996078;254pkt 254fpkt"];
6497--16185[label="0.996078;254pkt 254fpkt"];
7729--8138[label="0.0105263;1pkt 1fpkt"];
7729--8852[label="0.013986;4pkt 4fpkt"];
7729--9163[label="0.0724638;35pkt 35fpkt"];
7729--9194[label="0.0848861;41pkt 41fpkt"];
7729--9197[label="0.00207039;1pkt 1fpkt"];
7729--9198[label="0.00621118;3pkt 3fpkt"];
7729--9234[label="0.0848861;41pkt 41fpkt"];
7729--9268[label="0.0848861;41pkt 41fpkt"];
7729--10517[label="0.00980392;1pkt 1fpkt"];
7729--12704[label="0.720251;345pkt 345fpkt"];
7729--13889[label="0.00990099;1pkt 1fpkt"];
7729--14989[label="0.719665;344pkt 344fpkt"];
7729--16185[label="0.719665;344pkt 344fpkt"];
12704--14989[label="1;478pkt 478fpkt"];
12704--16185[label="1;478pkt 478fpkt"];
14989--16185[label="1;478pkt 478fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.32" src_ip="72.8.128.211" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_465{
style=filled;
color=gray75;
3150[label="103.121.163.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
7732[label="103.121.163.129;s;1pkt 1fpkt", shape=hexagon, color=black];
11450[label="103.121.163.129;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14360[label="103.121.163.129;1pkt 1fpkt", shape=invtriangle, color=brown];
15835[label="103.121.163.129;1pkt 1fpkt", shape=invhouse, color=bisque];
stat465[shape=component, label=&lt;Rules:&lt;BR/&gt;{103.121.163.129:28348, 136.228.44.214:62191}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62191: (50%)&lt;BR/&gt; 28348: (50%)&gt;];
}
3150--7732[label="1;1pkt 1fpkt"];
3150--11450[label="1;1pkt 1fpkt"];
3150--14360[label="1;1pkt 1fpkt"];
3150--15835[label="1;1pkt 1fpkt"];
7732--11450[label="1;1pkt 1fpkt"];
7732--14360[label="1;1pkt 1fpkt"];
7732--15835[label="1;1pkt 1fpkt"];
11450--14360[label="1;1pkt 1fpkt"];
11450--15835[label="1;1pkt 1fpkt"];
14360--15835[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.214" dst_port="62191" src_ip="103.121.163.129" src_port="28348"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_466{
style=filled;
color=gray75;
3685[label="136.228.247.68;s;394pkt 394fpkt", shape=diamond, color=yellow];
7753[label="136.228.247.68;s;394pkt 394fpkt", shape=hexagon, color=black];
stat466[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.247.68:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3685--4229[label="0.00793651;1pkt 1fpkt"];
3685--7753[label="1;394pkt 394fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.247.68"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_467{
style=filled;
color=gray75;
1900[label="192.42.4.237;d;1pkt 1fpkt", shape=diamond, color=yellow];
3170[label="136.228.172.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
7754[label="192.42.4.237;d;1pkt 1fpkt", shape=hexagon, color=black];
stat467[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.172.171:49277, 192.42.4.237:8158}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49277: (50%)&lt;BR/&gt; 8158: (50%)&gt;];
}
1900--3170[label="1;1pkt 1fpkt"];
1900--7754[label="1;1pkt 1fpkt"];
3170--7754[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.42.4.237" dst_port="8158" src_ip="136.228.172.171" src_port="49277"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_468{
style=filled;
color=gray75;
1416[label="136.228.65.75;d;84pkt 84fpkt", shape=diamond, color=yellow];
1469[label="72.208.161.77;s;13pkt 13fpkt", shape=diamond, color=yellow];
3003[label="202.98.180.127;s;95pkt 95fpkt", shape=diamond, color=yellow];
3378[label="136.228.65.66;d;186pkt 186fpkt", shape=diamond, color=yellow];
3614[label="200.123.96.191;s;87pkt 87fpkt", shape=diamond, color=yellow];
3968[label="20.170.38.99;s;79pkt 79fpkt", shape=diamond, color=yellow];
4050[label="215.35.230.75;s;10pkt 10fpkt", shape=diamond, color=yellow];
6358[label="72.208.161.77;s;13pkt 13fpkt", shape=hexagon, color=black];
6726[label="202.98.180.127;s;68pkt 68fpkt", shape=hexagon, color=black];
7348[label="20.170.38.99;s;36pkt 36fpkt", shape=hexagon, color=black];
7373[label="200.123.96.191;s;87pkt 87fpkt", shape=hexagon, color=black];
7656[label="215.35.230.75;s;10pkt 10fpkt", shape=hexagon, color=black];
7757[label="136.228.65.70;d;481pkt 481fpkt", shape=hexagon, color=black];
8311[label="136.228.65.66;d;178pkt 178fpkt", shape=hexagon, color=black];
9031[label="202.98.180.127;s;68pkt 68fpkt", shape=polygon, color=gold];
9894[label="194.228.8.35;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10644[label="72.208.161.77;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11409[label="202.98.180.127;94pkt 94fpkt", shape=pentagon, color=darkviolet];
12246[label="203.1.6.179;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12396[label="200.123.96.191;86pkt 86fpkt", shape=pentagon, color=darkviolet];
stat468[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.65.70:80}[58.6572%]&lt;BR/&gt;{21.20.249.142:*, *:80}[23.5571%]&lt;BR/&gt;{*:*, 136.228.65.66:80}[21.7903%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0566%)&lt;BR/&gt; 443: (0.884434%)&lt;BR/&gt; 3109: (0.176887%)&lt;BR/&gt; 3108: (0.176887%)&lt;BR/&gt; 3107: (0.176887%)&gt;];
}
1416--1433[label="0.0119048;1pkt 1fpkt"];
1416--1469[label="0.153846;2pkt 2fpkt"];
1416--2475[label="0.22619;19pkt 19fpkt"];
1416--2488[label="0.307692;4pkt 4fpkt"];
1416--3966[label="0.0119048;1pkt 1fpkt"];
1416--3968[label="0.240506;19pkt 19fpkt"];
1416--3969[label="0.0119048;1pkt 1fpkt"];
1416--4050[label="0.3;3pkt 3fpkt"];
1416--6358[label="0.153846;2pkt 2fpkt"];
1416--7345[label="0.0119048;1pkt 1fpkt"];
1416--7348[label="0.0833333;3pkt 3fpkt"];
1416--7656[label="0.3;3pkt 3fpkt"];
1416--8239[label="0.0119048;1pkt 1fpkt"];
1416--10265[label="0.0119048;1pkt 1fpkt"];
1416--10609[label="0.333333;3pkt 3fpkt"];
1416--10644[label="0.153846;2pkt 2fpkt"];
1416--11544[label="0.0119048;1pkt 1fpkt"];
1416--11667[label="0.22619;19pkt 19fpkt"];
1416--13761[label="0.0119048;1pkt 1fpkt"];
1416--14406[label="0.0119048;1pkt 1fpkt"];
1416--15857[label="0.0119048;1pkt 1fpkt"];
1469--3378[label="0.153846;2pkt 2fpkt"];
1469--6358[label="1;13pkt 13fpkt"];
1469--7757[label="0.692308;9pkt 9fpkt"];
1469--8311[label="0.153846;2pkt 2fpkt"];
1469--10644[label="1;13pkt 13fpkt"];
3003--3378[label="0.0947368;9pkt 9fpkt"];
3003--5043[label="0.702703;26pkt 26fpkt"];
3003--6726[label="1;68pkt 68fpkt"];
3003--7757[label="0.242105;23pkt 23fpkt"];
3003--8311[label="0.0947368;9pkt 9fpkt"];
3003--8517[label="0.702703;26pkt 26fpkt"];
3003--9031[label="1;68pkt 68fpkt"];
3003--11409[label="1;94pkt 94fpkt"];
3378--3614[label="0.275862;24pkt 24fpkt"];
3378--3966[label="0.00724638;1pkt 1fpkt"];
3378--3968[label="0.126582;10pkt 10fpkt"];
3378--3969[label="0.00724638;1pkt 1fpkt"];
3378--4609[label="0.25;6pkt 6fpkt"];
3378--6058[label="0.00666667;1pkt 1fpkt"];
3378--6358[label="0.153846;2pkt 2fpkt"];
3378--6726[label="0.132353;9pkt 9fpkt"];
3378--7345[label="0.00724638;1pkt 1fpkt"];
3378--7348[label="0.222222;8pkt 8fpkt"];
3378--7373[label="0.275862;24pkt 24fpkt"];
3378--7809[label="0.0107527;2pkt 2fpkt"];
3378--8311[label="1;178pkt 178fpkt"];
3378--8436[label="0.181818;4pkt 4fpkt"];
3378--9031[label="0.132353;9pkt 9fpkt"];
3378--9894[label="1;6pkt 6fpkt"];
3378--10265[label="0.00729927;1pkt 1fpkt"];
3378--10644[label="0.153846;2pkt 2fpkt"];
3378--11409[label="0.0957447;9pkt 9fpkt"];
3378--11544[label="0.00724638;1pkt 1fpkt"];
3378--11667[label="0.360215;67pkt 67fpkt"];
3378--12193[label="0.0107527;2pkt 2fpkt"];
3378--12246[label="1;2pkt 2fpkt"];
3378--12396[label="0.27907;24pkt 24fpkt"];
3378--12488[label="0.25;6pkt 6fpkt"];
3378--12489[label="0.00537634;1pkt 1fpkt"];
3378--13761[label="0.00724638;1pkt 1fpkt"];
3378--14406[label="0.00729927;1pkt 1fpkt"];
3378--14735[label="0.0107527;2pkt 2fpkt"];
3378--14883[label="0.00537634;1pkt 1fpkt"];
3378--15857[label="0.00729927;1pkt 1fpkt"];
3378--16035[label="0.0107527;2pkt 2fpkt"];
3378--16124[label="0.3;6pkt 6fpkt"];
3378--16125[label="0.00537634;1pkt 1fpkt"];
3614--7373[label="1;87pkt 87fpkt"];
3614--7757[label="0.724138;63pkt 63fpkt"];
3614--8311[label="0.275862;24pkt 24fpkt"];
3614--12396[label="1;86pkt 86fpkt"];
3968--7348[label="1;36pkt 36fpkt"];
3968--7757[label="0.265823;21pkt 21fpkt"];
3968--8311[label="0.101266;8pkt 8fpkt"];
3968--9178[label="0.189873;15pkt 15fpkt"];
3968--9218[label="0.189873;15pkt 15fpkt"];
3968--9252[label="0.189873;15pkt 15fpkt"];
4050--7656[label="1;10pkt 10fpkt"];
4050--7757[label="0.1;1pkt 1fpkt"];
4050--7937[label="0.1;1pkt 1fpkt"];
4050--10609[label="1;9pkt 9fpkt"];
6358--7757[label="0.692308;9pkt 9fpkt"];
6358--8311[label="0.153846;2pkt 2fpkt"];
6358--10644[label="1;13pkt 13fpkt"];
6726--7757[label="0.338235;23pkt 23fpkt"];
6726--8311[label="0.132353;9pkt 9fpkt"];
6726--8517[label="0.324324;12pkt 12fpkt"];
6726--9031[label="1;68pkt 68fpkt"];
6726--11409[label="0.985294;67pkt 67fpkt"];
7348--7757[label="0.277778;10pkt 10fpkt"];
7348--8311[label="0.222222;8pkt 8fpkt"];
7348--9178[label="0.416667;15pkt 15fpkt"];
7348--9218[label="0.416667;15pkt 15fpkt"];
7348--9252[label="0.416667;15pkt 15fpkt"];
7373--7757[label="0.724138;63pkt 63fpkt"];
7373--8311[label="0.275862;24pkt 24fpkt"];
7373--12396[label="1;86pkt 86fpkt"];
7656--7757[label="0.1;1pkt 1fpkt"];
7656--7937[label="0.1;1pkt 1fpkt"];
7656--10609[label="1;9pkt 9fpkt"];
7757--8436[label="0.681818;15pkt 15fpkt"];
7757--8568[label="0.002079;1pkt 1fpkt"];
7757--9031[label="0.338235;23pkt 23fpkt"];
7757--9929[label="0.888889;16pkt 16fpkt"];
7757--10265[label="0.00729927;1pkt 1fpkt"];
7757--10644[label="0.692308;9pkt 9fpkt"];
7757--11409[label="0.234043;22pkt 22fpkt"];
7757--11493[label="0.75;3pkt 3fpkt"];
7757--11544[label="0.00724638;1pkt 1fpkt"];
7757--11667[label="0.567164;114pkt 114fpkt"];
7757--11957[label="1;28pkt 28fpkt"];
7757--12008[label="1;28pkt 28fpkt"];
7757--12163[label="0.235294;8pkt 8fpkt"];
7757--12396[label="0.72093;62pkt 62fpkt"];
7757--12488[label="0.625;15pkt 15fpkt"];
7757--13170[label="0.875;21pkt 21fpkt"];
7757--13761[label="0.00724638;1pkt 1fpkt"];
7757--14406[label="0.00729927;1pkt 1fpkt"];
7757--14636[label="1;29pkt 29fpkt"];
7757--14717[label="0.212121;7pkt 7fpkt"];
7757--15238[label="0.875;21pkt 21fpkt"];
7757--15857[label="0.00729927;1pkt 1fpkt"];
7757--15974[label="1;27pkt 27fpkt"];
7757--16124[label="0.55;11pkt 11fpkt"];
7757--16314[label="0.875;21pkt 21fpkt"];
8311--8436[label="0.181818;4pkt 4fpkt"];
8311--9031[label="0.132353;9pkt 9fpkt"];
8311--9894[label="1;6pkt 6fpkt"];
8311--10265[label="0.00729927;1pkt 1fpkt"];
8311--10644[label="0.153846;2pkt 2fpkt"];
8311--11409[label="0.0957447;9pkt 9fpkt"];
8311--11544[label="0.00724638;1pkt 1fpkt"];
8311--11667[label="0.376404;67pkt 67fpkt"];
8311--12193[label="0.011236;2pkt 2fpkt"];
8311--12246[label="1;2pkt 2fpkt"];
8311--12396[label="0.27907;24pkt 24fpkt"];
8311--12488[label="0.166667;4pkt 4fpkt"];
8311--13761[label="0.00724638;1pkt 1fpkt"];
8311--14406[label="0.00729927;1pkt 1fpkt"];
8311--14735[label="0.011236;2pkt 2fpkt"];
8311--15857[label="0.00729927;1pkt 1fpkt"];
8311--16035[label="0.011236;2pkt 2fpkt"];
8311--16124[label="0.2;4pkt 4fpkt"];
9031--11409[label="0.985294;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="21.20.249.142"/>
      <filter dst_ip="136.228.65.70" dst_port="80"/>
      <filter dst_ip="136.228.65.66" dst_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_469{
style=filled;
color=gray75;
4662[label="20.209.48.131;s;578pkt 578fpkt", shape=diamond, color=yellow];
7784[label="20.209.48.131;s;578pkt 578fpkt", shape=hexagon, color=black];
stat469[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.209.48.131:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4354: (0.259516%)&lt;BR/&gt; 2271: (0.259516%)&lt;BR/&gt; 1834: (0.259516%)&lt;BR/&gt; 4822: (0.17301%)&gt;];
}
4662--7784[label="1;578pkt 578fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="20.209.48.131"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_470{
style=filled;
color=gray75;
4666[label="205.109.102.195;s;642pkt 642fpkt", shape=diamond, color=yellow];
7798[label="205.109.102.195;s;642pkt 642fpkt", shape=hexagon, color=black];
stat470[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.109.102.195:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 2275: (0.389408%)&lt;BR/&gt; 4174: (0.311526%)&lt;BR/&gt; 2533: (0.311526%)&lt;BR/&gt; 2006: (0.311526%)&gt;];
}
4666--7798[label="1;642pkt 642fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="205.109.102.195"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_471{
style=filled;
color=gray75;
4193[label="164.25.23.78;d;14pkt 14fpkt", shape=diamond, color=yellow];
4194[label="197.36.119.43;s;12pkt 12fpkt", shape=diamond, color=yellow];
7804[label="197.36.119.43;s;11pkt 11fpkt", shape=hexagon, color=black];
10071[label="197.36.119.43;15pkt 15fpkt", shape=pentagon, color=darkviolet];
13660[label="197.36.119.43;14pkt 14fpkt", shape=invtriangle, color=brown];
15475[label="197.36.119.43;14pkt 14fpkt", shape=invhouse, color=bisque];
stat471[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.36.119.43:20, 164.25.23.78:*}[93.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (46.25%)&lt;BR/&gt; 5108: (3.75%)&lt;BR/&gt; 5106: (3.75%)&lt;BR/&gt; 5104: (3.75%)&lt;BR/&gt; 5102: (3.75%)&gt;];
}
4193--4194[label="1;12pkt 12fpkt"];
4193--7804[label="1;11pkt 11fpkt"];
4193--10071[label="1;14pkt 14fpkt"];
4193--13660[label="0.928571;13pkt 13fpkt"];
4193--15475[label="0.928571;13pkt 13fpkt"];
4194--7804[label="1;11pkt 11fpkt"];
4194--10071[label="1;12pkt 12fpkt"];
4194--13660[label="0.916667;11pkt 11fpkt"];
4194--15475[label="0.916667;11pkt 11fpkt"];
7804--10071[label="1;11pkt 11fpkt"];
7804--13660[label="0.909091;10pkt 10fpkt"];
7804--15475[label="0.909091;10pkt 10fpkt"];
10071--13660[label="1;14pkt 14fpkt"];
10071--15475[label="1;14pkt 14fpkt"];
13660--15475[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.23.78" src_ip="197.36.119.43" src_port="20"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_472{
style=filled;
color=gray75;
1259[label="142.243.233.222;s;5pkt 5fpkt", shape=diamond, color=yellow];
2004[label="197.66.50.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
2073[label="212.214.190.181;d;1pkt 1fpkt", shape=diamond, color=yellow];
7806[label="212.214.190.181;d;1pkt 1fpkt", shape=hexagon, color=black];
stat472[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.233.222:1027, 197.66.50.104:1037}[20%]&lt;BR/&gt;{142.243.233.222:1027, 212.214.190.181:1029}[20%]&lt;BR/&gt;{142.243.233.222:1027, 108.53.2.219:55336}[20%]&lt;BR/&gt;{142.243.233.222:3534, 50.80.27.241:80}[20%]&lt;BR/&gt;{142.243.233.222:1027, 50.80.27.241:8102}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1027: (43.75%)&lt;BR/&gt; 1029: (18.75%)&lt;BR/&gt; 1037: (12.5%)&lt;BR/&gt; 55336: (6.25%)&lt;BR/&gt; 8102: (6.25%)&gt;];
}
1259--1909[label="0.4;2pkt 2fpkt"];
1259--2004[label="1;1pkt 1fpkt"];
1259--2073[label="1;1pkt 1fpkt"];
1259--5324[label="1;1pkt 1fpkt"];
1259--7806[label="1;1pkt 1fpkt"];
1259--8463[label="1;1pkt 1fpkt"];
2073--7806[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="50.80.27.241" dst_port="8102" src_ip="142.243.233.222" src_port="1027"/>
      <filter dst_ip="50.80.27.241" dst_port="80" src_ip="142.243.233.222" src_port="3534"/>
      <filter dst_ip="108.53.2.219" dst_port="55336" src_ip="142.243.233.222" src_port="1027"/>
      <filter dst_ip="212.214.190.181" dst_port="1029" src_ip="142.243.233.222" src_port="1027"/>
      <filter dst_ip="197.66.50.104" dst_port="1037" src_ip="142.243.233.222" src_port="1027"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_473{
style=filled;
color=gray75;
4672[label="162.73.191.55;d;65pkt 65fpkt", shape=diamond, color=yellow];
7817[label="162.73.191.55;d;60pkt 60fpkt", shape=hexagon, color=black];
stat473[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 162.73.191.55:13581}[50.7692%]&lt;BR/&gt;{*:*, 162.73.191.55:13861}[49.2308%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13861: (25.6%)&lt;BR/&gt; 13581: (24.4%)&lt;BR/&gt; 13980: (1.6%)&lt;BR/&gt; 5198: (1.2%)&lt;BR/&gt; 63103: (0.8%)&gt;];
}
4672--7817[label="1;60pkt 60fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.191.55" dst_port="13581"/>
      <filter dst_ip="162.73.191.55" dst_port="13861"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_474{
style=filled;
color=gray75;
2752[label="193.52.217.41;d;148pkt 148fpkt", shape=diamond, color=yellow];
7818[label="142.16.161.221;s;30pkt 30fpkt", shape=hexagon, color=black];
11317[label="162.73.169.120;20pkt 20fpkt", shape=pentagon, color=darkviolet];
11382[label="142.226.182.125;26pkt 26fpkt", shape=pentagon, color=darkviolet];
14284[label="162.73.169.120;21pkt 21fpkt", shape=invtriangle, color=brown];
15797[label="162.73.169.120;21pkt 21fpkt", shape=invhouse, color=bisque];
stat474[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.246.164:80, 193.52.217.41:*}[47.9263%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6241%)&lt;BR/&gt; 64442: (0.75188%)&lt;BR/&gt; 63704: (0.75188%)&lt;BR/&gt; 64852: (0.56391%)&lt;BR/&gt; 64613: (0.56391%)&gt;];
}
2752--4203[label="0.075;3pkt 3fpkt"];
2752--5935[label="0.0117647;1pkt 1fpkt"];
2752--6377[label="0.025;1pkt 1fpkt"];
2752--6681[label="0.0263158;1pkt 1fpkt"];
2752--7148[label="0.00675676;1pkt 1fpkt"];
2752--7491[label="1;107pkt 107fpkt"];
2752--7818[label="0.0666667;2pkt 2fpkt"];
2752--8596[label="0.00869565;1pkt 1fpkt"];
2752--9088[label="0.025;1pkt 1fpkt"];
2752--9163[label="0.0810811;12pkt 12fpkt"];
2752--9194[label="0.0608108;9pkt 9fpkt"];
2752--9198[label="0.0608108;9pkt 9fpkt"];
2752--9234[label="0.0608108;9pkt 9fpkt"];
2752--9268[label="0.0608108;9pkt 9fpkt"];
2752--9962[label="0.0135135;2pkt 2fpkt"];
2752--10859[label="0.0714286;2pkt 2fpkt"];
2752--11317[label="0.1;2pkt 2fpkt"];
2752--11382[label="0.153846;4pkt 4fpkt"];
2752--12005[label="0.702703;104pkt 104fpkt"];
2752--12945[label="0.0675676;10pkt 10fpkt"];
2752--13598[label="0.0135135;2pkt 2fpkt"];
2752--14284[label="0.0952381;2pkt 2fpkt"];
2752--15117[label="0.0675676;10pkt 10fpkt"];
2752--15797[label="0.0952381;2pkt 2fpkt"];
2752--16251[label="0.0675676;10pkt 10fpkt"];
7818--8010[label="0.0333333;1pkt 1fpkt"];
7818--9103[label="0.0333333;1pkt 1fpkt"];
7818--9163[label="0.0666667;2pkt 2fpkt"];
7818--9194[label="0.0333333;1pkt 1fpkt"];
7818--9234[label="0.0333333;1pkt 1fpkt"];
7818--9268[label="0.0333333;1pkt 1fpkt"];
11317--14284[label="1;20pkt 20fpkt"];
11317--15797[label="1;20pkt 20fpkt"];
14284--15797[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.217.41" src_ip="142.243.246.164" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_475{
style=filled;
color=gray75;
954[label="139.40.98.102;s;1247pkt 1247fpkt", shape=diamond, color=yellow];
1467[label="213.55.226.63;s;19pkt 19fpkt", shape=diamond, color=yellow];
1710[label="136.228.46.169;d;54pkt 54fpkt", shape=diamond, color=yellow];
2038[label="162.73.128.148;d;82pkt 82fpkt", shape=diamond, color=yellow];
2326[label="136.228.10.41;d;114pkt 114fpkt", shape=diamond, color=yellow];
2328[label="162.73.222.16;d;22pkt 22fpkt", shape=diamond, color=yellow];
2351[label="142.243.246.136;d;111pkt 111fpkt", shape=diamond, color=yellow];
2588[label="142.243.15.71;d;21pkt 21fpkt", shape=diamond, color=yellow];
2697[label="96.136.154.79;s;1pkt 1fpkt", shape=diamond, color=yellow];
2787[label="142.243.72.154;d;70pkt 70fpkt", shape=diamond, color=yellow];
3165[label="212.21.136.129;d;54pkt 54fpkt", shape=diamond, color=yellow];
3210[label="142.243.246.197;d;32pkt 32fpkt", shape=diamond, color=yellow];
3713[label="21.16.40.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
3878[label="160.49.189.7;d;13pkt 13fpkt", shape=diamond, color=yellow];
4826[label="139.40.98.103;s;212pkt 212fpkt", shape=diamond, color=yellow];
4830[label="142.243.188.43;d;74pkt 74fpkt", shape=diamond, color=yellow];
5047[label="212.21.140.38;d;100pkt 100fpkt", shape=diamond, color=yellow];
5215[label="212.21.135.179;d;38pkt 38fpkt", shape=diamond, color=yellow];
5493[label="202.106.155.186;s;5pkt 5fpkt", shape=diamond, color=yellow];
5698[label="142.243.13.225;d;71pkt 71fpkt", shape=diamond, color=yellow];
5863[label="195.162.169.186;s;13pkt 13fpkt", shape=diamond, color=yellow];
6125[label="72.211.44.37;s;11pkt 11fpkt", shape=hexagon, color=black];
6627[label="213.55.226.63;s;19pkt 19fpkt", shape=hexagon, color=black];
6685[label="136.228.46.169;d;27pkt 27fpkt", shape=hexagon, color=black];
7188[label="162.73.128.148;d;48pkt 48fpkt", shape=hexagon, color=black];
7281[label="160.49.189.7;d;9pkt 9fpkt", shape=hexagon, color=black];
7744[label="139.40.98.102;s;1097pkt 1097fpkt", shape=hexagon, color=black];
7773[label="213.43.29.77;s;123pkt 123fpkt", shape=hexagon, color=black];
8007[label="139.40.98.103;s;135pkt 135fpkt", shape=hexagon, color=black];
8016[label="142.243.188.43;d;65pkt 65fpkt", shape=hexagon, color=black];
8191[label="142.243.246.197;d;30pkt 30fpkt", shape=hexagon, color=black];
8334[label="162.73.222.16;d;19pkt 19fpkt", shape=hexagon, color=black];
9545[label="125.208.146.14;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10309[label="21.20.148.57;12pkt 12fpkt", shape=pentagon, color=darkviolet];
10679[label="96.136.154.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11046[label="139.40.98.102;1517pkt 1517fpkt", shape=pentagon, color=darkviolet];
11058[label="139.40.98.103;221pkt 221fpkt", shape=pentagon, color=darkviolet];
12339[label="202.106.155.186;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13380[label="125.208.146.14;4pkt 4fpkt", shape=invtriangle, color=brown];
13783[label="21.20.148.57;12pkt 12fpkt", shape=invtriangle, color=brown];
14149[label="139.40.98.102;1518pkt 1518fpkt", shape=invtriangle, color=brown];
14157[label="139.40.98.103;220pkt 220fpkt", shape=invtriangle, color=brown];
15602[label="193.112.97.72;1pkt 1fpkt", shape=invhouse, color=bisque];
15731[label="139.40.98.102;1517pkt 1517fpkt", shape=invhouse, color=bisque];
stat475[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.40.98.102:80, *:*}[53.363%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6323%)&lt;BR/&gt; 443: (6.90155%)&lt;BR/&gt; 49367: (0.551901%)&lt;BR/&gt; 32252: (0.22299%)&lt;BR/&gt; 33222: (0.178392%)&gt;];
}
954--965[label="0.00862069;2pkt 2fpkt"];
954--983[label="0.00426439;4pkt 4fpkt"];
954--1077[label="0.00667302;7pkt 7fpkt"];
954--1095[label="0.0212766;1pkt 1fpkt"];
954--1352[label="0.0575221;13pkt 13fpkt"];
954--1447[label="0.00119048;1pkt 1fpkt"];
954--1455[label="0.00315457;2pkt 2fpkt"];
954--1710[label="0.296296;16pkt 16fpkt"];
954--1824[label="0.0498534;17pkt 17fpkt"];
954--2038[label="0.0365854;3pkt 3fpkt"];
954--2099[label="0.004158;2pkt 2fpkt"];
954--2108[label="0.0886076;7pkt 7fpkt"];
954--2252[label="0.235955;21pkt 21fpkt"];
954--2326[label="0.0175439;2pkt 2fpkt"];
954--2328[label="0.545455;12pkt 12fpkt"];
954--2351[label="0.018018;2pkt 2fpkt"];
954--2588[label="0.333333;7pkt 7fpkt"];
954--2787[label="0.342857;24pkt 24fpkt"];
954--3165[label="0.0185185;1pkt 1fpkt"];
954--3210[label="0.21875;7pkt 7fpkt"];
954--3264[label="0.0792683;13pkt 13fpkt"];
954--3394[label="0.425;17pkt 17fpkt"];
954--3398[label="0.852349;254pkt 254fpkt"];
954--3810[label="0.108333;13pkt 13fpkt"];
954--3878[label="0.923077;12pkt 12fpkt"];
954--3885[label="0.341463;14pkt 14fpkt"];
954--4297[label="0.548387;17pkt 17fpkt"];
954--4462[label="0.0147059;1pkt 1fpkt"];
954--4715[label="0.233333;14pkt 14fpkt"];
954--4830[label="0.0675676;5pkt 5fpkt"];
954--5044[label="0.536842;51pkt 51fpkt"];
954--5047[label="0.24;24pkt 24fpkt"];
954--5100[label="0.027027;2pkt 2fpkt"];
954--5167[label="0.133858;17pkt 17fpkt"];
954--5215[label="0.315789;12pkt 12fpkt"];
954--5669[label="0.263158;5pkt 5fpkt"];
954--5698[label="0.056338;4pkt 4fpkt"];
954--6095[label="0.00138696;1pkt 1fpkt"];
954--6685[label="0.185185;5pkt 5fpkt"];
954--6811[label="0.0037037;2pkt 2fpkt"];
954--6991[label="0.992248;128pkt 128fpkt"];
954--7106[label="0.000803213;1pkt 1fpkt"];
954--7188[label="0.0416667;2pkt 2fpkt"];
954--7218[label="0.0792683;13pkt 13fpkt"];
954--7262[label="0.19697;13pkt 13fpkt"];
954--7281[label="1;9pkt 9fpkt"];
954--7744[label="1;1097pkt 1097fpkt"];
954--7824[label="0.0774194;12pkt 12fpkt"];
954--8016[label="0.0769231;5pkt 5fpkt"];
954--8191[label="0.233333;7pkt 7fpkt"];
954--8304[label="0.136;17pkt 17fpkt"];
954--8334[label="0.631579;12pkt 12fpkt"];
954--8529[label="0.00862069;2pkt 2fpkt"];
954--8619[label="0.108333;13pkt 13fpkt"];
954--8934[label="0.00126263;1pkt 1fpkt"];
954--9090[label="0.136;17pkt 17fpkt"];
954--9163[label="0.0473136;59pkt 59fpkt"];
954--9194[label="0.0721732;90pkt 90fpkt"];
954--9198[label="0.0112269;14pkt 14fpkt"];
954--9234[label="0.0721732;90pkt 90fpkt"];
954--9268[label="0.0721732;90pkt 90fpkt"];
954--11046[label="0.999198;1246pkt 1246fpkt"];
954--14149[label="1;1247pkt 1247fpkt"];
954--15731[label="0.999198;1246pkt 1246fpkt"];
1467--1710[label="1;19pkt 19fpkt"];
1467--6627[label="1;19pkt 19fpkt"];
1467--6685[label="1;19pkt 19fpkt"];
1710--2725[label="0.0185185;1pkt 1fpkt"];
1710--6627[label="1;19pkt 19fpkt"];
1710--6685[label="1;27pkt 27fpkt"];
1710--7195[label="0.037037;2pkt 2fpkt"];
1710--7744[label="0.240741;13pkt 13fpkt"];
1710--9194[label="0.148148;8pkt 8fpkt"];
1710--9234[label="0.148148;8pkt 8fpkt"];
1710--9268[label="0.148148;8pkt 8fpkt"];
1710--11046[label="0.314815;17pkt 17fpkt"];
1710--14149[label="0.314815;17pkt 17fpkt"];
1710--15731[label="0.314815;17pkt 17fpkt"];
2038--2697[label="1;1pkt 1fpkt"];
2038--5493[label="1;5pkt 5fpkt"];
2038--7188[label="1;48pkt 48fpkt"];
2038--7744[label="0.0365854;3pkt 3fpkt"];
2038--7773[label="0.0487805;4pkt 4fpkt"];
2038--9163[label="0.0121951;1pkt 1fpkt"];
2038--9194[label="0.0243902;2pkt 2fpkt"];
2038--9198[label="0.0121951;1pkt 1fpkt"];
2038--9234[label="0.0243902;2pkt 2fpkt"];
2038--9268[label="0.0243902;2pkt 2fpkt"];
2038--10544[label="0.333333;2pkt 2fpkt"];
2038--10679[label="1;1pkt 1fpkt"];
2038--11046[label="0.0487805;4pkt 4fpkt"];
2038--12339[label="1;5pkt 5fpkt"];
2038--13906[label="0.285714;2pkt 2fpkt"];
2038--14149[label="0.0487805;4pkt 4fpkt"];
2038--15601[label="0.333333;2pkt 2fpkt"];
2038--15731[label="0.0487805;4pkt 4fpkt"];
2326--2846[label="0.00877193;1pkt 1fpkt"];
2326--2911[label="0.0196078;1pkt 1fpkt"];
2326--3830[label="0.0113636;1pkt 1fpkt"];
2326--6367[label="0.0175439;2pkt 2fpkt"];
2326--7744[label="0.0175439;2pkt 2fpkt"];
2326--7901[label="0.00877193;1pkt 1fpkt"];
2326--7906[label="0.0196078;1pkt 1fpkt"];
2326--9163[label="0.0438596;5pkt 5fpkt"];
2326--10838[label="0.00877193;1pkt 1fpkt"];
2326--11046[label="0.0175439;2pkt 2fpkt"];
2326--13545[label="0.0192308;1pkt 1fpkt"];
2326--14051[label="0.00877193;1pkt 1fpkt"];
2326--14149[label="0.0175439;2pkt 2fpkt"];
2326--15425[label="0.0192308;1pkt 1fpkt"];
2326--15675[label="0.00877193;1pkt 1fpkt"];
2326--15731[label="0.0175439;2pkt 2fpkt"];
2328--5658[label="0.181818;4pkt 4fpkt"];
2328--7744[label="0.5;11pkt 11fpkt"];
2328--8334[label="1;19pkt 19fpkt"];
2328--9163[label="0.0454545;1pkt 1fpkt"];
2328--9194[label="0.0454545;1pkt 1fpkt"];
2328--9198[label="0.0454545;1pkt 1fpkt"];
2328--9234[label="0.0454545;1pkt 1fpkt"];
2328--9268[label="0.0454545;1pkt 1fpkt"];
2328--9545[label="0.75;3pkt 3fpkt"];
2328--11046[label="0.636364;14pkt 14fpkt"];
2328--13380[label="0.75;3pkt 3fpkt"];
2328--14149[label="0.636364;14pkt 14fpkt"];
2328--15731[label="0.636364;14pkt 14fpkt"];
2351--2868[label="0.031746;2pkt 2fpkt"];
2351--3280[label="0.0208333;1pkt 1fpkt"];
2351--3427[label="0.0357143;3pkt 3fpkt"];
2351--6125[label="0.181818;2pkt 2fpkt"];
2351--6324[label="0.0720721;8pkt 8fpkt"];
2351--6649[label="0.0588235;2pkt 2fpkt"];
2351--7305[label="0.0357143;3pkt 3fpkt"];
2351--7459[label="0.306306;34pkt 34fpkt"];
2351--7744[label="0.018018;2pkt 2fpkt"];
2351--8291[label="0.0377358;2pkt 2fpkt"];
2351--9163[label="0.018018;2pkt 2fpkt"];
2351--9194[label="0.00900901;1pkt 1fpkt"];
2351--9198[label="0.018018;2pkt 2fpkt"];
2351--9234[label="0.00900901;1pkt 1fpkt"];
2351--9268[label="0.00900901;1pkt 1fpkt"];
2351--10380[label="0.0181818;2pkt 2fpkt"];
2351--10789[label="0.306306;34pkt 34fpkt"];
2351--11046[label="0.018018;2pkt 2fpkt"];
2351--12077[label="0.1;2pkt 2fpkt"];
2351--12107[label="0.027027;3pkt 3fpkt"];
2351--12511[label="0.0322581;2pkt 2fpkt"];
2351--12944[label="0.0196078;1pkt 1fpkt"];
2351--14149[label="0.018018;2pkt 2fpkt"];
2351--14669[label="0.105263;2pkt 2fpkt"];
2351--14688[label="0.027027;3pkt 3fpkt"];
2351--15731[label="0.018018;2pkt 2fpkt"];
2351--16014[label="0.027027;3pkt 3fpkt"];
2588--6465[label="1;1pkt 1fpkt"];
2588--7744[label="0.285714;6pkt 6fpkt"];
2588--8932[label="1;1pkt 1fpkt"];
2588--9163[label="0.047619;1pkt 1fpkt"];
2588--9194[label="0.0952381;2pkt 2fpkt"];
2588--9198[label="0.047619;1pkt 1fpkt"];
2588--9234[label="0.0952381;2pkt 2fpkt"];
2588--9268[label="0.0952381;2pkt 2fpkt"];
2588--11046[label="0.380952;8pkt 8fpkt"];
2588--11463[label="0.047619;1pkt 1fpkt"];
2588--11871[label="1;1pkt 1fpkt"];
2588--14149[label="0.380952;8pkt 8fpkt"];
2588--14567[label="1;1pkt 1fpkt"];
2588--15731[label="0.380952;8pkt 8fpkt"];
2697--7188[label="1;1pkt 1fpkt"];
2697--10679[label="1;1pkt 1fpkt"];
2787--4826[label="0.485714;34pkt 34fpkt"];
2787--7744[label="0.271429;19pkt 19fpkt"];
2787--8007[label="0.214286;15pkt 15fpkt"];
2787--9163[label="0.114286;8pkt 8fpkt"];
2787--9194[label="0.0285714;2pkt 2fpkt"];
2787--9234[label="0.0285714;2pkt 2fpkt"];
2787--9268[label="0.0285714;2pkt 2fpkt"];
2787--11046[label="0.357143;25pkt 25fpkt"];
2787--11058[label="0.485714;34pkt 34fpkt"];
2787--11463[label="0.0142857;1pkt 1fpkt"];
2787--14149[label="0.357143;25pkt 25fpkt"];
2787--14157[label="0.485714;34pkt 34fpkt"];
2787--15731[label="0.357143;25pkt 25fpkt"];
3165--3663[label="0.0185185;1pkt 1fpkt"];
3165--3687[label="0.111111;6pkt 6fpkt"];
3165--4033[label="0.5;4pkt 4fpkt"];
3165--4826[label="0.314815;17pkt 17fpkt"];
3165--7010[label="0.0185185;1pkt 1fpkt"];
3165--7388[label="0.0185185;1pkt 1fpkt"];
3165--7744[label="0.0185185;1pkt 1fpkt"];
3165--8007[label="0.314815;17pkt 17fpkt"];
3165--8930[label="0.0185185;1pkt 1fpkt"];
3165--9163[label="0.0185185;1pkt 1fpkt"];
3165--9192[label="0.0185185;1pkt 1fpkt"];
3165--9194[label="0.5;27pkt 27fpkt"];
3165--9198[label="0.0185185;1pkt 1fpkt"];
3165--9232[label="0.0185185;1pkt 1fpkt"];
3165--9234[label="0.5;27pkt 27fpkt"];
3165--9266[label="0.0185185;1pkt 1fpkt"];
3165--9268[label="0.5;27pkt 27fpkt"];
3165--9886[label="0.5;4pkt 4fpkt"];
3165--11046[label="0.0185185;1pkt 1fpkt"];
3165--11058[label="0.314815;17pkt 17fpkt"];
3165--11149[label="0.333333;4pkt 4fpkt"];
3165--12387[label="0.0185185;1pkt 1fpkt"];
3165--13025[label="0.0714286;2pkt 2fpkt"];
3165--14149[label="0.0185185;1pkt 1fpkt"];
3165--14157[label="0.296296;16pkt 16fpkt"];
3165--14205[label="0.333333;4pkt 4fpkt"];
3165--15731[label="0.0185185;1pkt 1fpkt"];
3210--3713[label="1;1pkt 1fpkt"];
3210--7744[label="0.1875;6pkt 6fpkt"];
3210--8191[label="1;30pkt 30fpkt"];
3210--9194[label="0.03125;1pkt 1fpkt"];
3210--9234[label="0.03125;1pkt 1fpkt"];
3210--9268[label="0.03125;1pkt 1fpkt"];
3210--11046[label="0.25;8pkt 8fpkt"];
3210--14149[label="0.25;8pkt 8fpkt"];
3210--15731[label="0.25;8pkt 8fpkt"];
3713--8191[label="1;1pkt 1fpkt"];
3878--7281[label="1;9pkt 9fpkt"];
3878--7744[label="0.846154;11pkt 11fpkt"];
3878--9163[label="0.0769231;1pkt 1fpkt"];
3878--9198[label="0.0769231;1pkt 1fpkt"];
3878--11046[label="1;13pkt 13fpkt"];
3878--14149[label="1;13pkt 13fpkt"];
3878--15731[label="1;13pkt 13fpkt"];
4826--4830[label="0.554054;41pkt 41fpkt"];
4826--5698[label="0.380282;27pkt 27fpkt"];
4826--7824[label="0.109677;17pkt 17fpkt"];
4826--8007[label="1;135pkt 135fpkt"];
4826--8016[label="0.630769;41pkt 41fpkt"];
4826--9194[label="0.0849057;18pkt 18fpkt"];
4826--9234[label="0.0849057;18pkt 18fpkt"];
4826--9268[label="0.0849057;18pkt 18fpkt"];
4826--11058[label="1;212pkt 212fpkt"];
4826--14157[label="0.995283;211pkt 211fpkt"];
4830--5321[label="0.0135135;1pkt 1fpkt"];
4830--7744[label="0.0540541;4pkt 4fpkt"];
4830--8007[label="0.472973;35pkt 35fpkt"];
4830--8016[label="1;65pkt 65fpkt"];
4830--9198[label="0.0945946;7pkt 7fpkt"];
4830--10309[label="0.833333;10pkt 10fpkt"];
4830--11046[label="0.0675676;5pkt 5fpkt"];
4830--11058[label="0.554054;41pkt 41fpkt"];
4830--13783[label="0.833333;10pkt 10fpkt"];
4830--14149[label="0.0675676;5pkt 5fpkt"];
4830--14157[label="0.554054;41pkt 41fpkt"];
4830--15731[label="0.0675676;5pkt 5fpkt"];
5047--7010[label="0.01;1pkt 1fpkt"];
5047--7388[label="0.01;1pkt 1fpkt"];
5047--7744[label="0.2;20pkt 20fpkt"];
5047--8515[label="0.25;25pkt 25fpkt"];
5047--8930[label="0.01;1pkt 1fpkt"];
5047--9127[label="0.25;25pkt 25fpkt"];
5047--9163[label="0.04;4pkt 4fpkt"];
5047--9192[label="0.01;1pkt 1fpkt"];
5047--9194[label="0.04;4pkt 4fpkt"];
5047--9198[label="0.03;3pkt 3fpkt"];
5047--9232[label="0.01;1pkt 1fpkt"];
5047--9234[label="0.04;4pkt 4fpkt"];
5047--9266[label="0.01;1pkt 1fpkt"];
5047--9268[label="0.04;4pkt 4fpkt"];
5047--11046[label="0.24;24pkt 24fpkt"];
5047--12387[label="0.01;1pkt 1fpkt"];
5047--12546[label="0.01;1pkt 1fpkt"];
5047--14149[label="0.24;24pkt 24fpkt"];
5047--14908[label="0.01;1pkt 1fpkt"];
5047--15731[label="0.24;24pkt 24fpkt"];
5047--16137[label="0.01;1pkt 1fpkt"];
5215--6332[label="0.0789474;3pkt 3fpkt"];
5215--7010[label="0.0263158;1pkt 1fpkt"];
5215--7233[label="0.0263158;1pkt 1fpkt"];
5215--7388[label="0.0263158;1pkt 1fpkt"];
5215--7459[label="0.0263158;1pkt 1fpkt"];
5215--7744[label="0.184211;7pkt 7fpkt"];
5215--8930[label="0.0263158;1pkt 1fpkt"];
5215--9192[label="0.0263158;1pkt 1fpkt"];
5215--9194[label="0.342105;13pkt 13fpkt"];
5215--9232[label="0.0263158;1pkt 1fpkt"];
5215--9234[label="0.342105;13pkt 13fpkt"];
5215--9266[label="0.0263158;1pkt 1fpkt"];
5215--9268[label="0.342105;13pkt 13fpkt"];
5215--10477[label="0.0555556;1pkt 1fpkt"];
5215--11046[label="0.289474;11pkt 11fpkt"];
5215--11360[label="0.0416667;1pkt 1fpkt"];
5215--12387[label="0.0263158;1pkt 1fpkt"];
5215--13869[label="0.0555556;1pkt 1fpkt"];
5215--14149[label="0.315789;12pkt 12fpkt"];
5215--15602[label="1;1pkt 1fpkt"];
5215--15731[label="0.289474;11pkt 11fpkt"];
5493--7188[label="0.6;3pkt 3fpkt"];
5493--12339[label="1;5pkt 5fpkt"];
5698--5863[label="1;13pkt 13fpkt"];
5698--7744[label="0.0140845;1pkt 1fpkt"];
5698--8007[label="0.140845;10pkt 10fpkt"];
5698--9198[label="0.0140845;1pkt 1fpkt"];
5698--11046[label="0.056338;4pkt 4fpkt"];
5698--11058[label="0.380282;27pkt 27fpkt"];
5698--12961[label="0.028169;2pkt 2fpkt"];
5698--14149[label="0.056338;4pkt 4fpkt"];
5698--14157[label="0.380282;27pkt 27fpkt"];
5698--15123[label="0.028169;2pkt 2fpkt"];
5698--15731[label="0.056338;4pkt 4fpkt"];
6125--8529[label="0.0909091;1pkt 1fpkt"];
6125--9163[label="0.0909091;1pkt 1fpkt"];
6125--9194[label="0.0909091;1pkt 1fpkt"];
6125--9198[label="0.181818;2pkt 2fpkt"];
6125--9234[label="0.0909091;1pkt 1fpkt"];
6125--9268[label="0.0909091;1pkt 1fpkt"];
6627--6685[label="1;19pkt 19fpkt"];
6685--7195[label="0.0740741;2pkt 2fpkt"];
6685--7744[label="0.185185;5pkt 5fpkt"];
6685--11046[label="0.185185;5pkt 5fpkt"];
6685--14149[label="0.185185;5pkt 5fpkt"];
6685--15731[label="0.185185;5pkt 5fpkt"];
7188--7744[label="0.0416667;2pkt 2fpkt"];
7188--7773[label="0.0625;3pkt 3fpkt"];
7188--9163[label="0.0208333;1pkt 1fpkt"];
7188--9194[label="0.0416667;2pkt 2fpkt"];
7188--9198[label="0.0208333;1pkt 1fpkt"];
7188--9234[label="0.0416667;2pkt 2fpkt"];
7188--9268[label="0.0416667;2pkt 2fpkt"];
7188--10544[label="0.166667;1pkt 1fpkt"];
7188--10679[label="1;1pkt 1fpkt"];
7188--11046[label="0.0416667;2pkt 2fpkt"];
7188--12339[label="0.6;3pkt 3fpkt"];
7188--13906[label="0.142857;1pkt 1fpkt"];
7188--14149[label="0.0416667;2pkt 2fpkt"];
7188--15601[label="0.166667;1pkt 1fpkt"];
7188--15731[label="0.0416667;2pkt 2fpkt"];
7281--7744[label="1;9pkt 9fpkt"];
7281--9163[label="0.111111;1pkt 1fpkt"];
7281--11046[label="1;9pkt 9fpkt"];
7281--14149[label="1;9pkt 9fpkt"];
7281--15731[label="1;9pkt 9fpkt"];
7744--7824[label="0.0774194;12pkt 12fpkt"];
7744--8016[label="0.0615385;4pkt 4fpkt"];
7744--8191[label="0.2;6pkt 6fpkt"];
7744--8304[label="0.12;15pkt 15fpkt"];
7744--8334[label="0.578947;11pkt 11fpkt"];
7744--8529[label="0.00862069;2pkt 2fpkt"];
7744--8619[label="0.1;12pkt 12fpkt"];
7744--8934[label="0.00126263;1pkt 1fpkt"];
7744--9090[label="0.12;15pkt 15fpkt"];
7744--9163[label="0.053783;59pkt 59fpkt"];
7744--9194[label="0.0820419;90pkt 90fpkt"];
7744--9234[label="0.0820419;90pkt 90fpkt"];
7744--9268[label="0.0820419;90pkt 90fpkt"];
7744--11046[label="0.999088;1096pkt 1096fpkt"];
7744--14149[label="1;1097pkt 1097fpkt"];
7744--15731[label="0.999088;1096pkt 1096fpkt"];
7773--8032[label="0.0583333;7pkt 7fpkt"];
7773--8143[label="0.0406504;5pkt 5fpkt"];
7773--8352[label="0.0465116;2pkt 2fpkt"];
7773--8907[label="0.0650407;8pkt 8fpkt"];
7773--8934[label="0.227642;28pkt 28fpkt"];
7773--9049[label="0.0406504;5pkt 5fpkt"];
7773--9163[label="0.0650407;8pkt 8fpkt"];
7773--9194[label="0.113821;14pkt 14fpkt"];
7773--9234[label="0.113821;14pkt 14fpkt"];
7773--9268[label="0.113821;14pkt 14fpkt"];
8007--8016[label="0.538462;35pkt 35fpkt"];
8007--9194[label="0.133333;18pkt 18fpkt"];
8007--9234[label="0.133333;18pkt 18fpkt"];
8007--9268[label="0.133333;18pkt 18fpkt"];
8007--11058[label="1;135pkt 135fpkt"];
8007--14157[label="0.992593;134pkt 134fpkt"];
8016--9198[label="0.0307692;2pkt 2fpkt"];
8016--10309[label="0.0833333;1pkt 1fpkt"];
8016--11046[label="0.0769231;5pkt 5fpkt"];
8016--11058[label="0.630769;41pkt 41fpkt"];
8016--13783[label="0.0833333;1pkt 1fpkt"];
8016--14149[label="0.0769231;5pkt 5fpkt"];
8016--14157[label="0.630769;41pkt 41fpkt"];
8016--15731[label="0.0769231;5pkt 5fpkt"];
8191--9194[label="0.0333333;1pkt 1fpkt"];
8191--9234[label="0.0333333;1pkt 1fpkt"];
8191--9268[label="0.0333333;1pkt 1fpkt"];
8191--11046[label="0.233333;7pkt 7fpkt"];
8191--14149[label="0.233333;7pkt 7fpkt"];
8191--15731[label="0.233333;7pkt 7fpkt"];
8334--9163[label="0.0526316;1pkt 1fpkt"];
8334--9194[label="0.0526316;1pkt 1fpkt"];
8334--9234[label="0.0526316;1pkt 1fpkt"];
8334--9268[label="0.0526316;1pkt 1fpkt"];
8334--9545[label="0.75;3pkt 3fpkt"];
8334--11046[label="0.631579;12pkt 12fpkt"];
8334--13380[label="0.75;3pkt 3fpkt"];
8334--14149[label="0.631579;12pkt 12fpkt"];
8334--15731[label="0.631579;12pkt 12fpkt"];
9545--13380[label="1;4pkt 4fpkt"];
10309--13783[label="1;12pkt 12fpkt"];
11046--14149[label="1;1517pkt 1517fpkt"];
11046--15731[label="1;1517pkt 1517fpkt"];
11058--14157[label="1;220pkt 220fpkt"];
14149--15731[label="1;1517pkt 1517fpkt"];
</description>
    <slice>
      <filter src_ip="139.40.98.102" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_476{
style=filled;
color=gray75;
4217[label="142.243.35.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
4218[label="195.173.76.164;s;1pkt 1fpkt", shape=diamond, color=yellow];
7837[label="195.173.76.164;s;1pkt 1fpkt", shape=hexagon, color=black];
8222[label="142.243.35.104;d;1pkt 1fpkt", shape=hexagon, color=black];
stat476[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.173.76.164:40000, 142.243.35.104:49184}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49184: (50%)&lt;BR/&gt; 40000: (50%)&gt;];
}
4217--4218[label="1;1pkt 1fpkt"];
4217--7837[label="1;1pkt 1fpkt"];
4217--8222[label="1;1pkt 1fpkt"];
4218--7837[label="1;1pkt 1fpkt"];
4218--8222[label="1;1pkt 1fpkt"];
7837--8222[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.35.104" dst_port="49184" src_ip="195.173.76.164" src_port="40000"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
2780[label="206.73.121.255;d;1pkt 1fpkt", shape=diamond, color=yellow];
2781[label="142.16.152.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
7844[label="142.16.152.145;s;1pkt 1fpkt", shape=hexagon, color=black];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.152.145:1817, 206.73.121.255:8236}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8236: (50%)&lt;BR/&gt; 1817: (50%)&gt;];
}
2780--2781[label="1;1pkt 1fpkt"];
2780--7844[label="1;1pkt 1fpkt"];
2781--7844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.73.121.255" dst_port="8236" src_ip="142.16.152.145" src_port="1817"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_478{
style=filled;
color=gray75;
2822[label="136.228.73.33;d;10pkt 10fpkt", shape=diamond, color=yellow];
3107[label="213.230.35.52;s;5pkt 5fpkt", shape=diamond, color=yellow];
7870[label="136.228.73.33;d;10pkt 10fpkt", shape=hexagon, color=black];
stat478[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.230.35.52:80, 136.228.73.33:*}[50%]&lt;BR/&gt;{195.173.85.25:80, 136.228.73.33:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46%)&lt;BR/&gt; 50162: (6%)&lt;BR/&gt; 50157: (6%)&lt;BR/&gt; 50156: (6%)&lt;BR/&gt; 50138: (6%)&gt;];
}
2822--3107[label="1;5pkt 5fpkt"];
2822--7870[label="1;10pkt 10fpkt"];
2822--9163[label="0.3;3pkt 3fpkt"];
2822--9748[label="0.2;2pkt 2fpkt"];
3107--7870[label="1;5pkt 5fpkt"];
7870--9163[label="0.3;3pkt 3fpkt"];
7870--9748[label="0.2;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.73.33" src_ip="213.230.35.52" src_port="80"/>
      <filter dst_ip="136.228.73.33" src_ip="195.173.85.25" src_port="80"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.857172,2.02412,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_479{
style=filled;
color=gray75;
4258[label="78.85.58.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
7873[label="78.85.58.232;s;1pkt 1fpkt", shape=hexagon, color=black];
15130[label="78.85.58.232;1pkt 1fpkt", shape=invtriangle, color=brown];
stat479[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.85.58.232:32813, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 32813: (50%)&gt;];
}
4258--7873[label="1;1pkt 1fpkt"];
4258--15130[label="1;1pkt 1fpkt"];
7873--15130[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="78.85.58.232" src_port="32813"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_480{
style=filled;
color=gray75;
4260[label="20.209.220.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
7880[label="20.209.220.121;s;1pkt 1fpkt", shape=hexagon, color=black];
stat480[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.209.220.121:8601, 142.16.131.2:2100}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8601: (50%)&lt;BR/&gt; 2100: (50%)&gt;];
}
4260--7880[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.131.2" dst_port="2100" src_ip="20.209.220.121" src_port="8601"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_481{
style=filled;
color=gray75;
1364[label="140.99.97.33;s;7pkt 7fpkt", shape=diamond, color=yellow];
5691[label="162.73.218.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
6599[label="140.99.97.33;s;7pkt 7fpkt", shape=hexagon, color=black];
9864[label="140.99.97.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13542[label="140.99.97.33;2pkt 2fpkt", shape=invtriangle, color=brown];
15424[label="140.99.97.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat481[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.99.97.33:210, 213.42.166.8:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (50%)&lt;BR/&gt; 55018: (15.7895%)&lt;BR/&gt; 49734: (7.89474%)&lt;BR/&gt; 41752: (5.26316%)&lt;BR/&gt; 18504: (5.26316%)&gt;];
}
1364--3297[label="0.25;1pkt 1fpkt"];
1364--4704[label="0.25;1pkt 1fpkt"];
1364--4723[label="0.142857;1pkt 1fpkt"];
1364--5691[label="1;1pkt 1fpkt"];
1364--6599[label="1;7pkt 7fpkt"];
1364--7888[label="0.142857;1pkt 1fpkt"];
1364--8860[label="1;4pkt 4fpkt"];
1364--9864[label="1;1pkt 1fpkt"];
1364--13542[label="1;2pkt 2fpkt"];
1364--15424[label="1;1pkt 1fpkt"];
5691--6599[label="1;1pkt 1fpkt"];
5691--9864[label="1;1pkt 1fpkt"];
5691--13542[label="1;1pkt 1fpkt"];
5691--15424[label="1;1pkt 1fpkt"];
6599--7888[label="0.142857;1pkt 1fpkt"];
6599--8860[label="1;4pkt 4fpkt"];
6599--9864[label="1;1pkt 1fpkt"];
6599--13542[label="1;2pkt 2fpkt"];
6599--15424[label="1;1pkt 1fpkt"];
9864--13542[label="1;1pkt 1fpkt"];
9864--15424[label="1;1pkt 1fpkt"];
13542--15424[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.8" src_ip="140.99.97.33" src_port="210"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_483{
style=filled;
color=gray75;
3820[label="202.109.113.170;s;1pkt 1fpkt", shape=diamond, color=yellow];
7900[label="202.109.113.170;s;1pkt 1fpkt", shape=hexagon, color=black];
stat483[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.109.113.170:8768, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8768: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
3820--7900[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="202.109.113.170" src_port="8768"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_484{
style=filled;
color=gray75;
4739[label="142.243.244.73;d;135pkt 135fpkt", shape=diamond, color=yellow];
7904[label="142.243.244.73;d;127pkt 127fpkt", shape=hexagon, color=black];
9086[label="142.243.244.73;d;127pkt 127fpkt", shape=polygon, color=gold];
stat484[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.243.244.73:17738}[99.2593%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17738: (49.6144%)&lt;BR/&gt; 65176: (0.385604%)&lt;BR/&gt; 64433: (0.385604%)&lt;BR/&gt; 63303: (0.385604%)&lt;BR/&gt; 63010: (0.385604%)&gt;];
}
4739--7904[label="1;127pkt 127fpkt"];
4739--9086[label="1;127pkt 127fpkt"];
4739--12489[label="0.00740741;1pkt 1fpkt"];
4739--14883[label="0.00740741;1pkt 1fpkt"];
4739--16125[label="0.00740741;1pkt 1fpkt"];
7904--9086[label="1;127pkt 127fpkt"];
7904--12489[label="0.00787402;1pkt 1fpkt"];
7904--14883[label="0.00787402;1pkt 1fpkt"];
7904--16125[label="0.00787402;1pkt 1fpkt"];
9086--12489[label="0.00787402;1pkt 1fpkt"];
9086--14883[label="0.00787402;1pkt 1fpkt"];
9086--16125[label="0.00787402;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.244.73" dst_port="17738"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_485{
style=filled;
color=gray75;
3826[label="136.228.188.99;d;16pkt 16fpkt", shape=diamond, color=yellow];
4132[label="213.48.9.250;s;16pkt 16fpkt", shape=diamond, color=yellow];
7905[label="136.228.188.99;d;16pkt 16fpkt", shape=hexagon, color=black];
8062[label="213.48.9.250;s;16pkt 16fpkt", shape=hexagon, color=black];
stat485[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.9.250:80, 136.228.188.99:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2288: (3.125%)&lt;BR/&gt; 2286: (3.125%)&lt;BR/&gt; 2282: (3.125%)&lt;BR/&gt; 2280: (3.125%)&gt;];
}
3826--4132[label="1;16pkt 16fpkt"];
3826--7905[label="1;16pkt 16fpkt"];
3826--8062[label="1;16pkt 16fpkt"];
3826--9198[label="0.25;4pkt 4fpkt"];
4132--7905[label="1;16pkt 16fpkt"];
4132--8062[label="1;16pkt 16fpkt"];
4132--9198[label="0.25;4pkt 4fpkt"];
7905--8062[label="1;16pkt 16fpkt"];
7905--9198[label="0.25;4pkt 4fpkt"];
8062--9198[label="0.25;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.188.99" src_ip="213.48.9.250" src_port="80"/>
    </slice>
    <from sec="1223615547" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_487{
style=filled;
color=gray75;
2859[label="136.228.176.198;d;193pkt 193fpkt", shape=diamond, color=yellow];
7910[label="136.228.176.198;d;192pkt 192fpkt", shape=hexagon, color=black];
stat487[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.237.134.33:80, 136.228.176.198:*}[98.9637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7403%)&lt;BR/&gt; 53913: (0.25974%)&lt;BR/&gt; 53911: (0.25974%)&lt;BR/&gt; 53909: (0.25974%)&lt;BR/&gt; 53907: (0.25974%)&gt;];
}
2859--7910[label="1;192pkt 192fpkt"];
2859--9163[label="0.00518135;1pkt 1fpkt"];
7910--9163[label="0.00520833;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.176.198" src_ip="220.237.134.33" src_port="80"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_488{
style=filled;
color=gray75;
4298[label="212.21.128.81;d;188pkt 188fpkt", shape=diamond, color=yellow];
7916[label="212.21.128.81;d;187pkt 187fpkt", shape=hexagon, color=black];
stat488[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.156.250.193:*, 212.21.128.81:139}[96.2766%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (48.2667%)&lt;BR/&gt; 0: (0.533333%)&lt;BR/&gt; 9988: (0.266667%)&lt;BR/&gt; 8080: (0.266667%)&lt;BR/&gt; 6000: (0.266667%)&gt;];
}
4298--7010[label="0.00531915;1pkt 1fpkt"];
4298--7388[label="0.00531915;1pkt 1fpkt"];
4298--7835[label="0.00531915;1pkt 1fpkt"];
4298--7916[label="1;187pkt 187fpkt"];
4298--8930[label="0.00531915;1pkt 1fpkt"];
4298--9192[label="0.00531915;1pkt 1fpkt"];
4298--9232[label="0.00531915;1pkt 1fpkt"];
4298--9266[label="0.00531915;1pkt 1fpkt"];
4298--12387[label="0.00531915;1pkt 1fpkt"];
7916--8930[label="0.00534759;1pkt 1fpkt"];
7916--9192[label="0.00534759;1pkt 1fpkt"];
7916--9232[label="0.00534759;1pkt 1fpkt"];
7916--9266[label="0.00534759;1pkt 1fpkt"];
7916--12387[label="0.00534759;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.128.81" dst_port="139" src_ip="54.156.250.193"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615482" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_489{
style=filled;
color=gray75;
3360[label="71.226.57.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
7921[label="71.226.57.5;s;1pkt 1fpkt", shape=hexagon, color=black];
stat489[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.226.57.5:38243, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38243: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
3360--7921[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="71.226.57.5" src_port="38243"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_490{
style=filled;
color=gray75;
3811[label="136.228.110.173;s;177pkt 177fpkt", shape=diamond, color=yellow];
7925[label="40.10.141.40;d;36pkt 36fpkt", shape=hexagon, color=black];
stat490[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.110.173:*, *:80}[55.5024%]&lt;BR/&gt;{136.228.110.173:0, *:0}[25.3589%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.23%)&lt;BR/&gt; 0: (24.8826%)&lt;BR/&gt; 993: (6.57277%)&lt;BR/&gt; 143: (2.58216%)&lt;BR/&gt; 60473: (0.469484%)&gt;];
}
3811--5060[label="0.025641;2pkt 2fpkt"];
3811--5160[label="0.0675676;5pkt 5fpkt"];
3811--5208[label="0.0340909;3pkt 3fpkt"];
3811--6074[label="0.00564972;1pkt 1fpkt"];
3811--6270[label="0.00564972;1pkt 1fpkt"];
3811--7743[label="0.0677966;12pkt 12fpkt"];
3811--7850[label="0.158192;28pkt 28fpkt"];
3811--7890[label="0.992481;132pkt 132fpkt"];
3811--7925[label="0.111111;4pkt 4fpkt"];
3811--8225[label="0.00564972;1pkt 1fpkt"];
7925--8289[label="0.0833333;3pkt 3fpkt"];
7925--8562[label="0.111111;4pkt 4fpkt"];
7925--9315[label="0.277778;10pkt 10fpkt"];
7925--10415[label="0.0833333;2pkt 2fpkt"];
7925--11081[label="0.0555556;2pkt 2fpkt"];
7925--11853[label="0.0833333;3pkt 3fpkt"];
7925--13263[label="0.277778;10pkt 10fpkt"];
7925--14170[label="0.0555556;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.228.110.173"/>
      <filter src_ip="136.228.110.173"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_491{
style=filled;
color=gray75;
4767[label="164.25.208.111;d;39pkt 39fpkt", shape=diamond, color=yellow];
4931[label="99.105.147.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
7935[label="164.25.208.111;d;27pkt 27fpkt", shape=hexagon, color=black];
12588[label="99.105.147.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat491[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.184.56.96:*, 164.25.208.111:80}[51.2821%]&lt;BR/&gt;{*:*, 164.25.208.111:25}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (26.4706%)&lt;BR/&gt; 80: (22.0588%)&lt;BR/&gt; 13198: (2.94118%)&lt;BR/&gt; 65363: (1.47059%)&lt;BR/&gt; 65189: (1.47059%)&gt;];
}
4767--4931[label="1;1pkt 1fpkt"];
4767--7935[label="1;27pkt 27fpkt"];
4767--9177[label="0.025641;1pkt 1fpkt"];
4767--9217[label="0.025641;1pkt 1fpkt"];
4767--9251[label="0.025641;1pkt 1fpkt"];
4767--9704[label="0.2;1pkt 1fpkt"];
4767--12588[label="1;1pkt 1fpkt"];
4931--7935[label="1;1pkt 1fpkt"];
4931--12588[label="1;1pkt 1fpkt"];
7935--9177[label="0.037037;1pkt 1fpkt"];
7935--9217[label="0.037037;1pkt 1fpkt"];
7935--9251[label="0.037037;1pkt 1fpkt"];
7935--9704[label="0.2;1pkt 1fpkt"];
7935--12588[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.208.111" dst_port="25"/>
      <filter dst_ip="164.25.208.111" dst_port="80" src_ip="128.184.56.96"/>
    </slice>
    <from sec="1223614811" usec="0"/>
    <to sec="1223615619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_492{
style=filled;
color=gray75;
2319[label="213.33.145.22;s;192pkt 192fpkt", shape=diamond, color=yellow];
3402[label="204.208.202.249;d;25pkt 25fpkt", shape=diamond, color=yellow];
3442[label="212.84.26.96;d;19pkt 19fpkt", shape=diamond, color=yellow];
4345[label="68.160.75.66;d;104pkt 104fpkt", shape=diamond, color=yellow];
7953[label="213.33.145.22;s;166pkt 166fpkt", shape=hexagon, color=black];
9695[label="213.33.145.22;217pkt 217fpkt", shape=pentagon, color=darkviolet];
13457[label="213.33.145.22;217pkt 217fpkt", shape=invtriangle, color=brown];
stat492[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.145.22:*, 68.160.75.66:80}[48.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4580: (0.265957%)&lt;BR/&gt; 4578: (0.265957%)&lt;BR/&gt; 4576: (0.265957%)&lt;BR/&gt; 4574: (0.265957%)&gt;];
}
2319--3402[label="1;25pkt 25fpkt"];
2319--3442[label="1;19pkt 19fpkt"];
2319--4345[label="0.932692;97pkt 97fpkt"];
2319--7589[label="0.972603;71pkt 71fpkt"];
2319--7953[label="1;166pkt 166fpkt"];
2319--9695[label="0.994792;191pkt 191fpkt"];
2319--13457[label="0.994792;191pkt 191fpkt"];
3402--7953[label="0.88;22pkt 22fpkt"];
3402--9695[label="1;25pkt 25fpkt"];
3402--13457[label="1;25pkt 25fpkt"];
3442--7953[label="1;19pkt 19fpkt"];
3442--9695[label="1;19pkt 19fpkt"];
3442--13457[label="1;19pkt 19fpkt"];
4345--5937[label="0.00961538;1pkt 1fpkt"];
4345--7140[label="0.00961538;1pkt 1fpkt"];
4345--7589[label="1;73pkt 73fpkt"];
4345--7953[label="0.807692;84pkt 84fpkt"];
4345--9695[label="0.932692;97pkt 97fpkt"];
4345--10354[label="0.00961538;1pkt 1fpkt"];
4345--11914[label="0.00961538;1pkt 1fpkt"];
4345--13457[label="0.932692;97pkt 97fpkt"];
4345--13807[label="0.00961538;1pkt 1fpkt"];
4345--14593[label="0.00961538;1pkt 1fpkt"];
4345--15960[label="0.00961538;1pkt 1fpkt"];
7953--9695[label="0.993976;165pkt 165fpkt"];
7953--13457[label="0.993976;165pkt 165fpkt"];
9695--13457[label="1;217pkt 217fpkt"];
</description>
    <slice>
      <filter dst_ip="68.160.75.66" dst_port="80" src_ip="213.33.145.22"/>
    </slice>
    <from sec="1223614822" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,501,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_493{
style=filled;
color=gray75;
3417[label="164.25.79.58;d;18pkt 18fpkt", shape=diamond, color=yellow];
3901[label="107.100.242.155;s;14pkt 14fpkt", shape=diamond, color=yellow];
7966[label="107.100.242.155;s;14pkt 14fpkt", shape=hexagon, color=black];
11885[label="107.100.242.155;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat493[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.100.242.155:*, 164.25.79.58:21}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (24.4681%)&lt;BR/&gt; 65246: (3.19149%)&lt;BR/&gt; 64609: (3.19149%)&lt;BR/&gt; 62338: (3.19149%)&lt;BR/&gt; 61580: (3.19149%)&gt;];
}
3417--3901[label="1;14pkt 14fpkt"];
3417--7966[label="1;14pkt 14fpkt"];
3417--11885[label="1;1pkt 1fpkt"];
3901--7966[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.79.58" dst_port="21" src_ip="107.100.242.155"/>
    </slice>
    <from sec="1223614839" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_494{
style=filled;
color=gray75;
2318[label="213.33.145.22;d;191pkt 191fpkt", shape=diamond, color=yellow];
2910[label="204.208.202.249;s;25pkt 25fpkt", shape=diamond, color=yellow];
2972[label="212.84.26.96;s;19pkt 19fpkt", shape=diamond, color=yellow];
6399[label="213.33.145.22;d;191pkt 191fpkt", shape=hexagon, color=black];
7311[label="212.84.26.96;s;19pkt 19fpkt", shape=hexagon, color=black];
11700[label="72.19.177.144;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14481[label="72.19.177.144;8pkt 8fpkt", shape=invtriangle, color=brown];
stat494[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.160.75.66:80, 213.33.145.22:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4610: (0.433839%)&lt;BR/&gt; 4560: (0.433839%)&lt;BR/&gt; 4504: (0.433839%)&lt;BR/&gt; 4460: (0.433839%)&gt;];
}
2318--2910[label="1;25pkt 25fpkt"];
2318--2972[label="1;19pkt 19fpkt"];
2318--4346[label="0.932039;96pkt 96fpkt"];
2318--6399[label="1;191pkt 191fpkt"];
2318--7311[label="1;19pkt 19fpkt"];
2318--7971[label="0.942529;82pkt 82fpkt"];
2318--9163[label="0.026178;5pkt 5fpkt"];
2318--9194[label="0.0209424;4pkt 4fpkt"];
2318--9234[label="0.0209424;4pkt 4fpkt"];
2318--9268[label="0.0209424;4pkt 4fpkt"];
2318--11700[label="0.875;7pkt 7fpkt"];
2318--14481[label="0.875;7pkt 7fpkt"];
2910--6399[label="1;25pkt 25fpkt"];
2910--9163[label="0.08;2pkt 2fpkt"];
2910--9194[label="0.12;3pkt 3fpkt"];
2910--9234[label="0.12;3pkt 3fpkt"];
2910--9268[label="0.12;3pkt 3fpkt"];
2972--6399[label="1;19pkt 19fpkt"];
2972--7311[label="1;19pkt 19fpkt"];
6399--7311[label="1;19pkt 19fpkt"];
6399--7971[label="0.942529;82pkt 82fpkt"];
6399--9163[label="0.026178;5pkt 5fpkt"];
6399--9194[label="0.0209424;4pkt 4fpkt"];
6399--9234[label="0.0209424;4pkt 4fpkt"];
6399--9268[label="0.0209424;4pkt 4fpkt"];
6399--11700[label="0.875;7pkt 7fpkt"];
6399--14481[label="0.875;7pkt 7fpkt"];
11700--14481[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.145.22" src_ip="68.160.75.66" src_port="80"/>
    </slice>
    <from sec="1223614822" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_495{
style=filled;
color=gray75;
2154[label="136.228.115.221;d;324pkt 324fpkt", shape=diamond, color=yellow];
3931[label="73.163.0.16;s;28pkt 28fpkt", shape=diamond, color=yellow];
4369[label="203.170.228.4;s;100pkt 100fpkt", shape=diamond, color=yellow];
6911[label="136.228.115.221;d;324pkt 324fpkt", shape=hexagon, color=black];
7609[label="73.163.0.16;s;21pkt 21fpkt", shape=hexagon, color=black];
7990[label="203.170.228.4;s;95pkt 95fpkt", shape=hexagon, color=black];
9382[label="203.170.228.4;99pkt 99fpkt", shape=pentagon, color=darkviolet];
10772[label="203.170.228.84;33pkt 33fpkt", shape=pentagon, color=darkviolet];
stat495[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.170.228.4:80, 136.228.115.221:*}[30.8642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3321: (0.244141%)&lt;BR/&gt; 3301: (0.244141%)&lt;BR/&gt; 3299: (0.244141%)&lt;BR/&gt; 3297: (0.244141%)&gt;];
}
2154--3931[label="1;28pkt 28fpkt"];
2154--4369[label="1;100pkt 100fpkt"];
2154--6911[label="1;324pkt 324fpkt"];
2154--7609[label="1;21pkt 21fpkt"];
2154--7990[label="1;95pkt 95fpkt"];
2154--9194[label="0.212963;69pkt 69fpkt"];
2154--9198[label="0.0246914;8pkt 8fpkt"];
2154--9234[label="0.212963;69pkt 69fpkt"];
2154--9268[label="0.212963;69pkt 69fpkt"];
2154--9382[label="1;99pkt 99fpkt"];
2154--10772[label="1;33pkt 33fpkt"];
2154--12490[label="1;3pkt 3fpkt"];
3931--6911[label="1;28pkt 28fpkt"];
3931--7609[label="1;21pkt 21fpkt"];
3931--9194[label="0.142857;4pkt 4fpkt"];
3931--9198[label="0.0357143;1pkt 1fpkt"];
3931--9234[label="0.142857;4pkt 4fpkt"];
3931--9268[label="0.142857;4pkt 4fpkt"];
4369--6911[label="1;100pkt 100fpkt"];
4369--7990[label="1;95pkt 95fpkt"];
4369--9194[label="0.15;15pkt 15fpkt"];
4369--9234[label="0.15;15pkt 15fpkt"];
4369--9268[label="0.15;15pkt 15fpkt"];
4369--9382[label="1;99pkt 99fpkt"];
6911--7609[label="1;21pkt 21fpkt"];
6911--7990[label="1;95pkt 95fpkt"];
6911--9194[label="0.212963;69pkt 69fpkt"];
6911--9198[label="0.0246914;8pkt 8fpkt"];
6911--9234[label="0.212963;69pkt 69fpkt"];
6911--9268[label="0.212963;69pkt 69fpkt"];
6911--9382[label="1;99pkt 99fpkt"];
6911--10772[label="1;33pkt 33fpkt"];
6911--12490[label="1;3pkt 3fpkt"];
7609--9194[label="0.190476;4pkt 4fpkt"];
7609--9234[label="0.190476;4pkt 4fpkt"];
7609--9268[label="0.190476;4pkt 4fpkt"];
7990--9194[label="0.157895;15pkt 15fpkt"];
7990--9234[label="0.157895;15pkt 15fpkt"];
7990--9268[label="0.157895;15pkt 15fpkt"];
7990--9382[label="0.989474;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.115.221" src_ip="203.170.228.4" src_port="80"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_496{
style=filled;
color=gray75;
3943[label="124.237.162.143;d;21pkt 21fpkt", shape=diamond, color=yellow];
7997[label="124.237.162.143;d;21pkt 21fpkt", shape=hexagon, color=black];
stat496[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.5.42:*, 124.237.162.143:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3382: (2.38095%)&lt;BR/&gt; 3354: (2.38095%)&lt;BR/&gt; 3353: (2.38095%)&lt;BR/&gt; 3320: (2.38095%)&gt;];
}
3943--7997[label="1;21pkt 21fpkt"];
3943--10035[label="1;21pkt 21fpkt"];
7997--10035[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="124.237.162.143" dst_port="80" src_ip="136.228.5.42"/>
    </slice>
    <from sec="1223614994" usec="0"/>
    <to sec="1223615544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_497{
style=filled;
color=gray75;
3498[label="136.228.104.207;d;1pkt 1fpkt", shape=diamond, color=yellow];
3597[label="104.243.242.179;s;1pkt 1fpkt", shape=diamond, color=yellow];
8004[label="136.228.104.207;d;1pkt 1fpkt", shape=hexagon, color=black];
stat497[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.242.179:80, 136.228.104.207:2356}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2356: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3498--3597[label="1;1pkt 1fpkt"];
3498--8004[label="1;1pkt 1fpkt"];
3597--8004[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.207" dst_port="2356" src_ip="104.243.242.179" src_port="80"/>
    </slice>
    <from sec="1223615029" usec="0"/>
    <to sec="1223615605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_498{
style=filled;
color=gray75;
622[label="213.33.140.245;d;3011pkt 3011fpkt", shape=diamond, color=yellow];
3576[label="162.73.57.171;d;1pkt 1fpkt", shape=diamond, color=yellow];
3962[label="96.16.247.186;s;17pkt 17fpkt", shape=diamond, color=yellow];
7095[label="213.33.140.245;d;2180pkt 2180fpkt", shape=hexagon, color=black];
8006[label="96.16.247.186;s;11pkt 11fpkt", shape=hexagon, color=black];
11891[label="205.148.97.156;22pkt 22fpkt", shape=pentagon, color=darkviolet];
12343[label="96.16.247.186;18pkt 18fpkt", shape=pentagon, color=darkviolet];
14579[label="205.148.97.156;22pkt 22fpkt", shape=invtriangle, color=brown];
14807[label="96.16.247.186;19pkt 19fpkt", shape=invtriangle, color=brown];
stat498[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.33.140.245:7596}[96.8637%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 7596: (47.7268%)&lt;BR/&gt; 80: (1.53745%)&lt;BR/&gt; 0: (1.52801%)&lt;BR/&gt; 16001: (0.764007%)&lt;BR/&gt; 6881: (0.499906%)&gt;];
}
622--3962[label="0.0588235;1pkt 1fpkt"];
622--7095[label="1;2180pkt 2180fpkt"];
622--8006[label="0.0909091;1pkt 1fpkt"];
622--9198[label="0.000332116;1pkt 1fpkt"];
622--11891[label="1;22pkt 22fpkt"];
622--12343[label="0.0555556;1pkt 1fpkt"];
622--14579[label="1;22pkt 22fpkt"];
622--14807[label="0.0526316;1pkt 1fpkt"];
3576--3962[label="1;1pkt 1fpkt"];
3576--8006[label="1;1pkt 1fpkt"];
3576--12343[label="1;1pkt 1fpkt"];
3576--14807[label="1;1pkt 1fpkt"];
3962--7095[label="0.0588235;1pkt 1fpkt"];
3962--8006[label="1;11pkt 11fpkt"];
3962--9194[label="0.0588235;1pkt 1fpkt"];
3962--9198[label="0.117647;2pkt 2fpkt"];
3962--9234[label="0.0588235;1pkt 1fpkt"];
3962--9268[label="0.0588235;1pkt 1fpkt"];
3962--12343[label="0.941176;16pkt 16fpkt"];
3962--14807[label="1;17pkt 17fpkt"];
7095--8006[label="0.0909091;1pkt 1fpkt"];
7095--11891[label="1;22pkt 22fpkt"];
7095--12343[label="0.0555556;1pkt 1fpkt"];
7095--14579[label="1;22pkt 22fpkt"];
7095--14807[label="0.0526316;1pkt 1fpkt"];
8006--9194[label="0.0909091;1pkt 1fpkt"];
8006--9234[label="0.0909091;1pkt 1fpkt"];
8006--9268[label="0.0909091;1pkt 1fpkt"];
8006--12343[label="0.909091;10pkt 10fpkt"];
8006--14807[label="1;11pkt 11fpkt"];
11891--14579[label="1;22pkt 22fpkt"];
12343--14807[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.140.245" dst_port="7596"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_499{
style=filled;
color=gray75;
4827[label="107.100.253.5;d;13pkt 13fpkt", shape=diamond, color=yellow];
5652[label="153.109.20.143;s;12pkt 12fpkt", shape=diamond, color=yellow];
8008[label="107.100.253.5;d;10pkt 10fpkt", shape=hexagon, color=black];
8697[label="153.109.20.143;s;12pkt 12fpkt", shape=hexagon, color=black];
11670[label="153.109.20.143;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14463[label="153.109.20.143;16pkt 16fpkt", shape=invtriangle, color=brown];
stat499[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.20.143:80, 107.100.253.5:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63938: (3.79747%)&lt;BR/&gt; 62068: (3.79747%)&lt;BR/&gt; 55574: (3.79747%)&lt;BR/&gt; 49789: (3.79747%)&gt;];
}
4827--5652[label="1;12pkt 12fpkt"];
4827--8008[label="1;10pkt 10fpkt"];
4827--8697[label="1;12pkt 12fpkt"];
4827--9194[label="0.153846;2pkt 2fpkt"];
4827--9198[label="0.230769;3pkt 3fpkt"];
4827--9234[label="0.153846;2pkt 2fpkt"];
4827--9268[label="0.153846;2pkt 2fpkt"];
4827--11670[label="0.923077;12pkt 12fpkt"];
4827--13056[label="0.0769231;1pkt 1fpkt"];
4827--14463[label="0.923077;12pkt 12fpkt"];
5652--8008[label="0.9;9pkt 9fpkt"];
5652--8697[label="1;12pkt 12fpkt"];
5652--9194[label="0.166667;2pkt 2fpkt"];
5652--9198[label="0.25;3pkt 3fpkt"];
5652--9234[label="0.166667;2pkt 2fpkt"];
5652--9268[label="0.166667;2pkt 2fpkt"];
5652--11670[label="1;12pkt 12fpkt"];
5652--14463[label="1;12pkt 12fpkt"];
8008--8697[label="0.9;9pkt 9fpkt"];
8008--9194[label="0.2;2pkt 2fpkt"];
8008--9234[label="0.2;2pkt 2fpkt"];
8008--9268[label="0.2;2pkt 2fpkt"];
8008--11670[label="0.9;9pkt 9fpkt"];
8008--13056[label="0.1;1pkt 1fpkt"];
8008--14463[label="0.9;9pkt 9fpkt"];
8697--9194[label="0.166667;2pkt 2fpkt"];
8697--9198[label="0.25;3pkt 3fpkt"];
8697--9234[label="0.166667;2pkt 2fpkt"];
8697--9268[label="0.166667;2pkt 2fpkt"];
8697--11670[label="1;12pkt 12fpkt"];
8697--14463[label="1;12pkt 12fpkt"];
11670--14463[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.253.5" src_ip="153.109.20.143" src_port="80"/>
    </slice>
    <from sec="1223615041" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_500{
style=filled;
color=gray75;
4384[label="71.4.41.188;s;3pkt 3fpkt", shape=diamond, color=yellow];
8011[label="71.4.41.188;s;3pkt 3fpkt", shape=hexagon, color=black];
12362[label="71.4.41.188;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14818[label="71.4.41.188;2pkt 2fpkt", shape=invtriangle, color=brown];
stat500[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.4.41.188:2525, 212.21.138.195:8080}[33.3333%]&lt;BR/&gt;{71.4.41.188:2526, 212.21.138.195:8080}[33.3333%]&lt;BR/&gt;{71.4.41.188:2537, 212.21.138.195:8080}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 2537: (18.1818%)&lt;BR/&gt; 2526: (18.1818%)&lt;BR/&gt; 2525: (13.6364%)&gt;];
}
4384--8011[label="1;3pkt 3fpkt"];
4384--8514[label="1;3pkt 3fpkt"];
4384--12362[label="1;3pkt 3fpkt"];
4384--14818[label="1;2pkt 2fpkt"];
8011--8514[label="1;3pkt 3fpkt"];
8011--12362[label="1;3pkt 3fpkt"];
8011--14818[label="1;2pkt 2fpkt"];
12362--14818[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" dst_port="8080" src_ip="71.4.41.188" src_port="2537"/>
      <filter dst_ip="212.21.138.195" dst_port="8080" src_ip="71.4.41.188" src_port="2526"/>
      <filter dst_ip="212.21.138.195" dst_port="8080" src_ip="71.4.41.188" src_port="2525"/>
    </slice>
    <from sec="1223615059" usec="0"/>
    <to sec="1223615434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_501{
style=filled;
color=gray75;
3987[label="136.228.44.194;d;19pkt 19fpkt", shape=diamond, color=yellow];
4056[label="212.138.109.240;s;17pkt 17fpkt", shape=diamond, color=yellow];
7659[label="212.138.109.240;s;17pkt 17fpkt", shape=hexagon, color=black];
8017[label="136.228.44.194;d;19pkt 19fpkt", shape=hexagon, color=black];
stat501[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.240:80, 136.228.44.194:*}[89.4737%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51304: (2.77778%)&lt;BR/&gt; 51303: (2.77778%)&lt;BR/&gt; 51302: (2.77778%)&lt;BR/&gt; 51301: (2.77778%)&gt;];
}
3987--4056[label="1;17pkt 17fpkt"];
3987--7659[label="1;17pkt 17fpkt"];
3987--8017[label="1;19pkt 19fpkt"];
4056--7659[label="1;17pkt 17fpkt"];
4056--8017[label="1;17pkt 17fpkt"];
7659--8017[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.194" src_ip="212.138.109.240" src_port="80"/>
    </slice>
    <from sec="1223615091" usec="0"/>
    <to sec="1223615332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_502{
style=filled;
color=gray75;
4412[label="69.236.54.15;s;1pkt 1fpkt", shape=diamond, color=yellow];
8034[label="69.236.54.15;s;1pkt 1fpkt", shape=hexagon, color=black];
stat502[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.236.54.15:37994, 136.228.44.214:60786}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60786: (50%)&lt;BR/&gt; 37994: (50%)&gt;];
}
4412--8034[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.214" dst_port="60786" src_ip="69.236.54.15" src_port="37994"/>
    </slice>
    <from sec="1223615142" usec="0"/>
    <to sec="1223615619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.670358,2.09816,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="200.253.145.131"/>
      <from sec="1223615180" usec="0"/>
      <to sec="1223615429" usec="0"/>
    </slice>
    <from sec="1223615180" usec="0"/>
    <to sec="1223615429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
3936[label="136.228.154.135;d;10pkt 10fpkt", shape=diamond, color=yellow];
4444[label="8.178.203.150;s;4pkt 4fpkt", shape=diamond, color=yellow];
8050[label="8.178.203.150;s;4pkt 4fpkt", shape=hexagon, color=black];
11798[label="8.178.203.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.48.103.218:80, 136.228.154.135:*}[33.3333%]&lt;BR/&gt;{8.178.203.150:80, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1901: (9.09091%)&lt;BR/&gt; 1869: (9.09091%)&lt;BR/&gt; 33986: (6.81818%)&lt;BR/&gt; 33958: (6.81818%)&gt;];
}
3936--4444[label="0.5;2pkt 2fpkt"];
3936--8050[label="0.5;2pkt 2fpkt"];
3936--9194[label="0.4;4pkt 4fpkt"];
3936--9234[label="0.4;4pkt 4fpkt"];
3936--9268[label="0.4;4pkt 4fpkt"];
3936--11798[label="0.5;2pkt 2fpkt"];
4444--8050[label="1;4pkt 4fpkt"];
4444--11798[label="1;4pkt 4fpkt"];
8050--11798[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="8.178.203.150" src_port="80"/>
      <filter dst_ip="136.228.154.135" src_ip="192.48.103.218" src_port="80"/>
    </slice>
    <from sec="1223614924" usec="0"/>
    <to sec="1223615343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_505{
style=filled;
color=gray75;
4142[label="192.84.39.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
4488[label="136.228.213.172;s;9pkt 9fpkt", shape=diamond, color=yellow];
8066[label="136.228.213.172;s;9pkt 9fpkt", shape=hexagon, color=black];
8067[label="192.84.39.2;d;1pkt 1fpkt", shape=hexagon, color=black];
12147[label="136.228.213.172;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14708[label="136.228.213.172;13pkt 13fpkt", shape=invtriangle, color=brown];
16022[label="136.228.213.172;14pkt 14fpkt", shape=invhouse, color=bisque];
stat505[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.213.172:*, 192.84.37.184:80}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1956: (4.16667%)&lt;BR/&gt; 1955: (4.16667%)&lt;BR/&gt; 1954: (4.16667%)&lt;BR/&gt; 1953: (4.16667%)&gt;];
}
4142--4488[label="1;1pkt 1fpkt"];
4142--8066[label="1;1pkt 1fpkt"];
4142--8067[label="1;1pkt 1fpkt"];
4142--16022[label="1;1pkt 1fpkt"];
4488--8066[label="1;9pkt 9fpkt"];
4488--8067[label="1;1pkt 1fpkt"];
4488--12147[label="0.888889;8pkt 8fpkt"];
4488--14708[label="0.888889;8pkt 8fpkt"];
4488--16022[label="1;9pkt 9fpkt"];
8066--8067[label="1;1pkt 1fpkt"];
8066--12147[label="0.888889;8pkt 8fpkt"];
8066--14708[label="0.888889;8pkt 8fpkt"];
8066--16022[label="1;9pkt 9fpkt"];
8067--16022[label="1;1pkt 1fpkt"];
12147--14708[label="1;13pkt 13fpkt"];
12147--16022[label="1;13pkt 13fpkt"];
14708--16022[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="192.84.37.184" dst_port="80" src_ip="136.228.213.172"/>
    </slice>
    <from sec="1223614824" usec="0"/>
    <to sec="1223615581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_506{
style=filled;
color=gray75;
642[label="162.73.46.178;s;1274pkt 1274fpkt", shape=diamond, color=yellow];
1443[label="202.160.52.114;d;24pkt 24fpkt", shape=diamond, color=yellow];
1662[label="205.130.137.230;d;7pkt 7fpkt", shape=diamond, color=yellow];
1699[label="78.9.23.161;d;39pkt 39fpkt", shape=diamond, color=yellow];
1757[label="166.91.6.20;d;2pkt 2fpkt", shape=diamond, color=yellow];
2109[label="137.87.97.92;s;117pkt 117fpkt", shape=diamond, color=yellow];
2558[label="213.6.217.72;d;8pkt 8fpkt", shape=diamond, color=yellow];
3117[label="205.140.22.152;d;16pkt 16fpkt", shape=diamond, color=yellow];
3612[label="216.133.8.187;d;55pkt 55fpkt", shape=diamond, color=yellow];
4399[label="213.55.55.33;d;10pkt 10fpkt", shape=diamond, color=yellow];
4568[label="18.137.32.104;d;15pkt 15fpkt", shape=diamond, color=yellow];
5431[label="213.59.90.109;d;13pkt 13fpkt", shape=diamond, color=yellow];
5739[label="204.105.124.45;d;12pkt 12fpkt", shape=diamond, color=yellow];
6094[label="202.160.52.114;d;24pkt 24fpkt", shape=hexagon, color=black];
6153[label="78.9.23.161;d;39pkt 39fpkt", shape=hexagon, color=black];
6181[label="162.73.46.178;s;1128pkt 1128fpkt", shape=hexagon, color=black];
6328[label="137.87.97.92;s;36pkt 36fpkt", shape=hexagon, color=black];
6410[label="205.130.137.230;d;7pkt 7fpkt", shape=hexagon, color=black];
6592[label="193.52.217.36;d;68pkt 68fpkt", shape=hexagon, color=black];
7700[label="18.137.32.104;d;15pkt 15fpkt", shape=hexagon, color=black];
8020[label="213.55.55.33;d;10pkt 10fpkt", shape=hexagon, color=black];
8384[label="216.133.8.187;d;55pkt 55fpkt", shape=hexagon, color=black];
12228[label="162.73.46.178;1510pkt 1510fpkt", shape=pentagon, color=darkviolet];
14746[label="162.73.46.178;1510pkt 1510fpkt", shape=invtriangle, color=brown];
16042[label="162.73.46.178;1511pkt 1511fpkt", shape=invhouse, color=bisque];
stat506[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.46.178:80, *:*}[87.4855%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.2738%)&lt;BR/&gt; 21: (0.346436%)&lt;BR/&gt; 1363: (0.0999334%)&lt;BR/&gt; 1051: (0.0999334%)&lt;BR/&gt; 1204: (0.0932712%)&gt;];
}
642--1443[label="1;24pkt 24fpkt"];
642--1476[label="0.8;4pkt 4fpkt"];
642--1648[label="0.0775862;9pkt 9fpkt"];
642--1662[label="0.857143;6pkt 6fpkt"];
642--1699[label="1;39pkt 39fpkt"];
642--1757[label="0.5;1pkt 1fpkt"];
642--2336[label="0.0111111;1pkt 1fpkt"];
642--2558[label="1;8pkt 8fpkt"];
642--2742[label="0.00714286;1pkt 1fpkt"];
642--2776[label="0.00555556;1pkt 1fpkt"];
642--3117[label="1;16pkt 16fpkt"];
642--3483[label="0.769231;10pkt 10fpkt"];
642--3560[label="0.96;24pkt 24fpkt"];
642--3612[label="0.0363636;2pkt 2fpkt"];
642--3621[label="0.8;4pkt 4fpkt"];
642--4098[label="0.923077;12pkt 12fpkt"];
642--4399[label="1;10pkt 10fpkt"];
642--4466[label="0.00952381;1pkt 1fpkt"];
642--4502[label="0.8;4pkt 4fpkt"];
642--4568[label="0.933333;14pkt 14fpkt"];
642--4896[label="0.0540541;2pkt 2fpkt"];
642--4897[label="0.5;1pkt 1fpkt"];
642--5224[label="0.0789474;3pkt 3fpkt"];
642--5431[label="1;13pkt 13fpkt"];
642--5739[label="0.416667;5pkt 5fpkt"];
642--6094[label="1;24pkt 24fpkt"];
642--6143[label="0.121212;8pkt 8fpkt"];
642--6153[label="1;39pkt 39fpkt"];
642--6181[label="1;1128pkt 1128fpkt"];
642--6361[label="0.8;4pkt 4fpkt"];
642--6410[label="0.857143;6pkt 6fpkt"];
642--6592[label="0.0147059;1pkt 1fpkt"];
642--7400[label="0.923077;12pkt 12fpkt"];
642--7584[label="0.0117647;1pkt 1fpkt"];
642--7700[label="0.933333;14pkt 14fpkt"];
642--8020[label="1;10pkt 10fpkt"];
642--8059[label="0.00952381;1pkt 1fpkt"];
642--8079[label="0.0540541;2pkt 2fpkt"];
642--8080[label="0.5;1pkt 1fpkt"];
642--8227[label="0.00617284;1pkt 1fpkt"];
642--8384[label="0.0363636;2pkt 2fpkt"];
642--8971[label="0.0151515;1pkt 1fpkt"];
642--9078[label="0.00617284;1pkt 1fpkt"];
642--9163[label="0.11617;148pkt 148fpkt"];
642--9194[label="0.0894819;114pkt 114fpkt"];
642--9198[label="0.0486656;62pkt 62fpkt"];
642--9234[label="0.0894819;114pkt 114fpkt"];
642--9268[label="0.0894819;114pkt 114fpkt"];
642--12228[label="0.999215;1273pkt 1273fpkt"];
642--14746[label="0.999215;1273pkt 1273fpkt"];
642--16042[label="1;1274pkt 1274fpkt"];
1443--9198[label="1;24pkt 24fpkt"];
1443--12228[label="1;24pkt 24fpkt"];
1443--14746[label="1;24pkt 24fpkt"];
1443--16042[label="1;24pkt 24fpkt"];
1662--6181[label="0.857143;6pkt 6fpkt"];
1662--6410[label="1;7pkt 7fpkt"];
1662--9163[label="0.714286;5pkt 5fpkt"];
1662--12195[label="0.142857;1pkt 1fpkt"];
1662--12228[label="0.857143;6pkt 6fpkt"];
1662--14736[label="0.142857;1pkt 1fpkt"];
1662--14746[label="0.857143;6pkt 6fpkt"];
1662--16036[label="0.142857;1pkt 1fpkt"];
1662--16042[label="0.857143;6pkt 6fpkt"];
1699--6153[label="1;39pkt 39fpkt"];
1699--6181[label="1;39pkt 39fpkt"];
1699--9163[label="0.025641;1pkt 1fpkt"];
1699--12228[label="1;39pkt 39fpkt"];
1699--14746[label="1;39pkt 39fpkt"];
1699--16042[label="1;39pkt 39fpkt"];
1757--6181[label="0.5;1pkt 1fpkt"];
1757--7098[label="0.5;1pkt 1fpkt"];
1757--8905[label="0.5;1pkt 1fpkt"];
1757--9775[label="0.5;1pkt 1fpkt"];
1757--12228[label="0.5;1pkt 1fpkt"];
1757--14746[label="0.5;1pkt 1fpkt"];
1757--16042[label="0.5;1pkt 1fpkt"];
2109--2742[label="0.393162;46pkt 46fpkt"];
2109--2823[label="0.577586;67pkt 67fpkt"];
2109--6328[label="1;36pkt 36fpkt"];
2109--6592[label="0.367647;25pkt 25fpkt"];
2109--9163[label="0.0854701;10pkt 10fpkt"];
2109--9194[label="0.034188;4pkt 4fpkt"];
2109--9198[label="0.042735;5pkt 5fpkt"];
2109--9234[label="0.034188;4pkt 4fpkt"];
2109--9268[label="0.034188;4pkt 4fpkt"];
2558--6181[label="1;8pkt 8fpkt"];
2558--12228[label="1;8pkt 8fpkt"];
2558--14746[label="1;8pkt 8fpkt"];
2558--16042[label="1;8pkt 8fpkt"];
3117--6181[label="1;16pkt 16fpkt"];
3117--12228[label="1;16pkt 16fpkt"];
3117--14746[label="1;16pkt 16fpkt"];
3117--16042[label="1;16pkt 16fpkt"];
3612--6181[label="0.0363636;2pkt 2fpkt"];
3612--7098[label="0.945455;52pkt 52fpkt"];
3612--8384[label="1;55pkt 55fpkt"];
3612--8905[label="0.945455;52pkt 52fpkt"];
3612--9775[label="0.945455;52pkt 52fpkt"];
3612--10292[label="0.0181818;1pkt 1fpkt"];
3612--12228[label="0.0363636;2pkt 2fpkt"];
3612--13777[label="0.0181818;1pkt 1fpkt"];
3612--14746[label="0.0363636;2pkt 2fpkt"];
3612--16042[label="0.0363636;2pkt 2fpkt"];
4399--6181[label="1;10pkt 10fpkt"];
4399--8020[label="1;10pkt 10fpkt"];
4399--12228[label="1;10pkt 10fpkt"];
4399--14746[label="1;10pkt 10fpkt"];
4399--16042[label="1;10pkt 10fpkt"];
4568--6181[label="0.933333;14pkt 14fpkt"];
4568--7700[label="1;15pkt 15fpkt"];
4568--12195[label="0.0666667;1pkt 1fpkt"];
4568--12228[label="0.933333;14pkt 14fpkt"];
4568--14736[label="0.0666667;1pkt 1fpkt"];
4568--14746[label="0.933333;14pkt 14fpkt"];
4568--16036[label="0.0666667;1pkt 1fpkt"];
4568--16042[label="0.933333;14pkt 14fpkt"];
5431--12228[label="1;13pkt 13fpkt"];
5431--14746[label="1;13pkt 13fpkt"];
5431--16042[label="1;13pkt 13fpkt"];
5739--9198[label="0.333333;4pkt 4fpkt"];
5739--12228[label="1;12pkt 12fpkt"];
5739--14746[label="1;12pkt 12fpkt"];
5739--16042[label="1;12pkt 12fpkt"];
6094--6181[label="1;24pkt 24fpkt"];
6094--9163[label="1;24pkt 24fpkt"];
6094--12228[label="1;24pkt 24fpkt"];
6094--14746[label="1;24pkt 24fpkt"];
6094--16042[label="1;24pkt 24fpkt"];
6153--6181[label="1;39pkt 39fpkt"];
6153--9163[label="0.025641;1pkt 1fpkt"];
6153--12228[label="1;39pkt 39fpkt"];
6153--14746[label="1;39pkt 39fpkt"];
6153--16042[label="1;39pkt 39fpkt"];
6181--6361[label="0.8;4pkt 4fpkt"];
6181--6410[label="0.857143;6pkt 6fpkt"];
6181--6592[label="0.0147059;1pkt 1fpkt"];
6181--7400[label="0.923077;12pkt 12fpkt"];
6181--7584[label="0.0117647;1pkt 1fpkt"];
6181--7700[label="0.933333;14pkt 14fpkt"];
6181--8020[label="1;10pkt 10fpkt"];
6181--8059[label="0.00952381;1pkt 1fpkt"];
6181--8079[label="0.027027;1pkt 1fpkt"];
6181--8080[label="0.5;1pkt 1fpkt"];
6181--8227[label="0.00617284;1pkt 1fpkt"];
6181--8384[label="0.0363636;2pkt 2fpkt"];
6181--8971[label="0.0151515;1pkt 1fpkt"];
6181--9078[label="0.00617284;1pkt 1fpkt"];
6181--9163[label="0.131206;148pkt 148fpkt"];
6181--9194[label="0.101064;114pkt 114fpkt"];
6181--9198[label="0.00443262;5pkt 5fpkt"];
6181--9234[label="0.101064;114pkt 114fpkt"];
6181--9268[label="0.101064;114pkt 114fpkt"];
6181--12228[label="0.999113;1127pkt 1127fpkt"];
6181--14746[label="0.999113;1127pkt 1127fpkt"];
6181--16042[label="1;1128pkt 1128fpkt"];
6328--6592[label="0.555556;20pkt 20fpkt"];
6328--9163[label="0.277778;10pkt 10fpkt"];
6410--9163[label="0.714286;5pkt 5fpkt"];
6410--12195[label="0.142857;1pkt 1fpkt"];
6410--12228[label="0.857143;6pkt 6fpkt"];
6410--14736[label="0.142857;1pkt 1fpkt"];
6410--14746[label="0.857143;6pkt 6fpkt"];
6410--16036[label="0.142857;1pkt 1fpkt"];
6410--16042[label="0.857143;6pkt 6fpkt"];
6592--7291[label="0.222222;2pkt 2fpkt"];
6592--7759[label="0.161765;11pkt 11fpkt"];
6592--8285[label="0.0294118;2pkt 2fpkt"];
6592--9163[label="0.205882;14pkt 14fpkt"];
6592--9194[label="0.0147059;1pkt 1fpkt"];
6592--9234[label="0.0147059;1pkt 1fpkt"];
6592--9268[label="0.0147059;1pkt 1fpkt"];
6592--9624[label="0.111111;2pkt 2fpkt"];
6592--9935[label="0.130435;3pkt 3fpkt"];
6592--9964[label="0.161765;11pkt 11fpkt"];
6592--10859[label="0.0714286;2pkt 2fpkt"];
6592--11936[label="0.157895;3pkt 3fpkt"];
6592--12228[label="0.0147059;1pkt 1fpkt"];
6592--12468[label="0.0392157;2pkt 2fpkt"];
6592--12945[label="0.205882;14pkt 14fpkt"];
6592--13423[label="0.105263;2pkt 2fpkt"];
6592--13599[label="0.161765;11pkt 11fpkt"];
6592--14601[label="0.2;4pkt 4fpkt"];
6592--14746[label="0.0147059;1pkt 1fpkt"];
6592--14871[label="0.0384615;2pkt 2fpkt"];
6592--15117[label="0.205882;14pkt 14fpkt"];
6592--15365[label="0.105263;2pkt 2fpkt"];
6592--16042[label="0.0147059;1pkt 1fpkt"];
6592--16117[label="0.0384615;2pkt 2fpkt"];
6592--16251[label="0.205882;14pkt 14fpkt"];
7700--12195[label="0.0666667;1pkt 1fpkt"];
7700--12228[label="0.933333;14pkt 14fpkt"];
7700--14736[label="0.0666667;1pkt 1fpkt"];
7700--14746[label="0.933333;14pkt 14fpkt"];
7700--16036[label="0.0666667;1pkt 1fpkt"];
7700--16042[label="0.933333;14pkt 14fpkt"];
8020--12228[label="1;10pkt 10fpkt"];
8020--14746[label="1;10pkt 10fpkt"];
8020--16042[label="1;10pkt 10fpkt"];
8384--8905[label="0.945455;52pkt 52fpkt"];
8384--9775[label="0.945455;52pkt 52fpkt"];
8384--10292[label="0.0181818;1pkt 1fpkt"];
8384--12228[label="0.0363636;2pkt 2fpkt"];
8384--13777[label="0.0181818;1pkt 1fpkt"];
8384--14746[label="0.0363636;2pkt 2fpkt"];
8384--16042[label="0.0363636;2pkt 2fpkt"];
12228--14746[label="1;1510pkt 1510fpkt"];
12228--16042[label="1;1510pkt 1510fpkt"];
14746--16042[label="1;1510pkt 1510fpkt"];
</description>
    <slice>
      <filter src_ip="162.73.46.178" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_507{
style=filled;
color=gray75;
4906[label="71.36.148.244;d;1pkt 1fpkt", shape=diamond, color=yellow];
8082[label="71.36.148.244;d;1pkt 1fpkt", shape=hexagon, color=black];
stat507[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.47.213:62170, 71.36.148.244:2944}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2944: (50%)&gt;];
}
4906--8082[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="71.36.148.244" dst_port="2944" src_ip="142.243.47.213" src_port="62170"/>
    </slice>
    <from sec="1223615318" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_508{
style=filled;
color=gray75;
3757[label="212.21.129.41;s;197pkt 197fpkt", shape=diamond, color=yellow];
4597[label="96.16.209.73;d;2pkt 2fpkt", shape=diamond, color=yellow];
8088[label="96.16.209.73;d;1pkt 1fpkt", shape=hexagon, color=black];
stat508[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.129.41:25, 34.19.129.198:*}[25.8883%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.5%)&lt;BR/&gt; 55972: (0.75%)&lt;BR/&gt; 56111: (0.5%)&lt;BR/&gt; 3855: (0.5%)&lt;BR/&gt; 443: (0.5%)&gt;];
}
3757--4597[label="1;2pkt 2fpkt"];
3757--6530[label="0.00606061;1pkt 1fpkt"];
3757--6533[label="0.00507614;1pkt 1fpkt"];
3757--6821[label="0.00892857;1pkt 1fpkt"];
3757--7468[label="0.0101523;2pkt 2fpkt"];
3757--8088[label="1;1pkt 1fpkt"];
3757--8878[label="0.00757576;1pkt 1fpkt"];
3757--9177[label="0.0101523;2pkt 2fpkt"];
3757--9196[label="0.0913706;18pkt 18fpkt"];
3757--9217[label="0.0101523;2pkt 2fpkt"];
3757--9251[label="0.0101523;2pkt 2fpkt"];
4597--8088[label="1;1pkt 1fpkt"];
4597--9196[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.19.129.198" src_ip="212.21.129.41" src_port="25"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_509{
style=filled;
color=gray75;
4023[label="73.42.151.46;s;16pkt 16fpkt", shape=diamond, color=yellow];
4489[label="73.42.151.36;s;13pkt 13fpkt", shape=diamond, color=yellow];
4601[label="136.228.115.233;d;72pkt 72fpkt", shape=diamond, color=yellow];
4922[label="206.170.18.207;s;2pkt 2fpkt", shape=diamond, color=yellow];
4923[label="211.24.13.57;s;21pkt 21fpkt", shape=diamond, color=yellow];
8068[label="73.42.151.36;s;13pkt 13fpkt", shape=hexagon, color=black];
8089[label="136.228.115.233;d;72pkt 72fpkt", shape=hexagon, color=black];
8099[label="211.24.13.57;s;21pkt 21fpkt", shape=hexagon, color=black];
9040[label="211.24.13.57;s;21pkt 21fpkt", shape=polygon, color=gold];
10297[label="211.24.13.57;21pkt 21fpkt", shape=pentagon, color=darkviolet];
12628[label="206.170.18.207;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat509[shape=component, label=&lt;Rules:&lt;BR/&gt;{211.24.13.57:80, 136.228.115.233:*}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3549: (1.0989%)&lt;BR/&gt; 3547: (1.0989%)&lt;BR/&gt; 3545: (1.0989%)&lt;BR/&gt; 3543: (1.0989%)&gt;];
}
4023--4601[label="0.125;2pkt 2fpkt"];
4023--5755[label="0.125;2pkt 2fpkt"];
4023--6811[label="0.0625;1pkt 1fpkt"];
4023--7381[label="1;5pkt 5fpkt"];
4023--8089[label="0.125;2pkt 2fpkt"];
4023--9194[label="0.25;4pkt 4fpkt"];
4023--9198[label="0.0625;1pkt 1fpkt"];
4023--9234[label="0.25;4pkt 4fpkt"];
4023--9268[label="0.25;4pkt 4fpkt"];
4489--4601[label="0.230769;3pkt 3fpkt"];
4489--5755[label="0.153846;2pkt 2fpkt"];
4489--8068[label="1;13pkt 13fpkt"];
4489--8089[label="0.230769;3pkt 3fpkt"];
4489--9194[label="0.0769231;1pkt 1fpkt"];
4489--9198[label="0.153846;2pkt 2fpkt"];
4489--9234[label="0.0769231;1pkt 1fpkt"];
4489--9268[label="0.0769231;1pkt 1fpkt"];
4601--4922[label="1;2pkt 2fpkt"];
4601--4923[label="1;21pkt 21fpkt"];
4601--8068[label="0.230769;3pkt 3fpkt"];
4601--8089[label="1;72pkt 72fpkt"];
4601--8099[label="1;21pkt 21fpkt"];
4601--9040[label="1;21pkt 21fpkt"];
4601--9198[label="0.0138889;1pkt 1fpkt"];
4601--9310[label="0.0869565;2pkt 2fpkt"];
4601--9409[label="0.142857;3pkt 3fpkt"];
4601--9677[label="0.166667;2pkt 2fpkt"];
4601--9778[label="0.030303;1pkt 1fpkt"];
4601--10191[label="0.125;2pkt 2fpkt"];
4601--10297[label="1;21pkt 21fpkt"];
4601--10322[label="0.0909091;2pkt 2fpkt"];
4601--10467[label="0.0454545;1pkt 1fpkt"];
4601--10488[label="0.0833333;2pkt 2fpkt"];
4601--12628[label="1;1pkt 1fpkt"];
4601--13309[label="0.136364;3pkt 3fpkt"];
4601--13725[label="0.125;2pkt 2fpkt"];
4601--13860[label="0.047619;1pkt 1fpkt"];
4601--13875[label="0.0833333;2pkt 2fpkt"];
4601--15577[label="0.0454545;1pkt 1fpkt"];
4922--8089[label="1;2pkt 2fpkt"];
4922--12628[label="1;1pkt 1fpkt"];
4923--8089[label="1;21pkt 21fpkt"];
4923--8099[label="1;21pkt 21fpkt"];
4923--9040[label="1;21pkt 21fpkt"];
4923--10297[label="1;21pkt 21fpkt"];
8068--8089[label="0.230769;3pkt 3fpkt"];
8068--9194[label="0.0769231;1pkt 1fpkt"];
8068--9198[label="0.153846;2pkt 2fpkt"];
8068--9234[label="0.0769231;1pkt 1fpkt"];
8068--9268[label="0.0769231;1pkt 1fpkt"];
8089--8099[label="1;21pkt 21fpkt"];
8089--9040[label="1;21pkt 21fpkt"];
8089--9198[label="0.0138889;1pkt 1fpkt"];
8089--9310[label="0.0869565;2pkt 2fpkt"];
8089--9409[label="0.142857;3pkt 3fpkt"];
8089--9677[label="0.166667;2pkt 2fpkt"];
8089--9778[label="0.030303;1pkt 1fpkt"];
8089--10191[label="0.125;2pkt 2fpkt"];
8089--10297[label="1;21pkt 21fpkt"];
8089--10322[label="0.0909091;2pkt 2fpkt"];
8089--10467[label="0.0454545;1pkt 1fpkt"];
8089--10488[label="0.0833333;2pkt 2fpkt"];
8089--12628[label="1;1pkt 1fpkt"];
8089--13309[label="0.136364;3pkt 3fpkt"];
8089--13725[label="0.125;2pkt 2fpkt"];
8089--13860[label="0.047619;1pkt 1fpkt"];
8089--13875[label="0.0833333;2pkt 2fpkt"];
8089--15577[label="0.0454545;1pkt 1fpkt"];
8099--9040[label="1;21pkt 21fpkt"];
8099--10297[label="1;21pkt 21fpkt"];
9040--10297[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.115.233" src_ip="211.24.13.57" src_port="80"/>
    </slice>
    <from sec="1223615140" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_510{
style=filled;
color=gray75;
4564[label="136.228.118.158;d;1pkt 1fpkt", shape=diamond, color=yellow];
4614[label="192.90.232.200;s;1pkt 1fpkt", shape=diamond, color=yellow];
8090[label="192.90.232.200;s;1pkt 1fpkt", shape=hexagon, color=black];
8425[label="136.228.118.158;d;1pkt 1fpkt", shape=hexagon, color=black];
stat510[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.90.232.200:80, 136.228.118.158:1785}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1785: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4564--4614[label="1;1pkt 1fpkt"];
4564--8090[label="1;1pkt 1fpkt"];
4564--8425[label="1;1pkt 1fpkt"];
4614--8090[label="1;1pkt 1fpkt"];
4614--8425[label="1;1pkt 1fpkt"];
8090--8425[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.118.158" dst_port="1785" src_ip="192.90.232.200" src_port="80"/>
    </slice>
    <from sec="1223615311" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_511{
style=filled;
color=gray75;
4616[label="128.9.1.188;s;41pkt 41fpkt", shape=diamond, color=yellow];
8091[label="128.9.1.188;s;41pkt 41fpkt", shape=hexagon, color=black];
stat511[shape=component, label=&lt;Rules:&lt;BR/&gt;{128.9.1.188:80, 212.21.136.142:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65433: (1.21951%)&lt;BR/&gt; 65384: (1.21951%)&lt;BR/&gt; 65126: (1.21951%)&lt;BR/&gt; 64517: (1.21951%)&gt;];
}
4616--4617[label="1;41pkt 41fpkt"];
4616--8091[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.142" src_ip="128.9.1.188" src_port="80"/>
    </slice>
    <from sec="1223615343" usec="0"/>
    <to sec="1223615416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_512{
style=filled;
color=gray75;
4945[label="107.137.214.16;s;4pkt 4fpkt", shape=diamond, color=yellow];
8106[label="107.137.214.16;s;4pkt 4fpkt", shape=hexagon, color=black];
9588[label="107.137.214.16;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13405[label="107.137.214.16;3pkt 3fpkt", shape=invtriangle, color=brown];
stat512[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.137.214.16:80, 212.21.136.200:2164}[25%]&lt;BR/&gt;{107.137.214.16:80, 212.21.136.200:2166}[25%]&lt;BR/&gt;{107.137.214.16:80, 212.21.136.200:2167}[25%]&lt;BR/&gt;{107.137.214.16:80, 212.21.136.200:2168}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2168: (14.2857%)&lt;BR/&gt; 2167: (14.2857%)&lt;BR/&gt; 2166: (14.2857%)&lt;BR/&gt; 2164: (7.14286%)&gt;];
}
4945--8106[label="1;4pkt 4fpkt"];
4945--9588[label="1;3pkt 3fpkt"];
4945--13405[label="1;3pkt 3fpkt"];
8106--9588[label="1;3pkt 3fpkt"];
8106--13405[label="1;3pkt 3fpkt"];
9588--13405[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.200" dst_port="2168" src_ip="107.137.214.16" src_port="80"/>
      <filter dst_ip="212.21.136.200" dst_port="2167" src_ip="107.137.214.16" src_port="80"/>
      <filter dst_ip="212.21.136.200" dst_port="2166" src_ip="107.137.214.16" src_port="80"/>
      <filter dst_ip="212.21.136.200" dst_port="2164" src_ip="107.137.214.16" src_port="80"/>
    </slice>
    <from sec="1223615364" usec="0"/>
    <to sec="1223615388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_513{
style=filled;
color=gray75;
4963[label="107.137.214.110;d;6pkt 6fpkt", shape=diamond, color=yellow];
8109[label="107.137.214.110;d;6pkt 6fpkt", shape=hexagon, color=black];
stat513[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.200:*, 107.137.214.110:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2175: (8.33333%)&lt;BR/&gt; 2174: (8.33333%)&lt;BR/&gt; 2173: (8.33333%)&lt;BR/&gt; 2172: (8.33333%)&gt;];
}
4963--8109[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="107.137.214.110" dst_port="80" src_ip="212.21.136.200"/>
    </slice>
    <from sec="1223615387" usec="0"/>
    <to sec="1223615410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_514{
style=filled;
color=gray75;
4970[label="164.25.94.87;d;5pkt 5fpkt", shape=diamond, color=yellow];
4971[label="96.16.235.153;s;1pkt 1fpkt", shape=diamond, color=yellow];
5836[label="209.208.134.174;s;1pkt 1fpkt", shape=diamond, color=yellow];
8114[label="96.16.235.153;s;1pkt 1fpkt", shape=hexagon, color=black];
8793[label="209.208.134.174;s;1pkt 1fpkt", shape=hexagon, color=black];
9148[label="96.16.235.153;s;1pkt 1fpkt", shape=polygon, color=gold];
12174[label="209.208.134.174;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat514[shape=component, label=&lt;Rules:&lt;BR/&gt;{96.16.235.153:9476, 164.25.94.87:25}[20%]&lt;BR/&gt;{209.208.134.174:32574, 164.25.94.87:25}[20%]&lt;BR/&gt;{108.85.22.213:35184, 164.25.94.87:25}[20%]&lt;BR/&gt;{107.4.85.244:35846, 164.25.94.87:25}[20%]&lt;BR/&gt;{124.8.41.250:3016, 164.25.94.87:25}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 32574: (18.1818%)&lt;BR/&gt; 9476: (18.1818%)&lt;BR/&gt; 35846: (4.54545%)&lt;BR/&gt; 35184: (4.54545%)&gt;];
}
4970--4971[label="1;1pkt 1fpkt"];
4970--5400[label="0.2;1pkt 1fpkt"];
4970--5401[label="0.2;1pkt 1fpkt"];
4970--5836[label="1;1pkt 1fpkt"];
4970--8113[label="1;4pkt 4fpkt"];
4970--8114[label="1;1pkt 1fpkt"];
4970--8766[label="0.2;1pkt 1fpkt"];
4970--8793[label="1;1pkt 1fpkt"];
4970--9148[label="1;1pkt 1fpkt"];
4970--12174[label="1;1pkt 1fpkt"];
4970--12720[label="0.2;1pkt 1fpkt"];
4970--13118[label="0.2;1pkt 1fpkt"];
4970--14995[label="0.2;1pkt 1fpkt"];
4970--15200[label="0.2;1pkt 1fpkt"];
4970--16294[label="0.2;1pkt 1fpkt"];
4971--8113[label="1;1pkt 1fpkt"];
4971--8114[label="1;1pkt 1fpkt"];
4971--9148[label="1;1pkt 1fpkt"];
5836--8793[label="1;1pkt 1fpkt"];
5836--12174[label="1;1pkt 1fpkt"];
8114--9148[label="1;1pkt 1fpkt"];
8793--12174[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.94.87" dst_port="25" src_ip="124.8.41.250" src_port="3016"/>
      <filter dst_ip="164.25.94.87" dst_port="25" src_ip="107.4.85.244" src_port="35846"/>
      <filter dst_ip="164.25.94.87" dst_port="25" src_ip="108.85.22.213" src_port="35184"/>
      <filter dst_ip="164.25.94.87" dst_port="25" src_ip="209.208.134.174" src_port="32574"/>
      <filter dst_ip="164.25.94.87" dst_port="25" src_ip="96.16.235.153" src_port="9476"/>
    </slice>
    <from sec="1223615392" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_515{
style=filled;
color=gray75;
4660[label="162.73.150.187;d;36pkt 36fpkt", shape=diamond, color=yellow];
4985[label="107.146.61.187;s;7pkt 7fpkt", shape=diamond, color=yellow];
7777[label="162.73.150.187;d;16pkt 16fpkt", shape=hexagon, color=black];
8118[label="107.146.61.187;s;7pkt 7fpkt", shape=hexagon, color=black];
stat515[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.146.61.187:*, 162.73.150.187:80}[65.7895%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60058: (3.0303%)&lt;BR/&gt; 48302: (3.0303%)&lt;BR/&gt; 46757: (3.0303%)&lt;BR/&gt; 35579: (3.0303%)&gt;];
}
4660--4985[label="0.714286;5pkt 5fpkt"];
4660--7777[label="1;16pkt 16fpkt"];
4660--8118[label="0.714286;5pkt 5fpkt"];
4660--10252[label="0.166667;1pkt 1fpkt"];
4660--13753[label="0.142857;1pkt 1fpkt"];
4985--7777[label="0.714286;5pkt 5fpkt"];
4985--8118[label="1;7pkt 7fpkt"];
7777--8118[label="0.714286;5pkt 5fpkt"];
7777--10252[label="0.166667;1pkt 1fpkt"];
7777--13753[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.150.187" dst_port="80" src_ip="107.146.61.187"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_516{
style=filled;
color=gray75;
5009[label="104.243.251.178;s;1pkt 1fpkt", shape=diamond, color=yellow];
8124[label="104.243.251.178;s;1pkt 1fpkt", shape=hexagon, color=black];
stat516[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.251.178:80, 136.228.122.66:57227}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57227: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5009--8124[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.66" dst_port="57227" src_ip="104.243.251.178" src_port="80"/>
    </slice>
    <from sec="1223615416" usec="0"/>
    <to sec="1223615433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
5020[label="64.135.8.197;d;24pkt 24fpkt", shape=diamond, color=yellow];
8128[label="64.135.8.197;d;24pkt 24fpkt", shape=hexagon, color=black];
9043[label="64.135.8.197;d;24pkt 24fpkt", shape=polygon, color=gold];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.85.93:*, 64.135.8.197:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1822: (2.08333%)&lt;BR/&gt; 1821: (2.08333%)&lt;BR/&gt; 1820: (2.08333%)&lt;BR/&gt; 1819: (2.08333%)&gt;];
}
5020--8128[label="1;24pkt 24fpkt"];
5020--9043[label="1;24pkt 24fpkt"];
8128--9043[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="64.135.8.197" dst_port="80" src_ip="136.228.85.93"/>
    </slice>
    <from sec="1223615425" usec="0"/>
    <to sec="1223615518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_518{
style=filled;
color=gray75;
5025[label="107.137.214.12;s;4pkt 4fpkt", shape=diamond, color=yellow];
8130[label="107.137.214.12;s;4pkt 4fpkt", shape=hexagon, color=black];
9511[label="107.137.214.12;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13360[label="107.137.214.12;4pkt 4fpkt", shape=invtriangle, color=brown];
15335[label="107.137.214.12;4pkt 4fpkt", shape=invhouse, color=bisque];
stat518[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.137.214.12:80, 212.21.136.200:2184}[25%]&lt;BR/&gt;{107.137.214.12:80, 212.21.136.200:2188}[25%]&lt;BR/&gt;{107.137.214.12:80, 212.21.136.200:2189}[25%]&lt;BR/&gt;{107.137.214.12:80, 212.21.136.200:2190}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2190: (12.5%)&lt;BR/&gt; 2189: (12.5%)&lt;BR/&gt; 2188: (12.5%)&lt;BR/&gt; 2184: (12.5%)&gt;];
}
5025--8130[label="1;4pkt 4fpkt"];
5025--9511[label="1;4pkt 4fpkt"];
5025--13360[label="1;4pkt 4fpkt"];
5025--15335[label="1;4pkt 4fpkt"];
8130--9511[label="1;4pkt 4fpkt"];
8130--13360[label="1;4pkt 4fpkt"];
8130--15335[label="1;4pkt 4fpkt"];
9511--13360[label="1;4pkt 4fpkt"];
9511--15335[label="1;4pkt 4fpkt"];
13360--15335[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.200" dst_port="2190" src_ip="107.137.214.12" src_port="80"/>
      <filter dst_ip="212.21.136.200" dst_port="2189" src_ip="107.137.214.12" src_port="80"/>
      <filter dst_ip="212.21.136.200" dst_port="2188" src_ip="107.137.214.12" src_port="80"/>
      <filter dst_ip="212.21.136.200" dst_port="2184" src_ip="107.137.214.12" src_port="80"/>
    </slice>
    <from sec="1223615430" usec="0"/>
    <to sec="1223615452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_519{
style=filled;
color=gray75;
5026[label="213.48.233.222;s;4pkt 4fpkt", shape=diamond, color=yellow];
8131[label="213.48.233.222;s;2pkt 2fpkt", shape=hexagon, color=black];
stat519[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.233.222:80, 142.243.10.116:2138}[25%]&lt;BR/&gt;{213.48.233.222:80, 142.243.10.116:2141}[25%]&lt;BR/&gt;{213.48.233.222:80, 142.243.10.116:2145}[25%]&lt;BR/&gt;{213.48.233.222:80, 142.243.10.116:2148}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2141: (16.6667%)&lt;BR/&gt; 2138: (16.6667%)&lt;BR/&gt; 2148: (8.33333%)&lt;BR/&gt; 2145: (8.33333%)&gt;];
}
5026--8131[label="1;2pkt 2fpkt"];
5026--9198[label="0.5;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.10.116" dst_port="2148" src_ip="213.48.233.222" src_port="80"/>
      <filter dst_ip="142.243.10.116" dst_port="2145" src_ip="213.48.233.222" src_port="80"/>
      <filter dst_ip="142.243.10.116" dst_port="2141" src_ip="213.48.233.222" src_port="80"/>
      <filter dst_ip="142.243.10.116" dst_port="2138" src_ip="213.48.233.222" src_port="80"/>
    </slice>
    <from sec="1223615430" usec="0"/>
    <to sec="1223615542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_520{
style=filled;
color=gray75;
1924[label="136.228.94.217;s;87pkt 87fpkt", shape=diamond, color=yellow];
3011[label="213.3.16.141;d;80pkt 80fpkt", shape=diamond, color=yellow];
8171[label="136.228.94.217;s;87pkt 87fpkt", shape=hexagon, color=black];
stat520[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.94.217:*, 213.3.16.141:80}[91.954%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4122: (0.590551%)&lt;BR/&gt; 4120: (0.590551%)&lt;BR/&gt; 4118: (0.590551%)&lt;BR/&gt; 4116: (0.590551%)&gt;];
}
1924--3011[label="1;80pkt 80fpkt"];
1924--3454[label="0.0131579;1pkt 1fpkt"];
1924--8171[label="1;87pkt 87fpkt"];
3011--8171[label="1;80pkt 80fpkt"];
</description>
    <slice>
      <filter dst_ip="213.3.16.141" dst_port="80" src_ip="136.228.94.217"/>
    </slice>
    <from sec="1223615552" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_522{
style=filled;
color=gray75;
2035[label="18.178.39.209;s;1pkt 1fpkt", shape=diamond, color=yellow];
8192[label="18.178.39.209;s;1pkt 1fpkt", shape=hexagon, color=black];
stat522[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.178.39.209:2704, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2704: (50%)&gt;];
}
2035--8192[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="18.178.39.209" src_port="2704"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_523{
style=filled;
color=gray75;
17[label="136.228.86.14s;2pkt 2fpkt", shape=rectangle, color=red];
2712[label="213.43.160.118;d;163pkt 163fpkt", shape=diamond, color=yellow];
4548[label="136.228.86.14;s;42pkt 42fpkt", shape=diamond, color=yellow];
4553[label="213.43.238.206;d;37pkt 37fpkt", shape=diamond, color=yellow];
8075[label="213.43.238.206;d;37pkt 37fpkt", shape=hexagon, color=black];
8418[label="136.228.86.14;s;42pkt 42fpkt", shape=hexagon, color=black];
9541[label="136.228.86.14;41pkt 41fpkt", shape=pentagon, color=darkviolet];
11110[label="136.228.86.106;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat523[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.43.160.118:80}[66.3415%]&lt;BR/&gt;{136.228.199.46:*, 213.43.160.118:*}[24.3902%]&lt;BR/&gt;{136.228.86.14:*, *:*}[20.4878%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (23.9691%)&lt;BR/&gt; 80: (22.8093%)&lt;BR/&gt; 20480: (3.22165%)&lt;BR/&gt; 3914: (0.773196%)&lt;BR/&gt; 3886: (0.773196%)&gt;];
}
17--2712[label="1;2pkt 2fpkt"];
17--4548[label="1;2pkt 2fpkt"];
17--8201[label="1;2pkt 2fpkt"];
17--8418[label="1;2pkt 2fpkt"];
17--9541[label="1;2pkt 2fpkt"];
2712--2771[label="0.306748;50pkt 50fpkt"];
2712--3559[label="0.1125;9pkt 9fpkt"];
2712--3855[label="0.0122699;2pkt 2fpkt"];
2712--4322[label="0.0428571;6pkt 6fpkt"];
2712--4548[label="0.0952381;4pkt 4fpkt"];
2712--5923[label="0.0122699;2pkt 2fpkt"];
2712--5997[label="0.00628931;1pkt 1fpkt"];
2712--6126[label="0.00613497;1pkt 1fpkt"];
2712--6463[label="0.153374;25pkt 25fpkt"];
2712--6500[label="0.00613497;1pkt 1fpkt"];
2712--6608[label="0.306748;50pkt 50fpkt"];
2712--7088[label="0.00613497;1pkt 1fpkt"];
2712--7108[label="0.00613497;1pkt 1fpkt"];
2712--7271[label="0.0124224;2pkt 2fpkt"];
2712--7446[label="0.0245399;4pkt 4fpkt"];
2712--8201[label="1;141pkt 141fpkt"];
2712--8376[label="0.1125;9pkt 9fpkt"];
2712--8418[label="0.0952381;4pkt 4fpkt"];
2712--8562[label="0.0122699;2pkt 2fpkt"];
2712--8600[label="0.00613497;1pkt 1fpkt"];
2712--8992[label="0.00613497;1pkt 1fpkt"];
2712--9053[label="0.00613497;1pkt 1fpkt"];
2712--9178[label="0.00613497;1pkt 1fpkt"];
2712--9218[label="0.00613497;1pkt 1fpkt"];
2712--9252[label="0.00613497;1pkt 1fpkt"];
2712--9541[label="0.097561;4pkt 4fpkt"];
2712--9982[label="0.00613497;1pkt 1fpkt"];
2712--10864[label="0.00613497;1pkt 1fpkt"];
2712--10872[label="0.159509;26pkt 26fpkt"];
2712--11110[label="0.833333;20pkt 20fpkt"];
2712--11184[label="0.0122699;2pkt 2fpkt"];
2712--13610[label="0.00613497;1pkt 1fpkt"];
2712--13691[label="0.306748;50pkt 50fpkt"];
2712--14064[label="0.159509;26pkt 26fpkt"];
2712--14221[label="0.0122699;2pkt 2fpkt"];
2712--15687[label="0.159509;26pkt 26fpkt"];
4548--4553[label="1;37pkt 37fpkt"];
4548--8075[label="1;37pkt 37fpkt"];
4548--8201[label="0.0952381;4pkt 4fpkt"];
4548--8418[label="1;42pkt 42fpkt"];
4548--9541[label="1;41pkt 41fpkt"];
4553--8075[label="1;37pkt 37fpkt"];
4553--8418[label="1;37pkt 37fpkt"];
4553--9541[label="0.972973;36pkt 36fpkt"];
8075--8418[label="1;37pkt 37fpkt"];
8075--9541[label="0.972973;36pkt 36fpkt"];
8418--9541[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.86.14"/>
      <filter dst_ip="213.43.160.118" src_ip="136.228.199.46"/>
      <filter dst_ip="213.43.160.118" dst_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_524{
style=filled;
color=gray75;
4198[label="70.118.249.156;s;1pkt 1fpkt", shape=diamond, color=yellow];
8204[label="70.118.249.156;s;1pkt 1fpkt", shape=hexagon, color=black];
stat524[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.118.249.156:4165, 136.228.138.83:61199}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61199: (50%)&lt;BR/&gt; 4165: (50%)&gt;];
}
4198--8204[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.138.83" dst_port="61199" src_ip="70.118.249.156" src_port="4165"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
773[label="136.228.164.60;d;16pkt 16fpkt", shape=diamond, color=yellow];
1608[label="212.138.109.18;s;2pkt 2fpkt", shape=diamond, color=yellow];
4210[label="107.116.130.147;s;147pkt 147fpkt", shape=diamond, color=yellow];
5942[label="136.228.164.60;d;16pkt 16fpkt", shape=hexagon, color=black];
6132[label="212.138.109.18;s;2pkt 2fpkt", shape=hexagon, color=black];
8810[label="136.228.164.60;d;16pkt 16fpkt", shape=polygon, color=gold];
8821[label="212.138.109.18;s;2pkt 2fpkt", shape=polygon, color=gold];
9623[label="212.138.109.18;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.116.130.147:80, *:*}[84.6626%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0732%)&lt;BR/&gt; 443: (2.68293%)&lt;BR/&gt; 37339: (1.70732%)&lt;BR/&gt; 37332: (1.70732%)&lt;BR/&gt; 37330: (0.97561%)&gt;];
}
773--1608[label="1;2pkt 2fpkt"];
773--4210[label="0.125;2pkt 2fpkt"];
773--5476[label="0.3125;5pkt 5fpkt"];
773--5942[label="1;16pkt 16fpkt"];
773--6132[label="1;2pkt 2fpkt"];
773--8213[label="0.125;2pkt 2fpkt"];
773--8810[label="1;16pkt 16fpkt"];
773--8821[label="1;2pkt 2fpkt"];
773--9163[label="0.875;14pkt 14fpkt"];
773--9623[label="0.5;2pkt 2fpkt"];
773--10778[label="0.3125;5pkt 5fpkt"];
773--14024[label="0.3125;5pkt 5fpkt"];
773--15662[label="0.3125;5pkt 5fpkt"];
1608--5942[label="1;2pkt 2fpkt"];
1608--6132[label="1;2pkt 2fpkt"];
1608--8810[label="1;2pkt 2fpkt"];
1608--8821[label="1;2pkt 2fpkt"];
1608--9163[label="1;2pkt 2fpkt"];
1608--9623[label="1;2pkt 2fpkt"];
4210--4370[label="0.0645161;4pkt 4fpkt"];
4210--5267[label="0.181818;2pkt 2fpkt"];
4210--5904[label="0.0714286;1pkt 1fpkt"];
4210--5942[label="0.125;2pkt 2fpkt"];
4210--6098[label="0.0449438;4pkt 4fpkt"];
4210--6206[label="0.0136054;2pkt 2fpkt"];
4210--6385[label="0.0833333;1pkt 1fpkt"];
4210--6462[label="0.0136054;2pkt 2fpkt"];
4210--6770[label="0.0136054;2pkt 2fpkt"];
4210--6808[label="0.00840336;1pkt 1fpkt"];
4210--6819[label="0.00680272;1pkt 1fpkt"];
4210--6841[label="0.00680272;1pkt 1fpkt"];
4210--6920[label="0.00680272;1pkt 1fpkt"];
4210--6948[label="0.0133333;1pkt 1fpkt"];
4210--7030[label="0.2;2pkt 2fpkt"];
4210--7106[label="0.122449;18pkt 18fpkt"];
4210--7509[label="0.176;22pkt 22fpkt"];
4210--7824[label="0.0204082;3pkt 3fpkt"];
4210--7931[label="0.209677;13pkt 13fpkt"];
4210--8021[label="0.047619;1pkt 1fpkt"];
4210--8213[label="1;147pkt 147fpkt"];
4210--8230[label="0.00680272;1pkt 1fpkt"];
4210--8531[label="0.00680272;1pkt 1fpkt"];
4210--8810[label="0.125;2pkt 2fpkt"];
4210--8871[label="0.0136054;2pkt 2fpkt"];
4210--8934[label="0.102041;15pkt 15fpkt"];
4210--9130[label="0.00680272;1pkt 1fpkt"];
4210--9163[label="0.0748299;11pkt 11fpkt"];
4210--9194[label="0.0340136;5pkt 5fpkt"];
4210--9198[label="0.0272109;4pkt 4fpkt"];
4210--9234[label="0.0340136;5pkt 5fpkt"];
4210--9268[label="0.0340136;5pkt 5fpkt"];
5942--6132[label="1;2pkt 2fpkt"];
5942--8213[label="0.125;2pkt 2fpkt"];
5942--8810[label="1;16pkt 16fpkt"];
5942--8821[label="1;2pkt 2fpkt"];
5942--9163[label="0.875;14pkt 14fpkt"];
5942--9623[label="0.5;2pkt 2fpkt"];
5942--10778[label="0.3125;5pkt 5fpkt"];
5942--14024[label="0.3125;5pkt 5fpkt"];
5942--15662[label="0.3125;5pkt 5fpkt"];
6132--8810[label="1;2pkt 2fpkt"];
6132--8821[label="1;2pkt 2fpkt"];
6132--9163[label="1;2pkt 2fpkt"];
6132--9623[label="1;2pkt 2fpkt"];
8810--8821[label="1;2pkt 2fpkt"];
8810--9163[label="0.875;14pkt 14fpkt"];
8810--9623[label="0.5;2pkt 2fpkt"];
8810--10778[label="0.3125;5pkt 5fpkt"];
8810--14024[label="0.3125;5pkt 5fpkt"];
8810--15662[label="0.3125;5pkt 5fpkt"];
8821--9163[label="1;2pkt 2fpkt"];
8821--9623[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="107.116.130.147" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_526{
style=filled;
color=gray75;
3759[label="142.228.95.78;d;266pkt 266fpkt", shape=diamond, color=yellow];
8234[label="142.228.95.78;d;242pkt 242fpkt", shape=hexagon, color=black];
stat526[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 142.228.95.78:57369}[73.6842%]&lt;BR/&gt;{*:*, 142.228.95.78:53}[24.812%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.2126%)&lt;BR/&gt; 57369: (36.9094%)&lt;BR/&gt; 0: (1.5748%)&lt;BR/&gt; 65469: (0.19685%)&lt;BR/&gt; 63746: (0.19685%)&gt;];
}
3759--4671[label="0.0037594;1pkt 1fpkt"];
3759--5538[label="0.0037594;1pkt 1fpkt"];
3759--5580[label="0.0037594;1pkt 1fpkt"];
3759--6609[label="0.0112782;3pkt 3fpkt"];
3759--7807[label="0.0037594;1pkt 1fpkt"];
3759--8234[label="1;242pkt 242fpkt"];
3759--8551[label="0.0037594;1pkt 1fpkt"];
3759--9135[label="0.0037594;1pkt 1fpkt"];
3759--9197[label="0.176692;47pkt 47fpkt"];
3759--9552[label="0.0037594;1pkt 1fpkt"];
3759--9715[label="0.0037594;1pkt 1fpkt"];
3759--9911[label="0.00632911;1pkt 1fpkt"];
3759--10559[label="0.00869565;1pkt 1fpkt"];
3759--10629[label="0.0037594;1pkt 1fpkt"];
3759--10692[label="0.0112782;3pkt 3fpkt"];
3759--10756[label="0.0037594;1pkt 1fpkt"];
3759--10847[label="0.00540541;1pkt 1fpkt"];
3759--11287[label="0.00675676;1pkt 1fpkt"];
3759--11586[label="0.00787402;1pkt 1fpkt"];
3759--11642[label="0.0138889;1pkt 1fpkt"];
3759--11649[label="0.0135135;1pkt 1fpkt"];
3759--12325[label="0.00480769;1pkt 1fpkt"];
3759--12386[label="0.00892857;1pkt 1fpkt"];
3759--12553[label="0.00595238;1pkt 1fpkt"];
3759--12580[label="0.0037594;1pkt 1fpkt"];
3759--12660[label="0.00543478;1pkt 1fpkt"];
3759--12879[label="0.00813008;1pkt 1fpkt"];
3759--12936[label="0.00555556;1pkt 1fpkt"];
3759--12951[label="0.0037594;1pkt 1fpkt"];
3759--12967[label="0.0037594;1pkt 1fpkt"];
3759--12992[label="0.00699301;1pkt 1fpkt"];
3759--13144[label="0.00588235;1pkt 1fpkt"];
3759--13385[label="0.0037594;1pkt 1fpkt"];
3759--13464[label="0.0037594;1pkt 1fpkt"];
3759--13570[label="0.00628931;1pkt 1fpkt"];
3759--13912[label="0.00862069;1pkt 1fpkt"];
3759--13952[label="0.0037594;1pkt 1fpkt"];
3759--14013[label="0.0037594;1pkt 1fpkt"];
3759--14453[label="0.0138889;1pkt 1fpkt"];
3759--14925[label="0.0037594;1pkt 1fpkt"];
3759--15125[label="0.0037594;1pkt 1fpkt"];
3759--15347[label="0.0037594;1pkt 1fpkt"];
3759--15385[label="0.0037594;1pkt 1fpkt"];
3759--15653[label="0.0037594;1pkt 1fpkt"];
3759--15883[label="0.0140845;1pkt 1fpkt"];
3759--16148[label="0.0037594;1pkt 1fpkt"];
3759--16256[label="0.0037594;1pkt 1fpkt"];
8234--8551[label="0.00413223;1pkt 1fpkt"];
8234--9135[label="0.00413223;1pkt 1fpkt"];
8234--9197[label="0.169421;41pkt 41fpkt"];
8234--9552[label="0.00413223;1pkt 1fpkt"];
8234--9715[label="0.00413223;1pkt 1fpkt"];
8234--9911[label="0.00632911;1pkt 1fpkt"];
8234--10559[label="0.00869565;1pkt 1fpkt"];
8234--10629[label="0.00413223;1pkt 1fpkt"];
8234--10692[label="0.0123967;3pkt 3fpkt"];
8234--10756[label="0.00413223;1pkt 1fpkt"];
8234--10847[label="0.00540541;1pkt 1fpkt"];
8234--11287[label="0.00675676;1pkt 1fpkt"];
8234--11586[label="0.00787402;1pkt 1fpkt"];
8234--11642[label="0.0138889;1pkt 1fpkt"];
8234--11649[label="0.0135135;1pkt 1fpkt"];
8234--12325[label="0.00480769;1pkt 1fpkt"];
8234--12386[label="0.00892857;1pkt 1fpkt"];
8234--12553[label="0.00595238;1pkt 1fpkt"];
8234--12580[label="0.00413223;1pkt 1fpkt"];
8234--12660[label="0.00543478;1pkt 1fpkt"];
8234--12879[label="0.00813008;1pkt 1fpkt"];
8234--12936[label="0.00555556;1pkt 1fpkt"];
8234--12951[label="0.00413223;1pkt 1fpkt"];
8234--12967[label="0.00413223;1pkt 1fpkt"];
8234--12992[label="0.00699301;1pkt 1fpkt"];
8234--13144[label="0.00588235;1pkt 1fpkt"];
8234--13385[label="0.00413223;1pkt 1fpkt"];
8234--13464[label="0.00413223;1pkt 1fpkt"];
8234--13570[label="0.00628931;1pkt 1fpkt"];
8234--13912[label="0.00862069;1pkt 1fpkt"];
8234--13952[label="0.00413223;1pkt 1fpkt"];
8234--14013[label="0.00413223;1pkt 1fpkt"];
8234--14453[label="0.0138889;1pkt 1fpkt"];
8234--14925[label="0.00413223;1pkt 1fpkt"];
8234--15125[label="0.00413223;1pkt 1fpkt"];
8234--15347[label="0.00413223;1pkt 1fpkt"];
8234--15385[label="0.00413223;1pkt 1fpkt"];
8234--15653[label="0.00413223;1pkt 1fpkt"];
8234--15883[label="0.0140845;1pkt 1fpkt"];
8234--16148[label="0.00413223;1pkt 1fpkt"];
8234--16256[label="0.00413223;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.95.78" dst_port="53"/>
      <filter dst_ip="142.228.95.78" dst_port="57369" src_port="53"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_527{
style=filled;
color=gray75;
2794[label="99.86.111.27;d;21pkt 21fpkt", shape=diamond, color=yellow];
8235[label="99.86.111.27;d;18pkt 18fpkt", shape=hexagon, color=black];
stat527[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.71.181:*, 99.86.111.27:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60948: (2.5641%)&lt;BR/&gt; 60528: (2.5641%)&lt;BR/&gt; 60216: (2.5641%)&lt;BR/&gt; 60132: (2.5641%)&gt;];
}
2794--8235[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="99.86.111.27" dst_port="80" src_ip="136.228.71.181"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_528{
style=filled;
color=gray75;
3762[label="136.228.77.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
4233[label="21.20.253.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
8238[label="136.228.77.39;d;1pkt 1fpkt", shape=hexagon, color=black];
12439[label="21.20.253.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat528[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.20.253.193:0, 136.228.77.39:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3762--4233[label="1;1pkt 1fpkt"];
3762--8238[label="1;1pkt 1fpkt"];
3762--12439[label="1;1pkt 1fpkt"];
4233--8238[label="1;1pkt 1fpkt"];
4233--12439[label="1;1pkt 1fpkt"];
8238--12439[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.77.39" src_ip="21.20.253.193"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_529{
style=filled;
color=gray75;
2830[label="21.172.111.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
8262[label="21.172.111.37;s;1pkt 1fpkt", shape=hexagon, color=black];
stat529[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.172.111.37:34136, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34136: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
2830--8262[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="21.172.111.37" src_port="34136"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615501" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_530{
style=filled;
color=gray75;
4724[label="72.6.112.178;s;697pkt 697fpkt", shape=diamond, color=yellow];
8267[label="72.6.112.178;s;697pkt 697fpkt", shape=hexagon, color=black];
stat530[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.6.112.178:6019, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6019: (50%)&lt;BR/&gt; 6220: (0.215208%)&lt;BR/&gt; 61190: (0.143472%)&lt;BR/&gt; 59967: (0.143472%)&lt;BR/&gt; 31278: (0.143472%)&gt;];
}
4724--5508[label="0.0026738;1pkt 1fpkt"];
4724--8267[label="1;697pkt 697fpkt"];
</description>
    <slice>
      <filter src_ip="72.6.112.178" src_port="6019"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_531{
style=filled;
color=gray75;
4758[label="136.228.3.55;s;22pkt 22fpkt", shape=diamond, color=yellow];
4904[label="210.73.69.226;d;12pkt 12fpkt", shape=diamond, color=yellow];
8299[label="136.228.3.55;s;22pkt 22fpkt", shape=hexagon, color=black];
8429[label="210.73.69.226;d;12pkt 12fpkt", shape=hexagon, color=black];
10270[label="136.228.3.55;23pkt 23fpkt", shape=pentagon, color=darkviolet];
stat531[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.3.55:*, 210.73.69.226:80}[50%]&lt;BR/&gt;{136.228.3.55:*, 212.138.109.0:80}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4111: (2.74725%)&lt;BR/&gt; 4110: (2.74725%)&lt;BR/&gt; 4109: (2.74725%)&lt;BR/&gt; 4108: (2.74725%)&gt;];
}
4758--4904[label="1;12pkt 12fpkt"];
4758--8299[label="1;22pkt 22fpkt"];
4758--8429[label="1;12pkt 12fpkt"];
4758--10270[label="0.954545;21pkt 21fpkt"];
4904--8299[label="1;12pkt 12fpkt"];
4904--8429[label="1;12pkt 12fpkt"];
4904--10270[label="1;12pkt 12fpkt"];
8299--8429[label="1;12pkt 12fpkt"];
8299--10270[label="0.954545;21pkt 21fpkt"];
8429--10270[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="210.73.69.226" dst_port="80" src_ip="136.228.3.55"/>
      <filter dst_ip="212.138.109.0" dst_port="80" src_ip="136.228.3.55"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20342,2.00409,503,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_532{
style=filled;
color=gray75;
21[label="136.228.19.20s;1pkt 1fpkt", shape=rectangle, color=red];
5262[label="212.138.109.117;d;84pkt 84fpkt", shape=diamond, color=yellow];
8409[label="212.138.109.117;d;84pkt 84fpkt", shape=hexagon, color=black];
9649[label="136.228.19.20;120pkt 120fpkt", shape=pentagon, color=darkviolet];
stat532[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.19.20:*, 212.138.109.117:80}[67.2131%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7128%)&lt;BR/&gt; 443: (3.2872%)&lt;BR/&gt; 43958: (0.692042%)&lt;BR/&gt; 43990: (0.519031%)&lt;BR/&gt; 43988: (0.519031%)&gt;];
}
21--4762[label="1;1pkt 1fpkt"];
21--5262[label="1;1pkt 1fpkt"];
21--8305[label="1;1pkt 1fpkt"];
21--8409[label="1;1pkt 1fpkt"];
21--9649[label="1;1pkt 1fpkt"];
5262--8305[label="0.97619;82pkt 82fpkt"];
5262--8409[label="1;84pkt 84fpkt"];
5262--8581[label="0.0238095;2pkt 2fpkt"];
5262--9649[label="0.97619;82pkt 82fpkt"];
8409--8581[label="0.0238095;2pkt 2fpkt"];
8409--9649[label="0.97619;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_ip="212.138.109.117" dst_port="80" src_ip="136.228.19.20"/>
    </slice>
    <from sec="1223614810" usec="0"/>
    <to sec="1223615657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_534{
style=filled;
color=gray75;
5194[label="164.25.116.85;d;34pkt 34fpkt", shape=diamond, color=yellow];
5630[label="107.100.249.26;s;29pkt 29fpkt", shape=diamond, color=yellow];
8330[label="164.25.116.85;d;31pkt 31fpkt", shape=hexagon, color=black];
stat534[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.100.249.26:*, 164.25.116.85:80}[85.2941%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9362%)&lt;BR/&gt; 63679: (1.59574%)&lt;BR/&gt; 63443: (1.59574%)&lt;BR/&gt; 63374: (1.59574%)&lt;BR/&gt; 62027: (1.59574%)&gt;];
}
5194--5630[label="1;29pkt 29fpkt"];
5194--8330[label="1;31pkt 31fpkt"];
5630--8330[label="0.896552;26pkt 26fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.116.85" dst_port="80" src_ip="107.100.249.26"/>
    </slice>
    <from sec="1223614825" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_535{
style=filled;
color=gray75;
1681[label="111.100.76.166;d;1pkt 1fpkt", shape=diamond, color=yellow];
8341[label="111.100.76.166;d;1pkt 1fpkt", shape=hexagon, color=black];
stat535[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.200:1028, 111.100.76.166:1040}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1040: (50%)&lt;BR/&gt; 1028: (50%)&gt;];
}
1681--8341[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="111.100.76.166" dst_port="1040" src_ip="212.21.136.200" src_port="1028"/>
    </slice>
    <from sec="1223614840" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_536{
style=filled;
color=gray75;
148[label="136.228.21.150s;2pkt 2fpkt", shape=rectangle, color=red];
1966[label="136.228.233.114;s;487pkt 487fpkt", shape=diamond, color=yellow];
2141[label="213.43.161.231;d;189pkt 189fpkt", shape=diamond, color=yellow];
3425[label="136.228.21.150;s;11pkt 11fpkt", shape=diamond, color=yellow];
5259[label="59.145.16.155;d;36pkt 36fpkt", shape=diamond, color=yellow];
5342[label="142.243.13.180;s;57pkt 57fpkt", shape=diamond, color=yellow];
6337[label="213.43.161.231;d;189pkt 189fpkt", shape=hexagon, color=black];
8343[label="136.228.21.150;s;11pkt 11fpkt", shape=hexagon, color=black];
9643[label="162.73.217.19;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11616[label="162.73.232.139;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11783[label="136.228.21.150;14pkt 14fpkt", shape=pentagon, color=darkviolet];
12257[label="142.243.13.180;57pkt 57fpkt", shape=pentagon, color=darkviolet];
14523[label="136.228.21.150;13pkt 13fpkt", shape=invtriangle, color=brown];
14762[label="142.243.13.180;56pkt 56fpkt", shape=invtriangle, color=brown];
stat536[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.233.114:*, *:80}[48.9041%]&lt;BR/&gt;{*:*, 213.43.161.231:110}[26.4384%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.2174%)&lt;BR/&gt; 110: (20.4348%)&lt;BR/&gt; 52279: (3.52174%)&lt;BR/&gt; 53: (3.52174%)&lt;BR/&gt; 0: (2.43478%)&gt;];
}
148--2141[label="1;2pkt 2fpkt"];
148--3425[label="1;2pkt 2fpkt"];
148--6337[label="1;2pkt 2fpkt"];
148--8343[label="1;2pkt 2fpkt"];
148--11783[label="1;2pkt 2fpkt"];
148--14523[label="1;2pkt 2fpkt"];
1966--1990[label="0.0215983;10pkt 10fpkt"];
1966--2119[label="0.00205339;1pkt 1fpkt"];
1966--2124[label="0.0921053;7pkt 7fpkt"];
1966--2141[label="0.026455;5pkt 5fpkt"];
1966--2157[label="0.00219298;1pkt 1fpkt"];
1966--2158[label="0.0052356;2pkt 2fpkt"];
1966--2739[label="0.00389105;1pkt 1fpkt"];
1966--2768[label="0.00813008;2pkt 2fpkt"];
1966--2818[label="0.00371747;1pkt 1fpkt"];
1966--2821[label="0.00330033;1pkt 1fpkt"];
1966--3184[label="0.00205339;1pkt 1fpkt"];
1966--3192[label="0.00205339;1pkt 1fpkt"];
1966--3228[label="0.00460829;1pkt 1fpkt"];
1966--3484[label="0.909091;40pkt 40fpkt"];
1966--3800[label="0.0243902;2pkt 2fpkt"];
1966--3806[label="0.0277778;6pkt 6fpkt"];
1966--3875[label="0.0178571;2pkt 2fpkt"];
1966--4296[label="0.0222222;2pkt 2fpkt"];
1966--4352[label="0.00675676;1pkt 1fpkt"];
1966--4732[label="0.0546875;7pkt 7fpkt"];
1966--4828[label="0.0263158;1pkt 1fpkt"];
1966--5001[label="0.00462963;1pkt 1fpkt"];
1966--5058[label="0.00205339;1pkt 1fpkt"];
1966--5059[label="0.00205339;1pkt 1fpkt"];
1966--5078[label="0.00205339;1pkt 1fpkt"];
1966--5166[label="0.0487805;2pkt 2fpkt"];
1966--5259[label="1;36pkt 36fpkt"];
1966--5511[label="0.00234192;1pkt 1fpkt"];
1966--5516[label="0.00217391;1pkt 1fpkt"];
1966--5554[label="0.121951;5pkt 5fpkt"];
1966--5981[label="0.0164271;8pkt 8fpkt"];
1966--6066[label="0.00410678;2pkt 2fpkt"];
1966--6291[label="1;91pkt 91fpkt"];
1966--6294[label="0.00205339;1pkt 1fpkt"];
1966--6337[label="0.026455;5pkt 5fpkt"];
1966--6432[label="0.0212766;1pkt 1fpkt"];
1966--6556[label="0.0130719;2pkt 2fpkt"];
1966--6580[label="0.00555556;1pkt 1fpkt"];
1966--6626[label="0.010101;1pkt 1fpkt"];
1966--6838[label="0.00205339;1pkt 1fpkt"];
1966--6844[label="0.00205339;1pkt 1fpkt"];
1966--6929[label="0.00371747;1pkt 1fpkt"];
1966--7042[label="0.888889;32pkt 32fpkt"];
1966--7196[label="0.00632911;1pkt 1fpkt"];
1966--7200[label="0.00793651;2pkt 2fpkt"];
1966--7247[label="0.03125;5pkt 5fpkt"];
1966--7730[label="0.00616016;3pkt 3fpkt"];
1966--7825[label="0.0044843;1pkt 1fpkt"];
1966--7885[label="0.0327869;2pkt 2fpkt"];
1966--7947[label="0.020202;2pkt 2fpkt"];
1966--8135[label="0.0421941;20pkt 20fpkt"];
1966--8183[label="0.0165877;7pkt 7fpkt"];
1966--8184[label="0.00205339;1pkt 1fpkt"];
1966--8216[label="0.00205339;1pkt 1fpkt"];
1966--8220[label="0.00955414;3pkt 3fpkt"];
1966--8519[label="0.0123457;1pkt 1fpkt"];
1966--8546[label="0.00205339;1pkt 1fpkt"];
1966--8571[label="0.00205339;1pkt 1fpkt"];
1966--8621[label="0.121951;5pkt 5fpkt"];
1966--8879[label="0.00205339;1pkt 1fpkt"];
1966--9025[label="0.020202;2pkt 2fpkt"];
1966--9067[label="0.00205339;1pkt 1fpkt"];
1966--9178[label="0.00205339;1pkt 1fpkt"];
1966--9218[label="0.00205339;1pkt 1fpkt"];
1966--9252[label="0.00205339;1pkt 1fpkt"];
1966--11249[label="1;487pkt 487fpkt"];
2141--2265[label="0.010582;2pkt 2fpkt"];
2141--2311[label="0.0422535;3pkt 3fpkt"];
2141--3425[label="1;11pkt 11fpkt"];
2141--3788[label="0.00990099;1pkt 1fpkt"];
2141--4300[label="0.02;1pkt 1fpkt"];
2141--4342[label="0.12844;14pkt 14fpkt"];
2141--4785[label="0.0689655;2pkt 2fpkt"];
2141--5342[label="0.0350877;2pkt 2fpkt"];
2141--6291[label="0.010989;1pkt 1fpkt"];
2141--6337[label="1;189pkt 189fpkt"];
2141--6463[label="0.047619;9pkt 9fpkt"];
2141--6500[label="0.015873;3pkt 3fpkt"];
2141--6591[label="0.00529101;1pkt 1fpkt"];
2141--7088[label="0.0529101;10pkt 10fpkt"];
2141--7370[label="0.0422535;3pkt 3fpkt"];
2141--8145[label="0.015873;3pkt 3fpkt"];
2141--8259[label="0.00990099;1pkt 1fpkt"];
2141--8343[label="1;11pkt 11fpkt"];
2141--8562[label="0.010582;2pkt 2fpkt"];
2141--8992[label="0.0529101;10pkt 10fpkt"];
2141--9051[label="0.015873;3pkt 3fpkt"];
2141--9053[label="0.015873;3pkt 3fpkt"];
2141--9082[label="0.01;1pkt 1fpkt"];
2141--9643[label="0.928571;13pkt 13fpkt"];
2141--10344[label="0.25;2pkt 2fpkt"];
2141--10872[label="0.0846561;16pkt 16fpkt"];
2141--11173[label="0.0512821;2pkt 2fpkt"];
2141--11249[label="0.026455;5pkt 5fpkt"];
2141--11616[label="0.857143;12pkt 12fpkt"];
2141--11783[label="0.928571;13pkt 13fpkt"];
2141--11950[label="0.131579;5pkt 5fpkt"];
2141--12166[label="0.027027;1pkt 1fpkt"];
2141--12257[label="0.0350877;2pkt 2fpkt"];
2141--13803[label="0.333333;3pkt 3fpkt"];
2141--14064[label="0.0846561;16pkt 16fpkt"];
2141--14523[label="0.923077;12pkt 12fpkt"];
2141--14762[label="0.0357143;2pkt 2fpkt"];
2141--15687[label="0.0846561;16pkt 16fpkt"];
3425--6337[label="1;11pkt 11fpkt"];
3425--8343[label="1;11pkt 11fpkt"];
3425--11783[label="1;11pkt 11fpkt"];
3425--14523[label="0.909091;10pkt 10fpkt"];
5259--11249[label="1;36pkt 36fpkt"];
5342--6337[label="0.0350877;2pkt 2fpkt"];
5342--12257[label="1;57pkt 57fpkt"];
5342--14762[label="1;56pkt 56fpkt"];
6337--6463[label="0.047619;9pkt 9fpkt"];
6337--6500[label="0.015873;3pkt 3fpkt"];
6337--6591[label="0.00529101;1pkt 1fpkt"];
6337--7088[label="0.0529101;10pkt 10fpkt"];
6337--7370[label="0.0422535;3pkt 3fpkt"];
6337--8145[label="0.015873;3pkt 3fpkt"];
6337--8259[label="0.00990099;1pkt 1fpkt"];
6337--8343[label="1;11pkt 11fpkt"];
6337--8562[label="0.010582;2pkt 2fpkt"];
6337--8992[label="0.0529101;10pkt 10fpkt"];
6337--9051[label="0.015873;3pkt 3fpkt"];
6337--9053[label="0.015873;3pkt 3fpkt"];
6337--9082[label="0.01;1pkt 1fpkt"];
6337--9643[label="0.928571;13pkt 13fpkt"];
6337--10344[label="0.25;2pkt 2fpkt"];
6337--10872[label="0.0846561;16pkt 16fpkt"];
6337--11173[label="0.0512821;2pkt 2fpkt"];
6337--11249[label="0.026455;5pkt 5fpkt"];
6337--11616[label="0.857143;12pkt 12fpkt"];
6337--11783[label="0.928571;13pkt 13fpkt"];
6337--11950[label="0.131579;5pkt 5fpkt"];
6337--12166[label="0.027027;1pkt 1fpkt"];
6337--12257[label="0.0350877;2pkt 2fpkt"];
6337--13803[label="0.333333;3pkt 3fpkt"];
6337--14064[label="0.0846561;16pkt 16fpkt"];
6337--14523[label="0.923077;12pkt 12fpkt"];
6337--14762[label="0.0357143;2pkt 2fpkt"];
6337--15687[label="0.0846561;16pkt 16fpkt"];
8343--11783[label="1;11pkt 11fpkt"];
8343--14523[label="0.909091;10pkt 10fpkt"];
11783--14523[label="1;13pkt 13fpkt"];
12257--14762[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.228.233.114"/>
      <filter dst_ip="213.43.161.231" dst_port="110"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_537{
style=filled;
color=gray75;
2155[label="136.228.115.221;s;322pkt 322fpkt", shape=diamond, color=yellow];
4814[label="73.163.0.16;d;28pkt 28fpkt", shape=diamond, color=yellow];
4815[label="203.170.228.4;d;100pkt 100fpkt", shape=diamond, color=yellow];
7221[label="136.228.115.221;s;322pkt 322fpkt", shape=hexagon, color=black];
8357[label="203.170.228.4;d;100pkt 100fpkt", shape=hexagon, color=black];
12834[label="136.228.115.221;321pkt 321fpkt", shape=pentagon, color=darkviolet];
stat537[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.115.221:*, 203.170.228.4:80}[31.0559%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3359: (0.209556%)&lt;BR/&gt; 3357: (0.209556%)&lt;BR/&gt; 3355: (0.209556%)&lt;BR/&gt; 3345: (0.209556%)&gt;];
}
2155--4814[label="1;28pkt 28fpkt"];
2155--4815[label="1;100pkt 100fpkt"];
2155--7221[label="1;322pkt 322fpkt"];
2155--8357[label="1;100pkt 100fpkt"];
2155--12834[label="1;321pkt 321fpkt"];
4814--7221[label="1;28pkt 28fpkt"];
4814--12834[label="1;28pkt 28fpkt"];
4815--7221[label="1;100pkt 100fpkt"];
4815--8357[label="1;100pkt 100fpkt"];
4815--12834[label="1;100pkt 100fpkt"];
7221--8357[label="1;100pkt 100fpkt"];
7221--12834[label="1;321pkt 321fpkt"];
8357--12834[label="1;100pkt 100fpkt"];
</description>
    <slice>
      <filter dst_ip="203.170.228.4" dst_port="80" src_ip="136.228.115.221"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_538{
style=filled;
color=gray75;
27[label="212.138.109.27s;1pkt 1fpkt", shape=rectangle, color=red];
875[label="213.33.128.10;d;37pkt 37fpkt", shape=diamond, color=yellow];
2554[label="212.138.109.27;s;5pkt 5fpkt", shape=diamond, color=yellow];
5965[label="213.33.128.10;d;37pkt 37fpkt", shape=hexagon, color=black];
8362[label="212.138.109.27;s;5pkt 5fpkt", shape=hexagon, color=black];
stat538[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.148.108.243:80, 213.33.128.10:*}[31.7073%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4029: (2.94118%)&lt;BR/&gt; 59899: (1.17647%)&lt;BR/&gt; 4775: (1.17647%)&lt;BR/&gt; 4738: (1.17647%)&gt;];
}
27--875[label="1;1pkt 1fpkt"];
27--2554[label="1;1pkt 1fpkt"];
27--5965[label="1;1pkt 1fpkt"];
27--8362[label="1;1pkt 1fpkt"];
27--9194[label="1;1pkt 1fpkt"];
27--9198[label="1;1pkt 1fpkt"];
27--9234[label="1;1pkt 1fpkt"];
27--9268[label="1;1pkt 1fpkt"];
875--2554[label="0.2;1pkt 1fpkt"];
875--4244[label="0.351351;13pkt 13fpkt"];
875--4674[label="0.0540541;2pkt 2fpkt"];
875--5610[label="0.0810811;3pkt 3fpkt"];
875--5965[label="1;37pkt 37fpkt"];
875--7520[label="0.351351;13pkt 13fpkt"];
875--8362[label="0.2;1pkt 1fpkt"];
875--8654[label="0.0810811;3pkt 3fpkt"];
875--9163[label="0.027027;1pkt 1fpkt"];
875--9194[label="0.0810811;3pkt 3fpkt"];
875--9198[label="0.027027;1pkt 1fpkt"];
875--9234[label="0.0810811;3pkt 3fpkt"];
875--9268[label="0.0810811;3pkt 3fpkt"];
875--14510[label="0.0810811;3pkt 3fpkt"];
2554--5965[label="0.2;1pkt 1fpkt"];
2554--7162[label="0.2;1pkt 1fpkt"];
2554--8362[label="1;5pkt 5fpkt"];
2554--9194[label="0.2;1pkt 1fpkt"];
2554--9198[label="0.2;1pkt 1fpkt"];
2554--9234[label="0.2;1pkt 1fpkt"];
2554--9268[label="0.2;1pkt 1fpkt"];
5965--7520[label="0.351351;13pkt 13fpkt"];
5965--8362[label="0.2;1pkt 1fpkt"];
5965--8654[label="0.0810811;3pkt 3fpkt"];
5965--9163[label="0.027027;1pkt 1fpkt"];
5965--9194[label="0.0810811;3pkt 3fpkt"];
5965--9198[label="0.027027;1pkt 1fpkt"];
5965--9234[label="0.0810811;3pkt 3fpkt"];
5965--9268[label="0.0810811;3pkt 3fpkt"];
5965--14510[label="0.0810811;3pkt 3fpkt"];
8362--9194[label="0.2;1pkt 1fpkt"];
8362--9198[label="0.2;1pkt 1fpkt"];
8362--9234[label="0.2;1pkt 1fpkt"];
8362--9268[label="0.2;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.128.10" src_ip="205.148.108.243" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_539{
style=filled;
color=gray75;
4390[label="136.228.93.232;s;77pkt 77fpkt", shape=diamond, color=yellow];
4902[label="210.71.210.48;d;62pkt 62fpkt", shape=diamond, color=yellow];
8373[label="136.228.93.232;s;77pkt 77fpkt", shape=hexagon, color=black];
12984[label="136.228.93.232;79pkt 79fpkt", shape=pentagon, color=darkviolet];
stat539[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.93.232:*, 210.71.210.48:80}[78.481%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.5932%)&lt;BR/&gt; 25: (4.40678%)&lt;BR/&gt; 35526: (0.677966%)&lt;BR/&gt; 35525: (0.677966%)&lt;BR/&gt; 35523: (0.677966%)&gt;];
}
4390--4718[label="0.012987;1pkt 1fpkt"];
4390--4902[label="1;62pkt 62fpkt"];
4390--5110[label="0.012987;1pkt 1fpkt"];
4390--8261[label="0.012987;1pkt 1fpkt"];
4390--8373[label="1;77pkt 77fpkt"];
4390--8586[label="0.012987;1pkt 1fpkt"];
4390--8593[label="0.012987;1pkt 1fpkt"];
4390--9196[label="0.012987;1pkt 1fpkt"];
4390--12984[label="1;77pkt 77fpkt"];
4902--8373[label="1;62pkt 62fpkt"];
4902--12984[label="1;62pkt 62fpkt"];
8373--8586[label="0.012987;1pkt 1fpkt"];
8373--8593[label="0.012987;1pkt 1fpkt"];
8373--9196[label="0.012987;1pkt 1fpkt"];
8373--12984[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="210.71.210.48" dst_port="80" src_ip="136.228.93.232"/>
    </slice>
    <from sec="1223615081" usec="0"/>
    <to sec="1223615649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_540{
style=filled;
color=gray75;
3137[label="136.228.94.129;s;253pkt 253fpkt", shape=diamond, color=yellow];
3582[label="213.43.77.73;d;665pkt 665fpkt", shape=diamond, color=yellow];
4093[label="136.228.81.42;s;102pkt 102fpkt", shape=diamond, color=yellow];
7065[label="136.228.94.129;s;250pkt 250fpkt", shape=hexagon, color=black];
8049[label="136.228.81.42;s;102pkt 102fpkt", shape=hexagon, color=black];
8380[label="213.43.77.73;d;665pkt 665fpkt", shape=hexagon, color=black];
10046[label="136.228.81.42;102pkt 102fpkt", shape=pentagon, color=darkviolet];
13649[label="136.228.81.42;102pkt 102fpkt", shape=invtriangle, color=brown];
stat540[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.82.142:*, 213.43.77.73:80}[53.4121%]&lt;BR/&gt;{136.228.94.129:*, 213.43.77.73:80}[20.4724%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6533%)&lt;BR/&gt; 443: (3.34672%)&lt;BR/&gt; 2350: (0.223115%)&lt;BR/&gt; 2348: (0.223115%)&lt;BR/&gt; 2332: (0.223115%)&gt;];
}
3137--3229[label="0.00395257;1pkt 1fpkt"];
3137--3582[label="0.616601;156pkt 156fpkt"];
3137--3738[label="0.00671141;1pkt 1fpkt"];
3137--3799[label="0.00746269;1pkt 1fpkt"];
3137--4730[label="0.016129;2pkt 2fpkt"];
3137--5206[label="0.010989;1pkt 1fpkt"];
3137--6549[label="0.02;2pkt 2fpkt"];
3137--7065[label="1;250pkt 250fpkt"];
3137--7208[label="0.00671141;1pkt 1fpkt"];
3137--7808[label="0.00395257;1pkt 1fpkt"];
3137--8380[label="0.616601;156pkt 156fpkt"];
3137--8616[label="0.00746269;1pkt 1fpkt"];
3582--4093[label="1;102pkt 102fpkt"];
3582--7065[label="0.624;156pkt 156fpkt"];
3582--7420[label="0.714894;336pkt 336fpkt"];
3582--8049[label="1;102pkt 102fpkt"];
3582--8380[label="1;665pkt 665fpkt"];
3582--10046[label="1;102pkt 102fpkt"];
3582--13649[label="1;102pkt 102fpkt"];
4093--8049[label="1;102pkt 102fpkt"];
4093--8380[label="1;102pkt 102fpkt"];
4093--10046[label="1;102pkt 102fpkt"];
4093--13649[label="1;102pkt 102fpkt"];
7065--7808[label="0.004;1pkt 1fpkt"];
7065--8380[label="0.624;156pkt 156fpkt"];
7065--8616[label="0.00746269;1pkt 1fpkt"];
8049--8380[label="1;102pkt 102fpkt"];
8049--10046[label="1;102pkt 102fpkt"];
8049--13649[label="1;102pkt 102fpkt"];
8380--10046[label="1;102pkt 102fpkt"];
8380--13649[label="1;102pkt 102fpkt"];
10046--13649[label="1;102pkt 102fpkt"];
</description>
    <slice>
      <filter dst_ip="213.43.77.73" dst_port="80" src_ip="136.228.82.142"/>
      <filter dst_ip="213.43.77.73" dst_port="80" src_ip="136.228.94.129"/>
    </slice>
    <from sec="1223615081" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_541{
style=filled;
color=gray75;
4014[label="213.42.166.74;s;46pkt 46fpkt", shape=diamond, color=yellow];
4049[label="195.136.229.33;d;43pkt 43fpkt", shape=diamond, color=yellow];
8391[label="195.136.229.33;d;43pkt 43fpkt", shape=hexagon, color=black];
stat541[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.42.166.74:80, 195.136.229.33:*}[93.4783%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6136: (1.13636%)&lt;BR/&gt; 5731: (1.13636%)&lt;BR/&gt; 5730: (1.13636%)&lt;BR/&gt; 5727: (1.13636%)&gt;];
}
4014--4049[label="1;43pkt 43fpkt"];
4014--4382[label="0.0217391;1pkt 1fpkt"];
4014--8010[label="0.0217391;1pkt 1fpkt"];
4014--8391[label="1;43pkt 43fpkt"];
4014--9103[label="0.0217391;1pkt 1fpkt"];
4014--9194[label="0.369565;17pkt 17fpkt"];
4014--9234[label="0.369565;17pkt 17fpkt"];
4014--9268[label="0.369565;17pkt 17fpkt"];
4049--8391[label="1;43pkt 43fpkt"];
4049--9194[label="0.395349;17pkt 17fpkt"];
4049--9234[label="0.395349;17pkt 17fpkt"];
4049--9268[label="0.395349;17pkt 17fpkt"];
8391--9194[label="0.395349;17pkt 17fpkt"];
8391--9234[label="0.395349;17pkt 17fpkt"];
8391--9268[label="0.395349;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="195.136.229.33" src_ip="213.42.166.74" src_port="80"/>
    </slice>
    <from sec="1223615126" usec="0"/>
    <to sec="1223615484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_542{
style=filled;
color=gray75;
3955[label="142.243.51.55;s;88pkt 88fpkt", shape=diamond, color=yellow];
5252[label="76.174.8.23;d;73pkt 73fpkt", shape=diamond, color=yellow];
8396[label="76.174.8.23;d;73pkt 73fpkt", shape=hexagon, color=black];
9594[label="142.243.51.17;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat542[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:443, 76.174.8.23:*}[53.6765%]&lt;BR/&gt;{142.243.51.55:443, *:*}[48.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (45.6693%)&lt;BR/&gt; 80: (3.14961%)&lt;BR/&gt; 0: (2.3622%)&lt;BR/&gt; 1156: (0.590551%)&lt;BR/&gt; 1155: (0.590551%)&gt;];
}
3955--4200[label="0.377778;17pkt 17fpkt"];
3955--4821[label="0.25;18pkt 18fpkt"];
3955--5252[label="0.356164;26pkt 26fpkt"];
3955--8366[label="1;88pkt 88fpkt"];
3955--8396[label="0.356164;26pkt 26fpkt"];
3955--8575[label="0.377778;17pkt 17fpkt"];
3955--8646[label="0.238636;21pkt 21fpkt"];
3955--10273[label="1;88pkt 88fpkt"];
5252--8058[label="0.0487805;2pkt 2fpkt"];
5252--8366[label="0.356164;26pkt 26fpkt"];
5252--8396[label="1;73pkt 73fpkt"];
5252--9594[label="0.95;19pkt 19fpkt"];
5252--10273[label="0.356164;26pkt 26fpkt"];
8396--9594[label="0.95;19pkt 19fpkt"];
8396--10273[label="0.356164;26pkt 26fpkt"];
</description>
    <slice>
      <filter src_ip="142.243.51.55" src_port="443"/>
      <filter dst_ip="76.174.8.23" src_port="443"/>
    </slice>
    <from sec="1223615016" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_543{
style=filled;
color=gray75;
3930[label="136.228.104.133;s;36pkt 36fpkt", shape=diamond, color=yellow];
4481[label="72.6.122.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
8411[label="72.6.122.13;d;1pkt 1fpkt", shape=hexagon, color=black];
stat543[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.104.133:*, 194.8.20.117:80}[38.8889%]&lt;BR/&gt;{136.228.104.133:*, 202.80.248.220:80}[38.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4643: (3.94737%)&lt;BR/&gt; 4750: (1.31579%)&lt;BR/&gt; 4748: (1.31579%)&lt;BR/&gt; 4744: (1.31579%)&gt;];
}
3930--4481[label="1;1pkt 1fpkt"];
3930--8411[label="1;1pkt 1fpkt"];
4481--8411[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.80.248.220" dst_port="80" src_ip="136.228.104.133"/>
      <filter dst_ip="194.8.20.117" dst_port="80" src_ip="136.228.104.133"/>
    </slice>
    <from sec="1223614897" usec="0"/>
    <to sec="1223615607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_544{
style=filled;
color=gray75;
4563[label="71.246.21.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
8424[label="71.246.21.113;s;1pkt 1fpkt", shape=hexagon, color=black];
stat544[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.246.21.113:2201, 212.21.132.27:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2201: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4563--8424[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.132.27" dst_port="80" src_ip="71.246.21.113" src_port="2201"/>
    </slice>
    <from sec="1223615310" usec="0"/>
    <to sec="1223615376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_545{
style=filled;
color=gray75;
5282[label="71.36.148.244;s;1pkt 1fpkt", shape=diamond, color=yellow];
8430[label="71.36.148.244;s;1pkt 1fpkt", shape=hexagon, color=black];
stat545[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.36.148.244:2944, 142.243.47.213:62170}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62170: (50%)&lt;BR/&gt; 2944: (50%)&gt;];
}
5282--8430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.47.213" dst_port="62170" src_ip="71.36.148.244" src_port="2944"/>
    </slice>
    <from sec="1223615318" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_547{
style=filled;
color=gray75;
5299[label="205.102.14.208;s;62pkt 62fpkt", shape=diamond, color=yellow];
8447[label="205.102.14.208;s;44pkt 44fpkt", shape=hexagon, color=black];
stat547[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.102.14.208:*, 212.21.132.27:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4750: (0.943396%)&lt;BR/&gt; 4654: (0.943396%)&lt;BR/&gt; 4632: (0.943396%)&lt;BR/&gt; 4598: (0.943396%)&gt;];
}
5299--8447[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.132.27" dst_port="80" src_ip="205.102.14.208"/>
    </slice>
    <from sec="1223615359" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
5269[label="136.228.119.17;s;14pkt 14fpkt", shape=diamond, color=yellow];
5302[label="142.4.174.204;d;11pkt 11fpkt", shape=diamond, color=yellow];
8416[label="136.228.119.17;s;13pkt 13fpkt", shape=hexagon, color=black];
8449[label="142.4.174.204;d;11pkt 11fpkt", shape=hexagon, color=black];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.119.17:*, 142.4.174.204:80}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3473: (4.08163%)&lt;BR/&gt; 3471: (4.08163%)&lt;BR/&gt; 3457: (4.08163%)&lt;BR/&gt; 3455: (4.08163%)&gt;];
}
5269--5302[label="0.909091;10pkt 10fpkt"];
5269--8416[label="1;13pkt 13fpkt"];
5269--8449[label="0.909091;10pkt 10fpkt"];
5302--8416[label="0.909091;10pkt 10fpkt"];
5302--8449[label="1;11pkt 11fpkt"];
8416--8449[label="0.909091;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="142.4.174.204" dst_port="80" src_ip="136.228.119.17"/>
    </slice>
    <from sec="1223615285" usec="0"/>
    <to sec="1223615594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_549{
style=filled;
color=gray75;
4976[label="142.243.221.124;s;2pkt 2fpkt", shape=diamond, color=yellow];
4977[label="192.105.70.7;d;1pkt 1fpkt", shape=diamond, color=yellow];
8116[label="142.243.221.124;s;2pkt 2fpkt", shape=hexagon, color=black];
8459[label="192.105.70.7;d;1pkt 1fpkt", shape=hexagon, color=black];
stat549[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.221.124:1638, 192.105.70.7:80}[50%]&lt;BR/&gt;{142.243.221.124:1636, 192.105.65.96:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1638: (33.3333%)&lt;BR/&gt; 1636: (16.6667%)&gt;];
}
4976--4977[label="1;1pkt 1fpkt"];
4976--6940[label="0.5;1pkt 1fpkt"];
4976--8116[label="1;2pkt 2fpkt"];
4976--8459[label="1;1pkt 1fpkt"];
4977--8116[label="1;1pkt 1fpkt"];
4977--8459[label="1;1pkt 1fpkt"];
8116--8459[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.105.65.96" dst_port="80" src_ip="142.243.221.124" src_port="1636"/>
      <filter dst_ip="192.105.70.7" dst_port="80" src_ip="142.243.221.124" src_port="1638"/>
    </slice>
    <from sec="1223615396" usec="0"/>
    <to sec="1223615421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_550{
style=filled;
color=gray75;
4988[label="204.21.92.116;s;54pkt 54fpkt", shape=diamond, color=yellow];
8462[label="204.21.92.116;s;54pkt 54fpkt", shape=hexagon, color=black];
11263[label="204.21.92.116;53pkt 53fpkt", shape=pentagon, color=darkviolet];
stat550[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.21.92.116:*, 212.21.138.195:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58293: (0.931677%)&lt;BR/&gt; 56974: (0.931677%)&lt;BR/&gt; 55512: (0.931677%)&lt;BR/&gt; 51633: (0.931677%)&gt;];
}
4988--8462[label="1;54pkt 54fpkt"];
4988--8514[label="1;54pkt 54fpkt"];
4988--11263[label="1;53pkt 53fpkt"];
8462--8514[label="1;54pkt 54fpkt"];
8462--11263[label="1;53pkt 53fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" dst_port="80" src_ip="204.21.92.116"/>
    </slice>
    <from sec="1223615400" usec="0"/>
    <to sec="1223615455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
5324[label="108.53.2.219;d;1pkt 1fpkt", shape=diamond, color=yellow];
8463[label="108.53.2.219;d;1pkt 1fpkt", shape=hexagon, color=black];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.233.222:1027, 108.53.2.219:55336}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55336: (50%)&lt;BR/&gt; 1027: (50%)&gt;];
}
5324--8463[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="108.53.2.219" dst_port="55336" src_ip="142.243.233.222" src_port="1027"/>
    </slice>
    <from sec="1223615401" usec="0"/>
    <to sec="1223615509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_552{
style=filled;
color=gray75;
3587[label="195.162.157.65;s;123pkt 123fpkt", shape=diamond, color=yellow];
8475[label="195.162.157.65;s;123pkt 123fpkt", shape=hexagon, color=black];
stat552[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.162.157.65:80, 136.228.122.66:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58470: (0.406504%)&lt;BR/&gt; 58469: (0.406504%)&lt;BR/&gt; 58468: (0.406504%)&lt;BR/&gt; 58467: (0.406504%)&gt;];
}
3587--8475[label="1;123pkt 123fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.66" src_ip="195.162.157.65" src_port="80"/>
    </slice>
    <from sec="1223615426" usec="0"/>
    <to sec="1223615491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_554{
style=filled;
color=gray75;
4913[label="136.228.81.194;d;31pkt 31fpkt", shape=diamond, color=yellow];
5040[label="195.160.197.173;s;28pkt 28fpkt", shape=diamond, color=yellow];
8480[label="195.160.197.173;s;28pkt 28fpkt", shape=hexagon, color=black];
stat554[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.160.197.173:80, 136.228.81.194:*}[90.3226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1175: (1.72414%)&lt;BR/&gt; 1173: (1.72414%)&lt;BR/&gt; 1171: (1.72414%)&lt;BR/&gt; 1169: (1.72414%)&gt;];
}
4913--5040[label="1;28pkt 28fpkt"];
4913--8480[label="1;28pkt 28fpkt"];
4913--9442[label="0.0645161;2pkt 2fpkt"];
5040--8480[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.81.194" src_ip="195.160.197.173" src_port="80"/>
    </slice>
    <from sec="1223615333" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_555{
style=filled;
color=gray75;
5361[label="136.228.69.50;d;4pkt 4fpkt", shape=diamond, color=yellow];
5362[label="195.146.136.158;s;4pkt 4fpkt", shape=diamond, color=yellow];
8484[label="136.228.69.50;d;4pkt 4fpkt", shape=hexagon, color=black];
11921[label="195.146.136.158;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat555[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.146.136.158:80, 136.228.69.50:57773}[25%]&lt;BR/&gt;{195.146.136.158:80, 136.228.69.50:57774}[25%]&lt;BR/&gt;{195.146.136.158:80, 136.228.69.50:57775}[25%]&lt;BR/&gt;{195.146.136.158:80, 136.228.69.50:57776}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57776: (13.3333%)&lt;BR/&gt; 57775: (13.3333%)&lt;BR/&gt; 57774: (13.3333%)&lt;BR/&gt; 57773: (10%)&gt;];
}
5361--5362[label="1;4pkt 4fpkt"];
5361--8484[label="1;4pkt 4fpkt"];
5361--11921[label="1;3pkt 3fpkt"];
5362--8484[label="1;4pkt 4fpkt"];
5362--11921[label="1;3pkt 3fpkt"];
8484--11921[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.69.50" dst_port="57776" src_ip="195.146.136.158" src_port="80"/>
      <filter dst_ip="136.228.69.50" dst_port="57775" src_ip="195.146.136.158" src_port="80"/>
      <filter dst_ip="136.228.69.50" dst_port="57774" src_ip="195.146.136.158" src_port="80"/>
      <filter dst_ip="136.228.69.50" dst_port="57773" src_ip="195.146.136.158" src_port="80"/>
    </slice>
    <from sec="1223615449" usec="0"/>
    <to sec="1223615472" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_556{
style=filled;
color=gray75;
5371[label="104.243.242.6;s;1pkt 1fpkt", shape=diamond, color=yellow];
8487[label="104.243.242.6;s;1pkt 1fpkt", shape=hexagon, color=black];
stat556[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.242.6:80, 136.228.122.66:57718}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57718: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5371--8487[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.66" dst_port="57718" src_ip="104.243.242.6" src_port="80"/>
    </slice>
    <from sec="1223615454" usec="0"/>
    <to sec="1223615517" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_557{
style=filled;
color=gray75;
5395[label="136.228.66.48;d;91pkt 91fpkt", shape=diamond, color=yellow];
5396[label="73.244.241.89;s;91pkt 91fpkt", shape=diamond, color=yellow];
8495[label="136.228.66.48;d;48pkt 48fpkt", shape=hexagon, color=black];
8765[label="73.244.241.89;s;91pkt 91fpkt", shape=hexagon, color=black];
10854[label="73.244.241.89;91pkt 91fpkt", shape=pentagon, color=darkviolet];
stat557[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.244.241.89:80, 136.228.66.48:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52806: (0.606796%)&lt;BR/&gt; 52804: (0.606796%)&lt;BR/&gt; 52802: (0.606796%)&lt;BR/&gt; 52801: (0.606796%)&gt;];
}
5395--5396[label="1;91pkt 91fpkt"];
5395--8495[label="1;48pkt 48fpkt"];
5395--8765[label="1;91pkt 91fpkt"];
5395--9198[label="0.472527;43pkt 43fpkt"];
5395--10854[label="1;91pkt 91fpkt"];
5396--8495[label="1;48pkt 48fpkt"];
5396--8765[label="1;91pkt 91fpkt"];
5396--9198[label="0.472527;43pkt 43fpkt"];
5396--10854[label="1;91pkt 91fpkt"];
8495--8765[label="1;48pkt 48fpkt"];
8495--10854[label="1;48pkt 48fpkt"];
8765--9198[label="0.472527;43pkt 43fpkt"];
8765--10854[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.66.48" src_ip="73.244.241.89" src_port="80"/>
    </slice>
    <from sec="1223615463" usec="0"/>
    <to sec="1223615553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_558{
style=filled;
color=gray75;
5404[label="205.141.224.91;d;68pkt 68fpkt", shape=diamond, color=yellow];
5405[label="142.243.9.189;s;68pkt 68fpkt", shape=diamond, color=yellow];
8496[label="205.141.224.91;d;68pkt 68fpkt", shape=hexagon, color=black];
12367[label="142.243.9.189;68pkt 68fpkt", shape=pentagon, color=darkviolet];
14820[label="142.243.9.189;67pkt 67fpkt", shape=invtriangle, color=brown];
16089[label="142.243.9.189;68pkt 68fpkt", shape=invhouse, color=bisque];
stat558[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.9.189:*, 205.141.224.91:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1277: (0.737101%)&lt;BR/&gt; 1276: (0.737101%)&lt;BR/&gt; 1275: (0.737101%)&lt;BR/&gt; 1274: (0.737101%)&gt;];
}
5404--5405[label="1;68pkt 68fpkt"];
5404--8496[label="1;68pkt 68fpkt"];
5404--12367[label="1;68pkt 68fpkt"];
5404--14820[label="1;67pkt 67fpkt"];
5404--16089[label="1;68pkt 68fpkt"];
5405--8496[label="1;68pkt 68fpkt"];
5405--12367[label="1;68pkt 68fpkt"];
5405--14820[label="1;67pkt 67fpkt"];
5405--16089[label="1;68pkt 68fpkt"];
8496--12367[label="1;68pkt 68fpkt"];
8496--14820[label="1;67pkt 67fpkt"];
8496--16089[label="1;68pkt 68fpkt"];
12367--14820[label="1;67pkt 67fpkt"];
12367--16089[label="1;68pkt 68fpkt"];
14820--16089[label="1;67pkt 67fpkt"];
</description>
    <slice>
      <filter dst_ip="205.141.224.91" dst_port="80" src_ip="142.243.9.189"/>
    </slice>
    <from sec="1223615468" usec="0"/>
    <to sec="1223615512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_559{
style=filled;
color=gray75;
5412[label="200.201.130.12;s;101pkt 101fpkt", shape=diamond, color=yellow];
8497[label="200.201.130.12;s;101pkt 101fpkt", shape=hexagon, color=black];
stat559[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.201.130.12:80, 162.73.197.80:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49400: (0.49505%)&lt;BR/&gt; 49399: (0.49505%)&lt;BR/&gt; 49398: (0.49505%)&lt;BR/&gt; 49397: (0.49505%)&gt;];
}
5412--8497[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.197.80" src_ip="200.201.130.12" src_port="80"/>
    </slice>
    <from sec="1223615471" usec="0"/>
    <to sec="1223615513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_560{
style=filled;
color=gray75;
5426[label="213.241.230.99;s;4pkt 4fpkt", shape=diamond, color=yellow];
8500[label="213.241.230.99;s;4pkt 4fpkt", shape=hexagon, color=black];
11000[label="213.241.230.99;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat560[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.241.230.99:80, 213.33.63.13:*}[57.1429%]&lt;BR/&gt;{213.241.230.99:80, 142.228.95.17:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 58675: (10%)&lt;BR/&gt; 58673: (10%)&lt;BR/&gt; 58672: (10%)&lt;BR/&gt; 58671: (10%)&gt;];
}
5426--8500[label="1;4pkt 4fpkt"];
5426--11000[label="1;4pkt 4fpkt"];
8500--11000[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" src_ip="213.241.230.99" src_port="80"/>
      <filter dst_ip="142.228.95.17" src_ip="213.241.230.99" src_port="80"/>
    </slice>
    <from sec="1223615253" usec="0"/>
    <to sec="1223615513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_561{
style=filled;
color=gray75;
5398[label="142.226.180.36;s;3pkt 3fpkt", shape=diamond, color=yellow];
5448[label="107.100.252.203;d;1pkt 1fpkt", shape=diamond, color=yellow];
8504[label="107.100.252.203;d;1pkt 1fpkt", shape=hexagon, color=black];
stat561[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.180.36:80, 107.100.252.202:51387}[33.3333%]&lt;BR/&gt;{142.226.180.36:80, 96.16.224.203:42126}[33.3333%]&lt;BR/&gt;{142.226.180.36:80, 107.100.252.203:60192}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60192: (30%)&lt;BR/&gt; 51387: (10%)&lt;BR/&gt; 42126: (10%)&gt;];
}
5398--5448[label="1;1pkt 1fpkt"];
5398--8504[label="1;1pkt 1fpkt"];
5448--8504[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.252.203" dst_port="60192" src_ip="142.226.180.36" src_port="80"/>
      <filter dst_ip="96.16.224.203" dst_port="42126" src_ip="142.226.180.36" src_port="80"/>
      <filter dst_ip="107.100.252.202" dst_port="51387" src_ip="142.226.180.36" src_port="80"/>
    </slice>
    <from sec="1223615464" usec="0"/>
    <to sec="1223615515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_562{
style=filled;
color=gray75;
5460[label="107.137.214.45;d;6pkt 6fpkt", shape=diamond, color=yellow];
8509[label="107.137.214.45;d;6pkt 6fpkt", shape=hexagon, color=black];
stat562[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.200:*, 107.137.214.45:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2223: (8.33333%)&lt;BR/&gt; 2222: (8.33333%)&lt;BR/&gt; 2220: (8.33333%)&lt;BR/&gt; 2219: (8.33333%)&gt;];
}
5460--8509[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="107.137.214.45" dst_port="80" src_ip="212.21.136.200"/>
    </slice>
    <from sec="1223615516" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_564{
style=filled;
color=gray75;
2709[label="18.202.43.154;s;1pkt 1fpkt", shape=diamond, color=yellow];
8565[label="18.202.43.154;s;1pkt 1fpkt", shape=hexagon, color=black];
11855[label="18.202.43.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14557[label="18.202.43.154;1pkt 1fpkt", shape=invtriangle, color=brown];
15940[label="18.202.43.154;1pkt 1fpkt", shape=invhouse, color=bisque];
stat564[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.202.43.154:10036, 164.25.70.80:20}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10036: (50%)&lt;BR/&gt; 20: (50%)&gt;];
}
2709--8528[label="1;1pkt 1fpkt"];
2709--8565[label="1;1pkt 1fpkt"];
2709--11855[label="1;1pkt 1fpkt"];
2709--14557[label="1;1pkt 1fpkt"];
2709--15940[label="1;1pkt 1fpkt"];
8565--11855[label="1;1pkt 1fpkt"];
8565--14557[label="1;1pkt 1fpkt"];
8565--15940[label="1;1pkt 1fpkt"];
11855--14557[label="1;1pkt 1fpkt"];
11855--15940[label="1;1pkt 1fpkt"];
14557--15940[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.70.80" dst_port="20" src_ip="18.202.43.154" src_port="10036"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_565{
style=filled;
color=gray75;
5084[label="136.228.66.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
5085[label="21.20.253.198;s;1pkt 1fpkt", shape=diamond, color=yellow];
8578[label="21.20.253.198;s;1pkt 1fpkt", shape=hexagon, color=black];
stat565[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.20.253.198:0, 136.228.66.153:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5084--5085[label="1;1pkt 1fpkt"];
5084--8578[label="1;1pkt 1fpkt"];
5085--8578[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.66.153" src_ip="21.20.253.198"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_567{
style=filled;
color=gray75;
3106[label="204.208.11.182;s;67pkt 67fpkt", shape=diamond, color=yellow];
7059[label="204.208.11.182;s;67pkt 67fpkt", shape=hexagon, color=black];
12284[label="204.208.11.182;68pkt 68fpkt", shape=pentagon, color=darkviolet];
14776[label="204.208.11.182;68pkt 68fpkt", shape=invtriangle, color=brown];
16062[label="204.208.11.182;68pkt 68fpkt", shape=invhouse, color=bisque];
stat567[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.208.11.182:*, 212.21.136.148:80}[76.4706%]&lt;BR/&gt;{204.208.11.182:*, 212.21.143.9:80}[22.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5562%)&lt;BR/&gt; 65125: (0.739645%)&lt;BR/&gt; 65089: (0.739645%)&lt;BR/&gt; 63367: (0.739645%)&lt;BR/&gt; 63366: (0.739645%)&gt;];
}
3106--7059[label="1;67pkt 67fpkt"];
3106--8144[label="0.776119;52pkt 52fpkt"];
3106--12284[label="1;67pkt 67fpkt"];
3106--14776[label="1;67pkt 67fpkt"];
3106--16062[label="1;67pkt 67fpkt"];
7059--8144[label="0.776119;52pkt 52fpkt"];
7059--12284[label="1;67pkt 67fpkt"];
7059--14776[label="1;67pkt 67fpkt"];
7059--16062[label="1;67pkt 67fpkt"];
12284--14776[label="1;68pkt 68fpkt"];
12284--16062[label="1;68pkt 68fpkt"];
14776--16062[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.148" dst_port="80" src_ip="204.208.11.182"/>
      <filter dst_ip="212.21.143.9" dst_port="80" src_ip="204.208.11.182"/>
    </slice>
    <from sec="1223615041" usec="0"/>
    <to sec="1223615462" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_568{
style=filled;
color=gray75;
912[label="142.243.33.136;d;8pkt 8fpkt", shape=diamond, color=yellow];
1192[label="70.104.167.152;s;4pkt 4fpkt", shape=diamond, color=yellow];
2811[label="197.1.111.203;s;2pkt 2fpkt", shape=diamond, color=yellow];
3152[label="197.1.111.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
3676[label="197.1.111.195;s;1pkt 1fpkt", shape=diamond, color=yellow];
7123[label="142.243.33.136;d;8pkt 8fpkt", shape=hexagon, color=black];
7124[label="197.1.111.233;s;1pkt 1fpkt", shape=hexagon, color=black];
7464[label="70.104.167.152;s;4pkt 4fpkt", shape=hexagon, color=black];
8603[label="197.1.111.203;s;2pkt 2fpkt", shape=hexagon, color=black];
12463[label="197.1.111.195;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12586[label="197.1.111.203;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat568[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.104.167.152:*, 142.243.33.136:1008}[50%]&lt;BR/&gt;{197.1.111.203:443, 142.243.33.136:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (25.7576%)&lt;BR/&gt; 1008: (24.2424%)&lt;BR/&gt; 3508: (7.57576%)&lt;BR/&gt; 30232: (6.06061%)&lt;BR/&gt; 27133: (6.06061%)&gt;];
}
912--1192[label="1;4pkt 4fpkt"];
912--2811[label="1;2pkt 2fpkt"];
912--3152[label="1;1pkt 1fpkt"];
912--3676[label="1;1pkt 1fpkt"];
912--7123[label="1;8pkt 8fpkt"];
912--7124[label="1;1pkt 1fpkt"];
912--7464[label="1;4pkt 4fpkt"];
912--8603[label="1;2pkt 2fpkt"];
912--12463[label="1;1pkt 1fpkt"];
912--12586[label="1;1pkt 1fpkt"];
1192--7123[label="1;4pkt 4fpkt"];
1192--7464[label="1;4pkt 4fpkt"];
2811--7123[label="1;2pkt 2fpkt"];
2811--8603[label="1;2pkt 2fpkt"];
2811--12586[label="1;1pkt 1fpkt"];
3152--7123[label="1;1pkt 1fpkt"];
3152--7124[label="1;1pkt 1fpkt"];
3676--7123[label="1;1pkt 1fpkt"];
3676--12463[label="1;1pkt 1fpkt"];
7123--7124[label="1;1pkt 1fpkt"];
7123--7464[label="1;4pkt 4fpkt"];
7123--8603[label="1;2pkt 2fpkt"];
7123--12463[label="1;1pkt 1fpkt"];
7123--12586[label="1;1pkt 1fpkt"];
8603--12586[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.33.136" dst_port="1008" src_ip="70.104.167.152"/>
      <filter dst_ip="142.243.33.136" src_ip="197.1.111.203" src_port="443"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.857172,2.02412,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_569{
style=filled;
color=gray75;
2845[label="68.140.46.133;s;1pkt 1fpkt", shape=diamond, color=yellow];
8626[label="68.140.46.133;s;1pkt 1fpkt", shape=hexagon, color=black];
14389[label="68.140.46.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat569[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.140.46.133:1966, 213.42.135.123:40000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40000: (50%)&lt;BR/&gt; 1966: (50%)&gt;];
}
2845--6176[label="1;1pkt 1fpkt"];
2845--8626[label="1;1pkt 1fpkt"];
2845--14389[label="1;1pkt 1fpkt"];
8626--14389[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.135.123" dst_port="40000" src_ip="68.140.46.133" src_port="1966"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_570{
style=filled;
color=gray75;
4742[label="104.93.74.83;s;13pkt 13fpkt", shape=diamond, color=yellow];
8631[label="104.93.74.83;s;13pkt 13fpkt", shape=hexagon, color=black];
10750[label="104.93.74.83;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat570[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.93.74.83:25, 164.25.87.143:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63682: (3.94737%)&lt;BR/&gt; 58920: (3.94737%)&lt;BR/&gt; 55546: (3.94737%)&lt;BR/&gt; 54349: (3.94737%)&gt;];
}
4742--8631[label="1;13pkt 13fpkt"];
4742--9196[label="0.307692;4pkt 4fpkt"];
4742--10750[label="1;12pkt 12fpkt"];
8631--9196[label="0.307692;4pkt 4fpkt"];
8631--10750[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.87.143" src_ip="104.93.74.83" src_port="25"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_571{
style=filled;
color=gray75;
1569[label="194.173.177.32;s;80pkt 80fpkt", shape=diamond, color=yellow];
4757[label="136.228.3.55;d;27pkt 27fpkt", shape=diamond, color=yellow];
4905[label="210.73.69.226;s;12pkt 12fpkt", shape=diamond, color=yellow];
8639[label="136.228.3.55;d;27pkt 27fpkt", shape=hexagon, color=black];
stat571[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.177.32:80, 136.228.94.151:*}[68.6275%]&lt;BR/&gt;{*:80, 136.228.3.55:*}[26.4706%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4128: (1.0274%)&lt;BR/&gt; 4127: (1.0274%)&lt;BR/&gt; 4126: (1.0274%)&lt;BR/&gt; 4121: (1.0274%)&gt;];
}
1569--4757[label="0.185185;5pkt 5fpkt"];
1569--6974[label="1;19pkt 19fpkt"];
1569--7509[label="0.7625;61pkt 61fpkt"];
1569--8639[label="0.185185;5pkt 5fpkt"];
1569--9163[label="0.075;6pkt 6fpkt"];
1569--9194[label="0.1125;9pkt 9fpkt"];
1569--9198[label="0.0625;5pkt 5fpkt"];
1569--9234[label="0.1125;9pkt 9fpkt"];
1569--9268[label="0.1125;9pkt 9fpkt"];
4757--4905[label="1;12pkt 12fpkt"];
4757--8639[label="1;27pkt 27fpkt"];
4757--9163[label="0.037037;1pkt 1fpkt"];
4757--9194[label="0.037037;1pkt 1fpkt"];
4757--9198[label="0.037037;1pkt 1fpkt"];
4757--9234[label="0.037037;1pkt 1fpkt"];
4757--9268[label="0.037037;1pkt 1fpkt"];
4757--10419[label="0.04;1pkt 1fpkt"];
4757--11153[label="0.0555556;1pkt 1fpkt"];
4757--13839[label="0.04;1pkt 1fpkt"];
4757--14208[label="0.0588235;1pkt 1fpkt"];
4757--15563[label="0.0416667;1pkt 1fpkt"];
4905--8639[label="1;12pkt 12fpkt"];
8639--9163[label="0.037037;1pkt 1fpkt"];
8639--9194[label="0.037037;1pkt 1fpkt"];
8639--9198[label="0.037037;1pkt 1fpkt"];
8639--9234[label="0.037037;1pkt 1fpkt"];
8639--9268[label="0.037037;1pkt 1fpkt"];
8639--10419[label="0.04;1pkt 1fpkt"];
8639--11153[label="0.0555556;1pkt 1fpkt"];
8639--13839[label="0.04;1pkt 1fpkt"];
8639--14208[label="0.0588235;1pkt 1fpkt"];
8639--15563[label="0.0416667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.3.55" src_port="80"/>
      <filter dst_ip="136.228.94.151" src_ip="194.173.177.32" src_port="80"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_572{
style=filled;
color=gray75;
5598[label="205.111.16.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
8647[label="205.111.16.182;s;1pkt 1fpkt", shape=hexagon, color=black];
stat572[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.111.16.182:35685, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35685: (50%)&lt;BR/&gt; 1889: (50%)&gt;];
}
5598--8647[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="205.111.16.182" src_port="35685"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.23782,2.08855,503,1 0 0 1 0 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
317[label="142.16.226.27s;1pkt 1fpkt", shape=rectangle, color=red];
2896[label="142.16.226.27;s;63pkt 63fpkt", shape=diamond, color=yellow];
3469[label="71.174.78.4;d;13pkt 13fpkt", shape=diamond, color=yellow];
15408[label="142.16.226.27;63pkt 63fpkt", shape=invhouse, color=bisque];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.226.27:*, 71.174.78.4:80}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.5714%)&lt;BR/&gt; 5190: (2.85714%)&lt;BR/&gt; 443: (2.85714%)&lt;BR/&gt; 56214: (1.42857%)&lt;BR/&gt; 56282: (1.07143%)&gt;];
}
317--435[label="1;1pkt 1fpkt"];
317--479[label="1;1pkt 1fpkt"];
317--537[label="1;1pkt 1fpkt"];
317--557[label="1;1pkt 1fpkt"];
317--2896[label="1;1pkt 1fpkt"];
317--3469[label="1;1pkt 1fpkt"];
317--8655[label="1;1pkt 1fpkt"];
317--15408[label="1;1pkt 1fpkt"];
2896--3164[label="0.027027;1pkt 1fpkt"];
2896--3225[label="0.0634921;4pkt 4fpkt"];
2896--3469[label="1;13pkt 13fpkt"];
2896--3868[label="0.0952381;6pkt 6fpkt"];
2896--7447[label="0.0294118;1pkt 1fpkt"];
2896--8200[label="0.0634921;4pkt 4fpkt"];
2896--8655[label="1;63pkt 63fpkt"];
2896--15408[label="0.984127;62pkt 62fpkt"];
3469--8655[label="1;13pkt 13fpkt"];
3469--15408[label="0.923077;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="71.174.78.4" dst_port="80" src_ip="142.16.226.27"/>
    </slice>
    <from sec="1223614817" usec="0"/>
    <to sec="1223615677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_575{
style=filled;
color=gray75;
5617[label="107.100.242.226;d;46pkt 46fpkt", shape=diamond, color=yellow];
5618[label="153.109.199.129;s;46pkt 46fpkt", shape=diamond, color=yellow];
8657[label="107.100.242.226;d;46pkt 46fpkt", shape=hexagon, color=black];
8658[label="153.109.199.129;s;46pkt 46fpkt", shape=hexagon, color=black];
11454[label="153.109.199.129;49pkt 49fpkt", shape=pentagon, color=darkviolet];
stat575[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.199.129:80, 107.100.242.226:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65183: (1.07296%)&lt;BR/&gt; 64650: (1.07296%)&lt;BR/&gt; 64605: (1.07296%)&lt;BR/&gt; 64382: (1.07296%)&gt;];
}
5617--5618[label="1;46pkt 46fpkt"];
5617--8657[label="1;46pkt 46fpkt"];
5617--8658[label="1;46pkt 46fpkt"];
5617--9163[label="0.0434783;2pkt 2fpkt"];
5617--9194[label="0.0434783;2pkt 2fpkt"];
5617--9198[label="0.0434783;2pkt 2fpkt"];
5617--9234[label="0.0434783;2pkt 2fpkt"];
5617--9268[label="0.0434783;2pkt 2fpkt"];
5617--11454[label="1;46pkt 46fpkt"];
5618--8657[label="1;46pkt 46fpkt"];
5618--8658[label="1;46pkt 46fpkt"];
5618--9163[label="0.0434783;2pkt 2fpkt"];
5618--9194[label="0.0434783;2pkt 2fpkt"];
5618--9198[label="0.0434783;2pkt 2fpkt"];
5618--9234[label="0.0434783;2pkt 2fpkt"];
5618--9268[label="0.0434783;2pkt 2fpkt"];
5618--11454[label="1;46pkt 46fpkt"];
8657--8658[label="1;46pkt 46fpkt"];
8657--9163[label="0.0434783;2pkt 2fpkt"];
8657--9194[label="0.0434783;2pkt 2fpkt"];
8657--9198[label="0.0434783;2pkt 2fpkt"];
8657--9234[label="0.0434783;2pkt 2fpkt"];
8657--9268[label="0.0434783;2pkt 2fpkt"];
8657--11454[label="1;46pkt 46fpkt"];
8658--9163[label="0.0434783;2pkt 2fpkt"];
8658--9194[label="0.0434783;2pkt 2fpkt"];
8658--9198[label="0.0434783;2pkt 2fpkt"];
8658--9234[label="0.0434783;2pkt 2fpkt"];
8658--9268[label="0.0434783;2pkt 2fpkt"];
8658--11454[label="1;46pkt 46fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.242.226" src_ip="153.109.199.129" src_port="80"/>
    </slice>
    <from sec="1223614817" usec="0"/>
    <to sec="1223615682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_576{
style=filled;
color=gray75;
4112[label="213.241.230.91;s;7pkt 7fpkt", shape=diamond, color=yellow];
5202[label="136.228.21.93;d;8pkt 8fpkt", shape=diamond, color=yellow];
8672[label="136.228.21.93;d;8pkt 8fpkt", shape=hexagon, color=black];
stat576[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.241.230.91:80, 136.228.21.93:*}[87.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6522%)&lt;BR/&gt; 1394: (6.52174%)&lt;BR/&gt; 1393: (6.52174%)&lt;BR/&gt; 1392: (6.52174%)&lt;BR/&gt; 1390: (6.52174%)&gt;];
}
4112--5202[label="1;7pkt 7fpkt"];
4112--8672[label="1;7pkt 7fpkt"];
4112--9198[label="0.285714;2pkt 2fpkt"];
4112--10881[label="1;7pkt 7fpkt"];
5202--5507[label="0.125;1pkt 1fpkt"];
5202--8672[label="1;8pkt 8fpkt"];
5202--9198[label="0.25;2pkt 2fpkt"];
5202--10881[label="0.875;7pkt 7fpkt"];
8672--9198[label="0.25;2pkt 2fpkt"];
8672--10881[label="0.875;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.21.93" src_ip="213.241.230.91" src_port="80"/>
    </slice>
    <from sec="1223614837" usec="0"/>
    <to sec="1223615592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_577{
style=filled;
color=gray75;
4806[label="70.21.31.160;s;4pkt 4fpkt", shape=diamond, color=yellow];
8680[label="70.21.31.160;s;4pkt 4fpkt", shape=hexagon, color=black];
11937[label="70.21.31.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14602[label="70.21.31.160;1pkt 1fpkt", shape=invtriangle, color=brown];
15966[label="70.21.31.160;2pkt 2fpkt", shape=invhouse, color=bisque];
stat577[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.21.31.160:80, 160.49.198.239:38311}[25%]&lt;BR/&gt;{70.21.31.160:80, 160.49.198.239:38323}[25%]&lt;BR/&gt;{70.21.31.160:80, 160.49.198.239:38325}[25%]&lt;BR/&gt;{70.21.31.160:80, 160.49.198.239:38331}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 38331: (20.8333%)&lt;BR/&gt; 38311: (12.5%)&lt;BR/&gt; 38325: (8.33333%)&lt;BR/&gt; 38323: (8.33333%)&gt;];
}
4806--8680[label="1;4pkt 4fpkt"];
4806--9198[label="0.25;1pkt 1fpkt"];
4806--11937[label="1;1pkt 1fpkt"];
4806--14602[label="1;1pkt 1fpkt"];
4806--15966[label="1;2pkt 2fpkt"];
8680--9198[label="0.25;1pkt 1fpkt"];
8680--11937[label="1;1pkt 1fpkt"];
8680--14602[label="1;1pkt 1fpkt"];
8680--15966[label="1;2pkt 2fpkt"];
11937--14602[label="1;1pkt 1fpkt"];
11937--15966[label="1;1pkt 1fpkt"];
14602--15966[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.198.239" dst_port="38331" src_ip="70.21.31.160" src_port="80"/>
      <filter dst_ip="160.49.198.239" dst_port="38325" src_ip="70.21.31.160" src_port="80"/>
      <filter dst_ip="160.49.198.239" dst_port="38323" src_ip="70.21.31.160" src_port="80"/>
      <filter dst_ip="160.49.198.239" dst_port="38311" src_ip="70.21.31.160" src_port="80"/>
    </slice>
    <from sec="1223614852" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.21561,2.0369,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_578{
style=filled;
color=gray75;
74[label="162.73.188.65s;5pkt 5fpkt", shape=rectangle, color=red];
1302[label="194.65.11.237;d;3pkt 3fpkt", shape=diamond, color=yellow];
2398[label="192.75.87.226;d;13pkt 13fpkt", shape=diamond, color=yellow];
2450[label="192.75.87.227;d;14pkt 14fpkt", shape=diamond, color=yellow];
8690[label="192.75.87.227;d;14pkt 14fpkt", shape=hexagon, color=black];
stat578[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.188.65:*, 192.75.87.227:80}[43.75%]&lt;BR/&gt;{162.73.188.65:*, 192.75.87.226:80}[40.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9796%)&lt;BR/&gt; 3580: (3.06122%)&lt;BR/&gt; 4970: (2.04082%)&lt;BR/&gt; 3576: (2.04082%)&lt;BR/&gt; 3565: (2.04082%)&gt;];
}
74--525[label="0.2;1pkt 1fpkt"];
74--669[label="0.2;1pkt 1fpkt"];
74--933[label="0.6;3pkt 3fpkt"];
74--1255[label="0.5;1pkt 1fpkt"];
74--1302[label="0.333333;1pkt 1fpkt"];
74--1303[label="0.2;1pkt 1fpkt"];
74--1844[label="0.2;1pkt 1fpkt"];
74--2398[label="0.2;1pkt 1fpkt"];
74--2450[label="0.2;1pkt 1fpkt"];
74--6766[label="0.2;1pkt 1fpkt"];
74--7788[label="1;1pkt 1fpkt"];
74--8690[label="0.2;1pkt 1fpkt"];
74--10814[label="0.5;1pkt 1fpkt"];
1302--1303[label="1;3pkt 3fpkt"];
2450--8690[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="192.75.87.227" dst_port="80" src_ip="162.73.188.65"/>
      <filter dst_ip="192.75.87.226" dst_port="80" src_ip="162.73.188.65"/>
    </slice>
    <from sec="1223614862" usec="0"/>
    <to sec="1223615602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_579{
style=filled;
color=gray75;
4822[label="213.33.149.4;d;3pkt 3fpkt", shape=diamond, color=yellow];
5333[label="192.105.77.140;s;1pkt 1fpkt", shape=diamond, color=yellow];
8694[label="213.33.149.4;d;3pkt 3fpkt", shape=hexagon, color=black];
9140[label="213.33.149.4;d;3pkt 3fpkt", shape=polygon, color=gold];
stat579[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.77.140:80, 213.33.149.4:1464}[33.3333%]&lt;BR/&gt;{192.90.234.209:80, 213.33.149.4:1400}[33.3333%]&lt;BR/&gt;{192.90.234.209:80, 213.33.149.4:1516}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1464: (20%)&lt;BR/&gt; 1516: (15%)&lt;BR/&gt; 1400: (15%)&gt;];
}
4822--5333[label="1;1pkt 1fpkt"];
4822--8694[label="1;3pkt 3fpkt"];
4822--9140[label="1;3pkt 3fpkt"];
4822--12682[label="0.666667;2pkt 2fpkt"];
4822--14981[label="0.666667;2pkt 2fpkt"];
4822--16178[label="0.666667;2pkt 2fpkt"];
5333--8694[label="1;1pkt 1fpkt"];
5333--9140[label="1;1pkt 1fpkt"];
8694--9140[label="1;3pkt 3fpkt"];
8694--12682[label="0.666667;2pkt 2fpkt"];
8694--14981[label="0.666667;2pkt 2fpkt"];
8694--16178[label="0.666667;2pkt 2fpkt"];
9140--12682[label="0.666667;2pkt 2fpkt"];
9140--14981[label="0.666667;2pkt 2fpkt"];
9140--16178[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.149.4" dst_port="1516" src_ip="192.90.234.209" src_port="80"/>
      <filter dst_ip="213.33.149.4" dst_port="1400" src_ip="192.90.234.209" src_port="80"/>
      <filter dst_ip="213.33.149.4" dst_port="1464" src_ip="192.105.77.140" src_port="80"/>
    </slice>
    <from sec="1223615017" usec="0"/>
    <to sec="1223615619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_580{
style=filled;
color=gray75;
5240[label="108.215.108.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
8713[label="108.215.108.187;s;1pkt 1fpkt", shape=hexagon, color=black];
stat580[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.215.108.187:53232, 136.228.44.214:60777}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60777: (50%)&lt;BR/&gt; 53232: (50%)&gt;];
}
5240--8713[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.214" dst_port="60777" src_ip="108.215.108.187" src_port="53232"/>
    </slice>
    <from sec="1223615137" usec="0"/>
    <to sec="1223615603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_581{
style=filled;
color=gray75;
4048[label="78.10.244.177;s;1pkt 1fpkt", shape=diamond, color=yellow];
8719[label="78.10.244.177;s;1pkt 1fpkt", shape=hexagon, color=black];
stat581[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.10.244.177:1048, 213.42.166.8:65283}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 65283: (50%)&lt;BR/&gt; 1048: (50%)&gt;];
}
4048--8719[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.8" dst_port="65283" src_ip="78.10.244.177" src_port="1048"/>
    </slice>
    <from sec="1223615175" usec="0"/>
    <to sec="1223615548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_582{
style=filled;
color=gray75;
4861[label="136.228.88.203;d;18pkt 18fpkt", shape=diamond, color=yellow];
5005[label="213.225.224.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
8724[label="136.228.88.203;d;18pkt 18fpkt", shape=hexagon, color=black];
11910[label="213.225.224.157;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat582[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.88.203:50470}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50470: (28.9474%)&lt;BR/&gt; 0: (10.5263%)&lt;BR/&gt; 80: (7.89474%)&lt;BR/&gt; 46804: (5.26316%)&lt;BR/&gt; 12340: (5.26316%)&gt;];
}
4861--5005[label="1;1pkt 1fpkt"];
4861--8724[label="1;18pkt 18fpkt"];
4861--9198[label="0.0555556;1pkt 1fpkt"];
4861--11910[label="1;1pkt 1fpkt"];
5005--8724[label="1;1pkt 1fpkt"];
5005--11910[label="1;1pkt 1fpkt"];
8724--9198[label="0.0555556;1pkt 1fpkt"];
8724--11910[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.88.203" dst_port="50470"/>
    </slice>
    <from sec="1223615195" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_583{
style=filled;
color=gray75;
5674[label="76.174.8.23;s;73pkt 73fpkt", shape=diamond, color=yellow];
8725[label="76.174.8.23;s;73pkt 73fpkt", shape=hexagon, color=black];
9706[label="76.174.8.23;73pkt 73fpkt", shape=pentagon, color=darkviolet];
13460[label="76.174.8.23;73pkt 73fpkt", shape=invtriangle, color=brown];
15382[label="76.174.8.23;72pkt 72fpkt", shape=invhouse, color=bisque];
stat583[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.174.8.23:*, 142.243.51.55:443}[35.6164%]&lt;BR/&gt;{76.174.8.23:*, 142.243.51.17:443}[26.0274%]&lt;BR/&gt;{76.174.8.23:*, 142.243.51.54:443}[24.6575%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1174: (0.686813%)&lt;BR/&gt; 1173: (0.686813%)&lt;BR/&gt; 1172: (0.686813%)&lt;BR/&gt; 1171: (0.686813%)&gt;];
}
5674--8725[label="1;73pkt 73fpkt"];
5674--9178[label="0.123288;9pkt 9fpkt"];
5674--9218[label="0.123288;9pkt 9fpkt"];
5674--9252[label="0.123288;9pkt 9fpkt"];
5674--9706[label="1;73pkt 73fpkt"];
5674--13460[label="1;73pkt 73fpkt"];
5674--15382[label="1;72pkt 72fpkt"];
8725--9178[label="0.123288;9pkt 9fpkt"];
8725--9218[label="0.123288;9pkt 9fpkt"];
8725--9252[label="0.123288;9pkt 9fpkt"];
8725--9706[label="1;73pkt 73fpkt"];
8725--13460[label="1;73pkt 73fpkt"];
8725--15382[label="1;72pkt 72fpkt"];
9706--13460[label="1;73pkt 73fpkt"];
9706--15382[label="1;72pkt 72fpkt"];
13460--15382[label="1;72pkt 72fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.51.55" dst_port="443" src_ip="76.174.8.23"/>
      <filter dst_ip="142.243.51.17" dst_port="443" src_ip="76.174.8.23"/>
      <filter dst_ip="142.243.51.54" dst_port="443" src_ip="76.174.8.23"/>
    </slice>
    <from sec="1223615200" usec="0"/>
    <to sec="1223615576" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.670358,2.09816,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="77.200.213.184"/>
      <from sec="1223615300" usec="0"/>
      <to sec="1223615456" usec="0"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_585{
style=filled;
color=gray75;
4842[label="136.228.114.70;s;69pkt 69fpkt", shape=diamond, color=yellow];
5389[label="192.105.69.193;d;3pkt 3fpkt", shape=diamond, color=yellow];
5417[label="104.243.241.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
8768[label="104.243.241.69;d;1pkt 1fpkt", shape=hexagon, color=black];
stat585[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.114.70:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2667: (2.02703%)&lt;BR/&gt; 2820: (1.35135%)&lt;BR/&gt; 2659: (1.35135%)&lt;BR/&gt; 2649: (1.35135%)&gt;];
}
4842--5389[label="1;3pkt 3fpkt"];
4842--5417[label="1;1pkt 1fpkt"];
4842--6065[label="0.0434783;3pkt 3fpkt"];
4842--8220[label="0.0144928;1pkt 1fpkt"];
4842--8768[label="1;1pkt 1fpkt"];
5417--8768[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="136.228.114.70"/>
    </slice>
    <from sec="1223615128" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_586{
style=filled;
color=gray75;
5453[label="192.105.77.18;s;1pkt 1fpkt", shape=diamond, color=yellow];
8774[label="192.105.77.18;s;1pkt 1fpkt", shape=hexagon, color=black];
stat586[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.77.18:80, 212.21.135.219:54483}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54483: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5453--8774[label="1;1pkt 1fpkt"];
5453--9198[label="1;1pkt 1fpkt"];
8774--9198[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.135.219" dst_port="54483" src_ip="192.105.77.18" src_port="80"/>
    </slice>
    <from sec="1223615510" usec="0"/>
    <to sec="1223615578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_587{
style=filled;
color=gray75;
4618[label="212.21.136.142;s;44pkt 44fpkt", shape=diamond, color=yellow];
5457[label="197.2.189.39;d;1pkt 1fpkt", shape=diamond, color=yellow];
8776[label="197.2.189.39;d;1pkt 1fpkt", shape=hexagon, color=black];
stat587[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.142:*, 128.9.1.188:80}[93.1818%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.913%)&lt;BR/&gt; 52488: (3.26087%)&lt;BR/&gt; 0: (2.17391%)&lt;BR/&gt; 65433: (1.08696%)&lt;BR/&gt; 65384: (1.08696%)&gt;];
}
4618--5457[label="1;1pkt 1fpkt"];
4618--5830[label="1;1pkt 1fpkt"];
4618--8776[label="1;1pkt 1fpkt"];
5457--8776[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.9.1.188" dst_port="80" src_ip="212.21.136.142"/>
    </slice>
    <from sec="1223615343" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_588{
style=filled;
color=gray75;
5762[label="210.70.27.86;s;35pkt 35fpkt", shape=diamond, color=yellow];
8778[label="210.70.27.86;s;35pkt 35fpkt", shape=hexagon, color=black];
stat588[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.70.27.86:587, 160.49.154.67:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 587: (50%)&lt;BR/&gt; 59546: (1.42857%)&lt;BR/&gt; 59523: (1.42857%)&lt;BR/&gt; 59485: (1.42857%)&lt;BR/&gt; 59443: (1.42857%)&gt;];
}
5762--8778[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.154.67" src_ip="210.70.27.86" src_port="587"/>
    </slice>
    <from sec="1223615522" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_589{
style=filled;
color=gray75;
5768[label="76.81.186.224;s;1pkt 1fpkt", shape=diamond, color=yellow];
8780[label="76.81.186.224;s;1pkt 1fpkt", shape=hexagon, color=black];
stat589[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.81.186.224:1760, 162.73.189.236:1889}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1889: (50%)&lt;BR/&gt; 1760: (50%)&gt;];
}
5768--8780[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.189.236" dst_port="1889" src_ip="76.81.186.224" src_port="1760"/>
    </slice>
    <from sec="1223615528" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_590{
style=filled;
color=gray75;
5770[label="142.16.203.114;s;4pkt 4fpkt", shape=diamond, color=yellow];
5771[label="192.114.164.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
8783[label="142.16.203.114;s;4pkt 4fpkt", shape=hexagon, color=black];
11245[label="142.16.203.114;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat590[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.203.114:1313, 192.116.98.15:80}[25%]&lt;BR/&gt;{142.16.203.114:1324, 99.105.144.92:80}[25%]&lt;BR/&gt;{142.16.203.114:1312, 192.56.64.130:80}[25%]&lt;BR/&gt;{142.16.203.114:1317, 192.114.164.178:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1324: (12.5%)&lt;BR/&gt; 1317: (12.5%)&lt;BR/&gt; 1313: (12.5%)&lt;BR/&gt; 1312: (12.5%)&gt;];
}
5770--5771[label="1;1pkt 1fpkt"];
5770--8783[label="1;4pkt 4fpkt"];
5770--11245[label="1;3pkt 3fpkt"];
5771--8783[label="1;1pkt 1fpkt"];
8783--11245[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.114.164.178" dst_port="80" src_ip="142.16.203.114" src_port="1317"/>
      <filter dst_ip="192.56.64.130" dst_port="80" src_ip="142.16.203.114" src_port="1312"/>
      <filter dst_ip="99.105.144.92" dst_port="80" src_ip="142.16.203.114" src_port="1324"/>
      <filter dst_ip="192.116.98.15" dst_port="80" src_ip="142.16.203.114" src_port="1313"/>
    </slice>
    <from sec="1223615531" usec="0"/>
    <to sec="1223615548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_592{
style=filled;
color=gray75;
5834[label="98.149.157.59;s;4pkt 4fpkt", shape=diamond, color=yellow];
8792[label="98.149.157.59;s;4pkt 4fpkt", shape=hexagon, color=black];
stat592[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.149.157.59:80, 136.228.193.110:12321}[25%]&lt;BR/&gt;{98.149.157.59:80, 136.228.193.110:24676}[25%]&lt;BR/&gt;{98.149.157.59:80, 136.228.193.110:26519}[25%]&lt;BR/&gt;{98.149.157.59:80, 136.228.193.110:28180}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 28180: (12.5%)&lt;BR/&gt; 26519: (12.5%)&lt;BR/&gt; 24676: (12.5%)&lt;BR/&gt; 12321: (12.5%)&gt;];
}
5834--8792[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.110" dst_port="28180" src_ip="98.149.157.59" src_port="80"/>
      <filter dst_ip="136.228.193.110" dst_port="26519" src_ip="98.149.157.59" src_port="80"/>
      <filter dst_ip="136.228.193.110" dst_port="24676" src_ip="98.149.157.59" src_port="80"/>
      <filter dst_ip="136.228.193.110" dst_port="12321" src_ip="98.149.157.59" src_port="80"/>
    </slice>
    <from sec="1223615582" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_593{
style=filled;
color=gray75;
5853[label="205.130.149.12;s;3pkt 3fpkt", shape=diamond, color=yellow];
8798[label="205.130.149.12;s;3pkt 3fpkt", shape=hexagon, color=black];
stat593[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.130.149.12:80, 136.228.122.145:1233}[33.3333%]&lt;BR/&gt;{205.130.149.12:80, 136.228.122.145:1235}[33.3333%]&lt;BR/&gt;{205.130.149.12:80, 136.228.122.145:1245}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1245: (16.6667%)&lt;BR/&gt; 1235: (16.6667%)&lt;BR/&gt; 1233: (16.6667%)&gt;];
}
5853--8798[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.145" dst_port="1245" src_ip="205.130.149.12" src_port="80"/>
      <filter dst_ip="136.228.122.145" dst_port="1235" src_ip="205.130.149.12" src_port="80"/>
      <filter dst_ip="136.228.122.145" dst_port="1233" src_ip="205.130.149.12" src_port="80"/>
    </slice>
    <from sec="1223615598" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_594{
style=filled;
color=gray75;
5893[label="113.9.20.87;d;4pkt 4fpkt", shape=diamond, color=yellow];
8806[label="113.9.20.87;d;4pkt 4fpkt", shape=hexagon, color=black];
stat594[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.46.218:8080, 113.9.20.87:1045}[25%]&lt;BR/&gt;{162.73.46.218:8080, 113.9.20.87:1046}[25%]&lt;BR/&gt;{162.73.46.218:8080, 113.9.20.87:1047}[25%]&lt;BR/&gt;{162.73.46.218:8080, 113.9.20.87:1048}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 1048: (12.5%)&lt;BR/&gt; 1047: (12.5%)&lt;BR/&gt; 1046: (12.5%)&lt;BR/&gt; 1045: (12.5%)&gt;];
}
5893--8806[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="113.9.20.87" dst_port="1048" src_ip="162.73.46.218" src_port="8080"/>
      <filter dst_ip="113.9.20.87" dst_port="1047" src_ip="162.73.46.218" src_port="8080"/>
      <filter dst_ip="113.9.20.87" dst_port="1046" src_ip="162.73.46.218" src_port="8080"/>
      <filter dst_ip="113.9.20.87" dst_port="1045" src_ip="162.73.46.218" src_port="8080"/>
    </slice>
    <from sec="1223615624" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_596{
style=filled;
color=gray75;
771[label="162.73.218.108;d;115pkt 115fpkt", shape=diamond, color=yellow];
772[label="21.64.107.164;s;82pkt 82fpkt", shape=diamond, color=yellow];
6198[label="162.73.218.108;d;64pkt 64fpkt", shape=hexagon, color=black];
6199[label="21.64.107.164;s;34pkt 34fpkt", shape=hexagon, color=black];
8828[label="162.73.218.108;d;43pkt 43fpkt", shape=polygon, color=gold];
stat596[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.64.107.164:80, 162.73.218.108:*}[62.6087%]&lt;BR/&gt;{20.98.63.68:80, 162.73.218.108:*}[24.3478%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6036%)&lt;BR/&gt; 8080: (7.39645%)&lt;BR/&gt; 4427: (0.739645%)&lt;BR/&gt; 4147: (0.739645%)&lt;BR/&gt; 3883: (0.739645%)&gt;];
}
771--772[label="1;82pkt 82fpkt"];
771--6198[label="1;64pkt 64fpkt"];
771--6199[label="1;34pkt 34fpkt"];
771--8828[label="1;43pkt 43fpkt"];
771--9163[label="0.121739;14pkt 14fpkt"];
771--9194[label="0.121739;14pkt 14fpkt"];
771--9198[label="0.0695652;8pkt 8fpkt"];
771--9234[label="0.121739;14pkt 14fpkt"];
771--9268[label="0.121739;14pkt 14fpkt"];
772--6198[label="0.75;48pkt 48fpkt"];
772--6199[label="1;34pkt 34fpkt"];
772--8828[label="0.790698;34pkt 34fpkt"];
772--9163[label="0.134146;11pkt 11fpkt"];
772--9194[label="0.134146;11pkt 11fpkt"];
772--9198[label="0.0609756;5pkt 5fpkt"];
772--9234[label="0.134146;11pkt 11fpkt"];
772--9268[label="0.134146;11pkt 11fpkt"];
6198--6199[label="1;34pkt 34fpkt"];
6198--8828[label="1;43pkt 43fpkt"];
6198--9163[label="0.21875;14pkt 14fpkt"];
6198--9194[label="0.09375;6pkt 6fpkt"];
6198--9234[label="0.09375;6pkt 6fpkt"];
6198--9268[label="0.09375;6pkt 6fpkt"];
6199--8828[label="1;34pkt 34fpkt"];
6199--9163[label="0.323529;11pkt 11fpkt"];
8828--9163[label="0.325581;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.218.108" src_ip="21.64.107.164" src_port="80"/>
      <filter dst_ip="162.73.218.108" src_ip="20.98.63.68" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,011,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_597{
style=filled;
color=gray75;
2080[label="204.133.5.213;s;618pkt 618fpkt", shape=diamond, color=yellow];
6322[label="204.133.5.213;s;280pkt 280fpkt", shape=hexagon, color=black];
8832[label="204.133.5.213;s;280pkt 280fpkt", shape=polygon, color=gold];
stat597[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.133.5.213:80, 142.47.49.197:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50.1273%)&lt;BR/&gt; 65188: (0.127334%)&lt;BR/&gt; 65117: (0.127334%)&lt;BR/&gt; 64770: (0.127334%)&lt;BR/&gt; 64561: (0.127334%)&gt;];
}
2080--6322[label="1;280pkt 280fpkt"];
2080--8832[label="1;280pkt 280fpkt"];
2080--9163[label="0.0566343;35pkt 35fpkt"];
2080--9194[label="0.2411;149pkt 149fpkt"];
2080--9234[label="0.2411;149pkt 149fpkt"];
2080--9268[label="0.2411;149pkt 149fpkt"];
6322--8832[label="1;280pkt 280fpkt"];
6322--9163[label="0.125;35pkt 35fpkt"];
6322--9194[label="0.0357143;10pkt 10fpkt"];
6322--9234[label="0.0357143;10pkt 10fpkt"];
6322--9268[label="0.0357143;10pkt 10fpkt"];
8832--9163[label="0.125;35pkt 35fpkt"];
8832--9194[label="0.0357143;10pkt 10fpkt"];
8832--9234[label="0.0357143;10pkt 10fpkt"];
8832--9268[label="0.0357143;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="142.47.49.197" src_ip="204.133.5.213" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_598{
style=filled;
color=gray75;
812[label="213.42.135.210;s;12919pkt 12919fpkt", shape=diamond, color=yellow];
1350[label="210.192.150.138;d;19pkt 19fpkt", shape=diamond, color=yellow];
1582[label="22.238.34.208;d;3pkt 3fpkt", shape=diamond, color=yellow];
1595[label="206.96.128.163;d;9pkt 9fpkt", shape=diamond, color=yellow];
1676[label="213.70.7.188;d;128pkt 128fpkt", shape=diamond, color=yellow];
1763[label="193.71.0.25;d;17pkt 17fpkt", shape=diamond, color=yellow];
2233[label="107.80.35.50;d;126pkt 126fpkt", shape=diamond, color=yellow];
2243[label="193.34.136.39;d;88pkt 88fpkt", shape=diamond, color=yellow];
2284[label="193.171.189.37;d;138pkt 138fpkt", shape=diamond, color=yellow];
2367[label="206.96.158.101;d;7pkt 7fpkt", shape=diamond, color=yellow];
2400[label="109.163.90.183;d;8pkt 8fpkt", shape=diamond, color=yellow];
2849[label="108.85.41.206;d;122pkt 122fpkt", shape=diamond, color=yellow];
2860[label="209.208.156.75;d;124pkt 124fpkt", shape=diamond, color=yellow];
2902[label="206.96.157.21;d;125pkt 125fpkt", shape=diamond, color=yellow];
3906[label="108.85.45.45;d;87pkt 87fpkt", shape=diamond, color=yellow];
4334[label="108.85.44.217;d;96pkt 96fpkt", shape=diamond, color=yellow];
4526[label="193.55.86.35;d;2pkt 2fpkt", shape=diamond, color=yellow];
4777[label="193.34.150.45;d;79pkt 79fpkt", shape=diamond, color=yellow];
5692[label="22.142.106.245;d;63pkt 63fpkt", shape=diamond, color=yellow];
5949[label="213.42.135.210;s;8891pkt 8891fpkt", shape=hexagon, color=black];
6123[label="22.238.34.208;d;3pkt 3fpkt", shape=hexagon, color=black];
6127[label="206.96.128.163;d;3pkt 3fpkt", shape=hexagon, color=black];
6425[label="109.163.90.183;d;2pkt 2fpkt", shape=hexagon, color=black];
6678[label="213.70.7.188;d;128pkt 128fpkt", shape=hexagon, color=black];
6942[label="107.80.35.50;d;107pkt 107fpkt", shape=hexagon, color=black];
6952[label="209.208.156.75;d;87pkt 87fpkt", shape=hexagon, color=black];
6988[label="206.96.157.21;d;125pkt 125fpkt", shape=hexagon, color=black];
7203[label="193.132.223.47;d;159pkt 159fpkt", shape=hexagon, color=black];
7303[label="108.85.45.45;d;71pkt 71fpkt", shape=hexagon, color=black];
7691[label="193.55.86.35;d;2pkt 2fpkt", shape=hexagon, color=black];
7902[label="108.85.41.206;d;102pkt 102fpkt", shape=hexagon, color=black];
7908[label="193.34.136.39;d;84pkt 84fpkt", shape=hexagon, color=black];
7938[label="193.171.189.37;d;117pkt 117fpkt", shape=hexagon, color=black];
8320[label="193.34.150.45;d;77pkt 77fpkt", shape=hexagon, color=black];
8742[label="22.142.106.245;d;63pkt 63fpkt", shape=hexagon, color=black];
8872[label="213.42.135.210;s;6312pkt 6312fpkt", shape=polygon, color=gold];
9092[label="193.34.150.45;d;77pkt 77fpkt", shape=polygon, color=gold];
12692[label="213.42.135.210;13788pkt 13788fpkt", shape=pentagon, color=darkviolet];
stat598[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.42.135.210:*, 107.4.66.12:80}[49.8487%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4181%)&lt;BR/&gt; 53: (2.35921%)&lt;BR/&gt; 0: (2.22733%)&lt;BR/&gt; 443: (2.0932%)&lt;BR/&gt; 50501: (0.0123991%)&gt;];
}
812--823[label="0.991137;6486pkt 6486fpkt"];
812--848[label="0.00186916;2pkt 2fpkt"];
812--878[label="0.0112782;3pkt 3fpkt"];
812--951[label="0.0104895;3pkt 3fpkt"];
812--982[label="0.391941;321pkt 321fpkt"];
812--1026[label="0.00942029;13pkt 13fpkt"];
812--1162[label="0.000330579;2pkt 2fpkt"];
812--1175[label="0.743711;473pkt 473fpkt"];
812--1207[label="0.343042;318pkt 318fpkt"];
812--1237[label="0.376914;320pkt 320fpkt"];
812--1329[label="0.0134298;13pkt 13fpkt"];
812--1350[label="0.0526316;1pkt 1fpkt"];
812--1537[label="0.0461538;3pkt 3fpkt"];
812--1582[label="1;3pkt 3fpkt"];
812--1595[label="1;9pkt 9fpkt"];
812--1676[label="1;128pkt 128fpkt"];
812--1763[label="1;17pkt 17fpkt"];
812--1852[label="0.00767263;3pkt 3fpkt"];
812--2210[label="0.333333;5pkt 5fpkt"];
812--2212[label="0.742342;412pkt 412fpkt"];
812--2233[label="0.960317;121pkt 121fpkt"];
812--2243[label="0.977273;86pkt 86fpkt"];
812--2284[label="0.84058;116pkt 116fpkt"];
812--2367[label="1;7pkt 7fpkt"];
812--2400[label="1;8pkt 8fpkt"];
812--2618[label="0.949045;149pkt 149fpkt"];
812--2735[label="0.754545;83pkt 83fpkt"];
812--2805[label="0.0472103;11pkt 11fpkt"];
812--2815[label="0.901639;110pkt 110fpkt"];
812--2849[label="0.991803;121pkt 121fpkt"];
812--2860[label="0.991935;123pkt 123fpkt"];
812--2884[label="0.952381;120pkt 120fpkt"];
812--2902[label="0.976;122pkt 122fpkt"];
812--2928[label="0.0714286;12pkt 12fpkt"];
812--3164[label="0.027027;1pkt 1fpkt"];
812--3180[label="0.920398;185pkt 185fpkt"];
812--3184[label="0.00778643;7pkt 7fpkt"];
812--3192[label="0.0020429;2pkt 2fpkt"];
812--3245[label="0.0229358;5pkt 5fpkt"];
812--3362[label="0.942623;115pkt 115fpkt"];
812--3732[label="0.971264;169pkt 169fpkt"];
812--3737[label="0.010101;9pkt 9fpkt"];
812--3888[label="0.295337;57pkt 57fpkt"];
812--3906[label="0.873563;76pkt 76fpkt"];
812--4178[label="0.00258398;2pkt 2fpkt"];
812--4222[label="0.00298954;2pkt 2fpkt"];
812--4315[label="0.263158;5pkt 5fpkt"];
812--4334[label="0.791667;76pkt 76fpkt"];
812--4452[label="0.235294;4pkt 4fpkt"];
812--4526[label="1;2pkt 2fpkt"];
812--4696[label="0.259141;163pkt 163fpkt"];
812--4777[label="0.987342;78pkt 78fpkt"];
812--4915[label="0.25;3pkt 3fpkt"];
812--5042[label="0.285714;18pkt 18fpkt"];
812--5231[label="0.966019;199pkt 199fpkt"];
812--5488[label="0.00378072;2pkt 2fpkt"];
812--5550[label="0.139434;64pkt 64fpkt"];
812--5571[label="0.0394737;3pkt 3fpkt"];
812--5692[label="1;63pkt 63fpkt"];
812--5949[label="1;8891pkt 8891fpkt"];
812--5974[label="0.00854701;2pkt 2fpkt"];
812--5981[label="0.381081;282pkt 282fpkt"];
812--6123[label="1;3pkt 3fpkt"];
812--6127[label="1;3pkt 3fpkt"];
812--6192[label="0.00500227;11pkt 11fpkt"];
812--6277[label="0.743711;473pkt 473fpkt"];
812--6294[label="0.374502;282pkt 282fpkt"];
812--6425[label="1;2pkt 2fpkt"];
812--6621[label="0.0472103;11pkt 11fpkt"];
812--6678[label="1;128pkt 128fpkt"];
812--6790[label="0.991137;6486pkt 6486fpkt"];
812--6844[label="0.00952381;6pkt 6fpkt"];
812--6942[label="0.953271;102pkt 102fpkt"];
812--6952[label="0.988506;86pkt 86fpkt"];
812--6988[label="0.976;122pkt 122fpkt"];
812--7203[label="0.968553;154pkt 154fpkt"];
812--7275[label="0.952381;120pkt 120fpkt"];
812--7289[label="0.220238;37pkt 37fpkt"];
812--7303[label="0.915493;65pkt 65fpkt"];
812--7434[label="0.0112782;3pkt 3fpkt"];
812--7437[label="0.00857143;3pkt 3fpkt"];
812--7447[label="0.0294118;1pkt 1fpkt"];
812--7564[label="0.235294;4pkt 4fpkt"];
812--7669[label="0.25;4pkt 4fpkt"];
812--7691[label="1;2pkt 2fpkt"];
812--7742[label="0.931034;108pkt 108fpkt"];
812--7748[label="0.0129611;13pkt 13fpkt"];
812--7769[label="0.920398;185pkt 185fpkt"];
812--7823[label="0.0526316;1pkt 1fpkt"];
812--7886[label="0.760626;340pkt 340fpkt"];
812--7902[label="1;102pkt 102fpkt"];
812--7908[label="0.97619;82pkt 82fpkt"];
812--7938[label="0.837607;98pkt 98fpkt"];
812--8178[label="0.332542;280pkt 280fpkt"];
812--8212[label="0.00255428;2pkt 2fpkt"];
812--8294[label="0.0461538;3pkt 3fpkt"];
812--8320[label="0.987013;76pkt 76fpkt"];
812--8368[label="0.984733;129pkt 129fpkt"];
812--8671[label="0.0714286;12pkt 12fpkt"];
812--8742[label="1;63pkt 63fpkt"];
812--8872[label="1;6312pkt 6312fpkt"];
812--8961[label="0.952381;120pkt 120fpkt"];
812--8970[label="0.163462;17pkt 17fpkt"];
812--8983[label="0.375;3pkt 3fpkt"];
812--9067[label="0.374502;282pkt 282fpkt"];
812--9092[label="0.987013;76pkt 76fpkt"];
812--9178[label="0.0292237;32pkt 32fpkt"];
812--9188[label="1;695pkt 695fpkt"];
812--9218[label="0.0291971;32pkt 32fpkt"];
812--9228[label="1;695pkt 695fpkt"];
812--9252[label="0.0292237;32pkt 32fpkt"];
812--9262[label="1;695pkt 695fpkt"];
812--12692[label="0.999923;12918pkt 12918fpkt"];
1350--2106[label="0.210526;4pkt 4fpkt"];
1350--4219[label="0.315789;6pkt 6fpkt"];
1350--4406[label="0.444444;4pkt 4fpkt"];
1350--5949[label="0.0526316;1pkt 1fpkt"];
1350--6845[label="0.0526316;1pkt 1fpkt"];
1350--7115[label="0.0526316;1pkt 1fpkt"];
1350--7505[label="0.315789;6pkt 6fpkt"];
1350--7823[label="1;19pkt 19fpkt"];
1350--8872[label="0.0526316;1pkt 1fpkt"];
1350--9173[label="0.0526316;1pkt 1fpkt"];
1350--9213[label="0.0526316;1pkt 1fpkt"];
1350--9248[label="0.0526316;1pkt 1fpkt"];
1350--11610[label="0.0526316;1pkt 1fpkt"];
1350--12466[label="0.0526316;1pkt 1fpkt"];
1350--12692[label="0.0526316;1pkt 1fpkt"];
1350--14437[label="0.0526316;1pkt 1fpkt"];
1350--14869[label="0.0526316;1pkt 1fpkt"];
1350--15875[label="0.0526316;1pkt 1fpkt"];
1582--5949[label="1;3pkt 3fpkt"];
1582--6123[label="1;3pkt 3fpkt"];
1582--8872[label="1;3pkt 3fpkt"];
1582--12692[label="1;3pkt 3fpkt"];
1595--5949[label="1;9pkt 9fpkt"];
1595--6127[label="1;3pkt 3fpkt"];
1595--8872[label="1;9pkt 9fpkt"];
1595--12692[label="1;9pkt 9fpkt"];
1676--5949[label="1;128pkt 128fpkt"];
1676--6678[label="1;128pkt 128fpkt"];
1676--8872[label="1;128pkt 128fpkt"];
1676--12692[label="1;128pkt 128fpkt"];
1763--5949[label="1;17pkt 17fpkt"];
1763--8872[label="1;17pkt 17fpkt"];
1763--12692[label="1;17pkt 17fpkt"];
2233--3777[label="0.00793651;1pkt 1fpkt"];
2233--5949[label="0.761905;96pkt 96fpkt"];
2233--6942[label="1;107pkt 107fpkt"];
2233--8252[label="0.00793651;1pkt 1fpkt"];
2233--8872[label="0.65873;83pkt 83fpkt"];
2233--9188[label="0.031746;4pkt 4fpkt"];
2233--9228[label="0.031746;4pkt 4fpkt"];
2233--9262[label="0.031746;4pkt 4fpkt"];
2233--12692[label="0.960317;121pkt 121fpkt"];
2243--5949[label="0.875;77pkt 77fpkt"];
2243--5989[label="0.0113636;1pkt 1fpkt"];
2243--7908[label="1;84pkt 84fpkt"];
2243--8872[label="0.795455;70pkt 70fpkt"];
2243--12692[label="0.977273;86pkt 86fpkt"];
2243--13031[label="0.0113636;1pkt 1fpkt"];
2284--2942[label="0.264706;9pkt 9fpkt"];
2284--3276[label="0.0217391;3pkt 3fpkt"];
2284--5949[label="0.623188;86pkt 86fpkt"];
2284--7938[label="1;117pkt 117fpkt"];
2284--8872[label="0.5;69pkt 69fpkt"];
2284--9188[label="0.0217391;3pkt 3fpkt"];
2284--9228[label="0.0217391;3pkt 3fpkt"];
2284--9262[label="0.0217391;3pkt 3fpkt"];
2284--12692[label="0.84058;116pkt 116fpkt"];
2367--5949[label="0.142857;1pkt 1fpkt"];
2367--8872[label="0.142857;1pkt 1fpkt"];
2367--12692[label="1;7pkt 7fpkt"];
2400--5949[label="0.875;7pkt 7fpkt"];
2400--6425[label="1;2pkt 2fpkt"];
2400--8872[label="0.75;6pkt 6fpkt"];
2400--12692[label="1;8pkt 8fpkt"];
2849--5949[label="0.795082;97pkt 97fpkt"];
2849--7902[label="1;102pkt 102fpkt"];
2849--8872[label="0.680328;83pkt 83fpkt"];
2849--9188[label="0.0409836;5pkt 5fpkt"];
2849--9228[label="0.0409836;5pkt 5fpkt"];
2849--9262[label="0.0409836;5pkt 5fpkt"];
2849--12692[label="0.991803;121pkt 121fpkt"];
2860--5949[label="0.806452;100pkt 100fpkt"];
2860--6952[label="1;87pkt 87fpkt"];
2860--8872[label="0.693548;86pkt 86fpkt"];
2860--9188[label="0.0322581;4pkt 4fpkt"];
2860--9228[label="0.0322581;4pkt 4fpkt"];
2860--9262[label="0.0322581;4pkt 4fpkt"];
2860--12692[label="0.991935;123pkt 123fpkt"];
2902--5162[label="0.0114943;1pkt 1fpkt"];
2902--5949[label="0.776;97pkt 97fpkt"];
2902--6988[label="1;125pkt 125fpkt"];
2902--8292[label="0.025;1pkt 1fpkt"];
2902--8872[label="0.664;83pkt 83fpkt"];
2902--9188[label="0.032;4pkt 4fpkt"];
2902--9228[label="0.032;4pkt 4fpkt"];
2902--9262[label="0.032;4pkt 4fpkt"];
2902--12692[label="0.976;122pkt 122fpkt"];
3906--5237[label="0.09375;6pkt 6fpkt"];
3906--5696[label="0.05;3pkt 3fpkt"];
3906--5949[label="0.425287;37pkt 37fpkt"];
3906--7303[label="1;71pkt 71fpkt"];
3906--8872[label="0.252874;22pkt 22fpkt"];
3906--9188[label="0.0229885;2pkt 2fpkt"];
3906--9228[label="0.0229885;2pkt 2fpkt"];
3906--9262[label="0.0229885;2pkt 2fpkt"];
3906--10630[label="0.084507;6pkt 6fpkt"];
3906--12692[label="0.873563;76pkt 76fpkt"];
4334--5949[label="0.40625;39pkt 39fpkt"];
4334--8872[label="0.25;24pkt 24fpkt"];
4334--9188[label="0.0208333;2pkt 2fpkt"];
4334--9228[label="0.0208333;2pkt 2fpkt"];
4334--9262[label="0.0208333;2pkt 2fpkt"];
4334--12692[label="0.791667;76pkt 76fpkt"];
4526--5949[label="1;2pkt 2fpkt"];
4526--7691[label="1;2pkt 2fpkt"];
4526--12692[label="1;2pkt 2fpkt"];
4777--5949[label="0.56962;45pkt 45fpkt"];
4777--8320[label="1;77pkt 77fpkt"];
4777--8872[label="0.164557;13pkt 13fpkt"];
4777--9092[label="1;77pkt 77fpkt"];
4777--9188[label="0.0506329;4pkt 4fpkt"];
4777--9228[label="0.0506329;4pkt 4fpkt"];
4777--9262[label="0.0506329;4pkt 4fpkt"];
4777--12692[label="0.987342;78pkt 78fpkt"];
5692--5949[label="0.68254;43pkt 43fpkt"];
5692--8742[label="1;63pkt 63fpkt"];
5692--12692[label="1;63pkt 63fpkt"];
5949--5974[label="0.00854701;2pkt 2fpkt"];
5949--5981[label="0.282432;209pkt 209fpkt"];
5949--6123[label="1;3pkt 3fpkt"];
5949--6127[label="1;3pkt 3fpkt"];
5949--6277[label="0.727987;463pkt 463fpkt"];
5949--6294[label="0.278884;210pkt 210fpkt"];
5949--6425[label="1;2pkt 2fpkt"];
5949--6621[label="0.0300429;7pkt 7fpkt"];
5949--6678[label="1;128pkt 128fpkt"];
5949--6790[label="0.670232;4386pkt 4386fpkt"];
5949--6844[label="0.00952381;6pkt 6fpkt"];
5949--6942[label="0.897196;96pkt 96fpkt"];
5949--6952[label="0.988506;86pkt 86fpkt"];
5949--6988[label="0.776;97pkt 97fpkt"];
5949--7203[label="0.672956;107pkt 107fpkt"];
5949--7275[label="0.952381;120pkt 120fpkt"];
5949--7289[label="0.10119;17pkt 17fpkt"];
5949--7303[label="0.521127;37pkt 37fpkt"];
5949--7434[label="0.0075188;2pkt 2fpkt"];
5949--7437[label="0.00857143;3pkt 3fpkt"];
5949--7447[label="0.0294118;1pkt 1fpkt"];
5949--7564[label="0.176471;3pkt 3fpkt"];
5949--7669[label="0.1875;3pkt 3fpkt"];
5949--7691[label="1;2pkt 2fpkt"];
5949--7742[label="0.75;87pkt 87fpkt"];
5949--7748[label="0.0129611;13pkt 13fpkt"];
5949--7769[label="0.61194;123pkt 123fpkt"];
5949--7823[label="0.0526316;1pkt 1fpkt"];
5949--7886[label="0.695749;311pkt 311fpkt"];
5949--7902[label="0.95098;97pkt 97fpkt"];
5949--7908[label="0.916667;77pkt 77fpkt"];
5949--7938[label="0.735043;86pkt 86fpkt"];
5949--8178[label="0.248219;209pkt 209fpkt"];
5949--8294[label="0.0461538;3pkt 3fpkt"];
5949--8320[label="0.584416;45pkt 45fpkt"];
5949--8671[label="0.0595238;10pkt 10fpkt"];
5949--8742[label="0.68254;43pkt 43fpkt"];
5949--8872[label="1;6312pkt 6312fpkt"];
5949--8961[label="0.952381;120pkt 120fpkt"];
5949--8970[label="0.163462;17pkt 17fpkt"];
5949--8983[label="0.375;3pkt 3fpkt"];
5949--9067[label="0.278884;210pkt 210fpkt"];
5949--9092[label="0.584416;45pkt 45fpkt"];
5949--9178[label="0.0292237;32pkt 32fpkt"];
5949--9188[label="1;695pkt 695fpkt"];
5949--9218[label="0.0291971;32pkt 32fpkt"];
5949--9228[label="1;695pkt 695fpkt"];
5949--9252[label="0.0292237;32pkt 32fpkt"];
5949--9262[label="1;695pkt 695fpkt"];
5949--12692[label="0.999888;8890pkt 8890fpkt"];
6123--8872[label="1;3pkt 3fpkt"];
6123--12692[label="1;3pkt 3fpkt"];
6127--8872[label="1;3pkt 3fpkt"];
6127--12692[label="1;3pkt 3fpkt"];
6425--8872[label="1;2pkt 2fpkt"];
6425--12692[label="1;2pkt 2fpkt"];
6678--8872[label="1;128pkt 128fpkt"];
6678--12692[label="1;128pkt 128fpkt"];
6942--8252[label="0.00934579;1pkt 1fpkt"];
6942--8872[label="0.775701;83pkt 83fpkt"];
6942--9188[label="0.0373832;4pkt 4fpkt"];
6942--9228[label="0.0373832;4pkt 4fpkt"];
6942--9262[label="0.0373832;4pkt 4fpkt"];
6942--12692[label="0.953271;102pkt 102fpkt"];
6952--8872[label="0.988506;86pkt 86fpkt"];
6952--9188[label="0.0229885;2pkt 2fpkt"];
6952--9228[label="0.0229885;2pkt 2fpkt"];
6952--9262[label="0.0229885;2pkt 2fpkt"];
6952--12692[label="0.988506;86pkt 86fpkt"];
6988--8292[label="0.025;1pkt 1fpkt"];
6988--8872[label="0.664;83pkt 83fpkt"];
6988--9188[label="0.032;4pkt 4fpkt"];
6988--9228[label="0.032;4pkt 4fpkt"];
6988--9262[label="0.032;4pkt 4fpkt"];
6988--12692[label="0.976;122pkt 122fpkt"];
7203--8872[label="0.465409;74pkt 74fpkt"];
7203--9188[label="0.0377358;6pkt 6fpkt"];
7203--9228[label="0.0377358;6pkt 6fpkt"];
7203--9262[label="0.0377358;6pkt 6fpkt"];
7203--12692[label="0.968553;154pkt 154fpkt"];
7303--8872[label="0.309859;22pkt 22fpkt"];
7303--9188[label="0.028169;2pkt 2fpkt"];
7303--9228[label="0.028169;2pkt 2fpkt"];
7303--9262[label="0.028169;2pkt 2fpkt"];
7303--10630[label="0.084507;6pkt 6fpkt"];
7303--12692[label="0.915493;65pkt 65fpkt"];
7691--12692[label="1;2pkt 2fpkt"];
7902--8872[label="0.813725;83pkt 83fpkt"];
7902--9188[label="0.0490196;5pkt 5fpkt"];
7902--9228[label="0.0490196;5pkt 5fpkt"];
7902--9262[label="0.0490196;5pkt 5fpkt"];
7902--12692[label="1;102pkt 102fpkt"];
7908--8872[label="0.833333;70pkt 70fpkt"];
7908--12692[label="0.97619;82pkt 82fpkt"];
7908--13031[label="0.0119048;1pkt 1fpkt"];
7938--8872[label="0.589744;69pkt 69fpkt"];
7938--9188[label="0.025641;3pkt 3fpkt"];
7938--9228[label="0.025641;3pkt 3fpkt"];
7938--9262[label="0.025641;3pkt 3fpkt"];
7938--12692[label="0.837607;98pkt 98fpkt"];
8320--8872[label="0.168831;13pkt 13fpkt"];
8320--9092[label="1;77pkt 77fpkt"];
8320--9188[label="0.0519481;4pkt 4fpkt"];
8320--9228[label="0.0519481;4pkt 4fpkt"];
8320--9262[label="0.0519481;4pkt 4fpkt"];
8320--12692[label="0.987013;76pkt 76fpkt"];
8742--12692[label="1;63pkt 63fpkt"];
8872--8961[label="0.611111;77pkt 77fpkt"];
8872--8970[label="0.163462;17pkt 17fpkt"];
8872--9067[label="0.166003;125pkt 125fpkt"];
8872--9092[label="0.168831;13pkt 13fpkt"];
8872--9178[label="0.0173516;19pkt 19fpkt"];
8872--9188[label="0.486331;338pkt 338fpkt"];
8872--9218[label="0.0173358;19pkt 19fpkt"];
8872--9228[label="0.486331;338pkt 338fpkt"];
8872--9252[label="0.0173516;19pkt 19fpkt"];
8872--9262[label="0.486331;338pkt 338fpkt"];
8872--12692[label="0.999842;6311pkt 6311fpkt"];
9092--9188[label="0.0519481;4pkt 4fpkt"];
9092--9228[label="0.0519481;4pkt 4fpkt"];
9092--9262[label="0.0519481;4pkt 4fpkt"];
9092--12692[label="0.987013;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="107.4.66.12" dst_port="80" src_ip="213.42.135.210"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_601{
style=filled;
color=gray75;
3030[label="8.188.168.48;s;11pkt 11fpkt", shape=diamond, color=yellow];
3684[label="209.150.115.37;s;56pkt 56fpkt", shape=diamond, color=yellow];
6607[label="136.228.199.46;d;51pkt 51fpkt", shape=hexagon, color=black];
8912[label="136.228.199.46;d;51pkt 51fpkt", shape=polygon, color=gold];
10164[label="8.188.168.48;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat601[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.150.115.37:80, *:*}[52.8302%]&lt;BR/&gt;{*:80, 136.228.199.46:*}[47.1698%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.4413%)&lt;BR/&gt; 7022: (1.11732%)&lt;BR/&gt; 7014: (1.11732%)&lt;BR/&gt; 7006: (1.11732%)&lt;BR/&gt; 6998: (1.11732%)&gt;];
}
3030--6607[label="1;11pkt 11fpkt"];
3030--8912[label="1;11pkt 11fpkt"];
3030--9194[label="0.0909091;1pkt 1fpkt"];
3030--9234[label="0.0909091;1pkt 1fpkt"];
3030--9268[label="0.0909091;1pkt 1fpkt"];
3030--10164[label="1;10pkt 10fpkt"];
3684--5154[label="0.125;7pkt 7fpkt"];
3684--5508[label="0.0357143;2pkt 2fpkt"];
3684--6607[label="0.0196078;1pkt 1fpkt"];
3684--6841[label="0.0178571;1pkt 1fpkt"];
3684--7726[label="0.0357143;2pkt 2fpkt"];
3684--7745[label="0.444444;20pkt 20fpkt"];
3684--8286[label="0.125;7pkt 7fpkt"];
3684--8529[label="0.0178571;1pkt 1fpkt"];
3684--8534[label="1;56pkt 56fpkt"];
3684--8912[label="0.0196078;1pkt 1fpkt"];
3684--9130[label="0.0178571;1pkt 1fpkt"];
3684--9163[label="0.0178571;1pkt 1fpkt"];
3684--9194[label="0.125;7pkt 7fpkt"];
3684--9198[label="0.0357143;2pkt 2fpkt"];
3684--9234[label="0.125;7pkt 7fpkt"];
3684--9268[label="0.125;7pkt 7fpkt"];
3684--9940[label="1;56pkt 56fpkt"];
6607--7294[label="0.456522;21pkt 21fpkt"];
6607--8534[label="0.0196078;1pkt 1fpkt"];
6607--8912[label="1;51pkt 51fpkt"];
6607--8920[label="0.456522;21pkt 21fpkt"];
6607--9163[label="0.0196078;1pkt 1fpkt"];
6607--9194[label="0.137255;7pkt 7fpkt"];
6607--9234[label="0.137255;7pkt 7fpkt"];
6607--9268[label="0.137255;7pkt 7fpkt"];
6607--9940[label="0.0196078;1pkt 1fpkt"];
6607--10164[label="1;10pkt 10fpkt"];
6607--10228[label="0.0555556;1pkt 1fpkt"];
6607--11715[label="0.456522;21pkt 21fpkt"];
6607--13741[label="0.0555556;1pkt 1fpkt"];
6607--14487[label="0.456522;21pkt 21fpkt"];
8912--8920[label="0.456522;21pkt 21fpkt"];
8912--9163[label="0.0196078;1pkt 1fpkt"];
8912--9194[label="0.137255;7pkt 7fpkt"];
8912--9234[label="0.137255;7pkt 7fpkt"];
8912--9268[label="0.137255;7pkt 7fpkt"];
8912--9940[label="0.0196078;1pkt 1fpkt"];
8912--10164[label="1;10pkt 10fpkt"];
8912--10228[label="0.0555556;1pkt 1fpkt"];
8912--11715[label="0.456522;21pkt 21fpkt"];
8912--13741[label="0.0555556;1pkt 1fpkt"];
8912--14487[label="0.456522;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="209.150.115.37" src_port="80"/>
      <filter dst_ip="136.228.199.46" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,020,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_603{
style=filled;
color=gray75;
3147[label="142.243.53.9;s;300pkt 300fpkt", shape=diamond, color=yellow];
7122[label="142.243.53.9;s;222pkt 222fpkt", shape=hexagon, color=black];
8935[label="142.243.53.9;s;222pkt 222fpkt", shape=polygon, color=gold];
stat603[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.53.9:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
3147--4159[label="0.00333333;1pkt 1fpkt"];
3147--4164[label="0.00333333;1pkt 1fpkt"];
3147--4171[label="0.00333333;1pkt 1fpkt"];
3147--5045[label="0.00343643;1pkt 1fpkt"];
3147--5065[label="0.003663;1pkt 1fpkt"];
3147--5070[label="0.00333333;1pkt 1fpkt"];
3147--5074[label="0.00371747;1pkt 1fpkt"];
3147--5094[label="0.00371747;1pkt 1fpkt"];
3147--5500[label="0.00431034;1pkt 1fpkt"];
3147--7122[label="1;222pkt 222fpkt"];
3147--7441[label="0.00333333;1pkt 1fpkt"];
3147--8555[label="0.003663;1pkt 1fpkt"];
3147--8564[label="0.00371747;1pkt 1fpkt"];
3147--8935[label="1;222pkt 222fpkt"];
7122--7441[label="0.0045045;1pkt 1fpkt"];
7122--8555[label="0.0045045;1pkt 1fpkt"];
7122--8564[label="0.0045045;1pkt 1fpkt"];
7122--8935[label="1;222pkt 222fpkt"];
</description>
    <slice>
      <filter src_ip="142.243.53.9"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_604{
style=filled;
color=gray75;
1271[label="162.73.188.145;s;63pkt 63fpkt", shape=diamond, color=yellow];
3213[label="105.45.103.223;d;1pkt 1fpkt", shape=diamond, color=yellow];
3712[label="98.173.53.113;d;1pkt 1fpkt", shape=diamond, color=yellow];
5509[label="111.68.82.28;d;1pkt 1fpkt", shape=diamond, color=yellow];
6565[label="162.73.188.145;s;30pkt 30fpkt", shape=hexagon, color=black];
7181[label="98.173.53.113;d;1pkt 1fpkt", shape=hexagon, color=black];
7792[label="105.45.103.223;d;1pkt 1fpkt", shape=hexagon, color=black];
8574[label="111.68.82.28;d;1pkt 1fpkt", shape=hexagon, color=black];
11720[label="162.73.188.145;80pkt 80fpkt", shape=pentagon, color=darkviolet];
stat604[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.188.145:31878, *:*}[71.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 31878: (34.6369%)&lt;BR/&gt; 995: (1.95531%)&lt;BR/&gt; 80: (1.95531%)&lt;BR/&gt; 62898: (1.39665%)&lt;BR/&gt; 60819: (1.39665%)&gt;];
}
1271--1402[label="0.031746;2pkt 2fpkt"];
1271--2030[label="0.2;1pkt 1fpkt"];
1271--3213[label="1;1pkt 1fpkt"];
1271--3712[label="1;1pkt 1fpkt"];
1271--4265[label="0.03125;1pkt 1fpkt"];
1271--5509[label="1;1pkt 1fpkt"];
1271--6082[label="0.031746;2pkt 2fpkt"];
1271--6565[label="1;30pkt 30fpkt"];
1271--6873[label="0.5;1pkt 1fpkt"];
1271--7181[label="1;1pkt 1fpkt"];
1271--7792[label="1;1pkt 1fpkt"];
1271--8519[label="0.015873;1pkt 1fpkt"];
1271--8574[label="1;1pkt 1fpkt"];
1271--11720[label="1;63pkt 63fpkt"];
3213--6565[label="1;1pkt 1fpkt"];
3213--7792[label="1;1pkt 1fpkt"];
3213--11720[label="1;1pkt 1fpkt"];
3712--6565[label="1;1pkt 1fpkt"];
3712--7181[label="1;1pkt 1fpkt"];
3712--11720[label="1;1pkt 1fpkt"];
5509--6565[label="1;1pkt 1fpkt"];
5509--8574[label="1;1pkt 1fpkt"];
5509--11720[label="1;1pkt 1fpkt"];
6565--6873[label="0.5;1pkt 1fpkt"];
6565--7181[label="1;1pkt 1fpkt"];
6565--7792[label="1;1pkt 1fpkt"];
6565--8519[label="0.0333333;1pkt 1fpkt"];
6565--8574[label="1;1pkt 1fpkt"];
6565--11720[label="1;30pkt 30fpkt"];
7181--11720[label="1;1pkt 1fpkt"];
7792--11720[label="1;1pkt 1fpkt"];
8574--11720[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="162.73.188.145" src_port="31878"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,999,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_605{
style=filled;
color=gray75;
3877[label="107.100.242.83;d;23pkt 23fpkt", shape=diamond, color=yellow];
5780[label="136.228.241.101;s;2pkt 2fpkt", shape=diamond, color=yellow];
7572[label="107.100.242.83;d;17pkt 17fpkt", shape=hexagon, color=black];
8964[label="107.100.242.83;d;17pkt 17fpkt", shape=polygon, color=gold];
9411[label="153.109.154.6;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11037[label="136.228.241.101;8pkt 8fpkt", shape=pentagon, color=darkviolet];
stat605[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.144.70:80, 107.100.242.83:*}[45.8333%]&lt;BR/&gt;{136.228.241.101:*, 107.100.242.83:*}[33.3333%]&lt;BR/&gt;{153.109.154.6:*, *:*}[20.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.4722%)&lt;BR/&gt; 21: (10.4167%)&lt;BR/&gt; 60022: (2.77778%)&lt;BR/&gt; 52176: (2.77778%)&lt;BR/&gt; 52059: (2.77778%)&gt;];
}
3877--5780[label="1;2pkt 2fpkt"];
3877--7572[label="1;17pkt 17fpkt"];
3877--8964[label="1;17pkt 17fpkt"];
3877--9163[label="0.0869565;2pkt 2fpkt"];
3877--9194[label="0.0869565;2pkt 2fpkt"];
3877--9198[label="0.0434783;1pkt 1fpkt"];
3877--9234[label="0.0869565;2pkt 2fpkt"];
3877--9268[label="0.0869565;2pkt 2fpkt"];
3877--9411[label="0.8;4pkt 4fpkt"];
3877--11037[label="1;8pkt 8fpkt"];
3877--13310[label="0.666667;4pkt 4fpkt"];
5780--11037[label="1;2pkt 2fpkt"];
7572--8964[label="1;17pkt 17fpkt"];
7572--9163[label="0.117647;2pkt 2fpkt"];
7572--9194[label="0.117647;2pkt 2fpkt"];
7572--9234[label="0.117647;2pkt 2fpkt"];
7572--9268[label="0.117647;2pkt 2fpkt"];
7572--9411[label="0.6;3pkt 3fpkt"];
7572--11037[label="0.75;6pkt 6fpkt"];
7572--13310[label="0.5;3pkt 3fpkt"];
8964--9163[label="0.117647;2pkt 2fpkt"];
8964--9194[label="0.117647;2pkt 2fpkt"];
8964--9234[label="0.117647;2pkt 2fpkt"];
8964--9268[label="0.117647;2pkt 2fpkt"];
8964--9411[label="0.6;3pkt 3fpkt"];
8964--11037[label="0.75;6pkt 6fpkt"];
8964--13310[label="0.5;3pkt 3fpkt"];
9411--13310[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="153.109.154.6"/>
      <filter dst_ip="107.100.242.83" src_ip="136.228.241.101"/>
      <filter dst_ip="107.100.242.83" src_ip="142.226.144.70" src_port="80"/>
    </slice>
    <from sec="1223614816" usec="0"/>
    <to sec="1223615601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_606{
style=filled;
color=gray75;
3400[label="18.101.220.57;d;3pkt 3fpkt", shape=diamond, color=yellow];
6992[label="18.101.220.57;d;3pkt 3fpkt", shape=hexagon, color=black];
8966[label="18.101.220.57;d;3pkt 3fpkt", shape=polygon, color=gold];
stat606[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.146.9:64273, 18.101.220.57:21400}[33.3333%]&lt;BR/&gt;{213.33.146.9:64599, 18.101.220.57:21400}[33.3333%]&lt;BR/&gt;{213.33.146.9:65073, 18.101.220.57:21400}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21400: (50%)&lt;BR/&gt; 65073: (16.6667%)&lt;BR/&gt; 64599: (16.6667%)&lt;BR/&gt; 64273: (16.6667%)&gt;];
}
3400--6992[label="1;3pkt 3fpkt"];
3400--8966[label="1;3pkt 3fpkt"];
3400--9460[label="1;3pkt 3fpkt"];
6992--8966[label="1;3pkt 3fpkt"];
6992--9460[label="1;3pkt 3fpkt"];
8966--9460[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="18.101.220.57" dst_port="21400" src_ip="213.33.146.9" src_port="65073"/>
      <filter dst_ip="18.101.220.57" dst_port="21400" src_ip="213.33.146.9" src_port="64599"/>
      <filter dst_ip="18.101.220.57" dst_port="21400" src_ip="213.33.146.9" src_port="64273"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223615625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_608{
style=filled;
color=gray75;
4433[label="212.138.110.212;s;3pkt 3fpkt", shape=diamond, color=yellow];
7661[label="212.138.110.212;s;3pkt 3fpkt", shape=hexagon, color=black];
8981[label="212.138.110.212;s;3pkt 3fpkt", shape=polygon, color=gold];
stat608[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.110.212:1935, 136.228.172.147:21987}[33.3333%]&lt;BR/&gt;{212.138.110.212:1935, 136.228.118.160:3813}[33.3333%]&lt;BR/&gt;{212.138.110.212:1935, 213.33.59.231:1095}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 21987: (16.6667%)&lt;BR/&gt; 3813: (16.6667%)&lt;BR/&gt; 1095: (16.6667%)&gt;];
}
4433--7661[label="1;3pkt 3fpkt"];
4433--8981[label="1;3pkt 3fpkt"];
7661--8981[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.59.231" dst_port="1095" src_ip="212.138.110.212" src_port="1935"/>
      <filter dst_ip="136.228.118.160" dst_port="3813" src_ip="212.138.110.212" src_port="1935"/>
      <filter dst_ip="136.228.172.147" dst_port="21987" src_ip="212.138.110.212" src_port="1935"/>
    </slice>
    <from sec="1223615184" usec="0"/>
    <to sec="1223615486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_612{
style=filled;
color=gray75;
4625[label="194.173.188.69;s;2pkt 2fpkt", shape=diamond, color=yellow];
4843[label="136.228.172.18;d;7pkt 7fpkt", shape=diamond, color=yellow];
8029[label="136.228.172.18;d;7pkt 7fpkt", shape=hexagon, color=black];
8096[label="194.173.188.69;s;1pkt 1fpkt", shape=hexagon, color=black];
9034[label="136.228.172.18;d;7pkt 7fpkt", shape=polygon, color=gold];
9039[label="194.173.188.69;s;1pkt 1fpkt", shape=polygon, color=gold];
10493[label="194.173.188.69;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat612[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 136.228.172.18:32768}[37.5%]&lt;BR/&gt;{*:123, 136.228.172.18:123}[37.5%]&lt;BR/&gt;{194.173.188.69:80, *:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (33.3333%)&lt;BR/&gt; 32768: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 2804: (12.963%)&gt;];
}
4625--4843[label="0.5;1pkt 1fpkt"];
4625--8029[label="0.5;1pkt 1fpkt"];
4625--8096[label="1;1pkt 1fpkt"];
4625--9034[label="0.5;1pkt 1fpkt"];
4625--9039[label="1;1pkt 1fpkt"];
4625--9198[label="1;2pkt 2fpkt"];
4625--10493[label="1;2pkt 2fpkt"];
4625--13876[label="1;1pkt 1fpkt"];
4843--7211[label="0.142857;1pkt 1fpkt"];
4843--8029[label="1;7pkt 7fpkt"];
4843--8096[label="1;1pkt 1fpkt"];
4843--9034[label="1;7pkt 7fpkt"];
4843--9039[label="1;1pkt 1fpkt"];
4843--9197[label="0.142857;1pkt 1fpkt"];
4843--9198[label="0.142857;1pkt 1fpkt"];
4843--10493[label="0.5;1pkt 1fpkt"];
8029--8096[label="1;1pkt 1fpkt"];
8029--9034[label="1;7pkt 7fpkt"];
8029--9039[label="1;1pkt 1fpkt"];
8029--9197[label="0.142857;1pkt 1fpkt"];
8029--9198[label="0.142857;1pkt 1fpkt"];
8029--10493[label="0.5;1pkt 1fpkt"];
8096--9034[label="1;1pkt 1fpkt"];
8096--9039[label="1;1pkt 1fpkt"];
8096--9198[label="1;1pkt 1fpkt"];
8096--10493[label="1;1pkt 1fpkt"];
9034--9039[label="1;1pkt 1fpkt"];
9034--9197[label="0.142857;1pkt 1fpkt"];
9034--9198[label="0.142857;1pkt 1fpkt"];
9034--10493[label="0.5;1pkt 1fpkt"];
9039--9198[label="1;1pkt 1fpkt"];
9039--10493[label="1;1pkt 1fpkt"];
10493--13876[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="194.173.188.69" src_port="80"/>
      <filter dst_ip="136.228.172.18" dst_port="123" src_port="123"/>
      <filter dst_ip="136.228.172.18" dst_port="32768" src_port="53"/>
    </slice>
    <from sec="1223615128" usec="0"/>
    <to sec="1223615630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.19996,2.18342,999,0 0 0 0 0 1 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="77.200.213.184"/>
      <from sec="1223615300" usec="0"/>
      <to sec="1223615418" usec="0"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615418" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_616{
style=filled;
color=gray75;
3146[label="136.228.148.136;d;93pkt 93fpkt", shape=diamond, color=yellow];
6547[label="219.43.10.43;s;57pkt 57fpkt", shape=hexagon, color=black];
7120[label="136.228.148.136;d;88pkt 88fpkt", shape=hexagon, color=black];
stat616[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.148.136:61597}[31.5068%]&lt;BR/&gt;{219.43.10.43:80, 136.228.71.181:*}[28.0822%]&lt;BR/&gt;{*:80, 136.228.148.136:*}[26.7123%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.3613%)&lt;BR/&gt; 61597: (18.4874%)&lt;BR/&gt; 0: (4.62185%)&lt;BR/&gt; 61918: (0.840336%)&lt;BR/&gt; 61941: (0.630252%)&gt;];
}
3146--6547[label="0.0701754;4pkt 4fpkt"];
3146--7120[label="1;88pkt 88fpkt"];
3146--9054[label="1;88pkt 88fpkt"];
3146--9896[label="0.0215054;2pkt 2fpkt"];
6547--7120[label="0.0701754;4pkt 4fpkt"];
6547--9054[label="0.0701754;4pkt 4fpkt"];
6547--9163[label="0.0350877;2pkt 2fpkt"];
6547--9194[label="0.0350877;2pkt 2fpkt"];
6547--9198[label="0.0175439;1pkt 1fpkt"];
6547--9234[label="0.0350877;2pkt 2fpkt"];
6547--9268[label="0.0350877;2pkt 2fpkt"];
7120--9054[label="1;88pkt 88fpkt"];
7120--9896[label="0.0227273;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.148.136" src_port="80"/>
      <filter dst_ip="136.228.148.136" dst_port="61597"/>
      <filter dst_ip="136.228.71.181" src_ip="219.43.10.43" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
1080[label="142.16.131.2;d;82pkt 82fpkt", shape=diamond, color=yellow];
3683[label="221.112.183.143;s;16pkt 16fpkt", shape=diamond, color=yellow];
7144[label="221.112.183.143;s;16pkt 16fpkt", shape=hexagon, color=black];
9059[label="221.112.183.143;s;16pkt 16fpkt", shape=polygon, color=gold];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.112.183.142:80, 142.16.131.2:*}[32.9268%]&lt;BR/&gt;{221.112.183.143:*, 142.16.131.2:*}[20.7317%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (42.6923%)&lt;BR/&gt; 137: (4.61538%)&lt;BR/&gt; 3678: (1.53846%)&lt;BR/&gt; 3667: (1.53846%)&lt;BR/&gt; 3665: (1.53846%)&gt;];
}
1080--3683[label="1;16pkt 16fpkt"];
1080--3853[label="1;27pkt 27fpkt"];
1080--4260[label="1;1pkt 1fpkt"];
1080--7144[label="1;16pkt 16fpkt"];
1080--7559[label="1;21pkt 21fpkt"];
1080--7880[label="1;1pkt 1fpkt"];
1080--9059[label="1;16pkt 16fpkt"];
1080--9163[label="0.0487805;4pkt 4fpkt"];
1080--9194[label="0.0365854;3pkt 3fpkt"];
1080--9198[label="0.0243902;2pkt 2fpkt"];
1080--9234[label="0.0365854;3pkt 3fpkt"];
1080--9268[label="0.0365854;3pkt 3fpkt"];
1080--11662[label="0.928571;26pkt 26fpkt"];
3683--7144[label="1;16pkt 16fpkt"];
3683--9059[label="1;16pkt 16fpkt"];
3683--9163[label="0.125;2pkt 2fpkt"];
3683--9194[label="0.0625;1pkt 1fpkt"];
3683--9234[label="0.0625;1pkt 1fpkt"];
3683--9268[label="0.0625;1pkt 1fpkt"];
7144--9059[label="1;16pkt 16fpkt"];
7144--9163[label="0.125;2pkt 2fpkt"];
7144--9194[label="0.0625;1pkt 1fpkt"];
7144--9234[label="0.0625;1pkt 1fpkt"];
7144--9268[label="0.0625;1pkt 1fpkt"];
9059--9163[label="0.125;2pkt 2fpkt"];
9059--9194[label="0.0625;1pkt 1fpkt"];
9059--9234[label="0.0625;1pkt 1fpkt"];
9059--9268[label="0.0625;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.131.2" src_ip="221.112.183.143"/>
      <filter dst_ip="142.16.131.2" src_ip="221.112.183.142" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,503,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_619{
style=filled;
color=gray75;
2854[label="136.228.94.209;d;66pkt 66fpkt", shape=diamond, color=yellow];
3934[label="76.10.28.77;s;6pkt 6fpkt", shape=diamond, color=yellow];
5022[label="205.10.155.149;s;6pkt 6fpkt", shape=diamond, color=yellow];
6637[label="136.228.94.209;d;48pkt 48fpkt", shape=hexagon, color=black];
7989[label="76.10.28.77;s;6pkt 6fpkt", shape=hexagon, color=black];
8476[label="205.10.155.149;s;6pkt 6fpkt", shape=hexagon, color=black];
9098[label="68.160.64.216;s;93pkt 93fpkt", shape=polygon, color=gold];
stat619[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.160.64.216:80, 213.33.145.7:*}[41.8605%]&lt;BR/&gt;{68.160.64.216:80, 136.228.94.209:*}[23.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3003: (0.865801%)&lt;BR/&gt; 3001: (0.865801%)&lt;BR/&gt; 2981: (0.865801%)&lt;BR/&gt; 2960: (0.865801%)&gt;];
}
2854--3934[label="1;6pkt 6fpkt"];
2854--4801[label="0.454545;30pkt 30fpkt"];
2854--5022[label="1;6pkt 6fpkt"];
2854--6637[label="1;48pkt 48fpkt"];
2854--7970[label="0.454545;30pkt 30fpkt"];
2854--7989[label="1;6pkt 6fpkt"];
2854--8476[label="1;6pkt 6fpkt"];
2854--9098[label="0.454545;30pkt 30fpkt"];
2854--9163[label="0.106061;7pkt 7fpkt"];
2854--9194[label="0.166667;11pkt 11fpkt"];
2854--9198[label="0.136364;9pkt 9fpkt"];
2854--9234[label="0.166667;11pkt 11fpkt"];
2854--9268[label="0.166667;11pkt 11fpkt"];
3934--6637[label="1;6pkt 6fpkt"];
3934--7989[label="1;6pkt 6fpkt"];
3934--9194[label="0.166667;1pkt 1fpkt"];
3934--9234[label="0.166667;1pkt 1fpkt"];
3934--9268[label="0.166667;1pkt 1fpkt"];
5022--8476[label="1;6pkt 6fpkt"];
5022--9198[label="1;6pkt 6fpkt"];
6637--7970[label="0.416667;20pkt 20fpkt"];
6637--7989[label="1;6pkt 6fpkt"];
6637--9098[label="0.416667;20pkt 20fpkt"];
6637--9163[label="0.145833;7pkt 7fpkt"];
6637--9194[label="0.104167;5pkt 5fpkt"];
6637--9198[label="0.0208333;1pkt 1fpkt"];
6637--9234[label="0.104167;5pkt 5fpkt"];
6637--9268[label="0.104167;5pkt 5fpkt"];
7989--9194[label="0.166667;1pkt 1fpkt"];
7989--9234[label="0.166667;1pkt 1fpkt"];
7989--9268[label="0.166667;1pkt 1fpkt"];
8476--9198[label="1;6pkt 6fpkt"];
9098--9163[label="0.0215054;2pkt 2fpkt"];
9098--9194[label="0.0645161;6pkt 6fpkt"];
9098--9234[label="0.0645161;6pkt 6fpkt"];
9098--9268[label="0.0645161;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.94.209" src_ip="68.160.64.216" src_port="80"/>
      <filter dst_ip="213.33.145.7" src_ip="68.160.64.216" src_port="80"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,999,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_621{
style=filled;
color=gray75;
2444[label="107.4.85.226;s;4pkt 4fpkt", shape=diamond, color=yellow];
4368[label="164.25.95.11;d;52pkt 52fpkt", shape=diamond, color=yellow];
8356[label="164.25.95.11;d;35pkt 35fpkt", shape=hexagon, color=black];
9102[label="164.25.95.11;d;35pkt 35fpkt", shape=polygon, color=gold];
stat621[shape=component, label=&lt;Rules:&lt;BR/&gt;{122.2.197.187:*, 164.25.95.11:25}[20.7547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (48.8095%)&lt;BR/&gt; 0: (2.38095%)&lt;BR/&gt; 43929: (1.5873%)&lt;BR/&gt; 43911: (1.5873%)&lt;BR/&gt; 43863: (1.5873%)&gt;];
}
2444--4368[label="0.75;3pkt 3fpkt"];
2444--6602[label="0.25;1pkt 1fpkt"];
2444--8356[label="0.75;3pkt 3fpkt"];
2444--9102[label="0.75;3pkt 3fpkt"];
4368--8356[label="1;35pkt 35fpkt"];
4368--9102[label="1;35pkt 35fpkt"];
4368--9177[label="0.0769231;4pkt 4fpkt"];
4368--9217[label="0.0769231;4pkt 4fpkt"];
4368--9251[label="0.0769231;4pkt 4fpkt"];
4368--11622[label="0.526316;10pkt 10fpkt"];
4368--14443[label="0.526316;10pkt 10fpkt"];
8356--9102[label="1;35pkt 35fpkt"];
8356--9177[label="0.114286;4pkt 4fpkt"];
8356--9217[label="0.114286;4pkt 4fpkt"];
8356--9251[label="0.114286;4pkt 4fpkt"];
8356--11622[label="0.105263;2pkt 2fpkt"];
8356--14443[label="0.105263;2pkt 2fpkt"];
9102--9177[label="0.114286;4pkt 4fpkt"];
9102--9217[label="0.114286;4pkt 4fpkt"];
9102--9251[label="0.114286;4pkt 4fpkt"];
9102--11622[label="0.105263;2pkt 2fpkt"];
9102--14443[label="0.105263;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.95.11" dst_port="25" src_ip="122.2.197.187"/>
    </slice>
    <from sec="1223614897" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35872,2.07927,011,0 0 0 1 1 1 0 0 0 0 0 0 ">
    <description>subgraph cluster_623{
style=filled;
color=gray75;
1071[label="160.49.3.255;d;1309pkt 1309fpkt", shape=diamond, color=yellow];
6006[label="160.49.3.255;d;1309pkt 1309fpkt", shape=hexagon, color=black];
9120[label="160.49.3.255;d;701pkt 701fpkt", shape=polygon, color=gold];
stat623[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.94.172.209:80, 160.49.3.255:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61101: (0.0451943%)&lt;BR/&gt; 61100: (0.0451943%)&lt;BR/&gt; 61099: (0.0451943%)&lt;BR/&gt; 61098: (0.0451943%)&gt;];
}
1071--1074[label="1;1309pkt 1309fpkt"];
1071--6006[label="1;1309pkt 1309fpkt"];
1071--9120[label="1;701pkt 701fpkt"];
1071--9198[label="0.244461;320pkt 320fpkt"];
6006--9120[label="1;701pkt 701fpkt"];
6006--9198[label="0.244461;320pkt 320fpkt"];
9120--9198[label="0.182596;128pkt 128fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.3.255" src_ip="40.94.172.209" src_port="80"/>
    </slice>
    <from sec="1223615439" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
3552[label="104.243.250.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
7068[label="104.243.250.139;s;1pkt 1fpkt", shape=hexagon, color=black];
9125[label="104.243.250.139;s;2pkt 2fpkt", shape=polygon, color=gold];
11618[label="104.243.250.139;4pkt 4fpkt", shape=pentagon, color=darkviolet];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.250.139:80, 142.243.98.167:57270}[20%]&lt;BR/&gt;{104.243.250.139:80, 142.243.98.167:57408}[20%]&lt;BR/&gt;{104.243.250.139:80, 142.243.98.167:57592}[20%]&lt;BR/&gt;{104.243.250.139:80, 142.243.98.167:57677}[20%]&lt;BR/&gt;{104.243.250.139:80, 142.243.98.167:61186}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61186: (25%)&lt;BR/&gt; 57677: (6.25%)&lt;BR/&gt; 57592: (6.25%)&lt;BR/&gt; 57408: (6.25%)&gt;];
}
3552--7068[label="1;1pkt 1fpkt"];
3552--9125[label="1;1pkt 1fpkt"];
3552--9198[label="1;1pkt 1fpkt"];
3552--11618[label="1;1pkt 1fpkt"];
7068--9125[label="1;1pkt 1fpkt"];
7068--9198[label="1;1pkt 1fpkt"];
7068--11618[label="1;1pkt 1fpkt"];
9125--9198[label="0.5;1pkt 1fpkt"];
9125--11618[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.98.167" dst_port="61186" src_ip="104.243.250.139" src_port="80"/>
      <filter dst_ip="142.243.98.167" dst_port="57677" src_ip="104.243.250.139" src_port="80"/>
      <filter dst_ip="142.243.98.167" dst_port="57592" src_ip="104.243.250.139" src_port="80"/>
      <filter dst_ip="142.243.98.167" dst_port="57408" src_ip="104.243.250.139" src_port="80"/>
      <filter dst_ip="142.243.98.167" dst_port="57270" src_ip="104.243.250.139" src_port="80"/>
    </slice>
    <from sec="1223615086" usec="0"/>
    <to sec="1223615651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.857172,2.02412,503,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_628{
style=filled;
color=gray75;
2012[label="107.100.242.21;d;17pkt 17fpkt", shape=diamond, color=yellow];
2013[label="142.226.15.215;s;14pkt 14fpkt", shape=diamond, color=yellow];
5628[label="107.100.242.202;d;18pkt 18fpkt", shape=diamond, color=yellow];
5629[label="153.109.148.100;s;21pkt 21fpkt", shape=diamond, color=yellow];
6304[label="107.100.242.21;d;17pkt 17fpkt", shape=hexagon, color=black];
7474[label="142.226.15.215;s;10pkt 10fpkt", shape=hexagon, color=black];
8664[label="107.100.242.202;d;18pkt 18fpkt", shape=hexagon, color=black];
14140[label="153.109.148.100;21pkt 21fpkt", shape=invtriangle, color=brown];
stat628[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.148.100:80, 107.100.242.202:*}[42.5%]&lt;BR/&gt;{142.226.15.215:*, 107.100.242.21:*}[32.5%]&lt;BR/&gt;{*:80, 107.100.242.21:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.1324%)&lt;BR/&gt; 8080: (9.19118%)&lt;BR/&gt; 61766: (1.47059%)&lt;BR/&gt; 60771: (1.47059%)&lt;BR/&gt; 58911: (1.47059%)&gt;];
}
2012--2013[label="0.928571;13pkt 13fpkt"];
2012--6304[label="1;17pkt 17fpkt"];
2012--7474[label="0.9;9pkt 9fpkt"];
2012--9163[label="0.0588235;1pkt 1fpkt"];
2012--9194[label="0.117647;2pkt 2fpkt"];
2012--9198[label="0.0588235;1pkt 1fpkt"];
2012--9234[label="0.117647;2pkt 2fpkt"];
2012--9268[label="0.117647;2pkt 2fpkt"];
2013--6304[label="0.928571;13pkt 13fpkt"];
2013--7474[label="1;10pkt 10fpkt"];
2013--9163[label="0.0714286;1pkt 1fpkt"];
2013--9194[label="0.142857;2pkt 2fpkt"];
2013--9198[label="0.0714286;1pkt 1fpkt"];
2013--9234[label="0.142857;2pkt 2fpkt"];
2013--9268[label="0.142857;2pkt 2fpkt"];
5628--5629[label="1;18pkt 18fpkt"];
5628--8664[label="1;18pkt 18fpkt"];
5628--9163[label="0.111111;2pkt 2fpkt"];
5628--9194[label="0.0555556;1pkt 1fpkt"];
5628--9234[label="0.0555556;1pkt 1fpkt"];
5628--9268[label="0.0555556;1pkt 1fpkt"];
5628--11022[label="1;18pkt 18fpkt"];
5628--14140[label="1;18pkt 18fpkt"];
5629--8664[label="1;18pkt 18fpkt"];
5629--9163[label="0.0952381;2pkt 2fpkt"];
5629--9194[label="0.047619;1pkt 1fpkt"];
5629--9234[label="0.047619;1pkt 1fpkt"];
5629--9268[label="0.047619;1pkt 1fpkt"];
5629--11022[label="1;21pkt 21fpkt"];
5629--14140[label="0.952381;20pkt 20fpkt"];
6304--7474[label="0.9;9pkt 9fpkt"];
6304--9163[label="0.0588235;1pkt 1fpkt"];
6304--9194[label="0.117647;2pkt 2fpkt"];
6304--9198[label="0.0588235;1pkt 1fpkt"];
6304--9234[label="0.117647;2pkt 2fpkt"];
6304--9268[label="0.117647;2pkt 2fpkt"];
7474--9163[label="0.1;1pkt 1fpkt"];
7474--9194[label="0.2;2pkt 2fpkt"];
7474--9234[label="0.2;2pkt 2fpkt"];
7474--9268[label="0.2;2pkt 2fpkt"];
8664--9163[label="0.111111;2pkt 2fpkt"];
8664--9194[label="0.0555556;1pkt 1fpkt"];
8664--9234[label="0.0555556;1pkt 1fpkt"];
8664--9268[label="0.0555556;1pkt 1fpkt"];
8664--11022[label="1;18pkt 18fpkt"];
8664--14140[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.242.21" src_ip="142.226.15.215"/>
      <filter dst_ip="107.100.242.21" src_port="80"/>
      <filter dst_ip="107.100.242.202" src_ip="153.109.148.100" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_634{
style=filled;
color=gray75;
5813[label="160.49.184.215;d;7pkt 7fpkt", shape=diamond, color=yellow];
8789[label="160.49.184.215;d;7pkt 7fpkt", shape=hexagon, color=black];
stat634[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.228.19.212:80, 160.49.184.215:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1854: (7.14286%)&lt;BR/&gt; 1853: (7.14286%)&lt;BR/&gt; 1852: (7.14286%)&lt;BR/&gt; 1851: (7.14286%)&gt;];
}
5813--8789[label="1;7pkt 7fpkt"];
5813--9198[label="0.571429;4pkt 4fpkt"];
8789--9198[label="0.571429;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.184.215" src_ip="195.228.19.212" src_port="80"/>
    </slice>
    <from sec="1223615558" usec="0"/>
    <to sec="1223615614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.225.35.0"/>
    </slice>
    <from sec="1223614868" usec="0"/>
    <to sec="1223614873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.38.45.0"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.133.47.0"/>
    </slice>
    <from sec="1223615459" usec="0"/>
    <to sec="1223615505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.153.96.0"/>
    </slice>
    <from sec="1223615258" usec="0"/>
    <to sec="1223615262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.136.151.0"/>
    </slice>
    <from sec="1223615227" usec="0"/>
    <to sec="1223615303" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.88.168.0"/>
    </slice>
    <from sec="1223615097" usec="0"/>
    <to sec="1223615125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.194.61.1"/>
    </slice>
    <from sec="1223614817" usec="0"/>
    <to sec="1223615521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.100.16.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.13.33.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.139.34.2"/>
    </slice>
    <from sec="1223615174" usec="0"/>
    <to sec="1223615182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.75.2"/>
    </slice>
    <from sec="1223614966" usec="0"/>
    <to sec="1223614984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.74.84.2"/>
    </slice>
    <from sec="1223614854" usec="0"/>
    <to sec="1223614877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.21.131.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.202.57.4"/>
    </slice>
    <from sec="1223615387" usec="0"/>
    <to sec="1223615469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.32.69.4"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.192.70.4"/>
    </slice>
    <from sec="1223615293" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.81.4"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.230.122.4"/>
    </slice>
    <from sec="1223615665" usec="0"/>
    <to sec="1223615670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.16.150.4"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.6.222.4"/>
    </slice>
    <from sec="1223614935" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.100.243.4"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.173.85.5"/>
    </slice>
    <from sec="1223615520" usec="0"/>
    <to sec="1223615541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.108.102.5"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.43.149.5"/>
    </slice>
    <from sec="1223615322" usec="0"/>
    <to sec="1223615330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.61.208.5"/>
    </slice>
    <from sec="1223614848" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.52.6"/>
    </slice>
    <from sec="1223615039" usec="0"/>
    <to sec="1223615075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.135.77.6"/>
    </slice>
    <from sec="1223615186" usec="0"/>
    <to sec="1223615207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.66.105.6"/>
    </slice>
    <from sec="1223615336" usec="0"/>
    <to sec="1223615362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.153.132.6"/>
    </slice>
    <from sec="1223615201" usec="0"/>
    <to sec="1223615215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.250.6"/>
    </slice>
    <from sec="1223615036" usec="0"/>
    <to sec="1223615071" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.232.3.7"/>
    </slice>
    <from sec="1223615345" usec="0"/>
    <to sec="1223615363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.236.196.7"/>
    </slice>
    <from sec="1223615113" usec="0"/>
    <to sec="1223615124" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.237.208.7"/>
    </slice>
    <from sec="1223615529" usec="0"/>
    <to sec="1223615631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.79.1.8"/>
    </slice>
    <from sec="1223614834" usec="0"/>
    <to sec="1223615676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.65.33.8"/>
    </slice>
    <from sec="1223615064" usec="0"/>
    <to sec="1223615068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.174.36.8"/>
    </slice>
    <from sec="1223615406" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
2393[label="142.16.209.78;d;4pkt 4fpkt", shape=diamond, color=yellow];
2556[label="200.81.45.8;s;4pkt 4fpkt", shape=diamond, color=yellow];
9436[label="200.81.45.8;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13325[label="200.81.45.8;4pkt 4fpkt", shape=invtriangle, color=brown];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.81.45.8:80, 142.16.209.78:4604}[25%]&lt;BR/&gt;{200.81.45.8:80, 142.16.209.78:4608}[25%]&lt;BR/&gt;{200.81.45.8:80, 142.16.209.78:4638}[25%]&lt;BR/&gt;{200.81.45.8:80, 142.16.209.78:4639}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4639: (13.3333%)&lt;BR/&gt; 4638: (13.3333%)&lt;BR/&gt; 4608: (13.3333%)&lt;BR/&gt; 4604: (10%)&gt;];
}
2393--2556[label="1;4pkt 4fpkt"];
2393--9436[label="1;3pkt 3fpkt"];
2393--13325[label="1;4pkt 4fpkt"];
2556--9436[label="1;3pkt 3fpkt"];
2556--13325[label="1;4pkt 4fpkt"];
9436--13325[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.209.78" dst_port="4639" src_ip="200.81.45.8" src_port="80"/>
      <filter dst_ip="142.16.209.78" dst_port="4638" src_ip="200.81.45.8" src_port="80"/>
      <filter dst_ip="142.16.209.78" dst_port="4608" src_ip="200.81.45.8" src_port="80"/>
      <filter dst_ip="142.16.209.78" dst_port="4604" src_ip="200.81.45.8" src_port="80"/>
    </slice>
    <from sec="1223614862" usec="0"/>
    <to sec="1223615004" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.106.204.8"/>
    </slice>
    <from sec="1223615136" usec="0"/>
    <to sec="1223615223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.50.227.8"/>
    </slice>
    <from sec="1223615569" usec="0"/>
    <to sec="1223615604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.07593,2.09411,002,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_678{
style=filled;
color=gray75;
358[label="76.139.64.9s;250pkt 250fpkt", shape=rectangle, color=red];
9454[label="76.139.64.9;254pkt 254fpkt", shape=pentagon, color=darkviolet];
13333[label="76.139.64.9;254pkt 254fpkt", shape=invtriangle, color=brown];
stat678[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.139.64.9:1031, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1031: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
358--9454[label="0.996;249pkt 249fpkt"];
358--13333[label="0.996;249pkt 249fpkt"];
9454--13333[label="1;254pkt 254fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="76.139.64.9" src_port="1031"/>
    </slice>
    <from sec="1223615344" usec="0"/>
    <to sec="1223615358" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.161.67.9"/>
    </slice>
    <from sec="1223615360" usec="0"/>
    <to sec="1223615444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.63.178.9"/>
    </slice>
    <from sec="1223615389" usec="0"/>
    <to sec="1223615399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.32.29.10"/>
    </slice>
    <from sec="1223615146" usec="0"/>
    <to sec="1223615178" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.63.46.10"/>
    </slice>
    <from sec="1223615519" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.75.59.10"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.193.110.10"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.4.123.10"/>
    </slice>
    <from sec="1223615665" usec="0"/>
    <to sec="1223615668" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.136.209.10"/>
    </slice>
    <from sec="1223615424" usec="0"/>
    <to sec="1223615473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.24.15.11"/>
    </slice>
    <from sec="1223614985" usec="0"/>
    <to sec="1223615685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.147.10.12"/>
    </slice>
    <from sec="1223615229" usec="0"/>
    <to sec="1223615369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.71.12"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.142.145.12"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.110.12.13"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="222.181.16.13"/>
    </slice>
    <from sec="1223615200" usec="0"/>
    <to sec="1223615206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.64.101.13"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.81.34.14"/>
    </slice>
    <from sec="1223615360" usec="0"/>
    <to sec="1223615423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.150.122.14"/>
    </slice>
    <from sec="1223614870" usec="0"/>
    <to sec="1223614879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
3858[label="136.228.138.208;d;67pkt 67fpkt", shape=diamond, color=yellow];
7931[label="136.228.138.208;d;62pkt 62fpkt", shape=hexagon, color=black];
9464[label="18.117.207.9;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13341[label="18.117.207.9;2pkt 2fpkt", shape=invtriangle, color=brown];
15325[label="18.117.207.9;3pkt 3fpkt", shape=invhouse, color=bisque];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.228.138.208:*}[95.5224%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.7941%)&lt;BR/&gt; 2427: (1.83824%)&lt;BR/&gt; 2425: (1.83824%)&lt;BR/&gt; 2592: (1.47059%)&lt;BR/&gt; 2423: (1.10294%)&gt;];
}
3858--4210[label="0.19403;13pkt 13fpkt"];
3858--7931[label="1;62pkt 62fpkt"];
3858--8213[label="0.19403;13pkt 13fpkt"];
3858--9163[label="0.0298507;2pkt 2fpkt"];
3858--9194[label="0.477612;32pkt 32fpkt"];
3858--9198[label="0.0149254;1pkt 1fpkt"];
3858--9234[label="0.477612;32pkt 32fpkt"];
3858--9268[label="0.477612;32pkt 32fpkt"];
3858--9464[label="1;2pkt 2fpkt"];
3858--9549[label="0.047619;1pkt 1fpkt"];
3858--13341[label="1;2pkt 2fpkt"];
3858--15325[label="1;3pkt 3fpkt"];
7931--8213[label="0.209677;13pkt 13fpkt"];
7931--9163[label="0.0322581;2pkt 2fpkt"];
7931--9194[label="0.516129;32pkt 32fpkt"];
7931--9234[label="0.516129;32pkt 32fpkt"];
7931--9268[label="0.516129;32pkt 32fpkt"];
7931--9464[label="1;2pkt 2fpkt"];
7931--9549[label="0.047619;1pkt 1fpkt"];
7931--13341[label="1;2pkt 2fpkt"];
7931--15325[label="1;3pkt 3fpkt"];
9464--13341[label="1;2pkt 2fpkt"];
9464--15325[label="1;2pkt 2fpkt"];
13341--15325[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.138.208" src_port="80"/>
    </slice>
    <from sec="1223614810" usec="0"/>
    <to sec="1223615604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.66.176.14"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.176.185.14"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.178.213.14"/>
    </slice>
    <from sec="1223615634" usec="0"/>
    <to sec="1223615643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.146.24.15"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.31.36.15"/>
    </slice>
    <from sec="1223615330" usec="0"/>
    <to sec="1223615338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.236.54.15"/>
    </slice>
    <from sec="1223615142" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.210.82.15"/>
    </slice>
    <from sec="1223615122" usec="0"/>
    <to sec="1223615127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="54.175.171.15"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.209.217.15"/>
    </slice>
    <from sec="1223615116" usec="0"/>
    <to sec="1223615360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_706{
style=filled;
color=gray75;
2235[label="164.25.108.28;d;17pkt 17fpkt", shape=diamond, color=yellow];
4338[label="107.100.252.15;s;4pkt 4fpkt", shape=diamond, color=yellow];
5711[label="107.100.252.97;s;1pkt 1fpkt", shape=diamond, color=yellow];
6372[label="164.25.108.28;d;17pkt 17fpkt", shape=hexagon, color=black];
7960[label="107.100.252.15;s;4pkt 4fpkt", shape=hexagon, color=black];
9571[label="107.100.252.15;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13397[label="107.100.252.15;4pkt 4fpkt", shape=invtriangle, color=brown];
stat706[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.100.252.14:*, 164.25.108.28:80}[38.8889%]&lt;BR/&gt;{107.100.252.1:*, 164.25.108.28:80}[27.7778%]&lt;BR/&gt;{107.100.252.15:*, 164.25.108.28:80}[27.7778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60596: (5.88235%)&lt;BR/&gt; 58824: (5.88235%)&lt;BR/&gt; 33919: (5.88235%)&lt;BR/&gt; 37657: (3.92157%)&gt;];
}
2235--2236[label="1;2pkt 2fpkt"];
2235--4338[label="1;4pkt 4fpkt"];
2235--5711[label="1;1pkt 1fpkt"];
2235--6372[label="1;17pkt 17fpkt"];
2235--7960[label="1;4pkt 4fpkt"];
2235--9555[label="0.857143;6pkt 6fpkt"];
2235--9571[label="0.75;3pkt 3fpkt"];
2235--13386[label="0.857143;6pkt 6fpkt"];
2235--13397[label="0.75;3pkt 3fpkt"];
2235--15348[label="0.875;7pkt 7fpkt"];
4338--6372[label="1;4pkt 4fpkt"];
4338--7960[label="1;4pkt 4fpkt"];
4338--9571[label="0.75;3pkt 3fpkt"];
4338--13397[label="0.75;3pkt 3fpkt"];
5711--6372[label="1;1pkt 1fpkt"];
6372--7960[label="1;4pkt 4fpkt"];
6372--9555[label="0.857143;6pkt 6fpkt"];
6372--9571[label="0.75;3pkt 3fpkt"];
6372--13386[label="0.857143;6pkt 6fpkt"];
6372--13397[label="0.75;3pkt 3fpkt"];
6372--15348[label="0.875;7pkt 7fpkt"];
7960--9571[label="0.75;3pkt 3fpkt"];
7960--13397[label="0.75;3pkt 3fpkt"];
9571--13397[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.108.28" dst_port="80" src_ip="107.100.252.14"/>
      <filter dst_ip="164.25.108.28" dst_port="80" src_ip="107.100.252.15"/>
      <filter dst_ip="164.25.108.28" dst_port="80" src_ip="107.100.252.1"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.6.96.16"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.81.169.16"/>
    </slice>
    <from sec="1223615090" usec="0"/>
    <to sec="1223615571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_709{
style=filled;
color=gray75;
3948[label="136.228.118.165;d;3pkt 3fpkt", shape=diamond, color=yellow];
4084[label="104.243.253.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
7397[label="104.243.253.16;s;1pkt 1fpkt", shape=hexagon, color=black];
9589[label="104.243.253.16;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13406[label="104.243.253.16;2pkt 2fpkt", shape=invtriangle, color=brown];
15356[label="104.243.253.16;1pkt 1fpkt", shape=invhouse, color=bisque];
stat709[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.252.8:80, 136.228.118.165:4041}[33.3333%]&lt;BR/&gt;{104.243.253.16:80, 136.228.118.165:3967}[33.3333%]&lt;BR/&gt;{104.243.253.16:80, 136.228.118.165:4029}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4029: (27.7778%)&lt;BR/&gt; 3967: (16.6667%)&lt;BR/&gt; 4041: (5.55556%)&gt;];
}
3948--4084[label="1;1pkt 1fpkt"];
3948--7397[label="1;1pkt 1fpkt"];
3948--9589[label="1;1pkt 1fpkt"];
3948--13406[label="1;2pkt 2fpkt"];
3948--15356[label="1;1pkt 1fpkt"];
4084--9589[label="1;1pkt 1fpkt"];
4084--13406[label="1;1pkt 1fpkt"];
4084--15356[label="1;1pkt 1fpkt"];
7397--13406[label="1;1pkt 1fpkt"];
9589--13406[label="1;1pkt 1fpkt"];
9589--15356[label="1;1pkt 1fpkt"];
13406--15356[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.118.165" dst_port="4029" src_ip="104.243.253.16" src_port="80"/>
      <filter dst_ip="136.228.118.165" dst_port="3967" src_ip="104.243.253.16" src_port="80"/>
      <filter dst_ip="136.228.118.165" dst_port="4041" src_ip="104.243.252.8" src_port="80"/>
    </slice>
    <from sec="1223615005" usec="0"/>
    <to sec="1223615502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.86.42.17"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
1204[label="212.138.109.17;s;8pkt 8fpkt", shape=diamond, color=yellow];
9597[label="212.138.109.17;9pkt 9fpkt", shape=pentagon, color=darkviolet];
13409[label="212.138.109.17;8pkt 8fpkt", shape=invtriangle, color=brown];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.17:80, 136.228.214.244:*}[88.8889%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4807: (6%)&lt;BR/&gt; 4747: (6%)&lt;BR/&gt; 4722: (6%)&lt;BR/&gt; 4505: (6%)&gt;];
}
1204--1931[label="1;8pkt 8fpkt"];
1204--9597[label="1;8pkt 8fpkt"];
1204--13409[label="1;8pkt 8fpkt"];
9597--13409[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.214.244" src_ip="212.138.109.17" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615474" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.235.143.17"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.174.149.17"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.132.223.17"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.15.18"/>
    </slice>
    <from sec="1223615210" usec="0"/>
    <to sec="1223615216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.45.18"/>
    </slice>
    <from sec="1223614996" usec="0"/>
    <to sec="1223615484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.246.67.18"/>
    </slice>
    <from sec="1223615072" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.229.93.18"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615383" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.6.133.18"/>
    </slice>
    <from sec="1223615606" usec="0"/>
    <to sec="1223615659" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.113.139.18"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223614857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.225.143.18"/>
    </slice>
    <from sec="1223615506" usec="0"/>
    <to sec="1223615536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.195.232.18"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.204.232.18"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.251.18"/>
    </slice>
    <from sec="1223614956" usec="0"/>
    <to sec="1223615018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.130.42.19"/>
    </slice>
    <from sec="1223615368" usec="0"/>
    <to sec="1223615378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.29.73.19"/>
    </slice>
    <from sec="1223615104" usec="0"/>
    <to sec="1223615139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.212.56.20"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.48.98.20"/>
    </slice>
    <from sec="1223614841" usec="0"/>
    <to sec="1223615121" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.242.104.20"/>
    </slice>
    <from sec="1223615635" usec="0"/>
    <to sec="1223615637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.251.20"/>
    </slice>
    <from sec="1223615168" usec="0"/>
    <to sec="1223615227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.12.21"/>
    </slice>
    <from sec="1223615146" usec="0"/>
    <to sec="1223615168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.113.139.21"/>
    </slice>
    <from sec="1223615458" usec="0"/>
    <to sec="1223615492" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.73.147.21"/>
    </slice>
    <from sec="1223615533" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.178.21"/>
    </slice>
    <from sec="1223615565" usec="0"/>
    <to sec="1223615581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_735{
style=filled;
color=gray75;
5892[label="205.141.230.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
9682[label="205.141.230.21;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat735[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.141.230.21:43354, 212.21.132.27:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43354: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5892--9682[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.132.27" dst_port="80" src_ip="205.141.230.21" src_port="43354"/>
    </slice>
    <from sec="1223615623" usec="0"/>
    <to sec="1223615625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.182.51.22"/>
    </slice>
    <from sec="1223615299" usec="0"/>
    <to sec="1223615321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.243.98.22"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.133.174.22"/>
    </slice>
    <from sec="1223614818" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.192.98.23"/>
    </slice>
    <from sec="1223615143" usec="0"/>
    <to sec="1223615151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.152.152.23"/>
    </slice>
    <from sec="1223615169" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.243.241.23"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.248.23"/>
    </slice>
    <from sec="1223615527" usec="0"/>
    <to sec="1223615635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.66.17.24"/>
    </slice>
    <from sec="1223615676" usec="0"/>
    <to sec="1223615684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="116.196.83.24"/>
    </slice>
    <from sec="1223615303" usec="0"/>
    <to sec="1223615329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,002,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.202.106.24"/>
    </slice>
    <from sec="1223615220" usec="0"/>
    <to sec="1223615238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.241.169.24"/>
    </slice>
    <from sec="1223615554" usec="0"/>
    <to sec="1223615567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_747{
style=filled;
color=gray75;
1764[label="193.71.0.25;s;17pkt 17fpkt", shape=diamond, color=yellow];
9739[label="193.71.0.25;17pkt 17fpkt", shape=pentagon, color=darkviolet];
13479[label="193.71.0.25;17pkt 17fpkt", shape=invtriangle, color=brown];
stat747[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.71.0.25:80, 213.42.135.210:*}[94.1176%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.0588%)&lt;BR/&gt; 0: (5.88235%)&lt;BR/&gt; 62516: (2.94118%)&lt;BR/&gt; 62504: (2.94118%)&lt;BR/&gt; 62493: (2.94118%)&gt;];
}
1764--6209[label="1;17pkt 17fpkt"];
1764--9739[label="1;17pkt 17fpkt"];
1764--13479[label="1;17pkt 17fpkt"];
9739--13479[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.135.210" src_ip="193.71.0.25" src_port="80"/>
    </slice>
    <from sec="1223614877" usec="0"/>
    <to sec="1223614892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.122.46.25"/>
    </slice>
    <from sec="1223614968" usec="0"/>
    <to sec="1223614973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_749{
style=filled;
color=gray75;
4996[label="204.73.73.25;s;124pkt 124fpkt", shape=diamond, color=yellow];
9746[label="204.73.73.25;124pkt 124fpkt", shape=pentagon, color=darkviolet];
stat749[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.73.73.25:80, 142.243.98.167:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60774: (0.403226%)&lt;BR/&gt; 60773: (0.403226%)&lt;BR/&gt; 60772: (0.403226%)&lt;BR/&gt; 60771: (0.403226%)&gt;];
}
4996--9746[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.98.167" src_ip="204.73.73.25" src_port="80"/>
    </slice>
    <from sec="1223615407" usec="0"/>
    <to sec="1223615471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.227.83.25"/>
    </slice>
    <from sec="1223615374" usec="0"/>
    <to sec="1223615380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.208.189.25"/>
    </slice>
    <from sec="1223615652" usec="0"/>
    <to sec="1223615661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.157.155.26"/>
    </slice>
    <from sec="1223615559" usec="0"/>
    <to sec="1223615566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.66.180.26"/>
    </slice>
    <from sec="1223615515" usec="0"/>
    <to sec="1223615519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.40.110.27"/>
    </slice>
    <from sec="1223615108" usec="0"/>
    <to sec="1223615114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,011,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_755{
style=filled;
color=gray75;
2685[label="20.98.132.27;s;1699pkt 1699fpkt", shape=diamond, color=yellow];
6862[label="20.98.132.27;s;802pkt 802fpkt", shape=hexagon, color=black];
9776[label="20.98.132.27;1835pkt 1835fpkt", shape=pentagon, color=darkviolet];
stat755[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.98.132.27:10378, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10378: (50%)&lt;BR/&gt; 22597: (0.0922509%)&lt;BR/&gt; 64564: (0.0691882%)&lt;BR/&gt; 37450: (0.0691882%)&lt;BR/&gt; 37243: (0.0691882%)&gt;];
}
2685--6862[label="1;802pkt 802fpkt"];
2685--9182[label="0.00071736;1pkt 1fpkt"];
2685--9222[label="0.00071736;1pkt 1fpkt"];
2685--9256[label="0.00071736;1pkt 1fpkt"];
2685--9776[label="1;1699pkt 1699fpkt"];
6862--9182[label="0.00124688;1pkt 1fpkt"];
6862--9222[label="0.00124688;1pkt 1fpkt"];
6862--9256[label="0.00124688;1pkt 1fpkt"];
6862--9776[label="1;802pkt 802fpkt"];
</description>
    <slice>
      <filter src_ip="20.98.132.27" src_port="10378"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.27.141.27"/>
    </slice>
    <from sec="1223614969" usec="0"/>
    <to sec="1223614984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.72.28"/>
    </slice>
    <from sec="1223615221" usec="0"/>
    <to sec="1223615242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.116.78.28"/>
    </slice>
    <from sec="1223614946" usec="0"/>
    <to sec="1223614975" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.165.121.28"/>
    </slice>
    <from sec="1223615285" usec="0"/>
    <to sec="1223615321" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.208.189.28"/>
    </slice>
    <from sec="1223615654" usec="0"/>
    <to sec="1223615673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,020,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_761{
style=filled;
color=gray75;
4245[label="136.228.208.28;s;152pkt 152fpkt", shape=diamond, color=yellow];
8601[label="136.228.208.28;s;153pkt 153fpkt", shape=hexagon, color=black];
9800[label="136.228.208.28;163pkt 163fpkt", shape=pentagon, color=darkviolet];
13507[label="136.228.208.28;163pkt 163fpkt", shape=invtriangle, color=brown];
15411[label="136.228.208.28;162pkt 162fpkt", shape=invhouse, color=bisque];
stat761[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.208.28:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4245--8601[label="1;152pkt 152fpkt"];
4245--9800[label="1;152pkt 152fpkt"];
4245--13507[label="1;152pkt 152fpkt"];
4245--15411[label="1;152pkt 152fpkt"];
8601--9800[label="1;153pkt 153fpkt"];
8601--13507[label="1;153pkt 153fpkt"];
8601--15411[label="0.993464;152pkt 152fpkt"];
9800--13507[label="1;163pkt 163fpkt"];
9800--15411[label="1;162pkt 162fpkt"];
13507--15411[label="1;162pkt 162fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.208.28"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.161.246.28"/>
    </slice>
    <from sec="1223615666" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.81.54.29"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.152.104.29"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.21.149.29"/>
    </slice>
    <from sec="1223615179" usec="0"/>
    <to sec="1223615195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.182.22.30"/>
    </slice>
    <from sec="1223615358" usec="0"/>
    <to sec="1223615374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.61.90.30"/>
    </slice>
    <from sec="1223615315" usec="0"/>
    <to sec="1223615339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_768{
style=filled;
color=gray75;
2597[label="107.100.249.165;d;368pkt 368fpkt", shape=diamond, color=yellow];
2598[label="136.228.80.31;s;376pkt 376fpkt", shape=diamond, color=yellow];
6775[label="136.228.80.31;s;256pkt 256fpkt", shape=hexagon, color=black];
7104[label="107.100.249.165;d;211pkt 211fpkt", shape=hexagon, color=black];
9832[label="136.228.80.31;410pkt 410fpkt", shape=pentagon, color=darkviolet];
stat768[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.80.31:8888, 107.100.249.165:*}[90.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8888: (49.2597%)&lt;BR/&gt; 80: (0.740284%)&lt;BR/&gt; 65520: (0.154226%)&lt;BR/&gt; 65337: (0.154226%)&lt;BR/&gt; 65025: (0.154226%)&gt;];
}
2597--2598[label="0.959239;353pkt 353fpkt"];
2597--6775[label="0.9375;240pkt 240fpkt"];
2597--7104[label="1;211pkt 211fpkt"];
2597--9163[label="0.00271739;1pkt 1fpkt"];
2597--9198[label="0.00271739;1pkt 1fpkt"];
2597--9832[label="0.959239;353pkt 353fpkt"];
2598--6775[label="1;256pkt 256fpkt"];
2598--7104[label="0.957346;202pkt 202fpkt"];
2598--9832[label="1;376pkt 376fpkt"];
6775--7104[label="0.957346;202pkt 202fpkt"];
6775--9832[label="1;256pkt 256fpkt"];
7104--9163[label="0.00473934;1pkt 1fpkt"];
7104--9832[label="0.957346;202pkt 202fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.249.165" src_ip="136.228.80.31" src_port="8888"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.131.98.31"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.217.128.31"/>
    </slice>
    <from sec="1223614955" usec="0"/>
    <to sec="1223614963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.40.209.31"/>
    </slice>
    <from sec="1223615311" usec="0"/>
    <to sec="1223615326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_772{
style=filled;
color=gray75;
861[label="213.33.60.174;d;108pkt 108fpkt", shape=diamond, color=yellow];
1188[label="110.2.56.32;s;37pkt 37fpkt", shape=diamond, color=yellow];
8545[label="110.2.56.32;s;37pkt 37fpkt", shape=hexagon, color=black];
9842[label="110.2.56.32;37pkt 37fpkt", shape=pentagon, color=darkviolet];
12377[label="112.245.0.190;21pkt 21fpkt", shape=pentagon, color=darkviolet];
13527[label="110.2.56.32;37pkt 37fpkt", shape=invtriangle, color=brown];
14829[label="112.245.0.190;20pkt 20fpkt", shape=invtriangle, color=brown];
15416[label="110.2.56.32;38pkt 38fpkt", shape=invhouse, color=bisque];
16096[label="112.245.0.190;21pkt 21fpkt", shape=invhouse, color=bisque];
stat772[shape=component, label=&lt;Rules:&lt;BR/&gt;{110.2.56.32:*, 213.33.60.174:22214}[29.2035%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22214: (42.1348%)&lt;BR/&gt; 6112: (3.93258%)&lt;BR/&gt; 38376: (3.23034%)&lt;BR/&gt; 57292: (0.842697%)&lt;BR/&gt; 57113: (0.842697%)&gt;];
}
861--1188[label="0.945946;35pkt 35fpkt"];
861--8545[label="0.945946;35pkt 35fpkt"];
861--9842[label="0.918919;34pkt 34fpkt"];
861--12377[label="0.904762;19pkt 19fpkt"];
861--13527[label="0.918919;34pkt 34fpkt"];
861--14829[label="0.9;18pkt 18fpkt"];
861--15416[label="0.921053;35pkt 35fpkt"];
861--16096[label="0.904762;19pkt 19fpkt"];
1188--8545[label="1;37pkt 37fpkt"];
1188--9842[label="0.972973;36pkt 36fpkt"];
1188--13527[label="0.972973;36pkt 36fpkt"];
1188--15416[label="1;37pkt 37fpkt"];
8545--9842[label="0.972973;36pkt 36fpkt"];
8545--13527[label="0.972973;36pkt 36fpkt"];
8545--15416[label="1;37pkt 37fpkt"];
9842--13527[label="1;37pkt 37fpkt"];
9842--15416[label="1;37pkt 37fpkt"];
12377--14829[label="1;20pkt 20fpkt"];
12377--16096[label="1;21pkt 21fpkt"];
13527--15416[label="1;37pkt 37fpkt"];
14829--16096[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.60.174" dst_port="22214" src_ip="110.2.56.32"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.164.146.32"/>
    </slice>
    <from sec="1223615175" usec="0"/>
    <to sec="1223615446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.188.196.32"/>
    </slice>
    <from sec="1223615242" usec="0"/>
    <to sec="1223615259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.42.33"/>
    </slice>
    <from sec="1223615356" usec="0"/>
    <to sec="1223615368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.244.77.33"/>
    </slice>
    <from sec="1223615391" usec="0"/>
    <to sec="1223615442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.186.193.33"/>
    </slice>
    <from sec="1223615676" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_778{
style=filled;
color=gray75;
4784[label="213.33.57.34;s;15pkt 15fpkt", shape=diamond, color=yellow];
9878[label="213.33.57.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat778[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.57.34:*, *:80}[73.3333%]&lt;BR/&gt;{213.33.57.34:*, 71.4.7.240:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5%)&lt;BR/&gt; 1262: (6.25%)&lt;BR/&gt; 53692: (3.125%)&lt;BR/&gt; 53605: (3.125%)&lt;BR/&gt; 53447: (3.125%)&gt;];
}
4784--9878[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="71.4.7.240" src_ip="213.33.57.34"/>
      <filter dst_port="80" src_ip="213.33.57.34"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.73.100.34"/>
    </slice>
    <from sec="1223615127" usec="0"/>
    <to sec="1223615132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.62.219.34"/>
    </slice>
    <from sec="1223615262" usec="0"/>
    <to sec="1223615287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.74.35"/>
    </slice>
    <from sec="1223615397" usec="0"/>
    <to sec="1223615440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_782{
style=filled;
color=gray75;
1491[label="222.128.109.35;s;444pkt 444fpkt", shape=diamond, color=yellow];
6104[label="222.128.109.35;s;190pkt 190fpkt", shape=hexagon, color=black];
9902[label="222.128.109.35;444pkt 444fpkt", shape=pentagon, color=darkviolet];
13564[label="222.128.109.35;444pkt 444fpkt", shape=invtriangle, color=brown];
15436[label="222.128.109.35;444pkt 444fpkt", shape=invhouse, color=bisque];
stat782[shape=component, label=&lt;Rules:&lt;BR/&gt;{222.128.109.35:*, *:445}[57.2072%]&lt;BR/&gt;{222.128.109.35:*, *:139}[42.7928%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.8393%)&lt;BR/&gt; 139: (24.1607%)&lt;BR/&gt; 60631: (0.127162%)&lt;BR/&gt; 60627: (0.127162%)&lt;BR/&gt; 60622: (0.127162%)&gt;];
}
1491--6104[label="1;190pkt 190fpkt"];
1491--9902[label="1;444pkt 444fpkt"];
1491--13564[label="1;444pkt 444fpkt"];
1491--15436[label="1;444pkt 444fpkt"];
6104--9902[label="1;190pkt 190fpkt"];
6104--13564[label="1;190pkt 190fpkt"];
6104--15436[label="1;190pkt 190fpkt"];
9902--13564[label="1;444pkt 444fpkt"];
9902--15436[label="1;444pkt 444fpkt"];
13564--15436[label="1;444pkt 444fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="222.128.109.35"/>
      <filter dst_port="139" src_ip="222.128.109.35"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.23.161.35"/>
    </slice>
    <from sec="1223615311" usec="0"/>
    <to sec="1223615332" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.49.186.35"/>
    </slice>
    <from sec="1223615314" usec="0"/>
    <to sec="1223615319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.20.216.36"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.150.12.37"/>
    </slice>
    <from sec="1223614901" usec="0"/>
    <to sec="1223614914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.229.53.37"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614952" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.77.37"/>
    </slice>
    <from sec="1223615006" usec="0"/>
    <to sec="1223615013" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.6.97.37"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.102.114.37"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_792{
style=filled;
color=gray75;
4212[label="142.243.32.38;s;748pkt 748fpkt", shape=diamond, color=yellow];
7495[label="142.243.32.38;s;661pkt 661fpkt", shape=hexagon, color=black];
9958[label="142.243.32.38;807pkt 807fpkt", shape=pentagon, color=darkviolet];
13595[label="142.243.32.38;807pkt 807fpkt", shape=invtriangle, color=brown];
15450[label="142.243.32.38;807pkt 807fpkt", shape=invhouse, color=bisque];
stat792[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.32.38:*, 110.150.88.186:53}[44.5545%]&lt;BR/&gt;{142.243.32.38:*, 110.150.88.187:53}[44.5545%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.0862%)&lt;BR/&gt; 0: (1.69713%)&lt;BR/&gt; 45543: (0.130548%)&lt;BR/&gt; 6528: (0.104439%)&lt;BR/&gt; 6215: (0.104439%)&gt;];
}
4212--4696[label="0.00158983;1pkt 1fpkt"];
4212--5059[label="0.0037037;2pkt 2fpkt"];
4212--5488[label="0.00378072;2pkt 2fpkt"];
4212--5511[label="0.00234192;1pkt 1fpkt"];
4212--5550[label="0.0043573;2pkt 2fpkt"];
4212--6844[label="0.0031746;2pkt 2fpkt"];
4212--7495[label="1;661pkt 661fpkt"];
4212--8212[label="0.0013369;1pkt 1fpkt"];
4212--8546[label="0.0037037;2pkt 2fpkt"];
4212--9196[label="0.0013369;1pkt 1fpkt"];
4212--9958[label="0.998663;747pkt 747fpkt"];
4212--13595[label="0.998663;747pkt 747fpkt"];
4212--15450[label="0.998663;747pkt 747fpkt"];
7495--8212[label="0.00151286;1pkt 1fpkt"];
7495--8546[label="0.0037037;2pkt 2fpkt"];
7495--9196[label="0.00151286;1pkt 1fpkt"];
7495--9958[label="0.998487;660pkt 660fpkt"];
7495--13595[label="0.998487;660pkt 660fpkt"];
7495--15450[label="0.998487;660pkt 660fpkt"];
9958--13595[label="1;807pkt 807fpkt"];
9958--15450[label="1;807pkt 807fpkt"];
13595--15450[label="1;807pkt 807fpkt"];
</description>
    <slice>
      <filter dst_ip="110.150.88.187" dst_port="53" src_ip="142.243.32.38"/>
      <filter dst_ip="110.150.88.186" dst_port="53" src_ip="142.243.32.38"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.134.36.39"/>
    </slice>
    <from sec="1223615185" usec="0"/>
    <to sec="1223615211" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.112.166.39"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.54.220.39"/>
    </slice>
    <from sec="1223615273" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.133.3.40"/>
    </slice>
    <from sec="1223614819" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.254.169.40"/>
    </slice>
    <from sec="1223615455" usec="0"/>
    <to sec="1223615457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.81.228.40"/>
    </slice>
    <from sec="1223614861" usec="0"/>
    <to sec="1223615605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.243.234.40"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.43.38.41"/>
    </slice>
    <from sec="1223615633" usec="0"/>
    <to sec="1223615660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.128.47.41"/>
    </slice>
    <from sec="1223615003" usec="0"/>
    <to sec="1223615005" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.170.0.42"/>
    </slice>
    <from sec="1223615223" usec="0"/>
    <to sec="1223615515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.142.21.42"/>
    </slice>
    <from sec="1223615447" usec="0"/>
    <to sec="1223615475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.73.45.42"/>
    </slice>
    <from sec="1223615488" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.162.92.42"/>
    </slice>
    <from sec="1223615321" usec="0"/>
    <to sec="1223615326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.91.43"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_807{
style=filled;
color=gray75;
5482[label="196.133.124.43;s;1pkt 1fpkt", shape=diamond, color=yellow];
10072[label="196.133.124.43;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13661[label="196.133.124.43;1pkt 1fpkt", shape=invtriangle, color=brown];
stat807[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.133.124.43:4321, 142.16.199.79:61152}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61152: (50%)&lt;BR/&gt; 4321: (50%)&gt;];
}
5482--10072[label="1;1pkt 1fpkt"];
5482--13661[label="1;1pkt 1fpkt"];
10072--13661[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.199.79" dst_port="61152" src_ip="196.133.124.43" src_port="4321"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
2954[label="212.21.133.43;s;88pkt 88fpkt", shape=diamond, color=yellow];
7597[label="212.21.133.43;s;88pkt 88fpkt", shape=hexagon, color=black];
10074[label="212.21.133.43;90pkt 90fpkt", shape=pentagon, color=darkviolet];
13662[label="212.21.133.43;90pkt 90fpkt", shape=invtriangle, color=brown];
15476[label="212.21.133.43;89pkt 89fpkt", shape=invhouse, color=bisque];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.133.43:80, 195.174.157.98:*}[81.1111%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62855: (0.561798%)&lt;BR/&gt; 62834: (0.561798%)&lt;BR/&gt; 61351: (0.561798%)&lt;BR/&gt; 59817: (0.561798%)&gt;];
}
2954--4382[label="0.0113636;1pkt 1fpkt"];
2954--4776[label="0.129032;4pkt 4fpkt"];
2954--7597[label="1;88pkt 88fpkt"];
2954--8010[label="0.0113636;1pkt 1fpkt"];
2954--9103[label="0.0113636;1pkt 1fpkt"];
2954--9194[label="0.0113636;1pkt 1fpkt"];
2954--9198[label="0.0113636;1pkt 1fpkt"];
2954--9234[label="0.0113636;1pkt 1fpkt"];
2954--9268[label="0.0113636;1pkt 1fpkt"];
2954--10074[label="1;88pkt 88fpkt"];
2954--13662[label="1;88pkt 88fpkt"];
2954--15476[label="0.988636;87pkt 87fpkt"];
7597--8010[label="0.0113636;1pkt 1fpkt"];
7597--9103[label="0.0113636;1pkt 1fpkt"];
7597--9194[label="0.0113636;1pkt 1fpkt"];
7597--9198[label="0.0113636;1pkt 1fpkt"];
7597--9234[label="0.0113636;1pkt 1fpkt"];
7597--9268[label="0.0113636;1pkt 1fpkt"];
7597--10074[label="1;88pkt 88fpkt"];
7597--13662[label="1;88pkt 88fpkt"];
7597--15476[label="0.988636;87pkt 87fpkt"];
10074--13662[label="1;90pkt 90fpkt"];
10074--15476[label="1;89pkt 89fpkt"];
13662--15476[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="195.174.157.98" src_ip="212.21.133.43" src_port="80"/>
    </slice>
    <from sec="1223614865" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.13.44"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.73.92.44"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.253.44"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.209.53.45"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.185.45"/>
    </slice>
    <from sec="1223615096" usec="0"/>
    <to sec="1223615119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,501,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_814{
style=filled;
color=gray75;
5322[label="210.72.146.46;s;31pkt 31fpkt", shape=diamond, color=yellow];
5353[label="142.228.110.232;d;23pkt 23fpkt", shape=diamond, color=yellow];
10125[label="210.72.146.46;38pkt 38fpkt", shape=pentagon, color=darkviolet];
stat814[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.72.146.46:21, 142.228.110.232:*}[26.3158%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (28.8043%)&lt;BR/&gt; 64321: (1.63043%)&lt;BR/&gt; 63335: (1.63043%)&lt;BR/&gt; 62356: (1.63043%)&lt;BR/&gt; 59744: (1.63043%)&gt;];
}
5322--5353[label="1;23pkt 23fpkt"];
5322--10125[label="1;31pkt 31fpkt"];
5353--10125[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.110.232" src_ip="210.72.146.46" src_port="21"/>
    </slice>
    <from sec="1223614943" usec="0"/>
    <to sec="1223615685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.55.215.46"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.187.244.46"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.215.28.47"/>
    </slice>
    <from sec="1223614833" usec="0"/>
    <to sec="1223615674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.245.33.47"/>
    </slice>
    <from sec="1223615310" usec="0"/>
    <to sec="1223615318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.125.57.47"/>
    </slice>
    <from sec="1223615384" usec="0"/>
    <to sec="1223615475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.85.123.47"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.136.166.47"/>
    </slice>
    <from sec="1223615534" usec="0"/>
    <to sec="1223615608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.75.48"/>
    </slice>
    <from sec="1223615059" usec="0"/>
    <to sec="1223615666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.48.27.49"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615069" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.242.49"/>
    </slice>
    <from sec="1223614848" usec="0"/>
    <to sec="1223614910" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_825{
style=filled;
color=gray75;
5732[label="20.169.66.50;s;6pkt 6fpkt", shape=diamond, color=yellow];
10187[label="20.169.66.50;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat825[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.169.66.50:*, 136.228.65.72:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3039: (9.09091%)&lt;BR/&gt; 3038: (9.09091%)&lt;BR/&gt; 3014: (9.09091%)&lt;BR/&gt; 3013: (9.09091%)&gt;];
}
5732--10187[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.65.72" dst_port="80" src_ip="20.169.66.50"/>
    </slice>
    <from sec="1223615471" usec="0"/>
    <to sec="1223615635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.173.50"/>
    </slice>
    <from sec="1223614976" usec="0"/>
    <to sec="1223615048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.60.197.50"/>
    </slice>
    <from sec="1223615327" usec="0"/>
    <to sec="1223615335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,501,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.58.222.50"/>
    </slice>
    <from sec="1223615124" usec="0"/>
    <to sec="1223615345" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.154.236.50"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.129.142.51"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.76.253.51"/>
    </slice>
    <from sec="1223615682" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_833{
style=filled;
color=gray75;
2467[label="213.43.81.52;s;2pkt 2fpkt", shape=diamond, color=yellow];
10223[label="213.43.81.52;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13739[label="213.43.81.52;2pkt 2fpkt", shape=invtriangle, color=brown];
15510[label="213.43.81.52;2pkt 2fpkt", shape=invhouse, color=bisque];
stat833[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.43.81.52:80, 162.73.198.216:1705}[50%]&lt;BR/&gt;{213.43.81.52:80, 162.73.198.216:1706}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1706: (25%)&lt;BR/&gt; 1705: (25%)&gt;];
}
2467--10223[label="1;2pkt 2fpkt"];
2467--13739[label="1;2pkt 2fpkt"];
2467--15510[label="1;2pkt 2fpkt"];
10223--13739[label="1;2pkt 2fpkt"];
10223--15510[label="1;2pkt 2fpkt"];
13739--15510[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.198.216" dst_port="1706" src_ip="213.43.81.52" src_port="80"/>
      <filter dst_ip="162.73.198.216" dst_port="1705" src_ip="213.43.81.52" src_port="80"/>
    </slice>
    <from sec="1223614912" usec="0"/>
    <to sec="1223614926" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.234.87.52"/>
    </slice>
    <from sec="1223615339" usec="0"/>
    <to sec="1223615343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.101.170.52"/>
    </slice>
    <from sec="1223615222" usec="0"/>
    <to sec="1223615258" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.124.5.53"/>
    </slice>
    <from sec="1223614832" usec="0"/>
    <to sec="1223614930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.126.45.53"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.84.52.53"/>
    </slice>
    <from sec="1223614952" usec="0"/>
    <to sec="1223615011" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.6.134.53"/>
    </slice>
    <from sec="1223615567" usec="0"/>
    <to sec="1223615572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.66.176.53"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.93.34.54"/>
    </slice>
    <from sec="1223615269" usec="0"/>
    <to sec="1223615300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.80.76.54"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.66.176.54"/>
    </slice>
    <from sec="1223614883" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.130.12.55"/>
    </slice>
    <from sec="1223615190" usec="0"/>
    <to sec="1223615197" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.786845,2.04257,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_846{
style=filled;
color=gray75;
1011[label="216.83.114.205;s;850pkt 850fpkt", shape=diamond, color=yellow];
4200[label="213.59.85.105;d;45pkt 45fpkt", shape=diamond, color=yellow];
8058[label="142.243.51.54;s;41pkt 41fpkt", shape=hexagon, color=black];
8575[label="213.59.85.105;d;45pkt 45fpkt", shape=hexagon, color=black];
stat846[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.83.114.205:*, *:*}[92.4918%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6667: (8.66463%)&lt;BR/&gt; 443: (6.42202%)&lt;BR/&gt; 6664: (3.00714%)&lt;BR/&gt; 6660: (2.75229%)&lt;BR/&gt; 6666: (2.70133%)&gt;];
}
1011--4200[label="0.0222222;1pkt 1fpkt"];
1011--8575[label="0.0222222;1pkt 1fpkt"];
1011--9181[label="0.00352941;3pkt 3fpkt"];
1011--9221[label="0.00352941;3pkt 3fpkt"];
1011--9255[label="0.00352941;3pkt 3fpkt"];
4200--4868[label="0.355556;16pkt 16fpkt"];
4200--8058[label="0.390244;16pkt 16fpkt"];
4200--8366[label="0.377778;17pkt 17fpkt"];
4200--8575[label="1;45pkt 45fpkt"];
4200--10273[label="0.377778;17pkt 17fpkt"];
4200--11524[label="0.0444444;2pkt 2fpkt"];
4200--14396[label="0.0444444;2pkt 2fpkt"];
8058--8059[label="0.0243902;1pkt 1fpkt"];
8058--8396[label="0.0487805;2pkt 2fpkt"];
8058--8575[label="0.390244;16pkt 16fpkt"];
8575--10273[label="0.377778;17pkt 17fpkt"];
8575--11524[label="0.0444444;2pkt 2fpkt"];
8575--14396[label="0.0444444;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="216.83.114.205"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.139.11.56"/>
    </slice>
    <from sec="1223615630" usec="0"/>
    <to sec="1223615662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.98.56"/>
    </slice>
    <from sec="1223615124" usec="0"/>
    <to sec="1223615185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.242.56"/>
    </slice>
    <from sec="1223615647" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.16.35.57"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.202.65.57"/>
    </slice>
    <from sec="1223615314" usec="0"/>
    <to sec="1223615330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.76.58"/>
    </slice>
    <from sec="1223615149" usec="0"/>
    <to sec="1223615157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.66.59"/>
    </slice>
    <from sec="1223615324" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.148.104.59"/>
    </slice>
    <from sec="1223614992" usec="0"/>
    <to sec="1223615000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.245.181.59"/>
    </slice>
    <from sec="1223615226" usec="0"/>
    <to sec="1223615277" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.43.19.61"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.155.67.61"/>
    </slice>
    <from sec="1223615033" usec="0"/>
    <to sec="1223615043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.157.80.61"/>
    </slice>
    <from sec="1223615060" usec="0"/>
    <to sec="1223615075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.223.45.62"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.201.47.62"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.188.181.62"/>
    </slice>
    <from sec="1223615142" usec="0"/>
    <to sec="1223615169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.215.8.63"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.224.139.63"/>
    </slice>
    <from sec="1223614908" usec="0"/>
    <to sec="1223614915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_864{
style=filled;
color=gray75;
1489[label="195.136.224.63;s;18pkt 18fpkt", shape=diamond, color=yellow];
10382[label="195.136.224.63;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13819[label="195.136.224.63;17pkt 17fpkt", shape=invtriangle, color=brown];
stat864[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.136.224.63:80, 162.73.99.60:*}[66.6667%]&lt;BR/&gt;{195.136.224.63:80, 162.73.76.196:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59663: (2.83019%)&lt;BR/&gt; 59662: (2.83019%)&lt;BR/&gt; 59661: (2.83019%)&lt;BR/&gt; 59660: (2.83019%)&gt;];
}
1489--3389[label="0.333333;6pkt 6fpkt"];
1489--9163[label="1;18pkt 18fpkt"];
1489--10382[label="1;18pkt 18fpkt"];
1489--13819[label="1;17pkt 17fpkt"];
10382--13819[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.99.60" src_ip="195.136.224.63" src_port="80"/>
      <filter dst_ip="162.73.76.196" src_ip="195.136.224.63" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223614860" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.213.28.64"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.168.67.64"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="139.40.230.64"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.15212,2.03841,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_868{
style=filled;
color=gray75;
73[label="104.243.246.64s;1pkt 1fpkt", shape=rectangle, color=red];
2929[label="213.33.155.80;d;2pkt 2fpkt", shape=diamond, color=yellow];
3070[label="104.243.246.64;s;1pkt 1fpkt", shape=diamond, color=yellow];
10402[label="104.243.246.64;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13831[label="104.243.246.64;1pkt 1fpkt", shape=invtriangle, color=brown];
stat868[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.246.64:80, 213.33.155.80:1336}[50%]&lt;BR/&gt;{192.105.65.97:80, 213.33.155.80:1300}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1336: (41.6667%)&lt;BR/&gt; 1300: (8.33333%)&gt;];
}
73--2929[label="1;1pkt 1fpkt"];
73--3070[label="1;1pkt 1fpkt"];
73--10402[label="1;1pkt 1fpkt"];
73--13831[label="1;1pkt 1fpkt"];
2929--3070[label="1;1pkt 1fpkt"];
2929--10402[label="1;1pkt 1fpkt"];
2929--13831[label="1;1pkt 1fpkt"];
3070--10402[label="1;1pkt 1fpkt"];
3070--13831[label="1;1pkt 1fpkt"];
10402--13831[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.155.80" dst_port="1300" src_ip="192.105.65.97" src_port="80"/>
      <filter dst_ip="213.33.155.80" dst_port="1336" src_ip="104.243.246.64" src_port="80"/>
    </slice>
    <from sec="1223614835" usec="0"/>
    <to sec="1223615140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.74.65"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.77.65"/>
    </slice>
    <from sec="1223615317" usec="0"/>
    <to sec="1223615377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
4445[label="213.0.96.65;s;24pkt 24fpkt", shape=diamond, color=yellow];
8051[label="213.0.96.65;s;24pkt 24fpkt", shape=hexagon, color=black];
10410[label="213.0.96.65;31pkt 31fpkt", shape=pentagon, color=darkviolet];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.0.96.65:80, 142.228.95.21:*}[64.5161%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64314: (1.89873%)&lt;BR/&gt; 64313: (1.89873%)&lt;BR/&gt; 64312: (1.89873%)&lt;BR/&gt; 64311: (1.89873%)&gt;];
}
4445--8051[label="1;24pkt 24fpkt"];
4445--10410[label="1;24pkt 24fpkt"];
8051--10410[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.95.21" src_ip="213.0.96.65" src_port="80"/>
    </slice>
    <from sec="1223614876" usec="0"/>
    <to sec="1223615694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.12.66"/>
    </slice>
    <from sec="1223615399" usec="0"/>
    <to sec="1223615597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.82.66"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_874{
style=filled;
color=gray75;
884[label="136.228.120.104;d;172pkt 172fpkt", shape=diamond, color=yellow];
2145[label="142.16.131.3;d;69pkt 69fpkt", shape=diamond, color=yellow];
3516[label="194.157.141.8;s;8pkt 8fpkt", shape=diamond, color=yellow];
4695[label="204.53.5.77;s;53pkt 53fpkt", shape=diamond, color=yellow];
6220[label="136.228.120.104;d;172pkt 172fpkt", shape=hexagon, color=black];
6338[label="142.16.131.3;d;69pkt 69fpkt", shape=hexagon, color=black];
6659[label="202.128.150.244;s;88pkt 88fpkt", shape=hexagon, color=black];
9691[label="78.184.117.22;56pkt 56fpkt", shape=pentagon, color=darkviolet];
10388[label="72.163.54.64;7pkt 7fpkt", shape=pentagon, color=darkviolet];
10428[label="204.53.93.66;20pkt 20fpkt", shape=pentagon, color=darkviolet];
10632[label="204.53.5.77;57pkt 57fpkt", shape=pentagon, color=darkviolet];
11976[label="202.128.132.162;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12412[label="209.150.116.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13454[label="78.184.117.22;55pkt 55fpkt", shape=invtriangle, color=brown];
13823[label="72.163.54.64;6pkt 6fpkt", shape=invtriangle, color=brown];
13954[label="204.53.5.77;56pkt 56fpkt", shape=invtriangle, color=brown];
14848[label="209.150.116.192;4pkt 4fpkt", shape=invtriangle, color=brown];
15319[label="194.157.141.8;7pkt 7fpkt", shape=invhouse, color=bisque];
15381[label="78.184.117.22;55pkt 55fpkt", shape=invhouse, color=bisque];
15625[label="204.53.5.77;56pkt 56fpkt", shape=invhouse, color=bisque];
stat874[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 136.228.120.104:*}[39.895%]&lt;BR/&gt;{202.128.150.244:80, *:*}[24.147%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0354%)&lt;BR/&gt; 8080: (1.47348%)&lt;BR/&gt; 85: (0.491159%)&lt;BR/&gt; 2231: (0.294695%)&lt;BR/&gt; 1169: (0.294695%)&gt;];
}
884--2294[label="0.0190476;2pkt 2fpkt"];
884--2299[label="0.619565;57pkt 57fpkt"];
884--3148[label="0.212766;10pkt 10fpkt"];
884--3516[label="1;8pkt 8fpkt"];
884--4695[label="0.264151;14pkt 14fpkt"];
884--4731[label="0.016;2pkt 2fpkt"];
884--5099[label="0.4;8pkt 8fpkt"];
884--6220[label="1;172pkt 172fpkt"];
884--6391[label="0.0204082;2pkt 2fpkt"];
884--6659[label="0.602273;53pkt 53fpkt"];
884--8524[label="0.212766;10pkt 10fpkt"];
884--9163[label="0.0872093;15pkt 15fpkt"];
884--9194[label="0.0406977;7pkt 7fpkt"];
884--9234[label="0.0406977;7pkt 7fpkt"];
884--9268[label="0.0406977;7pkt 7fpkt"];
884--9691[label="0.0714286;4pkt 4fpkt"];
884--10235[label="0.2;10pkt 10fpkt"];
884--10388[label="1;7pkt 7fpkt"];
884--10428[label="0.6;12pkt 12fpkt"];
884--10632[label="0.245614;14pkt 14fpkt"];
884--10677[label="0.0142857;2pkt 2fpkt"];
884--11105[label="0.315789;6pkt 6fpkt"];
884--12412[label="0.2;1pkt 1fpkt"];
884--13454[label="0.0727273;4pkt 4fpkt"];
884--13745[label="0.2;10pkt 10fpkt"];
884--13823[label="1;6pkt 6fpkt"];
884--13954[label="0.25;14pkt 14fpkt"];
884--14179[label="0.3;6pkt 6fpkt"];
884--14848[label="0.25;1pkt 1fpkt"];
884--15319[label="1;7pkt 7fpkt"];
884--15381[label="0.0727273;4pkt 4fpkt"];
884--15514[label="0.196078;10pkt 10fpkt"];
884--15625[label="0.25;14pkt 14fpkt"];
884--15744[label="0.315789;6pkt 6fpkt"];
2145--3265[label="0.0289855;2pkt 2fpkt"];
2145--5099[label="0.5;10pkt 10fpkt"];
2145--6338[label="1;69pkt 69fpkt"];
2145--8224[label="0.0289855;2pkt 2fpkt"];
2145--9163[label="0.318841;22pkt 22fpkt"];
2145--9194[label="0.202899;14pkt 14fpkt"];
2145--9198[label="0.202899;14pkt 14fpkt"];
2145--9234[label="0.202899;14pkt 14fpkt"];
2145--9268[label="0.202899;14pkt 14fpkt"];
2145--9691[label="0.0357143;2pkt 2fpkt"];
2145--10007[label="1;4pkt 4fpkt"];
2145--10350[label="0.107143;3pkt 3fpkt"];
2145--11976[label="1;3pkt 3fpkt"];
2145--13454[label="0.0363636;2pkt 2fpkt"];
2145--13626[label="1;3pkt 3fpkt"];
2145--15381[label="0.0363636;2pkt 2fpkt"];
3516--6220[label="1;8pkt 8fpkt"];
3516--15319[label="1;7pkt 7fpkt"];
4695--4819[label="0.0377358;2pkt 2fpkt"];
4695--5986[label="0.188679;10pkt 10fpkt"];
4695--6095[label="0.0754717;4pkt 4fpkt"];
4695--6220[label="0.264151;14pkt 14fpkt"];
4695--6600[label="0.0377358;2pkt 2fpkt"];
4695--8531[label="0.0754717;4pkt 4fpkt"];
4695--8907[label="0.188679;10pkt 10fpkt"];
4695--9163[label="0.132075;7pkt 7fpkt"];
4695--9194[label="0.0566038;3pkt 3fpkt"];
4695--9234[label="0.0566038;3pkt 3fpkt"];
4695--9268[label="0.0566038;3pkt 3fpkt"];
4695--10632[label="1;53pkt 53fpkt"];
4695--13954[label="0.981132;52pkt 52fpkt"];
4695--15625[label="0.981132;52pkt 52fpkt"];
6220--6391[label="0.0204082;2pkt 2fpkt"];
6220--6659[label="0.602273;53pkt 53fpkt"];
6220--8524[label="0.212766;10pkt 10fpkt"];
6220--9163[label="0.0872093;15pkt 15fpkt"];
6220--9194[label="0.0406977;7pkt 7fpkt"];
6220--9234[label="0.0406977;7pkt 7fpkt"];
6220--9268[label="0.0406977;7pkt 7fpkt"];
6220--9691[label="0.0714286;4pkt 4fpkt"];
6220--10235[label="0.2;10pkt 10fpkt"];
6220--10388[label="1;7pkt 7fpkt"];
6220--10428[label="0.6;12pkt 12fpkt"];
6220--10632[label="0.245614;14pkt 14fpkt"];
6220--10677[label="0.0142857;2pkt 2fpkt"];
6220--11105[label="0.315789;6pkt 6fpkt"];
6220--12412[label="0.2;1pkt 1fpkt"];
6220--13454[label="0.0727273;4pkt 4fpkt"];
6220--13745[label="0.2;10pkt 10fpkt"];
6220--13823[label="1;6pkt 6fpkt"];
6220--13954[label="0.25;14pkt 14fpkt"];
6220--14179[label="0.3;6pkt 6fpkt"];
6220--14848[label="0.25;1pkt 1fpkt"];
6220--15319[label="1;7pkt 7fpkt"];
6220--15381[label="0.0727273;4pkt 4fpkt"];
6220--15514[label="0.196078;10pkt 10fpkt"];
6220--15625[label="0.25;14pkt 14fpkt"];
6220--15744[label="0.315789;6pkt 6fpkt"];
6338--8224[label="0.0289855;2pkt 2fpkt"];
6338--9163[label="0.318841;22pkt 22fpkt"];
6338--9194[label="0.202899;14pkt 14fpkt"];
6338--9198[label="0.202899;14pkt 14fpkt"];
6338--9234[label="0.202899;14pkt 14fpkt"];
6338--9268[label="0.202899;14pkt 14fpkt"];
6338--9691[label="0.0357143;2pkt 2fpkt"];
6338--10007[label="1;4pkt 4fpkt"];
6338--10350[label="0.107143;3pkt 3fpkt"];
6338--11976[label="1;3pkt 3fpkt"];
6338--13454[label="0.0363636;2pkt 2fpkt"];
6338--13626[label="1;3pkt 3fpkt"];
6338--15381[label="0.0363636;2pkt 2fpkt"];
6659--6841[label="0.261364;23pkt 23fpkt"];
6659--9130[label="0.261364;23pkt 23fpkt"];
6659--9163[label="0.0113636;1pkt 1fpkt"];
9691--13454[label="1;55pkt 55fpkt"];
9691--15381[label="1;55pkt 55fpkt"];
10388--13823[label="1;6pkt 6fpkt"];
10632--13954[label="1;56pkt 56fpkt"];
10632--15625[label="1;56pkt 56fpkt"];
12412--14848[label="1;4pkt 4fpkt"];
13454--15381[label="1;55pkt 55fpkt"];
13954--15625[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter src_ip="202.128.150.244" src_port="80"/>
      <filter dst_ip="136.228.120.104" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.235.29.67"/>
    </slice>
    <from sec="1223615661" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.98.48.67"/>
    </slice>
    <from sec="1223615149" usec="0"/>
    <to sec="1223615182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.189.4.68"/>
    </slice>
    <from sec="1223615643" usec="0"/>
    <to sec="1223615650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.228.4.68"/>
    </slice>
    <from sec="1223615395" usec="0"/>
    <to sec="1223615411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.116.115.68"/>
    </slice>
    <from sec="1223615686" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.63.43.69"/>
    </slice>
    <from sec="1223614980" usec="0"/>
    <to sec="1223614991" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_885{
style=filled;
color=gray75;
1974[label="164.25.108.27;d;99pkt 99fpkt", shape=diamond, color=yellow];
11310[label="108.85.22.120;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11873[label="108.85.22.155;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14569[label="108.85.22.155;7pkt 7fpkt", shape=invtriangle, color=brown];
15115[label="107.4.85.229;4pkt 4fpkt", shape=invtriangle, color=brown];
15946[label="108.85.22.155;7pkt 7fpkt", shape=invhouse, color=bisque];
stat885[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.108.27:25}[71.5596%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.6667%)&lt;BR/&gt; 80: (7.93651%)&lt;BR/&gt; 48610: (1.5873%)&lt;BR/&gt; 48541: (1.19048%)&lt;BR/&gt; 48534: (1.19048%)&gt;];
}
1974--2424[label="1;2pkt 2fpkt"];
1974--6554[label="1;57pkt 57fpkt"];
1974--9177[label="0.0707071;7pkt 7fpkt"];
1974--9217[label="0.0707071;7pkt 7fpkt"];
1974--9251[label="0.0707071;7pkt 7fpkt"];
1974--10076[label="1;1pkt 1fpkt"];
1974--10305[label="1;7pkt 7fpkt"];
1974--10494[label="0.333333;1pkt 1fpkt"];
1974--11310[label="0.333333;1pkt 1fpkt"];
1974--11873[label="0.166667;1pkt 1fpkt"];
1974--13877[label="0.333333;1pkt 1fpkt"];
1974--14569[label="0.285714;2pkt 2fpkt"];
1974--15115[label="0.25;1pkt 1fpkt"];
1974--15586[label="0.5;2pkt 2fpkt"];
1974--15946[label="0.285714;2pkt 2fpkt"];
11873--14569[label="1;6pkt 6fpkt"];
11873--15946[label="1;6pkt 6fpkt"];
14569--15946[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.108.27" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.132.200.69"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.163.54.70"/>
    </slice>
    <from sec="1223614932" usec="0"/>
    <to sec="1223614959" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_888{
style=filled;
color=gray75;
742[label="212.21.134.143;d;506pkt 506fpkt", shape=diamond, color=yellow];
2014[label="218.38.66.156;s;4pkt 4fpkt", shape=diamond, color=yellow];
3695[label="104.153.244.124;s;150pkt 150fpkt", shape=diamond, color=yellow];
6864[label="218.38.66.156;s;4pkt 4fpkt", shape=hexagon, color=black];
7765[label="104.153.244.124;s;139pkt 139fpkt", shape=hexagon, color=black];
8516[label="212.21.134.143;d;506pkt 506fpkt", shape=hexagon, color=black];
10186[label="73.44.49.50;6pkt 6fpkt", shape=pentagon, color=darkviolet];
10458[label="212.66.68.68;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10507[label="202.57.114.70;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11375[label="104.153.244.124;153pkt 153fpkt", shape=pentagon, color=darkviolet];
13723[label="73.44.49.50;5pkt 5fpkt", shape=invtriangle, color=brown];
13884[label="202.57.114.70;11pkt 11fpkt", shape=invtriangle, color=brown];
14320[label="104.153.244.124;153pkt 153fpkt", shape=invtriangle, color=brown];
15501[label="73.44.49.50;6pkt 6fpkt", shape=invhouse, color=bisque];
15574[label="212.66.68.68;4pkt 4fpkt", shape=invhouse, color=bisque];
15814[label="104.153.244.124;154pkt 154fpkt", shape=invhouse, color=bisque];
stat888[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.153.244.124:*, 212.21.134.143:80}[30.137%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.6791%)&lt;BR/&gt; 443: (0.38525%)&lt;BR/&gt; 29846: (0.192625%)&lt;BR/&gt; 29774: (0.192625%)&lt;BR/&gt; 29521: (0.192625%)&gt;];
}
742--1291[label="0.014218;3pkt 3fpkt"];
742--1337[label="0.0533981;11pkt 11fpkt"];
742--1433[label="0.0384615;9pkt 9fpkt"];
742--1437[label="0.927273;51pkt 51fpkt"];
742--1501[label="0.046729;10pkt 10fpkt"];
742--1689[label="0.00197628;1pkt 1fpkt"];
742--2014[label="1;4pkt 4fpkt"];
742--2039[label="0.00197628;1pkt 1fpkt"];
742--2171[label="0.0236967;5pkt 5fpkt"];
742--2638[label="0.00603622;3pkt 3fpkt"];
742--3663[label="0.00197628;1pkt 1fpkt"];
742--3695[label="1;150pkt 150fpkt"];
742--3843[label="0.444444;28pkt 28fpkt"];
742--3966[label="0.00724638;1pkt 1fpkt"];
742--3969[label="0.00724638;1pkt 1fpkt"];
742--5093[label="0.0268456;4pkt 4fpkt"];
742--5635[label="0.254902;13pkt 13fpkt"];
742--6058[label="0.02;3pkt 3fpkt"];
742--6092[label="0.90625;29pkt 29fpkt"];
742--6108[label="0.046729;10pkt 10fpkt"];
742--6864[label="1;4pkt 4fpkt"];
742--7010[label="0.00197628;1pkt 1fpkt"];
742--7345[label="0.00724638;1pkt 1fpkt"];
742--7388[label="0.00197628;1pkt 1fpkt"];
742--7760[label="0.00230947;1pkt 1fpkt"];
742--7765[label="1;139pkt 139fpkt"];
742--7809[label="0.0533981;11pkt 11fpkt"];
742--8239[label="0.0339806;7pkt 7fpkt"];
742--8516[label="1;506pkt 506fpkt"];
742--8930[label="0.00197628;1pkt 1fpkt"];
742--9178[label="0.00197628;1pkt 1fpkt"];
742--9192[label="0.00197628;1pkt 1fpkt"];
742--9218[label="0.00197628;1pkt 1fpkt"];
742--9232[label="0.00197628;1pkt 1fpkt"];
742--9252[label="0.00197628;1pkt 1fpkt"];
742--9266[label="0.00197628;1pkt 1fpkt"];
742--9396[label="0.383562;28pkt 28fpkt"];
742--9870[label="0.012987;1pkt 1fpkt"];
742--10186[label="1;6pkt 6fpkt"];
742--10265[label="0.00729927;1pkt 1fpkt"];
742--10458[label="1;4pkt 4fpkt"];
742--10507[label="0.916667;11pkt 11fpkt"];
742--10807[label="0.0714286;2pkt 2fpkt"];
742--11053[label="0.2;4pkt 4fpkt"];
742--11375[label="0.973856;149pkt 149fpkt"];
742--11544[label="0.00724638;1pkt 1fpkt"];
742--12193[label="0.0495495;11pkt 11fpkt"];
742--12295[label="0.789474;45pkt 45fpkt"];
742--12387[label="0.00197628;1pkt 1fpkt"];
742--12489[label="0.00197628;1pkt 1fpkt"];
742--12697[label="0.0526316;1pkt 1fpkt"];
742--13300[label="0.388889;28pkt 28fpkt"];
742--13723[label="1;5pkt 5fpkt"];
742--13761[label="0.00724638;1pkt 1fpkt"];
742--13884[label="0.909091;10pkt 10fpkt"];
742--14037[label="0.0689655;2pkt 2fpkt"];
742--14320[label="0.973856;149pkt 149fpkt"];
742--14406[label="0.00729927;1pkt 1fpkt"];
742--14735[label="0.0495495;11pkt 11fpkt"];
742--14883[label="0.00197628;1pkt 1fpkt"];
742--14988[label="0.0526316;1pkt 1fpkt"];
742--15306[label="0.383562;28pkt 28fpkt"];
742--15501[label="1;6pkt 6fpkt"];
742--15574[label="1;4pkt 4fpkt"];
742--15814[label="0.974026;150pkt 150fpkt"];
742--15857[label="0.00729927;1pkt 1fpkt"];
742--16035[label="0.0497738;11pkt 11fpkt"];
742--16125[label="0.00197628;1pkt 1fpkt"];
742--16184[label="0.0526316;1pkt 1fpkt"];
2014--6864[label="1;4pkt 4fpkt"];
2014--8516[label="1;4pkt 4fpkt"];
3695--7765[label="1;139pkt 139fpkt"];
3695--8516[label="1;150pkt 150fpkt"];
3695--11375[label="0.993333;149pkt 149fpkt"];
3695--14320[label="0.993333;149pkt 149fpkt"];
3695--15814[label="1;150pkt 150fpkt"];
6864--8516[label="1;4pkt 4fpkt"];
7765--8516[label="1;139pkt 139fpkt"];
7765--11375[label="0.992806;138pkt 138fpkt"];
7765--14320[label="0.992806;138pkt 138fpkt"];
7765--15814[label="1;139pkt 139fpkt"];
8516--8930[label="0.00197628;1pkt 1fpkt"];
8516--9178[label="0.00197628;1pkt 1fpkt"];
8516--9192[label="0.00197628;1pkt 1fpkt"];
8516--9218[label="0.00197628;1pkt 1fpkt"];
8516--9232[label="0.00197628;1pkt 1fpkt"];
8516--9252[label="0.00197628;1pkt 1fpkt"];
8516--9266[label="0.00197628;1pkt 1fpkt"];
8516--9396[label="0.383562;28pkt 28fpkt"];
8516--9870[label="0.012987;1pkt 1fpkt"];
8516--10186[label="1;6pkt 6fpkt"];
8516--10265[label="0.00729927;1pkt 1fpkt"];
8516--10458[label="1;4pkt 4fpkt"];
8516--10507[label="0.916667;11pkt 11fpkt"];
8516--10807[label="0.0714286;2pkt 2fpkt"];
8516--11053[label="0.2;4pkt 4fpkt"];
8516--11375[label="0.973856;149pkt 149fpkt"];
8516--11544[label="0.00724638;1pkt 1fpkt"];
8516--12193[label="0.0495495;11pkt 11fpkt"];
8516--12295[label="0.789474;45pkt 45fpkt"];
8516--12387[label="0.00197628;1pkt 1fpkt"];
8516--12489[label="0.00197628;1pkt 1fpkt"];
8516--12697[label="0.0526316;1pkt 1fpkt"];
8516--13300[label="0.388889;28pkt 28fpkt"];
8516--13723[label="1;5pkt 5fpkt"];
8516--13761[label="0.00724638;1pkt 1fpkt"];
8516--13884[label="0.909091;10pkt 10fpkt"];
8516--14037[label="0.0689655;2pkt 2fpkt"];
8516--14320[label="0.973856;149pkt 149fpkt"];
8516--14406[label="0.00729927;1pkt 1fpkt"];
8516--14735[label="0.0495495;11pkt 11fpkt"];
8516--14883[label="0.00197628;1pkt 1fpkt"];
8516--14988[label="0.0526316;1pkt 1fpkt"];
8516--15306[label="0.383562;28pkt 28fpkt"];
8516--15501[label="1;6pkt 6fpkt"];
8516--15574[label="1;4pkt 4fpkt"];
8516--15814[label="0.974026;150pkt 150fpkt"];
8516--15857[label="0.00729927;1pkt 1fpkt"];
8516--16035[label="0.0497738;11pkt 11fpkt"];
8516--16125[label="0.00197628;1pkt 1fpkt"];
8516--16184[label="0.0526316;1pkt 1fpkt"];
10186--13723[label="1;5pkt 5fpkt"];
10186--15501[label="1;6pkt 6fpkt"];
10458--15574[label="1;4pkt 4fpkt"];
10507--13884[label="1;11pkt 11fpkt"];
11375--14320[label="1;153pkt 153fpkt"];
11375--15814[label="1;153pkt 153fpkt"];
13723--15501[label="1;5pkt 5fpkt"];
14320--15814[label="1;153pkt 153fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.134.143" dst_port="80" src_ip="104.153.244.124"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.17.141.70"/>
    </slice>
    <from sec="1223615241" usec="0"/>
    <to sec="1223615252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.75.157.70"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="154.133.194.70"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.226.34.71"/>
    </slice>
    <from sec="1223615640" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.247.116.71"/>
    </slice>
    <from sec="1223615435" usec="0"/>
    <to sec="1223615478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.226.144.71"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.183.71"/>
    </slice>
    <from sec="1223615501" usec="0"/>
    <to sec="1223615527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.249.71"/>
    </slice>
    <from sec="1223615537" usec="0"/>
    <to sec="1223615570" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.13.72"/>
    </slice>
    <from sec="1223614831" usec="0"/>
    <to sec="1223615682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.112.72.72"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="208.75.119.72"/>
    </slice>
    <from sec="1223615680" usec="0"/>
    <to sec="1223615688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.42.131.72"/>
    </slice>
    <from sec="1223615185" usec="0"/>
    <to sec="1223615204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_901{
style=filled;
color=gray75;
40[label="204.156.171.35s;1pkt 1fpkt", shape=rectangle, color=red];
82[label="194.189.210.72s;1pkt 1fpkt", shape=rectangle, color=red];
3337[label="213.33.58.13;d;125pkt 125fpkt", shape=diamond, color=yellow];
3521[label="204.156.171.35;s;9pkt 9fpkt", shape=diamond, color=yellow];
5745[label="165.16.166.74;s;32pkt 32fpkt", shape=diamond, color=yellow];
8280[label="213.33.58.13;d;73pkt 73fpkt", shape=hexagon, color=black];
10558[label="194.189.210.72;14pkt 14fpkt", shape=pentagon, color=darkviolet];
10587[label="165.16.166.74;32pkt 32fpkt", shape=pentagon, color=darkviolet];
13930[label="165.16.166.74;32pkt 32fpkt", shape=invtriangle, color=brown];
stat901[shape=component, label=&lt;Rules:&lt;BR/&gt;{165.16.166.74:*, 213.33.58.13:80}[25.6%]&lt;BR/&gt;{213.43.133.178:*, 213.33.58.13:80}[25.6%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.373%)&lt;BR/&gt; 4298: (0.783699%)&lt;BR/&gt; 4297: (0.783699%)&lt;BR/&gt; 4296: (0.783699%)&lt;BR/&gt; 4295: (0.783699%)&gt;];
}
40--3337[label="1;1pkt 1fpkt"];
40--3521[label="1;1pkt 1fpkt"];
40--8280[label="1;1pkt 1fpkt"];
82--479[label="1;1pkt 1fpkt"];
82--557[label="1;1pkt 1fpkt"];
82--3337[label="1;1pkt 1fpkt"];
82--8280[label="1;1pkt 1fpkt"];
82--10558[label="1;1pkt 1fpkt"];
3337--3521[label="1;9pkt 9fpkt"];
3337--3966[label="0.008;1pkt 1fpkt"];
3337--3969[label="0.008;1pkt 1fpkt"];
3337--5745[label="1;32pkt 32fpkt"];
3337--6058[label="0.016;2pkt 2fpkt"];
3337--6108[label="0.04;5pkt 5fpkt"];
3337--7345[label="0.008;1pkt 1fpkt"];
3337--7760[label="0.056;7pkt 7fpkt"];
3337--7809[label="0.04;5pkt 5fpkt"];
3337--8239[label="0.024;3pkt 3fpkt"];
3337--8280[label="1;73pkt 73fpkt"];
3337--10265[label="0.008;1pkt 1fpkt"];
3337--10558[label="1;14pkt 14fpkt"];
3337--10587[label="1;32pkt 32fpkt"];
3337--11544[label="0.008;1pkt 1fpkt"];
3337--12193[label="0.04;5pkt 5fpkt"];
3337--12234[label="0.914286;32pkt 32fpkt"];
3337--12697[label="0.0526316;1pkt 1fpkt"];
3337--13761[label="0.008;1pkt 1fpkt"];
3337--13930[label="1;32pkt 32fpkt"];
3337--14406[label="0.008;1pkt 1fpkt"];
3337--14735[label="0.04;5pkt 5fpkt"];
3337--14988[label="0.0526316;1pkt 1fpkt"];
3337--15857[label="0.008;1pkt 1fpkt"];
3337--16035[label="0.04;5pkt 5fpkt"];
3337--16184[label="0.0526316;1pkt 1fpkt"];
3521--8280[label="1;9pkt 9fpkt"];
5745--8280[label="0.375;12pkt 12fpkt"];
5745--10587[label="1;32pkt 32fpkt"];
5745--13930[label="1;32pkt 32fpkt"];
8280--10265[label="0.0136986;1pkt 1fpkt"];
8280--10558[label="1;14pkt 14fpkt"];
8280--10587[label="0.375;12pkt 12fpkt"];
8280--11544[label="0.0136986;1pkt 1fpkt"];
8280--12193[label="0.0684932;5pkt 5fpkt"];
8280--12697[label="0.0526316;1pkt 1fpkt"];
8280--13761[label="0.0136986;1pkt 1fpkt"];
8280--13930[label="0.375;12pkt 12fpkt"];
8280--14406[label="0.0136986;1pkt 1fpkt"];
8280--14735[label="0.0684932;5pkt 5fpkt"];
8280--14988[label="0.0526316;1pkt 1fpkt"];
8280--15857[label="0.0136986;1pkt 1fpkt"];
8280--16035[label="0.0684932;5pkt 5fpkt"];
8280--16184[label="0.0526316;1pkt 1fpkt"];
10587--13930[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.58.13" dst_port="80" src_ip="213.43.133.178"/>
      <filter dst_ip="213.33.58.13" dst_port="80" src_ip="165.16.166.74"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_902{
style=filled;
color=gray75;
83[label="212.138.109.73s;1pkt 1fpkt", shape=rectangle, color=red];
2529[label="212.138.109.73;s;5pkt 5fpkt", shape=diamond, color=yellow];
7695[label="212.138.109.73;s;5pkt 5fpkt", shape=hexagon, color=black];
10566[label="212.138.109.73;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13915[label="212.138.109.73;9pkt 9fpkt", shape=invtriangle, color=brown];
stat902[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.73:80, 136.228.214.244:*}[60%]&lt;BR/&gt;{212.138.109.73:80, 136.228.233.172:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4780: (6.66667%)&lt;BR/&gt; 4708: (6.66667%)&lt;BR/&gt; 4249: (6.66667%)&lt;BR/&gt; 4166: (6.66667%)&gt;];
}
83--573[label="1;1pkt 1fpkt"];
83--10566[label="1;1pkt 1fpkt"];
83--13915[label="1;1pkt 1fpkt"];
2529--7695[label="1;5pkt 5fpkt"];
2529--10566[label="1;5pkt 5fpkt"];
2529--13915[label="0.8;4pkt 4fpkt"];
7695--10566[label="1;5pkt 5fpkt"];
7695--13915[label="0.8;4pkt 4fpkt"];
10566--13915[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.214.244" src_ip="212.138.109.73" src_port="80"/>
      <filter dst_ip="136.228.233.172" src_ip="212.138.109.73" src_port="80"/>
    </slice>
    <from sec="1223614952" usec="0"/>
    <to sec="1223615471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.29.241.73"/>
    </slice>
    <from sec="1223615056" usec="0"/>
    <to sec="1223615092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.248.73"/>
    </slice>
    <from sec="1223615052" usec="0"/>
    <to sec="1223615059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.77.4.74"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.109.74"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.36.22.75"/>
    </slice>
    <from sec="1223615335" usec="0"/>
    <to sec="1223615339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.84.38.75"/>
    </slice>
    <from sec="1223615116" usec="0"/>
    <to sec="1223615190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.226.23.76"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.150.29.76"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.180.81.76"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.105.145.76"/>
    </slice>
    <from sec="1223615061" usec="0"/>
    <to sec="1223615175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.155.167.76"/>
    </slice>
    <from sec="1223614811" usec="0"/>
    <to sec="1223615694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.243.50.77"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.132.77"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.76.132.78"/>
    </slice>
    <from sec="1223615543" usec="0"/>
    <to sec="1223615650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.70.162.78"/>
    </slice>
    <from sec="1223615392" usec="0"/>
    <to sec="1223615420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.148.43.79"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_919{
style=filled;
color=gray75;
3679[label="164.25.70.80;s;11pkt 11fpkt", shape=diamond, color=yellow];
10687[label="164.25.70.80;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat919[shape=component, label=&lt;Rules:&lt;BR/&gt;{164.25.70.80:20, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20: (50%)&lt;BR/&gt; 55522: (9.52381%)&lt;BR/&gt; 32984: (9.52381%)&lt;BR/&gt; 65534: (4.7619%)&lt;BR/&gt; 48576: (4.7619%)&gt;];
}
3679--10687[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter src_ip="164.25.70.80" src_port="20"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.154.14.81"/>
    </slice>
    <from sec="1223615639" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.65.21.82"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.46.128.82"/>
    </slice>
    <from sec="1223615360" usec="0"/>
    <to sec="1223615376" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.200.131.82"/>
    </slice>
    <from sec="1223615255" usec="0"/>
    <to sec="1223615272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.89.163.82"/>
    </slice>
    <from sec="1223614890" usec="0"/>
    <to sec="1223614943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.123.9.83"/>
    </slice>
    <from sec="1223614820" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.90.83"/>
    </slice>
    <from sec="1223615303" usec="0"/>
    <to sec="1223615651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.142.135.83"/>
    </slice>
    <from sec="1223615398" usec="0"/>
    <to sec="1223615411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.252.83"/>
    </slice>
    <from sec="1223614851" usec="0"/>
    <to sec="1223615288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.132.185.84"/>
    </slice>
    <from sec="1223615243" usec="0"/>
    <to sec="1223615271" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.226.189.84"/>
    </slice>
    <from sec="1223615540" usec="0"/>
    <to sec="1223615575" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.152.0.85"/>
    </slice>
    <from sec="1223614911" usec="0"/>
    <to sec="1223614934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.3.1.85"/>
    </slice>
    <from sec="1223615529" usec="0"/>
    <to sec="1223615544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.65.23.85"/>
    </slice>
    <from sec="1223615398" usec="0"/>
    <to sec="1223615400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.100.111.86"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.81.185.86"/>
    </slice>
    <from sec="1223615042" usec="0"/>
    <to sec="1223615689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.99.26.87"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223614981" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.142.108.87"/>
    </slice>
    <from sec="1223615507" usec="0"/>
    <to sec="1223615536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.120.78.88"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.125.80.88"/>
    </slice>
    <from sec="1223615174" usec="0"/>
    <to sec="1223615203" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.191.173.88"/>
    </slice>
    <from sec="1223615205" usec="0"/>
    <to sec="1223615212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.204.88"/>
    </slice>
    <from sec="1223615281" usec="0"/>
    <to sec="1223615343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.232.28.89"/>
    </slice>
    <from sec="1223615380" usec="0"/>
    <to sec="1223615408" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.6.43.89"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.68.180.89"/>
    </slice>
    <from sec="1223615522" usec="0"/>
    <to sec="1223615589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_945{
style=filled;
color=gray75;
3604[label="136.228.115.16;d;16pkt 16fpkt", shape=diamond, color=yellow];
3605[label="213.241.229.89;s;16pkt 16fpkt", shape=diamond, color=yellow];
10853[label="213.241.229.89;15pkt 15fpkt", shape=pentagon, color=darkviolet];
stat945[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.241.229.89:80, 136.228.115.16:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3495: (3.19149%)&lt;BR/&gt; 3493: (3.19149%)&lt;BR/&gt; 3491: (3.19149%)&lt;BR/&gt; 3489: (3.19149%)&gt;];
}
3604--3605[label="1;16pkt 16fpkt"];
3604--10853[label="1;15pkt 15fpkt"];
3605--10853[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.115.16" src_ip="213.241.229.89" src_port="80"/>
    </slice>
    <from sec="1223615120" usec="0"/>
    <to sec="1223615202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_946{
style=filled;
color=gray75;
2741[label="23.4.134.91;s;2pkt 2fpkt", shape=diamond, color=yellow];
10874[label="23.4.134.91;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat946[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.4.134.91:1935, 212.21.141.93:52155}[50%]&lt;BR/&gt;{23.4.134.91:1935, 212.21.141.93:52453}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 52453: (33.3333%)&lt;BR/&gt; 52155: (16.6667%)&gt;];
}
2741--10874[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.141.93" dst_port="52453" src_ip="23.4.134.91" src_port="1935"/>
      <filter dst_ip="212.21.141.93" dst_port="52155" src_ip="23.4.134.91" src_port="1935"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615412" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.64.92"/>
    </slice>
    <from sec="1223614861" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_948{
style=filled;
color=gray75;
2527[label="142.243.36.231;d;1pkt 1fpkt", shape=diamond, color=yellow];
2532[label="192.105.74.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
10888[label="192.105.74.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat948[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.74.92:80, 142.243.36.231:49644}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49644: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2527--2532[label="1;1pkt 1fpkt"];
2527--10888[label="1;1pkt 1fpkt"];
2532--10888[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.36.231" dst_port="49644" src_ip="192.105.74.92" src_port="80"/>
    </slice>
    <from sec="1223614952" usec="0"/>
    <to sec="1223615105" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.216.110.92"/>
    </slice>
    <from sec="1223615362" usec="0"/>
    <to sec="1223615397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.185.92"/>
    </slice>
    <from sec="1223615341" usec="0"/>
    <to sec="1223615391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.36.93"/>
    </slice>
    <from sec="1223615101" usec="0"/>
    <to sec="1223615199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.74.93"/>
    </slice>
    <from sec="1223615614" usec="0"/>
    <to sec="1223615633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.205.99.93"/>
    </slice>
    <from sec="1223615566" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_954{
style=filled;
color=gray75;
5494[label="86.148.147.93;s;559pkt 559fpkt", shape=diamond, color=yellow];
10907[label="86.148.147.93;611pkt 611fpkt", shape=pentagon, color=darkviolet];
stat954[shape=component, label=&lt;Rules:&lt;BR/&gt;{86.148.147.93:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 45979: (0.17094%)&lt;BR/&gt; 30204: (0.17094%)&lt;BR/&gt; 14060: (0.128205%)&lt;BR/&gt; 65524: (0.0854701%)&gt;];
}
5494--10907[label="0.998211;558pkt 558fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="86.148.147.93"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.218.2.94"/>
    </slice>
    <from sec="1223614812" usec="0"/>
    <to sec="1223615302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.17.22.94"/>
    </slice>
    <from sec="1223615371" usec="0"/>
    <to sec="1223615403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.74.94"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.81.1.95"/>
    </slice>
    <from sec="1223615515" usec="0"/>
    <to sec="1223615519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.138.49.95"/>
    </slice>
    <from sec="1223615633" usec="0"/>
    <to sec="1223615684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.670358,2.09816,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_960{
style=filled;
color=gray75;
6622[label="136.228.160.110;d;102pkt 102fpkt", shape=hexagon, color=black];
stat960[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.160.110:3730}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3730: (50%)&lt;BR/&gt; 13993: (0.980392%)&lt;BR/&gt; 13729: (0.980392%)&lt;BR/&gt; 13509: (0.980392%)&lt;BR/&gt; 64799: (0.490196%)&gt;];
}
6622--10928[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.160.110" dst_port="3730"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615179" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.198.95"/>
    </slice>
    <from sec="1223615367" usec="0"/>
    <to sec="1223615382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.150.125.96"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.42.154.96"/>
    </slice>
    <from sec="1223615662" usec="0"/>
    <to sec="1223615674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.192.176.96"/>
    </slice>
    <from sec="1223615362" usec="0"/>
    <to sec="1223615374" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.29.200.96"/>
    </slice>
    <from sec="1223615567" usec="0"/>
    <to sec="1223615571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.134.31.97"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.2.109.97"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.187.246.97"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.67.98"/>
    </slice>
    <from sec="1223615032" usec="0"/>
    <to sec="1223615094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.5.102.98"/>
    </slice>
    <from sec="1223614831" usec="0"/>
    <to sec="1223615673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.235.98"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.242.36.99"/>
    </slice>
    <from sec="1223615284" usec="0"/>
    <to sec="1223615289" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.132.143.99"/>
    </slice>
    <from sec="1223614810" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_974{
style=filled;
color=gray75;
4534[label="162.73.237.231;d;129pkt 129fpkt", shape=diamond, color=yellow];
4943[label="20.208.92.3;s;2pkt 2fpkt", shape=diamond, color=yellow];
9312[label="20.144.178.1;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9976[label="21.95.34.39;35pkt 35fpkt", shape=pentagon, color=darkviolet];
11005[label="212.84.26.100;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11903[label="200.25.80.157;44pkt 44fpkt", shape=pentagon, color=darkviolet];
13260[label="20.144.178.1;1pkt 1fpkt", shape=invtriangle, color=brown];
13606[label="21.95.34.39;34pkt 34fpkt", shape=invtriangle, color=brown];
15456[label="21.95.34.39;35pkt 35fpkt", shape=invhouse, color=bisque];
stat974[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.25.80.157:80, 162.73.237.231:*}[33.5821%]&lt;BR/&gt;{21.95.34.39:80, 162.73.237.231:*}[26.1194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4515: (0.706714%)&lt;BR/&gt; 4511: (0.706714%)&lt;BR/&gt; 4510: (0.706714%)&lt;BR/&gt; 4507: (0.706714%)&gt;];
}
4534--4801[label="0.0215054;2pkt 2fpkt"];
4534--4943[label="1;2pkt 2fpkt"];
4534--7970[label="0.0215054;2pkt 2fpkt"];
4534--9098[label="0.0215054;2pkt 2fpkt"];
4534--9312[label="1;1pkt 1fpkt"];
4534--9976[label="1;35pkt 35fpkt"];
4534--11005[label="0.5;1pkt 1fpkt"];
4534--11903[label="0.909091;40pkt 40fpkt"];
4534--13260[label="1;1pkt 1fpkt"];
4534--13606[label="1;34pkt 34fpkt"];
4534--15456[label="1;35pkt 35fpkt"];
9312--13260[label="1;1pkt 1fpkt"];
9976--13606[label="1;34pkt 34fpkt"];
9976--15456[label="1;35pkt 35fpkt"];
13606--15456[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.237.231" src_ip="200.25.80.157" src_port="80"/>
      <filter dst_ip="162.73.237.231" src_ip="21.95.34.39" src_port="80"/>
    </slice>
    <from sec="1223615286" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.134.48.100"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_976{
style=filled;
color=gray75;
5748[label="136.228.213.207;d;4pkt 4fpkt", shape=diamond, color=yellow];
5837[label="195.154.74.100;s;4pkt 4fpkt", shape=diamond, color=yellow];
11011[label="195.154.74.100;17pkt 17fpkt", shape=pentagon, color=darkviolet];
stat976[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.154.74.100:*, 136.228.172.173:80}[76.4706%]&lt;BR/&gt;{195.154.74.100:*, 136.228.213.207:80}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 46737: (6%)&lt;BR/&gt; 45551: (6%)&lt;BR/&gt; 45380: (6%)&lt;BR/&gt; 4722: (6%)&gt;];
}
5748--5837[label="1;4pkt 4fpkt"];
5748--11011[label="1;4pkt 4fpkt"];
5837--11011[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.172.173" dst_port="80" src_ip="195.154.74.100"/>
      <filter dst_ip="136.228.213.207" dst_port="80" src_ip="195.154.74.100"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.244.100"/>
    </slice>
    <from sec="1223614811" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.248.100"/>
    </slice>
    <from sec="1223615413" usec="0"/>
    <to sec="1223615416" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.89.10.101"/>
    </slice>
    <from sec="1223615532" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.214.47.102"/>
    </slice>
    <from sec="1223615334" usec="0"/>
    <to sec="1223615339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.65.102"/>
    </slice>
    <from sec="1223614929" usec="0"/>
    <to sec="1223614939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.69.90.102"/>
    </slice>
    <from sec="1223614929" usec="0"/>
    <to sec="1223614930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.236.27.103"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.132.236.103"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.101.136.104"/>
    </slice>
    <from sec="1223615549" usec="0"/>
    <to sec="1223615554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.249.178.104"/>
    </slice>
    <from sec="1223615275" usec="0"/>
    <to sec="1223615280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.130.231.104"/>
    </slice>
    <from sec="1223615042" usec="0"/>
    <to sec="1223615102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.42.85.105"/>
    </slice>
    <from sec="1223615170" usec="0"/>
    <to sec="1223615217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.186.174.105"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.190.240.105"/>
    </slice>
    <from sec="1223615686" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.199.25.106"/>
    </slice>
    <from sec="1223615049" usec="0"/>
    <to sec="1223615252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.123.95.106"/>
    </slice>
    <from sec="1223615313" usec="0"/>
    <to sec="1223615346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.80.109.106"/>
    </slice>
    <from sec="1223615363" usec="0"/>
    <to sec="1223615387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.86.214.106"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.145.1.107"/>
    </slice>
    <from sec="1223614861" usec="0"/>
    <to sec="1223614866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.25.121.107"/>
    </slice>
    <from sec="1223615531" usec="0"/>
    <to sec="1223615547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.198.172.107"/>
    </slice>
    <from sec="1223615206" usec="0"/>
    <to sec="1223615287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.155.220.107"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.231.107"/>
    </slice>
    <from sec="1223615471" usec="0"/>
    <to sec="1223615513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.232.240.107"/>
    </slice>
    <from sec="1223615532" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.80.15.108"/>
    </slice>
    <from sec="1223614973" usec="0"/>
    <to sec="1223614999" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="151.120.43.108"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.10.184.108"/>
    </slice>
    <from sec="1223615361" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.76.165.109"/>
    </slice>
    <from sec="1223614822" usec="0"/>
    <to sec="1223615672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.174.97.110"/>
    </slice>
    <from sec="1223615287" usec="0"/>
    <to sec="1223615304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.180.199.110"/>
    </slice>
    <from sec="1223615036" usec="0"/>
    <to sec="1223615042" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.155.201.110"/>
    </slice>
    <from sec="1223615397" usec="0"/>
    <to sec="1223615401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.14.208.110"/>
    </slice>
    <from sec="1223615317" usec="0"/>
    <to sec="1223615347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.249.110"/>
    </slice>
    <from sec="1223615630" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.173.18.111"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.205.71.111"/>
    </slice>
    <from sec="1223615238" usec="0"/>
    <to sec="1223615251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.217.187.111"/>
    </slice>
    <from sec="1223615247" usec="0"/>
    <to sec="1223615322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.236.173.112"/>
    </slice>
    <from sec="1223615233" usec="0"/>
    <to sec="1223615238" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.40.145.113"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.40.168.113"/>
    </slice>
    <from sec="1223615169" usec="0"/>
    <to sec="1223615207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.51.196.113"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.154.80.114"/>
    </slice>
    <from sec="1223615448" usec="0"/>
    <to sec="1223615458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.0.162.114"/>
    </slice>
    <from sec="1223614924" usec="0"/>
    <to sec="1223615559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.203.114"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.220.204.114"/>
    </slice>
    <from sec="1223614844" usec="0"/>
    <to sec="1223615433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.164.246.114"/>
    </slice>
    <from sec="1223615176" usec="0"/>
    <to sec="1223615181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.80.66.115"/>
    </slice>
    <from sec="1223615113" usec="0"/>
    <to sec="1223615143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.173.226.115"/>
    </slice>
    <from sec="1223615458" usec="0"/>
    <to sec="1223615524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.218.171.116"/>
    </slice>
    <from sec="1223615004" usec="0"/>
    <to sec="1223615215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.73.117"/>
    </slice>
    <from sec="1223614929" usec="0"/>
    <to sec="1223615143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34782,2.04715,503,0 0 0 1 1 1 0 0 0 1 0 0 ">
    <description>subgraph cluster_1026{
style=filled;
color=gray75;
5167[label="136.228.19.20;d;127pkt 127fpkt", shape=diamond, color=yellow];
5263[label="212.138.109.117;s;84pkt 84fpkt", shape=diamond, color=yellow];
5369[label="213.48.4.77;s;13pkt 13fpkt", shape=diamond, color=yellow];
5375[label="21.24.170.249;s;62pkt 62fpkt", shape=diamond, color=yellow];
8304[label="136.228.19.20;d;125pkt 125fpkt", shape=hexagon, color=black];
8410[label="212.138.109.117;s;84pkt 84fpkt", shape=hexagon, color=black];
9090[label="136.228.19.20;d;125pkt 125fpkt", shape=polygon, color=gold];
9110[label="212.138.109.117;s;84pkt 84fpkt", shape=polygon, color=gold];
11274[label="212.138.109.117;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat1026[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.117:80, 136.228.19.20:*}[41.6244%]&lt;BR/&gt;{21.24.170.249:80, 136.228.81.165:*}[29.9492%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.6413%)&lt;BR/&gt; 443: (3.35868%)&lt;BR/&gt; 43990: (0.443599%)&lt;BR/&gt; 43988: (0.443599%)&lt;BR/&gt; 43986: (0.443599%)&gt;];
}
5167--5263[label="0.97619;82pkt 82fpkt"];
5167--5369[label="0.461538;6pkt 6fpkt"];
5167--5375[label="0.0483871;3pkt 3fpkt"];
5167--7744[label="0.11811;15pkt 15fpkt"];
5167--8304[label="1;125pkt 125fpkt"];
5167--8410[label="0.97619;82pkt 82fpkt"];
5167--9090[label="1;125pkt 125fpkt"];
5167--9110[label="0.97619;82pkt 82fpkt"];
5167--10289[label="0.146341;6pkt 6fpkt"];
5167--10390[label="0.00787402;1pkt 1fpkt"];
5167--10631[label="0.315789;6pkt 6fpkt"];
5167--11046[label="0.149606;19pkt 19fpkt"];
5167--11274[label="0.952941;81pkt 81fpkt"];
5167--11992[label="0.0222222;1pkt 1fpkt"];
5167--12944[label="0.0196078;1pkt 1fpkt"];
5167--13953[label="0.277778;5pkt 5fpkt"];
5167--14149[label="0.149606;19pkt 19fpkt"];
5167--14630[label="0.0222222;1pkt 1fpkt"];
5167--15731[label="0.149606;19pkt 19fpkt"];
5263--7824[label="0.0238095;2pkt 2fpkt"];
5263--8304[label="0.97619;82pkt 82fpkt"];
5263--8410[label="1;84pkt 84fpkt"];
5263--9090[label="0.97619;82pkt 82fpkt"];
5263--9110[label="1;84pkt 84fpkt"];
5263--9194[label="0.0119048;1pkt 1fpkt"];
5263--9234[label="0.0119048;1pkt 1fpkt"];
5263--9268[label="0.0119048;1pkt 1fpkt"];
5263--11274[label="0.988095;83pkt 83fpkt"];
5369--5414[label="0.384615;5pkt 5fpkt"];
5369--8304[label="0.461538;6pkt 6fpkt"];
5369--9090[label="0.461538;6pkt 6fpkt"];
5369--9198[label="0.307692;4pkt 4fpkt"];
5369--10631[label="1;13pkt 13fpkt"];
5369--13953[label="0.923077;12pkt 12fpkt"];
5375--5414[label="0.951613;59pkt 59fpkt"];
5375--8304[label="0.0483871;3pkt 3fpkt"];
5375--9090[label="0.0483871;3pkt 3fpkt"];
8304--8410[label="0.97619;82pkt 82fpkt"];
8304--9090[label="1;125pkt 125fpkt"];
8304--9110[label="0.97619;82pkt 82fpkt"];
8304--10289[label="0.146341;6pkt 6fpkt"];
8304--10390[label="0.008;1pkt 1fpkt"];
8304--10631[label="0.315789;6pkt 6fpkt"];
8304--11046[label="0.136;17pkt 17fpkt"];
8304--11274[label="0.952941;81pkt 81fpkt"];
8304--11992[label="0.0222222;1pkt 1fpkt"];
8304--12944[label="0.0196078;1pkt 1fpkt"];
8304--13953[label="0.277778;5pkt 5fpkt"];
8304--14149[label="0.136;17pkt 17fpkt"];
8304--14630[label="0.0222222;1pkt 1fpkt"];
8304--15731[label="0.136;17pkt 17fpkt"];
8410--9090[label="0.97619;82pkt 82fpkt"];
8410--9110[label="1;84pkt 84fpkt"];
8410--9194[label="0.0119048;1pkt 1fpkt"];
8410--9234[label="0.0119048;1pkt 1fpkt"];
8410--9268[label="0.0119048;1pkt 1fpkt"];
8410--11274[label="0.988095;83pkt 83fpkt"];
9090--9110[label="0.97619;82pkt 82fpkt"];
9090--10289[label="0.146341;6pkt 6fpkt"];
9090--10390[label="0.008;1pkt 1fpkt"];
9090--10631[label="0.315789;6pkt 6fpkt"];
9090--11046[label="0.136;17pkt 17fpkt"];
9090--11274[label="0.952941;81pkt 81fpkt"];
9090--11992[label="0.0222222;1pkt 1fpkt"];
9090--12944[label="0.0196078;1pkt 1fpkt"];
9090--13953[label="0.277778;5pkt 5fpkt"];
9090--14149[label="0.136;17pkt 17fpkt"];
9090--14630[label="0.0222222;1pkt 1fpkt"];
9090--15731[label="0.136;17pkt 17fpkt"];
9110--9194[label="0.0119048;1pkt 1fpkt"];
9110--9234[label="0.0119048;1pkt 1fpkt"];
9110--9268[label="0.0119048;1pkt 1fpkt"];
9110--11274[label="0.988095;83pkt 83fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.19.20" src_ip="212.138.109.117" src_port="80"/>
      <filter dst_ip="136.228.81.165" src_ip="21.24.170.249" src_port="80"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.133.134.117"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.186.94.118"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.65.177.118"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.245.202.118"/>
    </slice>
    <from sec="1223615340" usec="0"/>
    <to sec="1223615363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.136.46.119"/>
    </slice>
    <from sec="1223615652" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.106.65.119"/>
    </slice>
    <from sec="1223615375" usec="0"/>
    <to sec="1223615380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.86.129.119"/>
    </slice>
    <from sec="1223615628" usec="0"/>
    <to sec="1223615641" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.227.167.119"/>
    </slice>
    <from sec="1223615204" usec="0"/>
    <to sec="1223615304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.245.193.119"/>
    </slice>
    <from sec="1223614900" usec="0"/>
    <to sec="1223614913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.170.8.120"/>
    </slice>
    <from sec="1223615299" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.109.241.120"/>
    </slice>
    <from sec="1223614905" usec="0"/>
    <to sec="1223615664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.136.31.122"/>
    </slice>
    <from sec="1223615211" usec="0"/>
    <to sec="1223615223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.13.33.122"/>
    </slice>
    <from sec="1223614993" usec="0"/>
    <to sec="1223615032" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.43.45.122"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.120.114.122"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.202.231.122"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="105.144.234.122"/>
    </slice>
    <from sec="1223615658" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.44.94.123"/>
    </slice>
    <from sec="1223615157" usec="0"/>
    <to sec="1223615221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.182.233.123"/>
    </slice>
    <from sec="1223615688" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.138.2.124"/>
    </slice>
    <from sec="1223614981" usec="0"/>
    <to sec="1223615024" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.189.78.124"/>
    </slice>
    <from sec="1223614834" usec="0"/>
    <to sec="1223614848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.147.170.124"/>
    </slice>
    <from sec="1223615272" usec="0"/>
    <to sec="1223615280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.94.132.125"/>
    </slice>
    <from sec="1223615653" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.60.160.125"/>
    </slice>
    <from sec="1223615292" usec="0"/>
    <to sec="1223615300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.234.19.126"/>
    </slice>
    <from sec="1223615666" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.214.48.126"/>
    </slice>
    <from sec="1223615299" usec="0"/>
    <to sec="1223615320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.150.208.126"/>
    </slice>
    <from sec="1223615651" usec="0"/>
    <to sec="1223615660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.191.31.127"/>
    </slice>
    <from sec="1223615338" usec="0"/>
    <to sec="1223615344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.47.127"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.48.99.127"/>
    </slice>
    <from sec="1223614995" usec="0"/>
    <to sec="1223615020" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.146.101.127"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.138.109.127"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.235.190.127"/>
    </slice>
    <from sec="1223615628" usec="0"/>
    <to sec="1223615649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.209.112.128"/>
    </slice>
    <from sec="1223615382" usec="0"/>
    <to sec="1223615426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.59.183.128"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.144.154.129"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.90.232.129"/>
    </slice>
    <from sec="1223615125" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.7.134.130"/>
    </slice>
    <from sec="1223615513" usec="0"/>
    <to sec="1223615528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.192.150.130"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.22.212.130"/>
    </slice>
    <from sec="1223615686" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.16.247.130"/>
    </slice>
    <from sec="1223615607" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.80.12.131"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.20.85.131"/>
    </slice>
    <from sec="1223615281" usec="0"/>
    <to sec="1223615480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.152.98.131"/>
    </slice>
    <from sec="1223615034" usec="0"/>
    <to sec="1223615193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1072{
style=filled;
color=gray75;
4446[label="19.232.228.131;s;488pkt 488fpkt", shape=diamond, color=yellow];
11492[label="19.232.228.131;487pkt 487fpkt", shape=pentagon, color=darkviolet];
14381[label="19.232.228.131;487pkt 487fpkt", shape=invtriangle, color=brown];
15846[label="19.232.228.131;488pkt 488fpkt", shape=invhouse, color=bisque];
stat1072[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.232.228.131:*, *:139}[50.6148%]&lt;BR/&gt;{19.232.228.131:*, *:445}[49.3852%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (25.2821%)&lt;BR/&gt; 445: (24.7179%)&lt;BR/&gt; 4909: (0.205128%)&lt;BR/&gt; 4844: (0.205128%)&lt;BR/&gt; 4829: (0.205128%)&gt;];
}
4446--11492[label="1;487pkt 487fpkt"];
4446--14381[label="1;487pkt 487fpkt"];
4446--15846[label="1;488pkt 488fpkt"];
11492--14381[label="1;487pkt 487fpkt"];
11492--15846[label="1;487pkt 487fpkt"];
14381--15846[label="1;487pkt 487fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="19.232.228.131"/>
      <filter dst_port="445" src_ip="19.232.228.131"/>
    </slice>
    <from sec="1223615203" usec="0"/>
    <to sec="1223615422" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.237.242.131"/>
    </slice>
    <from sec="1223614812" usec="0"/>
    <to sec="1223615221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.102.40.132"/>
    </slice>
    <from sec="1223614849" usec="0"/>
    <to sec="1223614852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.179.141.132"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223614962" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1076{
style=filled;
color=gray75;
5223[label="162.73.193.132;s;86pkt 86fpkt", shape=diamond, color=yellow];
8329[label="206.161.105.99;d;22pkt 22fpkt", shape=hexagon, color=black];
11510[label="162.73.193.132;85pkt 85fpkt", shape=pentagon, color=darkviolet];
stat1076[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.193.132:*, 106.78.81.103:80}[38.0952%]&lt;BR/&gt;{*:*, 206.161.105.99:80}[20.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52758: (0.777202%)&lt;BR/&gt; 52164: (0.777202%)&lt;BR/&gt; 52163: (0.777202%)&lt;BR/&gt; 59392: (0.518135%)&gt;];
}
5223--6621[label="0.0116279;1pkt 1fpkt"];
5223--6837[label="0.0126582;1pkt 1fpkt"];
5223--8329[label="0.136364;3pkt 3fpkt"];
5223--9094[label="0.136364;3pkt 3fpkt"];
5223--11510[label="1;85pkt 85fpkt"];
8329--8581[label="0.409091;9pkt 9fpkt"];
8329--9094[label="1;22pkt 22fpkt"];
8329--9431[label="0.15;3pkt 3fpkt"];
8329--11510[label="0.136364;3pkt 3fpkt"];
8329--12466[label="0.0454545;1pkt 1fpkt"];
8329--14869[label="0.0454545;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="206.161.105.99" dst_port="80"/>
      <filter dst_ip="106.78.81.103" dst_port="80" src_ip="162.73.193.132"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223615604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.140.46.133"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.209.66.133"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.170.133"/>
    </slice>
    <from sec="1223615477" usec="0"/>
    <to sec="1223615621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1080{
style=filled;
color=gray75;
4975[label="192.115.125.134;s;15pkt 15fpkt", shape=diamond, color=yellow];
8115[label="192.115.125.134;s;15pkt 15fpkt", shape=hexagon, color=black];
11526[label="192.115.125.134;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat1080[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.115.125.134:80, 213.33.63.13:*}[73.3333%]&lt;BR/&gt;{192.115.125.134:80, 213.33.62.61:*}[26.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63720: (3.40909%)&lt;BR/&gt; 63678: (3.40909%)&lt;BR/&gt; 63677: (3.40909%)&lt;BR/&gt; 63675: (3.40909%)&gt;];
}
4975--8115[label="1;15pkt 15fpkt"];
4975--11526[label="1;14pkt 14fpkt"];
8115--11526[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" src_ip="192.115.125.134" src_port="80"/>
      <filter dst_ip="213.33.62.61" src_ip="192.115.125.134" src_port="80"/>
    </slice>
    <from sec="1223615393" usec="0"/>
    <to sec="1223615479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.149.52.135"/>
    </slice>
    <from sec="1223614899" usec="0"/>
    <to sec="1223614905" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.86.144.135"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1083{
style=filled;
color=gray75;
1493[label="142.243.60.3;d;849pkt 849fpkt", shape=diamond, color=yellow];
4364[label="73.120.161.203;s;172pkt 172fpkt", shape=diamond, color=yellow];
6370[label="142.243.60.3;d;616pkt 616fpkt", shape=hexagon, color=black];
8349[label="73.120.161.203;s;172pkt 172fpkt", shape=hexagon, color=black];
9299[label="73.120.220.0;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11346[label="73.120.196.122;6pkt 6fpkt", shape=pentagon, color=darkviolet];
11541[label="73.120.180.135;36pkt 36fpkt", shape=pentagon, color=darkviolet];
12542[label="73.120.177.200;101pkt 101fpkt", shape=pentagon, color=darkviolet];
12590[label="73.120.161.203;172pkt 172fpkt", shape=pentagon, color=darkviolet];
12593[label="73.120.187.203;31pkt 31fpkt", shape=pentagon, color=darkviolet];
13216[label="21.221.109.253;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13254[label="73.120.220.0;8pkt 8fpkt", shape=invtriangle, color=brown];
14301[label="73.120.196.122;6pkt 6fpkt", shape=invtriangle, color=brown];
14906[label="73.120.177.200;101pkt 101fpkt", shape=invtriangle, color=brown];
14932[label="73.120.161.203;171pkt 171fpkt", shape=invtriangle, color=brown];
15805[label="73.120.196.122;5pkt 5fpkt", shape=invhouse, color=bisque];
16135[label="73.120.177.200;101pkt 101fpkt", shape=invhouse, color=bisque];
16151[label="73.120.161.203;171pkt 171fpkt", shape=invhouse, color=bisque];
stat1083[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 142.243.60.3:*}[69.7154%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.8226%)&lt;BR/&gt; 25: (3.05973%)&lt;BR/&gt; 443: (0.659582%)&lt;BR/&gt; 53: (0.311469%)&lt;BR/&gt; 59244: (0.164896%)&gt;];
}
1493--1649[label="0.115321;70pkt 70fpkt"];
1493--2021[label="0.00348432;1pkt 1fpkt"];
1493--2029[label="0.00535475;4pkt 4fpkt"];
1493--2222[label="0.00348432;2pkt 2fpkt"];
1493--2232[label="0.0743494;20pkt 20fpkt"];
1493--2337[label="0.0827338;46pkt 46fpkt"];
1493--2418[label="0.307692;4pkt 4fpkt"];
1493--2663[label="0.0315789;3pkt 3fpkt"];
1493--2717[label="0.00326797;1pkt 1fpkt"];
1493--2814[label="0.0763889;11pkt 11fpkt"];
1493--2833[label="0.0236686;4pkt 4fpkt"];
1493--2846[label="0.00373134;1pkt 1fpkt"];
1493--3243[label="0.00985222;4pkt 4fpkt"];
1493--3265[label="0.0138249;3pkt 3fpkt"];
1493--3313[label="0.00843882;2pkt 2fpkt"];
1493--3319[label="0.0209205;5pkt 5fpkt"];
1493--3404[label="0.00813008;1pkt 1fpkt"];
1493--3807[label="0.0197044;4pkt 4fpkt"];
1493--3959[label="0.16;4pkt 4fpkt"];
1493--4242[label="0.217647;37pkt 37fpkt"];
1493--4268[label="0.00534759;1pkt 1fpkt"];
1493--4307[label="0.0041841;1pkt 1fpkt"];
1493--4364[label="0.552326;95pkt 95fpkt"];
1493--4658[label="0.0136986;1pkt 1fpkt"];
1493--4731[label="0.024;3pkt 3fpkt"];
1493--4788[label="0.0222222;1pkt 1fpkt"];
1493--6370[label="1;616pkt 616fpkt"];
1493--6407[label="0.10566;28pkt 28fpkt"];
1493--6493[label="0.0425532;2pkt 2fpkt"];
1493--6553[label="0.012987;1pkt 1fpkt"];
1493--6761[label="0.00254453;1pkt 1fpkt"];
1493--6993[label="0.00917431;1pkt 1fpkt"];
1493--7195[label="0.0185567;9pkt 9fpkt"];
1493--7204[label="0.00714286;2pkt 2fpkt"];
1493--7536[label="0.00900901;2pkt 2fpkt"];
1493--7865[label="0.0839695;11pkt 11fpkt"];
1493--7887[label="0.025974;4pkt 4fpkt"];
1493--7894[label="0.026178;5pkt 5fpkt"];
1493--7901[label="0.00492611;1pkt 1fpkt"];
1493--8003[label="0.266667;4pkt 4fpkt"];
1493--8206[label="0.003663;1pkt 1fpkt"];
1493--8224[label="0.0138249;3pkt 3fpkt"];
1493--8349[label="0.552326;95pkt 95fpkt"];
1493--8911[label="0.00714286;2pkt 2fpkt"];
1493--8933[label="0.00323625;1pkt 1fpkt"];
1493--9163[label="0.0188457;16pkt 16fpkt"];
1493--9177[label="0.00942285;8pkt 8fpkt"];
1493--9194[label="0.0235571;20pkt 20fpkt"];
1493--9196[label="0.00235571;2pkt 2fpkt"];
1493--9198[label="0.00588928;5pkt 5fpkt"];
1493--9217[label="0.00942285;8pkt 8fpkt"];
1493--9234[label="0.0235571;20pkt 20fpkt"];
1493--9251[label="0.00942285;8pkt 8fpkt"];
1493--9268[label="0.0235571;20pkt 20fpkt"];
1493--9277[label="0.0120482;1pkt 1fpkt"];
1493--9299[label="0.125;1pkt 1fpkt"];
1493--9307[label="0.00380228;1pkt 1fpkt"];
1493--9584[label="0.25641;10pkt 10fpkt"];
1493--9896[label="0.011976;2pkt 2fpkt"];
1493--9936[label="0.176471;3pkt 3fpkt"];
1493--9954[label="0.25;4pkt 4fpkt"];
1493--10054[label="0.307692;4pkt 4fpkt"];
1493--10057[label="0.03;3pkt 3fpkt"];
1493--10109[label="0.147059;5pkt 5fpkt"];
1493--10177[label="0.0223464;4pkt 4fpkt"];
1493--10411[label="0.172414;5pkt 5fpkt"];
1493--10535[label="0.111111;1pkt 1fpkt"];
1493--10567[label="0.0670732;11pkt 11fpkt"];
1493--10639[label="0.00701754;2pkt 2fpkt"];
1493--10677[label="0.0214286;3pkt 3fpkt"];
1493--10838[label="0.00334448;1pkt 1fpkt"];
1493--10873[label="0.00471143;4pkt 4fpkt"];
1493--11049[label="0.0714286;3pkt 3fpkt"];
1493--11346[label="1;6pkt 6fpkt"];
1493--11428[label="0.00757576;1pkt 1fpkt"];
1493--11541[label="0.444444;16pkt 16fpkt"];
1493--11989[label="0.0743134;46pkt 46fpkt"];
1493--11992[label="0.0222222;1pkt 1fpkt"];
1493--12107[label="0.10989;70pkt 70fpkt"];
1493--12542[label="0.980198;99pkt 99fpkt"];
1493--12590[label="0.552326;95pkt 95fpkt"];
1493--12593[label="0.0645161;2pkt 2fpkt"];
1493--12651[label="0.0740741;4pkt 4fpkt"];
1493--12961[label="0.0529595;17pkt 17fpkt"];
1493--13079[label="0.0060241;1pkt 1fpkt"];
1493--13120[label="0.0769231;1pkt 1fpkt"];
1493--13216[label="1;3pkt 3fpkt"];
1493--13219[label="0.0103093;1pkt 1fpkt"];
1493--13254[label="0.125;1pkt 1fpkt"];
1493--13584[label="0.1875;3pkt 3fpkt"];
1493--13654[label="0.030303;3pkt 3fpkt"];
1493--13720[label="0.0222222;4pkt 4fpkt"];
1493--13837[label="0.166667;5pkt 5fpkt"];
1493--14051[label="0.00334448;1pkt 1fpkt"];
1493--14065[label="0.00471143;4pkt 4fpkt"];
1493--14301[label="1;6pkt 6fpkt"];
1493--14350[label="0.00763359;1pkt 1fpkt"];
1493--14630[label="0.0222222;1pkt 1fpkt"];
1493--14688[label="0.10989;70pkt 70fpkt"];
1493--14906[label="0.980198;99pkt 99fpkt"];
1493--14932[label="0.555556;95pkt 95fpkt"];
1493--15123[label="0.0529595;17pkt 17fpkt"];
1493--15202[label="0.0769231;1pkt 1fpkt"];
1493--15262[label="0.0104167;1pkt 1fpkt"];
1493--15500[label="0.0222222;4pkt 4fpkt"];
1493--15675[label="0.0033557;1pkt 1fpkt"];
1493--15688[label="0.00471143;4pkt 4fpkt"];
1493--15805[label="1;5pkt 5fpkt"];
1493--15829[label="0.00757576;1pkt 1fpkt"];
1493--16014[label="0.10989;70pkt 70fpkt"];
1493--16135[label="0.980198;99pkt 99fpkt"];
1493--16151[label="0.555556;95pkt 95fpkt"];
1493--16295[label="0.0769231;1pkt 1fpkt"];
1493--16326[label="0.0104167;1pkt 1fpkt"];
4364--6370[label="0.552326;95pkt 95fpkt"];
4364--8349[label="1;172pkt 172fpkt"];
4364--9194[label="0.0174419;3pkt 3fpkt"];
4364--9234[label="0.0174419;3pkt 3fpkt"];
4364--9268[label="0.0174419;3pkt 3fpkt"];
4364--12590[label="1;172pkt 172fpkt"];
4364--14932[label="1;171pkt 171fpkt"];
4364--16151[label="1;171pkt 171fpkt"];
6370--6407[label="0.10566;28pkt 28fpkt"];
6370--6493[label="0.0425532;2pkt 2fpkt"];
6370--6761[label="0.00254453;1pkt 1fpkt"];
6370--7195[label="0.0185567;9pkt 9fpkt"];
6370--7536[label="0.0045045;1pkt 1fpkt"];
6370--7865[label="0.0839695;11pkt 11fpkt"];
6370--7887[label="0.025974;4pkt 4fpkt"];
6370--7894[label="0.0209424;4pkt 4fpkt"];
6370--8206[label="0.003663;1pkt 1fpkt"];
6370--8224[label="0.00921659;2pkt 2fpkt"];
6370--8349[label="0.552326;95pkt 95fpkt"];
6370--8933[label="0.00323625;1pkt 1fpkt"];
6370--9163[label="0.025974;16pkt 16fpkt"];
6370--9177[label="0.012987;8pkt 8fpkt"];
6370--9194[label="0.0324675;20pkt 20fpkt"];
6370--9217[label="0.012987;8pkt 8fpkt"];
6370--9234[label="0.0324675;20pkt 20fpkt"];
6370--9251[label="0.012987;8pkt 8fpkt"];
6370--9268[label="0.0324675;20pkt 20fpkt"];
6370--9277[label="0.0120482;1pkt 1fpkt"];
6370--9307[label="0.00380228;1pkt 1fpkt"];
6370--9584[label="0.25641;10pkt 10fpkt"];
6370--9896[label="0.011976;2pkt 2fpkt"];
6370--9954[label="0.25;4pkt 4fpkt"];
6370--10054[label="0.307692;4pkt 4fpkt"];
6370--10109[label="0.147059;5pkt 5fpkt"];
6370--10177[label="0.0223464;4pkt 4fpkt"];
6370--10411[label="0.172414;5pkt 5fpkt"];
6370--10567[label="0.0670732;11pkt 11fpkt"];
6370--10639[label="0.00350877;1pkt 1fpkt"];
6370--10677[label="0.0214286;3pkt 3fpkt"];
6370--11049[label="0.0714286;3pkt 3fpkt"];
6370--11346[label="1;6pkt 6fpkt"];
6370--11541[label="0.444444;16pkt 16fpkt"];
6370--11989[label="0.0454545;28pkt 28fpkt"];
6370--11992[label="0.0222222;1pkt 1fpkt"];
6370--12107[label="0.00162338;1pkt 1fpkt"];
6370--12542[label="0.980198;99pkt 99fpkt"];
6370--12590[label="0.552326;95pkt 95fpkt"];
6370--12593[label="0.0322581;1pkt 1fpkt"];
6370--12651[label="0.0740741;4pkt 4fpkt"];
6370--12961[label="0.0373832;12pkt 12fpkt"];
6370--13120[label="0.0769231;1pkt 1fpkt"];
6370--13219[label="0.0103093;1pkt 1fpkt"];
6370--13720[label="0.0222222;4pkt 4fpkt"];
6370--13837[label="0.166667;5pkt 5fpkt"];
6370--14301[label="1;6pkt 6fpkt"];
6370--14630[label="0.0222222;1pkt 1fpkt"];
6370--14688[label="0.00162338;1pkt 1fpkt"];
6370--14906[label="0.980198;99pkt 99fpkt"];
6370--14932[label="0.555556;95pkt 95fpkt"];
6370--15123[label="0.0373832;12pkt 12fpkt"];
6370--15202[label="0.0769231;1pkt 1fpkt"];
6370--15262[label="0.0104167;1pkt 1fpkt"];
6370--15500[label="0.0222222;4pkt 4fpkt"];
6370--15805[label="1;5pkt 5fpkt"];
6370--16014[label="0.00162338;1pkt 1fpkt"];
6370--16135[label="0.980198;99pkt 99fpkt"];
6370--16151[label="0.555556;95pkt 95fpkt"];
6370--16295[label="0.0769231;1pkt 1fpkt"];
6370--16326[label="0.0104167;1pkt 1fpkt"];
8349--9194[label="0.0174419;3pkt 3fpkt"];
8349--9234[label="0.0174419;3pkt 3fpkt"];
8349--9268[label="0.0174419;3pkt 3fpkt"];
8349--12590[label="1;172pkt 172fpkt"];
8349--14932[label="1;171pkt 171fpkt"];
8349--16151[label="1;171pkt 171fpkt"];
9299--13254[label="1;8pkt 8fpkt"];
11346--14301[label="1;6pkt 6fpkt"];
11346--15805[label="1;5pkt 5fpkt"];
12542--14906[label="1;101pkt 101fpkt"];
12542--16135[label="1;101pkt 101fpkt"];
12590--14932[label="1;171pkt 171fpkt"];
12590--16151[label="1;171pkt 171fpkt"];
14301--15805[label="1;5pkt 5fpkt"];
14906--16135[label="1;101pkt 101fpkt"];
14932--16151[label="1;171pkt 171fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.60.3" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1084{
style=filled;
color=gray75;
5230[label="142.243.74.136;s;5pkt 5fpkt", shape=diamond, color=yellow];
5345[label="192.105.74.101;d;2pkt 2fpkt", shape=diamond, color=yellow];
8702[label="142.243.74.136;s;5pkt 5fpkt", shape=hexagon, color=black];
8763[label="192.105.74.101;d;2pkt 2fpkt", shape=hexagon, color=black];
11549[label="142.243.74.136;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14410[label="142.243.74.136;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1084[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.74.136:*, 192.105.65.100:80}[42.8571%]&lt;BR/&gt;{*:*, 192.105.74.101:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49841: (12.5%)&lt;BR/&gt; 49809: (8.33333%)&lt;BR/&gt; 49789: (8.33333%)&lt;BR/&gt; 49760: (8.33333%)&gt;];
}
5230--5345[label="0.5;1pkt 1fpkt"];
5230--7434[label="0.2;1pkt 1fpkt"];
5230--8315[label="0.4;2pkt 2fpkt"];
5230--8702[label="1;5pkt 5fpkt"];
5230--8763[label="0.5;1pkt 1fpkt"];
5230--11549[label="0.8;4pkt 4fpkt"];
5230--14410[label="0.8;4pkt 4fpkt"];
5345--8702[label="0.5;1pkt 1fpkt"];
5345--8763[label="1;2pkt 2fpkt"];
5345--11549[label="0.5;1pkt 1fpkt"];
5345--14410[label="0.5;1pkt 1fpkt"];
8702--8763[label="0.5;1pkt 1fpkt"];
8702--11549[label="0.8;4pkt 4fpkt"];
8702--14410[label="0.8;4pkt 4fpkt"];
8763--11549[label="0.5;1pkt 1fpkt"];
8763--14410[label="0.5;1pkt 1fpkt"];
11549--14410[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.105.74.101" dst_port="80"/>
      <filter dst_ip="192.105.65.100" dst_port="80" src_ip="142.243.74.136"/>
    </slice>
    <from sec="1223614853" usec="0"/>
    <to sec="1223615603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.140.228.136"/>
    </slice>
    <from sec="1223615453" usec="0"/>
    <to sec="1223615540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.242.136"/>
    </slice>
    <from sec="1223615495" usec="0"/>
    <to sec="1223615509" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.100.5.137"/>
    </slice>
    <from sec="1223615059" usec="0"/>
    <to sec="1223615098" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.121.77.137"/>
    </slice>
    <from sec="1223615386" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.13.128.137"/>
    </slice>
    <from sec="1223615344" usec="0"/>
    <to sec="1223615354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.184.160.137"/>
    </slice>
    <from sec="1223615684" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="86.68.183.137"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.78.201.137"/>
    </slice>
    <from sec="1223614889" usec="0"/>
    <to sec="1223614894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.114.44.138"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.149.97.138"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.241.228.138"/>
    </slice>
    <from sec="1223614883" usec="0"/>
    <to sec="1223614984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.64.139"/>
    </slice>
    <from sec="1223615096" usec="0"/>
    <to sec="1223615104" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.83.80.139"/>
    </slice>
    <from sec="1223615475" usec="0"/>
    <to sec="1223615558" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.252.90.139"/>
    </slice>
    <from sec="1223615355" usec="0"/>
    <to sec="1223615360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1099{
style=filled;
color=gray75;
1234[label="136.228.241.117;d;703pkt 703fpkt", shape=diamond, color=yellow];
2435[label="212.106.1.33;s;2pkt 2fpkt", shape=diamond, color=yellow];
6434[label="212.106.1.33;s;2pkt 2fpkt", shape=hexagon, color=black];
6848[label="136.228.241.117;d;195pkt 195fpkt", shape=hexagon, color=black];
9339[label="112.11.224.2;7pkt 7fpkt", shape=pentagon, color=darkviolet];
9854[label="212.106.1.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10678[label="78.130.128.79;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10957[label="76.142.70.97;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11314[label="126.86.129.120;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11612[label="202.141.189.139;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12132[label="19.79.56.172;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12928[label="196.109.172.228;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12993[label="70.147.84.233;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13271[label="112.11.224.2;7pkt 7fpkt", shape=invtriangle, color=brown];
13535[label="212.106.1.33;1pkt 1fpkt", shape=invtriangle, color=brown];
14282[label="126.86.129.120;4pkt 4fpkt", shape=invtriangle, color=brown];
15419[label="212.106.1.33;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1099[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:25, 136.228.241.117:*}[62.2348%]&lt;BR/&gt;{*:*, 136.228.241.117:25}[31.2588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.5789%)&lt;BR/&gt; 113: (2.15789%)&lt;BR/&gt; 49579: (0.368421%)&lt;BR/&gt; 49550: (0.263158%)&lt;BR/&gt; 0: (0.210526%)&gt;];
}
1234--2435[label="1;2pkt 2fpkt"];
1234--4396[label="0.0333333;1pkt 1fpkt"];
1234--6434[label="1;2pkt 2fpkt"];
1234--6848[label="1;195pkt 195fpkt"];
1234--8138[label="0.0105263;1pkt 1fpkt"];
1234--8379[label="0.04;1pkt 1fpkt"];
1234--9177[label="0.00711238;5pkt 5fpkt"];
1234--9196[label="0.253201;178pkt 178fpkt"];
1234--9217[label="0.00711238;5pkt 5fpkt"];
1234--9251[label="0.00711238;5pkt 5fpkt"];
1234--9339[label="0.714286;5pkt 5fpkt"];
1234--9854[label="1;2pkt 2fpkt"];
1234--9922[label="0.333333;5pkt 5fpkt"];
1234--9957[label="0.466667;7pkt 7fpkt"];
1234--10006[label="0.4;4pkt 4fpkt"];
1234--10043[label="0.131579;5pkt 5fpkt"];
1234--10517[label="0.00980392;1pkt 1fpkt"];
1234--10635[label="0.48;12pkt 12fpkt"];
1234--10678[label="0.75;3pkt 3fpkt"];
1234--10957[label="1;2pkt 2fpkt"];
1234--11099[label="0.230769;3pkt 3fpkt"];
1234--11113[label="0.777778;14pkt 14fpkt"];
1234--11314[label="1;4pkt 4fpkt"];
1234--11612[label="1;3pkt 3fpkt"];
1234--11754[label="0.5;4pkt 4fpkt"];
1234--12132[label="1;4pkt 4fpkt"];
1234--12400[label="0.375;3pkt 3fpkt"];
1234--12928[label="0.833333;5pkt 5fpkt"];
1234--12993[label="1;3pkt 3fpkt"];
1234--13271[label="0.714286;5pkt 5fpkt"];
1234--13535[label="1;1pkt 1fpkt"];
1234--13648[label="0.128205;5pkt 5fpkt"];
1234--13889[label="0.00990099;1pkt 1fpkt"];
1234--13955[label="0.5;13pkt 13fpkt"];
1234--14183[label="0.764706;13pkt 13fpkt"];
1234--14282[label="1;4pkt 4fpkt"];
1234--15419[label="1;1pkt 1fpkt"];
1234--15747[label="0.764706;13pkt 13fpkt"];
2435--6434[label="1;2pkt 2fpkt"];
2435--6848[label="1;2pkt 2fpkt"];
2435--9854[label="1;2pkt 2fpkt"];
2435--13535[label="1;1pkt 1fpkt"];
2435--15419[label="1;1pkt 1fpkt"];
6434--6848[label="1;2pkt 2fpkt"];
6434--9854[label="1;2pkt 2fpkt"];
6434--13535[label="1;1pkt 1fpkt"];
6434--15419[label="1;1pkt 1fpkt"];
6848--9177[label="0.0102564;2pkt 2fpkt"];
6848--9217[label="0.0102564;2pkt 2fpkt"];
6848--9251[label="0.0102564;2pkt 2fpkt"];
6848--9854[label="1;2pkt 2fpkt"];
6848--13535[label="1;1pkt 1fpkt"];
6848--15419[label="1;1pkt 1fpkt"];
9339--13271[label="1;7pkt 7fpkt"];
9854--13535[label="1;1pkt 1fpkt"];
9854--15419[label="1;1pkt 1fpkt"];
11314--14282[label="1;4pkt 4fpkt"];
13535--15419[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.241.117" src_port="25"/>
      <filter dst_ip="136.228.241.117" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.105.221.139"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="153.109.69.140"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.77.140"/>
    </slice>
    <from sec="1223615416" usec="0"/>
    <to sec="1223615442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.15.139.140"/>
    </slice>
    <from sec="1223615102" usec="0"/>
    <to sec="1223615117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.229.149.140"/>
    </slice>
    <from sec="1223615282" usec="0"/>
    <to sec="1223615296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.233.162.140"/>
    </slice>
    <from sec="1223615577" usec="0"/>
    <to sec="1223615605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.225.215.140"/>
    </slice>
    <from sec="1223615118" usec="0"/>
    <to sec="1223615137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.99.253.141"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.94.18.142"/>
    </slice>
    <from sec="1223615098" usec="0"/>
    <to sec="1223615129" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.243.74.142"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.250.156.142"/>
    </slice>
    <from sec="1223614927" usec="0"/>
    <to sec="1223614933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="221.112.183.143"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.73.238.143"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.114.20.144"/>
    </slice>
    <from sec="1223615372" usec="0"/>
    <to sec="1223615405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.86.229.144"/>
    </slice>
    <from sec="1223615253" usec="0"/>
    <to sec="1223615267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.66.236.144"/>
    </slice>
    <from sec="1223614969" usec="0"/>
    <to sec="1223614977" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="71.229.39.145"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615159" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.140.98.145"/>
    </slice>
    <from sec="1223614980" usec="0"/>
    <to sec="1223614987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.243.116.145"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.16.152.145"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.243.65.146"/>
    </slice>
    <from sec="1223615221" usec="0"/>
    <to sec="1223615236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.75.76.146"/>
    </slice>
    <from sec="1223615538" usec="0"/>
    <to sec="1223615569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="99.87.21.147"/>
    </slice>
    <from sec="1223615179" usec="0"/>
    <to sec="1223615182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.213.32.147"/>
    </slice>
    <from sec="1223615645" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.85.34.147"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.154.145.147"/>
    </slice>
    <from sec="1223614874" usec="0"/>
    <to sec="1223614987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="218.94.217.147"/>
    </slice>
    <from sec="1223615440" usec="0"/>
    <to sec="1223615535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1128{
style=filled;
color=gray75;
1638[label="162.73.188.152;d;244pkt 244fpkt", shape=diamond, color=yellow];
2562[label="64.135.8.149;s;2pkt 2fpkt", shape=diamond, color=yellow];
6458[label="64.135.8.149;s;2pkt 2fpkt", shape=hexagon, color=black];
9676[label="204.101.149.21;3pkt 3fpkt", shape=pentagon, color=darkviolet];
10613[label="202.148.13.76;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11682[label="18.228.234.143;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11752[label="200.201.241.147;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11767[label="64.135.8.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12432[label="203.27.173.193;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12503[label="72.163.54.198;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12621[label="72.163.81.206;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13444[label="204.101.149.21;2pkt 2fpkt", shape=invtriangle, color=brown];
13945[label="202.148.13.76;3pkt 3fpkt", shape=invtriangle, color=brown];
14471[label="18.228.234.143;12pkt 12fpkt", shape=invtriangle, color=brown];
14505[label="200.201.241.147;2pkt 2fpkt", shape=invtriangle, color=brown];
15620[label="202.148.13.76;2pkt 2fpkt", shape=invhouse, color=bisque];
15894[label="18.228.234.143;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1128[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 162.73.188.152:*}[90.1639%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.1299%)&lt;BR/&gt; 9575: (3.40909%)&lt;BR/&gt; 8081: (1.2987%)&lt;BR/&gt; 2462: (0.649351%)&lt;BR/&gt; 2461: (0.649351%)&gt;];
}
1638--2562[label="1;2pkt 2fpkt"];
1638--6458[label="1;2pkt 2fpkt"];
1638--9163[label="0.0819672;20pkt 20fpkt"];
1638--9194[label="0.0491803;12pkt 12fpkt"];
1638--9198[label="0.0204918;5pkt 5fpkt"];
1638--9234[label="0.0491803;12pkt 12fpkt"];
1638--9268[label="0.0491803;12pkt 12fpkt"];
1638--9676[label="1;3pkt 3fpkt"];
1638--9691[label="0.125;7pkt 7fpkt"];
1638--10051[label="0.222222;4pkt 4fpkt"];
1638--10350[label="0.0714286;2pkt 2fpkt"];
1638--10613[label="1;3pkt 3fpkt"];
1638--11682[label="1;12pkt 12fpkt"];
1638--11752[label="1;2pkt 2fpkt"];
1638--11767[label="1;1pkt 1fpkt"];
1638--12432[label="1;1pkt 1fpkt"];
1638--12503[label="1;1pkt 1fpkt"];
1638--12621[label="1;4pkt 4fpkt"];
1638--12761[label="0.727273;8pkt 8fpkt"];
1638--13062[label="0.380952;8pkt 8fpkt"];
1638--13444[label="1;2pkt 2fpkt"];
1638--13454[label="0.127273;7pkt 7fpkt"];
1638--13945[label="1;3pkt 3fpkt"];
1638--14471[label="1;12pkt 12fpkt"];
1638--14505[label="1;2pkt 2fpkt"];
1638--15381[label="0.127273;7pkt 7fpkt"];
1638--15620[label="1;2pkt 2fpkt"];
1638--15894[label="1;12pkt 12fpkt"];
2562--6458[label="1;2pkt 2fpkt"];
2562--11767[label="1;1pkt 1fpkt"];
6458--11767[label="1;1pkt 1fpkt"];
9676--13444[label="1;2pkt 2fpkt"];
10613--13945[label="1;3pkt 3fpkt"];
10613--15620[label="1;2pkt 2fpkt"];
11682--14471[label="1;12pkt 12fpkt"];
11682--15894[label="1;12pkt 12fpkt"];
11752--14505[label="1;2pkt 2fpkt"];
13945--15620[label="1;2pkt 2fpkt"];
14471--15894[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.188.152" src_port="80"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.137.103.148"/>
    </slice>
    <from sec="1223615161" usec="0"/>
    <to sec="1223615164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.160.36.150"/>
    </slice>
    <from sec="1223615400" usec="0"/>
    <to sec="1223615407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.4.86.150"/>
    </slice>
    <from sec="1223615602" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.200.184.150"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.14.249.150"/>
    </slice>
    <from sec="1223615477" usec="0"/>
    <to sec="1223615632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.172.13.151"/>
    </slice>
    <from sec="1223615671" usec="0"/>
    <to sec="1223615679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.6.44.151"/>
    </slice>
    <from sec="1223615031" usec="0"/>
    <to sec="1223615037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.221.101.151"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.227.128.151"/>
    </slice>
    <from sec="1223615211" usec="0"/>
    <to sec="1223615215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.69.168.151"/>
    </slice>
    <from sec="1223615142" usec="0"/>
    <to sec="1223615151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.42.21.152"/>
    </slice>
    <from sec="1223614921" usec="0"/>
    <to sec="1223614927" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.212.26.152"/>
    </slice>
    <from sec="1223615106" usec="0"/>
    <to sec="1223615112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.76.152"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.221.101.152"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.196.152"/>
    </slice>
    <from sec="1223615430" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.100.253.152"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.120.86.154"/>
    </slice>
    <from sec="1223615227" usec="0"/>
    <to sec="1223615278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.93.154"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.173.100.154"/>
    </slice>
    <from sec="1223614929" usec="0"/>
    <to sec="1223614931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.104.160.154"/>
    </slice>
    <from sec="1223615273" usec="0"/>
    <to sec="1223615308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.176.154"/>
    </slice>
    <from sec="1223614990" usec="0"/>
    <to sec="1223615618" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.186.31.155"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.217.45.155"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="150.133.46.155"/>
    </slice>
    <from sec="1223615105" usec="0"/>
    <to sec="1223615417" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.175.52.155"/>
    </slice>
    <from sec="1223615577" usec="0"/>
    <to sec="1223615602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.118.249.156"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.53.13.157"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.40.6.159"/>
    </slice>
    <from sec="1223614895" usec="0"/>
    <to sec="1223614903" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.231.32.159"/>
    </slice>
    <from sec="1223615542" usec="0"/>
    <to sec="1223615577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.90.55.159"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.193.254.159"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223614993" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.155.11.160"/>
    </slice>
    <from sec="1223614850" usec="0"/>
    <to sec="1223614859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.194.74.160"/>
    </slice>
    <from sec="1223615248" usec="0"/>
    <to sec="1223615253" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.174.160"/>
    </slice>
    <from sec="1223615094" usec="0"/>
    <to sec="1223615122" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.192.160"/>
    </slice>
    <from sec="1223615281" usec="0"/>
    <to sec="1223615506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1165{
style=filled;
color=gray75;
3133[label="104.243.253.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
11955[label="104.243.253.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1165[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.243.253.160:80, 136.228.104.224:3007}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3007: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3133--11955[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.224" dst_port="3007" src_ip="104.243.253.160" src_port="80"/>
    </slice>
    <from sec="1223615070" usec="0"/>
    <to sec="1223615139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.228.28.162"/>
    </slice>
    <from sec="1223615435" usec="0"/>
    <to sec="1223615444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.170.85.162"/>
    </slice>
    <from sec="1223614862" usec="0"/>
    <to sec="1223614869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.150.31.164"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.112.149.164"/>
    </slice>
    <from sec="1223615019" usec="0"/>
    <to sec="1223615029" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.154.36.165"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.10.38.165"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223614850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.17.68.165"/>
    </slice>
    <from sec="1223615515" usec="0"/>
    <to sec="1223615519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.149.20.166"/>
    </slice>
    <from sec="1223615564" usec="0"/>
    <to sec="1223615569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.212.48.166"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.73.64.166"/>
    </slice>
    <from sec="1223615646" usec="0"/>
    <to sec="1223615685" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.225.10.167"/>
    </slice>
    <from sec="1223615364" usec="0"/>
    <to sec="1223615414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.14.110.167"/>
    </slice>
    <from sec="1223615043" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.163.74.168"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.116.148.168"/>
    </slice>
    <from sec="1223615259" usec="0"/>
    <to sec="1223615506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.8.169.168"/>
    </slice>
    <from sec="1223615653" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.183.193.168"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1182{
style=filled;
color=gray75;
641[label="162.73.46.178;d;1622pkt 1622fpkt", shape=diamond, color=yellow];
1444[label="202.160.52.114;s;24pkt 24fpkt", shape=diamond, color=yellow];
2042[label="142.47.173.80;d;462pkt 462fpkt", shape=diamond, color=yellow];
3513[label="205.140.22.152;s;16pkt 16fpkt", shape=diamond, color=yellow];
4569[label="18.137.32.104;s;15pkt 15fpkt", shape=diamond, color=yellow];
5276[label="213.0.104.77;s;14pkt 14fpkt", shape=diamond, color=yellow];
8427[label="18.137.32.104;s;15pkt 15fpkt", shape=hexagon, color=black];
9717[label="200.53.240.23;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9855[label="162.106.2.33;57pkt 57fpkt", shape=pentagon, color=darkviolet];
10368[label="195.155.92.62;13pkt 13fpkt", shape=pentagon, color=darkviolet];
11069[label="18.137.32.104;14pkt 14fpkt", shape=pentagon, color=darkviolet];
11164[label="213.59.90.109;12pkt 12fpkt", shape=pentagon, color=darkviolet];
11780[label="194.169.0.150;4pkt 4fpkt", shape=pentagon, color=darkviolet];
12078[label="87.85.10.169;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12096[label="72.210.50.170;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12430[label="205.136.163.193;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12476[label="72.211.50.196;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12550[label="71.169.13.201;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12784[label="78.8.9.218;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12826[label="205.141.244.220;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13058[label="202.116.242.237;18pkt 18fpkt", shape=pentagon, color=darkviolet];
13466[label="200.53.240.23;5pkt 5fpkt", shape=invtriangle, color=brown];
13815[label="195.155.92.62;13pkt 13fpkt", shape=invtriangle, color=brown];
14163[label="18.137.32.104;15pkt 15fpkt", shape=invtriangle, color=brown];
14521[label="194.169.0.150;4pkt 4fpkt", shape=invtriangle, color=brown];
14670[label="87.85.10.169;6pkt 6fpkt", shape=invtriangle, color=brown];
14875[label="72.211.50.196;1pkt 1fpkt", shape=invtriangle, color=brown];
15028[label="78.8.9.218;5pkt 5fpkt", shape=invtriangle, color=brown];
15051[label="205.141.244.220;13pkt 13fpkt", shape=invtriangle, color=brown];
15387[label="200.53.240.23;5pkt 5fpkt", shape=invhouse, color=bisque];
15549[label="195.155.92.62;13pkt 13fpkt", shape=invhouse, color=bisque];
15918[label="194.169.0.150;4pkt 4fpkt", shape=invhouse, color=bisque];
16209[label="78.8.9.218;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1182[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 162.73.46.178:80}[74.537%]&lt;BR/&gt;{*:*, 142.47.173.80:80}[21.2963%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.1149%)&lt;BR/&gt; 20480: (0.452861%)&lt;BR/&gt; 53: (0.370523%)&lt;BR/&gt; 23182: (0.308769%)&lt;BR/&gt; 1197: (0.205846%)&gt;];
}
641--973[label="0.25;1pkt 1fpkt"];
641--1444[label="1;24pkt 24fpkt"];
641--1758[label="0.5;1pkt 1fpkt"];
641--2985[label="0.818182;9pkt 9fpkt"];
641--3513[label="1;16pkt 16fpkt"];
641--3986[label="0.96;24pkt 24fpkt"];
641--4012[label="0.0363636;2pkt 2fpkt"];
641--4376[label="0.769231;10pkt 10fpkt"];
641--4569[label="0.933333;14pkt 14fpkt"];
641--4855[label="0.857143;18pkt 18fpkt"];
641--4898[label="0.5;1pkt 1fpkt"];
641--5276[label="1;14pkt 14fpkt"];
641--5740[label="1;12pkt 12fpkt"];
641--5914[label="1;303pkt 303fpkt"];
641--8039[label="0.857143;18pkt 18fpkt"];
641--8427[label="0.933333;14pkt 14fpkt"];
641--8712[label="0.0363636;2pkt 2fpkt"];
641--9717[label="1;5pkt 5fpkt"];
641--9860[label="1;14pkt 14fpkt"];
641--10368[label="0.461538;6pkt 6fpkt"];
641--10434[label="1;6pkt 6fpkt"];
641--10807[label="0.892857;25pkt 25fpkt"];
641--11053[label="0.7;14pkt 14fpkt"];
641--11069[label="1;14pkt 14fpkt"];
641--11164[label="1;12pkt 12fpkt"];
641--11192[label="1;11pkt 11fpkt"];
641--11215[label="0.875;14pkt 14fpkt"];
641--11235[label="0.92;138pkt 138fpkt"];
641--11306[label="1;7pkt 7fpkt"];
641--11780[label="1;4pkt 4fpkt"];
641--11794[label="0.25;1pkt 1fpkt"];
641--11960[label="1;39pkt 39fpkt"];
641--12004[label="1;7pkt 7fpkt"];
641--12078[label="0.8;4pkt 4fpkt"];
641--12096[label="1;12pkt 12fpkt"];
641--12163[label="0.0588235;2pkt 2fpkt"];
641--12344[label="0.0363636;2pkt 2fpkt"];
641--12430[label="1;5pkt 5fpkt"];
641--12476[label="1;1pkt 1fpkt"];
641--12550[label="1;6pkt 6fpkt"];
641--12784[label="1;6pkt 6fpkt"];
641--12826[label="1;13pkt 13fpkt"];
641--12958[label="1;6pkt 6fpkt"];
641--13018[label="0.666667;4pkt 4fpkt"];
641--13058[label="0.388889;7pkt 7fpkt"];
641--13152[label="1;6pkt 6fpkt"];
641--13466[label="1;5pkt 5fpkt"];
641--13538[label="1;13pkt 13fpkt"];
641--13815[label="0.461538;6pkt 6fpkt"];
641--14037[label="0.862069;25pkt 25fpkt"];
641--14163[label="0.933333;14pkt 14fpkt"];
641--14226[label="1;11pkt 11fpkt"];
641--14521[label="1;4pkt 4fpkt"];
641--14529[label="0.333333;1pkt 1fpkt"];
641--14670[label="0.666667;4pkt 4fpkt"];
641--14717[label="0.0606061;2pkt 2fpkt"];
641--14875[label="1;1pkt 1fpkt"];
641--15028[label="1;5pkt 5fpkt"];
641--15051[label="1;13pkt 13fpkt"];
641--15224[label="1;6pkt 6fpkt"];
641--15387[label="1;5pkt 5fpkt"];
641--15422[label="1;14pkt 14fpkt"];
641--15549[label="0.461538;6pkt 6fpkt"];
641--15918[label="1;4pkt 4fpkt"];
641--15924[label="0.333333;1pkt 1fpkt"];
641--16209[label="1;6pkt 6fpkt"];
641--16255[label="1;6pkt 6fpkt"];
1444--11235[label="1;24pkt 24fpkt"];
2042--2171[label="0.00947867;2pkt 2fpkt"];
2042--3966[label="0.00724638;1pkt 1fpkt"];
2042--3969[label="0.00724638;1pkt 1fpkt"];
2042--3973[label="1;44pkt 44fpkt"];
2042--7345[label="0.00724638;1pkt 1fpkt"];
2042--9855[label="0.0175439;1pkt 1fpkt"];
2042--10265[label="0.00729927;1pkt 1fpkt"];
2042--10368[label="0.0769231;1pkt 1fpkt"];
2042--10807[label="0.0357143;1pkt 1fpkt"];
2042--11053[label="0.05;1pkt 1fpkt"];
2042--11544[label="0.00724638;1pkt 1fpkt"];
2042--12570[label="1;44pkt 44fpkt"];
2042--13761[label="0.00724638;1pkt 1fpkt"];
2042--13815[label="0.0769231;1pkt 1fpkt"];
2042--14037[label="0.0689655;2pkt 2fpkt"];
2042--14406[label="0.00729927;1pkt 1fpkt"];
2042--15549[label="0.0769231;1pkt 1fpkt"];
2042--15857[label="0.00729927;1pkt 1fpkt"];
4569--5506[label="0.0666667;1pkt 1fpkt"];
4569--8427[label="1;15pkt 15fpkt"];
4569--11069[label="1;14pkt 14fpkt"];
4569--14163[label="1;15pkt 15fpkt"];
8427--11069[label="1;14pkt 14fpkt"];
8427--14163[label="1;15pkt 15fpkt"];
9717--13466[label="1;5pkt 5fpkt"];
9717--15387[label="1;5pkt 5fpkt"];
10368--13815[label="1;13pkt 13fpkt"];
10368--15549[label="1;13pkt 13fpkt"];
11069--14163[label="1;14pkt 14fpkt"];
11780--14521[label="1;4pkt 4fpkt"];
11780--15918[label="1;4pkt 4fpkt"];
12078--14670[label="1;5pkt 5fpkt"];
12476--14875[label="1;1pkt 1fpkt"];
12784--15028[label="1;5pkt 5fpkt"];
12784--16209[label="1;6pkt 6fpkt"];
12826--15051[label="1;13pkt 13fpkt"];
13466--15387[label="1;5pkt 5fpkt"];
13815--15549[label="1;13pkt 13fpkt"];
14521--15918[label="1;4pkt 4fpkt"];
15028--16209[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.46.178" dst_port="80"/>
      <filter dst_ip="142.47.173.80" dst_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.176.96.169"/>
    </slice>
    <from sec="1223615608" usec="0"/>
    <to sec="1223615614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.0.117.169"/>
    </slice>
    <from sec="1223614923" usec="0"/>
    <to sec="1223615200" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.109.113.170"/>
    </slice>
    <from sec="1223614825" usec="0"/>
    <to sec="1223615498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.96.137.170"/>
    </slice>
    <from sec="1223614991" usec="0"/>
    <to sec="1223615679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.216.169.170"/>
    </slice>
    <from sec="1223615204" usec="0"/>
    <to sec="1223615325" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.200.5.171"/>
    </slice>
    <from sec="1223615258" usec="0"/>
    <to sec="1223615273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.240.96.171"/>
    </slice>
    <from sec="1223615148" usec="0"/>
    <to sec="1223615165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.64.100.171"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.131.171"/>
    </slice>
    <from sec="1223615573" usec="0"/>
    <to sec="1223615588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.138.169.171"/>
    </slice>
    <from sec="1223615277" usec="0"/>
    <to sec="1223615322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.206.248.171"/>
    </slice>
    <from sec="1223614961" usec="0"/>
    <to sec="1223615592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="217.52.92.172"/>
    </slice>
    <from sec="1223615691" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.215.6.173"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="112.189.97.173"/>
    </slice>
    <from sec="1223615247" usec="0"/>
    <to sec="1223615259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.244.179.173"/>
    </slice>
    <from sec="1223615218" usec="0"/>
    <to sec="1223615228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.249.173"/>
    </slice>
    <from sec="1223615279" usec="0"/>
    <to sec="1223615305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1199{
style=filled;
color=gray75;
869[label="196.10.151.174;s;2pkt 2fpkt", shape=diamond, color=yellow];
7433[label="196.10.151.174;s;2pkt 2fpkt", shape=hexagon, color=black];
12176[label="196.10.151.174;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14724[label="196.10.151.174;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1199[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.10.151.174:554, 136.228.117.71:1171}[50%]&lt;BR/&gt;{196.10.151.174:10220, 136.228.117.71:6972}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1171: (28.5714%)&lt;BR/&gt; 554: (28.5714%)&lt;BR/&gt; 10220: (21.4286%)&lt;BR/&gt; 6972: (21.4286%)&gt;];
}
869--870[label="1;2pkt 2fpkt"];
869--5961[label="1;2pkt 2fpkt"];
869--7433[label="1;2pkt 2fpkt"];
869--12176[label="1;2pkt 2fpkt"];
869--14724[label="1;1pkt 1fpkt"];
7433--12176[label="1;2pkt 2fpkt"];
7433--14724[label="1;1pkt 1fpkt"];
12176--14724[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.117.71" dst_port="6972" src_ip="196.10.151.174" src_port="10220"/>
      <filter dst_ip="136.228.117.71" dst_port="1171" src_ip="196.10.151.174" src_port="554"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.11.242.174"/>
    </slice>
    <from sec="1223615284" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.230.237.175"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.11.7.176"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1203{
style=filled;
color=gray75;
1476[label="78.11.104.3;d;5pkt 5fpkt", shape=diamond, color=yellow];
3483[label="194.169.14.98;d;13pkt 13fpkt", shape=diamond, color=yellow];
3560[label="200.53.59.75;d;25pkt 25fpkt", shape=diamond, color=yellow];
3621[label="72.215.29.85;d;5pkt 5fpkt", shape=diamond, color=yellow];
4098[label="72.210.50.170;d;13pkt 13fpkt", shape=diamond, color=yellow];
4502[label="205.130.140.162;d;5pkt 5fpkt", shape=diamond, color=yellow];
6361[label="78.11.104.3;d;5pkt 5fpkt", shape=hexagon, color=black];
7400[label="72.210.50.170;d;13pkt 13fpkt", shape=hexagon, color=black];
12195[label="162.73.46.176;84pkt 84fpkt", shape=pentagon, color=darkviolet];
14736[label="162.73.46.176;84pkt 84fpkt", shape=invtriangle, color=brown];
16036[label="162.73.46.176;84pkt 84fpkt", shape=invhouse, color=bisque];
stat1203[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.46.176:80, 21.100.2.171:*}[41.6667%]&lt;BR/&gt;{162.73.46.178:80, *:*}[40.2778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7024%)&lt;BR/&gt; 52490: (1.19048%)&lt;BR/&gt; 2849: (0.744048%)&lt;BR/&gt; 60347: (0.595238%)&lt;BR/&gt; 49501: (0.595238%)&gt;];
}
1476--6181[label="0.8;4pkt 4fpkt"];
1476--6361[label="1;5pkt 5fpkt"];
1476--9163[label="1;5pkt 5fpkt"];
1476--12195[label="0.2;1pkt 1fpkt"];
1476--12228[label="0.8;4pkt 4fpkt"];
1476--14736[label="0.2;1pkt 1fpkt"];
1476--14746[label="0.8;4pkt 4fpkt"];
1476--16036[label="0.2;1pkt 1fpkt"];
1476--16042[label="0.8;4pkt 4fpkt"];
3483--6181[label="0.769231;10pkt 10fpkt"];
3483--6499[label="0.0769231;1pkt 1fpkt"];
3483--9194[label="0.461538;6pkt 6fpkt"];
3483--9234[label="0.461538;6pkt 6fpkt"];
3483--9268[label="0.461538;6pkt 6fpkt"];
3483--12195[label="0.0769231;1pkt 1fpkt"];
3483--12228[label="0.769231;10pkt 10fpkt"];
3483--14736[label="0.0769231;1pkt 1fpkt"];
3483--14746[label="0.769231;10pkt 10fpkt"];
3483--16036[label="0.0769231;1pkt 1fpkt"];
3483--16042[label="0.769231;10pkt 10fpkt"];
3560--6181[label="0.96;24pkt 24fpkt"];
3560--12195[label="0.04;1pkt 1fpkt"];
3560--12228[label="0.96;24pkt 24fpkt"];
3560--14736[label="0.04;1pkt 1fpkt"];
3560--14746[label="0.96;24pkt 24fpkt"];
3560--16036[label="0.04;1pkt 1fpkt"];
3560--16042[label="0.96;24pkt 24fpkt"];
3621--6181[label="0.8;4pkt 4fpkt"];
3621--12195[label="0.2;1pkt 1fpkt"];
3621--12228[label="0.8;4pkt 4fpkt"];
3621--14736[label="0.2;1pkt 1fpkt"];
3621--14746[label="0.8;4pkt 4fpkt"];
3621--16036[label="0.2;1pkt 1fpkt"];
3621--16042[label="0.8;4pkt 4fpkt"];
4098--6181[label="0.923077;12pkt 12fpkt"];
4098--7400[label="1;13pkt 13fpkt"];
4098--9194[label="1;13pkt 13fpkt"];
4098--9234[label="1;13pkt 13fpkt"];
4098--9268[label="1;13pkt 13fpkt"];
4098--12195[label="0.0769231;1pkt 1fpkt"];
4098--12228[label="0.923077;12pkt 12fpkt"];
4098--14736[label="0.0769231;1pkt 1fpkt"];
4098--14746[label="0.923077;12pkt 12fpkt"];
4098--16036[label="0.0769231;1pkt 1fpkt"];
4098--16042[label="0.923077;12pkt 12fpkt"];
4502--6181[label="0.8;4pkt 4fpkt"];
4502--12195[label="0.2;1pkt 1fpkt"];
4502--12228[label="0.8;4pkt 4fpkt"];
4502--14736[label="0.2;1pkt 1fpkt"];
4502--14746[label="0.8;4pkt 4fpkt"];
4502--16036[label="0.2;1pkt 1fpkt"];
4502--16042[label="0.8;4pkt 4fpkt"];
6361--9163[label="1;5pkt 5fpkt"];
6361--12195[label="0.2;1pkt 1fpkt"];
6361--12228[label="0.8;4pkt 4fpkt"];
6361--14736[label="0.2;1pkt 1fpkt"];
6361--14746[label="0.8;4pkt 4fpkt"];
6361--16036[label="0.2;1pkt 1fpkt"];
6361--16042[label="0.8;4pkt 4fpkt"];
7400--9194[label="1;13pkt 13fpkt"];
7400--9234[label="1;13pkt 13fpkt"];
7400--9268[label="1;13pkt 13fpkt"];
7400--12195[label="0.0769231;1pkt 1fpkt"];
7400--12228[label="0.923077;12pkt 12fpkt"];
7400--14736[label="0.0769231;1pkt 1fpkt"];
7400--14746[label="0.923077;12pkt 12fpkt"];
7400--16036[label="0.0769231;1pkt 1fpkt"];
7400--16042[label="0.923077;12pkt 12fpkt"];
12195--14736[label="1;84pkt 84fpkt"];
12195--16036[label="1;84pkt 84fpkt"];
14736--16036[label="1;84pkt 84fpkt"];
</description>
    <slice>
      <filter src_ip="162.73.46.178" src_port="80"/>
      <filter dst_ip="21.100.2.171" src_ip="162.73.46.176" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.88.176"/>
    </slice>
    <from sec="1223615066" usec="0"/>
    <to sec="1223615074" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.232.176"/>
    </slice>
    <from sec="1223614917" usec="0"/>
    <to sec="1223615282" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.244.8.177"/>
    </slice>
    <from sec="1223615657" usec="0"/>
    <to sec="1223615672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.78.177"/>
    </slice>
    <from sec="1223615356" usec="0"/>
    <to sec="1223615382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.94.79.177"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.202.177"/>
    </slice>
    <from sec="1223615299" usec="0"/>
    <to sec="1223615367" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.94.178"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.19.172.178"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.245.183.178"/>
    </slice>
    <from sec="1223615385" usec="0"/>
    <to sec="1223615407" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.251.178"/>
    </slice>
    <from sec="1223615417" usec="0"/>
    <to sec="1223615433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.101.14.179"/>
    </slice>
    <from sec="1223614841" usec="0"/>
    <to sec="1223614848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.64.101.179"/>
    </slice>
    <from sec="1223615668" usec="0"/>
    <to sec="1223615682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1217{
style=filled;
color=gray75;
3436[label="136.228.5.42;d;33pkt 33fpkt", shape=diamond, color=yellow];
3464[label="124.237.162.143;s;21pkt 21fpkt", shape=diamond, color=yellow];
7599[label="136.228.5.42;d;33pkt 33fpkt", shape=hexagon, color=black];
8364[label="124.237.162.143;s;21pkt 21fpkt", shape=hexagon, color=black];
11676[label="124.237.162.143;20pkt 20fpkt", shape=pentagon, color=darkviolet];
12261[label="106.83.122.180;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14466[label="124.237.162.143;20pkt 20fpkt", shape=invtriangle, color=brown];
15890[label="124.237.162.143;21pkt 21fpkt", shape=invhouse, color=bisque];
stat1217[shape=component, label=&lt;Rules:&lt;BR/&gt;{124.237.162.143:80, 136.228.5.42:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3382: (2.02312%)&lt;BR/&gt; 3354: (2.02312%)&lt;BR/&gt; 3353: (2.02312%)&lt;BR/&gt; 3320: (2.02312%)&gt;];
}
3436--3464[label="1;21pkt 21fpkt"];
3436--7599[label="1;33pkt 33fpkt"];
3436--8206[label="0.0606061;2pkt 2fpkt"];
3436--8364[label="1;21pkt 21fpkt"];
3436--9194[label="0.0909091;3pkt 3fpkt"];
3436--9198[label="0.0606061;2pkt 2fpkt"];
3436--9234[label="0.0909091;3pkt 3fpkt"];
3436--9268[label="0.0909091;3pkt 3fpkt"];
3436--11676[label="1;20pkt 20fpkt"];
3436--12261[label="1;4pkt 4fpkt"];
3436--14466[label="1;20pkt 20fpkt"];
3436--15890[label="1;21pkt 21fpkt"];
3464--7599[label="1;21pkt 21fpkt"];
3464--8364[label="1;21pkt 21fpkt"];
3464--9194[label="0.142857;3pkt 3fpkt"];
3464--9198[label="0.047619;1pkt 1fpkt"];
3464--9234[label="0.142857;3pkt 3fpkt"];
3464--9268[label="0.142857;3pkt 3fpkt"];
3464--11676[label="1;20pkt 20fpkt"];
3464--14466[label="1;20pkt 20fpkt"];
3464--15890[label="1;21pkt 21fpkt"];
7599--8206[label="0.0606061;2pkt 2fpkt"];
7599--8364[label="1;21pkt 21fpkt"];
7599--9194[label="0.0909091;3pkt 3fpkt"];
7599--9198[label="0.0606061;2pkt 2fpkt"];
7599--9234[label="0.0909091;3pkt 3fpkt"];
7599--9268[label="0.0909091;3pkt 3fpkt"];
7599--11676[label="1;20pkt 20fpkt"];
7599--12261[label="1;4pkt 4fpkt"];
7599--14466[label="1;20pkt 20fpkt"];
7599--15890[label="1;21pkt 21fpkt"];
8364--9194[label="0.142857;3pkt 3fpkt"];
8364--9198[label="0.047619;1pkt 1fpkt"];
8364--9234[label="0.142857;3pkt 3fpkt"];
8364--9268[label="0.142857;3pkt 3fpkt"];
8364--11676[label="1;20pkt 20fpkt"];
8364--14466[label="1;20pkt 20fpkt"];
8364--15890[label="1;21pkt 21fpkt"];
11676--14466[label="1;20pkt 20fpkt"];
11676--15890[label="1;20pkt 20fpkt"];
14466--15890[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.5.42" src_ip="124.237.162.143" src_port="80"/>
    </slice>
    <from sec="1223614869" usec="0"/>
    <to sec="1223615630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.136.147.180"/>
    </slice>
    <from sec="1223615474" usec="0"/>
    <to sec="1223615540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.16.161.181"/>
    </slice>
    <from sec="1223614833" usec="0"/>
    <to sec="1223615674" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="85.182.35.182"/>
    </slice>
    <from sec="1223615275" usec="0"/>
    <to sec="1223615293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="50.89.60.182"/>
    </slice>
    <from sec="1223615397" usec="0"/>
    <to sec="1223615688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.166.112.183"/>
    </slice>
    <from sec="1223615211" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.200.213.184"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="118.52.168.185"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.128.46.186"/>
    </slice>
    <from sec="1223614842" usec="0"/>
    <to sec="1223614939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.17.68.186"/>
    </slice>
    <from sec="1223615658" usec="0"/>
    <to sec="1223615666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.205.203.186"/>
    </slice>
    <from sec="1223615390" usec="0"/>
    <to sec="1223615507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.176.230.187"/>
    </slice>
    <from sec="1223615257" usec="0"/>
    <to sec="1223615279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.149.13.188"/>
    </slice>
    <from sec="1223614820" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.205.99.188"/>
    </slice>
    <from sec="1223615372" usec="0"/>
    <to sec="1223615442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.105.78.189"/>
    </slice>
    <from sec="1223614862" usec="0"/>
    <to sec="1223614922" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.167.97.189"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.202.240.189"/>
    </slice>
    <from sec="1223614828" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.136.241.189"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.251.189"/>
    </slice>
    <from sec="1223615263" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="115.167.6.190"/>
    </slice>
    <from sec="1223615690" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.185.11.190"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.142.80.190"/>
    </slice>
    <from sec="1223615664" usec="0"/>
    <to sec="1223615677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.15.90.190"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.45.18.192"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223614820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="113.63.81.192"/>
    </slice>
    <from sec="1223615133" usec="0"/>
    <to sec="1223615163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.122.192"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.233.202.192"/>
    </slice>
    <from sec="1223615535" usec="0"/>
    <to sec="1223615630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.137.110.193"/>
    </slice>
    <from sec="1223615468" usec="0"/>
    <to sec="1223615568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.17.246.193"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.71.194"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.41.92.194"/>
    </slice>
    <from sec="1223615195" usec="0"/>
    <to sec="1223615205" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.152.194"/>
    </slice>
    <from sec="1223614868" usec="0"/>
    <to sec="1223614911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.195.117.195"/>
    </slice>
    <from sec="1223615092" usec="0"/>
    <to sec="1223615102" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.17.229.195"/>
    </slice>
    <from sec="1223615223" usec="0"/>
    <to sec="1223615228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.157.14.196"/>
    </slice>
    <from sec="1223614917" usec="0"/>
    <to sec="1223615669" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1253{
style=filled;
color=gray75;
12483[label="212.21.132.196;172pkt 172fpkt", shape=pentagon, color=darkviolet];
stat1253[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.132.196:*, *:53}[98.8372%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7093%)&lt;BR/&gt; 51140: (0.290698%)&lt;BR/&gt; 51139: (0.290698%)&lt;BR/&gt; 51137: (0.290698%)&lt;BR/&gt; 51135: (0.290698%)&gt;];
}
</description>
    <slice>
      <filter dst_port="53" src_ip="212.21.132.196"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1254{
style=filled;
color=gray75;
5021[label="64.135.8.197;s;24pkt 24fpkt", shape=diamond, color=yellow];
12492[label="64.135.8.197;24pkt 24fpkt", shape=pentagon, color=darkviolet];
14885[label="64.135.8.197;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1254[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.135.8.197:80, 136.228.85.93:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1822: (2.11268%)&lt;BR/&gt; 1821: (2.11268%)&lt;BR/&gt; 1820: (2.11268%)&lt;BR/&gt; 1819: (2.11268%)&gt;];
}
5021--12492[label="1;24pkt 24fpkt"];
5021--14885[label="1;23pkt 23fpkt"];
12492--14885[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.85.93" src_ip="64.135.8.197" src_port="80"/>
    </slice>
    <from sec="1223615425" usec="0"/>
    <to sec="1223615518" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="148.64.160.197"/>
    </slice>
    <from sec="1223615541" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.96.115.198"/>
    </slice>
    <from sec="1223615394" usec="0"/>
    <to sec="1223615429" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.21.132.198"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="121.172.175.199"/>
    </slice>
    <from sec="1223615075" usec="0"/>
    <to sec="1223615090" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.243.249.199"/>
    </slice>
    <from sec="1223615274" usec="0"/>
    <to sec="1223615427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1260{
style=filled;
color=gray75;
2807[label="142.243.51.134;d;79pkt 79fpkt", shape=diamond, color=yellow];
3292[label="21.20.253.199;s;51pkt 51fpkt", shape=diamond, color=yellow];
3692[label="142.243.51.128;d;58pkt 58fpkt", shape=diamond, color=yellow];
5611[label="72.215.13.110;s;28pkt 28fpkt", shape=diamond, color=yellow];
7858[label="21.20.253.199;s;44pkt 44fpkt", shape=hexagon, color=black];
12413[label="69.152.117.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12530[label="21.20.253.199;54pkt 54fpkt", shape=pentagon, color=darkviolet];
stat1260[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.243.51.128:995}[34.1772%]&lt;BR/&gt;{21.20.253.199:*, *:*}[34.1772%]&lt;BR/&gt;{*:*, 142.243.51.134:443}[26.5823%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (24.6082%)&lt;BR/&gt; 993: (10.9718%)&lt;BR/&gt; 443: (7.05329%)&lt;BR/&gt; 110: (3.29154%)&lt;BR/&gt; 143: (1.41066%)&gt;];
}
2807--3292[label="0.27451;14pkt 14fpkt"];
2807--7858[label="0.295455;13pkt 13fpkt"];
2807--9178[label="0.0253165;2pkt 2fpkt"];
2807--9218[label="0.0253165;2pkt 2fpkt"];
2807--9252[label="0.0253165;2pkt 2fpkt"];
2807--12413[label="0.8;4pkt 4fpkt"];
2807--12530[label="0.259259;14pkt 14fpkt"];
2807--13034[label="0.0126582;1pkt 1fpkt"];
3292--3692[label="0.392157;20pkt 20fpkt"];
3292--7218[label="0.0392157;2pkt 2fpkt"];
3292--7858[label="1;44pkt 44fpkt"];
3292--12530[label="1;51pkt 51fpkt"];
3692--5611[label="1;28pkt 28fpkt"];
3692--7858[label="0.363636;16pkt 16fpkt"];
3692--12530[label="0.37037;20pkt 20fpkt"];
7858--12530[label="1;44pkt 44fpkt"];
</description>
    <slice>
      <filter src_ip="21.20.253.199"/>
      <filter dst_ip="142.243.51.134" dst_port="443"/>
      <filter dst_ip="142.243.51.128" dst_port="995"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.79.4.200"/>
    </slice>
    <from sec="1223615026" usec="0"/>
    <to sec="1223615034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.138.110.200"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.61.207.200"/>
    </slice>
    <from sec="1223615487" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.66.218.200"/>
    </slice>
    <from sec="1223615571" usec="0"/>
    <to sec="1223615588" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.63.21.201"/>
    </slice>
    <from sec="1223615193" usec="0"/>
    <to sec="1223615198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.22.201"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.130.104.202"/>
    </slice>
    <from sec="1223615266" usec="0"/>
    <to sec="1223615293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1268{
style=filled;
color=gray75;
4413[label="162.73.219.45;d;68pkt 68fpkt", shape=diamond, color=yellow];
8387[label="162.73.219.45;d;68pkt 68fpkt", shape=hexagon, color=black];
9522[label="200.201.66.13;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9924[label="18.117.207.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat1268[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.112.173.67:8083, 162.73.219.45:*}[52.9412%]&lt;BR/&gt;{*:80, 162.73.219.45:*}[47.0588%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.8389%)&lt;BR/&gt; 8083: (24.1611%)&lt;BR/&gt; 4313: (1.00671%)&lt;BR/&gt; 4312: (1.00671%)&lt;BR/&gt; 4305: (1.00671%)&gt;];
}
4413--8387[label="1;68pkt 68fpkt"];
4413--9194[label="0.102941;7pkt 7fpkt"];
4413--9234[label="0.102941;7pkt 7fpkt"];
4413--9268[label="0.102941;7pkt 7fpkt"];
4413--9522[label="1;10pkt 10fpkt"];
4413--9924[label="1;3pkt 3fpkt"];
4413--12578[label="0.173913;8pkt 8fpkt"];
8387--9194[label="0.102941;7pkt 7fpkt"];
8387--9234[label="0.102941;7pkt 7fpkt"];
8387--9268[label="0.102941;7pkt 7fpkt"];
8387--9522[label="1;10pkt 10fpkt"];
8387--9924[label="1;3pkt 3fpkt"];
8387--12578[label="0.173913;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.219.45" src_port="80"/>
      <filter dst_ip="162.73.219.45" src_ip="213.112.173.67" src_port="8083"/>
    </slice>
    <from sec="1223615144" usec="0"/>
    <to sec="1223615380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.20356,2.09395,010,1 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1269{
style=filled;
color=gray75;
364[label="69.96.174.203s;253pkt 253fpkt", shape=rectangle, color=red];
12591[label="69.96.174.203;252pkt 252fpkt", shape=pentagon, color=darkviolet];
14933[label="69.96.174.203;253pkt 253fpkt", shape=invtriangle, color=brown];
16152[label="69.96.174.203;253pkt 253fpkt", shape=invhouse, color=bisque];
stat1269[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.96.174.203:*, *:8080}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 3408: (0.197824%)&lt;BR/&gt; 3407: (0.197824%)&lt;BR/&gt; 3404: (0.197824%)&lt;BR/&gt; 3401: (0.197824%)&gt;];
}
364--12591[label="1;252pkt 252fpkt"];
364--14933[label="1;253pkt 253fpkt"];
364--16152[label="1;253pkt 253fpkt"];
12591--14933[label="1;252pkt 252fpkt"];
12591--16152[label="1;252pkt 252fpkt"];
14933--16152[label="1;253pkt 253fpkt"];
</description>
    <slice>
      <filter dst_port="8080" src_ip="69.96.174.203"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.41.53.204"/>
    </slice>
    <from sec="1223615126" usec="0"/>
    <to sec="1223615130" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="96.249.53.205"/>
    </slice>
    <from sec="1223615562" usec="0"/>
    <to sec="1223615572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.116.8.206"/>
    </slice>
    <from sec="1223615165" usec="0"/>
    <to sec="1223615216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.33.56.206"/>
    </slice>
    <from sec="1223615672" usec="0"/>
    <to sec="1223615681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.68.178.206"/>
    </slice>
    <from sec="1223615269" usec="0"/>
    <to sec="1223615276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.98.65.207"/>
    </slice>
    <from sec="1223615004" usec="0"/>
    <to sec="1223615027" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.109.136.207"/>
    </slice>
    <from sec="1223615023" usec="0"/>
    <to sec="1223615046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.211.207"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="121.108.213.208"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.241.250.208"/>
    </slice>
    <from sec="1223615433" usec="0"/>
    <to sec="1223615445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.63.146.209"/>
    </slice>
    <from sec="1223615242" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.139.173.209"/>
    </slice>
    <from sec="1223615374" usec="0"/>
    <to sec="1223615631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.200.250.209"/>
    </slice>
    <from sec="1223615401" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.217.75.210"/>
    </slice>
    <from sec="1223614961" usec="0"/>
    <to sec="1223614973" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.86.210"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.115.89.210"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.183.21.211"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.104.211"/>
    </slice>
    <from sec="1223615637" usec="0"/>
    <to sec="1223615680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.115.211"/>
    </slice>
    <from sec="1223615058" usec="0"/>
    <to sec="1223615067" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="109.128.2.212"/>
    </slice>
    <from sec="1223615680" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.162.144.212"/>
    </slice>
    <from sec="1223615674" usec="0"/>
    <to sec="1223615687" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.42.157.212"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.106.6.213"/>
    </slice>
    <from sec="1223615663" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.14.213"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.177.77.213"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="101.245.137.213"/>
    </slice>
    <from sec="1223615632" usec="0"/>
    <to sec="1223615635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.168.195.213"/>
    </slice>
    <from sec="1223615626" usec="0"/>
    <to sec="1223615664" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.42.74.215"/>
    </slice>
    <from sec="1223615510" usec="0"/>
    <to sec="1223615515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.18.129.215"/>
    </slice>
    <from sec="1223615024" usec="0"/>
    <to sec="1223615115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.136.215"/>
    </slice>
    <from sec="1223615346" usec="0"/>
    <to sec="1223615444" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.100.141.215"/>
    </slice>
    <from sec="1223614915" usec="0"/>
    <to sec="1223615059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.4.85.216"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.42.135.216"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.88.196.216"/>
    </slice>
    <from sec="1223615328" usec="0"/>
    <to sec="1223615354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.138.109.217"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615017" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.124.208.217"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.14.70.218"/>
    </slice>
    <from sec="1223615212" usec="0"/>
    <to sec="1223615232" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.42.135.218"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.217.221.219"/>
    </slice>
    <from sec="1223615455" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.80.225.219"/>
    </slice>
    <from sec="1223615160" usec="0"/>
    <to sec="1223615185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.7.105.220"/>
    </slice>
    <from sec="1223615197" usec="0"/>
    <to sec="1223615227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="110.54.219.220"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.19.53.221"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1313{
style=filled;
color=gray75;
1683[label="220.206.247.221;s;124pkt 124fpkt", shape=diamond, color=yellow];
2361[label="164.25.23.168;d;125pkt 125fpkt", shape=diamond, color=yellow];
12836[label="220.206.247.221;123pkt 123fpkt", shape=pentagon, color=darkviolet];
15058[label="220.206.247.221;124pkt 124fpkt", shape=invtriangle, color=brown];
16227[label="220.206.247.221;124pkt 124fpkt", shape=invhouse, color=bisque];
stat1313[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.206.247.221:43, 164.25.23.168:*}[99.2%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43: (49.9194%)&lt;BR/&gt; 60780: (0.403226%)&lt;BR/&gt; 60770: (0.403226%)&lt;BR/&gt; 60758: (0.403226%)&lt;BR/&gt; 60649: (0.403226%)&gt;];
}
1683--2361[label="1;124pkt 124fpkt"];
1683--12836[label="1;123pkt 123fpkt"];
1683--15058[label="1;124pkt 124fpkt"];
1683--16227[label="1;124pkt 124fpkt"];
2361--7105[label="0.008;1pkt 1fpkt"];
2361--12836[label="1;123pkt 123fpkt"];
2361--15058[label="1;124pkt 124fpkt"];
2361--16227[label="1;124pkt 124fpkt"];
12836--15058[label="1;123pkt 123fpkt"];
12836--16227[label="1;123pkt 123fpkt"];
15058--16227[label="1;124pkt 124fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.23.168" src_ip="220.206.247.221" src_port="43"/>
    </slice>
    <from sec="1223614841" usec="0"/>
    <to sec="1223614859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.152.39.222"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615661" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.133.100.222"/>
    </slice>
    <from sec="1223615307" usec="0"/>
    <to sec="1223615320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1316{
style=filled;
color=gray75;
1106[label="136.228.155.7;d;26pkt 26fpkt", shape=diamond, color=yellow];
4585[label="68.206.248.131;s;2pkt 2fpkt", shape=diamond, color=yellow];
6014[label="136.228.155.7;d;23pkt 23fpkt", shape=hexagon, color=black];
11495[label="68.206.248.131;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14383[label="68.206.248.131;1pkt 1fpkt", shape=invtriangle, color=brown];
15847[label="68.206.248.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1316[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.8.20.116:80, 136.228.155.7:*}[53.8462%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2387: (5.55556%)&lt;BR/&gt; 2373: (2.77778%)&lt;BR/&gt; 2391: (1.85185%)&lt;BR/&gt; 2385: (1.85185%)&gt;];
}
1106--1108[label="1;1pkt 1fpkt"];
1106--4585[label="1;2pkt 2fpkt"];
1106--6014[label="1;23pkt 23fpkt"];
1106--9163[label="0.0769231;2pkt 2fpkt"];
1106--9194[label="0.0384615;1pkt 1fpkt"];
1106--9198[label="0.0769231;2pkt 2fpkt"];
1106--9234[label="0.0384615;1pkt 1fpkt"];
1106--9268[label="0.0384615;1pkt 1fpkt"];
1106--11495[label="1;1pkt 1fpkt"];
1106--12850[label="0.25;2pkt 2fpkt"];
1106--14383[label="1;1pkt 1fpkt"];
1106--15847[label="1;1pkt 1fpkt"];
4585--6014[label="1;2pkt 2fpkt"];
4585--9198[label="0.5;1pkt 1fpkt"];
4585--11495[label="1;1pkt 1fpkt"];
4585--14383[label="1;1pkt 1fpkt"];
4585--15847[label="1;1pkt 1fpkt"];
6014--9163[label="0.0869565;2pkt 2fpkt"];
6014--9194[label="0.0434783;1pkt 1fpkt"];
6014--9198[label="0.0434783;1pkt 1fpkt"];
6014--9234[label="0.0434783;1pkt 1fpkt"];
6014--9268[label="0.0434783;1pkt 1fpkt"];
6014--11495[label="1;1pkt 1fpkt"];
6014--12850[label="0.25;2pkt 2fpkt"];
6014--14383[label="1;1pkt 1fpkt"];
6014--15847[label="1;1pkt 1fpkt"];
11495--14383[label="1;1pkt 1fpkt"];
11495--15847[label="1;1pkt 1fpkt"];
14383--15847[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.155.7" src_ip="194.8.20.116" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.33.106.223"/>
    </slice>
    <from sec="1223615120" usec="0"/>
    <to sec="1223615126" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.175.217.223"/>
    </slice>
    <from sec="1223615544" usec="0"/>
    <to sec="1223615684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.154.232.223"/>
    </slice>
    <from sec="1223615345" usec="0"/>
    <to sec="1223615355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.80.64.224"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.136.82.224"/>
    </slice>
    <from sec="1223615115" usec="0"/>
    <to sec="1223615195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.145.82.224"/>
    </slice>
    <from sec="1223615674" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="77.86.144.224"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.170.211.224"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.74.92.225"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.177.151.225"/>
    </slice>
    <from sec="1223614808" usec="0"/>
    <to sec="1223615644" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.172.21.226"/>
    </slice>
    <from sec="1223615182" usec="0"/>
    <to sec="1223615193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.104.65.226"/>
    </slice>
    <from sec="1223615367" usec="0"/>
    <to sec="1223615377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="111.36.204.226"/>
    </slice>
    <from sec="1223615344" usec="0"/>
    <to sec="1223615372" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.219.193.227"/>
    </slice>
    <from sec="1223615249" usec="0"/>
    <to sec="1223615297" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.150.11.228"/>
    </slice>
    <from sec="1223614883" usec="0"/>
    <to sec="1223614895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="19.233.130.228"/>
    </slice>
    <from sec="1223615549" usec="0"/>
    <to sec="1223615560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.232.3.229"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.170.25.229"/>
    </slice>
    <from sec="1223614854" usec="0"/>
    <to sec="1223615453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="124.4.70.229"/>
    </slice>
    <from sec="1223615176" usec="0"/>
    <to sec="1223615185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.192.229"/>
    </slice>
    <from sec="1223615270" usec="0"/>
    <to sec="1223615286" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1337{
style=filled;
color=gray75;
3694[label="19.216.236.229;s;1pkt 1fpkt", shape=diamond, color=yellow];
12949[label="19.216.236.229;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1337[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.216.236.229:7117, 136.228.138.83:60768}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60768: (50%)&lt;BR/&gt; 7117: (50%)&gt;];
}
3694--12949[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.138.83" dst_port="60768" src_ip="19.216.236.229" src_port="7117"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.12.11.231"/>
    </slice>
    <from sec="1223615677" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.767869,2.00986,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1339{
style=filled;
color=gray75;
2760[label="213.42.132.231;s;586pkt 586fpkt", shape=diamond, color=yellow];
7829[label="213.42.132.231;s;569pkt 569fpkt", shape=hexagon, color=black];
12969[label="213.42.132.231;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat1339[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.42.132.231:0, *:0}[99.8294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.827%)&lt;BR/&gt; 4055: (0.0865052%)&lt;BR/&gt; 139: (0.0865052%)&gt;];
}
2760--4009[label="0.0107527;1pkt 1fpkt"];
2760--4159[label="0.00262467;1pkt 1fpkt"];
2760--4164[label="0.00253165;1pkt 1fpkt"];
2760--4171[label="0.00257069;1pkt 1fpkt"];
2760--5045[label="0.00343643;1pkt 1fpkt"];
2760--5070[label="0.003003;1pkt 1fpkt"];
2760--5074[label="0.00371747;1pkt 1fpkt"];
2760--5094[label="0.00371747;1pkt 1fpkt"];
2760--7441[label="0.00282486;1pkt 1fpkt"];
2760--7829[label="1;569pkt 569fpkt"];
2760--8382[label="0.0107527;1pkt 1fpkt"];
2760--8564[label="0.00371747;1pkt 1fpkt"];
2760--12969[label="1;1pkt 1fpkt"];
7829--8382[label="0.0107527;1pkt 1fpkt"];
7829--8564[label="0.00371747;1pkt 1fpkt"];
7829--12969[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.42.132.231"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1340{
style=filled;
color=gray75;
1288[label="136.228.65.90;d;349pkt 349fpkt", shape=diamond, color=yellow];
10535[label="195.154.7.72;9pkt 9fpkt", shape=pentagon, color=darkviolet];
11816[label="195.146.129.151;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12972[label="195.160.216.231;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13180[label="220.244.5.251;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14539[label="195.146.129.151;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1340[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.65.90:25}[73.1302%]&lt;BR/&gt;{*:25, 136.228.65.90:*}[23.2687%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.4667%)&lt;BR/&gt; 63083: (0.4%)&lt;BR/&gt; 12861: (0.4%)&lt;BR/&gt; 64654: (0.266667%)&lt;BR/&gt; 64106: (0.266667%)&gt;];
}
1288--2663[label="0.231579;22pkt 22fpkt"];
1288--6553[label="0.246753;19pkt 19fpkt"];
1288--9177[label="0.0487106;17pkt 17fpkt"];
1288--9196[label="0.0114613;4pkt 4fpkt"];
1288--9217[label="0.0487106;17pkt 17fpkt"];
1288--9251[label="0.0487106;17pkt 17fpkt"];
1288--10057[label="0.22;22pkt 22fpkt"];
1288--10535[label="0.444444;4pkt 4fpkt"];
1288--11816[label="1;2pkt 2fpkt"];
1288--12972[label="0.5;3pkt 3fpkt"];
1288--13075[label="0.25;1pkt 1fpkt"];
1288--13180[label="0.428571;3pkt 3fpkt"];
1288--13654[label="0.222222;22pkt 22fpkt"];
1288--14539[label="1;2pkt 2fpkt"];
1288--15174[label="0.25;1pkt 1fpkt"];
1288--16284[label="0.25;1pkt 1fpkt"];
11816--14539[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.65.90" src_port="25"/>
      <filter dst_ip="136.228.65.90" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.85.58.232"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.147.68.232"/>
    </slice>
    <from sec="1223615257" usec="0"/>
    <to sec="1223615274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.202.73.232"/>
    </slice>
    <from sec="1223614824" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.68.237.232"/>
    </slice>
    <from sec="1223615330" usec="0"/>
    <to sec="1223615336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="73.155.33.233"/>
    </slice>
    <from sec="1223615303" usec="0"/>
    <to sec="1223615308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.161.85.233"/>
    </slice>
    <from sec="1223615147" usec="0"/>
    <to sec="1223615587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="142.226.175.233"/>
    </slice>
    <from sec="1223615251" usec="0"/>
    <to sec="1223615288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.228.23.234"/>
    </slice>
    <from sec="1223615188" usec="0"/>
    <to sec="1223615215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.134.131.234"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="136.228.246.234"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.216.235"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="121.89.2.237"/>
    </slice>
    <from sec="1223615134" usec="0"/>
    <to sec="1223615141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.135.35.237"/>
    </slice>
    <from sec="1223614900" usec="0"/>
    <to sec="1223614923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.56.38.237"/>
    </slice>
    <from sec="1223615458" usec="0"/>
    <to sec="1223615479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.93.94.237"/>
    </slice>
    <from sec="1223614893" usec="0"/>
    <to sec="1223614921" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.6.209.238"/>
    </slice>
    <from sec="1223615248" usec="0"/>
    <to sec="1223615265" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.53.37.239"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223614825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.139.93.240"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.140.230.240"/>
    </slice>
    <from sec="1223615169" usec="0"/>
    <to sec="1223615199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="180.3.64.241"/>
    </slice>
    <from sec="1223615045" usec="0"/>
    <to sec="1223615686" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="78.105.93.241"/>
    </slice>
    <from sec="1223615532" usec="0"/>
    <to sec="1223615538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="87.66.29.242"/>
    </slice>
    <from sec="1223614934" usec="0"/>
    <to sec="1223614950" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.594279,2.06235,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_1364{
style=filled;
color=gray75;
4834[label="162.73.105.87;d;29pkt 29fpkt", shape=diamond, color=yellow];
10564[label="78.11.80.73;14pkt 14fpkt", shape=pentagon, color=darkviolet];
13098[label="18.136.81.242;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat1364[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.11.80.73:*, 162.73.105.87:443}[46.6667%]&lt;BR/&gt;{*:*, 162.73.105.87:995}[36.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (30.4348%)&lt;BR/&gt; 995: (11.9565%)&lt;BR/&gt; 993: (5.43478%)&lt;BR/&gt; 59798: (2.17391%)&lt;BR/&gt; 59036: (2.17391%)&gt;];
}
4834--10564[label="1;14pkt 14fpkt"];
4834--13098[label="0.666667;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.105.87" dst_port="995"/>
      <filter dst_ip="162.73.105.87" dst_port="443" src_ip="78.11.80.73"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.4.85.242"/>
    </slice>
    <from sec="1223615664" usec="0"/>
    <to sec="1223615677" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.175.226.242"/>
    </slice>
    <from sec="1223615081" usec="0"/>
    <to sec="1223615103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.68.3.243"/>
    </slice>
    <from sec="1223615605" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="98.40.132.243"/>
    </slice>
    <from sec="1223615620" usec="0"/>
    <to sec="1223615626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="162.73.220.243"/>
    </slice>
    <from sec="1223615313" usec="0"/>
    <to sec="1223615471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1370{
style=filled;
color=gray75;
4769[label="213.33.137.239;s;56pkt 56fpkt", shape=diamond, color=yellow];
13073[label="213.33.137.239;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15173[label="213.33.137.239;2pkt 2fpkt", shape=invtriangle, color=brown];
16283[label="213.33.137.239;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1370[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.137.239:*, 40.94.172.209:80}[35.7143%]&lt;BR/&gt;{213.33.137.239:60838, *:*}[32.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (19.8413%)&lt;BR/&gt; 60838: (15.0794%)&lt;BR/&gt; 123: (6.34921%)&lt;BR/&gt; 443: (5.55556%)&lt;BR/&gt; 993: (4.7619%)&gt;];
}
4769--4778[label="0.0714286;4pkt 4fpkt"];
4769--5597[label="0.0178571;1pkt 1fpkt"];
4769--7825[label="0.0178571;1pkt 1fpkt"];
4769--9177[label="0.0178571;1pkt 1fpkt"];
4769--9217[label="0.0178571;1pkt 1fpkt"];
4769--9251[label="0.0178571;1pkt 1fpkt"];
4769--13073[label="1;2pkt 2fpkt"];
4769--15173[label="1;2pkt 2fpkt"];
4769--16283[label="1;3pkt 3fpkt"];
13073--15173[label="1;2pkt 2fpkt"];
13073--16283[label="1;2pkt 2fpkt"];
15173--16283[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="213.33.137.239" src_port="60838"/>
      <filter dst_ip="40.94.172.209" dst_port="80" src_ip="213.33.137.239"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.0.146.245"/>
    </slice>
    <from sec="1223615016" usec="0"/>
    <to sec="1223615023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.45.165.245"/>
    </slice>
    <from sec="1223615346" usec="0"/>
    <to sec="1223615423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.127.57.246"/>
    </slice>
    <from sec="1223615685" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="103.51.19.247"/>
    </slice>
    <from sec="1223615201" usec="0"/>
    <to sec="1223615225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="104.6.73.248"/>
    </slice>
    <from sec="1223615533" usec="0"/>
    <to sec="1223615543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.66.156.248"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1377{
style=filled;
color=gray75;
5419[label="21.20.131.124;s;2pkt 2fpkt", shape=diamond, color=yellow];
10540[label="180.18.67.72;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11372[label="21.20.131.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13904[label="180.18.67.72;6pkt 6fpkt", shape=invtriangle, color=brown];
14317[label="21.20.131.124;1pkt 1fpkt", shape=invtriangle, color=brown];
15600[label="180.18.67.72;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1377[shape=component, label=&lt;Rules:&lt;BR/&gt;{180.18.67.72:*, 136.228.122.25:80}[75%]&lt;BR/&gt;{21.20.131.124:*, 136.228.122.25:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13796: (7.5%)&lt;BR/&gt; 4338: (7.5%)&lt;BR/&gt; 4337: (7.5%)&lt;BR/&gt; 4336: (7.5%)&gt;];
}
5419--11372[label="1;1pkt 1fpkt"];
5419--14317[label="1;1pkt 1fpkt"];
10540--13904[label="1;5pkt 5fpkt"];
10540--15600[label="1;5pkt 5fpkt"];
11372--14317[label="1;1pkt 1fpkt"];
13904--15600[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.25" dst_port="80" src_ip="180.18.67.72"/>
      <filter dst_ip="136.228.122.25" dst_port="80" src_ip="21.20.131.124"/>
    </slice>
    <from sec="1223615475" usec="0"/>
    <to sec="1223615605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.168.86.249"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.235.87.249"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="70.154.99.249"/>
    </slice>
    <from sec="1223615548" usec="0"/>
    <to sec="1223615556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.75.145.249"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223614820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="120.186.205.249"/>
    </slice>
    <from sec="1223615658" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="126.251.6.250"/>
    </slice>
    <from sec="1223615579" usec="0"/>
    <to sec="1223615598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.70.16.250"/>
    </slice>
    <from sec="1223615143" usec="0"/>
    <to sec="1223615313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="219.11.176.250"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="114.67.50.251"/>
    </slice>
    <from sec="1223615093" usec="0"/>
    <to sec="1223615147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="76.130.90.251"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223614956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="72.141.158.251"/>
    </slice>
    <from sec="1223615112" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="107.188.184.251"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="106.83.192.251"/>
    </slice>
    <from sec="1223615619" usec="0"/>
    <to sec="1223615665" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,503,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1391{
style=filled;
color=gray75;
241[label="18.148.216.251s;1pkt 1fpkt", shape=rectangle, color=red];
1544[label="142.243.13.177;d;66pkt 66fpkt", shape=diamond, color=yellow];
1545[label="213.179.192.30;s;5pkt 5fpkt", shape=diamond, color=yellow];
3982[label="18.148.216.251;s;2pkt 2fpkt", shape=diamond, color=yellow];
5422[label="204.171.80.54;s;3pkt 3fpkt", shape=diamond, color=yellow];
6650[label="142.243.13.177;d;12pkt 12fpkt", shape=hexagon, color=black];
8499[label="204.171.80.54;s;3pkt 3fpkt", shape=hexagon, color=black];
9826[label="213.179.192.30;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10262[label="204.171.80.54;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10717[label="76.10.28.82;25pkt 25fpkt", shape=pentagon, color=darkviolet];
11643[label="213.179.225.140;9pkt 9fpkt", shape=pentagon, color=darkviolet];
12160[label="213.179.225.173;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13197[label="18.148.216.251;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14714[label="213.179.225.173;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1391[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.10.28.82:80, 142.243.13.177:*}[34.7222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1325: (1.74825%)&lt;BR/&gt; 1491: (1.3986%)&lt;BR/&gt; 1479: (1.3986%)&lt;BR/&gt; 1229: (1.3986%)&gt;];
}
241--1544[label="1;1pkt 1fpkt"];
241--3982[label="1;1pkt 1fpkt"];
241--6650[label="1;1pkt 1fpkt"];
241--9194[label="1;1pkt 1fpkt"];
241--9234[label="1;1pkt 1fpkt"];
241--9268[label="1;1pkt 1fpkt"];
241--13197[label="1;1pkt 1fpkt"];
1544--1545[label="1;5pkt 5fpkt"];
1544--3982[label="1;2pkt 2fpkt"];
1544--5422[label="1;3pkt 3fpkt"];
1544--6650[label="1;12pkt 12fpkt"];
1544--8499[label="1;3pkt 3fpkt"];
1544--9163[label="0.151515;10pkt 10fpkt"];
1544--9194[label="0.030303;2pkt 2fpkt"];
1544--9198[label="0.272727;18pkt 18fpkt"];
1544--9234[label="0.030303;2pkt 2fpkt"];
1544--9268[label="0.030303;2pkt 2fpkt"];
1544--9826[label="1;9pkt 9fpkt"];
1544--10262[label="1;2pkt 2fpkt"];
1544--10717[label="1;25pkt 25fpkt"];
1544--11643[label="0.444444;4pkt 4fpkt"];
1544--13197[label="1;3pkt 3fpkt"];
1544--14714[label="0.5;1pkt 1fpkt"];
1545--6650[label="1;5pkt 5fpkt"];
1545--9163[label="1;5pkt 5fpkt"];
1545--9826[label="1;5pkt 5fpkt"];
3982--6650[label="1;2pkt 2fpkt"];
3982--9194[label="1;2pkt 2fpkt"];
3982--9234[label="1;2pkt 2fpkt"];
3982--9268[label="1;2pkt 2fpkt"];
3982--13197[label="0.5;1pkt 1fpkt"];
5422--8499[label="1;3pkt 3fpkt"];
5422--9198[label="1;3pkt 3fpkt"];
5422--10262[label="1;2pkt 2fpkt"];
6650--9163[label="0.833333;10pkt 10fpkt"];
6650--9194[label="0.166667;2pkt 2fpkt"];
6650--9234[label="0.166667;2pkt 2fpkt"];
6650--9268[label="0.166667;2pkt 2fpkt"];
6650--9826[label="0.555556;5pkt 5fpkt"];
6650--11643[label="0.222222;2pkt 2fpkt"];
6650--13197[label="0.333333;1pkt 1fpkt"];
8499--9198[label="1;3pkt 3fpkt"];
8499--10262[label="1;2pkt 2fpkt"];
12160--14714[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.13.177" src_ip="76.10.28.82" src_port="80"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.107.21.252"/>
    </slice>
    <from sec="1223614847" usec="0"/>
    <to sec="1223614878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="119.21.57.252"/>
    </slice>
    <from sec="1223615016" usec="0"/>
    <to sec="1223615050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.11.87.252"/>
    </slice>
    <from sec="1223615396" usec="0"/>
    <to sec="1223615427" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="125.202.216.252"/>
    </slice>
    <from sec="1223615420" usec="0"/>
    <to sec="1223615431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.54.33.253"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.52.116.254"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.125.132.254"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="172.114.238.254"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="108.25.2.255"/>
    </slice>
    <from sec="1223615182" usec="0"/>
    <to sec="1223615191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.42828,2.11742,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.146.129.255"/>
    </slice>
    <from sec="1223614948" usec="0"/>
    <to sec="1223614956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1402{
style=filled;
color=gray75;
9270[label="106.247.23.0;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13240[label="106.247.23.0;3pkt 3fpkt", shape=invtriangle, color=brown];
15277[label="106.247.23.0;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1402[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.247.23.0:80, 136.228.122.66:59379}[33.3333%]&lt;BR/&gt;{106.247.23.0:80, 136.228.122.66:59398}[33.3333%]&lt;BR/&gt;{106.247.23.0:80, 136.228.122.66:59399}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59399: (18.75%)&lt;BR/&gt; 59398: (18.75%)&lt;BR/&gt; 59379: (12.5%)&gt;];
}
9270--13240[label="1;3pkt 3fpkt"];
9270--15277[label="1;2pkt 2fpkt"];
13240--15277[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.122.66" dst_port="59399" src_ip="106.247.23.0" src_port="80"/>
      <filter dst_ip="136.228.122.66" dst_port="59398" src_ip="106.247.23.0" src_port="80"/>
      <filter dst_ip="136.228.122.66" dst_port="59379" src_ip="106.247.23.0" src_port="80"/>
    </slice>
    <from sec="1223615578" usec="0"/>
    <to sec="1223615589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.225.35.0"/>
    </slice>
    <from sec="1223614868" usec="0"/>
    <to sec="1223614873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.38.45.0"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.153.96.0"/>
    </slice>
    <from sec="1223615258" usec="0"/>
    <to sec="1223615262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1406{
style=filled;
color=gray75;
9293[label="213.112.171.0;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13252[label="213.112.171.0;1pkt 1fpkt", shape=invtriangle, color=brown];
15285[label="213.112.171.0;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1406[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.112.171.0:80, 136.228.85.93:51591}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51591: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9293--13252[label="1;1pkt 1fpkt"];
9293--15285[label="1;1pkt 1fpkt"];
13252--15285[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.85.93" dst_port="51591" src_ip="213.112.171.0" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1407{
style=filled;
color=gray75;
9302[label="136.228.19.1;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13256[label="136.228.19.1;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1407[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.19.1:35413, 40.94.172.157:443}[20%]&lt;BR/&gt;{136.228.19.1:35410, 40.94.172.235:80}[20%]&lt;BR/&gt;{136.228.19.1:35408, 40.94.172.209:80}[20%]&lt;BR/&gt;{136.228.19.1:35417, 40.94.172.209:80}[20%]&lt;BR/&gt;{136.228.19.1:35419, 40.94.172.209:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 35419: (10%)&lt;BR/&gt; 35417: (10%)&lt;BR/&gt; 35413: (10%)&lt;BR/&gt; 35410: (10%)&gt;];
}
9302--13256[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="40.94.172.209" dst_port="80" src_ip="136.228.19.1" src_port="35419"/>
      <filter dst_ip="40.94.172.209" dst_port="80" src_ip="136.228.19.1" src_port="35417"/>
      <filter dst_ip="40.94.172.209" dst_port="80" src_ip="136.228.19.1" src_port="35408"/>
      <filter dst_ip="40.94.172.235" dst_port="80" src_ip="136.228.19.1" src_port="35410"/>
      <filter dst_ip="40.94.172.157" dst_port="443" src_ip="136.228.19.1" src_port="35413"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.194.61.1"/>
    </slice>
    <from sec="1223614817" usec="0"/>
    <to sec="1223615521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.100.16.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.75.2"/>
    </slice>
    <from sec="1223614969" usec="0"/>
    <to sec="1223614984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.21.131.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.114.201.2"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1413{
style=filled;
color=gray75;
9340[label="136.228.236.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13272[label="136.228.236.2;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1413[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.236.2:25, 71.186.202.2:55195}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55195: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
9340--13272[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="71.186.202.2" dst_port="55195" src_ip="136.228.236.2" src_port="25"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1414{
style=filled;
color=gray75;
9350[label="195.144.156.3;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13279[label="195.144.156.3;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1414[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.144.156.3:80, 142.243.83.65:51328}[20%]&lt;BR/&gt;{195.144.156.3:80, 142.243.83.65:51329}[20%]&lt;BR/&gt;{195.144.156.3:80, 142.243.83.65:51330}[20%]&lt;BR/&gt;{195.144.156.3:80, 142.243.83.65:51331}[20%]&lt;BR/&gt;{195.144.156.3:80, 142.243.83.65:51332}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51332: (10%)&lt;BR/&gt; 51331: (10%)&lt;BR/&gt; 51330: (10%)&lt;BR/&gt; 51329: (10%)&gt;];
}
9350--13279[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.83.65" dst_port="51332" src_ip="195.144.156.3" src_port="80"/>
      <filter dst_ip="142.243.83.65" dst_port="51331" src_ip="195.144.156.3" src_port="80"/>
      <filter dst_ip="142.243.83.65" dst_port="51330" src_ip="195.144.156.3" src_port="80"/>
      <filter dst_ip="142.243.83.65" dst_port="51329" src_ip="195.144.156.3" src_port="80"/>
      <filter dst_ip="142.243.83.65" dst_port="51328" src_ip="195.144.156.3" src_port="80"/>
    </slice>
    <from sec="1223614908" usec="0"/>
    <to sec="1223614913" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1415{
style=filled;
color=gray75;
9355[label="71.40.189.3;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13281[label="71.40.189.3;2pkt 2fpkt", shape=invtriangle, color=brown];
15296[label="71.40.189.3;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1415[shape=component, label=&lt;Rules:&lt;BR/&gt;{71.40.189.3:3730, 212.21.138.195:3127}[50%]&lt;BR/&gt;{71.40.189.3:4122, 212.21.138.195:3127}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 4122: (25%)&lt;BR/&gt; 3730: (25%)&gt;];
}
9355--13281[label="1;2pkt 2fpkt"];
9355--15296[label="1;2pkt 2fpkt"];
13281--15296[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" dst_port="3127" src_ip="71.40.189.3" src_port="4122"/>
      <filter dst_ip="212.21.138.195" dst_port="3127" src_ip="71.40.189.3" src_port="3730"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.202.57.4"/>
    </slice>
    <from sec="1223615387" usec="0"/>
    <to sec="1223615469" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="125.230.122.4"/>
    </slice>
    <from sec="1223615665" usec="0"/>
    <to sec="1223615670" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="118.6.222.4"/>
    </slice>
    <from sec="1223614935" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1419{
style=filled;
color=gray75;
9386[label="207.135.33.5;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13295[label="207.135.33.5;3pkt 3fpkt", shape=invtriangle, color=brown];
15302[label="207.135.33.5;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1419[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.135.33.5:7565, 216.77.71.197:53}[33.3333%]&lt;BR/&gt;{207.135.33.5:23434, 216.77.71.197:53}[33.3333%]&lt;BR/&gt;{207.135.33.5:48102, 216.77.71.197:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 48102: (16.6667%)&lt;BR/&gt; 23434: (16.6667%)&lt;BR/&gt; 7565: (16.6667%)&gt;];
}
9386--13295[label="1;3pkt 3fpkt"];
9386--15302[label="1;3pkt 3fpkt"];
13295--15302[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.77.71.197" dst_port="53" src_ip="207.135.33.5" src_port="48102"/>
      <filter dst_ip="216.77.71.197" dst_port="53" src_ip="207.135.33.5" src_port="23434"/>
      <filter dst_ip="216.77.71.197" dst_port="53" src_ip="207.135.33.5" src_port="7565"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.618604,2.09424,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_1420{
style=filled;
color=gray75;
4347[label="202.148.44.5;s;94pkt 94fpkt", shape=diamond, color=yellow];
stat1420[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.148.44.5:80, 136.228.104.162:*}[51.0638%]&lt;BR/&gt;{202.148.44.5:80, 136.228.116.48:*}[48.9362%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59109: (0.531915%)&lt;BR/&gt; 59093: (0.531915%)&lt;BR/&gt; 59088: (0.531915%)&lt;BR/&gt; 59086: (0.531915%)&gt;];
}
4347--9163[label="0.0957447;9pkt 9fpkt"];
4347--9194[label="0.0106383;1pkt 1fpkt"];
4347--9234[label="0.0106383;1pkt 1fpkt"];
4347--9268[label="0.0106383;1pkt 1fpkt"];
4347--9388[label="1;93pkt 93fpkt"];
4347--13297[label="1;94pkt 94fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.162" src_ip="202.148.44.5" src_port="80"/>
      <filter dst_ip="136.228.116.48" src_ip="202.148.44.5" src_port="80"/>
    </slice>
    <from sec="1223614845" usec="0"/>
    <to sec="1223615400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.162.155.5"/>
    </slice>
    <from sec="1223615180" usec="0"/>
    <to sec="1223615188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1422{
style=filled;
color=gray75;
9397[label="213.184.178.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13301[label="213.184.178.5;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1422[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.184.178.5:80, 213.33.63.13:49287}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49287: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9397--13301[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" dst_port="49287" src_ip="213.184.178.5" src_port="80"/>
    </slice>
    <from sec="1223615014" usec="0"/>
    <to sec="1223615054" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="118.153.132.6"/>
    </slice>
    <from sec="1223615201" usec="0"/>
    <to sec="1223615215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.79.1.8"/>
    </slice>
    <from sec="1223614834" usec="0"/>
    <to sec="1223615676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.174.36.8"/>
    </slice>
    <from sec="1223615406" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1426{
style=filled;
color=gray75;
9437[label="136.228.80.8;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13326[label="136.228.80.8;1pkt 1fpkt", shape=invtriangle, color=brown];
15318[label="136.228.80.8;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1426[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.80.8:80, 213.148.133.170:35842}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35842: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9437--13326[label="1;1pkt 1fpkt"];
9437--15318[label="1;1pkt 1fpkt"];
13326--15318[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.148.133.170" dst_port="35842" src_ip="136.228.80.8" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.50.227.8"/>
    </slice>
    <from sec="1223615569" usec="0"/>
    <to sec="1223615604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.63.178.9"/>
    </slice>
    <from sec="1223615389" usec="0"/>
    <to sec="1223615399" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1429{
style=filled;
color=gray75;
5625[label="213.33.58.10;s;61pkt 61fpkt", shape=diamond, color=yellow];
9470[label="213.33.58.10;68pkt 68fpkt", shape=pentagon, color=darkviolet];
13344[label="213.33.58.10;68pkt 68fpkt", shape=invtriangle, color=brown];
stat1429[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.58.10:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 55807: (0.761421%)&lt;BR/&gt; 52522: (0.761421%)&lt;BR/&gt; 50871: (0.761421%)&lt;BR/&gt; 49660: (0.761421%)&gt;];
}
5625--9196[label="0.0491803;3pkt 3fpkt"];
5625--9470[label="1;61pkt 61fpkt"];
5625--13344[label="1;61pkt 61fpkt"];
9470--13344[label="1;68pkt 68fpkt"];
</description>
    <slice>
      <filter src_ip="213.33.58.10" src_port="25"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.75.59.10"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1431{
style=filled;
color=gray75;
9487[label="136.228.15.11;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13352[label="136.228.15.11;4pkt 4fpkt", shape=invtriangle, color=brown];
15330[label="136.228.15.11;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1431[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.15.11:2554, 126.20.85.156:80}[25%]&lt;BR/&gt;{136.228.15.11:2550, 126.20.85.132:80}[25%]&lt;BR/&gt;{136.228.15.11:2551, 126.20.85.132:80}[25%]&lt;BR/&gt;{136.228.15.11:2552, 126.20.85.132:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2554: (15%)&lt;BR/&gt; 2552: (15%)&lt;BR/&gt; 2551: (15%)&lt;BR/&gt; 2550: (5%)&gt;];
}
9487--13352[label="1;3pkt 3fpkt"];
9487--15330[label="1;3pkt 3fpkt"];
13352--15330[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="126.20.85.132" dst_port="80" src_ip="136.228.15.11" src_port="2552"/>
      <filter dst_ip="126.20.85.132" dst_port="80" src_ip="136.228.15.11" src_port="2551"/>
      <filter dst_ip="126.20.85.132" dst_port="80" src_ip="136.228.15.11" src_port="2550"/>
      <filter dst_ip="126.20.85.156" dst_port="80" src_ip="136.228.15.11" src_port="2554"/>
    </slice>
    <from sec="1223615062" usec="0"/>
    <to sec="1223615092" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.126.255.12"/>
    </slice>
    <from sec="1223615130" usec="0"/>
    <to sec="1223615137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.110.12.13"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="222.181.16.13"/>
    </slice>
    <from sec="1223615200" usec="0"/>
    <to sec="1223615206" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.251.35.13"/>
    </slice>
    <from sec="1223615461" usec="0"/>
    <to sec="1223615599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1436{
style=filled;
color=gray75;
9526[label="136.228.119.13;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13370[label="136.228.119.13;2pkt 2fpkt", shape=invtriangle, color=brown];
15340[label="136.228.119.13;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1436[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.119.13:1475, 213.43.29.40:80}[50%]&lt;BR/&gt;{136.228.119.13:1477, 213.43.29.40:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1477: (25%)&lt;BR/&gt; 1475: (25%)&gt;];
}
9526--13370[label="1;2pkt 2fpkt"];
9526--15340[label="1;2pkt 2fpkt"];
13370--15340[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.43.29.40" dst_port="80" src_ip="136.228.119.13" src_port="1477"/>
      <filter dst_ip="213.43.29.40" dst_port="80" src_ip="136.228.119.13" src_port="1475"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.208.214.13"/>
    </slice>
    <from sec="1223615256" usec="0"/>
    <to sec="1223615266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.70.30.14"/>
    </slice>
    <from sec="1223615071" usec="0"/>
    <to sec="1223615076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.81.34.14"/>
    </slice>
    <from sec="1223615360" usec="0"/>
    <to sec="1223615423" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1440{
style=filled;
color=gray75;
9539[label="142.243.41.14;76pkt 76fpkt", shape=pentagon, color=darkviolet];
13378[label="142.243.41.14;75pkt 75fpkt", shape=invtriangle, color=brown];
15343[label="142.243.41.14;76pkt 76fpkt", shape=invhouse, color=bisque];
stat1440[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.41.14:37649, *:*}[97.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 37649: (48.6784%)&lt;BR/&gt; 13807: (1.32159%)&lt;BR/&gt; 64206: (0.660793%)&lt;BR/&gt; 63867: (0.660793%)&lt;BR/&gt; 63592: (0.660793%)&gt;];
}
9539--13378[label="1;75pkt 75fpkt"];
9539--15343[label="1;76pkt 76fpkt"];
13378--15343[label="1;75pkt 75fpkt"];
</description>
    <slice>
      <filter src_ip="142.243.41.14" src_port="37649"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615654" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.150.122.14"/>
    </slice>
    <from sec="1223614870" usec="0"/>
    <to sec="1223614879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.146.24.15"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614938" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.31.36.15"/>
    </slice>
    <from sec="1223615330" usec="0"/>
    <to sec="1223615338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.57.70.15"/>
    </slice>
    <from sec="1223615252" usec="0"/>
    <to sec="1223615257" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.210.82.15"/>
    </slice>
    <from sec="1223615122" usec="0"/>
    <to sec="1223615127" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.209.217.15"/>
    </slice>
    <from sec="1223615116" usec="0"/>
    <to sec="1223615360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.81.169.16"/>
    </slice>
    <from sec="1223615090" usec="0"/>
    <to sec="1223615571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1448{
style=filled;
color=gray75;
9587[label="142.16.201.16;5pkt 5fpkt", shape=pentagon, color=darkviolet];
13404[label="142.16.201.16;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1448[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.201.16:57382, 98.128.238.233:443}[20%]&lt;BR/&gt;{142.16.201.16:56678, 192.84.148.5:993}[20%]&lt;BR/&gt;{142.16.201.16:57383, 192.84.148.5:993}[20%]&lt;BR/&gt;{142.16.201.16:57386, 192.84.148.5:993}[20%]&lt;BR/&gt;{142.16.201.16:57387, 192.84.148.5:993}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (40%)&lt;BR/&gt; 57387: (10%)&lt;BR/&gt; 57386: (10%)&lt;BR/&gt; 57383: (10%)&lt;BR/&gt; 57382: (10%)&gt;];
}
9587--13404[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="192.84.148.5" dst_port="993" src_ip="142.16.201.16" src_port="57387"/>
      <filter dst_ip="192.84.148.5" dst_port="993" src_ip="142.16.201.16" src_port="57386"/>
      <filter dst_ip="192.84.148.5" dst_port="993" src_ip="142.16.201.16" src_port="57383"/>
      <filter dst_ip="192.84.148.5" dst_port="993" src_ip="142.16.201.16" src_port="56678"/>
      <filter dst_ip="98.128.238.233" dst_port="443" src_ip="142.16.201.16" src_port="57382"/>
    </slice>
    <from sec="1223614915" usec="0"/>
    <to sec="1223615637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.86.42.17"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.69.75.17"/>
    </slice>
    <from sec="1223615382" usec="0"/>
    <to sec="1223615388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1451{
style=filled;
color=gray75;
9598[label="136.228.119.17;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13410[label="136.228.119.17;2pkt 2fpkt", shape=invtriangle, color=brown];
15360[label="136.228.119.17;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1451[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.119.17:3547, 20.171.82.198:80}[50%]&lt;BR/&gt;{136.228.119.17:3549, 20.171.82.198:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3549: (25%)&lt;BR/&gt; 3547: (25%)&gt;];
}
9598--13410[label="1;2pkt 2fpkt"];
9598--15360[label="1;2pkt 2fpkt"];
13410--15360[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="20.171.82.198" dst_port="80" src_ip="136.228.119.17" src_port="3549"/>
      <filter dst_ip="20.171.82.198" dst_port="80" src_ip="136.228.119.17" src_port="3547"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1452{
style=filled;
color=gray75;
9599[label="212.27.123.17;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13411[label="212.27.123.17;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1452[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.27.123.17:80, 142.228.95.20:62638}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62638: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9599--13411[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.95.20" dst_port="62638" src_ip="212.27.123.17" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1453{
style=filled;
color=gray75;
9606[label="216.180.169.17;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13413[label="216.180.169.17;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1453[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.180.169.17:53, 212.21.133.53:14293}[33.3333%]&lt;BR/&gt;{216.180.169.17:53, 212.21.133.53:26628}[33.3333%]&lt;BR/&gt;{216.180.169.17:53, 212.21.133.53:44641}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 44641: (16.6667%)&lt;BR/&gt; 26628: (16.6667%)&lt;BR/&gt; 14293: (16.6667%)&gt;];
}
9606--13413[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.133.53" dst_port="44641" src_ip="216.180.169.17" src_port="53"/>
      <filter dst_ip="212.21.133.53" dst_port="26628" src_ip="216.180.169.17" src_port="53"/>
      <filter dst_ip="212.21.133.53" dst_port="14293" src_ip="216.180.169.17" src_port="53"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.132.223.17"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.228.15.18"/>
    </slice>
    <from sec="1223615210" usec="0"/>
    <to sec="1223615216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1456{
style=filled;
color=gray75;
9622[label="107.81.108.18;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13422[label="107.81.108.18;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1456[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.81.108.18:80, 136.228.104.162:2707}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2707: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9622--13422[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.162" dst_port="2707" src_ip="107.81.108.18" src_port="80"/>
    </slice>
    <from sec="1223615453" usec="0"/>
    <to sec="1223615479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.195.232.18"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="125.204.232.18"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615567" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.29.73.19"/>
    </slice>
    <from sec="1223615104" usec="0"/>
    <to sec="1223615139" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.212.56.20"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.242.104.20"/>
    </slice>
    <from sec="1223615635" usec="0"/>
    <to sec="1223615637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.243.251.20"/>
    </slice>
    <from sec="1223615168" usec="0"/>
    <to sec="1223615227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.137.178.21"/>
    </slice>
    <from sec="1223615565" usec="0"/>
    <to sec="1223615581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1464{
style=filled;
color=gray75;
9681[label="136.228.219.21;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13449[label="136.228.219.21;2pkt 2fpkt", shape=invtriangle, color=brown];
15378[label="136.228.219.21;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1464[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.219.21:25, 122.156.66.83:48887}[50%]&lt;BR/&gt;{136.228.219.21:49152, 219.99.44.255:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49152: (25%)&lt;BR/&gt; 48887: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
9681--13449[label="1;2pkt 2fpkt"];
9681--15378[label="1;2pkt 2fpkt"];
13449--15378[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="219.99.44.255" dst_port="53" src_ip="136.228.219.21" src_port="49152"/>
      <filter dst_ip="122.156.66.83" dst_port="48887" src_ip="136.228.219.21" src_port="25"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.152.152.23"/>
    </slice>
    <from sec="1223615169" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1467{
style=filled;
color=gray75;
9716[label="213.34.202.23;4pkt 4fpkt", shape=pentagon, color=darkviolet];
13465[label="213.34.202.23;4pkt 4fpkt", shape=invtriangle, color=brown];
15386[label="213.34.202.23;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1467[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.34.202.23:80, 162.73.220.243:1642}[25%]&lt;BR/&gt;{213.34.202.23:80, 162.73.220.243:1643}[25%]&lt;BR/&gt;{213.34.202.23:80, 162.73.220.243:1644}[25%]&lt;BR/&gt;{213.34.202.23:80, 162.73.220.243:1646}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1646: (13.6364%)&lt;BR/&gt; 1644: (13.6364%)&lt;BR/&gt; 1643: (13.6364%)&lt;BR/&gt; 1642: (9.09091%)&gt;];
}
9716--13465[label="1;4pkt 4fpkt"];
9716--15386[label="1;3pkt 3fpkt"];
13465--15386[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.220.243" dst_port="1646" src_ip="213.34.202.23" src_port="80"/>
      <filter dst_ip="162.73.220.243" dst_port="1644" src_ip="213.34.202.23" src_port="80"/>
      <filter dst_ip="162.73.220.243" dst_port="1643" src_ip="213.34.202.23" src_port="80"/>
      <filter dst_ip="162.73.220.243" dst_port="1642" src_ip="213.34.202.23" src_port="80"/>
    </slice>
    <from sec="1223615401" usec="0"/>
    <to sec="1223615405" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="116.196.83.24"/>
    </slice>
    <from sec="1223615303" usec="0"/>
    <to sec="1223615329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.227.83.25"/>
    </slice>
    <from sec="1223615374" usec="0"/>
    <to sec="1223615380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.157.155.26"/>
    </slice>
    <from sec="1223615559" usec="0"/>
    <to sec="1223615566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.27.141.27"/>
    </slice>
    <from sec="1223614969" usec="0"/>
    <to sec="1223614984" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.75.203.27"/>
    </slice>
    <from sec="1223615280" usec="0"/>
    <to sec="1223615290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1473{
style=filled;
color=gray75;
1453[label="136.228.71.12;d;128pkt 128fpkt", shape=diamond, color=yellow];
6352[label="136.228.71.12;d;101pkt 101fpkt", shape=hexagon, color=black];
9786[label="54.102.29.28;19pkt 19fpkt", shape=pentagon, color=darkviolet];
13502[label="54.102.29.28;19pkt 19fpkt", shape=invtriangle, color=brown];
stat1473[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 136.228.71.12:25}[62.7907%]&lt;BR/&gt;{194.96.78.20:*, 136.228.71.12:*}[31.0078%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (41.1985%)&lt;BR/&gt; 113: (8.8015%)&lt;BR/&gt; 49035: (0.749064%)&lt;BR/&gt; 49034: (0.749064%)&lt;BR/&gt; 49033: (0.749064%)&gt;];
}
1453--6352[label="0.990099;100pkt 100fpkt"];
1453--9177[label="0.015625;2pkt 2fpkt"];
1453--9196[label="0.015625;2pkt 2fpkt"];
1453--9217[label="0.015625;2pkt 2fpkt"];
1453--9251[label="0.015625;2pkt 2fpkt"];
1453--9786[label="1;19pkt 19fpkt"];
1453--13502[label="1;19pkt 19fpkt"];
6352--9786[label="1;19pkt 19fpkt"];
6352--13502[label="1;19pkt 19fpkt"];
9786--13502[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.71.12" src_ip="194.96.78.20"/>
      <filter dst_ip="136.228.71.12" dst_port="25"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.81.54.29"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.152.104.29"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1476{
style=filled;
color=gray75;
9815[label="213.241.235.29;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13516[label="213.241.235.29;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1476[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.241.235.29:443, 142.16.85.110:3429}[33.3333%]&lt;BR/&gt;{213.241.235.29:443, 142.16.85.110:3430}[33.3333%]&lt;BR/&gt;{213.241.235.29:443, 142.16.85.110:3431}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3431: (20%)&lt;BR/&gt; 3430: (20%)&lt;BR/&gt; 3429: (10%)&gt;];
}
9815--13516[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.85.110" dst_port="3431" src_ip="213.241.235.29" src_port="443"/>
      <filter dst_ip="142.16.85.110" dst_port="3430" src_ip="213.241.235.29" src_port="443"/>
      <filter dst_ip="142.16.85.110" dst_port="3429" src_ip="213.241.235.29" src_port="443"/>
    </slice>
    <from sec="1223615315" usec="0"/>
    <to sec="1223615333" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="0.217.128.31"/>
    </slice>
    <from sec="1223614955" usec="0"/>
    <to sec="1223614963" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="126.40.209.31"/>
    </slice>
    <from sec="1223615311" usec="0"/>
    <to sec="1223615326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.188.196.32"/>
    </slice>
    <from sec="1223615242" usec="0"/>
    <to sec="1223615259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.2.29.33"/>
    </slice>
    <from sec="1223615004" usec="0"/>
    <to sec="1223615010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1481{
style=filled;
color=gray75;
9865[label="20.154.133.33;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13543[label="20.154.133.33;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1481[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.154.133.33:3453, 212.21.143.9:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3453: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9865--13543[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.9" dst_port="80" src_ip="20.154.133.33" src_port="3453"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1482{
style=filled;
color=gray75;
3025[label="40.94.172.247;s;118pkt 118fpkt", shape=diamond, color=yellow];
13153[label="40.94.172.247;118pkt 118fpkt", shape=pentagon, color=darkviolet];
15225[label="40.94.172.247;117pkt 117fpkt", shape=invtriangle, color=brown];
16307[label="40.94.172.247;118pkt 118fpkt", shape=invhouse, color=bisque];
stat1482[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.94.172.247:443, 213.33.63.163:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 12634: (0.424628%)&lt;BR/&gt; 12632: (0.424628%)&lt;BR/&gt; 12623: (0.424628%)&lt;BR/&gt; 12621: (0.424628%)&gt;];
}
3025--13153[label="1;118pkt 118fpkt"];
3025--15225[label="1;117pkt 117fpkt"];
3025--16307[label="1;118pkt 118fpkt"];
13153--15225[label="1;117pkt 117fpkt"];
13153--16307[label="1;118pkt 118fpkt"];
15225--16307[label="1;117pkt 117fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.163" src_ip="40.94.172.247" src_port="443"/>
    </slice>
    <from sec="1223614988" usec="0"/>
    <to sec="1223615264" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.186.193.33"/>
    </slice>
    <from sec="1223615676" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1484{
style=filled;
color=gray75;
9869[label="136.228.216.33;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13547[label="136.228.216.33;2pkt 2fpkt", shape=invtriangle, color=brown];
15427[label="136.228.216.33;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1484[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.216.33:1138, 200.236.121.49:300}[50%]&lt;BR/&gt;{136.228.216.33:1139, 200.236.121.49:600}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1139: (25%)&lt;BR/&gt; 1138: (25%)&lt;BR/&gt; 600: (25%)&lt;BR/&gt; 300: (25%)&gt;];
}
9869--13547[label="1;2pkt 2fpkt"];
9869--15427[label="1;2pkt 2fpkt"];
13547--15427[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.236.121.49" dst_port="600" src_ip="136.228.216.33" src_port="1139"/>
      <filter dst_ip="200.236.121.49" dst_port="300" src_ip="136.228.216.33" src_port="1138"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1485{
style=filled;
color=gray75;
4426[label="195.136.229.33;s;43pkt 43fpkt", shape=diamond, color=yellow];
9871[label="195.136.229.33;43pkt 43fpkt", shape=pentagon, color=darkviolet];
13548[label="195.136.229.33;42pkt 42fpkt", shape=invtriangle, color=brown];
15428[label="195.136.229.33;42pkt 42fpkt", shape=invhouse, color=bisque];
stat1485[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.136.229.33:*, 213.42.166.74:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 6136: (1.17647%)&lt;BR/&gt; 5731: (1.17647%)&lt;BR/&gt; 5730: (1.17647%)&lt;BR/&gt; 5727: (1.17647%)&gt;];
}
4426--8027[label="0.976744;42pkt 42fpkt"];
4426--9871[label="1;43pkt 43fpkt"];
4426--13548[label="1;42pkt 42fpkt"];
4426--15428[label="1;42pkt 42fpkt"];
9871--13548[label="1;42pkt 42fpkt"];
9871--15428[label="1;42pkt 42fpkt"];
13548--15428[label="1;42pkt 42fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.74" dst_port="80" src_ip="195.136.229.33"/>
    </slice>
    <from sec="1223615175" usec="0"/>
    <to sec="1223615484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1486{
style=filled;
color=gray75;
9879[label="107.50.78.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13551[label="107.50.78.34;1pkt 1fpkt", shape=invtriangle, color=brown];
15430[label="107.50.78.34;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1486[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.50.78.34:80, 213.33.63.13:63222}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63222: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
9879--13551[label="1;1pkt 1fpkt"];
9879--15430[label="1;1pkt 1fpkt"];
13551--15430[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" dst_port="63222" src_ip="107.50.78.34" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.251.103.34"/>
    </slice>
    <from sec="1223615505" usec="0"/>
    <to sec="1223615516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.62.219.34"/>
    </slice>
    <from sec="1223615262" usec="0"/>
    <to sec="1223615287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1489{
style=filled;
color=gray75;
9891[label="162.73.232.34;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13559[label="162.73.232.34;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1489[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.232.34:43678, 192.95.50.13:80}[50%]&lt;BR/&gt;{162.73.232.34:42401, 208.45.64.35:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 43678: (25%)&lt;BR/&gt; 42401: (25%)&gt;];
}
9891--13559[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.45.64.35" dst_port="80" src_ip="162.73.232.34" src_port="42401"/>
      <filter dst_ip="192.95.50.13" dst_port="80" src_ip="162.73.232.34" src_port="43678"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.74.35"/>
    </slice>
    <from sec="1223615397" usec="0"/>
    <to sec="1223615440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.49.186.35"/>
    </slice>
    <from sec="1223615314" usec="0"/>
    <to sec="1223615319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1492{
style=filled;
color=gray75;
1976[label="140.99.97.36;s;8pkt 8fpkt", shape=diamond, color=yellow];
7778[label="140.99.97.36;s;8pkt 8fpkt", shape=hexagon, color=black];
9915[label="140.99.97.36;7pkt 7fpkt", shape=pentagon, color=darkviolet];
13572[label="140.99.97.36;7pkt 7fpkt", shape=invtriangle, color=brown];
15442[label="140.99.97.36;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1492[shape=component, label=&lt;Rules:&lt;BR/&gt;{140.99.97.36:210, 213.42.166.8:*}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 210: (50%)&lt;BR/&gt; 26881: (6.75676%)&lt;BR/&gt; 10914: (6.75676%)&lt;BR/&gt; 9454: (6.75676%)&lt;BR/&gt; 4514: (6.75676%)&gt;];
}
1976--3297[label="0.25;1pkt 1fpkt"];
1976--7778[label="1;8pkt 8fpkt"];
1976--9915[label="1;7pkt 7fpkt"];
1976--13572[label="1;7pkt 7fpkt"];
1976--15442[label="1;7pkt 7fpkt"];
7778--9915[label="1;7pkt 7fpkt"];
7778--13572[label="1;7pkt 7fpkt"];
7778--15442[label="1;7pkt 7fpkt"];
9915--13572[label="1;7pkt 7fpkt"];
9915--15442[label="1;7pkt 7fpkt"];
13572--15442[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.8" src_ip="140.99.97.36" src_port="210"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1493{
style=filled;
color=gray75;
9921[label="40.10.141.36;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13576[label="40.10.141.36;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1493[shape=component, label=&lt;Rules:&lt;BR/&gt;{40.10.141.36:993, 142.16.131.177:3854}[33.3333%]&lt;BR/&gt;{40.10.141.36:993, 142.16.131.177:3864}[33.3333%]&lt;BR/&gt;{40.10.141.36:993, 142.16.131.177:3897}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (50%)&lt;BR/&gt; 3897: (16.6667%)&lt;BR/&gt; 3864: (16.6667%)&lt;BR/&gt; 3854: (16.6667%)&gt;];
}
9921--13576[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.131.177" dst_port="3897" src_ip="40.10.141.36" src_port="993"/>
      <filter dst_ip="142.16.131.177" dst_port="3864" src_ip="40.10.141.36" src_port="993"/>
      <filter dst_ip="142.16.131.177" dst_port="3854" src_ip="40.10.141.36" src_port="993"/>
    </slice>
    <from sec="1223615132" usec="0"/>
    <to sec="1223615441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.150.12.37"/>
    </slice>
    <from sec="1223614901" usec="0"/>
    <to sec="1223614914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1495{
style=filled;
color=gray75;
9930[label="136.228.35.37;21pkt 21fpkt", shape=pentagon, color=darkviolet];
13581[label="136.228.35.37;22pkt 22fpkt", shape=invtriangle, color=brown];
stat1495[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.35.37:110, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 53457: (2.32558%)&lt;BR/&gt; 52608: (2.32558%)&lt;BR/&gt; 52603: (2.32558%)&lt;BR/&gt; 52597: (2.32558%)&gt;];
}
9930--13581[label="1;21pkt 21fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.35.37" src_port="110"/>
    </slice>
    <from sec="1223614911" usec="0"/>
    <to sec="1223615636" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.705896,2.07625,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_1496{
style=filled;
color=gray75;
1825[label="213.42.134.80;d;111pkt 111fpkt", shape=diamond, color=yellow];
13587[label="76.102.114.37;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1496[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.42.134.80:26648}[99.0991%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26648: (49.5536%)&lt;BR/&gt; 13829: (0.892857%)&lt;BR/&gt; 13509: (0.892857%)&lt;BR/&gt; 13397: (0.892857%)&lt;BR/&gt; 13313: (0.892857%)&gt;];
}
1825--12710[label="0.00900901;1pkt 1fpkt"];
1825--13587[label="1;1pkt 1fpkt"];
1825--14991[label="0.00900901;1pkt 1fpkt"];
1825--16187[label="0.00900901;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.134.80" dst_port="26648"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.115.133.37"/>
    </slice>
    <from sec="1223615095" usec="0"/>
    <to sec="1223615103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="115.67.145.37"/>
    </slice>
    <from sec="1223615028" usec="0"/>
    <to sec="1223615033" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1499{
style=filled;
color=gray75;
9965[label="212.21.136.38;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13600[label="212.21.136.38;2pkt 2fpkt", shape=invtriangle, color=brown];
15452[label="212.21.136.38;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1499[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.38:25, 124.187.25.183:2462}[50%]&lt;BR/&gt;{212.21.136.38:25, 202.20.152.226:59243}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 2462: (37.5%)&lt;BR/&gt; 59243: (12.5%)&gt;];
}
9965--13600[label="1;1pkt 1fpkt"];
9965--15452[label="1;1pkt 1fpkt"];
13600--15452[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="202.20.152.226" dst_port="59243" src_ip="212.21.136.38" src_port="25"/>
      <filter dst_ip="124.187.25.183" dst_port="2462" src_ip="212.21.136.38" src_port="25"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.218.227.38"/>
    </slice>
    <from sec="1223615617" usec="0"/>
    <to sec="1223615620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="121.160.19.39"/>
    </slice>
    <from sec="1223615530" usec="0"/>
    <to sec="1223615537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1502{
style=filled;
color=gray75;
9980[label="204.73.77.39;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13608[label="204.73.77.39;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1502[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.73.77.39:80, 142.243.221.150:1928}[50%]&lt;BR/&gt;{204.73.77.39:80, 142.243.221.150:1939}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1939: (25%)&lt;BR/&gt; 1928: (25%)&gt;];
}
9980--13608[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.221.150" dst_port="1939" src_ip="204.73.77.39" src_port="80"/>
      <filter dst_ip="142.243.221.150" dst_port="1928" src_ip="204.73.77.39" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.83.83.39"/>
    </slice>
    <from sec="1223615358" usec="0"/>
    <to sec="1223615387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1504{
style=filled;
color=gray75;
9984[label="212.21.129.39;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13612[label="212.21.129.39;2pkt 2fpkt", shape=invtriangle, color=brown];
15458[label="212.21.129.39;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1504[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.129.39:139, 54.156.250.193:2301}[50%]&lt;BR/&gt;{212.21.129.39:445, 54.156.250.193:2308}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2308: (25%)&lt;BR/&gt; 2301: (25%)&lt;BR/&gt; 445: (25%)&lt;BR/&gt; 139: (25%)&gt;];
}
9984--13612[label="1;2pkt 2fpkt"];
9984--15458[label="1;2pkt 2fpkt"];
13612--15458[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="54.156.250.193" dst_port="2308" src_ip="212.21.129.39" src_port="445"/>
      <filter dst_ip="54.156.250.193" dst_port="2301" src_ip="212.21.129.39" src_port="139"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.112.166.39"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.54.220.39"/>
    </slice>
    <from sec="1223615273" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.254.169.40"/>
    </slice>
    <from sec="1223615455" usec="0"/>
    <to sec="1223615457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1508{
style=filled;
color=gray75;
10008[label="136.228.193.40;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13627[label="136.228.193.40;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1508[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.193.40:25, 119.74.128.76:58873}[50%]&lt;BR/&gt;{136.228.193.40:41768, 103.69.65.201:113}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58873: (25%)&lt;BR/&gt; 41768: (25%)&lt;BR/&gt; 113: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
10008--13627[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="103.69.65.201" dst_port="113" src_ip="136.228.193.40" src_port="41768"/>
      <filter dst_ip="119.74.128.76" dst_port="58873" src_ip="136.228.193.40" src_port="25"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.133.239.40"/>
    </slice>
    <from sec="1223615232" usec="0"/>
    <to sec="1223615244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1510{
style=filled;
color=gray75;
10021[label="218.251.103.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13633[label="218.251.103.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1510[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.251.103.41:80, 164.25.79.55:50635}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50635: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10021--13633[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.79.55" dst_port="50635" src_ip="218.251.103.41" src_port="80"/>
    </slice>
    <from sec="1223615510" usec="0"/>
    <to sec="1223615552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1511{
style=filled;
color=gray75;
10027[label="204.21.167.41;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13638[label="204.21.167.41;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1511[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.21.167.41:55522, 164.25.70.80:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55522: (50%)&lt;BR/&gt; 21: (50%)&gt;];
}
10027--13638[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.70.80" dst_port="21" src_ip="204.21.167.41" src_port="55522"/>
    </slice>
    <from sec="1223614813" usec="0"/>
    <to sec="1223615651" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.189.192.41"/>
    </slice>
    <from sec="1223615365" usec="0"/>
    <to sec="1223615375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1513{
style=filled;
color=gray75;
10030[label="78.74.200.41;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13641[label="78.74.200.41;11pkt 11fpkt", shape=invtriangle, color=brown];
15470[label="78.74.200.41;11pkt 11fpkt", shape=invhouse, color=bisque];
stat1513[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.74.200.41:*, 162.73.46.195:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52904: (4.54545%)&lt;BR/&gt; 52819: (4.54545%)&lt;BR/&gt; 52818: (4.54545%)&lt;BR/&gt; 52817: (4.54545%)&gt;];
}
10030--13641[label="1;11pkt 11fpkt"];
10030--15470[label="1;11pkt 11fpkt"];
13641--15470[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.46.195" dst_port="80" src_ip="78.74.200.41"/>
    </slice>
    <from sec="1223615547" usec="0"/>
    <to sec="1223615657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1514{
style=filled;
color=gray75;
10037[label="195.64.22.42;73pkt 73fpkt", shape=pentagon, color=darkviolet];
13643[label="195.64.22.42;73pkt 73fpkt", shape=invtriangle, color=brown];
stat1514[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.64.22.42:80, 142.16.209.176:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1549: (0.684932%)&lt;BR/&gt; 1548: (0.684932%)&lt;BR/&gt; 1547: (0.684932%)&lt;BR/&gt; 1546: (0.684932%)&gt;];
}
10037--13643[label="1;73pkt 73fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.209.176" src_ip="195.64.22.42" src_port="80"/>
    </slice>
    <from sec="1223614962" usec="0"/>
    <to sec="1223615589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.73.45.42"/>
    </slice>
    <from sec="1223615488" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.59.35.43"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1517{
style=filled;
color=gray75;
10082[label="204.81.228.43;186pkt 186fpkt", shape=pentagon, color=darkviolet];
13665[label="204.81.228.43;187pkt 187fpkt", shape=invtriangle, color=brown];
stat1517[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.81.228.43:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
10082--13665[label="1;186pkt 186fpkt"];
</description>
    <slice>
      <filter src_ip="204.81.228.43"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.228.13.44"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,020,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1519{
style=filled;
color=gray75;
10085[label="18.97.21.44;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13667[label="18.97.21.44;1pkt 1fpkt", shape=invtriangle, color=brown];
15478[label="18.97.21.44;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1519[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.97.21.44:0, 136.228.138.163:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
10085--13667[label="1;1pkt 1fpkt"];
10085--15478[label="1;1pkt 1fpkt"];
13667--15478[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.138.163" src_ip="18.97.21.44"/>
    </slice>
    <from sec="1223615375" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1520{
style=filled;
color=gray75;
10092[label="19.145.82.44;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13671[label="19.145.82.44;10pkt 10fpkt", shape=invtriangle, color=brown];
stat1520[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.145.82.44:80, 136.228.193.46:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3364: (5%)&lt;BR/&gt; 3363: (5%)&lt;BR/&gt; 3362: (5%)&lt;BR/&gt; 3361: (5%)&gt;];
}
10092--13671[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.193.46" src_ip="19.145.82.44" src_port="80"/>
    </slice>
    <from sec="1223615675" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.243.253.44"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.209.53.45"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.197.110.45"/>
    </slice>
    <from sec="1223615122" usec="0"/>
    <to sec="1223615131" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.141.185.45"/>
    </slice>
    <from sec="1223615096" usec="0"/>
    <to sec="1223615119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.55.215.46"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.187.244.46"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.85.123.47"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1528{
style=filled;
color=gray75;
10149[label="68.219.210.47;56pkt 56fpkt", shape=pentagon, color=darkviolet];
13701[label="68.219.210.47;57pkt 57fpkt", shape=invtriangle, color=brown];
stat1528[shape=component, label=&lt;Rules:&lt;BR/&gt;{68.219.210.47:*, *:445}[57.8947%]&lt;BR/&gt;{68.219.210.47:*, *:139}[42.1053%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (28.7611%)&lt;BR/&gt; 139: (21.2389%)&lt;BR/&gt; 44166: (0.884956%)&lt;BR/&gt; 44164: (0.884956%)&lt;BR/&gt; 44162: (0.884956%)&gt;];
}
10149--13701[label="1;56pkt 56fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="68.219.210.47"/>
      <filter dst_port="139" src_ip="68.219.210.47"/>
    </slice>
    <from sec="1223615005" usec="0"/>
    <to sec="1223615080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1529{
style=filled;
color=gray75;
10153[label="87.48.46.48;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13704[label="87.48.46.48;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1529[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.48.46.48:62001, 136.228.44.214:60325}[33.3333%]&lt;BR/&gt;{87.48.46.48:62001, 136.228.44.214:60571}[33.3333%]&lt;BR/&gt;{87.48.46.48:62001, 136.228.44.214:61080}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62001: (50%)&lt;BR/&gt; 61080: (20%)&lt;BR/&gt; 60571: (20%)&lt;BR/&gt; 60325: (10%)&gt;];
}
10153--13704[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.44.214" dst_port="61080" src_ip="87.48.46.48" src_port="62001"/>
      <filter dst_ip="136.228.44.214" dst_port="60571" src_ip="87.48.46.48" src_port="62001"/>
      <filter dst_ip="136.228.44.214" dst_port="60325" src_ip="87.48.46.48" src_port="62001"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1530{
style=filled;
color=gray75;
10154[label="213.14.52.48;28pkt 28fpkt", shape=pentagon, color=darkviolet];
13705[label="213.14.52.48;29pkt 29fpkt", shape=invtriangle, color=brown];
stat1530[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.14.52.48:80, 136.228.86.11:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3762: (1.75439%)&lt;BR/&gt; 3761: (1.75439%)&lt;BR/&gt; 3758: (1.75439%)&lt;BR/&gt; 3756: (1.75439%)&gt;];
}
10154--13705[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.86.11" src_ip="213.14.52.48" src_port="80"/>
    </slice>
    <from sec="1223615320" usec="0"/>
    <to sec="1223615324" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1531{
style=filled;
color=gray75;
10161[label="107.116.137.48;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13708[label="107.116.137.48;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1531[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.116.137.48:80, 213.33.62.158:60167}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60167: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10161--13708[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.62.158" dst_port="60167" src_ip="107.116.137.48" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.170.150.50"/>
    </slice>
    <from sec="1223615156" usec="0"/>
    <to sec="1223615158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.139.173.50"/>
    </slice>
    <from sec="1223614976" usec="0"/>
    <to sec="1223615048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.60.197.50"/>
    </slice>
    <from sec="1223615327" usec="0"/>
    <to sec="1223615335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.6.220.50"/>
    </slice>
    <from sec="1223615204" usec="0"/>
    <to sec="1223615223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.129.142.51"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.168.17.52"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.177.193.52"/>
    </slice>
    <from sec="1223615137" usec="0"/>
    <to sec="1223615165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.124.5.53"/>
    </slice>
    <from sec="1223614832" usec="0"/>
    <to sec="1223614930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.80.76.54"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1541{
style=filled;
color=gray75;
10267[label="136.228.172.54;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13762[label="136.228.172.54;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1541[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.172.54:2860, 212.138.109.139:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2860: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10267--13762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.138.109.139" dst_port="80" src_ip="136.228.172.54" src_port="2860"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.174.64.55"/>
    </slice>
    <from sec="1223615533" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.49.158.55"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.139.11.56"/>
    </slice>
    <from sec="1223615630" usec="0"/>
    <to sec="1223615662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1545{
style=filled;
color=gray75;
10282[label="213.3.16.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13770[label="213.3.16.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1545[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.3.16.56:80, 213.33.57.14:58971}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58971: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10282--13770[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.57.14" dst_port="58971" src_ip="213.3.16.56" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.247.22.56"/>
    </slice>
    <from sec="1223615334" usec="0"/>
    <to sec="1223615342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1547{
style=filled;
color=gray75;
10285[label="136.228.23.56;78pkt 78fpkt", shape=pentagon, color=darkviolet];
13773[label="136.228.23.56;79pkt 79fpkt", shape=invtriangle, color=brown];
15527[label="136.228.23.56;78pkt 78fpkt", shape=invhouse, color=bisque];
stat1547[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.23.56:*, 212.138.109.36:80}[98.7342%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50881: (0.638298%)&lt;BR/&gt; 50880: (0.638298%)&lt;BR/&gt; 50879: (0.638298%)&lt;BR/&gt; 50878: (0.638298%)&gt;];
}
10285--13773[label="1;78pkt 78fpkt"];
10285--15527[label="1;78pkt 78fpkt"];
13773--15527[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="212.138.109.36" dst_port="80" src_ip="136.228.23.56"/>
    </slice>
    <from sec="1223615671" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.139.98.56"/>
    </slice>
    <from sec="1223615124" usec="0"/>
    <to sec="1223615185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.169.17.57"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615684" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.202.65.57"/>
    </slice>
    <from sec="1223615314" usec="0"/>
    <to sec="1223615330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.139.76.58"/>
    </slice>
    <from sec="1223615149" usec="0"/>
    <to sec="1223615157" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1552{
style=filled;
color=gray75;
10319[label="213.3.118.58;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13789[label="213.3.118.58;2pkt 2fpkt", shape=invtriangle, color=brown];
15535[label="213.3.118.58;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1552[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.3.118.58:36505, 162.73.46.178:80}[33.3333%]&lt;BR/&gt;{213.3.118.58:36508, 162.73.46.178:80}[33.3333%]&lt;BR/&gt;{213.3.118.58:36695, 162.73.46.178:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 36695: (21.4286%)&lt;BR/&gt; 36508: (21.4286%)&lt;BR/&gt; 36505: (7.14286%)&gt;];
}
10319--13789[label="1;2pkt 2fpkt"];
10319--15535[label="1;2pkt 2fpkt"];
13789--15535[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.46.178" dst_port="80" src_ip="213.3.118.58" src_port="36695"/>
      <filter dst_ip="162.73.46.178" dst_port="80" src_ip="213.3.118.58" src_port="36508"/>
      <filter dst_ip="162.73.46.178" dst_port="80" src_ip="213.3.118.58" src_port="36505"/>
    </slice>
    <from sec="1223615682" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.141.184.58"/>
    </slice>
    <from sec="1223615598" usec="0"/>
    <to sec="1223615639" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.148.104.59"/>
    </slice>
    <from sec="1223614992" usec="0"/>
    <to sec="1223615000" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1555{
style=filled;
color=gray75;
5495[label="107.100.250.59;s;28pkt 28fpkt", shape=diamond, color=yellow];
10340[label="107.100.250.59;32pkt 32fpkt", shape=pentagon, color=darkviolet];
13800[label="107.100.250.59;31pkt 31fpkt", shape=invtriangle, color=brown];
15540[label="107.100.250.59;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1555[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.100.250.59:*, 164.25.33.165:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64829: (1.62602%)&lt;BR/&gt; 63619: (1.62602%)&lt;BR/&gt; 62168: (1.62602%)&lt;BR/&gt; 61520: (1.62602%)&gt;];
}
5495--10340[label="1;28pkt 28fpkt"];
5495--13800[label="0.964286;27pkt 27fpkt"];
5495--15540[label="1;28pkt 28fpkt"];
10340--13800[label="1;31pkt 31fpkt"];
10340--15540[label="1;32pkt 32fpkt"];
13800--15540[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.33.165" dst_port="80" src_ip="107.100.250.59"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.85.40.61"/>
    </slice>
    <from sec="1223615330" usec="0"/>
    <to sec="1223615449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.155.67.61"/>
    </slice>
    <from sec="1223615033" usec="0"/>
    <to sec="1223615043" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.157.80.61"/>
    </slice>
    <from sec="1223615060" usec="0"/>
    <to sec="1223615075" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1559{
style=filled;
color=gray75;
10359[label="212.138.109.61;11pkt 11fpkt", shape=pentagon, color=darkviolet];
13811[label="212.138.109.61;11pkt 11fpkt", shape=invtriangle, color=brown];
15547[label="212.138.109.61;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1559[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.138.109.61:80, 136.228.19.178:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54642: (4.41176%)&lt;BR/&gt; 54641: (4.41176%)&lt;BR/&gt; 54640: (4.41176%)&lt;BR/&gt; 54639: (4.41176%)&gt;];
}
10359--13811[label="1;11pkt 11fpkt"];
10359--15547[label="1;11pkt 11fpkt"];
13811--15547[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.19.178" src_ip="212.138.109.61" src_port="80"/>
    </slice>
    <from sec="1223615000" usec="0"/>
    <to sec="1223615008" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.106.128.61"/>
    </slice>
    <from sec="1223615264" usec="0"/>
    <to sec="1223615269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1561{
style=filled;
color=gray75;
10363[label="213.14.17.62;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13813[label="213.14.17.62;2pkt 2fpkt", shape=invtriangle, color=brown];
15548[label="213.14.17.62;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1561[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.14.17.62:53, 142.243.51.129:11390}[50%]&lt;BR/&gt;{213.14.17.62:53, 142.243.51.129:21357}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 21357: (25%)&lt;BR/&gt; 11390: (25%)&gt;];
}
10363--13813[label="1;2pkt 2fpkt"];
10363--15548[label="1;2pkt 2fpkt"];
13813--15548[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.51.129" dst_port="21357" src_ip="213.14.17.62" src_port="53"/>
      <filter dst_ip="142.243.51.129" dst_port="11390" src_ip="213.14.17.62" src_port="53"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1562{
style=filled;
color=gray75;
5601[label="136.228.104.237;d;72pkt 72fpkt", shape=diamond, color=yellow];
10367[label="119.80.65.62;74pkt 74fpkt", shape=pentagon, color=darkviolet];
13814[label="119.80.65.62;75pkt 75fpkt", shape=invtriangle, color=brown];
stat1562[shape=component, label=&lt;Rules:&lt;BR/&gt;{119.80.65.62:80, 136.228.104.237:*}[98.6842%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7738%)&lt;BR/&gt; 4768: (0.678733%)&lt;BR/&gt; 4766: (0.678733%)&lt;BR/&gt; 4762: (0.678733%)&lt;BR/&gt; 4760: (0.678733%)&gt;];
}
5601--9163[label="0.0416667;3pkt 3fpkt"];
5601--9194[label="0.0277778;2pkt 2fpkt"];
5601--9198[label="0.0972222;7pkt 7fpkt"];
5601--9234[label="0.0277778;2pkt 2fpkt"];
5601--9268[label="0.0277778;2pkt 2fpkt"];
5601--10367[label="0.972222;70pkt 70fpkt"];
5601--13814[label="0.986111;71pkt 71fpkt"];
10367--13814[label="1;74pkt 74fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.237" src_ip="119.80.65.62" src_port="80"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1563{
style=filled;
color=gray75;
10378[label="213.34.131.63;35pkt 35fpkt", shape=pentagon, color=darkviolet];
13817[label="213.34.131.63;35pkt 35fpkt", shape=invtriangle, color=brown];
stat1563[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.34.131.63:80, 142.16.215.166:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4857: (1.42857%)&lt;BR/&gt; 4856: (1.42857%)&lt;BR/&gt; 4855: (1.42857%)&lt;BR/&gt; 4854: (1.42857%)&gt;];
}
10378--13817[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.215.166" src_ip="213.34.131.63" src_port="80"/>
    </slice>
    <from sec="1223614850" usec="0"/>
    <to sec="1223615505" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.224.139.63"/>
    </slice>
    <from sec="1223614908" usec="0"/>
    <to sec="1223614915" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.213.28.64"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1566{
style=filled;
color=gray75;
10404[label="172.20.32.65;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13832[label="172.20.32.65;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1566[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.20.32.65:2724, 197.236.234.99:44472}[50%]&lt;BR/&gt;{172.20.32.65:2722, 106.56.218.229:36393}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44472: (25%)&lt;BR/&gt; 36393: (25%)&lt;BR/&gt; 2724: (25%)&lt;BR/&gt; 2722: (25%)&gt;];
}
10404--13832[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="106.56.218.229" dst_port="36393" src_ip="172.20.32.65" src_port="2722"/>
      <filter dst_ip="197.236.234.99" dst_port="44472" src_ip="172.20.32.65" src_port="2724"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.74.65"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.137.77.65"/>
    </slice>
    <from sec="1223615317" usec="0"/>
    <to sec="1223615377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1569{
style=filled;
color=gray75;
10409[label="136.228.81.65;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13836[label="136.228.81.65;2pkt 2fpkt", shape=invtriangle, color=brown];
15561[label="136.228.81.65;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1569[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.81.65:3697, 221.18.80.131:80}[50%]&lt;BR/&gt;{136.228.81.65:3699, 221.18.80.131:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3699: (37.5%)&lt;BR/&gt; 3697: (12.5%)&gt;];
}
10409--13836[label="1;1pkt 1fpkt"];
10409--15561[label="1;1pkt 1fpkt"];
13836--15561[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="221.18.80.131" dst_port="80" src_ip="136.228.81.65" src_port="3699"/>
      <filter dst_ip="221.18.80.131" dst_port="80" src_ip="136.228.81.65" src_port="3697"/>
    </slice>
    <from sec="1223615679" usec="0"/>
    <to sec="1223615682" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1570{
style=filled;
color=gray75;
5869[label="124.63.200.24;s;6pkt 6fpkt", shape=diamond, color=yellow];
9736[label="124.63.200.24;6pkt 6fpkt", shape=pentagon, color=darkviolet];
13476[label="124.63.200.24;5pkt 5fpkt", shape=invtriangle, color=brown];
15392[label="124.63.200.24;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1570[shape=component, label=&lt;Rules:&lt;BR/&gt;{124.63.200.24:80, 136.228.214.244:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4953: (8.69565%)&lt;BR/&gt; 4927: (8.69565%)&lt;BR/&gt; 4917: (8.69565%)&lt;BR/&gt; 4899: (8.69565%)&gt;];
}
5869--9736[label="1;6pkt 6fpkt"];
5869--13476[label="1;5pkt 5fpkt"];
5869--15392[label="1;6pkt 6fpkt"];
9736--13476[label="1;5pkt 5fpkt"];
9736--15392[label="1;6pkt 6fpkt"];
13476--15392[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.214.244" src_ip="124.63.200.24" src_port="80"/>
    </slice>
    <from sec="1223615607" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1571{
style=filled;
color=gray75;
10421[label="162.73.16.66;3pkt 3fpkt", shape=pentagon, color=darkviolet];
13840[label="162.73.16.66;3pkt 3fpkt", shape=invtriangle, color=brown];
15564[label="162.73.16.66;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1571[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.16.66:3408, 216.143.51.12:53}[33.3333%]&lt;BR/&gt;{162.73.16.66:24210, 216.168.134.76:53}[33.3333%]&lt;BR/&gt;{162.73.16.66:33334, 192.120.219.153:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 33334: (16.6667%)&lt;BR/&gt; 24210: (16.6667%)&lt;BR/&gt; 3408: (16.6667%)&gt;];
}
10421--13840[label="1;3pkt 3fpkt"];
10421--15564[label="1;3pkt 3fpkt"];
13840--15564[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="192.120.219.153" dst_port="53" src_ip="162.73.16.66" src_port="33334"/>
      <filter dst_ip="216.168.134.76" dst_port="53" src_ip="162.73.16.66" src_port="24210"/>
      <filter dst_ip="216.143.51.12" dst_port="53" src_ip="162.73.16.66" src_port="3408"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.141.82.66"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="116.70.200.66"/>
    </slice>
    <from sec="1223614938" usec="0"/>
    <to sec="1223615026" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.98.48.67"/>
    </slice>
    <from sec="1223615149" usec="0"/>
    <to sec="1223615182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.228.4.68"/>
    </slice>
    <from sec="1223615395" usec="0"/>
    <to sec="1223615411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.177.196.68"/>
    </slice>
    <from sec="1223615114" usec="0"/>
    <to sec="1223615118" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.130.143.69"/>
    </slice>
    <from sec="1223615449" usec="0"/>
    <to sec="1223615455" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.132.200.69"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.17.141.70"/>
    </slice>
    <from sec="1223615241" usec="0"/>
    <to sec="1223615252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.75.157.70"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1581{
style=filled;
color=gray75;
887[label="142.47.173.70;s;945pkt 945fpkt", shape=diamond, color=yellow];
10512[label="142.47.173.70;1027pkt 1027fpkt", shape=pentagon, color=darkviolet];
13888[label="142.47.173.70;1027pkt 1027fpkt", shape=invtriangle, color=brown];
15590[label="142.47.173.70;1026pkt 1026fpkt", shape=invhouse, color=bisque];
stat1581[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.47.173.70:*, *:25}[75.2678%]&lt;BR/&gt;{142.47.173.70:25, *:*}[24.3427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.8012%)&lt;BR/&gt; 443: (0.149068%)&lt;BR/&gt; 64779: (0.0993789%)&lt;BR/&gt; 60879: (0.0993789%)&lt;BR/&gt; 47348: (0.0993789%)&gt;];
}
887--1840[label="0.013245;6pkt 6fpkt"];
887--1899[label="0.0155556;7pkt 7fpkt"];
887--1960[label="0.0141176;6pkt 6fpkt"];
887--2149[label="0.0230769;6pkt 6fpkt"];
887--2167[label="0.0178117;7pkt 7fpkt"];
887--2623[label="0.0267176;7pkt 7fpkt"];
887--2631[label="0.0217391;6pkt 6fpkt"];
887--2633[label="0.0233463;6pkt 6fpkt"];
887--3163[label="0.0228137;6pkt 6fpkt"];
887--3223[label="0.0255474;7pkt 7fpkt"];
887--3365[label="0.0892857;5pkt 5fpkt"];
887--4153[label="0.00413223;1pkt 1fpkt"];
887--4719[label="0.144654;23pkt 23fpkt"];
887--6530[label="0.0242424;4pkt 4fpkt"];
887--6533[label="0.0200803;5pkt 5fpkt"];
887--6804[label="0.0114613;4pkt 4fpkt"];
887--6821[label="0.0357143;4pkt 4fpkt"];
887--7190[label="0.0314465;5pkt 5fpkt"];
887--7416[label="0.0078125;1pkt 1fpkt"];
887--7468[label="0.0160858;6pkt 6fpkt"];
887--8165[label="0.0233463;6pkt 6fpkt"];
887--8615[label="0.144654;23pkt 23fpkt"];
887--8637[label="0.0892857;5pkt 5fpkt"];
887--8878[label="0.030303;4pkt 4fpkt"];
887--9177[label="0.0582011;55pkt 55fpkt"];
887--9196[label="0.00634921;6pkt 6fpkt"];
887--9217[label="0.0582011;55pkt 55fpkt"];
887--9251[label="0.0582011;55pkt 55fpkt"];
887--10512[label="1;945pkt 945fpkt"];
887--13888[label="1;945pkt 945fpkt"];
887--15590[label="0.998942;944pkt 944fpkt"];
10512--13888[label="1;1027pkt 1027fpkt"];
10512--15590[label="1;1026pkt 1026fpkt"];
13888--15590[label="1;1026pkt 1026fpkt"];
</description>
    <slice>
      <filter src_ip="142.47.173.70" src_port="25"/>
      <filter dst_port="25" src_ip="142.47.173.70"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,020,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1582{
style=filled;
color=gray75;
711[label="212.174.244.70;s;95pkt 95fpkt", shape=diamond, color=yellow];
8138[label="212.174.244.70;s;95pkt 95fpkt", shape=hexagon, color=black];
10517[label="212.174.244.70;102pkt 102fpkt", shape=pentagon, color=darkviolet];
13889[label="212.174.244.70;101pkt 101fpkt", shape=invtriangle, color=brown];
stat1582[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.174.244.70:0, *:0}[99.0196%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.9822%)&lt;BR/&gt; 46235: (0.508906%)&lt;BR/&gt; 179: (0.508906%)&gt;];
}
711--724[label="0.0105263;1pkt 1fpkt"];
711--758[label="0.0105263;1pkt 1fpkt"];
711--788[label="0.0105263;1pkt 1fpkt"];
711--828[label="0.0105263;1pkt 1fpkt"];
711--841[label="0.0105263;1pkt 1fpkt"];
711--880[label="0.0105263;1pkt 1fpkt"];
711--903[label="0.0105263;1pkt 1fpkt"];
711--937[label="0.0105263;1pkt 1fpkt"];
711--1041[label="0.0105263;1pkt 1fpkt"];
711--1086[label="0.0105263;1pkt 1fpkt"];
711--1094[label="0.0105263;1pkt 1fpkt"];
711--1234[label="0.0105263;1pkt 1fpkt"];
711--1280[label="0.0105263;1pkt 1fpkt"];
711--1352[label="0.0105263;1pkt 1fpkt"];
711--1422[label="0.0105263;1pkt 1fpkt"];
711--1438[label="0.0105263;1pkt 1fpkt"];
711--1797[label="0.0105263;1pkt 1fpkt"];
711--1841[label="0.0105263;1pkt 1fpkt"];
711--1861[label="0.0105263;1pkt 1fpkt"];
711--1880[label="0.0105263;1pkt 1fpkt"];
711--2041[label="0.0105263;1pkt 1fpkt"];
711--2161[label="0.0105263;1pkt 1fpkt"];
711--2635[label="0.0105263;1pkt 1fpkt"];
711--2668[label="0.0105263;1pkt 1fpkt"];
711--3155[label="0.0105263;1pkt 1fpkt"];
711--3159[label="0.0105263;1pkt 1fpkt"];
711--3194[label="0.0105263;1pkt 1fpkt"];
711--3248[label="0.0105263;1pkt 1fpkt"];
711--3260[label="0.0105263;1pkt 1fpkt"];
711--3278[label="0.0105263;1pkt 1fpkt"];
711--3747[label="0.0105263;1pkt 1fpkt"];
711--3776[label="0.0105263;1pkt 1fpkt"];
711--4243[label="0.0105263;1pkt 1fpkt"];
711--4723[label="0.0105263;1pkt 1fpkt"];
711--5051[label="0.0105263;1pkt 1fpkt"];
711--5164[label="0.0105263;1pkt 1fpkt"];
711--5193[label="0.0238095;1pkt 1fpkt"];
711--5921[label="0.0105263;1pkt 1fpkt"];
711--6219[label="0.0105263;1pkt 1fpkt"];
711--6232[label="0.0105263;1pkt 1fpkt"];
711--6462[label="0.0105263;1pkt 1fpkt"];
711--6485[label="0.0105263;1pkt 1fpkt"];
711--6534[label="0.0105263;1pkt 1fpkt"];
711--6568[label="0.0105263;1pkt 1fpkt"];
711--6763[label="0.0105263;1pkt 1fpkt"];
711--6819[label="0.0105263;1pkt 1fpkt"];
711--6826[label="0.0105263;1pkt 1fpkt"];
711--6854[label="0.0105263;1pkt 1fpkt"];
711--6901[label="0.0105263;1pkt 1fpkt"];
711--7427[label="0.0105263;1pkt 1fpkt"];
711--7518[label="0.0105263;1pkt 1fpkt"];
711--7729[label="0.0105263;1pkt 1fpkt"];
711--7781[label="0.0105263;1pkt 1fpkt"];
711--7824[label="0.0105263;1pkt 1fpkt"];
711--7833[label="0.0105263;1pkt 1fpkt"];
711--7888[label="0.0105263;1pkt 1fpkt"];
711--8136[label="0.0105263;1pkt 1fpkt"];
711--8138[label="1;95pkt 95fpkt"];
711--8139[label="0.0105263;1pkt 1fpkt"];
711--8152[label="0.0105263;1pkt 1fpkt"];
711--8153[label="0.0105263;1pkt 1fpkt"];
711--8161[label="0.0105263;1pkt 1fpkt"];
711--8162[label="0.0105263;1pkt 1fpkt"];
711--8229[label="0.0105263;1pkt 1fpkt"];
711--8298[label="0.0123457;1pkt 1fpkt"];
711--8514[label="0.0105263;1pkt 1fpkt"];
711--8592[label="0.0105263;1pkt 1fpkt"];
711--8599[label="0.0105263;1pkt 1fpkt"];
711--8607[label="0.0105263;1pkt 1fpkt"];
711--8827[label="0.0105263;1pkt 1fpkt"];
711--8998[label="0.0105263;1pkt 1fpkt"];
711--9010[label="0.0105263;1pkt 1fpkt"];
711--9079[label="0.0105263;1pkt 1fpkt"];
711--10517[label="1;95pkt 95fpkt"];
711--13889[label="0.989474;94pkt 94fpkt"];
8138--8139[label="0.0105263;1pkt 1fpkt"];
8138--8152[label="0.0105263;1pkt 1fpkt"];
8138--8153[label="0.0105263;1pkt 1fpkt"];
8138--8161[label="0.0105263;1pkt 1fpkt"];
8138--8162[label="0.0105263;1pkt 1fpkt"];
8138--8229[label="0.0105263;1pkt 1fpkt"];
8138--8298[label="0.0123457;1pkt 1fpkt"];
8138--8514[label="0.0105263;1pkt 1fpkt"];
8138--8592[label="0.0105263;1pkt 1fpkt"];
8138--8599[label="0.0105263;1pkt 1fpkt"];
8138--8607[label="0.0105263;1pkt 1fpkt"];
8138--8827[label="0.0105263;1pkt 1fpkt"];
8138--8998[label="0.0105263;1pkt 1fpkt"];
8138--9010[label="0.0105263;1pkt 1fpkt"];
8138--9079[label="0.0105263;1pkt 1fpkt"];
8138--10517[label="1;95pkt 95fpkt"];
8138--13889[label="0.989474;94pkt 94fpkt"];
10517--13889[label="1;101pkt 101fpkt"];
</description>
    <slice>
      <filter src_ip="212.174.244.70"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.247.116.71"/>
    </slice>
    <from sec="1223615435" usec="0"/>
    <to sec="1223615478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1584{
style=filled;
color=gray75;
10538[label="136.228.25.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13902[label="136.228.25.72;1pkt 1fpkt", shape=invtriangle, color=brown];
15598[label="136.228.25.72;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1584[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.25.72:25, 121.104.182.82:59420}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59420: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
10538--13902[label="1;1pkt 1fpkt"];
10538--15598[label="1;1pkt 1fpkt"];
13902--15598[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="121.104.182.82" dst_port="59420" src_ip="136.228.25.72" src_port="25"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1585{
style=filled;
color=gray75;
10541[label="204.57.67.72;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13905[label="204.57.67.72;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1585[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.57.67.72:80, 136.228.85.93:1827}[50%]&lt;BR/&gt;{204.57.67.72:80, 136.228.85.93:1836}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1836: (33.3333%)&lt;BR/&gt; 1827: (16.6667%)&gt;];
}
10541--13905[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.85.93" dst_port="1836" src_ip="204.57.67.72" src_port="80"/>
      <filter dst_ip="136.228.85.93" dst_port="1827" src_ip="204.57.67.72" src_port="80"/>
    </slice>
    <from sec="1223615539" usec="0"/>
    <to sec="1223615553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.243.248.73"/>
    </slice>
    <from sec="1223615052" usec="0"/>
    <to sec="1223615059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.84.38.74"/>
    </slice>
    <from sec="1223615116" usec="0"/>
    <to sec="1223615187" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.36.22.75"/>
    </slice>
    <from sec="1223615335" usec="0"/>
    <to sec="1223615339" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1589{
style=filled;
color=gray75;
10602[label="98.149.139.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13937[label="98.149.139.75;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1589[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.149.139.75:443, 142.243.72.169:2629}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2629: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
10602--13937[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.72.169" dst_port="2629" src_ip="98.149.139.75" src_port="443"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1590{
style=filled;
color=gray75;
10610[label="195.154.236.75;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13943[label="195.154.236.75;1pkt 1fpkt", shape=invtriangle, color=brown];
15619[label="195.154.236.75;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1590[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.154.236.75:80, 142.243.98.96:4783}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4783: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10610--13943[label="1;1pkt 1fpkt"];
10610--15619[label="1;1pkt 1fpkt"];
13943--15619[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.98.96" dst_port="4783" src_ip="195.154.236.75" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.105.145.76"/>
    </slice>
    <from sec="1223615061" usec="0"/>
    <to sec="1223615175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1592{
style=filled;
color=gray75;
10637[label="192.67.87.77;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13956[label="192.67.87.77;1pkt 1fpkt", shape=invtriangle, color=brown];
15626[label="192.67.87.77;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1592[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.67.87.77:2703, 212.21.134.137:1880}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 1880: (50%)&gt;];
}
10637--13956[label="1;1pkt 1fpkt"];
10637--15626[label="1;1pkt 1fpkt"];
13956--15626[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.134.137" dst_port="1880" src_ip="192.67.87.77" src_port="2703"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.138.132.77"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1595{
style=filled;
color=gray75;
10654[label="73.253.19.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13963[label="73.253.19.78;1pkt 1fpkt", shape=invtriangle, color=brown];
15631[label="73.253.19.78;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1595[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.253.19.78:64569, 136.228.65.114:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64569: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10654--13963[label="1;1pkt 1fpkt"];
10654--15631[label="1;1pkt 1fpkt"];
13963--15631[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.65.114" dst_port="80" src_ip="73.253.19.78" src_port="64569"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.51.67.78"/>
    </slice>
    <from sec="1223615041" usec="0"/>
    <to sec="1223615072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.76.132.78"/>
    </slice>
    <from sec="1223615543" usec="0"/>
    <to sec="1223615650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="124.70.162.78"/>
    </slice>
    <from sec="1223615392" usec="0"/>
    <to sec="1223615420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1599{
style=filled;
color=gray75;
10670[label="78.46.38.79;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13973[label="78.46.38.79;1pkt 1fpkt", shape=invtriangle, color=brown];
15636[label="78.46.38.79;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1599[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.46.38.79:1221, 212.21.143.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1221: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10670--13973[label="1;1pkt 1fpkt"];
10670--15636[label="1;1pkt 1fpkt"];
13973--15636[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="78.46.38.79" src_port="1221"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.148.43.79"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.137.93.79"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615404" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1602{
style=filled;
color=gray75;
10681[label="153.109.167.79;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13977[label="153.109.167.79;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1602[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.109.167.79:80, 107.100.243.2:55736}[50%]&lt;BR/&gt;{153.109.167.79:80, 107.100.243.2:61691}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61691: (33.3333%)&lt;BR/&gt; 55736: (16.6667%)&gt;];
}
10681--13977[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="107.100.243.2" dst_port="61691" src_ip="153.109.167.79" src_port="80"/>
      <filter dst_ip="107.100.243.2" dst_port="55736" src_ip="153.109.167.79" src_port="80"/>
    </slice>
    <from sec="1223615440" usec="0"/>
    <to sec="1223615581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.237.29.80"/>
    </slice>
    <from sec="1223615321" usec="0"/>
    <to sec="1223615346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="124.33.88.80"/>
    </slice>
    <from sec="1223615187" usec="0"/>
    <to sec="1223615199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1605{
style=filled;
color=gray75;
10697[label="213.33.155.80;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13986[label="213.33.155.80;1pkt 1fpkt", shape=invtriangle, color=brown];
15640[label="213.33.155.80;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1605[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.155.80:1438, 192.105.74.65:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1438: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10697--13986[label="1;1pkt 1fpkt"];
10697--15640[label="1;1pkt 1fpkt"];
13986--15640[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.105.74.65" dst_port="80" src_ip="213.33.155.80" src_port="1438"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1606{
style=filled;
color=gray75;
2043[label="142.47.173.80;s;339pkt 339fpkt", shape=diamond, color=yellow];
6571[label="142.47.173.80;s;181pkt 181fpkt", shape=hexagon, color=black];
10698[label="142.47.173.80;377pkt 377fpkt", shape=pentagon, color=darkviolet];
13987[label="142.47.173.80;377pkt 377fpkt", shape=invtriangle, color=brown];
15641[label="142.47.173.80;377pkt 377fpkt", shape=invhouse, color=bisque];
stat1606[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.47.173.80:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2023: (0.333131%)&lt;BR/&gt; 2897: (0.272562%)&lt;BR/&gt; 1583: (0.272562%)&lt;BR/&gt; 1360: (0.272562%)&gt;];
}
2043--4382[label="0.00840336;1pkt 1fpkt"];
2043--6571[label="1;181pkt 181fpkt"];
2043--8010[label="0.00840336;1pkt 1fpkt"];
2043--9103[label="0.00840336;1pkt 1fpkt"];
2043--9163[label="0.0501475;17pkt 17fpkt"];
2043--9194[label="0.0530973;18pkt 18fpkt"];
2043--9198[label="0.079646;27pkt 27fpkt"];
2043--9234[label="0.0530973;18pkt 18fpkt"];
2043--9268[label="0.0530973;18pkt 18fpkt"];
2043--10698[label="0.99705;338pkt 338fpkt"];
2043--13987[label="0.99705;338pkt 338fpkt"];
2043--15641[label="0.99705;338pkt 338fpkt"];
6571--9163[label="0.0939227;17pkt 17fpkt"];
6571--9194[label="0.0994475;18pkt 18fpkt"];
6571--9234[label="0.0994475;18pkt 18fpkt"];
6571--9268[label="0.0994475;18pkt 18fpkt"];
6571--10698[label="0.994475;180pkt 180fpkt"];
6571--13987[label="0.994475;180pkt 180fpkt"];
6571--15641[label="0.994475;180pkt 180fpkt"];
10698--13987[label="1;377pkt 377fpkt"];
10698--15641[label="1;377pkt 377fpkt"];
13987--15641[label="1;377pkt 377fpkt"];
</description>
    <slice>
      <filter src_ip="142.47.173.80" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.138.185.81"/>
    </slice>
    <from sec="1223614845" usec="0"/>
    <to sec="1223615040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.65.21.82"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.200.131.82"/>
    </slice>
    <from sec="1223615255" usec="0"/>
    <to sec="1223615272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688731,2.11726,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1610{
style=filled;
color=gray75;
10758[label="142.243.244.83;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15655[label="142.243.244.83;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1610[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.244.83:1093, 107.82.169.163:8911}[50%]&lt;BR/&gt;{142.243.244.83:1092, 114.92.105.218:4661}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8911: (25%)&lt;BR/&gt; 4661: (25%)&lt;BR/&gt; 1093: (25%)&lt;BR/&gt; 1092: (25%)&gt;];
}
10758--14015[label="1;2pkt 2fpkt"];
10758--15655[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="114.92.105.218" dst_port="4661" src_ip="142.243.244.83" src_port="1092"/>
      <filter dst_ip="107.82.169.163" dst_port="8911" src_ip="142.243.244.83" src_port="1093"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.243.252.83"/>
    </slice>
    <from sec="1223614851" usec="0"/>
    <to sec="1223615288" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1612{
style=filled;
color=gray75;
10765[label="206.161.105.84;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14018[label="206.161.105.84;5pkt 5fpkt", shape=invtriangle, color=brown];
15658[label="206.161.105.84;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1612[shape=component, label=&lt;Rules:&lt;BR/&gt;{206.161.105.84:80, 136.228.103.59:64158}[20%]&lt;BR/&gt;{206.161.105.84:80, 136.228.103.59:64159}[20%]&lt;BR/&gt;{206.161.105.84:80, 136.228.103.59:64161}[20%]&lt;BR/&gt;{206.161.105.84:80, 136.228.103.59:64179}[20%]&lt;BR/&gt;{206.161.105.84:80, 136.228.103.59:64180}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 64180: (10.7143%)&lt;BR/&gt; 64179: (10.7143%)&lt;BR/&gt; 64161: (10.7143%)&lt;BR/&gt; 64159: (10.7143%)&gt;];
}
10765--14018[label="1;5pkt 5fpkt"];
10765--15658[label="1;4pkt 4fpkt"];
14018--15658[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.103.59" dst_port="64180" src_ip="206.161.105.84" src_port="80"/>
      <filter dst_ip="136.228.103.59" dst_port="64179" src_ip="206.161.105.84" src_port="80"/>
      <filter dst_ip="136.228.103.59" dst_port="64161" src_ip="206.161.105.84" src_port="80"/>
      <filter dst_ip="136.228.103.59" dst_port="64159" src_ip="206.161.105.84" src_port="80"/>
      <filter dst_ip="136.228.103.59" dst_port="64158" src_ip="206.161.105.84" src_port="80"/>
    </slice>
    <from sec="1223614873" usec="0"/>
    <to sec="1223614887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.152.0.85"/>
    </slice>
    <from sec="1223614911" usec="0"/>
    <to sec="1223614934" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.3.1.85"/>
    </slice>
    <from sec="1223615529" usec="0"/>
    <to sec="1223615544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1615{
style=filled;
color=gray75;
4684[label="195.212.51.85;s;640pkt 640fpkt", shape=diamond, color=yellow];
10781[label="195.212.51.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14026[label="195.212.51.85;2pkt 2fpkt", shape=invtriangle, color=brown];
15664[label="195.212.51.85;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1615[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.212.51.85:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4246: (0.232919%)&lt;BR/&gt; 3693: (0.232919%)&lt;BR/&gt; 1628: (0.232919%)&lt;BR/&gt; 1064: (0.232919%)&gt;];
}
4684--7775[label="0.00900901;1pkt 1fpkt"];
4684--14026[label="0.5;1pkt 1fpkt"];
10781--14026[label="1;1pkt 1fpkt"];
10781--15664[label="1;1pkt 1fpkt"];
14026--15664[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="445" src_ip="195.212.51.85"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1616{
style=filled;
color=gray75;
10784[label="136.228.90.85;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14027[label="136.228.90.85;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1616[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.90.85:2318, 210.74.3.191:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2318: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10784--14027[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="210.74.3.191" dst_port="80" src_ip="136.228.90.85" src_port="2318"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.100.111.86"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1618{
style=filled;
color=gray75;
686[label="164.25.79.54;d;2783pkt 2783fpkt", shape=diamond, color=yellow];
824[label="107.4.66.12;s;6853pkt 6853fpkt", shape=diamond, color=yellow];
825[label="108.129.217.181;s;723pkt 723fpkt", shape=diamond, color=yellow];
1100[label="164.25.78.96;d;772pkt 772fpkt", shape=diamond, color=yellow];
1394[label="18.131.98.31;s;8pkt 8fpkt", shape=diamond, color=yellow];
1442[label="87.61.1.99;s;5pkt 5fpkt", shape=diamond, color=yellow];
1857[label="164.25.70.80;d;136pkt 136fpkt", shape=diamond, color=yellow];
1964[label="102.230.51.211;s;5pkt 5fpkt", shape=diamond, color=yellow];
1969[label="111.2.217.113;s;6pkt 6fpkt", shape=diamond, color=yellow];
2202[label="197.45.64.240;s;153pkt 153fpkt", shape=diamond, color=yellow];
2362[label="73.120.139.2;s;23pkt 23fpkt", shape=diamond, color=yellow];
2656[label="110.138.202.120;s;2pkt 2fpkt", shape=diamond, color=yellow];
2734[label="100.0.83.172;s;1pkt 1fpkt", shape=diamond, color=yellow];
3169[label="205.160.31.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
3408[label="110.54.219.220;s;1pkt 1fpkt", shape=diamond, color=yellow];
3707[label="118.101.46.251;s;8pkt 8fpkt", shape=diamond, color=yellow];
3791[label="217.53.13.229;s;183pkt 183fpkt", shape=diamond, color=yellow];
3823[label="73.244.42.190;s;22pkt 22fpkt", shape=diamond, color=yellow];
3907[label="108.85.45.45;s;30pkt 30fpkt", shape=diamond, color=yellow];
4155[label="193.132.223.17;s;5pkt 5fpkt", shape=diamond, color=yellow];
4429[label="96.181.24.91;s;132pkt 132fpkt", shape=diamond, color=yellow];
4817[label="142.243.13.169;d;50pkt 50fpkt", shape=diamond, color=yellow];
4835[label="101.178.185.220;s;11pkt 11fpkt", shape=diamond, color=yellow];
4839[label="142.243.11.80;d;29pkt 29fpkt", shape=diamond, color=yellow];
5178[label="72.235.70.177;s;3pkt 3fpkt", shape=diamond, color=yellow];
5275[label="136.228.86.117;d;70pkt 70fpkt", shape=diamond, color=yellow];
5477[label="142.243.13.50;d;31pkt 31fpkt", shape=diamond, color=yellow];
5484[label="162.73.20.221;d;7pkt 7fpkt", shape=diamond, color=yellow];
5485[label="193.95.66.20;s;33pkt 33fpkt", shape=diamond, color=yellow];
5582[label="118.170.64.149;s;1pkt 1fpkt", shape=diamond, color=yellow];
5769[label="197.64.166.108;s;3pkt 3fpkt", shape=diamond, color=yellow];
6080[label="18.131.98.31;s;2pkt 2fpkt", shape=hexagon, color=black];
6354[label="197.45.64.240;s;94pkt 94fpkt", shape=hexagon, color=black];
6770[label="164.25.79.54;d;2479pkt 2479fpkt", shape=hexagon, color=black];
7147[label="164.25.78.96;d;431pkt 431fpkt", shape=hexagon, color=black];
7175[label="118.101.46.251;s;6pkt 6fpkt", shape=hexagon, color=black];
7225[label="204.133.181.94;s;956pkt 956fpkt", shape=hexagon, color=black];
7231[label="87.61.1.99;s;5pkt 5fpkt", shape=hexagon, color=black];
7257[label="73.244.42.190;s;22pkt 22fpkt", shape=hexagon, color=black];
7425[label="107.4.66.12;s;6853pkt 6853fpkt", shape=hexagon, color=black];
7504[label="192.89.135.167;s;224pkt 224fpkt", shape=hexagon, color=black];
7967[label="213.42.134.88;d;182pkt 182fpkt", shape=hexagon, color=black];
8137[label="193.132.223.17;s;5pkt 5fpkt", shape=hexagon, color=black];
8420[label="136.228.86.117;d;56pkt 56fpkt", shape=hexagon, color=black];
8528[label="164.25.70.80;d;136pkt 136fpkt", shape=hexagon, color=black];
8547[label="111.2.217.113;s;6pkt 6fpkt", shape=hexagon, color=black];
8709[label="101.178.185.220;s;12pkt 12fpkt", shape=hexagon, color=black];
8721[label="96.181.24.91;s;132pkt 132fpkt", shape=hexagon, color=black];
8782[label="197.64.166.108;s;3pkt 3fpkt", shape=hexagon, color=black];
9332[label="193.34.145.2;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9499[label="107.4.66.12;7314pkt 7314fpkt", shape=pentagon, color=darkviolet];
9592[label="194.65.22.17;8pkt 8fpkt", shape=pentagon, color=darkviolet];
9687[label="193.95.66.22;34pkt 34fpkt", shape=pentagon, color=darkviolet];
9724[label="193.95.66.24;34pkt 34fpkt", shape=pentagon, color=darkviolet];
9731[label="96.7.160.24;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9882[label="218.251.103.34;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9971[label="99.105.167.38;18pkt 18fpkt", shape=pentagon, color=darkviolet];
9985[label="108.208.132.39;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10075[label="193.52.137.43;22pkt 22fpkt", shape=pentagon, color=darkviolet];
10166[label="107.137.213.48;9pkt 9fpkt", shape=pentagon, color=darkviolet];
10248[label="99.135.117.53;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10301[label="50.85.48.57;26pkt 26fpkt", shape=pentagon, color=darkviolet];
10553[label="192.124.146.72;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10582[label="192.84.38.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
10657[label="96.180.81.78;15pkt 15fpkt", shape=pentagon, color=darkviolet];
10767[label="206.96.144.84;17pkt 17fpkt", shape=pentagon, color=darkviolet];
10819[label="107.116.141.87;34pkt 34fpkt", shape=pentagon, color=darkviolet];
10851[label="96.13.205.89;33pkt 33fpkt", shape=pentagon, color=darkviolet];
10852[label="107.137.213.89;16pkt 16fpkt", shape=pentagon, color=darkviolet];
10869[label="96.181.24.91;185pkt 185fpkt", shape=pentagon, color=darkviolet];
10989[label="87.61.1.99;5pkt 5fpkt", shape=pentagon, color=darkviolet];
11137[label="105.170.171.107;16pkt 16fpkt", shape=pentagon, color=darkviolet];
11151[label="197.64.166.108;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11285[label="192.84.38.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11320[label="110.138.202.120;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11408[label="77.163.168.127;3pkt 3fpkt", shape=pentagon, color=darkviolet];
11417[label="205.160.31.128;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11508[label="193.52.168.132;21pkt 21fpkt", shape=pentagon, color=darkviolet];
11739[label="217.53.14.147;61pkt 61fpkt", shape=pentagon, color=darkviolet];
11812[label="72.81.100.151;10pkt 10fpkt", shape=pentagon, color=darkviolet];
11980[label="108.129.217.162;16pkt 16fpkt", shape=pentagon, color=darkviolet];
12034[label="193.95.66.166;32pkt 32fpkt", shape=pentagon, color=darkviolet];
12058[label="125.255.163.167;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12135[label="100.0.83.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
12222[label="193.178.193.177;2pkt 2fpkt", shape=pentagon, color=darkviolet];
12281[label="108.129.217.181;801pkt 801fpkt", shape=pentagon, color=darkviolet];
12380[label="73.244.42.190;23pkt 23fpkt", shape=pentagon, color=darkviolet];
12474[label="107.67.17.196;44pkt 44fpkt", shape=pentagon, color=darkviolet];
12624[label="212.81.126.206;6pkt 6fpkt", shape=pentagon, color=darkviolet];
12667[label="109.64.21.209;5pkt 5fpkt", shape=pentagon, color=darkviolet];
12712[label="108.189.130.212;7pkt 7fpkt", shape=pentagon, color=darkviolet];
12822[label="101.178.185.220;19pkt 19fpkt", shape=pentagon, color=darkviolet];
12841[label="126.135.69.222;12pkt 12fpkt", shape=pentagon, color=darkviolet];
12859[label="217.53.13.224;47pkt 47fpkt", shape=pentagon, color=darkviolet];
12874[label="101.161.22.225;49pkt 49fpkt", shape=pentagon, color=darkviolet];
12908[label="217.53.13.227;85pkt 85fpkt", shape=pentagon, color=darkviolet];
13097[label="96.7.54.242;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13125[label="217.53.13.245;90pkt 90fpkt", shape=pentagon, color=darkviolet];
13129[label="208.133.97.245;12pkt 12fpkt", shape=pentagon, color=darkviolet];
13181[label="118.101.46.251;8pkt 8fpkt", shape=pentagon, color=darkviolet];
13189[label="213.87.131.251;1pkt 1fpkt", shape=pentagon, color=darkviolet];
13452[label="193.95.66.22;34pkt 34fpkt", shape=invtriangle, color=brown];
13468[label="193.95.66.24;34pkt 34fpkt", shape=invtriangle, color=brown];
13472[label="96.7.160.24;9pkt 9fpkt", shape=invtriangle, color=brown];
13711[label="107.137.213.48;8pkt 8fpkt", shape=invtriangle, color=brown];
13936[label="192.84.38.75;1pkt 1fpkt", shape=invtriangle, color=brown];
14044[label="107.116.141.87;34pkt 34fpkt", shape=invtriangle, color=brown];
14198[label="105.170.171.107;16pkt 16fpkt", shape=invtriangle, color=brown];
14207[label="197.64.166.108;3pkt 3fpkt", shape=invtriangle, color=brown];
14269[label="192.84.38.118;1pkt 1fpkt", shape=invtriangle, color=brown];
14286[label="110.138.202.120;1pkt 1fpkt", shape=invtriangle, color=brown];
14338[label="77.163.168.127;2pkt 2fpkt", shape=invtriangle, color=brown];
14387[label="193.52.168.132;21pkt 21fpkt", shape=invtriangle, color=brown];
14491[label="217.53.14.146;13pkt 13fpkt", shape=invtriangle, color=brown];
14624[label="108.129.217.162;16pkt 16fpkt", shape=invtriangle, color=brown];
15062[label="126.135.69.222;12pkt 12fpkt", shape=invtriangle, color=brown];
15187[label="96.7.54.242;13pkt 13fpkt", shape=invtriangle, color=brown];
15205[label="217.53.13.245;91pkt 91fpkt", shape=invtriangle, color=brown];
15208[label="208.133.97.245;12pkt 12fpkt", shape=invtriangle, color=brown];
15243[label="118.101.46.251;9pkt 9fpkt", shape=invtriangle, color=brown];
15379[label="193.95.66.22;34pkt 34fpkt", shape=invhouse, color=bisque];
15389[label="193.95.66.24;34pkt 34fpkt", shape=invhouse, color=bisque];
15496[label="107.137.213.48;9pkt 9fpkt", shape=invhouse, color=bisque];
15671[label="107.116.141.87;34pkt 34fpkt", shape=invhouse, color=bisque];
15760[label="197.64.166.108;2pkt 2fpkt", shape=invhouse, color=bisque];
15789[label="192.84.38.118;1pkt 1fpkt", shape=invhouse, color=bisque];
15824[label="77.163.168.127;2pkt 2fpkt", shape=invhouse, color=bisque];
16317[label="118.101.46.251;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1618[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.4.66.12:80, 213.42.135.210:*}[50.8938%]&lt;BR/&gt;{*:*, 164.25.79.54:*}[20.768%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.4551%)&lt;BR/&gt; 21: (0.908083%)&lt;BR/&gt; 20: (0.350646%)&lt;BR/&gt; 0: (0.16783%)&lt;BR/&gt; 443: (0.146852%)&gt;];
}
686--825[label="0.204703;148pkt 148fpkt"];
686--1394[label="0.875;7pkt 7fpkt"];
686--1442[label="0.4;2pkt 2fpkt"];
686--1509[label="0.057554;8pkt 8fpkt"];
686--1835[label="0.000433088;1pkt 1fpkt"];
686--1926[label="0.031746;6pkt 6fpkt"];
686--1969[label="0.833333;5pkt 5fpkt"];
686--2021[label="0.00348432;1pkt 1fpkt"];
686--2202[label="0.0849673;13pkt 13fpkt"];
686--2387[label="0.4;2pkt 2fpkt"];
686--2594[label="0.290698;50pkt 50fpkt"];
686--2656[label="0.5;1pkt 1fpkt"];
686--2717[label="0.00980392;3pkt 3fpkt"];
686--2769[label="0.40264;122pkt 122fpkt"];
686--2792[label="0.590214;193pkt 193fpkt"];
686--2819[label="0.0037037;1pkt 1fpkt"];
686--2841[label="0.4;4pkt 4fpkt"];
686--3120[label="0.0526316;1pkt 1fpkt"];
686--3198[label="0.974359;152pkt 152fpkt"];
686--3265[label="0.00460829;1pkt 1fpkt"];
686--3270[label="0.00787402;2pkt 2fpkt"];
686--3282[label="0.654088;104pkt 104fpkt"];
686--3707[label="0.5;4pkt 4fpkt"];
686--3791[label="0.245902;45pkt 45fpkt"];
686--3823[label="0.409091;9pkt 9fpkt"];
686--4177[label="0.017094;2pkt 2fpkt"];
686--4210[label="0.0136054;2pkt 2fpkt"];
686--4301[label="0.00564972;1pkt 1fpkt"];
686--4310[label="0.108696;5pkt 5fpkt"];
686--4362[label="0.445255;61pkt 61fpkt"];
686--4428[label="0.834586;111pkt 111fpkt"];
686--4429[label="0.840909;111pkt 111fpkt"];
686--4649[label="0.0144928;2pkt 2fpkt"];
686--4685[label="0.5;77pkt 77fpkt"];
686--4714[label="0.0769231;1pkt 1fpkt"];
686--4787[label="0.05;1pkt 1fpkt"];
686--4835[label="0.363636;4pkt 4fpkt"];
686--5072[label="0.03;3pkt 3fpkt"];
686--5178[label="0.333333;1pkt 1fpkt"];
686--5485[label="0.272727;9pkt 9fpkt"];
686--5562[label="0.718182;79pkt 79fpkt"];
686--5769[label="0.666667;2pkt 2fpkt"];
686--6080[label="0.5;1pkt 1fpkt"];
686--6223[label="0.000433088;1pkt 1fpkt"];
686--6354[label="0.106383;10pkt 10fpkt"];
686--6770[label="1;2479pkt 2479fpkt"];
686--6792[label="0.204703;148pkt 148fpkt"];
686--7061[label="0.0526316;1pkt 1fpkt"];
686--7175[label="0.5;3pkt 3fpkt"];
686--7227[label="0.704918;86pkt 86fpkt"];
686--7231[label="0.4;2pkt 2fpkt"];
686--7257[label="0.409091;9pkt 9fpkt"];
686--7459[label="0.031746;6pkt 6fpkt"];
686--7504[label="0.366071;82pkt 82fpkt"];
686--7539[label="0.4;4pkt 4fpkt"];
686--7562[label="0.0833333;3pkt 3fpkt"];
686--7839[label="0.458716;50pkt 50fpkt"];
686--7842[label="0.00952381;2pkt 2fpkt"];
686--7872[label="0.0769231;1pkt 1fpkt"];
686--7980[label="0.445255;61pkt 61fpkt"];
686--8157[label="0.0144928;2pkt 2fpkt"];
686--8206[label="0.00732601;2pkt 2fpkt"];
686--8213[label="0.0136054;2pkt 2fpkt"];
686--8224[label="0.00460829;1pkt 1fpkt"];
686--8233[label="0.584967;179pkt 179fpkt"];
686--8390[label="0.4;2pkt 2fpkt"];
686--8547[label="0.833333;5pkt 5fpkt"];
686--8557[label="0.974359;152pkt 152fpkt"];
686--8709[label="0.333333;4pkt 4fpkt"];
686--8721[label="0.840909;111pkt 111fpkt"];
686--8782[label="0.666667;2pkt 2fpkt"];
686--9055[label="0.000484496;1pkt 1fpkt"];
686--9100[label="0.445255;61pkt 61fpkt"];
686--9104[label="0.0526316;1pkt 1fpkt"];
686--9141[label="0.363636;4pkt 4fpkt"];
686--9163[label="0.067553;188pkt 188fpkt"];
686--9176[label="0.00268817;2pkt 2fpkt"];
686--9194[label="0.0851599;237pkt 237fpkt"];
686--9198[label="0.0582106;162pkt 162fpkt"];
686--9199[label="0.00297177;2pkt 2fpkt"];
686--9216[label="0.00268817;2pkt 2fpkt"];
686--9234[label="0.0851599;237pkt 237fpkt"];
686--9250[label="0.00268817;2pkt 2fpkt"];
686--9268[label="0.0851599;237pkt 237fpkt"];
686--9332[label="0.333333;2pkt 2fpkt"];
686--9592[label="0.75;6pkt 6fpkt"];
686--9687[label="0.205882;7pkt 7fpkt"];
686--9724[label="0.205882;7pkt 7fpkt"];
686--9731[label="0.6;6pkt 6fpkt"];
686--9732[label="0.529412;9pkt 9fpkt"];
686--9882[label="1;1pkt 1fpkt"];
686--9985[label="0.375;6pkt 6fpkt"];
686--10075[label="0.409091;9pkt 9fpkt"];
686--10166[label="0.555556;5pkt 5fpkt"];
686--10248[label="0.4;6pkt 6fpkt"];
686--10301[label="0.692308;18pkt 18fpkt"];
686--10553[label="0.25;1pkt 1fpkt"];
686--10582[label="1;1pkt 1fpkt"];
686--10657[label="0.266667;4pkt 4fpkt"];
686--10767[label="0.411765;7pkt 7fpkt"];
686--10789[label="0.0298507;6pkt 6fpkt"];
686--10819[label="0.0294118;1pkt 1fpkt"];
686--10851[label="0.242424;8pkt 8fpkt"];
686--10852[label="0.8125;13pkt 13fpkt"];
686--10869[label="0.664865;123pkt 123fpkt"];
686--10931[label="0.04;1pkt 1fpkt"];
686--10989[label="0.4;2pkt 2fpkt"];
686--11137[label="1;16pkt 16fpkt"];
686--11151[label="1;2pkt 2fpkt"];
686--11320[label="0.5;1pkt 1fpkt"];
686--11365[label="0.0555556;1pkt 1fpkt"];
686--11441[label="0.0833333;1pkt 1fpkt"];
686--11508[label="0.047619;1pkt 1fpkt"];
686--11572[label="0.02;1pkt 1fpkt"];
686--11707[label="0.263158;5pkt 5fpkt"];
686--11739[label="0.52459;32pkt 32fpkt"];
686--11812[label="0.6;6pkt 6fpkt"];
686--11887[label="0.0769231;1pkt 1fpkt"];
686--11920[label="0.0136986;2pkt 2fpkt"];
686--11943[label="0.569322;193pkt 193fpkt"];
686--11980[label="0.1875;3pkt 3fpkt"];
686--12034[label="0.21875;7pkt 7fpkt"];
686--12095[label="0.00531915;1pkt 1fpkt"];
686--12222[label="0.5;1pkt 1fpkt"];
686--12231[label="0.371429;13pkt 13fpkt"];
686--12281[label="0.184769;148pkt 148fpkt"];
686--12380[label="0.434783;10pkt 10fpkt"];
686--12474[label="0.340909;15pkt 15fpkt"];
686--12624[label="0.5;3pkt 3fpkt"];
686--12667[label="0.4;2pkt 2fpkt"];
686--12712[label="0.571429;4pkt 4fpkt"];
686--12816[label="0.566667;17pkt 17fpkt"];
686--12822[label="0.263158;5pkt 5fpkt"];
686--12841[label="0.5;6pkt 6fpkt"];
686--12859[label="0.744681;35pkt 35fpkt"];
686--12874[label="0.326531;16pkt 16fpkt"];
686--12890[label="0.514851;104pkt 104fpkt"];
686--12908[label="0.294118;25pkt 25fpkt"];
686--13097[label="0.166667;2pkt 2fpkt"];
686--13125[label="0.922222;83pkt 83fpkt"];
686--13129[label="0.0833333;1pkt 1fpkt"];
686--13181[label="0.5;4pkt 4fpkt"];
686--13452[label="0.205882;7pkt 7fpkt"];
686--13468[label="0.205882;7pkt 7fpkt"];
686--13472[label="0.666667;6pkt 6fpkt"];
686--13711[label="0.625;5pkt 5fpkt"];
686--13936[label="1;1pkt 1fpkt"];
686--14044[label="0.0294118;1pkt 1fpkt"];
686--14093[label="0.04;1pkt 1fpkt"];
686--14198[label="1;16pkt 16fpkt"];
686--14207[label="0.666667;2pkt 2fpkt"];
686--14286[label="1;1pkt 1fpkt"];
686--14313[label="0.0526316;1pkt 1fpkt"];
686--14387[label="0.047619;1pkt 1fpkt"];
686--14491[label="0.461538;6pkt 6fpkt"];
686--14577[label="0.0769231;1pkt 1fpkt"];
686--14624[label="0.1875;3pkt 3fpkt"];
686--14679[label="0.00531915;1pkt 1fpkt"];
686--14749[label="0.371429;13pkt 13fpkt"];
686--15062[label="0.5;6pkt 6fpkt"];
686--15090[label="0.512315;104pkt 104fpkt"];
686--15187[label="0.153846;2pkt 2fpkt"];
686--15205[label="0.923077;84pkt 84fpkt"];
686--15208[label="0.0833333;1pkt 1fpkt"];
686--15243[label="0.444444;4pkt 4fpkt"];
686--15379[label="0.205882;7pkt 7fpkt"];
686--15389[label="0.205882;7pkt 7fpkt"];
686--15496[label="0.555556;5pkt 5fpkt"];
686--15671[label="0.0294118;1pkt 1fpkt"];
686--15760[label="1;2pkt 2fpkt"];
686--16010[label="0.00534759;1pkt 1fpkt"];
686--16043[label="0.382353;13pkt 13fpkt"];
686--16317[label="0.444444;4pkt 4fpkt"];
824--1100[label="0.332902;257pkt 257fpkt"];
824--2936[label="0.284314;58pkt 58fpkt"];
824--6206[label="0.000588235;1pkt 1fpkt"];
824--6209[label="0.735736;5042pkt 5042fpkt"];
824--7147[label="0.348028;150pkt 150fpkt"];
824--7425[label="1;6853pkt 6853fpkt"];
824--7967[label="0.269231;49pkt 49fpkt"];
824--8871[label="0.000588235;1pkt 1fpkt"];
824--9163[label="0.0604115;414pkt 414fpkt"];
824--9194[label="0.0748577;513pkt 513fpkt"];
824--9198[label="0.0750036;514pkt 514fpkt"];
824--9234[label="0.0748577;513pkt 513fpkt"];
824--9268[label="0.0748577;513pkt 513fpkt"];
824--9499[label="0.999854;6852pkt 6852fpkt"];
825--983[label="0.197787;143pkt 143fpkt"];
825--1018[label="0.0138313;10pkt 10fpkt"];
825--1077[label="0.0207469;15pkt 15fpkt"];
825--1100[label="0.00138313;1pkt 1fpkt"];
825--1144[label="0.00716846;2pkt 2fpkt"];
825--1331[label="0.139037;78pkt 78fpkt"];
825--1381[label="0.0525588;38pkt 38fpkt"];
825--1447[label="0.124481;90pkt 90fpkt"];
825--2297[label="0.173228;44pkt 44fpkt"];
825--2632[label="0.0714286;5pkt 5fpkt"];
825--4817[label="0.14;7pkt 7fpkt"];
825--5275[label="0.142857;10pkt 10fpkt"];
825--5477[label="0.16129;5pkt 5fpkt"];
825--6095[label="0.0707351;51pkt 51fpkt"];
825--6206[label="0.0414938;30pkt 30fpkt"];
825--6394[label="0.149425;26pkt 26fpkt"];
825--6517[label="0.0138313;10pkt 10fpkt"];
825--6540[label="0.016129;2pkt 2fpkt"];
825--6770[label="0.185339;134pkt 134fpkt"];
825--6792[label="1;723pkt 723fpkt"];
825--6811[label="0.15;81pkt 81fpkt"];
825--7147[label="0.00232019;1pkt 1fpkt"];
825--8420[label="0.178571;10pkt 10fpkt"];
825--8871[label="0.0414938;30pkt 30fpkt"];
825--9163[label="0.0484094;35pkt 35fpkt"];
825--9194[label="0.0733057;53pkt 53fpkt"];
825--9198[label="0.0622407;45pkt 45fpkt"];
825--9234[label="0.0733057;53pkt 53fpkt"];
825--9268[label="0.0733057;53pkt 53fpkt"];
825--12281[label="1;723pkt 723fpkt"];
1100--1926[label="0.00529101;1pkt 1fpkt"];
1100--2769[label="0.00990099;3pkt 3fpkt"];
1100--2792[label="0.0152905;5pkt 5fpkt"];
1100--2816[label="0.00840336;1pkt 1fpkt"];
1100--2873[label="0.00854701;1pkt 1fpkt"];
1100--3907[label="0.0333333;1pkt 1fpkt"];
1100--4155[label="0.8;4pkt 4fpkt"];
1100--4264[label="0.00584795;1pkt 1fpkt"];
1100--5232[label="0.311111;42pkt 42fpkt"];
1100--5485[label="0.484848;16pkt 16fpkt"];
1100--6792[label="0.00138313;1pkt 1fpkt"];
1100--7147[label="1;431pkt 431fpkt"];
1100--7425[label="0.332902;257pkt 257fpkt"];
1100--7459[label="0.00529101;1pkt 1fpkt"];
1100--7504[label="0.0133929;3pkt 3fpkt"];
1100--7553[label="0.0113636;1pkt 1fpkt"];
1100--7866[label="0.00840336;1pkt 1fpkt"];
1100--8137[label="0.8;4pkt 4fpkt"];
1100--8233[label="0.0163399;5pkt 5fpkt"];
1100--8265[label="0.00645161;1pkt 1fpkt"];
1100--8369[label="0.392523;42pkt 42fpkt"];
1100--9084[label="0.00645161;1pkt 1fpkt"];
1100--9163[label="0.0453368;35pkt 35fpkt"];
1100--9194[label="0.0777202;60pkt 60fpkt"];
1100--9198[label="0.0531088;41pkt 41fpkt"];
1100--9234[label="0.0777202;60pkt 60fpkt"];
1100--9268[label="0.0777202;60pkt 60fpkt"];
1100--9300[label="0.00561798;1pkt 1fpkt"];
1100--9332[label="0.166667;1pkt 1fpkt"];
1100--9499[label="0.332902;257pkt 257fpkt"];
1100--9687[label="0.470588;16pkt 16fpkt"];
1100--9724[label="0.470588;16pkt 16fpkt"];
1100--9971[label="0.944444;17pkt 17fpkt"];
1100--10075[label="0.318182;7pkt 7fpkt"];
1100--10106[label="0.0294118;1pkt 1fpkt"];
1100--10789[label="0.00497512;1pkt 1fpkt"];
1100--11285[label="1;1pkt 1fpkt"];
1100--11943[label="0.0147493;5pkt 5fpkt"];
1100--11980[label="0.125;2pkt 2fpkt"];
1100--12034[label="0.5;16pkt 16fpkt"];
1100--12231[label="0.0857143;3pkt 3fpkt"];
1100--12264[label="0.666667;8pkt 8fpkt"];
1100--12281[label="0.00129534;1pkt 1fpkt"];
1100--12474[label="0.0681818;3pkt 3fpkt"];
1100--12773[label="0.0434783;1pkt 1fpkt"];
1100--12868[label="0.307692;4pkt 4fpkt"];
1100--12874[label="0.612245;30pkt 30fpkt"];
1100--13255[label="0.00564972;1pkt 1fpkt"];
1100--13452[label="0.470588;16pkt 16fpkt"];
1100--13468[label="0.470588;16pkt 16fpkt"];
1100--14269[label="1;1pkt 1fpkt"];
1100--14624[label="0.125;2pkt 2fpkt"];
1100--14749[label="0.0857143;3pkt 3fpkt"];
1100--15024[label="0.0434783;1pkt 1fpkt"];
1100--15379[label="0.470588;16pkt 16fpkt"];
1100--15389[label="0.470588;16pkt 16fpkt"];
1100--15789[label="1;1pkt 1fpkt"];
1100--16043[label="0.0882353;3pkt 3fpkt"];
1100--16206[label="0.0454545;1pkt 1fpkt"];
1394--1857[label="0.125;1pkt 1fpkt"];
1394--6080[label="1;2pkt 2fpkt"];
1394--6770[label="0.875;7pkt 7fpkt"];
1394--8528[label="0.125;1pkt 1fpkt"];
1442--1857[label="0.2;1pkt 1fpkt"];
1442--6206[label="0.4;2pkt 2fpkt"];
1442--6770[label="0.4;2pkt 2fpkt"];
1442--7231[label="1;5pkt 5fpkt"];
1442--8528[label="0.2;1pkt 1fpkt"];
1442--8871[label="0.4;2pkt 2fpkt"];
1442--10989[label="1;5pkt 5fpkt"];
1857--1964[label="0.2;1pkt 1fpkt"];
1857--1969[label="0.166667;1pkt 1fpkt"];
1857--2656[label="0.5;1pkt 1fpkt"];
1857--2709[label="1;1pkt 1fpkt"];
1857--2734[label="1;1pkt 1fpkt"];
1857--3169[label="1;1pkt 1fpkt"];
1857--3408[label="1;1pkt 1fpkt"];
1857--3707[label="0.125;1pkt 1fpkt"];
1857--3823[label="0.0909091;2pkt 2fpkt"];
1857--4095[label="1;3pkt 3fpkt"];
1857--4163[label="0.0666667;1pkt 1fpkt"];
1857--4835[label="0.272727;3pkt 3fpkt"];
1857--5178[label="0.333333;1pkt 1fpkt"];
1857--5582[label="1;1pkt 1fpkt"];
1857--6080[label="0.5;1pkt 1fpkt"];
1857--6289[label="0.2;1pkt 1fpkt"];
1857--7175[label="0.166667;1pkt 1fpkt"];
1857--7231[label="0.2;1pkt 1fpkt"];
1857--7257[label="0.0909091;2pkt 2fpkt"];
1857--7399[label="1;2pkt 2fpkt"];
1857--7438[label="0.0666667;1pkt 1fpkt"];
1857--8528[label="1;136pkt 136fpkt"];
1857--8547[label="0.166667;1pkt 1fpkt"];
1857--8565[label="1;1pkt 1fpkt"];
1857--8709[label="0.333333;4pkt 4fpkt"];
1857--9141[label="0.272727;3pkt 3fpkt"];
1857--9176[label="0.00735294;1pkt 1fpkt"];
1857--9194[label="0.00735294;1pkt 1fpkt"];
1857--9198[label="0.00735294;1pkt 1fpkt"];
1857--9199[label="0.00735294;1pkt 1fpkt"];
1857--9216[label="0.00735294;1pkt 1fpkt"];
1857--9234[label="0.00735294;1pkt 1fpkt"];
1857--9250[label="0.00735294;1pkt 1fpkt"];
1857--9268[label="0.00735294;1pkt 1fpkt"];
1857--10831[label="0.333333;1pkt 1fpkt"];
1857--10989[label="0.2;1pkt 1fpkt"];
1857--11060[label="0.5;1pkt 1fpkt"];
1857--11320[label="0.5;1pkt 1fpkt"];
1857--11408[label="1;3pkt 3fpkt"];
1857--11417[label="1;1pkt 1fpkt"];
1857--11855[label="1;1pkt 1fpkt"];
1857--12058[label="1;6pkt 6fpkt"];
1857--12135[label="1;1pkt 1fpkt"];
1857--12380[label="0.0434783;1pkt 1fpkt"];
1857--12514[label="1;2pkt 2fpkt"];
1857--12624[label="0.166667;1pkt 1fpkt"];
1857--12822[label="0.421053;8pkt 8fpkt"];
1857--13189[label="1;1pkt 1fpkt"];
1857--14048[label="0.333333;1pkt 1fpkt"];
1857--14338[label="1;2pkt 2fpkt"];
1857--14557[label="1;1pkt 1fpkt"];
1857--15243[label="0.111111;1pkt 1fpkt"];
1857--15824[label="1;2pkt 2fpkt"];
1857--15940[label="1;1pkt 1fpkt"];
1857--16317[label="0.111111;1pkt 1fpkt"];
1964--6206[label="0.6;3pkt 3fpkt"];
1964--6289[label="1;5pkt 5fpkt"];
1964--8528[label="0.2;1pkt 1fpkt"];
1964--8871[label="0.6;3pkt 3fpkt"];
1969--6770[label="0.666667;4pkt 4fpkt"];
1969--8528[label="0.166667;1pkt 1fpkt"];
1969--8547[label="1;6pkt 6fpkt"];
2202--6206[label="0.287582;44pkt 44fpkt"];
2202--6354[label="1;94pkt 94fpkt"];
2202--6770[label="0.0653595;10pkt 10fpkt"];
2202--8871[label="0.287582;44pkt 44fpkt"];
2202--9163[label="0.0261438;4pkt 4fpkt"];
2202--9194[label="0.0849673;13pkt 13fpkt"];
2202--9198[label="0.202614;31pkt 31fpkt"];
2202--9234[label="0.0849673;13pkt 13fpkt"];
2202--9268[label="0.0849673;13pkt 13fpkt"];
2362--4817[label="0.130435;3pkt 3fpkt"];
2362--4839[label="0.0869565;2pkt 2fpkt"];
2362--9198[label="0.608696;14pkt 14fpkt"];
2656--6770[label="0.5;1pkt 1fpkt"];
2656--8528[label="0.5;1pkt 1fpkt"];
2656--11320[label="1;2pkt 2fpkt"];
2656--14286[label="1;1pkt 1fpkt"];
2734--8528[label="1;1pkt 1fpkt"];
2734--12135[label="1;1pkt 1fpkt"];
3169--8528[label="1;1pkt 1fpkt"];
3169--11417[label="1;1pkt 1fpkt"];
3408--8528[label="1;1pkt 1fpkt"];
3707--6206[label="0.125;1pkt 1fpkt"];
3707--6770[label="0.5;4pkt 4fpkt"];
3707--7175[label="1;6pkt 6fpkt"];
3707--8528[label="0.125;1pkt 1fpkt"];
3707--8871[label="0.125;1pkt 1fpkt"];
3707--13181[label="0.875;7pkt 7fpkt"];
3707--15243[label="1;8pkt 8fpkt"];
3707--16317[label="1;8pkt 8fpkt"];
3791--6206[label="0.448087;82pkt 82fpkt"];
3791--6770[label="0.191257;35pkt 35fpkt"];
3791--8871[label="0.448087;82pkt 82fpkt"];
3791--9163[label="0.0491803;9pkt 9fpkt"];
3791--9194[label="0.0655738;12pkt 12fpkt"];
3791--9198[label="0.0819672;15pkt 15fpkt"];
3791--9234[label="0.0655738;12pkt 12fpkt"];
3791--9268[label="0.0655738;12pkt 12fpkt"];
3823--6206[label="0.318182;7pkt 7fpkt"];
3823--6770[label="0.409091;9pkt 9fpkt"];
3823--7257[label="1;22pkt 22fpkt"];
3823--8528[label="0.0909091;2pkt 2fpkt"];
3823--8871[label="0.318182;7pkt 7fpkt"];
3823--12380[label="0.954545;21pkt 21fpkt"];
3907--6209[label="0.6;18pkt 18fpkt"];
3907--7147[label="0.0333333;1pkt 1fpkt"];
3907--9194[label="0.0666667;2pkt 2fpkt"];
3907--9198[label="0.133333;4pkt 4fpkt"];
3907--9234[label="0.0666667;2pkt 2fpkt"];
3907--9268[label="0.0666667;2pkt 2fpkt"];
3907--10106[label="1;30pkt 30fpkt"];
4155--7147[label="0.4;2pkt 2fpkt"];
4155--8137[label="1;5pkt 5fpkt"];
4155--9163[label="0.2;1pkt 1fpkt"];
4429--6770[label="0.840909;111pkt 111fpkt"];
4429--8721[label="1;132pkt 132fpkt"];
4429--9194[label="0.295455;39pkt 39fpkt"];
4429--9234[label="0.295455;39pkt 39fpkt"];
4429--9268[label="0.295455;39pkt 39fpkt"];
4429--10869[label="1;132pkt 132fpkt"];
4817--6792[label="0.14;7pkt 7fpkt"];
4817--7225[label="0.02;1pkt 1fpkt"];
4817--9194[label="0.08;4pkt 4fpkt"];
4817--9198[label="0.1;5pkt 5fpkt"];
4817--9234[label="0.08;4pkt 4fpkt"];
4817--9268[label="0.08;4pkt 4fpkt"];
4817--12281[label="0.14;7pkt 7fpkt"];
4835--6206[label="0.0909091;1pkt 1fpkt"];
4835--6770[label="0.272727;3pkt 3fpkt"];
4835--8528[label="0.272727;3pkt 3fpkt"];
4835--8709[label="1;11pkt 11fpkt"];
4835--8871[label="0.0909091;1pkt 1fpkt"];
4835--9141[label="1;11pkt 11fpkt"];
4835--12822[label="1;11pkt 11fpkt"];
4839--9194[label="0.0344828;1pkt 1fpkt"];
4839--9234[label="0.0344828;1pkt 1fpkt"];
4839--9268[label="0.0344828;1pkt 1fpkt"];
4839--12651[label="0.0689655;2pkt 2fpkt"];
5178--6206[label="0.333333;1pkt 1fpkt"];
5178--6770[label="0.333333;1pkt 1fpkt"];
5178--8528[label="0.333333;1pkt 1fpkt"];
5178--8871[label="0.333333;1pkt 1fpkt"];
5275--6792[label="0.142857;10pkt 10fpkt"];
5275--8420[label="1;56pkt 56fpkt"];
5275--9198[label="0.3;21pkt 21fpkt"];
5275--11980[label="0.0625;1pkt 1fpkt"];
5275--12281[label="0.142857;10pkt 10fpkt"];
5275--14624[label="0.0625;1pkt 1fpkt"];
5477--6792[label="0.16129;5pkt 5fpkt"];
5477--7195[label="0.0322581;1pkt 1fpkt"];
5477--9163[label="0.258065;8pkt 8fpkt"];
5477--9194[label="0.0645161;2pkt 2fpkt"];
5477--9198[label="0.0967742;3pkt 3fpkt"];
5477--9234[label="0.0645161;2pkt 2fpkt"];
5477--9268[label="0.0645161;2pkt 2fpkt"];
5477--12281[label="0.16129;5pkt 5fpkt"];
5484--7494[label="0.142857;1pkt 1fpkt"];
5484--9198[label="0.428571;3pkt 3fpkt"];
5484--13129[label="0.571429;4pkt 4fpkt"];
5484--15208[label="0.571429;4pkt 4fpkt"];
5485--6206[label="0.0909091;3pkt 3fpkt"];
5485--6770[label="0.272727;9pkt 9fpkt"];
5485--7147[label="0.121212;4pkt 4fpkt"];
5485--8871[label="0.0909091;3pkt 3fpkt"];
5485--9163[label="0.0909091;3pkt 3fpkt"];
5485--9194[label="0.0606061;2pkt 2fpkt"];
5485--9198[label="0.0606061;2pkt 2fpkt"];
5485--9234[label="0.0606061;2pkt 2fpkt"];
5485--9268[label="0.0606061;2pkt 2fpkt"];
5582--8528[label="1;1pkt 1fpkt"];
5769--6770[label="0.666667;2pkt 2fpkt"];
5769--8782[label="1;3pkt 3fpkt"];
5769--9198[label="0.666667;2pkt 2fpkt"];
5769--11151[label="1;2pkt 2fpkt"];
5769--14207[label="1;3pkt 3fpkt"];
5769--15760[label="1;2pkt 2fpkt"];
6080--6770[label="0.5;1pkt 1fpkt"];
6080--8528[label="0.5;1pkt 1fpkt"];
6354--6770[label="0.106383;10pkt 10fpkt"];
6354--8871[label="0.468085;44pkt 44fpkt"];
6354--9163[label="0.0425532;4pkt 4fpkt"];
6354--9194[label="0.138298;13pkt 13fpkt"];
6354--9234[label="0.138298;13pkt 13fpkt"];
6354--9268[label="0.138298;13pkt 13fpkt"];
6770--6792[label="0.185339;134pkt 134fpkt"];
6770--7061[label="0.0526316;1pkt 1fpkt"];
6770--7175[label="0.5;3pkt 3fpkt"];
6770--7227[label="0.704918;86pkt 86fpkt"];
6770--7231[label="0.4;2pkt 2fpkt"];
6770--7257[label="0.409091;9pkt 9fpkt"];
6770--7459[label="0.031746;6pkt 6fpkt"];
6770--7504[label="0.366071;82pkt 82fpkt"];
6770--7539[label="0.4;4pkt 4fpkt"];
6770--7562[label="0.0833333;3pkt 3fpkt"];
6770--7839[label="0.458716;50pkt 50fpkt"];
6770--7842[label="0.00952381;2pkt 2fpkt"];
6770--7872[label="0.0769231;1pkt 1fpkt"];
6770--7980[label="0.445255;61pkt 61fpkt"];
6770--8157[label="0.0144928;2pkt 2fpkt"];
6770--8206[label="0.00732601;2pkt 2fpkt"];
6770--8213[label="0.0136054;2pkt 2fpkt"];
6770--8224[label="0.00460829;1pkt 1fpkt"];
6770--8233[label="0.584967;179pkt 179fpkt"];
6770--8390[label="0.4;2pkt 2fpkt"];
6770--8547[label="0.666667;4pkt 4fpkt"];
6770--8557[label="0.916667;143pkt 143fpkt"];
6770--8709[label="0.25;3pkt 3fpkt"];
6770--8721[label="0.840909;111pkt 111fpkt"];
6770--8782[label="0.666667;2pkt 2fpkt"];
6770--9055[label="0.000484496;1pkt 1fpkt"];
6770--9100[label="0.445255;61pkt 61fpkt"];
6770--9104[label="0.0526316;1pkt 1fpkt"];
6770--9141[label="0.272727;3pkt 3fpkt"];
6770--9163[label="0.075837;188pkt 188fpkt"];
6770--9176[label="0.00268817;2pkt 2fpkt"];
6770--9194[label="0.0956031;237pkt 237fpkt"];
6770--9198[label="0.0282372;70pkt 70fpkt"];
6770--9199[label="0.00297177;2pkt 2fpkt"];
6770--9216[label="0.00268817;2pkt 2fpkt"];
6770--9234[label="0.0956031;237pkt 237fpkt"];
6770--9250[label="0.00268817;2pkt 2fpkt"];
6770--9268[label="0.0956031;237pkt 237fpkt"];
6770--9332[label="0.333333;2pkt 2fpkt"];
6770--9592[label="0.75;6pkt 6fpkt"];
6770--9687[label="0.205882;7pkt 7fpkt"];
6770--9724[label="0.205882;7pkt 7fpkt"];
6770--9731[label="0.6;6pkt 6fpkt"];
6770--9732[label="0.470588;8pkt 8fpkt"];
6770--9882[label="1;1pkt 1fpkt"];
6770--9985[label="0.1875;3pkt 3fpkt"];
6770--10075[label="0.318182;7pkt 7fpkt"];
6770--10166[label="0.555556;5pkt 5fpkt"];
6770--10248[label="0.333333;5pkt 5fpkt"];
6770--10301[label="0.461538;12pkt 12fpkt"];
6770--10553[label="0.25;1pkt 1fpkt"];
6770--10582[label="1;1pkt 1fpkt"];
6770--10657[label="0.2;3pkt 3fpkt"];
6770--10767[label="0.411765;7pkt 7fpkt"];
6770--10789[label="0.0298507;6pkt 6fpkt"];
6770--10819[label="0.0294118;1pkt 1fpkt"];
6770--10851[label="0.181818;6pkt 6fpkt"];
6770--10852[label="0.8125;13pkt 13fpkt"];
6770--10869[label="0.664865;123pkt 123fpkt"];
6770--10989[label="0.4;2pkt 2fpkt"];
6770--11137[label="1;16pkt 16fpkt"];
6770--11151[label="1;2pkt 2fpkt"];
6770--11320[label="0.5;1pkt 1fpkt"];
6770--11365[label="0.0555556;1pkt 1fpkt"];
6770--11441[label="0.0833333;1pkt 1fpkt"];
6770--11508[label="0.047619;1pkt 1fpkt"];
6770--11572[label="0.02;1pkt 1fpkt"];
6770--11707[label="0.263158;5pkt 5fpkt"];
6770--11739[label="0.393443;24pkt 24fpkt"];
6770--11812[label="0.6;6pkt 6fpkt"];
6770--11887[label="0.0769231;1pkt 1fpkt"];
6770--11920[label="0.0136986;2pkt 2fpkt"];
6770--11943[label="0.528024;179pkt 179fpkt"];
6770--11980[label="0.1875;3pkt 3fpkt"];
6770--12034[label="0.1875;6pkt 6fpkt"];
6770--12222[label="0.5;1pkt 1fpkt"];
6770--12231[label="0.371429;13pkt 13fpkt"];
6770--12281[label="0.167291;134pkt 134fpkt"];
6770--12380[label="0.391304;9pkt 9fpkt"];
6770--12474[label="0.340909;15pkt 15fpkt"];
6770--12624[label="0.5;3pkt 3fpkt"];
6770--12816[label="0.533333;16pkt 16fpkt"];
6770--12822[label="0.210526;4pkt 4fpkt"];
6770--12841[label="0.5;6pkt 6fpkt"];
6770--12859[label="0.744681;35pkt 35fpkt"];
6770--12874[label="0.163265;8pkt 8fpkt"];
6770--12890[label="0.460396;93pkt 93fpkt"];
6770--12908[label="0.188235;16pkt 16fpkt"];
6770--13097[label="0.166667;2pkt 2fpkt"];
6770--13125[label="0.822222;74pkt 74fpkt"];
6770--13129[label="0.0833333;1pkt 1fpkt"];
6770--13181[label="0.5;4pkt 4fpkt"];
6770--13452[label="0.205882;7pkt 7fpkt"];
6770--13468[label="0.205882;7pkt 7fpkt"];
6770--13472[label="0.666667;6pkt 6fpkt"];
6770--13711[label="0.625;5pkt 5fpkt"];
6770--13936[label="1;1pkt 1fpkt"];
6770--14044[label="0.0294118;1pkt 1fpkt"];
6770--14198[label="1;16pkt 16fpkt"];
6770--14207[label="0.666667;2pkt 2fpkt"];
6770--14286[label="1;1pkt 1fpkt"];
6770--14313[label="0.0526316;1pkt 1fpkt"];
6770--14387[label="0.047619;1pkt 1fpkt"];
6770--14491[label="0.307692;4pkt 4fpkt"];
6770--14577[label="0.0769231;1pkt 1fpkt"];
6770--14624[label="0.1875;3pkt 3fpkt"];
6770--14749[label="0.371429;13pkt 13fpkt"];
6770--15062[label="0.5;6pkt 6fpkt"];
6770--15090[label="0.458128;93pkt 93fpkt"];
6770--15187[label="0.153846;2pkt 2fpkt"];
6770--15205[label="0.824176;75pkt 75fpkt"];
6770--15208[label="0.0833333;1pkt 1fpkt"];
6770--15243[label="0.444444;4pkt 4fpkt"];
6770--15379[label="0.205882;7pkt 7fpkt"];
6770--15389[label="0.205882;7pkt 7fpkt"];
6770--15496[label="0.555556;5pkt 5fpkt"];
6770--15671[label="0.0294118;1pkt 1fpkt"];
6770--15760[label="1;2pkt 2fpkt"];
6770--16043[label="0.382353;13pkt 13fpkt"];
6770--16317[label="0.444444;4pkt 4fpkt"];
7147--7425[label="0.348028;150pkt 150fpkt"];
7147--7504[label="0.00892857;2pkt 2fpkt"];
7147--7866[label="0.00840336;1pkt 1fpkt"];
7147--8137[label="0.4;2pkt 2fpkt"];
7147--8233[label="0.00653595;2pkt 2fpkt"];
7147--8369[label="0.345794;37pkt 37fpkt"];
7147--9163[label="0.0812065;35pkt 35fpkt"];
7147--9194[label="0.139211;60pkt 60fpkt"];
7147--9234[label="0.139211;60pkt 60fpkt"];
7147--9268[label="0.139211;60pkt 60fpkt"];
7147--9332[label="0.166667;1pkt 1fpkt"];
7147--9499[label="0.348028;150pkt 150fpkt"];
7147--9687[label="0.117647;4pkt 4fpkt"];
7147--9724[label="0.147059;5pkt 5fpkt"];
7147--9971[label="0.5;9pkt 9fpkt"];
7147--10075[label="0.181818;4pkt 4fpkt"];
7147--10106[label="0.0294118;1pkt 1fpkt"];
7147--11285[label="1;1pkt 1fpkt"];
7147--11943[label="0.00589971;2pkt 2fpkt"];
7147--11980[label="0.125;2pkt 2fpkt"];
7147--12034[label="0.15625;5pkt 5fpkt"];
7147--12231[label="0.0857143;3pkt 3fpkt"];
7147--12264[label="0.583333;7pkt 7fpkt"];
7147--12281[label="0.00232019;1pkt 1fpkt"];
7147--12868[label="0.307692;4pkt 4fpkt"];
7147--12874[label="0.469388;23pkt 23fpkt"];
7147--13452[label="0.117647;4pkt 4fpkt"];
7147--13468[label="0.147059;5pkt 5fpkt"];
7147--14269[label="1;1pkt 1fpkt"];
7147--14624[label="0.125;2pkt 2fpkt"];
7147--14749[label="0.0857143;3pkt 3fpkt"];
7147--15379[label="0.117647;4pkt 4fpkt"];
7147--15389[label="0.147059;5pkt 5fpkt"];
7147--15789[label="1;1pkt 1fpkt"];
7147--16043[label="0.0882353;3pkt 3fpkt"];
7175--8528[label="0.166667;1pkt 1fpkt"];
7175--8871[label="0.166667;1pkt 1fpkt"];
7175--13181[label="0.833333;5pkt 5fpkt"];
7175--15243[label="1;6pkt 6fpkt"];
7175--16317[label="1;6pkt 6fpkt"];
7225--8701[label="0.012987;1pkt 1fpkt"];
7225--9163[label="0.0679916;65pkt 65fpkt"];
7225--9194[label="0.0669456;64pkt 64fpkt"];
7225--9198[label="0.0230126;22pkt 22fpkt"];
7225--9234[label="0.0669456;64pkt 64fpkt"];
7225--9268[label="0.0669456;64pkt 64fpkt"];
7231--8528[label="0.2;1pkt 1fpkt"];
7231--8871[label="0.4;2pkt 2fpkt"];
7231--10989[label="1;5pkt 5fpkt"];
7257--8528[label="0.0909091;2pkt 2fpkt"];
7257--8871[label="0.318182;7pkt 7fpkt"];
7257--12380[label="0.954545;21pkt 21fpkt"];
7425--7967[label="0.269231;49pkt 49fpkt"];
7425--8871[label="0.000588235;1pkt 1fpkt"];
7425--9163[label="0.0604115;414pkt 414fpkt"];
7425--9194[label="0.0748577;513pkt 513fpkt"];
7425--9198[label="0.0750036;514pkt 514fpkt"];
7425--9234[label="0.0748577;513pkt 513fpkt"];
7425--9268[label="0.0748577;513pkt 513fpkt"];
7425--9499[label="0.999854;6852pkt 6852fpkt"];
7504--8871[label="0.491071;110pkt 110fpkt"];
7504--9163[label="0.0758929;17pkt 17fpkt"];
7504--9194[label="0.0848214;19pkt 19fpkt"];
7504--9234[label="0.0848214;19pkt 19fpkt"];
7504--9268[label="0.0848214;19pkt 19fpkt"];
7967--8642[label="0.0606061;6pkt 6fpkt"];
7967--9163[label="0.021978;4pkt 4fpkt"];
7967--9194[label="0.0659341;12pkt 12fpkt"];
7967--9234[label="0.0659341;12pkt 12fpkt"];
7967--9268[label="0.0659341;12pkt 12fpkt"];
7967--9499[label="0.269231;49pkt 49fpkt"];
7967--10091[label="0.333333;1pkt 1fpkt"];
7967--10227[label="0.111111;1pkt 1fpkt"];
7967--12268[label="0.0144928;1pkt 1fpkt"];
7967--12293[label="0.010989;1pkt 1fpkt"];
7967--12710[label="0.00549451;1pkt 1fpkt"];
7967--13740[label="0.1;1pkt 1fpkt"];
7967--14768[label="0.0144928;1pkt 1fpkt"];
7967--14781[label="0.0111111;1pkt 1fpkt"];
7967--14991[label="0.00549451;1pkt 1fpkt"];
7967--15511[label="0.1;1pkt 1fpkt"];
7967--16057[label="0.0147059;1pkt 1fpkt"];
7967--16064[label="0.0111111;1pkt 1fpkt"];
7967--16187[label="0.00549451;1pkt 1fpkt"];
8137--9163[label="0.2;1pkt 1fpkt"];
8420--9198[label="0.196429;11pkt 11fpkt"];
8420--11980[label="0.0625;1pkt 1fpkt"];
8420--12281[label="0.178571;10pkt 10fpkt"];
8420--14624[label="0.0625;1pkt 1fpkt"];
8528--8547[label="0.166667;1pkt 1fpkt"];
8528--8565[label="1;1pkt 1fpkt"];
8528--8709[label="0.333333;4pkt 4fpkt"];
8528--9141[label="0.272727;3pkt 3fpkt"];
8528--9176[label="0.00735294;1pkt 1fpkt"];
8528--9194[label="0.00735294;1pkt 1fpkt"];
8528--9198[label="0.00735294;1pkt 1fpkt"];
8528--9199[label="0.00735294;1pkt 1fpkt"];
8528--9216[label="0.00735294;1pkt 1fpkt"];
8528--9234[label="0.00735294;1pkt 1fpkt"];
8528--9250[label="0.00735294;1pkt 1fpkt"];
8528--9268[label="0.00735294;1pkt 1fpkt"];
8528--10831[label="0.333333;1pkt 1fpkt"];
8528--10989[label="0.2;1pkt 1fpkt"];
8528--11060[label="0.5;1pkt 1fpkt"];
8528--11320[label="0.5;1pkt 1fpkt"];
8528--11408[label="1;3pkt 3fpkt"];
8528--11417[label="1;1pkt 1fpkt"];
8528--11855[label="1;1pkt 1fpkt"];
8528--12058[label="1;6pkt 6fpkt"];
8528--12135[label="1;1pkt 1fpkt"];
8528--12380[label="0.0434783;1pkt 1fpkt"];
8528--12514[label="1;2pkt 2fpkt"];
8528--12624[label="0.166667;1pkt 1fpkt"];
8528--12822[label="0.421053;8pkt 8fpkt"];
8528--13189[label="1;1pkt 1fpkt"];
8528--14048[label="0.333333;1pkt 1fpkt"];
8528--14338[label="1;2pkt 2fpkt"];
8528--14557[label="1;1pkt 1fpkt"];
8528--15243[label="0.111111;1pkt 1fpkt"];
8528--15824[label="1;2pkt 2fpkt"];
8528--15940[label="1;1pkt 1fpkt"];
8528--16317[label="0.111111;1pkt 1fpkt"];
8709--8871[label="0.0833333;1pkt 1fpkt"];
8709--9141[label="1;11pkt 11fpkt"];
8709--12822[label="1;12pkt 12fpkt"];
8721--9194[label="0.295455;39pkt 39fpkt"];
8721--9234[label="0.295455;39pkt 39fpkt"];
8721--9268[label="0.295455;39pkt 39fpkt"];
8721--10869[label="1;132pkt 132fpkt"];
8782--9198[label="0.666667;2pkt 2fpkt"];
8782--11151[label="1;2pkt 2fpkt"];
8782--14207[label="1;3pkt 3fpkt"];
8782--15760[label="1;2pkt 2fpkt"];
9687--13452[label="1;34pkt 34fpkt"];
9687--15379[label="1;34pkt 34fpkt"];
9724--13468[label="1;34pkt 34fpkt"];
9724--15389[label="1;34pkt 34fpkt"];
9731--13472[label="1;9pkt 9fpkt"];
10166--13711[label="1;8pkt 8fpkt"];
10166--15496[label="1;9pkt 9fpkt"];
10819--14044[label="1;34pkt 34fpkt"];
10819--15671[label="1;34pkt 34fpkt"];
11137--14198[label="1;16pkt 16fpkt"];
11151--14207[label="1;2pkt 2fpkt"];
11151--15760[label="1;2pkt 2fpkt"];
11285--14269[label="1;1pkt 1fpkt"];
11285--15789[label="1;1pkt 1fpkt"];
11320--14286[label="1;1pkt 1fpkt"];
11408--14338[label="1;2pkt 2fpkt"];
11408--15824[label="1;2pkt 2fpkt"];
11508--14387[label="1;21pkt 21fpkt"];
11980--14624[label="1;16pkt 16fpkt"];
12841--15062[label="1;12pkt 12fpkt"];
13097--15187[label="1;12pkt 12fpkt"];
13125--15205[label="1;90pkt 90fpkt"];
13129--15208[label="1;12pkt 12fpkt"];
13181--15243[label="1;8pkt 8fpkt"];
13181--16317[label="1;8pkt 8fpkt"];
13452--15379[label="1;34pkt 34fpkt"];
13468--15389[label="1;34pkt 34fpkt"];
13711--15496[label="1;8pkt 8fpkt"];
14044--15671[label="1;34pkt 34fpkt"];
14207--15760[label="1;2pkt 2fpkt"];
14269--15789[label="1;1pkt 1fpkt"];
14338--15824[label="1;2pkt 2fpkt"];
15243--16317[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.79.54"/>
      <filter dst_ip="213.42.135.210" src_ip="107.4.66.12" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.48.42.89"/>
    </slice>
    <from sec="1223614816" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.68.180.89"/>
    </slice>
    <from sec="1223615522" usec="0"/>
    <to sec="1223615589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1621{
style=filled;
color=gray75;
10860[label="212.21.128.90;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14057[label="212.21.128.90;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1621[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.128.90:139, 54.156.250.193:2310}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2310: (50%)&lt;BR/&gt; 139: (50%)&gt;];
}
10860--14057[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="54.156.250.193" dst_port="2310" src_ip="212.21.128.90" src_port="139"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1622{
style=filled;
color=gray75;
10877[label="73.244.162.91;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14067[label="73.244.162.91;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1622[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.244.162.91:993, 136.228.45.17:49532}[20%]&lt;BR/&gt;{73.244.162.91:993, 136.228.45.17:49533}[20%]&lt;BR/&gt;{73.244.162.91:993, 136.228.45.17:49685}[20%]&lt;BR/&gt;{73.244.162.91:993, 136.228.45.17:49687}[20%]&lt;BR/&gt;{73.244.162.91:993, 136.228.45.17:49688}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (50%)&lt;BR/&gt; 49688: (11.1111%)&lt;BR/&gt; 49687: (11.1111%)&lt;BR/&gt; 49685: (11.1111%)&lt;BR/&gt; 49533: (11.1111%)&gt;];
}
10877--14067[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.45.17" dst_port="49688" src_ip="73.244.162.91" src_port="993"/>
      <filter dst_ip="136.228.45.17" dst_port="49687" src_ip="73.244.162.91" src_port="993"/>
      <filter dst_ip="136.228.45.17" dst_port="49685" src_ip="73.244.162.91" src_port="993"/>
      <filter dst_ip="136.228.45.17" dst_port="49533" src_ip="73.244.162.91" src_port="993"/>
      <filter dst_ip="136.228.45.17" dst_port="49532" src_ip="73.244.162.91" src_port="993"/>
    </slice>
    <from sec="1223614962" usec="0"/>
    <to sec="1223615564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.35.0.92"/>
    </slice>
    <from sec="1223615583" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.223.13.92"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="105.216.110.92"/>
    </slice>
    <from sec="1223615362" usec="0"/>
    <to sec="1223615397" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1626{
style=filled;
color=gray75;
10891[label="20.98.132.92;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14074[label="20.98.132.92;1pkt 1fpkt", shape=invtriangle, color=brown];
15692[label="20.98.132.92;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1626[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.98.132.92:80, 162.73.232.95:63248}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63248: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10891--14074[label="1;1pkt 1fpkt"];
10891--15692[label="1;1pkt 1fpkt"];
14074--15692[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.232.95" dst_port="63248" src_ip="20.98.132.92" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.139.185.92"/>
    </slice>
    <from sec="1223615341" usec="0"/>
    <to sec="1223615391" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.74.93"/>
    </slice>
    <from sec="1223615614" usec="0"/>
    <to sec="1223615633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.254.205.93"/>
    </slice>
    <from sec="1223615576" usec="0"/>
    <to sec="1223615578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.157.210.93"/>
    </slice>
    <from sec="1223615462" usec="0"/>
    <to sec="1223615477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.218.2.94"/>
    </slice>
    <from sec="1223614812" usec="0"/>
    <to sec="1223615302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="126.17.22.94"/>
    </slice>
    <from sec="1223615371" usec="0"/>
    <to sec="1223615403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.74.94"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1634{
style=filled;
color=gray75;
10921[label="210.224.178.94;15pkt 15fpkt", shape=pentagon, color=darkviolet];
14088[label="210.224.178.94;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1634[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.224.178.94:80, 142.16.215.237:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54930: (3.22581%)&lt;BR/&gt; 54919: (3.22581%)&lt;BR/&gt; 54918: (3.22581%)&lt;BR/&gt; 54917: (3.22581%)&gt;];
}
10921--14088[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.215.237" src_ip="210.224.178.94" src_port="80"/>
    </slice>
    <from sec="1223614884" usec="0"/>
    <to sec="1223614886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="125.81.1.95"/>
    </slice>
    <from sec="1223615515" usec="0"/>
    <to sec="1223615519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.233.97.95"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.141.198.95"/>
    </slice>
    <from sec="1223615367" usec="0"/>
    <to sec="1223615382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.74.96"/>
    </slice>
    <from sec="1223615206" usec="0"/>
    <to sec="1223615210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1639{
style=filled;
color=gray75;
1267[label="162.73.160.6;d;77pkt 77fpkt", shape=diamond, color=yellow];
1268[label="108.200.189.96;s;2pkt 2fpkt", shape=diamond, color=yellow];
7180[label="162.73.160.6;d;69pkt 69fpkt", shape=hexagon, color=black];
10949[label="108.200.189.96;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14101[label="108.200.189.96;1pkt 1fpkt", shape=invtriangle, color=brown];
15707[label="108.200.189.96;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1639[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.56.72.171:80, 162.73.160.6:*}[38.961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.7105%)&lt;BR/&gt; 1156: (1.97368%)&lt;BR/&gt; 554: (1.97368%)&lt;BR/&gt; 5004: (1.31579%)&lt;BR/&gt; 1162: (1.31579%)&gt;];
}
1267--1268[label="1;2pkt 2fpkt"];
1267--7180[label="1;69pkt 69fpkt"];
1267--9163[label="0.0519481;4pkt 4fpkt"];
1267--9194[label="0.0649351;5pkt 5fpkt"];
1267--9198[label="0.0649351;5pkt 5fpkt"];
1267--9234[label="0.0649351;5pkt 5fpkt"];
1267--9268[label="0.0649351;5pkt 5fpkt"];
1267--10949[label="1;2pkt 2fpkt"];
1267--14101[label="1;1pkt 1fpkt"];
1267--15707[label="1;1pkt 1fpkt"];
1268--7180[label="1;2pkt 2fpkt"];
1268--10949[label="1;2pkt 2fpkt"];
1268--14101[label="1;1pkt 1fpkt"];
1268--15707[label="1;1pkt 1fpkt"];
7180--9163[label="0.057971;4pkt 4fpkt"];
7180--9194[label="0.0724638;5pkt 5fpkt"];
7180--9198[label="0.0434783;3pkt 3fpkt"];
7180--9234[label="0.0724638;5pkt 5fpkt"];
7180--9268[label="0.0724638;5pkt 5fpkt"];
7180--10949[label="1;2pkt 2fpkt"];
7180--14101[label="1;1pkt 1fpkt"];
7180--15707[label="1;1pkt 1fpkt"];
10949--14101[label="1;1pkt 1fpkt"];
10949--15707[label="1;1pkt 1fpkt"];
14101--15707[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.160.6" src_ip="192.56.72.171" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.29.200.96"/>
    </slice>
    <from sec="1223615567" usec="0"/>
    <to sec="1223615571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.134.31.97"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.2.109.97"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1643{
style=filled;
color=gray75;
10963[label="121.172.118.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14108[label="121.172.118.97;1pkt 1fpkt", shape=invtriangle, color=brown];
15711[label="121.172.118.97;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1643[shape=component, label=&lt;Rules:&lt;BR/&gt;{121.172.118.97:30014, 142.228.241.166:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30014: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
10963--14108[label="1;1pkt 1fpkt"];
10963--15711[label="1;1pkt 1fpkt"];
14108--15711[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.241.166" dst_port="80" src_ip="121.172.118.97" src_port="30014"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1644{
style=filled;
color=gray75;
10967[label="142.16.201.97;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14111[label="142.16.201.97;4pkt 4fpkt", shape=invtriangle, color=brown];
15713[label="142.16.201.97;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1644[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.16.201.97:49935, 99.134.98.60:80}[25%]&lt;BR/&gt;{142.16.201.97:49936, 182.244.139.242:80}[25%]&lt;BR/&gt;{142.16.201.97:49937, 106.78.33.157:80}[25%]&lt;BR/&gt;{142.16.201.97:49939, 106.78.33.157:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49939: (13.6364%)&lt;BR/&gt; 49937: (13.6364%)&lt;BR/&gt; 49935: (13.6364%)&lt;BR/&gt; 49936: (9.09091%)&gt;];
}
10967--14111[label="1;3pkt 3fpkt"];
10967--15713[label="1;3pkt 3fpkt"];
14111--15713[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="106.78.33.157" dst_port="80" src_ip="142.16.201.97" src_port="49939"/>
      <filter dst_ip="106.78.33.157" dst_port="80" src_ip="142.16.201.97" src_port="49937"/>
      <filter dst_ip="182.244.139.242" dst_port="80" src_ip="142.16.201.97" src_port="49936"/>
      <filter dst_ip="99.134.98.60" dst_port="80" src_ip="142.16.201.97" src_port="49935"/>
    </slice>
    <from sec="1223614861" usec="0"/>
    <to sec="1223614878" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1645{
style=filled;
color=gray75;
10972[label="212.84.26.98;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14113[label="212.84.26.98;2pkt 2fpkt", shape=invtriangle, color=brown];
15714[label="212.84.26.98;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1645[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.84.26.98:80, 213.33.145.7:3936}[50%]&lt;BR/&gt;{212.84.26.98:80, 213.33.145.7:3950}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3950: (25%)&lt;BR/&gt; 3936: (25%)&gt;];
}
10972--14113[label="1;2pkt 2fpkt"];
10972--15714[label="1;2pkt 2fpkt"];
14113--15714[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.145.7" dst_port="3950" src_ip="212.84.26.98" src_port="80"/>
      <filter dst_ip="213.33.145.7" dst_port="3936" src_ip="212.84.26.98" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.137.67.98"/>
    </slice>
    <from sec="1223615032" usec="0"/>
    <to sec="1223615094" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.75.80.98"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1648{
style=filled;
color=gray75;
10996[label="192.49.110.99;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14128[label="192.49.110.99;2pkt 2fpkt", shape=invtriangle, color=brown];
15721[label="192.49.110.99;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1648[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.49.110.99:4155, 164.25.78.127:53}[50%]&lt;BR/&gt;{192.49.110.99:60424, 164.25.78.127:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 60424: (25%)&lt;BR/&gt; 4155: (25%)&gt;];
}
10996--14128[label="1;2pkt 2fpkt"];
10996--15721[label="1;2pkt 2fpkt"];
14128--15721[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.78.127" dst_port="53" src_ip="192.49.110.99" src_port="60424"/>
      <filter dst_ip="164.25.78.127" dst_port="53" src_ip="192.49.110.99" src_port="4155"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.134.48.100"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615208" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.163.54.101"/>
    </slice>
    <from sec="1223615661" usec="0"/>
    <to sec="1223615663" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.69.90.102"/>
    </slice>
    <from sec="1223614929" usec="0"/>
    <to sec="1223614930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.75.102.102"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.31.146.102"/>
    </slice>
    <from sec="1223615210" usec="0"/>
    <to sec="1223615222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1654{
style=filled;
color=gray75;
11057[label="106.78.81.103;39pkt 39fpkt", shape=pentagon, color=darkviolet];
14156[label="106.78.81.103;40pkt 40fpkt", shape=invtriangle, color=brown];
15736[label="106.78.81.103;39pkt 39fpkt", shape=invhouse, color=bisque];
stat1654[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.78.81.103:80, 162.73.193.132:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 55979: (1.27119%)&lt;BR/&gt; 55978: (1.27119%)&lt;BR/&gt; 55977: (1.27119%)&lt;BR/&gt; 55976: (1.27119%)&gt;];
}
11057--14156[label="1;39pkt 39fpkt"];
11057--15736[label="1;39pkt 39fpkt"];
14156--15736[label="1;39pkt 39fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.193.132" src_ip="106.78.81.103" src_port="80"/>
    </slice>
    <from sec="1223615470" usec="0"/>
    <to sec="1223615486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.132.236.103"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1656{
style=filled;
color=gray75;
11071[label="142.226.41.104;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14164[label="142.226.41.104;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1656[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.41.104:1459, 195.35.72.152:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1459: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11071--14164[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.35.72.152" dst_port="80" src_ip="142.226.41.104" src_port="1459"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.101.136.104"/>
    </slice>
    <from sec="1223615549" usec="0"/>
    <to sec="1223615554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="126.249.178.104"/>
    </slice>
    <from sec="1223615275" usec="0"/>
    <to sec="1223615280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="111.42.85.105"/>
    </slice>
    <from sec="1223615170" usec="0"/>
    <to sec="1223615217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.190.240.105"/>
    </slice>
    <from sec="1223615686" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1661{
style=filled;
color=gray75;
11111[label="3.214.91.106;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14181[label="3.214.91.106;10pkt 10fpkt", shape=invtriangle, color=brown];
15745[label="3.214.91.106;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1661[shape=component, label=&lt;Rules:&lt;BR/&gt;{3.214.91.106:110, 160.49.232.143:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 110: (50%)&lt;BR/&gt; 2693: (5.17241%)&lt;BR/&gt; 2689: (5.17241%)&lt;BR/&gt; 2686: (5.17241%)&lt;BR/&gt; 2683: (5.17241%)&gt;];
}
11111--14181[label="1;10pkt 10fpkt"];
11111--15745[label="1;9pkt 9fpkt"];
14181--15745[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.232.143" src_ip="3.214.91.106" src_port="110"/>
    </slice>
    <from sec="1223614896" usec="0"/>
    <to sec="1223615678" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.123.95.106"/>
    </slice>
    <from sec="1223615313" usec="0"/>
    <to sec="1223615346" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.80.109.106"/>
    </slice>
    <from sec="1223615363" usec="0"/>
    <to sec="1223615387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1664{
style=filled;
color=gray75;
849[label="160.49.198.10;d;946pkt 946fpkt", shape=diamond, color=yellow];
851[label="204.170.33.234;s;884pkt 884fpkt", shape=diamond, color=yellow];
4892[label="76.210.202.152;s;2pkt 2fpkt", shape=diamond, color=yellow];
6794[label="160.49.198.10;d;855pkt 855fpkt", shape=hexagon, color=black];
7432[label="204.170.33.234;s;598pkt 598fpkt", shape=hexagon, color=black];
9741[label="204.132.40.25;4pkt 4fpkt", shape=pentagon, color=darkviolet];
10145[label="20.208.138.47;2pkt 2fpkt", shape=pentagon, color=darkviolet];
10724[label="8.189.99.82;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11031[label="73.79.34.101;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11119[label="19.71.148.106;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11169[label="194.157.152.109;1pkt 1fpkt", shape=pentagon, color=darkviolet];
11841[label="76.210.202.152;10pkt 10fpkt", shape=pentagon, color=darkviolet];
13999[label="8.189.99.82;1pkt 1fpkt", shape=invtriangle, color=brown];
14187[label="19.71.148.106;2pkt 2fpkt", shape=invtriangle, color=brown];
14215[label="194.157.152.109;1pkt 1fpkt", shape=invtriangle, color=brown];
14552[label="76.210.202.152;9pkt 9fpkt", shape=invtriangle, color=brown];
15762[label="194.157.152.109;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1664[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.170.33.234:80, 160.49.198.10:*}[89.517%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.3825%)&lt;BR/&gt; 20129: (0.557229%)&lt;BR/&gt; 0: (0.180723%)&lt;BR/&gt; 53: (0.120482%)&lt;BR/&gt; 3927: (0.0753012%)&gt;];
}
849--851[label="0.985294;871pkt 871fpkt"];
849--2159[label="0.00245098;1pkt 1fpkt"];
849--6341[label="0.00245098;1pkt 1fpkt"];
849--6794[label="1;855pkt 855fpkt"];
849--7432[label="0.991639;593pkt 593fpkt"];
849--9163[label="0.0623679;59pkt 59fpkt"];
849--9194[label="0.0539112;51pkt 51fpkt"];
849--9198[label="0.051797;49pkt 49fpkt"];
849--9234[label="0.0539112;51pkt 51fpkt"];
849--9268[label="0.0539112;51pkt 51fpkt"];
849--9741[label="0.25;1pkt 1fpkt"];
849--10145[label="0.5;1pkt 1fpkt"];
849--10724[label="1;1pkt 1fpkt"];
849--11031[label="1;1pkt 1fpkt"];
849--11119[label="0.5;1pkt 1fpkt"];
849--11169[label="1;1pkt 1fpkt"];
849--11444[label="0.00233645;1pkt 1fpkt"];
849--11841[label="0.1;1pkt 1fpkt"];
849--13999[label="1;1pkt 1fpkt"];
849--14187[label="0.5;1pkt 1fpkt"];
849--14215[label="1;1pkt 1fpkt"];
849--14552[label="0.111111;1pkt 1fpkt"];
849--15762[label="1;1pkt 1fpkt"];
851--1095[label="0.0638298;3pkt 3fpkt"];
851--2143[label="0.0355731;9pkt 9fpkt"];
851--6794[label="0.915789;783pkt 783fpkt"];
851--7432[label="1;598pkt 598fpkt"];
851--7726[label="0.00546448;1pkt 1fpkt"];
851--9163[label="0.0678733;60pkt 60fpkt"];
851--9194[label="0.0542986;48pkt 48fpkt"];
851--9198[label="0.0656109;58pkt 58fpkt"];
851--9234[label="0.0542986;48pkt 48fpkt"];
851--9268[label="0.0542986;48pkt 48fpkt"];
4892--11841[label="1;2pkt 2fpkt"];
4892--14552[label="1;2pkt 2fpkt"];
6794--7432[label="0.991639;593pkt 593fpkt"];
6794--9163[label="0.0690058;59pkt 59fpkt"];
6794--9194[label="0.0596491;51pkt 51fpkt"];
6794--9198[label="0.0292398;25pkt 25fpkt"];
6794--9234[label="0.0596491;51pkt 51fpkt"];
6794--9268[label="0.0596491;51pkt 51fpkt"];
6794--9741[label="0.25;1pkt 1fpkt"];
6794--10145[label="0.5;1pkt 1fpkt"];
6794--10724[label="1;1pkt 1fpkt"];
6794--11031[label="1;1pkt 1fpkt"];
6794--11119[label="0.5;1pkt 1fpkt"];
6794--11169[label="1;1pkt 1fpkt"];
6794--11444[label="0.00233645;1pkt 1fpkt"];
6794--11841[label="0.1;1pkt 1fpkt"];
6794--13999[label="1;1pkt 1fpkt"];
6794--14187[label="0.5;1pkt 1fpkt"];
6794--14215[label="1;1pkt 1fpkt"];
6794--14552[label="0.111111;1pkt 1fpkt"];
6794--15762[label="1;1pkt 1fpkt"];
7432--7726[label="0.00546448;1pkt 1fpkt"];
7432--9163[label="0.100334;60pkt 60fpkt"];
7432--9194[label="0.0802676;48pkt 48fpkt"];
7432--9198[label="0.00501672;3pkt 3fpkt"];
7432--9234[label="0.0802676;48pkt 48fpkt"];
7432--9268[label="0.0802676;48pkt 48fpkt"];
10724--13999[label="1;1pkt 1fpkt"];
11119--14187[label="1;2pkt 2fpkt"];
11169--14215[label="1;1pkt 1fpkt"];
11169--15762[label="1;1pkt 1fpkt"];
11841--14552[label="1;9pkt 9fpkt"];
14215--15762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.198.10" src_ip="204.170.33.234" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.86.214.106"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1666{
style=filled;
color=gray75;
11125[label="205.106.225.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14191[label="205.106.225.106;1pkt 1fpkt", shape=invtriangle, color=brown];
15751[label="205.106.225.106;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1666[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.106.225.106:80, 213.33.145.7:3249}[50%]&lt;BR/&gt;{205.106.225.106:80, 213.33.145.7:3928}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3928: (37.5%)&lt;BR/&gt; 3249: (12.5%)&gt;];
}
11125--14191[label="1;1pkt 1fpkt"];
11125--15751[label="1;1pkt 1fpkt"];
14191--15751[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.145.7" dst_port="3928" src_ip="205.106.225.106" src_port="80"/>
      <filter dst_ip="213.33.145.7" dst_port="3249" src_ip="205.106.225.106" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1667{
style=filled;
color=gray75;
11127[label="136.228.236.106;85pkt 85fpkt", shape=pentagon, color=darkviolet];
14193[label="136.228.236.106;86pkt 86fpkt", shape=invtriangle, color=brown];
15752[label="136.228.236.106;86pkt 86fpkt", shape=invhouse, color=bisque];
stat1667[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.236.106:25, *:*}[63.9535%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (34.4358%)&lt;BR/&gt; 53: (9.92218%)&lt;BR/&gt; 80: (5.64202%)&lt;BR/&gt; 65237: (0.583658%)&lt;BR/&gt; 64123: (0.583658%)&gt;];
}
11127--14193[label="1;85pkt 85fpkt"];
11127--15752[label="1;85pkt 85fpkt"];
14193--15752[label="1;86pkt 86fpkt"];
</description>
    <slice>
      <filter src_ip="136.228.236.106" src_port="25"/>
    </slice>
    <from sec="1223614810" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1668{
style=filled;
color=gray75;
11129[label="142.226.1.107;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14194[label="142.226.1.107;6pkt 6fpkt", shape=invtriangle, color=brown];
15753[label="142.226.1.107;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1668[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.226.1.107:1101, *:53}[33.3333%]&lt;BR/&gt;{142.226.1.107:*, 216.138.201.148:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 1101: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&lt;BR/&gt; 36817: (8.33333%)&lt;BR/&gt; 36379: (8.33333%)&gt;];
}
11129--14194[label="1;6pkt 6fpkt"];
11129--15753[label="1;6pkt 6fpkt"];
14194--15753[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="216.138.201.148" dst_port="80" src_ip="142.226.1.107"/>
      <filter dst_port="53" src_ip="142.226.1.107" src_port="1101"/>
    </slice>
    <from sec="1223615059" usec="0"/>
    <to sec="1223615562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.110.219.107"/>
    </slice>
    <from sec="1223614840" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.138.231.107"/>
    </slice>
    <from sec="1223615471" usec="0"/>
    <to sec="1223615513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="151.120.43.108"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1672{
style=filled;
color=gray75;
11147[label="104.2.87.108;22pkt 22fpkt", shape=pentagon, color=darkviolet];
14203[label="104.2.87.108;23pkt 23fpkt", shape=invtriangle, color=brown];
15759[label="104.2.87.108;22pkt 22fpkt", shape=invhouse, color=bisque];
stat1672[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.2.87.108:80, 162.73.192.152:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3391: (2.23881%)&lt;BR/&gt; 3390: (2.23881%)&lt;BR/&gt; 3389: (2.23881%)&lt;BR/&gt; 3388: (2.23881%)&gt;];
}
11147--14203[label="1;22pkt 22fpkt"];
11147--15759[label="1;22pkt 22fpkt"];
14203--15759[label="1;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.192.152" src_ip="104.2.87.108" src_port="80"/>
    </slice>
    <from sec="1223614923" usec="0"/>
    <to sec="1223614930" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.10.184.108"/>
    </slice>
    <from sec="1223615361" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="119.174.97.110"/>
    </slice>
    <from sec="1223615287" usec="0"/>
    <to sec="1223615304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.155.201.110"/>
    </slice>
    <from sec="1223615397" usec="0"/>
    <to sec="1223615401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.14.208.110"/>
    </slice>
    <from sec="1223615317" usec="0"/>
    <to sec="1223615347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,011,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.173.18.111"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223615256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1678{
style=filled;
color=gray75;
11206[label="150.255.68.112;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14231[label="150.255.68.112;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1678[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.255.68.112:0, 200.250.100.19:0}[50%]&lt;BR/&gt;{150.255.68.112:0, 202.70.143.92:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
11206--14231[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="202.70.143.92" src_ip="150.255.68.112"/>
      <filter dst_ip="200.250.100.19" src_ip="150.255.68.112"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1679{
style=filled;
color=gray75;
11207[label="136.228.110.112;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14232[label="136.228.110.112;4pkt 4fpkt", shape=invtriangle, color=brown];
15769[label="136.228.110.112;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1679[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.110.112:56240, 217.219.60.154:80}[20%]&lt;BR/&gt;{136.228.110.112:80, 99.29.202.170:57747}[20%]&lt;BR/&gt;{136.228.110.112:35380, 217.219.60.146:80}[20%]&lt;BR/&gt;{136.228.110.112:35382, 217.219.60.146:80}[20%]&lt;BR/&gt;{136.228.110.112:35384, 217.219.60.146:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56240: (11.5385%)&lt;BR/&gt; 35384: (11.5385%)&lt;BR/&gt; 35382: (11.5385%)&lt;BR/&gt; 35380: (11.5385%)&gt;];
}
11207--14232[label="1;4pkt 4fpkt"];
11207--15769[label="1;4pkt 4fpkt"];
14232--15769[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="217.219.60.146" dst_port="80" src_ip="136.228.110.112" src_port="35384"/>
      <filter dst_ip="217.219.60.146" dst_port="80" src_ip="136.228.110.112" src_port="35382"/>
      <filter dst_ip="217.219.60.146" dst_port="80" src_ip="136.228.110.112" src_port="35380"/>
      <filter dst_ip="99.29.202.170" dst_port="57747" src_ip="136.228.110.112" src_port="80"/>
      <filter dst_ip="217.219.60.154" dst_port="80" src_ip="136.228.110.112" src_port="56240"/>
    </slice>
    <from sec="1223615274" usec="0"/>
    <to sec="1223615688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1680{
style=filled;
color=gray75;
1696[label="78.186.144.28;s;59pkt 59fpkt", shape=diamond, color=yellow];
1950[label="160.49.30.249;d;598pkt 598fpkt", shape=diamond, color=yellow];
2370[label="109.115.229.112;s;43pkt 43fpkt", shape=diamond, color=yellow];
6418[label="78.186.144.28;s;53pkt 53fpkt", shape=hexagon, color=black];
6683[label="109.115.229.112;s;43pkt 43fpkt", shape=hexagon, color=black];
8543[label="160.49.30.249;d;598pkt 598fpkt", shape=hexagon, color=black];
9709[label="120.65.95.23;7pkt 7fpkt", shape=pentagon, color=darkviolet];
11214[label="109.115.229.112;42pkt 42fpkt", shape=pentagon, color=darkviolet];
11795[label="203.18.161.150;3pkt 3fpkt", shape=pentagon, color=darkviolet];
12561[label="200.196.216.201;8pkt 8fpkt", shape=pentagon, color=darkviolet];
14237[label="109.115.229.112;42pkt 42fpkt", shape=invtriangle, color=brown];
14914[label="200.196.216.201;8pkt 8fpkt", shape=invtriangle, color=brown];
stat1680[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 160.49.30.249:25}[44.6293%]&lt;BR/&gt;{*:113, 160.49.30.249:*}[22.5416%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (32.3471%)&lt;BR/&gt; 113: (10.2726%)&lt;BR/&gt; 53: (7.18085%)&lt;BR/&gt; 0: (0.531915%)&lt;BR/&gt; 65525: (0.199468%)&gt;];
}
1696--1950[label="0.491525;29pkt 29fpkt"];
1696--6418[label="1;53pkt 53fpkt"];
1696--8543[label="0.491525;29pkt 29fpkt"];
1950--2370[label="0.395349;17pkt 17fpkt"];
1950--3263[label="0.00334448;2pkt 2fpkt"];
1950--3277[label="0.0083612;5pkt 5fpkt"];
1950--3335[label="0.02;1pkt 1fpkt"];
1950--6418[label="0.433962;23pkt 23fpkt"];
1950--6683[label="0.395349;17pkt 17fpkt"];
1950--8543[label="1;598pkt 598fpkt"];
1950--9177[label="0.0167224;10pkt 10fpkt"];
1950--9196[label="0.00668896;4pkt 4fpkt"];
1950--9197[label="0.00167224;1pkt 1fpkt"];
1950--9217[label="0.0167224;10pkt 10fpkt"];
1950--9251[label="0.0167224;10pkt 10fpkt"];
1950--9531[label="0.0238095;2pkt 2fpkt"];
1950--9709[label="0.285714;2pkt 2fpkt"];
1950--9784[label="0.00806452;2pkt 2fpkt"];
1950--10183[label="0.0294118;1pkt 1fpkt"];
1950--10722[label="0.00334448;2pkt 2fpkt"];
1950--10828[label="0.0083612;5pkt 5fpkt"];
1950--11214[label="0.404762;17pkt 17fpkt"];
1950--11728[label="0.00793651;1pkt 1fpkt"];
1950--11795[label="0.333333;1pkt 1fpkt"];
1950--12065[label="0.642857;18pkt 18fpkt"];
1950--12561[label="1;8pkt 8fpkt"];
1950--13500[label="0.00806452;2pkt 2fpkt"];
1950--14237[label="0.404762;17pkt 17fpkt"];
1950--14662[label="0.62069;18pkt 18fpkt"];
1950--14914[label="1;8pkt 8fpkt"];
1950--15409[label="0.00806452;2pkt 2fpkt"];
1950--15998[label="0.62069;18pkt 18fpkt"];
2370--6683[label="1;43pkt 43fpkt"];
2370--8543[label="0.395349;17pkt 17fpkt"];
2370--11214[label="1;42pkt 42fpkt"];
2370--14237[label="1;42pkt 42fpkt"];
6418--8543[label="0.433962;23pkt 23fpkt"];
6683--8543[label="0.395349;17pkt 17fpkt"];
6683--11214[label="1;42pkt 42fpkt"];
6683--14237[label="1;42pkt 42fpkt"];
8543--9177[label="0.0167224;10pkt 10fpkt"];
8543--9196[label="0.00668896;4pkt 4fpkt"];
8543--9197[label="0.00167224;1pkt 1fpkt"];
8543--9217[label="0.0167224;10pkt 10fpkt"];
8543--9251[label="0.0167224;10pkt 10fpkt"];
8543--9531[label="0.0238095;2pkt 2fpkt"];
8543--9709[label="0.285714;2pkt 2fpkt"];
8543--9784[label="0.00806452;2pkt 2fpkt"];
8543--10183[label="0.0294118;1pkt 1fpkt"];
8543--10722[label="0.00334448;2pkt 2fpkt"];
8543--10828[label="0.0083612;5pkt 5fpkt"];
8543--11214[label="0.404762;17pkt 17fpkt"];
8543--11728[label="0.00793651;1pkt 1fpkt"];
8543--11795[label="0.333333;1pkt 1fpkt"];
8543--12065[label="0.642857;18pkt 18fpkt"];
8543--12561[label="1;8pkt 8fpkt"];
8543--13500[label="0.00806452;2pkt 2fpkt"];
8543--14237[label="0.404762;17pkt 17fpkt"];
8543--14662[label="0.62069;18pkt 18fpkt"];
8543--14914[label="1;8pkt 8fpkt"];
8543--15409[label="0.00806452;2pkt 2fpkt"];
8543--15998[label="0.62069;18pkt 18fpkt"];
11214--14237[label="1;42pkt 42fpkt"];
12561--14914[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.30.249" src_port="113"/>
      <filter dst_ip="160.49.30.249" dst_port="25"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.40.168.113"/>
    </slice>
    <from sec="1223615169" usec="0"/>
    <to sec="1223615207" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1682{
style=filled;
color=gray75;
11234[label="213.43.44.114;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14245[label="213.43.44.114;1pkt 1fpkt", shape=invtriangle, color=brown];
15777[label="213.43.44.114;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1682[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.43.44.114:80, 162.73.232.33:54851}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54851: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11234--14245[label="1;1pkt 1fpkt"];
11234--15777[label="1;1pkt 1fpkt"];
14245--15777[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.232.33" dst_port="54851" src_ip="213.43.44.114" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.0.162.114"/>
    </slice>
    <from sec="1223614924" usec="0"/>
    <to sec="1223615559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1684{
style=filled;
color=gray75;
4480[label="136.228.81.177;d;7pkt 7fpkt", shape=diamond, color=yellow];
4504[label="212.58.174.114;s;2pkt 2fpkt", shape=diamond, color=yellow];
11244[label="212.58.174.114;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14250[label="212.58.174.114;2pkt 2fpkt", shape=invtriangle, color=brown];
15780[label="212.58.174.114;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1684[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.51.139.88:80, 136.228.81.177:*}[28.5714%]&lt;BR/&gt;{208.133.110.102:80, 136.228.81.177:*}[28.5714%]&lt;BR/&gt;{212.58.174.114:80, 136.228.81.177:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4541: (17.8571%)&lt;BR/&gt; 4539: (14.2857%)&lt;BR/&gt; 4640: (3.57143%)&lt;BR/&gt; 4639: (3.57143%)&gt;];
}
4480--4504[label="1;2pkt 2fpkt"];
4480--5315[label="0.285714;2pkt 2fpkt"];
4480--8456[label="0.285714;2pkt 2fpkt"];
4480--9194[label="0.142857;1pkt 1fpkt"];
4480--9198[label="0.142857;1pkt 1fpkt"];
4480--9234[label="0.142857;1pkt 1fpkt"];
4480--9268[label="0.142857;1pkt 1fpkt"];
4480--9442[label="0.142857;1pkt 1fpkt"];
4480--11049[label="0.285714;2pkt 2fpkt"];
4480--11244[label="1;2pkt 2fpkt"];
4480--14250[label="1;2pkt 2fpkt"];
4480--15780[label="1;1pkt 1fpkt"];
4504--11244[label="1;2pkt 2fpkt"];
4504--14250[label="1;2pkt 2fpkt"];
4504--15780[label="1;1pkt 1fpkt"];
11244--14250[label="1;2pkt 2fpkt"];
11244--15780[label="1;1pkt 1fpkt"];
14250--15780[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.81.177" src_ip="212.58.174.114" src_port="80"/>
      <filter dst_ip="136.228.81.177" src_ip="208.133.110.102" src_port="80"/>
      <filter dst_ip="136.228.81.177" src_ip="107.51.139.88" src_port="80"/>
    </slice>
    <from sec="1223615241" usec="0"/>
    <to sec="1223615525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.80.66.115"/>
    </slice>
    <from sec="1223615113" usec="0"/>
    <to sec="1223615143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1686{
style=filled;
color=gray75;
11267[label="136.228.197.116;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14261[label="136.228.197.116;1pkt 1fpkt", shape=invtriangle, color=brown];
15784[label="136.228.197.116;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1686[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.197.116:63569, 104.160.98.167:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63569: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11267--14261[label="1;1pkt 1fpkt"];
11267--15784[label="1;1pkt 1fpkt"];
14261--15784[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="104.160.98.167" dst_port="80" src_ip="136.228.197.116" src_port="63569"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1687{
style=filled;
color=gray75;
11273[label="136.228.86.117;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14263[label="136.228.86.117;3pkt 3fpkt", shape=invtriangle, color=brown];
15786[label="136.228.86.117;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1687[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.86.117:1472, 210.150.226.193:80}[33.3333%]&lt;BR/&gt;{136.228.86.117:1658, 108.129.217.181:80}[33.3333%]&lt;BR/&gt;{136.228.86.117:1706, 108.129.217.181:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1706: (21.4286%)&lt;BR/&gt; 1658: (21.4286%)&lt;BR/&gt; 1472: (7.14286%)&gt;];
}
11273--14263[label="1;2pkt 2fpkt"];
11273--15786[label="1;2pkt 2fpkt"];
14263--15786[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="108.129.217.181" dst_port="80" src_ip="136.228.86.117" src_port="1706"/>
      <filter dst_ip="108.129.217.181" dst_port="80" src_ip="136.228.86.117" src_port="1658"/>
      <filter dst_ip="210.150.226.193" dst_port="80" src_ip="136.228.86.117" src_port="1472"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.186.94.118"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1689{
style=filled;
color=gray75;
11289[label="136.228.114.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14272[label="136.228.114.118;1pkt 1fpkt", shape=invtriangle, color=brown];
15791[label="136.228.114.118;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1689[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.114.118:4279, 193.52.232.170:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4279: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11289--14272[label="1;1pkt 1fpkt"];
11289--15791[label="1;1pkt 1fpkt"];
14272--15791[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.52.232.170" dst_port="80" src_ip="136.228.114.118" src_port="4279"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1690{
style=filled;
color=gray75;
11294[label="70.151.176.118;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14274[label="70.151.176.118;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1690[shape=component, label=&lt;Rules:&lt;BR/&gt;{70.151.176.118:1297, 212.21.136.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1297: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11294--14274[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.148" dst_port="80" src_ip="70.151.176.118" src_port="1297"/>
    </slice>
    <from sec="1223615651" usec="0"/>
    <to sec="1223615666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1691{
style=filled;
color=gray75;
1504[label="142.243.10.198;d;96pkt 96fpkt", shape=diamond, color=yellow];
4285[label="204.185.183.151;s;17pkt 17fpkt", shape=diamond, color=yellow];
6375[label="142.243.10.198;d;96pkt 96fpkt", shape=hexagon, color=black];
10739[label="204.185.183.82;8pkt 8fpkt", shape=pentagon, color=darkviolet];
11298[label="213.188.56.119;4pkt 4fpkt", shape=pentagon, color=darkviolet];
11509[label="204.185.168.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14276[label="213.188.56.119;4pkt 4fpkt", shape=invtriangle, color=brown];
14388[label="204.185.168.132;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1691[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 142.243.10.198:*}[80.5085%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5595%)&lt;BR/&gt; 51078: (0.881057%)&lt;BR/&gt; 51072: (0.881057%)&lt;BR/&gt; 51058: (0.881057%)&lt;BR/&gt; 51048: (0.881057%)&gt;];
}
1504--4285[label="0.117647;2pkt 2fpkt"];
1504--6375[label="1;96pkt 96fpkt"];
1504--9163[label="0.46875;45pkt 45fpkt"];
1504--10739[label="0.125;1pkt 1fpkt"];
1504--11298[label="1;4pkt 4fpkt"];
1504--11509[label="1;1pkt 1fpkt"];
1504--14276[label="1;4pkt 4fpkt"];
1504--14388[label="1;1pkt 1fpkt"];
1504--15849[label="0.5;1pkt 1fpkt"];
4285--6375[label="0.117647;2pkt 2fpkt"];
4285--8514[label="0.0588235;1pkt 1fpkt"];
4285--9163[label="0.176471;3pkt 3fpkt"];
4285--9194[label="0.117647;2pkt 2fpkt"];
4285--9198[label="0.0588235;1pkt 1fpkt"];
4285--9234[label="0.117647;2pkt 2fpkt"];
4285--9268[label="0.117647;2pkt 2fpkt"];
4285--15931[label="0.5;1pkt 1fpkt"];
6375--9163[label="0.46875;45pkt 45fpkt"];
6375--10739[label="0.125;1pkt 1fpkt"];
6375--11298[label="1;4pkt 4fpkt"];
6375--11509[label="1;1pkt 1fpkt"];
6375--14276[label="1;4pkt 4fpkt"];
6375--14388[label="1;1pkt 1fpkt"];
6375--15849[label="0.5;1pkt 1fpkt"];
11298--14276[label="1;4pkt 4fpkt"];
11509--14388[label="1;1pkt 1fpkt"];
11509--15849[label="1;1pkt 1fpkt"];
14388--15849[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.10.198" src_port="80"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.151.153.119"/>
    </slice>
    <from sec="1223614820" usec="0"/>
    <to sec="1223614827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.227.167.119"/>
    </slice>
    <from sec="1223615204" usec="0"/>
    <to sec="1223615304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.43.45.122"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.6.96.122"/>
    </slice>
    <from sec="1223615304" usec="0"/>
    <to sec="1223615314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.202.231.122"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.44.94.123"/>
    </slice>
    <from sec="1223615157" usec="0"/>
    <to sec="1223615221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1698{
style=filled;
color=gray75;
610[label="213.42.135.123;s;1844pkt 1844fpkt", shape=diamond, color=yellow];
872[label="202.85.93.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
1057[label="21.66.36.254;d;1pkt 1fpkt", shape=diamond, color=yellow];
1085[label="118.77.4.74;d;1pkt 1fpkt", shape=diamond, color=yellow];
1283[label="200.155.87.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
1316[label="18.66.156.248;d;1pkt 1fpkt", shape=diamond, color=yellow];
1392[label="203.167.59.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1604[label="77.86.144.224;d;1pkt 1fpkt", shape=diamond, color=yellow];
1794[label="200.15.241.205;d;1pkt 1fpkt", shape=diamond, color=yellow];
1801[label="20.125.154.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
1808[label="72.224.156.89;d;1pkt 1fpkt", shape=diamond, color=yellow];
1854[label="21.83.174.0;d;1pkt 1fpkt", shape=diamond, color=yellow];
1865[label="203.164.26.154;d;2pkt 2fpkt", shape=diamond, color=yellow];
1877[label="20.152.39.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
1884[label="76.162.15.246;d;1pkt 1fpkt", shape=diamond, color=yellow];
1933[label="20.146.101.127;d;1pkt 1fpkt", shape=diamond, color=yellow];
1941[label="72.101.74.4;d;2pkt 2fpkt", shape=diamond, color=yellow];
1977[label="77.30.219.239;d;1pkt 1fpkt", shape=diamond, color=yellow];
2007[label="77.202.242.84;d;2pkt 2fpkt", shape=diamond, color=yellow];
2032[label="121.108.213.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
2053[label="18.144.13.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
2077[label="72.235.143.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
2091[label="203.168.86.249;d;2pkt 2fpkt", shape=diamond, color=yellow];
2180[label="200.226.23.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
2314[label="204.129.29.238;d;1pkt 1fpkt", shape=diamond, color=yellow];
2690[label="78.229.93.18;d;1pkt 1fpkt", shape=diamond, color=yellow];
2748[label="202.19.172.178;d;1pkt 1fpkt", shape=diamond, color=yellow];
2772[label="78.80.12.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
2774[label="20.209.66.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
2844[label="68.140.46.133;d;1pkt 1fpkt", shape=diamond, color=yellow];
2853[label="111.177.202.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
3046[label="77.32.94.243;d;1pkt 1fpkt", shape=diamond, color=yellow];
3157[label="72.16.75.134;d;2pkt 2fpkt", shape=diamond, color=yellow];
3195[label="200.252.158.230;d;1pkt 1fpkt", shape=diamond, color=yellow];
3252[label="205.115.39.216;d;1pkt 1fpkt", shape=diamond, color=yellow];
3370[label="119.2.224.249;d;2pkt 2fpkt", shape=diamond, color=yellow];
3376[label="19.71.211.76;d;1pkt 1fpkt", shape=diamond, color=yellow];
3434[label="19.179.75.59;d;1pkt 1fpkt", shape=diamond, color=yellow];
3995[label="21.166.69.40;d;2pkt 2fpkt", shape=diamond, color=yellow];
4021[label="204.187.246.97;d;1pkt 1fpkt", shape=diamond, color=yellow];
4060[label="68.173.186.53;d;2pkt 2fpkt", shape=diamond, color=yellow];
4434[label="204.187.244.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
4459[label="195.30.96.236;d;1pkt 1fpkt", shape=diamond, color=yellow];
4863[label="18.106.203.195;d;1pkt 1fpkt", shape=diamond, color=yellow];
5209[label="112.61.208.5;d;1pkt 1fpkt", shape=diamond, color=yellow];
5235[label="204.128.208.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
5667[label="115.26.27.15;d;1pkt 1fpkt", shape=diamond, color=yellow];
5962[label="202.85.93.121;d;1pkt 1fpkt", shape=hexagon, color=black];
6055[label="200.155.87.8;d;1pkt 1fpkt", shape=hexagon, color=black];
6062[label="18.66.156.248;d;1pkt 1fpkt", shape=hexagon, color=black];
6190[label="20.125.154.216;d;1pkt 1fpkt", shape=hexagon, color=black];
6241[label="203.164.26.154;d;1pkt 1fpkt", shape=hexagon, color=black];
6292[label="77.30.219.239;d;1pkt 1fpkt", shape=hexagon, color=black];
6466[label="213.42.135.123;s;1844pkt 1844fpkt", shape=hexagon, color=black];
6561[label="77.202.242.84;d;1pkt 1fpkt", shape=hexagon, color=black];
6587[label="203.168.86.249;d;1pkt 1fpkt", shape=hexagon, color=black];
6663[label="204.129.29.238;d;1pkt 1fpkt", shape=hexagon, color=black];
6822[label="21.66.36.254;d;1pkt 1fpkt", shape=hexagon, color=black];
6891[label="72.235.143.17;d;1pkt 1fpkt", shape=hexagon, color=black];
6918[label="200.226.23.76;d;1pkt 1fpkt", shape=hexagon, color=black];
6969[label="19.71.211.76;d;1pkt 1fpkt", shape=hexagon, color=black];
6986[label="77.86.144.224;d;1pkt 1fpkt", shape=hexagon, color=black];
7163[label="20.146.101.127;d;1pkt 1fpkt", shape=hexagon, color=black];
7213[label="205.115.39.216;d;1pkt 1fpkt", shape=hexagon, color=black];
7332[label="77.32.94.243;d;2pkt 2fpkt", shape=hexagon, color=black];
7363[label="21.166.69.40;d;3pkt 3fpkt", shape=hexagon, color=black];
8046[label="204.187.244.46;d;1pkt 1fpkt", shape=hexagon, color=black];
8158[label="118.77.4.74;d;1pkt 1fpkt", shape=hexagon, color=black];
8386[label="204.187.246.97;d;1pkt 1fpkt", shape=hexagon, color=black];
8533[label="76.162.15.246;d;1pkt 1fpkt", shape=hexagon, color=black];
8714[label="115.26.27.15;d;1pkt 1fpkt", shape=hexagon, color=black];
8728[label="195.30.96.236;d;1pkt 1fpkt", shape=hexagon, color=black];
11359[label="213.42.135.123;1996pkt 1996fpkt", shape=pentagon, color=darkviolet];
14310[label="213.42.135.123;1995pkt 1995fpkt", shape=invtriangle, color=brown];
15808[label="213.42.135.123;1996pkt 1996fpkt", shape=invhouse, color=bisque];
stat1698[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.42.135.123:40000, *:*}[45.7415%]&lt;BR/&gt;{213.42.135.123:4672, *:*}[43.5371%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4672: (24.5234%)&lt;BR/&gt; 40000: (23.1089%)&lt;BR/&gt; 40003: (1.58364%)&lt;BR/&gt; 4665: (0.399754%)&lt;BR/&gt; 4662: (0.307503%)&gt;];
}
610--611[label="1;1pkt 1fpkt"];
610--872[label="1;1pkt 1fpkt"];
610--1057[label="1;1pkt 1fpkt"];
610--1085[label="1;1pkt 1fpkt"];
610--1283[label="1;1pkt 1fpkt"];
610--1316[label="1;1pkt 1fpkt"];
610--1392[label="1;1pkt 1fpkt"];
610--1604[label="1;1pkt 1fpkt"];
610--1794[label="1;1pkt 1fpkt"];
610--1801[label="1;1pkt 1fpkt"];
610--1808[label="1;1pkt 1fpkt"];
610--1854[label="1;1pkt 1fpkt"];
610--1865[label="1;2pkt 2fpkt"];
610--1877[label="1;1pkt 1fpkt"];
610--1884[label="1;1pkt 1fpkt"];
610--1933[label="1;1pkt 1fpkt"];
610--1941[label="1;2pkt 2fpkt"];
610--1977[label="1;1pkt 1fpkt"];
610--2007[label="1;2pkt 2fpkt"];
610--2032[label="1;1pkt 1fpkt"];
610--2053[label="1;1pkt 1fpkt"];
610--2077[label="1;1pkt 1fpkt"];
610--2091[label="1;2pkt 2fpkt"];
610--2180[label="1;1pkt 1fpkt"];
610--2314[label="1;1pkt 1fpkt"];
610--2353[label="0.015873;1pkt 1fpkt"];
610--2690[label="1;1pkt 1fpkt"];
610--2748[label="1;1pkt 1fpkt"];
610--2772[label="1;1pkt 1fpkt"];
610--2774[label="1;1pkt 1fpkt"];
610--2844[label="1;1pkt 1fpkt"];
610--2853[label="1;1pkt 1fpkt"];
610--3046[label="1;1pkt 1fpkt"];
610--3157[label="1;2pkt 2fpkt"];
610--3195[label="1;1pkt 1fpkt"];
610--3252[label="1;1pkt 1fpkt"];
610--3370[label="1;2pkt 2fpkt"];
610--3376[label="1;1pkt 1fpkt"];
610--3434[label="1;1pkt 1fpkt"];
610--3995[label="1;2pkt 2fpkt"];
610--4021[label="1;1pkt 1fpkt"];
610--4039[label="0.666667;2pkt 2fpkt"];
610--4060[label="1;2pkt 2fpkt"];
610--4434[label="1;1pkt 1fpkt"];
610--4459[label="1;1pkt 1fpkt"];
610--4664[label="0.111111;1pkt 1fpkt"];
610--4863[label="1;1pkt 1fpkt"];
610--5209[label="1;1pkt 1fpkt"];
610--5235[label="1;1pkt 1fpkt"];
610--5548[label="1;1pkt 1fpkt"];
610--5667[label="1;1pkt 1fpkt"];
610--5962[label="1;1pkt 1fpkt"];
610--6055[label="1;1pkt 1fpkt"];
610--6062[label="1;1pkt 1fpkt"];
610--6190[label="1;1pkt 1fpkt"];
610--6241[label="1;1pkt 1fpkt"];
610--6292[label="1;1pkt 1fpkt"];
610--6466[label="1;1844pkt 1844fpkt"];
610--6467[label="1;1pkt 1fpkt"];
610--6561[label="1;1pkt 1fpkt"];
610--6587[label="1;1pkt 1fpkt"];
610--6663[label="1;1pkt 1fpkt"];
610--6822[label="1;1pkt 1fpkt"];
610--6891[label="1;1pkt 1fpkt"];
610--6918[label="1;1pkt 1fpkt"];
610--6969[label="1;1pkt 1fpkt"];
610--6986[label="1;1pkt 1fpkt"];
610--7163[label="1;1pkt 1fpkt"];
610--7213[label="1;1pkt 1fpkt"];
610--7332[label="1;2pkt 2fpkt"];
610--7363[label="1;3pkt 3fpkt"];
610--7653[label="0.666667;2pkt 2fpkt"];
610--7794[label="0.111111;1pkt 1fpkt"];
610--8046[label="1;1pkt 1fpkt"];
610--8158[label="1;1pkt 1fpkt"];
610--8386[label="1;1pkt 1fpkt"];
610--8533[label="1;1pkt 1fpkt"];
610--8618[label="1;1pkt 1fpkt"];
610--8714[label="1;1pkt 1fpkt"];
610--8728[label="1;1pkt 1fpkt"];
610--11359[label="1;1844pkt 1844fpkt"];
610--14310[label="0.999458;1843pkt 1843fpkt"];
610--15808[label="1;1844pkt 1844fpkt"];
872--5962[label="1;1pkt 1fpkt"];
872--6466[label="1;1pkt 1fpkt"];
872--11359[label="1;1pkt 1fpkt"];
872--14310[label="1;1pkt 1fpkt"];
872--15808[label="1;1pkt 1fpkt"];
1057--6466[label="1;1pkt 1fpkt"];
1057--6822[label="1;1pkt 1fpkt"];
1057--11359[label="1;1pkt 1fpkt"];
1057--14310[label="1;1pkt 1fpkt"];
1057--15808[label="1;1pkt 1fpkt"];
1085--6466[label="1;1pkt 1fpkt"];
1085--8158[label="1;1pkt 1fpkt"];
1085--11359[label="1;1pkt 1fpkt"];
1085--14310[label="1;1pkt 1fpkt"];
1085--15808[label="1;1pkt 1fpkt"];
1283--6055[label="1;1pkt 1fpkt"];
1283--6466[label="1;1pkt 1fpkt"];
1283--11359[label="1;1pkt 1fpkt"];
1283--14310[label="1;1pkt 1fpkt"];
1283--15808[label="1;1pkt 1fpkt"];
1316--6062[label="1;1pkt 1fpkt"];
1316--6466[label="1;1pkt 1fpkt"];
1316--11359[label="1;1pkt 1fpkt"];
1316--14310[label="1;1pkt 1fpkt"];
1316--15808[label="1;1pkt 1fpkt"];
1392--6466[label="1;1pkt 1fpkt"];
1392--11359[label="1;1pkt 1fpkt"];
1392--14310[label="1;1pkt 1fpkt"];
1392--15808[label="1;1pkt 1fpkt"];
1604--6466[label="1;1pkt 1fpkt"];
1604--6986[label="1;1pkt 1fpkt"];
1604--11359[label="1;1pkt 1fpkt"];
1604--14310[label="1;1pkt 1fpkt"];
1604--15808[label="1;1pkt 1fpkt"];
1794--6466[label="1;1pkt 1fpkt"];
1794--11359[label="1;1pkt 1fpkt"];
1794--14310[label="1;1pkt 1fpkt"];
1794--15808[label="1;1pkt 1fpkt"];
1801--6190[label="1;1pkt 1fpkt"];
1801--6466[label="1;1pkt 1fpkt"];
1801--11359[label="1;1pkt 1fpkt"];
1801--14310[label="1;1pkt 1fpkt"];
1801--15808[label="1;1pkt 1fpkt"];
1808--6466[label="1;1pkt 1fpkt"];
1808--11359[label="1;1pkt 1fpkt"];
1808--14310[label="1;1pkt 1fpkt"];
1808--15808[label="1;1pkt 1fpkt"];
1854--6466[label="1;1pkt 1fpkt"];
1854--11359[label="1;1pkt 1fpkt"];
1854--14310[label="1;1pkt 1fpkt"];
1854--15808[label="1;1pkt 1fpkt"];
1865--6241[label="1;1pkt 1fpkt"];
1865--6466[label="1;2pkt 2fpkt"];
1865--11359[label="1;2pkt 2fpkt"];
1865--14310[label="1;2pkt 2fpkt"];
1865--15808[label="1;2pkt 2fpkt"];
1877--6466[label="1;1pkt 1fpkt"];
1877--11359[label="1;1pkt 1fpkt"];
1877--14310[label="1;1pkt 1fpkt"];
1877--15808[label="1;1pkt 1fpkt"];
1884--6466[label="1;1pkt 1fpkt"];
1884--8533[label="1;1pkt 1fpkt"];
1884--11359[label="1;1pkt 1fpkt"];
1884--14310[label="1;1pkt 1fpkt"];
1884--15808[label="1;1pkt 1fpkt"];
1933--6466[label="1;1pkt 1fpkt"];
1933--7163[label="1;1pkt 1fpkt"];
1933--11359[label="1;1pkt 1fpkt"];
1933--14310[label="1;1pkt 1fpkt"];
1933--15808[label="1;1pkt 1fpkt"];
1941--6466[label="1;2pkt 2fpkt"];
1941--11359[label="1;2pkt 2fpkt"];
1941--14310[label="1;2pkt 2fpkt"];
1941--15808[label="1;2pkt 2fpkt"];
1977--6292[label="1;1pkt 1fpkt"];
1977--6466[label="1;1pkt 1fpkt"];
1977--11359[label="1;1pkt 1fpkt"];
1977--14310[label="1;1pkt 1fpkt"];
1977--15808[label="1;1pkt 1fpkt"];
2007--6466[label="1;2pkt 2fpkt"];
2007--6561[label="1;1pkt 1fpkt"];
2007--11359[label="1;2pkt 2fpkt"];
2007--14310[label="1;2pkt 2fpkt"];
2007--15808[label="1;2pkt 2fpkt"];
2032--6466[label="1;1pkt 1fpkt"];
2032--11359[label="1;1pkt 1fpkt"];
2032--14310[label="1;1pkt 1fpkt"];
2032--15808[label="1;1pkt 1fpkt"];
2053--6466[label="1;1pkt 1fpkt"];
2053--11359[label="1;1pkt 1fpkt"];
2053--14310[label="1;1pkt 1fpkt"];
2053--15808[label="1;1pkt 1fpkt"];
2077--6466[label="1;1pkt 1fpkt"];
2077--6891[label="1;1pkt 1fpkt"];
2077--11359[label="1;1pkt 1fpkt"];
2077--14310[label="1;1pkt 1fpkt"];
2077--15808[label="1;1pkt 1fpkt"];
2091--6466[label="1;2pkt 2fpkt"];
2091--6587[label="1;1pkt 1fpkt"];
2091--11359[label="1;2pkt 2fpkt"];
2091--14310[label="1;2pkt 2fpkt"];
2091--15808[label="1;2pkt 2fpkt"];
2180--6466[label="1;1pkt 1fpkt"];
2180--6918[label="1;1pkt 1fpkt"];
2180--11359[label="1;1pkt 1fpkt"];
2180--14310[label="1;1pkt 1fpkt"];
2180--15808[label="1;1pkt 1fpkt"];
2314--6466[label="1;1pkt 1fpkt"];
2314--6663[label="1;1pkt 1fpkt"];
2314--11359[label="1;1pkt 1fpkt"];
2314--14310[label="1;1pkt 1fpkt"];
2314--15808[label="1;1pkt 1fpkt"];
2690--6466[label="1;1pkt 1fpkt"];
2690--11359[label="1;1pkt 1fpkt"];
2690--14310[label="1;1pkt 1fpkt"];
2690--15808[label="1;1pkt 1fpkt"];
2748--6466[label="1;1pkt 1fpkt"];
2748--11359[label="1;1pkt 1fpkt"];
2748--14310[label="1;1pkt 1fpkt"];
2748--15808[label="1;1pkt 1fpkt"];
2772--6466[label="1;1pkt 1fpkt"];
2772--11359[label="1;1pkt 1fpkt"];
2772--14310[label="1;1pkt 1fpkt"];
2772--15808[label="1;1pkt 1fpkt"];
2774--6466[label="1;1pkt 1fpkt"];
2774--11359[label="1;1pkt 1fpkt"];
2774--14310[label="1;1pkt 1fpkt"];
2774--15808[label="1;1pkt 1fpkt"];
2844--6466[label="1;1pkt 1fpkt"];
2844--11359[label="1;1pkt 1fpkt"];
2844--14310[label="1;1pkt 1fpkt"];
2844--15808[label="1;1pkt 1fpkt"];
2853--6466[label="1;1pkt 1fpkt"];
2853--11359[label="1;1pkt 1fpkt"];
2853--14310[label="1;1pkt 1fpkt"];
2853--15808[label="1;1pkt 1fpkt"];
3046--6466[label="1;1pkt 1fpkt"];
3046--7332[label="1;1pkt 1fpkt"];
3046--11359[label="1;1pkt 1fpkt"];
3046--14310[label="1;1pkt 1fpkt"];
3046--15808[label="1;1pkt 1fpkt"];
3157--6466[label="1;2pkt 2fpkt"];
3157--11359[label="1;2pkt 2fpkt"];
3157--14310[label="1;2pkt 2fpkt"];
3157--15808[label="1;2pkt 2fpkt"];
3195--6466[label="1;1pkt 1fpkt"];
3195--11359[label="1;1pkt 1fpkt"];
3195--14310[label="1;1pkt 1fpkt"];
3195--15808[label="1;1pkt 1fpkt"];
3252--6466[label="1;1pkt 1fpkt"];
3252--7213[label="1;1pkt 1fpkt"];
3252--11359[label="1;1pkt 1fpkt"];
3252--14310[label="1;1pkt 1fpkt"];
3252--15808[label="1;1pkt 1fpkt"];
3370--6466[label="1;2pkt 2fpkt"];
3370--11359[label="1;2pkt 2fpkt"];
3370--14310[label="1;2pkt 2fpkt"];
3370--15808[label="1;2pkt 2fpkt"];
3376--6466[label="1;1pkt 1fpkt"];
3376--6969[label="1;1pkt 1fpkt"];
3376--11359[label="1;1pkt 1fpkt"];
3376--14310[label="1;1pkt 1fpkt"];
3376--15808[label="1;1pkt 1fpkt"];
3434--6466[label="1;1pkt 1fpkt"];
3434--11359[label="1;1pkt 1fpkt"];
3434--14310[label="1;1pkt 1fpkt"];
3434--15808[label="1;1pkt 1fpkt"];
3995--6466[label="1;2pkt 2fpkt"];
3995--7363[label="1;2pkt 2fpkt"];
3995--11359[label="1;2pkt 2fpkt"];
3995--14310[label="1;2pkt 2fpkt"];
3995--15808[label="1;2pkt 2fpkt"];
4021--6466[label="1;1pkt 1fpkt"];
4021--8386[label="1;1pkt 1fpkt"];
4021--11359[label="1;1pkt 1fpkt"];
4021--14310[label="1;1pkt 1fpkt"];
4021--15808[label="1;1pkt 1fpkt"];
4060--6466[label="1;2pkt 2fpkt"];
4060--11359[label="1;2pkt 2fpkt"];
4060--14310[label="1;2pkt 2fpkt"];
4060--15808[label="1;2pkt 2fpkt"];
4434--6466[label="1;1pkt 1fpkt"];
4434--8046[label="1;1pkt 1fpkt"];
4434--11359[label="1;1pkt 1fpkt"];
4434--14310[label="1;1pkt 1fpkt"];
4434--15808[label="1;1pkt 1fpkt"];
4459--6466[label="1;1pkt 1fpkt"];
4459--8728[label="1;1pkt 1fpkt"];
4459--11359[label="1;1pkt 1fpkt"];
4459--14310[label="1;1pkt 1fpkt"];
4459--15808[label="1;1pkt 1fpkt"];
4863--6466[label="1;1pkt 1fpkt"];
4863--11359[label="1;1pkt 1fpkt"];
4863--14310[label="1;1pkt 1fpkt"];
4863--15808[label="1;1pkt 1fpkt"];
5209--6466[label="1;1pkt 1fpkt"];
5209--11359[label="1;1pkt 1fpkt"];
5209--14310[label="1;1pkt 1fpkt"];
5209--15808[label="1;1pkt 1fpkt"];
5235--6466[label="1;1pkt 1fpkt"];
5235--11359[label="1;1pkt 1fpkt"];
5235--14310[label="1;1pkt 1fpkt"];
5235--15808[label="1;1pkt 1fpkt"];
5667--6466[label="1;1pkt 1fpkt"];
5667--8714[label="1;1pkt 1fpkt"];
5667--11359[label="1;1pkt 1fpkt"];
5667--14310[label="1;1pkt 1fpkt"];
5667--15808[label="1;1pkt 1fpkt"];
5962--6466[label="1;1pkt 1fpkt"];
5962--11359[label="1;1pkt 1fpkt"];
5962--14310[label="1;1pkt 1fpkt"];
5962--15808[label="1;1pkt 1fpkt"];
6055--6466[label="1;1pkt 1fpkt"];
6055--11359[label="1;1pkt 1fpkt"];
6055--14310[label="1;1pkt 1fpkt"];
6055--15808[label="1;1pkt 1fpkt"];
6062--6466[label="1;1pkt 1fpkt"];
6062--11359[label="1;1pkt 1fpkt"];
6062--14310[label="1;1pkt 1fpkt"];
6062--15808[label="1;1pkt 1fpkt"];
6190--6466[label="1;1pkt 1fpkt"];
6190--11359[label="1;1pkt 1fpkt"];
6190--14310[label="1;1pkt 1fpkt"];
6190--15808[label="1;1pkt 1fpkt"];
6241--6466[label="1;1pkt 1fpkt"];
6241--11359[label="1;1pkt 1fpkt"];
6241--14310[label="1;1pkt 1fpkt"];
6241--15808[label="1;1pkt 1fpkt"];
6292--6466[label="1;1pkt 1fpkt"];
6292--11359[label="1;1pkt 1fpkt"];
6292--14310[label="1;1pkt 1fpkt"];
6292--15808[label="1;1pkt 1fpkt"];
6466--6467[label="1;1pkt 1fpkt"];
6466--6561[label="1;1pkt 1fpkt"];
6466--6587[label="1;1pkt 1fpkt"];
6466--6663[label="1;1pkt 1fpkt"];
6466--6822[label="1;1pkt 1fpkt"];
6466--6891[label="1;1pkt 1fpkt"];
6466--6918[label="1;1pkt 1fpkt"];
6466--6969[label="1;1pkt 1fpkt"];
6466--6986[label="1;1pkt 1fpkt"];
6466--7163[label="1;1pkt 1fpkt"];
6466--7213[label="1;1pkt 1fpkt"];
6466--7332[label="1;2pkt 2fpkt"];
6466--7363[label="1;3pkt 3fpkt"];
6466--7653[label="0.666667;2pkt 2fpkt"];
6466--7794[label="0.111111;1pkt 1fpkt"];
6466--8046[label="1;1pkt 1fpkt"];
6466--8158[label="1;1pkt 1fpkt"];
6466--8386[label="1;1pkt 1fpkt"];
6466--8533[label="1;1pkt 1fpkt"];
6466--8618[label="1;1pkt 1fpkt"];
6466--8714[label="1;1pkt 1fpkt"];
6466--8728[label="1;1pkt 1fpkt"];
6466--11359[label="1;1844pkt 1844fpkt"];
6466--14310[label="0.999458;1843pkt 1843fpkt"];
6466--15808[label="1;1844pkt 1844fpkt"];
6561--11359[label="1;1pkt 1fpkt"];
6561--14310[label="1;1pkt 1fpkt"];
6561--15808[label="1;1pkt 1fpkt"];
6587--11359[label="1;1pkt 1fpkt"];
6587--14310[label="1;1pkt 1fpkt"];
6587--15808[label="1;1pkt 1fpkt"];
6663--11359[label="1;1pkt 1fpkt"];
6663--14310[label="1;1pkt 1fpkt"];
6663--15808[label="1;1pkt 1fpkt"];
6822--11359[label="1;1pkt 1fpkt"];
6822--14310[label="1;1pkt 1fpkt"];
6822--15808[label="1;1pkt 1fpkt"];
6891--11359[label="1;1pkt 1fpkt"];
6891--14310[label="1;1pkt 1fpkt"];
6891--15808[label="1;1pkt 1fpkt"];
6918--11359[label="1;1pkt 1fpkt"];
6918--14310[label="1;1pkt 1fpkt"];
6918--15808[label="1;1pkt 1fpkt"];
6969--11359[label="1;1pkt 1fpkt"];
6969--14310[label="1;1pkt 1fpkt"];
6969--15808[label="1;1pkt 1fpkt"];
6986--11359[label="1;1pkt 1fpkt"];
6986--14310[label="1;1pkt 1fpkt"];
6986--15808[label="1;1pkt 1fpkt"];
7163--11359[label="1;1pkt 1fpkt"];
7163--14310[label="1;1pkt 1fpkt"];
7163--15808[label="1;1pkt 1fpkt"];
7213--11359[label="1;1pkt 1fpkt"];
7213--14310[label="1;1pkt 1fpkt"];
7213--15808[label="1;1pkt 1fpkt"];
7332--11359[label="1;2pkt 2fpkt"];
7332--14310[label="1;2pkt 2fpkt"];
7332--15808[label="1;2pkt 2fpkt"];
7363--11359[label="1;3pkt 3fpkt"];
7363--14310[label="1;3pkt 3fpkt"];
7363--15808[label="1;3pkt 3fpkt"];
8046--11359[label="1;1pkt 1fpkt"];
8046--14310[label="1;1pkt 1fpkt"];
8046--15808[label="1;1pkt 1fpkt"];
8158--11359[label="1;1pkt 1fpkt"];
8158--14310[label="1;1pkt 1fpkt"];
8158--15808[label="1;1pkt 1fpkt"];
8386--11359[label="1;1pkt 1fpkt"];
8386--14310[label="1;1pkt 1fpkt"];
8386--15808[label="1;1pkt 1fpkt"];
8533--11359[label="1;1pkt 1fpkt"];
8533--14310[label="1;1pkt 1fpkt"];
8533--15808[label="1;1pkt 1fpkt"];
8714--11359[label="1;1pkt 1fpkt"];
8714--14310[label="1;1pkt 1fpkt"];
8714--15808[label="1;1pkt 1fpkt"];
8728--11359[label="1;1pkt 1fpkt"];
8728--14310[label="1;1pkt 1fpkt"];
8728--15808[label="1;1pkt 1fpkt"];
11359--14310[label="1;1995pkt 1995fpkt"];
11359--15808[label="1;1996pkt 1996fpkt"];
14310--15808[label="1;1995pkt 1995fpkt"];
</description>
    <slice>
      <filter src_ip="213.42.135.123" src_port="40000"/>
      <filter src_ip="213.42.135.123" src_port="4672"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.189.78.124"/>
    </slice>
    <from sec="1223614834" usec="0"/>
    <to sec="1223614848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.50.244.125"/>
    </slice>
    <from sec="1223615281" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.214.48.126"/>
    </slice>
    <from sec="1223615299" usec="0"/>
    <to sec="1223615320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.150.208.126"/>
    </slice>
    <from sec="1223615651" usec="0"/>
    <to sec="1223615660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1703{
style=filled;
color=gray75;
11398[label="142.243.235.126;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14334[label="142.243.235.126;1pkt 1fpkt", shape=invtriangle, color=brown];
15820[label="142.243.235.126;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1703[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.235.126:80, 96.16.224.174:50234}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50234: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11398--14334[label="1;1pkt 1fpkt"];
11398--15820[label="1;1pkt 1fpkt"];
14334--15820[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="96.16.224.174" dst_port="50234" src_ip="142.243.235.126" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="124.191.31.127"/>
    </slice>
    <from sec="1223615338" usec="0"/>
    <to sec="1223615344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.146.101.127"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.138.109.127"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.160.31.128"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1708{
style=filled;
color=gray75;
11449[label="143.112.162.129;13pkt 13fpkt", shape=pentagon, color=darkviolet];
14359[label="143.112.162.129;13pkt 13fpkt", shape=invtriangle, color=brown];
15834[label="143.112.162.129;12pkt 12fpkt", shape=invhouse, color=bisque];
stat1708[shape=component, label=&lt;Rules:&lt;BR/&gt;{143.112.162.129:*, 136.228.34.160:443}[53.8462%]&lt;BR/&gt;{143.112.162.129:*, 136.228.34.5:443}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 25537: (3.94737%)&lt;BR/&gt; 24839: (3.94737%)&lt;BR/&gt; 24478: (3.94737%)&lt;BR/&gt; 23393: (3.94737%)&gt;];
}
11449--14359[label="1;13pkt 13fpkt"];
11449--15834[label="1;12pkt 12fpkt"];
14359--15834[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.34.160" dst_port="443" src_ip="143.112.162.129"/>
      <filter dst_ip="136.228.34.5" dst_port="443" src_ip="143.112.162.129"/>
    </slice>
    <from sec="1223615519" usec="0"/>
    <to sec="1223615602" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.90.232.129"/>
    </slice>
    <from sec="1223615125" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1710{
style=filled;
color=gray75;
11459[label="142.243.51.130;19pkt 19fpkt", shape=pentagon, color=darkviolet];
14364[label="142.243.51.130;20pkt 20fpkt", shape=invtriangle, color=brown];
15836[label="142.243.51.130;19pkt 19fpkt", shape=invhouse, color=bisque];
stat1710[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.51.130:995, *:*}[70%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (34.4828%)&lt;BR/&gt; 465: (7.75862%)&lt;BR/&gt; 110: (7.75862%)&lt;BR/&gt; 65089: (2.58621%)&lt;BR/&gt; 51682: (2.58621%)&gt;];
}
11459--14364[label="1;19pkt 19fpkt"];
11459--15836[label="1;19pkt 19fpkt"];
14364--15836[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter src_ip="142.243.51.130" src_port="995"/>
    </slice>
    <from sec="1223614856" usec="0"/>
    <to sec="1223615477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.7.134.130"/>
    </slice>
    <from sec="1223615513" usec="0"/>
    <to sec="1223615528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.16.247.130"/>
    </slice>
    <from sec="1223615607" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1713{
style=filled;
color=gray75;
11480[label="20.209.48.131;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14373[label="20.209.48.131;1pkt 1fpkt", shape=invtriangle, color=brown];
15841[label="20.209.48.131;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1713[shape=component, label=&lt;Rules:&lt;BR/&gt;{20.209.48.131:1908, 142.243.32.170:445}[50%]&lt;BR/&gt;{20.209.48.131:4357, 142.243.101.186:445}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 1908: (37.5%)&lt;BR/&gt; 4357: (12.5%)&gt;];
}
11480--14373[label="1;1pkt 1fpkt"];
11480--15841[label="1;1pkt 1fpkt"];
14373--15841[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.101.186" dst_port="445" src_ip="20.209.48.131" src_port="4357"/>
      <filter dst_ip="142.243.32.170" dst_port="445" src_ip="20.209.48.131" src_port="1908"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.237.242.131"/>
    </slice>
    <from sec="1223614812" usec="0"/>
    <to sec="1223615221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.102.40.132"/>
    </slice>
    <from sec="1223614849" usec="0"/>
    <to sec="1223614852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1716{
style=filled;
color=gray75;
11522[label="213.48.17.134;9pkt 9fpkt", shape=pentagon, color=darkviolet];
14395[label="213.48.17.134;8pkt 8fpkt", shape=invtriangle, color=brown];
15852[label="213.48.17.134;8pkt 8fpkt", shape=invhouse, color=bisque];
stat1716[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.48.17.134:80, 136.228.172.54:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1522: (6%)&lt;BR/&gt; 1521: (6%)&lt;BR/&gt; 1514: (6%)&lt;BR/&gt; 1491: (6%)&gt;];
}
11522--14395[label="1;8pkt 8fpkt"];
11522--15852[label="1;8pkt 8fpkt"];
14395--15852[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.172.54" src_ip="213.48.17.134" src_port="80"/>
    </slice>
    <from sec="1223614874" usec="0"/>
    <to sec="1223615141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1717{
style=filled;
color=gray75;
1479[label="145.218.178.84;d;14pkt 14fpkt", shape=diamond, color=yellow];
12634[label="213.33.146.207;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14958[label="213.33.146.207;6pkt 6fpkt", shape=invtriangle, color=brown];
16165[label="213.33.146.207;6pkt 6fpkt", shape=invhouse, color=bisque];
stat1717[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.147.134:*, 145.218.178.84:80}[53.3333%]&lt;BR/&gt;{213.33.146.207:*, 145.218.178.84:80}[40%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57551: (6.25%)&lt;BR/&gt; 57537: (6.25%)&lt;BR/&gt; 57525: (6.25%)&lt;BR/&gt; 57524: (6.25%)&gt;];
}
1479--1480[label="0.727273;8pkt 8fpkt"];
1479--11527[label="0.571429;8pkt 8fpkt"];
1479--12634[label="0.833333;5pkt 5fpkt"];
1479--14398[label="0.571429;8pkt 8fpkt"];
1479--14958[label="0.833333;5pkt 5fpkt"];
1479--15853[label="0.571429;8pkt 8fpkt"];
1479--16165[label="0.833333;5pkt 5fpkt"];
12634--14958[label="1;6pkt 6fpkt"];
12634--16165[label="1;6pkt 6fpkt"];
14958--16165[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="145.218.178.84" dst_port="80" src_ip="213.33.147.134"/>
      <filter dst_ip="145.218.178.84" dst_port="80" src_ip="213.33.146.207"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223614960" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="96.143.61.135"/>
    </slice>
    <from sec="1223615309" usec="0"/>
    <to sec="1223615349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,010,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1719{
style=filled;
color=gray75;
5547[label="136.228.150.136;s;35pkt 35fpkt", shape=diamond, color=yellow];
11552[label="136.228.150.136;38pkt 38fpkt", shape=pentagon, color=darkviolet];
14412[label="136.228.150.136;39pkt 39fpkt", shape=invtriangle, color=brown];
stat1719[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.150.136:25, 200.107.9.163:*}[27.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.3214%)&lt;BR/&gt; 110: (2.67857%)&lt;BR/&gt; 63089: (1.33929%)&lt;BR/&gt; 62769: (1.33929%)&lt;BR/&gt; 62461: (1.33929%)&gt;];
}
5547--9196[label="0.0571429;2pkt 2fpkt"];
5547--11552[label="0.942857;33pkt 33fpkt"];
5547--14412[label="0.971429;34pkt 34fpkt"];
11552--14412[label="1;38pkt 38fpkt"];
</description>
    <slice>
      <filter dst_ip="200.107.9.163" src_ip="136.228.150.136" src_port="25"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615695" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1720{
style=filled;
color=gray75;
11556[label="136.228.172.136;17pkt 17fpkt", shape=pentagon, color=darkviolet];
14413[label="136.228.172.136;17pkt 17fpkt", shape=invtriangle, color=brown];
stat1720[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.172.136:*, 202.80.218.53:25}[23.5294%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (47.0588%)&lt;BR/&gt; 50848: (2.94118%)&lt;BR/&gt; 3256: (2.94118%)&lt;BR/&gt; 3249: (2.94118%)&lt;BR/&gt; 3247: (2.94118%)&gt;];
}
11556--14413[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="202.80.218.53" dst_port="25" src_ip="136.228.172.136"/>
    </slice>
    <from sec="1223615072" usec="0"/>
    <to sec="1223615598" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.121.77.137"/>
    </slice>
    <from sec="1223615386" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="208.10.79.137"/>
    </slice>
    <from sec="1223615574" usec="0"/>
    <to sec="1223615584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.13.128.137"/>
    </slice>
    <from sec="1223615344" usec="0"/>
    <to sec="1223615354" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1724{
style=filled;
color=gray75;
11576[label="212.21.134.137;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14423[label="212.21.134.137;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1724[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.134.137:25, 124.15.58.34:50414}[25%]&lt;BR/&gt;{212.21.134.137:2428, 192.67.87.76:2703}[25%]&lt;BR/&gt;{212.21.134.137:1880, 192.67.87.77:2703}[25%]&lt;BR/&gt;{212.21.134.137:2314, 192.67.86.144:2703}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (37.5%)&lt;BR/&gt; 50414: (12.5%)&lt;BR/&gt; 2428: (12.5%)&lt;BR/&gt; 2314: (12.5%)&lt;BR/&gt; 1880: (12.5%)&gt;];
}
11576--14423[label="1;4pkt 4fpkt"];
11576--15864[label="1;4pkt 4fpkt"];
14423--15864[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="192.67.86.144" dst_port="2703" src_ip="212.21.134.137" src_port="2314"/>
      <filter dst_ip="192.67.87.77" dst_port="2703" src_ip="212.21.134.137" src_port="1880"/>
      <filter dst_ip="192.67.87.76" dst_port="2703" src_ip="212.21.134.137" src_port="2428"/>
      <filter dst_ip="124.15.58.34" dst_port="50414" src_ip="212.21.134.137" src_port="25"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.184.160.137"/>
    </slice>
    <from sec="1223615684" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="118.78.201.137"/>
    </slice>
    <from sec="1223614889" usec="0"/>
    <to sec="1223614894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1727{
style=filled;
color=gray75;
11589[label="142.243.74.138;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14429[label="142.243.74.138;1pkt 1fpkt", shape=invtriangle, color=brown];
15870[label="142.243.74.138;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1727[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.74.138:4097, 195.136.224.231:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4097: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11589--14429[label="1;1pkt 1fpkt"];
11589--15870[label="1;1pkt 1fpkt"];
14429--15870[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="195.136.224.231" dst_port="80" src_ip="142.243.74.138" src_port="4097"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.149.97.138"/>
    </slice>
    <from sec="1223615198" usec="0"/>
    <to sec="1223615201" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.252.90.139"/>
    </slice>
    <from sec="1223615355" usec="0"/>
    <to sec="1223615360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.105.221.139"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1731{
style=filled;
color=gray75;
11617[label="142.243.245.139;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14441[label="142.243.245.139;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1731[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.245.139:80, 122.74.175.74:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.4545%)&lt;BR/&gt; 59917: (9.09091%)&lt;BR/&gt; 59814: (9.09091%)&lt;BR/&gt; 58532: (9.09091%)&lt;BR/&gt; 40417: (9.09091%)&gt;];
}
11617--14441[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="122.74.175.74" src_ip="142.243.245.139" src_port="80"/>
    </slice>
    <from sec="1223614853" usec="0"/>
    <to sec="1223615401" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1732{
style=filled;
color=gray75;
11623[label="195.154.52.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14444[label="195.154.52.140;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1732[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.154.52.140:80, 136.228.119.13:1365}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1365: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11623--14444[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.119.13" dst_port="1365" src_ip="195.154.52.140" src_port="80"/>
    </slice>
    <from sec="1223615622" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1733{
style=filled;
color=gray75;
2850[label="164.25.108.21;d;128pkt 128fpkt", shape=diamond, color=yellow];
6636[label="164.25.108.21;d;65pkt 65fpkt", shape=hexagon, color=black];
11624[label="212.156.54.140;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14445[label="212.156.54.140;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1733[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.108.21:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 63734: (0.888889%)&lt;BR/&gt; 63733: (0.888889%)&lt;BR/&gt; 63582: (0.888889%)&lt;BR/&gt; 63577: (0.888889%)&gt;];
}
2850--6636[label="1;65pkt 65fpkt"];
2850--9177[label="0.0546875;7pkt 7fpkt"];
2850--9217[label="0.0546875;7pkt 7fpkt"];
2850--9251[label="0.0546875;7pkt 7fpkt"];
2850--10611[label="0.0234375;3pkt 3fpkt"];
2850--11624[label="1;16pkt 16fpkt"];
2850--14445[label="1;16pkt 16fpkt"];
6636--11624[label="1;16pkt 16fpkt"];
6636--14445[label="1;16pkt 16fpkt"];
11624--14445[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.108.21" dst_port="25"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.77.140"/>
    </slice>
    <from sec="1223615416" usec="0"/>
    <to sec="1223615442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1735{
style=filled;
color=gray75;
11631[label="72.141.138.140;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14448[label="72.141.138.140;1pkt 1fpkt", shape=invtriangle, color=brown];
15881[label="72.141.138.140;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1735[shape=component, label=&lt;Rules:&lt;BR/&gt;{72.141.138.140:17928, 212.21.136.148:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17928: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11631--14448[label="1;1pkt 1fpkt"];
11631--15881[label="1;1pkt 1fpkt"];
14448--15881[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.136.148" dst_port="80" src_ip="72.141.138.140" src_port="17928"/>
    </slice>
    <from sec="1223615038" usec="0"/>
    <to sec="1223615662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.225.215.140"/>
    </slice>
    <from sec="1223615118" usec="0"/>
    <to sec="1223615137" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1737{
style=filled;
color=gray75;
11645[label="21.64.67.141;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14454[label="21.64.67.141;1pkt 1fpkt", shape=invtriangle, color=brown];
15884[label="21.64.67.141;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1737[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.64.67.141:0, 213.33.136.80:0}[50%]&lt;BR/&gt;{21.64.67.141:8016, 213.33.136.80:1044}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (75%)&lt;BR/&gt; 8016: (12.5%)&lt;BR/&gt; 1044: (12.5%)&gt;];
}
11645--14454[label="1;1pkt 1fpkt"];
11645--15884[label="1;1pkt 1fpkt"];
14454--15884[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.136.80" dst_port="1044" src_ip="21.64.67.141" src_port="8016"/>
      <filter dst_ip="213.33.136.80" src_ip="21.64.67.141"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615694" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="124.250.156.142"/>
    </slice>
    <from sec="1223614927" usec="0"/>
    <to sec="1223614933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="221.112.183.143"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.80.0.144"/>
    </slice>
    <from sec="1223614867" usec="0"/>
    <to sec="1223614902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1741{
style=filled;
color=gray75;
11690[label="142.243.54.144;5pkt 5fpkt", shape=pentagon, color=darkviolet];
14475[label="142.243.54.144;5pkt 5fpkt", shape=invtriangle, color=brown];
15896[label="142.243.54.144;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1741[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.54.144:443, 76.174.200.178:1029}[20%]&lt;BR/&gt;{142.243.54.144:443, 76.174.200.178:1030}[20%]&lt;BR/&gt;{142.243.54.144:443, 76.174.200.178:1049}[20%]&lt;BR/&gt;{142.243.54.144:443, 76.174.200.178:4973}[20%]&lt;BR/&gt;{142.243.54.144:443, 76.174.200.178:4980}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4980: (10.7143%)&lt;BR/&gt; 4973: (10.7143%)&lt;BR/&gt; 1049: (10.7143%)&lt;BR/&gt; 1029: (10.7143%)&gt;];
}
11690--14475[label="1;5pkt 5fpkt"];
11690--15896[label="1;4pkt 4fpkt"];
14475--15896[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="76.174.200.178" dst_port="4980" src_ip="142.243.54.144" src_port="443"/>
      <filter dst_ip="76.174.200.178" dst_port="4973" src_ip="142.243.54.144" src_port="443"/>
      <filter dst_ip="76.174.200.178" dst_port="1049" src_ip="142.243.54.144" src_port="443"/>
      <filter dst_ip="76.174.200.178" dst_port="1030" src_ip="142.243.54.144" src_port="443"/>
      <filter dst_ip="76.174.200.178" dst_port="1029" src_ip="142.243.54.144" src_port="443"/>
    </slice>
    <from sec="1223614831" usec="0"/>
    <to sec="1223615689" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1742{
style=filled;
color=gray75;
11692[label="208.45.72.144;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14476[label="208.45.72.144;1pkt 1fpkt", shape=invtriangle, color=brown];
15897[label="208.45.72.144;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1742[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.45.72.144:80, 136.228.25.103:10034}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10034: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11692--14476[label="1;1pkt 1fpkt"];
11692--15897[label="1;1pkt 1fpkt"];
14476--15897[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.25.103" dst_port="10034" src_ip="208.45.72.144" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1743{
style=filled;
color=gray75;
11698[label="99.86.132.144;34pkt 34fpkt", shape=pentagon, color=darkviolet];
14479[label="99.86.132.144;35pkt 35fpkt", shape=invtriangle, color=brown];
15899[label="99.86.132.144;35pkt 35fpkt", shape=invhouse, color=bisque];
stat1743[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.86.132.144:80, 142.16.214.160:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4368: (1.44231%)&lt;BR/&gt; 4367: (1.44231%)&lt;BR/&gt; 4366: (1.44231%)&lt;BR/&gt; 4365: (1.44231%)&gt;];
}
11698--14479[label="1;34pkt 34fpkt"];
11698--15899[label="1;34pkt 34fpkt"];
14479--15899[label="1;35pkt 35fpkt"];
</description>
    <slice>
      <filter dst_ip="142.16.214.160" src_ip="99.86.132.144" src_port="80"/>
    </slice>
    <from sec="1223615013" usec="0"/>
    <to sec="1223615021" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.86.229.144"/>
    </slice>
    <from sec="1223615253" usec="0"/>
    <to sec="1223615267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.149.18.145"/>
    </slice>
    <from sec="1223614844" usec="0"/>
    <to sec="1223614846" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.140.98.145"/>
    </slice>
    <from sec="1223614980" usec="0"/>
    <to sec="1223614987" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1747{
style=filled;
color=gray75;
11732[label="136.228.193.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14495[label="136.228.193.146;2pkt 2fpkt", shape=invtriangle, color=brown];
15907[label="136.228.193.146;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1747[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.193.146:51542, 106.247.166.32:80}[50%]&lt;BR/&gt;{136.228.193.146:51544, 106.247.166.32:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51544: (25%)&lt;BR/&gt; 51542: (25%)&gt;];
}
11732--14495[label="1;2pkt 2fpkt"];
11732--15907[label="1;2pkt 2fpkt"];
14495--15907[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="106.247.166.32" dst_port="80" src_ip="136.228.193.146" src_port="51544"/>
      <filter dst_ip="106.247.166.32" dst_port="80" src_ip="136.228.193.146" src_port="51542"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1748{
style=filled;
color=gray75;
11734[label="136.228.208.146;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14496[label="136.228.208.146;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1748[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.208.146:50351, 99.46.152.6:80}[50%]&lt;BR/&gt;{136.228.208.146:50412, 107.142.135.83:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50351: (33.3333%)&lt;BR/&gt; 50412: (16.6667%)&gt;];
}
11734--14496[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="107.142.135.83" dst_port="80" src_ip="136.228.208.146" src_port="50412"/>
      <filter dst_ip="99.46.152.6" dst_port="80" src_ip="136.228.208.146" src_port="50351"/>
    </slice>
    <from sec="1223614854" usec="0"/>
    <to sec="1223615411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1749{
style=filled;
color=gray75;
11736[label="195.146.224.146;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14498[label="195.146.224.146;4pkt 4fpkt", shape=invtriangle, color=brown];
15909[label="195.146.224.146;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1749[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.146.224.146:53, 136.228.236.2:53}[25%]&lt;BR/&gt;{195.146.224.146:53, 136.228.246.227:53}[25%]&lt;BR/&gt;{195.146.224.146:2354, 136.228.138.83:80}[25%]&lt;BR/&gt;{195.146.224.146:2355, 136.228.138.83:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (45.4545%)&lt;BR/&gt; 80: (27.2727%)&lt;BR/&gt; 2355: (13.6364%)&lt;BR/&gt; 2354: (13.6364%)&gt;];
}
11736--14498[label="1;3pkt 3fpkt"];
11736--15909[label="1;3pkt 3fpkt"];
14498--15909[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.138.83" dst_port="80" src_ip="195.146.224.146" src_port="2355"/>
      <filter dst_ip="136.228.138.83" dst_port="80" src_ip="195.146.224.146" src_port="2354"/>
      <filter dst_ip="136.228.246.227" dst_port="53" src_ip="195.146.224.146" src_port="53"/>
      <filter dst_ip="136.228.236.2" dst_port="53" src_ip="195.146.224.146" src_port="53"/>
    </slice>
    <from sec="1223615689" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.94.217.147"/>
    </slice>
    <from sec="1223615440" usec="0"/>
    <to sec="1223615535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.137.103.148"/>
    </slice>
    <from sec="1223615161" usec="0"/>
    <to sec="1223615164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="116.221.5.150"/>
    </slice>
    <from sec="1223615296" usec="0"/>
    <to sec="1223615301" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="59.198.235.150"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223614912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.172.13.151"/>
    </slice>
    <from sec="1223615671" usec="0"/>
    <to sec="1223615679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.221.101.151"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.69.168.151"/>
    </slice>
    <from sec="1223615142" usec="0"/>
    <to sec="1223615151" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1757{
style=filled;
color=gray75;
11819[label="204.185.183.151;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14541[label="204.185.183.151;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1757[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.185.183.151:80, 212.21.138.195:56726}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 56726: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11819--14541[label="1;1pkt 1fpkt"];
11819--15931[label="1;1pkt 1fpkt"];
14541--15931[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" dst_port="56726" src_ip="204.185.183.151" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="86.137.55.152"/>
    </slice>
    <from sec="1223615150" usec="0"/>
    <to sec="1223615154" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1759{
style=filled;
color=gray75;
11854[label="212.73.32.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14556[label="212.73.32.154;2pkt 2fpkt", shape=invtriangle, color=brown];
15939[label="212.73.32.154;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1759[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.73.32.154:54808, 212.21.128.71:58485}[50%]&lt;BR/&gt;{212.73.32.154:0, 213.42.157.80:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58485: (37.5%)&lt;BR/&gt; 54808: (37.5%)&lt;BR/&gt; 0: (25%)&gt;];
}
11854--14556[label="1;1pkt 1fpkt"];
11854--15939[label="1;1pkt 1fpkt"];
14556--15939[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.157.80" src_ip="212.73.32.154"/>
      <filter dst_ip="212.21.128.71" dst_port="58485" src_ip="212.73.32.154" src_port="54808"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.120.86.154"/>
    </slice>
    <from sec="1223615227" usec="0"/>
    <to sec="1223615278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,010,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.73.93.154"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1762{
style=filled;
color=gray75;
11863[label="76.83.114.154;37pkt 37fpkt", shape=pentagon, color=darkviolet];
14563[label="76.83.114.154;38pkt 38fpkt", shape=invtriangle, color=brown];
stat1762[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.83.114.154:*, 212.21.138.195:*}[42.1053%]&lt;BR/&gt;{76.83.114.154:*, 212.21.138.202:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3128: (9.33333%)&lt;BR/&gt; 3127: (9.33333%)&lt;BR/&gt; 3124: (8.66667%)&lt;BR/&gt; 203: (5.33333%)&lt;BR/&gt; 88: (5.33333%)&gt;];
}
11863--14563[label="1;37pkt 37fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.138.195" src_ip="76.83.114.154"/>
      <filter dst_ip="212.21.138.202" src_ip="76.83.114.154"/>
    </slice>
    <from sec="1223615633" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1763{
style=filled;
color=gray75;
5520[label="164.25.94.179;d;24pkt 24fpkt", shape=diamond, color=yellow];
11869[label="96.16.228.154;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14566[label="96.16.228.154;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1763[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.100.243.86:*, 164.25.94.179:80}[45.8333%]&lt;BR/&gt;{96.16.224.203:*, 164.25.94.179:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 42689: (5.76923%)&lt;BR/&gt; 64310: (1.92308%)&lt;BR/&gt; 64051: (1.92308%)&lt;BR/&gt; 63826: (1.92308%)&gt;];
}
5520--11869[label="1;1pkt 1fpkt"];
5520--14566[label="1;1pkt 1fpkt"];
11869--14566[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.94.179" dst_port="80" src_ip="107.100.243.86"/>
      <filter dst_ip="164.25.94.179" dst_port="80" src_ip="96.16.224.203"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1764{
style=filled;
color=gray75;
11872[label="217.53.13.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14568[label="217.53.13.155;2pkt 2fpkt", shape=invtriangle, color=brown];
15945[label="217.53.13.155;2pkt 2fpkt", shape=invhouse, color=bisque];
stat1764[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.53.13.155:80, 164.25.79.55:54396}[50%]&lt;BR/&gt;{217.53.13.155:80, 164.25.79.55:54655}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54655: (25%)&lt;BR/&gt; 54396: (25%)&gt;];
}
11872--14568[label="1;2pkt 2fpkt"];
11872--15945[label="1;2pkt 2fpkt"];
14568--15945[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.79.55" dst_port="54655" src_ip="217.53.13.155" src_port="80"/>
      <filter dst_ip="164.25.79.55" dst_port="54396" src_ip="217.53.13.155" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.217.45.155"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1766{
style=filled;
color=gray75;
1862[label="21.77.52.155;s;3323pkt 3323fpkt", shape=diamond, color=yellow];
3758[label="106.244.179.173;s;1pkt 1fpkt", shape=diamond, color=yellow];
4114[label="164.25.33.133;d;2pkt 2fpkt", shape=diamond, color=yellow];
7137[label="21.77.52.155;s;2236pkt 2236fpkt", shape=hexagon, color=black];
11877[label="21.77.52.155;3602pkt 3602fpkt", shape=pentagon, color=darkviolet];
14572[label="21.77.52.155;3602pkt 3602fpkt", shape=invtriangle, color=brown];
15948[label="21.77.52.155;3603pkt 3603fpkt", shape=invhouse, color=bisque];
stat1766[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.77.52.155:1141, *:1434}[99.9723%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (49.9939%)&lt;BR/&gt; 1141: (49.9939%)&lt;BR/&gt; 37800: (0.00610911%)&lt;BR/&gt; 80: (0.00610911%)&gt;];
}
1862--2178[label="0.00101523;1pkt 1fpkt"];
1862--4114[label="0.5;1pkt 1fpkt"];
1862--5902[label="0.000959693;1pkt 1fpkt"];
1862--7137[label="1;2236pkt 2236fpkt"];
1862--8825[label="0.000959693;1pkt 1fpkt"];
1862--9179[label="0.0971279;186pkt 186fpkt"];
1862--9219[label="0.0971279;186pkt 186fpkt"];
1862--9253[label="0.0970772;186pkt 186fpkt"];
1862--11877[label="0.999699;3322pkt 3322fpkt"];
1862--14572[label="0.999699;3322pkt 3322fpkt"];
1862--15948[label="1;3323pkt 3323fpkt"];
3758--4114[label="1;1pkt 1fpkt"];
4114--7137[label="0.5;1pkt 1fpkt"];
4114--11877[label="0.5;1pkt 1fpkt"];
4114--14572[label="0.5;1pkt 1fpkt"];
4114--15948[label="0.5;1pkt 1fpkt"];
7137--8825[label="0.000959693;1pkt 1fpkt"];
7137--9179[label="0.0971279;186pkt 186fpkt"];
7137--9219[label="0.0971279;186pkt 186fpkt"];
7137--9253[label="0.0970772;186pkt 186fpkt"];
7137--11877[label="0.999553;2235pkt 2235fpkt"];
7137--14572[label="0.999553;2235pkt 2235fpkt"];
7137--15948[label="1;2236pkt 2236fpkt"];
11877--14572[label="1;3602pkt 3602fpkt"];
11877--15948[label="1;3602pkt 3602fpkt"];
14572--15948[label="1;3602pkt 3602fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="21.77.52.155" src_port="1141"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1767{
style=filled;
color=gray75;
11880[label="76.130.148.155;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14574[label="76.130.148.155;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1767[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.130.148.155:23879, 213.42.171.178:53}[25%]&lt;BR/&gt;{76.130.148.155:58327, 213.42.171.178:53}[25%]&lt;BR/&gt;{76.130.148.155:23242, 162.73.106.192:53}[25%]&lt;BR/&gt;{76.130.148.155:37190, 162.73.106.192:53}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 58327: (12.5%)&lt;BR/&gt; 37190: (12.5%)&lt;BR/&gt; 23879: (12.5%)&lt;BR/&gt; 23242: (12.5%)&gt;];
}
11880--14574[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.106.192" dst_port="53" src_ip="76.130.148.155" src_port="37190"/>
      <filter dst_ip="162.73.106.192" dst_port="53" src_ip="76.130.148.155" src_port="23242"/>
      <filter dst_ip="213.42.171.178" dst_port="53" src_ip="76.130.148.155" src_port="58327"/>
      <filter dst_ip="213.42.171.178" dst_port="53" src_ip="76.130.148.155" src_port="23879"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1768{
style=filled;
color=gray75;
11881[label="149.18.149.155;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14575[label="149.18.149.155;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1768[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.18.149.155:80, 136.228.104.199:4637}[50%]&lt;BR/&gt;{149.18.149.155:80, 136.228.104.199:4639}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4639: (33.3333%)&lt;BR/&gt; 4637: (16.6667%)&gt;];
}
11881--14575[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.104.199" dst_port="4639" src_ip="149.18.149.155" src_port="80"/>
      <filter dst_ip="136.228.104.199" dst_port="4637" src_ip="149.18.149.155" src_port="80"/>
    </slice>
    <from sec="1223615288" usec="0"/>
    <to sec="1223615352" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.76.156"/>
    </slice>
    <from sec="1223615347" usec="0"/>
    <to sec="1223615471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.225.224.157"/>
    </slice>
    <from sec="1223615416" usec="0"/>
    <to sec="1223615494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.231.32.159"/>
    </slice>
    <from sec="1223615542" usec="0"/>
    <to sec="1223615577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="125.155.11.160"/>
    </slice>
    <from sec="1223614850" usec="0"/>
    <to sec="1223614859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.210.52.160"/>
    </slice>
    <from sec="1223615510" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688731,2.11726,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1774{
style=filled;
color=gray75;
11945[label="136.228.146.160;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15971[label="136.228.146.160;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1774[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.146.160:53, 210.4.51.43:52827}[25%]&lt;BR/&gt;{136.228.146.160:53, 210.4.51.75:13576}[25%]&lt;BR/&gt;{136.228.146.160:53, 210.4.51.75:20943}[25%]&lt;BR/&gt;{136.228.146.160:53, 210.4.51.75:54182}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 54182: (12.5%)&lt;BR/&gt; 52827: (12.5%)&lt;BR/&gt; 20943: (12.5%)&lt;BR/&gt; 13576: (12.5%)&gt;];
}
11945--14607[label="1;4pkt 4fpkt"];
11945--15971[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="210.4.51.75" dst_port="54182" src_ip="136.228.146.160" src_port="53"/>
      <filter dst_ip="210.4.51.75" dst_port="20943" src_ip="136.228.146.160" src_port="53"/>
      <filter dst_ip="210.4.51.75" dst_port="13576" src_ip="136.228.146.160" src_port="53"/>
      <filter dst_ip="210.4.51.43" dst_port="52827" src_ip="136.228.146.160" src_port="53"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1775{
style=filled;
color=gray75;
11947[label="108.200.166.160;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14609[label="108.200.166.160;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1775[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.200.166.160:80, 162.73.99.210:52902}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52902: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11947--14609[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.99.210" dst_port="52902" src_ip="108.200.166.160" src_port="80"/>
    </slice>
    <from sec="1223615345" usec="0"/>
    <to sec="1223615351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.172.3.161"/>
    </slice>
    <from sec="1223615303" usec="0"/>
    <to sec="1223615305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.22.106.161"/>
    </slice>
    <from sec="1223615587" usec="0"/>
    <to sec="1223615603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1778{
style=filled;
color=gray75;
4308[label="164.25.105.29;d;52pkt 52fpkt", shape=diamond, color=yellow];
5216[label="99.29.202.161;s;14pkt 14fpkt", shape=diamond, color=yellow];
7928[label="164.25.105.29;d;52pkt 52fpkt", shape=hexagon, color=black];
9360[label="126.63.18.4;2pkt 2fpkt", shape=pentagon, color=darkviolet];
11964[label="99.29.202.161;13pkt 13fpkt", shape=pentagon, color=darkviolet];
13284[label="126.63.18.4;1pkt 1fpkt", shape=invtriangle, color=brown];
14617[label="99.29.202.161;13pkt 13fpkt", shape=invtriangle, color=brown];
15977[label="99.29.202.161;14pkt 14fpkt", shape=invhouse, color=bisque];
stat1778[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 164.25.105.29:80}[57.6271%]&lt;BR/&gt;{*:*, 164.25.105.29:25}[30.5085%]&lt;BR/&gt;{99.29.202.161:*, *:*}[23.7288%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.2298%)&lt;BR/&gt; 25: (11.1801%)&lt;BR/&gt; 53: (5.59006%)&lt;BR/&gt; 59625: (1.86335%)&lt;BR/&gt; 56998: (1.86335%)&gt;];
}
4308--5216[label="0.5;7pkt 7fpkt"];
4308--7928[label="1;52pkt 52fpkt"];
4308--9360[label="1;2pkt 2fpkt"];
4308--11964[label="0.538462;7pkt 7fpkt"];
4308--13284[label="1;1pkt 1fpkt"];
4308--14617[label="0.538462;7pkt 7fpkt"];
4308--15977[label="0.5;7pkt 7fpkt"];
5216--7928[label="0.5;7pkt 7fpkt"];
5216--11964[label="1;13pkt 13fpkt"];
5216--14617[label="1;13pkt 13fpkt"];
5216--15977[label="1;14pkt 14fpkt"];
7928--9360[label="1;2pkt 2fpkt"];
7928--11964[label="0.538462;7pkt 7fpkt"];
7928--13284[label="1;1pkt 1fpkt"];
7928--14617[label="0.538462;7pkt 7fpkt"];
7928--15977[label="0.5;7pkt 7fpkt"];
9360--13284[label="1;1pkt 1fpkt"];
11964--14617[label="1;13pkt 13fpkt"];
11964--15977[label="1;13pkt 13fpkt"];
14617--15977[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter src_ip="99.29.202.161"/>
      <filter dst_ip="164.25.105.29" dst_port="80"/>
      <filter dst_ip="164.25.105.29" dst_port="25"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1779{
style=filled;
color=gray75;
11965[label="99.46.229.161;10pkt 10fpkt", shape=pentagon, color=darkviolet];
14618[label="99.46.229.161;9pkt 9fpkt", shape=invtriangle, color=brown];
stat1779[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.46.229.161:80, 136.228.85.91:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1886: (5.26316%)&lt;BR/&gt; 1885: (5.26316%)&lt;BR/&gt; 1884: (5.26316%)&lt;BR/&gt; 1883: (5.26316%)&gt;];
}
11965--14618[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.85.91" src_ip="99.46.229.161" src_port="80"/>
    </slice>
    <from sec="1223615551" usec="0"/>
    <to sec="1223615556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.76.162"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.165.84.162"/>
    </slice>
    <from sec="1223615637" usec="0"/>
    <to sec="1223615643" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1782{
style=filled;
color=gray75;
881[label="136.228.82.164;s;10830pkt 10830fpkt", shape=diamond, color=yellow];
4998[label="204.111.113.178;d;18pkt 18fpkt", shape=diamond, color=yellow];
5730[label="107.40.199.172;d;22pkt 22fpkt", shape=diamond, color=yellow];
7772[label="136.228.64.31;s;63pkt 63fpkt", shape=hexagon, color=black];
8468[label="204.111.113.178;d;18pkt 18fpkt", shape=hexagon, color=black];
11996[label="136.228.82.164;12061pkt 12061fpkt", shape=pentagon, color=darkviolet];
14633[label="136.228.82.164;12061pkt 12061fpkt", shape=invtriangle, color=brown];
15986[label="136.228.82.164;12062pkt 12062fpkt", shape=invhouse, color=bisque];
stat1782[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.82.164:*, *:53}[92.1678%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.7433%)&lt;BR/&gt; 0: (0.396733%)&lt;BR/&gt; 80: (0.0986528%)&lt;BR/&gt; 32768: (0.0307627%)&lt;BR/&gt; 64124: (0.0169725%)&gt;];
}
881--1162[label="0.154215;933pkt 933fpkt"];
881--1295[label="0.0175189;37pkt 37fpkt"];
881--2119[label="0.157571;410pkt 410fpkt"];
881--2686[label="0.0070922;1pkt 1fpkt"];
881--2707[label="0.00647249;6pkt 6fpkt"];
881--2731[label="0.00049776;1pkt 1fpkt"];
881--2740[label="0.00418118;6pkt 6fpkt"];
881--3184[label="0.0211346;19pkt 19fpkt"];
881--3192[label="0.0183861;18pkt 18fpkt"];
881--3322[label="0.00577367;5pkt 5fpkt"];
881--3737[label="0.020202;18pkt 18fpkt"];
881--4174[label="0.00177936;2pkt 2fpkt"];
881--4178[label="0.0361757;28pkt 28fpkt"];
881--4189[label="0.00382166;3pkt 3fpkt"];
881--4222[label="0.0284006;19pkt 19fpkt"];
881--4229[label="0.00793651;1pkt 1fpkt"];
881--4231[label="0.00240385;2pkt 2fpkt"];
881--4235[label="0.0181818;1pkt 1fpkt"];
881--4309[label="0.0238095;2pkt 2fpkt"];
881--4357[label="0.00101885;4pkt 4fpkt"];
881--4647[label="0.0605565;37pkt 37fpkt"];
881--4683[label="0.0373984;23pkt 23fpkt"];
881--4690[label="0.00616333;4pkt 4fpkt"];
881--4696[label="0.0556439;35pkt 35fpkt"];
881--4726[label="0.0175953;12pkt 12fpkt"];
881--4743[label="0.199241;105pkt 105fpkt"];
881--4771[label="0.0125;1pkt 1fpkt"];
881--4998[label="0.0555556;1pkt 1fpkt"];
881--5058[label="0.0468165;25pkt 25fpkt"];
881--5059[label="0.0222222;12pkt 12fpkt"];
881--5078[label="0.208042;119pkt 119fpkt"];
881--5097[label="0.00156986;1pkt 1fpkt"];
881--5488[label="0.0321361;17pkt 17fpkt"];
881--5511[label="0.107728;46pkt 46fpkt"];
881--5516[label="0.0782609;36pkt 36fpkt"];
881--5518[label="0.116232;58pkt 58fpkt"];
881--5521[label="0.0017762;1pkt 1fpkt"];
881--5523[label="0.243169;89pkt 89fpkt"];
881--5524[label="0.243523;94pkt 94fpkt"];
881--5526[label="0.0932039;48pkt 48fpkt"];
881--5542[label="0.243455;93pkt 93fpkt"];
881--5545[label="0.241848;89pkt 89fpkt"];
881--5550[label="0.0588235;27pkt 27fpkt"];
881--5556[label="0.24031;93pkt 93fpkt"];
881--5730[label="0.136364;3pkt 3fpkt"];
881--6838[label="0.156692;809pkt 809fpkt"];
881--6844[label="0.0190476;12pkt 12fpkt"];
881--6879[label="0.0110619;5pkt 5fpkt"];
881--6898[label="0.00421941;5pkt 5fpkt"];
881--7202[label="0.00049776;1pkt 1fpkt"];
881--7561[label="0.0238095;2pkt 2fpkt"];
881--7796[label="0.0220764;37pkt 37fpkt"];
881--7942[label="0.0153846;1pkt 1fpkt"];
881--8154[label="0.0583804;31pkt 31fpkt"];
881--8182[label="0.0306279;20pkt 20fpkt"];
881--8184[label="0.0176678;15pkt 15fpkt"];
881--8212[label="0.0204342;16pkt 16fpkt"];
881--8216[label="0.15637;367pkt 367fpkt"];
881--8273[label="0.0178282;11pkt 11fpkt"];
881--8287[label="0.206287;105pkt 105fpkt"];
881--8346[label="0.000510725;2pkt 2fpkt"];
881--8468[label="0.0555556;1pkt 1fpkt"];
881--8546[label="0.0222222;12pkt 12fpkt"];
881--8559[label="0.0070922;1pkt 1fpkt"];
881--8571[label="0.208042;119pkt 119fpkt"];
881--8598[label="0.0181818;1pkt 1fpkt"];
881--8879[label="0.14581;395pkt 395fpkt"];
881--9066[label="0.0306279;20pkt 20fpkt"];
881--9197[label="0.00517082;56pkt 56fpkt"];
881--11996[label="0.999908;10829pkt 10829fpkt"];
881--14633[label="0.999908;10829pkt 10829fpkt"];
881--15986[label="1;10830pkt 10830fpkt"];
4998--6119[label="0.111111;2pkt 2fpkt"];
4998--6194[label="0.166667;3pkt 3fpkt"];
4998--6258[label="0.222222;4pkt 4fpkt"];
4998--7772[label="0.333333;6pkt 6fpkt"];
4998--8468[label="1;18pkt 18fpkt"];
4998--9060[label="0.222222;4pkt 4fpkt"];
4998--9198[label="0.222222;4pkt 4fpkt"];
4998--11996[label="0.0555556;1pkt 1fpkt"];
4998--12914[label="0.222222;4pkt 4fpkt"];
4998--14633[label="0.0555556;1pkt 1fpkt"];
4998--15986[label="0.0555556;1pkt 1fpkt"];
5730--6258[label="0.181818;4pkt 4fpkt"];
5730--9060[label="0.181818;4pkt 4fpkt"];
5730--10872[label="0.681818;15pkt 15fpkt"];
5730--11996[label="0.136364;3pkt 3fpkt"];
5730--12914[label="0.181818;4pkt 4fpkt"];
5730--14064[label="0.681818;15pkt 15fpkt"];
5730--14633[label="0.136364;3pkt 3fpkt"];
5730--15687[label="0.681818;15pkt 15fpkt"];
5730--15986[label="0.136364;3pkt 3fpkt"];
7772--8010[label="0.015873;1pkt 1fpkt"];
7772--8468[label="0.333333;6pkt 6fpkt"];
7772--9103[label="0.015873;1pkt 1fpkt"];
7772--9163[label="0.0634921;4pkt 4fpkt"];
7772--9194[label="0.031746;2pkt 2fpkt"];
7772--9198[label="0.126984;8pkt 8fpkt"];
7772--9234[label="0.031746;2pkt 2fpkt"];
7772--9268[label="0.031746;2pkt 2fpkt"];
8468--9060[label="0.222222;4pkt 4fpkt"];
8468--9198[label="0.222222;4pkt 4fpkt"];
8468--11996[label="0.0555556;1pkt 1fpkt"];
8468--12914[label="0.222222;4pkt 4fpkt"];
8468--14633[label="0.0555556;1pkt 1fpkt"];
8468--15986[label="0.0555556;1pkt 1fpkt"];
11996--14633[label="1;12061pkt 12061fpkt"];
11996--15986[label="1;12061pkt 12061fpkt"];
14633--15986[label="1;12061pkt 12061fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="136.228.82.164"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.154.36.165"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.17.68.165"/>
    </slice>
    <from sec="1223615515" usec="0"/>
    <to sec="1223615519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="70.149.20.166"/>
    </slice>
    <from sec="1223615564" usec="0"/>
    <to sec="1223615569" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1786{
style=filled;
color=gray75;
12062[label="114.222.27.168;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14660[label="114.222.27.168;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1786[shape=component, label=&lt;Rules:&lt;BR/&gt;{114.222.27.168:80, 162.73.62.19:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 45562: (8.33333%)&lt;BR/&gt; 45523: (8.33333%)&lt;BR/&gt; 45446: (8.33333%)&lt;BR/&gt; 45443: (8.33333%)&gt;];
}
12062--14660[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.62.19" src_ip="114.222.27.168" src_port="80"/>
    </slice>
    <from sec="1223614971" usec="0"/>
    <to sec="1223615040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.163.74.168"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.116.148.168"/>
    </slice>
    <from sec="1223615259" usec="0"/>
    <to sec="1223615506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="118.8.169.168"/>
    </slice>
    <from sec="1223615653" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1790{
style=filled;
color=gray75;
12094[label="118.178.17.170;23pkt 23fpkt", shape=pentagon, color=darkviolet];
14678[label="118.178.17.170;23pkt 23fpkt", shape=invtriangle, color=brown];
16009[label="118.178.17.170;23pkt 23fpkt", shape=invhouse, color=bisque];
stat1790[shape=component, label=&lt;Rules:&lt;BR/&gt;{118.178.17.170:80, 136.228.172.147:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 22574: (2.17391%)&lt;BR/&gt; 22573: (2.17391%)&lt;BR/&gt; 22572: (2.17391%)&lt;BR/&gt; 22571: (2.17391%)&gt;];
}
12094--14678[label="1;23pkt 23fpkt"];
12094--16009[label="1;23pkt 23fpkt"];
14678--16009[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.172.147" src_ip="118.178.17.170" src_port="80"/>
    </slice>
    <from sec="1223615446" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1791{
style=filled;
color=gray75;
12098[label="192.80.102.170;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14681[label="192.80.102.170;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1791[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.80.102.170:3747, 212.21.143.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3747: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12098--14681[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="192.80.102.170" src_port="3747"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.109.113.170"/>
    </slice>
    <from sec="1223614825" usec="0"/>
    <to sec="1223615498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.96.137.170"/>
    </slice>
    <from sec="1223614991" usec="0"/>
    <to sec="1223615679" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.200.5.171"/>
    </slice>
    <from sec="1223615258" usec="0"/>
    <to sec="1223615273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.77.171"/>
    </slice>
    <from sec="1223615049" usec="0"/>
    <to sec="1223615163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="21.64.100.171"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.138.169.171"/>
    </slice>
    <from sec="1223615277" usec="0"/>
    <to sec="1223615322" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1798{
style=filled;
color=gray75;
2086[label="142.243.174.171;s;248pkt 248fpkt", shape=diamond, color=yellow];
7485[label="142.243.174.171;s;248pkt 248fpkt", shape=hexagon, color=black];
12123[label="142.243.174.171;356pkt 356fpkt", shape=pentagon, color=darkviolet];
14697[label="142.243.174.171;356pkt 356fpkt", shape=invtriangle, color=brown];
16019[label="142.243.174.171;355pkt 355fpkt", shape=invhouse, color=bisque];
stat1798[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.174.171:*, 109.163.75.178:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4168: (0.159949%)&lt;BR/&gt; 4167: (0.159949%)&lt;BR/&gt; 4166: (0.159949%)&lt;BR/&gt; 4165: (0.159949%)&gt;];
}
2086--7485[label="1;248pkt 248fpkt"];
2086--12123[label="1;248pkt 248fpkt"];
2086--14697[label="1;248pkt 248fpkt"];
2086--16019[label="0.995968;247pkt 247fpkt"];
7485--12123[label="1;248pkt 248fpkt"];
7485--14697[label="1;248pkt 248fpkt"];
7485--16019[label="0.995968;247pkt 247fpkt"];
12123--14697[label="1;356pkt 356fpkt"];
12123--16019[label="1;355pkt 355fpkt"];
14697--16019[label="1;355pkt 355fpkt"];
</description>
    <slice>
      <filter dst_ip="109.163.75.178" dst_port="80" src_ip="142.243.174.171"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="217.52.92.172"/>
    </slice>
    <from sec="1223615691" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="126.174.146.172"/>
    </slice>
    <from sec="1223615037" usec="0"/>
    <to sec="1223615046" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1801{
style=filled;
color=gray75;
12146[label="139.40.196.172;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14707[label="139.40.196.172;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1801[shape=component, label=&lt;Rules:&lt;BR/&gt;{139.40.196.172:80, 160.49.199.87:50526}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50526: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12146--14707[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="160.49.199.87" dst_port="50526" src_ip="139.40.196.172" src_port="80"/>
    </slice>
    <from sec="1223615290" usec="0"/>
    <to sec="1223615316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.215.6.173"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,502,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1803{
style=filled;
color=gray75;
12153[label="204.99.65.173;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14711[label="204.99.65.173;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1803[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.99.65.173:56933, 213.236.29.145:22}[50%]&lt;BR/&gt;{204.99.65.173:56947, 213.236.29.145:22}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 56947: (25%)&lt;BR/&gt; 56933: (25%)&gt;];
}
12153--14711[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.236.29.145" dst_port="22" src_ip="204.99.65.173" src_port="56947"/>
      <filter dst_ip="213.236.29.145" dst_port="22" src_ip="204.99.65.173" src_port="56933"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="106.244.179.173"/>
    </slice>
    <from sec="1223615218" usec="0"/>
    <to sec="1223615228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1805{
style=filled;
color=gray75;
5672[label="162.73.237.234;d;35pkt 35fpkt", shape=diamond, color=yellow];
12164[label="99.45.6.174;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14718[label="99.45.6.174;5pkt 5fpkt", shape=invtriangle, color=brown];
16025[label="99.45.6.174;5pkt 5fpkt", shape=invhouse, color=bisque];
stat1805[shape=component, label=&lt;Rules:&lt;BR/&gt;{104.91.177.214:80, 162.73.237.234:*}[31.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1952: (3.92157%)&lt;BR/&gt; 1951: (3.92157%)&lt;BR/&gt; 1950: (3.92157%)&lt;BR/&gt; 1949: (3.92157%)&gt;];
}
5672--12164[label="1;6pkt 6fpkt"];
5672--14718[label="1;5pkt 5fpkt"];
5672--16025[label="1;5pkt 5fpkt"];
12164--14718[label="1;5pkt 5fpkt"];
12164--16025[label="1;5pkt 5fpkt"];
14718--16025[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.237.234" src_ip="104.91.177.214" src_port="80"/>
    </slice>
    <from sec="1223615194" usec="0"/>
    <to sec="1223615616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,504,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1806{
style=filled;
color=gray75;
5670[label="212.21.136.174;s;20pkt 20fpkt", shape=diamond, color=yellow];
5688[label="126.84.218.102;d;4pkt 4fpkt", shape=diamond, color=yellow];
8718[label="212.21.136.174;s;20pkt 20fpkt", shape=hexagon, color=black];
8741[label="126.84.218.102;d;4pkt 4fpkt", shape=hexagon, color=black];
12175[label="212.21.136.174;20pkt 20fpkt", shape=pentagon, color=darkviolet];
14723[label="212.21.136.174;20pkt 20fpkt", shape=invtriangle, color=brown];
16029[label="212.21.136.174;20pkt 20fpkt", shape=invhouse, color=bisque];
stat1806[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.174:*, 208.133.101.157:80}[38.0952%]&lt;BR/&gt;{212.21.136.174:*, 139.40.98.102:443}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.1111%)&lt;BR/&gt; 443: (11.5741%)&lt;BR/&gt; 123: (4.62963%)&lt;BR/&gt; 35722: (3.24074%)&lt;BR/&gt; 35690: (3.24074%)&gt;];
}
5670--5688[label="0.75;3pkt 3fpkt"];
5670--8718[label="1;20pkt 20fpkt"];
5670--8741[label="0.75;3pkt 3fpkt"];
5670--12175[label="1;20pkt 20fpkt"];
5670--14723[label="1;20pkt 20fpkt"];
5670--16029[label="1;20pkt 20fpkt"];
5688--8718[label="0.75;3pkt 3fpkt"];
5688--8741[label="1;4pkt 4fpkt"];
5688--12175[label="0.75;3pkt 3fpkt"];
5688--14723[label="0.75;3pkt 3fpkt"];
5688--16029[label="0.75;3pkt 3fpkt"];
8718--8741[label="0.75;3pkt 3fpkt"];
8718--12175[label="1;20pkt 20fpkt"];
8718--14723[label="1;20pkt 20fpkt"];
8718--16029[label="1;20pkt 20fpkt"];
8741--12175[label="0.75;3pkt 3fpkt"];
8741--14723[label="0.75;3pkt 3fpkt"];
8741--16029[label="0.75;3pkt 3fpkt"];
12175--14723[label="1;20pkt 20fpkt"];
12175--16029[label="1;20pkt 20fpkt"];
14723--16029[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="208.133.101.157" dst_port="80" src_ip="212.21.136.174"/>
      <filter dst_ip="139.40.98.102" dst_port="443" src_ip="212.21.136.174"/>
    </slice>
    <from sec="1223615172" usec="0"/>
    <to sec="1223615556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.11.7.176"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1808{
style=filled;
color=gray75;
12191[label="142.243.11.176;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14733[label="142.243.11.176;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1808[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.11.176:*, 119.146.8.43:80}[71.4286%]&lt;BR/&gt;{142.243.11.176:*, 104.241.43.52:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2470: (7.14286%)&lt;BR/&gt; 2464: (7.14286%)&lt;BR/&gt; 2460: (7.14286%)&lt;BR/&gt; 2456: (7.14286%)&gt;];
}
12191--14733[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="119.146.8.43" dst_port="80" src_ip="142.243.11.176"/>
      <filter dst_ip="104.241.43.52" dst_port="80" src_ip="142.243.11.176"/>
    </slice>
    <from sec="1223615490" usec="0"/>
    <to sec="1223615542" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.105.78.177"/>
    </slice>
    <from sec="1223615356" usec="0"/>
    <to sec="1223615382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1810{
style=filled;
color=gray75;
12224[label="195.160.216.177;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14744[label="195.160.216.177;1pkt 1fpkt", shape=invtriangle, color=brown];
16041[label="195.160.216.177;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1810[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.160.216.177:80, 142.243.98.96:4778}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4778: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12224--14744[label="1;1pkt 1fpkt"];
12224--16041[label="1;1pkt 1fpkt"];
14744--16041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.98.96" dst_port="4778" src_ip="195.160.216.177" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1811{
style=filled;
color=gray75;
12252[label="34.168.111.179;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14758[label="34.168.111.179;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1811[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.168.111.179:50121, 212.21.143.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50121: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12252--14758[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="34.168.111.179" src_port="50121"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.136.147.180"/>
    </slice>
    <from sec="1223615474" usec="0"/>
    <to sec="1223615540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1813{
style=filled;
color=gray75;
12277[label="98.149.152.181;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14773[label="98.149.152.181;7pkt 7fpkt", shape=invtriangle, color=brown];
16061[label="98.149.152.181;7pkt 7fpkt", shape=invhouse, color=bisque];
stat1813[shape=component, label=&lt;Rules:&lt;BR/&gt;{98.149.152.181:80, 162.73.22.201:*}[57.1429%]&lt;BR/&gt;{98.149.152.181:80, 142.243.13.225:*}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53588: (7.14286%)&lt;BR/&gt; 53577: (7.14286%)&lt;BR/&gt; 53576: (7.14286%)&lt;BR/&gt; 53575: (7.14286%)&gt;];
}
12277--14773[label="1;7pkt 7fpkt"];
12277--16061[label="1;7pkt 7fpkt"];
14773--16061[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.22.201" src_ip="98.149.152.181" src_port="80"/>
      <filter dst_ip="142.243.13.225" src_ip="98.149.152.181" src_port="80"/>
    </slice>
    <from sec="1223615664" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="85.182.35.182"/>
    </slice>
    <from sec="1223615275" usec="0"/>
    <to sec="1223615293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1815{
style=filled;
color=gray75;
2613[label="202.16.45.182;s;1558pkt 1558fpkt", shape=diamond, color=yellow];
6801[label="202.16.45.182;s;718pkt 718fpkt", shape=hexagon, color=black];
12286[label="202.16.45.182;1697pkt 1697fpkt", shape=pentagon, color=darkviolet];
14778[label="202.16.45.182;1697pkt 1697fpkt", shape=invtriangle, color=brown];
stat1815[shape=component, label=&lt;Rules:&lt;BR/&gt;{202.16.45.182:1309, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1309: (50%)&gt;];
}
2613--6059[label="0.000641849;1pkt 1fpkt"];
2613--6801[label="1;718pkt 718fpkt"];
2613--9179[label="0.0603338;94pkt 94fpkt"];
2613--9219[label="0.0603338;94pkt 94fpkt"];
2613--9253[label="0.0603338;94pkt 94fpkt"];
2613--12286[label="1;1558pkt 1558fpkt"];
2613--14778[label="1;1558pkt 1558fpkt"];
6801--9179[label="0.045961;33pkt 33fpkt"];
6801--9219[label="0.045961;33pkt 33fpkt"];
6801--9253[label="0.045961;33pkt 33fpkt"];
6801--12286[label="1;718pkt 718fpkt"];
6801--14778[label="1;718pkt 718fpkt"];
12286--14778[label="1;1697pkt 1697fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="202.16.45.182" src_port="1309"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1816{
style=filled;
color=gray75;
12289[label="210.73.73.182;7pkt 7fpkt", shape=pentagon, color=darkviolet];
14780[label="210.73.73.182;7pkt 7fpkt", shape=invtriangle, color=brown];
stat1816[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.73.73.182:80, 136.228.172.75:*}[71.4286%]&lt;BR/&gt;{210.73.73.182:443, 136.228.172.75:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7143%)&lt;BR/&gt; 443: (14.2857%)&lt;BR/&gt; 3455: (7.14286%)&lt;BR/&gt; 3453: (7.14286%)&lt;BR/&gt; 3445: (7.14286%)&gt;];
}
12289--14780[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.172.75" src_ip="210.73.73.182" src_port="80"/>
      <filter dst_ip="136.228.172.75" src_ip="210.73.73.182" src_port="443"/>
    </slice>
    <from sec="1223614815" usec="0"/>
    <to sec="1223614951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.128.46.186"/>
    </slice>
    <from sec="1223614842" usec="0"/>
    <to sec="1223614939" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,501,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1818{
style=filled;
color=gray75;
12340[label="108.160.200.186;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14804[label="108.160.200.186;16pkt 16fpkt", shape=invtriangle, color=brown];
stat1818[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.160.200.186:21, 164.25.16.14:*}[50%]&lt;BR/&gt;{108.160.200.186:21, 164.25.71.5:*}[25%]&lt;BR/&gt;{108.160.200.186:21, 164.25.46.171:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 3743: (3.125%)&lt;BR/&gt; 3739: (3.125%)&lt;BR/&gt; 3735: (3.125%)&lt;BR/&gt; 3731: (3.125%)&gt;];
}
12340--14804[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="164.25.16.14" src_ip="108.160.200.186" src_port="21"/>
      <filter dst_ip="164.25.46.171" src_ip="108.160.200.186" src_port="21"/>
      <filter dst_ip="164.25.71.5" src_ip="108.160.200.186" src_port="21"/>
    </slice>
    <from sec="1223615189" usec="0"/>
    <to sec="1223615600" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.205.203.186"/>
    </slice>
    <from sec="1223615390" usec="0"/>
    <to sec="1223615507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="104.243.242.186"/>
    </slice>
    <from sec="1223615134" usec="0"/>
    <to sec="1223615173" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.76.29.187"/>
    </slice>
    <from sec="1223615041" usec="0"/>
    <to sec="1223615057" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="87.176.230.187"/>
    </slice>
    <from sec="1223615257" usec="0"/>
    <to sec="1223615279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.149.13.188"/>
    </slice>
    <from sec="1223614820" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="126.16.27.188"/>
    </slice>
    <from sec="1223615391" usec="0"/>
    <to sec="1223615568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,502,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.14.95.189"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.167.97.189"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="77.202.240.189"/>
    </slice>
    <from sec="1223614828" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.136.241.189"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="202.185.11.190"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.45.18.192"/>
    </slice>
    <from sec="1223614814" usec="0"/>
    <to sec="1223614820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.176.30.192"/>
    </slice>
    <from sec="1223615221" usec="0"/>
    <to sec="1223615229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="113.63.81.192"/>
    </slice>
    <from sec="1223615133" usec="0"/>
    <to sec="1223615163" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1833{
style=filled;
color=gray75;
12411[label="162.73.106.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
14847[label="162.73.106.192;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1833[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.106.192:53, 197.94.68.64:32768}[50%]&lt;BR/&gt;{162.73.106.192:53, 76.130.148.155:23242}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 32768: (25%)&lt;BR/&gt; 23242: (25%)&gt;];
}
12411--14847[label="1;2pkt 2fpkt"];
12411--16106[label="1;2pkt 2fpkt"];
14847--16106[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="76.130.148.155" dst_port="23242" src_ip="162.73.106.192" src_port="53"/>
      <filter dst_ip="197.94.68.64" dst_port="32768" src_ip="162.73.106.192" src_port="53"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.233.202.192"/>
    </slice>
    <from sec="1223615535" usec="0"/>
    <to sec="1223615630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.163.1.193"/>
    </slice>
    <from sec="1223615502" usec="0"/>
    <to sec="1223615559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1836{
style=filled;
color=gray75;
12425[label="73.42.128.193;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14856[label="73.42.128.193;3pkt 3fpkt", shape=invtriangle, color=brown];
16109[label="73.42.128.193;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1836[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.42.128.193:80, 213.33.63.13:62990}[33.3333%]&lt;BR/&gt;{73.42.128.193:80, 213.33.63.13:63212}[33.3333%]&lt;BR/&gt;{73.42.128.193:80, 213.33.63.13:63229}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63229: (16.6667%)&lt;BR/&gt; 63212: (16.6667%)&lt;BR/&gt; 62990: (16.6667%)&gt;];
}
12425--14856[label="1;3pkt 3fpkt"];
12425--16109[label="1;3pkt 3fpkt"];
14856--16109[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.33.63.13" dst_port="63229" src_ip="73.42.128.193" src_port="80"/>
      <filter dst_ip="213.33.63.13" dst_port="63212" src_ip="73.42.128.193" src_port="80"/>
      <filter dst_ip="213.33.63.13" dst_port="62990" src_ip="73.42.128.193" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1837{
style=filled;
color=gray75;
12435[label="76.142.235.193;32pkt 32fpkt", shape=pentagon, color=darkviolet];
14859[label="76.142.235.193;32pkt 32fpkt", shape=invtriangle, color=brown];
16110[label="76.142.235.193;32pkt 32fpkt", shape=invhouse, color=bisque];
stat1837[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.142.235.193:*, 162.73.105.8:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3793: (1.5625%)&lt;BR/&gt; 3792: (1.5625%)&lt;BR/&gt; 3733: (1.5625%)&lt;BR/&gt; 3731: (1.5625%)&gt;];
}
12435--14859[label="1;32pkt 32fpkt"];
12435--16110[label="1;32pkt 32fpkt"];
14859--16110[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.105.8" dst_port="25" src_ip="76.142.235.193"/>
    </slice>
    <from sec="1223615545" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1838{
style=filled;
color=gray75;
12437[label="200.41.245.193;4pkt 4fpkt", shape=pentagon, color=darkviolet];
14860[label="200.41.245.193;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1838[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.41.245.193:1676, 212.21.143.8:80}[25%]&lt;BR/&gt;{200.41.245.193:1755, 212.21.143.8:80}[25%]&lt;BR/&gt;{200.41.245.193:1766, 212.21.143.8:80}[25%]&lt;BR/&gt;{200.41.245.193:1782, 212.21.143.8:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1782: (12.5%)&lt;BR/&gt; 1766: (12.5%)&lt;BR/&gt; 1755: (12.5%)&lt;BR/&gt; 1676: (12.5%)&gt;];
}
12437--14860[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="200.41.245.193" src_port="1782"/>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="200.41.245.193" src_port="1766"/>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="200.41.245.193" src_port="1755"/>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="200.41.245.193" src_port="1676"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.145.188.194"/>
    </slice>
    <from sec="1223614878" usec="0"/>
    <to sec="1223614917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,504,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.1.111.195"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.17.229.195"/>
    </slice>
    <from sec="1223615223" usec="0"/>
    <to sec="1223615228" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1842{
style=filled;
color=gray75;
2039[label="19.170.220.196;s;2828pkt 2828fpkt", shape=diamond, color=yellow];
12489[label="19.170.220.196;3068pkt 3068fpkt", shape=pentagon, color=darkviolet];
14883[label="19.170.220.196;3067pkt 3067fpkt", shape=invtriangle, color=brown];
16125[label="19.170.220.196;3067pkt 3067fpkt", shape=invhouse, color=bisque];
stat1842[shape=component, label=&lt;Rules:&lt;BR/&gt;{19.170.220.196:1050, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1434: (50%)&lt;BR/&gt; 1050: (50%)&gt;];
}
2039--2285[label="0.0128205;1pkt 1fpkt"];
2039--3378[label="0.00537634;1pkt 1fpkt"];
2039--3723[label="0.00471698;1pkt 1fpkt"];
2039--4377[label="0.0833333;1pkt 1fpkt"];
2039--4739[label="0.00740741;1pkt 1fpkt"];
2039--6025[label="0.00133333;1pkt 1fpkt"];
2039--6386[label="0.0128205;1pkt 1fpkt"];
2039--7904[label="0.00787402;1pkt 1fpkt"];
2039--8516[label="0.00197628;1pkt 1fpkt"];
2039--8573[label="0.00471698;1pkt 1fpkt"];
2039--9086[label="0.00787402;1pkt 1fpkt"];
2039--9179[label="0.0851175;163pkt 163fpkt"];
2039--9219[label="0.0851175;163pkt 163fpkt"];
2039--9253[label="0.0850731;163pkt 163fpkt"];
2039--12489[label="1;2828pkt 2828fpkt"];
2039--14883[label="0.999646;2827pkt 2827fpkt"];
2039--16125[label="0.999646;2827pkt 2827fpkt"];
12489--14883[label="1;3067pkt 3067fpkt"];
12489--16125[label="1;3067pkt 3067fpkt"];
14883--16125[label="1;3067pkt 3067fpkt"];
</description>
    <slice>
      <filter dst_port="1434" src_ip="19.170.220.196" src_port="1050"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="148.64.160.197"/>
    </slice>
    <from sec="1223615541" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.131.207.197"/>
    </slice>
    <from sec="1223614882" usec="0"/>
    <to sec="1223614911" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="220.32.222.197"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.138.110.200"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.63.21.201"/>
    </slice>
    <from sec="1223615193" usec="0"/>
    <to sec="1223615198" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,002,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1849{
style=filled;
color=gray75;
12583[label="73.150.83.203;122pkt 122fpkt", shape=pentagon, color=darkviolet];
14928[label="73.150.83.203;121pkt 121fpkt", shape=invtriangle, color=brown];
16149[label="73.150.83.203;121pkt 121fpkt", shape=invhouse, color=bisque];
stat1849[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.150.83.203:1026, *:137}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1026: (50%)&lt;BR/&gt; 137: (50%)&gt;];
}
12583--14928[label="1;121pkt 121fpkt"];
12583--16149[label="1;121pkt 121fpkt"];
14928--16149[label="1;121pkt 121fpkt"];
</description>
    <slice>
      <filter dst_port="137" src_ip="73.150.83.203" src_port="1026"/>
    </slice>
    <from sec="1223615151" usec="0"/>
    <to sec="1223615171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.240.85.204"/>
    </slice>
    <from sec="1223615123" usec="0"/>
    <to sec="1223615133" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.116.8.206"/>
    </slice>
    <from sec="1223615165" usec="0"/>
    <to sec="1223615216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1852{
style=filled;
color=gray75;
12626[label="136.228.229.206;6pkt 6fpkt", shape=pentagon, color=darkviolet];
14954[label="136.228.229.206;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1852[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.229.206:*, 126.20.85.131:80}[66.6667%]&lt;BR/&gt;{136.228.229.206:53, *:53}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 53: (33.3333%)&lt;BR/&gt; 61195: (8.33333%)&lt;BR/&gt; 58147: (8.33333%)&lt;BR/&gt; 52435: (8.33333%)&gt;];
}
12626--14954[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="126.20.85.131" dst_port="80" src_ip="136.228.229.206"/>
      <filter dst_port="53" src_ip="136.228.229.206" src_port="53"/>
    </slice>
    <from sec="1223615280" usec="0"/>
    <to sec="1223615671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1853{
style=filled;
color=gray75;
12647[label="21.84.113.208;1pkt 1fpkt", shape=pentagon, color=darkviolet];
14964[label="21.84.113.208;1pkt 1fpkt", shape=invtriangle, color=brown];
16167[label="21.84.113.208;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1853[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.84.113.208:4434, 142.243.107.117:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4434: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
12647--14964[label="1;1pkt 1fpkt"];
12647--16167[label="1;1pkt 1fpkt"];
14964--16167[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.107.117" dst_port="1434" src_ip="21.84.113.208" src_port="4434"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1854{
style=filled;
color=gray75;
12652[label="136.228.138.208;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14967[label="136.228.138.208;3pkt 3fpkt", shape=invtriangle, color=brown];
16169[label="136.228.138.208;3pkt 3fpkt", shape=invhouse, color=bisque];
stat1854[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.138.208:3530, 208.31.10.157:443}[33.3333%]&lt;BR/&gt;{136.228.138.208:3534, 208.31.10.157:443}[33.3333%]&lt;BR/&gt;{136.228.138.208:3536, 208.31.10.157:443}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 3536: (16.6667%)&lt;BR/&gt; 3534: (16.6667%)&lt;BR/&gt; 3530: (16.6667%)&gt;];
}
12652--14967[label="1;3pkt 3fpkt"];
12652--16169[label="1;3pkt 3fpkt"];
14967--16169[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="208.31.10.157" dst_port="443" src_ip="136.228.138.208" src_port="3536"/>
      <filter dst_ip="208.31.10.157" dst_port="443" src_ip="136.228.138.208" src_port="3534"/>
      <filter dst_ip="208.31.10.157" dst_port="443" src_ip="136.228.138.208" src_port="3530"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="121.108.213.208"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1856{
style=filled;
color=gray75;
12661[label="203.162.230.208;3pkt 3fpkt", shape=pentagon, color=darkviolet];
14971[label="203.162.230.208;3pkt 3fpkt", shape=invtriangle, color=brown];
stat1856[shape=component, label=&lt;Rules:&lt;BR/&gt;{203.162.230.208:60716, 212.21.143.8:80}[33.3333%]&lt;BR/&gt;{203.162.230.208:60858, 212.21.143.8:80}[33.3333%]&lt;BR/&gt;{203.162.230.208:60864, 212.21.143.8:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60864: (16.6667%)&lt;BR/&gt; 60858: (16.6667%)&lt;BR/&gt; 60716: (16.6667%)&gt;];
}
12661--14971[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="203.162.230.208" src_port="60864"/>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="203.162.230.208" src_port="60858"/>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="203.162.230.208" src_port="60716"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="114.88.18.209"/>
    </slice>
    <from sec="1223615304" usec="0"/>
    <to sec="1223615313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.63.146.209"/>
    </slice>
    <from sec="1223615242" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="136.228.14.213"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="120.177.77.213"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.214.91.213"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.110.93.213"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="101.245.137.213"/>
    </slice>
    <from sec="1223615632" usec="0"/>
    <to sec="1223615635" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="218.155.152.213"/>
    </slice>
    <from sec="1223615396" usec="0"/>
    <to sec="1223615406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.68468,2.04408,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1865{
style=filled;
color=gray75;
4133[label="136.228.115.60;d;5pkt 5fpkt", shape=diamond, color=yellow];
12735[label="194.173.177.213;2pkt 2fpkt", shape=pentagon, color=darkviolet];
15006[label="194.173.177.213;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1865[shape=component, label=&lt;Rules:&lt;BR/&gt;{107.116.131.51:80, 136.228.115.60:1822}[20%]&lt;BR/&gt;{221.18.85.52:80, 136.228.115.60:1812}[20%]&lt;BR/&gt;{194.173.177.156:80, 136.228.115.60:1824}[20%]&lt;BR/&gt;{194.173.177.213:80, 136.228.115.60:1806}[20%]&lt;BR/&gt;{194.173.177.213:80, 136.228.115.60:1808}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1808: (16.6667%)&lt;BR/&gt; 1806: (16.6667%)&lt;BR/&gt; 1824: (5.55556%)&lt;BR/&gt; 1822: (5.55556%)&gt;];
}
4133--5072[label="0.2;1pkt 1fpkt"];
4133--12735[label="1;2pkt 2fpkt"];
4133--15006[label="1;2pkt 2fpkt"];
12735--15006[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.115.60" dst_port="1808" src_ip="194.173.177.213" src_port="80"/>
      <filter dst_ip="136.228.115.60" dst_port="1806" src_ip="194.173.177.213" src_port="80"/>
      <filter dst_ip="136.228.115.60" dst_port="1824" src_ip="194.173.177.156" src_port="80"/>
      <filter dst_ip="136.228.115.60" dst_port="1812" src_ip="221.18.85.52" src_port="80"/>
      <filter dst_ip="136.228.115.60" dst_port="1822" src_ip="107.116.131.51" src_port="80"/>
    </slice>
    <from sec="1223615425" usec="0"/>
    <to sec="1223615490" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.72.50.215"/>
    </slice>
    <from sec="1223615383" usec="0"/>
    <to sec="1223615387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.100.141.215"/>
    </slice>
    <from sec="1223614915" usec="0"/>
    <to sec="1223615059" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.124.208.217"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.42.135.218"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.116.97.219"/>
    </slice>
    <from sec="1223615513" usec="0"/>
    <to sec="1223615541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1871{
style=filled;
color=gray75;
12808[label="212.21.135.219;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15041[label="212.21.135.219;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1871[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.135.219:54537, 104.243.253.44:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54537: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12808--15041[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="104.243.253.44" dst_port="80" src_ip="212.21.135.219" src_port="54537"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1872{
style=filled;
color=gray75;
4704[label="136.228.176.215;d;4pkt 4fpkt", shape=diamond, color=yellow];
12810[label="78.74.183.219;656pkt 656fpkt", shape=pentagon, color=darkviolet];
15043[label="78.74.183.219;657pkt 657fpkt", shape=invtriangle, color=brown];
16218[label="78.74.183.219;656pkt 656fpkt", shape=invhouse, color=bisque];
stat1872[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.74.183.219:80, *:*}[99.5455%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9747%)&lt;BR/&gt; 61301: (0.152053%)&lt;BR/&gt; 59959: (0.152053%)&lt;BR/&gt; 58994: (0.152053%)&lt;BR/&gt; 35948: (0.152053%)&gt;];
}
4704--6599[label="0.25;1pkt 1fpkt"];
4704--8860[label="0.25;1pkt 1fpkt"];
4704--9163[label="0.25;1pkt 1fpkt"];
4704--9198[label="0.25;1pkt 1fpkt"];
4704--12810[label="0.25;1pkt 1fpkt"];
4704--14646[label="0.5;2pkt 2fpkt"];
4704--15043[label="0.25;1pkt 1fpkt"];
4704--16218[label="0.25;1pkt 1fpkt"];
12810--15043[label="1;656pkt 656fpkt"];
12810--16218[label="1;656pkt 656fpkt"];
15043--16218[label="1;656pkt 656fpkt"];
</description>
    <slice>
      <filter src_ip="78.74.183.219" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="124.7.105.220"/>
    </slice>
    <from sec="1223615197" usec="0"/>
    <to sec="1223615227" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.54.219.220"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="200.234.9.221"/>
    </slice>
    <from sec="1223615166" usec="0"/>
    <to sec="1223615189" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.40.120.221"/>
    </slice>
    <from sec="1223614853" usec="0"/>
    <to sec="1223614882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1877{
style=filled;
color=gray75;
12839[label="142.243.9.222;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15060[label="142.243.9.222;4pkt 4fpkt", shape=invtriangle, color=brown];
16228[label="142.243.9.222;4pkt 4fpkt", shape=invhouse, color=bisque];
stat1877[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.9.222:53282, 219.232.144.185:80}[25%]&lt;BR/&gt;{142.243.9.222:53283, 219.232.144.185:80}[25%]&lt;BR/&gt;{142.243.9.222:53284, 219.232.144.185:80}[25%]&lt;BR/&gt;{142.243.9.222:53285, 219.232.144.185:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53285: (12.5%)&lt;BR/&gt; 53284: (12.5%)&lt;BR/&gt; 53283: (12.5%)&lt;BR/&gt; 53282: (12.5%)&gt;];
}
12839--15060[label="1;4pkt 4fpkt"];
12839--16228[label="1;4pkt 4fpkt"];
15060--16228[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="219.232.144.185" dst_port="80" src_ip="142.243.9.222" src_port="53285"/>
      <filter dst_ip="219.232.144.185" dst_port="80" src_ip="142.243.9.222" src_port="53284"/>
      <filter dst_ip="219.232.144.185" dst_port="80" src_ip="142.243.9.222" src_port="53283"/>
      <filter dst_ip="219.232.144.185" dst_port="80" src_ip="142.243.9.222" src_port="53282"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.839786,1.9911,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1878{
style=filled;
color=gray75;
3314[label="207.128.93.222;s;210pkt 210fpkt", shape=diamond, color=yellow];
8271[label="207.128.93.222;s;210pkt 210fpkt", shape=hexagon, color=black];
12842[label="207.128.93.222;224pkt 224fpkt", shape=pentagon, color=darkviolet];
15063[label="207.128.93.222;224pkt 224fpkt", shape=invtriangle, color=brown];
stat1878[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.128.93.222:80, 162.73.150.132:*}[33.4821%]&lt;BR/&gt;{207.128.93.222:80, 162.73.217.174:*}[33.0357%]&lt;BR/&gt;{207.128.93.222:80, 160.49.251.182:*}[31.25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61009: (0.230415%)&lt;BR/&gt; 60429: (0.230415%)&lt;BR/&gt; 59454: (0.230415%)&lt;BR/&gt; 59453: (0.230415%)&gt;];
}
3314--8271[label="1;210pkt 210fpkt"];
3314--9163[label="0.0714286;15pkt 15fpkt"];
3314--9194[label="0.0238095;5pkt 5fpkt"];
3314--9198[label="0.047619;10pkt 10fpkt"];
3314--9234[label="0.0238095;5pkt 5fpkt"];
3314--9268[label="0.0238095;5pkt 5fpkt"];
3314--12842[label="1;210pkt 210fpkt"];
3314--15063[label="1;210pkt 210fpkt"];
8271--9163[label="0.0714286;15pkt 15fpkt"];
8271--9194[label="0.0238095;5pkt 5fpkt"];
8271--9198[label="0.047619;10pkt 10fpkt"];
8271--9234[label="0.0238095;5pkt 5fpkt"];
8271--9268[label="0.0238095;5pkt 5fpkt"];
8271--12842[label="1;210pkt 210fpkt"];
8271--15063[label="1;210pkt 210fpkt"];
12842--15063[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.150.132" src_ip="207.128.93.222" src_port="80"/>
      <filter dst_ip="162.73.217.174" src_ip="207.128.93.222" src_port="80"/>
      <filter dst_ip="160.49.251.182" src_ip="207.128.93.222" src_port="80"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615690" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="98.133.100.222"/>
    </slice>
    <from sec="1223615307" usec="0"/>
    <to sec="1223615320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1880{
style=filled;
color=gray75;
12849[label="99.45.232.222;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15069[label="99.45.232.222;1pkt 1fpkt", shape=invtriangle, color=brown];
16229[label="99.45.232.222;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1880[shape=component, label=&lt;Rules:&lt;BR/&gt;{99.45.232.222:80, 142.243.11.8:1743}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1743: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12849--15069[label="1;1pkt 1fpkt"];
12849--16229[label="1;1pkt 1fpkt"];
15069--16229[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.11.8" dst_port="1743" src_ip="99.45.232.222" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,504,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1881{
style=filled;
color=gray75;
12854[label="195.146.204.223;15pkt 15fpkt", shape=pentagon, color=darkviolet];
15073[label="195.146.204.223;15pkt 15fpkt", shape=invtriangle, color=brown];
16233[label="195.146.204.223;15pkt 15fpkt", shape=invhouse, color=bisque];
stat1881[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.146.204.223:443, 136.228.86.22:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 4282: (3.33333%)&lt;BR/&gt; 4280: (3.33333%)&lt;BR/&gt; 4278: (3.33333%)&lt;BR/&gt; 4276: (3.33333%)&gt;];
}
12854--15073[label="1;15pkt 15fpkt"];
12854--16233[label="1;15pkt 15fpkt"];
15073--16233[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.86.22" src_ip="195.146.204.223" src_port="443"/>
    </slice>
    <from sec="1223615150" usec="0"/>
    <to sec="1223615217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1882{
style=filled;
color=gray75;
12860[label="76.184.18.224;24pkt 24fpkt", shape=pentagon, color=darkviolet];
15075[label="76.184.18.224;24pkt 24fpkt", shape=invtriangle, color=brown];
stat1882[shape=component, label=&lt;Rules:&lt;BR/&gt;{76.184.18.224:443, 136.228.71.196:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 1190: (2.08333%)&lt;BR/&gt; 1187: (2.08333%)&lt;BR/&gt; 1186: (2.08333%)&lt;BR/&gt; 1182: (2.08333%)&gt;];
}
12860--15075[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.71.196" src_ip="76.184.18.224" src_port="443"/>
    </slice>
    <from sec="1223614841" usec="0"/>
    <to sec="1223615290" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1883{
style=filled;
color=gray75;
12898[label="212.21.136.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15094[label="212.21.136.226;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1883[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.21.136.226:0, 54.156.250.193:0}[50%]&lt;BR/&gt;{212.21.136.226:0, 200.114.173.214:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
12898--15094[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="200.114.173.214" src_ip="212.21.136.226"/>
      <filter dst_ip="54.156.250.193" src_ip="212.21.136.226"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1884{
style=filled;
color=gray75;
12900[label="77.16.166.226;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15096[label="77.16.166.226;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1884[shape=component, label=&lt;Rules:&lt;BR/&gt;{77.16.166.226:32911, 162.73.46.187:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 32911: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12900--15096[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.46.187" dst_port="80" src_ip="77.16.166.226" src_port="32911"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.233.130.228"/>
    </slice>
    <from sec="1223615549" usec="0"/>
    <to sec="1223615560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25053,1.98529,999,1 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1886{
style=filled;
color=gray75;
121[label="213.33.142.128s;1pkt 1fpkt", shape=rectangle, color=red];
1917[label="213.33.130.131;s;1568pkt 1568fpkt", shape=diamond, color=yellow];
3476[label="210.192.150.137;d;53pkt 53fpkt", shape=diamond, color=yellow];
3659[label="213.33.142.128;s;8pkt 8fpkt", shape=diamond, color=yellow];
3770[label="210.192.150.158;d;64pkt 64fpkt", shape=diamond, color=yellow];
4958[label="162.73.201.171;s;10pkt 10fpkt", shape=diamond, color=yellow];
6539[label="213.33.130.131;s;1568pkt 1568fpkt", shape=hexagon, color=black];
7386[label="213.33.142.128;s;8pkt 8fpkt", shape=hexagon, color=black];
7521[label="210.192.150.158;d;49pkt 49fpkt", shape=hexagon, color=black];
8249[label="213.33.58.9;s;20pkt 20fpkt", shape=hexagon, color=black];
12931[label="142.16.209.228;4pkt 4fpkt", shape=pentagon, color=darkviolet];
15108[label="142.16.209.228;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1886[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.33.130.131:16756, *:*}[91.3985%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16756: (46.5456%)&lt;BR/&gt; 80: (3.27576%)&lt;BR/&gt; 16001: (0.595593%)&lt;BR/&gt; 6881: (0.238237%)&lt;BR/&gt; 993: (0.208457%)&gt;];
}
121--432[label="1;1pkt 1fpkt"];
121--562[label="1;1pkt 1fpkt"];
121--3476[label="1;1pkt 1fpkt"];
121--3659[label="1;1pkt 1fpkt"];
121--7386[label="1;1pkt 1fpkt"];
1917--3770[label="0.015625;1pkt 1fpkt"];
1917--6539[label="1;1568pkt 1568fpkt"];
1917--7521[label="0.0204082;1pkt 1fpkt"];
3476--3659[label="0.75;6pkt 6fpkt"];
3476--3754[label="0.0566038;3pkt 3fpkt"];
3476--4958[label="0.1;1pkt 1fpkt"];
3476--7386[label="0.75;6pkt 6fpkt"];
3476--7598[label="0.264151;14pkt 14fpkt"];
3476--10362[label="0.0222222;1pkt 1fpkt"];
3476--12806[label="0.264151;14pkt 14fpkt"];
3476--15038[label="0.264151;14pkt 14fpkt"];
3476--16215[label="0.264151;14pkt 14fpkt"];
3659--3770[label="0.25;2pkt 2fpkt"];
3659--7386[label="1;8pkt 8fpkt"];
3659--7521[label="0.25;2pkt 2fpkt"];
3770--4248[label="0.181818;4pkt 4fpkt"];
3770--6539[label="0.015625;1pkt 1fpkt"];
3770--7386[label="0.25;2pkt 2fpkt"];
3770--7521[label="1;49pkt 49fpkt"];
3770--8249[label="0.2;4pkt 4fpkt"];
3770--10362[label="0.155556;7pkt 7fpkt"];
3770--12931[label="1;4pkt 4fpkt"];
3770--15108[label="1;5pkt 5fpkt"];
6539--7521[label="0.0204082;1pkt 1fpkt"];
7386--7521[label="0.25;2pkt 2fpkt"];
7521--8249[label="0.2;4pkt 4fpkt"];
7521--12931[label="1;4pkt 4fpkt"];
7521--15108[label="1;5pkt 5fpkt"];
12931--15108[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="213.33.130.131" src_port="16756"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.232.3.229"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1888{
style=filled;
color=gray75;
12934[label="21.16.4.229;18pkt 18fpkt", shape=pentagon, color=darkviolet];
15111[label="21.16.4.229;18pkt 18fpkt", shape=invtriangle, color=brown];
stat1888[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.16.4.229:80, 136.228.74.70:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1511: (2.77778%)&lt;BR/&gt; 1510: (2.77778%)&lt;BR/&gt; 1509: (2.77778%)&lt;BR/&gt; 1508: (2.77778%)&gt;];
}
12934--15111[label="1;18pkt 18fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.74.70" src_ip="21.16.4.229" src_port="80"/>
    </slice>
    <from sec="1223614908" usec="0"/>
    <to sec="1223614976" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="124.4.70.229"/>
    </slice>
    <from sec="1223615176" usec="0"/>
    <to sec="1223615185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.216.236.229"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615649" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1891{
style=filled;
color=gray75;
12959[label="87.70.148.230;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15122[label="87.70.148.230;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1891[shape=component, label=&lt;Rules:&lt;BR/&gt;{87.70.148.230:43354, 162.73.46.187:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43354: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12959--15122[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.46.187" dst_port="80" src_ip="87.70.148.230" src_port="43354"/>
    </slice>
    <from sec="1223615064" usec="0"/>
    <to sec="1223615672" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1892{
style=filled;
color=gray75;
5858[label="114.192.115.98;s;17pkt 17fpkt", shape=diamond, color=yellow];
8800[label="114.192.115.98;s;17pkt 17fpkt", shape=hexagon, color=black];
10980[label="114.192.115.98;16pkt 16fpkt", shape=pentagon, color=darkviolet];
14120[label="114.192.115.98;16pkt 16fpkt", shape=invtriangle, color=brown];
15718[label="114.192.115.98;17pkt 17fpkt", shape=invhouse, color=bisque];
stat1892[shape=component, label=&lt;Rules:&lt;BR/&gt;{114.192.115.98:80, 136.228.237.234:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1455: (3.01205%)&lt;BR/&gt; 1448: (3.01205%)&lt;BR/&gt; 1445: (3.01205%)&lt;BR/&gt; 1443: (3.01205%)&gt;];
}
5858--8530[label="1;17pkt 17fpkt"];
5858--8800[label="1;17pkt 17fpkt"];
5858--10980[label="1;16pkt 16fpkt"];
5858--14120[label="1;16pkt 16fpkt"];
5858--15718[label="1;17pkt 17fpkt"];
8800--10980[label="1;16pkt 16fpkt"];
8800--14120[label="1;16pkt 16fpkt"];
8800--15718[label="1;17pkt 17fpkt"];
10980--14120[label="1;16pkt 16fpkt"];
10980--15718[label="1;16pkt 16fpkt"];
14120--15718[label="1;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.237.234" src_ip="114.192.115.98" src_port="80"/>
    </slice>
    <from sec="1223615600" usec="0"/>
    <to sec="1223615622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1893{
style=filled;
color=gray75;
12963[label="142.243.188.230;24pkt 24fpkt", shape=pentagon, color=darkviolet];
15124[label="142.243.188.230;23pkt 23fpkt", shape=invtriangle, color=brown];
stat1893[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.188.230:*, 218.134.2.145:80}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1296: (2.12766%)&lt;BR/&gt; 1295: (2.12766%)&lt;BR/&gt; 1294: (2.12766%)&lt;BR/&gt; 1293: (2.12766%)&gt;];
}
12963--15124[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="218.134.2.145" dst_port="80" src_ip="142.243.188.230"/>
    </slice>
    <from sec="1223614864" usec="0"/>
    <to sec="1223615547" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.938376,2.00969,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_1894{
style=filled;
color=gray75;
4058[label="195.162.155.5;s;1pkt 1fpkt", shape=diamond, color=yellow];
7391[label="195.162.155.5;s;1pkt 1fpkt", shape=hexagon, color=black];
9395[label="195.162.155.5;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15305[label="195.162.155.5;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1894[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.162.155.5:80, 136.228.25.36:50210}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50210: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
4058--7391[label="1;1pkt 1fpkt"];
4058--9395[label="1;1pkt 1fpkt"];
4058--15305[label="1;1pkt 1fpkt"];
7391--9395[label="1;1pkt 1fpkt"];
7391--15305[label="1;1pkt 1fpkt"];
9395--15305[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.25.36" dst_port="50210" src_ip="195.162.155.5" src_port="80"/>
    </slice>
    <from sec="1223615180" usec="0"/>
    <to sec="1223615188" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="117.68.237.232"/>
    </slice>
    <from sec="1223615330" usec="0"/>
    <to sec="1223615336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1896{
style=filled;
color=gray75;
12989[label="142.243.12.233;28pkt 28fpkt", shape=pentagon, color=darkviolet];
15136[label="142.243.12.233;29pkt 29fpkt", shape=invtriangle, color=brown];
stat1896[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.12.233:*, 194.242.138.146:80}[55.1724%]&lt;BR/&gt;{142.243.12.233:*, 204.185.213.161:80}[27.5862%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.7368%)&lt;BR/&gt; 37378: (3.50877%)&lt;BR/&gt; 8917: (3.50877%)&lt;BR/&gt; 51326: (1.75439%)&lt;BR/&gt; 4781: (1.75439%)&gt;];
}
12989--15136[label="1;28pkt 28fpkt"];
</description>
    <slice>
      <filter dst_ip="194.242.138.146" dst_port="80" src_ip="142.243.12.233"/>
      <filter dst_ip="204.185.213.161" dst_port="80" src_ip="142.243.12.233"/>
    </slice>
    <from sec="1223614841" usec="0"/>
    <to sec="1223614876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1897{
style=filled;
color=gray75;
12998[label="108.8.130.233;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15139[label="108.8.130.233;5pkt 5fpkt", shape=invtriangle, color=brown];
stat1897[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.8.130.233:80, 162.73.222.97:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1490: (9.09091%)&lt;BR/&gt; 1486: (9.09091%)&lt;BR/&gt; 1480: (9.09091%)&lt;BR/&gt; 1478: (9.09091%)&gt;];
}
12998--15139[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.222.97" src_ip="108.8.130.233" src_port="80"/>
    </slice>
    <from sec="1223615067" usec="0"/>
    <to sec="1223615426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,503,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1898{
style=filled;
color=gray75;
4562[label="213.158.168.233;s;8pkt 8fpkt", shape=diamond, color=yellow];
13000[label="213.158.168.233;10pkt 10fpkt", shape=pentagon, color=darkviolet];
15140[label="213.158.168.233;10pkt 10fpkt", shape=invtriangle, color=brown];
16265[label="213.158.168.233;9pkt 9fpkt", shape=invhouse, color=bisque];
stat1898[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.158.168.233:80, 142.243.10.116:*}[60%]&lt;BR/&gt;{213.158.168.233:80, 142.243.117.32:*}[20%]&lt;BR/&gt;{213.158.168.233:80, 136.228.81.243:*}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3060: (5.40541%)&lt;BR/&gt; 3059: (5.40541%)&lt;BR/&gt; 2133: (5.40541%)&lt;BR/&gt; 2129: (5.40541%)&gt;];
}
4562--4848[label="0.75;6pkt 6fpkt"];
4562--13000[label="1;8pkt 8fpkt"];
4562--15140[label="1;8pkt 8fpkt"];
4562--16265[label="1;8pkt 8fpkt"];
13000--15140[label="1;10pkt 10fpkt"];
13000--16265[label="1;9pkt 9fpkt"];
15140--16265[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.10.116" src_ip="213.158.168.233" src_port="80"/>
      <filter dst_ip="136.228.81.243" src_ip="213.158.168.233" src_port="80"/>
      <filter dst_ip="142.243.117.32" src_ip="213.158.168.233" src_port="80"/>
    </slice>
    <from sec="1223615005" usec="0"/>
    <to sec="1223615465" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="19.152.221.233"/>
    </slice>
    <from sec="1223615231" usec="0"/>
    <to sec="1223615241" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.134.131.234"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="162.73.216.235"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.168.207.236"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.135.35.237"/>
    </slice>
    <from sec="1223614900" usec="0"/>
    <to sec="1223614923" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1904{
style=filled;
color=gray75;
13051[label="195.173.76.237;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15162[label="195.173.76.237;1pkt 1fpkt", shape=invtriangle, color=brown];
16277[label="195.173.76.237;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1904[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.173.76.237:443, 136.228.22.70:34261}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34261: (50%)&lt;BR/&gt; 443: (50%)&gt;];
}
13051--15162[label="1;1pkt 1fpkt"];
13051--16277[label="1;1pkt 1fpkt"];
15162--16277[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.22.70" dst_port="34261" src_ip="195.173.76.237" src_port="443"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1905{
style=filled;
color=gray75;
13055[label="73.42.128.237;3pkt 3fpkt", shape=pentagon, color=darkviolet];
15166[label="73.42.128.237;4pkt 4fpkt", shape=invtriangle, color=brown];
stat1905[shape=component, label=&lt;Rules:&lt;BR/&gt;{73.42.128.237:80, 213.42.166.8:27713}[25%]&lt;BR/&gt;{73.42.128.237:80, 213.42.166.8:27716}[25%]&lt;BR/&gt;{73.42.128.237:80, 213.42.166.8:27717}[25%]&lt;BR/&gt;{73.42.128.237:80, 213.42.166.8:27718}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 27718: (14.2857%)&lt;BR/&gt; 27717: (14.2857%)&lt;BR/&gt; 27716: (14.2857%)&lt;BR/&gt; 27713: (7.14286%)&gt;];
}
13055--15166[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.166.8" dst_port="27718" src_ip="73.42.128.237" src_port="80"/>
      <filter dst_ip="213.42.166.8" dst_port="27717" src_ip="73.42.128.237" src_port="80"/>
      <filter dst_ip="213.42.166.8" dst_port="27716" src_ip="73.42.128.237" src_port="80"/>
      <filter dst_ip="213.42.166.8" dst_port="27713" src_ip="73.42.128.237" src_port="80"/>
    </slice>
    <from sec="1223615633" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.53.37.239"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223614825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1907{
style=filled;
color=gray75;
13077[label="150.133.16.240;106pkt 106fpkt", shape=pentagon, color=darkviolet];
15176[label="150.133.16.240;106pkt 106fpkt", shape=invtriangle, color=brown];
stat1907[shape=component, label=&lt;Rules:&lt;BR/&gt;{150.133.16.240:16881, *:*}[54.717%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 16881: (27.3585%)&lt;BR/&gt; 3127: (6.60377%)&lt;BR/&gt; 55005: (2.35849%)&lt;BR/&gt; 27327: (1.88679%)&lt;BR/&gt; 24180: (1.88679%)&gt;];
}
13077--15176[label="1;106pkt 106fpkt"];
</description>
    <slice>
      <filter src_ip="150.133.16.240" src_port="16881"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1908{
style=filled;
color=gray75;
13080[label="197.45.64.240;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15177[label="197.45.64.240;2pkt 2fpkt", shape=invtriangle, color=brown];
stat1908[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.45.64.240:80, 164.25.79.55:54618}[50%]&lt;BR/&gt;{197.45.64.240:80, 213.42.155.202:4376}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54618: (33.3333%)&lt;BR/&gt; 4376: (16.6667%)&gt;];
}
13080--15177[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.42.155.202" dst_port="4376" src_ip="197.45.64.240" src_port="80"/>
      <filter dst_ip="164.25.79.55" dst_port="54618" src_ip="197.45.64.240" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.105.93.241"/>
    </slice>
    <from sec="1223615532" usec="0"/>
    <to sec="1223615538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1910{
style=filled;
color=gray75;
13093[label="193.52.21.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15186[label="193.52.21.242;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1910[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.52.21.242:80, 142.243.11.8:1745}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1745: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13093--15186[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.243.11.8" dst_port="1745" src_ip="193.52.21.242" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="120.68.3.243"/>
    </slice>
    <from sec="1223615605" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1912{
style=filled;
color=gray75;
13106[label="196.200.20.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15192[label="196.200.20.243;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1912[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.200.20.243:80, 212.21.128.84:35279}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35279: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13106--15192[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.128.84" dst_port="35279" src_ip="196.200.20.243" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="71.236.122.243"/>
    </slice>
    <from sec="1223615323" usec="0"/>
    <to sec="1223615329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1914{
style=filled;
color=gray75;
13123[label="162.73.222.244;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15203[label="162.73.222.244;1pkt 1fpkt", shape=invtriangle, color=brown];
stat1914[shape=component, label=&lt;Rules:&lt;BR/&gt;{162.73.222.244:49937, 212.138.109.50:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49937: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13123--15203[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.138.109.50" dst_port="80" src_ip="162.73.222.244" src_port="49937"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="196.12.32.245"/>
    </slice>
    <from sec="1223615114" usec="0"/>
    <to sec="1223615146" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="22.0.146.245"/>
    </slice>
    <from sec="1223615016" usec="0"/>
    <to sec="1223615023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.11.45.246"/>
    </slice>
    <from sec="1223615672" usec="0"/>
    <to sec="1223615681" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="103.51.19.247"/>
    </slice>
    <from sec="1223615201" usec="0"/>
    <to sec="1223615225" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.546847,2.09963,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_1919{
style=filled;
color=gray75;
13152[label="18.137.117.247;6pkt 6fpkt", shape=pentagon, color=darkviolet];
15224[label="18.137.117.247;6pkt 6fpkt", shape=invtriangle, color=brown];
stat1919[shape=component, label=&lt;Rules:&lt;BR/&gt;{18.137.117.247:*, 162.73.46.178:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37561: (8.33333%)&lt;BR/&gt; 37560: (8.33333%)&lt;BR/&gt; 37558: (8.33333%)&lt;BR/&gt; 37557: (8.33333%)&gt;];
}
13152--15224[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="162.73.46.178" dst_port="80" src_ip="18.137.117.247"/>
    </slice>
    <from sec="1223615182" usec="0"/>
    <to sec="1223615210" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.66.156.248"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.33.210.248"/>
    </slice>
    <from sec="1223615399" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="107.235.87.249"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="99.129.119.249"/>
    </slice>
    <from sec="1223615304" usec="0"/>
    <to sec="1223615308" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.75.145.249"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223614820" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="76.81.145.250"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="219.11.176.250"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614931" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="110.11.131.251"/>
    </slice>
    <from sec="1223615594" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.141.158.251"/>
    </slice>
    <from sec="1223615112" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="108.85.5.252"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615244" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="125.202.216.252"/>
    </slice>
    <from sec="1223615420" usec="0"/>
    <to sec="1223615431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="72.214.88.253"/>
    </slice>
    <from sec="1223615045" usec="0"/>
    <to sec="1223615584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="112.252.139.253"/>
    </slice>
    <from sec="1223614915" usec="0"/>
    <to sec="1223615036" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="78.138.181.253"/>
    </slice>
    <from sec="1223615045" usec="0"/>
    <to sec="1223615056" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.52.116.254"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.125.132.254"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="172.114.238.254"/>
    </slice>
    <from sec="1223615353" usec="0"/>
    <to sec="1223615366" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="73.72.110.255"/>
    </slice>
    <from sec="1223615104" usec="0"/>
    <to sec="1223615375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.225.35.0"/>
    </slice>
    <from sec="1223614868" usec="0"/>
    <to sec="1223614873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="71.38.45.0"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615193" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.153.96.0"/>
    </slice>
    <from sec="1223615258" usec="0"/>
    <to sec="1223615262" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.100.16.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.139.34.2"/>
    </slice>
    <from sec="1223615174" usec="0"/>
    <to sec="1223615182" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.21.131.2"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.6.222.4"/>
    </slice>
    <from sec="1223614935" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.153.132.6"/>
    </slice>
    <from sec="1223615201" usec="0"/>
    <to sec="1223615215" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.79.1.8"/>
    </slice>
    <from sec="1223614834" usec="0"/>
    <to sec="1223615676" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.174.36.8"/>
    </slice>
    <from sec="1223615406" usec="0"/>
    <to sec="1223615495" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.50.227.8"/>
    </slice>
    <from sec="1223615569" usec="0"/>
    <to sec="1223615604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.75.59.10"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.191.2.13"/>
    </slice>
    <from sec="1223615319" usec="0"/>
    <to sec="1223615326" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.110.12.13"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="113.208.214.13"/>
    </slice>
    <from sec="1223615256" usec="0"/>
    <to sec="1223615266" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.209.217.15"/>
    </slice>
    <from sec="1223615116" usec="0"/>
    <to sec="1223615360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.81.169.16"/>
    </slice>
    <from sec="1223615090" usec="0"/>
    <to sec="1223615571" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.86.42.17"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.69.75.17"/>
    </slice>
    <from sec="1223615382" usec="0"/>
    <to sec="1223615388" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.132.223.17"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.225.143.18"/>
    </slice>
    <from sec="1223615506" usec="0"/>
    <to sec="1223615536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.195.232.18"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="107.242.104.20"/>
    </slice>
    <from sec="1223615635" usec="0"/>
    <to sec="1223615637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.34.95.22"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.152.152.23"/>
    </slice>
    <from sec="1223615169" usec="0"/>
    <to sec="1223615174" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="103.227.83.25"/>
    </slice>
    <from sec="1223615374" usec="0"/>
    <to sec="1223615380" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.157.155.26"/>
    </slice>
    <from sec="1223615559" usec="0"/>
    <to sec="1223615566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.152.104.29"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.188.196.32"/>
    </slice>
    <from sec="1223615242" usec="0"/>
    <to sec="1223615259" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.2.29.33"/>
    </slice>
    <from sec="1223615004" usec="0"/>
    <to sec="1223615010" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="71.186.193.33"/>
    </slice>
    <from sec="1223615676" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.73.100.34"/>
    </slice>
    <from sec="1223615127" usec="0"/>
    <to sec="1223615132" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.152.128.34"/>
    </slice>
    <from sec="1223614931" usec="0"/>
    <to sec="1223614933" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.6.97.37"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614961" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.115.133.37"/>
    </slice>
    <from sec="1223615095" usec="0"/>
    <to sec="1223615103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.112.166.39"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="136.228.13.44"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.243.253.44"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.209.53.45"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.141.185.45"/>
    </slice>
    <from sec="1223615096" usec="0"/>
    <to sec="1223615119" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.55.215.46"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.170.150.50"/>
    </slice>
    <from sec="1223615156" usec="0"/>
    <to sec="1223615158" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.139.173.50"/>
    </slice>
    <from sec="1223614976" usec="0"/>
    <to sec="1223615048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.6.220.50"/>
    </slice>
    <from sec="1223615204" usec="0"/>
    <to sec="1223615223" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="119.129.142.51"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="119.177.193.52"/>
    </slice>
    <from sec="1223615137" usec="0"/>
    <to sec="1223615165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.243.242.53"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.174.64.55"/>
    </slice>
    <from sec="1223615533" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.49.158.55"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614951" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.139.11.56"/>
    </slice>
    <from sec="1223615630" usec="0"/>
    <to sec="1223615662" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="106.247.22.56"/>
    </slice>
    <from sec="1223615334" usec="0"/>
    <to sec="1223615342" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="107.202.65.57"/>
    </slice>
    <from sec="1223615314" usec="0"/>
    <to sec="1223615330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.768094,2.09947,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_1991{
style=filled;
color=gray75;
10339[label="108.129.218.59;2pkt 2fpkt", shape=pentagon, color=darkviolet];
13799[label="108.129.218.59;1pkt 1fpkt", shape=invtriangle, color=brown];
15539[label="108.129.218.59;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1991[shape=component, label=&lt;Rules:&lt;BR/&gt;{108.129.218.59:80, 142.228.95.20:56999}[50%]&lt;BR/&gt;{108.129.218.59:80, 142.228.95.20:62640}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62640: (37.5%)&lt;BR/&gt; 56999: (12.5%)&gt;];
}
10339--13799[label="1;1pkt 1fpkt"];
10339--15539[label="1;1pkt 1fpkt"];
13799--15539[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.228.95.20" dst_port="62640" src_ip="108.129.218.59" src_port="80"/>
      <filter dst_ip="142.228.95.20" dst_port="56999" src_ip="108.129.218.59" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.43.19.61"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.85.40.61"/>
    </slice>
    <from sec="1223615330" usec="0"/>
    <to sec="1223615449" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.213.28.64"/>
    </slice>
    <from sec="1223614922" usec="0"/>
    <to sec="1223614941" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.105.74.65"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.137.77.65"/>
    </slice>
    <from sec="1223615317" usec="0"/>
    <to sec="1223615377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.141.82.66"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.787065,2.13081,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_1998{
style=filled;
color=gray75;
13858[label="21.116.115.68;1pkt 1fpkt", shape=invtriangle, color=brown];
15576[label="21.116.115.68;1pkt 1fpkt", shape=invhouse, color=bisque];
stat1998[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.116.115.68:55997, 212.21.143.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 55997: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
13858--15576[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.8" dst_port="80" src_ip="21.116.115.68" src_port="55997"/>
    </slice>
    <from sec="1223615686" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.132.200.69"/>
    </slice>
    <from sec="1223615326" usec="0"/>
    <to sec="1223615331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.17.141.70"/>
    </slice>
    <from sec="1223615241" usec="0"/>
    <to sec="1223615252" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,010,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2001{
style=filled;
color=gray75;
5079[label="21.67.24.71;s;550pkt 550fpkt", shape=diamond, color=yellow];
10521[label="21.67.24.71;594pkt 594fpkt", shape=pentagon, color=darkviolet];
13891[label="21.67.24.71;595pkt 595fpkt", shape=invtriangle, color=brown];
15591[label="21.67.24.71;594pkt 594fpkt", shape=invhouse, color=bisque];
stat2001[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.67.24.71:80, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50182: (0.171453%)&lt;BR/&gt; 24860: (0.171453%)&lt;BR/&gt; 16389: (0.171453%)&lt;BR/&gt; 65140: (0.0857265%)&gt;];
}
5079--9163[label="0.0618182;34pkt 34fpkt"];
5079--9194[label="0.0709091;39pkt 39fpkt"];
5079--9198[label="0.0618182;34pkt 34fpkt"];
5079--9234[label="0.0709091;39pkt 39fpkt"];
5079--9268[label="0.0709091;39pkt 39fpkt"];
5079--10521[label="0.996364;548pkt 548fpkt"];
5079--13891[label="0.998182;549pkt 549fpkt"];
5079--15591[label="0.996364;548pkt 548fpkt"];
10521--13891[label="1;594pkt 594fpkt"];
10521--15591[label="1;594pkt 594fpkt"];
13891--15591[label="1;594pkt 594fpkt"];
</description>
    <slice>
      <filter src_ip="21.67.24.71" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.247.116.71"/>
    </slice>
    <from sec="1223615435" usec="0"/>
    <to sec="1223615478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.139.183.71"/>
    </slice>
    <from sec="1223615501" usec="0"/>
    <to sec="1223615527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.235.132.73"/>
    </slice>
    <from sec="1223615449" usec="0"/>
    <to sec="1223615458" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.77.4.74"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.243.249.74"/>
    </slice>
    <from sec="1223615554" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.84.38.75"/>
    </slice>
    <from sec="1223615116" usec="0"/>
    <to sec="1223615190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.172.149.76"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.138.132.77"/>
    </slice>
    <from sec="1223615348" usec="0"/>
    <to sec="1223615400" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="86.251.226.77"/>
    </slice>
    <from sec="1223615254" usec="0"/>
    <to sec="1223615279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.51.67.78"/>
    </slice>
    <from sec="1223615041" usec="0"/>
    <to sec="1223615072" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="69.170.67.78"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.138.185.81"/>
    </slice>
    <from sec="1223614845" usec="0"/>
    <to sec="1223615040" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.65.21.82"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="124.193.114.82"/>
    </slice>
    <from sec="1223615342" usec="0"/>
    <to sec="1223615347" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.573188,2.13096,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_2016{
style=filled;
color=gray75;
14015[label="142.243.244.83;3pkt 3fpkt", shape=invtriangle, color=brown];
stat2016[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.243.244.83:1093, 107.82.169.163:8911}[33.3333%]&lt;BR/&gt;{142.243.244.83:1092, 114.92.105.218:4661}[33.3333%]&lt;BR/&gt;{142.243.244.83:4878, 96.58.121.235:8899}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8911: (16.6667%)&lt;BR/&gt; 8899: (16.6667%)&lt;BR/&gt; 4878: (16.6667%)&lt;BR/&gt; 4661: (16.6667%)&lt;BR/&gt; 1093: (16.6667%)&gt;];
}
14015--15655[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="96.58.121.235" dst_port="8899" src_ip="142.243.244.83" src_port="4878"/>
      <filter dst_ip="114.92.105.218" dst_port="4661" src_ip="142.243.244.83" src_port="1092"/>
      <filter dst_ip="107.82.169.163" dst_port="8911" src_ip="142.243.244.83" src_port="1093"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.3.1.85"/>
    </slice>
    <from sec="1223615529" usec="0"/>
    <to sec="1223615544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="71.247.186.87"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.48.42.89"/>
    </slice>
    <from sec="1223614816" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.68.180.89"/>
    </slice>
    <from sec="1223615522" usec="0"/>
    <to sec="1223615589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="219.54.195.89"/>
    </slice>
    <from sec="1223615273" usec="0"/>
    <to sec="1223615283" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.35.0.92"/>
    </slice>
    <from sec="1223615583" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.105.74.93"/>
    </slice>
    <from sec="1223615614" usec="0"/>
    <to sec="1223615633" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.254.205.93"/>
    </slice>
    <from sec="1223615576" usec="0"/>
    <to sec="1223615578" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="125.81.1.95"/>
    </slice>
    <from sec="1223615515" usec="0"/>
    <to sec="1223615519" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.233.97.95"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.871615,2.04391,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2027{
style=filled;
color=gray75;
3295[label="136.228.87.96;s;143pkt 143fpkt", shape=diamond, color=yellow];
10940[label="136.228.87.96;163pkt 163fpkt", shape=pentagon, color=darkviolet];
14097[label="136.228.87.96;164pkt 164fpkt", shape=invtriangle, color=brown];
15705[label="136.228.87.96;164pkt 164fpkt", shape=invhouse, color=bisque];
stat2027[shape=component, label=&lt;Rules:&lt;BR/&gt;{136.228.87.96:25, 202.53.10.225:*}[46.3415%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64980: (0.315457%)&lt;BR/&gt; 64615: (0.315457%)&lt;BR/&gt; 64580: (0.315457%)&lt;BR/&gt; 62035: (0.315457%)&gt;];
}
3295--4229[label="0.555556;70pkt 70fpkt"];
3295--9177[label="0.027972;4pkt 4fpkt"];
3295--9196[label="0.132867;19pkt 19fpkt"];
3295--9217[label="0.027972;4pkt 4fpkt"];
3295--9251[label="0.027972;4pkt 4fpkt"];
3295--10940[label="0.993007;142pkt 142fpkt"];
3295--14097[label="1;143pkt 143fpkt"];
3295--15705[label="1;143pkt 143fpkt"];
10940--14097[label="1;163pkt 163fpkt"];
10940--15705[label="1;163pkt 163fpkt"];
14097--15705[label="1;164pkt 164fpkt"];
</description>
    <slice>
      <filter dst_ip="202.53.10.225" src_ip="136.228.87.96" src_port="25"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.2.109.97"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.75.102.102"/>
    </slice>
    <from sec="1223615300" usec="0"/>
    <to sec="1223615304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.196.252.102"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.101.136.104"/>
    </slice>
    <from sec="1223615549" usec="0"/>
    <to sec="1223615554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="111.42.85.105"/>
    </slice>
    <from sec="1223615170" usec="0"/>
    <to sec="1223615217" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.186.174.105"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.110.219.107"/>
    </slice>
    <from sec="1223614840" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="151.120.43.108"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.10.184.108"/>
    </slice>
    <from sec="1223615361" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="76.51.196.113"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.214.104.117"/>
    </slice>
    <from sec="1223615621" usec="0"/>
    <to sec="1223615625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.138.29.121"/>
    </slice>
    <from sec="1223615052" usec="0"/>
    <to sec="1223615111" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.43.45.122"/>
    </slice>
    <from sec="1223614806" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.202.231.122"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.189.78.124"/>
    </slice>
    <from sec="1223614834" usec="0"/>
    <to sec="1223614848" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.147.170.124"/>
    </slice>
    <from sec="1223615272" usec="0"/>
    <to sec="1223615280" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.150.208.126"/>
    </slice>
    <from sec="1223615651" usec="0"/>
    <to sec="1223615660" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="124.191.31.127"/>
    </slice>
    <from sec="1223615338" usec="0"/>
    <to sec="1223615344" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.138.109.127"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.41.14.128"/>
    </slice>
    <from sec="1223615338" usec="0"/>
    <to sec="1223615355" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="101.86.144.135"/>
    </slice>
    <from sec="1223614807" usec="0"/>
    <to sec="1223615697" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="208.10.79.137"/>
    </slice>
    <from sec="1223615574" usec="0"/>
    <to sec="1223615584" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.184.160.137"/>
    </slice>
    <from sec="1223615684" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.78.201.137"/>
    </slice>
    <from sec="1223614889" usec="0"/>
    <to sec="1223614894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.252.90.139"/>
    </slice>
    <from sec="1223615355" usec="0"/>
    <to sec="1223615360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="195.154.52.140"/>
    </slice>
    <from sec="1223615622" usec="0"/>
    <to sec="1223615627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.105.77.140"/>
    </slice>
    <from sec="1223615416" usec="0"/>
    <to sec="1223615442" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.99.253.141"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.176.168.143"/>
    </slice>
    <from sec="1223615569" usec="0"/>
    <to sec="1223615579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.112.183.143"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="107.80.0.144"/>
    </slice>
    <from sec="1223614867" usec="0"/>
    <to sec="1223614902" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.86.229.144"/>
    </slice>
    <from sec="1223615253" usec="0"/>
    <to sec="1223615267" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.137.103.148"/>
    </slice>
    <from sec="1223615161" usec="0"/>
    <to sec="1223615164" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="210.253.0.150"/>
    </slice>
    <from sec="1223615466" usec="0"/>
    <to sec="1223615478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.4.86.150"/>
    </slice>
    <from sec="1223615602" usec="0"/>
    <to sec="1223615628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="108.200.184.150"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="59.198.235.150"/>
    </slice>
    <from sec="1223614803" usec="0"/>
    <to sec="1223614912" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.212.26.152"/>
    </slice>
    <from sec="1223615106" usec="0"/>
    <to sec="1223615112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,010,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.73.93.154"/>
    </slice>
    <from sec="1223614809" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="120.111.253.154"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.105.76.156"/>
    </slice>
    <from sec="1223615347" usec="0"/>
    <to sec="1223615471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.225.224.157"/>
    </slice>
    <from sec="1223615416" usec="0"/>
    <to sec="1223615494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.231.32.159"/>
    </slice>
    <from sec="1223615542" usec="0"/>
    <to sec="1223615577" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="98.198.65.159"/>
    </slice>
    <from sec="1223615613" usec="0"/>
    <to sec="1223615650" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.210.52.160"/>
    </slice>
    <from sec="1223615510" usec="0"/>
    <to sec="1223615539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688731,2.11726,503,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_2073{
style=filled;
color=gray75;
11970[label="192.105.76.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
15978[label="192.105.76.162;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2073[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.105.76.162:80, 136.228.154.152:3171}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3171: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
11970--15978[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.154.152" dst_port="3171" src_ip="192.105.76.162" src_port="80"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.154.36.165"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="73.225.10.167"/>
    </slice>
    <from sec="1223615364" usec="0"/>
    <to sec="1223615414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.163.74.168"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.116.148.168"/>
    </slice>
    <from sec="1223615259" usec="0"/>
    <to sec="1223615506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="118.8.169.168"/>
    </slice>
    <from sec="1223615653" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.688731,2.11726,901,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_2079{
style=filled;
color=gray75;
12089[label="78.83.157.169;1pkt 1fpkt", shape=pentagon, color=darkviolet];
16008[label="78.83.157.169;1pkt 1fpkt", shape=invhouse, color=bisque];
stat2079[shape=component, label=&lt;Rules:&lt;BR/&gt;{78.83.157.169:27166, 212.21.143.9:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27166: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
12089--14676[label="1;1pkt 1fpkt"];
12089--16008[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.21.143.9" dst_port="80" src_ip="78.83.157.169" src_port="27166"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="34.200.5.171"/>
    </slice>
    <from sec="1223615258" usec="0"/>
    <to sec="1223615273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.243.249.173"/>
    </slice>
    <from sec="1223615279" usec="0"/>
    <to sec="1223615305" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.998082,1.99094,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_2082{
style=filled;
color=gray75;
575[label="194.173.173.176;s;85pkt 85fpkt", shape=diamond, color=yellow];
1465[label="136.228.209.45;d;115pkt 115fpkt", shape=diamond, color=yellow];
1785[label="142.243.74.25;d;5pkt 5fpkt", shape=diamond, color=yellow];
6170[label="142.243.74.25;d;6pkt 6fpkt", shape=hexagon, color=black];
6356[label="136.228.209.45;d;48pkt 48fpkt", shape=hexagon, color=black];
7089[label="194.173.173.176;s;85pkt 85fpkt", shape=hexagon, color=black];
12204[label="194.173.173.176;97pkt 97fpkt", shape=pentagon, color=darkviolet];
14738[label="194.173.173.176;98pkt 98fpkt", shape=invtriangle, color=brown];
16037[label="194.173.173.176;97pkt 97fpkt", shape=invhouse, color=bisque];
stat2082[shape=component, label=&lt;Rules:&lt;BR/&gt;{194.173.173.176:80, 136.228.209.45:*}[43.0464%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8428%)&lt;BR/&gt; 54573: (0.550314%)&lt;BR/&gt; 54571: (0.550314%)&lt;BR/&gt; 54570: (0.550314%)&lt;BR/&gt; 54569: (0.550314%)&gt;];
}
575--1185[label="0.0235294;2pkt 2fpkt"];
575--1465[label="0.764706;65pkt 65fpkt"];
575--1785[label="0.6;3pkt 3fpkt"];
575--6170[label="0.5;3pkt 3fpkt"];
575--6356[label="0.6875;33pkt 33fpkt"];
575--6841[label="0.0235294;2pkt 2fpkt"];
575--7089[label="1;85pkt 85fpkt"];
575--9130[label="0.0235294;2pkt 2fpkt"];
575--9163[label="0.376471;32pkt 32fpkt"];
575--12204[label="0.988235;84pkt 84fpkt"];
575--14738[label="1;85pkt 85fpkt"];
575--16037[label="0.988235;84pkt 84fpkt"];
1465--3270[label="0.0173913;2pkt 2fpkt"];
1465--6356[label="1;48pkt 48fpkt"];
1465--7089[label="0.764706;65pkt 65fpkt"];
1465--7842[label="0.0173913;2pkt 2fpkt"];
1465--9163[label="0.173913;20pkt 20fpkt"];
1465--12204[label="0.670103;65pkt 65fpkt"];
1465--14738[label="0.663265;65pkt 65fpkt"];
1465--16037[label="0.670103;65pkt 65fpkt"];
1785--6170[label="1;5pkt 5fpkt"];
1785--6416[label="0.4;2pkt 2fpkt"];
1785--7089[label="0.6;3pkt 3fpkt"];
1785--9163[label="0.8;4pkt 4fpkt"];
1785--12204[label="0.6;3pkt 3fpkt"];
1785--14738[label="0.6;3pkt 3fpkt"];
1785--16037[label="0.6;3pkt 3fpkt"];
6170--6416[label="0.333333;2pkt 2fpkt"];
6170--7089[label="0.5;3pkt 3fpkt"];
6170--9163[label="0.666667;4pkt 4fpkt"];
6170--12204[label="0.5;3pkt 3fpkt"];
6170--14738[label="0.5;3pkt 3fpkt"];
6170--16037[label="0.5;3pkt 3fpkt"];
6356--7089[label="0.6875;33pkt 33fpkt"];
6356--9163[label="0.416667;20pkt 20fpkt"];
6356--12204[label="0.6875;33pkt 33fpkt"];
6356--14738[label="0.6875;33pkt 33fpkt"];
6356--16037[label="0.6875;33pkt 33fpkt"];
7089--9130[label="0.0235294;2pkt 2fpkt"];
7089--9163[label="0.376471;32pkt 32fpkt"];
7089--12204[label="0.988235;84pkt 84fpkt"];
7089--14738[label="1;85pkt 85fpkt"];
7089--16037[label="0.988235;84pkt 84fpkt"];
12204--14738[label="1;97pkt 97fpkt"];
12204--16037[label="1;97pkt 97fpkt"];
14738--16037[label="1;97pkt 97fpkt"];
</description>
    <slice>
      <filter dst_ip="136.228.209.45" src_ip="194.173.173.176" src_port="80"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615688" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.68.94.177"/>
    </slice>
    <from sec="1223614868" usec="0"/>
    <to sec="1223614879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.19.172.178"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.200.213.184"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.205.203.186"/>
    </slice>
    <from sec="1223615390" usec="0"/>
    <to sec="1223615507" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.176.230.187"/>
    </slice>
    <from sec="1223615257" usec="0"/>
    <to sec="1223615279" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="20.149.13.188"/>
    </slice>
    <from sec="1223614820" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,502,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.14.95.189"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="77.202.240.189"/>
    </slice>
    <from sec="1223614828" usec="0"/>
    <to sec="1223615700" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="202.185.11.190"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.176.30.192"/>
    </slice>
    <from sec="1223615221" usec="0"/>
    <to sec="1223615229" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="182.145.188.194"/>
    </slice>
    <from sec="1223614878" usec="0"/>
    <to sec="1223614917" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,504,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.1.111.195"/>
    </slice>
    <from sec="1223614802" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="148.64.160.197"/>
    </slice>
    <from sec="1223615541" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="104.243.251.200"/>
    </slice>
    <from sec="1223614987" usec="0"/>
    <to sec="1223615052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="221.167.12.201"/>
    </slice>
    <from sec="1223615664" usec="0"/>
    <to sec="1223615673" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="96.130.104.202"/>
    </slice>
    <from sec="1223615266" usec="0"/>
    <to sec="1223615293" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.102.44.204"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223614881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.116.8.206"/>
    </slice>
    <from sec="1223615165" usec="0"/>
    <to sec="1223615216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="87.68.178.206"/>
    </slice>
    <from sec="1223615269" usec="0"/>
    <to sec="1223615276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="72.163.49.207"/>
    </slice>
    <from sec="1223615650" usec="0"/>
    <to sec="1223615667" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.162.109.207"/>
    </slice>
    <from sec="1223615443" usec="0"/>
    <to sec="1223615461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="114.88.18.209"/>
    </slice>
    <from sec="1223615304" usec="0"/>
    <to sec="1223615313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.63.146.209"/>
    </slice>
    <from sec="1223615242" usec="0"/>
    <to sec="1223615249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.214.91.213"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615329" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="218.155.152.213"/>
    </slice>
    <from sec="1223615396" usec="0"/>
    <to sec="1223615406" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.72.50.215"/>
    </slice>
    <from sec="1223615383" usec="0"/>
    <to sec="1223615387" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.217.98.216"/>
    </slice>
    <from sec="1223615349" usec="0"/>
    <to sec="1223615411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.42.135.218"/>
    </slice>
    <from sec="1223614805" usec="0"/>
    <to sec="1223615696" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="117.116.97.219"/>
    </slice>
    <from sec="1223615513" usec="0"/>
    <to sec="1223615541" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.217.221.219"/>
    </slice>
    <from sec="1223615455" usec="0"/>
    <to sec="1223615624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="110.54.219.220"/>
    </slice>
    <from sec="1223614827" usec="0"/>
    <to sec="1223615698" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="105.45.103.223"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615691" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="107.80.64.224"/>
    </slice>
    <from sec="1223615700" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="19.233.130.228"/>
    </slice>
    <from sec="1223615549" usec="0"/>
    <to sec="1223615560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="124.4.70.229"/>
    </slice>
    <from sec="1223615176" usec="0"/>
    <to sec="1223615185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="78.85.58.232"/>
    </slice>
    <from sec="1223614804" usec="0"/>
    <to sec="1223615699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="70.147.68.232"/>
    </slice>
    <from sec="1223615257" usec="0"/>
    <to sec="1223615274" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.202.73.232"/>
    </slice>
    <from sec="1223614824" usec="0"/>
    <to sec="1223615508" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.134.131.234"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="162.73.216.235"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="212.53.37.239"/>
    </slice>
    <from sec="1223614821" usec="0"/>
    <to sec="1223614825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.139.93.240"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615701" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="204.175.226.242"/>
    </slice>
    <from sec="1223615081" usec="0"/>
    <to sec="1223615103" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.168.86.249"/>
    </slice>
    <from sec="1223614801" usec="0"/>
    <to sec="1223615629" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.70.16.250"/>
    </slice>
    <from sec="1223615143" usec="0"/>
    <to sec="1223615313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="110.11.131.251"/>
    </slice>
    <from sec="1223615594" usec="0"/>
    <to sec="1223615613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.709826,2.14834,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="112.252.139.253"/>
    </slice>
    <from sec="1223614915" usec="0"/>
    <to sec="1223615036" usec="0"/>
  </anomaly>

</admd:annotation>
